| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* | 
|  | 2 | * This program is free software; you can redistribute it and/or modify | 
|  | 3 | * it under the terms of the GNU General Public License as published by | 
|  | 4 | * the Free Software Foundation; either version 2 of the License, or | 
|  | 5 | * (at your option) any later version. | 
|  | 6 | * | 
|  | 7 | * Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk) | 
|  | 8 | * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk) | 
|  | 9 | * Copyright (C) Joerg Reuter DL1BKE (jreuter@yaina.de) | 
|  | 10 | */ | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 11 | #include <linux/errno.h> | 
|  | 12 | #include <linux/types.h> | 
|  | 13 | #include <linux/socket.h> | 
|  | 14 | #include <linux/in.h> | 
|  | 15 | #include <linux/kernel.h> | 
| Ralf Baechle | 70868ea | 2006-05-03 23:25:17 -0700 | [diff] [blame] | 16 | #include <linux/module.h> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 17 | #include <linux/timer.h> | 
|  | 18 | #include <linux/string.h> | 
|  | 19 | #include <linux/sockios.h> | 
|  | 20 | #include <linux/spinlock.h> | 
|  | 21 | #include <linux/net.h> | 
| Tejun Heo | 5a0e3ad | 2010-03-24 17:04:11 +0900 | [diff] [blame] | 22 | #include <linux/slab.h> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 23 | #include <net/ax25.h> | 
|  | 24 | #include <linux/inet.h> | 
|  | 25 | #include <linux/netdevice.h> | 
|  | 26 | #include <linux/skbuff.h> | 
|  | 27 | #include <linux/netfilter.h> | 
|  | 28 | #include <net/sock.h> | 
|  | 29 | #include <asm/uaccess.h> | 
|  | 30 | #include <asm/system.h> | 
|  | 31 | #include <linux/fcntl.h> | 
|  | 32 | #include <linux/mm.h> | 
|  | 33 | #include <linux/interrupt.h> | 
|  | 34 |  | 
|  | 35 | static DEFINE_SPINLOCK(ax25_frag_lock); | 
|  | 36 |  | 
|  | 37 | ax25_cb *ax25_send_frame(struct sk_buff *skb, int paclen, ax25_address *src, ax25_address *dest, ax25_digi *digi, struct net_device *dev) | 
|  | 38 | { | 
|  | 39 | ax25_dev *ax25_dev; | 
|  | 40 | ax25_cb *ax25; | 
|  | 41 |  | 
|  | 42 | /* | 
|  | 43 | * Take the default packet length for the device if zero is | 
|  | 44 | * specified. | 
|  | 45 | */ | 
|  | 46 | if (paclen == 0) { | 
|  | 47 | if ((ax25_dev = ax25_dev_ax25dev(dev)) == NULL) | 
|  | 48 | return NULL; | 
|  | 49 |  | 
|  | 50 | paclen = ax25_dev->values[AX25_VALUES_PACLEN]; | 
|  | 51 | } | 
|  | 52 |  | 
|  | 53 | /* | 
|  | 54 | * Look for an existing connection. | 
|  | 55 | */ | 
|  | 56 | if ((ax25 = ax25_find_cb(src, dest, digi, dev)) != NULL) { | 
|  | 57 | ax25_output(ax25, paclen, skb); | 
|  | 58 | return ax25;		/* It already existed */ | 
|  | 59 | } | 
|  | 60 |  | 
|  | 61 | if ((ax25_dev = ax25_dev_ax25dev(dev)) == NULL) | 
|  | 62 | return NULL; | 
|  | 63 |  | 
|  | 64 | if ((ax25 = ax25_create_cb()) == NULL) | 
|  | 65 | return NULL; | 
|  | 66 |  | 
|  | 67 | ax25_fillin_cb(ax25, ax25_dev); | 
|  | 68 |  | 
|  | 69 | ax25->source_addr = *src; | 
|  | 70 | ax25->dest_addr   = *dest; | 
|  | 71 |  | 
|  | 72 | if (digi != NULL) { | 
| Arnaldo Carvalho de Melo | 0459d70 | 2006-11-17 12:43:07 -0200 | [diff] [blame] | 73 | ax25->digipeat = kmemdup(digi, sizeof(*digi), GFP_ATOMIC); | 
