162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci *
462306a36Sopenharmony_ci * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
562306a36Sopenharmony_ci */
662306a36Sopenharmony_ci#include <linux/errno.h>
762306a36Sopenharmony_ci#include <linux/types.h>
862306a36Sopenharmony_ci#include <linux/socket.h>
962306a36Sopenharmony_ci#include <linux/in.h>
1062306a36Sopenharmony_ci#include <linux/kernel.h>
1162306a36Sopenharmony_ci#include <linux/timer.h>
1262306a36Sopenharmony_ci#include <linux/string.h>
1362306a36Sopenharmony_ci#include <linux/sockios.h>
1462306a36Sopenharmony_ci#include <linux/net.h>
1562306a36Sopenharmony_ci#include <linux/slab.h>
1662306a36Sopenharmony_ci#include <net/ax25.h>
1762306a36Sopenharmony_ci#include <linux/inet.h>
1862306a36Sopenharmony_ci#include <linux/netdevice.h>
1962306a36Sopenharmony_ci#include <linux/skbuff.h>
2062306a36Sopenharmony_ci#include <net/sock.h>
2162306a36Sopenharmony_ci#include <net/tcp_states.h>
2262306a36Sopenharmony_ci#include <linux/fcntl.h>
2362306a36Sopenharmony_ci#include <linux/mm.h>
2462306a36Sopenharmony_ci#include <linux/interrupt.h>
2562306a36Sopenharmony_ci#include <net/rose.h>
2662306a36Sopenharmony_ci
2762306a36Sopenharmony_cistatic int rose_create_facilities(unsigned char *buffer, struct rose_sock *rose);
2862306a36Sopenharmony_ci
2962306a36Sopenharmony_ci/*
3062306a36Sopenharmony_ci *	This routine purges all of the queues of frames.
3162306a36Sopenharmony_ci */
3262306a36Sopenharmony_civoid rose_clear_queues(struct sock *sk)
3362306a36Sopenharmony_ci{
3462306a36Sopenharmony_ci	skb_queue_purge(&sk->sk_write_queue);
3562306a36Sopenharmony_ci	skb_queue_purge(&rose_sk(sk)->ack_queue);
3662306a36Sopenharmony_ci}
3762306a36Sopenharmony_ci
3862306a36Sopenharmony_ci/*
3962306a36Sopenharmony_ci * This routine purges the input queue of those frames that have been
4062306a36Sopenharmony_ci * acknowledged. This replaces the boxes labelled "V(a) <- N(r)" on the
4162306a36Sopenharmony_ci * SDL diagram.
4262306a36Sopenharmony_ci */
4362306a36Sopenharmony_civoid rose_frames_acked(struct sock *sk, unsigned short nr)
4462306a36Sopenharmony_ci{
4562306a36Sopenharmony_ci	struct sk_buff *skb;
4662306a36Sopenharmony_ci	struct rose_sock *rose = rose_sk(sk);
4762306a36Sopenharmony_ci
4862306a36Sopenharmony_ci	/*
4962306a36Sopenharmony_ci	 * Remove all the ack-ed frames from the ack queue.
5062306a36Sopenharmony_ci	 */
5162306a36Sopenharmony_ci	if (rose->va != nr) {
5262306a36Sopenharmony_ci		while (skb_peek(&rose->ack_queue) != NULL && rose->va != nr) {
5362306a36Sopenharmony_ci			skb = skb_dequeue(&rose->ack_queue);
5462306a36Sopenharmony_ci			kfree_skb(skb);
5562306a36Sopenharmony_ci			rose->va = (rose->va + 1) % ROSE_MODULUS;
5662306a36Sopenharmony_ci		}
5762306a36Sopenharmony_ci	}
5862306a36Sopenharmony_ci}
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_civoid rose_requeue_frames(struct sock *sk)
6162306a36Sopenharmony_ci{
6262306a36Sopenharmony_ci	struct sk_buff *skb, *skb_prev = NULL;
6362306a36Sopenharmony_ci
6462306a36Sopenharmony_ci	/*
6562306a36Sopenharmony_ci	 * Requeue all the un-ack-ed frames on the output queue to be picked
6662306a36Sopenharmony_ci	 * up by rose_kick. This arrangement handles the possibility of an
6762306a36Sopenharmony_ci	 * empty output queue.
6862306a36Sopenharmony_ci	 */
6962306a36Sopenharmony_ci	while ((skb = skb_dequeue(&rose_sk(sk)->ack_queue)) != NULL) {
7062306a36Sopenharmony_ci		if (skb_prev == NULL)
7162306a36Sopenharmony_ci			skb_queue_head(&sk->sk_write_queue, skb);
7262306a36Sopenharmony_ci		else
7362306a36Sopenharmony_ci			skb_append(skb_prev, skb, &sk->sk_write_queue);
7462306a36Sopenharmony_ci		skb_prev = skb;
7562306a36Sopenharmony_ci	}
7662306a36Sopenharmony_ci}
7762306a36Sopenharmony_ci
7862306a36Sopenharmony_ci/*
7962306a36Sopenharmony_ci *	Validate that the value of nr is between va and vs. Return true or
8062306a36Sopenharmony_ci *	false for testing.
