net/iucv/af_iucv.c

   1 /*
   2  *  IUCV protocol stack for Linux on zSeries
   3  *
   4  *  Copyright IBM Corp. 2006, 2009
   5  *
   6  *  Author(s):  Jennifer Hunt <jenhunt@us.ibm.com>
   7  *              Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
   8  *  PM functions:
   9  *              Ursula Braun <ursula.braun@de.ibm.com>
  10  */
  11
  12 #define KMSG_COMPONENT "af_iucv"
  13 #define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
  14
  15 #include <linux/module.h>
  16 #include <linux/types.h>
  17 #include <linux/list.h>
  18 #include <linux/errno.h>
  19 #include <linux/kernel.h>
  20 #include <linux/sched.h>
  21 #include <linux/slab.h>
  22 #include <linux/skbuff.h>
  23 #include <linux/init.h>
  24 #include <linux/poll.h>
  25 #include <net/sock.h>
  26 #include <asm/ebcdic.h>
  27 #include <asm/cpcmd.h>
  28 #include <linux/kmod.h>
  29
  30 #include <net/iucv/af_iucv.h>
  31
  32 #define VERSION "1.2"
  33
  34 static char iucv_userid[80];
  35
  36 static const struct proto_ops iucv_sock_ops;
  37
  38 static struct proto iucv_proto = {
  39         .name           = "AF_IUCV",
  40         .owner          = THIS_MODULE,
  41         .obj_size       = sizeof(struct iucv_sock),
  42 };
  43
  44 static struct iucv_interface *pr_iucv;
  45
  46 /* special AF_IUCV IPRM messages */
  47 static const u8 iprm_shutdown[8] =
  48         {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01};
  49
  50 #define TRGCLS_SIZE     (sizeof(((struct iucv_message *)0)->class))
  51
  52 #define __iucv_sock_wait(sk, condition, timeo, ret)                     \
  53 do {                                                                    \
  54         DEFINE_WAIT(__wait);                                            \
  55         long __timeo = timeo;                                           \
  56         ret = 0;                                                        \
  57         prepare_to_wait(sk_sleep(sk), &__wait, TASK_INTERRUPTIBLE);     \
  58         while (!(condition)) {                                          \
  59                 if (!__timeo) {                                         \
  60                         ret = -EAGAIN;                                  \
  61                         break;                                          \
  62                 }                                                       \
  63                 if (signal_pending(current)) {                          \
  64                         ret = sock_intr_errno(__timeo);                 \
  65                         break;                                          \
  66                 }                                                       \
  67                 release_sock(sk);                                       \
  68                 __timeo = schedule_timeout(__timeo);                    \
  69                 lock_sock(sk);                                          \
  70                 ret = sock_error(sk);                                   \
  71                 if (ret)                                                \
  72                         break;                                          \
  73         }                                                               \
  74         finish_wait(sk_sleep(sk), &__wait);                             \
  75 } while (0)
  76
  77 #define iucv_sock_wait(sk, condition, timeo)                            \
  78 ({                                                                      \
  79         int __ret = 0;                                                  \
  80         if (!(condition))                                               \
  81                 __iucv_sock_wait(sk, condition, timeo, __ret);          \
  82         __ret;                                                          \
  83 })
  84
  85 static void iucv_sock_kill(struct sock *sk);
  86 static void iucv_sock_close(struct sock *sk);
  87 static void iucv_sever_path(struct sock *, int);
  88
  89 static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
  90         struct packet_type *pt, struct net_device *orig_dev);
  91 static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
  92                    struct sk_buff *skb, u8 flags);
  93 static void afiucv_hs_callback_txnotify(struct sk_buff *, enum iucv_tx_notify);
  94
  95 /* Call Back functions */
  96 static void iucv_callback_rx(struct iucv_path *, struct iucv_message *);
  97 static void iucv_callback_txdone(struct iucv_path *, struct iucv_message *);
  98 static void iucv_callback_connack(struct iucv_path *, u8 *);
  99 static int iucv_callback_connreq(struct iucv_path *, u8 *, u8 *);
 100 static void iucv_callback_connrej(struct iucv_path *, u8 *);
 101 static void iucv_callback_shutdown(struct iucv_path *, u8 *);
 102
 103 static struct iucv_sock_list iucv_sk_list = {
 104         .lock = __RW_LOCK_UNLOCKED(iucv_sk_list.lock),
 105         .autobind_name = ATOMIC_INIT(0)
 106 };
 107
 108 static struct iucv_handler af_iucv_handler = {
 109         .path_pending     = iucv_callback_connreq,
 110         .path_complete    = iucv_callback_connack,
 111         .path_severed     = iucv_callback_connrej,
 112         .message_pending  = iucv_callback_rx,
 113         .message_complete = iucv_callback_txdone,
 114         .path_quiesced    = iucv_callback_shutdown,
 115 };
 116
 117 static inline void high_nmcpy(unsigned char *dst, char *src)
 118 {
 119        memcpy(dst, src, 8);
 120 }
 121
 122 static inline void low_nmcpy(unsigned char *dst, char *src)
 123 {
 124        memcpy(&dst[8], src, 8);
 125 }
 126
 127 static int afiucv_pm_prepare(struct device *dev)
 128 {
 129 #ifdef CONFIG_PM_DEBUG
 130         printk(KERN_WARNING "afiucv_pm_prepare\n");
 131 #endif
 132         return 0;
 133 }
 134
 135 static void afiucv_pm_complete(struct device *dev)
 136 {
 137 #ifdef CONFIG_PM_DEBUG
 138         printk(KERN_WARNING "afiucv_pm_complete\n");
 139 #endif
 140 }
 141
 142 /**
 143  * afiucv_pm_freeze() - Freeze PM callback
 144  * @dev:        AFIUCV dummy device
 145  *
 146  * Sever all established IUCV communication pathes
 147  */
 148 static int afiucv_pm_freeze(struct device *dev)
 149 {
 150         struct iucv_sock *iucv;
 151         struct sock *sk;
 152         int err = 0;
 153
 154 #ifdef CONFIG_PM_DEBUG
 155         printk(KERN_WARNING "afiucv_pm_freeze\n");
 156 #endif
 157         read_lock(&iucv_sk_list.lock);
 158         sk_for_each(sk, &iucv_sk_list.head) {
 159                 iucv = iucv_sk(sk);
 160                 switch (sk->sk_state) {
 161                 case IUCV_DISCONN:
 162                 case IUCV_CLOSING:
 163                 case IUCV_CONNECTED:
 164                         iucv_sever_path(sk, 0);
 165                         break;
 166                 case IUCV_OPEN:
 167                 case IUCV_BOUND:
 168                 case IUCV_LISTEN:
 169                 case IUCV_CLOSED:
 170                 default:
 171                         break;
 172                 }
 173                 skb_queue_purge(&iucv->send_skb_q);
 174                 skb_queue_purge(&iucv->backlog_skb_q);
 175         }
 176         read_unlock(&iucv_sk_list.lock);
 177         return err;
 178 }
 179
 180 /**
 181  * afiucv_pm_restore_thaw() - Thaw and restore PM callback
 182  * @dev:        AFIUCV dummy device
 183  *
 184  * socket clean up after freeze
 185  */
 186 static int afiucv_pm_restore_thaw(struct device *dev)
 187 {
 188         struct sock *sk;
 189
 190 #ifdef CONFIG_PM_DEBUG
 191         printk(KERN_WARNING "afiucv_pm_restore_thaw\n");
 192 #endif
 193         read_lock(&iucv_sk_list.lock);
 194         sk_for_each(sk, &iucv_sk_list.head) {
 195                 switch (sk->sk_state) {
 196                 case IUCV_CONNECTED:
 197                         sk->sk_err = EPIPE;
 198                         sk->sk_state = IUCV_DISCONN;
 199                         sk->sk_state_change(sk);
 200                         break;
 201                 case IUCV_DISCONN:
 202                 case IUCV_CLOSING:
 203                 case IUCV_LISTEN:
 204                 case IUCV_BOUND:
 205                 case IUCV_OPEN:
 206                 default:
 207                         break;
 208                 }
 209         }
 210         read_unlock(&iucv_sk_list.lock);
 211         return 0;
 212 }
 213
 214 static const struct dev_pm_ops afiucv_pm_ops = {
 215         .prepare = afiucv_pm_prepare,
 216         .complete = afiucv_pm_complete,
 217         .freeze = afiucv_pm_freeze,
 218         .thaw = afiucv_pm_restore_thaw,
 219         .restore = afiucv_pm_restore_thaw,
 220 };
 221
 222 static struct device_driver af_iucv_driver = {
 223         .owner = THIS_MODULE,
 224         .name = "afiucv",
 225         .bus  = NULL,
 226         .pm   = &afiucv_pm_ops,
 227 };
 228
 229 /* dummy device used as trigger for PM functions */
 230 static struct device *af_iucv_dev;
 231
 232 /**
 233  * iucv_msg_length() - Returns the length of an iucv message.
 234  * @msg:        Pointer to struct iucv_message, MUST NOT be NULL
 235  *
 236  * The function returns the length of the specified iucv message @msg of data
 237  * stored in a buffer and of data stored in the parameter list (PRMDATA).
 238  *
 239  * For IUCV_IPRMDATA, AF_IUCV uses the following convention to transport socket
 240  * data:
 241  *      PRMDATA[0..6]   socket data (max 7 bytes);
 242  *      PRMDATA[7]      socket data length value (len is 0xff - PRMDATA[7])
 243  *
 244  * The socket data length is computed by subtracting the socket data length
 245  * value from 0xFF.
 246  * If the socket data len is greater 7, then PRMDATA can be used for special
 247  * notifications (see iucv_sock_shutdown); and further,
 248  * if the socket data len is > 7, the function returns 8.
 249  *
 250  * Use this function to allocate socket buffers to store iucv message data.
 251  */
 252 static inline size_t iucv_msg_length(struct iucv_message *msg)
 253 {
 254         size_t datalen;
 255
 256         if (msg->flags & IUCV_IPRMDATA) {
 257                 datalen = 0xff - msg->rmmsg[7];
 258                 return (datalen < 8) ? datalen : 8;
 259         }
 260         return msg->length;
 261 }
 262
 263 /**
 264  * iucv_sock_in_state() - check for specific states
 265  * @sk:         sock structure
 266  * @state:      first iucv sk state
 267  * @state:      second iucv sk state
 268  *
 269  * Returns true if the socket in either in the first or second state.
 270  */
 271 static int iucv_sock_in_state(struct sock *sk, int state, int state2)
 272 {
 273         return (sk->sk_state == state || sk->sk_state == state2);
 274 }
 275
 276 /**
 277  * iucv_below_msglim() - function to check if messages can be sent
 278  * @sk:         sock structure
 279  *
 280  * Returns true if the send queue length is lower than the message limit.
 281  * Always returns true if the socket is not connected (no iucv path for
 282  * checking the message limit).
