[NET]: Make socket creation namespace safe.
[linux-flexiantxendom0-natty.git] / net / rose / af_rose.c
1 /*
2  * This program is free software; you can redistribute it and/or modify
3  * it under the terms of the GNU General Public License as published by
4  * the Free Software Foundation; either version 2 of the License, or
5  * (at your option) any later version.
6  *
7  * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
8  * Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
9  * Copyright (C) Terry Dawson VK2KTJ (terry@animats.net)
10  * Copyright (C) Tomi Manninen OH2BNS (oh2bns@sral.fi)
11  */
12
13 #include <linux/capability.h>
14 #include <linux/module.h>
15 #include <linux/moduleparam.h>
16 #include <linux/init.h>
17 #include <linux/errno.h>
18 #include <linux/types.h>
19 #include <linux/socket.h>
20 #include <linux/in.h>
21 #include <linux/kernel.h>
22 #include <linux/sched.h>
23 #include <linux/spinlock.h>
24 #include <linux/timer.h>
25 #include <linux/string.h>
26 #include <linux/sockios.h>
27 #include <linux/net.h>
28 #include <linux/stat.h>
29 #include <net/net_namespace.h>
30 #include <net/ax25.h>
31 #include <linux/inet.h>
32 #include <linux/netdevice.h>
33 #include <linux/if_arp.h>
34 #include <linux/skbuff.h>
35 #include <net/sock.h>
36 #include <asm/system.h>
37 #include <asm/uaccess.h>
38 #include <linux/fcntl.h>
39 #include <linux/termios.h>
40 #include <linux/mm.h>
41 #include <linux/interrupt.h>
42 #include <linux/notifier.h>
43 #include <net/rose.h>
44 #include <linux/proc_fs.h>
45 #include <linux/seq_file.h>
46 #include <net/tcp_states.h>
47 #include <net/ip.h>
48 #include <net/arp.h>
49
50 static int rose_ndevs = 10;
51
52 int sysctl_rose_restart_request_timeout = ROSE_DEFAULT_T0;
53 int sysctl_rose_call_request_timeout    = ROSE_DEFAULT_T1;
54 int sysctl_rose_reset_request_timeout   = ROSE_DEFAULT_T2;
55 int sysctl_rose_clear_request_timeout   = ROSE_DEFAULT_T3;
56 int sysctl_rose_no_activity_timeout     = ROSE_DEFAULT_IDLE;
57 int sysctl_rose_ack_hold_back_timeout   = ROSE_DEFAULT_HB;
58 int sysctl_rose_routing_control         = ROSE_DEFAULT_ROUTING;
59 int sysctl_rose_link_fail_timeout       = ROSE_DEFAULT_FAIL_TIMEOUT;
60 int sysctl_rose_maximum_vcs             = ROSE_DEFAULT_MAXVC;
61 int sysctl_rose_window_size             = ROSE_DEFAULT_WINDOW_SIZE;
62
63 static HLIST_HEAD(rose_list);
64 static DEFINE_SPINLOCK(rose_list_lock);
65
66 static struct proto_ops rose_proto_ops;
67
68 ax25_address rose_callsign;
69
70 /*
71  * ROSE network devices are virtual network devices encapsulating ROSE
72  * frames into AX.25 which will be sent through an AX.25 device, so form a
73  * special "super class" of normal net devices; split their locks off into a
74  * separate class since they always nest.
75  */
76 static struct lock_class_key rose_netdev_xmit_lock_key;
77
78 /*
79  *      Convert a ROSE address into text.
80  */
81 const char *rose2asc(const rose_address *addr)
82 {
83         static char buffer[11];
84
85         if (addr->rose_addr[0] == 0x00 && addr->rose_addr[1] == 0x00 &&
86             addr->rose_addr[2] == 0x00 && addr->rose_addr[3] == 0x00 &&
87             addr->rose_addr[4] == 0x00) {
88                 strcpy(buffer, "*");
89         } else {
90                 sprintf(buffer, "%02X%02X%02X%02X%02X", addr->rose_addr[0] & 0xFF,
91                                                 addr->rose_addr[1] & 0xFF,
92                                                 addr->rose_addr[2] & 0xFF,
93                                                 addr->rose_addr[3] & 0xFF,
94                                                 addr->rose_addr[4] & 0xFF);
95         }
96
97         return buffer;
98 }
99
100 /*
101  *      Compare two ROSE addresses, 0 == equal.
102  */
103 int rosecmp(rose_address *addr1, rose_address *addr2)
104 {
105         int i;
106
107         for (i = 0; i < 5; i++)
108                 if (addr1->rose_addr[i] != addr2->rose_addr[i])
109                         return 1;
110
111         return 0;
112 }
113
114 /*
115  *      Compare two ROSE addresses for only mask digits, 0 == equal.
116  */
117 int rosecmpm(rose_address *addr1, rose_address *addr2, unsigned short mask)
118 {
119         int i, j;
120
121         if (mask > 10)
122                 return 1;
123
124         for (i = 0; i < mask; i++) {
125                 j = i / 2;
126
127                 if ((i % 2) != 0) {
128                         if ((addr1->rose_addr[j] & 0x0F) != (addr2->rose_addr[j] & 0x0F))
129                                 return 1;
130                 } else {
131                         if ((addr1->rose_addr[j] & 0xF0) != (addr2->rose_addr[j] & 0xF0))
132                                 return 1;
133                 }
134         }
135
136         return 0;
137 }
138
139 /*
140  *      Socket removal during an interrupt is now safe.
141  */
142 static void rose_remove_socket(struct sock *sk)
143 {
144         spin_lock_bh(&rose_list_lock);
145         sk_del_node_init(sk);
146         spin_unlock_bh(&rose_list_lock);
147 }
148
149 /*
150  *      Kill all bound sockets on a broken link layer connection to a
151  *      particular neighbour.
152  */
153 void rose_kill_by_neigh(struct rose_neigh *neigh)
154 {
155         struct sock *s;
156         struct hlist_node *node;
157
158         spin_lock_bh(&rose_list_lock);
159         sk_for_each(s, node, &rose_list) {
160                 struct rose_sock *rose = rose_sk(s);
161
162                 if (rose->neighbour == neigh) {
163                         rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
164                         rose->neighbour->use--;
165                         rose->neighbour = NULL;
166                 }
167         }
168         spin_unlock_bh(&rose_list_lock);
169 }
170
171 /*
172  *      Kill all bound sockets on a dropped device.
173  */
174 static void rose_kill_by_device(struct net_device *dev)
175 {
176         struct sock *s;
177         struct hlist_node *node;
178
179         spin_lock_bh(&rose_list_lock);
180         sk_for_each(s, node, &rose_list) {
181                 struct rose_sock *rose = rose_sk(s);
182
183                 if (rose->device == dev) {
184                         rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
185                         rose->neighbour->use--;
186                         rose->device = NULL;
187                 }
188         }
189         spin_unlock_bh(&rose_list_lock);
190 }
191
192 /*
193  *      Handle device status changes.
