msg.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488
  1. /*
  2. * net/tipc/msg.c: TIPC message header routines
  3. *
  4. * Copyright (c) 2000-2006, 2014, Ericsson AB
  5. * Copyright (c) 2005, 2010-2011, Wind River Systems
  6. * All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions are met:
  10. *
  11. * 1. Redistributions of source code must retain the above copyright
  12. * notice, this list of conditions and the following disclaimer.
  13. * 2. Redistributions in binary form must reproduce the above copyright
  14. * notice, this list of conditions and the following disclaimer in the
  15. * documentation and/or other materials provided with the distribution.
  16. * 3. Neither the names of the copyright holders nor the names of its
  17. * contributors may be used to endorse or promote products derived from
  18. * this software without specific prior written permission.
  19. *
  20. * Alternatively, this software may be distributed under the terms of the
  21. * GNU General Public License ("GPL") version 2 as published by the Free
  22. * Software Foundation.
  23. *
  24. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  25. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  26. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  27. * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  28. * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  29. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  30. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  31. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  32. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  33. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  34. * POSSIBILITY OF SUCH DAMAGE.
  35. */
  36. #include <net/sock.h>
  37. #include "core.h"
  38. #include "msg.h"
  39. #include "addr.h"
  40. #include "name_table.h"
  41. #define MAX_FORWARD_SIZE 1024
  42. static unsigned int align(unsigned int i)
  43. {
  44. return (i + 3) & ~3u;
  45. }
  46. /**
  47. * tipc_buf_acquire - creates a TIPC message buffer
  48. * @size: message size (including TIPC header)
  49. *
  50. * Returns a new buffer with data pointers set to the specified size.
  51. *
  52. * NOTE: Headroom is reserved to allow prepending of a data link header.
  53. * There may also be unrequested tailroom present at the buffer's end.
  54. */
  55. struct sk_buff *tipc_buf_acquire(u32 size)
  56. {
  57. struct sk_buff *skb;
  58. unsigned int buf_size = (BUF_HEADROOM + size + 3) & ~3u;
  59. skb = alloc_skb_fclone(buf_size, GFP_ATOMIC);
  60. if (skb) {
  61. skb_reserve(skb, BUF_HEADROOM);
  62. skb_put(skb, size);
  63. skb->next = NULL;
  64. }
  65. return skb;
  66. }
  67. void tipc_msg_init(struct tipc_msg *m, u32 user, u32 type, u32 hsize,
  68. u32 destnode)
  69. {
  70. memset(m, 0, hsize);
  71. msg_set_version(m);
  72. msg_set_user(m, user);
  73. msg_set_hdr_sz(m, hsize);
  74. msg_set_size(m, hsize);
  75. msg_set_prevnode(m, tipc_own_addr);
  76. msg_set_type(m, type);
  77. if (hsize > SHORT_H_SIZE) {
  78. msg_set_orignode(m, tipc_own_addr);
  79. msg_set_destnode(m, destnode);
  80. }
  81. }
  82. struct sk_buff *tipc_msg_create(uint user, uint type, uint hdr_sz,
  83. uint data_sz, u32 dnode, u32 onode,
  84. u32 dport, u32 oport, int errcode)
  85. {
  86. struct tipc_msg *msg;
  87. struct sk_buff *buf;
  88. buf = tipc_buf_acquire(hdr_sz + data_sz);
  89. if (unlikely(!buf))
  90. return NULL;
  91. msg = buf_msg(buf);
  92. tipc_msg_init(msg, user, type, hdr_sz, dnode);
