Thomas Gleixner | ee5d8f4 | 2019-05-20 19:08:06 +0200 | [diff] [blame] | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 2 | /* |
| 3 | * X.25 Packet Layer release 002 |
| 4 | * |
| 5 | * This is ALPHA test software. This code may break your machine, |
| 6 | * randomly fail to work with new releases, misbehave and/or generally |
| 7 | * screw up. It might even work. |
| 8 | * |
| 9 | * This code REQUIRES 2.1.15 or higher |
| 10 | * |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 11 | * History |
| 12 | * X.25 001 Jonathan Naylor Started coding. |
| 13 | * X.25 002 Jonathan Naylor Centralised disconnection processing. |
| 14 | * mar/20/00 Daniela Squassoni Disabling/enabling of facilities |
| 15 | * negotiation. |
| 16 | * jun/24/01 Arnaldo C. Melo use skb_queue_purge, cleanups |
Shaun Pereira | ebc3f64 | 2005-06-22 22:16:17 -0700 | [diff] [blame] | 17 | * apr/04/15 Shaun Pereira Fast select with no |
| 18 | * restriction on response. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 19 | */ |
| 20 | |
wangweidong | b73e9e3 | 2013-12-06 19:24:33 +0800 | [diff] [blame] | 21 | #define pr_fmt(fmt) "X25: " fmt |
| 22 | |
Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 23 | #include <linux/slab.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 24 | #include <linux/kernel.h> |
| 25 | #include <linux/string.h> |
| 26 | #include <linux/skbuff.h> |
| 27 | #include <net/sock.h> |
Arnaldo Carvalho de Melo | c752f07 | 2005-08-09 20:08:28 -0700 | [diff] [blame] | 28 | #include <net/tcp_states.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 29 | #include <net/x25.h> |
| 30 | |
| 31 | /* |
| 32 | * This routine purges all of the queues of frames. |
| 33 | */ |
| 34 | void x25_clear_queues(struct sock *sk) |
| 35 | { |
| 36 | struct x25_sock *x25 = x25_sk(sk); |
| 37 | |
| 38 | skb_queue_purge(&sk->sk_write_queue); |
| 39 | skb_queue_purge(&x25->ack_queue); |
| 40 | skb_queue_purge(&x25->interrupt_in_queue); |
| 41 | skb_queue_purge(&x25->interrupt_out_queue); |
| 42 | skb_queue_purge(&x25->fragment_queue); |
| 43 | } |
| 44 | |
| 45 | |
| 46 | /* |
| 47 | * This routine purges the input queue of those frames that have been |
| 48 | * acknowledged. This replaces the boxes labelled "V(a) <- N(r)" on the |
| 49 | * SDL diagram. |
| 50 | */ |
| 51 | void x25_frames_acked(struct sock *sk, unsigned short nr) |
| 52 | { |
| 53 | struct sk_buff *skb; |
| 54 | struct x25_sock *x25 = x25_sk(sk); |
| 55 | int modulus = x25->neighbour->extended ? X25_EMODULUS : X25_SMODULUS; |
| 56 | |
| 57 | /* |
| 58 | * Remove all the ack-ed frames from the ack queue. |
| 59 | */ |
| 60 | if (x25->va != nr) |
| 61 | while (skb_peek(&x25->ack_queue) && x25->va != nr) { |
| 62 | skb = skb_dequeue(&x25->ack_queue); |
| 63 | kfree_skb(skb); |
| 64 | x25->va = (x25->va + 1) % modulus; |
| 65 | } |
| 66 | } |
| 67 | |
| 68 | void x25_requeue_frames(struct sock *sk) |
| 69 | { |
| 70 | struct sk_buff *skb, *skb_prev = NULL; |
| 71 | |
| 72 | /* |
