socket.c 58.6 KB
Newer Older
P
Per Liden 已提交
1
/*
2
 * net/tipc/socket.c: TIPC socket API
3
 *
4
 * Copyright (c) 2001-2007, 2012-2014, Ericsson AB
5
 * Copyright (c) 2004-2008, 2010-2013, Wind River Systems
P
Per Liden 已提交
6 7
 * All rights reserved.
 *
P
Per Liden 已提交
8
 * Redistribution and use in source and binary forms, with or without
P
Per Liden 已提交
9 10
 * modification, are permitted provided that the following conditions are met:
 *
P
Per Liden 已提交
11 12 13 14 15 16 17 18
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. Neither the names of the copyright holders nor the names of its
 *    contributors may be used to endorse or promote products derived from
 *    this software without specific prior written permission.
P
Per Liden 已提交
19
 *
P
Per Liden 已提交
20 21 22 23 24 25 26 27 28 29 30 31 32 33
 * Alternatively, this software may be distributed under the terms of the
 * GNU General Public License ("GPL") version 2 as published by the Free
 * Software Foundation.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
P
Per Liden 已提交
34 35 36 37
 * POSSIBILITY OF SUCH DAMAGE.
 */

#include "core.h"
38
#include "port.h"
39
#include "name_table.h"
E
Erik Hugne 已提交
40
#include "node.h"
41
#include "link.h"
42 43
#include <linux/export.h>

P
Per Liden 已提交
44 45 46
#define SS_LISTENING	-1	/* socket is listening */
#define SS_READY	-2	/* socket is connectionless */

47
#define CONN_TIMEOUT_DEFAULT	8000	/* default connect timeout = 8s */
48
#define CONN_PROBING_INTERVAL 3600000	/* [ms] => 1 h */
49
#define TIPC_FWD_MSG	        1
P
Per Liden 已提交
50

51
static int tipc_backlog_rcv(struct sock *sk, struct sk_buff *skb);
52
static void tipc_data_ready(struct sock *sk);
53
static void tipc_write_space(struct sock *sk);
54 55
static int tipc_release(struct socket *sock);
static int tipc_accept(struct socket *sock, struct socket *new_sock, int flags);
56
static int tipc_wait_for_sndmsg(struct socket *sock, long *timeo_p);
57
static void tipc_sk_timeout(unsigned long ref);
P
Per Liden 已提交
58

59 60 61
static const struct proto_ops packet_ops;
static const struct proto_ops stream_ops;
static const struct proto_ops msg_ops;
P
Per Liden 已提交
62 63

static struct proto tipc_proto;
64
static struct proto tipc_proto_kern;
P
Per Liden 已提交
65

66 67 68
DEFINE_SPINLOCK(tipc_port_list_lock);
LIST_HEAD(tipc_socks);

69
/*
70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113
 * Revised TIPC socket locking policy:
 *
 * Most socket operations take the standard socket lock when they start
 * and hold it until they finish (or until they need to sleep).  Acquiring
 * this lock grants the owner exclusive access to the fields of the socket
 * data structures, with the exception of the backlog queue.  A few socket
 * operations can be done without taking the socket lock because they only
 * read socket information that never changes during the life of the socket.
 *
 * Socket operations may acquire the lock for the associated TIPC port if they
 * need to perform an operation on the port.  If any routine needs to acquire
 * both the socket lock and the port lock it must take the socket lock first
 * to avoid the risk of deadlock.
 *
 * The dispatcher handling incoming messages cannot grab the socket lock in
 * the standard fashion, since invoked it runs at the BH level and cannot block.
 * Instead, it checks to see if the socket lock is currently owned by someone,
 * and either handles the message itself or adds it to the socket's backlog
 * queue; in the latter case the queued message is processed once the process
 * owning the socket lock releases it.
 *
 * NOTE: Releasing the socket lock while an operation is sleeping overcomes
 * the problem of a blocked socket operation preventing any other operations
 * from occurring.  However, applications must be careful if they have
 * multiple threads trying to send (or receive) on the same socket, as these
 * operations might interfere with each other.  For example, doing a connect
 * and a receive at the same time might allow the receive to consume the
 * ACK message meant for the connect.  While additional work could be done
 * to try and overcome this, it doesn't seem to be worthwhile at the present.
 *
 * NOTE: Releasing the socket lock while an operation is sleeping also ensures
 * that another operation that must be performed in a non-blocking manner is
 * not delayed for very long because the lock has already been taken.
 *
 * NOTE: This code assumes that certain fields of a port/socket pair are
 * constant over its lifetime; such fields can be examined without taking
 * the socket lock and/or port lock, and do not need to be re-read even
 * after resuming processing after waiting.  These fields include:
 *   - socket type
 *   - pointer to socket sk structure (aka tipc_sock structure)
 *   - pointer to port structure
 *   - port reference
 */

114 115
#include "socket.h"

116 117 118 119
/**
 * advance_rx_queue - discard first buffer in socket receive queue
 *
 * Caller must hold socket lock
P
Per Liden 已提交
120
 */
121
static void advance_rx_queue(struct sock *sk)
P
Per Liden 已提交
122
{
123
	kfree_skb(__skb_dequeue(&sk->sk_receive_queue));
P
Per Liden 已提交
124 125 126
}

/**
127 128 129
 * reject_rx_queue - reject all buffers in socket receive queue
 *
 * Caller must hold socket lock
P
Per Liden 已提交
130
 */
131
static void reject_rx_queue(struct sock *sk)
P
Per Liden 已提交
132
{
133
	struct sk_buff *buf;
134
	u32 dnode;
135

136 137
	while ((buf = __skb_dequeue(&sk->sk_receive_queue))) {
		if (tipc_msg_reverse(buf, &dnode, TIPC_ERR_NO_PORT))
138
			tipc_link_xmit(buf, dnode, 0);
139
	}
P
Per Liden 已提交
140 141 142
}

/**
143
 * tipc_sk_create - create a TIPC socket
144
 * @net: network namespace (must be default network)
P
Per Liden 已提交
145 146
 * @sock: pre-allocated socket structure
 * @protocol: protocol indicator (must be 0)
147
 * @kern: caused by kernel or by userspace?
148
 *
149 150
 * This routine creates additional data structures used by the TIPC socket,
 * initializes them, and links them together.
P
Per Liden 已提交
151 152 153
 *
 * Returns 0 on success, errno otherwise
 */
154 155
static int tipc_sk_create(struct net *net, struct socket *sock,
			  int protocol, int kern)
P
Per Liden 已提交
156
{
157 158
	const struct proto_ops *ops;
	socket_state state;
P
Per Liden 已提交
159
	struct sock *sk;
160 161
	struct tipc_sock *tsk;
	struct tipc_port *port;
162
	struct tipc_msg *msg;
163
	u32 ref;
164 165

	/* Validate arguments */
P
Per Liden 已提交
166 167 168 169 170
	if (unlikely(protocol != 0))
		return -EPROTONOSUPPORT;

	switch (sock->type) {
	case SOCK_STREAM:
171 172
		ops = &stream_ops;
		state = SS_UNCONNECTED;
P
Per Liden 已提交
173 174
		break;
	case SOCK_SEQPACKET:
175 176
		ops = &packet_ops;
		state = SS_UNCONNECTED;
P
Per Liden 已提交
177 178 179
		break;
	case SOCK_DGRAM:
	case SOCK_RDM:
180 181
		ops = &msg_ops;
		state = SS_READY;
P
Per Liden 已提交
182
		break;
183 184
	default:
		return -EPROTOTYPE;
P
Per Liden 已提交
185 186
	}

187
	/* Allocate socket's protocol area */
188 189 190 191 192
	if (!kern)
		sk = sk_alloc(net, AF_TIPC, GFP_KERNEL, &tipc_proto);
	else
		sk = sk_alloc(net, AF_TIPC, GFP_KERNEL, &tipc_proto_kern);

193
	if (sk == NULL)
P
Per Liden 已提交
194 195
		return -ENOMEM;

196 197
	tsk = tipc_sk(sk);
	port = &tsk->port;
198
	ref = tipc_ref_acquire(port, &port->lock);
199
	if (!ref) {
200
		pr_warn("Socket create failed; reference table exhausted\n");
201 202
		return -ENOMEM;
	}
203 204 205 206 207 208 209 210 211 212 213 214 215
	port->max_pkt = MAX_PKT_DEFAULT;
	port->ref = ref;
	INIT_LIST_HEAD(&port->publications);
	INIT_LIST_HEAD(&port->port_list);

	/* Guard against race during node address update */
	spin_lock_bh(&tipc_port_list_lock);
	msg = &port->phdr;
	tipc_msg_init(msg, TIPC_LOW_IMPORTANCE, TIPC_NAMED_MSG,
		      NAMED_H_SIZE, 0);
	msg_set_origport(msg, ref);
	list_add_tail(&port->port_list, &tipc_socks);
	spin_unlock_bh(&tipc_port_list_lock);
P
Per Liden 已提交
216

217 218 219 220
	/* Finish initializing socket data structures */
	sock->ops = ops;
	sock->state = state;
	sock_init_data(sock, sk);
221
	k_init_timer(&port->timer, (Handler)tipc_sk_timeout, ref);
222
	sk->sk_backlog_rcv = tipc_backlog_rcv;
223
	sk->sk_rcvbuf = sysctl_tipc_rmem[1];
224 225
	sk->sk_data_ready = tipc_data_ready;
	sk->sk_write_space = tipc_write_space;
226
	tsk->conn_timeout = CONN_TIMEOUT_DEFAULT;
227
	tsk->sent_unacked = 0;
228
	atomic_set(&tsk->dupl_rcvcnt, 0);
229
	tipc_port_unlock(port);
230

231
	if (sock->state == SS_READY) {
232
		tipc_port_set_unreturnable(port, true);
233
		if (sock->type == SOCK_DGRAM)
234
			tipc_port_set_unreliable(port, true);
235
	}
P
Per Liden 已提交
236 237 238
	return 0;
}

239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272
/**
 * tipc_sock_create_local - create TIPC socket from inside TIPC module
 * @type: socket type - SOCK_RDM or SOCK_SEQPACKET
 *
 * We cannot use sock_creat_kern here because it bumps module user count.
 * Since socket owner and creator is the same module we must make sure
 * that module count remains zero for module local sockets, otherwise
 * we cannot do rmmod.
 *
 * Returns 0 on success, errno otherwise
 */
int tipc_sock_create_local(int type, struct socket **res)
{
	int rc;

	rc = sock_create_lite(AF_TIPC, type, 0, res);
	if (rc < 0) {
		pr_err("Failed to create kernel socket\n");
		return rc;
	}
	tipc_sk_create(&init_net, *res, 0, 1);

	return 0;
}

/**
 * tipc_sock_release_local - release socket created by tipc_sock_create_local
 * @sock: the socket to be released.
 *
 * Module reference count is not incremented when such sockets are created,
 * so we must keep it from being decremented when they are released.
 */
void tipc_sock_release_local(struct socket *sock)
{
273
	tipc_release(sock);
274 275 276 277 278 279 280 281 282 283 284 285 286 287 288
	sock->ops = NULL;
	sock_release(sock);
}

/**
 * tipc_sock_accept_local - accept a connection on a socket created
 * with tipc_sock_create_local. Use this function to avoid that
 * module reference count is inadvertently incremented.
 *
 * @sock:    the accepting socket
 * @newsock: reference to the new socket to be created
 * @flags:   socket flags
 */

int tipc_sock_accept_local(struct socket *sock, struct socket **newsock,
289
			   int flags)
290 291 292 293 294 295 296 297 298
{
	struct sock *sk = sock->sk;
	int ret;

	ret = sock_create_lite(sk->sk_family, sk->sk_type,
			       sk->sk_protocol, newsock);
	if (ret < 0)
		return ret;

