xref: /OK3568_Linux_fs/kernel/net/llc/llc_sap.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun /*
2*4882a593Smuzhiyun  * llc_sap.c - driver routines for SAP component.
3*4882a593Smuzhiyun  *
4*4882a593Smuzhiyun  * Copyright (c) 1997 by Procom Technology, Inc.
5*4882a593Smuzhiyun  * 		 2001-2003 by Arnaldo Carvalho de Melo <acme@conectiva.com.br>
6*4882a593Smuzhiyun  *
7*4882a593Smuzhiyun  * This program can be redistributed or modified under the terms of the
8*4882a593Smuzhiyun  * GNU General Public License as published by the Free Software Foundation.
9*4882a593Smuzhiyun  * This program is distributed without any warranty or implied warranty
10*4882a593Smuzhiyun  * of merchantability or fitness for a particular purpose.
11*4882a593Smuzhiyun  *
12*4882a593Smuzhiyun  * See the GNU General Public License for more details.
13*4882a593Smuzhiyun  */
14*4882a593Smuzhiyun 
15*4882a593Smuzhiyun #include <net/llc.h>
16*4882a593Smuzhiyun #include <net/llc_if.h>
17*4882a593Smuzhiyun #include <net/llc_conn.h>
18*4882a593Smuzhiyun #include <net/llc_pdu.h>
19*4882a593Smuzhiyun #include <net/llc_sap.h>
20*4882a593Smuzhiyun #include <net/llc_s_ac.h>
21*4882a593Smuzhiyun #include <net/llc_s_ev.h>
22*4882a593Smuzhiyun #include <net/llc_s_st.h>
23*4882a593Smuzhiyun #include <net/sock.h>
24*4882a593Smuzhiyun #include <net/tcp_states.h>
25*4882a593Smuzhiyun #include <linux/llc.h>
26*4882a593Smuzhiyun #include <linux/slab.h>
27*4882a593Smuzhiyun 
llc_mac_header_len(unsigned short devtype)28*4882a593Smuzhiyun static int llc_mac_header_len(unsigned short devtype)
29*4882a593Smuzhiyun {
30*4882a593Smuzhiyun 	switch (devtype) {
31*4882a593Smuzhiyun 	case ARPHRD_ETHER:
32*4882a593Smuzhiyun 	case ARPHRD_LOOPBACK:
33*4882a593Smuzhiyun 		return sizeof(struct ethhdr);
34*4882a593Smuzhiyun 	}
35*4882a593Smuzhiyun 	return 0;
36*4882a593Smuzhiyun }
37*4882a593Smuzhiyun 
38*4882a593Smuzhiyun /**
39*4882a593Smuzhiyun  *	llc_alloc_frame - allocates sk_buff for frame
40*4882a593Smuzhiyun  *	@sk:  socket to allocate frame to
41*4882a593Smuzhiyun  *	@dev: network device this skb will be sent over
42*4882a593Smuzhiyun  *	@type: pdu type to allocate
43*4882a593Smuzhiyun  *	@data_size: data size to allocate
44*4882a593Smuzhiyun  *
45*4882a593Smuzhiyun  *	Allocates an sk_buff for frame and initializes sk_buff fields.
46*4882a593Smuzhiyun  *	Returns allocated skb or %NULL when out of memory.