194  */
195 static int rose_device_event(struct notifier_block *this, unsigned long event,
196         void *ptr)
197 {
198         struct net_device *dev = (struct net_device *)ptr;
199
200         if (event != NETDEV_DOWN)
201                 return NOTIFY_DONE;
202
203         switch (dev->type) {
204         case ARPHRD_ROSE:
205                 rose_kill_by_device(dev);
206                 break;
207         case ARPHRD_AX25:
208                 rose_link_device_down(dev);
209                 rose_rt_device_down(dev);
210                 break;
211         }
212
213         return NOTIFY_DONE;
214 }
215
216 /*
217  *      Add a socket to the bound sockets list.
218  */
219 static void rose_insert_socket(struct sock *sk)
220 {
221
222         spin_lock_bh(&rose_list_lock);
223         sk_add_node(sk, &rose_list);
224         spin_unlock_bh(&rose_list_lock);
225 }
226
227 /*
228  *      Find a socket that wants to accept the Call Request we just
229  *      received.
230  */
231 static struct sock *rose_find_listener(rose_address *addr, ax25_address *call)
232 {
233         struct sock *s;
234         struct hlist_node *node;
235
236         spin_lock_bh(&rose_list_lock);
237         sk_for_each(s, node, &rose_list) {
238                 struct rose_sock *rose = rose_sk(s);
239
240                 if (!rosecmp(&rose->source_addr, addr) &&
241                     !ax25cmp(&rose->source_call, call) &&
242                     !rose->source_ndigis && s->sk_state == TCP_LISTEN)
243                         goto found;
244         }
245
246         sk_for_each(s, node, &rose_list) {
247                 struct rose_sock *rose = rose_sk(s);
248
249                 if (!rosecmp(&rose->source_addr, addr) &&
250                     !ax25cmp(&rose->source_call, &null_ax25_address) &&
251                     s->sk_state == TCP_LISTEN)
252                         goto found;
253         }
254         s = NULL;
255 found:
256         spin_unlock_bh(&rose_list_lock);
257         return s;
258 }
259
260 /*
261  *      Find a connected ROSE socket given my LCI and device.
262  */
263 struct sock *rose_find_socket(unsigned int lci, struct rose_neigh *neigh)
264 {
265         struct sock *s;
266         struct hlist_node *node;
267
268         spin_lock_bh(&rose_list_lock);
269         sk_for_each(s, node, &rose_list) {
270                 struct rose_sock *rose = rose_sk(s);
271
272                 if (rose->lci == lci && rose->neighbour == neigh)
273                         goto found;
274         }
275         s = NULL;
276 found:
277         spin_unlock_bh(&rose_list_lock);
278         return s;
279 }
280
281 /*
282  *      Find a unique LCI for a given device.
283  */
284 unsigned int rose_new_lci(struct rose_neigh *neigh)
285 {
286         int lci;
287
288         if (neigh->dce_mode) {
289                 for (lci = 1; lci <= sysctl_rose_maximum_vcs; lci++)
290                         if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
291                                 return lci;
292         } else {
293                 for (lci = sysctl_rose_maximum_vcs; lci > 0; lci--)
294                         if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
295                                 return lci;
296         }
297
298         return 0;
299 }
300
301 /*
302  *      Deferred destroy.
303  */
304 void rose_destroy_socket(struct sock *);
305
306 /*
307  *      Handler for deferred kills.
308  */
309 static void rose_destroy_timer(unsigned long data)
310 {
311         rose_destroy_socket((struct sock *)data);
312 }
313
314 /*
315  *      This is called from user mode and the timers. Thus it protects itself
316  *      against interrupt users but doesn't worry about being called during
317  *      work.  Once it is removed from the queue no interrupt or bottom half
318  *      will touch it and we are (fairly 8-) ) safe.
319  */
320 void rose_destroy_socket(struct sock *sk)
321 {
322         struct sk_buff *skb;
323
324         rose_remove_socket(sk);
325         rose_stop_heartbeat(sk);
326         rose_stop_idletimer(sk);
327         rose_stop_timer(sk);
328
329         rose_clear_queues(sk);          /* Flush the queues */
330
331         while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
332                 if (skb->sk != sk) {    /* A pending connection */
333                         /* Queue the unaccepted socket for death */
334                         sock_set_flag(skb->sk, SOCK_DEAD);
335                         rose_start_heartbeat(skb->sk);
336                         rose_sk(skb->sk)->state = ROSE_STATE_0;
337                 }
338
339                 kfree_skb(skb);
340         }
341
342         if (atomic_read(&sk->sk_wmem_alloc) ||
343             atomic_read(&sk->sk_rmem_alloc)) {
344                 /* Defer: outstanding buffers */
345                 init_timer(&sk->sk_timer);
346                 sk->sk_timer.expires  = jiffies + 10 * HZ;
347                 sk->sk_timer.function = rose_destroy_timer;
348                 sk->sk_timer.data     = (unsigned long)sk;
349                 add_timer(&sk->sk_timer);
350         } else
351                 sock_put(sk);
352 }
353
354 /*
355  *      Handling for system calls applied via the various interfaces to a
356  *      ROSE socket object.
357  */
358
359 static int rose_setsockopt(struct socket *sock, int level, int optname,
360         char __user *optval, int optlen)
361 {
362         struct sock *sk = sock->sk;
363         struct rose_sock *rose = rose_sk(sk);
364         int opt;
365
366         if (level != SOL_ROSE)
367                 return -ENOPROTOOPT;
368
369         if (optlen < sizeof(int))
370                 return -EINVAL;
371
372         if (get_user(opt, (int __user *)optval))
373                 return -EFAULT;
374
375         switch (optname) {
376         case ROSE_DEFER:
377                 rose->defer = opt ? 1 : 0;
378                 return 0;
379
380         case ROSE_T1:
381                 if (opt < 1)
382                         return -EINVAL;
383                 rose->t1 = opt * HZ;
384                 return 0;
385
386         case ROSE_T2:
387                 if (opt < 1)
388                         return -EINVAL;
389                 rose->t2 = opt * HZ;
390                 return 0;
391
392         case ROSE_T3:
393                 if (opt < 1)
394                         return -EINVAL;
395                 rose->t3 = opt * HZ;
396                 return 0;
397
398         case ROSE_HOLDBACK:
399                 if (opt < 1)
400                         return -EINVAL;
401                 rose->hb = opt * HZ;
402                 return 0;
403
404         case ROSE_IDLE:
405                 if (opt < 0)
406                         return -EINVAL;
407                 rose->idle = opt * 60 * HZ;