299
	ret = tipc_accept(sock, *newsock, flags);
300 301 302 303 304 305 306 307
	if (ret < 0) {
		sock_release(*newsock);
		return ret;
	}
	(*newsock)->ops = sock->ops;
	return ret;
}

P
Per Liden 已提交
308
/**
309
 * tipc_release - destroy a TIPC socket
P
Per Liden 已提交
310 311 312 313 314 315 316
 * @sock: socket to destroy
 *
 * This routine cleans up any messages that are still queued on the socket.
 * For DGRAM and RDM socket types, all queued messages are rejected.
 * For SEQPACKET and STREAM socket types, the first message is rejected
 * and any others are discarded.  (If the first message on a STREAM socket
 * is partially-read, it is discarded and the next one is rejected instead.)
317
 *
P
Per Liden 已提交
318 319 320 321 322 323
 * NOTE: Rejected messages are not necessarily returned to the sender!  They
 * are returned or discarded according to the "destination droppable" setting
 * specified for the message by the sender.
 *
 * Returns 0 on success, errno otherwise
 */
324
static int tipc_release(struct socket *sock)
P
Per Liden 已提交
325 326
{
	struct sock *sk = sock->sk;
327 328
	struct tipc_sock *tsk;
	struct tipc_port *port;
P
Per Liden 已提交
329
	struct sk_buff *buf;
330
	u32 dnode;
P
Per Liden 已提交
331

332 333 334 335 336
	/*
	 * Exit if socket isn't fully initialized (occurs when a failed accept()
	 * releases a pre-allocated child socket that was never used)
	 */
	if (sk == NULL)
P
Per Liden 已提交
337
		return 0;
338

339 340
	tsk = tipc_sk(sk);
	port = &tsk->port;
341 342 343 344 345 346
	lock_sock(sk);

	/*
	 * Reject all unreceived messages, except on an active connection
	 * (which disconnects locally & sends a 'FIN+' to peer)
	 */
347
	dnode = tipc_port_peernode(port);
P
Per Liden 已提交
348
	while (sock->state != SS_DISCONNECTING) {
349 350
		buf = __skb_dequeue(&sk->sk_receive_queue);
		if (buf == NULL)
P
Per Liden 已提交
351
			break;
Y
Ying Xue 已提交
352
		if (TIPC_SKB_CB(buf)->handle != NULL)
353
			kfree_skb(buf);
354 355 356 357
		else {
			if ((sock->state == SS_CONNECTING) ||
			    (sock->state == SS_CONNECTED)) {
				sock->state = SS_DISCONNECTING;
358
				port->connected = 0;
359
				tipc_node_remove_conn(dnode, port->ref);
360
			}
361
			if (tipc_msg_reverse(buf, &dnode, TIPC_ERR_NO_PORT))
362
				tipc_link_xmit(buf, dnode, 0);
363
		}
P
Per Liden 已提交
364 365
	}

366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383
	tipc_withdraw(port, 0, NULL);
	spin_lock_bh(port->lock);
	tipc_ref_discard(port->ref);
	spin_unlock_bh(port->lock);
	k_cancel_timer(&port->timer);
	if (port->connected) {
		buf = tipc_msg_create(TIPC_CRITICAL_IMPORTANCE, TIPC_CONN_MSG,
				      SHORT_H_SIZE, 0, dnode, tipc_own_addr,
				      tipc_port_peerport(port),
				      port->ref, TIPC_ERR_NO_PORT);
		if (buf)
			tipc_link_xmit(buf, dnode, port->ref);
		tipc_node_remove_conn(dnode, port->ref);
	}
	spin_lock_bh(&tipc_port_list_lock);
	list_del(&port->port_list);
	spin_unlock_bh(&tipc_port_list_lock);
	k_term_timer(&port->timer);
P
Per Liden 已提交
384

385
	/* Discard any remaining (connection-based) messages in receive queue */
386
	__skb_queue_purge(&sk->sk_receive_queue);
P
Per Liden 已提交
387

388 389 390
	/* Reject any messages that accumulated in backlog queue */
	sock->state = SS_DISCONNECTING;
	release_sock(sk);
P
Per Liden 已提交
391
	sock_put(sk);
392
	sock->sk = NULL;
P
Per Liden 已提交
393

394
	return 0;
P
Per Liden 已提交
395 396 397
}

/**
398
 * tipc_bind - associate or disassocate TIPC name(s) with a socket
P
Per Liden 已提交
399 400 401
 * @sock: socket structure
 * @uaddr: socket address describing name(s) and desired operation
 * @uaddr_len: size of socket address data structure
402
 *
P
Per Liden 已提交
403 404 405
 * Name and name sequence binding is indicated using a positive scope value;
 * a negative scope value unbinds the specified name.  Specifying no name
 * (i.e. a socket address length of 0) unbinds all names from the socket.
406
 *
P
Per Liden 已提交
407
 * Returns 0 on success, errno otherwise
408 409 410
 *
 * NOTE: This routine doesn't need to take the socket lock since it doesn't
 *       access any non-constant socket information.
P
Per Liden 已提交
411
 */
412 413
static int tipc_bind(struct socket *sock, struct sockaddr *uaddr,
		     int uaddr_len)
P
Per Liden 已提交
414
{
415
	struct sock *sk = sock->sk;
P
Per Liden 已提交
416
	struct sockaddr_tipc *addr = (struct sockaddr_tipc *)uaddr;
417
	struct tipc_sock *tsk = tipc_sk(sk);
418
	int res = -EINVAL;
P
Per Liden 已提交
419

420 421
	lock_sock(sk);
	if (unlikely(!uaddr_len)) {
422
		res = tipc_withdraw(&tsk->port, 0, NULL);
423 424
		goto exit;
	}
425

426 427 428 429 430 431 432 433
	if (uaddr_len < sizeof(struct sockaddr_tipc)) {
		res = -EINVAL;
		goto exit;
	}
	if (addr->family != AF_TIPC) {
		res = -EAFNOSUPPORT;
		goto exit;
	}
P
Per Liden 已提交
434 435 436

	if (addr->addrtype == TIPC_ADDR_NAME)
		addr->addr.nameseq.upper = addr->addr.nameseq.lower;
437 438 439 440
	else if (addr->addrtype != TIPC_ADDR_NAMESEQ) {
		res = -EAFNOSUPPORT;
		goto exit;
	}
441

442
	if ((addr->addr.nameseq.type < TIPC_RESERVED_TYPES) &&
443
	    (addr->addr.nameseq.type != TIPC_TOP_SRV) &&
444 445 446 447
	    (addr->addr.nameseq.type != TIPC_CFG_SRV)) {
		res = -EACCES;
		goto exit;
	}
448

449
	res = (addr->scope > 0) ?
450 451
		tipc_publish(&tsk->port, addr->scope, &addr->addr.nameseq) :
		tipc_withdraw(&tsk->port, -addr->scope, &addr->addr.nameseq);
452 453 454
exit:
	release_sock(sk);
	return res;
P
Per Liden 已提交
455 456
}

457
/**
458
 * tipc_getname - get port ID of socket or peer socket
P
Per Liden 已提交
459 460 461
 * @sock: socket structure
 * @uaddr: area for returned socket address
 * @uaddr_len: area for returned length of socket address
462
 * @peer: 0 = own ID, 1 = current peer ID, 2 = current/former peer ID
463
 *
P
Per Liden 已提交
464
 * Returns 0 on success, errno otherwise
465
 *
466 467
 * NOTE: This routine doesn't need to take the socket lock since it only
 *       accesses socket information that is unchanging (or which changes in
468
 *       a completely predictable manner).
P
Per Liden 已提交
469
 */
470 471
static int tipc_getname(struct socket *sock, struct sockaddr *uaddr,
			int *uaddr_len, int peer)
P
Per Liden 已提交
472 473
{
	struct sockaddr_tipc *addr = (struct sockaddr_tipc *)uaddr;
474
	struct tipc_sock *tsk = tipc_sk(sock->sk);
P
Per Liden 已提交
475

476
	memset(addr, 0, sizeof(*addr));
477
	if (peer) {
478 479 480
		if ((sock->state != SS_CONNECTED) &&
			((peer != 2) || (sock->state != SS_DISCONNECTING)))
			return -ENOTCONN;
481 482
		addr->addr.id.ref = tipc_port_peerport(&tsk->port);
		addr->addr.id.node = tipc_port_peernode(&tsk->port);
483
	} else {
484
		addr->addr.id.ref = tsk->port.ref;
A
Allan Stephens 已提交
485
		addr->addr.id.node = tipc_own_addr;
486
	}
P
Per Liden 已提交
487 488 489 490 491 492 493

	*uaddr_len = sizeof(*addr);
	addr->addrtype = TIPC_ADDR_ID;
	addr->family = AF_TIPC;
	addr->scope = 0;
	addr->addr.name.domain = 0;

494
	return 0;
P
Per Liden 已提交
495 496 497
}

/**
498
 * tipc_poll - read and possibly block on pollmask
P
Per Liden 已提交
499 500 501 502
 * @file: file structure associated with the socket
 * @sock: socket for which to calculate the poll bits
 * @wait: ???
 *
503 504 505 506 507 508 509 510 511
 * Returns pollmask value
 *
 * COMMENTARY:
 * It appears that the usual socket locking mechanisms are not useful here
 * since the pollmask info is potentially out-of-date the moment this routine
 * exits.  TCP and other protocols seem to rely on higher level poll routines
 * to handle any preventable race conditions, so TIPC will do the same ...
 *
 * TIPC sets the returned events as follows:
512 513 514 515
 *
 * socket state		flags set
 * ------------		---------
 * unconnected		no read flags
516
 *			POLLOUT if port is not congested
517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535
 *
 * connecting		POLLIN/POLLRDNORM if ACK/NACK in rx queue
 *			no write flags
 *
 * connected		POLLIN/POLLRDNORM if data in rx queue
 *			POLLOUT if port is not congested
 *
 * disconnecting	POLLIN/POLLRDNORM/POLLHUP
 *			no write flags
 *
 * listening		POLLIN if SYN in rx queue
 *			no write flags
 *
 * ready		POLLIN/POLLRDNORM if data in rx queue
 * [connectionless]	POLLOUT (since port cannot be congested)
 *
 * IMPORTANT: The fact that a read or write operation is indicated does NOT
 * imply that the operation will succeed, merely that it should be performed
 * and will not block.
P
Per Liden 已提交
536
 */
537 538
static unsigned int tipc_poll(struct file *file, struct socket *sock,
			      poll_table *wait)
P
Per Liden 已提交
539
{
540
	struct sock *sk = sock->sk;
541
	struct tipc_sock *tsk = tipc_sk(sk);
542
	u32 mask = 0;
543

