Linux Audio

Check our new training course

Loading...
v6.2
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* Local endpoint object management
  3 *
  4 * Copyright (C) 2016 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  9
 10#include <linux/module.h>
 11#include <linux/net.h>
 12#include <linux/skbuff.h>
 13#include <linux/slab.h>
 14#include <linux/udp.h>
 15#include <linux/ip.h>
 16#include <linux/hashtable.h>
 17#include <net/sock.h>
 18#include <net/udp.h>
 19#include <net/udp_tunnel.h>
 20#include <net/af_rxrpc.h>
 21#include "ar-internal.h"
 22
 
 23static void rxrpc_local_rcu(struct rcu_head *);
 24
 25/*
 26 * Handle an ICMP/ICMP6 error turning up at the tunnel.  Push it through the
 27 * usual mechanism so that it gets parsed and presented through the UDP
 28 * socket's error_report().
 29 */
 30static void rxrpc_encap_err_rcv(struct sock *sk, struct sk_buff *skb, int err,
 31				__be16 port, u32 info, u8 *payload)
 32{
 33	if (ip_hdr(skb)->version == IPVERSION)
 34		return ip_icmp_error(sk, skb, err, port, info, payload);
 35	if (IS_ENABLED(CONFIG_AF_RXRPC_IPV6))
 36		return ipv6_icmp_error(sk, skb, err, port, info, payload);
 37}
 38
 39/*
 40 * Compare a local to an address.  Return -ve, 0 or +ve to indicate less than,
 41 * same or greater than.
 42 *
 43 * We explicitly don't compare the RxRPC service ID as we want to reject
 44 * conflicting uses by differing services.  Further, we don't want to share
 45 * addresses with different options (IPv6), so we don't compare those bits
 46 * either.
 47 */
 48static long rxrpc_local_cmp_key(const struct rxrpc_local *local,
 49				const struct sockaddr_rxrpc *srx)
 50{
 51	long diff;
 52
 53	diff = ((local->srx.transport_type - srx->transport_type) ?:
 54		(local->srx.transport_len - srx->transport_len) ?:
 55		(local->srx.transport.family - srx->transport.family));
 56	if (diff != 0)
 57		return diff;
 58
 59	switch (srx->transport.family) {
 60	case AF_INET:
 61		/* If the choice of UDP port is left up to the transport, then
 62		 * the endpoint record doesn't match.
 63		 */
 64		return ((u16 __force)local->srx.transport.sin.sin_port -
 65			(u16 __force)srx->transport.sin.sin_port) ?:
 66			memcmp(&local->srx.transport.sin.sin_addr,
 67			       &srx->transport.sin.sin_addr,
 68			       sizeof(struct in_addr));
 69#ifdef CONFIG_AF_RXRPC_IPV6
 70	case AF_INET6:
 71		/* If the choice of UDP6 port is left up to the transport, then
 72		 * the endpoint record doesn't match.
 73		 */
 74		return ((u16 __force)local->srx.transport.sin6.sin6_port -
 75			(u16 __force)srx->transport.sin6.sin6_port) ?:
 76			memcmp(&local->srx.transport.sin6.sin6_addr,
 77			       &srx->transport.sin6.sin6_addr,
 78			       sizeof(struct in6_addr));
 79#endif
 80	default:
 81		BUG();
 82	}
 83}
 84
 85static void rxrpc_client_conn_reap_timeout(struct timer_list *timer)
 86{
 87	struct rxrpc_local *local =
 88		container_of(timer, struct rxrpc_local, client_conn_reap_timer);
 89
 90	if (local->kill_all_client_conns &&
 91	    test_and_set_bit(RXRPC_CLIENT_CONN_REAP_TIMER, &local->client_conn_flags))
 92		rxrpc_wake_up_io_thread(local);
 93}
 94
 95/*
 96 * Allocate a new local endpoint.
 97 */
 98static struct rxrpc_local *rxrpc_alloc_local(struct net *net,
 99					     const struct sockaddr_rxrpc *srx)
100{
101	struct rxrpc_local *local;
102	u32 tmp;
103
104	local = kzalloc(sizeof(struct rxrpc_local), GFP_KERNEL);
105	if (local) {
106		refcount_set(&local->ref, 1);
107		atomic_set(&local->active_users, 1);
108		local->net = net;
109		local->rxnet = rxrpc_net(net);
110		INIT_HLIST_NODE(&local->link);
111		init_rwsem(&local->defrag_sem);
112		init_completion(&local->io_thread_ready);
113		skb_queue_head_init(&local->rx_queue);
114		INIT_LIST_HEAD(&local->conn_attend_q);
115		INIT_LIST_HEAD(&local->call_attend_q);