|  | 74 | if (ax25->digipeat == NULL) { | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 75 | ax25_cb_put(ax25); | 
|  | 76 | return NULL; | 
|  | 77 | } | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 78 | } | 
|  | 79 |  | 
|  | 80 | switch (ax25->ax25_dev->values[AX25_VALUES_PROTOCOL]) { | 
|  | 81 | case AX25_PROTO_STD_SIMPLEX: | 
|  | 82 | case AX25_PROTO_STD_DUPLEX: | 
|  | 83 | ax25_std_establish_data_link(ax25); | 
|  | 84 | break; | 
|  | 85 |  | 
|  | 86 | #ifdef CONFIG_AX25_DAMA_SLAVE | 
|  | 87 | case AX25_PROTO_DAMA_SLAVE: | 
|  | 88 | if (ax25_dev->dama.slave) | 
|  | 89 | ax25_ds_establish_data_link(ax25); | 
|  | 90 | else | 
|  | 91 | ax25_std_establish_data_link(ax25); | 
|  | 92 | break; | 
|  | 93 | #endif | 
|  | 94 | } | 
|  | 95 |  | 
| Jarek Poplawski | d00c362 | 2010-01-16 01:04:04 -0800 | [diff] [blame] | 96 | /* | 
|  | 97 | * There is one ref for the state machine; a caller needs | 
|  | 98 | * one more to put it back, just like with the existing one. | 
|  | 99 | */ | 
|  | 100 | ax25_cb_hold(ax25); | 
|  | 101 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 102 | ax25_cb_add(ax25); | 
|  | 103 |  | 
|  | 104 | ax25->state = AX25_STATE_1; | 
|  | 105 |  | 
|  | 106 | ax25_start_heartbeat(ax25); | 
|  | 107 |  | 
|  | 108 | ax25_output(ax25, paclen, skb); | 
|  | 109 |  | 
|  | 110 | return ax25;			/* We had to create it */ | 
|  | 111 | } | 
|  | 112 |  | 
| Ralf Baechle | 70868ea | 2006-05-03 23:25:17 -0700 | [diff] [blame] | 113 | EXPORT_SYMBOL(ax25_send_frame); | 
|  | 114 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 115 | /* | 
|  | 116 | *	All outgoing AX.25 I frames pass via this routine. Therefore this is | 
|  | 117 | *	where the fragmentation of frames takes place. If fragment is set to | 
|  | 118 | *	zero then we are not allowed to do fragmentation, even if the frame | 
|  | 119 | *	is too large. | 
|  | 120 | */ | 
|  | 121 | void ax25_output(ax25_cb *ax25, int paclen, struct sk_buff *skb) | 
|  | 122 | { | 
|  | 123 | struct sk_buff *skbn; | 
|  | 124 | unsigned char *p; | 
|  | 125 | int frontlen, len, fragno, ka9qfrag, first = 1; | 
|  | 126 |  | 
| Jarek Poplawski | f47b725 | 2008-02-17 22:31:19 -0800 | [diff] [blame] | 127 | if (paclen < 16) { | 
|  | 128 | WARN_ON_ONCE(1); | 
|  | 129 | kfree_skb(skb); | 
|  | 130 | return; | 
|  | 131 | } | 
|  | 132 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 133 | if ((skb->len - 1) > paclen) { | 
|  | 134 | if (*skb->data == AX25_P_TEXT) { | 
|  | 135 | skb_pull(skb, 1); /* skip PID */ | 
|  | 136 | ka9qfrag = 0; | 
|  | 137 | } else { | 
|  | 138 | paclen -= 2;	/* Allow for fragment control info */ | 
|  | 139 | ka9qfrag = 1; | 
|  | 140 | } | 
|  | 141 |  | 
|  | 142 | fragno = skb->len / paclen; | 
|  | 143 | if (skb->len % paclen == 0) fragno--; | 
|  | 144 |  | 
|  | 145 | frontlen = skb_headroom(skb);	/* Address space + CTRL */ | 
|  | 146 |  | 
|  | 147 | while (skb->len > 0) { | 
|  | 148 | spin_lock_bh(&ax25_frag_lock); | 
|  | 149 | if ((skbn = alloc_skb(paclen + 2 + frontlen, GFP_ATOMIC)) == NULL) { | 
|  | 150 | spin_unlock_bh(&ax25_frag_lock); | 
|  | 151 | printk(KERN_CRIT "AX.25: ax25_output - out of memory\n"); | 