544
	sock_poll_wait(file, sk_sleep(sk), wait);
545

546
	switch ((int)sock->state) {
547
	case SS_UNCONNECTED:
548
		if (!tsk->link_cong)
549 550
			mask |= POLLOUT;
		break;
551 552
	case SS_READY:
	case SS_CONNECTED:
553
		if (!tsk->link_cong && !tipc_sk_conn_cong(tsk))
554 555 556 557 558 559 560 561 562 563 564
			mask |= POLLOUT;
		/* fall thru' */
	case SS_CONNECTING:
	case SS_LISTENING:
		if (!skb_queue_empty(&sk->sk_receive_queue))
			mask |= (POLLIN | POLLRDNORM);
		break;
	case SS_DISCONNECTING:
		mask = (POLLIN | POLLRDNORM | POLLHUP);
		break;
	}
565 566

	return mask;
P
Per Liden 已提交
567 568
}

569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599
/**
 * tipc_sendmcast - send multicast message
 * @sock: socket structure
 * @seq: destination address
 * @iov: message data to send
 * @dsz: total length of message data
 * @timeo: timeout to wait for wakeup
 *
 * Called from function tipc_sendmsg(), which has done all sanity checks
 * Returns the number of bytes sent on success, or errno
 */
static int tipc_sendmcast(struct  socket *sock, struct tipc_name_seq *seq,
			  struct iovec *iov, size_t dsz, long timeo)
{
	struct sock *sk = sock->sk;
	struct tipc_msg *mhdr = &tipc_sk(sk)->port.phdr;
	struct sk_buff *buf;
	uint mtu;
	int rc;

	msg_set_type(mhdr, TIPC_MCAST_MSG);
	msg_set_lookup_scope(mhdr, TIPC_CLUSTER_SCOPE);
	msg_set_destport(mhdr, 0);
	msg_set_destnode(mhdr, 0);
	msg_set_nametype(mhdr, seq->type);
	msg_set_namelower(mhdr, seq->lower);
	msg_set_nameupper(mhdr, seq->upper);
	msg_set_hdr_sz(mhdr, MCAST_H_SIZE);

new_mtu:
	mtu = tipc_bclink_get_mtu();
600
	rc = tipc_msg_build(mhdr, iov, 0, dsz, mtu, &buf);
601 602 603 604 605 606 607 608 609 610 611 612 613
	if (unlikely(rc < 0))
		return rc;

	do {
		rc = tipc_bclink_xmit(buf);
		if (likely(rc >= 0)) {
			rc = dsz;
			break;
		}
		if (rc == -EMSGSIZE)
			goto new_mtu;
		if (rc != -ELINKCONG)
			break;
614
		tipc_sk(sk)->link_cong = 1;
615 616 617 618 619 620 621
		rc = tipc_wait_for_sndmsg(sock, &timeo);
		if (rc)
			kfree_skb_list(buf);
	} while (!rc);
	return rc;
}

622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661
/* tipc_sk_mcast_rcv - Deliver multicast message to all destination sockets
 */
void tipc_sk_mcast_rcv(struct sk_buff *buf)
{
	struct tipc_msg *msg = buf_msg(buf);
	struct tipc_port_list dports = {0, NULL, };
	struct tipc_port_list *item;
	struct sk_buff *b;
	uint i, last, dst = 0;
	u32 scope = TIPC_CLUSTER_SCOPE;

	if (in_own_node(msg_orignode(msg)))
		scope = TIPC_NODE_SCOPE;

	/* Create destination port list: */
	tipc_nametbl_mc_translate(msg_nametype(msg),
				  msg_namelower(msg),
				  msg_nameupper(msg),
				  scope,
				  &dports);
	last = dports.count;
	if (!last) {
		kfree_skb(buf);
		return;
	}

	for (item = &dports; item; item = item->next) {
		for (i = 0; i < PLSIZE && ++dst <= last; i++) {
			b = (dst != last) ? skb_clone(buf, GFP_ATOMIC) : buf;
			if (!b) {
				pr_warn("Failed do clone mcast rcv buffer\n");
				continue;
			}
			msg_set_destport(msg, item->ports[i]);
			tipc_sk_rcv(b);
		}
	}
	tipc_port_list_free(&dports);
}

662 663 664 665 666 667 668 669
/**
 * tipc_sk_proto_rcv - receive a connection mng protocol message
 * @tsk: receiving socket
 * @dnode: node to send response message to, if any
 * @buf: buffer containing protocol message
 * Returns 0 (TIPC_OK) if message was consumed, 1 (TIPC_FWD_MSG) if
 * (CONN_PROBE_REPLY) message should be forwarded.
 */
670 671
static int tipc_sk_proto_rcv(struct tipc_sock *tsk, u32 *dnode,
			     struct sk_buff *buf)
672 673 674
{
	struct tipc_msg *msg = buf_msg(buf);
	struct tipc_port *port = &tsk->port;
675
	int conn_cong;
676 677 678 679 680 681 682 683

	/* Ignore if connection cannot be validated: */
	if (!port->connected || !tipc_port_peer_msg(port, msg))
		goto exit;

	port->probing_state = TIPC_CONN_OK;

	if (msg_type(msg) == CONN_ACK) {
684 685 686
		conn_cong = tipc_sk_conn_cong(tsk);
		tsk->sent_unacked -= msg_msgcnt(msg);
		if (conn_cong)
687
			tsk->sk.sk_write_space(&tsk->sk);
688 689 690 691 692 693 694 695 696 697 698 699
	} else if (msg_type(msg) == CONN_PROBE) {
		if (!tipc_msg_reverse(buf, dnode, TIPC_OK))
			return TIPC_OK;
		msg_set_type(msg, CONN_PROBE_REPLY);
		return TIPC_FWD_MSG;
	}
	/* Do nothing if msg_type() == CONN_PROBE_REPLY */
exit:
	kfree_skb(buf);
	return TIPC_OK;
}

700
/**
P
Per Liden 已提交
701 702 703
 * dest_name_check - verify user is permitted to send to specified port name
 * @dest: destination address
 * @m: descriptor for message to be sent
704
 *
P
Per Liden 已提交
705 706
 * Prevents restricted configuration commands from being issued by
 * unauthorized users.
707
 *
P
Per Liden 已提交
708 709
 * Returns 0 if permission is granted, otherwise errno
 */
S
Sam Ravnborg 已提交
710
static int dest_name_check(struct sockaddr_tipc *dest, struct msghdr *m)
P
Per Liden 已提交
711 712 713
{
	struct tipc_cfg_msg_hdr hdr;

714 715
	if (unlikely(dest->addrtype == TIPC_ADDR_ID))
		return 0;
716 717 718 719 720 721
	if (likely(dest->addr.name.name.type >= TIPC_RESERVED_TYPES))
		return 0;
	if (likely(dest->addr.name.name.type == TIPC_TOP_SRV))
		return 0;
	if (likely(dest->addr.name.name.type != TIPC_CFG_SRV))
		return -EACCES;
P
Per Liden 已提交
722

723 724
	if (!m->msg_iovlen || (m->msg_iov[0].iov_len < sizeof(hdr)))
		return -EMSGSIZE;
725
	if (copy_from_user(&hdr, m->msg_iov[0].iov_base, sizeof(hdr)))
P
Per Liden 已提交
726
		return -EFAULT;
727
	if ((ntohs(hdr.tcm_type) & 0xC000) && (!capable(CAP_NET_ADMIN)))
P
Per Liden 已提交
728
		return -EACCES;
729

P
Per Liden 已提交
730 731 732
	return 0;
}

733 734 735
static int tipc_wait_for_sndmsg(struct socket *sock, long *timeo_p)
{
	struct sock *sk = sock->sk;
736
	struct tipc_sock *tsk = tipc_sk(sk);
737 738 739 740 741 742 743 744 745 746 747 748 749 750 751
	DEFINE_WAIT(wait);
	int done;

	do {
		int err = sock_error(sk);
		if (err)
			return err;
		if (sock->state == SS_DISCONNECTING)
			return -EPIPE;
		if (!*timeo_p)
			return -EAGAIN;
		if (signal_pending(current))
			return sock_intr_errno(*timeo_p);

		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
752
		done = sk_wait_event(sk, timeo_p, !tsk->link_cong);
753 754 755 756 757
		finish_wait(sk_sleep(sk), &wait);
	} while (!done);
	return 0;
}

P
Per Liden 已提交
758
/**
759
 * tipc_sendmsg - send message in connectionless manner
760
 * @iocb: if NULL, indicates that socket lock is already held
P
Per Liden 已提交
761 762
 * @sock: socket structure
 * @m: message to send
763
 * @dsz: amount of user data to be sent
764
 *
P
Per Liden 已提交
765
 * Message must have an destination specified explicitly.
766
 * Used for SOCK_RDM and SOCK_DGRAM messages,
P
Per Liden 已提交
767 768
 * and for 'SYN' messages on SOCK_SEQPACKET and SOCK_STREAM connections.
 * (Note: 'SYN+' is prohibited on SOCK_STREAM.)
769
 *
P
Per Liden 已提交
770 771
 * Returns the number of bytes sent on success, or errno otherwise
 */
772
static int tipc_sendmsg(struct kiocb *iocb, struct socket *sock,
773
			struct msghdr *m, size_t dsz)
P
Per Liden 已提交
774
{
775
	DECLARE_SOCKADDR(struct sockaddr_tipc *, dest, m->msg_name);
776
	struct sock *sk = sock->sk;
777
	struct tipc_sock *tsk = tipc_sk(sk);
778
	struct tipc_port *port = &tsk->port;
779 780 781 782 783 784
	struct tipc_msg *mhdr = &port->phdr;
	struct iovec *iov = m->msg_iov;
	u32 dnode, dport;
	struct sk_buff *buf;
	struct tipc_name_seq *seq = &dest->addr.nameseq;
	u32 mtu;
785
	long timeo;
786
	int rc = -EINVAL;
P
Per Liden 已提交
787 788 789

	if (unlikely(!dest))
		return -EDESTADDRREQ;
790

791 792
	if (unlikely((m->msg_namelen < sizeof(*dest)) ||
		     (dest->family != AF_TIPC)))
P
Per Liden 已提交
793
		return -EINVAL;
794 795

	if (dsz > TIPC_MAX_USER_MSG_SIZE)
796
		return -EMSGSIZE;
P
Per Liden 已提交
797

798 799 800
	if (iocb)
		lock_sock(sk);

801
	if (unlikely(sock->state != SS_READY)) {
802
		if (sock->state == SS_LISTENING) {
803
			rc = -EPIPE;
804 805 806
			goto exit;
		}
		if (sock->state != SS_UNCONNECTED) {
807
			rc = -EISCONN;
808 809
			goto exit;
		}
810
		if (tsk->port.published) {
811
			rc = -EOPNOTSUPP;
812 813
			goto exit;
		}
814
		if (dest->addrtype == TIPC_ADDR_NAME) {
815 816
			tsk->port.conn_type = dest->addr.name.name.type;
			tsk->port.conn_instance = dest->addr.name.name.instance;
817
		}
P
Per Liden 已提交
818
	}
819 820 821
	rc = dest_name_check(dest, m);
	if (rc)
		goto exit;
P
Per Liden 已提交
822

823
	timeo = sock_sndtimeo(sk, m->msg_flags & MSG_DONTWAIT);
824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844

	if (dest->addrtype == TIPC_ADDR_MCAST) {
		rc = tipc_sendmcast(sock, seq, iov, dsz, timeo);
		goto exit;
	} else if (dest->addrtype == TIPC_ADDR_NAME) {
		u32 type = dest->addr.name.name.type;
		u32 inst = dest->addr.name.name.instance;
		u32 domain = dest->addr.name.domain;

		dnode = domain;
		msg_set_type(mhdr, TIPC_NAMED_MSG);
		msg_set_hdr_sz(mhdr, NAMED_H_SIZE);
		msg_set_nametype(mhdr, type);
		msg_set_nameinst(mhdr, inst);
		msg_set_lookup_scope(mhdr, tipc_addr_scope(domain));
		dport = tipc_nametbl_translate(type, inst, &dnode);
		msg_set_destnode(mhdr, dnode);
		msg_set_destport(mhdr, dport);
		if (unlikely(!dport && !dnode)) {
			rc = -EHOSTUNREACH;
			goto exit;
845
		}
846 847 848 849 850 851 852 853 854 855 856
	} else if (dest->addrtype == TIPC_ADDR_ID) {
		dnode = dest->addr.id.node;
		msg_set_type(mhdr, TIPC_DIRECT_MSG);
		msg_set_lookup_scope(mhdr, 0);
		msg_set_destnode(mhdr, dnode);
		msg_set_destport(mhdr, dest->addr.id.ref);
		msg_set_hdr_sz(mhdr, BASIC_H_SIZE);
	}

new_mtu:
	mtu = tipc_node_get_mtu(dnode, tsk->port.ref);
857
	rc = tipc_msg_build(mhdr, iov, 0, dsz, mtu, &buf);
858 859 860 861
	if (rc < 0)
		goto exit;

	do {
862
		TIPC_SKB_CB(buf)->wakeup_pending = tsk->link_cong;
863
		rc = tipc_link_xmit(buf, dnode, tsk->port.ref);
864 865
		if (likely(rc >= 0)) {
			if (sock->state != SS_READY)
866
				sock->state = SS_CONNECTING;
867
			rc = dsz;
868
			break;
869
		}
870 871 872
		if (rc == -EMSGSIZE)
			goto new_mtu;
		if (rc != -ELINKCONG)
873
			break;
874
		tsk->link_cong = 1;
875
		rc = tipc_wait_for_sndmsg(sock, &timeo);
876 877
		if (rc)
			kfree_skb_list(buf);
878
	} while (!rc);
879 880 881
exit:
	if (iocb)
		release_sock(sk);
882 883

	return rc;
P
Per Liden 已提交
884 885
}

886 887 888
static int tipc_wait_for_sndpkt(struct socket *sock, long *timeo_p)
{
	struct sock *sk = sock->sk;
889
	struct tipc_sock *tsk = tipc_sk(sk);
890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907
	DEFINE_WAIT(wait);
	int done;

	do {
		int err = sock_error(sk);
		if (err)
			return err;
		if (sock->state == SS_DISCONNECTING)
			return -EPIPE;
		else if (sock->state != SS_CONNECTED)
			return -ENOTCONN;
		if (!*timeo_p)
			return -EAGAIN;
		if (signal_pending(current))
			return sock_intr_errno(*timeo_p);

