1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* SCTP kernel implementation 3 * (C) Copyright IBM Corp. 2001, 2004 4 * Copyright (c) 1999-2000 Cisco, Inc. 5 * Copyright (c) 1999-2001 Motorola, Inc. 6 * Copyright (c) 2001 Intel Corp. 7 * 8 * This file is part of the SCTP kernel implementation 9 * 10 * This file contains sctp stream maniuplation primitives and helpers. 11 * 12 * Please send any bug reports or fixes you make to the 13 * email address(es): 14 * lksctp developers <linux-sctp@vger.kernel.org> 15 * 16 * Written or modified by: 17 * Xin Long <lucien.xin@gmail.com> 18 */ 19 20 #include <linux/list.h> 21 #include <net/sctp/sctp.h> 22 #include <net/sctp/sm.h> 23 #include <net/sctp/stream_sched.h> 24 25 /* Migrates chunks from stream queues to new stream queues if needed, 26 * but not across associations. Also, removes those chunks to streams 27 * higher than the new max. 28 */ 29 static void sctp_stream_outq_migrate(struct sctp_stream *stream, 30 struct sctp_stream *new, __u16 outcnt) 31 { 32 struct sctp_association *asoc; 33 struct sctp_chunk *ch, *temp; 34 struct sctp_outq *outq; 35 int i; 36 37 asoc = container_of(stream, struct sctp_association, stream); 38 outq = &asoc->outqueue; 39 40 list_for_each_entry_safe(ch, temp, &outq->out_chunk_list, list) { 41 __u16 sid = sctp_chunk_stream_no(ch); 42 43 if (sid < outcnt) 44 continue; 45 46 sctp_sched_dequeue_common(outq, ch); 47 /* No need to call dequeue_done here because 48 * the chunks are not scheduled by now. 49 */ 50 51 /* Mark as failed send. */ 52 sctp_chunk_fail(ch, (__force __u32)SCTP_ERROR_INV_STRM); 53 if (asoc->peer.prsctp_capable && 54 SCTP_PR_PRIO_ENABLED(ch->sinfo.sinfo_flags)) 55 asoc->sent_cnt_removable--; 56 57 sctp_chunk_free(ch); 58 } 59 60 if (new) { 61 /* Here we actually move the old ext stuff into the new 62 * buffer, because we want to keep it. Then 63 * sctp_stream_update will swap ->out pointers. 64 */ 65 for (i = 0; i < outcnt; i++) { 66 kfree(SCTP_SO(new, i)->ext); 67 SCTP_SO(new, i)->ext = SCTP_SO(stream, i)->ext; 68 SCTP_SO(stream, i)->ext = NULL; 69 } 70 } 71 72 for (i = outcnt; i < stream->outcnt; i++) { 73 kfree(SCTP_SO(stream, i)->ext); 74 SCTP_SO(stream, i)->ext = NULL; 75 } 76 } 77 78 static int sctp_stream_alloc_out(struct sctp_stream *stream, __u16 outcnt, 79 gfp_t gfp) 80 { 81 int ret; 82 83 if (outcnt <= stream->outcnt) 84 return 0; 85 86 ret = genradix_prealloc(&stream->out, outcnt, gfp); 87 if (ret) 88 return ret; 89 90 stream->outcnt = outcnt; 91 return 0; 92 } 93 94 static int sctp_stream_alloc_in(struct sctp_stream *stream, __u16 incnt, 95 gfp_t gfp) 96 { 97 int ret; 98 99 if (incnt <= stream->incnt) 100 return 0; 101 102 ret = genradix_prealloc(&stream->in, incnt, gfp); 103 if (ret) 104 return ret; 105 106 stream->incnt = incnt; 107 return 0; 108 } 109 110 int sctp_stream_init(struct sctp_stream *stream, __u16 outcnt, __u16 incnt, 111 gfp_t gfp) 112 { 113 struct sctp_sched_ops *sched = sctp_sched_ops_from_stream(stream); 114 int i, ret = 0; 115 116 gfp |= __GFP_NOWARN; 117 118 /* Initial stream->out size may be very big, so free it and alloc 119 * a new one with new outcnt to save memory if needed. 