Linux Audio

Check our new training course

Loading...
v5.9
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* connection-level event handling
  3 *
  4 * Copyright (C) 2007 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  9
 10#include <linux/module.h>
 11#include <linux/net.h>
 12#include <linux/skbuff.h>
 13#include <linux/errqueue.h>
 14#include <net/sock.h>
 15#include <net/af_rxrpc.h>
 16#include <net/ip.h>
 17#include "ar-internal.h"
 18
 19/*
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 20 * Retransmit terminal ACK or ABORT of the previous call.
 21 */
 22static void rxrpc_conn_retransmit_call(struct rxrpc_connection *conn,
 23				       struct sk_buff *skb,
 24				       unsigned int channel)
 25{
 26	struct rxrpc_skb_priv *sp = skb ? rxrpc_skb(skb) : NULL;
 27	struct rxrpc_channel *chan;
 28	struct msghdr msg;
 29	struct kvec iov[3];
 30	struct {
 31		struct rxrpc_wire_header whdr;
 32		union {
 33			__be32 abort_code;
 34			struct rxrpc_ackpacket ack;
 35		};
 36	} __attribute__((packed)) pkt;
 37	struct rxrpc_ackinfo ack_info;
 38	size_t len;
 39	int ret, ioc;
 40	u32 serial, mtu, call_id, padding;
 41
 42	_enter("%d", conn->debug_id);
 43
 
 
 
 
 
 
 
 
 44	chan = &conn->channels[channel];
 45
 46	/* If the last call got moved on whilst we were waiting to run, just
 47	 * ignore this packet.
 48	 */
 49	call_id = READ_ONCE(chan->last_call);
 50	/* Sync with __rxrpc_disconnect_call() */
 51	smp_rmb();
 52	if (skb && call_id != sp->hdr.callNumber)
 53		return;
 54
 55	msg.msg_name	= &conn->params.peer->srx.transport;
 56	msg.msg_namelen	= conn->params.peer->srx.transport_len;
 57	msg.msg_control	= NULL;
 58	msg.msg_controllen = 0;
 59	msg.msg_flags	= 0;
 60
 61	iov[0].iov_base	= &pkt;
 62	iov[0].iov_len	= sizeof(pkt.whdr);
 63	iov[1].iov_base	= &padding;
 64	iov[1].iov_len	= 3;
 65	iov[2].iov_base	= &ack_info;
 66	iov[2].iov_len	= sizeof(ack_info);
 
 
 67
 68	pkt.whdr.epoch		= htonl(conn->proto.epoch);
 69	pkt.whdr.cid		= htonl(conn->proto.cid | channel);
 70	pkt.whdr.callNumber	= htonl(call_id);
 
 71	pkt.whdr.seq		= 0;
 72	pkt.whdr.type		= chan->last_type;
 73	pkt.whdr.flags		= conn->out_clientflag;
 74	pkt.whdr.userStatus	= 0;
 75	pkt.whdr.securityIndex	= conn->security_ix;
 76	pkt.whdr._rsvd		= 0;
 77	pkt.whdr.serviceId	= htons(conn->service_id);
 78
 79	len = sizeof(pkt.whdr);
 80	switch (chan->last_type) {
 81	case RXRPC_PACKET_TYPE_ABORT:
 82		pkt.abort_code	= htonl(chan->last_abort);
 83		iov[0].iov_len += sizeof(pkt.abort_code);
 84		len += sizeof(pkt.abort_code);
 85		ioc = 1;
 86		break;
 87
 88	case RXRPC_PACKET_TYPE_ACK:
 89		mtu = conn->params.peer->if_mtu;
 90		mtu -= conn->params.peer->hdrsize;
 91		pkt.ack.bufferSpace	= 0;
 92		pkt.ack.maxSkew		= htons(skb ? skb->priority : 0);
 93		pkt.ack.firstPacket	= htonl(chan->last_seq + 1);
 94		pkt.ack.previousPacket	= htonl(chan->last_seq);
 95		pkt.ack.serial		= htonl(skb ? sp->hdr.serial : 0);
 96		pkt.ack.reason		= skb ? RXRPC_ACK_DUPLICATE : RXRPC_ACK_IDLE;
 97		pkt.ack.nAcks		= 0;
 98		ack_info.rxMTU		= htonl(rxrpc_rx_mtu);
 99		ack_info.maxMTU		= htonl(mtu);
100		ack_info.rwind		= htonl(rxrpc_rx_window_size);
101		ack_info.jumbo_max	= htonl(rxrpc_rx_jumbo_max);
102		pkt.whdr.flags		|= RXRPC_SLOW_START_OK;
103		padding			= 0;
104		iov[0].iov_len += sizeof(pkt.ack);
105		len += sizeof(pkt.ack) + 3 + sizeof(ack_info);
106		ioc = 3;
107		break;
108
109	default:
110		return;
111	}
112
113	/* Resync with __rxrpc_disconnect_call() and check that the last call
114	 * didn't get advanced whilst we were filling out the packets.
115	 */
116	smp_rmb();
117	if (READ_ONCE(chan->last_call) != call_id)
118		return;
119
120	serial = atomic_inc_return(&conn->serial);
121	pkt.whdr.serial = htonl(serial);
122
123	switch (chan->last_type) {
124	case RXRPC_PACKET_TYPE_ABORT:
125		_proto("Tx ABORT %%%u { %d } [re]", serial, conn->abort_code);
126		break;
127	case RXRPC_PACKET_TYPE_ACK:
128		trace_rxrpc_tx_ack(chan->call_debug_id, serial,
129				   ntohl(pkt.ack.firstPacket),
130				   ntohl(pkt.ack.serial),
131				   pkt.ack.reason, 0);
132		_proto("Tx ACK %%%u [re]", serial);
133		break;
 