47*4882a593Smuzhiyun  */
llc_alloc_frame(struct sock * sk,struct net_device * dev,u8 type,u32 data_size)48*4882a593Smuzhiyun struct sk_buff *llc_alloc_frame(struct sock *sk, struct net_device *dev,
49*4882a593Smuzhiyun 				u8 type, u32 data_size)
50*4882a593Smuzhiyun {
51*4882a593Smuzhiyun 	int hlen = type == LLC_PDU_TYPE_U ? 3 : 4;
52*4882a593Smuzhiyun 	struct sk_buff *skb;
53*4882a593Smuzhiyun 
54*4882a593Smuzhiyun 	hlen += llc_mac_header_len(dev->type);
55*4882a593Smuzhiyun 	skb = alloc_skb(hlen + data_size, GFP_ATOMIC);
56*4882a593Smuzhiyun 
57*4882a593Smuzhiyun 	if (skb) {
58*4882a593Smuzhiyun 		skb_reset_mac_header(skb);
59*4882a593Smuzhiyun 		skb_reserve(skb, hlen);
60*4882a593Smuzhiyun 		skb_reset_network_header(skb);
61*4882a593Smuzhiyun 		skb_reset_transport_header(skb);
62*4882a593Smuzhiyun 		skb->protocol = htons(ETH_P_802_2);
63*4882a593Smuzhiyun 		skb->dev      = dev;
64*4882a593Smuzhiyun 		if (sk != NULL)
65*4882a593Smuzhiyun 			skb_set_owner_w(skb, sk);
66*4882a593Smuzhiyun 	}
67*4882a593Smuzhiyun 	return skb;
68*4882a593Smuzhiyun }
69*4882a593Smuzhiyun 
llc_save_primitive(struct sock * sk,struct sk_buff * skb,u8 prim)70*4882a593Smuzhiyun void llc_save_primitive(struct sock *sk, struct sk_buff *skb, u8 prim)
71*4882a593Smuzhiyun {
72*4882a593Smuzhiyun 	struct sockaddr_llc *addr;
73*4882a593Smuzhiyun 
74*4882a593Smuzhiyun        /* save primitive for use by the user. */
75*4882a593Smuzhiyun 	addr		  = llc_ui_skb_cb(skb);
76*4882a593Smuzhiyun 
77*4882a593Smuzhiyun 	memset(addr, 0, sizeof(*addr));
78*4882a593Smuzhiyun 	addr->sllc_family = sk->sk_family;
79*4882a593Smuzhiyun 	addr->sllc_arphrd = skb->dev->type;
80*4882a593Smuzhiyun 	addr->sllc_test   = prim == LLC_TEST_PRIM;
81*4882a593Smuzhiyun 	addr->sllc_xid    = prim == LLC_XID_PRIM;
82*4882a593Smuzhiyun 	addr->sllc_ua     = prim == LLC_DATAUNIT_PRIM;
83*4882a593Smuzhiyun 	llc_pdu_decode_sa(skb, addr->sllc_mac);
84*4882a593Smuzhiyun 	llc_pdu_decode_ssap(skb, &addr->sllc_sap);
85*4882a593Smuzhiyun }
86*4882a593Smuzhiyun 
87*4882a593Smuzhiyun /**
88*4882a593Smuzhiyun  *	llc_sap_rtn_pdu - Informs upper layer on rx of an UI, XID or TEST pdu.
89*4882a593Smuzhiyun  *	@sap: pointer to SAP
90*4882a593Smuzhiyun  *	@skb: received pdu
91*4882a593Smuzhiyun  */
llc_sap_rtn_pdu(struct llc_sap * sap,struct sk_buff * skb)92*4882a593Smuzhiyun void llc_sap_rtn_pdu(struct llc_sap *sap, struct sk_buff *skb)
93*4882a593Smuzhiyun {
94*4882a593Smuzhiyun 	struct llc_sap_state_ev *ev = llc_sap_ev(skb);
95*4882a593Smuzhiyun 	struct llc_pdu_un *pdu = llc_pdu_un_hdr(skb);
96*4882a593Smuzhiyun 
97*4882a593Smuzhiyun 	switch (LLC_U_PDU_RSP(pdu)) {
98*4882a593Smuzhiyun 	case LLC_1_PDU_CMD_TEST:
99*4882a593Smuzhiyun 		ev->prim = LLC_TEST_PRIM;	break;
100*4882a593Smuzhiyun 	case LLC_1_PDU_CMD_XID:
101*4882a593Smuzhiyun 		ev->prim = LLC_XID_PRIM;	break;
102*4882a593Smuzhiyun 	case LLC_1_PDU_CMD_UI:
103*4882a593Smuzhiyun 		ev->prim = LLC_DATAUNIT_PRIM;	break;
104*4882a593Smuzhiyun 	}
105*4882a593Smuzhiyun 	ev->ind_cfm_flag = LLC_IND;
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun 
108*4882a593Smuzhiyun /**
109*4882a593Smuzhiyun  *	llc_find_sap_trans - finds transition for event
110*4882a593Smuzhiyun  *	@sap: pointer to SAP
111*4882a593Smuzhiyun  *	@skb: happened event
112*4882a593Smuzhiyun  *
113*4882a593Smuzhiyun  *	This function finds transition that matches with happened event.
