]> git.ipfire.org Git - thirdparty/kernel/stable.git/blob - net/iucv/af_iucv.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide
[thirdparty/kernel/stable.git] / net / iucv / af_iucv.c
1 /*
2 * IUCV protocol stack for Linux on zSeries
3 *
4 * Copyright IBM Corp. 2006, 2009
5 *
6 * Author(s): Jennifer Hunt <jenhunt@us.ibm.com>
7 * Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
8 * PM functions:
9 * Ursula Braun <ursula.braun@de.ibm.com>
10 */
11
12 #define KMSG_COMPONENT "af_iucv"
13 #define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
14
15 #include <linux/module.h>
16 #include <linux/types.h>
17 #include <linux/list.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/sched/signal.h>
21 #include <linux/slab.h>
22 #include <linux/skbuff.h>
23 #include <linux/init.h>
24 #include <linux/poll.h>
25 #include <linux/security.h>
26 #include <net/sock.h>
27 #include <asm/ebcdic.h>
28 #include <asm/cpcmd.h>
29 #include <linux/kmod.h>
30
31 #include <net/iucv/af_iucv.h>
32
33 #define VERSION "1.2"
34
35 static char iucv_userid[80];
36
37 static const struct proto_ops iucv_sock_ops;
38
39 static struct proto iucv_proto = {
40 .name = "AF_IUCV",
41 .owner = THIS_MODULE,
42 .obj_size = sizeof(struct iucv_sock),
43 };
44
45 static struct iucv_interface *pr_iucv;
46
47 /* special AF_IUCV IPRM messages */
48 static const u8 iprm_shutdown[8] =
49 {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01};
50
51 #define TRGCLS_SIZE FIELD_SIZEOF(struct iucv_message, class)
52
53 #define __iucv_sock_wait(sk, condition, timeo, ret) \
54 do { \
55 DEFINE_WAIT(__wait); \
56 long __timeo = timeo; \
57 ret = 0; \
58 prepare_to_wait(sk_sleep(sk), &__wait, TASK_INTERRUPTIBLE); \
59 while (!(condition)) { \
60 if (!__timeo) { \
61 ret = -EAGAIN; \
62 break; \
63 } \
64 if (signal_pending(current)) { \
65 ret = sock_intr_errno(__timeo); \
66 break; \
67 } \
68 release_sock(sk); \
69 __timeo = schedule_timeout(__timeo); \
70 lock_sock(sk); \
71 ret = sock_error(sk); \
72 if (ret) \
73 break; \
74 } \
75 finish_wait(sk_sleep(sk), &__wait); \
76 } while (0)
77
78 #define iucv_sock_wait(sk, condition, timeo) \
79 ({ \
80 int __ret = 0; \
81 if (!(condition)) \
82 __iucv_sock_wait(sk, condition, timeo, __ret); \
83 __ret; \
84 })
85
86 static void iucv_sock_kill(struct sock *sk);
87 static void iucv_sock_close(struct sock *sk);
88 static void iucv_sever_path(struct sock *, int);
89
90 static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
91 struct packet_type *pt, struct net_device *orig_dev);
92 static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
93 struct sk_buff *skb, u8 flags);
94 static void afiucv_hs_callback_txnotify(struct sk_buff *, enum iucv_tx_notify);
95
96 /* Call Back functions */
97 static void iucv_callback_rx(struct iucv_path *, struct iucv_message *);
98 static void iucv_callback_txdone(struct iucv_path *, struct iucv_message *);
99 static void iucv_callback_connack(struct iucv_path *, u8 *);
100 static int iucv_callback_connreq(struct iucv_path *, u8 *, u8 *);
101 static void iucv_callback_connrej(struct iucv_path *, u8 *);
102 static void iucv_callback_shutdown(struct iucv_path *, u8 *);
103
104 static struct iucv_sock_list iucv_sk_list = {
105 .lock = __RW_LOCK_UNLOCKED(iucv_sk_list.lock),
106 .autobind_name = ATOMIC_INIT(0)
107 };
108
109 static struct iucv_handler af_iucv_handler = {
110 .path_pending = iucv_callback_connreq,
111 .path_complete = iucv_callback_connack,
112 .path_severed = iucv_callback_connrej,
113 .message_pending = iucv_callback_rx,
114 .message_complete = iucv_callback_txdone,
115 .path_quiesced = iucv_callback_shutdown,
116 };
117
118 static inline void high_nmcpy(unsigned char *dst, char *src)
119 {
120 memcpy(dst, src, 8);
121 }
122
123 static inline void low_nmcpy(unsigned char *dst, char *src)
124 {
125 memcpy(&dst[8], src, 8);
126 }
127
128 static int afiucv_pm_prepare(struct device *dev)
129 {
130 #ifdef CONFIG_PM_DEBUG
131 printk(KERN_WARNING "afiucv_pm_prepare\n");
132 #endif
133 return 0;
134 }
135
136 static void afiucv_pm_complete(struct device *dev)
137 {
138 #ifdef CONFIG_PM_DEBUG
139 printk(KERN_WARNING "afiucv_pm_complete\n");
140 #endif
141 }
142
143 /**
144 * afiucv_pm_freeze() - Freeze PM callback
145 * @dev: AFIUCV dummy device
146 *
147 * Sever all established IUCV communication pathes
148 */
149 static int afiucv_pm_freeze(struct device *dev)
150 {
151 struct iucv_sock *iucv;
152 struct sock *sk;
153
154 #ifdef CONFIG_PM_DEBUG
155 printk(KERN_WARNING "afiucv_pm_freeze\n");
156 #endif
157 read_lock(&iucv_sk_list.lock);
158 sk_for_each(sk, &iucv_sk_list.head) {
159 iucv = iucv_sk(sk);
160 switch (sk->sk_state) {
161 case IUCV_DISCONN:
162 case IUCV_CLOSING:
163 case IUCV_CONNECTED:
164 iucv_sever_path(sk, 0);
165 break;
166 case IUCV_OPEN:
167 case IUCV_BOUND:
168 case IUCV_LISTEN:
169 case IUCV_CLOSED:
170 default:
171 break;
172 }
173 skb_queue_purge(&iucv->send_skb_q);
174 skb_queue_purge(&iucv->backlog_skb_q);
175 }
176 read_unlock(&iucv_sk_list.lock);
177 return 0;
178 }
179
180 /**
181 * afiucv_pm_restore_thaw() - Thaw and restore PM callback
182 * @dev: AFIUCV dummy device
183 *
184 * socket clean up after freeze
185 */
186 static int afiucv_pm_restore_thaw(struct device *dev)
187 {
188 struct sock *sk;
189
190 #ifdef CONFIG_PM_DEBUG
191 printk(KERN_WARNING "afiucv_pm_restore_thaw\n");
192 #endif
193 read_lock(&iucv_sk_list.lock);
194 sk_for_each(sk, &iucv_sk_list.head) {
195 switch (sk->sk_state) {
196 case IUCV_CONNECTED:
197 sk->sk_err = EPIPE;
198 sk->sk_state = IUCV_DISCONN;
199 sk->sk_state_change(sk);
200 break;
201 case IUCV_DISCONN:
202 case IUCV_CLOSING:
203 case IUCV_LISTEN:
204 case IUCV_BOUND:
205 case IUCV_OPEN:
206 default:
207 break;
208 }
209 }
210 read_unlock(&iucv_sk_list.lock);
211 return 0;
212 }
213
214 static const struct dev_pm_ops afiucv_pm_ops = {
215 .prepare = afiucv_pm_prepare,
216 .complete = afiucv_pm_complete,
217 .freeze = afiucv_pm_freeze,
218 .thaw = afiucv_pm_restore_thaw,
219 .restore = afiucv_pm_restore_thaw,
220 };
221
222 static struct device_driver af_iucv_driver = {
223 .owner = THIS_MODULE,
224 .name = "afiucv",
225 .bus = NULL,
226 .pm = &afiucv_pm_ops,
227 };
228
229 /* dummy device used as trigger for PM functions */
230 static struct device *af_iucv_dev;
231
232 /**
233 * iucv_msg_length() - Returns the length of an iucv message.
234 * @msg: Pointer to struct iucv_message, MUST NOT be NULL
235 *
236 * The function returns the length of the specified iucv message @msg of data
237 * stored in a buffer and of data stored in the parameter list (PRMDATA).
238 *
239 * For IUCV_IPRMDATA, AF_IUCV uses the following convention to transport socket
240 * data:
241 * PRMDATA[0..6] socket data (max 7 bytes);
242 * PRMDATA[7] socket data length value (len is 0xff - PRMDATA[7])
243 *
244 * The socket data length is computed by subtracting the socket data length
245 * value from 0xFF.
246 * If the socket data len is greater 7, then PRMDATA can be used for special
247 * notifications (see iucv_sock_shutdown); and further,
248 * if the socket data len is > 7, the function returns 8.
249 *
250 * Use this function to allocate socket buffers to store iucv message data.
251 */
252 static inline size_t iucv_msg_length(struct iucv_message *msg)
253 {
254 size_t datalen;
255
256 if (msg->flags & IUCV_IPRMDATA) {
257 datalen = 0xff - msg->rmmsg[7];
258 return (datalen < 8) ? datalen : 8;
259 }
260 return msg->length;
261 }
262
263 /**
264 * iucv_sock_in_state() - check for specific states
265 * @sk: sock structure
266 * @state: first iucv sk state
267 * @state: second iucv sk state
268 *
269 * Returns true if the socket in either in the first or second state.
270 */
271 static int iucv_sock_in_state(struct sock *sk, int state, int state2)
272 {
273 return (sk->sk_state == state || sk->sk_state == state2);
274 }
275
276 /**
277 * iucv_below_msglim() - function to check if messages can be sent
278 * @sk: sock structure
279 *
280 * Returns true if the send queue length is lower than the message limit.
281 * Always returns true if the socket is not connected (no iucv path for
282 * checking the message limit).