120 */ 121 if (outcnt == stream->outcnt) 122 goto handle_in; 123 124 /* Filter out chunks queued on streams that won't exist anymore */ 125 sched->unsched_all(stream); 126 sctp_stream_outq_migrate(stream, NULL, outcnt); 127 sched->sched_all(stream); 128 129 ret = sctp_stream_alloc_out(stream, outcnt, gfp); 130 if (ret) 131 goto out_err; 132 133 for (i = 0; i < stream->outcnt; i++) 134 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 135 136 handle_in: 137 sctp_stream_interleave_init(stream); 138 if (!incnt) 139 goto out; 140 141 ret = sctp_stream_alloc_in(stream, incnt, gfp); 142 if (ret) 143 goto in_err; 144 145 goto out; 146 147 in_err: 148 sched->free(stream); 149 genradix_free(&stream->in); 150 out_err: 151 genradix_free(&stream->out); 152 stream->outcnt = 0; 153 out: 154 return ret; 155 } 156 157 int sctp_stream_init_ext(struct sctp_stream *stream, __u16 sid) 158 { 159 struct sctp_stream_out_ext *soute; 160 int ret; 161 162 soute = kzalloc(sizeof(*soute), GFP_KERNEL); 163 if (!soute) 164 return -ENOMEM; 165 SCTP_SO(stream, sid)->ext = soute; 166 167 ret = sctp_sched_init_sid(stream, sid, GFP_KERNEL); 168 if (ret) { 169 kfree(SCTP_SO(stream, sid)->ext); 170 SCTP_SO(stream, sid)->ext = NULL; 171 } 172 173 return ret; 174 } 175 176 void sctp_stream_free(struct sctp_stream *stream) 177 { 178 struct sctp_sched_ops *sched = sctp_sched_ops_from_stream(stream); 179 int i; 180 181 sched->free(stream); 182 for (i = 0; i < stream->outcnt; i++) 183 kfree(SCTP_SO(stream, i)->ext); 184 genradix_free(&stream->out); 185 genradix_free(&stream->in); 186 } 187 188 void sctp_stream_clear(struct sctp_stream *stream) 189 { 190 int i; 191 192 for (i = 0; i < stream->outcnt; i++) { 193 SCTP_SO(stream, i)->mid = 0; 194 SCTP_SO(stream, i)->mid_uo = 0; 195 } 196 197 for (i = 0; i < stream->incnt; i++) 198 SCTP_SI(stream, i)->mid = 0; 199 } 200 201 void sctp_stream_update(struct sctp_stream *stream, struct sctp_stream *new) 202 { 203 struct sctp_sched_ops *sched = sctp_sched_ops_from_stream(stream); 204 205 sched->unsched_all(stream); 206 sctp_stream_outq_migrate(stream, new, new->outcnt); 207 sctp_stream_free(stream); 208 209 stream->out = new->out; 210 stream->in = new->in; 211 stream->outcnt = new->outcnt; 212 stream->incnt = new->incnt; 213 214 sched->sched_all(stream); 215 216 new->out.tree.root = NULL; 217 new->in.tree.root = NULL; 218 new->outcnt = 0; 219 new->incnt = 0; 220 } 221 222 static int sctp_send_reconf(struct sctp_association *asoc, 223 struct sctp_chunk *chunk) 224 { 225 struct net *net = sock_net(asoc->base.sk); 226 int retval = 0; 227 228 retval = sctp_primitive_RECONF(net, asoc, chunk); 229 if (retval) 230 sctp_chunk_free(chunk); 231 232 return retval; 233 } 234 235 static bool sctp_stream_outq_is_empty(struct sctp_stream *stream, 236 __u16 str_nums, __be16 *str_list) 237 { 238 struct sctp_association *asoc; 239 __u16 i; 240 241 asoc = container_of(stream, struct sctp_association, stream); 242 if (!asoc->outqueue.out_qlen) 243 return true; 244 245 if (!str_nums) 246 return false; 247 248 for (i = 0; i < str_nums; i++) { 249 __u16 sid = ntohs(str_list[i]); 250 251 if (SCTP_SO(stream, sid)->ext && 252 !list_empty(&SCTP_SO(stream, sid)->ext->outq)) 253 return false; 254 } 255 256 return true; 257 } 258 259 int sctp_send_reset_streams(struct sctp_association *asoc, 260 struct sctp_reset_streams *params) 261 { 262 struct sctp_stream *stream = &asoc->stream; 263 __u16 i, str_nums, *str_list; 264 struct sctp_chunk *chunk; 265 int retval = -EINVAL; 266 __be16 *nstr_list; 267 bool out, in; 268 269 if (!asoc->peer.reconf_capable || 270 !(asoc->strreset_enable & SCTP_ENABLE_RESET_STREAM_REQ)) { 271 retval = -ENOPROTOOPT; 272 goto out; 273 } 274 275 if (asoc->strreset_outstanding) { 276 retval = -EINPROGRESS; 277 goto out; 278 } 279 280 out = params->srs_flags & SCTP_STREAM_RESET_OUTGOING; 281 in = params->srs_flags & SCTP_STREAM_RESET_INCOMING; 282 if (!out && !in) 283 goto out; 284 285 str_nums = params->srs_number_streams; 286 str_list = params->srs_stream_list; 287 if (str_nums) { 288 int param_len = 0; 289 290 if (out) { 291 for (i = 0; i < str_nums; i++) 292 if (str_list[i] >= stream->outcnt) 293 goto out; 294 295 param_len = str_nums * sizeof(__u16) + 296 sizeof(struct sctp_strreset_outreq); 297 } 298 299 if (in) { 300 for (i = 0; i < str_nums; i++) 301 if (str_list[i] >= stream->incnt) 302 goto out; 303 304 param_len += str_nums * sizeof(__u16) + 305 sizeof(struct sctp_strreset_inreq); 306 } 307 308 if (param_len > SCTP_MAX_CHUNK_LEN - 309 sizeof(struct sctp_reconf_chunk)) 310 goto out; 311 } 312 313 nstr_list = kcalloc(str_nums, sizeof(__be16), GFP_KERNEL); 314 if (!nstr_list) { 315 retval = -ENOMEM; 316 goto out; 317 } 318 319 for (i = 0; i < str_nums; i++) 320 nstr_list[i] = htons(str_list[i]); 321 322 if (out && !sctp_stream_outq_is_empty(stream, str_nums, nstr_list)) { 323 kfree(nstr_list); 324 retval = -EAGAIN; 325 goto out; 326 } 327 328 chunk = sctp_make_strreset_req(asoc, str_nums, nstr_list, out, in); 329 330 kfree(nstr_list); 331 332 if (!chunk) { 333 retval = -ENOMEM; 334 goto out; 335 } 336 337 if (out) { 338 if (str_nums) 339 for (i = 0; i < str_nums; i++) 340 SCTP_SO(stream, str_list[i])->state = 341 SCTP_STREAM_CLOSED; 342 else 343 for (i = 0; i < stream->outcnt; i++) 344 SCTP_SO(stream, i)->state = SCTP_STREAM_CLOSED; 345 } 346 347 asoc->strreset_chunk = chunk; 348 sctp_chunk_hold(asoc->strreset_chunk); 349 350 retval = sctp_send_reconf(asoc, chunk); 351 if (retval) { 352 sctp_chunk_put(asoc->strreset_chunk); 353 asoc->strreset_chunk = NULL; 354 if (!out) 355 goto out; 356 357 if (str_nums) 358 for (i = 0; i < str_nums; i++) 359 SCTP_SO(stream, str_list[i])->state = 360 SCTP_STREAM_OPEN; 361 else 362 for (i = 0; i < stream->outcnt; i++) 363 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 364 365 goto out; 366 } 367 368 asoc->strreset_outstanding = out + in; 369 370 out: 371 return retval; 372 } 373 374 int sctp_send_reset_assoc(struct sctp_association *asoc) 375 { 376 struct sctp_stream *stream = &asoc->stream; 377 struct sctp_chunk *chunk = NULL; 378 int retval; 379 __u16 i; 380 381 if (!asoc->peer.reconf_capable || 382 !(asoc->strreset_enable & SCTP_ENABLE_RESET_ASSOC_REQ)) 383 return -ENOPROTOOPT; 384 385 if (asoc->strreset_outstanding) 386 return -EINPROGRESS; 387 388 if (!sctp_outq_is_empty(&asoc->outqueue)) 389 return -EAGAIN; 390 391 chunk = sctp_make_strreset_tsnreq(asoc); 392 if (!chunk) 393 return -ENOMEM; 394 395 /* Block further xmit of data until this request is completed */ 396 for (i = 0; i < stream->outcnt; i++) 397 SCTP_SO(stream, i)->state = SCTP_STREAM_CLOSED; 398 399 asoc->strreset_chunk = chunk; 400 sctp_chunk_hold(asoc->strreset_chunk); 401 402 retval = sctp_send_reconf(asoc, chunk); 403 if (retval) { 404 sctp_chunk_put(asoc->strreset_chunk); 405 asoc->strreset_chunk = NULL; 406 407 for (i = 0; i < stream->outcnt; i++) 408 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 409 410 return retval; 411 } 412 413 asoc->strreset_outstanding = 1; 414 415 return 0; 416 } 417 418 int sctp_send_add_streams(struct sctp_association *asoc, 419 struct sctp_add_streams *params) 420 { 421 struct sctp_stream *stream = &asoc->stream; 422 struct sctp_chunk *chunk = NULL; 423 int retval; 424 __u32 outcnt, incnt; 425 __u16 out, in; 426 427 if (!asoc->peer.reconf_capable || 428 !