  93. msg_set_size(msg, hdr_sz + data_sz);
  94. msg_set_prevnode(msg, onode);
  95. msg_set_origport(msg, oport);
  96. msg_set_destport(msg, dport);
  97. msg_set_errcode(msg, errcode);
  98. if (hdr_sz > SHORT_H_SIZE) {
  99. msg_set_orignode(msg, onode);
  100. msg_set_destnode(msg, dnode);
  101. }
  102. return buf;
  103. }
  104. /* tipc_buf_append(): Append a buffer to the fragment list of another buffer
  105. * @*headbuf: in: NULL for first frag, otherwise value returned from prev call
  106. * out: set when successful non-complete reassembly, otherwise NULL
  107. * @*buf: in: the buffer to append. Always defined
  108. * out: head buf after successful complete reassembly, otherwise NULL
  109. * Returns 1 when reassembly complete, otherwise 0
  110. */
  111. int tipc_buf_append(struct sk_buff **headbuf, struct sk_buff **buf)
  112. {
  113. struct sk_buff *head = *headbuf;
  114. struct sk_buff *frag = *buf;
  115. struct sk_buff *tail;
  116. struct tipc_msg *msg;
  117. u32 fragid;
  118. int delta;
  119. bool headstolen;
  120. if (!frag)
  121. goto err;
  122. msg = buf_msg(frag);
  123. fragid = msg_type(msg);
  124. frag->next = NULL;
  125. skb_pull(frag, msg_hdr_sz(msg));
  126. if (fragid == FIRST_FRAGMENT) {
  127. if (unlikely(head))
  128. goto err;
  129. if (unlikely(skb_unclone(frag, GFP_ATOMIC)))
  130. goto err;
  131. head = *headbuf = frag;
  132. skb_frag_list_init(head);
  133. TIPC_SKB_CB(head)->tail = NULL;
  134. *buf = NULL;
  135. return 0;
  136. }
  137. if (!head)
  138. goto err;
  139. if (skb_try_coalesce(head, frag, &headstolen, &delta)) {
  140. kfree_skb_partial(frag, headstolen);
  141. } else {
  142. tail = TIPC_SKB_CB(head)->tail;
  143. if (!skb_has_frag_list(head))
  144. skb_shinfo(head)->frag_list = frag;
  145. else
  146. tail->next = frag;
  147. head->truesize += frag->truesize;
  148. head->data_len += frag->len;
  149. head->len += frag->len;
  150. TIPC_SKB_CB(head)->tail = frag;
  151. }
  152. if (fragid == LAST_FRAGMENT) {
  153. *buf = head;
  154. TIPC_SKB_CB(head)->tail = NULL;
  155. *headbuf = NULL;
  156. return 1;
  157. }
  158. *buf = NULL;
  159. return 0;
  160. err:
  161. pr_warn_ratelimited("Unable to build fragment list\n");
  162. kfree_skb(*buf);
  163. kfree_skb(*headbuf);
  164. *buf = *headbuf = NULL;
  165. return 0;
  166. }
  167. /**
  168. * tipc_msg_build - create buffer chain containing specified header and data
  169. * @mhdr: Message header, to be prepended to data
  170. * @m: User message
  171. * @offset: Posision in iov to start copying from
  172. * @dsz: Total length of user data
  173. * @pktmax: Max packet size that can be used
  174. * @list: Buffer or chain of buffers to be returned to caller
  175. *
  176. * Returns message data size or errno: -ENOMEM, -EFAULT
  177. */
  178. int tipc_msg_build(struct tipc_msg *mhdr, struct msghdr *m, int offset,
  179. int dsz, int pktmax, struct sk_buff_head *list)
  180. {
  181. int mhsz = msg_hdr_sz(mhdr);
  182. int msz = mhsz + dsz;
  183. int pktno = 1;
  184. int pktsz;
  185. int pktrem = pktmax;
  186. int drem = dsz;
  187. struct tipc_msg pkthdr;
  188. struct sk_buff *skb;
  189. char *pktpos;
  190. int rc;
  191. msg_set_size(mhdr, msz);
  192. /* No fragmentation needed? */
  193. if (likely(msz <= pktmax)) {
  194. skb = tipc_buf_acquire(msz);
  195. if (unlikely(!skb))
  196. return -ENOMEM;
  197. skb_orphan(skb);
  198. __skb_queue_tail(list, skb);
  199. skb_copy_to_linear_data(skb, mhdr, mhsz);
  200. pktpos = skb->data + mhsz;