283 */
284 static inline int iucv_below_msglim(struct sock *sk)
285 {
286 struct iucv_sock *iucv = iucv_sk(sk);
287
288 if (sk->sk_state != IUCV_CONNECTED)
289 return 1;
290 if (iucv->transport == AF_IUCV_TRANS_IUCV)
291 return (skb_queue_len(&iucv->send_skb_q) < iucv->path->msglim);
292 else
293 return ((atomic_read(&iucv->msg_sent) < iucv->msglimit_peer) &&
294 (atomic_read(&iucv->pendings) <= 0));
295 }
296
297 /**
298 * iucv_sock_wake_msglim() - Wake up thread waiting on msg limit
299 */
300 static void iucv_sock_wake_msglim(struct sock *sk)
301 {
302 struct socket_wq *wq;
303
304 rcu_read_lock();
305 wq = rcu_dereference(sk->sk_wq);
306 if (skwq_has_sleeper(wq))
307 wake_up_interruptible_all(&wq->wait);
308 sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
309 rcu_read_unlock();
310 }
311
312 /**
313 * afiucv_hs_send() - send a message through HiperSockets transport
314 */
315 static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
316 struct sk_buff *skb, u8 flags)
317 {
318 struct iucv_sock *iucv = iucv_sk(sock);
319 struct af_iucv_trans_hdr *phs_hdr;
320 struct sk_buff *nskb;
321 int err, confirm_recv = 0;
322
323 phs_hdr = skb_push(skb, sizeof(*phs_hdr));
324 memset(phs_hdr, 0, sizeof(*phs_hdr));
325 skb_reset_network_header(skb);
326
327 phs_hdr->magic = ETH_P_AF_IUCV;
328 phs_hdr->version = 1;
329 phs_hdr->flags = flags;
330 if (flags == AF_IUCV_FLAG_SYN)
331 phs_hdr->window = iucv->msglimit;
332 else if ((flags == AF_IUCV_FLAG_WIN) || !flags) {
333 confirm_recv = atomic_read(&iucv->msg_recv);
334 phs_hdr->window = confirm_recv;
335 if (confirm_recv)
336 phs_hdr->flags = phs_hdr->flags | AF_IUCV_FLAG_WIN;
337 }
338 memcpy(phs_hdr->destUserID, iucv->dst_user_id, 8);
339 memcpy(phs_hdr->destAppName, iucv->dst_name, 8);
340 memcpy(phs_hdr->srcUserID, iucv->src_user_id, 8);
341 memcpy(phs_hdr->srcAppName, iucv->src_name, 8);
342 ASCEBC(phs_hdr->destUserID, sizeof(phs_hdr->destUserID));
343 ASCEBC(phs_hdr->destAppName, sizeof(phs_hdr->destAppName));
344 ASCEBC(phs_hdr->srcUserID, sizeof(phs_hdr->srcUserID));
345 ASCEBC(phs_hdr->srcAppName, sizeof(phs_hdr->srcAppName));
346 if (imsg)
347 memcpy(&phs_hdr->iucv_hdr, imsg, sizeof(struct iucv_message));
348
349 skb_push(skb, ETH_HLEN);
350 memset(skb->data, 0, ETH_HLEN);
351
352 skb->dev = iucv->hs_dev;
353 if (!skb->dev) {
354 err = -ENODEV;
355 goto err_free;
356 }
357 if (!(skb->dev->flags & IFF_UP) || !netif_carrier_ok(skb->dev)) {
358 err = -ENETDOWN;
359 goto err_free;
360 }
361 if (skb->len > skb->dev->mtu) {
362 if (sock->sk_type == SOCK_SEQPACKET) {
363 err = -EMSGSIZE;
364 goto err_free;
365 }
366 skb_trim(skb, skb->dev->mtu);
367 }
368 skb->protocol = cpu_to_be16(ETH_P_AF_IUCV);
369 nskb = skb_clone(skb, GFP_ATOMIC);
370 if (!nskb) {
371 err = -ENOMEM;
372 goto err_free;
373 }
374
375 skb_queue_tail(&iucv->send_skb_q, nskb);
376 err = dev_queue_xmit(skb);
377 if (net_xmit_eval(err)) {
378 skb_unlink(nskb, &iucv->send_skb_q);
379 kfree_skb(nskb);
380 } else {
381 atomic_sub(confirm_recv, &iucv->msg_recv);
382 WARN_ON(atomic_read(&iucv->msg_recv) < 0);
383 }
384 return net_xmit_eval(err);
385
386 err_free:
387 kfree_skb(skb);
388 return err;
389 }
390
391 static struct sock *__iucv_get_sock_by_name(char *nm)
392 {
393 struct sock *sk;
394
395 sk_for_each(sk, &iucv_sk_list.head)
396 if (!memcmp(&iucv_sk(sk)->src_name, nm, 8))
397 return sk;
398
399 return NULL;
400 }
401
402 static void iucv_sock_destruct(struct sock *sk)
403 {
404 skb_queue_purge(&sk->sk_receive_queue);
405 skb_queue_purge(&sk->sk_error_queue);
406
407 sk_mem_reclaim(sk);
408
409 if (!sock_flag(sk, SOCK_DEAD)) {
410 pr_err("Attempt to release alive iucv socket %p\n", sk);
411 return;
412 }
413
414 WARN_ON(atomic_read(&sk->sk_rmem_alloc));
415 WARN_ON(refcount_read(&sk->sk_wmem_alloc));
416 WARN_ON(sk->sk_wmem_queued);
417 WARN_ON(sk->sk_forward_alloc);
418 }
419
420 /* Cleanup Listen */
421 static void iucv_sock_cleanup_listen(struct sock *parent)
422 {
423 struct sock *sk;
424
425 /* Close non-accepted connections */
426 while ((sk = iucv_accept_dequeue(parent, NULL))) {
427 iucv_sock_close(sk);
428 iucv_sock_kill(sk);
429 }
430
431 parent->sk_state = IUCV_CLOSED;
432 }
433
434 /* Kill socket (only if zapped and orphaned) */
435 static void iucv_sock_kill(struct sock *sk)
436 {
437 if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
438 return;
439
440 iucv_sock_unlink(&iucv_sk_list, sk);
441 sock_set_flag(sk, SOCK_DEAD);
442 sock_put(sk);
443 }
444
445 /* Terminate an IUCV path */
446 static void iucv_sever_path(struct sock *sk, int with_user_data)
447 {
448 unsigned char user_data[16];
449 struct iucv_sock *iucv = iucv_sk(sk);
450 struct iucv_path *path = iucv->path;
451
452 if (iucv->path) {
453 iucv->path = NULL;
454 if (with_user_data) {
455 low_nmcpy(user_data, iucv->src_name);
456 high_nmcpy(user_data, iucv->dst_name);
457 ASCEBC(user_data, sizeof(user_data));
458 pr_iucv->path_sever(path, user_data);
459 } else
460 pr_iucv->path_sever(path, NULL);
461 iucv_path_free(path);
462 }
463 }
464
465 /* Send controlling flags through an IUCV socket for HIPER transport */
466 static int iucv_send_ctrl(struct sock *sk, u8 flags)
467 {
468 int err = 0;
469 int blen;
470 struct sk_buff *skb;
471 u8 shutdown = 0;
472
473 blen = sizeof(struct af_iucv_trans_hdr) + ETH_HLEN;
474 if (sk->sk_shutdown & SEND_SHUTDOWN) {
475 /* controlling flags should be sent anyway */
476 shutdown = sk->sk_shutdown;
477 sk->sk_shutdown &= RCV_SHUTDOWN;
478 }
479 skb = sock_alloc_send_skb(sk, blen, 1, &err);
480 if (skb) {
481 skb_reserve(skb, blen);
482 err = afiucv_hs_send(NULL, sk, skb, flags);
483 }
484 if (shutdown)
485 sk->sk_shutdown = shutdown;
486 return err;
487 }
488
489 /* Close an IUCV socket */
490 static void iucv_sock_close(struct sock *sk)
491 {
492 struct iucv_sock *iucv = iucv_sk(sk);
493 unsigned long timeo;
494 int err = 0;
495
496 lock_sock(sk);
497
498 switch (sk->sk_state) {
499 case IUCV_LISTEN:
500 iucv_sock_cleanup_listen(sk);
501 break;
502
503 case IUCV_CONNECTED:
504 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
505 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
506 sk->sk_state = IUCV_DISCONN;
507 sk->sk_state_change(sk);
508 }
509 case IUCV_DISCONN: /* fall through */
510 sk->sk_state = IUCV_CLOSING;
511 sk->sk_state_change(sk);
512
513 if (!err && !skb_queue_empty(&iucv->send_skb_q)) {
514 if (sock_flag(sk, SOCK_LINGER) && sk->sk_lingertime)
515 timeo = sk->sk_lingertime;
516 else
517 timeo = IUCV_DISCONN_TIMEOUT;
518 iucv_sock_wait(sk,
519 iucv_sock_in_state(sk, IUCV_CLOSED, 0),
520 timeo);
521 }
522
523 case IUCV_CLOSING: /* fall through */
524 sk->sk_state = IUCV_CLOSED;
525 sk->sk_state_change(sk);
526
527 sk->sk_err = ECONNRESET;
528 sk->sk_state_change(sk);
529
530 skb_queue_purge(&iucv->send_skb_q);
531 skb_queue_purge(&iucv->backlog_skb_q);
532
533 default: /* fall through */
534 iucv_sever_path(sk, 1);
535 }
536
537 if (iucv->hs_dev) {
538 dev_put(iucv->hs_dev);
539 iucv->hs_dev = NULL;
540 sk->sk_bound_dev_if = 0;
541 }
542
543 /* mark socket for deletion by iucv_sock_kill() */
544 sock_set_flag(sk, SOCK_ZAPPED);
545
546 release_sock(sk);
547 }
548
549 static void iucv_sock_init(struct sock *sk, struct sock *parent)
550 {
551 if (parent) {
552 sk->sk_type = parent->sk_type;
553 security_sk_clone(parent, sk);
554 }
555 }
556
557 static struct sock *iucv_sock_alloc(struct socket *sock, int proto, gfp_t prio, int kern)
558 {
559 struct sock *sk;
560 struct iucv_sock *iucv;
561
562 sk = sk_alloc(&init_net, PF_IUCV, prio, &iucv_proto, kern);
563 if (!sk)
564 return NULL;
565 iucv = iucv_sk(sk);
566
567 sock_init_data(sock, sk);
568 INIT_LIST_HEAD(&iucv->accept_q);
569 spin_lock_init(&iucv->accept_q_lock);
570 skb_queue_head_init(&iucv->send_skb_q);
571 INIT_LIST_HEAD(&iucv->message_q.list);
572 spin_lock_init(&iucv->message_q.lock);
573 skb_queue_head_init(&iucv->backlog_skb_q);
574 iucv->send_tag = 0;
575 atomic_set(&iucv->pendings, 0);
576 iucv->flags = 0;
577 iucv->msglimit = 0;
578 atomic_set(&iucv->msg_sent, 0);
579 atomic_set(&iucv->msg_recv, 0);
580 iucv->path = NULL;
581 iucv->sk_txnotify = afiucv_hs_callback_txnotify;
582 memset(&iucv->src_user_id , 0, 32);
583 if (pr_iucv)
584 iucv->transport = AF_IUCV_TRANS_IUCV;
585 else
586 iucv->transport = AF_IUCV_TRANS_HIPER;
587
588 sk->sk_destruct = iucv_sock_destruct;
589 sk->sk_sndtimeo = IUCV_CONN_TIMEOUT;
590 sk->sk_allocation = GFP_DMA;
591
592 sock_reset_flag(sk, SOCK_ZAPPED);
593
594 sk->sk_protocol = proto;
595 sk->sk_state = IUCV_OPEN;
596
597 iucv_sock_link(&iucv_sk_list, sk);
598 return sk;
599 }
600
601 /* Create an IUCV socket */
602 static int iucv_sock_create(struct net *net, struct socket *sock, int protocol,
603 int kern)
604 {
605 struct sock *sk;
606
607 if (protocol && protocol != PF_IUCV)
608 return -EPROTONOSUPPORT;
609
610 sock->state = SS_UNCONNECTED;
611
612 switch (sock->type) {
613 case SOCK_STREAM:
614 sock->ops = &iucv_sock_ops;
615 break;
616 case SOCK_SEQPACKET:
617 /* currently, proto ops can handle both sk types */
618 sock->ops = &iucv_sock_ops;
619 break;
620 default:
621 return -ESOCKTNOSUPPORT;
622 }
623
624 sk = iucv_sock_alloc(sock, protocol, GFP_KERNEL, kern);
625 if (!sk)
626 return -ENOMEM;
627
628 iucv_sock_init(sk, NULL);
629
630 return 0;
631 }
632
633 void iucv_sock_link(struct iucv_sock_list *l, struct sock *sk)
634 {
635 write_lock_bh(&l->lock);
636 sk_add_node(sk, &l->head);
637 write_unlock_bh(&l->lock);
638 }
639
640 void iucv_sock_unlink(struct iucv_sock_list *l, struct sock *sk)
641 {
642 write_lock_bh(&l->lock);
643 sk_del_node_init(sk);
644 write_unlock_bh(&l->lock);
645 }
646
647 void iucv_accept_enqueue(struct sock *parent, struct sock *sk)
648 {
649 unsigned long flags;
650 struct iucv_sock *par = iucv_sk(parent);