 283  */
 284 static inline int iucv_below_msglim(struct sock *sk)
 285 {
 286         struct iucv_sock *iucv = iucv_sk(sk);
 287
 288         if (sk->sk_state != IUCV_CONNECTED)
 289                 return 1;
 290         if (iucv->transport == AF_IUCV_TRANS_IUCV)
 291                 return (skb_queue_len(&iucv->send_skb_q) < iucv->path->msglim);
 292         else
 293                 return ((atomic_read(&iucv->msg_sent) < iucv->msglimit_peer) &&
 294                         (atomic_read(&iucv->pendings) <= 0));
 295 }
 296
 297 /**
 298  * iucv_sock_wake_msglim() - Wake up thread waiting on msg limit
 299  */
 300 static void iucv_sock_wake_msglim(struct sock *sk)
 301 {
 302         struct socket_wq *wq;
 303
 304         rcu_read_lock();
 305         wq = rcu_dereference(sk->sk_wq);
 306         if (wq_has_sleeper(wq))
 307                 wake_up_interruptible_all(&wq->wait);
 308         sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
 309         rcu_read_unlock();
 310 }
 311
 312 /**
 313  * afiucv_hs_send() - send a message through HiperSockets transport
 314  */
 315 static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
 316                    struct sk_buff *skb, u8 flags)
 317 {
 318         struct iucv_sock *iucv = iucv_sk(sock);
 319         struct af_iucv_trans_hdr *phs_hdr;
 320         struct sk_buff *nskb;
 321         int err, confirm_recv = 0;
 322
 323         memset(skb->head, 0, ETH_HLEN);
 324         phs_hdr = (struct af_iucv_trans_hdr *)skb_push(skb,
 325                                         sizeof(struct af_iucv_trans_hdr));
 326         skb_reset_mac_header(skb);
 327         skb_reset_network_header(skb);
 328         skb_push(skb, ETH_HLEN);
 329         skb_reset_mac_header(skb);
 330         memset(phs_hdr, 0, sizeof(struct af_iucv_trans_hdr));
 331
 332         phs_hdr->magic = ETH_P_AF_IUCV;
 333         phs_hdr->version = 1;
 334         phs_hdr->flags = flags;
 335         if (flags == AF_IUCV_FLAG_SYN)
 336                 phs_hdr->window = iucv->msglimit;
 337         else if ((flags == AF_IUCV_FLAG_WIN) || !flags) {
 338                 confirm_recv = atomic_read(&iucv->msg_recv);
 339                 phs_hdr->window = confirm_recv;
 340                 if (confirm_recv)
 341                         phs_hdr->flags = phs_hdr->flags | AF_IUCV_FLAG_WIN;
 342         }
 343         memcpy(phs_hdr->destUserID, iucv->dst_user_id, 8);
 344         memcpy(phs_hdr->destAppName, iucv->dst_name, 8);
 345         memcpy(phs_hdr->srcUserID, iucv->src_user_id, 8);
 346         memcpy(phs_hdr->srcAppName, iucv->src_name, 8);
 347         ASCEBC(phs_hdr->destUserID, sizeof(phs_hdr->destUserID));
 348         ASCEBC(phs_hdr->destAppName, sizeof(phs_hdr->destAppName));
 349         ASCEBC(phs_hdr->srcUserID, sizeof(phs_hdr->srcUserID));
 350         ASCEBC(phs_hdr->srcAppName, sizeof(phs_hdr->srcAppName));
 351         if (imsg)
 352                 memcpy(&phs_hdr->iucv_hdr, imsg, sizeof(struct iucv_message));
 353
 354         skb->dev = iucv->hs_dev;
 355         if (!skb->dev)
 356                 return -ENODEV;
 357         if (!(skb->dev->flags & IFF_UP) || !netif_carrier_ok(skb->dev))
 358                 return -ENETDOWN;
 359         if (skb->len > skb->dev->mtu) {
 360                 if (sock->sk_type == SOCK_SEQPACKET)
 361                         return -EMSGSIZE;
 362                 else
 363                         skb_trim(skb, skb->dev->mtu);
 364         }
 365         skb->protocol = ETH_P_AF_IUCV;
 366         nskb = skb_clone(skb, GFP_ATOMIC);
 367         if (!nskb)
 368                 return -ENOMEM;
 369         skb_queue_tail(&iucv->send_skb_q, nskb);
 370         err = dev_queue_xmit(skb);
 371         if (net_xmit_eval(err)) {
 372                 skb_unlink(nskb, &iucv->send_skb_q);
 373                 kfree_skb(nskb);
 374         } else {
 375                 atomic_sub(confirm_recv, &iucv->msg_recv);
 376                 WARN_ON(atomic_read(&iucv->msg_recv) < 0);
 377         }
 378         return net_xmit_eval(err);
 379 }
 380
 381 static struct sock *__iucv_get_sock_by_name(char *nm)
 382 {
 383         struct sock *sk;
 384
 385         sk_for_each(sk, &iucv_sk_list.head)
 386                 if (!memcmp(&iucv_sk(sk)->src_name, nm, 8))
 387                         return sk;
 388
 389         return NULL;
 390 }
 391
 392 static void iucv_sock_destruct(struct sock *sk)
 393 {
 394         skb_queue_purge(&sk->sk_receive_queue);
 395         skb_queue_purge(&sk->sk_error_queue);
 396
 397         sk_mem_reclaim(sk);
 398
 399         if (!sock_flag(sk, SOCK_DEAD)) {
 400                 pr_err("Attempt to release alive iucv socket %p\n", sk);
 401                 return;
 402         }
 403
 404         WARN_ON(atomic_read(&sk->sk_rmem_alloc));
 405         WARN_ON(atomic_read(&sk->sk_wmem_alloc));
 406         WARN_ON(sk->sk_wmem_queued);
 407         WARN_ON(sk->sk_forward_alloc);
 408 }
 409
 410 /* Cleanup Listen */
 411 static void iucv_sock_cleanup_listen(struct sock *parent)
 412 {
 413         struct sock *sk;
 414
 415         /* Close non-accepted connections */
 416         while ((sk = iucv_accept_dequeue(parent, NULL))) {
 417                 iucv_sock_close(sk);
 418                 iucv_sock_kill(sk);
 419         }
 420
 421         parent->sk_state = IUCV_CLOSED;
 422 }
 423
 424 /* Kill socket (only if zapped and orphaned) */
 425 static void iucv_sock_kill(struct sock *sk)
 426 {
 427         if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
 428                 return;
 429
 430         iucv_sock_unlink(&iucv_sk_list, sk);
 431         sock_set_flag(sk, SOCK_DEAD);
 432         sock_put(sk);
 433 }
 434
 435 /* Terminate an IUCV path */
 436 static void iucv_sever_path(struct sock *sk, int with_user_data)
 437 {
 438         unsigned char user_data[16];
 439         struct iucv_sock *iucv = iucv_sk(sk);
 440         struct iucv_path *path = iucv->path;
 441
 442         if (iucv->path) {
 443                 iucv->path = NULL;
 444                 if (with_user_data) {
 445                         low_nmcpy(user_data, iucv->src_name);
 446                         high_nmcpy(user_data, iucv->dst_name);
 447                         ASCEBC(user_data, sizeof(user_data));
 448                         pr_iucv->path_sever(path, user_data);
 449                 } else
 450                         pr_iucv->path_sever(path, NULL);
 451                 iucv_path_free(path);
 452         }
 453 }
 454
 455 /* Send FIN through an IUCV socket for HIPER transport */
 456 static int iucv_send_ctrl(struct sock *sk, u8 flags)
 457 {
 458         int err = 0;
 459         int blen;
 460         struct sk_buff *skb;
 461
 462         blen = sizeof(struct af_iucv_trans_hdr) + ETH_HLEN;
 463         skb = sock_alloc_send_skb(sk, blen, 1, &err);
 464         if (skb) {
 465                 skb_reserve(skb, blen);
 466                 err = afiucv_hs_send(NULL, sk, skb, flags);
 467         }
 468         return err;
 469 }
 470
 471 /* Close an IUCV socket */
 472 static void iucv_sock_close(struct sock *sk)
 473 {
 474         struct iucv_sock *iucv = iucv_sk(sk);
 475         unsigned long timeo;
 476         int err = 0;
 477
 478         lock_sock(sk);
 479
 480         switch (sk->sk_state) {
 481         case IUCV_LISTEN:
 482                 iucv_sock_cleanup_listen(sk);
 483                 break;
 484
 485         case IUCV_CONNECTED:
 486                 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
 487                         err = iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
 488                         sk->sk_state = IUCV_DISCONN;
 489                         sk->sk_state_change(sk);
 490                 }
 491         case IUCV_DISCONN:   /* fall through */
 492                 sk->sk_state = IUCV_CLOSING;
 493                 sk->sk_state_change(sk);
 494
 495                 if (!err && !skb_queue_empty(&iucv->send_skb_q)) {
 496                         if (sock_flag(sk, SOCK_LINGER) && sk->sk_lingertime)
 497                                 timeo = sk->sk_lingertime;
 498                         else
 499                                 timeo = IUCV_DISCONN_TIMEOUT;
 500                         iucv_sock_wait(sk,
 501                                         iucv_sock_in_state(sk, IUCV_CLOSED, 0),
 502                                         timeo);
 503                 }
 504
 505         case IUCV_CLOSING:   /* fall through */
 506                 sk->sk_state = IUCV_CLOSED;
 507                 sk->sk_state_change(sk);
 508
 509                 sk->sk_err = ECONNRESET;
 510                 sk->sk_state_change(sk);
 511
 512                 skb_queue_purge(&iucv->send_skb_q);
 513                 skb_queue_purge(&iucv->backlog_skb_q);
 514
 515         default:   /* fall through */
 516                 iucv_sever_path(sk, 1);
 517         }
 518
 519         if (iucv->hs_dev) {
 520                 dev_put(iucv->hs_dev);
 521                 iucv->hs_dev = NULL;
 522                 sk->sk_bound_dev_if = 0;
 523         }
 524
 525         /* mark socket for deletion by iucv_sock_kill() */
 526         sock_set_flag(sk, SOCK_ZAPPED);
 527
 528         release_sock(sk);
 529 }
 530
 531 static void iucv_sock_init(struct sock *sk, struct sock *parent)
 532 {
 533         if (parent)
 534                 sk->sk_type = parent->sk_type;
 535 }
 536
 537 static struct sock *iucv_sock_alloc(struct socket *sock, int proto, gfp_t prio, int kern)
 538 {
 539         struct sock *sk;
 540         struct iucv_sock *iucv;
 541
 542         sk = sk_alloc(&init_net, PF_IUCV, prio, &iucv_proto, kern);
 543         if (!sk)
 544                 return NULL;
 545         iucv = iucv_sk(sk);
 546
 547         sock_init_data(sock, sk);
 548         INIT_LIST_HEAD(&iucv->accept_q);
 549         spin_lock_init(&iucv->accept_q_lock);
 550         skb_queue_head_init(&iucv->send_skb_q);
 551         INIT_LIST_HEAD(&iucv->message_q.list);
 552         spin_lock_init(&iucv->message_q.lock);
 553         skb_queue_head_init(&iucv->backlog_skb_q);
 554         iucv->send_tag = 0;
 555         atomic_set(&iucv->pendings, 0);
 556         iucv->flags = 0;
 557         iucv->msglimit = 0;
 558         atomic_set(&iucv->msg_sent, 0);
 559         atomic_set(&iucv->msg_recv, 0);
 560         iucv->path = NULL;
 561         iucv->sk_txnotify = afiucv_hs_callback_txnotify;
 562         memset(&iucv->src_user_id , 0, 32);
 563         if (pr_iucv)
 564                 iucv->transport = AF_IUCV_TRANS_IUCV;
 565         else
 566                 iucv->transport = AF_IUCV_TRANS_HIPER;
 567
 568         sk->sk_destruct = iucv_sock_destruct;
 569         sk->sk_sndtimeo = IUCV_CONN_TIMEOUT;
 570         sk->sk_allocation = GFP_DMA;
 571
 572         sock_reset_flag(sk, SOCK_ZAPPED);
 573
 574         sk->sk_protocol = proto;
 575         sk->sk_state    = IUCV_OPEN;
 576
 577         iucv_sock_link(&iucv_sk_list, sk);
 578         return sk;
 579 }
 580
 581 /* Create an IUCV socket */
 582 static int iucv_sock_create(struct net *net, struct socket *sock, int protocol,
 583                             int kern)
 584 {
 585         struct sock *sk;
 586
 587         if (protocol && protocol != PF_IUCV)
 588                 return -EPROTONOSUPPORT;
 589
 590         sock->state = SS_UNCONNECTED;
 591
 592         switch (sock->type) {
 593         case SOCK_STREAM:
 594                 sock->ops = &iucv_sock_ops;
 595                 break;
 596         case SOCK_SEQPACKET:
 597                 /* currently, proto ops can handle both sk types */
 598                 sock->ops = &iucv_sock_ops;
 599                 break;
 600         default:
 601                 return -ESOCKTNOSUPPORT;
 602         }
 603
 604         sk = iucv_sock_alloc(sock, protocol, GFP_KERNEL, kern);
 605         if (!sk)
 606                 return -ENOMEM;
 607
 608         iucv_sock_init(sk, NULL);
 609
 610         return 0;
 611 }
 612
 613 void iucv_sock_link(struct iucv_sock_list *l, struct sock *sk)
 614 {
 615         write_lock_bh(&l->lock);
 616         sk_add_node(sk, &l->head);
 617         write_unlock_bh(&l->lock);
 618 }
 619
 620 void iucv_sock_unlink(struct iucv_sock_list *l, struct sock *sk)
 621 {
 622         write_lock_bh(&l->lock);
 623         sk_del_node_init(sk);
 624         write_unlock_bh(&l->lock);
 625 }
 626
 627 void iucv_accept_enqueue(struct sock *parent, struct sock *sk)
 628 {
 629         unsigned long flags;
 630         struct iucv_sock *par = iucv_sk(parent);
 631
 632         sock_hold(sk);
 633         spin_lock_irqsave(&par->accept_q_lock, flags);
 634         list_add_tail(&iucv_sk(sk)->accept_q, &par->accept_q);
 635         spin_unlock_irqrestore(&par->accept_q_lock, flags);
 636         iucv_sk(sk)->parent = parent;
 637         sk_acceptq_added(parent);
 638 }
 639
 640 void iucv_accept_unlink(struct sock *sk)
 641 {
 642         unsigned long flags;
 643         struct iucv_sock *par = iucv_sk(iucv_sk(sk)->parent);
 644
 645         spin_lock_irqsave(&par->accept_q_lock, flags);
 646         list_del_init(&iucv_sk(sk)->accept_q);