8162306a36Sopenharmony_ci */
8262306a36Sopenharmony_ciint rose_validate_nr(struct sock *sk, unsigned short nr)
8362306a36Sopenharmony_ci{
8462306a36Sopenharmony_ci	struct rose_sock *rose = rose_sk(sk);
8562306a36Sopenharmony_ci	unsigned short vc = rose->va;
8662306a36Sopenharmony_ci
8762306a36Sopenharmony_ci	while (vc != rose->vs) {
8862306a36Sopenharmony_ci		if (nr == vc) return 1;
8962306a36Sopenharmony_ci		vc = (vc + 1) % ROSE_MODULUS;
9062306a36Sopenharmony_ci	}
9162306a36Sopenharmony_ci
9262306a36Sopenharmony_ci	return nr == rose->vs;
9362306a36Sopenharmony_ci}
9462306a36Sopenharmony_ci
9562306a36Sopenharmony_ci/*
9662306a36Sopenharmony_ci *  This routine is called when the packet layer internally generates a
9762306a36Sopenharmony_ci *  control frame.
9862306a36Sopenharmony_ci */
9962306a36Sopenharmony_civoid rose_write_internal(struct sock *sk, int frametype)
10062306a36Sopenharmony_ci{
10162306a36Sopenharmony_ci	struct rose_sock *rose = rose_sk(sk);
10262306a36Sopenharmony_ci	struct sk_buff *skb;
10362306a36Sopenharmony_ci	unsigned char  *dptr;
10462306a36Sopenharmony_ci	unsigned char  lci1, lci2;
10562306a36Sopenharmony_ci	int maxfaclen = 0;
10662306a36Sopenharmony_ci	int len, faclen;
10762306a36Sopenharmony_ci	int reserve;
10862306a36Sopenharmony_ci
10962306a36Sopenharmony_ci	reserve = AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + 1;
11062306a36Sopenharmony_ci	len = ROSE_MIN_LEN;
11162306a36Sopenharmony_ci
11262306a36Sopenharmony_ci	switch (frametype) {
11362306a36Sopenharmony_ci	case ROSE_CALL_REQUEST:
11462306a36Sopenharmony_ci		len   += 1 + ROSE_ADDR_LEN + ROSE_ADDR_LEN;
11562306a36Sopenharmony_ci		maxfaclen = 256;
11662306a36Sopenharmony_ci		break;
11762306a36Sopenharmony_ci	case ROSE_CALL_ACCEPTED:
11862306a36Sopenharmony_ci	case ROSE_CLEAR_REQUEST:
11962306a36Sopenharmony_ci	case ROSE_RESET_REQUEST:
12062306a36Sopenharmony_ci		len   += 2;
12162306a36Sopenharmony_ci		break;
12262306a36Sopenharmony_ci	}
12362306a36Sopenharmony_ci
12462306a36Sopenharmony_ci	skb = alloc_skb(reserve + len + maxfaclen, GFP_ATOMIC);
12562306a36Sopenharmony_ci	if (!skb)
12662306a36Sopenharmony_ci		return;
12762306a36Sopenharmony_ci
12862306a36Sopenharmony_ci	/*
12962306a36Sopenharmony_ci	 *	Space for AX.25 header and PID.