651
652 sock_hold(sk);
653 spin_lock_irqsave(&par->accept_q_lock, flags);
654 list_add_tail(&iucv_sk(sk)->accept_q, &par->accept_q);
655 spin_unlock_irqrestore(&par->accept_q_lock, flags);
656 iucv_sk(sk)->parent = parent;
657 sk_acceptq_added(parent);
658 }
659
660 void iucv_accept_unlink(struct sock *sk)
661 {
662 unsigned long flags;
663 struct iucv_sock *par = iucv_sk(iucv_sk(sk)->parent);
664
665 spin_lock_irqsave(&par->accept_q_lock, flags);
666 list_del_init(&iucv_sk(sk)->accept_q);
667 spin_unlock_irqrestore(&par->accept_q_lock, flags);
668 sk_acceptq_removed(iucv_sk(sk)->parent);
669 iucv_sk(sk)->parent = NULL;
670 sock_put(sk);
671 }
672
673 struct sock *iucv_accept_dequeue(struct sock *parent, struct socket *newsock)
674 {
675 struct iucv_sock *isk, *n;
676 struct sock *sk;
677
678 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
679 sk = (struct sock *) isk;
680 lock_sock(sk);
681
682 if (sk->sk_state == IUCV_CLOSED) {
683 iucv_accept_unlink(sk);
684 release_sock(sk);
685 continue;
686 }
687
688 if (sk->sk_state == IUCV_CONNECTED ||
689 sk->sk_state == IUCV_DISCONN ||
690 !newsock) {
691 iucv_accept_unlink(sk);
692 if (newsock)
693 sock_graft(sk, newsock);
694
695 release_sock(sk);
696 return sk;
697 }
698
699 release_sock(sk);
700 }
701 return NULL;
702 }
703
704 static void __iucv_auto_name(struct iucv_sock *iucv)
705 {
706 char name[12];
707
708 sprintf(name, "%08x", atomic_inc_return(&iucv_sk_list.autobind_name));
709 while (__iucv_get_sock_by_name(name)) {
710 sprintf(name, "%08x",
711 atomic_inc_return(&iucv_sk_list.autobind_name));
712 }
713 memcpy(iucv->src_name, name, 8);
714 }
715
716 /* Bind an unbound socket */
717 static int iucv_sock_bind(struct socket *sock, struct sockaddr *addr,
718 int addr_len)
719 {
720 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
721 struct sock *sk = sock->sk;
722 struct iucv_sock *iucv;
723 int err = 0;
724 struct net_device *dev;
725 char uid[9];
726
727 /* Verify the input sockaddr */
728 if (addr_len < sizeof(struct sockaddr_iucv) ||
729 addr->sa_family != AF_IUCV)
730 return -EINVAL;
731
732 lock_sock(sk);
733 if (sk->sk_state != IUCV_OPEN) {
734 err = -EBADFD;
735 goto done;
736 }
737
738 write_lock_bh(&iucv_sk_list.lock);
739
740 iucv = iucv_sk(sk);
741 if (__iucv_get_sock_by_name(sa->siucv_name)) {
742 err = -EADDRINUSE;
743 goto done_unlock;
744 }
745 if (iucv->path)
746 goto done_unlock;
747
748 /* Bind the socket */
749 if (pr_iucv)
750 if (!memcmp(sa->siucv_user_id, iucv_userid, 8))
751 goto vm_bind; /* VM IUCV transport */
752
753 /* try hiper transport */
754 memcpy(uid, sa->siucv_user_id, sizeof(uid));
755 ASCEBC(uid, 8);
756 rcu_read_lock();
757 for_each_netdev_rcu(&init_net, dev) {
758 if (!memcmp(dev->perm_addr, uid, 8)) {
759 memcpy(iucv->src_user_id, sa->siucv_user_id, 8);
760 /* Check for unitialized siucv_name */
761 if (strncmp(sa->siucv_name, " ", 8) == 0)
762 __iucv_auto_name(iucv);
763 else
764 memcpy(iucv->src_name, sa->siucv_name, 8);
765 sk->sk_bound_dev_if = dev->ifindex;
766 iucv->hs_dev = dev;
767 dev_hold(dev);
768 sk->sk_state = IUCV_BOUND;
769 iucv->transport = AF_IUCV_TRANS_HIPER;
770 if (!iucv->msglimit)
771 iucv->msglimit = IUCV_HIPER_MSGLIM_DEFAULT;
772 rcu_read_unlock();
773 goto done_unlock;
774 }
775 }
776 rcu_read_unlock();
777 vm_bind:
778 if (pr_iucv) {
779 /* use local userid for backward compat */
780 memcpy(iucv->src_name, sa->siucv_name, 8);
781 memcpy(iucv->src_user_id, iucv_userid, 8);
782 sk->sk_state = IUCV_BOUND;
783 iucv->transport = AF_IUCV_TRANS_IUCV;
784 if (!iucv->msglimit)
785 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
786 goto done_unlock;
787 }
788 /* found no dev to bind */
789 err = -ENODEV;
790 done_unlock:
791 /* Release the socket list lock */
792 write_unlock_bh(&iucv_sk_list.lock);
793 done:
794 release_sock(sk);
795 return err;
796 }
797
798 /* Automatically bind an unbound socket */
799 static int iucv_sock_autobind(struct sock *sk)
800 {
801 struct iucv_sock *iucv = iucv_sk(sk);
802 int err = 0;
803
804 if (unlikely(!pr_iucv))
805 return -EPROTO;
806
807 memcpy(iucv->src_user_id, iucv_userid, 8);
808
809 write_lock_bh(&iucv_sk_list.lock);
810 __iucv_auto_name(iucv);
811 write_unlock_bh(&iucv_sk_list.lock);
812
813 if (!iucv->msglimit)
814 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
815
816 return err;
817 }
818
819 static int afiucv_path_connect(struct socket *sock, struct sockaddr *addr)
820 {
821 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
822 struct sock *sk = sock->sk;
823 struct iucv_sock *iucv = iucv_sk(sk);
824 unsigned char user_data[16];
825 int err;
826
827 high_nmcpy(user_data, sa->siucv_name);
828 low_nmcpy(user_data, iucv->src_name);
829 ASCEBC(user_data, sizeof(user_data));
830
831 /* Create path. */
832 iucv->path = iucv_path_alloc(iucv->msglimit,
833 IUCV_IPRMDATA, GFP_KERNEL);
834 if (!iucv->path) {
835 err = -ENOMEM;
836 goto done;
837 }
838 err = pr_iucv->path_connect(iucv->path, &af_iucv_handler,
839 sa->siucv_user_id, NULL, user_data,
840 sk);
841 if (err) {
842 iucv_path_free(iucv->path);
843 iucv->path = NULL;
844 switch (err) {
845 case 0x0b: /* Target communicator is not logged on */
846 err = -ENETUNREACH;
847 break;
848 case 0x0d: /* Max connections for this guest exceeded */
849 case 0x0e: /* Max connections for target guest exceeded */
850 err = -EAGAIN;
851 break;
852 case 0x0f: /* Missing IUCV authorization */
853 err = -EACCES;
854 break;
855 default:
856 err = -ECONNREFUSED;
857 break;
858 }
859 }
860 done:
861 return err;
862 }
863
864 /* Connect an unconnected socket */
865 static int iucv_sock_connect(struct socket *sock, struct sockaddr *addr,
866 int alen, int flags)
867 {
868 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
869 struct sock *sk = sock->sk;
870 struct iucv_sock *iucv = iucv_sk(sk);
871 int err;
872
873 if (alen < sizeof(struct sockaddr_iucv) || addr->sa_family != AF_IUCV)
874 return -EINVAL;
875
876 if (sk->sk_state != IUCV_OPEN && sk->sk_state != IUCV_BOUND)
877 return -EBADFD;
878
879 if (sk->sk_state == IUCV_OPEN &&
880 iucv->transport == AF_IUCV_TRANS_HIPER)
881 return -EBADFD; /* explicit bind required */
882
883 if (sk->sk_type != SOCK_STREAM && sk->sk_type != SOCK_SEQPACKET)
884 return -EINVAL;
885
886 if (sk->sk_state == IUCV_OPEN) {
887 err = iucv_sock_autobind(sk);
888 if (unlikely(err))
889 return err;
890 }
891
892 lock_sock(sk);
893
894 /* Set the destination information */
895 memcpy(iucv->dst_user_id, sa->siucv_user_id, 8);
896 memcpy(iucv->dst_name, sa->siucv_name, 8);
897
898 if (iucv->transport == AF_IUCV_TRANS_HIPER)
899 err = iucv_send_ctrl(sock->sk, AF_IUCV_FLAG_SYN);
900 else
901 err = afiucv_path_connect(sock, addr);
902 if (err)
903 goto done;
904
905 if (sk->sk_state != IUCV_CONNECTED)
906 err = iucv_sock_wait(sk, iucv_sock_in_state(sk, IUCV_CONNECTED,
907 IUCV_DISCONN),
908 sock_sndtimeo(sk, flags & O_NONBLOCK));
909
910 if (sk->sk_state == IUCV_DISCONN || sk->sk_state == IUCV_CLOSED)
911 err = -ECONNREFUSED;
912
913 if (err && iucv->transport == AF_IUCV_TRANS_IUCV)
914 iucv_sever_path(sk, 0);
915
916 done:
917 release_sock(sk);
918 return err;
919 }
920
921 /* Move a socket into listening state. */
922 static int iucv_sock_listen(struct socket *sock, int backlog)
923 {
924 struct sock *sk = sock->sk;
925 int err;
926
927 lock_sock(sk);
928
929 err = -EINVAL;
930 if (sk->sk_state != IUCV_BOUND)
931 goto done;
932
933 if (sock->type != SOCK_STREAM && sock->type != SOCK_SEQPACKET)
934 goto done;
935
936 sk->sk_max_ack_backlog = backlog;
937 sk->sk_ack_backlog = 0;
938 sk->sk_state = IUCV_LISTEN;
939 err = 0;
940
941 done:
942 release_sock(sk);
943 return err;
944 }
945
946 /* Accept a pending connection */
947 static int iucv_sock_accept(struct socket *sock, struct socket *newsock,
948 int flags, bool kern)
949 {
950 DECLARE_WAITQUEUE(wait, current);
951 struct sock *sk = sock->sk, *nsk;
952 long timeo;
953 int err = 0;
954
955 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
956
957 if (sk->sk_state != IUCV_LISTEN) {
958 err = -EBADFD;
959 goto done;
960 }
961
962 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
963
964 /* Wait for an incoming connection */
965 add_wait_queue_exclusive(sk_sleep(sk), &wait);
966 while (!(nsk = iucv_accept_dequeue(sk, newsock))) {
967 set_current_state(TASK_INTERRUPTIBLE);
968 if (!timeo) {
969 err = -EAGAIN;
970 break;
971 }
972
973 release_sock(sk);
974 timeo = schedule_timeout(timeo);
975 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
976
977 if (sk->sk_state != IUCV_LISTEN) {
978 err = -EBADFD;
979 break;
980 }
981
982 if (signal_pending(current)) {
983 err = sock_intr_errno(timeo);
984 break;
985 }
986 }
987
988 set_current_state(TASK_RUNNING);
989 remove_wait_queue(sk_sleep(sk), &wait);
990
991 if (err)
992 goto done;
993
994 newsock->state = SS_CONNECTED;
995
996 done:
997 release_sock(sk);
998 return err;
999 }
1000
1001 static int iucv_sock_getname(struct socket *sock, struct sockaddr *addr,
1002 int peer)
1003 {
1004 struct sockaddr_iucv *siucv = (struct sockaddr_iucv *) addr;
1005 struct sock *sk = sock->sk;
1006 struct iucv_sock *iucv = iucv_sk(sk);
1007
1008 addr->sa_family = AF_IUCV;
1009
1010 if (peer) {
1011 memcpy(siucv->siucv_user_id, iucv->dst_user_id, 8);
1012 memcpy(siucv->siucv_name, iucv->dst_name, 8);
1013 } else {
1014 memcpy(siucv->siucv_user_id, iucv->src_user_id, 8);
1015 memcpy(siucv->siucv_name, iucv->src_name, 8);
1016 }
1017 memset(&siucv->siucv_port, 0, sizeof(siucv->siucv_port));
1018 memset(&siucv->siucv_addr, 0, sizeof(siucv->siucv_addr));
1019 memset(&siucv->siucv_nodeid, 0, sizeof(siucv->siucv_nodeid));
1020
1021 return sizeof(struct sockaddr_iucv);
1022 }
1023
1024 /**
1025 * iucv_send_iprm() - Send socket data in parameter list of an iucv message.