114*4882a593Smuzhiyun  *	Returns the pointer to found transition on success or %NULL for
115*4882a593Smuzhiyun  *	failure.
116*4882a593Smuzhiyun  */
llc_find_sap_trans(struct llc_sap * sap,struct sk_buff * skb)117*4882a593Smuzhiyun static struct llc_sap_state_trans *llc_find_sap_trans(struct llc_sap *sap,
118*4882a593Smuzhiyun 						      struct sk_buff *skb)
119*4882a593Smuzhiyun {
120*4882a593Smuzhiyun 	int i = 0;
121*4882a593Smuzhiyun 	struct llc_sap_state_trans *rc = NULL;
122*4882a593Smuzhiyun 	struct llc_sap_state_trans **next_trans;
123*4882a593Smuzhiyun 	struct llc_sap_state *curr_state = &llc_sap_state_table[sap->state - 1];
124*4882a593Smuzhiyun 	/*
125*4882a593Smuzhiyun 	 * Search thru events for this state until list exhausted or until
126*4882a593Smuzhiyun 	 * its obvious the event is not valid for the current state
127*4882a593Smuzhiyun 	 */
128*4882a593Smuzhiyun 	for (next_trans = curr_state->transitions; next_trans[i]->ev; i++)
129*4882a593Smuzhiyun 		if (!next_trans[i]->ev(sap, skb)) {
130*4882a593Smuzhiyun 			rc = next_trans[i]; /* got event match; return it */
131*4882a593Smuzhiyun 			break;
132*4882a593Smuzhiyun 		}
133*4882a593Smuzhiyun 	return rc;
134*4882a593Smuzhiyun }
135*4882a593Smuzhiyun 
136*4882a593Smuzhiyun /**
137*4882a593Smuzhiyun  *	llc_exec_sap_trans_actions - execute actions related to event
138*4882a593Smuzhiyun  *	@sap: pointer to SAP
139*4882a593Smuzhiyun  *	@trans: pointer to transition that it's actions must be performed
140*4882a593Smuzhiyun  *	@skb: happened event.
141*4882a593Smuzhiyun  *
142*4882a593Smuzhiyun  *	This function executes actions that is related to happened event.
143*4882a593Smuzhiyun  *	Returns 0 for success and 1 for failure of at least one action.
144*4882a593Smuzhiyun  */
llc_exec_sap_trans_actions(struct llc_sap * sap,struct llc_sap_state_trans * trans,struct sk_buff * skb)145*4882a593Smuzhiyun static int llc_exec_sap_trans_actions(struct llc_sap *sap,
146*4882a593Smuzhiyun 				      struct llc_sap_state_trans *trans,
147*4882a593Smuzhiyun 				      struct sk_buff *skb)
148*4882a593Smuzhiyun {
149*4882a593Smuzhiyun 	int rc = 0;
150*4882a593Smuzhiyun 	const llc_sap_action_t *next_action = trans->ev_actions;
151*4882a593Smuzhiyun 
152*4882a593Smuzhiyun 	for (; next_action && *next_action; next_action++)
153*4882a593Smuzhiyun 		if ((*next_action)(sap, skb))
154*4882a593Smuzhiyun 			rc = 1;
155*4882a593Smuzhiyun 	return rc;
156*4882a593Smuzhiyun }
157*4882a593Smuzhiyun 
158*4882a593Smuzhiyun /**
159*4882a593Smuzhiyun  *	llc_sap_next_state - finds transition, execs actions & change SAP state
160*4882a593Smuzhiyun  *	@sap: pointer to SAP
161*4882a593Smuzhiyun  *	@skb: happened event
162*4882a593Smuzhiyun  *
163*4882a593Smuzhiyun  *	This function finds transition that matches with happened event, then
164*4882a593Smuzhiyun  *	executes related actions and finally changes state of SAP. It returns
165*4882a593Smuzhiyun  *	0 on success and 1 for failure.