116
117		local->client_bundles = RB_ROOT;
118		spin_lock_init(&local->client_bundles_lock);
119		local->kill_all_client_conns = false;
120		INIT_LIST_HEAD(&local->idle_client_conns);
121		timer_setup(&local->client_conn_reap_timer,
122			    rxrpc_client_conn_reap_timeout, 0);
123
124		spin_lock_init(&local->lock);
125		rwlock_init(&local->services_lock);
126		local->debug_id = atomic_inc_return(&rxrpc_debug_id);
127		memcpy(&local->srx, srx, sizeof(*srx));
128		local->srx.srx_service = 0;
129		idr_init(&local->conn_ids);
130		get_random_bytes(&tmp, sizeof(tmp));
131		tmp &= 0x3fffffff;
132		if (tmp == 0)
133			tmp = 1;
134		idr_set_cursor(&local->conn_ids, tmp);
135		INIT_LIST_HEAD(&local->new_client_calls);
136		spin_lock_init(&local->client_call_lock);
137
138		trace_rxrpc_local(local->debug_id, rxrpc_local_new, 1, 1);
139	}
140
141	_leave(" = %p", local);
142	return local;
143}
144
145/*
146 * create the local socket
147 * - must be called with rxrpc_local_mutex locked
148 */
149static int rxrpc_open_socket(struct rxrpc_local *local, struct net *net)
150{
151	struct udp_tunnel_sock_cfg tuncfg = {NULL};
152	struct sockaddr_rxrpc *srx = &local->srx;
153	struct udp_port_cfg udp_conf = {0};
154	struct task_struct *io_thread;
155	struct sock *usk;
156	int ret;
157
158	_enter("%p{%d,%d}",
159	       local, srx->transport_type, srx->transport.family);
160
161	udp_conf.family = srx->transport.family;
162	udp_conf.use_udp_checksums = true;
163	if (udp_conf.family == AF_INET) {
164		udp_conf.local_ip = srx->transport.sin.sin_addr;
165		udp_conf.local_udp_port = srx->transport.sin.sin_port;
166#if IS_ENABLED(CONFIG_AF_RXRPC_IPV6)
167	} else {
168		udp_conf.local_ip6 = srx->transport.sin6.sin6_addr;
169		udp_conf.local_udp_port = srx->transport.sin6.sin6_port;
170		udp_conf.use_udp6_tx_checksums = true;
171		udp_conf.use_udp6_rx_checksums = true;
172#endif
173	}
174	ret = udp_sock_create(net, &udp_conf, &local->socket);
175	if (ret < 0) {
176		_leave(" = %d [socket]", ret);
177		return ret;
178	}
179
180	tuncfg.encap_type = UDP_ENCAP_RXRPC;
181	tuncfg.encap_rcv = rxrpc_encap_rcv;
182	tuncfg.encap_err_rcv = rxrpc_encap_err_rcv;
183	tuncfg.sk_user_data = local;
184	setup_udp_tunnel_sock(net, local->socket, &tuncfg);
185
186	/* set the socket up */
187	usk = local->socket->sk;
188	usk->sk_error_report = rxrpc_error_report;
189
190	switch (srx->transport.family) {
191	case AF_INET6:
192		/* we want to receive ICMPv6 errors */
193		ip6_sock_set_recverr(usk);
194
195		/* Fall through and set IPv4 options too otherwise we don't get
196		 * errors from IPv4 packets sent through the IPv6 socket.
197		 */
198		fallthrough;
199	case AF_INET:
200		/* we want to receive ICMP errors */
201		ip_sock_set_recverr(usk);
202
203		/* we want to set the don't fragment bit */
204		ip_sock_set_mtu_discover(usk, IP_PMTUDISC_DO);
205
206		/* We want receive timestamps. */
207		sock_enable_timestamps(usk);
208		break;
209
210	default:
211		BUG();
212	}
213
214	io_thread = kthread_run(rxrpc_io_thread, local,
215				"krxrpcio/%u", ntohs(udp_conf.local_udp_port));
216	if (IS_ERR(io_thread)) {
217		ret = PTR_ERR(io_thread);
218		goto error_sock;
219	}
220
221	wait_for_completion(&local->io_thread_ready);
222	local->io_thread = io_thread;
223	_leave(" = 0");
224	return 0;
225
226error_sock:
227	kernel_sock_shutdown(local->socket, SHUT_RDWR);
228	local->socket->sk->sk_user_data = NULL;
229	sock_release(local->socket);
230	local->socket = NULL;
231	return ret;
232}
233
234/*
235 * Look up or create a new local endpoint using the specified local address.
236 */
237struct rxrpc_local *rxrpc_lookup_local(struct net *net,
238				       const struct sockaddr_rxrpc *srx)
239{
240	struct rxrpc_local *local;
241	struct rxrpc_net *rxnet = rxrpc_net(net);
242	struct hlist_node *cursor;
 