13062306a36Sopenharmony_ci	 */
13162306a36Sopenharmony_ci	skb_reserve(skb, reserve);
13262306a36Sopenharmony_ci
13362306a36Sopenharmony_ci	dptr = skb_put(skb, len);
13462306a36Sopenharmony_ci
13562306a36Sopenharmony_ci	lci1 = (rose->lci >> 8) & 0x0F;
13662306a36Sopenharmony_ci	lci2 = (rose->lci >> 0) & 0xFF;
13762306a36Sopenharmony_ci
13862306a36Sopenharmony_ci	switch (frametype) {
13962306a36Sopenharmony_ci	case ROSE_CALL_REQUEST:
14062306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
14162306a36Sopenharmony_ci		*dptr++ = lci2;
14262306a36Sopenharmony_ci		*dptr++ = frametype;
14362306a36Sopenharmony_ci		*dptr++ = ROSE_CALL_REQ_ADDR_LEN_VAL;
14462306a36Sopenharmony_ci		memcpy(dptr, &rose->dest_addr,  ROSE_ADDR_LEN);
14562306a36Sopenharmony_ci		dptr   += ROSE_ADDR_LEN;
14662306a36Sopenharmony_ci		memcpy(dptr, &rose->source_addr, ROSE_ADDR_LEN);
14762306a36Sopenharmony_ci		dptr   += ROSE_ADDR_LEN;
14862306a36Sopenharmony_ci		faclen = rose_create_facilities(dptr, rose);
14962306a36Sopenharmony_ci		skb_put(skb, faclen);
15062306a36Sopenharmony_ci		dptr   += faclen;
15162306a36Sopenharmony_ci		break;
15262306a36Sopenharmony_ci
15362306a36Sopenharmony_ci	case ROSE_CALL_ACCEPTED:
15462306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
15562306a36Sopenharmony_ci		*dptr++ = lci2;
15662306a36Sopenharmony_ci		*dptr++ = frametype;
15762306a36Sopenharmony_ci		*dptr++ = 0x00;		/* Address length */
15862306a36Sopenharmony_ci		*dptr++ = 0;		/* Facilities length */
15962306a36Sopenharmony_ci		break;
16062306a36Sopenharmony_ci
16162306a36Sopenharmony_ci	case ROSE_CLEAR_REQUEST:
16262306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
16362306a36Sopenharmony_ci		*dptr++ = lci2;
16462306a36Sopenharmony_ci		*dptr++ = frametype;
16562306a36Sopenharmony_ci		*dptr++ = rose->cause;
16662306a36Sopenharmony_ci		*dptr++ = rose->diagnostic;
16762306a36Sopenharmony_ci		break;
16862306a36Sopenharmony_ci
16962306a36Sopenharmony_ci	case ROSE_RESET_REQUEST:
17062306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
17162306a36Sopenharmony_ci		*dptr++ = lci2;
17262306a36Sopenharmony_ci		*dptr++ = frametype;
17362306a36Sopenharmony_ci		*dptr++ = ROSE_DTE_ORIGINATED;
17462306a36Sopenharmony_ci		*dptr++ = 0;
17562306a36Sopenharmony_ci		break;
17662306a36Sopenharmony_ci
17762306a36Sopenharmony_ci	case ROSE_RR:
17862306a36Sopenharmony_ci	case ROSE_RNR:
17962306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
18062306a36Sopenharmony_ci		*dptr++ = lci2;
18162306a36Sopenharmony_ci		*dptr   = frametype;
18262306a36Sopenharmony_ci		*dptr++ |= (rose->vr << 5) & 0xE0;
18362306a36Sopenharmony_ci		break;
18462306a36Sopenharmony_ci
18562306a36Sopenharmony_ci	case ROSE_CLEAR_CONFIRMATION:
18662306a36Sopenharmony_ci	case ROSE_RESET_CONFIRMATION:
18762306a36Sopenharmony_ci		*dptr++ = ROSE_GFI | lci1;
18862306a36Sopenharmony_ci		*dptr++ = lci2;
18962306a36Sopenharmony_ci		*dptr++  = frametype;
19062306a36Sopenharmony_ci		break;
19162306a36Sopenharmony_ci
19262306a36Sopenharmony_ci	default:
19362306a36Sopenharmony_ci		printk(KERN_ERR "ROSE: rose_write_internal - invalid frametype %02X\n", frametype);
19462306a36Sopenharmony_ci		kfree_skb(skb);
19562306a36Sopenharmony_ci		return;
19662306a36Sopenharmony_ci	}
19762306a36Sopenharmony_ci
19862306a36Sopenharmony_ci	rose_transmit_link(skb, rose->neighbour);
19962306a36Sopenharmony_ci}
20062306a36Sopenharmony_ci