1026 * @path: IUCV path
1027 * @msg: Pointer to a struct iucv_message
1028 * @skb: The socket data to send, skb->len MUST BE <= 7
1029 *
1030 * Send the socket data in the parameter list in the iucv message
1031 * (IUCV_IPRMDATA). The socket data is stored at index 0 to 6 in the parameter
1032 * list and the socket data len at index 7 (last byte).
1033 * See also iucv_msg_length().
1034 *
1035 * Returns the error code from the iucv_message_send() call.
1036 */
1037 static int iucv_send_iprm(struct iucv_path *path, struct iucv_message *msg,
1038 struct sk_buff *skb)
1039 {
1040 u8 prmdata[8];
1041
1042 memcpy(prmdata, (void *) skb->data, skb->len);
1043 prmdata[7] = 0xff - (u8) skb->len;
1044 return pr_iucv->message_send(path, msg, IUCV_IPRMDATA, 0,
1045 (void *) prmdata, 8);
1046 }
1047
1048 static int iucv_sock_sendmsg(struct socket *sock, struct msghdr *msg,
1049 size_t len)
1050 {
1051 struct sock *sk = sock->sk;
1052 struct iucv_sock *iucv = iucv_sk(sk);
1053 size_t headroom = 0;
1054 size_t linear;
1055 struct sk_buff *skb;
1056 struct iucv_message txmsg = {0};
1057 struct cmsghdr *cmsg;
1058 int cmsg_done;
1059 long timeo;
1060 char user_id[9];
1061 char appl_id[9];
1062 int err;
1063 int noblock = msg->msg_flags & MSG_DONTWAIT;
1064
1065 err = sock_error(sk);
1066 if (err)
1067 return err;
1068
1069 if (msg->msg_flags & MSG_OOB)
1070 return -EOPNOTSUPP;
1071
1072 /* SOCK_SEQPACKET: we do not support segmented records */
1073 if (sk->sk_type == SOCK_SEQPACKET && !(msg->msg_flags & MSG_EOR))
1074 return -EOPNOTSUPP;
1075
1076 lock_sock(sk);
1077
1078 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1079 err = -EPIPE;
1080 goto out;
1081 }
1082
1083 /* Return if the socket is not in connected state */
1084 if (sk->sk_state != IUCV_CONNECTED) {
1085 err = -ENOTCONN;
1086 goto out;
1087 }
1088
1089 /* initialize defaults */
1090 cmsg_done = 0; /* check for duplicate headers */
1091 txmsg.class = 0;
1092
1093 /* iterate over control messages */
1094 for_each_cmsghdr(cmsg, msg) {
1095 if (!CMSG_OK(msg, cmsg)) {
1096 err = -EINVAL;
1097 goto out;
1098 }
1099
1100 if (cmsg->cmsg_level != SOL_IUCV)
1101 continue;
1102
1103 if (cmsg->cmsg_type & cmsg_done) {
1104 err = -EINVAL;
1105 goto out;
1106 }
1107 cmsg_done |= cmsg->cmsg_type;
1108
1109 switch (cmsg->cmsg_type) {
1110 case SCM_IUCV_TRGCLS:
1111 if (cmsg->cmsg_len != CMSG_LEN(TRGCLS_SIZE)) {
1112 err = -EINVAL;
1113 goto out;
1114 }
1115
1116 /* set iucv message target class */
1117 memcpy(&txmsg.class,
1118 (void *) CMSG_DATA(cmsg), TRGCLS_SIZE);
1119
1120 break;
1121
1122 default:
1123 err = -EINVAL;
1124 goto out;
1125 }
1126 }
1127
1128 /* allocate one skb for each iucv message:
1129 * this is fine for SOCK_SEQPACKET (unless we want to support
1130 * segmented records using the MSG_EOR flag), but
1131 * for SOCK_STREAM we might want to improve it in future */
1132 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1133 headroom = sizeof(struct af_iucv_trans_hdr) + ETH_HLEN;
1134 linear = len;
1135 } else {
1136 if (len < PAGE_SIZE) {
1137 linear = len;
1138 } else {
1139 /* In nonlinear "classic" iucv skb,
1140 * reserve space for iucv_array
1141 */
1142 headroom = sizeof(struct iucv_array) *
1143 (MAX_SKB_FRAGS + 1);
1144 linear = PAGE_SIZE - headroom;
1145 }
1146 }
1147 skb = sock_alloc_send_pskb(sk, headroom + linear, len - linear,
1148 noblock, &err, 0);
1149 if (!skb)
1150 goto out;
1151 if (headroom)
1152 skb_reserve(skb, headroom);
1153 skb_put(skb, linear);
1154 skb->len = len;
1155 skb->data_len = len - linear;
1156 err = skb_copy_datagram_from_iter(skb, 0, &msg->msg_iter, len);
1157 if (err)
1158 goto fail;
1159
1160 /* wait if outstanding messages for iucv path has reached */
1161 timeo = sock_sndtimeo(sk, noblock);
1162 err = iucv_sock_wait(sk, iucv_below_msglim(sk), timeo);
1163 if (err)
1164 goto fail;
1165
1166 /* return -ECONNRESET if the socket is no longer connected */
1167 if (sk->sk_state != IUCV_CONNECTED) {
1168 err = -ECONNRESET;
1169 goto fail;
1170 }
1171
1172 /* increment and save iucv message tag for msg_completion cbk */
1173 txmsg.tag = iucv->send_tag++;
1174 IUCV_SKB_CB(skb)->tag = txmsg.tag;
1175
1176 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1177 atomic_inc(&iucv->msg_sent);
1178 err = afiucv_hs_send(&txmsg, sk, skb, 0);
1179 if (err) {
1180 atomic_dec(&iucv->msg_sent);
1181 goto out;
1182 }
1183 } else { /* Classic VM IUCV transport */
1184 skb_queue_tail(&iucv->send_skb_q, skb);
1185
1186 if (((iucv->path->flags & IUCV_IPRMDATA) & iucv->flags) &&
1187 skb->len <= 7) {
1188 err = iucv_send_iprm(iucv->path, &txmsg, skb);
1189
1190 /* on success: there is no message_complete callback */
1191 /* for an IPRMDATA msg; remove skb from send queue */
1192 if (err == 0) {
1193 skb_unlink(skb, &iucv->send_skb_q);
1194 kfree_skb(skb);
1195 }
1196
1197 /* this error should never happen since the */
1198 /* IUCV_IPRMDATA path flag is set... sever path */
1199 if (err == 0x15) {
1200 pr_iucv->path_sever(iucv->path, NULL);
1201 skb_unlink(skb, &iucv->send_skb_q);
1202 err = -EPIPE;
1203 goto fail;
1204 }
1205 } else if (skb_is_nonlinear(skb)) {
1206 struct iucv_array *iba = (struct iucv_array *)skb->head;
1207 int i;
1208
1209 /* skip iucv_array lying in the headroom */
1210 iba[0].address = (u32)(addr_t)skb->data;
1211 iba[0].length = (u32)skb_headlen(skb);
1212 for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
1213 skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
1214
1215 iba[i + 1].address =
1216 (u32)(addr_t)skb_frag_address(frag);
1217 iba[i + 1].length = (u32)skb_frag_size(frag);
1218 }
1219 err = pr_iucv->message_send(iucv->path, &txmsg,
1220 IUCV_IPBUFLST, 0,
1221 (void *)iba, skb->len);
1222 } else { /* non-IPRM Linear skb */
1223 err = pr_iucv->message_send(iucv->path, &txmsg,
1224 0, 0, (void *)skb->data, skb->len);
1225 }
1226 if (err) {
1227 if (err == 3) {
1228 user_id[8] = 0;
1229 memcpy(user_id, iucv->dst_user_id, 8);
1230 appl_id[8] = 0;
1231 memcpy(appl_id, iucv->dst_name, 8);
1232 pr_err(
1233 "Application %s on z/VM guest %s exceeds message limit\n",
1234 appl_id, user_id);
1235 err = -EAGAIN;
1236 } else {
1237 err = -EPIPE;
1238 }
1239 skb_unlink(skb, &iucv->send_skb_q);
1240 goto fail;
1241 }
1242 }
1243
1244 release_sock(sk);
1245 return len;
1246
1247 fail:
1248 kfree_skb(skb);
1249 out:
1250 release_sock(sk);
1251 return err;
1252 }
1253
1254 static struct sk_buff *alloc_iucv_recv_skb(unsigned long len)
1255 {
1256 size_t headroom, linear;
1257 struct sk_buff *skb;
1258 int err;
1259
1260 if (len < PAGE_SIZE) {
1261 headroom = 0;
1262 linear = len;
1263 } else {
1264 headroom = sizeof(struct iucv_array) * (MAX_SKB_FRAGS + 1);
1265 linear = PAGE_SIZE - headroom;
1266 }
1267 skb = alloc_skb_with_frags(headroom + linear, len - linear,
1268 0, &err, GFP_ATOMIC | GFP_DMA);
1269 WARN_ONCE(!skb,
1270 "alloc of recv iucv skb len=%lu failed with errcode=%d\n",
1271 len, err);
1272 if (skb) {
1273 if (headroom)
1274 skb_reserve(skb, headroom);
1275 skb_put(skb, linear);
1276 skb->len = len;
1277 skb->data_len = len - linear;
1278 }
1279 return skb;
1280 }
1281
1282 /* iucv_process_message() - Receive a single outstanding IUCV message
1283 *
1284 * Locking: must be called with message_q.lock held
1285 */
1286 static void iucv_process_message(struct sock *sk, struct sk_buff *skb,
1287 struct iucv_path *path,
1288 struct iucv_message *msg)
1289 {
1290 int rc;
1291 unsigned int len;
1292
1293 len = iucv_msg_length(msg);
1294
1295 /* store msg target class in the second 4 bytes of skb ctrl buffer */
1296 /* Note: the first 4 bytes are reserved for msg tag */
1297 IUCV_SKB_CB(skb)->class = msg->class;
1298
1299 /* check for special IPRM messages (e.g. iucv_sock_shutdown) */
1300 if ((msg->flags & IUCV_IPRMDATA) && len > 7) {
1301 if (memcmp(msg->rmmsg, iprm_shutdown, 8) == 0) {
1302 skb->data = NULL;
1303 skb->len = 0;
1304 }
1305 } else {
1306 if (skb_is_nonlinear(skb)) {
1307 struct iucv_array *iba = (struct iucv_array *)skb->head;
1308 int i;
1309