408                 return 0;
409
410         case ROSE_QBITINCL:
411                 rose->qbitincl = opt ? 1 : 0;
412                 return 0;
413
414         default:
415                 return -ENOPROTOOPT;
416         }
417 }
418
419 static int rose_getsockopt(struct socket *sock, int level, int optname,
420         char __user *optval, int __user *optlen)
421 {
422         struct sock *sk = sock->sk;
423         struct rose_sock *rose = rose_sk(sk);
424         int val = 0;
425         int len;
426
427         if (level != SOL_ROSE)
428                 return -ENOPROTOOPT;
429
430         if (get_user(len, optlen))
431                 return -EFAULT;
432
433         if (len < 0)
434                 return -EINVAL;
435
436         switch (optname) {
437         case ROSE_DEFER:
438                 val = rose->defer;
439                 break;
440
441         case ROSE_T1:
442                 val = rose->t1 / HZ;
443                 break;
444
445         case ROSE_T2:
446                 val = rose->t2 / HZ;
447                 break;
448
449         case ROSE_T3:
450                 val = rose->t3 / HZ;
451                 break;
452
453         case ROSE_HOLDBACK:
454                 val = rose->hb / HZ;
455                 break;
456
457         case ROSE_IDLE:
458                 val = rose->idle / (60 * HZ);
459                 break;
460
461         case ROSE_QBITINCL:
462                 val = rose->qbitincl;
463                 break;
464
465         default:
466                 return -ENOPROTOOPT;
467         }
468
469         len = min_t(unsigned int, len, sizeof(int));
470
471         if (put_user(len, optlen))
472                 return -EFAULT;
473
474         return copy_to_user(optval, &val, len) ? -EFAULT : 0;
475 }
476
477 static int rose_listen(struct socket *sock, int backlog)
478 {
479         struct sock *sk = sock->sk;
480
481         if (sk->sk_state != TCP_LISTEN) {
482                 struct rose_sock *rose = rose_sk(sk);
483
484                 rose->dest_ndigis = 0;
485                 memset(&rose->dest_addr, 0, ROSE_ADDR_LEN);
486                 memset(&rose->dest_call, 0, AX25_ADDR_LEN);
487                 memset(rose->dest_digis, 0, AX25_ADDR_LEN * ROSE_MAX_DIGIS);
488                 sk->sk_max_ack_backlog = backlog;
489                 sk->sk_state           = TCP_LISTEN;
490                 return 0;
491         }
492
493         return -EOPNOTSUPP;
494 }
495
496 static struct proto rose_proto = {
497         .name     = "ROSE",
498         .owner    = THIS_MODULE,
499         .obj_size = sizeof(struct rose_sock),
500 };
501
502 static int rose_create(struct net *net, struct socket *sock, int protocol)
503 {
504         struct sock *sk;
505         struct rose_sock *rose;
506
507         if (net != &init_net)
508                 return -EAFNOSUPPORT;
509
510         if (sock->type != SOCK_SEQPACKET || protocol != 0)
511                 return -ESOCKTNOSUPPORT;
512
513         if ((sk = sk_alloc(net, PF_ROSE, GFP_ATOMIC, &rose_proto, 1)) == NULL)
514                 return -ENOMEM;
515
516         rose = rose_sk(sk);
517
518         sock_init_data(sock, sk);
519
520         skb_queue_head_init(&rose->ack_queue);
521 #ifdef M_BIT
522         skb_queue_head_init(&rose->frag_queue);
523         rose->fraglen    = 0;
524 #endif
525
526         sock->ops    = &rose_proto_ops;
527         sk->sk_protocol = protocol;
528
529         init_timer(&rose->timer);
530         init_timer(&rose->idletimer);
531
532         rose->t1   = msecs_to_jiffies(sysctl_rose_call_request_timeout);
533         rose->t2   = msecs_to_jiffies(sysctl_rose_reset_request_timeout);
534         rose->t3   = msecs_to_jiffies(sysctl_rose_clear_request_timeout);
535         rose->hb   = msecs_to_jiffies(sysctl_rose_ack_hold_back_timeout);
536         rose->idle = msecs_to_jiffies(sysctl_rose_no_activity_timeout);
537
538         rose->state = ROSE_STATE_0;
539
540         return 0;
541 }
542
543 static struct sock *rose_make_new(struct sock *osk)
544 {
545         struct sock *sk;
546         struct rose_sock *rose, *orose;
547
548         if (osk->sk_type != SOCK_SEQPACKET)
549                 return NULL;
550
551         if ((sk = sk_alloc(osk->sk_net, PF_ROSE, GFP_ATOMIC, &rose_proto, 1)) == NULL)
552                 return NULL;
553
554         rose = rose_sk(sk);
555
556         sock_init_data(NULL, sk);
557
558         skb_queue_head_init(&rose->ack_queue);
559 #ifdef M_BIT
560         skb_queue_head_init(&rose->frag_queue);
561         rose->fraglen  = 0;
562 #endif
563
564         sk->sk_type     = osk->sk_type;
565         sk->sk_socket   = osk->sk_socket;
566         sk->sk_priority = osk->sk_priority;
567         sk->sk_protocol = osk->sk_protocol;
568         sk->sk_rcvbuf   = osk->sk_rcvbuf;
569         sk->sk_sndbuf   = osk->sk_sndbuf;
570         sk->sk_state    = TCP_ESTABLISHED;
571         sk->sk_sleep    = osk->sk_sleep;
572         sock_copy_flags(sk, osk);
573
574         init_timer(&rose->timer);
575         init_timer(&rose->idletimer);
576
577         orose           = rose_sk(osk);
578         rose->t1        = orose->t1;
579         rose->t2        = orose->t2;
580         rose->t3        = orose->t3;
581         rose->hb        = orose->hb;
582         rose->idle      = orose->idle;
583         rose->defer     = orose->defer;
584         rose->device    = orose->device;
585         rose->qbitincl  = orose->qbitincl;
586
587         return sk;
588 }
589
590 static int rose_release(struct socket *sock)
591 {
592         struct sock *sk = sock->sk;
593         struct rose_sock *rose;
594
595         if (sk == NULL) return 0;
596
597         rose = rose_sk(sk);
598
599         switch (rose->state) {
600         case ROSE_STATE_0:
601                 rose_disconnect(sk, 0, -1, -1);
602                 rose_destroy_socket(sk);
603                 break;
604
605         case ROSE_STATE_2:
606                 rose->neighbour->use--;
607                 rose_disconnect(sk, 0, -1, -1);
608                 rose_destroy_socket(sk);
609                 break;
610
611         case ROSE_STATE_1:
612         case ROSE_STATE_3:
613         case ROSE_STATE_4:
614         case ROSE_STATE_5:
615                 rose_clear_queues(sk);
616                 rose_stop_idletimer(sk);
617                 rose_write_internal(sk, ROSE_CLEAR_REQUEST);
618                 rose_start_t3timer(sk);
619                 rose->state  = ROSE_STATE_2;
620                 sk->sk_state    = TCP_CLOSE;
621                 sk->sk_shutdown |= SEND_SHUTDOWN;
622                 sk->sk_state_change(sk);
623                 sock_set_flag(sk, SOCK_DEAD);
624                 sock_set_flag(sk, SOCK_DESTROY);
625                 break;
626
627         default:
628                 break;
629         }
630
631         sock->sk = NULL;
632
633         return 0;
634 }
635
636 static int rose_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
637 {
638         struct sock *sk = sock->sk;
639         struct rose_sock *rose = rose_sk(sk);
640         struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
641         struct net_device *dev;
642         ax25_address *source;
643         ax25_uid_assoc *user;
644         int n;
645
646         if (!sock_flag(sk, SOCK_ZAPPED))
647                 return -EINVAL;
648
649         if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
650                 return -EINVAL;
651
652         if (addr->srose_family != AF_ROSE)
653                 return -EINVAL;
654
655         if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
656                 return -EINVAL;
657
658         if (addr->srose_ndigis > ROSE_MAX_DIGIS)
659                 return -EINVAL;
660
661         if ((dev = rose_dev_get(&addr->srose_addr)) == NULL) {
662                 SOCK_DEBUG(sk, "ROSE: bind failed: invalid address\n");
663                 return -EADDRNOTAVAIL;
664         }
665
666         source = &addr->srose_call;
667
668         user = ax25_findbyuid(current->euid);
669         if (user) {
670                 rose->source_call = user->call;
671                 ax25_uid_put(user);
672         } else {
673                 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE))
674                         return -EACCES;
675                 rose->source_call   = *source;
676         }
677
678         rose->source_addr   = addr->srose_addr;
679         rose->device        = dev;
680         rose->source_ndigis = addr->srose_ndigis;
681
682         if (addr_len == sizeof(struct full_sockaddr_rose)) {
683                 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
684                 for (n = 0 ; n < addr->srose_ndigis ; n++)
685                         rose->source_digis[n] = full_addr->srose_digis[n];
686         } else {
687                 if (rose->source_ndigis == 1) {
688                         rose->source_digis[0] = addr->srose_digi;
689                 }
690         }
691
692         rose_insert_socket(sk);
693
694         sock_reset_flag(sk, SOCK_ZAPPED);
695         SOCK_DEBUG(sk, "ROSE: socket is bound\n");
696         return 0;
697 }
698
699 static int rose_connect(struct socket *sock, struct sockaddr *uaddr, int addr_len, int flags)
700 {
701         struct sock *sk = sock->sk;
702         struct rose_sock *rose = rose_sk(sk);
703         struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
704         unsigned char cause, diagnostic;
705         struct net_device *dev;
706         ax25_uid_assoc *user;
707         int n, err = 0;
708
709         if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
710                 return -EINVAL;
711
712         if (addr->srose_family != AF_ROSE)
713                 return -EINVAL;
714
715         if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
716                 return -EINVAL;
717
718         if (addr->srose_ndigis > ROSE_MAX_DIGIS)
719                 return -EINVAL;
720
721         /* Source + Destination digis should not exceed ROSE_MAX_DIGIS */
722         if ((rose->source_ndigis + addr->srose_ndigis) > ROSE_MAX_DIGIS)
723                 return -EINVAL;
724
725         lock_sock(sk);
726
727         if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
728                 /* Connect completed during a ERESTARTSYS event */
729                 sock->state = SS_CONNECTED;
730                 goto out_release;
731         }
732
733         if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
734                 sock->state = SS_UNCONNECTED;
735                 err = -ECONNREFUSED;
736                 goto out_release;
737         }
738
739         if (sk->sk_state == TCP_ESTABLISHED) {
740                 /* No reconnect on a seqpacket socket */
741                 err = -EISCONN;
742                 goto out_release;
743         }
744
745         sk->sk_state   = TCP_CLOSE;
746         sock->state = SS_UNCONNECTED;
747
748         rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause,
749                                          &diagnostic);
750         if (!rose->neighbour)
751                 return -ENETUNREACH;
752
753         rose->lci = rose_new_lci(rose->neighbour);
754         if (!rose->lci) {
755                 err = -ENETUNREACH;
756                 goto out_release;
757         }
758
759         if (sock_flag(sk, SOCK_ZAPPED)) {       /* Must bind first - autobinding in this may or may not work */
760                 sock_reset_flag(sk, SOCK_ZAPPED);
761
762                 if ((dev = rose_dev_first()) == NULL) {
763                         err = -ENETUNREACH;
764                         goto out_release;
765                 }
766
767                 user = ax25_findbyuid(current->euid);
768                 if (!user) {
769                         err = -EINVAL;
770                         goto out_release;
771                 }
772
773                 memcpy(&rose->source_addr, dev->dev_addr, ROSE_ADDR_LEN);
774                 rose->source_call = user->call;
775                 rose->device      = dev;
776                 ax25_uid_put(user);
777
778                 rose_insert_socket(sk);         /* Finish the bind */
779         }
780 rose_try_next_neigh:
781         rose->dest_addr   = addr->srose_addr;
782         rose->dest_call   = addr->srose_call;
783         rose->rand        = ((long)rose & 0xFFFF) + rose->lci;
784         rose->dest_ndigis = addr->srose_ndigis;
785
786         if (addr_len == sizeof(struct full_sockaddr_rose)) {
787                 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
788                 for (n = 0 ; n < addr->srose_ndigis ; n++)
789                         rose->dest_digis[n] = full_addr->srose_digis[n];
790         } else {
791                 if (rose->dest_ndigis == 1) {
792                         rose->dest_digis[0] = addr->srose_digi;
793                 }
794         }
795
796         /* Move to connecting socket, start sending Connect Requests */
797         sock->state   = SS_CONNECTING;
798         sk->sk_state     = TCP_SYN_SENT;
799
800         rose->state = ROSE_STATE_1;
801
802         rose->neighbour->use++;
803
804         rose_write_internal(sk, ROSE_CALL_REQUEST);
805         rose_start_heartbeat(sk);
806         rose_start_t1timer(sk);
807
808         /* Now the loop */
809         if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
810                 err = -EINPROGRESS;
811                 goto out_release;
812         }
813
814         /*
815          * A Connect Ack with Choke or timeout or failed routing will go to
816          * closed.