 
 
134	}
135
136	ret = kernel_sendmsg(conn->params.local->socket, &msg, iov, ioc, len);
137	conn->params.peer->last_tx_at = ktime_get_seconds();
138	if (ret < 0)
139		trace_rxrpc_tx_fail(chan->call_debug_id, serial, ret,
140				    rxrpc_tx_point_call_final_resend);
141	else
142		trace_rxrpc_tx_packet(chan->call_debug_id, &pkt.whdr,
143				      rxrpc_tx_point_call_final_resend);
144
145	_leave("");
146}
147
148/*
149 * pass a connection-level abort onto all calls on that connection
150 */
151static void rxrpc_abort_calls(struct rxrpc_connection *conn,
152			      enum rxrpc_call_completion compl,
153			      rxrpc_serial_t serial)
154{
155	struct rxrpc_call *call;
156	int i;
157
158	_enter("{%d},%x", conn->debug_id, conn->abort_code);
159
160	spin_lock(&conn->channel_lock);
161
162	for (i = 0; i < RXRPC_MAXCALLS; i++) {
163		call = rcu_dereference_protected(
164			conn->channels[i].call,
165			lockdep_is_held(&conn->channel_lock));
166		if (call) {
167			if (compl == RXRPC_CALL_LOCALLY_ABORTED)
168				trace_rxrpc_abort(call->debug_id,
169						  "CON", call->cid,
170						  call->call_id, 0,
171						  conn->abort_code,
172						  conn->error);
173			else
174				trace_rxrpc_rx_abort(call, serial,
175						     conn->abort_code);
176			rxrpc_set_call_completion(call, compl,
177						  conn->abort_code,
178						  conn->error);
 
