]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blame - net/atm/ioctl.c
atm: move copyin from atm_getnames() into the caller
[mirror_ubuntu-jammy-kernel.git] / net / atm / ioctl.c
CommitLineData
b2441318 1// SPDX-License-Identifier: GPL-2.0
1da177e4
LT
2/* ATM ioctl handling */
3
4/* Written 1995-2000 by Werner Almesberger, EPFL LRC/ICA */
5/* 2003 John Levon <levon@movementarian.org> */
6
99824461 7#define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__
1da177e4 8
1da177e4
LT
9#include <linux/module.h>
10#include <linux/kmod.h>
11#include <linux/net.h> /* struct socket, struct proto_ops */
12#include <linux/atm.h> /* ATM stuff */
13#include <linux/atmdev.h>
14#include <linux/atmclip.h> /* CLIP_*ENCAP */
15#include <linux/atmarp.h> /* manifest constants */
4fc268d2 16#include <linux/capability.h>
1da177e4
LT
17#include <linux/sonet.h> /* for ioctls */
18#include <linux/atmsvc.h>
19#include <linux/atmmpc.h>
20#include <net/atmclip.h>
21#include <linux/atmlec.h>
4a3e2f71 22#include <linux/mutex.h>
1da177e4 23#include <asm/ioctls.h>
8865c418 24#include <net/compat.h>
1da177e4
LT
25
26#include "resources.h"
27#include "signaling.h" /* for WAITING and sigd_attach */
295098e9 28#include "common.h"
1da177e4
LT
29
30
4a3e2f71 31static DEFINE_MUTEX(ioctl_mutex);
1da177e4
LT
32static LIST_HEAD(ioctl_list);
33
34
35void register_atm_ioctl(struct atm_ioctl *ioctl)
36{
4a3e2f71 37 mutex_lock(&ioctl_mutex);
1da177e4 38 list_add_tail(&ioctl->list, &ioctl_list);
4a3e2f71 39 mutex_unlock(&ioctl_mutex);
1da177e4 40}
5ff7ef79 41EXPORT_SYMBOL(register_atm_ioctl);
1da177e4
LT
42
43void deregister_atm_ioctl(struct atm_ioctl *ioctl)
44{
4a3e2f71 45 mutex_lock(&ioctl_mutex);
1da177e4 46 list_del(&ioctl->list);
4a3e2f71 47 mutex_unlock(&ioctl_mutex);
1da177e4 48}
1da177e4
LT
49EXPORT_SYMBOL(deregister_atm_ioctl);
50
5ff7ef79
JP
51static int do_vcc_ioctl(struct socket *sock, unsigned int cmd,
52 unsigned long arg, int compat)
1da177e4
LT
53{
54 struct sock *sk = sock->sk;
55 struct atm_vcc *vcc;
56 int error;
5ff7ef79 57 struct list_head *pos;
1da177e4 58 void __user *argp = (void __user *)arg;
a3929484
AV
59 void __user *buf;
60 int __user *len;
1da177e4
LT
61
62 vcc = ATM_SD(sock);
63 switch (cmd) {
5ff7ef79
JP
64 case SIOCOUTQ:
65 if (sock->state != SS_CONNECTED ||
66 !test_bit(ATM_VF_READY, &vcc->flags)) {
67 error = -EINVAL;
68 goto done;
69 }
70 error = put_user(sk->sk_sndbuf - sk_wmem_alloc_get(sk),
71 (int __user *)argp) ? -EFAULT : 0;
72 goto done;
73 case SIOCINQ:
74 {
75 struct sk_buff *skb;
76
77 if (sock->state != SS_CONNECTED) {
78 error = -EINVAL;
1da177e4 79 goto done;
5ff7ef79
JP
80 }
81 skb = skb_peek(&sk->sk_receive_queue);
82 error = put_user(skb ? skb->len : 0,
83 (int __user *)argp) ? -EFAULT : 0;
84 goto done;
85 }
5ff7ef79 86 case ATM_SETSC:
e87cc472
JP
87 net_warn_ratelimited("ATM_SETSC is obsolete; used by %s:%d\n",
88 current->comm, task_pid_nr(current));
5ff7ef79
JP
89 error = 0;
90 goto done;
91 case ATMSIGD_CTRL:
92 if (!capable(CAP_NET_ADMIN)) {
93 error = -EPERM;
ae40eb1e 94 goto done;
5ff7ef79
JP
95 }
96 /*