166*4882a593Smuzhiyun  */
llc_sap_next_state(struct llc_sap * sap,struct sk_buff * skb)167*4882a593Smuzhiyun static int llc_sap_next_state(struct llc_sap *sap, struct sk_buff *skb)
168*4882a593Smuzhiyun {
169*4882a593Smuzhiyun 	int rc = 1;
170*4882a593Smuzhiyun 	struct llc_sap_state_trans *trans;
171*4882a593Smuzhiyun 
172*4882a593Smuzhiyun 	if (sap->state > LLC_NR_SAP_STATES)
173*4882a593Smuzhiyun 		goto out;
174*4882a593Smuzhiyun 	trans = llc_find_sap_trans(sap, skb);
175*4882a593Smuzhiyun 	if (!trans)
176*4882a593Smuzhiyun 		goto out;
177*4882a593Smuzhiyun 	/*
178*4882a593Smuzhiyun 	 * Got the state to which we next transition; perform the actions
179*4882a593Smuzhiyun 	 * associated with this transition before actually transitioning to the
180*4882a593Smuzhiyun 	 * next state
181*4882a593Smuzhiyun 	 */
182*4882a593Smuzhiyun 	rc = llc_exec_sap_trans_actions(sap, trans, skb);
183*4882a593Smuzhiyun 	if (rc)
184*4882a593Smuzhiyun 		goto out;
185*4882a593Smuzhiyun 	/*
186*4882a593Smuzhiyun 	 * Transition SAP to next state if all actions execute successfully
187*4882a593Smuzhiyun 	 */
188*4882a593Smuzhiyun 	sap->state = trans->next_state;
189*4882a593Smuzhiyun out:
190*4882a593Smuzhiyun 	return rc;
191*4882a593Smuzhiyun }
192*4882a593Smuzhiyun 
193*4882a593Smuzhiyun /**
194*4882a593Smuzhiyun  *	llc_sap_state_process - sends event to SAP state machine
195*4882a593Smuzhiyun  *	@sap: sap to use
196*4882a593Smuzhiyun  *	@skb: pointer to occurred event
197*4882a593Smuzhiyun  *
198*4882a593Smuzhiyun  *	After executing actions of the event, upper layer will be indicated
199*4882a593Smuzhiyun  *	if needed(on receiving an UI frame). sk can be null for the
200*4882a593Smuzhiyun  *	datalink_proto case.
201*4882a593Smuzhiyun  *
202*4882a593Smuzhiyun  *	This function always consumes a reference to the skb.
203*4882a593Smuzhiyun  */
llc_sap_state_process(struct llc_sap * sap,struct sk_buff * skb)204*4882a593Smuzhiyun static void llc_sap_state_process(struct llc_sap *sap, struct sk_buff *skb)
205*4882a593Smuzhiyun {
206*4882a593Smuzhiyun 	struct llc_sap_state_ev *ev = llc_sap_ev(skb);
207*4882a593Smuzhiyun 
208*4882a593Smuzhiyun 	ev->ind_cfm_flag = 0;
209*4882a593Smuzhiyun 	llc_sap_next_state(sap, skb);
210*4882a593Smuzhiyun 
211*4882a593Smuzhiyun 	if (ev->ind_cfm_flag == LLC_IND && skb->sk->sk_state != TCP_LISTEN) {
212*4882a593Smuzhiyun 		llc_save_primitive(skb->sk, skb, ev->prim);
213*4882a593Smuzhiyun 
214*4882a593Smuzhiyun 		/* queue skb to the user. */
215*4882a593Smuzhiyun 		if (sock_queue_rcv_skb(skb->sk, skb) == 0)
216*4882a593Smuzhiyun 			return;
217*4882a593Smuzhiyun 	}
218*4882a593Smuzhiyun 	kfree_skb(skb);
219*4882a593Smuzhiyun }
220*4882a593Smuzhiyun 
221*4882a593Smuzhiyun /**
222*4882a593Smuzhiyun  *	llc_build_and_send_test_pkt - TEST interface for upper layers.