179		}
180	}
181
182	spin_unlock(&conn->channel_lock);
183	_leave("");
184}
185
186/*
187 * generate a connection-level abort
188 */
189static int rxrpc_abort_connection(struct rxrpc_connection *conn,
190				  int error, u32 abort_code)
191{
192	struct rxrpc_wire_header whdr;
193	struct msghdr msg;
194	struct kvec iov[2];
195	__be32 word;
196	size_t len;
197	u32 serial;
198	int ret;
199
200	_enter("%d,,%u,%u", conn->debug_id, error, abort_code);
201
202	/* generate a connection-level abort */
203	spin_lock_bh(&conn->state_lock);
204	if (conn->state >= RXRPC_CONN_REMOTELY_ABORTED) {
205		spin_unlock_bh(&conn->state_lock);
206		_leave(" = 0 [already dead]");
207		return 0;
208	}
209
210	conn->error = error;
211	conn->abort_code = abort_code;
212	conn->state = RXRPC_CONN_LOCALLY_ABORTED;
213	spin_unlock_bh(&conn->state_lock);
214
215	msg.msg_name	= &conn->params.peer->srx.transport;
216	msg.msg_namelen	= conn->params.peer->srx.transport_len;
217	msg.msg_control	= NULL;
218	msg.msg_controllen = 0;
219	msg.msg_flags	= 0;
220
221	whdr.epoch	= htonl(conn->proto.epoch);
222	whdr.cid	= htonl(conn->proto.cid);
223	whdr.callNumber	= 0;
224	whdr.seq	= 0;
225	whdr.type	= RXRPC_PACKET_TYPE_ABORT;
226	whdr.flags	= conn->out_clientflag;
227	whdr.userStatus	= 0;
228	whdr.securityIndex = conn->security_ix;
229	whdr._rsvd	= 0;
230	whdr.serviceId	= htons(conn->service_id);
231
232	word		= htonl(conn->abort_code);
233
234	iov[0].iov_base	= &whdr;
235	iov[0].iov_len	= sizeof(whdr);
236	iov[1].iov_base	= &word;
237	iov[1].iov_len	= sizeof(word);
238
239	len = iov[0].iov_len + iov[1].iov_len;
240
241	serial = atomic_inc_return(&conn->serial);
242	rxrpc_abort_calls(conn, RXRPC_CALL_LOCALLY_ABORTED, serial);
243	whdr.serial = htonl(serial);
244	_proto("Tx CONN ABORT %%%u { %d }", serial, conn->abort_code);
245
246	ret = kernel_sendmsg(conn->params.local->socket, &msg, iov, 2, len);
247	if (ret < 0) {
248		trace_rxrpc_tx_fail(conn->debug_id, serial, ret,
249				    rxrpc_tx_point_conn_abort);
250		_debug("sendmsg failed: %d", ret);
251		return -EAGAIN;
252	}
253
254	trace_rxrpc_tx_packet(conn->debug_id, &whdr, rxrpc_tx_point_conn_abort);
255
256	conn->params.peer->last_tx_at = ktime_get_seconds();
257
258	_leave(" = 0");
259	return 0;
260}
261
262/*
263 * mark a call as being on a now-secured channel
264 * - must be called with BH's disabled.
265 */
266static void rxrpc_call_is_secure(struct rxrpc_call *call)
267{
268	_enter("%p", call);
269	if (call) {
270		write_lock_bh(&call->state_lock);
271		if (call->state == RXRPC_CALL_SERVER_SECURING) {
272			call->state = RXRPC_CALL_SERVER_RECV_REQUEST;
273			rxrpc_notify_socket(call);
274		}
275		write_unlock_bh(&call->state_lock);
276	}
277}
278
279/*
280 * connection-level Rx packet processor
281 */
282static int rxrpc_process_event(struct rxrpc_connection *conn,
283			       struct sk_buff *skb,
284			       u32 *_abort_code)
285{
286	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
287	__be32 wtmp;
288	u32 abort_code;
289	int loop, ret;
290
291	if (conn->state >= RXRPC_CONN_REMOTELY_ABORTED) {
292		_leave(" = -ECONNABORTED [%u]", conn->state);
293		return -ECONNABORTED;
294	}
295
296	_enter("{%d},{%u,%%%u},", conn->debug_id, sp->hdr.type, sp->hdr.serial);
297
298	switch (sp->hdr.type) {
299	case RXRPC_PACKET_TYPE_DATA:
300	case RXRPC_PACKET_TYPE_ACK:
301		rxrpc_conn_retransmit_call(conn, skb,
302					   sp->hdr.cid & RXRPC_CHANNELMASK);
303		return 0;
304
305	case RXRPC_PACKET_TYPE_BUSY:
306		/* Just ignore BUSY packets for now. */
307		return 0;
308
309	case RXRPC_PACKET_TYPE_ABORT:
310		if (skb_copy_bits(skb, sizeof(struct rxrpc_wire_header),
311				  &wtmp, sizeof(wtmp)) < 0) {
312			trace_rxrpc_rx_eproto(NULL, sp->hdr.serial,
313					      tracepoint_string("bad_abort"));
314			return -EPROTO;
315		}
316		abort_code = ntohl(wtmp);
317		_proto("Rx ABORT %%%u { ac=%d }", sp->hdr.serial, abort_code);
318
319		conn->error = -ECONNABORTED;
320		conn->abort_code = abort_code;
321		conn->state = RXRPC_CONN_REMOTELY_ABORTED;
322		rxrpc_abort_calls(conn, RXRPC_CALL_REMOTELY_ABORTED, sp->hdr.serial);
323		return -ECONNABORTED;
324
325	case RXRPC_PACKET_TYPE_CHALLENGE:
326		return conn->security->respond_to_challenge(conn, skb,
327							    _abort_code);
328
329	case RXRPC_PACKET_TYPE_RESPONSE:
330		ret = conn->security->verify_response(conn, skb, _abort_code);
331		if (ret < 0)
332			return ret;
333
334		ret = conn->security->init_connection_security(conn);
 
