rose: Socket lock was not released before returning to user space
[sfrench/cifs-2.6.git] / net / rose / af_rose.c
1 /*
2  * This program is free software; you can redistribute it and/or modify
3  * it under the terms of the GNU General Public License as published by
4  * the Free Software Foundation; either version 2 of the License, or
5  * (at your option) any later version.
6  *
7  * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
8  * Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
9  * Copyright (C) Terry Dawson VK2KTJ (terry@animats.net)
10  * Copyright (C) Tomi Manninen OH2BNS (oh2bns@sral.fi)
11  */
12
13 #include <linux/capability.h>
14 #include <linux/module.h>
15 #include <linux/moduleparam.h>
16 #include <linux/init.h>
17 #include <linux/errno.h>
18 #include <linux/types.h>
19 #include <linux/socket.h>
20 #include <linux/in.h>
21 #include <linux/kernel.h>
22 #include <linux/sched.h>
23 #include <linux/spinlock.h>
24 #include <linux/timer.h>
25 #include <linux/string.h>
26 #include <linux/sockios.h>
27 #include <linux/net.h>
28 #include <linux/stat.h>
29 #include <net/net_namespace.h>
30 #include <net/ax25.h>
31 #include <linux/inet.h>
32 #include <linux/netdevice.h>
33 #include <linux/if_arp.h>
34 #include <linux/skbuff.h>
35 #include <net/sock.h>
36 #include <asm/system.h>
37 #include <asm/uaccess.h>
38 #include <linux/fcntl.h>
39 #include <linux/termios.h>
40 #include <linux/mm.h>
41 #include <linux/interrupt.h>
42 #include <linux/notifier.h>
43 #include <net/rose.h>
44 #include <linux/proc_fs.h>
45 #include <linux/seq_file.h>
46 #include <net/tcp_states.h>
47 #include <net/ip.h>
48 #include <net/arp.h>
49
50 static int rose_ndevs = 10;
51
52 int sysctl_rose_restart_request_timeout = ROSE_DEFAULT_T0;
53 int sysctl_rose_call_request_timeout    = ROSE_DEFAULT_T1;
54 int sysctl_rose_reset_request_timeout   = ROSE_DEFAULT_T2;
55 int sysctl_rose_clear_request_timeout   = ROSE_DEFAULT_T3;
56 int sysctl_rose_no_activity_timeout     = ROSE_DEFAULT_IDLE;
57 int sysctl_rose_ack_hold_back_timeout   = ROSE_DEFAULT_HB;
58 int sysctl_rose_routing_control         = ROSE_DEFAULT_ROUTING;
59 int sysctl_rose_link_fail_timeout       = ROSE_DEFAULT_FAIL_TIMEOUT;
60 int sysctl_rose_maximum_vcs             = ROSE_DEFAULT_MAXVC;
61 int sysctl_rose_window_size             = ROSE_DEFAULT_WINDOW_SIZE;
62
63 static HLIST_HEAD(rose_list);
64 static DEFINE_SPINLOCK(rose_list_lock);
65
66 static struct proto_ops rose_proto_ops;
67
68 ax25_address rose_callsign;
69
70 /*
71  * ROSE network devices are virtual network devices encapsulating ROSE
72  * frames into AX.25 which will be sent through an AX.25 device, so form a
73  * special "super class" of normal net devices; split their locks off into a
74  * separate class since they always nest.
75  */
76 static struct lock_class_key rose_netdev_xmit_lock_key;
77
78 /*
79  *      Convert a ROSE address into text.
80  */
81 const char *rose2asc(const rose_address *addr)
82 {
83         static char buffer[11];
84
85         if (addr->rose_addr[0] == 0x00 && addr->rose_addr[1] == 0x00 &&
86             addr->rose_addr[2] == 0x00 && addr->rose_addr[3] == 0x00 &&
87             addr->rose_addr[4] == 0x00) {
88                 strcpy(buffer, "*");
89         } else {
90                 sprintf(buffer, "%02X%02X%02X%02X%02X", addr->rose_addr[0] & 0xFF,
91                                                 addr->rose_addr[1] & 0xFF,
92                                                 addr->rose_addr[2] & 0xFF,
93                                                 addr->rose_addr[3] & 0xFF,
94                                                 addr->rose_addr[4] & 0xFF);
95         }
96
97         return buffer;
98 }
99
100 /*
101  *      Compare two ROSE addresses, 0 == equal.
102  */
103 int rosecmp(rose_address *addr1, rose_address *addr2)
104 {
105         int i;
106
107         for (i = 0; i < 5; i++)
108                 if (addr1->rose_addr[i] != addr2->rose_addr[i])
109                         return 1;
110
111         return 0;
112 }
113
114 /*
115  *      Compare two ROSE addresses for only mask digits, 0 == equal.
116  */
117 int rosecmpm(rose_address *addr1, rose_address *addr2, unsigned short mask)
118 {
119         unsigned int i, j;
120
121         if (mask > 10)
122                 return 1;
123
124         for (i = 0; i < mask; i++) {
125                 j = i / 2;
126
127                 if ((i % 2) != 0) {
128                         if ((addr1->rose_addr[j] & 0x0F) != (addr2->rose_addr[j] & 0x0F))
129                                 return 1;
130                 } else {
131                         if ((addr1->rose_addr[j] & 0xF0) != (addr2->rose_addr[j] & 0xF0))
132                                 return 1;
133                 }
134         }
135
136         return 0;
137 }
138
139 /*
140  *      Socket removal during an interrupt is now safe.
141  */
142 static void rose_remove_socket(struct sock *sk)
143 {
144         spin_lock_bh(&rose_list_lock);
145         sk_del_node_init(sk);
146         spin_unlock_bh(&rose_list_lock);
147 }
148
149 /*
150  *      Kill all bound sockets on a broken link layer connection to a
151  *      particular neighbour.
152  */
153 void rose_kill_by_neigh(struct rose_neigh *neigh)
154 {
155         struct sock *s;
156         struct hlist_node *node;
157
158         spin_lock_bh(&rose_list_lock);
159         sk_for_each(s, node, &rose_list) {
160                 struct rose_sock *rose = rose_sk(s);
161
162                 if (rose->neighbour == neigh) {
163                         rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
164                         rose->neighbour->use--;
165                         rose->neighbour = NULL;
166                 }
167         }
168         spin_unlock_bh(&rose_list_lock);
169 }
170
171 /*
172  *      Kill all bound sockets on a dropped device.
173  */
174 static void rose_kill_by_device(struct net_device *dev)
175 {
176         struct sock *s;
177         struct hlist_node *node;
178
179         spin_lock_bh(&rose_list_lock);
180         sk_for_each(s, node, &rose_list) {
181                 struct rose_sock *rose = rose_sk(s);
182
183                 if (rose->device == dev) {
184                         rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
185                         rose->neighbour->use--;
186                         rose->device = NULL;
187                 }
188         }
189         spin_unlock_bh(&rose_list_lock);
190 }
191
192 /*
193  *      Handle device status changes.