1310 iba[0].address = (u32)(addr_t)skb->data;
1311 iba[0].length = (u32)skb_headlen(skb);
1312 for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
1313 skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
1314
1315 iba[i + 1].address =
1316 (u32)(addr_t)skb_frag_address(frag);
1317 iba[i + 1].length = (u32)skb_frag_size(frag);
1318 }
1319 rc = pr_iucv->message_receive(path, msg,
1320 IUCV_IPBUFLST,
1321 (void *)iba, len, NULL);
1322 } else {
1323 rc = pr_iucv->message_receive(path, msg,
1324 msg->flags & IUCV_IPRMDATA,
1325 skb->data, len, NULL);
1326 }
1327 if (rc) {
1328 kfree_skb(skb);
1329 return;
1330 }
1331 WARN_ON_ONCE(skb->len != len);
1332 }
1333
1334 IUCV_SKB_CB(skb)->offset = 0;
1335 if (sk_filter(sk, skb)) {
1336 atomic_inc(&sk->sk_drops); /* skb rejected by filter */
1337 kfree_skb(skb);
1338 return;
1339 }
1340 if (__sock_queue_rcv_skb(sk, skb)) /* handle rcv queue full */
1341 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
1342 }
1343
1344 /* iucv_process_message_q() - Process outstanding IUCV messages
1345 *
1346 * Locking: must be called with message_q.lock held
1347 */
1348 static void iucv_process_message_q(struct sock *sk)
1349 {
1350 struct iucv_sock *iucv = iucv_sk(sk);
1351 struct sk_buff *skb;
1352 struct sock_msg_q *p, *n;
1353
1354 list_for_each_entry_safe(p, n, &iucv->message_q.list, list) {
1355 skb = alloc_iucv_recv_skb(iucv_msg_length(&p->msg));
1356 if (!skb)
1357 break;
1358 iucv_process_message(sk, skb, p->path, &p->msg);
1359 list_del(&p->list);
1360 kfree(p);
1361 if (!skb_queue_empty(&iucv->backlog_skb_q))
1362 break;
1363 }
1364 }
1365
1366 static int iucv_sock_recvmsg(struct socket *sock, struct msghdr *msg,
1367 size_t len, int flags)
1368 {
1369 int noblock = flags & MSG_DONTWAIT;
1370 struct sock *sk = sock->sk;
1371 struct iucv_sock *iucv = iucv_sk(sk);
1372 unsigned int copied, rlen;
1373 struct sk_buff *skb, *rskb, *cskb;
1374 int err = 0;
1375 u32 offset;
1376
1377 if ((sk->sk_state == IUCV_DISCONN) &&
1378 skb_queue_empty(&iucv->backlog_skb_q) &&
1379 skb_queue_empty(&sk->sk_receive_queue) &&
1380 list_empty(&iucv->message_q.list))
1381 return 0;
1382
1383 if (flags & (MSG_OOB))
1384 return -EOPNOTSUPP;
1385
1386 /* receive/dequeue next skb:
1387 * the function understands MSG_PEEK and, thus, does not dequeue skb */
1388 skb = skb_recv_datagram(sk, flags, noblock, &err);
1389 if (!skb) {
1390 if (sk->sk_shutdown & RCV_SHUTDOWN)
1391 return 0;
1392 return err;
1393 }
1394
1395 offset = IUCV_SKB_CB(skb)->offset;
1396 rlen = skb->len - offset; /* real length of skb */
1397 copied = min_t(unsigned int, rlen, len);
1398 if (!rlen)
1399 sk->sk_shutdown = sk->sk_shutdown | RCV_SHUTDOWN;
1400
1401 cskb = skb;
1402 if (skb_copy_datagram_msg(cskb, offset, msg, copied)) {
1403 if (!(flags & MSG_PEEK))
1404 skb_queue_head(&sk->sk_receive_queue, skb);
1405 return -EFAULT;
1406 }
1407
1408 /* SOCK_SEQPACKET: set MSG_TRUNC if recv buf size is too small */
1409 if (sk->sk_type == SOCK_SEQPACKET) {
1410 if (copied < rlen)
1411 msg->msg_flags |= MSG_TRUNC;
1412 /* each iucv message contains a complete record */
1413 msg->msg_flags |= MSG_EOR;
1414 }
1415
1416 /* create control message to store iucv msg target class:
1417 * get the trgcls from the control buffer of the skb due to
1418 * fragmentation of original iucv message. */
1419 err = put_cmsg(msg, SOL_IUCV, SCM_IUCV_TRGCLS,
1420 sizeof(IUCV_SKB_CB(skb)->class),
1421 (void *)&IUCV_SKB_CB(skb)->class);
1422 if (err) {
1423 if (!(flags & MSG_PEEK))
1424 skb_queue_head(&sk->sk_receive_queue, skb);
1425 return err;
1426 }
1427
1428 /* Mark read part of skb as used */
1429 if (!(flags & MSG_PEEK)) {
1430
1431 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
1432 if (sk->sk_type == SOCK_STREAM) {
1433 if (copied < rlen) {
1434 IUCV_SKB_CB(skb)->offset = offset + copied;
1435 skb_queue_head(&sk->sk_receive_queue, skb);
1436 goto done;
1437 }
1438 }
1439
1440 kfree_skb(skb);
1441 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1442 atomic_inc(&iucv->msg_recv);
1443 if (atomic_read(&iucv->msg_recv) > iucv->msglimit) {
1444 WARN_ON(1);
1445 iucv_sock_close(sk);
1446 return -EFAULT;
1447 }
1448 }
1449
1450 /* Queue backlog skbs */
1451 spin_lock_bh(&iucv->message_q.lock);
1452 rskb = skb_dequeue(&iucv->backlog_skb_q);
1453 while (rskb) {
1454 IUCV_SKB_CB(rskb)->offset = 0;
1455 if (__sock_queue_rcv_skb(sk, rskb)) {
1456 /* handle rcv queue full */
1457 skb_queue_head(&iucv->backlog_skb_q,
1458 rskb);
1459 break;
1460 }
1461 rskb = skb_dequeue(&iucv->backlog_skb_q);
1462 }
1463 if (skb_queue_empty(&iucv->backlog_skb_q)) {
1464 if (!list_empty(&iucv->message_q.list))
1465 iucv_process_message_q(sk);
1466 if (atomic_read(&iucv->msg_recv) >=
1467 iucv->msglimit / 2) {
1468 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_WIN);
1469 if (err) {
1470 sk->sk_state = IUCV_DISCONN;
1471 sk->sk_state_change(sk);
1472 }
1473 }
1474 }
1475 spin_unlock_bh(&iucv->message_q.lock);
1476 }
1477
1478 done:
1479 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
1480 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
1481 copied = rlen;
1482
1483 return copied;
1484 }
1485
1486 static inline __poll_t iucv_accept_poll(struct sock *parent)
1487 {
1488 struct iucv_sock *isk, *n;
1489 struct sock *sk;
1490
1491 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
1492 sk = (struct sock *) isk;
1493
1494 if (sk->sk_state == IUCV_CONNECTED)
1495 return EPOLLIN | EPOLLRDNORM;
1496 }
1497
1498 return 0;
1499 }
1500
1501 __poll_t iucv_sock_poll(struct file *file, struct socket *sock,
1502 poll_table *wait)
1503 {
1504 struct sock *sk = sock->sk;
1505 __poll_t mask = 0;
1506
1507 sock_poll_wait(file, sock, wait);
1508
1509 if (sk->sk_state == IUCV_LISTEN)
1510 return iucv_accept_poll(sk);
1511
1512 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
1513 mask |= EPOLLERR |
1514 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
1515
1516 if (sk->sk_shutdown & RCV_SHUTDOWN)
1517 mask |= EPOLLRDHUP;
1518
1519 if (sk->sk_shutdown == SHUTDOWN_MASK)
1520 mask |= EPOLLHUP;
1521
1522 if (!skb_queue_empty(&sk->sk_receive_queue) ||
1523 (sk->sk_shutdown & RCV_SHUTDOWN))
1524 mask |= EPOLLIN | EPOLLRDNORM;
1525
1526 if (sk->sk_state == IUCV_CLOSED)
1527 mask |= EPOLLHUP;
1528
1529 if (sk->sk_state == IUCV_DISCONN)
1530 mask |= EPOLLIN;
1531
1532 if (sock_writeable(sk) && iucv_below_msglim(sk))
1533 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
1534 else
1535 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
1536
1537 return mask;
1538 }
1539
1540 static int iucv_sock_shutdown(struct socket *sock, int how)
1541 {
1542 struct sock *sk = sock->sk;
1543 struct iucv_sock *iucv = iucv_sk(sk);
1544 struct iucv_message txmsg;
1545 int err = 0;
1546
1547 how++;
1548
1549 if ((how & ~SHUTDOWN_MASK) || !how)
1550 return -EINVAL;
1551
1552 lock_sock(sk);
1553 switch (sk->sk_state) {
1554 case IUCV_LISTEN:
1555 case IUCV_DISCONN:
1556 case IUCV_CLOSING:
1557 case IUCV_CLOSED:
1558 err = -ENOTCONN;
1559 goto fail;
1560 default:
1561 break;
1562 }
1563
1564 if (how == SEND_SHUTDOWN || how == SHUTDOWN_MASK) {
1565 if (iucv->transport == AF_IUCV_TRANS_IUCV) {
1566 txmsg.class = 0;
1567 txmsg.tag = 0;
1568 err = pr_iucv->message_send(iucv->path, &txmsg,
1569 IUCV_IPRMDATA, 0, (void *) iprm_shutdown, 8);
1570 if (err) {
1571 switch (err) {
1572 case 1:
1573 err = -ENOTCONN;
1574 break;
1575 case 2:
1576 err = -ECONNRESET;
1577 break;
1578 default:
1579 err = -ENOTCONN;
1580 break;
1581 }
1582 }
1583 } else
1584 iucv_send_ctrl(sk, AF_IUCV_FLAG_SHT);
1585 }
1586
1587 sk->sk_shutdown |= how;
1588 if (how == RCV_SHUTDOWN || how == SHUTDOWN_MASK) {
1589 if ((iucv->transport == AF_IUCV_TRANS_IUCV) &&
1590 iucv->path) {
1591 err = pr_iucv->path_quiesce(iucv->path, NULL);
1592 if (err)
1593 err = -ENOTCONN;
1594 /* skb_queue_purge(&sk->sk_receive_queue); */
1595 }
1596 skb_queue_purge(&sk->sk_receive_queue);
1597 }
1598
1599 /* Wake up anyone sleeping in poll */
1600 sk->sk_state_change(sk);
1601
1602 fail:
1603 release_sock(sk);
1604 return err;
