Changes in 4.9.183 rapidio: fix a NULL pointer dereference when create_workqueue() fails fs/fat/file.c: issue flush after the writeback of FAT sysctl: return -EINVAL if val violates minmax ipc: prevent lockup on alloc_msg and free_msg ARM: prevent tracing IPI_CPU_BACKTRACE hugetlbfs: on restore reserve error path retain subpool reservation mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE mm/cma.c: fix crash on CMA allocation if bitmap allocation fails mm/cma_debug.c: fix the break condition in cma_maxchunk_get() mm/slab.c: fix an infinite loop in leaks_show() kernel/sys.c: prctl: fix false positive in validate_prctl_map() drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER mfd: tps65912-spi: Add missing of table registration mfd: intel-lpss: Set the device in reset state when init mfd: twl6040: Fix device init errors for ACCCTL register perf/x86/intel: Allow PEBS multi-entry in watermark mode drm/bridge: adv7511: Fix low refresh rate selection objtool: Don't use ignore flag for fake jumps pwm: meson: Use the spin-lock only to protect register modifications ntp: Allow TAI-UTC offset to be set to zero f2fs: fix to avoid panic in do_recover_data() f2fs: fix to clear dirty inode in error path of f2fs_iget() f2fs: fix to do sanity check on valid block count of segment configfs: fix possible use-after-free in configfs_register_group uml: fix a boot splat wrt use of cpu_all_mask watchdog: imx2_wdt: Fix set_timeout for big timeout values watchdog: fix compile time error of pretimeout governors iommu/vt-d: Set intel_iommu_gfx_mapped correctly ALSA: hda - Register irq handler after the chip initialization nvmem: core: fix read buffer in place fuse: retrieve: cap requested size to negotiated max_write nfsd: allow fh_want_write to be called twice x86/PCI: Fix PCI IRQ routing table memory leak platform/chrome: cros_ec_proto: check for NULL transfer function soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA PCI: rpadlpar: Fix leaked device_node references in add/remove paths platform/x86: intel_pmc_ipc: adding error handling PCI: rcar: Fix a potential NULL pointer dereference PCI: rcar: Fix 64bit MSI message address handling video: hgafb: fix potential NULL pointer dereference video: imsttfb: fix potential NULL pointer dereferences PCI: xilinx: Check for __get_free_pages() failure gpio: gpio-omap: add check for off wake capable gpios dmaengine: idma64: Use actual device for DMA transfers pwm: tiehrpwm: Update shadow register for disabling PWMs ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa pwm: Fix deadlock warning when removing PWM device ARM: exynos: Fix undefined instruction during Exynos5422 resume Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections" ALSA: seq: Cover unsubscribe_port() in list_mutex ALSA: oxfw: allow PCM capture for Stanton SCS.1m libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node fs/ocfs2: fix race in ocfs2_dentry_attach_lock() signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO ptrace: restore smp_rmb() in __ptrace_may_access() media: v4l2-ioctl: clear fields in s_parm i2c: acorn: fix i2c warning bcache: fix stack corruption by PRECEDING_KEY() cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() ASoC: cs42xx8: Add regcache mask dirty ASoC: fsl_asrc: Fix the issue about unsupported rate x86/uaccess, kcov: Disable stack protector ALSA: seq: Protect in-kernel ioctl calls with mutex ALSA: seq: Fix race of get-subscription call vs port-delete ioctls Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var scsi: lpfc: add check for loss of ndlp when sending RRQ arm64/mm: Inhibit huge-vmap with ptdump scsi: bnx2fc: fix incorrect cast to u64 on shift operation selftests/timers: Add missing fflush(stdout) calls usbnet: ipheth: fix racing condition KVM: x86/pmu: do not mask the value