194  */
195 static int rose_device_event(struct notifier_block *this, unsigned long event,
196         void *ptr)
197 {
198         struct net_device *dev = (struct net_device *)ptr;
199
200         if (dev_net(dev) != &init_net)
201                 return NOTIFY_DONE;
202
203         if (event != NETDEV_DOWN)
204                 return NOTIFY_DONE;
205
206         switch (dev->type) {
207         case ARPHRD_ROSE:
208                 rose_kill_by_device(dev);
209                 break;
210         case ARPHRD_AX25:
211                 rose_link_device_down(dev);
212                 rose_rt_device_down(dev);
213                 break;
214         }
215
216         return NOTIFY_DONE;
217 }
218
219 /*
220  *      Add a socket to the bound sockets list.
221  */
222 static void rose_insert_socket(struct sock *sk)
223 {
224
225         spin_lock_bh(&rose_list_lock);
226         sk_add_node(sk, &rose_list);
227         spin_unlock_bh(&rose_list_lock);
228 }
229
230 /*
231  *      Find a socket that wants to accept the Call Request we just
232  *      received.
233  */
234 static struct sock *rose_find_listener(rose_address *addr, ax25_address *call)
235 {
236         struct sock *s;
237         struct hlist_node *node;
238
239         spin_lock_bh(&rose_list_lock);
240         sk_for_each(s, node, &rose_list) {
241                 struct rose_sock *rose = rose_sk(s);
242
243                 if (!rosecmp(&rose->source_addr, addr) &&
244                     !ax25cmp(&rose->source_call, call) &&
245                     !rose->source_ndigis && s->sk_state == TCP_LISTEN)
246                         goto found;
247         }
248
249         sk_for_each(s, node, &rose_list) {
250                 struct rose_sock *rose = rose_sk(s);
251
252                 if (!rosecmp(&rose->source_addr, addr) &&
253                     !ax25cmp(&rose->source_call, &null_ax25_address) &&
254                     s->sk_state == TCP_LISTEN)
255                         goto found;
256         }
257         s = NULL;
258 found:
259         spin_unlock_bh(&rose_list_lock);
260         return s;
261 }
262
263 /*
264  *      Find a connected ROSE socket given my LCI and device.
265  */
266 struct sock *rose_find_socket(unsigned int lci, struct rose_neigh *neigh)
267 {
268         struct sock *s;
269         struct hlist_node *node;
270
271         spin_lock_bh(&rose_list_lock);
272         sk_for_each(s, node, &rose_list) {
273                 struct rose_sock *rose = rose_sk(s);
274
275                 if (rose->lci == lci && rose->neighbour == neigh)
276                         goto found;
277         }
278         s = NULL;
279 found:
280         spin_unlock_bh(&rose_list_lock);
281         return s;
282 }
283
284 /*
285  *      Find a unique LCI for a given device.
286  */
287 unsigned int rose_new_lci(struct rose_neigh *neigh)
288 {
289         int lci;
290
291         if (neigh->dce_mode) {
292                 for (lci = 1; lci <= sysctl_rose_maximum_vcs; lci++)
293                         if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
294                                 return lci;
295         } else {
296                 for (lci = sysctl_rose_maximum_vcs; lci > 0; lci--)
297                         if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
298                                 return lci;
299         }
300
301         return 0;
302 }
303
304 /*
305  *      Deferred destroy.
306  */
307 void rose_destroy_socket(struct sock *);
308
309 /*
310  *      Handler for deferred kills.
311  */
312 static void rose_destroy_timer(unsigned long data)
313 {
314         rose_destroy_socket((struct sock *)data);
315 }
316
317 /*
318  *      This is called from user mode and the timers. Thus it protects itself
319  *      against interrupt users but doesn't worry about being called during
320  *      work.  Once it is removed from the queue no interrupt or bottom half
321  *      will touch it and we are (fairly 8-) ) safe.
322  */
323 void rose_destroy_socket(struct sock *sk)
324 {
325         struct sk_buff *skb;
326
327         rose_remove_socket(sk);
328         rose_stop_heartbeat(sk);
329         rose_stop_idletimer(sk);
330         rose_stop_timer(sk);
331
332         rose_clear_queues(sk);          /* Flush the queues */
333
334         while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
335                 if (skb->sk != sk) {    /* A pending connection */
336                         /* Queue the unaccepted socket for death */
337                         sock_set_flag(skb->sk, SOCK_DEAD);
338                         rose_start_heartbeat(skb->sk);
339                         rose_sk(skb->sk)->state = ROSE_STATE_0;
340                 }
341
342                 kfree_skb(skb);
343         }
344
345         if (atomic_read(&sk->sk_wmem_alloc) ||
346             atomic_read(&sk->sk_rmem_alloc)) {
347                 /* Defer: outstanding buffers */
348                 setup_timer(&sk->sk_timer, rose_destroy_timer,
349                                 (unsigned long)sk);
350                 sk->sk_timer.expires  = jiffies + 10 * HZ;
351                 add_timer(&sk->sk_timer);
352         } else
353                 sock_put(sk);
354 }
355
356 /*
357  *      Handling for system calls applied via the various interfaces to a
358  *      ROSE socket object.
359  */
360
361 static int rose_setsockopt(struct socket *sock, int level, int optname,
362         char __user *optval, int optlen)
363 {
364         struct sock *sk = sock->sk;
365         struct rose_sock *rose = rose_sk(sk);
366         int opt;
367
368         if (level != SOL_ROSE)
369                 return -ENOPROTOOPT;
370
371         if (optlen < sizeof(int))
372                 return -EINVAL;
373
374         if (get_user(opt, (int __user *)optval))
375                 return -EFAULT;
376
377         switch (optname) {
378         case ROSE_DEFER:
379                 rose->defer = opt ? 1 : 0;
380                 return 0;
381
382         case ROSE_T1:
383                 if (opt < 1)
384                         return -EINVAL;
385                 rose->t1 = opt * HZ;
386                 return 0;
387
388         case ROSE_T2:
389                 if (opt < 1)
390                         return -EINVAL;
391                 rose->t2 = opt * HZ;
392                 return 0;
393
394         case ROSE_T3:
395                 if (opt < 1)
396                         return -EINVAL;
397                 rose->t3 = opt * HZ;
398                 return 0;
399
400         case ROSE_HOLDBACK:
401                 if (opt < 1)
402                         return -EINVAL;
403                 rose->hb = opt * HZ;
404                 return 0;
405
406         case ROSE_IDLE:
407                 if (opt < 0)
408                         return -EINVAL;
409                 rose->idle = opt * 60 * HZ;
410                 return 0;
411
412         case ROSE_QBITINCL:
413                 rose->qbitincl = opt ? 1 : 0;
414                 return 0;
415
416         default:
417                 return -ENOPROTOOPT;
418         }
419 }
420
421 static int rose_getsockopt(struct socket *sock, int level, int optname,
422         char __user *optval, int __user *optlen)
423 {
424         struct sock *sk = sock->sk;
425         struct rose_sock *rose = rose_sk(sk);
426         int val = 0;
427         int len;
428
429         if (level != SOL_ROSE)
430                 return -ENOPROTOOPT;
431
432         if (get_user(len, optlen))
433                 return -EFAULT;
434
435         if (len < 0)
436                 return -EINVAL;
437
438         switch (optname) {
439         case ROSE_DEFER:
440                 val = rose->defer;
441                 break;
442
443         case ROSE_T1:
444                 val = rose->t1 / HZ;
445                 break;
446
447         case ROSE_T2:
448                 val = rose->t2 / HZ;
449                 break;
450
451         case ROSE_T3:
452                 val = rose->t3 / HZ;
453                 break;
454
455         case ROSE_HOLDBACK:
456                 val = rose->hb / HZ;
457                 break;
458
459         case ROSE_IDLE:
460                 val = rose->idle / (60 * HZ);
461                 break;
462
463         case ROSE_QBITINCL:
464                 val = rose->qbitincl;
465                 break;
466
467         default:
468                 return -ENOPROTOOPT;
469         }
470
471         len = min_t(unsigned int, len, sizeof(int));
472
473         if (put_user(len, optlen))
474                 return -EFAULT;
475
476         return copy_to_user(optval, &val, len) ? -EFAULT : 0;
477 }
478
479 static int rose_listen(struct socket *sock, int backlog)
480 {
481         struct sock *sk = sock->sk;
482
483         if (sk->sk_state != TCP_LISTEN) {
484                 struct rose_sock *rose = rose_sk(sk);
485
486                 rose->dest_ndigis = 0;
487                 memset(&rose->dest_addr, 0, ROSE_ADDR_LEN);
488                 memset(&rose->dest_call, 0, AX25_ADDR_LEN);
489                 memset(rose->dest_digis, 0, AX25_ADDR_LEN * ROSE_MAX_DIGIS);
490                 sk->sk_max_ack_backlog = backlog;
491                 sk->sk_state           = TCP_LISTEN;
492                 return 0;
493         }
494
495         return -EOPNOTSUPP;
496 }
497
498 static struct proto rose_proto = {
499         .name     = "ROSE",
500         .owner    = THIS_MODULE,
501         .obj_size = sizeof(struct rose_sock),
502 };
503
504 static int rose_create(struct net *net, struct socket *sock, int protocol)
505 {
506         struct sock *sk;
507         struct rose_sock *rose;
508
509         if (net != &init_net)
510                 return -EAFNOSUPPORT;
511
512         if (sock->type != SOCK_SEQPACKET || protocol != 0)
513                 return -ESOCKTNOSUPPORT;
514
515         sk = sk_alloc(net, PF_ROSE, GFP_ATOMIC, &rose_proto);
516         if (sk == NULL)
517                 return -ENOMEM;
518
519         rose = rose_sk(sk);
520
521         sock_init_data(sock, sk);
522
523         skb_queue_head_init(&rose->ack_queue);
524 #ifdef M_BIT
525         skb_queue_head_init(&rose->frag_queue);
526         rose->fraglen    = 0;
527 #endif
528
529         sock->ops    = &rose_proto_ops;
530         sk->sk_protocol = protocol;
531
532         init_timer(&rose->timer);
533         init_timer(&rose->idletimer);
534
535         rose->t1   = msecs_to_jiffies(sysctl_rose_call_request_timeout);
536         rose->t2   = msecs_to_jiffies(sysctl_rose_reset_request_timeout);
537         rose->t3   = msecs_to_jiffies(sysctl_rose_clear_request_timeout);
538         rose->hb   = msecs_to_jiffies(sysctl_rose_ack_hold_back_timeout);
539         rose->idle = msecs_to_jiffies(sysctl_rose_no_activity_timeout);
540
541         rose->state = ROSE_STATE_0;
542
543         return 0;
544 }
545
546 static struct sock *rose_make_new(struct sock *osk)
547 {
548         struct sock *sk;
549         struct rose_sock *rose, *orose;
550
551         if (osk->sk_type != SOCK_SEQPACKET)
552                 return NULL;
553
554         sk = sk_alloc(sock_net(osk), PF_ROSE, GFP_ATOMIC, &rose_proto);
555         if (sk == NULL)
556                 return NULL;
557
558         rose = rose_sk(sk);
559
560         sock_init_data(NULL, sk);
561
562         skb_queue_head_init(&rose->ack_queue);
563 #ifdef M_BIT
564         skb_queue_head_init(&rose->frag_queue);
565         rose->fraglen  = 0;
566 #endif
567
568         sk->sk_type     = osk->sk_type;
569         sk->sk_socket   = osk->sk_socket;
570         sk->sk_priority = osk->sk_priority;
571         sk->sk_protocol = osk->sk_protocol;
572         sk->sk_rcvbuf   = osk->sk_rcvbuf;
573         sk->sk_sndbuf   = osk->sk_sndbuf;
574         sk->sk_state    = TCP_ESTABLISHED;
575         sk->sk_sleep    = osk->sk_sleep;
576         sock_copy_flags(sk, osk);
577
578         init_timer(&rose->timer);
579         init_timer(&rose->idletimer);
580
581         orose           = rose_sk(osk);
582         rose->t1        = orose->t1;
583         rose->t2        = orose->t2;
584         rose->t3        = orose->t3;
585         rose->hb        = orose->hb;
586         rose->idle      = orose->idle;
587         rose->defer     = orose->defer;
588         rose->device    = orose->device;
589         rose->qbitincl  = orose->qbitincl;
590
591         return sk;
592 }
593
594 static int rose_release(struct socket *sock)
595 {
596         struct sock *sk = sock->sk;
597         struct rose_sock *rose;
598
599         if (sk == NULL) return 0;
600
601         sock_hold(sk);
602         sock_orphan(sk);
603         lock_sock(sk);
604         rose = rose_sk(sk);
605
606         switch (rose->state) {
607         case ROSE_STATE_0:
608                 release_sock(sk);
609                 rose_disconnect(sk, 0, -1, -1);
610                 lock_sock(sk);
611                 rose_destroy_socket(sk);
612                 break;
613
614         case ROSE_STATE_2:
615                 rose->neighbour->use--;
616                 release_sock(sk);
617                 rose_disconnect(sk, 0, -1, -1);
618                 lock_sock(sk);
619                 rose_destroy_socket(sk);
620                 break;
621
622         case ROSE_STATE_1:
623         case ROSE_STATE_3:
624         case ROSE_STATE_4:
625         case ROSE_STATE_5:
626                 rose_clear_queues(sk);
627                 rose_stop_idletimer(sk);
628                 rose_write_internal(sk, ROSE_CLEAR_REQUEST);
629                 rose_start_t3timer(sk);
630                 rose->state  = ROSE_STATE_2;
631                 sk->sk_state    = TCP_CLOSE;
632                 sk->sk_shutdown |= SEND_SHUTDOWN;
633                 sk->sk_state_change(sk);
634                 sock_set_flag(sk, SOCK_DEAD);
635                 sock_set_flag(sk, SOCK_DESTROY);
636                 break;
637