|  | 152 | return; | 
|  | 153 | } | 
|  | 154 |  | 
|  | 155 | if (skb->sk != NULL) | 
|  | 156 | skb_set_owner_w(skbn, skb->sk); | 
|  | 157 |  | 
|  | 158 | spin_unlock_bh(&ax25_frag_lock); | 
|  | 159 |  | 
|  | 160 | len = (paclen > skb->len) ? skb->len : paclen; | 
|  | 161 |  | 
|  | 162 | if (ka9qfrag == 1) { | 
|  | 163 | skb_reserve(skbn, frontlen + 2); | 
| Arnaldo Carvalho de Melo | c14d245 | 2007-03-11 22:39:41 -0300 | [diff] [blame] | 164 | skb_set_network_header(skbn, | 
|  | 165 | skb_network_offset(skb)); | 
| Arnaldo Carvalho de Melo | d626f62 | 2007-03-27 18:55:52 -0300 | [diff] [blame] | 166 | skb_copy_from_linear_data(skb, skb_put(skbn, len), len); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 167 | p = skb_push(skbn, 2); | 
|  | 168 |  | 
|  | 169 | *p++ = AX25_P_SEGMENT; | 
|  | 170 |  | 
|  | 171 | *p = fragno--; | 
|  | 172 | if (first) { | 
|  | 173 | *p |= AX25_SEG_FIRST; | 
|  | 174 | first = 0; | 
|  | 175 | } | 
|  | 176 | } else { | 
|  | 177 | skb_reserve(skbn, frontlen + 1); | 
| Arnaldo Carvalho de Melo | c14d245 | 2007-03-11 22:39:41 -0300 | [diff] [blame] | 178 | skb_set_network_header(skbn, | 
|  | 179 | skb_network_offset(skb)); | 
| Arnaldo Carvalho de Melo | d626f62 | 2007-03-27 18:55:52 -0300 | [diff] [blame] | 180 | skb_copy_from_linear_data(skb, skb_put(skbn, len), len); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 181 | p = skb_push(skbn, 1); | 
|  | 182 | *p = AX25_P_TEXT; | 
|  | 183 | } | 
|  | 184 |  | 
|  | 185 | skb_pull(skb, len); | 
|  | 186 | skb_queue_tail(&ax25->write_queue, skbn); /* Throw it on the queue */ | 
|  | 187 | } | 
|  | 188 |  | 
|  | 189 | kfree_skb(skb); | 
|  | 190 | } else { | 
|  | 191 | skb_queue_tail(&ax25->write_queue, skb);	  /* Throw it on the queue */ | 
|  | 192 | } | 
|  | 193 |  | 
|  | 194 | switch (ax25->ax25_dev->values[AX25_VALUES_PROTOCOL]) { | 
|  | 195 | case AX25_PROTO_STD_SIMPLEX: | 
|  | 196 | case AX25_PROTO_STD_DUPLEX: | 
|  | 197 | ax25_kick(ax25); | 
|  | 198 | break; | 
|  | 199 |  | 
|  | 200 | #ifdef CONFIG_AX25_DAMA_SLAVE | 
|  | 201 | /* | 
|  | 202 | * A DAMA slave is _required_ to work as normal AX.25L2V2 | 
|  | 203 | * if no DAMA master is available. | 
|  | 204 | */ | 
|  | 205 | case AX25_PROTO_DAMA_SLAVE: | 
|  | 206 | if (!ax25->ax25_dev->dama.slave) ax25_kick(ax25); | 
|  | 207 | break; | 
|  | 208 | #endif | 
|  | 209 | } | 
|  | 210 | } | 
|  | 211 |  | 
|  | 212 | /* | 
|  | 213 | *  This procedure is passed a buffer descriptor for an iframe. It builds | 
|  | 214 | *  the rest of the control part of the frame and then writes it out. | 
|  | 215 | */ | 
|  | 216 | static void ax25_send_iframe(ax25_cb *ax25, struct sk_buff *skb, int poll_bit) | 
|  | 217 | { | 
|  | 218 | unsigned char *frame; | 
|  | 219 |  | 
|  | 220 | if (skb == NULL) | 
|  | 221 | return; | 
|  | 222 |  | 
| Arnaldo Carvalho de Melo | c1d2bbe | 2007-04-10 20:45:18 -0700 | [diff] [blame] | 223 | skb_reset_network_header(skb); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 224 |  | 
|  | 225 | if (ax25->modulus == AX25_MODULUS) { | 
|  | 226 | frame = skb_push(skb, 1); | 
|  | 227 |  | 
|  | 228 | *frame = AX25_I; | 
|  | 229 | *frame |= (poll_bit) ? AX25_PF : 0; | 