  201. if (!dsz || !memcpy_fromiovecend(pktpos, m->msg_iter.iov, offset,
  202. dsz))
  203. return dsz;
  204. rc = -EFAULT;
  205. goto error;
  206. }
  207. /* Prepare reusable fragment header */
  208. tipc_msg_init(&pkthdr, MSG_FRAGMENTER, FIRST_FRAGMENT,
  209. INT_H_SIZE, msg_destnode(mhdr));
  210. msg_set_size(&pkthdr, pktmax);
  211. msg_set_fragm_no(&pkthdr, pktno);
  212. /* Prepare first fragment */
  213. skb = tipc_buf_acquire(pktmax);
  214. if (!skb)
  215. return -ENOMEM;
  216. skb_orphan(skb);
  217. __skb_queue_tail(list, skb);
  218. pktpos = skb->data;
  219. skb_copy_to_linear_data(skb, &pkthdr, INT_H_SIZE);
  220. pktpos += INT_H_SIZE;
  221. pktrem -= INT_H_SIZE;
  222. skb_copy_to_linear_data_offset(skb, INT_H_SIZE, mhdr, mhsz);
  223. pktpos += mhsz;
  224. pktrem -= mhsz;
  225. do {
  226. if (drem < pktrem)
  227. pktrem = drem;
  228. if (memcpy_fromiovecend(pktpos, m->msg_iter.iov, offset, pktrem)) {
  229. rc = -EFAULT;
  230. goto error;
  231. }
  232. drem -= pktrem;
  233. offset += pktrem;
  234. if (!drem)
  235. break;
  236. /* Prepare new fragment: */
  237. if (drem < (pktmax - INT_H_SIZE))
  238. pktsz = drem + INT_H_SIZE;
  239. else
  240. pktsz = pktmax;
  241. skb = tipc_buf_acquire(pktsz);
  242. if (!skb) {
  243. rc = -ENOMEM;
  244. goto error;
  245. }
  246. skb_orphan(skb);
  247. __skb_queue_tail(list, skb);
  248. msg_set_type(&pkthdr, FRAGMENT);
  249. msg_set_size(&pkthdr, pktsz);
  250. msg_set_fragm_no(&pkthdr, ++pktno);
  251. skb_copy_to_linear_data(skb, &pkthdr, INT_H_SIZE);
  252. pktpos = skb->data + INT_H_SIZE;
  253. pktrem = pktsz - INT_H_SIZE;
  254. } while (1);
  255. msg_set_type(buf_msg(skb), LAST_FRAGMENT);
  256. return dsz;
  257. error:
  258. __skb_queue_purge(list);
  259. __skb_queue_head_init(list);
  260. return rc;
  261. }
  262. /**
  263. * tipc_msg_bundle(): Append contents of a buffer to tail of an existing one
  264. * @list: the buffer chain of the existing buffer ("bundle")
  265. * @skb: buffer to be appended
  266. * @mtu: max allowable size for the bundle buffer
  267. * Consumes buffer if successful
  268. * Returns true if bundling could be performed, otherwise false
  269. */
  270. bool tipc_msg_bundle(struct sk_buff_head *list, struct sk_buff *skb, u32 mtu)
  271. {
  272. struct sk_buff *bskb = skb_peek_tail(list);
  273. struct tipc_msg *bmsg = buf_msg(bskb);
  274. struct tipc_msg *msg = buf_msg(skb);
  275. unsigned int bsz = msg_size(bmsg);
  276. unsigned int msz = msg_size(msg);
  277. u32 start = align(bsz);
  278. u32 max = mtu - INT_H_SIZE;
  279. u32 pad = start - bsz;
  280. if (likely(msg_user(msg) == MSG_FRAGMENTER))
  281. return false;
  282. if (unlikely(msg_user(msg) == CHANGEOVER_PROTOCOL))
  283. return false;
  284. if (unlikely(msg_user(msg) == BCAST_PROTOCOL))
  285. return false;
  286. if (likely(msg_user(bmsg) != MSG_BUNDLER))
  287. return false;
  288. if (likely(!TIPC_SKB_CB(bskb)->bundling))
  289. return false;
  290. if (unlikely(skb_tailroom(bskb) < (pad + msz)))
  291. return false;
  292. if (unlikely(max < (start + msz)))
  293. return false;
  294. skb_put(bskb, pad + msz);
  295. skb_copy_to_linear_data_offset(bskb, start, skb->data, msz);
  296. msg_set_size(bmsg, start + msz);
  297. msg_set_msgcnt(bmsg, msg_msgcnt(bmsg) + 1);
  298. kfree_skb(skb);
  299. return true;
  300. }
  301. /**
  302. * tipc_msg_make_bundle(): Create bundle buf and append message to its tail
  303. * @list: the buffer chain
  304. * @skb: buffer to be appended and replaced