20162306a36Sopenharmony_ciint rose_decode(struct sk_buff *skb, int *ns, int *nr, int *q, int *d, int *m)
20262306a36Sopenharmony_ci{
20362306a36Sopenharmony_ci	unsigned char *frame;
20462306a36Sopenharmony_ci
20562306a36Sopenharmony_ci	frame = skb->data;
20662306a36Sopenharmony_ci
20762306a36Sopenharmony_ci	*ns = *nr = *q = *d = *m = 0;
20862306a36Sopenharmony_ci
20962306a36Sopenharmony_ci	switch (frame[2]) {
21062306a36Sopenharmony_ci	case ROSE_CALL_REQUEST:
21162306a36Sopenharmony_ci	case ROSE_CALL_ACCEPTED:
21262306a36Sopenharmony_ci	case ROSE_CLEAR_REQUEST:
21362306a36Sopenharmony_ci	case ROSE_CLEAR_CONFIRMATION:
21462306a36Sopenharmony_ci	case ROSE_RESET_REQUEST:
21562306a36Sopenharmony_ci	case ROSE_RESET_CONFIRMATION:
21662306a36Sopenharmony_ci		return frame[2];
21762306a36Sopenharmony_ci	default:
21862306a36Sopenharmony_ci		break;
21962306a36Sopenharmony_ci	}
22062306a36Sopenharmony_ci
22162306a36Sopenharmony_ci	if ((frame[2] & 0x1F) == ROSE_RR  ||
22262306a36Sopenharmony_ci	    (frame[2] & 0x1F) == ROSE_RNR) {
22362306a36Sopenharmony_ci		*nr = (frame[2] >> 5) & 0x07;
22462306a36Sopenharmony_ci		return frame[2] & 0x1F;
22562306a36Sopenharmony_ci	}
22662306a36Sopenharmony_ci
22762306a36Sopenharmony_ci	if ((frame[2] & 0x01) == ROSE_DATA) {
22862306a36Sopenharmony_ci		*q  = (frame[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
22962306a36Sopenharmony_ci		*d  = (frame[0] & ROSE_D_BIT) == ROSE_D_BIT;
23062306a36Sopenharmony_ci		*m  = (frame[2] & ROSE_M_BIT) == ROSE_M_BIT;
23162306a36Sopenharmony_ci		*nr = (frame[2] >> 5) & 0x07;
23262306a36Sopenharmony_ci		*ns = (frame[2] >> 1) & 0x07;
23362306a36Sopenharmony_ci		return ROSE_DATA;
23462306a36Sopenharmony_ci	}
23562306a36Sopenharmony_ci
23662306a36Sopenharmony_ci	return ROSE_ILLEGAL;
23762306a36Sopenharmony_ci}
23862306a36Sopenharmony_ci
23962306a36Sopenharmony_cistatic int rose_parse_national(unsigned char *p, struct rose_facilities_struct *facilities, int len)
24062306a36Sopenharmony_ci{
24162306a36Sopenharmony_ci	unsigned char *pt;
24262306a36Sopenharmony_ci	unsigned char l, lg, n = 0;
24362306a36Sopenharmony_ci	int fac_national_digis_received = 0;
24462306a36Sopenharmony_ci
24562306a36Sopenharmony_ci	do {
24662306a36Sopenharmony_ci		switch (*p & 0xC0) {
24762306a36Sopenharmony_ci		case 0x00:
24862306a36Sopenharmony_ci			if (len < 2)
24962306a36Sopenharmony_ci				return -1;
25062306a36Sopenharmony_ci			p   += 2;
25162306a36Sopenharmony_ci			n   += 2;
25262306a36Sopenharmony_ci			len -= 2;
25362306a36Sopenharmony_ci			break;
25462306a36Sopenharmony_ci
25562306a36Sopenharmony_ci		case 0x40:
25662306a36Sopenharmony_ci			if (len < 3)
25762306a36Sopenharmony_ci				return -1;
25862306a36Sopenharmony_ci			if (*p == FAC_NATIONAL_RAND)
25962306a36Sopenharmony_ci				facilities->rand = ((p[1] << 8) & 0xFF00) + ((p[2] << 0) & 0x00FF);
26062306a36Sopenharmony_ci			p   += 3;
26162306a36Sopenharmony_ci			n   += 3;
26262306a36Sopenharmony_ci			len -= 3;
26362306a36Sopenharmony_ci			break;
26462306a36Sopenharmony_ci
26562306a36Sopenharmony_ci		case 0x80:
26662306a36Sopenharmony_ci			if (len < 4)
26762306a36Sopenharmony_ci				return -1;
26862306a36Sopenharmony_ci			p   += 4;
26962306a36Sopenharmony_ci			n   += 4;
27062306a36Sopenharmony_ci			len -= 4;
27162306a36Sopenharmony_ci			break;
27262306a36Sopenharmony_ci
27362306a36Sopenharmony_ci		case 0xC0:
27462306a36Sopenharmony_ci			if (len < 2)
27562306a36Sopenharmony_ci				return -1;
