18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci *
48c2ecf20Sopenharmony_ci * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
58c2ecf20Sopenharmony_ci * Copyright (C) Joerg Reuter DL1BKE (jreuter@yaina.de)
68c2ecf20Sopenharmony_ci */
78c2ecf20Sopenharmony_ci#include <linux/errno.h>
88c2ecf20Sopenharmony_ci#include <linux/types.h>
98c2ecf20Sopenharmony_ci#include <linux/socket.h>
108c2ecf20Sopenharmony_ci#include <linux/in.h>
118c2ecf20Sopenharmony_ci#include <linux/kernel.h>
128c2ecf20Sopenharmony_ci#include <linux/timer.h>
138c2ecf20Sopenharmony_ci#include <linux/string.h>
148c2ecf20Sopenharmony_ci#include <linux/sockios.h>
158c2ecf20Sopenharmony_ci#include <linux/net.h>
168c2ecf20Sopenharmony_ci#include <net/ax25.h>
178c2ecf20Sopenharmony_ci#include <linux/inet.h>
188c2ecf20Sopenharmony_ci#include <linux/netdevice.h>
198c2ecf20Sopenharmony_ci#include <linux/skbuff.h>
208c2ecf20Sopenharmony_ci#include <net/sock.h>
218c2ecf20Sopenharmony_ci#include <net/tcp_states.h>
228c2ecf20Sopenharmony_ci#include <linux/uaccess.h>
238c2ecf20Sopenharmony_ci#include <linux/fcntl.h>
248c2ecf20Sopenharmony_ci#include <linux/mm.h>
258c2ecf20Sopenharmony_ci#include <linux/interrupt.h>
268c2ecf20Sopenharmony_ci
278c2ecf20Sopenharmony_ci/*
288c2ecf20Sopenharmony_ci *	State machine for state 1, Awaiting Connection State.
298c2ecf20Sopenharmony_ci *	The handling of the timer(s) is in file ax25_ds_timer.c.
308c2ecf20Sopenharmony_ci *	Handling of state 0 and connection release is in ax25.c.
318c2ecf20Sopenharmony_ci */
328c2ecf20Sopenharmony_cistatic int ax25_ds_state1_machine(ax25_cb *ax25, struct sk_buff *skb, int frametype, int pf, int type)
338c2ecf20Sopenharmony_ci{
348c2ecf20Sopenharmony_ci	switch (frametype) {
358c2ecf20Sopenharmony_ci	case AX25_SABM:
368c2ecf20Sopenharmony_ci		ax25->modulus = AX25_MODULUS;
378c2ecf20Sopenharmony_ci		ax25->window  = ax25->ax25_dev->values[AX25_VALUES_WINDOW];
388c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_UA, pf, AX25_RESPONSE);
398c2ecf20Sopenharmony_ci		break;
408c2ecf20Sopenharmony_ci
418c2ecf20Sopenharmony_ci	case AX25_SABME:
428c2ecf20Sopenharmony_ci		ax25->modulus = AX25_EMODULUS;
438c2ecf20Sopenharmony_ci		ax25->window  =  ax25->ax25_dev->values[AX25_VALUES_EWINDOW];
448c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_UA, pf, AX25_RESPONSE);
458c2ecf20Sopenharmony_ci		break;
468c2ecf20Sopenharmony_ci
478c2ecf20Sopenharmony_ci	case AX25_DISC:
488c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_DM, pf, AX25_RESPONSE);
498c2ecf20Sopenharmony_ci		break;
508c2ecf20Sopenharmony_ci
518c2ecf20Sopenharmony_ci	case AX25_UA:
528c2ecf20Sopenharmony_ci		ax25_calculate_rtt(ax25);
538c2ecf20Sopenharmony_ci		ax25_stop_t1timer(ax25);
548c2ecf20Sopenharmony_ci		ax25_start_t3timer(ax25);
558c2ecf20Sopenharmony_ci		ax25_start_idletimer(ax25);
568c2ecf20Sopenharmony_ci		ax25->vs      = 0;
578c2ecf20Sopenharmony_ci		ax25->va      = 0;
588c2ecf20Sopenharmony_ci		ax25->vr      = 0;
598c2ecf20Sopenharmony_ci		ax25->state   = AX25_STATE_3;
608c2ecf20Sopenharmony_ci		ax25->n2count = 0;
618c2ecf20Sopenharmony_ci		if (ax25->sk != NULL) {
628c2ecf20Sopenharmony_ci			bh_lock_sock(ax25->sk);
638c2ecf20Sopenharmony_ci			ax25->sk->sk_state = TCP_ESTABLISHED;
648c2ecf20Sopenharmony_ci			/*
658c2ecf20Sopenharmony_ci			 * For WAIT_SABM connections we will produce an accept
668c2ecf20Sopenharmony_ci			 * ready socket here
678c2ecf20Sopenharmony_ci			 */
688c2ecf20Sopenharmony_ci			if (!sock_flag(ax25->sk, SOCK_DEAD))
698c2ecf20Sopenharmony_ci				ax25->sk->sk_state_change(ax25->sk);
708c2ecf20Sopenharmony_ci			bh_unlock_sock(ax25->sk);
718c2ecf20Sopenharmony_ci		}
728c2ecf20Sopenharmony_ci		ax25_dama_on(ax25);
738c2ecf20Sopenharmony_ci
748c2ecf20Sopenharmony_ci		/* according to DK4EG's spec we are required to
758c2ecf20Sopenharmony_ci		 * send a RR RESPONSE FINAL NR=0.