 647         spin_unlock_irqrestore(&par->accept_q_lock, flags);
 648         sk_acceptq_removed(iucv_sk(sk)->parent);
 649         iucv_sk(sk)->parent = NULL;
 650         sock_put(sk);
 651 }
 652
 653 struct sock *iucv_accept_dequeue(struct sock *parent, struct socket *newsock)
 654 {
 655         struct iucv_sock *isk, *n;
 656         struct sock *sk;
 657
 658         list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
 659                 sk = (struct sock *) isk;
 660                 lock_sock(sk);
 661
 662                 if (sk->sk_state == IUCV_CLOSED) {
 663                         iucv_accept_unlink(sk);
 664                         release_sock(sk);
 665                         continue;
 666                 }
 667
 668                 if (sk->sk_state == IUCV_CONNECTED ||
 669                     sk->sk_state == IUCV_DISCONN ||
 670                     !newsock) {
 671                         iucv_accept_unlink(sk);
 672                         if (newsock)
 673                                 sock_graft(sk, newsock);
 674
 675                         release_sock(sk);
 676                         return sk;
 677                 }
 678
 679                 release_sock(sk);
 680         }
 681         return NULL;
 682 }
 683
 684 static void __iucv_auto_name(struct iucv_sock *iucv)
 685 {
 686         char name[12];
 687
 688         sprintf(name, "%08x", atomic_inc_return(&iucv_sk_list.autobind_name));
 689         while (__iucv_get_sock_by_name(name)) {
 690                 sprintf(name, "%08x",
 691                         atomic_inc_return(&iucv_sk_list.autobind_name));
 692         }
 693         memcpy(iucv->src_name, name, 8);
 694 }
 695
 696 /* Bind an unbound socket */
 697 static int iucv_sock_bind(struct socket *sock, struct sockaddr *addr,
 698                           int addr_len)
 699 {
 700         struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
 701         struct sock *sk = sock->sk;
 702         struct iucv_sock *iucv;
 703         int err = 0;
 704         struct net_device *dev;
 705         char uid[9];
 706
 707         /* Verify the input sockaddr */
 708         if (addr_len < sizeof(struct sockaddr_iucv) ||
 709             addr->sa_family != AF_IUCV)
 710                 return -EINVAL;
 711
 712         lock_sock(sk);
 713         if (sk->sk_state != IUCV_OPEN) {
 714                 err = -EBADFD;
 715                 goto done;
 716         }
 717
 718         write_lock_bh(&iucv_sk_list.lock);
 719
 720         iucv = iucv_sk(sk);
 721         if (__iucv_get_sock_by_name(sa->siucv_name)) {
 722                 err = -EADDRINUSE;
 723                 goto done_unlock;
 724         }
 725         if (iucv->path)
 726                 goto done_unlock;
 727
 728         /* Bind the socket */
 729         if (pr_iucv)
 730                 if (!memcmp(sa->siucv_user_id, iucv_userid, 8))
 731                         goto vm_bind; /* VM IUCV transport */
 732
 733         /* try hiper transport */
 734         memcpy(uid, sa->siucv_user_id, sizeof(uid));
 735         ASCEBC(uid, 8);
 736         rcu_read_lock();
 737         for_each_netdev_rcu(&init_net, dev) {
 738                 if (!memcmp(dev->perm_addr, uid, 8)) {
 739                         memcpy(iucv->src_user_id, sa->siucv_user_id, 8);
 740                         /* Check for unitialized siucv_name */
 741                         if (strncmp(sa->siucv_name, "        ", 8) == 0)
 742                                 __iucv_auto_name(iucv);
 743                         else
 744                                 memcpy(iucv->src_name, sa->siucv_name, 8);
 745                         sk->sk_bound_dev_if = dev->ifindex;
 746                         iucv->hs_dev = dev;
 747                         dev_hold(dev);
 748                         sk->sk_state = IUCV_BOUND;
 749                         iucv->transport = AF_IUCV_TRANS_HIPER;
 750                         if (!iucv->msglimit)
 751                                 iucv->msglimit = IUCV_HIPER_MSGLIM_DEFAULT;
 752                         rcu_read_unlock();
 753                         goto done_unlock;
 754                 }
 755         }
 756         rcu_read_unlock();
 757 vm_bind:
 758         if (pr_iucv) {
 759                 /* use local userid for backward compat */
 760                 memcpy(iucv->src_name, sa->siucv_name, 8);
 761                 memcpy(iucv->src_user_id, iucv_userid, 8);
 762                 sk->sk_state = IUCV_BOUND;
 763                 iucv->transport = AF_IUCV_TRANS_IUCV;
 764                 if (!iucv->msglimit)
 765                         iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
 766                 goto done_unlock;
 767         }
 768         /* found no dev to bind */
 769         err = -ENODEV;
 770 done_unlock:
 771         /* Release the socket list lock */
 772         write_unlock_bh(&iucv_sk_list.lock);
 773 done:
 774         release_sock(sk);
 775         return err;
 776 }
 777
 778 /* Automatically bind an unbound socket */
 779 static int iucv_sock_autobind(struct sock *sk)
 780 {
 781         struct iucv_sock *iucv = iucv_sk(sk);
 782         int err = 0;
 783
 784         if (unlikely(!pr_iucv))
 785                 return -EPROTO;
 786
 787         memcpy(iucv->src_user_id, iucv_userid, 8);
 788
 789         write_lock_bh(&iucv_sk_list.lock);
 790         __iucv_auto_name(iucv);
 791         write_unlock_bh(&iucv_sk_list.lock);
 792
 793         if (!iucv->msglimit)
 794                 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
 795
 796         return err;
 797 }
 798
 799 static int afiucv_path_connect(struct socket *sock, struct sockaddr *addr)
 800 {
 801         struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
 802         struct sock *sk = sock->sk;
 803         struct iucv_sock *iucv = iucv_sk(sk);
 804         unsigned char user_data[16];
 805         int err;
 806
 807         high_nmcpy(user_data, sa->siucv_name);
 808         low_nmcpy(user_data, iucv->src_name);
 809         ASCEBC(user_data, sizeof(user_data));
 810
 811         /* Create path. */
 812         iucv->path = iucv_path_alloc(iucv->msglimit,
 813                                      IUCV_IPRMDATA, GFP_KERNEL);
 814         if (!iucv->path) {
 815                 err = -ENOMEM;
 816                 goto done;
 817         }
 818         err = pr_iucv->path_connect(iucv->path, &af_iucv_handler,
 819                                     sa->siucv_user_id, NULL, user_data,
 820                                     sk);
 821         if (err) {
 822                 iucv_path_free(iucv->path);
 823                 iucv->path = NULL;
 824                 switch (err) {
 825                 case 0x0b:      /* Target communicator is not logged on */
 826                         err = -ENETUNREACH;
 827                         break;
 828                 case 0x0d:      /* Max connections for this guest exceeded */
 829                 case 0x0e:      /* Max connections for target guest exceeded */
 830                         err = -EAGAIN;
 831                         break;
 832                 case 0x0f:      /* Missing IUCV authorization */
 833                         err = -EACCES;
 834                         break;
 835                 default:
 836                         err = -ECONNREFUSED;
 837                         break;
 838                 }
 839         }
 840 done:
 841         return err;
 842 }
 843
 844 /* Connect an unconnected socket */
 845 static int iucv_sock_connect(struct socket *sock, struct sockaddr *addr,
 846                              int alen, int flags)
 847 {
 848         struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
 849         struct sock *sk = sock->sk;
 850         struct iucv_sock *iucv = iucv_sk(sk);
 851         int err;
 852
 853         if (alen < sizeof(struct sockaddr_iucv) || addr->sa_family != AF_IUCV)
 854                 return -EINVAL;
 855
 856         if (sk->sk_state != IUCV_OPEN && sk->sk_state != IUCV_BOUND)
 857                 return -EBADFD;
 858
 859         if (sk->sk_state == IUCV_OPEN &&
 860             iucv->transport == AF_IUCV_TRANS_HIPER)
 861                 return -EBADFD; /* explicit bind required */
 862
 863         if (sk->sk_type != SOCK_STREAM && sk->sk_type != SOCK_SEQPACKET)
 864                 return -EINVAL;
 865
 866         if (sk->sk_state == IUCV_OPEN) {
 867                 err = iucv_sock_autobind(sk);
 868                 if (unlikely(err))
 869                         return err;
 870         }
 871
 872         lock_sock(sk);
 873
 874         /* Set the destination information */
 875         memcpy(iucv->dst_user_id, sa->siucv_user_id, 8);
 876         memcpy(iucv->dst_name, sa->siucv_name, 8);
 877
 878         if (iucv->transport == AF_IUCV_TRANS_HIPER)
 879                 err = iucv_send_ctrl(sock->sk, AF_IUCV_FLAG_SYN);
 880         else
 881                 err = afiucv_path_connect(sock, addr);
 882         if (err)
 883                 goto done;
 884
 885         if (sk->sk_state != IUCV_CONNECTED)
 886                 err = iucv_sock_wait(sk, iucv_sock_in_state(sk, IUCV_CONNECTED,
 887                                                             IUCV_DISCONN),
 888                                      sock_sndtimeo(sk, flags & O_NONBLOCK));
 889
 890         if (sk->sk_state == IUCV_DISCONN || sk->sk_state == IUCV_CLOSED)
 891                 err = -ECONNREFUSED;
 892
 893         if (err && iucv->transport == AF_IUCV_TRANS_IUCV)
 894                 iucv_sever_path(sk, 0);
 895
 896 done:
 897         release_sock(sk);
 898         return err;
 899 }
 900
 901 /* Move a socket into listening state. */
 902 static int iucv_sock_listen(struct socket *sock, int backlog)
 903 {
 904         struct sock *sk = sock->sk;
 905         int err;
 906
 907         lock_sock(sk);
 908
 909         err = -EINVAL;
 910         if (sk->sk_state != IUCV_BOUND)
 911                 goto done;
 912
 913         if (sock->type != SOCK_STREAM && sock->type != SOCK_SEQPACKET)
 914                 goto done;
 915
 916         sk->sk_max_ack_backlog = backlog;
 917         sk->sk_ack_backlog = 0;
 918         sk->sk_state = IUCV_LISTEN;
 919         err = 0;
 920
 921 done:
 922         release_sock(sk);
 923         return err;
 924 }
 925
 926 /* Accept a pending connection */
 927 static int iucv_sock_accept(struct socket *sock, struct socket *newsock,
 928                             int flags)
 929 {
 930         DECLARE_WAITQUEUE(wait, current);
 931         struct sock *sk = sock->sk, *nsk;
 932         long timeo;
 933         int err = 0;
 934
 935         lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
 936
 937         if (sk->sk_state != IUCV_LISTEN) {
 938                 err = -EBADFD;
 939                 goto done;
 940         }
 941
 942         timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
 943
 944         /* Wait for an incoming connection */
 945         add_wait_queue_exclusive(sk_sleep(sk), &wait);
 946         while (!(nsk = iucv_accept_dequeue(sk, newsock))) {
 947                 set_current_state(TASK_INTERRUPTIBLE);
 948                 if (!timeo) {
 949                         err = -EAGAIN;
 950                         break;
 951                 }
 952
 953                 release_sock(sk);
 954                 timeo = schedule_timeout(timeo);
 955                 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
 956
 957                 if (sk->sk_state != IUCV_LISTEN) {
 958                         err = -EBADFD;
 959                         break;
 960                 }
 961
 962                 if (signal_pending(current)) {
 963                         err = sock_intr_errno(timeo);
 964                         break;
 965                 }
 966         }
 967
 968         set_current_state(TASK_RUNNING);
 969         remove_wait_queue(sk_sleep(sk), &wait);
 970
 971         if (err)
 972                 goto done;
 973
 974         newsock->state = SS_CONNECTED;
 975
 976 done:
 977         release_sock(sk);
 978         return err;
 979 }
 980
 981 static int iucv_sock_getname(struct socket *sock, struct sockaddr *addr,
 982                              int *len, int peer)
 983 {
 984         struct sockaddr_iucv *siucv = (struct sockaddr_iucv *) addr;
 985         struct sock *sk = sock->sk;
 986         struct iucv_sock *iucv = iucv_sk(sk);
 987
 988         addr->sa_family = AF_IUCV;
 989         *len = sizeof(struct sockaddr_iucv);
 990
 991         if (peer) {
 992                 memcpy(siucv->siucv_user_id, iucv->dst_user_id, 8);
 993                 memcpy(siucv->siucv_name, iucv->dst_name, 8);
 994         } else {
 995                 memcpy(siucv->siucv_user_id, iucv->src_user_id, 8);
 996                 memcpy(siucv->siucv_name, iucv->src_name, 8);
 997         }
 998         memset(&siucv->siucv_port, 0, sizeof(siucv->siucv_port));
 999         memset(&siucv->siucv_addr, 0, sizeof(siucv->siucv_addr));
1000         memset(&siucv->siucv_nodeid, 0, sizeof(siucv->siucv_nodeid));
1001
1002         return 0;
1003 }
1004
1005 /**
1006  * iucv_send_iprm() - Send socket data in parameter list of an iucv message.