27662306a36Sopenharmony_ci			l = p[1];
27762306a36Sopenharmony_ci			if (len < 2 + l)
27862306a36Sopenharmony_ci				return -1;
27962306a36Sopenharmony_ci			if (*p == FAC_NATIONAL_DEST_DIGI) {
28062306a36Sopenharmony_ci				if (!fac_national_digis_received) {
28162306a36Sopenharmony_ci					if (l < AX25_ADDR_LEN)
28262306a36Sopenharmony_ci						return -1;
28362306a36Sopenharmony_ci					memcpy(&facilities->source_digis[0], p + 2, AX25_ADDR_LEN);
28462306a36Sopenharmony_ci					facilities->source_ndigis = 1;
28562306a36Sopenharmony_ci				}
28662306a36Sopenharmony_ci			}
28762306a36Sopenharmony_ci			else if (*p == FAC_NATIONAL_SRC_DIGI) {
28862306a36Sopenharmony_ci				if (!fac_national_digis_received) {
28962306a36Sopenharmony_ci					if (l < AX25_ADDR_LEN)
29062306a36Sopenharmony_ci						return -1;
29162306a36Sopenharmony_ci					memcpy(&facilities->dest_digis[0], p + 2, AX25_ADDR_LEN);
29262306a36Sopenharmony_ci					facilities->dest_ndigis = 1;
29362306a36Sopenharmony_ci				}
29462306a36Sopenharmony_ci			}
29562306a36Sopenharmony_ci			else if (*p == FAC_NATIONAL_FAIL_CALL) {
29662306a36Sopenharmony_ci				if (l < AX25_ADDR_LEN)
29762306a36Sopenharmony_ci					return -1;
29862306a36Sopenharmony_ci				memcpy(&facilities->fail_call, p + 2, AX25_ADDR_LEN);
29962306a36Sopenharmony_ci			}
30062306a36Sopenharmony_ci			else if (*p == FAC_NATIONAL_FAIL_ADD) {
30162306a36Sopenharmony_ci				if (l < 1 + ROSE_ADDR_LEN)
30262306a36Sopenharmony_ci					return -1;
30362306a36Sopenharmony_ci				memcpy(&facilities->fail_addr, p + 3, ROSE_ADDR_LEN);
30462306a36Sopenharmony_ci			}
30562306a36Sopenharmony_ci			else if (*p == FAC_NATIONAL_DIGIS) {
30662306a36Sopenharmony_ci				if (l % AX25_ADDR_LEN)
30762306a36Sopenharmony_ci					return -1;
30862306a36Sopenharmony_ci				fac_national_digis_received = 1;
30962306a36Sopenharmony_ci				facilities->source_ndigis = 0;
31062306a36Sopenharmony_ci				facilities->dest_ndigis   = 0;
31162306a36Sopenharmony_ci				for (pt = p + 2, lg = 0 ; lg < l ; pt += AX25_ADDR_LEN, lg += AX25_ADDR_LEN) {
31262306a36Sopenharmony_ci					if (pt[6] & AX25_HBIT) {
31362306a36Sopenharmony_ci						if (facilities->dest_ndigis >= ROSE_MAX_DIGIS)
31462306a36Sopenharmony_ci							return -1;
31562306a36Sopenharmony_ci						memcpy(&facilities->dest_digis[facilities->dest_ndigis++], pt, AX25_ADDR_LEN);
31662306a36Sopenharmony_ci					} else {
31762306a36Sopenharmony_ci						if (facilities->source_ndigis >= ROSE_MAX_DIGIS)
31862306a36Sopenharmony_ci							return -1;
31962306a36Sopenharmony_ci						memcpy(&facilities->source_digis[facilities->source_ndigis++], pt, AX25_ADDR_LEN);
32062306a36Sopenharmony_ci					}
32162306a36Sopenharmony_ci				}
32262306a36Sopenharmony_ci			}
32362306a36Sopenharmony_ci			p   += l + 2;
32462306a36Sopenharmony_ci			n   += l + 2;
32562306a36Sopenharmony_ci			len -= l + 2;
32662306a36Sopenharmony_ci			break;
32762306a36Sopenharmony_ci		}
32862306a36Sopenharmony_ci	} while (*p != 0x00 && len > 0);
32962306a36Sopenharmony_ci
33062306a36Sopenharmony_ci	return n;
33162306a36Sopenharmony_ci}
33262306a36Sopenharmony_ci
33362306a36Sopenharmony_cistatic int rose_parse_ccitt(unsigned char *p, struct rose_facilities_struct *facilities, int len)
33462306a36Sopenharmony_ci{
33562306a36Sopenharmony_ci	unsigned char l, n = 0;
33662306a36Sopenharmony_ci	char callsign[11];
33762306a36Sopenharmony_ci
33862306a36Sopenharmony_ci	do {
33962306a36Sopenharmony_ci		switch (*p & 0xC0) {
