162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci *	X.25 Packet Layer release 002
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci *	This is ALPHA test software. This code may break your machine, randomly fail to work with new
662306a36Sopenharmony_ci *	releases, misbehave and/or generally screw up. It might even work.
762306a36Sopenharmony_ci *
862306a36Sopenharmony_ci *	This code REQUIRES 2.1.15 or higher
962306a36Sopenharmony_ci *
1062306a36Sopenharmony_ci *	History
1162306a36Sopenharmony_ci *	X.25 001	Jonathan Naylor	Started coding.
1262306a36Sopenharmony_ci *      2000-09-04	Henner Eisen	Prevent freeing a dangling skb.
1362306a36Sopenharmony_ci */
1462306a36Sopenharmony_ci
1562306a36Sopenharmony_ci#define pr_fmt(fmt) "X25: " fmt
1662306a36Sopenharmony_ci
1762306a36Sopenharmony_ci#include <linux/kernel.h>
1862306a36Sopenharmony_ci#include <linux/netdevice.h>
1962306a36Sopenharmony_ci#include <linux/skbuff.h>
2062306a36Sopenharmony_ci#include <linux/slab.h>
2162306a36Sopenharmony_ci#include <net/sock.h>
2262306a36Sopenharmony_ci#include <linux/if_arp.h>
2362306a36Sopenharmony_ci#include <net/x25.h>
2462306a36Sopenharmony_ci#include <net/x25device.h>
2562306a36Sopenharmony_ci
2662306a36Sopenharmony_cistatic int x25_receive_data(struct sk_buff *skb, struct x25_neigh *nb)
2762306a36Sopenharmony_ci{
2862306a36Sopenharmony_ci	struct sock *sk;
2962306a36Sopenharmony_ci	unsigned short frametype;
3062306a36Sopenharmony_ci	unsigned int lci;
3162306a36Sopenharmony_ci
3262306a36Sopenharmony_ci	if (!pskb_may_pull(skb, X25_STD_MIN_LEN))
3362306a36Sopenharmony_ci		return 0;
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ci	frametype = skb->data[2];
3662306a36Sopenharmony_ci	lci = ((skb->data[0] << 8) & 0xF00) + ((skb->data[1] << 0) & 0x0FF);
3762306a36Sopenharmony_ci
3862306a36Sopenharmony_ci	/*
3962306a36Sopenharmony_ci	 *	LCI of zero is always for us, and its always a link control
4062306a36Sopenharmony_ci	 *	frame.
4162306a36Sopenharmony_ci	 */
4262306a36Sopenharmony_ci	if (lci == 0) {
4362306a36Sopenharmony_ci		x25_link_control(skb, nb, frametype);
4462306a36Sopenharmony_ci		return 0;
4562306a36Sopenharmony_ci	}
4662306a36Sopenharmony_ci
4762306a36Sopenharmony_ci	/*
4862306a36Sopenharmony_ci	 *	Find an existing socket.
4962306a36Sopenharmony_ci	 */
5062306a36Sopenharmony_ci	if ((sk = x25_find_socket(lci, nb)) != NULL) {
5162306a36Sopenharmony_ci		int queued = 1;
5262306a36Sopenharmony_ci
5362306a36Sopenharmony_ci		skb_reset_transport_header(skb);
5462306a36Sopenharmony_ci		bh_lock_sock(sk);
5562306a36Sopenharmony_ci		if (!sock_owned_by_user(sk)) {
5662306a36Sopenharmony_ci			queued = x25_process_rx_frame(sk, skb);
5762306a36Sopenharmony_ci		} else {
5862306a36Sopenharmony_ci			queued = !sk_add_backlog(sk, skb, READ_ONCE(sk->sk_rcvbuf));
5962306a36Sopenharmony_ci		}
6062306a36Sopenharmony_ci		bh_unlock_sock(sk);
6162306a36Sopenharmony_ci		sock_put(sk);
6262306a36Sopenharmony_ci		return queued;
6362306a36Sopenharmony_ci	}
6462306a36Sopenharmony_ci
6562306a36Sopenharmony_ci	/*
6662306a36Sopenharmony_ci	 *	Is is a Call Request ? if so process it.
6762306a36Sopenharmony_ci	 */
6862306a36Sopenharmony_ci	if (frametype == X25_CALL_REQUEST)
6962306a36Sopenharmony_ci		return x25_rx_call_request(skb, nb, lci);
7062306a36Sopenharmony_ci
7162306a36Sopenharmony_ci	/*
7262306a36Sopenharmony_ci	 * 	Its not a Call Request, nor is it a control frame.
