1 /* ATM ioctl handling */ 2 3 /* Written 1995-2000 by Werner Almesberger, EPFL LRC/ICA */ 4 /* 2003 John Levon <levon@movementarian.org> */ 5 6 #define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__ 7 8 #include <linux/module.h> 9 #include <linux/kmod.h> 10 #include <linux/net.h> /* struct socket, struct proto_ops */ 11 #include <linux/atm.h> /* ATM stuff */ 12 #include <linux/atmdev.h> 13 #include <linux/atmclip.h> /* CLIP_*ENCAP */ 14 #include <linux/atmarp.h> /* manifest constants */ 15 #include <linux/capability.h> 16 #include <linux/sonet.h> /* for ioctls */ 17 #include <linux/atmsvc.h> 18 #include <linux/atmmpc.h> 19 #include <net/atmclip.h> 20 #include <linux/atmlec.h> 21 #include <linux/mutex.h> 22 #include <asm/ioctls.h> 23 #include <net/compat.h> 24 25 #include "resources.h" 26 #include "signaling.h" /* for WAITING and sigd_attach */ 27 #include "common.h" 28 29 30 static DEFINE_MUTEX(ioctl_mutex); 31 static LIST_HEAD(ioctl_list); 32 33 34 void register_atm_ioctl(struct atm_ioctl *ioctl) 35 { 36 mutex_lock(&ioctl_mutex); 37 list_add_tail(&ioctl->list, &ioctl_list); 38 mutex_unlock(&ioctl_mutex); 39 } 40 EXPORT_SYMBOL(register_atm_ioctl); 41 42 void deregister_atm_ioctl(struct atm_ioctl *ioctl) 43 { 44 mutex_lock(&ioctl_mutex); 45 list_del(&ioctl->list); 46 mutex_unlock(&ioctl_mutex); 47 } 48 EXPORT_SYMBOL(deregister_atm_ioctl); 49 50 static int do_vcc_ioctl(struct socket *sock, unsigned int cmd, 51 unsigned long arg, int compat) 52 { 53 struct sock *sk = sock->sk; 54 struct atm_vcc *vcc; 55 int error; 56 struct list_head *pos; 57 void __user *argp = (void __user *)arg; 58 59 vcc = ATM_SD(sock); 60 switch (cmd) { 61 case SIOCOUTQ: 62 if (sock->state != SS_CONNECTED || 63 !test_bit(ATM_VF_READY, &vcc->flags)) { 64 error = -EINVAL; 65 goto done; 66 } 67 error = put_user(sk->sk_sndbuf - sk_wmem_alloc_get(sk), 68 (int __user *)argp) ? -EFAULT : 0; 69 goto done; 70 case SIOCINQ: 71 { 72 struct sk_buff *skb; 73 74 if (sock->state != SS_CONNECTED) { 75 error = -EINVAL; 76 goto done; 77 } 78 skb = skb_peek(&sk->sk_receive_queue); 79 error = put_user(skb ? skb->len : 0, 80 (int __user *)argp) ? -EFAULT : 0; 81 goto done; 82 } 83 case SIOCGSTAMP: /* borrowed from IP */ 84 #ifdef CONFIG_COMPAT 85 if (compat) 86 error = compat_sock_get_timestamp(sk, argp); 87 else 88 #endif 89 error = sock_get_timestamp(sk, argp); 90 goto done; 91 case SIOCGSTAMPNS: /* borrowed from IP */ 92 #ifdef CONFIG_COMPAT 93 if (compat) 94 error = compat_sock_get_timestampns(sk, argp); 95 else 96 #endif 97 error = sock_get_timestampns(sk, argp); 98 goto done; 99 case ATM_SETSC: 100 net_warn_ratelimited("ATM_SETSC is obsolete; used by %s:%d\n", 101 current->comm, task_pid_nr(current)); 102 error = 0; 103 goto done; 104 case ATMSIGD_CTRL: 105 if (!capable(CAP_NET_ADMIN)) { 106 error = -EPERM; 107 goto done; 108 } 109 /* 110 * The user/kernel protocol for exchanging signalling 111 * info uses kernel pointers as opaque references, 112 * so the holder of the file descriptor can scribble 113 * on the kernel... so we should make sure that we 114 * have the same privileges that /proc/kcore needs 115 */ 116 if (!capable(CAP_SYS_RAWIO)) { 117 error = -EPERM; 118 goto done; 119 } 120 #ifdef CONFIG_COMPAT 121 /* WTF? I don't even want to _think_ about making this 122 work for 32-bit userspace. TBH I don't really want 123 to think about it at all. dwmw2. */ 124 if (compat) { 125 