34062306a36Sopenharmony_ci		case 0x00:
34162306a36Sopenharmony_ci			if (len < 2)
34262306a36Sopenharmony_ci				return -1;
34362306a36Sopenharmony_ci			p   += 2;
34462306a36Sopenharmony_ci			n   += 2;
34562306a36Sopenharmony_ci			len -= 2;
34662306a36Sopenharmony_ci			break;
34762306a36Sopenharmony_ci
34862306a36Sopenharmony_ci		case 0x40:
34962306a36Sopenharmony_ci			if (len < 3)
35062306a36Sopenharmony_ci				return -1;
35162306a36Sopenharmony_ci			p   += 3;
35262306a36Sopenharmony_ci			n   += 3;
35362306a36Sopenharmony_ci			len -= 3;
35462306a36Sopenharmony_ci			break;
35562306a36Sopenharmony_ci
35662306a36Sopenharmony_ci		case 0x80:
35762306a36Sopenharmony_ci			if (len < 4)
35862306a36Sopenharmony_ci				return -1;
35962306a36Sopenharmony_ci			p   += 4;
36062306a36Sopenharmony_ci			n   += 4;
36162306a36Sopenharmony_ci			len -= 4;
36262306a36Sopenharmony_ci			break;
36362306a36Sopenharmony_ci
36462306a36Sopenharmony_ci		case 0xC0:
36562306a36Sopenharmony_ci			if (len < 2)
36662306a36Sopenharmony_ci				return -1;
36762306a36Sopenharmony_ci			l = p[1];
36862306a36Sopenharmony_ci
36962306a36Sopenharmony_ci			/* Prevent overflows*/
37062306a36Sopenharmony_ci			if (l < 10 || l > 20)
37162306a36Sopenharmony_ci				return -1;
37262306a36Sopenharmony_ci
37362306a36Sopenharmony_ci			if (*p == FAC_CCITT_DEST_NSAP) {
37462306a36Sopenharmony_ci				memcpy(&facilities->source_addr, p + 7, ROSE_ADDR_LEN);
37562306a36Sopenharmony_ci				memcpy(callsign, p + 12,   l - 10);
37662306a36Sopenharmony_ci				callsign[l - 10] = '\0';
37762306a36Sopenharmony_ci				asc2ax(&facilities->source_call, callsign);
37862306a36Sopenharmony_ci			}
37962306a36Sopenharmony_ci			if (*p == FAC_CCITT_SRC_NSAP) {
38062306a36Sopenharmony_ci				memcpy(&facilities->dest_addr, p + 7, ROSE_ADDR_LEN);
38162306a36Sopenharmony_ci				memcpy(callsign, p + 12, l - 10);
38262306a36Sopenharmony_ci				callsign[l - 10] = '\0';
38362306a36Sopenharmony_ci				asc2ax(&facilities->dest_call, callsign);
38462306a36Sopenharmony_ci			}
38562306a36Sopenharmony_ci			p   += l + 2;
38662306a36Sopenharmony_ci			n   += l + 2;
38762306a36Sopenharmony_ci			len -= l + 2;
38862306a36Sopenharmony_ci			break;
38962306a36Sopenharmony_ci		}
39062306a36Sopenharmony_ci	} while (*p != 0x00 && len > 0);
39162306a36Sopenharmony_ci
39262306a36Sopenharmony_ci	return n;
39362306a36Sopenharmony_ci}
39462306a36Sopenharmony_ci
39562306a36Sopenharmony_ciint rose_parse_facilities(unsigned char *p, unsigned packet_len,
39662306a36Sopenharmony_ci	struct rose_facilities_struct *facilities)
39762306a36Sopenharmony_ci{
39862306a36Sopenharmony_ci	int facilities_len, len;
39962306a36Sopenharmony_ci
40062306a36Sopenharmony_ci	facilities_len = *p++;
40162306a36Sopenharmony_ci
40262306a36Sopenharmony_ci	if (facilities_len == 0 || (unsigned int)facilities_len > packet_len)
40362306a36Sopenharmony_ci		return 0;
40462306a36Sopenharmony_ci
40562306a36Sopenharmony_ci	while (facilities_len >= 3 && *p == 0x00) {
40662306a36Sopenharmony_ci		facilities_len--;
40762306a36Sopenharmony_ci		p++;
40862306a36Sopenharmony_ci
40962306a36Sopenharmony_ci		switch (*p) {
41062306a36Sopenharmony_ci		case FAC_NATIONAL:		/* National */
41162306a36Sopenharmony_ci			len = rose_parse_national(p + 1, facilities, facilities_len - 1);
41262306a36Sopenharmony_ci			break;
41362306a36Sopenharmony_ci
41462306a36Sopenharmony_ci		case FAC_CCITT:		/* CCITT */