(asoc->strreset_enable & SCTP_ENABLE_CHANGE_ASSOC_REQ)) { 429 retval = -ENOPROTOOPT; 430 goto out; 431 } 432 433 if (asoc->strreset_outstanding) { 434 retval = -EINPROGRESS; 435 goto out; 436 } 437 438 out = params->sas_outstrms; 439 in = params->sas_instrms; 440 outcnt = stream->outcnt + out; 441 incnt = stream->incnt + in; 442 if (outcnt > SCTP_MAX_STREAM || incnt > SCTP_MAX_STREAM || 443 (!out && !in)) { 444 retval = -EINVAL; 445 goto out; 446 } 447 448 if (out) { 449 retval = sctp_stream_alloc_out(stream, outcnt, GFP_KERNEL); 450 if (retval) 451 goto out; 452 } 453 454 chunk = sctp_make_strreset_addstrm(asoc, out, in); 455 if (!chunk) { 456 retval = -ENOMEM; 457 goto out; 458 } 459 460 asoc->strreset_chunk = chunk; 461 sctp_chunk_hold(asoc->strreset_chunk); 462 463 retval = sctp_send_reconf(asoc, chunk); 464 if (retval) { 465 sctp_chunk_put(asoc->strreset_chunk); 466 asoc->strreset_chunk = NULL; 467 goto out; 468 } 469 470 asoc->strreset_outstanding = !!out + !!in; 471 472 out: 473 return retval; 474 } 475 476 static struct sctp_paramhdr *sctp_chunk_lookup_strreset_param( 477 struct sctp_association *asoc, __be32 resp_seq, 478 __be16 type) 479 { 480 struct sctp_chunk *chunk = asoc->strreset_chunk; 481 struct sctp_reconf_chunk *hdr; 482 union sctp_params param; 483 484 if (!chunk) 485 return NULL; 486 487 hdr = (struct sctp_reconf_chunk *)chunk->chunk_hdr; 488 sctp_walk_params(param, hdr, params) { 489 /* sctp_strreset_tsnreq is actually the basic structure 490 * of all stream reconf params, so it's safe to use it 491 * to access request_seq. 492 */ 493 struct sctp_strreset_tsnreq *req = param.v; 494 495 if ((!resp_seq || req->request_seq == resp_seq) && 496 (!type || type == req->param_hdr.type)) 497 return param.v; 498 } 499 500 return NULL; 501 } 502 503 static void sctp_update_strreset_result(struct sctp_association *asoc, 504 __u32 result) 505 { 506 asoc->strreset_result[1] = asoc->strreset_result[0]; 507 asoc->strreset_result[0] = result; 508 } 509 510 struct sctp_chunk *sctp_process_strreset_outreq( 511 struct sctp_association *asoc, 512 union sctp_params param, 513 struct sctp_ulpevent **evp) 514 { 515 struct sctp_strreset_outreq *outreq = param.v; 516 struct sctp_stream *stream = &asoc->stream; 517 __u32 result = SCTP_STRRESET_DENIED; 518 __be16 *str_p = NULL; 519 __u32 request_seq; 520 __u16 i, nums; 521 522 request_seq = ntohl(outreq->request_seq); 523 524 if (ntohl(outreq->send_reset_at_tsn) > 525 sctp_tsnmap_get_ctsn(&asoc->peer.tsn_map)) { 526 result = SCTP_STRRESET_IN_PROGRESS; 527 goto err; 528 } 529 530 if (TSN_lt(asoc->strreset_inseq, request_seq) || 531 TSN_lt(request_seq, asoc->strreset_inseq - 2)) { 532 result = SCTP_STRRESET_ERR_BAD_SEQNO; 533 goto err; 534 } else if (TSN_lt(request_seq, asoc->strreset_inseq)) { 535 i = asoc->strreset_inseq - request_seq - 1; 536 result = asoc->strreset_result[i]; 537 goto err; 538 } 539 asoc->strreset_inseq++; 540 541 /* Check strreset_enable after inseq inc, as sender cannot tell 542 * the peer doesn't enable strreset after receiving response with 543 * result denied, as well as to keep consistent with bsd. 544 */ 545 if (!(asoc->strreset_enable & SCTP_ENABLE_RESET_STREAM_REQ)) 546 goto out; 547 548 nums = (ntohs(param.p->length) - sizeof(*outreq)) / sizeof(__u16); 549 str_p = outreq->list_of_streams; 550 for (i = 0; i < nums; i++) { 551 if (ntohs(str_p[i]) >= stream->incnt) { 552 result = SCTP_STRRESET_ERR_WRONG_SSN; 553 goto out; 554 } 555 } 556 557 if (asoc->strreset_chunk) { 558 if (!sctp_chunk_lookup_strreset_param( 559 asoc, outreq->response_seq, 560 SCTP_PARAM_RESET_IN_REQUEST)) { 561 /* same process with outstanding isn't 0 */ 562 result = SCTP_STRRESET_ERR_IN_PROGRESS; 563 goto out; 564 } 565 566 asoc->strreset_outstanding--; 567 asoc->strreset_outseq++; 568 569 if (!asoc->strreset_outstanding) { 570 struct sctp_transport *t; 571 572 t = asoc->strreset_chunk->transport; 573 if (del_timer(&t->reconf_timer)) 574 sctp_transport_put(t); 575 576 sctp_chunk_put(asoc->strreset_chunk); 577 asoc->strreset_chunk = NULL; 578 } 579 } 580 581 if (nums) 582 for (i = 0; i < nums; i++) 583 SCTP_SI(stream, ntohs(str_p[i]))->mid = 0; 584 else 585 for (i = 0; i < stream->incnt; i++) 