335		if (ret < 0)
336			return ret;
337
338		ret = conn->security->prime_packet_security(conn);
339		if (ret < 0)
340			return ret;
341
342		spin_lock(&conn->channel_lock);
343		spin_lock_bh(&conn->state_lock);
344
345		if (conn->state == RXRPC_CONN_SERVICE_CHALLENGING) {
346			conn->state = RXRPC_CONN_SERVICE;
347			spin_unlock_bh(&conn->state_lock);
348			for (loop = 0; loop < RXRPC_MAXCALLS; loop++)
349				rxrpc_call_is_secure(
350					rcu_dereference_protected(
351						conn->channels[loop].call,
352						lockdep_is_held(&conn->channel_lock)));
353		} else {
354			spin_unlock_bh(&conn->state_lock);
355		}
356
357		spin_unlock(&conn->channel_lock);
 
 
 
 
 
 
 
 
 
 
358		return 0;
359
360	default:
361		trace_rxrpc_rx_eproto(NULL, sp->hdr.serial,
362				      tracepoint_string("bad_conn_pkt"));
363		return -EPROTO;
364	}
365}
366
367/*
368 * set up security and issue a challenge
369 */
370static void rxrpc_secure_connection(struct rxrpc_connection *conn)
371{
372	u32 abort_code;
373	int ret;
374
375	_enter("{%d}", conn->debug_id);
376
377	ASSERT(conn->security_ix != 0);
378	ASSERT(conn->server_key);
379
380	if (conn->security->issue_challenge(conn) < 0) {
381		abort_code = RX_CALL_DEAD;
382		ret = -ENOMEM;
383		goto abort;
384	}
385
386	_leave("");
387	return;
388
389abort:
390	_debug("abort %d, %d", ret, abort_code);
391	rxrpc_abort_connection(conn, ret, abort_code);
392	_leave(" [aborted]");
393}
394
395/*
396 * Process delayed final ACKs that we haven't subsumed into a subsequent call.
397 */
398static void rxrpc_process_delayed_final_acks(struct rxrpc_connection *conn)
399{
400	unsigned long j = jiffies, next_j;
401	unsigned int channel;
402	bool set;
403
404again:
405	next_j = j + LONG_MAX;
406	set = false;
407	for (channel = 0; channel < RXRPC_MAXCALLS; channel++) {
408		struct rxrpc_channel *chan = &conn->channels[channel];
409		unsigned long ack_at;
410
411		if (!test_bit(RXRPC_CONN_FINAL_ACK_0 + channel, &conn->flags))
412			continue;
413
414		smp_rmb(); /* vs rxrpc_disconnect_client_call */
415		ack_at = READ_ONCE(chan->final_ack_at);
416
417		if (time_before(j, ack_at)) {
418			if (time_before(ack_at, next_j)) {
419				next_j = ack_at;
420				set = true;
421			}
422			continue;
423		}
424
425		if (test_and_clear_bit(RXRPC_CONN_FINAL_ACK_0 + channel,
426				       &conn->flags))
427			rxrpc_conn_retransmit_call(conn, NULL, channel);
428	}
429
430	j = jiffies;
431	if (time_before_eq(next_j, j))
432		goto again;
433	if (set)
434		rxrpc_reduce_conn_timer(conn, next_j);
435}
436
437/*
438 * connection-level event processor
439 */
440static void rxrpc_do_process_connection(struct rxrpc_connection *conn)
441{
442	struct sk_buff *skb;
443	u32 abort_code = RX_PROTOCOL_ERROR;
444	int ret;
445
446	if (test_and_clear_bit(RXRPC_CONN_EV_CHALLENGE, &conn->events))
447		rxrpc_secure_connection(conn);
448
449	/* Process delayed ACKs whose time has come. */
450	if (conn->flags & RXRPC_CONN_FINAL_ACK_MASK)
451		rxrpc_process_delayed_final_acks(conn);
452
453	/* go through the conn-level event packets, releasing the ref on this
454	 * connection that each one has when we've finished with it */
455	while ((skb = skb_dequeue(&conn->rx_queue))) {
456		rxrpc_see_skb(skb, rxrpc_skb_seen);
457		ret = rxrpc_process_event(conn, skb, &abort_code);
458		switch (ret) {
459		case -EPROTO:
460		case -EKEYEXPIRED:
461		case -EKEYREJECTED:
462			goto protocol_error;
463		case -ENOMEM:
464		case -EAGAIN:
465			goto requeue_and_leave;
466		case -ECONNABORTED:
 