		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
		done = sk_wait_event(sk, timeo_p,
908 909 910
				     (!tsk->link_cong &&
				      !tipc_sk_conn_cong(tsk)) ||
				     !tsk->port.connected);
911 912 913 914 915
		finish_wait(sk_sleep(sk), &wait);
	} while (!done);
	return 0;
}

916
/**
917 918
 * tipc_send_stream - send stream-oriented data
 * @iocb: (unused)
P
Per Liden 已提交
919
 * @sock: socket structure
920 921
 * @m: data to send
 * @dsz: total length of data to be transmitted
922
 *
923
 * Used for SOCK_STREAM data.
924
 *
925 926
 * Returns the number of bytes sent on success (or partial success),
 * or errno if no data sent
P
Per Liden 已提交
927
 */
928 929
static int tipc_send_stream(struct kiocb *iocb, struct socket *sock,
			    struct msghdr *m, size_t dsz)
P
Per Liden 已提交
930
{
931
	struct sock *sk = sock->sk;
932
	struct tipc_sock *tsk = tipc_sk(sk);
933 934 935
	struct tipc_port *port = &tsk->port;
	struct tipc_msg *mhdr = &port->phdr;
	struct sk_buff *buf;
936
	DECLARE_SOCKADDR(struct sockaddr_tipc *, dest, m->msg_name);
937 938
	u32 ref = port->ref;
	int rc = -EINVAL;
939
	long timeo;
940 941
	u32 dnode;
	uint mtu, send, sent = 0;
P
Per Liden 已提交
942 943

	/* Handle implied connection establishment */
944 945 946
	if (unlikely(dest)) {
		rc = tipc_sendmsg(iocb, sock, m, dsz);
		if (dsz && (dsz == rc))
947
			tsk->sent_unacked = 1;
948 949 950
		return rc;
	}
	if (dsz > (uint)INT_MAX)
951 952
		return -EMSGSIZE;

953 954
	if (iocb)
		lock_sock(sk);
P
Per Liden 已提交
955

956 957
	if (unlikely(sock->state != SS_CONNECTED)) {
		if (sock->state == SS_DISCONNECTING)
958
			rc = -EPIPE;
959
		else
960
			rc = -ENOTCONN;
961 962
		goto exit;
	}
963

964
	timeo = sock_sndtimeo(sk, m->msg_flags & MSG_DONTWAIT);
965 966 967 968 969
	dnode = tipc_port_peernode(port);

next:
	mtu = port->max_pkt;
	send = min_t(uint, dsz - sent, TIPC_MAX_USER_MSG_SIZE);
970
	rc = tipc_msg_build(mhdr, m->msg_iov, sent, send, mtu, &buf);
971 972
	if (unlikely(rc < 0))
		goto exit;
973
	do {
974
		if (likely(!tipc_sk_conn_cong(tsk))) {
975
			rc = tipc_link_xmit(buf, dnode, ref);
976
			if (likely(!rc)) {
977
				tsk->sent_unacked++;
978 979 980 981 982 983 984 985 986 987 988
				sent += send;
				if (sent == dsz)
					break;
				goto next;
			}
			if (rc == -EMSGSIZE) {
				port->max_pkt = tipc_node_get_mtu(dnode, ref);
				goto next;
			}
			if (rc != -ELINKCONG)
				break;
989
			tsk->link_cong = 1;
990 991
		}
		rc = tipc_wait_for_sndpkt(sock, &timeo);
992 993
		if (rc)
			kfree_skb_list(buf);
994
	} while (!rc);
995
exit:
996 997
	if (iocb)
		release_sock(sk);
998
	return sent ? sent : rc;
P
Per Liden 已提交
999 1000
}

1001
/**
1002 1003
 * tipc_send_packet - send a connection-oriented message
 * @iocb: if NULL, indicates that socket lock is already held
P
Per Liden 已提交
1004
 * @sock: socket structure
1005 1006
 * @m: message to send
 * @dsz: length of data to be transmitted
1007
 *
1008
 * Used for SOCK_SEQPACKET messages.
1009
 *
1010
 * Returns the number of bytes sent on success, or errno otherwise
P
Per Liden 已提交
1011
 */
1012 1013
static int tipc_send_packet(struct kiocb *iocb, struct socket *sock,
			    struct msghdr *m, size_t dsz)
P
Per Liden 已提交
1014
{
1015 1016
	if (dsz > TIPC_MAX_USER_MSG_SIZE)
		return -EMSGSIZE;
P
Per Liden 已提交
1017

1018
	return tipc_send_stream(iocb, sock, m, dsz);
P
Per Liden 已提交
1019 1020
}

1021
/* tipc_sk_finish_conn - complete the setup of a connection
P
Per Liden 已提交
1022
 */
1023 1024
static void tipc_sk_finish_conn(struct tipc_port *port, u32 peer_port,
				u32 peer_node)
P
Per Liden 已提交
1025
{
1026
	struct tipc_msg *msg = &port->phdr;
P
Per Liden 已提交
1027

1028 1029 1030 1031 1032
	msg_set_destnode(msg, peer_node);
	msg_set_destport(msg, peer_port);
	msg_set_type(msg, TIPC_CONN_MSG);
	msg_set_lookup_scope(msg, 0);
	msg_set_hdr_sz(msg, SHORT_H_SIZE);
1033

1034 1035 1036 1037 1038 1039
	port->probing_interval = CONN_PROBING_INTERVAL;
	port->probing_state = TIPC_CONN_OK;
	port->connected = 1;
	k_start_timer(&port->timer, port->probing_interval);
	tipc_node_add_conn(peer_node, port->ref, peer_port);
	port->max_pkt = tipc_node_get_mtu(peer_node, port->ref);
P
Per Liden 已提交
1040 1041 1042 1043 1044 1045
}

/**
 * set_orig_addr - capture sender's address for received message
 * @m: descriptor for message info
 * @msg: received message header
1046
 *
P
Per Liden 已提交
1047 1048
 * Note: Address is not captured if not requested by receiver.
 */
S
Sam Ravnborg 已提交
1049
static void set_orig_addr(struct msghdr *m, struct tipc_msg *msg)
P
Per Liden 已提交
1050
{
1051
	DECLARE_SOCKADDR(struct sockaddr_tipc *, addr, m->msg_name);
P
Per Liden 已提交
1052

1053
	if (addr) {
P
Per Liden 已提交
1054 1055
		addr->family = AF_TIPC;
		addr->addrtype = TIPC_ADDR_ID;
1056
		memset(&addr->addr, 0, sizeof(addr->addr));
P
Per Liden 已提交
1057 1058
		addr->addr.id.ref = msg_origport(msg);
		addr->addr.id.node = msg_orignode(msg);
1059 1060
		addr->addr.name.domain = 0;	/* could leave uninitialized */
		addr->scope = 0;		/* could leave uninitialized */
P
Per Liden 已提交
1061 1062 1063 1064 1065
		m->msg_namelen = sizeof(struct sockaddr_tipc);
	}
}

/**
1066
 * anc_data_recv - optionally capture ancillary data for received message
P
Per Liden 已提交
1067 1068 1069
 * @m: descriptor for message info
 * @msg: received message header
 * @tport: TIPC port associated with message
1070
 *
P
Per Liden 已提交
1071
 * Note: Ancillary data is not captured if not requested by receiver.
1072
 *
P
Per Liden 已提交
1073 1074
 * Returns 0 if successful, otherwise errno
 */
S
Sam Ravnborg 已提交
1075
static int anc_data_recv(struct msghdr *m, struct tipc_msg *msg,
1076
			 struct tipc_port *tport)
P
Per Liden 已提交
1077 1078 1079 1080
{
	u32 anc_data[3];
	u32 err;
	u32 dest_type;
1081
	int has_name;
P
Per Liden 已提交
1082 1083 1084 1085 1086 1087 1088 1089 1090 1091
	int res;

	if (likely(m->msg_controllen == 0))
		return 0;

	/* Optionally capture errored message object(s) */
	err = msg ? msg_errcode(msg) : 0;
	if (unlikely(err)) {
		anc_data[0] = err;
		anc_data[1] = msg_data_sz(msg);
1092 1093
		res = put_cmsg(m, SOL_TIPC, TIPC_ERRINFO, 8, anc_data);
		if (res)
P
Per Liden 已提交
1094
			return res;
1095 1096 1097 1098 1099 1100
		if (anc_data[1]) {
			res = put_cmsg(m, SOL_TIPC, TIPC_RETDATA, anc_data[1],
				       msg_data(msg));
			if (res)
				return res;
		}
P
Per Liden 已提交
1101 1102 1103 1104 1105 1106
	}

	/* Optionally capture message destination object */
	dest_type = msg ? msg_type(msg) : TIPC_DIRECT_MSG;
	switch (dest_type) {
	case TIPC_NAMED_MSG:
1107
		has_name = 1;
P
Per Liden 已提交
1108 1109 1110 1111 1112
		anc_data[0] = msg_nametype(msg);
		anc_data[1] = msg_namelower(msg);
		anc_data[2] = msg_namelower(msg);
		break;
	case TIPC_MCAST_MSG:
1113
		has_name = 1;
P
Per Liden 已提交
1114 1115 1116 1117 1118
		anc_data[0] = msg_nametype(msg);
		anc_data[1] = msg_namelower(msg);
		anc_data[2] = msg_nameupper(msg);
		break;
	case TIPC_CONN_MSG:
1119
		has_name = (tport->conn_type != 0);
P
Per Liden 已提交
1120 1121 1122 1123 1124
		anc_data[0] = tport->conn_type;
		anc_data[1] = tport->conn_instance;
		anc_data[2] = tport->conn_instance;
		break;
	default:
1125
		has_name = 0;
P
Per Liden 已提交
1126
	}
1127 1128 1129 1130 1131
	if (has_name) {
		res = put_cmsg(m, SOL_TIPC, TIPC_DESTNAME, 12, anc_data);
		if (res)
			return res;
	}
P
Per Liden 已提交
1132 1133 1134 1135

	return 0;
}

1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153
static void tipc_sk_send_ack(struct tipc_port *port, uint ack)
{
	struct sk_buff *buf = NULL;
	struct tipc_msg *msg;
	u32 peer_port = tipc_port_peerport(port);
	u32 dnode = tipc_port_peernode(port);

	if (!port->connected)
		return;
	buf = tipc_msg_create(CONN_MANAGER, CONN_ACK, INT_H_SIZE, 0, dnode,
			      tipc_own_addr, peer_port, port->ref, TIPC_OK);
	if (!buf)
		return;
	msg = buf_msg(buf);
	msg_set_msgcnt(msg, ack);
	tipc_link_xmit(buf, dnode, msg_link_selector(msg));
}