|  | 230 | *frame |= (ax25->vr << 5); | 
|  | 231 | *frame |= (ax25->vs << 1); | 
|  | 232 | } else { | 
|  | 233 | frame = skb_push(skb, 2); | 
|  | 234 |  | 
|  | 235 | frame[0] = AX25_I; | 
|  | 236 | frame[0] |= (ax25->vs << 1); | 
|  | 237 | frame[1] = (poll_bit) ? AX25_EPF : 0; | 
|  | 238 | frame[1] |= (ax25->vr << 1); | 
|  | 239 | } | 
|  | 240 |  | 
|  | 241 | ax25_start_idletimer(ax25); | 
|  | 242 |  | 
|  | 243 | ax25_transmit_buffer(ax25, skb, AX25_COMMAND); | 
|  | 244 | } | 
|  | 245 |  | 
|  | 246 | void ax25_kick(ax25_cb *ax25) | 
|  | 247 | { | 
|  | 248 | struct sk_buff *skb, *skbn; | 
|  | 249 | int last = 1; | 
|  | 250 | unsigned short start, end, next; | 
|  | 251 |  | 
|  | 252 | if (ax25->state != AX25_STATE_3 && ax25->state != AX25_STATE_4) | 
|  | 253 | return; | 
|  | 254 |  | 
|  | 255 | if (ax25->condition & AX25_COND_PEER_RX_BUSY) | 
|  | 256 | return; | 
|  | 257 |  | 
|  | 258 | if (skb_peek(&ax25->write_queue) == NULL) | 
|  | 259 | return; | 
|  | 260 |  | 
|  | 261 | start = (skb_peek(&ax25->ack_queue) == NULL) ? ax25->va : ax25->vs; | 
|  | 262 | end   = (ax25->va + ax25->window) % ax25->modulus; | 
|  | 263 |  | 
|  | 264 | if (start == end) | 
|  | 265 | return; | 
|  | 266 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 267 | /* | 
|  | 268 | * Transmit data until either we're out of data to send or | 
|  | 269 | * the window is full. Send a poll on the final I frame if | 
|  | 270 | * the window is filled. | 
|  | 271 | */ | 
|  | 272 |  | 
|  | 273 | /* | 
|  | 274 | * Dequeue the frame and copy it. | 
| Jarek Poplawski | f47b725 | 2008-02-17 22:31:19 -0800 | [diff] [blame] | 275 | * Check for race with ax25_clear_queues(). | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 276 | */ | 
|  | 277 | skb  = skb_dequeue(&ax25->write_queue); | 
| Jarek Poplawski | f47b725 | 2008-02-17 22:31:19 -0800 | [diff] [blame] | 278 | if (!skb) | 
|  | 279 | return; | 
|  | 280 |  | 
|  | 281 | ax25->vs = start; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 282 |  | 
|  | 283 | do { | 
|  | 284 | if ((skbn = skb_clone(skb, GFP_ATOMIC)) == NULL) { | 
|  | 285 | skb_queue_head(&ax25->write_queue, skb); | 
|  | 286 | break; | 
|  | 287 | } | 
|  | 288 |  | 
|  | 289 | if (skb->sk != NULL) | 
|  | 290 | skb_set_owner_w(skbn, skb->sk); | 
|  | 291 |  | 
|  | 292 | next = (ax25->vs + 1) % ax25->modulus; | 
|  | 293 | last = (next == end); | 
|  | 294 |  | 
|  | 295 | /* | 
|  | 296 | * Transmit the frame copy. | 
|  | 297 | * bke 960114: do not set the Poll bit on the last frame | 
|  | 298 | * in DAMA mode. | 
|  | 299 | */ | 
|  | 300 | switch (ax25->ax25_dev->values[AX25_VALUES_PROTOCOL]) { | 
|  | 301 | case AX25_PROTO_STD_SIMPLEX: | 
|  | 302 | case AX25_PROTO_STD_DUPLEX: | 
|  | 303 | ax25_send_iframe(ax25, skbn, (last) ? AX25_POLLON : AX25_POLLOFF); | 
|  | 304 | break; | 
|  | 305 |  | 
|  | 306 | #ifdef CONFIG_AX25_DAMA_SLAVE | 
|  | 307 | case AX25_PROTO_DAMA_SLAVE: | 
|  | 308 | ax25_send_iframe(ax25, skbn, AX25_POLLOFF); | 
|  | 309 | break; | 
|  | 310 | #endif | 
|  | 311 | } | 
|  | 312 |  | 
|  | 313 | ax25->vs = next; | 
|  | 314 |  | 
|  | 315 | /* | 