| 73 | * Requeue all the un-ack-ed frames on the output queue to be picked |
| 74 | * up by x25_kick. This arrangement handles the possibility of an empty |
| 75 | * output queue. |
| 76 | */ |
| 77 | while ((skb = skb_dequeue(&x25_sk(sk)->ack_queue)) != NULL) { |
| 78 | if (!skb_prev) |
| 79 | skb_queue_head(&sk->sk_write_queue, skb); |
| 80 | else |
David S. Miller | 8728b83 | 2005-08-09 19:25:21 -0700 | [diff] [blame] | 81 | skb_append(skb_prev, skb, &sk->sk_write_queue); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 82 | skb_prev = skb; |
| 83 | } |
| 84 | } |
| 85 | |
| 86 | /* |
| 87 | * Validate that the value of nr is between va and vs. Return true or |
| 88 | * false for testing. |
| 89 | */ |
| 90 | int x25_validate_nr(struct sock *sk, unsigned short nr) |
| 91 | { |
| 92 | struct x25_sock *x25 = x25_sk(sk); |
| 93 | unsigned short vc = x25->va; |
| 94 | int modulus = x25->neighbour->extended ? X25_EMODULUS : X25_SMODULUS; |
| 95 | |
| 96 | while (vc != x25->vs) { |
| 97 | if (nr == vc) |
| 98 | return 1; |
| 99 | vc = (vc + 1) % modulus; |
| 100 | } |
| 101 | |
| 102 | return nr == x25->vs ? 1 : 0; |
| 103 | } |
| 104 | |
| 105 | /* |
| 106 | * This routine is called when the packet layer internally generates a |
| 107 | * control frame. |
| 108 | */ |
| 109 | void x25_write_internal(struct sock *sk, int frametype) |
| 110 | { |
| 111 | struct x25_sock *x25 = x25_sk(sk); |
| 112 | struct sk_buff *skb; |
| 113 | unsigned char *dptr; |
| 114 | unsigned char facilities[X25_MAX_FAC_LEN]; |
| 115 | unsigned char addresses[1 + X25_ADDR_LEN]; |
| 116 | unsigned char lci1, lci2; |
| 117 | /* |
| 118 | * Default safe frame size. |
| 119 | */ |
| 120 | int len = X25_MAX_L2_LEN + X25_EXT_MIN_LEN; |
| 121 | |
| 122 | /* |
| 123 | * Adjust frame size. |
| 124 | */ |
| 125 | switch (frametype) { |
Joe Perches | fddc5f3 | 2011-07-01 09:43:13 +0000 | [diff] [blame] | 126 | case X25_CALL_REQUEST: |
| 127 | len += 1 + X25_ADDR_LEN + X25_MAX_FAC_LEN + X25_MAX_CUD_LEN; |
| 128 | break; |
| 129 | case X25_CALL_ACCEPTED: /* fast sel with no restr on resp */ |
| 130 | if (x25->facilities.reverse & 0x80) { |
| 131 | len += 1 + X25_MAX_FAC_LEN + X25_MAX_CUD_LEN; |
| 132 | } else { |
| 133 | len += 1 + X25_MAX_FAC_LEN; |
| 134 | } |
| 135 | break; |
| 136 | case X25_CLEAR_REQUEST: |
| 137 | case X25_RESET_REQUEST: |
| 138 | len += 2; |
| 139 | break; |
| 140 | case X25_RR: |
| 141 | case X25_RNR: |
| 142 | case X25_REJ: |
| 143 | case X25_CLEAR_CONFIRMATION: |
| 144 | case X25_INTERRUPT_CONFIRMATION: |
| 145 | case X25_RESET_CONFIRMATION: |
| 146 | break; |
| 147 | default: |
wangweidong | b73e9e3 | 2013-12-06 19:24:33 +0800 | [diff] [blame] | 148 | pr_err("invalid frame type %02X\n", frametype); |
Joe Perches | fddc5f3 | 2011-07-01 09:43:13 +0000 | [diff] [blame] | 149 | return; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 150 | } |
| 151 | |
| 152 | if ((skb = alloc_skb(len, GFP_ATOMIC)) == NULL) |
| 153 | return; |
| 154 | |
| 155 | /* |