1605 }
1606
1607 static int iucv_sock_release(struct socket *sock)
1608 {
1609 struct sock *sk = sock->sk;
1610 int err = 0;
1611
1612 if (!sk)
1613 return 0;
1614
1615 iucv_sock_close(sk);
1616
1617 sock_orphan(sk);
1618 iucv_sock_kill(sk);
1619 return err;
1620 }
1621
1622 /* getsockopt and setsockopt */
1623 static int iucv_sock_setsockopt(struct socket *sock, int level, int optname,
1624 char __user *optval, unsigned int optlen)
1625 {
1626 struct sock *sk = sock->sk;
1627 struct iucv_sock *iucv = iucv_sk(sk);
1628 int val;
1629 int rc;
1630
1631 if (level != SOL_IUCV)
1632 return -ENOPROTOOPT;
1633
1634 if (optlen < sizeof(int))
1635 return -EINVAL;
1636
1637 if (get_user(val, (int __user *) optval))
1638 return -EFAULT;
1639
1640 rc = 0;
1641
1642 lock_sock(sk);
1643 switch (optname) {
1644 case SO_IPRMDATA_MSG:
1645 if (val)
1646 iucv->flags |= IUCV_IPRMDATA;
1647 else
1648 iucv->flags &= ~IUCV_IPRMDATA;
1649 break;
1650 case SO_MSGLIMIT:
1651 switch (sk->sk_state) {
1652 case IUCV_OPEN:
1653 case IUCV_BOUND:
1654 if (val < 1 || val > (u16)(~0))
1655 rc = -EINVAL;
1656 else
1657 iucv->msglimit = val;
1658 break;
1659 default:
1660 rc = -EINVAL;
1661 break;
1662 }
1663 break;
1664 default:
1665 rc = -ENOPROTOOPT;
1666 break;
1667 }
1668 release_sock(sk);
1669
1670 return rc;
1671 }
1672
1673 static int iucv_sock_getsockopt(struct socket *sock, int level, int optname,
1674 char __user *optval, int __user *optlen)
1675 {
1676 struct sock *sk = sock->sk;
1677 struct iucv_sock *iucv = iucv_sk(sk);
1678 unsigned int val;
1679 int len;
1680
1681 if (level != SOL_IUCV)
1682 return -ENOPROTOOPT;
1683
1684 if (get_user(len, optlen))
1685 return -EFAULT;
1686
1687 if (len < 0)
1688 return -EINVAL;
1689
1690 len = min_t(unsigned int, len, sizeof(int));
1691
1692 switch (optname) {
1693 case SO_IPRMDATA_MSG:
1694 val = (iucv->flags & IUCV_IPRMDATA) ? 1 : 0;
1695 break;
1696 case SO_MSGLIMIT:
1697 lock_sock(sk);
1698 val = (iucv->path != NULL) ? iucv->path->msglim /* connected */
1699 : iucv->msglimit; /* default */
1700 release_sock(sk);
1701 break;
1702 case SO_MSGSIZE:
1703 if (sk->sk_state == IUCV_OPEN)
1704 return -EBADFD;
1705 val = (iucv->hs_dev) ? iucv->hs_dev->mtu -
1706 sizeof(struct af_iucv_trans_hdr) - ETH_HLEN :
1707 0x7fffffff;
1708 break;
1709 default:
1710 return -ENOPROTOOPT;
1711 }
1712
1713 if (put_user(len, optlen))
1714 return -EFAULT;
1715 if (copy_to_user(optval, &val, len))
1716 return -EFAULT;
1717
1718 return 0;
1719 }
1720
1721
1722 /* Callback wrappers - called from iucv base support */
1723 static int iucv_callback_connreq(struct iucv_path *path,
1724 u8 ipvmid[8], u8 ipuser[16])
1725 {
1726 unsigned char user_data[16];
1727 unsigned char nuser_data[16];
1728 unsigned char src_name[8];
1729 struct sock *sk, *nsk;
1730 struct iucv_sock *iucv, *niucv;
1731 int err;
1732
1733 memcpy(src_name, ipuser, 8);
1734 EBCASC(src_name, 8);
1735 /* Find out if this path belongs to af_iucv. */
1736 read_lock(&iucv_sk_list.lock);
1737 iucv = NULL;
1738 sk = NULL;
1739 sk_for_each(sk, &iucv_sk_list.head)
1740 if (sk->sk_state == IUCV_LISTEN &&
1741 !memcmp(&iucv_sk(sk)->src_name, src_name, 8)) {
1742 /*
1743 * Found a listening socket with
1744 * src_name == ipuser[0-7].
1745 */
1746 iucv = iucv_sk(sk);
1747 break;
1748 }
1749 read_unlock(&iucv_sk_list.lock);
1750 if (!iucv)
1751 /* No socket found, not one of our paths. */
1752 return -EINVAL;
1753
1754 bh_lock_sock(sk);
1755
1756 /* Check if parent socket is listening */
1757 low_nmcpy(user_data, iucv->src_name);
1758 high_nmcpy(user_data, iucv->dst_name);
1759 ASCEBC(user_data, sizeof(user_data));
1760 if (sk->sk_state != IUCV_LISTEN) {
1761 err = pr_iucv->path_sever(path, user_data);
1762 iucv_path_free(path);
1763 goto fail;
1764 }
1765
1766 /* Check for backlog size */
1767 if (sk_acceptq_is_full(sk)) {
1768 err = pr_iucv->path_sever(path, user_data);
1769 iucv_path_free(path);
1770 goto fail;
1771 }
1772
1773 /* Create the new socket */
1774 nsk = iucv_sock_alloc(NULL, sk->sk_type, GFP_ATOMIC, 0);
1775 if (!nsk) {
1776 err = pr_iucv->path_sever(path, user_data);
1777 iucv_path_free(path);
1778 goto fail;
1779 }
1780
1781 niucv = iucv_sk(nsk);
1782 iucv_sock_init(nsk, sk);
1783
1784 /* Set the new iucv_sock */
1785 memcpy(niucv->dst_name, ipuser + 8, 8);
1786 EBCASC(niucv->dst_name, 8);
1787 memcpy(niucv->dst_user_id, ipvmid, 8);
1788 memcpy(niucv->src_name, iucv->src_name, 8);
1789 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1790 niucv->path = path;
1791
1792 /* Call iucv_accept */
1793 high_nmcpy(nuser_data, ipuser + 8);
1794 memcpy(nuser_data + 8, niucv->src_name, 8);
1795 ASCEBC(nuser_data + 8, 8);
1796
1797 /* set message limit for path based on msglimit of accepting socket */
1798 niucv->msglimit = iucv->msglimit;
1799 path->msglim = iucv->msglimit;
1800 err = pr_iucv->path_accept(path, &af_iucv_handler, nuser_data, nsk);
1801 if (err) {
1802 iucv_sever_path(nsk, 1);
1803 iucv_sock_kill(nsk);
1804 goto fail;
1805 }
1806
1807 iucv_accept_enqueue(sk, nsk);
1808
1809 /* Wake up accept */
1810 nsk->sk_state = IUCV_CONNECTED;
1811 sk->sk_data_ready(sk);
1812 err = 0;
1813 fail:
1814 bh_unlock_sock(sk);
1815 return 0;
1816 }
1817
1818 static void iucv_callback_connack(struct iucv_path *path, u8 ipuser[16])
1819 {
1820 struct sock *sk = path->private;
1821
1822 sk->sk_state = IUCV_CONNECTED;
1823 sk->sk_state_change(sk);
1824 }
1825
1826 static void iucv_callback_rx(struct iucv_path *path, struct iucv_message *msg)
1827 {
1828 struct sock *sk = path->private;
1829 struct iucv_sock *iucv = iucv_sk(sk);
1830 struct sk_buff *skb;
1831 struct sock_msg_q *save_msg;
1832 int len;
1833
1834 if (sk->sk_shutdown & RCV_SHUTDOWN) {
1835 pr_iucv->message_reject(path, msg);
1836 return;
1837 }
1838
1839 spin_lock(&iucv->message_q.lock);
1840
1841 if (!list_empty(&iucv->message_q.list) ||
1842 !skb_queue_empty(&iucv->backlog_skb_q))
1843 goto save_message;
1844
1845 len = atomic_read(&sk->sk_rmem_alloc);
1846 len += SKB_TRUESIZE(iucv_msg_length(msg));
1847 if (len > sk->sk_rcvbuf)
1848 goto save_message;
1849
1850 skb = alloc_iucv_recv_skb(iucv_msg_length(msg));
1851 if (!skb)
1852 goto save_message;
1853
1854 iucv_process_message(sk, skb, path, msg);
1855 goto out_unlock;
1856
1857 save_message:
1858 save_msg = kzalloc(sizeof(struct sock_msg_q), GFP_ATOMIC | GFP_DMA);
1859 if (!save_msg)
1860 goto out_unlock;
1861 save_msg->path = path;
1862 save_msg->msg = *msg;
1863
1864 list_add_tail(&save_msg->list, &iucv->message_q.list);
1865
1866 out_unlock:
1867 spin_unlock(&iucv->message_q.lock);
1868 }
1869
1870 static void iucv_callback_txdone(struct iucv_path *path,
1871 struct iucv_message *msg)
1872 {
1873 struct sock *sk = path->private;
1874 struct sk_buff *this = NULL;
1875 struct sk_buff_head *list = &iucv_sk(sk)->send_skb_q;
1876 struct sk_buff *list_skb;
1877 unsigned long flags;
1878
1879 bh_lock_sock(sk);
1880
1881 spin_lock_irqsave(&list->lock, flags);
1882 skb_queue_walk(list, list_skb) {
1883 if (msg->tag == IUCV_SKB_CB(list_skb)->tag) {
1884 this = list_skb;
1885 break;
1886 }
1887 }
1888 if (this)
1889 __skb_unlink(this, list);
1890 spin_unlock_irqrestore(&list->lock, flags);
1891
1892 if (this) {
1893 kfree_skb(this);
1894 /* wake up any process waiting for sending */
1895 iucv_sock_wake_msglim(sk);
1896 }
1897
1898 if (sk->sk_state == IUCV_CLOSING) {
1899 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
1900 sk->sk_state = IUCV_CLOSED;
1901 sk->sk_state_change(sk);
1902 }
1903 }
1904 bh_unlock_sock(sk);
1905
1906 }
1907
1908 static void iucv_callback_connrej(struct iucv_path *path, u8 ipuser[16])
1909 {
1910 struct sock *sk = path->private;
1911
1912 if (sk->sk_state == IUCV_CLOSED)
1913 return;
1914
1915 bh_lock_sock(sk);
1916 iucv_sever_path(sk, 1);
1917 sk->sk_state = IUCV_DISCONN;
1918
1919 sk->sk_state_change(sk);
1920 bh_unlock_sock(sk);
1921 }
1922
1923 /* called if the other communication side shuts down its RECV direction;
1924 * in turn, the callback sets SEND_SHUTDOWN to disable sending of data.