1007  * @path:       IUCV path
1008  * @msg:        Pointer to a struct iucv_message
1009  * @skb:        The socket data to send, skb->len MUST BE <= 7
1010  *
1011  * Send the socket data in the parameter list in the iucv message
1012  * (IUCV_IPRMDATA). The socket data is stored at index 0 to 6 in the parameter
1013  * list and the socket data len at index 7 (last byte).
1014  * See also iucv_msg_length().
1015  *
1016  * Returns the error code from the iucv_message_send() call.
1017  */
1018 static int iucv_send_iprm(struct iucv_path *path, struct iucv_message *msg,
1019                           struct sk_buff *skb)
1020 {
1021         u8 prmdata[8];
1022
1023         memcpy(prmdata, (void *) skb->data, skb->len);
1024         prmdata[7] = 0xff - (u8) skb->len;
1025         return pr_iucv->message_send(path, msg, IUCV_IPRMDATA, 0,
1026                                  (void *) prmdata, 8);
1027 }
1028
1029 static int iucv_sock_sendmsg(struct socket *sock, struct msghdr *msg,
1030                              size_t len)
1031 {
1032         struct sock *sk = sock->sk;
1033         struct iucv_sock *iucv = iucv_sk(sk);
1034         struct sk_buff *skb;
1035         struct iucv_message txmsg;
1036         struct cmsghdr *cmsg;
1037         int cmsg_done;
1038         long timeo;
1039         char user_id[9];
1040         char appl_id[9];
1041         int err;
1042         int noblock = msg->msg_flags & MSG_DONTWAIT;
1043
1044         err = sock_error(sk);
1045         if (err)
1046                 return err;
1047
1048         if (msg->msg_flags & MSG_OOB)
1049                 return -EOPNOTSUPP;
1050
1051         /* SOCK_SEQPACKET: we do not support segmented records */
1052         if (sk->sk_type == SOCK_SEQPACKET && !(msg->msg_flags & MSG_EOR))
1053                 return -EOPNOTSUPP;
1054
1055         lock_sock(sk);
1056
1057         if (sk->sk_shutdown & SEND_SHUTDOWN) {
1058                 err = -EPIPE;
1059                 goto out;
1060         }
1061
1062         /* Return if the socket is not in connected state */
1063         if (sk->sk_state != IUCV_CONNECTED) {
1064                 err = -ENOTCONN;
1065                 goto out;
1066         }
1067
1068         /* initialize defaults */
1069         cmsg_done   = 0;        /* check for duplicate headers */
1070         txmsg.class = 0;
1071
1072         /* iterate over control messages */
1073         for_each_cmsghdr(cmsg, msg) {
1074                 if (!CMSG_OK(msg, cmsg)) {
1075                         err = -EINVAL;
1076                         goto out;
1077                 }
1078
1079                 if (cmsg->cmsg_level != SOL_IUCV)
1080                         continue;
1081
1082                 if (cmsg->cmsg_type & cmsg_done) {
1083                         err = -EINVAL;
1084                         goto out;
1085                 }
1086                 cmsg_done |= cmsg->cmsg_type;
1087
1088                 switch (cmsg->cmsg_type) {
1089                 case SCM_IUCV_TRGCLS:
1090                         if (cmsg->cmsg_len != CMSG_LEN(TRGCLS_SIZE)) {
1091                                 err = -EINVAL;
1092                                 goto out;
1093                         }
1094
1095                         /* set iucv message target class */
1096                         memcpy(&txmsg.class,
1097                                 (void *) CMSG_DATA(cmsg), TRGCLS_SIZE);
1098
1099                         break;
1100
1101                 default:
1102                         err = -EINVAL;
1103                         goto out;
1104                 }
1105         }
1106
1107         /* allocate one skb for each iucv message:
1108          * this is fine for SOCK_SEQPACKET (unless we want to support
1109          * segmented records using the MSG_EOR flag), but
1110          * for SOCK_STREAM we might want to improve it in future */
1111         if (iucv->transport == AF_IUCV_TRANS_HIPER)
1112                 skb = sock_alloc_send_skb(sk,
1113                         len + sizeof(struct af_iucv_trans_hdr) + ETH_HLEN,
1114                         noblock, &err);
1115         else
1116                 skb = sock_alloc_send_skb(sk, len, noblock, &err);
1117         if (!skb)
1118                 goto out;
1119         if (iucv->transport == AF_IUCV_TRANS_HIPER)
1120                 skb_reserve(skb, sizeof(struct af_iucv_trans_hdr) + ETH_HLEN);
1121         if (memcpy_from_msg(skb_put(skb, len), msg, len)) {
1122                 err = -EFAULT;
1123                 goto fail;
1124         }
1125
1126         /* wait if outstanding messages for iucv path has reached */
1127         timeo = sock_sndtimeo(sk, noblock);
1128         err = iucv_sock_wait(sk, iucv_below_msglim(sk), timeo);
1129         if (err)
1130                 goto fail;
1131
1132         /* return -ECONNRESET if the socket is no longer connected */
1133         if (sk->sk_state != IUCV_CONNECTED) {
1134                 err = -ECONNRESET;
1135                 goto fail;
1136         }
1137
1138         /* increment and save iucv message tag for msg_completion cbk */
1139         txmsg.tag = iucv->send_tag++;
1140         IUCV_SKB_CB(skb)->tag = txmsg.tag;
1141
1142         if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1143                 atomic_inc(&iucv->msg_sent);
1144                 err = afiucv_hs_send(&txmsg, sk, skb, 0);
1145                 if (err) {
1146                         atomic_dec(&iucv->msg_sent);
1147                         goto fail;
1148                 }
1149                 goto release;
1150         }
1151         skb_queue_tail(&iucv->send_skb_q, skb);
1152
1153         if (((iucv->path->flags & IUCV_IPRMDATA) & iucv->flags)
1154               && skb->len <= 7) {
1155                 err = iucv_send_iprm(iucv->path, &txmsg, skb);
1156
1157                 /* on success: there is no message_complete callback
1158                  * for an IPRMDATA msg; remove skb from send queue */
1159                 if (err == 0) {
1160                         skb_unlink(skb, &iucv->send_skb_q);
1161                         kfree_skb(skb);
1162                 }
1163
1164                 /* this error should never happen since the
1165                  * IUCV_IPRMDATA path flag is set... sever path */
1166                 if (err == 0x15) {
1167                         pr_iucv->path_sever(iucv->path, NULL);
1168                         skb_unlink(skb, &iucv->send_skb_q);
1169                         err = -EPIPE;
1170                         goto fail;
1171                 }
1172         } else
1173                 err = pr_iucv->message_send(iucv->path, &txmsg, 0, 0,
1174                                         (void *) skb->data, skb->len);
1175         if (err) {
1176                 if (err == 3) {
1177                         user_id[8] = 0;
1178                         memcpy(user_id, iucv->dst_user_id, 8);
1179                         appl_id[8] = 0;
1180                         memcpy(appl_id, iucv->dst_name, 8);
1181                         pr_err("Application %s on z/VM guest %s"
1182                                 " exceeds message limit\n",
1183                                 appl_id, user_id);
1184                         err = -EAGAIN;
1185                 } else
1186                         err = -EPIPE;
1187                 skb_unlink(skb, &iucv->send_skb_q);
1188                 goto fail;
1189         }
1190
1191 release:
1192         release_sock(sk);
1193         return len;
1194
1195 fail:
1196         kfree_skb(skb);
1197 out:
1198         release_sock(sk);
1199         return err;
1200 }
1201
1202 /* iucv_fragment_skb() - Fragment a single IUCV message into multiple skb's
1203  *
1204  * Locking: must be called with message_q.lock held
1205  */
1206 static int iucv_fragment_skb(struct sock *sk, struct sk_buff *skb, int len)
1207 {
1208         int dataleft, size, copied = 0;
1209         struct sk_buff *nskb;
1210
1211         dataleft = len;
1212         while (dataleft) {
1213                 if (dataleft >= sk->sk_rcvbuf / 4)
1214                         size = sk->sk_rcvbuf / 4;
1215                 else
1216                         size = dataleft;
1217
1218                 nskb = alloc_skb(size, GFP_ATOMIC | GFP_DMA);
1219                 if (!nskb)
1220                         return -ENOMEM;
1221
1222                 /* copy target class to control buffer of new skb */
1223                 IUCV_SKB_CB(nskb)->class = IUCV_SKB_CB(skb)->class;
1224
1225                 /* copy data fragment */
1226                 memcpy(nskb->data, skb->data + copied, size);
1227                 copied += size;
1228                 dataleft -= size;
1229
1230                 skb_reset_transport_header(nskb);
1231                 skb_reset_network_header(nskb);
1232                 nskb->len = size;
1233
1234                 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, nskb);
1235         }
1236
1237         return 0;
1238 }
1239
1240 /* iucv_process_message() - Receive a single outstanding IUCV message
1241  *
1242  * Locking: must be called with message_q.lock held
1243  */
1244 static void iucv_process_message(struct sock *sk, struct sk_buff *skb,
1245                                  struct iucv_path *path,
1246                                  struct iucv_message *msg)
1247 {
1248         int rc;
1249         unsigned int len;
1250
1251         len = iucv_msg_length(msg);
1252
1253         /* store msg target class in the second 4 bytes of skb ctrl buffer */
1254         /* Note: the first 4 bytes are reserved for msg tag */
1255         IUCV_SKB_CB(skb)->class = msg->class;
1256
1257         /* check for special IPRM messages (e.g. iucv_sock_shutdown) */
1258         if ((msg->flags & IUCV_IPRMDATA) && len > 7) {
1259                 if (memcmp(msg->rmmsg, iprm_shutdown, 8) == 0) {
1260                         skb->data = NULL;
1261                         skb->len = 0;
1262                 }
1263         } else {
1264                 rc = pr_iucv->message_receive(path, msg,
1265                                               msg->flags & IUCV_IPRMDATA,
1266                                               skb->data, len, NULL);
1267                 if (rc) {
1268                         kfree_skb(skb);
1269                         return;
1270                 }
1271                 /* we need to fragment iucv messages for SOCK_STREAM only;
1272                  * for SOCK_SEQPACKET, it is only relevant if we support
1273                  * record segmentation using MSG_EOR (see also recvmsg()) */
1274                 if (sk->sk_type == SOCK_STREAM &&
1275                     skb->truesize >= sk->sk_rcvbuf / 4) {
1276                         rc = iucv_fragment_skb(sk, skb, len);
1277                         kfree_skb(skb);
1278                         skb = NULL;
1279                         if (rc) {
1280                                 pr_iucv->path_sever(path, NULL);
1281                                 return;
1282                         }
1283                         skb = skb_dequeue(&iucv_sk(sk)->backlog_skb_q);