1154
static int tipc_wait_for_rcvmsg(struct socket *sock, long *timeop)
Y
Ying Xue 已提交
1155 1156 1157
{
	struct sock *sk = sock->sk;
	DEFINE_WAIT(wait);
1158
	long timeo = *timeop;
Y
Ying Xue 已提交
1159 1160 1161 1162
	int err;

	for (;;) {
		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
1163
		if (timeo && skb_queue_empty(&sk->sk_receive_queue)) {
Y
Ying Xue 已提交
1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182
			if (sock->state == SS_DISCONNECTING) {
				err = -ENOTCONN;
				break;
			}
			release_sock(sk);
			timeo = schedule_timeout(timeo);
			lock_sock(sk);
		}
		err = 0;
		if (!skb_queue_empty(&sk->sk_receive_queue))
			break;
		err = sock_intr_errno(timeo);
		if (signal_pending(current))
			break;
		err = -EAGAIN;
		if (!timeo)
			break;
	}
	finish_wait(sk_sleep(sk), &wait);
1183
	*timeop = timeo;
Y
Ying Xue 已提交
1184 1185 1186
	return err;
}

1187
/**
1188
 * tipc_recvmsg - receive packet-oriented message
P
Per Liden 已提交
1189 1190 1191 1192
 * @iocb: (unused)
 * @m: descriptor for message info
 * @buf_len: total size of user buffer area
 * @flags: receive flags
1193
 *
P
Per Liden 已提交
1194 1195 1196 1197 1198
 * Used for SOCK_DGRAM, SOCK_RDM, and SOCK_SEQPACKET messages.
 * If the complete message doesn't fit in user area, truncate it.
 *
 * Returns size of returned message data, errno otherwise
 */
1199 1200
static int tipc_recvmsg(struct kiocb *iocb, struct socket *sock,
			struct msghdr *m, size_t buf_len, int flags)
P
Per Liden 已提交
1201
{
1202
	struct sock *sk = sock->sk;
1203 1204
	struct tipc_sock *tsk = tipc_sk(sk);
	struct tipc_port *port = &tsk->port;
P
Per Liden 已提交
1205 1206
	struct sk_buff *buf;
	struct tipc_msg *msg;
Y
Ying Xue 已提交
1207
	long timeo;
P
Per Liden 已提交
1208 1209 1210 1211
	unsigned int sz;
	u32 err;
	int res;

1212
	/* Catch invalid receive requests */
P
Per Liden 已提交
1213 1214 1215
	if (unlikely(!buf_len))
		return -EINVAL;

1216
	lock_sock(sk);
P
Per Liden 已提交
1217

1218 1219
	if (unlikely(sock->state == SS_UNCONNECTED)) {
		res = -ENOTCONN;
P
Per Liden 已提交
1220 1221 1222
		goto exit;
	}

Y
Ying Xue 已提交
1223
	timeo = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
1224
restart:
P
Per Liden 已提交
1225

1226
	/* Look for a message in receive queue; wait if necessary */
1227
	res = tipc_wait_for_rcvmsg(sock, &timeo);
Y
Ying Xue 已提交
1228 1229
	if (res)
		goto exit;
P
Per Liden 已提交
1230

1231 1232
	/* Look at first message in receive queue */
	buf = skb_peek(&sk->sk_receive_queue);
P
Per Liden 已提交
1233 1234 1235 1236 1237 1238
	msg = buf_msg(buf);
	sz = msg_data_sz(msg);
	err = msg_errcode(msg);

	/* Discard an empty non-errored message & try again */
	if ((!sz) && (!err)) {
1239
		advance_rx_queue(sk);
P
Per Liden 已提交
1240 1241 1242 1243 1244 1245 1246
		goto restart;
	}

	/* Capture sender's address (optional) */
	set_orig_addr(m, msg);

	/* Capture ancillary data (optional) */
1247
	res = anc_data_recv(m, msg, port);
1248
	if (res)
P
Per Liden 已提交
1249 1250 1251 1252 1253 1254 1255 1256
		goto exit;

	/* Capture message data (if valid) & compute return value (always) */
	if (!err) {
		if (unlikely(buf_len < sz)) {
			sz = buf_len;
			m->msg_flags |= MSG_TRUNC;
		}
1257 1258 1259
		res = skb_copy_datagram_iovec(buf, msg_hdr_sz(msg),
					      m->msg_iov, sz);
		if (res)
P
Per Liden 已提交
1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271
			goto exit;
		res = sz;
	} else {
		if ((sock->state == SS_READY) ||
		    ((err == TIPC_CONN_SHUTDOWN) || m->msg_control))
			res = 0;
		else
			res = -ECONNRESET;
	}

	/* Consume received message (optional) */
	if (likely(!(flags & MSG_PEEK))) {
1272
		if ((sock->state != SS_READY) &&
1273
		    (++tsk->rcv_unacked >= TIPC_CONNACK_INTV)) {
1274
			tipc_sk_send_ack(port, tsk->rcv_unacked);
1275 1276
			tsk->rcv_unacked = 0;
		}
1277
		advance_rx_queue(sk);
1278
	}
P
Per Liden 已提交
1279
exit:
1280
	release_sock(sk);
P
Per Liden 已提交
1281 1282 1283
	return res;
}

1284
/**
1285
 * tipc_recv_stream - receive stream-oriented data
P
Per Liden 已提交
1286 1287 1288 1289
 * @iocb: (unused)
 * @m: descriptor for message info
 * @buf_len: total size of user buffer area
 * @flags: receive flags
1290 1291
 *
 * Used for SOCK_STREAM messages only.  If not enough data is available
P
Per Liden 已提交
1292 1293 1294 1295
 * will optionally wait for more; never truncates data.
 *
 * Returns size of returned message data, errno otherwise
 */
1296 1297
static int tipc_recv_stream(struct kiocb *iocb, struct socket *sock,
			    struct msghdr *m, size_t buf_len, int flags)
P
Per Liden 已提交
1298
{
1299
	struct sock *sk = sock->sk;
1300 1301
	struct tipc_sock *tsk = tipc_sk(sk);
	struct tipc_port *port = &tsk->port;
P
Per Liden 已提交
1302 1303
	struct sk_buff *buf;
	struct tipc_msg *msg;
Y
Ying Xue 已提交
1304
	long timeo;
P
Per Liden 已提交
1305
	unsigned int sz;
1306
	int sz_to_copy, target, needed;
P
Per Liden 已提交
1307 1308
	int sz_copied = 0;
	u32 err;
1309
	int res = 0;
P
Per Liden 已提交
1310

1311
	/* Catch invalid receive attempts */
P
Per Liden 已提交
1312 1313 1314
	if (unlikely(!buf_len))
		return -EINVAL;

1315
	lock_sock(sk);
P
Per Liden 已提交
1316

Y
Ying Xue 已提交
1317
	if (unlikely(sock->state == SS_UNCONNECTED)) {
1318
		res = -ENOTCONN;
P
Per Liden 已提交
1319 1320 1321
		goto exit;
	}

1322
	target = sock_rcvlowat(sk, flags & MSG_WAITALL, buf_len);
Y
Ying Xue 已提交
1323
	timeo = sock_rcvtimeo(sk, flags & MSG_DONTWAIT);
P
Per Liden 已提交
1324

1325
restart:
1326
	/* Look for a message in receive queue; wait if necessary */
1327
	res = tipc_wait_for_rcvmsg(sock, &timeo);
Y
Ying Xue 已提交
1328 1329
	if (res)
		goto exit;
P
Per Liden 已提交
1330

1331 1332
	/* Look at first message in receive queue */
	buf = skb_peek(&sk->sk_receive_queue);
P
Per Liden 已提交
1333 1334 1335 1336 1337 1338
	msg = buf_msg(buf);
	sz = msg_data_sz(msg);
	err = msg_errcode(msg);

	/* Discard an empty non-errored message & try again */
	if ((!sz) && (!err)) {
1339
		advance_rx_queue(sk);
P
Per Liden 已提交
1340 1341 1342 1343 1344 1345
		goto restart;
	}

	/* Optionally capture sender's address & ancillary data of first msg */
	if (sz_copied == 0) {
		set_orig_addr(m, msg);
1346
		res = anc_data_recv(m, msg, port);
1347
		if (res)
P
Per Liden 已提交
1348 1349 1350 1351 1352
			goto exit;
	}

	/* Capture message data (if valid) & compute return value (always) */
	if (!err) {
1353
		u32 offset = (u32)(unsigned long)(TIPC_SKB_CB(buf)->handle);
P
Per Liden 已提交
1354

1355
		sz -= offset;
P
Per Liden 已提交
1356 1357
		needed = (buf_len - sz_copied);
		sz_to_copy = (sz <= needed) ? sz : needed;
1358 1359 1360 1361

		res = skb_copy_datagram_iovec(buf, msg_hdr_sz(msg) + offset,
					      m->msg_iov, sz_to_copy);
		if (res)
P
Per Liden 已提交
1362
			goto exit;
1363

P
Per Liden 已提交
1364 1365 1366 1367
		sz_copied += sz_to_copy;

		if (sz_to_copy < sz) {
			if (!(flags & MSG_PEEK))
1368 1369
				TIPC_SKB_CB(buf)->handle =
				(void *)(unsigned long)(offset + sz_to_copy);
P
Per Liden 已提交
1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383
			goto exit;
		}
	} else {
		if (sz_copied != 0)
			goto exit; /* can't add error msg to valid data */

		if ((err == TIPC_CONN_SHUTDOWN) || m->msg_control)
			res = 0;
		else
			res = -ECONNRESET;
	}

	/* Consume received message (optional) */
	if (likely(!(flags & MSG_PEEK))) {
1384
		if (unlikely(++tsk->rcv_unacked >= TIPC_CONNACK_INTV)) {
1385
			tipc_sk_send_ack(port, tsk->rcv_unacked);
1386 1387
			tsk->rcv_unacked = 0;
		}
1388
		advance_rx_queue(sk);
1389
	}
P
Per Liden 已提交
1390 1391

	/* Loop around if more data is required */
1392 1393
	if ((sz_copied < buf_len) &&	/* didn't get all requested data */
	    (!skb_queue_empty(&sk->sk_receive_queue) ||
1394
	    (sz_copied < target)) &&	/* and more is ready or required */
1395 1396
	    (!(flags & MSG_PEEK)) &&	/* and aren't just peeking at data */
	    (!err))			/* and haven't reached a FIN */
P
Per Liden 已提交
1397 1398 1399
		goto restart;

exit:
1400
	release_sock(sk);
1401
	return sz_copied ? sz_copied : res;
P
Per Liden 已提交
1402 1403
}

1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424
/**
 * tipc_write_space - wake up thread if port congestion is released
 * @sk: socket
 */
static void tipc_write_space(struct sock *sk)
{
	struct socket_wq *wq;

	rcu_read_lock();
	wq = rcu_dereference(sk->sk_wq);
	if (wq_has_sleeper(wq))
		wake_up_interruptible_sync_poll(&wq->wait, POLLOUT |
						POLLWRNORM | POLLWRBAND);
	rcu_read_unlock();
}

/**
 * tipc_data_ready - wake up threads to indicate messages have been received
 * @sk: socket
 * @len: the length of messages
 */
1425
static void tipc_data_ready(struct sock *sk)
1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436
{
	struct socket_wq *wq;

	rcu_read_lock();
	wq = rcu_dereference(sk->sk_wq);
	if (wq_has_sleeper(wq))
		wake_up_interruptible_sync_poll(&wq->wait, POLLIN |
						POLLRDNORM | POLLRDBAND);
	rcu_read_unlock();
}