243	long diff;
244	int ret;
245
246	_enter("{%d,%d,%pISp}",
247	       srx->transport_type, srx->transport.family, &srx->transport);
248
249	mutex_lock(&rxnet->local_mutex);
250
251	hlist_for_each(cursor, &rxnet->local_endpoints) {
252		local = hlist_entry(cursor, struct rxrpc_local, link);
 
 
253
254		diff = rxrpc_local_cmp_key(local, srx);
255		if (diff != 0)
256			continue;
 
 
257
258		/* Services aren't allowed to share transport sockets, so
259		 * reject that here.  It is possible that the object is dying -
260		 * but it may also still have the local transport address that
261		 * we want bound.
262		 */
263		if (srx->srx_service) {
264			local = NULL;
265			goto addr_in_use;
266		}
267
268		/* Found a match.  We want to replace a dying object.
269		 * Attempting to bind the transport socket may still fail if
270		 * we're attempting to use a local address that the dying
271		 * object is still using.
272		 */
273		if (!rxrpc_use_local(local, rxrpc_local_use_lookup))
274			break;
275
 
276		goto found;
277	}
278
279	local = rxrpc_alloc_local(net, srx);
280	if (!local)
281		goto nomem;
282
283	ret = rxrpc_open_socket(local, net);
284	if (ret < 0)
285		goto sock_error;
286
287	if (cursor) {
288		hlist_replace_rcu(cursor, &local->link);
289		cursor->pprev = NULL;
290	} else {
291		hlist_add_head_rcu(&local->link, &rxnet->local_endpoints);
292	}
293
294found:
295	mutex_unlock(&rxnet->local_mutex);
 
 
 
 
296	_leave(" = %p", local);
297	return local;
298
299nomem:
300	ret = -ENOMEM;
301sock_error:
302	mutex_unlock(&rxnet->local_mutex);
303	if (local)
304		call_rcu(&local->rcu, rxrpc_local_rcu);
305	_leave(" = %d", ret);
306	return ERR_PTR(ret);
307
308addr_in_use:
309	mutex_unlock(&rxnet->local_mutex);
310	_leave(" = -EADDRINUSE");
311	return ERR_PTR(-EADDRINUSE);
312}
313
314/*
315 * Get a ref on a local endpoint.
316 */
317struct rxrpc_local *rxrpc_get_local(struct rxrpc_local *local,
318				    enum rxrpc_local_trace why)
319{
320	int r, u;
 