586 SCTP_SI(stream, i)->mid = 0; 587 588 result = SCTP_STRRESET_PERFORMED; 589 590 *evp = sctp_ulpevent_make_stream_reset_event(asoc, 591 SCTP_STREAM_RESET_INCOMING_SSN, nums, str_p, GFP_ATOMIC); 592 593 out: 594 sctp_update_strreset_result(asoc, result); 595 err: 596 return sctp_make_strreset_resp(asoc, result, request_seq); 597 } 598 599 struct sctp_chunk *sctp_process_strreset_inreq( 600 struct sctp_association *asoc, 601 union sctp_params param, 602 struct sctp_ulpevent **evp) 603 { 604 struct sctp_strreset_inreq *inreq = param.v; 605 struct sctp_stream *stream = &asoc->stream; 606 __u32 result = SCTP_STRRESET_DENIED; 607 struct sctp_chunk *chunk = NULL; 608 __u32 request_seq; 609 __u16 i, nums; 610 __be16 *str_p; 611 612 request_seq = ntohl(inreq->request_seq); 613 if (TSN_lt(asoc->strreset_inseq, request_seq) || 614 TSN_lt(request_seq, asoc->strreset_inseq - 2)) { 615 result = SCTP_STRRESET_ERR_BAD_SEQNO; 616 goto err; 617 } else if (TSN_lt(request_seq, asoc->strreset_inseq)) { 618 i = asoc->strreset_inseq - request_seq - 1; 619 result = asoc->strreset_result[i]; 620 if (result == SCTP_STRRESET_PERFORMED) 621 return NULL; 622 goto err; 623 } 624 asoc->strreset_inseq++; 625 626 if (!(asoc->strreset_enable & SCTP_ENABLE_RESET_STREAM_REQ)) 627 goto out; 628 629 if (asoc->strreset_outstanding) { 630 result = SCTP_STRRESET_ERR_IN_PROGRESS; 631 goto out; 632 } 633 634 nums = (ntohs(param.p->length) - sizeof(*inreq)) / sizeof(__u16); 635 str_p = inreq->list_of_streams; 636 for (i = 0; i < nums; i++) { 637 if (ntohs(str_p[i]) >= stream->outcnt) { 638 result = SCTP_STRRESET_ERR_WRONG_SSN; 639 goto out; 640 } 641 } 642 643 if (!sctp_stream_outq_is_empty(stream, nums, str_p)) { 644 result = SCTP_STRRESET_IN_PROGRESS; 645 asoc->strreset_inseq--; 646 goto err; 647 } 648 649 chunk = sctp_make_strreset_req(asoc, nums, str_p, 1, 0); 650 if (!chunk) 651 goto out; 652 653 if (nums) 654 for (i = 0; i < nums; i++) 655 SCTP_SO(stream, ntohs(str_p[i]))->state = 656 SCTP_STREAM_CLOSED; 657 else 658 for (i = 0; i < stream->outcnt; i++) 659 SCTP_SO(stream, i)->state = SCTP_STREAM_CLOSED; 660 661 asoc->strreset_chunk = chunk; 662 asoc->strreset_outstanding = 1; 663 sctp_chunk_hold(asoc->strreset_chunk); 664 665 result = SCTP_STRRESET_PERFORMED; 666 667 out: 668 sctp_update_strreset_result(asoc, result); 669 err: 670 if (!chunk) 671 chunk = sctp_make_strreset_resp(asoc, result, request_seq); 672 673 return chunk; 674 } 675 676 struct sctp_chunk *sctp_process_strreset_tsnreq( 677 struct sctp_association *asoc, 678 union sctp_params param, 679 struct sctp_ulpevent **evp) 680 { 681 __u32 init_tsn = 0, next_tsn = 0, max_tsn_seen; 682 struct sctp_strreset_tsnreq *tsnreq = param.v; 683 struct sctp_stream *stream = &asoc->stream; 684 __u32 result = SCTP_STRRESET_DENIED; 685 __u32 request_seq; 686 __u16 i; 687 688 request_seq = ntohl(tsnreq->request_seq); 689 if (TSN_lt(asoc->strreset_inseq, request_seq) || 690 TSN_lt(request_seq, asoc->strreset_inseq - 2)) { 691 result = SCTP_STRRESET_ERR_BAD_SEQNO; 692 goto err; 693 } else if (TSN_lt(request_seq, asoc->strreset_inseq)) { 694 i = asoc->strreset_inseq - request_seq - 1; 695 result = asoc->strreset_result[i]; 696 if (result == SCTP_STRRESET_PERFORMED) { 697 next_tsn = asoc->ctsn_ack_point + 1; 698 init_tsn = 699 sctp_tsnmap_get_ctsn(&asoc->peer.tsn_map) + 1; 700 } 701 goto err; 702 } 703 704 if (!sctp_outq_is_empty(&asoc->outqueue)) { 705 result = SCTP_STRRESET_IN_PROGRESS; 706 goto err; 707 } 708 709 asoc->strreset_inseq++; 710 711 if (!