| 156 | * Space for Ethernet and 802.2 LLC headers. |
| 157 | */ |
| 158 | skb_reserve(skb, X25_MAX_L2_LEN); |
| 159 | |
| 160 | /* |
| 161 | * Make space for the GFI and LCI, and fill them in. |
| 162 | */ |
| 163 | dptr = skb_put(skb, 2); |
| 164 | |
| 165 | lci1 = (x25->lci >> 8) & 0x0F; |
| 166 | lci2 = (x25->lci >> 0) & 0xFF; |
| 167 | |
| 168 | if (x25->neighbour->extended) { |
| 169 | *dptr++ = lci1 | X25_GFI_EXTSEQ; |
| 170 | *dptr++ = lci2; |
| 171 | } else { |
| 172 | *dptr++ = lci1 | X25_GFI_STDSEQ; |
| 173 | *dptr++ = lci2; |
| 174 | } |
| 175 | |
| 176 | /* |
| 177 | * Now fill in the frame type specific information. |
| 178 | */ |
| 179 | switch (frametype) { |
| 180 | |
| 181 | case X25_CALL_REQUEST: |
| 182 | dptr = skb_put(skb, 1); |
| 183 | *dptr++ = X25_CALL_REQUEST; |
| 184 | len = x25_addr_aton(addresses, &x25->dest_addr, |
| 185 | &x25->source_addr); |
yuan linyu | b952f4d | 2017-06-18 22:52:04 +0800 | [diff] [blame] | 186 | skb_put_data(skb, addresses, len); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 187 | len = x25_create_facilities(facilities, |
Shaun Pereira | a64b7b9 | 2006-03-22 00:01:31 -0800 | [diff] [blame] | 188 | &x25->facilities, |
| 189 | &x25->dte_facilities, |
| 190 | x25->neighbour->global_facil_mask); |
yuan linyu | b952f4d | 2017-06-18 22:52:04 +0800 | [diff] [blame] | 191 | skb_put_data(skb, facilities, len); |
| 192 | skb_put_data(skb, x25->calluserdata.cuddata, |
| 193 | x25->calluserdata.cudlength); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 194 | x25->calluserdata.cudlength = 0; |
| 195 | break; |
| 196 | |
| 197 | case X25_CALL_ACCEPTED: |
| 198 | dptr = skb_put(skb, 2); |
| 199 | *dptr++ = X25_CALL_ACCEPTED; |
| 200 | *dptr++ = 0x00; /* Address lengths */ |
| 201 | len = x25_create_facilities(facilities, |
| 202 | &x25->facilities, |
Shaun Pereira | a64b7b9 | 2006-03-22 00:01:31 -0800 | [diff] [blame] | 203 | &x25->dte_facilities, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 204 | x25->vc_facil_mask); |
yuan linyu | b952f4d | 2017-06-18 22:52:04 +0800 | [diff] [blame] | 205 | skb_put_data(skb, facilities, len); |
Shaun Pereira | ebc3f64 | 2005-06-22 22:16:17 -0700 | [diff] [blame] | 206 | |
| 207 | /* fast select with no restriction on response |
| 208 | allows call user data. Userland must |
| 209 | ensure it is ours and not theirs */ |
| 210 | if(x25->facilities.reverse & 0x80) { |
yuan linyu | b952f4d | 2017-06-18 22:52:04 +0800 | [diff] [blame] | 211 | skb_put_data(skb, |
| 212 | x25->calluserdata.cuddata, |
| 213 | x25->calluserdata.cudlength); |
Shaun Pereira | ebc3f64 | 2005-06-22 22:16:17 -0700 | [diff] [blame] | 214 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 215 | x25->calluserdata.cudlength = 0; |
| 216 | break; |
| 217 | |
| 218 | case X25_CLEAR_REQUEST: |
Andrew Hendry | 386e50c | 2009-11-18 23:30:41 -0800 | [diff] [blame] | 219 | dptr = skb_put(skb, 3); |
| 220 | *dptr++ = frametype; |
| 221 | *dptr++ = x25->causediag.cause; |