638         default:
639                 break;
640         }
641
642         sock->sk = NULL;
643         release_sock(sk);
644         sock_put(sk);
645
646         return 0;
647 }
648
649 static int rose_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
650 {
651         struct sock *sk = sock->sk;
652         struct rose_sock *rose = rose_sk(sk);
653         struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
654         struct net_device *dev;
655         ax25_address *source;
656         ax25_uid_assoc *user;
657         int n;
658
659         if (!sock_flag(sk, SOCK_ZAPPED))
660                 return -EINVAL;
661
662         if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
663                 return -EINVAL;
664
665         if (addr->srose_family != AF_ROSE)
666                 return -EINVAL;
667
668         if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
669                 return -EINVAL;
670
671         if (addr->srose_ndigis > ROSE_MAX_DIGIS)
672                 return -EINVAL;
673
674         if ((dev = rose_dev_get(&addr->srose_addr)) == NULL) {
675                 SOCK_DEBUG(sk, "ROSE: bind failed: invalid address\n");
676                 return -EADDRNOTAVAIL;
677         }
678
679         source = &addr->srose_call;
680
681         user = ax25_findbyuid(current->euid);
682         if (user) {
683                 rose->source_call = user->call;
684                 ax25_uid_put(user);
685         } else {
686                 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE))
687                         return -EACCES;
688                 rose->source_call   = *source;
689         }
690
691         rose->source_addr   = addr->srose_addr;
692         rose->device        = dev;
693         rose->source_ndigis = addr->srose_ndigis;
694
695         if (addr_len == sizeof(struct full_sockaddr_rose)) {
696                 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
697                 for (n = 0 ; n < addr->srose_ndigis ; n++)
698                         rose->source_digis[n] = full_addr->srose_digis[n];
699         } else {
700                 if (rose->source_ndigis == 1) {
701                         rose->source_digis[0] = addr->srose_digi;
702                 }
703         }
704
705         rose_insert_socket(sk);
706
707         sock_reset_flag(sk, SOCK_ZAPPED);
708         SOCK_DEBUG(sk, "ROSE: socket is bound\n");
709         return 0;
710 }
711
712 static int rose_connect(struct socket *sock, struct sockaddr *uaddr, int addr_len, int flags)
713 {
714         struct sock *sk = sock->sk;
715         struct rose_sock *rose = rose_sk(sk);
716         struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
717         unsigned char cause, diagnostic;
718         struct net_device *dev;
719         ax25_uid_assoc *user;
720         int n, err = 0;
721
722         if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
723                 return -EINVAL;
724
725         if (addr->srose_family != AF_ROSE)
726                 return -EINVAL;
727
728         if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
729                 return -EINVAL;
730
731         if (addr->srose_ndigis > ROSE_MAX_DIGIS)
732                 return -EINVAL;
733
734         /* Source + Destination digis should not exceed ROSE_MAX_DIGIS */
735         if ((rose->source_ndigis + addr->srose_ndigis) > ROSE_MAX_DIGIS)
736                 return -EINVAL;
737
738         lock_sock(sk);
739
740         if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
741                 /* Connect completed during a ERESTARTSYS event */
742                 sock->state = SS_CONNECTED;
743                 goto out_release;
744         }
745
746         if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
747                 sock->state = SS_UNCONNECTED;
748                 err = -ECONNREFUSED;
749                 goto out_release;
750         }
751
752         if (sk->sk_state == TCP_ESTABLISHED) {
753                 /* No reconnect on a seqpacket socket */
754                 err = -EISCONN;
755                 goto out_release;
756         }
757
758         sk->sk_state   = TCP_CLOSE;
759         sock->state = SS_UNCONNECTED;
760
761         rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause,
762                                          &diagnostic);
763         if (!rose->neighbour) {
764                 err = -ENETUNREACH;
765                 goto out_release;
766         }
767
768         rose->lci = rose_new_lci(rose->neighbour);
769         if (!rose->lci) {
770                 err = -ENETUNREACH;
771                 goto out_release;
772         }
773
774         if (sock_flag(sk, SOCK_ZAPPED)) {       /* Must bind first - autobinding in this may or may not work */
775                 sock_reset_flag(sk, SOCK_ZAPPED);
776
777                 if ((dev = rose_dev_first()) == NULL) {
778                         err = -ENETUNREACH;
779                         goto out_release;
780                 }
781
782                 user = ax25_findbyuid(current->euid);
783                 if (!user) {
784                         err = -EINVAL;
785                         goto out_release;
786                 }
787
788                 memcpy(&rose->source_addr, dev->dev_addr, ROSE_ADDR_LEN);
789                 rose->source_call = user->call;
790                 rose->device      = dev;
791                 ax25_uid_put(user);
792
793                 rose_insert_socket(sk);         /* Finish the bind */
794         }
795 rose_try_next_neigh:
796         rose->dest_addr   = addr->srose_addr;
797         rose->dest_call   = addr->srose_call;
798         rose->rand        = ((long)rose & 0xFFFF) + rose->lci;
799         rose->dest_ndigis = addr->srose_ndigis;
800
801         if (addr_len == sizeof(struct full_sockaddr_rose)) {
802                 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
803                 for (n = 0 ; n < addr->srose_ndigis ; n++)
804                         rose->dest_digis[n] = full_addr->srose_digis[n];
805         } else {
806                 if (rose->dest_ndigis == 1) {
807                         rose->dest_digis[0] = addr->srose_digi;
808                 }
809         }
810
811         /* Move to connecting socket, start sending Connect Requests */
812         sock->state   = SS_CONNECTING;
813         sk->sk_state     = TCP_SYN_SENT;
814
815         rose->state = ROSE_STATE_1;
816
817         rose->neighbour->use++;
818
819         rose_write_internal(sk, ROSE_CALL_REQUEST);
820         rose_start_heartbeat(sk);
821         rose_start_t1timer(sk);
822
823         /* Now the loop */
824         if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
825                 err = -EINPROGRESS;
826                 goto out_release;
827         }
828
829         /*
830          * A Connect Ack with Choke or timeout or failed routing will go to
831          * closed.