467		default:
468			rxrpc_free_skb(skb, rxrpc_skb_freed);
469			break;
470		}
471	}
472
473	return;
474
475requeue_and_leave:
476	skb_queue_head(&conn->rx_queue, skb);
477	return;
478
479protocol_error:
480	if (rxrpc_abort_connection(conn, ret, abort_code) < 0)
481		goto requeue_and_leave;
482	rxrpc_free_skb(skb, rxrpc_skb_freed);
483	return;
484}
485
486void rxrpc_process_connection(struct work_struct *work)
487{
488	struct rxrpc_connection *conn =
489		container_of(work, struct rxrpc_connection, processor);
490
491	rxrpc_see_connection(conn);
492
493	if (__rxrpc_use_local(conn->params.local)) {
494		rxrpc_do_process_connection(conn);
495		rxrpc_unuse_local(conn->params.local);
496	}
 
497
498	rxrpc_put_connection(conn);
499	_leave("");
500	return;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
501}
v6.13.7
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* connection-level event handling
  3 *
  4 * Copyright (C) 2007 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  9
 10#include <linux/module.h>
 11#include <linux/net.h>
 12#include <linux/skbuff.h>
 13#include <linux/errqueue.h>
 14#include <net/sock.h>
 15#include <net/af_rxrpc.h>
 16#include <net/ip.h>
 17#include "ar-internal.h"
 18
 19/*
 20 * Set the completion state on an aborted connection.
 21 */
 22static bool rxrpc_set_conn_aborted(struct rxrpc_connection *conn, struct sk_buff *skb,
 23				   s32 abort_code, int err,
 24				   enum rxrpc_call_completion compl)
 25{
 26	bool aborted = false;
 27
 28	if (conn->state != RXRPC_CONN_ABORTED) {
 29		spin_lock(&conn->state_lock);
 30		if (conn->state != RXRPC_CONN_ABORTED) {
 31			conn->abort_code = abort_code;
 32			conn->error	 = err;
 33			conn->completion = compl;
 34			/* Order the abort info before the state change. */
 35			smp_store_release(&conn->state, RXRPC_CONN_ABORTED);
 36			set_bit(RXRPC_CONN_DONT_REUSE, &conn->flags);
 37			set_bit(RXRPC_CONN_EV_ABORT_CALLS, &conn->events);
 38			aborted = true;
 39		}
 40		spin_unlock(&conn->state_lock);
 41	}
 42
 43	return aborted;
 44}
 45
 46/*
 47 * Mark a socket buffer to indicate that the connection it's on should be aborted.
 48 */
 49int rxrpc_abort_conn(struct rxrpc_connection *conn, struct sk_buff *skb,
 50		     s32 abort_code, int err, enum rxrpc_abort_reason why)
 51{
 52	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
 53
 54	if (rxrpc_set_conn_aborted(conn, skb, abort_code, err,
 55				   RXRPC_CALL_LOCALLY_ABORTED)) {
 56		trace_rxrpc_abort(0, why, sp->hdr.cid, sp->hdr.callNumber,
 57				  sp->hdr.seq, abort_code, err);
 58		rxrpc_poke_conn(conn, rxrpc_conn_get_poke_abort);
 59	}
 60	return -EPROTO;
 61}
 62
 63/*
 64 * Mark a connection as being remotely aborted.
 65 */
 66static void rxrpc_input_conn_abort(struct rxrpc_connection *conn,
 67				   struct sk_buff *skb)
 68{
 69	trace_rxrpc_rx_conn_abort(conn, skb);
 70	rxrpc_set_conn_aborted(conn, skb, skb->priority, -ECONNABORTED,
 71			       RXRPC_CALL_REMOTELY_ABORTED);
 72}
 73
 74/*
 75 * Retransmit terminal ACK or ABORT of the previous call.
 76 */
 77void rxrpc_conn_retransmit_call(struct rxrpc_connection *conn,
 78				struct sk_buff *skb,
 79				unsigned int channel)
 80{
 81	struct rxrpc_skb_priv *sp = skb ? rxrpc_skb(skb) : NULL;
 82	struct rxrpc_channel *chan;
 83	struct msghdr msg;
 84	struct kvec iov[3];
 85	struct {
 86		struct rxrpc_wire_header whdr;
 87		union {
 88			__be32 abort_code;
 89			struct rxrpc_ackpacket ack;
 90		};
 91	} __attribute__((packed)) pkt;
 92	struct rxrpc_acktrailer trailer;
 93	size_t len;
 94	int ret, ioc;
 95	u32 serial, mtu, call_id, padding;
 96
 97	_enter("%d", conn->debug_id);
 98
 99	if (sp && sp->hdr.type == RXRPC_PACKET_TYPE_ACK) {
100		if (skb_copy_bits(skb, sizeof(struct rxrpc_wire_header),
101				  &pkt.ack, sizeof(pkt.ack)) < 0)
102			return;
103		if (pkt.ack.reason == RXRPC_ACK_PING_RESPONSE)
104			return;
105	}
106
107	chan = &conn->channels[channel];
108
109	/* If the last call got moved on whilst we were waiting to run, just
110	 * ignore this packet.
111	 */
112	call_id = chan->last_call;
 