321
322	u = atomic_read(&local->active_users);
323	__refcount_inc(&local->ref, &r);
324	trace_rxrpc_local(local->debug_id, why, r + 1, u);
325	return local;
326}
327
328/*
329 * Get a ref on a local endpoint unless its usage has already reached 0.
330 */
331struct rxrpc_local *rxrpc_get_local_maybe(struct rxrpc_local *local,
332					  enum rxrpc_local_trace why)
333{
334	int r, u;
335
336	if (local && __refcount_inc_not_zero(&local->ref, &r)) {
337		u = atomic_read(&local->active_users);
338		trace_rxrpc_local(local->debug_id, why, r + 1, u);
339		return local;
 
 
 
340	}
 
 
341
342	return NULL;
 
 
 
 
 
 
 
 
 
 
 
 
343}
344
345/*
346 * Drop a ref on a local endpoint.
347 */
348void rxrpc_put_local(struct rxrpc_local *local, enum rxrpc_local_trace why)
349{
 
350	unsigned int debug_id;
351	bool dead;
352	int r, u;
353
354	if (local) {
355		debug_id = local->debug_id;
356
357		u = atomic_read(&local->active_users);
358		dead = __refcount_dec_and_test(&local->ref, &r);
359		trace_rxrpc_local(debug_id, why, r, u);
360
361		if (dead)
362			call_rcu(&local->rcu, rxrpc_local_rcu);
363	}
364}
365
366/*
367 * Start using a local endpoint.
368 */
369struct rxrpc_local *rxrpc_use_local(struct rxrpc_local *local,
370				    enum rxrpc_local_trace why)
371{
372	local = rxrpc_get_local_maybe(local, rxrpc_local_get_for_use);
373	if (!local)
374		return NULL;
375
376	if (!__rxrpc_use_local(local, why)) {
377		rxrpc_put_local(local, rxrpc_local_put_for_use);
378		return NULL;
379	}
380
381	return local;
382}
383
384/*
385 * Cease using a local endpoint.  Once the number of active users reaches 0, we
386 * start the closure of the transport in the I/O thread..
387 */
388void rxrpc_unuse_local(struct rxrpc_local *local, enum rxrpc_local_trace why)
389{
390	unsigned int debug_id;
391	int r, u;
392
393	if (local) {
394		debug_id = local->debug_id;
395		r = refcount_read(&local->ref);
396		u = atomic_dec_return(&local->active_users);
397		trace_rxrpc_local(debug_id, why, r, u);
398		if (u == 0)
399			kthread_stop(local->io_thread);
400	}
401}
402
403/*
404 * Destroy a local endpoint's socket and then hand the record to RCU to dispose
405 * of.
406 *
407 * Closing the socket cannot be done from bottom half context or RCU callback
408 * context because it might sleep.
409 */
410void rxrpc_destroy_local(struct rxrpc_local *local)
411{
412	struct socket *socket = local->socket;
413	struct rxrpc_net *rxnet = local->rxnet;
414
415	_enter("%d", local->debug_id);
416
417	local->dead = true;
418
419	mutex_lock(&rxnet->local_mutex);
420	hlist_del_init_rcu(&local->link);
421	mutex_unlock(&rxnet->local_mutex);
422
423	rxrpc_clean_up_local_conns(local);
424	rxrpc_service_connection_reaper(&rxnet->service_conn_reaper);
425	ASSERT(!local->service);
426
427	if (socket) {
428		local->socket = NULL;
429		kernel_sock_shutdown(socket, SHUT_RDWR);
430		socket->sk->sk_user_data = NULL;
431		sock_release(socket);
432	}
433
434	/* At this point, there should be no more packets coming in to the
435	 * local endpoint.
436	 */
437	rxrpc_purge_queue(&local->rx_queue);
438	rxrpc_purge_client_connections(local);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
439}
440
441/*
442 * Destroy a local endpoint after the RCU grace period expires.
443 */
444static void rxrpc_local_rcu(struct rcu_head *rcu)
445{
446	struct rxrpc_local *local = container_of(rcu, struct rxrpc_local, rcu);
447
448	rxrpc_see_local(local, rxrpc_local_free);
 
 
 
 
449	kfree(local);
 