1925 */
1926 static void iucv_callback_shutdown(struct iucv_path *path, u8 ipuser[16])
1927 {
1928 struct sock *sk = path->private;
1929
1930 bh_lock_sock(sk);
1931 if (sk->sk_state != IUCV_CLOSED) {
1932 sk->sk_shutdown |= SEND_SHUTDOWN;
1933 sk->sk_state_change(sk);
1934 }
1935 bh_unlock_sock(sk);
1936 }
1937
1938 /***************** HiperSockets transport callbacks ********************/
1939 static void afiucv_swap_src_dest(struct sk_buff *skb)
1940 {
1941 struct af_iucv_trans_hdr *trans_hdr = iucv_trans_hdr(skb);
1942 char tmpID[8];
1943 char tmpName[8];
1944
1945 ASCEBC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
1946 ASCEBC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
1947 ASCEBC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
1948 ASCEBC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
1949 memcpy(tmpID, trans_hdr->srcUserID, 8);
1950 memcpy(tmpName, trans_hdr->srcAppName, 8);
1951 memcpy(trans_hdr->srcUserID, trans_hdr->destUserID, 8);
1952 memcpy(trans_hdr->srcAppName, trans_hdr->destAppName, 8);
1953 memcpy(trans_hdr->destUserID, tmpID, 8);
1954 memcpy(trans_hdr->destAppName, tmpName, 8);
1955 skb_push(skb, ETH_HLEN);
1956 memset(skb->data, 0, ETH_HLEN);
1957 }
1958
1959 /**
1960 * afiucv_hs_callback_syn - react on received SYN
1961 **/
1962 static int afiucv_hs_callback_syn(struct sock *sk, struct sk_buff *skb)
1963 {
1964 struct af_iucv_trans_hdr *trans_hdr = iucv_trans_hdr(skb);
1965 struct sock *nsk;
1966 struct iucv_sock *iucv, *niucv;
1967 int err;
1968
1969 iucv = iucv_sk(sk);
1970 if (!iucv) {
1971 /* no sock - connection refused */
1972 afiucv_swap_src_dest(skb);
1973 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1974 err = dev_queue_xmit(skb);
1975 goto out;
1976 }
1977
1978 nsk = iucv_sock_alloc(NULL, sk->sk_type, GFP_ATOMIC, 0);
1979 bh_lock_sock(sk);
1980 if ((sk->sk_state != IUCV_LISTEN) ||
1981 sk_acceptq_is_full(sk) ||
1982 !nsk) {
1983 /* error on server socket - connection refused */
1984 afiucv_swap_src_dest(skb);
1985 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1986 err = dev_queue_xmit(skb);
1987 iucv_sock_kill(nsk);
1988 bh_unlock_sock(sk);
1989 goto out;
1990 }
1991
1992 niucv = iucv_sk(nsk);
1993 iucv_sock_init(nsk, sk);
1994 niucv->transport = AF_IUCV_TRANS_HIPER;
1995 niucv->msglimit = iucv->msglimit;
1996 if (!trans_hdr->window)
1997 niucv->msglimit_peer = IUCV_HIPER_MSGLIM_DEFAULT;
1998 else
1999 niucv->msglimit_peer = trans_hdr->window;
2000 memcpy(niucv->dst_name, trans_hdr->srcAppName, 8);
2001 memcpy(niucv->dst_user_id, trans_hdr->srcUserID, 8);
2002 memcpy(niucv->src_name, iucv->src_name, 8);
2003 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
2004 nsk->sk_bound_dev_if = sk->sk_bound_dev_if;
2005 niucv->hs_dev = iucv->hs_dev;
2006 dev_hold(niucv->hs_dev);
2007 afiucv_swap_src_dest(skb);
2008 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK;
2009 trans_hdr->window = niucv->msglimit;
2010 /* if receiver acks the xmit connection is established */
2011 err = dev_queue_xmit(skb);
2012 if (!err) {
2013 iucv_accept_enqueue(sk, nsk);
2014 nsk->sk_state = IUCV_CONNECTED;
2015 sk->sk_data_ready(sk);
2016 } else
2017 iucv_sock_kill(nsk);
2018 bh_unlock_sock(sk);
2019
2020 out:
2021 return NET_RX_SUCCESS;
2022 }
2023
2024 /**
2025 * afiucv_hs_callback_synack() - react on received SYN-ACK
2026 **/
2027 static int afiucv_hs_callback_synack(struct sock *sk, struct sk_buff *skb)
2028 {
2029 struct iucv_sock *iucv = iucv_sk(sk);
2030
2031 if (!iucv)
2032 goto out;
2033 if (sk->sk_state != IUCV_BOUND)
2034 goto out;
2035 bh_lock_sock(sk);
2036 iucv->msglimit_peer = iucv_trans_hdr(skb)->window;
2037 sk->sk_state = IUCV_CONNECTED;
2038 sk->sk_state_change(sk);
2039 bh_unlock_sock(sk);
2040 out:
2041 kfree_skb(skb);
2042 return NET_RX_SUCCESS;
2043 }
2044
2045 /**
2046 * afiucv_hs_callback_synfin() - react on received SYN_FIN
2047 **/
2048 static int afiucv_hs_callback_synfin(struct sock *sk, struct sk_buff *skb)
2049 {
2050 struct iucv_sock *iucv = iucv_sk(sk);
2051
2052 if (!iucv)
2053 goto out;
2054 if (sk->sk_state != IUCV_BOUND)
2055 goto out;
2056 bh_lock_sock(sk);
2057 sk->sk_state = IUCV_DISCONN;
2058 sk->sk_state_change(sk);
2059 bh_unlock_sock(sk);
2060 out:
2061 kfree_skb(skb);
2062 return NET_RX_SUCCESS;
2063 }
2064
2065 /**
2066 * afiucv_hs_callback_fin() - react on received FIN
2067 **/
2068 static int afiucv_hs_callback_fin(struct sock *sk, struct sk_buff *skb)
2069 {
2070 struct iucv_sock *iucv = iucv_sk(sk);
2071
2072 /* other end of connection closed */
2073 if (!iucv)
2074 goto out;
2075 bh_lock_sock(sk);
2076 if (sk->sk_state == IUCV_CONNECTED) {
2077 sk->sk_state = IUCV_DISCONN;
2078 sk->sk_state_change(sk);
2079 }
2080 bh_unlock_sock(sk);
2081 out:
2082 kfree_skb(skb);
2083 return NET_RX_SUCCESS;
2084 }
2085
2086 /**
2087 * afiucv_hs_callback_win() - react on received WIN
2088 **/
2089 static int afiucv_hs_callback_win(struct sock *sk, struct sk_buff *skb)
2090 {
2091 struct iucv_sock *iucv = iucv_sk(sk);
2092
2093 if (!iucv)
2094 return NET_RX_SUCCESS;
2095
2096 if (sk->sk_state != IUCV_CONNECTED)
2097 return NET_RX_SUCCESS;
2098
2099 atomic_sub(iucv_trans_hdr(skb)->window, &iucv->msg_sent);
2100 iucv_sock_wake_msglim(sk);
2101 return NET_RX_SUCCESS;
2102 }
2103
2104 /**
2105 * afiucv_hs_callback_rx() - react on received data
2106 **/
2107 static int afiucv_hs_callback_rx(struct sock *sk, struct sk_buff *skb)
2108 {
2109 struct iucv_sock *iucv = iucv_sk(sk);
2110
2111 if (!iucv) {
2112 kfree_skb(skb);
2113 return NET_RX_SUCCESS;
2114 }
2115
2116 if (sk->sk_state != IUCV_CONNECTED) {
2117 kfree_skb(skb);
2118 return NET_RX_SUCCESS;
2119 }
2120
2121 if (sk->sk_shutdown & RCV_SHUTDOWN) {
2122 kfree_skb(skb);
2123 return NET_RX_SUCCESS;
2124 }
2125
2126 /* write stuff from iucv_msg to skb cb */
2127 skb_pull(skb, sizeof(struct af_iucv_trans_hdr));
2128 skb_reset_transport_header(skb);
2129 skb_reset_network_header(skb);
2130 IUCV_SKB_CB(skb)->offset = 0;
2131 if (sk_filter(sk, skb)) {
2132 atomic_inc(&sk->sk_drops); /* skb rejected by filter */
2133 kfree_skb(skb);
2134 return NET_RX_SUCCESS;
2135 }
2136
2137 spin_lock(&iucv->message_q.lock);
2138 if (skb_queue_empty(&iucv->backlog_skb_q)) {
2139 if (__sock_queue_rcv_skb(sk, skb))
2140 /* handle rcv queue full */
2141 skb_queue_tail(&iucv->backlog_skb_q, skb);
2142 } else
2143 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
2144 spin_unlock(&iucv->message_q.lock);
2145 return NET_RX_SUCCESS;
2146 }
2147
2148 /**
2149 * afiucv_hs_rcv() - base function for arriving data through HiperSockets
2150 * transport
2151 * called from netif RX softirq
2152 **/
2153 static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
2154 struct packet_type *pt, struct net_device *orig_dev)
2155 {
2156 struct sock *sk;
2157 struct iucv_sock *iucv;
2158 struct af_iucv_trans_hdr *trans_hdr;
2159 int err = NET_RX_SUCCESS;
2160 char nullstring[8];
2161
2162 if (!pskb_may_pull(skb, sizeof(*trans_hdr))) {
2163 WARN_ONCE(1, "AF_IUCV failed to receive skb, len=%u", skb->len);
2164 kfree_skb(skb);
2165 return NET_RX_SUCCESS;
2166 }
2167
2168 trans_hdr = iucv_trans_hdr(skb);
2169 EBCASC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
2170 EBCASC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
2171 EBCASC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
2172 EBCASC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
2173 memset(nullstring, 0, sizeof(nullstring));
2174 iucv = NULL;
2175 sk = NULL;
2176 read_lock(&iucv_sk_list.lock);
2177 sk_for_each(sk, &iucv_sk_list.head) {
2178 if (trans_hdr->flags == AF_IUCV_FLAG_SYN) {
2179 if ((!memcmp(&iucv_sk(sk)->src_name,
2180 trans_hdr->destAppName, 8)) &&
2181 (!memcmp(&iucv_sk(sk)->src_user_id,
2182 trans_hdr->destUserID, 8)) &&
2183 (!memcmp(&iucv_sk(sk)->dst_name, nullstring, 8)) &&
2184 (!memcmp(&iucv_sk(sk)->dst_user_id,
2185 nullstring, 8))) {
2186 iucv = iucv_sk(sk);
2187 break;
2188 }
2189 } else {
2190 if ((!memcmp(&iucv_sk(sk)->src_name,
2191 trans_hdr->destAppName, 8)) &&
2192 (!memcmp(&iucv_sk(sk)->src_user_id,
2193 trans_hdr->destUserID, 8)) &&
2194 (!memcmp(&iucv_sk(sk)->dst_name,
2195 trans_hdr->srcAppName, 8)) &&
2196 (!memcmp(&iucv_sk(sk)->dst_user_id,
2197 trans_hdr->srcUserID, 8))) {
2198 iucv = iucv_sk(sk);
2199 break;
2200 }
2201 }
2202 }
2203 read_unlock(&iucv_sk_list.lock);
2204 if (!iucv)
2205 sk = NULL;
2206
2207 /* no sock
2208 how should we send with no sock
2209 1) send without sock no send rc checking?