97 * The user/kernel protocol for exchanging signalling
98 * info uses kernel pointers as opaque references,
99 * so the holder of the file descriptor can scribble
100 * on the kernel... so we should make sure that we
101 * have the same privileges that /proc/kcore needs
102 */
103 if (!capable(CAP_SYS_RAWIO)) {
104 error = -EPERM;
1da177e4 105 goto done;
5ff7ef79 106 }
8865c418 107#ifdef CONFIG_COMPAT
5ff7ef79
JP
108 /* WTF? I don't even want to _think_ about making this
109 work for 32-bit userspace. TBH I don't really want
110 to think about it at all. dwmw2. */
111 if (compat) {
e87cc472 112 net_warn_ratelimited("32-bit task cannot be atmsigd\n");
5ff7ef79
JP
113 error = -EINVAL;
114 goto done;
115 }
8865c418 116#endif
5ff7ef79
JP
117 error = sigd_attach(vcc);
118 if (!error)
119 sock->state = SS_CONNECTED;
120 goto done;
121 case ATM_SETBACKEND:
122 case ATM_NEWBACKENDIF:
123 {
124 atm_backend_t backend;
125 error = get_user(backend, (atm_backend_t __user *)argp);
126 if (error)
1da177e4 127 goto done;
5ff7ef79
JP
128 switch (backend) {
129 case ATM_BACKEND_PPP:
130 request_module("pppoatm");
e2c4b721 131 break;
5ff7ef79
JP
132 case ATM_BACKEND_BR2684:
133 request_module("br2684");
1da177e4 134 break;
5ff7ef79
JP
135 }
136 break;
137 }
138 case ATMMPC_CTRL:
139 case ATMMPC_DATA:
140 request_module("mpoa");
141 break;
142 case ATMARPD_CTRL:
143 request_module("clip");
144 break;
145 case ATMLEC_CTRL:
146 request_module("lec");
147 break;
1da177e4
LT
148 }
149
1da177e4
LT
150 error = -ENOIOCTLCMD;
151
4a3e2f71 152 mutex_lock(&ioctl_mutex);
1da177e4 153 list_for_each(pos, &ioctl_list) {
5ff7ef79 154 struct atm_ioctl *ic = list_entry(pos, struct atm_ioctl, list);
1da177e4
LT
155 if (try_module_get(ic->owner)) {
156 error = ic->ioctl(sock, cmd, arg);
157 module_put(ic->owner);
158 if (error != -ENOIOCTLCMD)
159 break;
160 }
161 }
4a3e2f71 162 mutex_unlock(&ioctl_mutex);
1da177e4
LT
163
164 if (error != -ENOIOCTLCMD)
165 goto done;
166
8c2348e3 167 if (cmd == ATM_GETNAMES) {
a3929484
AV
168 if (IS_ENABLED(CONFIG_COMPAT) && compat) {
169#ifdef CONFIG_COMPAT
170 struct compat_atm_iobuf __user *ciobuf = argp;
171 compat_uptr_t cbuf;
172 len = &ciobuf->length;
173 if (get_user(cbuf, &ciobuf->buffer))
174 return -EFAULT;
175 buf = compat_ptr(cbuf);
176#endif
177 } else {
178 struct atm_iobuf __user *iobuf = argp;
179 len = &iobuf->length;
180 if (get_user(buf, &iobuf->buffer))
181 return -EFAULT;
182 }
183 error = atm_getnames(buf, len);
8c2348e3
AV
184 } else {
185 error = atm_dev_ioctl(cmd, argp, compat);
186 }
1da177e4
LT
187
188done:
189 return error;
190}
8865c418 191
8865c418
DW
192int vcc_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
193{
194 return do_vcc_ioctl(sock, cmd, arg, 0);
195}
196
197#ifdef CONFIG_COMPAT
805003a4
AB
198/*
199 * FIXME:
200 * The compat_ioctl handling is duplicated, using both these conversion
201 * routines and the compat argument to the actual handlers. Both
202 * versions are somewhat incomplete and should be merged, e.g. by
203 * moving the ioctl number translation into the actual handlers and
204 * killing the conversion code.