450}
451
452/*
453 * Verify the local endpoint list is empty by this point.
454 */
455void rxrpc_destroy_all_locals(struct rxrpc_net *rxnet)
456{
457	struct rxrpc_local *local;
458
459	_enter("");
460
461	flush_workqueue(rxrpc_workqueue);
462
463	if (!hlist_empty(&rxnet->local_endpoints)) {
464		mutex_lock(&rxnet->local_mutex);
465		hlist_for_each_entry(local, &rxnet->local_endpoints, link) {
466			pr_err("AF_RXRPC: Leaked local %p {%d}\n",
467			       local, refcount_read(&local->ref));
468		}
469		mutex_unlock(&rxnet->local_mutex);
470		BUG();
471	}
472}
v5.14.15
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* Local endpoint object management
  3 *
  4 * Copyright (C) 2016 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  9
 10#include <linux/module.h>
 11#include <linux/net.h>
 12#include <linux/skbuff.h>
 13#include <linux/slab.h>
 14#include <linux/udp.h>
 15#include <linux/ip.h>
 16#include <linux/hashtable.h>
 17#include <net/sock.h>
 18#include <net/udp.h>
 19#include <net/udp_tunnel.h>
 20#include <net/af_rxrpc.h>
 21#include "ar-internal.h"
 22
 23static void rxrpc_local_processor(struct work_struct *);
 24static void rxrpc_local_rcu(struct rcu_head *);
 25
 26/*
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 27 * Compare a local to an address.  Return -ve, 0 or +ve to indicate less than,
 28 * same or greater than.
 29 *
 30 * We explicitly don't compare the RxRPC service ID as we want to reject
 31 * conflicting uses by differing services.  Further, we don't want to share
 32 * addresses with different options (IPv6), so we don't compare those bits
 33 * either.
 34 */
 35static long rxrpc_local_cmp_key(const struct rxrpc_local *local,
 36				const struct sockaddr_rxrpc *srx)
 37{
 38	long diff;
 39
 40	diff = ((local->srx.transport_type - srx->transport_type) ?:
 41		(local->srx.transport_len - srx->transport_len) ?:
 42		(local->srx.transport.family - srx->transport.family));
 43	if (diff != 0)
 44		return diff;
 45
 46	switch (srx->transport.family) {
 47	case AF_INET:
 48		/* If the choice of UDP port is left up to the transport, then
 49		 * the endpoint record doesn't match.
 50		 */
 51		return ((u16 __force)local->srx.transport.sin.sin_port -
 52			(u16 __force)srx->transport.sin.sin_port) ?:
 53			memcmp(&local->srx.transport.sin.sin_addr,
 54			       &srx->transport.sin.sin_addr,
 55			       sizeof(struct in_addr));
 56#ifdef CONFIG_AF_RXRPC_IPV6
 57	case AF_INET6:
 58		/* If the choice of UDP6 port is left up to the transport, then
 59		 * the endpoint record doesn't match.
 60		 */
 61		return ((u16 __force)local->srx.transport.sin6.sin6_port -
 62			(u16 __force)srx->transport.sin6.sin6_port) ?:
 63			memcmp(&local->srx.transport.sin6.sin6_addr,
 64			       &srx->transport.sin6.sin6_addr,
 65			       sizeof(struct in6_addr));
 66#endif
 67	default:
 68		BUG();
 69	}
 70}
 71
 
 
 
 
 
 
 
 
 
 
 72/*
 73 * Allocate a new local endpoint.
 74 */
 75static struct rxrpc_local *rxrpc_alloc_local(struct rxrpc_net *rxnet,
 76					     const struct sockaddr_rxrpc *srx)
 77{
 78	struct rxrpc_local *local;
 
 79
 80	local = kzalloc(sizeof(struct rxrpc_local), GFP_KERNEL);
 81	if (local) {
 82		atomic_set(&local->usage, 1);
 83		atomic_set(&local->active_users, 1);
 84		local->rxnet = rxnet;
 85		INIT_LIST_HEAD(&local->link);
 86		INIT_WORK(&local->processor, rxrpc_local_processor);
 87		init_rwsem(&local->defrag_sem);
 88		skb_queue_head_init(&local->reject_queue);
 89		skb_queue_head_init(&local->event_queue);
 