|  | 316 | * Requeue the original data frame. | 
|  | 317 | */ | 
|  | 318 | skb_queue_tail(&ax25->ack_queue, skb); | 
|  | 319 |  | 
|  | 320 | } while (!last && (skb = skb_dequeue(&ax25->write_queue)) != NULL); | 
|  | 321 |  | 
|  | 322 | ax25->condition &= ~AX25_COND_ACK_PENDING; | 
|  | 323 |  | 
|  | 324 | if (!ax25_t1timer_running(ax25)) { | 
|  | 325 | ax25_stop_t3timer(ax25); | 
|  | 326 | ax25_calculate_t1(ax25); | 
|  | 327 | ax25_start_t1timer(ax25); | 
|  | 328 | } | 
|  | 329 | } | 
|  | 330 |  | 
|  | 331 | void ax25_transmit_buffer(ax25_cb *ax25, struct sk_buff *skb, int type) | 
|  | 332 | { | 
|  | 333 | struct sk_buff *skbn; | 
|  | 334 | unsigned char *ptr; | 
|  | 335 | int headroom; | 
|  | 336 |  | 
|  | 337 | if (ax25->ax25_dev == NULL) { | 
|  | 338 | ax25_disconnect(ax25, ENETUNREACH); | 
|  | 339 | return; | 
|  | 340 | } | 
|  | 341 |  | 
|  | 342 | headroom = ax25_addr_size(ax25->digipeat); | 
|  | 343 |  | 
|  | 344 | if (skb_headroom(skb) < headroom) { | 
|  | 345 | if ((skbn = skb_realloc_headroom(skb, headroom)) == NULL) { | 
|  | 346 | printk(KERN_CRIT "AX.25: ax25_transmit_buffer - out of memory\n"); | 
|  | 347 | kfree_skb(skb); | 
|  | 348 | return; | 
|  | 349 | } | 
|  | 350 |  | 
|  | 351 | if (skb->sk != NULL) | 
|  | 352 | skb_set_owner_w(skbn, skb->sk); | 
|  | 353 |  | 
|  | 354 | kfree_skb(skb); | 
|  | 355 | skb = skbn; | 
|  | 356 | } | 
|  | 357 |  | 
|  | 358 | ptr = skb_push(skb, headroom); | 
|  | 359 |  | 
|  | 360 | ax25_addr_build(ptr, &ax25->source_addr, &ax25->dest_addr, ax25->digipeat, type, ax25->modulus); | 
|  | 361 |  | 
| Arnaldo Carvalho de Melo | 29c4be5 | 2005-04-21 16:46:56 -0700 | [diff] [blame] | 362 | ax25_queue_xmit(skb, ax25->ax25_dev->dev); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 363 | } | 
|  | 364 |  | 
|  | 365 | /* | 
|  | 366 | *	A small shim to dev_queue_xmit to add the KISS control byte, and do | 
|  | 367 | *	any packet forwarding in operation. | 
|  | 368 | */ | 
| Arnaldo Carvalho de Melo | 29c4be5 | 2005-04-21 16:46:56 -0700 | [diff] [blame] | 369 | void ax25_queue_xmit(struct sk_buff *skb, struct net_device *dev) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 370 | { | 
|  | 371 | unsigned char *ptr; | 
|  | 372 |  | 
| Arnaldo Carvalho de Melo | 56cb515 | 2005-04-24 18:53:06 -0700 | [diff] [blame] | 373 | skb->protocol = ax25_type_trans(skb, ax25_fwd_dev(dev)); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 374 |  | 
|  | 375 | ptr  = skb_push(skb, 1); | 
|  | 376 | *ptr = 0x00;			/* KISS */ | 
|  | 377 |  | 
|  | 378 | dev_queue_xmit(skb); | 
|  | 379 | } | 
|  | 380 |  | 
|  | 381 | int ax25_check_iframes_acked(ax25_cb *ax25, unsigned short nr) | 
|  | 382 | { | 
|  | 383 | if (ax25->vs == nr) { | 
|  | 384 | ax25_frames_acked(ax25, nr); | 
|  | 385 | ax25_calculate_rtt(ax25); | 
|  | 386 | ax25_stop_t1timer(ax25); | 
|  | 387 | ax25_start_t3timer(ax25); | 
|  | 388 | return 1; | 
|  | 389 | } else { | 
|  | 390 | if (ax25->va != nr) { | 
|  | 391 | ax25_frames_acked(ax25, nr); | 
|  | 392 | ax25_calculate_t1(ax25); | 
|  | 393 | ax25_start_t1timer(ax25); | 
|  | 394 | return 1; | 
|  | 395 | } | 
|  | 396 | } | 
|  | 397 | return 0; | 
|  | 398 | } | 
|  | 399 |  |