817          */
818         if (sk->sk_state == TCP_SYN_SENT) {
819                 DEFINE_WAIT(wait);
820
821                 for (;;) {
822                         prepare_to_wait(sk->sk_sleep, &wait,
823                                         TASK_INTERRUPTIBLE);
824                         if (sk->sk_state != TCP_SYN_SENT)
825                                 break;
826                         if (!signal_pending(current)) {
827                                 release_sock(sk);
828                                 schedule();
829                                 lock_sock(sk);
830                                 continue;
831                         }
832                         err = -ERESTARTSYS;
833                         break;
834                 }
835                 finish_wait(sk->sk_sleep, &wait);
836
837                 if (err)
838                         goto out_release;
839         }
840
841         if (sk->sk_state != TCP_ESTABLISHED) {
842         /* Try next neighbour */
843                 rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause, &diagnostic);
844                 if (rose->neighbour)
845                         goto rose_try_next_neigh;
846
847                 /* No more neighbours */
848                 sock->state = SS_UNCONNECTED;
849                 err = sock_error(sk);   /* Always set at this point */
850                 goto out_release;
851         }
852
853         sock->state = SS_CONNECTED;
854
855 out_release:
856         release_sock(sk);
857
858         return err;
859 }
860
861 static int rose_accept(struct socket *sock, struct socket *newsock, int flags)
862 {
863         struct sk_buff *skb;
864         struct sock *newsk;
865         DEFINE_WAIT(wait);
866         struct sock *sk;
867         int err = 0;
868
869         if ((sk = sock->sk) == NULL)
870                 return -EINVAL;
871
872         lock_sock(sk);
873         if (sk->sk_type != SOCK_SEQPACKET) {
874                 err = -EOPNOTSUPP;
875                 goto out_release;
876         }
877
878         if (sk->sk_state != TCP_LISTEN) {
879                 err = -EINVAL;
880                 goto out_release;
881         }
882
883         /*
884          *      The write queue this time is holding sockets ready to use
885          *      hooked into the SABM we saved
886          */
887         for (;;) {
888                 prepare_to_wait(sk->sk_sleep, &wait, TASK_INTERRUPTIBLE);
889
890                 skb = skb_dequeue(&sk->sk_receive_queue);
891                 if (skb)
892                         break;
893
894                 if (flags & O_NONBLOCK) {
895                         err = -EWOULDBLOCK;
896                         break;
897                 }
898                 if (!signal_pending(current)) {
899                         release_sock(sk);
900                         schedule();
901                         lock_sock(sk);
902                         continue;
903                 }
904                 err = -ERESTARTSYS;
905                 break;
906         }
907         finish_wait(sk->sk_sleep, &wait);
908         if (err)
909                 goto out_release;
910
911         newsk = skb->sk;
912         newsk->sk_socket = newsock;
913         newsk->sk_sleep = &newsock->wait;
914
915         /* Now attach up the new socket */
916         skb->sk = NULL;
917         kfree_skb(skb);
918         sk->sk_ack_backlog--;
919         newsock->sk = newsk;
920
921 out_release:
922         release_sock(sk);
923
924         return err;
925 }
926
927 static int rose_getname(struct socket *sock, struct sockaddr *uaddr,
928         int *uaddr_len, int peer)
929 {
930         struct full_sockaddr_rose *srose = (struct full_sockaddr_rose *)uaddr;
931         struct sock *sk = sock->sk;
932         struct rose_sock *rose = rose_sk(sk);
933         int n;
934
935         if (peer != 0) {
936                 if (sk->sk_state != TCP_ESTABLISHED)
937                         return -ENOTCONN;
938                 srose->srose_family = AF_ROSE;
939                 srose->srose_addr   = rose->dest_addr;
940                 srose->srose_call   = rose->dest_call;
941                 srose->srose_ndigis = rose->dest_ndigis;
942                 for (n = 0; n < rose->dest_ndigis; n++)
943                         srose->srose_digis[n] = rose->dest_digis[n];
944         } else {
945                 srose->srose_family = AF_ROSE;
946                 srose->srose_addr   = rose->source_addr;
947                 srose->srose_call   = rose->source_call;
948                 srose->srose_ndigis = rose->source_ndigis;
949                 for (n = 0; n < rose->source_ndigis; n++)
950                         srose->srose_digis[n] = rose->source_digis[n];
951         }
952
953         *uaddr_len = sizeof(struct full_sockaddr_rose);
954         return 0;
955 }
956
957 int rose_rx_call_request(struct sk_buff *skb, struct net_device *dev, struct rose_neigh *neigh, unsigned int lci)
958 {
959         struct sock *sk;
960         struct sock *make;
961         struct rose_sock *make_rose;
962         struct rose_facilities_struct facilities;
963         int n, len;
964
965         skb->sk = NULL;         /* Initially we don't know who it's for */
966
967         /*
968          *      skb->data points to the rose frame start
969          */
970         memset(&facilities, 0x00, sizeof(struct rose_facilities_struct));
971
972         len  = (((skb->data[3] >> 4) & 0x0F) + 1) / 2;
973         len += (((skb->data[3] >> 0) & 0x0F) + 1) / 2;
974         if (!rose_parse_facilities(skb->data + len + 4, &facilities)) {
975                 rose_transmit_clear_request(neigh, lci, ROSE_INVALID_FACILITY, 76);
976                 return 0;
977         }
978
979         sk = rose_find_listener(&facilities.source_addr, &facilities.source_call);
980
981         /*
982          * We can't accept the Call Request.
983          */
984         if (sk == NULL || sk_acceptq_is_full(sk) ||
985             (make = rose_make_new(sk)) == NULL) {
986                 rose_transmit_clear_request(neigh, lci, ROSE_NETWORK_CONGESTION, 120);
987                 return 0;
988         }
989
990         skb->sk     = make;
991         make->sk_state = TCP_ESTABLISHED;
992         make_rose = rose_sk(make);
993
994         make_rose->lci           = lci;
995         make_rose->dest_addr     = facilities.dest_addr;
996         make_rose->dest_call     = facilities.dest_call;
997         make_rose->dest_ndigis   = facilities.dest_ndigis;
998         for (n = 0 ; n < facilities.dest_ndigis ; n++)
999                 make_rose->dest_digis[n] = facilities.dest_digis[n];
1000         make_rose->source_addr   = facilities.source_addr;
1001         make_rose->source_call   = facilities.source_call;
1002         make_rose->source_ndigis = facilities.source_ndigis;
1003         for (n = 0 ; n < facilities.source_ndigis ; n++)
1004                 make_rose->source_digis[n]= facilities.source_digis[n];
1005         make_rose->neighbour     = neigh;
1006         make_rose->device        = dev;
1007         make_rose->facilities    = facilities;
1008
1009         make_rose->neighbour->use++;
1010
1011         if (rose_sk(sk)->defer) {
1012                 make_rose->state = ROSE_STATE_5;
1013         } else {
1014                 rose_write_internal(make, ROSE_CALL_ACCEPTED);
1015                 make_rose->state = ROSE_STATE_3;
1016                 rose_start_idletimer(make);
1017         }
1018
1019         make_rose->condition = 0x00;
1020         make_rose->vs        = 0;
1021         make_rose->va        = 0;
1022         make_rose->vr        = 0;
1023         make_rose->vl        = 0;
1024         sk->sk_ack_backlog++;
1025
1026         rose_insert_socket(make);
1027
1028         skb_queue_head(&sk->sk_receive_queue, skb);
1029
1030         rose_start_heartbeat(make);
1031
1032         if (!sock_flag(sk, SOCK_DEAD))
1033                 sk->sk_data_ready(sk, skb->len);
1034
1035         return 1;
1036 }
1037
1038 static int rose_sendmsg(struct kiocb *iocb, struct socket *sock,
1039                         struct msghdr *msg, size_t len)
1040 {
1041         struct sock *sk = sock->sk;
1042         struct rose_sock *rose = rose_sk(sk);
1043         struct sockaddr_rose *usrose = (struct sockaddr_rose *)msg->msg_name;
1044         int err;
1045         struct full_sockaddr_rose srose;
1046         struct sk_buff *skb;
1047         unsigned char *asmptr;
1048         int n, size, qbit = 0;
1049
1050         if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1051                 return -EINVAL;
1052
1053         if (sock_flag(sk, SOCK_ZAPPED))
1054                 return -EADDRNOTAVAIL;
1055
1056         if (sk->sk_shutdown & SEND_SHUTDOWN) {
1057                 send_sig(SIGPIPE, current, 0);
1058                 return -EPIPE;
1059         }
1060
1061         if (rose->neighbour == NULL || rose->device == NULL)
1062                 return -ENETUNREACH;
1063
1064         if (usrose != NULL) {
1065                 if (msg->msg_namelen != sizeof(struct sockaddr_rose) && msg->msg_namelen != sizeof(struct full_sockaddr_rose))
1066                         return -EINVAL;
1067                 memset(&srose, 0, sizeof(struct full_sockaddr_rose));
1068                 memcpy(&srose, usrose, msg->msg_namelen);
1069                 if (rosecmp(&rose->dest_addr, &srose.srose_addr) != 0 ||
1070                     ax25cmp(&rose->dest_call, &srose.srose_call) != 0)
1071                         return -EISCONN;
1072                 if (srose.srose_ndigis != rose->dest_ndigis)
1073                         return -EISCONN;
1074                 if (srose.srose_ndigis == rose->dest_ndigis) {
1075                         for (n = 0 ; n < srose.srose_ndigis ; n++)
1076                                 if (ax25cmp(&rose->dest_digis[n],
1077                                             &srose.srose_digis[n]))
1078                                         return -EISCONN;
1079                 }
1080                 if (srose.srose_family != AF_ROSE)
1081                         return -EINVAL;
1082         } else {
1083                 if (sk->sk_state != TCP_ESTABLISHED)
1084                         return -ENOTCONN;
1085
1086                 srose.srose_family = AF_ROSE;
1087                 srose.srose_addr   = rose->dest_addr;
1088                 srose.srose_call   = rose->dest_call;
1089                 srose.srose_ndigis = rose->dest_ndigis;
1090                 for (n = 0 ; n < rose->dest_ndigis ; n++)
1091                         srose.srose_digis[n] = rose->dest_digis[n];
1092         }
1093
1094         SOCK_DEBUG(sk, "ROSE: sendto: Addresses built.\n");
1095
1096         /* Build a packet */
1097         SOCK_DEBUG(sk, "ROSE: sendto: building packet.\n");
1098         size = len + AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN;
1099
1100         if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1101                 return err;
1102
1103         skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN);
1104
1105         /*
1106          *      Put the data on the end
1107          */
1108         SOCK_DEBUG(sk, "ROSE: Appending user data\n");
1109
1110         skb_reset_transport_header(skb);
1111         skb_put(skb, len);
1112
1113         err = memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len);
1114         if (err) {
1115                 kfree_skb(skb);
1116                 return err;
1117         }
1118
1119         /*
1120          *      If the Q BIT Include socket option is in force, the first
1121          *      byte of the user data is the logical value of the Q Bit.