832          */
833         if (sk->sk_state == TCP_SYN_SENT) {
834                 DEFINE_WAIT(wait);
835
836                 for (;;) {
837                         prepare_to_wait(sk->sk_sleep, &wait,
838                                         TASK_INTERRUPTIBLE);
839                         if (sk->sk_state != TCP_SYN_SENT)
840                                 break;
841                         if (!signal_pending(current)) {
842                                 release_sock(sk);
843                                 schedule();
844                                 lock_sock(sk);
845                                 continue;
846                         }
847                         err = -ERESTARTSYS;
848                         break;
849                 }
850                 finish_wait(sk->sk_sleep, &wait);
851
852                 if (err)
853                         goto out_release;
854         }
855
856         if (sk->sk_state != TCP_ESTABLISHED) {
857         /* Try next neighbour */
858                 rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause, &diagnostic);
859                 if (rose->neighbour)
860                         goto rose_try_next_neigh;
861
862                 /* No more neighbours */
863                 sock->state = SS_UNCONNECTED;
864                 err = sock_error(sk);   /* Always set at this point */
865                 goto out_release;
866         }
867
868         sock->state = SS_CONNECTED;
869
870 out_release:
871         release_sock(sk);
872
873         return err;
874 }
875
876 static int rose_accept(struct socket *sock, struct socket *newsock, int flags)
877 {
878         struct sk_buff *skb;
879         struct sock *newsk;
880         DEFINE_WAIT(wait);
881         struct sock *sk;
882         int err = 0;
883
884         if ((sk = sock->sk) == NULL)
885                 return -EINVAL;
886
887         lock_sock(sk);
888         if (sk->sk_type != SOCK_SEQPACKET) {
889                 err = -EOPNOTSUPP;
890                 goto out_release;
891         }
892
893         if (sk->sk_state != TCP_LISTEN) {
894                 err = -EINVAL;
895                 goto out_release;
896         }
897
898         /*
899          *      The write queue this time is holding sockets ready to use
900          *      hooked into the SABM we saved
901          */
902         for (;;) {
903                 prepare_to_wait(sk->sk_sleep, &wait, TASK_INTERRUPTIBLE);
904
905                 skb = skb_dequeue(&sk->sk_receive_queue);
906                 if (skb)
907                         break;
908
909                 if (flags & O_NONBLOCK) {
910                         err = -EWOULDBLOCK;
911                         break;
912                 }
913                 if (!signal_pending(current)) {
914                         release_sock(sk);
915                         schedule();
916                         lock_sock(sk);
917                         continue;
918                 }
919                 err = -ERESTARTSYS;
920                 break;
921         }
922         finish_wait(sk->sk_sleep, &wait);
923         if (err)
924                 goto out_release;
925
926         newsk = skb->sk;
927         newsk->sk_socket = newsock;
928         newsk->sk_sleep = &newsock->wait;
929
930         /* Now attach up the new socket */
931         skb->sk = NULL;
932         kfree_skb(skb);
933         sk->sk_ack_backlog--;
934         newsock->sk = newsk;
935
936 out_release:
937         release_sock(sk);
938
939         return err;
940 }
941
942 static int rose_getname(struct socket *sock, struct sockaddr *uaddr,
943         int *uaddr_len, int peer)
944 {
945         struct full_sockaddr_rose *srose = (struct full_sockaddr_rose *)uaddr;
946         struct sock *sk = sock->sk;
947         struct rose_sock *rose = rose_sk(sk);
948         int n;
949
950         if (peer != 0) {
951                 if (sk->sk_state != TCP_ESTABLISHED)
952                         return -ENOTCONN;
953                 srose->srose_family = AF_ROSE;
954                 srose->srose_addr   = rose->dest_addr;
955                 srose->srose_call   = rose->dest_call;
956                 srose->srose_ndigis = rose->dest_ndigis;
957                 for (n = 0; n < rose->dest_ndigis; n++)
958                         srose->srose_digis[n] = rose->dest_digis[n];
959         } else {
960                 srose->srose_family = AF_ROSE;
961                 srose->srose_addr   = rose->source_addr;
962                 srose->srose_call   = rose->source_call;
963                 srose->srose_ndigis = rose->source_ndigis;
964                 for (n = 0; n < rose->source_ndigis; n++)
965                         srose->srose_digis[n] = rose->source_digis[n];
966         }
967
968         *uaddr_len = sizeof(struct full_sockaddr_rose);
969         return 0;
970 }
971
972 int rose_rx_call_request(struct sk_buff *skb, struct net_device *dev, struct rose_neigh *neigh, unsigned int lci)
973 {
974         struct sock *sk;
975         struct sock *make;
976         struct rose_sock *make_rose;
977         struct rose_facilities_struct facilities;
978         int n, len;
979
980         skb->sk = NULL;         /* Initially we don't know who it's for */
981
982         /*
983          *      skb->data points to the rose frame start
984          */
985         memset(&facilities, 0x00, sizeof(struct rose_facilities_struct));
986
987         len  = (((skb->data[3] >> 4) & 0x0F) + 1) >> 1;
988         len += (((skb->data[3] >> 0) & 0x0F) + 1) >> 1;
989         if (!rose_parse_facilities(skb->data + len + 4, &facilities)) {
990                 rose_transmit_clear_request(neigh, lci, ROSE_INVALID_FACILITY, 76);
991                 return 0;
992         }
993
994         sk = rose_find_listener(&facilities.source_addr, &facilities.source_call);
995
996         /*
997          * We can't accept the Call Request.
998          */
999         if (sk == NULL || sk_acceptq_is_full(sk) ||
1000             (make = rose_make_new(sk)) == NULL) {
1001                 rose_transmit_clear_request(neigh, lci, ROSE_NETWORK_CONGESTION, 120);
1002                 return 0;
1003         }
1004
1005         skb->sk     = make;
1006         make->sk_state = TCP_ESTABLISHED;
1007         make_rose = rose_sk(make);
1008
1009         make_rose->lci           = lci;
1010         make_rose->dest_addr     = facilities.dest_addr;
1011         make_rose->dest_call     = facilities.dest_call;
1012         make_rose->dest_ndigis   = facilities.dest_ndigis;
1013         for (n = 0 ; n < facilities.dest_ndigis ; n++)
1014                 make_rose->dest_digis[n] = facilities.dest_digis[n];
1015         make_rose->source_addr   = facilities.source_addr;
1016         make_rose->source_call   = facilities.source_call;
1017         make_rose->source_ndigis = facilities.source_ndigis;
1018         for (n = 0 ; n < facilities.source_ndigis ; n++)
1019                 make_rose->source_digis[n]= facilities.source_digis[n];
1020         make_rose->neighbour     = neigh;
1021         make_rose->device        = dev;
1022         make_rose->facilities    = facilities;
1023
1024         make_rose->neighbour->use++;
1025
1026         if (rose_sk(sk)->defer) {
1027                 make_rose->state = ROSE_STATE_5;
1028         } else {
1029                 rose_write_internal(make, ROSE_CALL_ACCEPTED);
1030                 make_rose->state = ROSE_STATE_3;
1031                 rose_start_idletimer(make);
1032         }
1033
1034         make_rose->condition = 0x00;
1035         make_rose->vs        = 0;
1036         make_rose->va        = 0;
1037         make_rose->vr        = 0;
1038         make_rose->vl        = 0;
1039         sk->sk_ack_backlog++;
1040
1041         rose_insert_socket(make);
1042
1043         skb_queue_head(&sk->sk_receive_queue, skb);
1044
1045         rose_start_heartbeat(make);
1046
1047         if (!sock_flag(sk, SOCK_DEAD))
1048                 sk->sk_data_ready(sk, skb->len);
1049
1050         return 1;
1051 }
1052
1053 static int rose_sendmsg(struct kiocb *iocb, struct socket *sock,
1054                         struct msghdr *msg, size_t len)
1055 {
1056         struct sock *sk = sock->sk;
1057         struct rose_sock *rose = rose_sk(sk);
1058         struct sockaddr_rose *usrose = (struct sockaddr_rose *)msg->msg_name;
1059         int err;
1060         struct full_sockaddr_rose srose;
1061         struct sk_buff *skb;
1062         unsigned char *asmptr;
1063         int n, size, qbit = 0;
1064
1065         if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1066                 return -EINVAL;
1067
1068         if (sock_flag(sk, SOCK_ZAPPED))
1069                 return -EADDRNOTAVAIL;
1070
1071         if (sk->sk_shutdown & SEND_SHUTDOWN) {
1072                 send_sig(SIGPIPE, current, 0);
1073                 return -EPIPE;
1074         }
1075
1076         if (rose->neighbour == NULL || rose->device == NULL)
1077                 return -ENETUNREACH;
1078
1079         if (usrose != NULL) {
1080                 if (msg->msg_namelen != sizeof(struct sockaddr_rose) && msg->msg_namelen != sizeof(struct full_sockaddr_rose))
1081                         return -EINVAL;
1082                 memset(&srose, 0, sizeof(struct full_sockaddr_rose));
1083                 memcpy(&srose, usrose, msg->msg_namelen);
1084                 if (rosecmp(&rose->dest_addr, &srose.srose_addr) != 0 ||
1085                     ax25cmp(&rose->dest_call, &srose.srose_call) != 0)
1086                         return -EISCONN;
1087                 if (srose.srose_ndigis != rose->dest_ndigis)
1088                         return -EISCONN;
1089                 if (srose.srose_ndigis == rose->dest_ndigis) {
1090                         for (n = 0 ; n < srose.srose_ndigis ; n++)
1091                                 if (ax25cmp(&rose->dest_digis[n],
1092                                             &srose.srose_digis[n]))
1093                                         return -EISCONN;
1094                 }
1095                 if (srose.srose_family != AF_ROSE)
1096                         return -EINVAL;
1097         } else {
1098                 if (sk->sk_state != TCP_ESTABLISHED)
1099                         return -ENOTCONN;
1100
1101                 srose.srose_family = AF_ROSE;
1102                 srose.srose_addr   = rose->dest_addr;
1103                 srose.srose_call   = rose->dest_call;
1104                 srose.srose_ndigis = rose->dest_ndigis;
1105                 for (n = 0 ; n < rose->dest_ndigis ; n++)
1106                         srose.srose_digis[n] = rose->dest_digis[n];
1107         }
1108
1109         SOCK_DEBUG(sk, "ROSE: sendto: Addresses built.\n");
1110
1111         /* Build a packet */
1112         SOCK_DEBUG(sk, "ROSE: sendto: building packet.\n");
1113         size = len + AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN;
1114
1115         if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1116                 return err;
1117
1118         skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN);
1119
1120         /*
1121          *      Put the data on the end
1122          */
1123         SOCK_DEBUG(sk, "ROSE: Appending user data\n");
1124
1125         skb_reset_transport_header(skb);
1126         skb_put(skb, len);
1127
1128         err = memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len);
1129         if (err) {
1130                 kfree_skb(skb);
1131                 return err;
1132         }
1133
1134         /*
1135          *      If the Q BIT Include socket option is in force, the first
1136          *      byte of the user data is the logical value of the Q Bit.