net_warn_ratelimited("32-bit task cannot be atmsigd\n"); 126 error = -EINVAL; 127 goto done; 128 } 129 #endif 130 error = sigd_attach(vcc); 131 if (!error) 132 sock->state = SS_CONNECTED; 133 goto done; 134 case ATM_SETBACKEND: 135 case ATM_NEWBACKENDIF: 136 { 137 atm_backend_t backend; 138 error = get_user(backend, (atm_backend_t __user *)argp); 139 if (error) 140 goto done; 141 switch (backend) { 142 case ATM_BACKEND_PPP: 143 request_module("pppoatm"); 144 break; 145 case ATM_BACKEND_BR2684: 146 request_module("br2684"); 147 break; 148 } 149 break; 150 } 151 case ATMMPC_CTRL: 152 case ATMMPC_DATA: 153 request_module("mpoa"); 154 break; 155 case ATMARPD_CTRL: 156 request_module("clip"); 157 break; 158 case ATMLEC_CTRL: 159 request_module("lec"); 160 break; 161 } 162 163 error = -ENOIOCTLCMD; 164 165 mutex_lock(&ioctl_mutex); 166 list_for_each(pos, &ioctl_list) { 167 struct atm_ioctl *ic = list_entry(pos, struct atm_ioctl, list); 168 if (try_module_get(ic->owner)) { 169 error = ic->ioctl(sock, cmd, arg); 170 module_put(ic->owner); 171 if (error != -ENOIOCTLCMD) 172 break; 173 } 174 } 175 mutex_unlock(&ioctl_mutex); 176 177 if (error != -ENOIOCTLCMD) 178 goto done; 179 180 error = atm_dev_ioctl(cmd, argp, compat); 181 182 done: 183 return error; 184 } 185 186 int vcc_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg) 187 { 188 return do_vcc_ioctl(sock, cmd, arg, 0); 189 } 190 191 #ifdef CONFIG_COMPAT 192 /* 193 * FIXME: 194 * The compat_ioctl handling is duplicated, using both these conversion 195 * routines and the compat argument to the actual handlers. Both 196 * versions are somewhat incomplete and should be merged, e.g. by 197 * moving the ioctl number translation into the actual handlers and 198 * killing the conversion code. 199 * 200 * -arnd, November 2009 201 */ 202 #define ATM_GETLINKRATE32 _IOW('a', ATMIOC_ITF+1, struct compat_atmif_sioc) 203 #define ATM_GETNAMES32 _IOW('a', ATMIOC_ITF+3, struct compat_atm_iobuf) 204 #define ATM_GETTYPE32 _IOW('a', ATMIOC_ITF+4, struct compat_atmif_sioc) 205 #define ATM_GETESI32 _IOW('a', ATMIOC_ITF+5, struct compat_atmif_sioc) 206 #define ATM_GETADDR32 _IOW('a', ATMIOC_ITF+6, struct compat_atmif_sioc) 207 #define ATM_RSTADDR32 _IOW('a', ATMIOC_ITF+7, struct compat_atmif_sioc) 208 #define ATM_ADDADDR32 _IOW('a', ATMIOC_ITF+8, struct compat_atmif_sioc) 209 #define ATM_DELADDR32 _IOW('a', ATMIOC_ITF+9, struct compat_atmif_sioc) 210 #define ATM_GETCIRANGE32 _IOW('a', ATMIOC_ITF+10, struct compat_atmif_sioc) 211 #define ATM_SETCIRANGE32 _IOW('a', ATMIOC_ITF+11, struct compat_atmif_sioc) 212 #define ATM_SETESI32 _IOW('a', ATMIOC_ITF+12, struct compat_atmif_sioc) 213 #define ATM_SETESIF32 _IOW('a', ATMIOC_ITF+13, struct compat_atmif_sioc) 214 #define ATM_GETSTAT32 _IOW('a', ATMIOC_SARCOM+0, struct compat_atmif_sioc) 215 #define ATM_GETSTATZ32 _IOW('a', ATMIOC_SARCOM+1, struct compat_atmif_sioc) 216 #define ATM_GETLOOP32 _IOW('a', ATMIOC_SARCOM+2, struct compat_atmif_sioc) 217 #define ATM_SETLOOP32 _IOW('a', ATMIOC_SARCOM+3, struct compat_atmif_sioc) 218 #define ATM_QUERYLOOP32 _IOW('a', ATMIOC_SARCOM+4, struct compat_atmif_sioc) 219 220 static struct { 221 unsigned int cmd32; 222 unsigned int cmd; 223 } atm_ioctl_map[] = { 224 { ATM_GETLINKRATE32, ATM_GETLINKRATE }, 225 { ATM_GETNAMES32, ATM_GETNAMES }, 226 { ATM_GETTYPE32, ATM_GETTYPE }, 227 { ATM_GETESI32, ATM_GETESI }, 228 { ATM_GETADDR32, ATM_GETADDR }, 229 { ATM_RSTADDR32, ATM_RSTADDR }, 230 { ATM_ADDADDR32, ATM_ADDADDR }, 231 { ATM_DELADDR32, ATM_DELADDR }, 232 { ATM_GETCIRANGE32, ATM_GETCIRANGE }, 233 { ATM_SETCIRANGE32, ATM_SETCIRANGE }, 234 { ATM_SETESI32, ATM_SETESI }, 235 { ATM_SETESIF32, ATM_SETESIF }, 236 { ATM_GETSTAT32, ATM_GETSTAT }, 237 { ATM_GETSTATZ32, ATM_GETSTATZ }, 238 { ATM_GETLOOP32, ATM_GETLOOP }, 239 { ATM_SETLOOP32, ATM_SETLOOP }, 240 { ATM_QUERYLOOP32, ATM_QUERYLOOP }, 241 }; 242 243 #define NR_ATM_IOCTL ARRAY_SIZE(atm_ioctl_map) 244 245 static int do_atm_iobuf(struct socket *sock, unsigned int cmd, 246 unsigned long arg) 247 { 248 struct atm_iobuf __user *iobuf; 249 struct compat_atm_iobuf __user *iobuf32; 250 u32 data; 251 void __user *datap; 252 int len, err; 253 254 iobuf = compat_alloc_user_space(sizeof(*iobuf)); 255 iobuf32 = compat_ptr(arg); 256 257 if (get_user(len, &iobuf32->length) || 258 get_user(data, &iobuf32->buffer)) 259 return -EFAULT; 260 datap = compat_ptr(data); 261 if (put_user(len, &iobuf->length) || 262 put_user(datap, &iobuf->buffer)) 263 return -EFAULT; 264 265 err = do_vcc_ioctl(sock, cmd, (unsigned long) iobuf, 0); 266 267 if (!err) { 268 if (copy_in_user(&iobuf32->length, &iobuf->length, 269 sizeof(int))) 270 err = -EFAULT; 271 } 272 273 return err; 274 } 275 276 static int do_atmif_sioc(struct socket *sock, unsigned int cmd, 277 unsigned long arg) 278 { 279 struct atmif_sioc __user *sioc; 280 struct compat_atmif_sioc __user *sioc32; 281 u32 data; 282 void __user *datap; 283 int err; 284 285 sioc = compat_alloc_user_space(sizeof(*sioc)); 286 sioc32 = compat_ptr(arg); 287 288 if (copy_in_user(&sioc->number, &sioc32->number, 2 * sizeof(int)) || 289 get_user(data, &sioc32->arg)) 290 return -EFAULT; 291 datap = compat_ptr(data); 292 if (put_user(datap, &sioc->arg)) 293 return -EFAULT; 294 295 err = do_vcc_ioctl(sock, cmd, (unsigned long) sioc, 0); 296 297 if (!err) { 298 if (copy_in_user(&sioc32->length, &sioc->length, 299 sizeof(int))) 300 err = -EFAULT; 301 } 302 return err; 303 } 304 305 static int do_atm_ioctl(struct socket *sock, unsigned int cmd32, 306 unsigned long arg) 307 { 308 int i; 309 unsigned int cmd = 0; 310 311 switch (cmd32) { 312 case SONET_GETSTAT: 313 case SONET_GETSTATZ: 314 case SONET_GETDIAG: 315 case SONET_SETDIAG: 316 case SONET_CLRDIAG: 317 case SONET_SETFRAMING: 318 case SONET_GETFRAMING: 319 case SONET_GETFRSENSE: 320 return do_atmif_sioc(sock, cmd32, arg); 321 } 322 323 for (i = 0; i < NR_ATM_IOCTL; i++) { 324 if (cmd32 == atm_ioctl_map[i].cmd32) { 325 cmd = atm_ioctl_map[i].cmd; 326 break; 327 } 328 } 329 if (i == NR_ATM_IOCTL) 330 return -EINVAL; 331 332 switch (cmd) { 333 case ATM_GETNAMES: 334 return do_atm_iobuf(sock, cmd, arg); 335 336 case ATM_GETLINKRATE: 337 case ATM_GETTYPE: 338 case ATM_GETESI: 339 case ATM_GETADDR: 340 case ATM_RSTADDR: 341 case ATM_ADDADDR: 342 case ATM_DELADDR: 343 case ATM_GETCIRANGE: 344 case ATM_SETCIRANGE: 345 case ATM_SETESI: 346 case ATM_SETESIF: 347 case ATM_GETSTAT: 348 case ATM_GETSTATZ: 349 case ATM_GETLOOP: 350 case ATM_SETLOOP: 351 case ATM_QUERYLOOP: 352 return do_atmif_sioc(sock, cmd, arg); 353 } 354 355 return -EINVAL; 356 } 357 358 int vcc_compat_ioctl(struct socket *sock, unsigned int cmd, 359 unsigned long arg) 360 { 361 int ret; 362 363 ret = do_vcc_ioctl(sock, cmd, arg, 1); 364 if (ret != -ENOIOCTLCMD) 365 return ret; 366 367 return do_atm_ioctl(sock, cmd, arg); 368 } 369 #endif 370