1437 1438
/**
 * filter_connect - Handle all incoming messages for a connection-based socket
1439
 * @tsk: TIPC socket
1440 1441
 * @msg: message
 *
1442
 * Returns 0 (TIPC_OK) if everyting ok, -TIPC_ERR_NO_PORT otherwise
1443
 */
1444
static int filter_connect(struct tipc_sock *tsk, struct sk_buff **buf)
1445
{
1446 1447
	struct sock *sk = &tsk->sk;
	struct tipc_port *port = &tsk->port;
1448
	struct socket *sock = sk->sk_socket;
1449
	struct tipc_msg *msg = buf_msg(*buf);
1450

1451
	int retval = -TIPC_ERR_NO_PORT;
1452 1453 1454 1455 1456 1457 1458

	if (msg_mcast(msg))
		return retval;

	switch ((int)sock->state) {
	case SS_CONNECTED:
		/* Accept only connection-based messages sent by peer */
1459
		if (msg_connected(msg) && tipc_port_peer_msg(port, msg)) {
1460 1461
			if (unlikely(msg_errcode(msg))) {
				sock->state = SS_DISCONNECTING;
1462 1463 1464 1465
				port->connected = 0;
				/* let timer expire on it's own */
				tipc_node_remove_conn(tipc_port_peernode(port),
						      port->ref);
1466 1467 1468 1469 1470 1471
			}
			retval = TIPC_OK;
		}
		break;
	case SS_CONNECTING:
		/* Accept only ACK or NACK message */
1472 1473 1474 1475

		if (unlikely(!msg_connected(msg)))
			break;

1476 1477
		if (unlikely(msg_errcode(msg))) {
			sock->state = SS_DISCONNECTING;
1478
			sk->sk_err = ECONNREFUSED;
1479 1480 1481 1482
			retval = TIPC_OK;
			break;
		}

1483
		if (unlikely(msg_importance(msg) > TIPC_CRITICAL_IMPORTANCE)) {
1484
			sock->state = SS_DISCONNECTING;
1485
			sk->sk_err = EINVAL;
1486
			retval = TIPC_OK;
1487 1488 1489
			break;
		}

1490 1491 1492 1493
		tipc_sk_finish_conn(port, msg_origport(msg), msg_orignode(msg));
		msg_set_importance(&port->phdr, msg_importance(msg));
		sock->state = SS_CONNECTED;

1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505
		/* If an incoming message is an 'ACK-', it should be
		 * discarded here because it doesn't contain useful
		 * data. In addition, we should try to wake up
		 * connect() routine if sleeping.
		 */
		if (msg_data_sz(msg) == 0) {
			kfree_skb(*buf);
			*buf = NULL;
			if (waitqueue_active(sk_sleep(sk)))
				wake_up_interruptible(sk_sleep(sk));
		}
		retval = TIPC_OK;
1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520
		break;
	case SS_LISTENING:
	case SS_UNCONNECTED:
		/* Accept only SYN message */
		if (!msg_connected(msg) && !(msg_errcode(msg)))
			retval = TIPC_OK;
		break;
	case SS_DISCONNECTING:
		break;
	default:
		pr_err("Unknown socket state %u\n", sock->state);
	}
	return retval;
}

1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531
/**
 * rcvbuf_limit - get proper overload limit of socket receive queue
 * @sk: socket
 * @buf: message
 *
 * For all connection oriented messages, irrespective of importance,
 * the default overload value (i.e. 67MB) is set as limit.
 *
 * For all connectionless messages, by default new queue limits are
 * as belows:
 *
1532 1533 1534 1535
 * TIPC_LOW_IMPORTANCE       (4 MB)
 * TIPC_MEDIUM_IMPORTANCE    (8 MB)
 * TIPC_HIGH_IMPORTANCE      (16 MB)
 * TIPC_CRITICAL_IMPORTANCE  (32 MB)
1536 1537 1538 1539 1540 1541 1542 1543
 *
 * Returns overload limit according to corresponding message importance
 */
static unsigned int rcvbuf_limit(struct sock *sk, struct sk_buff *buf)
{
	struct tipc_msg *msg = buf_msg(buf);

	if (msg_connected(msg))
1544 1545 1546 1547
		return sysctl_tipc_rmem[2];

	return sk->sk_rcvbuf >> TIPC_CRITICAL_IMPORTANCE <<
		msg_importance(msg);
1548 1549
}

1550
/**
1551 1552
 * filter_rcv - validate incoming message
 * @sk: socket
P
Per Liden 已提交
1553
 * @buf: message
1554
 *
1555 1556 1557 1558
 * Enqueues message on receive queue if acceptable; optionally handles
 * disconnect indication for a connected socket.
 *
 * Called with socket lock already taken; port lock may also be taken.
1559
 *
1560
 * Returns 0 (TIPC_OK) if message was consumed, -TIPC error code if message
1561
 * to be rejected, 1 (TIPC_FWD_MSG) if (CONN_MANAGER) message to be forwarded
P
Per Liden 已提交
1562
 */
1563
static int filter_rcv(struct sock *sk, struct sk_buff *buf)
P
Per Liden 已提交
1564
{
1565
	struct socket *sock = sk->sk_socket;
1566
	struct tipc_sock *tsk = tipc_sk(sk);
P
Per Liden 已提交
1567
	struct tipc_msg *msg = buf_msg(buf);
1568
	unsigned int limit = rcvbuf_limit(sk, buf);
1569
	u32 onode;
1570
	int rc = TIPC_OK;
P
Per Liden 已提交
1571

1572 1573
	if (unlikely(msg_user(msg) == CONN_MANAGER))
		return tipc_sk_proto_rcv(tsk, &onode, buf);
1574

1575 1576 1577 1578 1579 1580 1581
	if (unlikely(msg_user(msg) == SOCK_WAKEUP)) {
		kfree_skb(buf);
		tsk->link_cong = 0;
		sk->sk_write_space(sk);
		return TIPC_OK;
	}

P
Per Liden 已提交
1582
	/* Reject message if it is wrong sort of message for socket */
1583
	if (msg_type(msg) > TIPC_DIRECT_MSG)
1584
		return -TIPC_ERR_NO_PORT;
1585

P
Per Liden 已提交
1586
	if (sock->state == SS_READY) {
1587
		if (msg_connected(msg))
1588
			return -TIPC_ERR_NO_PORT;
P
Per Liden 已提交
1589
	} else {
1590 1591 1592
		rc = filter_connect(tsk, &buf);
		if (rc != TIPC_OK || buf == NULL)
			return rc;
P
Per Liden 已提交
1593 1594 1595
	}

	/* Reject message if there isn't room to queue it */
1596
	if (sk_rmem_alloc_get(sk) + buf->truesize >= limit)
1597
		return -TIPC_ERR_OVERLOAD;
P
Per Liden 已提交
1598

1599
	/* Enqueue message */
Y
Ying Xue 已提交
1600
	TIPC_SKB_CB(buf)->handle = NULL;
1601
	__skb_queue_tail(&sk->sk_receive_queue, buf);
1602
	skb_set_owner_r(buf, sk);
1603

1604
	sk->sk_data_ready(sk);
1605 1606
	return TIPC_OK;
}
P
Per Liden 已提交
1607

1608
/**
1609
 * tipc_backlog_rcv - handle incoming message from backlog queue
1610 1611 1612 1613 1614 1615 1616
 * @sk: socket
 * @buf: message
 *
 * Caller must hold socket lock, but not port lock.
 *
 * Returns 0
 */
1617
static int tipc_backlog_rcv(struct sock *sk, struct sk_buff *buf)
1618
{
1619
	int rc;
1620
	u32 onode;
1621
	struct tipc_sock *tsk = tipc_sk(sk);
1622
	uint truesize = buf->truesize;
1623

1624
	rc = filter_rcv(sk, buf);
1625

1626 1627 1628 1629 1630 1631 1632 1633 1634
	if (likely(!rc)) {
		if (atomic_read(&tsk->dupl_rcvcnt) < TIPC_CONN_OVERLOAD_LIMIT)
			atomic_add(truesize, &tsk->dupl_rcvcnt);
		return 0;
	}

	if ((rc < 0) && !tipc_msg_reverse(buf, &onode, -rc))
		return 0;

1635
	tipc_link_xmit(buf, onode, 0);
1636

1637 1638 1639 1640
	return 0;
}

/**
1641
 * tipc_sk_rcv - handle incoming message
1642 1643 1644
 * @buf: buffer containing arriving message
 * Consumes buffer
 * Returns 0 if success, or errno: -EHOSTUNREACH
1645
 */
1646
int tipc_sk_rcv(struct sk_buff *buf)
1647
{
1648 1649 1650 1651
	struct tipc_sock *tsk;
	struct tipc_port *port;
	struct sock *sk;
	u32 dport = msg_destport(buf_msg(buf));
1652
	int rc = TIPC_OK;
1653
	uint limit;
1654
	u32 dnode;
1655

1656
	/* Validate destination and message */
1657 1658
	port = tipc_port_lock(dport);
	if (unlikely(!port)) {
1659
		rc = tipc_msg_eval(buf, &dnode);
1660 1661 1662 1663 1664 1665 1666
		goto exit;
	}

	tsk = tipc_port_to_sock(port);
	sk = &tsk->sk;

	/* Queue message */
1667
	bh_lock_sock(sk);
1668

1669
	if (!sock_owned_by_user(sk)) {
1670
		rc = filter_rcv(sk, buf);
1671
	} else {
1672 1673 1674 1675
		if (sk->sk_backlog.len == 0)
			atomic_set(&tsk->dupl_rcvcnt, 0);
		limit = rcvbuf_limit(sk, buf) + atomic_read(&tsk->dupl_rcvcnt);
		if (sk_add_backlog(sk, buf, limit))
1676
			rc = -TIPC_ERR_OVERLOAD;
1677 1678
	}
	bh_unlock_sock(sk);
1679
	tipc_port_unlock(port);
1680

1681
	if (likely(!rc))
1682 1683
		return 0;
exit:
1684
	if ((rc < 0) && !tipc_msg_reverse(buf, &dnode, -rc))
1685
		return -EHOSTUNREACH;
1686

1687
	tipc_link_xmit(buf, dnode, 0);
1688
	return (rc < 0) ? -EHOSTUNREACH : 0;
P
Per Liden 已提交
1689 1690
}

Y
Ying Xue 已提交
1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712
static int tipc_wait_for_connect(struct socket *sock, long *timeo_p)
{
	struct sock *sk = sock->sk;
	DEFINE_WAIT(wait);
	int done;

	do {
		int err = sock_error(sk);
		if (err)
			return err;
		if (!*timeo_p)
			return -ETIMEDOUT;
		if (signal_pending(current))
			return sock_intr_errno(*timeo_p);

		prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
		done = sk_wait_event(sk, timeo_p, sock->state != SS_CONNECTING);
		finish_wait(sk_sleep(sk), &wait);
	} while (!done);
	return 0;
}

P
Per Liden 已提交
1713
/**
1714
 * tipc_connect - establish a connection to another TIPC port
P
Per Liden 已提交
1715 1716 1717
 * @sock: socket structure
 * @dest: socket address for destination port
 * @destlen: size of socket address data structure
1718
 * @flags: file-related flags associated with socket
P
Per Liden 已提交
1719 1720 1721
 *
 * Returns 0 on success, errno otherwise
 */
1722 1723
static int tipc_connect(struct socket *sock, struct sockaddr *dest,
			int destlen, int flags)
P
Per Liden 已提交
1724
{
1725
	struct sock *sk = sock->sk;
1726 1727
	struct sockaddr_tipc *dst = (struct sockaddr_tipc *)dest;
	struct msghdr m = {NULL,};
Y
Ying Xue 已提交
1728 1729
	long timeout = (flags & O_NONBLOCK) ? 0 : tipc_sk(sk)->conn_timeout;
	socket_state previous;
1730 1731
	int res;

1732 1733
	lock_sock(sk);