1137          */
1138         if (rose->qbitincl) {
1139                 qbit = skb->data[0];
1140                 skb_pull(skb, 1);
1141         }
1142
1143         /*
1144          *      Push down the ROSE header
1145          */
1146         asmptr = skb_push(skb, ROSE_MIN_LEN);
1147
1148         SOCK_DEBUG(sk, "ROSE: Building Network Header.\n");
1149
1150         /* Build a ROSE Network header */
1151         asmptr[0] = ((rose->lci >> 8) & 0x0F) | ROSE_GFI;
1152         asmptr[1] = (rose->lci >> 0) & 0xFF;
1153         asmptr[2] = ROSE_DATA;
1154
1155         if (qbit)
1156                 asmptr[0] |= ROSE_Q_BIT;
1157
1158         SOCK_DEBUG(sk, "ROSE: Built header.\n");
1159
1160         SOCK_DEBUG(sk, "ROSE: Transmitting buffer\n");
1161
1162         if (sk->sk_state != TCP_ESTABLISHED) {
1163                 kfree_skb(skb);
1164                 return -ENOTCONN;
1165         }
1166
1167 #ifdef M_BIT
1168 #define ROSE_PACLEN (256-ROSE_MIN_LEN)
1169         if (skb->len - ROSE_MIN_LEN > ROSE_PACLEN) {
1170                 unsigned char header[ROSE_MIN_LEN];
1171                 struct sk_buff *skbn;
1172                 int frontlen;
1173                 int lg;
1174
1175                 /* Save a copy of the Header */
1176                 skb_copy_from_linear_data(skb, header, ROSE_MIN_LEN);
1177                 skb_pull(skb, ROSE_MIN_LEN);
1178
1179                 frontlen = skb_headroom(skb);
1180
1181                 while (skb->len > 0) {
1182                         if ((skbn = sock_alloc_send_skb(sk, frontlen + ROSE_PACLEN, 0, &err)) == NULL) {
1183                                 kfree_skb(skb);
1184                                 return err;
1185                         }
1186
1187                         skbn->sk   = sk;
1188                         skbn->free = 1;
1189                         skbn->arp  = 1;
1190
1191                         skb_reserve(skbn, frontlen);
1192
1193                         lg = (ROSE_PACLEN > skb->len) ? skb->len : ROSE_PACLEN;
1194
1195                         /* Copy the user data */
1196                         skb_copy_from_linear_data(skb, skb_put(skbn, lg), lg);
1197                         skb_pull(skb, lg);
1198
1199                         /* Duplicate the Header */
1200                         skb_push(skbn, ROSE_MIN_LEN);
1201                         skb_copy_to_linear_data(skbn, header, ROSE_MIN_LEN);
1202
1203                         if (skb->len > 0)
1204                                 skbn->data[2] |= M_BIT;
1205
1206                         skb_queue_tail(&sk->sk_write_queue, skbn); /* Throw it on the queue */
1207                 }
1208
1209                 skb->free = 1;
1210                 kfree_skb(skb);
1211         } else {
1212                 skb_queue_tail(&sk->sk_write_queue, skb);               /* Throw it on the queue */
1213         }
1214 #else
1215         skb_queue_tail(&sk->sk_write_queue, skb);       /* Shove it onto the queue */
1216 #endif
1217
1218         rose_kick(sk);
1219
1220         return len;
1221 }
1222
1223
1224 static int rose_recvmsg(struct kiocb *iocb, struct socket *sock,
1225                         struct msghdr *msg, size_t size, int flags)
1226 {
1227         struct sock *sk = sock->sk;
1228         struct rose_sock *rose = rose_sk(sk);
1229         struct sockaddr_rose *srose = (struct sockaddr_rose *)msg->msg_name;
1230         size_t copied;
1231         unsigned char *asmptr;
1232         struct sk_buff *skb;
1233         int n, er, qbit;
1234
1235         /*
1236          * This works for seqpacket too. The receiver has ordered the queue for
1237          * us! We do one quick check first though
1238          */
1239         if (sk->sk_state != TCP_ESTABLISHED)
1240                 return -ENOTCONN;
1241
1242         /* Now we can treat all alike */
1243         if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL)
1244                 return er;
1245
1246         qbit = (skb->data[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
1247
1248         skb_pull(skb, ROSE_MIN_LEN);
1249
1250         if (rose->qbitincl) {
1251                 asmptr  = skb_push(skb, 1);
1252                 *asmptr = qbit;
1253         }
1254
1255         skb_reset_transport_header(skb);
1256         copied     = skb->len;
1257
1258         if (copied > size) {
1259                 copied = size;
1260                 msg->msg_flags |= MSG_TRUNC;
1261         }
1262
1263         skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1264
1265         if (srose != NULL) {
1266                 srose->srose_family = AF_ROSE;
1267                 srose->srose_addr   = rose->dest_addr;
1268                 srose->srose_call   = rose->dest_call;
1269                 srose->srose_ndigis = rose->dest_ndigis;
1270                 if (msg->msg_namelen >= sizeof(struct full_sockaddr_rose)) {
1271                         struct full_sockaddr_rose *full_srose = (struct full_sockaddr_rose *)msg->msg_name;
1272                         for (n = 0 ; n < rose->dest_ndigis ; n++)
1273                                 full_srose->srose_digis[n] = rose->dest_digis[n];
1274                         msg->msg_namelen = sizeof(struct full_sockaddr_rose);
1275                 } else {
1276                         if (rose->dest_ndigis >= 1) {
1277                                 srose->srose_ndigis = 1;
1278                                 srose->srose_digi = rose->dest_digis[0];
1279                         }
1280                         msg->msg_namelen = sizeof(struct sockaddr_rose);
1281                 }
1282         }
1283
1284         skb_free_datagram(sk, skb);
1285
1286         return copied;
1287 }
1288
1289
1290 static int rose_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1291 {
1292         struct sock *sk = sock->sk;
1293         struct rose_sock *rose = rose_sk(sk);
1294         void __user *argp = (void __user *)arg;
1295
1296         switch (cmd) {
1297         case TIOCOUTQ: {
1298                 long amount;
1299                 amount = sk->sk_sndbuf - atomic_read(&sk->sk_wmem_alloc);
1300                 if (amount < 0)
1301                         amount = 0;
1302                 return put_user(amount, (unsigned int __user *) argp);
1303         }
1304
1305         case TIOCINQ: {
1306                 struct sk_buff *skb;
1307                 long amount = 0L;
1308                 /* These two are safe on a single CPU system as only user tasks fiddle here */
1309                 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1310                         amount = skb->len;
