18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci *
48c2ecf20Sopenharmony_ci * Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
58c2ecf20Sopenharmony_ci * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
68c2ecf20Sopenharmony_ci * Copyright (C) Joerg Reuter DL1BKE (jreuter@yaina.de)
78c2ecf20Sopenharmony_ci * Copyright (C) Frederic Rible F1OAT (frible@teaser.fr)
88c2ecf20Sopenharmony_ci */
98c2ecf20Sopenharmony_ci#include <linux/errno.h>
108c2ecf20Sopenharmony_ci#include <linux/types.h>
118c2ecf20Sopenharmony_ci#include <linux/socket.h>
128c2ecf20Sopenharmony_ci#include <linux/in.h>
138c2ecf20Sopenharmony_ci#include <linux/kernel.h>
148c2ecf20Sopenharmony_ci#include <linux/timer.h>
158c2ecf20Sopenharmony_ci#include <linux/string.h>
168c2ecf20Sopenharmony_ci#include <linux/sockios.h>
178c2ecf20Sopenharmony_ci#include <linux/net.h>
188c2ecf20Sopenharmony_ci#include <net/ax25.h>
198c2ecf20Sopenharmony_ci#include <linux/inet.h>
208c2ecf20Sopenharmony_ci#include <linux/netdevice.h>
218c2ecf20Sopenharmony_ci#include <linux/skbuff.h>
228c2ecf20Sopenharmony_ci#include <net/sock.h>
238c2ecf20Sopenharmony_ci#include <net/tcp_states.h>
248c2ecf20Sopenharmony_ci#include <linux/uaccess.h>
258c2ecf20Sopenharmony_ci#include <linux/fcntl.h>
268c2ecf20Sopenharmony_ci#include <linux/mm.h>
278c2ecf20Sopenharmony_ci#include <linux/interrupt.h>
288c2ecf20Sopenharmony_ci
298c2ecf20Sopenharmony_civoid ax25_std_heartbeat_expiry(ax25_cb *ax25)
308c2ecf20Sopenharmony_ci{
318c2ecf20Sopenharmony_ci	struct sock *sk = ax25->sk;
328c2ecf20Sopenharmony_ci
338c2ecf20Sopenharmony_ci	if (sk)
348c2ecf20Sopenharmony_ci		bh_lock_sock(sk);
358c2ecf20Sopenharmony_ci
368c2ecf20Sopenharmony_ci	switch (ax25->state) {
378c2ecf20Sopenharmony_ci	case AX25_STATE_0:
388c2ecf20Sopenharmony_ci	case AX25_STATE_2:
398c2ecf20Sopenharmony_ci		/* Magic here: If we listen() and a new link dies before it
408c2ecf20Sopenharmony_ci		   is accepted() it isn't 'dead' so doesn't get removed. */
418c2ecf20Sopenharmony_ci		if (!sk || sock_flag(sk, SOCK_DESTROY) ||
428c2ecf20Sopenharmony_ci		    (sk->sk_state == TCP_LISTEN &&
438c2ecf20Sopenharmony_ci		     sock_flag(sk, SOCK_DEAD))) {
448c2ecf20Sopenharmony_ci			if (sk) {
458c2ecf20Sopenharmony_ci				sock_hold(sk);
468c2ecf20Sopenharmony_ci				ax25_destroy_socket(ax25);
478c2ecf20Sopenharmony_ci				bh_unlock_sock(sk);
488c2ecf20Sopenharmony_ci				/* Ungrab socket and destroy it */
498c2ecf20Sopenharmony_ci				sock_put(sk);
508c2ecf20Sopenharmony_ci			} else
518c2ecf20Sopenharmony_ci				ax25_destroy_socket(ax25);
528c2ecf20Sopenharmony_ci			return;
538c2ecf20Sopenharmony_ci		}
548c2ecf20Sopenharmony_ci		break;
558c2ecf20Sopenharmony_ci
568c2ecf20Sopenharmony_ci	case AX25_STATE_3:
578c2ecf20Sopenharmony_ci	case AX25_STATE_4:
588c2ecf20Sopenharmony_ci		/*
598c2ecf20Sopenharmony_ci		 * Check the state of the receive buffer.