1122          */
1123         if (rose->qbitincl) {
1124                 qbit = skb->data[0];
1125                 skb_pull(skb, 1);
1126         }
1127
1128         /*
1129          *      Push down the ROSE header
1130          */
1131         asmptr = skb_push(skb, ROSE_MIN_LEN);
1132
1133         SOCK_DEBUG(sk, "ROSE: Building Network Header.\n");
1134
1135         /* Build a ROSE Network header */
1136         asmptr[0] = ((rose->lci >> 8) & 0x0F) | ROSE_GFI;
1137         asmptr[1] = (rose->lci >> 0) & 0xFF;
1138         asmptr[2] = ROSE_DATA;
1139
1140         if (qbit)
1141                 asmptr[0] |= ROSE_Q_BIT;
1142
1143         SOCK_DEBUG(sk, "ROSE: Built header.\n");
1144
1145         SOCK_DEBUG(sk, "ROSE: Transmitting buffer\n");
1146
1147         if (sk->sk_state != TCP_ESTABLISHED) {
1148                 kfree_skb(skb);
1149                 return -ENOTCONN;
1150         }
1151
1152 #ifdef M_BIT
1153 #define ROSE_PACLEN (256-ROSE_MIN_LEN)
1154         if (skb->len - ROSE_MIN_LEN > ROSE_PACLEN) {
1155                 unsigned char header[ROSE_MIN_LEN];
1156                 struct sk_buff *skbn;
1157                 int frontlen;
1158                 int lg;
1159
1160                 /* Save a copy of the Header */
1161                 skb_copy_from_linear_data(skb, header, ROSE_MIN_LEN);
1162                 skb_pull(skb, ROSE_MIN_LEN);
1163
1164                 frontlen = skb_headroom(skb);
1165
1166                 while (skb->len > 0) {
1167                         if ((skbn = sock_alloc_send_skb(sk, frontlen + ROSE_PACLEN, 0, &err)) == NULL) {
1168                                 kfree_skb(skb);
1169                                 return err;
1170                         }
1171
1172                         skbn->sk   = sk;
1173                         skbn->free = 1;
1174                         skbn->arp  = 1;
1175
1176                         skb_reserve(skbn, frontlen);
1177
1178                         lg = (ROSE_PACLEN > skb->len) ? skb->len : ROSE_PACLEN;
1179
1180                         /* Copy the user data */
1181                         skb_copy_from_linear_data(skb, skb_put(skbn, lg), lg);
1182                         skb_pull(skb, lg);
1183
1184                         /* Duplicate the Header */
1185                         skb_push(skbn, ROSE_MIN_LEN);
1186                         skb_copy_to_linear_data(skbn, header, ROSE_MIN_LEN);
1187
1188                         if (skb->len > 0)
1189                                 skbn->data[2] |= M_BIT;
1190
1191                         skb_queue_tail(&sk->sk_write_queue, skbn); /* Throw it on the queue */
1192                 }
1193
1194                 skb->free = 1;
1195                 kfree_skb(skb);
1196         } else {
1197                 skb_queue_tail(&sk->sk_write_queue, skb);               /* Throw it on the queue */
1198         }
1199 #else
1200         skb_queue_tail(&sk->sk_write_queue, skb);       /* Shove it onto the queue */
1201 #endif
1202
1203         rose_kick(sk);
1204
1205         return len;
1206 }
1207
1208
1209 static int rose_recvmsg(struct kiocb *iocb, struct socket *sock,
1210                         struct msghdr *msg, size_t size, int flags)
1211 {
1212         struct sock *sk = sock->sk;
1213         struct rose_sock *rose = rose_sk(sk);
1214         struct sockaddr_rose *srose = (struct sockaddr_rose *)msg->msg_name;
1215         size_t copied;
1216         unsigned char *asmptr;
1217         struct sk_buff *skb;
1218         int n, er, qbit;
1219
1220         /*
1221          * This works for seqpacket too. The receiver has ordered the queue for
1222          * us! We do one quick check first though
1223          */
1224         if (sk->sk_state != TCP_ESTABLISHED)
1225                 return -ENOTCONN;
1226
1227         /* Now we can treat all alike */
1228         if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL)
1229                 return er;
1230
1231         qbit = (skb->data[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
1232
1233         skb_pull(skb, ROSE_MIN_LEN);
1234
1235         if (rose->qbitincl) {
1236                 asmptr  = skb_push(skb, 1);
1237                 *asmptr = qbit;
1238         }
1239
1240         skb_reset_transport_header(skb);
1241         copied     = skb->len;
1242
1243         if (copied > size) {
1244                 copied = size;
1245                 msg->msg_flags |= MSG_TRUNC;
1246         }
1247
1248         skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1249
1250         if (srose != NULL) {
1251                 srose->srose_family = AF_ROSE;
1252                 srose->srose_addr   = rose->dest_addr;
1253                 srose->srose_call   = rose->dest_call;
1254                 srose->srose_ndigis = rose->dest_ndigis;
1255                 if (msg->msg_namelen >= sizeof(struct full_sockaddr_rose)) {
1256                         struct full_sockaddr_rose *full_srose = (struct full_sockaddr_rose *)msg->msg_name;
1257                         for (n = 0 ; n < rose->dest_ndigis ; n++)
1258                                 full_srose->srose_digis[n] = rose->dest_digis[n];
1259                         msg->msg_namelen = sizeof(struct full_sockaddr_rose);
1260                 } else {
1261                         if (rose->dest_ndigis >= 1) {
1262                                 srose->srose_ndigis = 1;
1263                                 srose->srose_digi = rose->dest_digis[0];
1264                         }
1265                         msg->msg_namelen = sizeof(struct sockaddr_rose);
1266                 }
1267         }
1268
1269         skb_free_datagram(sk, skb);
1270
1271         return copied;
1272 }
1273
1274
1275 static int rose_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1276 {
1277         struct sock *sk = sock->sk;
1278         struct rose_sock *rose = rose_sk(sk);
1279         void __user *argp = (void __user *)arg;
1280
1281         switch (cmd) {
1282         case TIOCOUTQ: {
1283                 long amount;
1284                 amount = sk->sk_sndbuf - atomic_read(&sk->sk_wmem_alloc);
1285                 if (amount < 0)
1286                         amount = 0;
1287                 return put_user(amount, (unsigned int __user *) argp);
1288         }
1289
1290         case TIOCINQ: {
1291                 struct sk_buff *skb;
1292                 long amount = 0L;
1293                 /* These two are safe on a single CPU system as only user tasks fiddle here */
1294                 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1295                         amount = skb->len;
