62 	struct inet_frag_queue q;  member
82 static void ip4_frag_init(struct inet_frag_queue *q, const void *a)  in ip4_frag_init()  argument
84 	struct ipq *qp = container_of(q, struct ipq, q);  in ip4_frag_init()
85 	struct net *net = q->fqdir->net;  in ip4_frag_init()
89 	q->key.v4 = *key;  in ip4_frag_init()
91 	qp->peer = q->fqdir->max_dist ?  in ip4_frag_init()
96 static void ip4_frag_free(struct inet_frag_queue *q)  in ip4_frag_free()  argument
100 	qp = container_of(q, struct ipq, q);  in ip4_frag_free()
110 	inet_frag_put(&ipq->q);  in ipq_put()
118 	inet_frag_kill(&ipq->q);  in ipq_kill()
142 	qp = container_of(frag, struct ipq, q);  in ip_expire()
143 	net = qp->q.fqdir->net;  in ip_expire()
148 	if (READ_ONCE(qp->q.fqdir->dead))  in ip_expire()
151 	spin_lock(&qp->q.lock);  in ip_expire()
153 	if (qp->q.flags & INET_FRAG_COMPLETE)  in ip_expire()
156 	qp->q.flags |= INET_FRAG_DROP;  in ip_expire()
161 	if (!(qp->q.flags & INET_FRAG_FIRST_IN))  in ip_expire()
168 	head = inet_frag_pull_head(&qp->q);  in ip_expire()
186 	if (frag_expire_skip_icmp(qp->q.key.v4.user) &&  in ip_expire()
190 	spin_unlock(&qp->q.lock);  in ip_expire()
195 	spin_unlock(&qp->q.lock);  in ip_expire()
216 	struct inet_frag_queue *q;  in ip_find()  local
218 	q = inet_frag_find(net->ipv4.fqdir, &key);  in ip_find()
219 	if (!q)  in ip_find()
222 	return container_of(q, struct ipq, q);  in ip_find()
229 	unsigned int max = qp->q.fqdir->max_dist;  in ip_frag_too_far()
241 	rc = qp->q.fragments_tail && (end - start) > max;  in ip_frag_too_far()
244 		__IP_INC_STATS(qp->q.fqdir->net, IPSTATS_MIB_REASMFAILS);  in ip_frag_too_far()
253 	if (!mod_timer(&qp->q.timer, jiffies + qp->q.fqdir->timeout)) {  in ip_frag_reinit()
254 		refcount_inc(&qp->q.refcnt);  in ip_frag_reinit()
258 	sum_truesize = inet_frag_rbtree_purge(&qp->q.rb_fragments,  in ip_frag_reinit()
260 	sub_frag_mem_limit(qp->q.fqdir, sum_truesize);  in ip_frag_reinit()
262 	qp->q.flags = 0;  in ip_frag_reinit()
263 	qp->q.len = 0;  in ip_frag_reinit()
264 	qp->q.meat = 0;  in ip_frag_reinit()
265 	qp->q.rb_fragments = RB_ROOT;  in ip_frag_reinit()
266 	qp->q.fragments_tail = NULL;  in ip_frag_reinit()
267 	qp->q.last_run_head = NULL;  in ip_frag_reinit()
277 	struct net *net = qp->q.fqdir->net;  in ip_frag_queue()
287 	if (qp->q.flags & INET_FRAG_COMPLETE) {  in ip_frag_queue()
315 		if (end < qp->q.len ||  in ip_frag_queue()
316 		    ((qp->q.flags & INET_FRAG_LAST_IN) && end != qp->q.len))  in ip_frag_queue()
318 		qp->q.flags |= INET_FRAG_LAST_IN;  in ip_frag_queue()
319 		qp->q.len = end;  in ip_frag_queue()
326 		if (end > qp->q.len) {  in ip_frag_queue()
328 			if (qp->q.flags & INET_FRAG_LAST_IN)  in ip_frag_queue()
330 			qp->q.len = end;  in ip_frag_queue()
349 	prev_tail = qp->q.fragments_tail;  in ip_frag_queue()
350 	err = inet_frag_queue_insert(&qp->q, skb, offset, end);  in ip_frag_queue()
357 	qp->q.stamp = skb->tstamp;  in ip_frag_queue()
358 	qp->q.mono_delivery_time = skb->mono_delivery_time;  in ip_frag_queue()
359 	qp->q.meat += skb->len;  in ip_frag_queue()
361 	add_frag_mem_limit(qp->q.fqdir, skb->truesize);  in ip_frag_queue()
363 		qp->q.flags |= INET_FRAG_FIRST_IN;  in ip_frag_queue()
367 	if (fragsize > qp->q.max_size)  in ip_frag_queue()
368 		qp->q.max_size = fragsize;  in ip_frag_queue()
374 	if (qp->q.flags == (INET_FRAG_FIRST_IN | INET_FRAG_LAST_IN) &&  in ip_frag_queue()
375 	    qp->q.meat == qp->q.len) {  in ip_frag_queue()
382 			inet_frag_kill(&qp->q);  in ip_frag_queue()
399 	inet_frag_kill(&qp->q);  in ip_frag_queue()
408 	return qp->q.key.v4.user == IP_DEFRAG_LOCAL_DELIVER;  in ip_frag_coalesce_ok()
415 	struct net *net = qp->q.fqdir->net;  in ip_frag_reasm()
430 	reasm_data = inet_frag_reasm_prepare(&qp->q, skb, prev_tail);  in ip_frag_reasm()
434 	len = ip_hdrlen(skb) + qp->q.len;  in ip_frag_reasm()
439 	inet_frag_reasm_finish(&qp->q, skb, reasm_data,  in ip_frag_reasm()
443 	IPCB(skb)->frag_max_size = max(qp->max_df_size, qp->q.max_size);  in ip_frag_reasm()
457 	if (qp->max_df_size == qp->q.max_size) {  in ip_frag_reasm()
467 	qp->q.rb_fragments = RB_ROOT;  in ip_frag_reasm()
468 	qp->q.fragments_tail = NULL;  in ip_frag_reasm()
469 	qp->q.last_run_head = NULL;  in ip_frag_reasm()
477 	net_info_ratelimited("Oversized IP packet from %pI4\n", &qp->q.key.v4.saddr);  in ip_frag_reasm()
497 		spin_lock(&qp->q.lock);  in ip_defrag()
501 		spin_unlock(&qp->q.lock);  in ip_defrag()