 
 
 90		local->client_bundles = RB_ROOT;
 91		spin_lock_init(&local->client_bundles_lock);
 
 
 
 
 
 92		spin_lock_init(&local->lock);
 93		rwlock_init(&local->services_lock);
 94		local->debug_id = atomic_inc_return(&rxrpc_debug_id);
 95		memcpy(&local->srx, srx, sizeof(*srx));
 96		local->srx.srx_service = 0;
 97		trace_rxrpc_local(local->debug_id, rxrpc_local_new, 1, NULL);
 
 
 
 
 
 
 
 
 
 98	}
 99
100	_leave(" = %p", local);
101	return local;
102}
103
104/*
105 * create the local socket
106 * - must be called with rxrpc_local_mutex locked
107 */
108static int rxrpc_open_socket(struct rxrpc_local *local, struct net *net)
109{
110	struct udp_tunnel_sock_cfg tuncfg = {NULL};
111	struct sockaddr_rxrpc *srx = &local->srx;
112	struct udp_port_cfg udp_conf = {0};
 
113	struct sock *usk;
114	int ret;
115
116	_enter("%p{%d,%d}",
117	       local, srx->transport_type, srx->transport.family);
118
119	udp_conf.family = srx->transport.family;
 
120	if (udp_conf.family == AF_INET) {
121		udp_conf.local_ip = srx->transport.sin.sin_addr;
122		udp_conf.local_udp_port = srx->transport.sin.sin_port;
123#if IS_ENABLED(CONFIG_AF_RXRPC_IPV6)
124	} else {
125		udp_conf.local_ip6 = srx->transport.sin6.sin6_addr;
126		udp_conf.local_udp_port = srx->transport.sin6.sin6_port;
 
 
127#endif
128	}
129	ret = udp_sock_create(net, &udp_conf, &local->socket);
130	if (ret < 0) {
131		_leave(" = %d [socket]", ret);
132		return ret;
133	}
134
135	tuncfg.encap_type = UDP_ENCAP_RXRPC;
136	tuncfg.encap_rcv = rxrpc_input_packet;
 
137	tuncfg.sk_user_data = local;
138	setup_udp_tunnel_sock(net, local->socket, &tuncfg);
139
140	/* set the socket up */
141	usk = local->socket->sk;
142	usk->sk_error_report = rxrpc_error_report;
143
144	switch (srx->transport.family) {
145	case AF_INET6:
146		/* we want to receive ICMPv6 errors */
147		ip6_sock_set_recverr(usk);
148
149		/* Fall through and set IPv4 options too otherwise we don't get
150		 * errors from IPv4 packets sent through the IPv6 socket.
151		 */
152		fallthrough;
153	case AF_INET:
154		/* we want to receive ICMP errors */
155		ip_sock_set_recverr(usk);
156
157		/* we want to set the don't fragment bit */
158		ip_sock_set_mtu_discover(usk, IP_PMTUDISC_DO);
159
160		/* We want receive timestamps. */
161		sock_enable_timestamps(usk);
162		break;
163
164	default:
165		BUG();
166	}
167
 
 
 
 
 
 
 
 
 
168	_leave(" = 0");
169	return 0;
 
 
 
 
 
 
 
170}
171
172/*
173 * Look up or create a new local endpoint using the specified local address.
174 */
175struct rxrpc_local *rxrpc_lookup_local(struct net *net,
176				       const struct sockaddr_rxrpc *srx)
177{
178	struct rxrpc_local *local;
179	struct rxrpc_net *rxnet = rxrpc_net(net);
180	struct list_head *cursor;
181	const char *age;
182	long diff;
183	int ret;
184
185	_enter("{%d,%d,%pISp}",
186	       srx->transport_type, srx->transport.family, &srx->transport);
187
188	mutex_lock(&rxnet->local_mutex);
189
190	for (cursor = rxnet->local_endpoints.next;
191	     cursor != &rxnet->local_endpoints;
192	     cursor = cursor->next) {
193		local = list_entry(cursor, struct rxrpc_local, link);
194
195		diff = rxrpc_local_cmp_key(local, srx);
196		if (diff < 0)
197			continue;
198		if (diff > 0)
199			break;
200
201		/* Services aren't allowed to share transport sockets, so
202		 * reject that here.  It is possible that the object is dying -
203		 * but it may also still have the local transport address that
204		 * we want bound.
205		 */
206		if (srx->srx_service) {
207			local = NULL;
208			goto addr_in_use;
209		}
210
211		/* Found a match.  We replace a dying object.  Attempting to
212		 * bind the transport socket may still fail if we're attempting
213		 * to use a local address that the dying object is still using.
 