223*4882a593Smuzhiyun  *	@sap: sap to use
224*4882a593Smuzhiyun  *	@skb: packet to send
225*4882a593Smuzhiyun  *	@dmac: destination mac address
226*4882a593Smuzhiyun  *	@dsap: destination sap
227*4882a593Smuzhiyun  *
228*4882a593Smuzhiyun  *	This function is called when upper layer wants to send a TEST pdu.
229*4882a593Smuzhiyun  *	Returns 0 for success, 1 otherwise.
230*4882a593Smuzhiyun  */
llc_build_and_send_test_pkt(struct llc_sap * sap,struct sk_buff * skb,u8 * dmac,u8 dsap)231*4882a593Smuzhiyun void llc_build_and_send_test_pkt(struct llc_sap *sap,
232*4882a593Smuzhiyun 				 struct sk_buff *skb, u8 *dmac, u8 dsap)
233*4882a593Smuzhiyun {
234*4882a593Smuzhiyun 	struct llc_sap_state_ev *ev = llc_sap_ev(skb);
235*4882a593Smuzhiyun 
236*4882a593Smuzhiyun 	ev->saddr.lsap = sap->laddr.lsap;
237*4882a593Smuzhiyun 	ev->daddr.lsap = dsap;
238*4882a593Smuzhiyun 	memcpy(ev->saddr.mac, skb->dev->dev_addr, IFHWADDRLEN);
239*4882a593Smuzhiyun 	memcpy(ev->daddr.mac, dmac, IFHWADDRLEN);
240*4882a593Smuzhiyun 
241*4882a593Smuzhiyun 	ev->type      = LLC_SAP_EV_TYPE_PRIM;
242*4882a593Smuzhiyun 	ev->prim      = LLC_TEST_PRIM;
243*4882a593Smuzhiyun 	ev->prim_type = LLC_PRIM_TYPE_REQ;
244*4882a593Smuzhiyun 	llc_sap_state_process(sap, skb);
245*4882a593Smuzhiyun }
246*4882a593Smuzhiyun 
247*4882a593Smuzhiyun /**
248*4882a593Smuzhiyun  *	llc_build_and_send_xid_pkt - XID interface for upper layers
249*4882a593Smuzhiyun  *	@sap: sap to use
250*4882a593Smuzhiyun  *	@skb: packet to send
251*4882a593Smuzhiyun  *	@dmac: destination mac address
252*4882a593Smuzhiyun  *	@dsap: destination sap
253*4882a593Smuzhiyun  *
254*4882a593Smuzhiyun  *	This function is called when upper layer wants to send a XID pdu.
255*4882a593Smuzhiyun  *	Returns 0 for success, 1 otherwise.
256*4882a593Smuzhiyun  */
llc_build_and_send_xid_pkt(struct llc_sap * sap,struct sk_buff * skb,u8 * dmac,u8 dsap)257*4882a593Smuzhiyun void llc_build_and_send_xid_pkt(struct llc_sap *sap, struct sk_buff *skb,
258*4882a593Smuzhiyun 				u8 *dmac, u8 dsap)
259*4882a593Smuzhiyun {
260*4882a593Smuzhiyun 	struct llc_sap_state_ev *ev = llc_sap_ev(skb);
261*4882a593Smuzhiyun 
262*4882a593Smuzhiyun 	ev->saddr.lsap = sap->laddr.lsap;
263*4882a593Smuzhiyun 	ev->daddr.lsap = dsap;
264*4882a593Smuzhiyun 	memcpy(ev->saddr.mac, skb->dev->dev_addr, IFHWADDRLEN);
265*4882a593Smuzhiyun 	memcpy(ev->daddr.mac, dmac, IFHWADDRLEN);
266*4882a593Smuzhiyun 
267*4882a593Smuzhiyun 	ev->type      = LLC_SAP_EV_TYPE_PRIM;
268*4882a593Smuzhiyun 	ev->prim      = LLC_XID_PRIM;
269*4882a593Smuzhiyun 	ev->prim_type = LLC_PRIM_TYPE_REQ;
270*4882a593Smuzhiyun 	llc_sap_state_process(sap, skb);
271*4882a593Smuzhiyun }
272*4882a593Smuzhiyun 
273*4882a593Smuzhiyun /**
274*4882a593Smuzhiyun  *	llc_sap_rcv - sends received pdus to the sap state machine
275*4882a593Smuzhiyun  *	@sap: current sap component structure.