1296                 return put_user(amount, (unsigned int __user *) argp);
1297         }
1298
1299         case SIOCGSTAMP:
1300                 return sock_get_timestamp(sk, (struct timeval __user *) argp);
1301
1302         case SIOCGSTAMPNS:
1303                 return sock_get_timestampns(sk, (struct timespec __user *) argp);
1304
1305         case SIOCGIFADDR:
1306         case SIOCSIFADDR:
1307         case SIOCGIFDSTADDR:
1308         case SIOCSIFDSTADDR:
1309         case SIOCGIFBRDADDR:
1310         case SIOCSIFBRDADDR:
1311         case SIOCGIFNETMASK:
1312         case SIOCSIFNETMASK:
1313         case SIOCGIFMETRIC:
1314         case SIOCSIFMETRIC:
1315                 return -EINVAL;
1316
1317         case SIOCADDRT:
1318         case SIOCDELRT:
1319         case SIOCRSCLRRT:
1320                 if (!capable(CAP_NET_ADMIN))
1321                         return -EPERM;
1322                 return rose_rt_ioctl(cmd, argp);
1323
1324         case SIOCRSGCAUSE: {
1325                 struct rose_cause_struct rose_cause;
1326                 rose_cause.cause      = rose->cause;
1327                 rose_cause.diagnostic = rose->diagnostic;
1328                 return copy_to_user(argp, &rose_cause, sizeof(struct rose_cause_struct)) ? -EFAULT : 0;
1329         }
1330
1331         case SIOCRSSCAUSE: {
1332                 struct rose_cause_struct rose_cause;
1333                 if (copy_from_user(&rose_cause, argp, sizeof(struct rose_cause_struct)))
1334                         return -EFAULT;
1335                 rose->cause      = rose_cause.cause;
1336                 rose->diagnostic = rose_cause.diagnostic;
1337                 return 0;
1338         }
1339
1340         case SIOCRSSL2CALL:
1341                 if (!capable(CAP_NET_ADMIN)) return -EPERM;
1342                 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1343                         ax25_listen_release(&rose_callsign, NULL);
1344                 if (copy_from_user(&rose_callsign, argp, sizeof(ax25_address)))
1345                         return -EFAULT;
1346                 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1347                         return ax25_listen_register(&rose_callsign, NULL);
1348
1349                 return 0;
1350
1351         case SIOCRSGL2CALL:
1352                 return copy_to_user(argp, &rose_callsign, sizeof(ax25_address)) ? -EFAULT : 0;
1353
1354         case SIOCRSACCEPT:
1355                 if (rose->state == ROSE_STATE_5) {
1356                         rose_write_internal(sk, ROSE_CALL_ACCEPTED);
1357                         rose_start_idletimer(sk);
1358                         rose->condition = 0x00;
1359                         rose->vs        = 0;
1360                         rose->va        = 0;
1361                         rose->vr        = 0;
1362                         rose->vl        = 0;
1363                         rose->state     = ROSE_STATE_3;
1364                 }
1365                 return 0;
1366
1367         default:
1368                 return -ENOIOCTLCMD;
1369         }
1370
1371         return 0;
1372 }
1373
1374 #ifdef CONFIG_PROC_FS
1375 static void *rose_info_start(struct seq_file *seq, loff_t *pos)
1376 {
1377         int i;
1378         struct sock *s;
1379         struct hlist_node *node;
1380
1381         spin_lock_bh(&rose_list_lock);
1382         if (*pos == 0)
1383                 return SEQ_START_TOKEN;
1384
1385         i = 1;
1386         sk_for_each(s, node, &rose_list) {
1387                 if (i == *pos)
1388                         return s;
1389                 ++i;
1390         }
1391         return NULL;
1392 }
1393
1394 static void *rose_info_next(struct seq_file *seq, void *v, loff_t *pos)
1395 {
1396         ++*pos;
1397
1398         return (v == SEQ_START_TOKEN) ? sk_head(&rose_list)
1399                 : sk_next((struct sock *)v);
1400 }
1401
1402 static void rose_info_stop(struct seq_file *seq, void *v)
1403 {
1404         spin_unlock_bh(&rose_list_lock);
1405 }
1406
1407 static int rose_info_show(struct seq_file *seq, void *v)
1408 {
1409         char buf[11];
1410
1411         if (v == SEQ_START_TOKEN)
1412                 seq_puts(seq,
1413                          "dest_addr  dest_call src_addr   src_call  dev   lci neigh st vs vr va   t  t1  t2  t3  hb    idle Snd-Q Rcv-Q inode\n");
1414
1415         else {
1416                 struct sock *s = v;
1417                 struct rose_sock *rose = rose_sk(s);
1418                 const char *devname, *callsign;
1419                 const struct net_device *dev = rose->device;
1420
1421                 if (!dev)
1422                         devname = "???";
1423                 else
1424                         devname = dev->name;
1425
1426                 seq_printf(seq, "%-10s %-9s ",
1427                         rose2asc(&rose->dest_addr),
1428                         ax2asc(buf, &rose->dest_call));
1429
1430                 if (ax25cmp(&rose->source_call, &null_ax25_address) == 0)
1431                         callsign = "??????-?";
1432                 else
1433                         callsign = ax2asc(buf, &rose->source_call);
1434
1435                 seq_printf(seq,
1436                            "%-10s %-9s %-5s %3.3X %05d  %d  %d  %d  %d %3lu %3lu %3lu %3lu %3lu %3lu/%03lu %5d %5d %ld\n",
1437                         rose2asc(&rose->source_addr),
1438                         callsign,
1439                         devname,
1440                         rose->lci & 0x0FFF,
1441                         (rose->neighbour) ? rose->neighbour->number : 0,
1442                         rose->state,
1443                         rose->vs,
1444                         rose->vr,
1445                         rose->va,
1446                         ax25_display_timer(&rose->timer) / HZ,
1447                         rose->t1 / HZ,
1448                         rose->t2 / HZ,
1449                         rose->t3 / HZ,
1450                         rose->hb / HZ,
1451                         ax25_display_timer(&rose->idletimer) / (60 * HZ),
1452                         rose->idle / (60 * HZ),
1453                         atomic_read(&s->sk_wmem_alloc),
1454                         atomic_read(&s->sk_rmem_alloc),
1455                         s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1456         }
1457
1458         return 0;
1459 }
1460
1461 static const struct seq_operations rose_info_seqops = {
1462         .start = rose_info_start,
1463         .next = rose_info_next,