that is written to fixed PMUs KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() usb: dwc2: Fix DMA cache alignment issues USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. USB: usb-storage: Add new ID to ums-realtek USB: serial: pl2303: add Allied Telesis VT-Kit3 USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode USB: serial: option: add Telit 0x1260 and 0x1261 compositions rtc: pcf8523: don't return invalid date when battery is low ax25: fix inconsistent lock state in ax25_destroy_timer be2net: Fix number of Rx queues used for flow hashing ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero lapb: fixed leak of control-blocks. neigh: fix use-after-free read in pneigh_get_next sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg Revert "staging: vc04_services: prevent integer overflow in create_pagelist()" perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints selftests: netfilter: missing error check when setting up veth interface mISDN: make sure device name is NUL terminated x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor perf/ring_buffer: Fix exposing a temporarily decreased data_head perf/ring_buffer: Add ordering to rb->nest increment gpio: fix gpio-adp5588 build errors net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr configfs: Fix use-after-free when accessing sd->s_dentry perf data: Fix 'strncat may truncate' build failure with recent gcc perf record: Fix s390 missing module symbol and warning for non-root users ia64: fix build errors by exporting paddr_to_nid() KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask scsi: libsas: delete sas port if expander discover failed mlxsw: spectrum: Prevent force of 56G Abort file_remove_privs() for non-reg. files Linux 4.9.183 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
443 lines
8.9 KiB
C
443 lines
8.9 KiB
C
/*
|
|
* LAPB release 002
|
|
*
|
|
* This code REQUIRES 2.1.15 or higher/ NET3.038
|
|
*
|
|
* This module:
|
|
* This module is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version
|
|
* 2 of the License, or (at your option) any later version.
|
|
*
|
|
* History
|
|
* LAPB 001 Jonathan Naylor Started Coding
|
|
* LAPB 002 Jonathan Naylor New timer architecture.
|
|
* 2000-10-29 Henner Eisen lapb_data_indication() return status.
|
|
*/
|
|
|
|
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
|
|
|
#include <linux/module.h>
|
|
#include <linux/errno.h>
|
|
#include <linux/types.h>
|
|
#include <linux/socket.h>
|
|
#include <linux/in.h>
|
|
#include <linux/kernel.h>
|
|
#include <linux/jiffies.h>
|
|
#include <linux/timer.h>
|
|
#include <linux/string.h>
|
|
#include <linux/sockios.h>
|
|
#include <linux/net.h>
|
|
#include <linux/inet.h>
|
|
#include <linux/if_arp.h>
|
|
#include <linux/skbuff.h>
|
|
#include <linux/slab.h>
|
|
#include <net/sock.h>
|
|
#include <asm/uaccess.h>
|
|
#include <linux/fcntl.h>
|
|
#include <linux/mm.h>
|
|
#include <linux/interrupt.h>
|
|
#include <linux/stat.h>
|
|
#include <linux/init.h>
|
|
#include <net/lapb.h>
|
|
|
|
static LIST_HEAD(lapb_list);
|
|
static DEFINE_RWLOCK(lapb_list_lock);
|
|
|
|
/*
|
|
* Free an allocated lapb control block.
|
|
*/
|
|
static void lapb_free_cb(struct lapb_cb *lapb)
|
|
{
|
|
kfree(lapb);
|
|
}
|
|
|
|
static __inline__ void lapb_hold(struct lapb_cb *lapb)
|
|
{
|
|
atomic_inc(&lapb->refcnt);
|
|
}
|
|
|
|
static __inline__ void lapb_put(struct lapb_cb *lapb)
|
|
{
|
|
if (atomic_dec_and_test(&lapb->refcnt))
|
|
lapb_free_cb(lapb);
|
|
}
|
|
|
|
/*
|
|
* Socket removal during an interrupt is now safe.
|
|
*/
|
|
static void __lapb_remove_cb(struct lapb_cb *lapb)
|
|
{
|
|
if (lapb->node.next) {
|
|
list_del(&lapb->node);
|
|
lapb_put(lapb);
|
|
}
|
|
}
|
|
EXPORT_SYMBOL(lapb_register);
|
|
|
|
/*
|
|
* Add a socket to the bound sockets list.