| 222 | *dptr++ = x25->causediag.diagnostic; |
| 223 | break; |
| 224 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 225 | case X25_RESET_REQUEST: |
| 226 | dptr = skb_put(skb, 3); |
| 227 | *dptr++ = frametype; |
| 228 | *dptr++ = 0x00; /* XXX */ |
| 229 | *dptr++ = 0x00; /* XXX */ |
| 230 | break; |
| 231 | |
| 232 | case X25_RR: |
| 233 | case X25_RNR: |
| 234 | case X25_REJ: |
| 235 | if (x25->neighbour->extended) { |
| 236 | dptr = skb_put(skb, 2); |
| 237 | *dptr++ = frametype; |
| 238 | *dptr++ = (x25->vr << 1) & 0xFE; |
| 239 | } else { |
| 240 | dptr = skb_put(skb, 1); |
| 241 | *dptr = frametype; |
| 242 | *dptr++ |= (x25->vr << 5) & 0xE0; |
| 243 | } |
| 244 | break; |
| 245 | |
| 246 | case X25_CLEAR_CONFIRMATION: |
| 247 | case X25_INTERRUPT_CONFIRMATION: |
| 248 | case X25_RESET_CONFIRMATION: |
| 249 | dptr = skb_put(skb, 1); |
| 250 | *dptr = frametype; |
| 251 | break; |
| 252 | } |
| 253 | |
| 254 | x25_transmit_link(skb, x25->neighbour); |
| 255 | } |
| 256 | |
| 257 | /* |
| 258 | * Unpick the contents of the passed X.25 Packet Layer frame. |
| 259 | */ |
| 260 | int x25_decode(struct sock *sk, struct sk_buff *skb, int *ns, int *nr, int *q, |
| 261 | int *d, int *m) |
| 262 | { |
| 263 | struct x25_sock *x25 = x25_sk(sk); |
Matthew Daley | cb101ed | 2011-10-14 18:45:04 +0000 | [diff] [blame] | 264 | unsigned char *frame; |
| 265 | |
| 266 | if (!pskb_may_pull(skb, X25_STD_MIN_LEN)) |
| 267 | return X25_ILLEGAL; |
| 268 | frame = skb->data; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 269 | |
| 270 | *ns = *nr = *q = *d = *m = 0; |
| 271 | |
| 272 | switch (frame[2]) { |
Joe Perches | fddc5f3 | 2011-07-01 09:43:13 +0000 | [diff] [blame] | 273 | case X25_CALL_REQUEST: |
| 274 | case X25_CALL_ACCEPTED: |
| 275 | case X25_CLEAR_REQUEST: |
| 276 | case X25_CLEAR_CONFIRMATION: |
| 277 | case X25_INTERRUPT: |
| 278 | case X25_INTERRUPT_CONFIRMATION: |
| 279 | case X25_RESET_REQUEST: |
| 280 | case X25_RESET_CONFIRMATION: |
| 281 | case X25_RESTART_REQUEST: |
| 282 | case X25_RESTART_CONFIRMATION: |
| 283 | case X25_REGISTRATION_REQUEST: |
| 284 | case X25_REGISTRATION_CONFIRMATION: |
| 285 | case X25_DIAGNOSTIC: |
| 286 | return frame[2]; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 287 | } |
| 288 | |
| 289 | if (x25->neighbour->extended) { |
| 290 | if (frame[2] == X25_RR || |
| 291 | frame[2] == X25_RNR || |
| 292 | frame[2] == X25_REJ) { |
Matthew Daley | cb101ed | 2011-10-14 18:45:04 +0000 | [diff] [blame] | 293 | if (!pskb_may_pull(skb, X25_EXT_MIN_LEN)) |
| 294 | return X25_ILLEGAL; |
| 295 | frame = skb->data; |
| 296 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 297 | *nr = (frame[3] >> 1) & 0x7F; |
| 298 | return frame[2]; |
| 299 | } |
| 300 | } else { |
| 301 | if ((frame[2] & 0x1F) == X25_RR || |
| 302 | (frame[2] & 0x1F) == X25_RNR || |
| 303 | (frame[2] & 0x1F) == X25_REJ) { |
| 304 | *nr = (frame[2] >> 5) & 0x07; |
| 305 | return frame[2] & 0x1F; |
| 306 | } |
| 307 | } |
| 308 | |