 
113	if (skb && call_id != sp->hdr.callNumber)
114		return;
115
116	msg.msg_name	= &conn->peer->srx.transport;
117	msg.msg_namelen	= conn->peer->srx.transport_len;
118	msg.msg_control	= NULL;
119	msg.msg_controllen = 0;
120	msg.msg_flags	= 0;
121
122	iov[0].iov_base	= &pkt;
123	iov[0].iov_len	= sizeof(pkt.whdr);
124	iov[1].iov_base	= &padding;
125	iov[1].iov_len	= 3;
126	iov[2].iov_base	= &trailer;
127	iov[2].iov_len	= sizeof(trailer);
128
129	serial = rxrpc_get_next_serial(conn);
130
131	pkt.whdr.epoch		= htonl(conn->proto.epoch);
132	pkt.whdr.cid		= htonl(conn->proto.cid | channel);
133	pkt.whdr.callNumber	= htonl(call_id);
134	pkt.whdr.serial		= htonl(serial);
135	pkt.whdr.seq		= 0;
136	pkt.whdr.type		= chan->last_type;
137	pkt.whdr.flags		= conn->out_clientflag;
138	pkt.whdr.userStatus	= 0;
139	pkt.whdr.securityIndex	= conn->security_ix;
140	pkt.whdr._rsvd		= 0;
141	pkt.whdr.serviceId	= htons(conn->service_id);
142
143	len = sizeof(pkt.whdr);
144	switch (chan->last_type) {
145	case RXRPC_PACKET_TYPE_ABORT:
146		pkt.abort_code	= htonl(chan->last_abort);
147		iov[0].iov_len += sizeof(pkt.abort_code);
148		len += sizeof(pkt.abort_code);
149		ioc = 1;
150		break;
151
152	case RXRPC_PACKET_TYPE_ACK:
153		mtu = conn->peer->if_mtu;
154		mtu -= conn->peer->hdrsize;
155		pkt.ack.bufferSpace	= 0;
156		pkt.ack.maxSkew		= htons(skb ? skb->priority : 0);
157		pkt.ack.firstPacket	= htonl(chan->last_seq + 1);
158		pkt.ack.previousPacket	= htonl(chan->last_seq);
159		pkt.ack.serial		= htonl(skb ? sp->hdr.serial : 0);
160		pkt.ack.reason		= skb ? RXRPC_ACK_DUPLICATE : RXRPC_ACK_IDLE;
161		pkt.ack.nAcks		= 0;
162		trailer.maxMTU		= htonl(rxrpc_rx_mtu);
163		trailer.ifMTU		= htonl(mtu);
164		trailer.rwind		= htonl(rxrpc_rx_window_size);
165		trailer.jumbo_max	= htonl(rxrpc_rx_jumbo_max);
166		pkt.whdr.flags		|= RXRPC_SLOW_START_OK;
167		padding			= 0;
168		iov[0].iov_len += sizeof(pkt.ack);
169		len += sizeof(pkt.ack) + 3 + sizeof(trailer);
170		ioc = 3;
 
 
 
 
 
171
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
172		trace_rxrpc_tx_ack(chan->call_debug_id, serial,
173				   ntohl(pkt.ack.firstPacket),
174				   ntohl(pkt.ack.serial),
175				   pkt.ack.reason, 0, rxrpc_rx_window_size);
 
176		break;
177
178	default:
179		return;
180	}
181
182	ret = kernel_sendmsg(conn->local->socket, &msg, iov, ioc, len);
183	conn->peer->last_tx_at = ktime_get_seconds();
184	if (ret < 0)
185		trace_rxrpc_tx_fail(chan->call_debug_id, serial, ret,
186				    rxrpc_tx_point_call_final_resend);
187	else
188		trace_rxrpc_tx_packet(chan->call_debug_id, &pkt.whdr,
189				      rxrpc_tx_point_call_final_resend);
190
191	_leave("");
192}
193
194/*
195 * pass a connection-level abort onto all calls on that connection
196 */
197static void rxrpc_abort_calls(struct rxrpc_connection *conn)
 