2210 2) introduce default sock to handle this cases
2211
2212 SYN -> send SYN|ACK in good case, send SYN|FIN in bad case
2213 data -> send FIN
2214 SYN|ACK, SYN|FIN, FIN -> no action? */
2215
2216 switch (trans_hdr->flags) {
2217 case AF_IUCV_FLAG_SYN:
2218 /* connect request */
2219 err = afiucv_hs_callback_syn(sk, skb);
2220 break;
2221 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK):
2222 /* connect request confirmed */
2223 err = afiucv_hs_callback_synack(sk, skb);
2224 break;
2225 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN):
2226 /* connect request refused */
2227 err = afiucv_hs_callback_synfin(sk, skb);
2228 break;
2229 case (AF_IUCV_FLAG_FIN):
2230 /* close request */
2231 err = afiucv_hs_callback_fin(sk, skb);
2232 break;
2233 case (AF_IUCV_FLAG_WIN):
2234 err = afiucv_hs_callback_win(sk, skb);
2235 if (skb->len == sizeof(struct af_iucv_trans_hdr)) {
2236 kfree_skb(skb);
2237 break;
2238 }
2239 /* fall through and receive non-zero length data */
2240 case (AF_IUCV_FLAG_SHT):
2241 /* shutdown request */
2242 /* fall through and receive zero length data */
2243 case 0:
2244 /* plain data frame */
2245 IUCV_SKB_CB(skb)->class = trans_hdr->iucv_hdr.class;
2246 err = afiucv_hs_callback_rx(sk, skb);
2247 break;
2248 default:
2249 kfree_skb(skb);
2250 }
2251
2252 return err;
2253 }
2254
2255 /**
2256 * afiucv_hs_callback_txnotify() - handle send notifcations from HiperSockets
2257 * transport
2258 **/
2259 static void afiucv_hs_callback_txnotify(struct sk_buff *skb,
2260 enum iucv_tx_notify n)
2261 {
2262 struct sock *isk = skb->sk;
2263 struct sock *sk = NULL;
2264 struct iucv_sock *iucv = NULL;
2265 struct sk_buff_head *list;
2266 struct sk_buff *list_skb;
2267 struct sk_buff *nskb;
2268 unsigned long flags;
2269
2270 read_lock_irqsave(&iucv_sk_list.lock, flags);
2271 sk_for_each(sk, &iucv_sk_list.head)
2272 if (sk == isk) {
2273 iucv = iucv_sk(sk);
2274 break;
2275 }
2276 read_unlock_irqrestore(&iucv_sk_list.lock, flags);
2277
2278 if (!iucv || sock_flag(sk, SOCK_ZAPPED))
2279 return;
2280
2281 list = &iucv->send_skb_q;
2282 spin_lock_irqsave(&list->lock, flags);
2283 skb_queue_walk_safe(list, list_skb, nskb) {
2284 if (skb_shinfo(list_skb) == skb_shinfo(skb)) {
2285 switch (n) {
2286 case TX_NOTIFY_OK:
2287 __skb_unlink(list_skb, list);
2288 kfree_skb(list_skb);
2289 iucv_sock_wake_msglim(sk);
2290 break;
2291 case TX_NOTIFY_PENDING:
2292 atomic_inc(&iucv->pendings);
2293 break;
2294 case TX_NOTIFY_DELAYED_OK:
2295 __skb_unlink(list_skb, list);
2296 atomic_dec(&iucv->pendings);
2297 if (atomic_read(&iucv->pendings) <= 0)
2298 iucv_sock_wake_msglim(sk);
2299 kfree_skb(list_skb);
2300 break;
2301 case TX_NOTIFY_UNREACHABLE:
2302 case TX_NOTIFY_DELAYED_UNREACHABLE:
2303 case TX_NOTIFY_TPQFULL: /* not yet used */
2304 case TX_NOTIFY_GENERALERROR:
2305 case TX_NOTIFY_DELAYED_GENERALERROR:
2306 __skb_unlink(list_skb, list);
2307 kfree_skb(list_skb);
2308 if (sk->sk_state == IUCV_CONNECTED) {
2309 sk->sk_state = IUCV_DISCONN;
2310 sk->sk_state_change(sk);
2311 }
2312 break;
2313 }
2314 break;
2315 }
2316 }
2317 spin_unlock_irqrestore(&list->lock, flags);
2318
2319 if (sk->sk_state == IUCV_CLOSING) {
2320 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
2321 sk->sk_state = IUCV_CLOSED;
2322 sk->sk_state_change(sk);
2323 }
2324 }
2325
2326 }
2327
2328 /*
2329 * afiucv_netdev_event: handle netdev notifier chain events
2330 */
2331 static int afiucv_netdev_event(struct notifier_block *this,
2332 unsigned long event, void *ptr)
2333 {
2334 struct net_device *event_dev = netdev_notifier_info_to_dev(ptr);
2335 struct sock *sk;
2336 struct iucv_sock *iucv;
2337
2338 switch (event) {
2339 case NETDEV_REBOOT:
2340 case NETDEV_GOING_DOWN:
2341 sk_for_each(sk, &iucv_sk_list.head) {
2342 iucv = iucv_sk(sk);
2343 if ((iucv->hs_dev == event_dev) &&
2344 (sk->sk_state == IUCV_CONNECTED)) {
2345 if (event == NETDEV_GOING_DOWN)
2346 iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
2347 sk->sk_state = IUCV_DISCONN;
2348 sk->sk_state_change(sk);
2349 }
2350 }
2351 break;
2352 case NETDEV_DOWN:
2353 case NETDEV_UNREGISTER:
2354 default:
2355 break;
2356 }
2357 return NOTIFY_DONE;
2358 }
2359
2360 static struct notifier_block afiucv_netdev_notifier = {
2361 .notifier_call = afiucv_netdev_event,
2362 };
2363
2364 static const struct proto_ops iucv_sock_ops = {
2365 .family = PF_IUCV,
2366 .owner = THIS_MODULE,
2367 .release = iucv_sock_release,
2368 .bind = iucv_sock_bind,
2369 .connect = iucv_sock_connect,
2370 .listen = iucv_sock_listen,
2371 .accept = iucv_sock_accept,
2372 .getname = iucv_sock_getname,
2373 .sendmsg = iucv_sock_sendmsg,
2374 .recvmsg = iucv_sock_recvmsg,
2375 .poll = iucv_sock_poll,
2376 .ioctl = sock_no_ioctl,
2377 .mmap = sock_no_mmap,
2378 .socketpair = sock_no_socketpair,
2379 .shutdown = iucv_sock_shutdown,
2380 .setsockopt = iucv_sock_setsockopt,
2381 .getsockopt = iucv_sock_getsockopt,
2382 };
2383
2384 static const struct net_proto_family iucv_sock_family_ops = {
2385 .family = AF_IUCV,
2386 .owner = THIS_MODULE,
2387 .create = iucv_sock_create,
2388 };
2389
2390 static struct packet_type iucv_packet_type = {
2391 .type = cpu_to_be16(ETH_P_AF_IUCV),
2392 .func = afiucv_hs_rcv,
2393 };
2394
2395 static int afiucv_iucv_init(void)
2396 {
2397 int err;
2398
2399 err = pr_iucv->iucv_register(&af_iucv_handler, 0);
2400 if (err)
2401 goto out;
2402 /* establish dummy device */
2403 af_iucv_driver.bus = pr_iucv->bus;
2404 err = driver_register(&af_iucv_driver);
2405 if (err)
2406 goto out_iucv;
2407 af_iucv_dev = kzalloc(sizeof(struct device), GFP_KERNEL);
2408 if (!af_iucv_dev) {
2409 err = -ENOMEM;
2410 goto out_driver;
2411 }
2412 dev_set_name(af_iucv_dev, "af_iucv");
2413 af_iucv_dev->bus = pr_iucv->bus;
2414 af_iucv_dev->parent = pr_iucv->root;
2415 af_iucv_dev->release = (void (*)(struct device *))kfree;
2416 af_iucv_dev->driver = &af_iucv_driver;
2417 err = device_register(af_iucv_dev);
2418 if (err)
2419 goto out_iucv_dev;
2420 return 0;
2421
2422 out_iucv_dev:
2423 put_device(af_iucv_dev);
2424 out_driver:
2425 driver_unregister(&af_iucv_driver);
2426 out_iucv:
2427 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2428 out:
2429 return err;
2430 }
2431
2432 static int __init afiucv_init(void)
2433 {
2434 int err;
2435
2436 if (MACHINE_IS_VM) {
2437 cpcmd("QUERY USERID", iucv_userid, sizeof(iucv_userid), &err);
2438 if (unlikely(err)) {
2439 WARN_ON(err);
2440 err = -EPROTONOSUPPORT;
2441 goto out;
2442 }
2443
2444 pr_iucv = try_then_request_module(symbol_get(iucv_if), "iucv");
2445 if (!pr_iucv) {
2446 printk(KERN_WARNING "iucv_if lookup failed\n");
2447 memset(&iucv_userid, 0, sizeof(iucv_userid));
2448 }
2449 } else {
2450 memset(&iucv_userid, 0, sizeof(iucv_userid));
2451 pr_iucv = NULL;
2452 }
2453
2454 err = proto_register(&iucv_proto, 0);
2455 if (err)
2456 goto out;
2457 err = sock_register(&iucv_sock_family_ops);
2458 if (err)
2459 goto out_proto;
2460
2461 if (pr_iucv) {
2462 err = afiucv_iucv_init();
2463 if (err)
2464 goto out_sock;
2465 } else
2466 register_netdevice_notifier(&afiucv_netdev_notifier);
2467 dev_add_pack(&iucv_packet_type);
2468 return 0;
2469
2470 out_sock:
2471 sock_unregister(PF_IUCV);
2472 out_proto:
2473 proto_unregister(&iucv_proto);
2474 out:
2475 if (pr_iucv)
2476 symbol_put(iucv_if);
2477 return err;
2478 }
2479
2480 static void __exit afiucv_exit(void)
2481 {
2482 if (pr_iucv) {
2483 device_unregister(af_iucv_dev);
2484 driver_unregister(&af_iucv_driver);
2485 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2486 symbol_put(iucv_if);
2487 } else
2488 unregister_netdevice_notifier(&afiucv_netdev_notifier);
2489 dev_remove_pack(&iucv_packet_type);
2490 sock_unregister(PF_IUCV);
2491 proto_unregister(&iucv_proto);
2492 }
2493
2494 module_init(afiucv_init);
2495 module_exit(afiucv_exit);
2496
2497 MODULE_AUTHOR("Jennifer Hunt <jenhunt@us.ibm.com>");
2498 MODULE_DESCRIPTION("IUCV Sockets ver " VERSION);
2499 MODULE_VERSION(VERSION);
2500 MODULE_LICENSE("GPL");
2501 MODULE_ALIAS_NETPROTO(PF_IUCV);