| 309 | if (x25->neighbour->extended) { |
| 310 | if ((frame[2] & 0x01) == X25_DATA) { |
Matthew Daley | cb101ed | 2011-10-14 18:45:04 +0000 | [diff] [blame] | 311 | if (!pskb_may_pull(skb, X25_EXT_MIN_LEN)) |
| 312 | return X25_ILLEGAL; |
| 313 | frame = skb->data; |
| 314 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 315 | *q = (frame[0] & X25_Q_BIT) == X25_Q_BIT; |
| 316 | *d = (frame[0] & X25_D_BIT) == X25_D_BIT; |
| 317 | *m = (frame[3] & X25_EXT_M_BIT) == X25_EXT_M_BIT; |
| 318 | *nr = (frame[3] >> 1) & 0x7F; |
| 319 | *ns = (frame[2] >> 1) & 0x7F; |
| 320 | return X25_DATA; |
| 321 | } |
| 322 | } else { |
| 323 | if ((frame[2] & 0x01) == X25_DATA) { |
| 324 | *q = (frame[0] & X25_Q_BIT) == X25_Q_BIT; |
| 325 | *d = (frame[0] & X25_D_BIT) == X25_D_BIT; |
| 326 | *m = (frame[2] & X25_STD_M_BIT) == X25_STD_M_BIT; |
| 327 | *nr = (frame[2] >> 5) & 0x07; |
| 328 | *ns = (frame[2] >> 1) & 0x07; |
| 329 | return X25_DATA; |
| 330 | } |
| 331 | } |
| 332 | |
Antonio Cardace | 3fef2b6 | 2018-02-19 11:37:15 +0000 | [diff] [blame] | 333 | pr_debug("invalid PLP frame %3ph\n", frame); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 334 | |
| 335 | return X25_ILLEGAL; |
| 336 | } |
| 337 | |
| 338 | void x25_disconnect(struct sock *sk, int reason, unsigned char cause, |
| 339 | unsigned char diagnostic) |
| 340 | { |
| 341 | struct x25_sock *x25 = x25_sk(sk); |
| 342 | |
| 343 | x25_clear_queues(sk); |
| 344 | x25_stop_timer(sk); |
| 345 | |
| 346 | x25->lci = 0; |
| 347 | x25->state = X25_STATE_0; |
| 348 | |
| 349 | x25->causediag.cause = cause; |
| 350 | x25->causediag.diagnostic = diagnostic; |
| 351 | |
| 352 | sk->sk_state = TCP_CLOSE; |
| 353 | sk->sk_err = reason; |
| 354 | sk->sk_shutdown |= SEND_SHUTDOWN; |
| 355 | |
| 356 | if (!sock_flag(sk, SOCK_DEAD)) { |
| 357 | sk->sk_state_change(sk); |
| 358 | sock_set_flag(sk, SOCK_DEAD); |
| 359 | } |
YueHaibing | 8999dc8 | 2020-04-28 16:12:08 +0800 | [diff] [blame] | 360 | if (x25->neighbour) { |
| 361 | read_lock_bh(&x25_list_lock); |
| 362 | x25_neigh_put(x25->neighbour); |
| 363 | x25->neighbour = NULL; |
| 364 | read_unlock_bh(&x25_list_lock); |
| 365 | } |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 366 | } |
| 367 | |
| 368 | /* |
| 369 | * Clear an own-rx-busy condition and tell the peer about this, provided |
| 370 | * that there is a significant amount of free receive buffer space available. |
| 371 | */ |
| 372 | void x25_check_rbuf(struct sock *sk) |
| 373 | { |
| 374 | struct x25_sock *x25 = x25_sk(sk); |
| 375 | |
Eric Dumazet | 6bf1574 | 2008-01-13 22:27:52 -0800 | [diff] [blame] | 376 | if (atomic_read(&sk->sk_rmem_alloc) < (sk->sk_rcvbuf >> 1) && |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 377 | (x25->condition & X25_COND_OWN_RX_BUSY)) { |
| 378 | x25->condition &= ~X25_COND_OWN_RX_BUSY; |
| 379 | x25->condition &= ~X25_COND_ACK_PENDING; |
| 380 | x25->vl = x25->vr; |
| 381 | x25_write_internal(sk, X25_RR); |
| 382 | x25_stop_timer(sk); |
| 383 | } |
| 384 | } |