768c2ecf20Sopenharmony_ci		 */
778c2ecf20Sopenharmony_ci
788c2ecf20Sopenharmony_ci		ax25_std_enquiry_response(ax25);
798c2ecf20Sopenharmony_ci		break;
808c2ecf20Sopenharmony_ci
818c2ecf20Sopenharmony_ci	case AX25_DM:
828c2ecf20Sopenharmony_ci		if (pf)
838c2ecf20Sopenharmony_ci			ax25_disconnect(ax25, ECONNREFUSED);
848c2ecf20Sopenharmony_ci		break;
858c2ecf20Sopenharmony_ci
868c2ecf20Sopenharmony_ci	default:
878c2ecf20Sopenharmony_ci		if (pf)
888c2ecf20Sopenharmony_ci			ax25_send_control(ax25, AX25_SABM, AX25_POLLON, AX25_COMMAND);
898c2ecf20Sopenharmony_ci		break;
908c2ecf20Sopenharmony_ci	}
918c2ecf20Sopenharmony_ci
928c2ecf20Sopenharmony_ci	return 0;
938c2ecf20Sopenharmony_ci}
948c2ecf20Sopenharmony_ci
958c2ecf20Sopenharmony_ci/*
968c2ecf20Sopenharmony_ci *	State machine for state 2, Awaiting Release State.
978c2ecf20Sopenharmony_ci *	The handling of the timer(s) is in file ax25_ds_timer.c
988c2ecf20Sopenharmony_ci *	Handling of state 0 and connection release is in ax25.c.
998c2ecf20Sopenharmony_ci */
1008c2ecf20Sopenharmony_cistatic int ax25_ds_state2_machine(ax25_cb *ax25, struct sk_buff *skb, int frametype, int pf, int type)
1018c2ecf20Sopenharmony_ci{
1028c2ecf20Sopenharmony_ci	switch (frametype) {
1038c2ecf20Sopenharmony_ci	case AX25_SABM:
1048c2ecf20Sopenharmony_ci	case AX25_SABME:
1058c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_DISC, AX25_POLLON, AX25_COMMAND);
1068c2ecf20Sopenharmony_ci		ax25_dama_off(ax25);
1078c2ecf20Sopenharmony_ci		break;
1088c2ecf20Sopenharmony_ci
1098c2ecf20Sopenharmony_ci	case AX25_DISC:
1108c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_UA, pf, AX25_RESPONSE);
1118c2ecf20Sopenharmony_ci		ax25_dama_off(ax25);
1128c2ecf20Sopenharmony_ci		ax25_disconnect(ax25, 0);
1138c2ecf20Sopenharmony_ci		break;
1148c2ecf20Sopenharmony_ci
1158c2ecf20Sopenharmony_ci	case AX25_DM:
1168c2ecf20Sopenharmony_ci	case AX25_UA:
1178c2ecf20Sopenharmony_ci		if (pf) {
1188c2ecf20Sopenharmony_ci			ax25_dama_off(ax25);
1198c2ecf20Sopenharmony_ci			ax25_disconnect(ax25, 0);
1208c2ecf20Sopenharmony_ci		}
1218c2ecf20Sopenharmony_ci		break;
1228c2ecf20Sopenharmony_ci
1238c2ecf20Sopenharmony_ci	case AX25_I:
1248c2ecf20Sopenharmony_ci	case AX25_REJ:
1258c2ecf20Sopenharmony_ci	case AX25_RNR:
1268c2ecf20Sopenharmony_ci	case AX25_RR:
1278c2ecf20Sopenharmony_ci		if (pf) {
1288c2ecf20Sopenharmony_ci			ax25_send_control(ax25, AX25_DISC, AX25_POLLON, AX25_COMMAND);
1298c2ecf20Sopenharmony_ci			ax25_dama_off(ax25);
1308c2ecf20Sopenharmony_ci		}
1318c2ecf20Sopenharmony_ci		break;
1328c2ecf20Sopenharmony_ci
1338c2ecf20Sopenharmony_ci	default:
1348c2ecf20Sopenharmony_ci		break;
1358c2ecf20Sopenharmony_ci	}
1368c2ecf20Sopenharmony_ci
1378c2ecf20Sopenharmony_ci	return 0;
1388c2ecf20Sopenharmony_ci}
1398c2ecf20Sopenharmony_ci
1408c2ecf20Sopenharmony_ci/*
1418c2ecf20Sopenharmony_ci *	State machine for state 3, Connected State.