7362306a36Sopenharmony_ci	 *	Can we forward it?
7462306a36Sopenharmony_ci	 */
7562306a36Sopenharmony_ci
7662306a36Sopenharmony_ci	if (x25_forward_data(lci, nb, skb)) {
7762306a36Sopenharmony_ci		if (frametype == X25_CLEAR_CONFIRMATION) {
7862306a36Sopenharmony_ci			x25_clear_forward_by_lci(lci);
7962306a36Sopenharmony_ci		}
8062306a36Sopenharmony_ci		kfree_skb(skb);
8162306a36Sopenharmony_ci		return 1;
8262306a36Sopenharmony_ci	}
8362306a36Sopenharmony_ci
8462306a36Sopenharmony_ci/*
8562306a36Sopenharmony_ci	x25_transmit_clear_request(nb, lci, 0x0D);
8662306a36Sopenharmony_ci*/
8762306a36Sopenharmony_ci
8862306a36Sopenharmony_ci	if (frametype != X25_CLEAR_CONFIRMATION)
8962306a36Sopenharmony_ci		pr_debug("x25_receive_data(): unknown frame type %2x\n",frametype);
9062306a36Sopenharmony_ci
9162306a36Sopenharmony_ci	return 0;
9262306a36Sopenharmony_ci}
9362306a36Sopenharmony_ci
9462306a36Sopenharmony_ciint x25_lapb_receive_frame(struct sk_buff *skb, struct net_device *dev,
9562306a36Sopenharmony_ci			   struct packet_type *ptype, struct net_device *orig_dev)
9662306a36Sopenharmony_ci{
9762306a36Sopenharmony_ci	struct sk_buff *nskb;
9862306a36Sopenharmony_ci	struct x25_neigh *nb;
9962306a36Sopenharmony_ci
10062306a36Sopenharmony_ci	if (!net_eq(dev_net(dev), &init_net))
10162306a36Sopenharmony_ci		goto drop;
10262306a36Sopenharmony_ci
10362306a36Sopenharmony_ci	nskb = skb_copy(skb, GFP_ATOMIC);
10462306a36Sopenharmony_ci	if (!nskb)
10562306a36Sopenharmony_ci		goto drop;
10662306a36Sopenharmony_ci	kfree_skb(skb);
10762306a36Sopenharmony_ci	skb = nskb;
10862306a36Sopenharmony_ci
10962306a36Sopenharmony_ci	/*
11062306a36Sopenharmony_ci	 * Packet received from unrecognised device, throw it away.
11162306a36Sopenharmony_ci	 */
11262306a36Sopenharmony_ci	nb = x25_get_neigh(dev);
11362306a36Sopenharmony_ci	if (!nb) {
11462306a36Sopenharmony_ci		pr_debug("unknown neighbour - %s\n", dev->name);
11562306a36Sopenharmony_ci		goto drop;
11662306a36Sopenharmony_ci	}
11762306a36Sopenharmony_ci
11862306a36Sopenharmony_ci	if (!pskb_may_pull(skb, 1)) {
11962306a36Sopenharmony_ci		x25_neigh_put(nb);
12062306a36Sopenharmony_ci		goto drop;
12162306a36Sopenharmony_ci	}
12262306a36Sopenharmony_ci
12362306a36Sopenharmony_ci	switch (skb->data[0]) {
12462306a36Sopenharmony_ci
12562306a36Sopenharmony_ci	case X25_IFACE_DATA:
12662306a36Sopenharmony_ci		skb_pull(skb, 1);
12762306a36Sopenharmony_ci		if (x25_receive_data(skb, nb)) {
12862306a36Sopenharmony_ci			x25_neigh_put(nb);
12962306a36Sopenharmony_ci			goto out;
13062306a36Sopenharmony_ci		}
13162306a36Sopenharmony_ci		break;
13262306a36Sopenharmony_ci
13362306a36Sopenharmony_ci	case X25_IFACE_CONNECT:
13462306a36Sopenharmony_ci		x25_link_established(nb);
13562306a36Sopenharmony_ci		break;
13662306a36Sopenharmony_ci
13762306a36Sopenharmony_ci	case X25_IFACE_DISCONNECT:
13862306a36Sopenharmony_ci		x25_link_terminated(nb);
13962306a36Sopenharmony_ci		break;
14062306a36Sopenharmony_ci	}
14162306a36Sopenharmony_ci	x25_neigh_put(nb);
14262306a36Sopenharmony_cidrop:
14362306a36Sopenharmony_ci	kfree_skb(skb);