205 *
206 * -arnd, November 2009
207 */
208#define ATM_GETLINKRATE32 _IOW('a', ATMIOC_ITF+1, struct compat_atmif_sioc)
209#define ATM_GETNAMES32 _IOW('a', ATMIOC_ITF+3, struct compat_atm_iobuf)
210#define ATM_GETTYPE32 _IOW('a', ATMIOC_ITF+4, struct compat_atmif_sioc)
211#define ATM_GETESI32 _IOW('a', ATMIOC_ITF+5, struct compat_atmif_sioc)
212#define ATM_GETADDR32 _IOW('a', ATMIOC_ITF+6, struct compat_atmif_sioc)
213#define ATM_RSTADDR32 _IOW('a', ATMIOC_ITF+7, struct compat_atmif_sioc)
214#define ATM_ADDADDR32 _IOW('a', ATMIOC_ITF+8, struct compat_atmif_sioc)
215#define ATM_DELADDR32 _IOW('a', ATMIOC_ITF+9, struct compat_atmif_sioc)
216#define ATM_GETCIRANGE32 _IOW('a', ATMIOC_ITF+10, struct compat_atmif_sioc)
217#define ATM_SETCIRANGE32 _IOW('a', ATMIOC_ITF+11, struct compat_atmif_sioc)
218#define ATM_SETESI32 _IOW('a', ATMIOC_ITF+12, struct compat_atmif_sioc)
219#define ATM_SETESIF32 _IOW('a', ATMIOC_ITF+13, struct compat_atmif_sioc)
220#define ATM_GETSTAT32 _IOW('a', ATMIOC_SARCOM+0, struct compat_atmif_sioc)
221#define ATM_GETSTATZ32 _IOW('a', ATMIOC_SARCOM+1, struct compat_atmif_sioc)
222#define ATM_GETLOOP32 _IOW('a', ATMIOC_SARCOM+2, struct compat_atmif_sioc)
223#define ATM_SETLOOP32 _IOW('a', ATMIOC_SARCOM+3, struct compat_atmif_sioc)
224#define ATM_QUERYLOOP32 _IOW('a', ATMIOC_SARCOM+4, struct compat_atmif_sioc)
225
226static struct {
227 unsigned int cmd32;
228 unsigned int cmd;
229} atm_ioctl_map[] = {
230 { ATM_GETLINKRATE32, ATM_GETLINKRATE },
231 { ATM_GETNAMES32, ATM_GETNAMES },
232 { ATM_GETTYPE32, ATM_GETTYPE },
233 { ATM_GETESI32, ATM_GETESI },
234 { ATM_GETADDR32, ATM_GETADDR },
235 { ATM_RSTADDR32, ATM_RSTADDR },
236 { ATM_ADDADDR32, ATM_ADDADDR },
237 { ATM_DELADDR32, ATM_DELADDR },
238 { ATM_GETCIRANGE32, ATM_GETCIRANGE },
239 { ATM_SETCIRANGE32, ATM_SETCIRANGE },
240 { ATM_SETESI32, ATM_SETESI },
241 { ATM_SETESIF32, ATM_SETESIF },
242 { ATM_GETSTAT32, ATM_GETSTAT },
243 { ATM_GETSTATZ32, ATM_GETSTATZ },
244 { ATM_GETLOOP32, ATM_GETLOOP },
245 { ATM_SETLOOP32, ATM_SETLOOP },
246 { ATM_QUERYLOOP32, ATM_QUERYLOOP },
247};
248
249#define NR_ATM_IOCTL ARRAY_SIZE(atm_ioctl_map)
250
251static int do_atm_iobuf(struct socket *sock, unsigned int cmd,
252 unsigned long arg)
253{
254 struct atm_iobuf __user *iobuf;
255 struct compat_atm_iobuf __user *iobuf32;
256 u32 data;
257 void __user *datap;
258 int len, err;
259
260 iobuf = compat_alloc_user_space(sizeof(*iobuf));
261 iobuf32 = compat_ptr(arg);
262
263 if (get_user(len, &iobuf32->length) ||
264 get_user(data, &iobuf32->buffer))