1734
	/* For now, TIPC does not allow use of connect() with DGRAM/RDM types */
1735 1736 1737 1738
	if (sock->state == SS_READY) {
		res = -EOPNOTSUPP;
		goto exit;
	}
1739 1740 1741 1742 1743 1744 1745

	/*
	 * Reject connection attempt using multicast address
	 *
	 * Note: send_msg() validates the rest of the address fields,
	 *       so there's no need to do it here
	 */
1746 1747 1748 1749 1750
	if (dst->addrtype == TIPC_ADDR_MCAST) {
		res = -EINVAL;
		goto exit;
	}

Y
Ying Xue 已提交
1751
	previous = sock->state;
1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763
	switch (sock->state) {
	case SS_UNCONNECTED:
		/* Send a 'SYN-' to destination */
		m.msg_name = dest;
		m.msg_namelen = destlen;

		/* If connect is in non-blocking case, set MSG_DONTWAIT to
		 * indicate send_msg() is never blocked.
		 */
		if (!timeout)
			m.msg_flags = MSG_DONTWAIT;

1764
		res = tipc_sendmsg(NULL, sock, &m, 0);
1765 1766 1767 1768 1769 1770 1771 1772 1773
		if ((res < 0) && (res != -EWOULDBLOCK))
			goto exit;

		/* Just entered SS_CONNECTING state; the only
		 * difference is that return value in non-blocking
		 * case is EINPROGRESS, rather than EALREADY.
		 */
		res = -EINPROGRESS;
	case SS_CONNECTING:
Y
Ying Xue 已提交
1774 1775 1776 1777 1778 1779 1780
		if (previous == SS_CONNECTING)
			res = -EALREADY;
		if (!timeout)
			goto exit;
		timeout = msecs_to_jiffies(timeout);
		/* Wait until an 'ACK' or 'RST' arrives, or a timeout occurs */
		res = tipc_wait_for_connect(sock, &timeout);
1781 1782 1783 1784 1785 1786
		break;
	case SS_CONNECTED:
		res = -EISCONN;
		break;
	default:
		res = -EINVAL;
Y
Ying Xue 已提交
1787
		break;
1788
	}
1789 1790
exit:
	release_sock(sk);
1791
	return res;
P
Per Liden 已提交
1792 1793
}

1794
/**
1795
 * tipc_listen - allow socket to listen for incoming connections
P
Per Liden 已提交
1796 1797
 * @sock: socket structure
 * @len: (unused)
1798
 *
P
Per Liden 已提交
1799 1800
 * Returns 0 on success, errno otherwise
 */
1801
static int tipc_listen(struct socket *sock, int len)
P
Per Liden 已提交
1802
{
1803 1804 1805 1806
	struct sock *sk = sock->sk;
	int res;

	lock_sock(sk);
P
Per Liden 已提交
1807

1808
	if (sock->state != SS_UNCONNECTED)
1809 1810 1811 1812 1813 1814 1815 1816
		res = -EINVAL;
	else {
		sock->state = SS_LISTENING;
		res = 0;
	}

	release_sock(sk);
	return res;
P
Per Liden 已提交
1817 1818
}

Y
Ying Xue 已提交
1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832
static int tipc_wait_for_accept(struct socket *sock, long timeo)
{
	struct sock *sk = sock->sk;
	DEFINE_WAIT(wait);
	int err;

	/* True wake-one mechanism for incoming connections: only
	 * one process gets woken up, not the 'whole herd'.
	 * Since we do not 'race & poll' for established sockets
	 * anymore, the common case will execute the loop only once.
	*/
	for (;;) {
		prepare_to_wait_exclusive(sk_sleep(sk), &wait,
					  TASK_INTERRUPTIBLE);
1833
		if (timeo && skb_queue_empty(&sk->sk_receive_queue)) {
Y
Ying Xue 已提交
1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854
			release_sock(sk);
			timeo = schedule_timeout(timeo);
			lock_sock(sk);
		}
		err = 0;
		if (!skb_queue_empty(&sk->sk_receive_queue))
			break;
		err = -EINVAL;
		if (sock->state != SS_LISTENING)
			break;
		err = sock_intr_errno(timeo);
		if (signal_pending(current))
			break;
		err = -EAGAIN;
		if (!timeo)
			break;
	}
	finish_wait(sk_sleep(sk), &wait);
	return err;
}

1855
/**
1856
 * tipc_accept - wait for connection request
P
Per Liden 已提交
1857 1858 1859
 * @sock: listening socket
 * @newsock: new socket that is to be connected
 * @flags: file-related flags associated with socket
1860
 *
P
Per Liden 已提交
1861 1862
 * Returns 0 on success, errno otherwise
 */
1863
static int tipc_accept(struct socket *sock, struct socket *new_sock, int flags)
P
Per Liden 已提交
1864
{
1865
	struct sock *new_sk, *sk = sock->sk;
P
Per Liden 已提交
1866
	struct sk_buff *buf;
1867
	struct tipc_port *new_port;
1868
	struct tipc_msg *msg;
Y
Ying Xue 已提交
1869
	long timeo;
1870
	int res;
P
Per Liden 已提交
1871

1872
	lock_sock(sk);
P
Per Liden 已提交
1873

1874 1875
	if (sock->state != SS_LISTENING) {
		res = -EINVAL;
P
Per Liden 已提交
1876 1877
		goto exit;
	}
Y
Ying Xue 已提交
1878 1879 1880 1881
	timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
	res = tipc_wait_for_accept(sock, timeo);
	if (res)
		goto exit;
1882 1883 1884

	buf = skb_peek(&sk->sk_receive_queue);

1885
	res = tipc_sk_create(sock_net(sock->sk), new_sock, 0, 1);
1886 1887
	if (res)
		goto exit;
P
Per Liden 已提交
1888

1889
	new_sk = new_sock->sk;
1890
	new_port = &tipc_sk(new_sk)->port;
1891
	msg = buf_msg(buf);
P
Per Liden 已提交
1892

1893 1894 1895 1896 1897 1898 1899 1900 1901 1902
	/* we lock on new_sk; but lockdep sees the lock on sk */
	lock_sock_nested(new_sk, SINGLE_DEPTH_NESTING);

	/*
	 * Reject any stray messages received by new socket
	 * before the socket lock was taken (very, very unlikely)
	 */
	reject_rx_queue(new_sk);

	/* Connect new socket to it's peer */
1903
	tipc_sk_finish_conn(new_port, msg_origport(msg), msg_orignode(msg));
1904 1905
	new_sock->state = SS_CONNECTED;

1906
	tipc_port_set_importance(new_port, msg_importance(msg));
1907
	if (msg_named(msg)) {
1908 1909
		new_port->conn_type = msg_nametype(msg);
		new_port->conn_instance = msg_nameinst(msg);
P
Per Liden 已提交
1910
	}
1911 1912 1913 1914 1915 1916 1917 1918 1919

	/*
	 * Respond to 'SYN-' by discarding it & returning 'ACK'-.
	 * Respond to 'SYN+' by queuing it on new socket.
	 */
	if (!msg_data_sz(msg)) {
		struct msghdr m = {NULL,};

		advance_rx_queue(sk);
1920
		tipc_send_packet(NULL, new_sock, &m, 0);
1921 1922 1923
	} else {
		__skb_dequeue(&sk->sk_receive_queue);
		__skb_queue_head(&new_sk->sk_receive_queue, buf);
1924
		skb_set_owner_r(buf, new_sk);
1925 1926
	}
	release_sock(new_sk);
P
Per Liden 已提交
1927
exit:
1928
	release_sock(sk);
P
Per Liden 已提交
1929 1930 1931 1932
	return res;
}

/**
1933
 * tipc_shutdown - shutdown socket connection
P
Per Liden 已提交
1934
 * @sock: socket structure
1935
 * @how: direction to close (must be SHUT_RDWR)
P
Per Liden 已提交
1936 1937
 *
 * Terminates connection (if necessary), then purges socket's receive queue.
1938
 *
P
Per Liden 已提交
1939 1940
 * Returns 0 on success, errno otherwise
 */
1941
static int tipc_shutdown(struct socket *sock, int how)
P
Per Liden 已提交
1942
{
1943
	struct sock *sk = sock->sk;
1944 1945
	struct tipc_sock *tsk = tipc_sk(sk);
	struct tipc_port *port = &tsk->port;
P
Per Liden 已提交
1946
	struct sk_buff *buf;
1947
	u32 dnode;
P
Per Liden 已提交
1948 1949
	int res;

1950 1951
	if (how != SHUT_RDWR)
		return -EINVAL;
P
Per Liden 已提交
1952

1953
	lock_sock(sk);
P
Per Liden 已提交
1954 1955

	switch (sock->state) {
1956
	case SS_CONNECTING:
P
Per Liden 已提交
1957 1958 1959
	case SS_CONNECTED:

restart:
1960
		/* Disconnect and send a 'FIN+' or 'FIN-' message to peer */
1961 1962
		buf = __skb_dequeue(&sk->sk_receive_queue);
		if (buf) {
Y
Ying Xue 已提交
1963
			if (TIPC_SKB_CB(buf)->handle != NULL) {
1964
				kfree_skb(buf);
P
Per Liden 已提交
1965 1966
				goto restart;
			}
1967 1968
			if (tipc_msg_reverse(buf, &dnode, TIPC_CONN_SHUTDOWN))
				tipc_link_xmit(buf, dnode, port->ref);
1969
			tipc_node_remove_conn(dnode, port->ref);
1970
		} else {
1971 1972 1973 1974 1975 1976 1977
			dnode = tipc_port_peernode(port);
			buf = tipc_msg_create(TIPC_CRITICAL_IMPORTANCE,
					      TIPC_CONN_MSG, SHORT_H_SIZE,
					      0, dnode, tipc_own_addr,
					      tipc_port_peerport(port),
					      port->ref, TIPC_CONN_SHUTDOWN);
			tipc_link_xmit(buf, dnode, port->ref);
P
Per Liden 已提交
1978
		}
1979
		port->connected = 0;
1980
		sock->state = SS_DISCONNECTING;
1981
		tipc_node_remove_conn(dnode, port->ref);
P
Per Liden 已提交
1982 1983 1984 1985
		/* fall through */

	case SS_DISCONNECTING:

1986
		/* Discard any unreceived messages */
1987
		__skb_queue_purge(&sk->sk_receive_queue);
1988 1989 1990

		/* Wake up anyone sleeping in poll */
		sk->sk_state_change(sk);
P
Per Liden 已提交
1991 1992 1993 1994 1995 1996 1997
		res = 0;
		break;

	default:
		res = -ENOTCONN;
	}

1998
	release_sock(sk);
P
Per Liden 已提交
1999 2000 2001
	return res;
}

2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045
static void tipc_sk_timeout(unsigned long ref)
{
	struct tipc_port *port = tipc_port_lock(ref);
	struct tipc_sock *tsk;
	struct sock *sk;
	struct sk_buff *buf = NULL;
	struct tipc_msg *msg = NULL;
	u32 peer_port, peer_node;

	if (!port)
		return;

	if (!port->connected) {
		tipc_port_unlock(port);
		return;
	}
	tsk = tipc_port_to_sock(port);
	sk = &tsk->sk;
	bh_lock_sock(sk);
	peer_port = tipc_port_peerport(port);
	peer_node = tipc_port_peernode(port);

	if (port->probing_state == TIPC_CONN_PROBING) {
		/* Previous probe not answered -> self abort */
		buf = tipc_msg_create(TIPC_CRITICAL_IMPORTANCE, TIPC_CONN_MSG,
				      SHORT_H_SIZE, 0, tipc_own_addr,
				      peer_node, ref, peer_port,
				      TIPC_ERR_NO_PORT);
	} else {
		buf = tipc_msg_create(CONN_MANAGER, CONN_PROBE, INT_H_SIZE,
				      0, peer_node, tipc_own_addr,
				      peer_port, ref, TIPC_OK);
		port->probing_state = TIPC_CONN_PROBING;
		k_start_timer(&port->timer, port->probing_interval);
	}
	bh_unlock_sock(sk);
	tipc_port_unlock(port);
	if (!buf)
		return;

	msg = buf_msg(buf);
	tipc_link_xmit(buf, msg_destnode(msg),	msg_link_selector(msg));
}