608c2ecf20Sopenharmony_ci		 */
618c2ecf20Sopenharmony_ci		if (sk != NULL) {
628c2ecf20Sopenharmony_ci			if (atomic_read(&sk->sk_rmem_alloc) <
638c2ecf20Sopenharmony_ci			    (sk->sk_rcvbuf >> 1) &&
648c2ecf20Sopenharmony_ci			    (ax25->condition & AX25_COND_OWN_RX_BUSY)) {
658c2ecf20Sopenharmony_ci				ax25->condition &= ~AX25_COND_OWN_RX_BUSY;
668c2ecf20Sopenharmony_ci				ax25->condition &= ~AX25_COND_ACK_PENDING;
678c2ecf20Sopenharmony_ci				ax25_send_control(ax25, AX25_RR, AX25_POLLOFF, AX25_RESPONSE);
688c2ecf20Sopenharmony_ci				break;
698c2ecf20Sopenharmony_ci			}
708c2ecf20Sopenharmony_ci		}
718c2ecf20Sopenharmony_ci	}
728c2ecf20Sopenharmony_ci
738c2ecf20Sopenharmony_ci	if (sk)
748c2ecf20Sopenharmony_ci		bh_unlock_sock(sk);
758c2ecf20Sopenharmony_ci
768c2ecf20Sopenharmony_ci	ax25_start_heartbeat(ax25);
778c2ecf20Sopenharmony_ci}
788c2ecf20Sopenharmony_ci
798c2ecf20Sopenharmony_civoid ax25_std_t2timer_expiry(ax25_cb *ax25)
808c2ecf20Sopenharmony_ci{
818c2ecf20Sopenharmony_ci	if (ax25->condition & AX25_COND_ACK_PENDING) {
828c2ecf20Sopenharmony_ci		ax25->condition &= ~AX25_COND_ACK_PENDING;
838c2ecf20Sopenharmony_ci		ax25_std_timeout_response(ax25);
848c2ecf20Sopenharmony_ci	}
858c2ecf20Sopenharmony_ci}
868c2ecf20Sopenharmony_ci
878c2ecf20Sopenharmony_civoid ax25_std_t3timer_expiry(ax25_cb *ax25)
888c2ecf20Sopenharmony_ci{
898c2ecf20Sopenharmony_ci	ax25->n2count = 0;
908c2ecf20Sopenharmony_ci	ax25_std_transmit_enquiry(ax25);
918c2ecf20Sopenharmony_ci	ax25->state   = AX25_STATE_4;
928c2ecf20Sopenharmony_ci}
938c2ecf20Sopenharmony_ci
948c2ecf20Sopenharmony_civoid ax25_std_idletimer_expiry(ax25_cb *ax25)
958c2ecf20Sopenharmony_ci{
968c2ecf20Sopenharmony_ci	ax25_clear_queues(ax25);
978c2ecf20Sopenharmony_ci
988c2ecf20Sopenharmony_ci	ax25->n2count = 0;
998c2ecf20Sopenharmony_ci	ax25_send_control(ax25, AX25_DISC, AX25_POLLON, AX25_COMMAND);
1008c2ecf20Sopenharmony_ci	ax25->state   = AX25_STATE_2;
1018c2ecf20Sopenharmony_ci
1028c2ecf20Sopenharmony_ci	ax25_calculate_t1(ax25);
1038c2ecf20Sopenharmony_ci	ax25_start_t1timer(ax25);
1048c2ecf20Sopenharmony_ci	ax25_stop_t2timer(ax25);
1058c2ecf20Sopenharmony_ci	ax25_stop_t3timer(ax25);
1068c2ecf20Sopenharmony_ci
1078c2ecf20Sopenharmony_ci	if (ax25->sk != NULL) {
1088c2ecf20Sopenharmony_ci		bh_lock_sock(ax25->sk);
1098c2ecf20Sopenharmony_ci		ax25->sk->sk_state     = TCP_CLOSE;
1108c2ecf20Sopenharmony_ci		ax25->sk->sk_err       = 0;
1118c2ecf20Sopenharmony_ci		ax25->sk->sk_shutdown |= SEND_SHUTDOWN;
1128c2ecf20Sopenharmony_ci		if (!sock_flag(ax25->sk, SOCK_DEAD)) {
1138c2ecf20Sopenharmony_ci			ax25->sk->sk_state_change(ax25->sk);
1148c2ecf20Sopenharmony_ci			sock_set_flag(ax25->sk, SOCK_DEAD);
1158c2ecf20Sopenharmony_ci		}
1168c2ecf20Sopenharmony_ci		bh_unlock_sock(ax25->sk);
1178c2ecf20Sopenharmony_ci	}
1188c2ecf20Sopenharmony_ci}
1198c2ecf20Sopenharmony_ci