276*4882a593Smuzhiyun  *	@skb: received frame.
277*4882a593Smuzhiyun  *	@sk:  socket to associate to frame
278*4882a593Smuzhiyun  *
279*4882a593Smuzhiyun  *	Sends received pdus to the sap state machine.
280*4882a593Smuzhiyun  */
llc_sap_rcv(struct llc_sap * sap,struct sk_buff * skb,struct sock * sk)281*4882a593Smuzhiyun static void llc_sap_rcv(struct llc_sap *sap, struct sk_buff *skb,
282*4882a593Smuzhiyun 			struct sock *sk)
283*4882a593Smuzhiyun {
284*4882a593Smuzhiyun 	struct llc_sap_state_ev *ev = llc_sap_ev(skb);
285*4882a593Smuzhiyun 
286*4882a593Smuzhiyun 	ev->type   = LLC_SAP_EV_TYPE_PDU;
287*4882a593Smuzhiyun 	ev->reason = 0;
288*4882a593Smuzhiyun 	skb_orphan(skb);
289*4882a593Smuzhiyun 	sock_hold(sk);
290*4882a593Smuzhiyun 	skb->sk = sk;
291*4882a593Smuzhiyun 	skb->destructor = sock_efree;
292*4882a593Smuzhiyun 	llc_sap_state_process(sap, skb);
293*4882a593Smuzhiyun }
294*4882a593Smuzhiyun 
llc_dgram_match(const struct llc_sap * sap,const struct llc_addr * laddr,const struct sock * sk)295*4882a593Smuzhiyun static inline bool llc_dgram_match(const struct llc_sap *sap,
296*4882a593Smuzhiyun 				   const struct llc_addr *laddr,
297*4882a593Smuzhiyun 				   const struct sock *sk)
298*4882a593Smuzhiyun {
299*4882a593Smuzhiyun      struct llc_sock *llc = llc_sk(sk);
300*4882a593Smuzhiyun 
301*4882a593Smuzhiyun      return sk->sk_type == SOCK_DGRAM &&
302*4882a593Smuzhiyun 	  llc->laddr.lsap == laddr->lsap &&
303*4882a593Smuzhiyun 	  ether_addr_equal(llc->laddr.mac, laddr->mac);
304*4882a593Smuzhiyun }
305*4882a593Smuzhiyun 
306*4882a593Smuzhiyun /**
307*4882a593Smuzhiyun  *	llc_lookup_dgram - Finds dgram socket for the local sap/mac
308*4882a593Smuzhiyun  *	@sap: SAP
309*4882a593Smuzhiyun  *	@laddr: address of local LLC (MAC + SAP)
310*4882a593Smuzhiyun  *
311*4882a593Smuzhiyun  *	Search socket list of the SAP and finds connection using the local
312*4882a593Smuzhiyun  *	mac, and local sap. Returns pointer for socket found, %NULL otherwise.