1284                 } else {
1285                         skb_reset_transport_header(skb);
1286                         skb_reset_network_header(skb);
1287                         skb->len = len;
1288                 }
1289         }
1290
1291         IUCV_SKB_CB(skb)->offset = 0;
1292         if (sock_queue_rcv_skb(sk, skb))
1293                 skb_queue_head(&iucv_sk(sk)->backlog_skb_q, skb);
1294 }
1295
1296 /* iucv_process_message_q() - Process outstanding IUCV messages
1297  *
1298  * Locking: must be called with message_q.lock held
1299  */
1300 static void iucv_process_message_q(struct sock *sk)
1301 {
1302         struct iucv_sock *iucv = iucv_sk(sk);
1303         struct sk_buff *skb;
1304         struct sock_msg_q *p, *n;
1305
1306         list_for_each_entry_safe(p, n, &iucv->message_q.list, list) {
1307                 skb = alloc_skb(iucv_msg_length(&p->msg), GFP_ATOMIC | GFP_DMA);
1308                 if (!skb)
1309                         break;
1310                 iucv_process_message(sk, skb, p->path, &p->msg);
1311                 list_del(&p->list);
1312                 kfree(p);
1313                 if (!skb_queue_empty(&iucv->backlog_skb_q))
1314                         break;
1315         }
1316 }
1317
1318 static int iucv_sock_recvmsg(struct socket *sock, struct msghdr *msg,
1319                              size_t len, int flags)
1320 {
1321         int noblock = flags & MSG_DONTWAIT;
1322         struct sock *sk = sock->sk;
1323         struct iucv_sock *iucv = iucv_sk(sk);
1324         unsigned int copied, rlen;
1325         struct sk_buff *skb, *rskb, *cskb;
1326         int err = 0;
1327         u32 offset;
1328
1329         if ((sk->sk_state == IUCV_DISCONN) &&
1330             skb_queue_empty(&iucv->backlog_skb_q) &&
1331             skb_queue_empty(&sk->sk_receive_queue) &&
1332             list_empty(&iucv->message_q.list))
1333                 return 0;
1334
1335         if (flags & (MSG_OOB))
1336                 return -EOPNOTSUPP;
1337
1338         /* receive/dequeue next skb:
1339          * the function understands MSG_PEEK and, thus, does not dequeue skb */
1340         skb = skb_recv_datagram(sk, flags, noblock, &err);
1341         if (!skb) {
1342                 if (sk->sk_shutdown & RCV_SHUTDOWN)
1343                         return 0;
1344                 return err;
1345         }
1346
1347         offset = IUCV_SKB_CB(skb)->offset;
1348         rlen   = skb->len - offset;             /* real length of skb */
1349         copied = min_t(unsigned int, rlen, len);
1350         if (!rlen)
1351                 sk->sk_shutdown = sk->sk_shutdown | RCV_SHUTDOWN;
1352
1353         cskb = skb;
1354         if (skb_copy_datagram_msg(cskb, offset, msg, copied)) {
1355                 if (!(flags & MSG_PEEK))
1356                         skb_queue_head(&sk->sk_receive_queue, skb);
1357                 return -EFAULT;
1358         }
1359
1360         /* SOCK_SEQPACKET: set MSG_TRUNC if recv buf size is too small */
1361         if (sk->sk_type == SOCK_SEQPACKET) {
1362                 if (copied < rlen)
1363                         msg->msg_flags |= MSG_TRUNC;
1364                 /* each iucv message contains a complete record */
1365                 msg->msg_flags |= MSG_EOR;
1366         }
1367
1368         /* create control message to store iucv msg target class:
1369          * get the trgcls from the control buffer of the skb due to
1370          * fragmentation of original iucv message. */
1371         err = put_cmsg(msg, SOL_IUCV, SCM_IUCV_TRGCLS,
1372                        sizeof(IUCV_SKB_CB(skb)->class),
1373                        (void *)&IUCV_SKB_CB(skb)->class);
1374         if (err) {
1375                 if (!(flags & MSG_PEEK))
1376                         skb_queue_head(&sk->sk_receive_queue, skb);
1377                 return err;
1378         }
1379
1380         /* Mark read part of skb as used */
1381         if (!(flags & MSG_PEEK)) {
1382
1383                 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
1384                 if (sk->sk_type == SOCK_STREAM) {
1385                         if (copied < rlen) {
1386                                 IUCV_SKB_CB(skb)->offset = offset + copied;
1387                                 skb_queue_head(&sk->sk_receive_queue, skb);
1388                                 goto done;
1389                         }
1390                 }
1391
1392                 kfree_skb(skb);
1393                 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1394                         atomic_inc(&iucv->msg_recv);
1395                         if (atomic_read(&iucv->msg_recv) > iucv->msglimit) {
1396                                 WARN_ON(1);
1397                                 iucv_sock_close(sk);
1398                                 return -EFAULT;
1399                         }
1400                 }
1401
1402                 /* Queue backlog skbs */
1403                 spin_lock_bh(&iucv->message_q.lock);
1404                 rskb = skb_dequeue(&iucv->backlog_skb_q);
1405                 while (rskb) {
1406                         IUCV_SKB_CB(rskb)->offset = 0;
1407                         if (sock_queue_rcv_skb(sk, rskb)) {
1408                                 skb_queue_head(&iucv->backlog_skb_q,
1409                                                 rskb);
1410                                 break;
1411                         } else {
1412                                 rskb = skb_dequeue(&iucv->backlog_skb_q);
1413                         }
1414                 }
1415                 if (skb_queue_empty(&iucv->backlog_skb_q)) {
1416                         if (!list_empty(&iucv->message_q.list))
1417                                 iucv_process_message_q(sk);
1418                         if (atomic_read(&iucv->msg_recv) >=
1419                                                         iucv->msglimit / 2) {
1420                                 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_WIN);
1421                                 if (err) {
1422                                         sk->sk_state = IUCV_DISCONN;
1423                                         sk->sk_state_change(sk);
1424                                 }
1425                         }
1426                 }
1427                 spin_unlock_bh(&iucv->message_q.lock);
1428         }
1429
1430 done:
1431         /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
1432         if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
1433                 copied = rlen;
1434
1435         return copied;
1436 }
1437
1438 static inline unsigned int iucv_accept_poll(struct sock *parent)
1439 {
1440         struct iucv_sock *isk, *n;
1441         struct sock *sk;
1442
1443         list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
1444                 sk = (struct sock *) isk;
1445
1446                 if (sk->sk_state == IUCV_CONNECTED)
1447                         return POLLIN | POLLRDNORM;
1448         }
1449
1450         return 0;
1451 }
1452
1453 unsigned int iucv_sock_poll(struct file *file, struct socket *sock,
1454                             poll_table *wait)
1455 {
1456         struct sock *sk = sock->sk;
1457         unsigned int mask = 0;
1458
1459         sock_poll_wait(file, sk_sleep(sk), wait);
1460
1461         if (sk->sk_state == IUCV_LISTEN)
1462                 return iucv_accept_poll(sk);
1463
1464         if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
1465                 mask |= POLLERR |
1466                         (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? POLLPRI : 0);
1467
1468         if (sk->sk_shutdown & RCV_SHUTDOWN)
1469                 mask |= POLLRDHUP;
1470
1471         if (sk->sk_shutdown == SHUTDOWN_MASK)
1472                 mask |= POLLHUP;
1473
1474         if (!skb_queue_empty(&sk->sk_receive_queue) ||
1475             (sk->sk_shutdown & RCV_SHUTDOWN))
1476                 mask |= POLLIN | POLLRDNORM;
1477
1478         if (sk->sk_state == IUCV_CLOSED)
1479                 mask |= POLLHUP;
1480
1481         if (sk->sk_state == IUCV_DISCONN)
1482                 mask |= POLLIN;
1483
1484         if (sock_writeable(sk) && iucv_below_msglim(sk))
1485                 mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
1486         else
1487                 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
1488
1489         return mask;
1490 }
1491
1492 static int iucv_sock_shutdown(struct socket *sock, int how)
1493 {
1494         struct sock *sk = sock->sk;
1495         struct iucv_sock *iucv = iucv_sk(sk);
1496         struct iucv_message txmsg;
1497         int err = 0;
1498
1499         how++;
1500
1501         if ((how & ~SHUTDOWN_MASK) || !how)
1502                 return -EINVAL;
1503
1504         lock_sock(sk);
1505         switch (sk->sk_state) {
1506         case IUCV_LISTEN:
1507         case IUCV_DISCONN:
1508         case IUCV_CLOSING:
1509         case IUCV_CLOSED:
1510                 err = -ENOTCONN;
1511                 goto fail;
1512         default:
1513                 break;
1514         }
1515
1516         if ((how == SEND_SHUTDOWN || how == SHUTDOWN_MASK) &&
1517             sk->sk_state == IUCV_CONNECTED) {
1518                 if (iucv->transport == AF_IUCV_TRANS_IUCV) {
1519                         txmsg.class = 0;
1520                         txmsg.tag = 0;
1521                         err = pr_iucv->message_send(iucv->path, &txmsg,
1522                                 IUCV_IPRMDATA, 0, (void *) iprm_shutdown, 8);
1523                         if (err) {
1524                                 switch (err) {
1525                                 case 1:
1526                                         err = -ENOTCONN;
1527                                         break;
1528                                 case 2:
1529                                         err = -ECONNRESET;
1530                                         break;
1531                                 default:
1532                                         err = -ENOTCONN;
1533                                         break;
1534                                 }
1535                         }
1536                 } else
1537                         iucv_send_ctrl(sk, AF_IUCV_FLAG_SHT);
1538         }
1539
1540         sk->sk_shutdown |= how;
1541         if (how == RCV_SHUTDOWN || how == SHUTDOWN_MASK) {
1542                 if ((iucv->transport == AF_IUCV_TRANS_IUCV) &&
1543                     iucv->path) {
1544                         err = pr_iucv->path_quiesce(iucv->path, NULL);
1545                         if (err)
1546                                 err = -ENOTCONN;
1547 /*                      skb_queue_purge(&sk->sk_receive_queue); */
1548                 }
1549                 skb_queue_purge(&sk->sk_receive_queue);
1550         }
1551
1552         /* Wake up anyone sleeping in poll */
1553         sk->sk_state_change(sk);
1554
1555 fail:
1556         release_sock(sk);
1557         return err;
1558 }
1559
1560 static int iucv_sock_release(struct socket *sock)
1561 {