1311                 return put_user(amount, (unsigned int __user *) argp);
1312         }
1313
1314         case SIOCGSTAMP:
1315                 return sock_get_timestamp(sk, (struct timeval __user *) argp);
1316
1317         case SIOCGSTAMPNS:
1318                 return sock_get_timestampns(sk, (struct timespec __user *) argp);
1319
1320         case SIOCGIFADDR:
1321         case SIOCSIFADDR:
1322         case SIOCGIFDSTADDR:
1323         case SIOCSIFDSTADDR:
1324         case SIOCGIFBRDADDR:
1325         case SIOCSIFBRDADDR:
1326         case SIOCGIFNETMASK:
1327         case SIOCSIFNETMASK:
1328         case SIOCGIFMETRIC:
1329         case SIOCSIFMETRIC:
1330                 return -EINVAL;
1331
1332         case SIOCADDRT:
1333         case SIOCDELRT:
1334         case SIOCRSCLRRT:
1335                 if (!capable(CAP_NET_ADMIN))
1336                         return -EPERM;
1337                 return rose_rt_ioctl(cmd, argp);
1338
1339         case SIOCRSGCAUSE: {
1340                 struct rose_cause_struct rose_cause;
1341                 rose_cause.cause      = rose->cause;
1342                 rose_cause.diagnostic = rose->diagnostic;
1343                 return copy_to_user(argp, &rose_cause, sizeof(struct rose_cause_struct)) ? -EFAULT : 0;
1344         }
1345
1346         case SIOCRSSCAUSE: {
1347                 struct rose_cause_struct rose_cause;
1348                 if (copy_from_user(&rose_cause, argp, sizeof(struct rose_cause_struct)))
1349                         return -EFAULT;
1350                 rose->cause      = rose_cause.cause;
1351                 rose->diagnostic = rose_cause.diagnostic;
1352                 return 0;
1353         }
1354
1355         case SIOCRSSL2CALL:
1356                 if (!capable(CAP_NET_ADMIN)) return -EPERM;
1357                 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1358                         ax25_listen_release(&rose_callsign, NULL);
1359                 if (copy_from_user(&rose_callsign, argp, sizeof(ax25_address)))
1360                         return -EFAULT;
1361                 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1362                         return ax25_listen_register(&rose_callsign, NULL);
1363
1364                 return 0;
1365
1366         case SIOCRSGL2CALL:
1367                 return copy_to_user(argp, &rose_callsign, sizeof(ax25_address)) ? -EFAULT : 0;
1368
1369         case SIOCRSACCEPT:
1370                 if (rose->state == ROSE_STATE_5) {
1371                         rose_write_internal(sk, ROSE_CALL_ACCEPTED);
1372                         rose_start_idletimer(sk);
1373                         rose->condition = 0x00;
1374                         rose->vs        = 0;
1375                         rose->va        = 0;
1376                         rose->vr        = 0;
1377                         rose->vl        = 0;
1378                         rose->state     = ROSE_STATE_3;
1379                 }
1380                 return 0;
1381
1382         default:
1383                 return -ENOIOCTLCMD;
1384         }
1385
1386         return 0;
1387 }
1388
1389 #ifdef CONFIG_PROC_FS
1390 static void *rose_info_start(struct seq_file *seq, loff_t *pos)
1391         __acquires(rose_list_lock)
1392 {
1393         int i;
1394         struct sock *s;
1395         struct hlist_node *node;
1396
1397         spin_lock_bh(&rose_list_lock);
1398         if (*pos == 0)
1399                 return SEQ_START_TOKEN;
1400
1401         i = 1;
1402         sk_for_each(s, node, &rose_list) {
1403                 if (i == *pos)
1404                         return s;
1405                 ++i;
1406         }
1407         return NULL;
1408 }
1409
1410 static void *rose_info_next(struct seq_file *seq, void *v, loff_t *pos)
1411 {
1412         ++*pos;
1413
1414         return (v == SEQ_START_TOKEN) ? sk_head(&rose_list)
1415                 : sk_next((struct sock *)v);
1416 }
1417
1418 static void rose_info_stop(struct seq_file *seq, void *v)
1419         __releases(rose_list_lock)
1420 {
1421         spin_unlock_bh(&rose_list_lock);
1422 }
1423
1424 static int rose_info_show(struct seq_file *seq, void *v)
1425 {
1426         char buf[11];
1427
1428         if (v == SEQ_START_TOKEN)
1429                 seq_puts(seq,
1430                          "dest_addr  dest_call src_addr   src_call  dev   lci neigh st vs vr va   t  t1  t2  t3  hb    idle Snd-Q Rcv-Q inode\n");
1431
1432         else {
1433                 struct sock *s = v;
1434                 struct rose_sock *rose = rose_sk(s);
1435                 const char *devname, *callsign;
1436                 const struct net_device *dev = rose->device;
1437
1438                 if (!dev)
1439                         devname = "???";
1440                 else
1441                         devname = dev->name;
1442
1443                 seq_printf(seq, "%-10s %-9s ",
1444                         rose2asc(&rose->dest_addr),
1445                         ax2asc(buf, &rose->dest_call));
1446
1447                 if (ax25cmp(&rose->source_call, &null_ax25_address) == 0)
1448                         callsign = "??????-?";
1449                 else
1450                         callsign = ax2asc(buf, &rose->source_call);
1451
1452                 seq_printf(seq,
1453                            "%-10s %-9s %-5s %3.3X %05d  %d  %d  %d  %d %3lu %3lu %3lu %3lu %3lu %3lu/%03lu %5d %5d %ld\n",
1454                         rose2asc(&rose->source_addr),
1455                         callsign,
1456                         devname,
1457                         rose->lci & 0x0FFF,
1458                         (rose->neighbour) ? rose->neighbour->number : 0,
1459                         rose->state,
1460                         rose->vs,
1461                         rose->vr,
1462                         rose->va,
1463                         ax25_display_timer(&rose->timer) / HZ,
1464                         rose->t1 / HZ,
1465                         rose->t2 / HZ,
1466                         rose->t3 / HZ,
1467                         rose->hb / HZ,
1468                         ax25_display_timer(&rose->idletimer) / (60 * HZ),
1469                         rose->idle / (60 * HZ),
1470                         atomic_read(&s->sk_wmem_alloc),
1471                         atomic_read(&s->sk_rmem_alloc),
1472                         s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1473         }
1474
1475         return 0;
1476 }
1477
1478 static const struct seq_operations rose_info_seqops = {
1479         .start = rose_info_start,
