/*
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
 */
#include <linux/errno.h>
#include <linux/types.h>
#include <linux/socket.h>
#include <linux/in.h>
#include <linux/kernel.h>
#include <linux/timer.h>
#include <linux/string.h>
#include <linux/sockios.h>
#include <linux/net.h>
#include <linux/gfp.h>
#include <net/ax25.h>
#include <linux/inet.h>
#include <linux/netdevice.h>
#include <linux/skbuff.h>
#include <net/sock.h>
#include <linux/fcntl.h>
#include <linux/mm.h>
#include <linux/interrupt.h>
#include <net/rose.h>

/*
 *	This procedure is passed a buffer descriptor for an iframe. It builds
 *	the rest of the control part of the frame and then writes it out.
 */
static void rose_send_iframe(struct sock *sk, struct sk_buff *skb)
{
	struct rose_sock *rose = rose_sk(sk);

	if (skb == NULL)
		return;

	skb->data[2] |= (rose->vr << 5) & 0xE0;
	skb->data[2] |= (rose->vs << 1) & 0x0E;

	rose_start_idletimer(sk);

	rose_transmit_link(skb, rose->neighbour);
}

void rose_kick(struct sock *sk)
{
	struct rose_sock *rose = rose_sk(sk);
	struct sk_buff *skb, *skbn;
	unsigned short start, end;

	if (rose->state != ROSE_STATE_3)
		return;

	if (rose->condition & ROSE_COND_PEER_RX_BUSY)
		return;

	if (!skb_peek(&sk->sk_write_queue))
		return;

	start = (skb_peek(&rose->ack_queue) == NULL) ? rose->va : rose->vs;
	end   = (rose->va + sysctl_rose_window_size) % ROSE_MODULUS;

	if (start == end)
		return;

	rose->vs = start;

	/*
	 * Transmit data until either we're out of data to send or
	 * the window is full.
	 */

	skb  = skb_dequeue(&sk->sk_write_queue);

	do {
		if ((skbn = skb_clone(skb, GFP_ATOMIC)) == NULL) {
			skb_queue_head(&sk->sk_write_queue, skb);
			break;
		}

		skb_set_owner_w(skbn, sk);

		/*
		 * Transmit the frame copy.
		 */
		rose_send_iframe(sk, skbn);

		rose->vs = (rose->vs + 1) % ROSE_MODULUS;

		/*
		 * Requeue the original data frame.
		 */
		skb_queue_tail(&rose->ack_queue, skb);

	} while (rose->vs != end &&
		 (skb = skb_dequeue(&sk->sk_write_queue)) != NULL);

	rose->vl         = rose->vr;
	rose->condition &= ~ROSE_COND_ACK_PENDING;

	rose_stop_timer(sk);
}

/*
 * The following routines are taken from page 170 of the 7th ARRL Computer
 * Networking Conference paper, as is the whole state machine.
 */

void rose_enquiry_response(struct sock *sk)
{
	struct rose_sock *rose = rose_sk(sk);

	if (rose->condition & ROSE_COND_OWN_RX_BUSY)
		rose_write_internal(sk, ROSE_RNR);
	else
		rose_write_internal(sk, ROSE_RR);

	rose->vl         = rose->vr;
	rose->condition &= ~ROSE_COND_ACK_PENDING;

	rose_stop_timer(sk);
}
value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/cgit.cgi/linux/net-next.git/commit/?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>root</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>drivers</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>usb</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/host?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>host</a>/<a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/host/ohci-q.c?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>ohci-q.c</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='h' value='nds-private-remove'/><input type='hidden' name='id' value='0b529f143e8baad441a5aac9ad55ec2434d8fb46'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Harsh Jain &lt;harsh@chelsio.com&gt;</td><td class='right'>2017-02-01 21:10:28 +0530</td></tr>
<tr><th>committer</th><td>Herbert Xu &lt;herbert@gondor.apana.org.au&gt;</td><td class='right'>2017-02-03 17:45:48 +0800</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/host/ohci-q.c?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>0b529f143e8baad441a5aac9ad55ec2434d8fb46</a> (<a href='/cgit.cgi/linux/net-next.git/patch/drivers/usb/host/ohci-q.c?id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/tree/?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>fd816e548e12745d4776ad0bd661bec142d3ea06</a> /<a href='/cgit.cgi/linux/net-next.git/tree/drivers/usb/host/ohci-q.c?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>drivers/usb/host/ohci-q.c</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/cgit.cgi/linux/net-next.git/commit/drivers/usb/host/ohci-q.c?h=nds-private-remove&amp;id=c26819900036f5b91608051a0fc7c76f6b4ffc7b'>c26819900036f5b91608051a0fc7c76f6b4ffc7b</a> (<a href='/cgit.cgi/linux/net-next.git/diff/drivers/usb/host/ohci-q.c?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46&amp;id2=c26819900036f5b91608051a0fc7c76f6b4ffc7b'>diff</a>)</td></tr></table>
<div class='commit-subject'>crypto: algif_aead - Fix kernel panic on list_del</div><div class='commit-msg'>Kernel panics when userspace program try to access AEAD interface.
Remove node from Linked List before freeing its memory.

Cc: &lt;stable@vger.kernel.org&gt;
Signed-off-by: Harsh Jain &lt;harsh@chelsio.com&gt;
Reviewed-by: Stephan Müller &lt;smueller@chronox.de&gt;
Signed-off-by: Herbert Xu &lt;herbert@gondor.apana.org.au&gt;
</div><div class='diffstat-header'><a href='/cgit.cgi/linux/net-next.git/diff/?h=nds-private-remove&amp;id=0b529f143e8baad441a5aac9ad55ec2434d8fb46'>Diffstat</a> (limited to 'drivers/usb/host/ohci-q.c')</div><table summary='diffstat' class='diffstat'>