1562         struct sock *sk = sock->sk;
1563         int err = 0;
1564
1565         if (!sk)
1566                 return 0;
1567
1568         iucv_sock_close(sk);
1569
1570         sock_orphan(sk);
1571         iucv_sock_kill(sk);
1572         return err;
1573 }
1574
1575 /* getsockopt and setsockopt */
1576 static int iucv_sock_setsockopt(struct socket *sock, int level, int optname,
1577                                 char __user *optval, unsigned int optlen)
1578 {
1579         struct sock *sk = sock->sk;
1580         struct iucv_sock *iucv = iucv_sk(sk);
1581         int val;
1582         int rc;
1583
1584         if (level != SOL_IUCV)
1585                 return -ENOPROTOOPT;
1586
1587         if (optlen < sizeof(int))
1588                 return -EINVAL;
1589
1590         if (get_user(val, (int __user *) optval))
1591                 return -EFAULT;
1592
1593         rc = 0;
1594
1595         lock_sock(sk);
1596         switch (optname) {
1597         case SO_IPRMDATA_MSG:
1598                 if (val)
1599                         iucv->flags |= IUCV_IPRMDATA;
1600                 else
1601                         iucv->flags &= ~IUCV_IPRMDATA;
1602                 break;
1603         case SO_MSGLIMIT:
1604                 switch (sk->sk_state) {
1605                 case IUCV_OPEN:
1606                 case IUCV_BOUND:
1607                         if (val < 1 || val > (u16)(~0))
1608                                 rc = -EINVAL;
1609                         else
1610                                 iucv->msglimit = val;
1611                         break;
1612                 default:
1613                         rc = -EINVAL;
1614                         break;
1615                 }
1616                 break;
1617         default:
1618                 rc = -ENOPROTOOPT;
1619                 break;
1620         }
1621         release_sock(sk);
1622
1623         return rc;
1624 }
1625
1626 static int iucv_sock_getsockopt(struct socket *sock, int level, int optname,
1627                                 char __user *optval, int __user *optlen)
1628 {
1629         struct sock *sk = sock->sk;
1630         struct iucv_sock *iucv = iucv_sk(sk);
1631         unsigned int val;
1632         int len;
1633
1634         if (level != SOL_IUCV)
1635                 return -ENOPROTOOPT;
1636
1637         if (get_user(len, optlen))
1638                 return -EFAULT;
1639
1640         if (len < 0)
1641                 return -EINVAL;
1642
1643         len = min_t(unsigned int, len, sizeof(int));
1644
1645         switch (optname) {
1646         case SO_IPRMDATA_MSG:
1647                 val = (iucv->flags & IUCV_IPRMDATA) ? 1 : 0;
1648                 break;
1649         case SO_MSGLIMIT:
1650                 lock_sock(sk);
1651                 val = (iucv->path != NULL) ? iucv->path->msglim /* connected */
1652                                            : iucv->msglimit;    /* default */
1653                 release_sock(sk);
1654                 break;
1655         case SO_MSGSIZE:
1656                 if (sk->sk_state == IUCV_OPEN)
1657                         return -EBADFD;
1658                 val = (iucv->hs_dev) ? iucv->hs_dev->mtu -
1659                                 sizeof(struct af_iucv_trans_hdr) - ETH_HLEN :
1660                                 0x7fffffff;
1661                 break;
1662         default:
1663                 return -ENOPROTOOPT;
1664         }
1665
1666         if (put_user(len, optlen))
1667                 return -EFAULT;
1668         if (copy_to_user(optval, &val, len))
1669                 return -EFAULT;
1670
1671         return 0;
1672 }
1673
1674
1675 /* Callback wrappers - called from iucv base support */
1676 static int iucv_callback_connreq(struct iucv_path *path,
1677                                  u8 ipvmid[8], u8 ipuser[16])
1678 {
1679         unsigned char user_data[16];
1680         unsigned char nuser_data[16];
1681         unsigned char src_name[8];
1682         struct sock *sk, *nsk;
1683         struct iucv_sock *iucv, *niucv;
1684         int err;
1685
1686         memcpy(src_name, ipuser, 8);
1687         EBCASC(src_name, 8);
1688         /* Find out if this path belongs to af_iucv. */
1689         read_lock(&iucv_sk_list.lock);
1690         iucv = NULL;
1691         sk = NULL;
1692         sk_for_each(sk, &iucv_sk_list.head)
1693                 if (sk->sk_state == IUCV_LISTEN &&
1694                     !memcmp(&iucv_sk(sk)->src_name, src_name, 8)) {
1695                         /*
1696                          * Found a listening socket with
1697                          * src_name == ipuser[0-7].
1698                          */
1699                         iucv = iucv_sk(sk);
1700                         break;
1701                 }
1702         read_unlock(&iucv_sk_list.lock);
1703         if (!iucv)
1704                 /* No socket found, not one of our paths. */
1705                 return -EINVAL;
1706
1707         bh_lock_sock(sk);
1708
1709         /* Check if parent socket is listening */
1710         low_nmcpy(user_data, iucv->src_name);
1711         high_nmcpy(user_data, iucv->dst_name);
1712         ASCEBC(user_data, sizeof(user_data));
1713         if (sk->sk_state != IUCV_LISTEN) {
1714                 err = pr_iucv->path_sever(path, user_data);
1715                 iucv_path_free(path);
1716                 goto fail;
1717         }
1718
1719         /* Check for backlog size */
1720         if (sk_acceptq_is_full(sk)) {
1721                 err = pr_iucv->path_sever(path, user_data);
1722                 iucv_path_free(path);
1723                 goto fail;
1724         }
1725
1726         /* Create the new socket */
1727         nsk = iucv_sock_alloc(NULL, sk->sk_protocol, GFP_ATOMIC, 0);
1728         if (!nsk) {
1729                 err = pr_iucv->path_sever(path, user_data);
1730                 iucv_path_free(path);
1731                 goto fail;
1732         }
1733
1734         niucv = iucv_sk(nsk);
1735         iucv_sock_init(nsk, sk);
1736
1737         /* Set the new iucv_sock */
1738         memcpy(niucv->dst_name, ipuser + 8, 8);
1739         EBCASC(niucv->dst_name, 8);
1740         memcpy(niucv->dst_user_id, ipvmid, 8);
1741         memcpy(niucv->src_name, iucv->src_name, 8);
1742         memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1743         niucv->path = path;
1744
1745         /* Call iucv_accept */
1746         high_nmcpy(nuser_data, ipuser + 8);
1747         memcpy(nuser_data + 8, niucv->src_name, 8);
1748         ASCEBC(nuser_data + 8, 8);
1749
1750         /* set message limit for path based on msglimit of accepting socket */
1751         niucv->msglimit = iucv->msglimit;
1752         path->msglim = iucv->msglimit;
1753         err = pr_iucv->path_accept(path, &af_iucv_handler, nuser_data, nsk);
1754         if (err) {
1755                 iucv_sever_path(nsk, 1);
1756                 iucv_sock_kill(nsk);
1757                 goto fail;
1758         }
1759
1760         iucv_accept_enqueue(sk, nsk);
1761
1762         /* Wake up accept */
1763         nsk->sk_state = IUCV_CONNECTED;
1764         sk->sk_data_ready(sk);
1765         err = 0;
1766 fail:
1767         bh_unlock_sock(sk);
1768         return 0;
1769 }
1770
1771 static void iucv_callback_connack(struct iucv_path *path, u8 ipuser[16])
1772 {
1773         struct sock *sk = path->private;
1774
1775         sk->sk_state = IUCV_CONNECTED;
1776         sk->sk_state_change(sk);
1777 }
1778
1779 static void iucv_callback_rx(struct iucv_path *path, struct iucv_message *msg)
1780 {
1781         struct sock *sk = path->private;
1782         struct iucv_sock *iucv = iucv_sk(sk);
1783         struct sk_buff *skb;
1784         struct sock_msg_q *save_msg;
1785         int len;
1786
1787         if (sk->sk_shutdown & RCV_SHUTDOWN) {
1788                 pr_iucv->message_reject(path, msg);
1789                 return;
1790         }
1791
1792         spin_lock(&iucv->message_q.lock);
1793
1794         if (!list_empty(&iucv->message_q.list) ||
1795             !skb_queue_empty(&iucv->backlog_skb_q))
1796                 goto save_message;
1797
1798         len = atomic_read(&sk->sk_rmem_alloc);
1799         len += SKB_TRUESIZE(iucv_msg_length(msg));
1800         if (len > sk->sk_rcvbuf)
1801                 goto save_message;
1802
1803         skb = alloc_skb(iucv_msg_length(msg), GFP_ATOMIC | GFP_DMA);
1804         if (!skb)
1805                 goto save_message;
1806
1807         iucv_process_message(sk, skb, path, msg);
1808         goto out_unlock;
1809
1810 save_message:
1811         save_msg = kzalloc(sizeof(struct sock_msg_q), GFP_ATOMIC | GFP_DMA);
1812         if (!save_msg)
1813                 goto out_unlock;
1814         save_msg->path = path;
1815         save_msg->msg = *msg;
1816
1817         list_add_tail(&save_msg->list, &iucv->message_q.list);
1818
1819 out_unlock:
1820         spin_unlock(&iucv->message_q.lock);
1821 }
1822
1823 static void iucv_callback_txdone(struct iucv_path *path,
1824                                  struct iucv_message *msg)
1825 {
1826         struct sock *sk = path->private;
1827         struct sk_buff *this = NULL;
1828         struct sk_buff_head *list = &iucv_sk(sk)->send_skb_q;
1829         struct sk_buff *list_skb = list->next;
1830         unsigned long flags;
1831
1832         bh_lock_sock(sk);
1833         if (!skb_queue_empty(list)) {
1834                 spin_lock_irqsave(&list->lock, flags);
1835
1836                 while (list_skb != (struct sk_buff *)list) {
1837                         if (msg->tag == IUCV_SKB_CB(list_skb)->tag) {
1838                                 this = list_skb;
1839                                 break;
1840                         }
1841                         list_skb = list_skb->next;
1842                 }
1843                 if (this)
1844                         __skb_unlink(this, list);
1845
1846                 spin_unlock_irqrestore(&list->lock, flags);
1847
1848                 if (this) {
1849                         kfree_skb(this);
1850                         /* wake up any process waiting for sending */
1851                         iucv_sock_wake_msglim(sk);
1852                 }
1853         }
1854
1855         if (sk->sk_state == IUCV_CLOSING) {
1856                 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
1857                         sk->sk_state = IUCV_CLOSED;
1858                         sk->sk_state_change(sk);
1859                 }
1860         }
1861         bh_unlock_sock(sk);
1862
1863 }
1864
1865 static void iucv_callback_connrej(struct iucv_path *path, u8 ipuser[16])
1866 {
1867         struct sock *sk = path->private;
1868
1869         if (sk->sk_state == IUCV_CLOSED)
1870                 return;
1871
1872         bh_lock_sock(sk);
1873         iucv_sever_path(sk, 1);
1874         sk->sk_state = IUCV_DISCONN;
1875
1876         sk->sk_state_change(sk);
1877         bh_unlock_sock(sk);
1878 }
1879
1880 /* called if the other communication side shuts down its RECV direction;
1881  * in turn, the callback sets SEND_SHUTDOWN to disable sending of data.