|
|
*/
|
|
static void __lapb_insert_cb(struct lapb_cb *lapb)
|
|
{
|
|
list_add(&lapb->node, &lapb_list);
|
|
lapb_hold(lapb);
|
|
}
|
|
|
|
static struct lapb_cb *__lapb_devtostruct(struct net_device *dev)
|
|
{
|
|
struct list_head *entry;
|
|
struct lapb_cb *lapb, *use = NULL;
|
|
|
|
list_for_each(entry, &lapb_list) {
|
|
lapb = list_entry(entry, struct lapb_cb, node);
|
|
if (lapb->dev == dev) {
|
|
use = lapb;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (use)
|
|
lapb_hold(use);
|
|
|
|
return use;
|
|
}
|
|
|
|
static struct lapb_cb *lapb_devtostruct(struct net_device *dev)
|
|
{
|
|
struct lapb_cb *rc;
|
|
|
|
read_lock_bh(&lapb_list_lock);
|
|
rc = __lapb_devtostruct(dev);
|
|
read_unlock_bh(&lapb_list_lock);
|
|
|
|
return rc;
|
|
}
|
|
/*
|
|
* Create an empty LAPB control block.
|
|
*/
|
|
static struct lapb_cb *lapb_create_cb(void)
|
|
{
|
|
struct lapb_cb *lapb = kzalloc(sizeof(*lapb), GFP_ATOMIC);
|
|
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
skb_queue_head_init(&lapb->write_queue);
|
|
skb_queue_head_init(&lapb->ack_queue);
|
|
|
|
init_timer(&lapb->t1timer);
|
|
init_timer(&lapb->t2timer);
|
|
|
|
lapb->t1 = LAPB_DEFAULT_T1;
|
|
lapb->t2 = LAPB_DEFAULT_T2;
|
|
lapb->n2 = LAPB_DEFAULT_N2;
|
|
lapb->mode = LAPB_DEFAULT_MODE;
|
|
lapb->window = LAPB_DEFAULT_WINDOW;
|
|
lapb->state = LAPB_STATE_0;
|
|
atomic_set(&lapb->refcnt, 1);
|
|
out:
|
|
return lapb;
|
|
}
|
|
|
|
int lapb_register(struct net_device *dev,
|
|
const struct lapb_register_struct *callbacks)
|
|
{
|
|
struct lapb_cb *lapb;
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
write_lock_bh(&lapb_list_lock);
|
|
|
|
lapb = __lapb_devtostruct(dev);
|
|
if (lapb) {
|
|
lapb_put(lapb);
|
|
goto out;
|
|
}
|
|
|
|
lapb = lapb_create_cb();
|
|
rc = LAPB_NOMEM;
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
lapb->dev = dev;
|
|
lapb->callbacks = callbacks;
|
|
|
|
__lapb_insert_cb(lapb);
|
|
|
|
lapb_start_t1timer(lapb);
|
|
|
|
rc = LAPB_OK;
|
|
out:
|
|
write_unlock_bh(&lapb_list_lock);
|
|
return rc;
|
|
}
|
|
|
|
int lapb_unregister(struct net_device *dev)
|
|
{
|
|
struct lapb_cb *lapb;
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
write_lock_bh(&lapb_list_lock);
|
|
lapb = __lapb_devtostruct(dev);
|
|
if (!lapb)
|
|
goto out;
|
|
lapb_put(lapb);
|
|
|
|
lapb_stop_t1timer(lapb);
|
|
lapb_stop_t2timer(lapb);
|
|
|
|
lapb_clear_queues(lapb);
|
|
|
|
__lapb_remove_cb(lapb);
|
|
|
|
lapb_put(lapb);
|
|
rc = LAPB_OK;
|
|
out:
|
|
write_unlock_bh(&lapb_list_lock);
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_unregister);
|
|
|
|
int lapb_getparms(struct net_device *dev, struct lapb_parms_struct *parms)
|
|
{
|
|
int rc = LAPB_BADTOKEN;
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