313*4882a593Smuzhiyun  */
llc_lookup_dgram(struct llc_sap * sap,const struct llc_addr * laddr)314*4882a593Smuzhiyun static struct sock *llc_lookup_dgram(struct llc_sap *sap,
315*4882a593Smuzhiyun 				     const struct llc_addr *laddr)
316*4882a593Smuzhiyun {
317*4882a593Smuzhiyun 	struct sock *rc;
318*4882a593Smuzhiyun 	struct hlist_nulls_node *node;
319*4882a593Smuzhiyun 	int slot = llc_sk_laddr_hashfn(sap, laddr);
320*4882a593Smuzhiyun 	struct hlist_nulls_head *laddr_hb = &sap->sk_laddr_hash[slot];
321*4882a593Smuzhiyun 
322*4882a593Smuzhiyun 	rcu_read_lock_bh();
323*4882a593Smuzhiyun again:
324*4882a593Smuzhiyun 	sk_nulls_for_each_rcu(rc, node, laddr_hb) {
325*4882a593Smuzhiyun 		if (llc_dgram_match(sap, laddr, rc)) {
326*4882a593Smuzhiyun 			/* Extra checks required by SLAB_TYPESAFE_BY_RCU */
327*4882a593Smuzhiyun 			if (unlikely(!refcount_inc_not_zero(&rc->sk_refcnt)))
328*4882a593Smuzhiyun 				goto again;
329*4882a593Smuzhiyun 			if (unlikely(llc_sk(rc)->sap != sap ||
330*4882a593Smuzhiyun 				     !llc_dgram_match(sap, laddr, rc))) {
331*4882a593Smuzhiyun 				sock_put(rc);
332*4882a593Smuzhiyun 				continue;
333*4882a593Smuzhiyun 			}
334*4882a593Smuzhiyun 			goto found;
335*4882a593Smuzhiyun 		}
336*4882a593Smuzhiyun 	}
337*4882a593Smuzhiyun 	rc = NULL;
338*4882a593Smuzhiyun 	/*
339*4882a593Smuzhiyun 	 * if the nulls value we got at the end of this lookup is
340*4882a593Smuzhiyun 	 * not the expected one, we must restart lookup.
341*4882a593Smuzhiyun 	 * We probably met an item that was moved to another chain.
342*4882a593Smuzhiyun 	 */
343*4882a593Smuzhiyun 	if (unlikely(get_nulls_value(node) != slot))
344*4882a593Smuzhiyun 		goto again;
345*4882a593Smuzhiyun found:
346*4882a593Smuzhiyun 	rcu_read_unlock_bh();
347*4882a593Smuzhiyun 	return rc;
348*4882a593Smuzhiyun }
349*4882a593Smuzhiyun 
llc_mcast_match(const struct llc_sap * sap,const struct llc_addr * laddr,const struct sk_buff * skb,const struct sock * sk)350*4882a593Smuzhiyun static inline bool llc_mcast_match(const struct llc_sap *sap,
351*4882a593Smuzhiyun 				   const struct llc_addr *laddr,
352*4882a593Smuzhiyun 				   const struct sk_buff *skb,
353*4882a593Smuzhiyun 				   const struct sock *sk)
354*4882a593Smuzhiyun {
355*4882a593Smuzhiyun      struct llc_sock *llc = llc_sk(sk);
356*4882a593Smuzhiyun 
357*4882a593Smuzhiyun      return sk->sk_type == SOCK_DGRAM &&
358*4882a593Smuzhiyun 	  llc->laddr.lsap == laddr->lsap &&
359*4882a593Smuzhiyun 	  llc->dev == skb->dev;
360*4882a593Smuzhiyun }
361*4882a593Smuzhiyun 
llc_do_mcast(struct llc_sap * sap,struct sk_buff * skb,struct sock ** stack,int count)362*4882a593Smuzhiyun static void llc_do_mcast(struct llc_sap *sap, struct sk_buff *skb,
363*4882a593Smuzhiyun 			 struct sock **stack, int count)
364*4882a593Smuzhiyun {
365*4882a593Smuzhiyun 	struct sk_buff *skb1;
366*4882a593Smuzhiyun 	int i;
367*4882a593Smuzhiyun 
368*4882a593Smuzhiyun 	for (i = 0; i < count; i++) {
369*4882a593Smuzhiyun 		skb1 = skb_clone(skb, GFP_ATOMIC);
370*4882a593Smuzhiyun 		if (!skb1) {
371*4882a593Smuzhiyun 			sock_put(stack[i]);
372*4882a593Smuzhiyun 			continue;
373*4882a593Smuzhiyun 		}
374*4882a593Smuzhiyun 
375*4882a593Smuzhiyun 		llc_sap_rcv(sap, skb1, stack[i]);
376*4882a593Smuzhiyun 		sock_put(stack[i]);
377*4882a593Smuzhiyun 	}
378*4882a593Smuzhiyun }
379*4882a593Smuzhiyun 
380*4882a593Smuzhiyun /**
381*4882a593Smuzhiyun  * 	llc_sap_mcast - Deliver multicast PDU's to all matching datagram sockets.