14462306a36Sopenharmony_ciout:
14562306a36Sopenharmony_ci	return 0;
14662306a36Sopenharmony_ci}
14762306a36Sopenharmony_ci
14862306a36Sopenharmony_civoid x25_establish_link(struct x25_neigh *nb)
14962306a36Sopenharmony_ci{
15062306a36Sopenharmony_ci	struct sk_buff *skb;
15162306a36Sopenharmony_ci	unsigned char *ptr;
15262306a36Sopenharmony_ci
15362306a36Sopenharmony_ci	switch (nb->dev->type) {
15462306a36Sopenharmony_ci	case ARPHRD_X25:
15562306a36Sopenharmony_ci		if ((skb = alloc_skb(1, GFP_ATOMIC)) == NULL) {
15662306a36Sopenharmony_ci			pr_err("x25_dev: out of memory\n");
15762306a36Sopenharmony_ci			return;
15862306a36Sopenharmony_ci		}
15962306a36Sopenharmony_ci		ptr  = skb_put(skb, 1);
16062306a36Sopenharmony_ci		*ptr = X25_IFACE_CONNECT;
16162306a36Sopenharmony_ci		break;
16262306a36Sopenharmony_ci
16362306a36Sopenharmony_ci	default:
16462306a36Sopenharmony_ci		return;
16562306a36Sopenharmony_ci	}
16662306a36Sopenharmony_ci
16762306a36Sopenharmony_ci	skb->protocol = htons(ETH_P_X25);
16862306a36Sopenharmony_ci	skb->dev      = nb->dev;
16962306a36Sopenharmony_ci
17062306a36Sopenharmony_ci	dev_queue_xmit(skb);
17162306a36Sopenharmony_ci}
17262306a36Sopenharmony_ci
17362306a36Sopenharmony_civoid x25_terminate_link(struct x25_neigh *nb)
17462306a36Sopenharmony_ci{
17562306a36Sopenharmony_ci	struct sk_buff *skb;
17662306a36Sopenharmony_ci	unsigned char *ptr;
17762306a36Sopenharmony_ci
17862306a36Sopenharmony_ci	if (nb->dev->type != ARPHRD_X25)
17962306a36Sopenharmony_ci		return;
18062306a36Sopenharmony_ci
18162306a36Sopenharmony_ci	skb = alloc_skb(1, GFP_ATOMIC);
18262306a36Sopenharmony_ci	if (!skb) {
18362306a36Sopenharmony_ci		pr_err("x25_dev: out of memory\n");
18462306a36Sopenharmony_ci		return;
18562306a36Sopenharmony_ci	}
18662306a36Sopenharmony_ci
18762306a36Sopenharmony_ci	ptr  = skb_put(skb, 1);
18862306a36Sopenharmony_ci	*ptr = X25_IFACE_DISCONNECT;
18962306a36Sopenharmony_ci
19062306a36Sopenharmony_ci	skb->protocol = htons(ETH_P_X25);
19162306a36Sopenharmony_ci	skb->dev      = nb->dev;
19262306a36Sopenharmony_ci	dev_queue_xmit(skb);
19362306a36Sopenharmony_ci}
19462306a36Sopenharmony_ci
19562306a36Sopenharmony_civoid x25_send_frame(struct sk_buff *skb, struct x25_neigh *nb)
19662306a36Sopenharmony_ci{
19762306a36Sopenharmony_ci	unsigned char *dptr;
19862306a36Sopenharmony_ci
19962306a36Sopenharmony_ci	skb_reset_network_header(skb);
20062306a36Sopenharmony_ci
20162306a36Sopenharmony_ci	switch (nb->dev->type) {
20262306a36Sopenharmony_ci	case ARPHRD_X25:
20362306a36Sopenharmony_ci		dptr  = skb_push(skb, 1);
20462306a36Sopenharmony_ci		*dptr = X25_IFACE_DATA;
20562306a36Sopenharmony_ci		break;
20662306a36Sopenharmony_ci
20762306a36Sopenharmony_ci	default:
20862306a36Sopenharmony_ci		kfree_skb(skb);
20962306a36Sopenharmony_ci		return;
21062306a36Sopenharmony_ci	}
21162306a36Sopenharmony_ci
21262306a36Sopenharmony_ci	skb->protocol = htons(ETH_P_X25);
21362306a36Sopenharmony_ci	skb->dev      = nb->dev;
21462306a36Sopenharmony_ci
21562306a36Sopenharmony_ci	dev_queue_xmit(skb);
21662306a36Sopenharmony_ci}
217