parms->t1 = lapb->t1 / HZ;
|
|
parms->t2 = lapb->t2 / HZ;
|
|
parms->n2 = lapb->n2;
|
|
parms->n2count = lapb->n2count;
|
|
parms->state = lapb->state;
|
|
parms->window = lapb->window;
|
|
parms->mode = lapb->mode;
|
|
|
|
if (!timer_pending(&lapb->t1timer))
|
|
parms->t1timer = 0;
|
|
else
|
|
parms->t1timer = (lapb->t1timer.expires - jiffies) / HZ;
|
|
|
|
if (!timer_pending(&lapb->t2timer))
|
|
parms->t2timer = 0;
|
|
else
|
|
parms->t2timer = (lapb->t2timer.expires - jiffies) / HZ;
|
|
|
|
lapb_put(lapb);
|
|
rc = LAPB_OK;
|
|
out:
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_getparms);
|
|
|
|
int lapb_setparms(struct net_device *dev, struct lapb_parms_struct *parms)
|
|
{
|
|
int rc = LAPB_BADTOKEN;
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
rc = LAPB_INVALUE;
|
|
if (parms->t1 < 1 || parms->t2 < 1 || parms->n2 < 1)
|
|
goto out_put;
|
|
|
|
if (lapb->state == LAPB_STATE_0) {
|
|
if (parms->mode & LAPB_EXTENDED) {
|
|
if (parms->window < 1 || parms->window > 127)
|
|
goto out_put;
|
|
} else {
|
|
if (parms->window < 1 || parms->window > 7)
|
|
goto out_put;
|
|
}
|
|
lapb->mode = parms->mode;
|
|
lapb->window = parms->window;
|
|
}
|
|
|
|
lapb->t1 = parms->t1 * HZ;
|
|
lapb->t2 = parms->t2 * HZ;
|
|
lapb->n2 = parms->n2;
|
|
|
|
rc = LAPB_OK;
|
|
out_put:
|
|
lapb_put(lapb);
|
|
out:
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_setparms);
|
|
|
|
int lapb_connect_request(struct net_device *dev)
|
|
{
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
rc = LAPB_OK;
|
|
if (lapb->state == LAPB_STATE_1)
|
|
goto out_put;
|
|
|
|
rc = LAPB_CONNECTED;
|
|
if (lapb->state == LAPB_STATE_3 || lapb->state == LAPB_STATE_4)
|
|
goto out_put;
|
|
|
|
lapb_establish_data_link(lapb);
|
|
|
|
lapb_dbg(0, "(%p) S0 -> S1\n", lapb->dev);
|
|
lapb->state = LAPB_STATE_1;
|
|
|
|
rc = LAPB_OK;
|
|
out_put:
|
|
lapb_put(lapb);
|
|
out:
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_connect_request);
|
|
|
|
int lapb_disconnect_request(struct net_device *dev)
|
|
{
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
switch (lapb->state) {
|
|
case LAPB_STATE_0:
|
|
rc = LAPB_NOTCONNECTED;
|
|
goto out_put;
|
|
|
|
case LAPB_STATE_1:
|
|
lapb_dbg(1, "(%p) S1 TX DISC(1)\n", lapb->dev);
|
|
lapb_dbg(0, "(%p) S1 -> S0\n", lapb->dev);
|
|
lapb_send_control(lapb, LAPB_DISC, LAPB_POLLON, LAPB_COMMAND);
|
|
lapb->state = LAPB_STATE_0;
|
|
lapb_start_t1timer(lapb);
|
|
rc = LAPB_NOTCONNECTED;
|
|
goto out_put;
|
|
|
|
case LAPB_STATE_2:
|
|
rc = LAPB_OK;
|
|
goto out_put;
|
|
}
|
|
|
|
lapb_clear_queues(lapb);
|
|
lapb->n2count = 0;
|
|
lapb_send_control(lapb, LAPB_DISC, LAPB_POLLON, LAPB_COMMAND);
|
|
lapb_start_t1timer(lapb);
|
|
lapb_stop_t2timer(lapb);
|
|
lapb->state = LAPB_STATE_2;
|
|
|
|