1882  */
1883 static void iucv_callback_shutdown(struct iucv_path *path, u8 ipuser[16])
1884 {
1885         struct sock *sk = path->private;
1886
1887         bh_lock_sock(sk);
1888         if (sk->sk_state != IUCV_CLOSED) {
1889                 sk->sk_shutdown |= SEND_SHUTDOWN;
1890                 sk->sk_state_change(sk);
1891         }
1892         bh_unlock_sock(sk);
1893 }
1894
1895 /***************** HiperSockets transport callbacks ********************/
1896 static void afiucv_swap_src_dest(struct sk_buff *skb)
1897 {
1898         struct af_iucv_trans_hdr *trans_hdr =
1899                                 (struct af_iucv_trans_hdr *)skb->data;
1900         char tmpID[8];
1901         char tmpName[8];
1902
1903         ASCEBC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
1904         ASCEBC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
1905         ASCEBC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
1906         ASCEBC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
1907         memcpy(tmpID, trans_hdr->srcUserID, 8);
1908         memcpy(tmpName, trans_hdr->srcAppName, 8);
1909         memcpy(trans_hdr->srcUserID, trans_hdr->destUserID, 8);
1910         memcpy(trans_hdr->srcAppName, trans_hdr->destAppName, 8);
1911         memcpy(trans_hdr->destUserID, tmpID, 8);
1912         memcpy(trans_hdr->destAppName, tmpName, 8);
1913         skb_push(skb, ETH_HLEN);
1914         memset(skb->data, 0, ETH_HLEN);
1915 }
1916
1917 /**
1918  * afiucv_hs_callback_syn - react on received SYN
1919  **/
1920 static int afiucv_hs_callback_syn(struct sock *sk, struct sk_buff *skb)
1921 {
1922         struct sock *nsk;
1923         struct iucv_sock *iucv, *niucv;
1924         struct af_iucv_trans_hdr *trans_hdr;
1925         int err;
1926
1927         iucv = iucv_sk(sk);
1928         trans_hdr = (struct af_iucv_trans_hdr *)skb->data;
1929         if (!iucv) {
1930                 /* no sock - connection refused */
1931                 afiucv_swap_src_dest(skb);
1932                 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1933                 err = dev_queue_xmit(skb);
1934                 goto out;
1935         }
1936
1937         nsk = iucv_sock_alloc(NULL, sk->sk_protocol, GFP_ATOMIC, 0);
1938         bh_lock_sock(sk);
1939         if ((sk->sk_state != IUCV_LISTEN) ||
1940             sk_acceptq_is_full(sk) ||
1941             !nsk) {
1942                 /* error on server socket - connection refused */
1943                 afiucv_swap_src_dest(skb);
1944                 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1945                 err = dev_queue_xmit(skb);
1946                 iucv_sock_kill(nsk);
1947                 bh_unlock_sock(sk);
1948                 goto out;
1949         }
1950
1951         niucv = iucv_sk(nsk);
1952         iucv_sock_init(nsk, sk);
1953         niucv->transport = AF_IUCV_TRANS_HIPER;
1954         niucv->msglimit = iucv->msglimit;
1955         if (!trans_hdr->window)
1956                 niucv->msglimit_peer = IUCV_HIPER_MSGLIM_DEFAULT;
1957         else
1958                 niucv->msglimit_peer = trans_hdr->window;
1959         memcpy(niucv->dst_name, trans_hdr->srcAppName, 8);
1960         memcpy(niucv->dst_user_id, trans_hdr->srcUserID, 8);
1961         memcpy(niucv->src_name, iucv->src_name, 8);
1962         memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1963         nsk->sk_bound_dev_if = sk->sk_bound_dev_if;
1964         niucv->hs_dev = iucv->hs_dev;
1965         dev_hold(niucv->hs_dev);
1966         afiucv_swap_src_dest(skb);
1967         trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK;
1968         trans_hdr->window = niucv->msglimit;
1969         /* if receiver acks the xmit connection is established */
1970         err = dev_queue_xmit(skb);
1971         if (!err) {
1972                 iucv_accept_enqueue(sk, nsk);
1973                 nsk->sk_state = IUCV_CONNECTED;
1974                 sk->sk_data_ready(sk);
1975         } else
1976                 iucv_sock_kill(nsk);
1977         bh_unlock_sock(sk);
1978
1979 out:
1980         return NET_RX_SUCCESS;
1981 }
1982
1983 /**
1984  * afiucv_hs_callback_synack() - react on received SYN-ACK
1985  **/
1986 static int afiucv_hs_callback_synack(struct sock *sk, struct sk_buff *skb)
1987 {
1988         struct iucv_sock *iucv = iucv_sk(sk);
1989         struct af_iucv_trans_hdr *trans_hdr =
1990                                         (struct af_iucv_trans_hdr *)skb->data;
1991
1992         if (!iucv)
1993                 goto out;
1994         if (sk->sk_state != IUCV_BOUND)
1995                 goto out;
1996         bh_lock_sock(sk);
1997         iucv->msglimit_peer = trans_hdr->window;
1998         sk->sk_state = IUCV_CONNECTED;
1999         sk->sk_state_change(sk);
2000         bh_unlock_sock(sk);
2001 out:
2002         kfree_skb(skb);
2003         return NET_RX_SUCCESS;
2004 }
2005
2006 /**
2007  * afiucv_hs_callback_synfin() - react on received SYN_FIN
2008  **/
2009 static int afiucv_hs_callback_synfin(struct sock *sk, struct sk_buff *skb)
2010 {
2011         struct iucv_sock *iucv = iucv_sk(sk);
2012
2013         if (!iucv)
2014                 goto out;
2015         if (sk->sk_state != IUCV_BOUND)
2016                 goto out;
2017         bh_lock_sock(sk);
2018         sk->sk_state = IUCV_DISCONN;
2019         sk->sk_state_change(sk);
2020         bh_unlock_sock(sk);
2021 out:
2022         kfree_skb(skb);
2023         return NET_RX_SUCCESS;
2024 }
2025
2026 /**
2027  * afiucv_hs_callback_fin() - react on received FIN
2028  **/
2029 static int afiucv_hs_callback_fin(struct sock *sk, struct sk_buff *skb)
2030 {
2031         struct iucv_sock *iucv = iucv_sk(sk);
2032
2033         /* other end of connection closed */
2034         if (!iucv)
2035                 goto out;
2036         bh_lock_sock(sk);
2037         if (sk->sk_state == IUCV_CONNECTED) {
2038                 sk->sk_state = IUCV_DISCONN;
2039                 sk->sk_state_change(sk);
2040         }
2041         bh_unlock_sock(sk);
2042 out:
2043         kfree_skb(skb);
2044         return NET_RX_SUCCESS;
2045 }
2046
2047 /**
2048  * afiucv_hs_callback_win() - react on received WIN
2049  **/
2050 static int afiucv_hs_callback_win(struct sock *sk, struct sk_buff *skb)
2051 {
2052         struct iucv_sock *iucv = iucv_sk(sk);
2053         struct af_iucv_trans_hdr *trans_hdr =
2054                                         (struct af_iucv_trans_hdr *)skb->data;
2055
2056         if (!iucv)
2057                 return NET_RX_SUCCESS;
2058
2059         if (sk->sk_state != IUCV_CONNECTED)
2060                 return NET_RX_SUCCESS;
2061
2062         atomic_sub(trans_hdr->window, &iucv->msg_sent);
2063         iucv_sock_wake_msglim(sk);
2064         return NET_RX_SUCCESS;
2065 }
2066
2067 /**
2068  * afiucv_hs_callback_rx() - react on received data
2069  **/
2070 static int afiucv_hs_callback_rx(struct sock *sk, struct sk_buff *skb)
2071 {
2072         struct iucv_sock *iucv = iucv_sk(sk);
2073
2074         if (!iucv) {
2075                 kfree_skb(skb);
2076                 return NET_RX_SUCCESS;
2077         }
2078
2079         if (sk->sk_state != IUCV_CONNECTED) {
2080                 kfree_skb(skb);
2081                 return NET_RX_SUCCESS;
2082         }
2083
2084         if (sk->sk_shutdown & RCV_SHUTDOWN) {
2085                 kfree_skb(skb);
2086                 return NET_RX_SUCCESS;
2087         }
2088
2089                 /* write stuff from iucv_msg to skb cb */
2090         if (skb->len < sizeof(struct af_iucv_trans_hdr)) {
2091                 kfree_skb(skb);
2092                 return NET_RX_SUCCESS;
2093         }
2094         skb_pull(skb, sizeof(struct af_iucv_trans_hdr));
2095         skb_reset_transport_header(skb);
2096         skb_reset_network_header(skb);
2097         IUCV_SKB_CB(skb)->offset = 0;
2098         spin_lock(&iucv->message_q.lock);
2099         if (skb_queue_empty(&iucv->backlog_skb_q)) {
2100                 if (sock_queue_rcv_skb(sk, skb)) {
2101                         /* handle rcv queue full */
2102                         skb_queue_tail(&iucv->backlog_skb_q, skb);
2103                 }
2104         } else
2105                 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
2106         spin_unlock(&iucv->message_q.lock);
2107         return NET_RX_SUCCESS;
2108 }
2109
2110 /**
2111  * afiucv_hs_rcv() - base function for arriving data through HiperSockets
2112  *                   transport
2113  *                   called from netif RX softirq
2114  **/
2115 static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
2116         struct packet_type *pt, struct net_device *orig_dev)
2117 {
2118         struct sock *sk;
2119         struct iucv_sock *iucv;
2120         struct af_iucv_trans_hdr *trans_hdr;
2121         char nullstring[8];
2122         int err = 0;
2123
2124         skb_pull(skb, ETH_HLEN);
2125         trans_hdr = (struct af_iucv_trans_hdr *)skb->data;
2126         EBCASC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
2127         EBCASC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
2128         EBCASC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
2129         EBCASC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
2130         memset(nullstring, 0, sizeof(nullstring));
2131         iucv = NULL;
2132         sk = NULL;
2133         read_lock(&iucv_sk_list.lock);
2134         sk_for_each(sk, &iucv_sk_list.head) {
2135                 if (trans_hdr->flags == AF_IUCV_FLAG_SYN) {
2136                         if ((!memcmp(&iucv_sk(sk)->src_name,
2137                                      trans_hdr->destAppName, 8)) &&
2138                             (!memcmp(&iucv_sk(sk)->src_user_id,
2139                                      trans_hdr->destUserID, 8)) &&
2140                             (!memcmp(&iucv_sk(sk)->dst_name, nullstring, 8)) &&
2141                             (!memcmp(&iucv_sk(sk)->dst_user_id,
2142                                      nullstring, 8))) {
2143                                 iucv = iucv_sk(sk);
2144                                 break;
2145                         }
2146                 } else {
2147                         if ((!memcmp(&iucv_sk(sk)->src_name,
2148                                      trans_hdr->destAppName, 8)) &&
2149                             (!memcmp(&iucv_sk(sk)->src_user_id,
2150                                      trans_hdr->destUserID, 8)) &&
2151                             (!memcmp(&iucv_sk(sk)->dst_name,
2152                                      trans_hdr->srcAppName, 8)) &&
2153                             (!memcmp(&iucv_sk(sk)->dst_user_id,
2154                                      trans_hdr->srcUserID, 8))) {
2155                                 iucv = iucv_sk(sk);
2156                                 break;
2157                         }
2158                 }
2159         }
2160         read_unlock(&iucv_sk_list.lock);
2161         if (!iucv)
2162                 sk = NULL;
2163
2164         /* no sock
2165         how should we send with no sock
2166         1) send without sock no send rc checking?