 
198{
199	struct rxrpc_call *call;
200	int i;
201
202	_enter("{%d},%x", conn->debug_id, conn->abort_code);
203
 
 
204	for (i = 0; i < RXRPC_MAXCALLS; i++) {
205		call = conn->channels[i].call;
 
 
206		if (call) {
207			rxrpc_see_call(call, rxrpc_call_see_conn_abort);
208			rxrpc_set_call_completion(call,
209						  conn->completion,
 
 
 
 
 
 
 
210						  conn->abort_code,
211						  conn->error);
212			rxrpc_poke_call(call, rxrpc_call_poke_conn_abort);
213		}
214	}
215
 
216	_leave("");
217}
218
219/*
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
220 * mark a call as being on a now-secured channel
221 * - must be called with BH's disabled.
222 */
223static void rxrpc_call_is_secure(struct rxrpc_call *call)
224{
225	if (call && __test_and_clear_bit(RXRPC_CALL_CONN_CHALLENGING, &call->flags))
226		rxrpc_notify_socket(call);
 
 
 
 
 
 
 
227}
228
229/*
230 * connection-level Rx packet processor
231 */
232static int rxrpc_process_event(struct rxrpc_connection *conn,
233			       struct sk_buff *skb)
 
234{
235	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
236	int ret;
 
 
237
238	if (conn->state == RXRPC_CONN_ABORTED)
 
239		return -ECONNABORTED;
 
240
241	_enter("{%d},{%u,%%%u},", conn->debug_id, sp->hdr.type, sp->hdr.serial);
242
243	switch (sp->hdr.type) {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
244	case RXRPC_PACKET_TYPE_CHALLENGE:
245		return conn->security->respond_to_challenge(conn, skb);
 
246
247	case RXRPC_PACKET_TYPE_RESPONSE:
248		ret = conn->security->verify_response(conn, skb);
249		if (ret < 0)
250			return ret;
251
252		ret = conn->security->init_connection_security(
253			conn, conn->key->payload.data[0]);
254		if (ret < 0)
255			return ret;
256
257		spin_lock(&conn->state_lock);
258		if (conn->state == RXRPC_CONN_SERVICE_CHALLENGING)
 
 
 
 
 
 
259			conn->state = RXRPC_CONN_SERVICE;
260		spin_unlock(&conn->state_lock);
 
 
 
 
 
 
 
 
261
262		if (conn->state == RXRPC_CONN_SERVICE) {
263			/* Offload call state flipping to the I/O thread.  As
264			 * we've already received the packet, put it on the
265			 * front of the queue.
266			 */
267			sp->conn = rxrpc_get_connection(conn, rxrpc_conn_get_poke_secured);
268			skb->mark = RXRPC_SKB_MARK_SERVICE_CONN_SECURED;
269			rxrpc_get_skb(skb, rxrpc_skb_get_conn_secured);
270			skb_queue_head(&conn->local->rx_queue, skb);
271			rxrpc_wake_up_io_thread(conn->local);
272		}
273		return 0;
274
275	default:
276		WARN_ON_ONCE(1);
 
277		return -EPROTO;
278	}
279}
280
281/*
282 * set up security and issue a challenge
283 */
284static void rxrpc_secure_connection(struct rxrpc_connection *conn)
285{
286	if (conn->security->issue_challenge(conn) < 0)
287		rxrpc_abort_conn(conn, NULL, RX_CALL_DEAD, -ENOMEM,
288				 rxrpc_abort_nomem);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
289}
290
291/*
292 * Process delayed final ACKs that we haven't subsumed into a subsequent call.
293 */
294void rxrpc_process_delayed_final_acks(struct rxrpc_connection *conn, bool force)
295{
296	unsigned long j = jiffies, next_j;
297	unsigned int channel;
298	bool set;
299
300again:
301	next_j = j + LONG_MAX;
302	set = false;
303	for (channel = 0; channel < RXRPC_MAXCALLS; channel++) {
304		struct rxrpc_channel *chan = &conn->channels[channel];
305		unsigned long ack_at;
306
307		if (!test_bit(RXRPC_CONN_FINAL_ACK_0 + channel, &conn->flags))
308			continue;
309
310		ack_at = chan->final_ack_at;
311		if (time_before(j, ack_at) && !force) {
 