41562306a36Sopenharmony_ci			len = rose_parse_ccitt(p + 1, facilities, facilities_len - 1);
41662306a36Sopenharmony_ci			break;
41762306a36Sopenharmony_ci
41862306a36Sopenharmony_ci		default:
41962306a36Sopenharmony_ci			printk(KERN_DEBUG "ROSE: rose_parse_facilities - unknown facilities family %02X\n", *p);
42062306a36Sopenharmony_ci			len = 1;
42162306a36Sopenharmony_ci			break;
42262306a36Sopenharmony_ci		}
42362306a36Sopenharmony_ci
42462306a36Sopenharmony_ci		if (len < 0)
42562306a36Sopenharmony_ci			return 0;
42662306a36Sopenharmony_ci		if (WARN_ON(len >= facilities_len))
42762306a36Sopenharmony_ci			return 0;
42862306a36Sopenharmony_ci		facilities_len -= len + 1;
42962306a36Sopenharmony_ci		p += len + 1;
43062306a36Sopenharmony_ci	}
43162306a36Sopenharmony_ci
43262306a36Sopenharmony_ci	return facilities_len == 0;
43362306a36Sopenharmony_ci}
43462306a36Sopenharmony_ci
43562306a36Sopenharmony_cistatic int rose_create_facilities(unsigned char *buffer, struct rose_sock *rose)
43662306a36Sopenharmony_ci{
43762306a36Sopenharmony_ci	unsigned char *p = buffer + 1;
43862306a36Sopenharmony_ci	char *callsign;
43962306a36Sopenharmony_ci	char buf[11];
44062306a36Sopenharmony_ci	int len, nb;
44162306a36Sopenharmony_ci
44262306a36Sopenharmony_ci	/* National Facilities */
44362306a36Sopenharmony_ci	if (rose->rand != 0 || rose->source_ndigis == 1 || rose->dest_ndigis == 1) {
44462306a36Sopenharmony_ci		*p++ = 0x00;
44562306a36Sopenharmony_ci		*p++ = FAC_NATIONAL;
44662306a36Sopenharmony_ci
44762306a36Sopenharmony_ci		if (rose->rand != 0) {
44862306a36Sopenharmony_ci			*p++ = FAC_NATIONAL_RAND;
44962306a36Sopenharmony_ci			*p++ = (rose->rand >> 8) & 0xFF;
45062306a36Sopenharmony_ci			*p++ = (rose->rand >> 0) & 0xFF;
45162306a36Sopenharmony_ci		}
45262306a36Sopenharmony_ci
45362306a36Sopenharmony_ci		/* Sent before older facilities */
45462306a36Sopenharmony_ci		if ((rose->source_ndigis > 0) || (rose->dest_ndigis > 0)) {
45562306a36Sopenharmony_ci			int maxdigi = 0;
45662306a36Sopenharmony_ci			*p++ = FAC_NATIONAL_DIGIS;
45762306a36Sopenharmony_ci			*p++ = AX25_ADDR_LEN * (rose->source_ndigis + rose->dest_ndigis);
45862306a36Sopenharmony_ci			for (nb = 0 ; nb < rose->source_ndigis ; nb++) {
45962306a36Sopenharmony_ci				if (++maxdigi >= ROSE_MAX_DIGIS)
46062306a36Sopenharmony_ci					break;
46162306a36Sopenharmony_ci				memcpy(p, &rose->source_digis[nb], AX25_ADDR_LEN);
46262306a36Sopenharmony_ci				p[6] |= AX25_HBIT;
46362306a36Sopenharmony_ci				p += AX25_ADDR_LEN;
46462306a36Sopenharmony_ci			}
46562306a36Sopenharmony_ci			for (nb = 0 ; nb < rose->dest_ndigis ; nb++) {
46662306a36Sopenharmony_ci				if (++maxdigi >= ROSE_MAX_DIGIS)
46762306a36Sopenharmony_ci					break;
46862306a36Sopenharmony_ci				memcpy(p, &rose->dest_digis[nb], AX25_ADDR_LEN);
46962306a36Sopenharmony_ci				p[6] &= ~AX25_HBIT;
47062306a36Sopenharmony_ci				p += AX25_ADDR_LEN;
47162306a36Sopenharmony_ci			}
47262306a36Sopenharmony_ci		}
47362306a36Sopenharmony_ci
47462306a36Sopenharmony_ci		/* For compatibility */
47562306a36Sopenharmony_ci		if (rose->source_ndigis > 0) {
47662306a36Sopenharmony_ci			*p++ = FAC_NATIONAL_SRC_DIGI;
47762306a36Sopenharmony_ci			*p++ = AX25_ADDR_LEN;
47862306a36Sopenharmony_ci			memcpy(p, &rose->source_digis[0], AX25_ADDR_LEN);
47962306a36Sopenharmony_ci			p   += AX25_ADDR_LEN;
48062306a36Sopenharmony_ci		}
48162306a36Sopenharmony_ci
48262306a36Sopenharmony_ci		/* For compatibility */