2167         2) introduce default sock to handle this cases
2168
2169          SYN -> send SYN|ACK in good case, send SYN|FIN in bad case
2170          data -> send FIN
2171          SYN|ACK, SYN|FIN, FIN -> no action? */
2172
2173         switch (trans_hdr->flags) {
2174         case AF_IUCV_FLAG_SYN:
2175                 /* connect request */
2176                 err = afiucv_hs_callback_syn(sk, skb);
2177                 break;
2178         case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK):
2179                 /* connect request confirmed */
2180                 err = afiucv_hs_callback_synack(sk, skb);
2181                 break;
2182         case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN):
2183                 /* connect request refused */
2184                 err = afiucv_hs_callback_synfin(sk, skb);
2185                 break;
2186         case (AF_IUCV_FLAG_FIN):
2187                 /* close request */
2188                 err = afiucv_hs_callback_fin(sk, skb);
2189                 break;
2190         case (AF_IUCV_FLAG_WIN):
2191                 err = afiucv_hs_callback_win(sk, skb);
2192                 if (skb->len == sizeof(struct af_iucv_trans_hdr)) {
2193                         kfree_skb(skb);
2194                         break;
2195                 }
2196                 /* fall through and receive non-zero length data */
2197         case (AF_IUCV_FLAG_SHT):
2198                 /* shutdown request */
2199                 /* fall through and receive zero length data */
2200         case 0:
2201                 /* plain data frame */
2202                 IUCV_SKB_CB(skb)->class = trans_hdr->iucv_hdr.class;
2203                 err = afiucv_hs_callback_rx(sk, skb);
2204                 break;
2205         default:
2206                 ;
2207         }
2208
2209         return err;
2210 }
2211
2212 /**
2213  * afiucv_hs_callback_txnotify() - handle send notifcations from HiperSockets
2214  *                                 transport
2215  **/
2216 static void afiucv_hs_callback_txnotify(struct sk_buff *skb,
2217                                         enum iucv_tx_notify n)
2218 {
2219         struct sock *isk = skb->sk;
2220         struct sock *sk = NULL;
2221         struct iucv_sock *iucv = NULL;
2222         struct sk_buff_head *list;
2223         struct sk_buff *list_skb;
2224         struct sk_buff *nskb;
2225         unsigned long flags;
2226
2227         read_lock_irqsave(&iucv_sk_list.lock, flags);
2228         sk_for_each(sk, &iucv_sk_list.head)
2229                 if (sk == isk) {
2230                         iucv = iucv_sk(sk);
2231                         break;
2232                 }
2233         read_unlock_irqrestore(&iucv_sk_list.lock, flags);
2234
2235         if (!iucv || sock_flag(sk, SOCK_ZAPPED))
2236                 return;
2237
2238         list = &iucv->send_skb_q;
2239         spin_lock_irqsave(&list->lock, flags);
2240         if (skb_queue_empty(list))
2241                 goto out_unlock;
2242         list_skb = list->next;
2243         nskb = list_skb->next;
2244         while (list_skb != (struct sk_buff *)list) {
2245                 if (skb_shinfo(list_skb) == skb_shinfo(skb)) {
2246                         switch (n) {
2247                         case TX_NOTIFY_OK:
2248                                 __skb_unlink(list_skb, list);
2249                                 kfree_skb(list_skb);
2250                                 iucv_sock_wake_msglim(sk);
2251                                 break;
2252                         case TX_NOTIFY_PENDING:
2253                                 atomic_inc(&iucv->pendings);
2254                                 break;
2255                         case TX_NOTIFY_DELAYED_OK:
2256                                 __skb_unlink(list_skb, list);
2257                                 atomic_dec(&iucv->pendings);
2258                                 if (atomic_read(&iucv->pendings) <= 0)
2259                                         iucv_sock_wake_msglim(sk);
2260                                 kfree_skb(list_skb);
2261                                 break;
2262                         case TX_NOTIFY_UNREACHABLE:
2263                         case TX_NOTIFY_DELAYED_UNREACHABLE:
2264                         case TX_NOTIFY_TPQFULL: /* not yet used */
2265                         case TX_NOTIFY_GENERALERROR:
2266                         case TX_NOTIFY_DELAYED_GENERALERROR:
2267                                 __skb_unlink(list_skb, list);
2268                                 kfree_skb(list_skb);
2269                                 if (sk->sk_state == IUCV_CONNECTED) {
2270                                         sk->sk_state = IUCV_DISCONN;
2271                                         sk->sk_state_change(sk);
2272                                 }
2273                                 break;
2274                         }
2275                         break;
2276                 }
2277                 list_skb = nskb;
2278                 nskb = nskb->next;
2279         }
2280 out_unlock:
2281         spin_unlock_irqrestore(&list->lock, flags);
2282
2283         if (sk->sk_state == IUCV_CLOSING) {
2284                 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
2285                         sk->sk_state = IUCV_CLOSED;
2286                         sk->sk_state_change(sk);
2287                 }
2288         }
2289
2290 }
2291
2292 /*
2293  * afiucv_netdev_event: handle netdev notifier chain events
2294  */
2295 static int afiucv_netdev_event(struct notifier_block *this,
2296                                unsigned long event, void *ptr)
2297 {
2298         struct net_device *event_dev = netdev_notifier_info_to_dev(ptr);
2299         struct sock *sk;
2300         struct iucv_sock *iucv;
2301
2302         switch (event) {
2303         case NETDEV_REBOOT:
2304         case NETDEV_GOING_DOWN:
2305                 sk_for_each(sk, &iucv_sk_list.head) {
2306                         iucv = iucv_sk(sk);
2307                         if ((iucv->hs_dev == event_dev) &&
2308                             (sk->sk_state == IUCV_CONNECTED)) {
2309                                 if (event == NETDEV_GOING_DOWN)
2310                                         iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
2311                                 sk->sk_state = IUCV_DISCONN;
2312                                 sk->sk_state_change(sk);
2313                         }
2314                 }
2315                 break;
2316         case NETDEV_DOWN:
2317         case NETDEV_UNREGISTER:
2318         default:
2319                 break;
2320         }
2321         return NOTIFY_DONE;
2322 }
2323
2324 static struct notifier_block afiucv_netdev_notifier = {
2325         .notifier_call = afiucv_netdev_event,
2326 };
2327
2328 static const struct proto_ops iucv_sock_ops = {
2329         .family         = PF_IUCV,
2330         .owner          = THIS_MODULE,
2331         .release        = iucv_sock_release,
2332         .bind           = iucv_sock_bind,
2333         .connect        = iucv_sock_connect,
2334         .listen         = iucv_sock_listen,
2335         .accept         = iucv_sock_accept,
2336         .getname        = iucv_sock_getname,
2337         .sendmsg        = iucv_sock_sendmsg,
2338         .recvmsg        = iucv_sock_recvmsg,
2339         .poll           = iucv_sock_poll,
2340         .ioctl          = sock_no_ioctl,
2341         .mmap           = sock_no_mmap,
2342         .socketpair     = sock_no_socketpair,
2343         .shutdown       = iucv_sock_shutdown,
2344         .setsockopt     = iucv_sock_setsockopt,
2345         .getsockopt     = iucv_sock_getsockopt,
2346 };
2347
2348 static const struct net_proto_family iucv_sock_family_ops = {
2349         .family = AF_IUCV,
2350         .owner  = THIS_MODULE,
2351         .create = iucv_sock_create,
2352 };
2353
2354 static struct packet_type iucv_packet_type = {
2355         .type = cpu_to_be16(ETH_P_AF_IUCV),
2356         .func = afiucv_hs_rcv,
2357 };
2358
2359 static int afiucv_iucv_init(void)
2360 {
2361         int err;
2362
2363         err = pr_iucv->iucv_register(&af_iucv_handler, 0);
2364         if (err)
2365                 goto out;
2366         /* establish dummy device */
2367         af_iucv_driver.bus = pr_iucv->bus;
2368         err = driver_register(&af_iucv_driver);
2369         if (err)
2370                 goto out_iucv;
2371         af_iucv_dev = kzalloc(sizeof(struct device), GFP_KERNEL);
2372         if (!af_iucv_dev) {
2373                 err = -ENOMEM;
2374                 goto out_driver;
2375         }
2376         dev_set_name(af_iucv_dev, "af_iucv");
2377         af_iucv_dev->bus = pr_iucv->bus;
2378         af_iucv_dev->parent = pr_iucv->root;
2379         af_iucv_dev->release = (void (*)(struct device *))kfree;
2380         af_iucv_dev->driver = &af_iucv_driver;
2381         err = device_register(af_iucv_dev);
2382         if (err)
2383                 goto out_iucv_dev;
2384         return 0;
2385
2386 out_iucv_dev:
2387         put_device(af_iucv_dev);
2388 out_driver:
2389         driver_unregister(&af_iucv_driver);
2390 out_iucv:
2391         pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2392 out:
2393         return err;
2394 }
2395
2396 static void afiucv_iucv_exit(void)
2397 {
2398         device_unregister(af_iucv_dev);
2399         driver_unregister(&af_iucv_driver);
2400         pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2401 }
2402
2403 static int __init afiucv_init(void)
2404 {
2405         int err;
2406
2407         if (MACHINE_IS_VM) {
2408                 cpcmd("QUERY USERID", iucv_userid, sizeof(iucv_userid), &err);
2409                 if (unlikely(err)) {
2410                         WARN_ON(err);
2411                         err = -EPROTONOSUPPORT;
2412                         goto out;
2413                 }
2414
2415                 pr_iucv = try_then_request_module(symbol_get(iucv_if), "iucv");
2416                 if (!pr_iucv) {
2417                         printk(KERN_WARNING "iucv_if lookup failed\n");
2418                         memset(&iucv_userid, 0, sizeof(iucv_userid));
2419                 }
2420         } else {
2421                 memset(&iucv_userid, 0, sizeof(iucv_userid));
2422                 pr_iucv = NULL;
2423         }
2424
2425         err = proto_register(&iucv_proto, 0);
2426         if (err)
2427                 goto out;
2428         err = sock_register(&iucv_sock_family_ops);
2429         if (err)
2430                 goto out_proto;
2431
2432         if (pr_iucv) {
2433                 err = afiucv_iucv_init();
2434                 if (err)
2435                         goto out_sock;
2436         }
2437
2438         err = register_netdevice_notifier(&afiucv_netdev_notifier);
2439         if (err)
2440                 goto out_notifier;
2441
2442         dev_add_pack(&iucv_packet_type);
2443         return 0;
2444
2445 out_notifier:
2446         if (pr_iucv)
2447                 afiucv_iucv_exit();
2448 out_sock:
2449         sock_unregister(PF_IUCV);
2450 out_proto:
2451         proto_unregister(&iucv_proto);
2452 out:
2453         if (pr_iucv)
2454                 symbol_put(iucv_if);
2455         return err;
2456 }
2457
2458 static void __exit afiucv_exit(void)
2459 {
2460         if (pr_iucv) {
2461                 afiucv_iucv_exit();
2462                 symbol_put(iucv_if);
2463         }
2464
2465         unregister_netdevice_notifier(&afiucv_netdev_notifier);
2466         dev_remove_pack(&iucv_packet_type);
2467         sock_unregister(PF_IUCV);
2468         proto_unregister(&iucv_proto);
2469 }
2470
2471 module_init(afiucv_init);
2472 module_exit(afiucv_exit);
2473
2474 MODULE_AUTHOR("Jennifer Hunt <jenhunt@us.ibm.com>");
2475 MODULE_DESCRIPTION("IUCV Sockets ver " VERSION);
2476 MODULE_VERSION(VERSION);
2477 MODULE_LICENSE("GPL");
2478 MODULE_ALIAS_NETPROTO(PF_IUCV);
2479