(asoc->strreset_enable & SCTP_ENABLE_RESET_ASSOC_REQ)) 712 goto out; 713 714 if (asoc->strreset_outstanding) { 715 result = SCTP_STRRESET_ERR_IN_PROGRESS; 716 goto out; 717 } 718 719 /* G4: The same processing as though a FWD-TSN chunk (as defined in 720 * [RFC3758]) with all streams affected and a new cumulative TSN 721 * ACK of the Receiver's Next TSN minus 1 were received MUST be 722 * performed. 723 */ 724 max_tsn_seen = sctp_tsnmap_get_max_tsn_seen(&asoc->peer.tsn_map); 725 asoc->stream.si->report_ftsn(&asoc->ulpq, max_tsn_seen); 726 727 /* G1: Compute an appropriate value for the Receiver's Next TSN -- the 728 * TSN that the peer should use to send the next DATA chunk. The 729 * value SHOULD be the smallest TSN not acknowledged by the 730 * receiver of the request plus 2^31. 731 */ 732 init_tsn = sctp_tsnmap_get_ctsn(&asoc->peer.tsn_map) + (1 << 31); 733 sctp_tsnmap_init(&asoc->peer.tsn_map, SCTP_TSN_MAP_INITIAL, 734 init_tsn, GFP_ATOMIC); 735 736 /* G3: The same processing as though a SACK chunk with no gap report 737 * and a cumulative TSN ACK of the Sender's Next TSN minus 1 were 738 * received MUST be performed. 739 */ 740 sctp_outq_free(&asoc->outqueue); 741 742 /* G2: Compute an appropriate value for the local endpoint's next TSN, 743 * i.e., the next TSN assigned by the receiver of the SSN/TSN reset 744 * chunk. The value SHOULD be the highest TSN sent by the receiver 745 * of the request plus 1. 746 */ 747 next_tsn = asoc->next_tsn; 748 asoc->ctsn_ack_point = next_tsn - 1; 749 asoc->adv_peer_ack_point = asoc->ctsn_ack_point; 750 751 /* G5: The next expected and outgoing SSNs MUST be reset to 0 for all 752 * incoming and outgoing streams. 753 */ 754 for (i = 0; i < stream->outcnt; i++) { 755 SCTP_SO(stream, i)->mid = 0; 756 SCTP_SO(stream, i)->mid_uo = 0; 757 } 758 for (i = 0; i < stream->incnt; i++) 759 SCTP_SI(stream, i)->mid = 0; 760 761 result = SCTP_STRRESET_PERFORMED; 762 763 *evp = sctp_ulpevent_make_assoc_reset_event(asoc, 0, init_tsn, 764 next_tsn, GFP_ATOMIC); 765 766 out: 767 sctp_update_strreset_result(asoc, result); 768 err: 769 return sctp_make_strreset_tsnresp(asoc, result, request_seq, 770 next_tsn, init_tsn); 771 } 772 773 struct sctp_chunk *sctp_process_strreset_addstrm_out( 774 struct sctp_association *asoc, 775 union sctp_params param, 776 struct sctp_ulpevent **evp) 777 { 778 struct sctp_strreset_addstrm *addstrm = param.v; 779 struct sctp_stream *stream = &asoc->stream; 780 __u32 result = SCTP_STRRESET_DENIED; 781 __u32 request_seq, incnt; 782 __u16 in, i; 783 784 request_seq = ntohl(addstrm->request_seq); 785 if (TSN_lt(asoc->strreset_inseq, request_seq) || 786 TSN_lt(request_seq, asoc->strreset_inseq - 2)) { 787 result = SCTP_STRRESET_ERR_BAD_SEQNO; 788 goto err; 789 } else if (TSN_lt(request_seq, asoc->strreset_inseq)) { 790 i = asoc->strreset_inseq - request_seq - 1; 791 result = asoc->strreset_result[i]; 792 goto err; 793 } 794 asoc->strreset_inseq++; 795 796 if (!(asoc->strreset_enable & SCTP_ENABLE_CHANGE_ASSOC_REQ)) 797 goto out; 798 799 in = ntohs(addstrm->number_of_streams); 800 incnt = stream->incnt + in; 801 if (!in || incnt > SCTP_MAX_STREAM) 802 goto out; 803 804 if (sctp_stream_alloc_in(stream, incnt, GFP_ATOMIC)) 805 goto out; 806 807 if (asoc->strreset_chunk) { 808 if (!sctp_chunk_lookup_strreset_param( 809 asoc, 0, SCTP_PARAM_RESET_ADD_IN_STREAMS)) { 810 /* same process with outstanding isn't 0 */ 811 result = SCTP_STRRESET_ERR_IN_PROGRESS; 812 goto out; 813 } 814 815 asoc->strreset_outstanding--; 816 asoc->strreset_outseq++; 817 818 if (!asoc->strreset_outstanding) { 819 struct sctp_transport *t; 820 821 t = asoc->strreset_chunk->transport; 822 if (del_timer(&t->reconf_timer)) 823 sctp_transport_put(t); 824 825 sctp_chunk_put(asoc->strreset_chunk); 826 asoc->strreset_chunk = NULL; 827 } 828 } 829 830 stream->incnt = incnt; 831 832 result = SCTP_STRRESET_PERFORMED; 833 834 *evp = sctp_ulpevent_make_stream_change_event(asoc, 835 0, ntohs(addstrm->number_of_streams), 0, GFP_ATOMIC); 836 837 out: 838 sctp_update_strreset_result(asoc, result); 839 err: 840 return sctp_make_strreset_resp(asoc, result, request_seq); 841 } 842 843 struct sctp_chunk *sctp_process_strreset_addstrm_in( 844 struct sctp_association *asoc, 845 union sctp_params param, 846 struct sctp_ulpevent **evp) 847 { 848 struct sctp_strreset_addstrm *addstrm = param.v; 849 struct sctp_stream *stream = &asoc->stream; 850 __u32 result = SCTP_STRRESET_DENIED; 851 struct sctp_chunk *chunk = NULL; 852 __u32 request_seq, outcnt; 853 __u16 out, i; 854 int ret; 855 856 request_seq = ntohl(addstrm->request_seq); 857 if (TSN_lt(asoc->strreset_inseq, request_seq) || 858 TSN_lt(request_seq, asoc->strreset_inseq - 2)) { 859 result = SCTP_STRRESET_ERR_BAD_SEQNO; 860 goto err; 861 } else if (TSN_lt(request_seq, asoc->strreset_inseq)) { 862 i = asoc->strreset_inseq - request_seq - 1; 863 result = asoc->strreset_result[i]; 864 if (result == SCTP_STRRESET_PERFORMED) 865 return NULL; 866 goto err; 867 } 868 asoc->strreset_inseq++; 869 870 if (!(asoc->strreset_enable & SCTP_ENABLE_CHANGE_ASSOC_REQ)) 871 goto out; 872 873 if (asoc->strreset_outstanding) { 874 result = SCTP_STRRESET_ERR_IN_PROGRESS; 875 goto out; 876 } 877 878 out = ntohs(addstrm->number_of_streams); 879 outcnt = stream->outcnt + out; 880 if (!out || outcnt > SCTP_MAX_STREAM) 881 goto out; 882 883 ret = sctp_stream_alloc_out(stream, outcnt, GFP_ATOMIC); 884 if (ret) 885 goto out; 886 887 chunk = sctp_make_strreset_addstrm(asoc, out, 0); 888 if (!chunk) 889 goto out; 890 891 asoc->strreset_chunk = chunk; 892 asoc->strreset_outstanding = 1; 893 sctp_chunk_hold(asoc->strreset_chunk); 894 895 stream->outcnt = outcnt; 896 897 result = SCTP_STRRESET_PERFORMED; 898 899 out: 900 sctp_update_strreset_result(asoc, result); 901 err: 902 if (!chunk) 903 chunk = sctp_make_strreset_resp(asoc, result, request_seq); 904 905 return chunk; 906 } 907 908 struct sctp_chunk *sctp_process_strreset_resp( 909 struct sctp_association *asoc, 910 union sctp_params param, 911 struct sctp_ulpevent **evp) 912 { 913 struct sctp_stream *stream = &asoc->stream; 914 struct sctp_strreset_resp *resp = param.v; 915 struct sctp_transport *t; 916 __u16 i, nums, flags = 0; 917 struct sctp_paramhdr *req; 918 __u32 result; 919 920 req = sctp_chunk_lookup_strreset_param(asoc, resp->response_seq, 0); 921 if (!req) 922 return NULL; 923 924 result = ntohl(resp->result); 925 if (result != SCTP_STRRESET_PERFORMED) { 926 /* if in progress, do nothing but retransmit */ 927 if (result == SCTP_STRRESET_IN_PROGRESS) 928 return NULL; 929 else if (result == SCTP_STRRESET_DENIED) 930 flags = SCTP_STREAM_RESET_DENIED; 931 else 932 flags = SCTP_STREAM_RESET_FAILED; 933 } 934 935 if (req->type == SCTP_PARAM_RESET_OUT_REQUEST) { 936 struct sctp_strreset_outreq *outreq; 937 __be16 *str_p; 938 939 outreq = (struct sctp_strreset_outreq *)req; 940 str_p = outreq->list_of_streams; 941 nums = (ntohs(outreq->param_hdr.length) - sizeof(*outreq)) / 942 sizeof(__u16); 943 944 if (result == SCTP_STRRESET_PERFORMED) { 945 struct sctp_stream_out *sout; 946 if (nums) { 947 for (i = 0; i < nums; i++) { 948 sout = SCTP_SO(stream, ntohs(str_p[i])); 949 sout->mid = 0; 950 sout->mid_uo = 0; 951 } 952 } else { 953 for (i = 0; i < stream->outcnt; i++) { 954 sout = SCTP_SO(stream, i); 955 sout->mid = 0; 956 sout->mid_uo = 0; 957 } 958 } 959 } 960 961 flags |= SCTP_STREAM_RESET_OUTGOING_SSN; 962 963 for (i = 0; i < stream->outcnt; i++) 964 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 965 