1428c2ecf20Sopenharmony_ci *	The handling of the timer(s) is in file ax25_timer.c
1438c2ecf20Sopenharmony_ci *	Handling of state 0 and connection release is in ax25.c.
1448c2ecf20Sopenharmony_ci */
1458c2ecf20Sopenharmony_cistatic int ax25_ds_state3_machine(ax25_cb *ax25, struct sk_buff *skb, int frametype, int ns, int nr, int pf, int type)
1468c2ecf20Sopenharmony_ci{
1478c2ecf20Sopenharmony_ci	int queued = 0;
1488c2ecf20Sopenharmony_ci
1498c2ecf20Sopenharmony_ci	switch (frametype) {
1508c2ecf20Sopenharmony_ci	case AX25_SABM:
1518c2ecf20Sopenharmony_ci	case AX25_SABME:
1528c2ecf20Sopenharmony_ci		if (frametype == AX25_SABM) {
1538c2ecf20Sopenharmony_ci			ax25->modulus   = AX25_MODULUS;
1548c2ecf20Sopenharmony_ci			ax25->window    = ax25->ax25_dev->values[AX25_VALUES_WINDOW];
1558c2ecf20Sopenharmony_ci		} else {
1568c2ecf20Sopenharmony_ci			ax25->modulus   = AX25_EMODULUS;
1578c2ecf20Sopenharmony_ci			ax25->window    = ax25->ax25_dev->values[AX25_VALUES_EWINDOW];
1588c2ecf20Sopenharmony_ci		}
1598c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_UA, pf, AX25_RESPONSE);
1608c2ecf20Sopenharmony_ci		ax25_stop_t1timer(ax25);
1618c2ecf20Sopenharmony_ci		ax25_start_t3timer(ax25);
1628c2ecf20Sopenharmony_ci		ax25_start_idletimer(ax25);
1638c2ecf20Sopenharmony_ci		ax25->condition = 0x00;
1648c2ecf20Sopenharmony_ci		ax25->vs        = 0;
1658c2ecf20Sopenharmony_ci		ax25->va        = 0;
1668c2ecf20Sopenharmony_ci		ax25->vr        = 0;
1678c2ecf20Sopenharmony_ci		ax25_requeue_frames(ax25);
1688c2ecf20Sopenharmony_ci		ax25_dama_on(ax25);
1698c2ecf20Sopenharmony_ci		break;
1708c2ecf20Sopenharmony_ci
1718c2ecf20Sopenharmony_ci	case AX25_DISC:
1728c2ecf20Sopenharmony_ci		ax25_send_control(ax25, AX25_UA, pf, AX25_RESPONSE);
1738c2ecf20Sopenharmony_ci		ax25_dama_off(ax25);
1748c2ecf20Sopenharmony_ci		ax25_disconnect(ax25, 0);
1758c2ecf20Sopenharmony_ci		break;
1768c2ecf20Sopenharmony_ci
1778c2ecf20Sopenharmony_ci	case AX25_DM:
1788c2ecf20Sopenharmony_ci		ax25_dama_off(ax25);
1798c2ecf20Sopenharmony_ci		ax25_disconnect(ax25, ECONNRESET);
1808c2ecf20Sopenharmony_ci		break;
1818c2ecf20Sopenharmony_ci
1828c2ecf20Sopenharmony_ci	case AX25_RR:
1838c2ecf20Sopenharmony_ci	case AX25_RNR:
1848c2ecf20Sopenharmony_ci		if (frametype == AX25_RR)
1858c2ecf20Sopenharmony_ci			ax25->condition &= ~AX25_COND_PEER_RX_BUSY;
1868c2ecf20Sopenharmony_ci		else
1878c2ecf20Sopenharmony_ci			ax25->condition |= AX25_COND_PEER_RX_BUSY;
1888c2ecf20Sopenharmony_ci
1898c2ecf20Sopenharmony_ci		if (ax25_validate_nr(ax25, nr)) {
1908c2ecf20Sopenharmony_ci			if (ax25_check_iframes_acked(ax25, nr))
1918c2ecf20Sopenharmony_ci				ax25->n2count=0;