1208c2ecf20Sopenharmony_civoid ax25_std_t1timer_expiry(ax25_cb *ax25)
1218c2ecf20Sopenharmony_ci{
1228c2ecf20Sopenharmony_ci	switch (ax25->state) {
1238c2ecf20Sopenharmony_ci	case AX25_STATE_1:
1248c2ecf20Sopenharmony_ci		if (ax25->n2count == ax25->n2) {
1258c2ecf20Sopenharmony_ci			if (ax25->modulus == AX25_MODULUS) {
1268c2ecf20Sopenharmony_ci				ax25_disconnect(ax25, ETIMEDOUT);
1278c2ecf20Sopenharmony_ci				return;
1288c2ecf20Sopenharmony_ci			} else {
1298c2ecf20Sopenharmony_ci				ax25->modulus = AX25_MODULUS;
1308c2ecf20Sopenharmony_ci				ax25->window  = ax25->ax25_dev->values[AX25_VALUES_WINDOW];
1318c2ecf20Sopenharmony_ci				ax25->n2count = 0;
1328c2ecf20Sopenharmony_ci				ax25_send_control(ax25, AX25_SABM, AX25_POLLON, AX25_COMMAND);
1338c2ecf20Sopenharmony_ci			}
1348c2ecf20Sopenharmony_ci		} else {
1358c2ecf20Sopenharmony_ci			ax25->n2count++;
1368c2ecf20Sopenharmony_ci			if (ax25->modulus == AX25_MODULUS)
1378c2ecf20Sopenharmony_ci				ax25_send_control(ax25, AX25_SABM, AX25_POLLON, AX25_COMMAND);
1388c2ecf20Sopenharmony_ci			else
1398c2ecf20Sopenharmony_ci				ax25_send_control(ax25, AX25_SABME, AX25_POLLON, AX25_COMMAND);
1408c2ecf20Sopenharmony_ci		}
1418c2ecf20Sopenharmony_ci		break;
1428c2ecf20Sopenharmony_ci
1438c2ecf20Sopenharmony_ci	case AX25_STATE_2:
1448c2ecf20Sopenharmony_ci		if (ax25->n2count == ax25->n2) {
1458c2ecf20Sopenharmony_ci			ax25_send_control(ax25, AX25_DISC, AX25_POLLON, AX25_COMMAND);
1468c2ecf20Sopenharmony_ci			if (!sock_flag(ax25->sk, SOCK_DESTROY))
1478c2ecf20Sopenharmony_ci				ax25_disconnect(ax25, ETIMEDOUT);
1488c2ecf20Sopenharmony_ci			return;
1498c2ecf20Sopenharmony_ci		} else {
1508c2ecf20Sopenharmony_ci			ax25->n2count++;
1518c2ecf20Sopenharmony_ci			ax25_send_control(ax25, AX25_DISC, AX25_POLLON, AX25_COMMAND);
1528c2ecf20Sopenharmony_ci		}
1538c2ecf20Sopenharmony_ci		break;
1548c2ecf20Sopenharmony_ci
1558c2ecf20Sopenharmony_ci	case AX25_STATE_3:
1568c2ecf20Sopenharmony_ci		ax25->n2count = 1;
1578c2ecf20Sopenharmony_ci		ax25_std_transmit_enquiry(ax25);
1588c2ecf20Sopenharmony_ci		ax25->state   = AX25_STATE_4;
1598c2ecf20Sopenharmony_ci		break;
1608c2ecf20Sopenharmony_ci
1618c2ecf20Sopenharmony_ci	case AX25_STATE_4:
1628c2ecf20Sopenharmony_ci		if (ax25->n2count == ax25->n2) {
1638c2ecf20Sopenharmony_ci			ax25_send_control(ax25, AX25_DM, AX25_POLLON, AX25_RESPONSE);
1648c2ecf20Sopenharmony_ci			ax25_disconnect(ax25, ETIMEDOUT);
1658c2ecf20Sopenharmony_ci			return;
1668c2ecf20Sopenharmony_ci		} else {
1678c2ecf20Sopenharmony_ci			ax25->n2count++;
1688c2ecf20Sopenharmony_ci			ax25_std_transmit_enquiry(ax25);
1698c2ecf20Sopenharmony_ci		}
1708c2ecf20Sopenharmony_ci		break;
1718c2ecf20Sopenharmony_ci	}
1728c2ecf20Sopenharmony_ci
1738c2ecf20Sopenharmony_ci	ax25_calculate_t1(ax25);
1748c2ecf20Sopenharmony_ci	ax25_start_t1timer(ax25);
1758c2ecf20Sopenharmony_ci}
176