265 return -EFAULT;
266 datap = compat_ptr(data);
267 if (put_user(len, &iobuf->length) ||
268 put_user(datap, &iobuf->buffer))
269 return -EFAULT;
270
271 err = do_vcc_ioctl(sock, cmd, (unsigned long) iobuf, 0);
272
273 if (!err) {
274 if (copy_in_user(&iobuf32->length, &iobuf->length,
275 sizeof(int)))
276 err = -EFAULT;
277 }
278
279 return err;
280}
281
282static int do_atmif_sioc(struct socket *sock, unsigned int cmd,
283 unsigned long arg)
284{
285 struct atmif_sioc __user *sioc;
286 struct compat_atmif_sioc __user *sioc32;
287 u32 data;
288 void __user *datap;
289 int err;
290
291 sioc = compat_alloc_user_space(sizeof(*sioc));
292 sioc32 = compat_ptr(arg);
293
5ff7ef79
JP
294 if (copy_in_user(&sioc->number, &sioc32->number, 2 * sizeof(int)) ||
295 get_user(data, &sioc32->arg))
805003a4
AB
296 return -EFAULT;
297 datap = compat_ptr(data);
298 if (put_user(datap, &sioc->arg))
299 return -EFAULT;
300
301 err = do_vcc_ioctl(sock, cmd, (unsigned long) sioc, 0);
302
303 if (!err) {
304 if (copy_in_user(&sioc32->length, &sioc->length,
305 sizeof(int)))
306 err = -EFAULT;
307 }
308 return err;
309}
310
311static int do_atm_ioctl(struct socket *sock, unsigned int cmd32,
312 unsigned long arg)
313{
314 int i;
315 unsigned int cmd = 0;
316
317 switch (cmd32) {
318 case SONET_GETSTAT:
319 case SONET_GETSTATZ:
320 case SONET_GETDIAG:
321 case SONET_SETDIAG:
322 case SONET_CLRDIAG:
323 case SONET_SETFRAMING:
324 case SONET_GETFRAMING:
325 case SONET_GETFRSENSE:
326 return do_atmif_sioc(sock, cmd32, arg);
327 }
328
329 for (i = 0; i < NR_ATM_IOCTL; i++) {
330 if (cmd32 == atm_ioctl_map[i].cmd32) {
331 cmd = atm_ioctl_map[i].cmd;
332 break;
333 }
334 }
335 if (i == NR_ATM_IOCTL)
336 return -EINVAL;
337
338 switch (cmd) {
339 case ATM_GETNAMES:
340 return do_atm_iobuf(sock, cmd, arg);
341
342 case ATM_GETLINKRATE:
343 case ATM_GETTYPE:
344 case ATM_GETESI:
345 case ATM_GETADDR:
346 case ATM_RSTADDR:
347 case ATM_ADDADDR:
348 case ATM_DELADDR:
349 case ATM_GETCIRANGE:
350 case ATM_SETCIRANGE:
351 case ATM_SETESI:
352 case ATM_SETESIF:
353 case ATM_GETSTAT:
354 case ATM_GETSTATZ:
355 case ATM_GETLOOP:
356 case ATM_SETLOOP:
357 case ATM_QUERYLOOP:
358 return do_atmif_sioc(sock, cmd, arg);
359 }
360
361 return -EINVAL;
362}
363
364int vcc_compat_ioctl(struct socket *sock, unsigned int cmd,
365 unsigned long arg)
8865c418 366{
805003a4
AB
367 int ret;
368
369 ret = do_vcc_ioctl(sock, cmd, arg, 1);
370 if (ret != -ENOIOCTLCMD)
371 return ret;
372
373 return do_atm_ioctl(sock, cmd, arg);
8865c418
DW
374}
375#endif