1928c2ecf20Sopenharmony_ci			if (type == AX25_COMMAND && pf)
1938c2ecf20Sopenharmony_ci				ax25_ds_enquiry_response(ax25);
1948c2ecf20Sopenharmony_ci		} else {
1958c2ecf20Sopenharmony_ci			ax25_ds_nr_error_recovery(ax25);
1968c2ecf20Sopenharmony_ci			ax25->state = AX25_STATE_1;
1978c2ecf20Sopenharmony_ci		}
1988c2ecf20Sopenharmony_ci		break;
1998c2ecf20Sopenharmony_ci
2008c2ecf20Sopenharmony_ci	case AX25_REJ:
2018c2ecf20Sopenharmony_ci		ax25->condition &= ~AX25_COND_PEER_RX_BUSY;
2028c2ecf20Sopenharmony_ci
2038c2ecf20Sopenharmony_ci		if (ax25_validate_nr(ax25, nr)) {
2048c2ecf20Sopenharmony_ci			if (ax25->va != nr)
2058c2ecf20Sopenharmony_ci				ax25->n2count=0;
2068c2ecf20Sopenharmony_ci
2078c2ecf20Sopenharmony_ci			ax25_frames_acked(ax25, nr);
2088c2ecf20Sopenharmony_ci			ax25_calculate_rtt(ax25);
2098c2ecf20Sopenharmony_ci			ax25_stop_t1timer(ax25);
2108c2ecf20Sopenharmony_ci			ax25_start_t3timer(ax25);
2118c2ecf20Sopenharmony_ci			ax25_requeue_frames(ax25);
2128c2ecf20Sopenharmony_ci
2138c2ecf20Sopenharmony_ci			if (type == AX25_COMMAND && pf)
2148c2ecf20Sopenharmony_ci				ax25_ds_enquiry_response(ax25);
2158c2ecf20Sopenharmony_ci		} else {
2168c2ecf20Sopenharmony_ci			ax25_ds_nr_error_recovery(ax25);
2178c2ecf20Sopenharmony_ci			ax25->state = AX25_STATE_1;
2188c2ecf20Sopenharmony_ci		}
2198c2ecf20Sopenharmony_ci		break;
2208c2ecf20Sopenharmony_ci
2218c2ecf20Sopenharmony_ci	case AX25_I:
2228c2ecf20Sopenharmony_ci		if (!ax25_validate_nr(ax25, nr)) {
2238c2ecf20Sopenharmony_ci			ax25_ds_nr_error_recovery(ax25);
2248c2ecf20Sopenharmony_ci			ax25->state = AX25_STATE_1;
2258c2ecf20Sopenharmony_ci			break;
2268c2ecf20Sopenharmony_ci		}
2278c2ecf20Sopenharmony_ci		if (ax25->condition & AX25_COND_PEER_RX_BUSY) {
2288c2ecf20Sopenharmony_ci			ax25_frames_acked(ax25, nr);
2298c2ecf20Sopenharmony_ci			ax25->n2count = 0;
2308c2ecf20Sopenharmony_ci		} else {
2318c2ecf20Sopenharmony_ci			if (ax25_check_iframes_acked(ax25, nr))
2328c2ecf20Sopenharmony_ci				ax25->n2count = 0;
2338c2ecf20Sopenharmony_ci		}
2348c2ecf20Sopenharmony_ci		if (ax25->condition & AX25_COND_OWN_RX_BUSY) {
2358c2ecf20Sopenharmony_ci			if (pf) ax25_ds_enquiry_response(ax25);
2368c2ecf20Sopenharmony_ci			break;
2378c2ecf20Sopenharmony_ci		}
2388c2ecf20Sopenharmony_ci		if (ns == ax25->vr) {
2398c2ecf20Sopenharmony_ci			ax25->vr = (ax25->vr + 1) % ax25->modulus;
2408c2ecf20Sopenharmony_ci			queued = ax25_rx_iframe(ax25, skb);
2418c2ecf20Sopenharmony_ci			if (ax25->condition & AX25_COND_OWN_RX_BUSY)
2428c2ecf20Sopenharmony_ci				ax25->vr = ns;	/* ax25->vr - 1 */
2438c2ecf20Sopenharmony_ci			ax25->condition &= ~AX25_COND_REJECT;