966 *evp = sctp_ulpevent_make_stream_reset_event(asoc, flags, 967 nums, str_p, GFP_ATOMIC); 968 } else if (req->type == SCTP_PARAM_RESET_IN_REQUEST) { 969 struct sctp_strreset_inreq *inreq; 970 __be16 *str_p; 971 972 /* if the result is performed, it's impossible for inreq */ 973 if (result == SCTP_STRRESET_PERFORMED) 974 return NULL; 975 976 inreq = (struct sctp_strreset_inreq *)req; 977 str_p = inreq->list_of_streams; 978 nums = (ntohs(inreq->param_hdr.length) - sizeof(*inreq)) / 979 sizeof(__u16); 980 981 flags |= SCTP_STREAM_RESET_INCOMING_SSN; 982 983 *evp = sctp_ulpevent_make_stream_reset_event(asoc, flags, 984 nums, str_p, GFP_ATOMIC); 985 } else if (req->type == SCTP_PARAM_RESET_TSN_REQUEST) { 986 struct sctp_strreset_resptsn *resptsn; 987 __u32 stsn, rtsn; 988 989 /* check for resptsn, as sctp_verify_reconf didn't do it*/ 990 if (ntohs(param.p->length) != sizeof(*resptsn)) 991 return NULL; 992 993 resptsn = (struct sctp_strreset_resptsn *)resp; 994 stsn = ntohl(resptsn->senders_next_tsn); 995 rtsn = ntohl(resptsn->receivers_next_tsn); 996 997 if (result == SCTP_STRRESET_PERFORMED) { 998 __u32 mtsn = sctp_tsnmap_get_max_tsn_seen( 999 &asoc->peer.tsn_map); 1000 LIST_HEAD(temp); 1001 1002 asoc->stream.si->report_ftsn(&asoc->ulpq, mtsn); 1003 1004 sctp_tsnmap_init(&asoc->peer.tsn_map, 1005 SCTP_TSN_MAP_INITIAL, 1006 stsn, GFP_ATOMIC); 1007 1008 /* Clean up sacked and abandoned queues only. As the 1009 * out_chunk_list may not be empty, splice it to temp, 1010 * then get it back after sctp_outq_free is done. 1011 */ 1012 list_splice_init(&asoc->outqueue.out_chunk_list, &temp); 1013 sctp_outq_free(&asoc->outqueue); 1014 list_splice_init(&temp, &asoc->outqueue.out_chunk_list); 1015 1016 asoc->next_tsn = rtsn; 1017 asoc->ctsn_ack_point = asoc->next_tsn - 1; 1018 asoc->adv_peer_ack_point = asoc->ctsn_ack_point; 1019 1020 for (i = 0; i < stream->outcnt; i++) { 1021 SCTP_SO(stream, i)->mid = 0; 1022 SCTP_SO(stream, i)->mid_uo = 0; 1023 } 1024 for (i = 0; i < stream->incnt; i++) 1025 SCTP_SI(stream, i)->mid = 0; 1026 } 1027 1028 for (i = 0; i < stream->outcnt; i++) 1029 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 1030 1031 *evp = sctp_ulpevent_make_assoc_reset_event(asoc, flags, 1032 stsn, rtsn, GFP_ATOMIC); 1033 } else if (req->type == SCTP_PARAM_RESET_ADD_OUT_STREAMS) { 1034 struct sctp_strreset_addstrm *addstrm; 1035 __u16 number; 1036 1037 addstrm = (struct sctp_strreset_addstrm *)req; 1038 nums = ntohs(addstrm->number_of_streams); 1039 number = stream->outcnt - nums; 1040 1041 if (result == SCTP_STRRESET_PERFORMED) 1042 for (i = number; i < stream->outcnt; i++) 1043 SCTP_SO(stream, i)->state = SCTP_STREAM_OPEN; 1044 else 1045 stream->outcnt = number; 1046 1047 *evp = sctp_ulpevent_make_stream_change_event(asoc, flags, 1048 0, nums, GFP_ATOMIC); 1049 } else if (req->type == SCTP_PARAM_RESET_ADD_IN_STREAMS) { 1050 struct sctp_strreset_addstrm *addstrm; 1051 1052 /* if the result is performed, it's impossible for addstrm in 1053 * request. 1054 */ 1055 if (result == SCTP_STRRESET_PERFORMED) 1056 return NULL; 1057 1058 addstrm = (struct sctp_strreset_addstrm *)req; 1059 nums = ntohs(addstrm->number_of_streams); 1060 1061 *evp = sctp_ulpevent_make_stream_change_event(asoc, flags, 1062 nums, 0, GFP_ATOMIC); 1063 } 1064 1065 asoc->strreset_outstanding--; 1066 asoc->strreset_outseq++; 1067 1068 /* remove everything for this reconf request */ 1069 if (!asoc->strreset_outstanding) { 1070 t = asoc->strreset_chunk->transport; 1071 if (del_timer(&t->reconf_timer)) 1072 sctp_transport_put(t); 1073 1074 sctp_chunk_put(asoc->strreset_chunk); 1075 asoc->strreset_chunk = NULL; 1076 } 1077 1078 return NULL; 1079 } 1080