 
312			if (time_before(ack_at, next_j)) {
313				next_j = ack_at;
314				set = true;
315			}
316			continue;
317		}
318
319		if (test_and_clear_bit(RXRPC_CONN_FINAL_ACK_0 + channel,
320				       &conn->flags))
321			rxrpc_conn_retransmit_call(conn, NULL, channel);
322	}
323
324	j = jiffies;
325	if (time_before_eq(next_j, j))
326		goto again;
327	if (set)
328		rxrpc_reduce_conn_timer(conn, next_j);
329}
330
331/*
332 * connection-level event processor
333 */
334static void rxrpc_do_process_connection(struct rxrpc_connection *conn)
335{
336	struct sk_buff *skb;
 
337	int ret;
338
339	if (test_and_clear_bit(RXRPC_CONN_EV_CHALLENGE, &conn->events))
340		rxrpc_secure_connection(conn);
341
 
 
 
 
342	/* go through the conn-level event packets, releasing the ref on this
343	 * connection that each one has when we've finished with it */
344	while ((skb = skb_dequeue(&conn->rx_queue))) {
345		rxrpc_see_skb(skb, rxrpc_skb_see_conn_work);
346		ret = rxrpc_process_event(conn, skb);
347		switch (ret) {
 
 
 
 
348		case -ENOMEM:
349		case -EAGAIN:
350			skb_queue_head(&conn->rx_queue, skb);
351			rxrpc_queue_conn(conn, rxrpc_conn_queue_retry_work);
352			break;
353		default:
354			rxrpc_free_skb(skb, rxrpc_skb_put_conn_work);
355			break;
356		}
357	}
 
 
 
 
 
 
 
 
 
 
 
 
358}
359
360void rxrpc_process_connection(struct work_struct *work)
361{
362	struct rxrpc_connection *conn =
363		container_of(work, struct rxrpc_connection, processor);
364
365	rxrpc_see_connection(conn, rxrpc_conn_see_work);
366
367	if (__rxrpc_use_local(conn->local, rxrpc_local_use_conn_work)) {
368		rxrpc_do_process_connection(conn);
369		rxrpc_unuse_local(conn->local, rxrpc_local_unuse_conn_work);
370	}
371}
372
373/*
374 * post connection-level events to the connection
375 * - this includes challenges, responses, some aborts and call terminal packet
376 *   retransmission.
377 */
378static void rxrpc_post_packet_to_conn(struct rxrpc_connection *conn,
379				      struct sk_buff *skb)
380{
381	_enter("%p,%p", conn, skb);
382
383	rxrpc_get_skb(skb, rxrpc_skb_get_conn_work);
384	skb_queue_tail(&conn->rx_queue, skb);
385	rxrpc_queue_conn(conn, rxrpc_conn_queue_rx_work);
386}
387
388/*
389 * Input a connection-level packet.
390 */
391bool rxrpc_input_conn_packet(struct rxrpc_connection *conn, struct sk_buff *skb)
392{
393	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
394
395	switch (sp->hdr.type) {
396	case RXRPC_PACKET_TYPE_BUSY:
397		/* Just ignore BUSY packets for now. */
398		return true;
399
400	case RXRPC_PACKET_TYPE_ABORT:
401		if (rxrpc_is_conn_aborted(conn))
402			return true;
403		rxrpc_input_conn_abort(conn, skb);
404		rxrpc_abort_calls(conn);
405		return true;
406
407	case RXRPC_PACKET_TYPE_CHALLENGE:
408	case RXRPC_PACKET_TYPE_RESPONSE:
409		if (rxrpc_is_conn_aborted(conn)) {
410			if (conn->completion == RXRPC_CALL_LOCALLY_ABORTED)
411				rxrpc_send_conn_abort(conn);
412			return true;
413		}
414		rxrpc_post_packet_to_conn(conn, skb);
415		return true;
416
417	default:
418		WARN_ON_ONCE(1);
419		return true;
420	}
421}
422
423/*
424 * Input a connection event.
425 */
426void rxrpc_input_conn_event(struct rxrpc_connection *conn, struct sk_buff *skb)
427{
428	unsigned int loop;
429
430	if (test_and_clear_bit(RXRPC_CONN_EV_ABORT_CALLS, &conn->events))
431		rxrpc_abort_calls(conn);
432
433	if (skb) {
434		switch (skb->mark) {
435		case RXRPC_SKB_MARK_SERVICE_CONN_SECURED:
436			if (conn->state != RXRPC_CONN_SERVICE)
437				break;
438
439			for (loop = 0; loop < RXRPC_MAXCALLS; loop++)
440				rxrpc_call_is_secure(conn->channels[loop].call);
441			break;
442		}
443	}
444
445	/* Process delayed ACKs whose time has come. */
446	if (conn->flags & RXRPC_CONN_FINAL_ACK_MASK)
447		rxrpc_process_delayed_final_acks(conn, false);
448}