P
Per Liden 已提交
2046
/**
2047
 * tipc_setsockopt - set socket option
P
Per Liden 已提交
2048 2049 2050 2051 2052
 * @sock: socket structure
 * @lvl: option level
 * @opt: option identifier
 * @ov: pointer to new option value
 * @ol: length of option value
2053 2054
 *
 * For stream sockets only, accepts and ignores all IPPROTO_TCP options
P
Per Liden 已提交
2055
 * (to ease compatibility).
2056
 *
P
Per Liden 已提交
2057 2058
 * Returns 0 on success, errno otherwise
 */
2059 2060
static int tipc_setsockopt(struct socket *sock, int lvl, int opt,
			   char __user *ov, unsigned int ol)
P
Per Liden 已提交
2061
{
2062
	struct sock *sk = sock->sk;
2063 2064
	struct tipc_sock *tsk = tipc_sk(sk);
	struct tipc_port *port = &tsk->port;
P
Per Liden 已提交
2065 2066 2067
	u32 value;
	int res;

2068 2069
	if ((lvl == IPPROTO_TCP) && (sock->type == SOCK_STREAM))
		return 0;
P
Per Liden 已提交
2070 2071 2072 2073
	if (lvl != SOL_TIPC)
		return -ENOPROTOOPT;
	if (ol < sizeof(value))
		return -EINVAL;
2074 2075
	res = get_user(value, (u32 __user *)ov);
	if (res)
P
Per Liden 已提交
2076 2077
		return res;

2078
	lock_sock(sk);
2079

P
Per Liden 已提交
2080 2081
	switch (opt) {
	case TIPC_IMPORTANCE:
2082
		res = tipc_port_set_importance(port, value);
P
Per Liden 已提交
2083 2084 2085
		break;
	case TIPC_SRC_DROPPABLE:
		if (sock->type != SOCK_STREAM)
2086
			tipc_port_set_unreliable(port, value);
2087
		else
P
Per Liden 已提交
2088 2089 2090
			res = -ENOPROTOOPT;
		break;
	case TIPC_DEST_DROPPABLE:
2091
		tipc_port_set_unreturnable(port, value);
P
Per Liden 已提交
2092 2093
		break;
	case TIPC_CONN_TIMEOUT:
2094
		tipc_sk(sk)->conn_timeout = value;
2095
		/* no need to set "res", since already 0 at this point */
P
Per Liden 已提交
2096 2097 2098 2099 2100
		break;
	default:
		res = -EINVAL;
	}

2101 2102
	release_sock(sk);

P
Per Liden 已提交
2103 2104 2105 2106
	return res;
}

/**
2107
 * tipc_getsockopt - get socket option
P
Per Liden 已提交
2108 2109 2110 2111 2112
 * @sock: socket structure
 * @lvl: option level
 * @opt: option identifier
 * @ov: receptacle for option value
 * @ol: receptacle for length of option value
2113 2114
 *
 * For stream sockets only, returns 0 length result for all IPPROTO_TCP options
P
Per Liden 已提交
2115
 * (to ease compatibility).
2116
 *
P
Per Liden 已提交
2117 2118
 * Returns 0 on success, errno otherwise
 */
2119 2120
static int tipc_getsockopt(struct socket *sock, int lvl, int opt,
			   char __user *ov, int __user *ol)
P
Per Liden 已提交
2121
{
2122
	struct sock *sk = sock->sk;
2123 2124
	struct tipc_sock *tsk = tipc_sk(sk);
	struct tipc_port *port = &tsk->port;
2125
	int len;
P
Per Liden 已提交
2126
	u32 value;
2127
	int res;
P
Per Liden 已提交
2128

2129 2130
	if ((lvl == IPPROTO_TCP) && (sock->type == SOCK_STREAM))
		return put_user(0, ol);
P
Per Liden 已提交
2131 2132
	if (lvl != SOL_TIPC)
		return -ENOPROTOOPT;
2133 2134
	res = get_user(len, ol);
	if (res)
2135
		return res;
P
Per Liden 已提交
2136

2137
	lock_sock(sk);
P
Per Liden 已提交
2138 2139 2140

	switch (opt) {
	case TIPC_IMPORTANCE:
2141
		value = tipc_port_importance(port);
P
Per Liden 已提交
2142 2143
		break;
	case TIPC_SRC_DROPPABLE:
2144
		value = tipc_port_unreliable(port);
P
Per Liden 已提交
2145 2146
		break;
	case TIPC_DEST_DROPPABLE:
2147
		value = tipc_port_unreturnable(port);
P
Per Liden 已提交
2148 2149
		break;
	case TIPC_CONN_TIMEOUT:
2150
		value = tipc_sk(sk)->conn_timeout;
2151
		/* no need to set "res", since already 0 at this point */
P
Per Liden 已提交
2152
		break;
2153
	case TIPC_NODE_RECVQ_DEPTH:
2154
		value = 0; /* was tipc_queue_size, now obsolete */
2155
		break;
2156
	case TIPC_SOCK_RECVQ_DEPTH:
2157 2158
		value = skb_queue_len(&sk->sk_receive_queue);
		break;
P
Per Liden 已提交
2159 2160 2161 2162
	default:
		res = -EINVAL;
	}

2163 2164
	release_sock(sk);

2165 2166
	if (res)
		return res;	/* "get" failed */
P
Per Liden 已提交
2167

2168 2169 2170 2171 2172 2173 2174
	if (len < sizeof(value))
		return -EINVAL;

	if (copy_to_user(ov, &value, sizeof(value)))
		return -EFAULT;

	return put_user(sizeof(value), ol);
P
Per Liden 已提交
2175 2176
}

2177
static int tipc_ioctl(struct socket *sk, unsigned int cmd, unsigned long arg)
E
Erik Hugne 已提交
2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197
{
	struct tipc_sioc_ln_req lnr;
	void __user *argp = (void __user *)arg;

	switch (cmd) {
	case SIOCGETLINKNAME:
		if (copy_from_user(&lnr, argp, sizeof(lnr)))
			return -EFAULT;
		if (!tipc_node_get_linkname(lnr.bearer_id, lnr.peer,
					    lnr.linkname, TIPC_MAX_LINK_NAME)) {
			if (copy_to_user(argp, &lnr, sizeof(lnr)))
				return -EFAULT;
			return 0;
		}
		return -EADDRNOTAVAIL;
	default:
		return -ENOIOCTLCMD;
	}
}

2198 2199
/* Protocol switches for the various types of TIPC sockets */

2200
static const struct proto_ops msg_ops = {
2201
	.owner		= THIS_MODULE,
P
Per Liden 已提交
2202
	.family		= AF_TIPC,
2203 2204 2205
	.release	= tipc_release,
	.bind		= tipc_bind,
	.connect	= tipc_connect,
2206
	.socketpair	= sock_no_socketpair,
2207
	.accept		= sock_no_accept,
2208 2209
	.getname	= tipc_getname,
	.poll		= tipc_poll,
E
Erik Hugne 已提交
2210
	.ioctl		= tipc_ioctl,
2211
	.listen		= sock_no_listen,
2212 2213 2214 2215 2216
	.shutdown	= tipc_shutdown,
	.setsockopt	= tipc_setsockopt,
	.getsockopt	= tipc_getsockopt,
	.sendmsg	= tipc_sendmsg,
	.recvmsg	= tipc_recvmsg,
2217 2218
	.mmap		= sock_no_mmap,
	.sendpage	= sock_no_sendpage
P
Per Liden 已提交
2219 2220
};

2221
static const struct proto_ops packet_ops = {
2222
	.owner		= THIS_MODULE,
P
Per Liden 已提交
2223
	.family		= AF_TIPC,
2224 2225 2226
	.release	= tipc_release,
	.bind		= tipc_bind,
	.connect	= tipc_connect,
2227
	.socketpair	= sock_no_socketpair,
2228 2229 2230
	.accept		= tipc_accept,
	.getname	= tipc_getname,
	.poll		= tipc_poll,
E
Erik Hugne 已提交
2231
	.ioctl		= tipc_ioctl,
2232 2233 2234 2235 2236 2237
	.listen		= tipc_listen,
	.shutdown	= tipc_shutdown,
	.setsockopt	= tipc_setsockopt,
	.getsockopt	= tipc_getsockopt,
	.sendmsg	= tipc_send_packet,
	.recvmsg	= tipc_recvmsg,
2238 2239
	.mmap		= sock_no_mmap,
	.sendpage	= sock_no_sendpage
P
Per Liden 已提交
2240 2241
};

2242
static const struct proto_ops stream_ops = {
2243
	.owner		= THIS_MODULE,
P
Per Liden 已提交
2244
	.family		= AF_TIPC,
2245 2246 2247
	.release	= tipc_release,
	.bind		= tipc_bind,
	.connect	= tipc_connect,
2248
	.socketpair	= sock_no_socketpair,
2249 2250 2251
	.accept		= tipc_accept,
	.getname	= tipc_getname,
	.poll		= tipc_poll,
E
Erik Hugne 已提交
2252
	.ioctl		= tipc_ioctl,
2253 2254 2255 2256 2257 2258
	.listen		= tipc_listen,
	.shutdown	= tipc_shutdown,
	.setsockopt	= tipc_setsockopt,
	.getsockopt	= tipc_getsockopt,
	.sendmsg	= tipc_send_stream,
	.recvmsg	= tipc_recv_stream,
2259 2260
	.mmap		= sock_no_mmap,
	.sendpage	= sock_no_sendpage
P
Per Liden 已提交
2261 2262
};

2263
static const struct net_proto_family tipc_family_ops = {
2264
	.owner		= THIS_MODULE,
P
Per Liden 已提交
2265
	.family		= AF_TIPC,
2266
	.create		= tipc_sk_create
P
Per Liden 已提交
2267 2268 2269 2270 2271
};

static struct proto tipc_proto = {
	.name		= "TIPC",
	.owner		= THIS_MODULE,
2272 2273
	.obj_size	= sizeof(struct tipc_sock),
	.sysctl_rmem	= sysctl_tipc_rmem
P
Per Liden 已提交
2274 2275
};

2276 2277 2278 2279 2280 2281
static struct proto tipc_proto_kern = {
	.name		= "TIPC",
	.obj_size	= sizeof(struct tipc_sock),
	.sysctl_rmem	= sysctl_tipc_rmem
};

P
Per Liden 已提交
2282
/**
2283
 * tipc_socket_init - initialize TIPC socket interface
2284
 *
P
Per Liden 已提交
2285 2286
 * Returns 0 on success, errno otherwise
 */
2287
int tipc_socket_init(void)
P
Per Liden 已提交
2288 2289 2290
{
	int res;

2291
	res = proto_register(&tipc_proto, 1);
P
Per Liden 已提交
2292
	if (res) {
2293
		pr_err("Failed to register TIPC protocol type\n");
P
Per Liden 已提交
2294 2295 2296 2297 2298
		goto out;
	}

	res = sock_register(&tipc_family_ops);
	if (res) {
2299
		pr_err("Failed to register TIPC socket type\n");
P
Per Liden 已提交
2300 2301 2302 2303 2304 2305 2306 2307
		proto_unregister(&tipc_proto);
		goto out;
	}
 out:
	return res;
}

/**
2308
 * tipc_socket_stop - stop TIPC socket interface
P
Per Liden 已提交
2309
 */
2310
void tipc_socket_stop(void)
P
Per Liden 已提交
2311 2312 2313 2314
{
	sock_unregister(tipc_family_ops.family);
	proto_unregister(&tipc_proto);
}