214		 */
215		if (!rxrpc_use_local(local))
216			break;
217
218		age = "old";
219		goto found;
220	}
221
222	local = rxrpc_alloc_local(rxnet, srx);
223	if (!local)
224		goto nomem;
225
226	ret = rxrpc_open_socket(local, net);
227	if (ret < 0)
228		goto sock_error;
229
230	if (cursor != &rxnet->local_endpoints)
231		list_replace_init(cursor, &local->link);
232	else
233		list_add_tail(&local->link, cursor);
234	age = "new";
 
235
236found:
237	mutex_unlock(&rxnet->local_mutex);
238
239	_net("LOCAL %s %d {%pISp}",
240	     age, local->debug_id, &local->srx.transport);
241
242	_leave(" = %p", local);
243	return local;
244
245nomem:
246	ret = -ENOMEM;
247sock_error:
248	mutex_unlock(&rxnet->local_mutex);
249	if (local)
250		call_rcu(&local->rcu, rxrpc_local_rcu);
251	_leave(" = %d", ret);
252	return ERR_PTR(ret);
253
254addr_in_use:
255	mutex_unlock(&rxnet->local_mutex);
256	_leave(" = -EADDRINUSE");
257	return ERR_PTR(-EADDRINUSE);
258}
259
260/*
261 * Get a ref on a local endpoint.
262 */
263struct rxrpc_local *rxrpc_get_local(struct rxrpc_local *local)
 
264{
265	const void *here = __builtin_return_address(0);
266	int n;
267
268	n = atomic_inc_return(&local->usage);
269	trace_rxrpc_local(local->debug_id, rxrpc_local_got, n, here);
 
270	return local;
271}
272
273/*
274 * Get a ref on a local endpoint unless its usage has already reached 0.
275 */
276struct rxrpc_local *rxrpc_get_local_maybe(struct rxrpc_local *local)
 
277{
278	const void *here = __builtin_return_address(0);
279
280	if (local) {
281		int n = atomic_fetch_add_unless(&local->usage, 1, 0);
282		if (n > 0)
283			trace_rxrpc_local(local->debug_id, rxrpc_local_got,
284					  n + 1, here);
285		else
286			local = NULL;
287	}
288	return local;
289}
290
291/*
292 * Queue a local endpoint and pass the caller's reference to the work item.
293 */
294void rxrpc_queue_local(struct rxrpc_local *local)
295{
296	const void *here = __builtin_return_address(0);
297	unsigned int debug_id = local->debug_id;
298	int n = atomic_read(&local->usage);
299
300	if (rxrpc_queue_work(&local->processor))
301		trace_rxrpc_local(debug_id, rxrpc_local_queued, n, here);
302	else
303		rxrpc_put_local(local);
304}
305
306/*
307 * Drop a ref on a local endpoint.
308 */
309void rxrpc_put_local(struct rxrpc_local *local)
310{
311	const void *here = __builtin_return_address(0);
312	unsigned int debug_id;
313	int n;
 
314
315	if (local) {
316		debug_id = local->debug_id;
317
318		n = atomic_dec_return(&local->usage);
319		trace_rxrpc_local(debug_id, rxrpc_local_put, n, here);
 
320
321		if (n == 0)
322			call_rcu(&local->rcu, rxrpc_local_rcu);
323	}
324}
325
326/*
327 * Start using a local endpoint.
328 */
329struct rxrpc_local *rxrpc_use_local(struct rxrpc_local *local)
 