lapb_dbg(1, "(%p) S3 DISC(1)\n", lapb->dev);
|
|
lapb_dbg(0, "(%p) S3 -> S2\n", lapb->dev);
|
|
|
|
rc = LAPB_OK;
|
|
out_put:
|
|
lapb_put(lapb);
|
|
out:
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_disconnect_request);
|
|
|
|
int lapb_data_request(struct net_device *dev, struct sk_buff *skb)
|
|
{
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
if (!lapb)
|
|
goto out;
|
|
|
|
rc = LAPB_NOTCONNECTED;
|
|
if (lapb->state != LAPB_STATE_3 && lapb->state != LAPB_STATE_4)
|
|
goto out_put;
|
|
|
|
skb_queue_tail(&lapb->write_queue, skb);
|
|
lapb_kick(lapb);
|
|
rc = LAPB_OK;
|
|
out_put:
|
|
lapb_put(lapb);
|
|
out:
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_data_request);
|
|
|
|
int lapb_data_received(struct net_device *dev, struct sk_buff *skb)
|
|
{
|
|
struct lapb_cb *lapb = lapb_devtostruct(dev);
|
|
int rc = LAPB_BADTOKEN;
|
|
|
|
if (lapb) {
|
|
lapb_data_input(lapb, skb);
|
|
lapb_put(lapb);
|
|
rc = LAPB_OK;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
EXPORT_SYMBOL(lapb_data_received);
|
|
|
|
void lapb_connect_confirmation(struct lapb_cb *lapb, int reason)
|
|
{
|
|
if (lapb->callbacks->connect_confirmation)
|
|
lapb->callbacks->connect_confirmation(lapb->dev, reason);
|
|
}
|
|
|
|
void lapb_connect_indication(struct lapb_cb *lapb, int reason)
|
|
{
|
|
if (lapb->callbacks->connect_indication)
|
|
lapb->callbacks->connect_indication(lapb->dev, reason);
|
|
}
|
|
|
|
void lapb_disconnect_confirmation(struct lapb_cb *lapb, int reason)
|
|
{
|
|
if (lapb->callbacks->disconnect_confirmation)
|
|
lapb->callbacks->disconnect_confirmation(lapb->dev, reason);
|
|
}
|
|
|
|
void lapb_disconnect_indication(struct lapb_cb *lapb, int reason)
|
|
{
|
|
if (lapb->callbacks->disconnect_indication)
|
|
lapb->callbacks->disconnect_indication(lapb->dev, reason);
|
|
}
|
|
|
|
int lapb_data_indication(struct lapb_cb *lapb, struct sk_buff *skb)
|
|
{
|
|
if (lapb->callbacks->data_indication)
|
|
return lapb->callbacks->data_indication(lapb->dev, skb);
|
|
|
|
kfree_skb(skb);
|
|
return NET_RX_SUCCESS; /* For now; must be != NET_RX_DROP */
|
|
}
|
|
|
|
int lapb_data_transmit(struct lapb_cb *lapb, struct sk_buff *skb)
|
|
{
|
|
int used = 0;
|
|
|
|
if (lapb->callbacks->data_transmit) {
|
|
lapb->callbacks->data_transmit(lapb->dev, skb);
|
|
used = 1;
|
|
}
|
|
|
|
return used;
|
|
}
|
|
|
|
static int __init lapb_init(void)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static void __exit lapb_exit(void)
|
|
{
|
|
WARN_ON(!list_empty(&lapb_list));
|
|
}
|
|
|
|
MODULE_AUTHOR("Jonathan Naylor <g4klx@g4klx.demon.co.uk>");
|
|
MODULE_DESCRIPTION("The X.25 Link Access Procedure B link layer protocol");
|
|
MODULE_LICENSE("GPL");
|
|
|
|
module_init(lapb_init);
|
|
module_exit(lapb_exit);
|