382*4882a593Smuzhiyun  *	@sap: SAP
383*4882a593Smuzhiyun  *	@laddr: address of local LLC (MAC + SAP)
384*4882a593Smuzhiyun  *	@skb: PDU to deliver
385*4882a593Smuzhiyun  *
386*4882a593Smuzhiyun  *	Search socket list of the SAP and finds connections with same sap.
387*4882a593Smuzhiyun  *	Deliver clone to each.
388*4882a593Smuzhiyun  */
llc_sap_mcast(struct llc_sap * sap,const struct llc_addr * laddr,struct sk_buff * skb)389*4882a593Smuzhiyun static void llc_sap_mcast(struct llc_sap *sap,
390*4882a593Smuzhiyun 			  const struct llc_addr *laddr,
391*4882a593Smuzhiyun 			  struct sk_buff *skb)
392*4882a593Smuzhiyun {
393*4882a593Smuzhiyun 	int i = 0;
394*4882a593Smuzhiyun 	struct sock *sk;
395*4882a593Smuzhiyun 	struct sock *stack[256 / sizeof(struct sock *)];
396*4882a593Smuzhiyun 	struct llc_sock *llc;
397*4882a593Smuzhiyun 	struct hlist_head *dev_hb = llc_sk_dev_hash(sap, skb->dev->ifindex);
398*4882a593Smuzhiyun 
399*4882a593Smuzhiyun 	spin_lock_bh(&sap->sk_lock);
400*4882a593Smuzhiyun 	hlist_for_each_entry(llc, dev_hb, dev_hash_node) {
401*4882a593Smuzhiyun 
402*4882a593Smuzhiyun 		sk = &llc->sk;
403*4882a593Smuzhiyun 
404*4882a593Smuzhiyun 		if (!llc_mcast_match(sap, laddr, skb, sk))
405*4882a593Smuzhiyun 			continue;
406*4882a593Smuzhiyun 
407*4882a593Smuzhiyun 		sock_hold(sk);
408*4882a593Smuzhiyun 		if (i < ARRAY_SIZE(stack))
409*4882a593Smuzhiyun 			stack[i++] = sk;
410*4882a593Smuzhiyun 		else {
411*4882a593Smuzhiyun 			llc_do_mcast(sap, skb, stack, i);
412*4882a593Smuzhiyun 			i = 0;
413*4882a593Smuzhiyun 		}
414*4882a593Smuzhiyun 	}
415*4882a593Smuzhiyun 	spin_unlock_bh(&sap->sk_lock);
416*4882a593Smuzhiyun 
417*4882a593Smuzhiyun 	llc_do_mcast(sap, skb, stack, i);
418*4882a593Smuzhiyun }
419*4882a593Smuzhiyun 
420*4882a593Smuzhiyun 
llc_sap_handler(struct llc_sap * sap,struct sk_buff * skb)421*4882a593Smuzhiyun void llc_sap_handler(struct llc_sap *sap, struct sk_buff *skb)
422*4882a593Smuzhiyun {
423*4882a593Smuzhiyun 	struct llc_addr laddr;
424*4882a593Smuzhiyun 
425*4882a593Smuzhiyun 	llc_pdu_decode_da(skb, laddr.mac);
426*4882a593Smuzhiyun 	llc_pdu_decode_dsap(skb, &laddr.lsap);
427*4882a593Smuzhiyun 
428*4882a593Smuzhiyun 	if (is_multicast_ether_addr(laddr.mac)) {
429*4882a593Smuzhiyun 		llc_sap_mcast(sap, &laddr, skb);
430*4882a593Smuzhiyun 		kfree_skb(skb);
431*4882a593Smuzhiyun 	} else {
432*4882a593Smuzhiyun 		struct sock *sk = llc_lookup_dgram(sap, &laddr);
433*4882a593Smuzhiyun 		if (sk) {
434*4882a593Smuzhiyun 			llc_sap_rcv(sap, skb, sk);
435*4882a593Smuzhiyun 			sock_put(sk);
436*4882a593Smuzhiyun 		} else
437*4882a593Smuzhiyun 			kfree_skb(skb);
438*4882a593Smuzhiyun 	}
439*4882a593Smuzhiyun }
440