1464         .stop = rose_info_stop,
1465         .show = rose_info_show,
1466 };
1467
1468 static int rose_info_open(struct inode *inode, struct file *file)
1469 {
1470         return seq_open(file, &rose_info_seqops);
1471 }
1472
1473 static const struct file_operations rose_info_fops = {
1474         .owner = THIS_MODULE,
1475         .open = rose_info_open,
1476         .read = seq_read,
1477         .llseek = seq_lseek,
1478         .release = seq_release,
1479 };
1480 #endif  /* CONFIG_PROC_FS */
1481
1482 static struct net_proto_family rose_family_ops = {
1483         .family         =       PF_ROSE,
1484         .create         =       rose_create,
1485         .owner          =       THIS_MODULE,
1486 };
1487
1488 static struct proto_ops rose_proto_ops = {
1489         .family         =       PF_ROSE,
1490         .owner          =       THIS_MODULE,
1491         .release        =       rose_release,
1492         .bind           =       rose_bind,
1493         .connect        =       rose_connect,
1494         .socketpair     =       sock_no_socketpair,
1495         .accept         =       rose_accept,
1496         .getname        =       rose_getname,
1497         .poll           =       datagram_poll,
1498         .ioctl          =       rose_ioctl,
1499         .listen         =       rose_listen,
1500         .shutdown       =       sock_no_shutdown,
1501         .setsockopt     =       rose_setsockopt,
1502         .getsockopt     =       rose_getsockopt,
1503         .sendmsg        =       rose_sendmsg,
1504         .recvmsg        =       rose_recvmsg,
1505         .mmap           =       sock_no_mmap,
1506         .sendpage       =       sock_no_sendpage,
1507 };
1508
1509 static struct notifier_block rose_dev_notifier = {
1510         .notifier_call  =       rose_device_event,
1511 };
1512
1513 static struct net_device **dev_rose;
1514
1515 static struct ax25_protocol rose_pid = {
1516         .pid    = AX25_P_ROSE,
1517         .func   = rose_route_frame
1518 };
1519
1520 static struct ax25_linkfail rose_linkfail_notifier = {
1521         .func   = rose_link_failed
1522 };
1523
1524 static int __init rose_proto_init(void)
1525 {
1526         int i;
1527         int rc;
1528
1529         if (rose_ndevs > 0x7FFFFFFF/sizeof(struct net_device *)) {
1530                 printk(KERN_ERR "ROSE: rose_proto_init - rose_ndevs parameter to large\n");
1531                 rc = -EINVAL;
1532                 goto out;
1533         }
1534
1535         rc = proto_register(&rose_proto, 0);
1536         if (rc != 0)
1537                 goto out;
1538
1539         rose_callsign = null_ax25_address;
1540
1541         dev_rose = kzalloc(rose_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1542         if (dev_rose == NULL) {
1543                 printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate device structure\n");
1544                 rc = -ENOMEM;
1545                 goto out_proto_unregister;
1546         }
1547
1548         for (i = 0; i < rose_ndevs; i++) {
1549                 struct net_device *dev;
1550                 char name[IFNAMSIZ];
1551
1552                 sprintf(name, "rose%d", i);
1553                 dev = alloc_netdev(sizeof(struct net_device_stats),
1554                                    name, rose_setup);
1555                 if (!dev) {
1556                         printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate memory\n");
1557                         rc = -ENOMEM;
1558                         goto fail;
1559                 }
1560                 rc = register_netdev(dev);
1561                 if (rc) {
1562                         printk(KERN_ERR "ROSE: netdevice registration failed\n");
1563                         free_netdev(dev);
1564                         goto fail;
1565                 }
1566                 lockdep_set_class(&dev->_xmit_lock, &rose_netdev_xmit_lock_key);
1567                 dev_rose[i] = dev;
1568         }
1569
1570         sock_register(&rose_family_ops);
1571         register_netdevice_notifier(&rose_dev_notifier);
1572
1573         ax25_register_pid(&rose_pid);
1574         ax25_linkfail_register(&rose_linkfail_notifier);
1575
1576 #ifdef CONFIG_SYSCTL
1577         rose_register_sysctl();
1578 #endif
1579         rose_loopback_init();
1580
1581         rose_add_loopback_neigh();
1582
1583         proc_net_fops_create(&init_net, "rose", S_IRUGO, &rose_info_fops);
1584         proc_net_fops_create(&init_net, "rose_neigh", S_IRUGO, &rose_neigh_fops);
1585         proc_net_fops_create(&init_net, "rose_nodes", S_IRUGO, &rose_nodes_fops);
1586         proc_net_fops_create(&init_net, "rose_routes", S_IRUGO, &rose_routes_fops);
1587 out:
1588         return rc;
1589 fail:
1590         while (--i >= 0) {
1591                 unregister_netdev(dev_rose[i]);
1592                 free_netdev(dev_rose[i]);
1593         }
1594         kfree(dev_rose);
1595 out_proto_unregister:
1596         proto_unregister(&rose_proto);
1597         goto out;
1598 }
1599 module_init(rose_proto_init);
1600
1601 module_param(rose_ndevs, int, 0);
1602 MODULE_PARM_DESC(rose_ndevs, "number of ROSE devices");
1603
1604 MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1605 MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol");
1606 MODULE_LICENSE("GPL");
1607 MODULE_ALIAS_NETPROTO(PF_ROSE);
1608
1609 static void __exit rose_exit(void)
1610 {
1611         int i;
1612
1613         proc_net_remove(&init_net, "rose");
1614         proc_net_remove(&init_net, "rose_neigh");
1615         proc_net_remove(&init_net, "rose_nodes");
1616         proc_net_remove(&init_net, "rose_routes");
1617         rose_loopback_clear();
1618
1619         rose_rt_free();
1620
1621         ax25_protocol_release(AX25_P_ROSE);
1622         ax25_linkfail_release(&rose_linkfail_notifier);
1623
1624         if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1625                 ax25_listen_release(&rose_callsign, NULL);
1626
1627 #ifdef CONFIG_SYSCTL
1628         rose_unregister_sysctl();
1629 #endif
1630         unregister_netdevice_notifier(&rose_dev_notifier);
1631
1632         sock_unregister(PF_ROSE);
1633
1634         for (i = 0; i < rose_ndevs; i++) {
1635                 struct net_device *dev = dev_rose[i];
1636
1637                 if (dev) {
1638                         unregister_netdev(dev);
1639                         free_netdev(dev);
1640                 }
1641         }
1642
1643         kfree(dev_rose);
1644         proto_unregister(&rose_proto);
1645 }
1646
1647 module_exit(rose_exit);