1480         .next = rose_info_next,
1481         .stop = rose_info_stop,
1482         .show = rose_info_show,
1483 };
1484
1485 static int rose_info_open(struct inode *inode, struct file *file)
1486 {
1487         return seq_open(file, &rose_info_seqops);
1488 }
1489
1490 static const struct file_operations rose_info_fops = {
1491         .owner = THIS_MODULE,
1492         .open = rose_info_open,
1493         .read = seq_read,
1494         .llseek = seq_lseek,
1495         .release = seq_release,
1496 };
1497 #endif  /* CONFIG_PROC_FS */
1498
1499 static struct net_proto_family rose_family_ops = {
1500         .family         =       PF_ROSE,
1501         .create         =       rose_create,
1502         .owner          =       THIS_MODULE,
1503 };
1504
1505 static struct proto_ops rose_proto_ops = {
1506         .family         =       PF_ROSE,
1507         .owner          =       THIS_MODULE,
1508         .release        =       rose_release,
1509         .bind           =       rose_bind,
1510         .connect        =       rose_connect,
1511         .socketpair     =       sock_no_socketpair,
1512         .accept         =       rose_accept,
1513         .getname        =       rose_getname,
1514         .poll           =       datagram_poll,
1515         .ioctl          =       rose_ioctl,
1516         .listen         =       rose_listen,
1517         .shutdown       =       sock_no_shutdown,
1518         .setsockopt     =       rose_setsockopt,
1519         .getsockopt     =       rose_getsockopt,
1520         .sendmsg        =       rose_sendmsg,
1521         .recvmsg        =       rose_recvmsg,
1522         .mmap           =       sock_no_mmap,
1523         .sendpage       =       sock_no_sendpage,
1524 };
1525
1526 static struct notifier_block rose_dev_notifier = {
1527         .notifier_call  =       rose_device_event,
1528 };
1529
1530 static struct net_device **dev_rose;
1531
1532 static struct ax25_protocol rose_pid = {
1533         .pid    = AX25_P_ROSE,
1534         .func   = rose_route_frame
1535 };
1536
1537 static struct ax25_linkfail rose_linkfail_notifier = {
1538         .func   = rose_link_failed
1539 };
1540
1541 static int __init rose_proto_init(void)
1542 {
1543         int i;
1544         int rc;
1545
1546         if (rose_ndevs > 0x7FFFFFFF/sizeof(struct net_device *)) {
1547                 printk(KERN_ERR "ROSE: rose_proto_init - rose_ndevs parameter to large\n");
1548                 rc = -EINVAL;
1549                 goto out;
1550         }
1551
1552         rc = proto_register(&rose_proto, 0);
1553         if (rc != 0)
1554                 goto out;
1555
1556         rose_callsign = null_ax25_address;
1557
1558         dev_rose = kzalloc(rose_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1559         if (dev_rose == NULL) {
1560                 printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate device structure\n");
1561                 rc = -ENOMEM;
1562                 goto out_proto_unregister;
1563         }
1564
1565         for (i = 0; i < rose_ndevs; i++) {
1566                 struct net_device *dev;
1567                 char name[IFNAMSIZ];
1568
1569                 sprintf(name, "rose%d", i);
1570                 dev = alloc_netdev(sizeof(struct net_device_stats),
1571                                    name, rose_setup);
1572                 if (!dev) {
1573                         printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate memory\n");
1574                         rc = -ENOMEM;
1575                         goto fail;
1576                 }
1577                 rc = register_netdev(dev);
1578                 if (rc) {
1579                         printk(KERN_ERR "ROSE: netdevice registration failed\n");
1580                         free_netdev(dev);
1581                         goto fail;
1582                 }
1583                 lockdep_set_class(&dev->_xmit_lock, &rose_netdev_xmit_lock_key);
1584                 dev_rose[i] = dev;
1585         }
1586
1587         sock_register(&rose_family_ops);
1588         register_netdevice_notifier(&rose_dev_notifier);
1589
1590         ax25_register_pid(&rose_pid);
1591         ax25_linkfail_register(&rose_linkfail_notifier);
1592
1593 #ifdef CONFIG_SYSCTL
1594         rose_register_sysctl();
1595 #endif
1596         rose_loopback_init();
1597
1598         rose_add_loopback_neigh();
1599
1600         proc_net_fops_create(&init_net, "rose", S_IRUGO, &rose_info_fops);
1601         proc_net_fops_create(&init_net, "rose_neigh", S_IRUGO, &rose_neigh_fops);
1602         proc_net_fops_create(&init_net, "rose_nodes", S_IRUGO, &rose_nodes_fops);
1603         proc_net_fops_create(&init_net, "rose_routes", S_IRUGO, &rose_routes_fops);
1604 out:
1605         return rc;
1606 fail:
1607         while (--i >= 0) {
1608                 unregister_netdev(dev_rose[i]);
1609                 free_netdev(dev_rose[i]);
1610         }
1611         kfree(dev_rose);
1612 out_proto_unregister:
1613         proto_unregister(&rose_proto);
1614         goto out;
1615 }
1616 module_init(rose_proto_init);
1617
1618 module_param(rose_ndevs, int, 0);
1619 MODULE_PARM_DESC(rose_ndevs, "number of ROSE devices");
1620
1621 MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1622 MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol");
1623 MODULE_LICENSE("GPL");
1624 MODULE_ALIAS_NETPROTO(PF_ROSE);
1625
1626 static void __exit rose_exit(void)
1627 {
1628         int i;
1629
1630         proc_net_remove(&init_net, "rose");
1631         proc_net_remove(&init_net, "rose_neigh");
1632         proc_net_remove(&init_net, "rose_nodes");
1633         proc_net_remove(&init_net, "rose_routes");
1634         rose_loopback_clear();
1635
1636         rose_rt_free();
1637
1638         ax25_protocol_release(AX25_P_ROSE);
1639         ax25_linkfail_release(&rose_linkfail_notifier);
1640
1641         if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1642                 ax25_listen_release(&rose_callsign, NULL);
1643
1644 #ifdef CONFIG_SYSCTL
1645         rose_unregister_sysctl();
1646 #endif
1647         unregister_netdevice_notifier(&rose_dev_notifier);
1648
1649         sock_unregister(PF_ROSE);
1650
1651         for (i = 0; i < rose_ndevs; i++) {
1652                 struct net_device *dev = dev_rose[i];
1653
1654                 if (dev) {
1655                         unregister_netdev(dev);
1656                         free_netdev(dev);
1657                 }
1658         }
1659
1660         kfree(dev_rose);
1661         proto_unregister(&rose_proto);
1662 }
1663
1664 module_exit(rose_exit);