48362306a36Sopenharmony_ci		if (rose->dest_ndigis > 0) {
48462306a36Sopenharmony_ci			*p++ = FAC_NATIONAL_DEST_DIGI;
48562306a36Sopenharmony_ci			*p++ = AX25_ADDR_LEN;
48662306a36Sopenharmony_ci			memcpy(p, &rose->dest_digis[0], AX25_ADDR_LEN);
48762306a36Sopenharmony_ci			p   += AX25_ADDR_LEN;
48862306a36Sopenharmony_ci		}
48962306a36Sopenharmony_ci	}
49062306a36Sopenharmony_ci
49162306a36Sopenharmony_ci	*p++ = 0x00;
49262306a36Sopenharmony_ci	*p++ = FAC_CCITT;
49362306a36Sopenharmony_ci
49462306a36Sopenharmony_ci	*p++ = FAC_CCITT_DEST_NSAP;
49562306a36Sopenharmony_ci
49662306a36Sopenharmony_ci	callsign = ax2asc(buf, &rose->dest_call);
49762306a36Sopenharmony_ci
49862306a36Sopenharmony_ci	*p++ = strlen(callsign) + 10;
49962306a36Sopenharmony_ci	*p++ = (strlen(callsign) + 9) * 2;		/* ??? */
50062306a36Sopenharmony_ci
50162306a36Sopenharmony_ci	*p++ = 0x47; *p++ = 0x00; *p++ = 0x11;
50262306a36Sopenharmony_ci	*p++ = ROSE_ADDR_LEN * 2;
50362306a36Sopenharmony_ci	memcpy(p, &rose->dest_addr, ROSE_ADDR_LEN);
50462306a36Sopenharmony_ci	p   += ROSE_ADDR_LEN;
50562306a36Sopenharmony_ci
50662306a36Sopenharmony_ci	memcpy(p, callsign, strlen(callsign));
50762306a36Sopenharmony_ci	p   += strlen(callsign);
50862306a36Sopenharmony_ci
50962306a36Sopenharmony_ci	*p++ = FAC_CCITT_SRC_NSAP;
51062306a36Sopenharmony_ci
51162306a36Sopenharmony_ci	callsign = ax2asc(buf, &rose->source_call);
51262306a36Sopenharmony_ci
51362306a36Sopenharmony_ci	*p++ = strlen(callsign) + 10;
51462306a36Sopenharmony_ci	*p++ = (strlen(callsign) + 9) * 2;		/* ??? */
51562306a36Sopenharmony_ci
51662306a36Sopenharmony_ci	*p++ = 0x47; *p++ = 0x00; *p++ = 0x11;
51762306a36Sopenharmony_ci	*p++ = ROSE_ADDR_LEN * 2;
51862306a36Sopenharmony_ci	memcpy(p, &rose->source_addr, ROSE_ADDR_LEN);
51962306a36Sopenharmony_ci	p   += ROSE_ADDR_LEN;
52062306a36Sopenharmony_ci
52162306a36Sopenharmony_ci	memcpy(p, callsign, strlen(callsign));
52262306a36Sopenharmony_ci	p   += strlen(callsign);
52362306a36Sopenharmony_ci
52462306a36Sopenharmony_ci	len       = p - buffer;
52562306a36Sopenharmony_ci	buffer[0] = len - 1;
52662306a36Sopenharmony_ci
52762306a36Sopenharmony_ci	return len;
52862306a36Sopenharmony_ci}
52962306a36Sopenharmony_ci
53062306a36Sopenharmony_civoid rose_disconnect(struct sock *sk, int reason, int cause, int diagnostic)
53162306a36Sopenharmony_ci{
53262306a36Sopenharmony_ci	struct rose_sock *rose = rose_sk(sk);
53362306a36Sopenharmony_ci
53462306a36Sopenharmony_ci	rose_stop_timer(sk);
53562306a36Sopenharmony_ci	rose_stop_idletimer(sk);
53662306a36Sopenharmony_ci
53762306a36Sopenharmony_ci	rose_clear_queues(sk);
53862306a36Sopenharmony_ci
53962306a36Sopenharmony_ci	rose->lci   = 0;
54062306a36Sopenharmony_ci	rose->state = ROSE_STATE_0;
54162306a36Sopenharmony_ci
54262306a36Sopenharmony_ci	if (cause != -1)
54362306a36Sopenharmony_ci		rose->cause = cause;
54462306a36Sopenharmony_ci
54562306a36Sopenharmony_ci	if (diagnostic != -1)
54662306a36Sopenharmony_ci		rose->diagnostic = diagnostic;
54762306a36Sopenharmony_ci
54862306a36Sopenharmony_ci	sk->sk_state     = TCP_CLOSE;
54962306a36Sopenharmony_ci	sk->sk_err       = reason;
55062306a36Sopenharmony_ci	sk->sk_shutdown |= SEND_SHUTDOWN;
55162306a36Sopenharmony_ci
55262306a36Sopenharmony_ci	if (!sock_flag(sk, SOCK_DEAD)) {
55362306a36Sopenharmony_ci		sk->sk_state_change(sk);
55462306a36Sopenharmony_ci		sock_set_flag(sk, SOCK_DEAD);
55562306a36Sopenharmony_ci	}
55662306a36Sopenharmony_ci}
557