330{
331	local = rxrpc_get_local_maybe(local);
332	if (!local)
333		return NULL;
334
335	if (!__rxrpc_use_local(local)) {
336		rxrpc_put_local(local);
337		return NULL;
338	}
339
340	return local;
341}
342
343/*
344 * Cease using a local endpoint.  Once the number of active users reaches 0, we
345 * start the closure of the transport in the work processor.
346 */
347void rxrpc_unuse_local(struct rxrpc_local *local)
348{
 
 
 
349	if (local) {
350		if (__rxrpc_unuse_local(local)) {
351			rxrpc_get_local(local);
352			rxrpc_queue_local(local);
353		}
 
 
354	}
355}
356
357/*
358 * Destroy a local endpoint's socket and then hand the record to RCU to dispose
359 * of.
360 *
361 * Closing the socket cannot be done from bottom half context or RCU callback
362 * context because it might sleep.
363 */
364static void rxrpc_local_destroyer(struct rxrpc_local *local)
365{
366	struct socket *socket = local->socket;
367	struct rxrpc_net *rxnet = local->rxnet;
368
369	_enter("%d", local->debug_id);
370
371	local->dead = true;
372
373	mutex_lock(&rxnet->local_mutex);
374	list_del_init(&local->link);
375	mutex_unlock(&rxnet->local_mutex);
376
377	rxrpc_clean_up_local_conns(local);
378	rxrpc_service_connection_reaper(&rxnet->service_conn_reaper);
379	ASSERT(!local->service);
380
381	if (socket) {
382		local->socket = NULL;
383		kernel_sock_shutdown(socket, SHUT_RDWR);
384		socket->sk->sk_user_data = NULL;
385		sock_release(socket);
386	}
387
388	/* At this point, there should be no more packets coming in to the
389	 * local endpoint.
390	 */
391	rxrpc_purge_queue(&local->reject_queue);
392	rxrpc_purge_queue(&local->event_queue);
393}
394
395/*
396 * Process events on an endpoint.  The work item carries a ref which
397 * we must release.
398 */
399static void rxrpc_local_processor(struct work_struct *work)
400{
401	struct rxrpc_local *local =
402		container_of(work, struct rxrpc_local, processor);
403	bool again;
404
405	trace_rxrpc_local(local->debug_id, rxrpc_local_processing,
406			  atomic_read(&local->usage), NULL);
407
408	do {
409		again = false;
410		if (!__rxrpc_use_local(local)) {
411			rxrpc_local_destroyer(local);
412			break;
413		}
414
415		if (!skb_queue_empty(&local->reject_queue)) {
416			rxrpc_reject_packets(local);
417			again = true;
418		}
419
420		if (!skb_queue_empty(&local->event_queue)) {
421			rxrpc_process_local_events(local);
422			again = true;
423		}
424
425		__rxrpc_unuse_local(local);
426	} while (again);
427
428	rxrpc_put_local(local);
429}
430
431/*
432 * Destroy a local endpoint after the RCU grace period expires.
433 */
434static void rxrpc_local_rcu(struct rcu_head *rcu)
435{
436	struct rxrpc_local *local = container_of(rcu, struct rxrpc_local, rcu);
437
438	_enter("%d", local->debug_id);
439
440	ASSERT(!work_pending(&local->processor));
441
442	_net("DESTROY LOCAL %d", local->debug_id);
443	kfree(local);
444	_leave("");
445}
446
447/*
448 * Verify the local endpoint list is empty by this point.
449 */
450void rxrpc_destroy_all_locals(struct rxrpc_net *rxnet)
451{
452	struct rxrpc_local *local;
453
454	_enter("");
455
456	flush_workqueue(rxrpc_workqueue);
457
458	if (!list_empty(&rxnet->local_endpoints)) {
459		mutex_lock(&rxnet->local_mutex);
460		list_for_each_entry(local, &rxnet->local_endpoints, link) {
461			pr_err("AF_RXRPC: Leaked local %p {%d}\n",
462			       local, atomic_read(&local->usage));
463		}
464		mutex_unlock(&rxnet->local_mutex);
465		BUG();
466	}
467}