2448c2ecf20Sopenharmony_ci			if (pf) {
2458c2ecf20Sopenharmony_ci				ax25_ds_enquiry_response(ax25);
2468c2ecf20Sopenharmony_ci			} else {
2478c2ecf20Sopenharmony_ci				if (!(ax25->condition & AX25_COND_ACK_PENDING)) {
2488c2ecf20Sopenharmony_ci					ax25->condition |= AX25_COND_ACK_PENDING;
2498c2ecf20Sopenharmony_ci					ax25_start_t2timer(ax25);
2508c2ecf20Sopenharmony_ci				}
2518c2ecf20Sopenharmony_ci			}
2528c2ecf20Sopenharmony_ci		} else {
2538c2ecf20Sopenharmony_ci			if (ax25->condition & AX25_COND_REJECT) {
2548c2ecf20Sopenharmony_ci				if (pf) ax25_ds_enquiry_response(ax25);
2558c2ecf20Sopenharmony_ci			} else {
2568c2ecf20Sopenharmony_ci				ax25->condition |= AX25_COND_REJECT;
2578c2ecf20Sopenharmony_ci				ax25_ds_enquiry_response(ax25);
2588c2ecf20Sopenharmony_ci				ax25->condition &= ~AX25_COND_ACK_PENDING;
2598c2ecf20Sopenharmony_ci			}
2608c2ecf20Sopenharmony_ci		}
2618c2ecf20Sopenharmony_ci		break;
2628c2ecf20Sopenharmony_ci
2638c2ecf20Sopenharmony_ci	case AX25_FRMR:
2648c2ecf20Sopenharmony_ci	case AX25_ILLEGAL:
2658c2ecf20Sopenharmony_ci		ax25_ds_establish_data_link(ax25);
2668c2ecf20Sopenharmony_ci		ax25->state = AX25_STATE_1;
2678c2ecf20Sopenharmony_ci		break;
2688c2ecf20Sopenharmony_ci
2698c2ecf20Sopenharmony_ci	default:
2708c2ecf20Sopenharmony_ci		break;
2718c2ecf20Sopenharmony_ci	}
2728c2ecf20Sopenharmony_ci
2738c2ecf20Sopenharmony_ci	return queued;
2748c2ecf20Sopenharmony_ci}
2758c2ecf20Sopenharmony_ci
2768c2ecf20Sopenharmony_ci/*
2778c2ecf20Sopenharmony_ci *	Higher level upcall for a LAPB frame
2788c2ecf20Sopenharmony_ci */
2798c2ecf20Sopenharmony_ciint ax25_ds_frame_in(ax25_cb *ax25, struct sk_buff *skb, int type)
2808c2ecf20Sopenharmony_ci{
2818c2ecf20Sopenharmony_ci	int queued = 0, frametype, ns, nr, pf;
2828c2ecf20Sopenharmony_ci
2838c2ecf20Sopenharmony_ci	frametype = ax25_decode(ax25, skb, &ns, &nr, &pf);
2848c2ecf20Sopenharmony_ci
2858c2ecf20Sopenharmony_ci	switch (ax25->state) {
2868c2ecf20Sopenharmony_ci	case AX25_STATE_1:
2878c2ecf20Sopenharmony_ci		queued = ax25_ds_state1_machine(ax25, skb, frametype, pf, type);
2888c2ecf20Sopenharmony_ci		break;
2898c2ecf20Sopenharmony_ci	case AX25_STATE_2:
2908c2ecf20Sopenharmony_ci		queued = ax25_ds_state2_machine(ax25, skb, frametype, pf, type);
2918c2ecf20Sopenharmony_ci		break;
2928c2ecf20Sopenharmony_ci	case AX25_STATE_3:
2938c2ecf20Sopenharmony_ci		queued = ax25_ds_state3_machine(ax25, skb, frametype, ns, nr, pf, type);
2948c2ecf20Sopenharmony_ci		break;
2958c2ecf20Sopenharmony_ci	}
2968c2ecf20Sopenharmony_ci
2978c2ecf20Sopenharmony_ci	return queued;
2988c2ecf20Sopenharmony_ci}
299