  305. * @mtu: max allowable size for the bundle buffer, inclusive header
  306. * @dnode: destination node for message. (Not always present in header)
  307. * Replaces buffer if successful
  308. * Returns true if success, otherwise false
  309. */
  310. bool tipc_msg_make_bundle(struct sk_buff_head *list, struct sk_buff *skb,
  311. u32 mtu, u32 dnode)
  312. {
  313. struct sk_buff *bskb;
  314. struct tipc_msg *bmsg;
  315. struct tipc_msg *msg = buf_msg(skb);
  316. u32 msz = msg_size(msg);
  317. u32 max = mtu - INT_H_SIZE;
  318. if (msg_user(msg) == MSG_FRAGMENTER)
  319. return false;
  320. if (msg_user(msg) == CHANGEOVER_PROTOCOL)
  321. return false;
  322. if (msg_user(msg) == BCAST_PROTOCOL)
  323. return false;
  324. if (msz > (max / 2))
  325. return false;
  326. bskb = tipc_buf_acquire(max);
  327. if (!bskb)
  328. return false;
  329. skb_trim(bskb, INT_H_SIZE);
  330. bmsg = buf_msg(bskb);
  331. tipc_msg_init(bmsg, MSG_BUNDLER, 0, INT_H_SIZE, dnode);
  332. msg_set_seqno(bmsg, msg_seqno(msg));
  333. msg_set_ack(bmsg, msg_ack(msg));
  334. msg_set_bcast_ack(bmsg, msg_bcast_ack(msg));
  335. TIPC_SKB_CB(bskb)->bundling = true;
  336. __skb_queue_tail(list, bskb);
  337. return tipc_msg_bundle(list, skb, mtu);
  338. }
  339. /**
  340. * tipc_msg_reverse(): swap source and destination addresses and add error code
  341. * @buf: buffer containing message to be reversed
  342. * @dnode: return value: node where to send message after reversal
  343. * @err: error code to be set in message
  344. * Consumes buffer if failure
  345. * Returns true if success, otherwise false
  346. */
  347. bool tipc_msg_reverse(struct sk_buff *buf, u32 *dnode, int err)
  348. {
  349. struct tipc_msg *msg = buf_msg(buf);
  350. uint imp = msg_importance(msg);
  351. struct tipc_msg ohdr;
  352. uint rdsz = min_t(uint, msg_data_sz(msg), MAX_FORWARD_SIZE);
  353. if (skb_linearize(buf))
  354. goto exit;
  355. if (msg_dest_droppable(msg))
  356. goto exit;
  357. if (msg_errcode(msg))
  358. goto exit;
  359. memcpy(&ohdr, msg, msg_hdr_sz(msg));
  360. imp = min_t(uint, imp + 1, TIPC_CRITICAL_IMPORTANCE);
  361. if (msg_isdata(msg))
  362. msg_set_importance(msg, imp);
  363. msg_set_errcode(msg, err);
  364. msg_set_origport(msg, msg_destport(&ohdr));
  365. msg_set_destport(msg, msg_origport(&ohdr));
  366. msg_set_prevnode(msg, tipc_own_addr);
  367. if (!msg_short(msg)) {
  368. msg_set_orignode(msg, msg_destnode(&ohdr));
  369. msg_set_destnode(msg, msg_orignode(&ohdr));
  370. }
  371. msg_set_size(msg, msg_hdr_sz(msg) + rdsz);
  372. skb_trim(buf, msg_size(msg));
  373. skb_orphan(buf);
  374. *dnode = msg_orignode(&ohdr);
  375. return true;
  376. exit:
  377. kfree_skb(buf);
  378. return false;
  379. }
  380. /**
  381. * tipc_msg_eval: determine fate of message that found no destination
  382. * @buf: the buffer containing the message.
  383. * @dnode: return value: next-hop node, if message to be forwarded
  384. * @err: error code to use, if message to be rejected
  385. *
  386. * Does not consume buffer
  387. * Returns 0 (TIPC_OK) if message ok and we can try again, -TIPC error
  388. * code if message to be rejected
  389. */
  390. int tipc_msg_eval(struct net *net, struct sk_buff *buf, u32 *dnode)
  391. {
  392. struct tipc_msg *msg = buf_msg(buf);
  393. u32 dport;
  394. if (msg_type(msg) != TIPC_NAMED_MSG)
  395. return -TIPC_ERR_NO_PORT;
  396. if (skb_linearize(buf))
  397. return -TIPC_ERR_NO_NAME;
  398. if (msg_data_sz(msg) > MAX_FORWARD_SIZE)
  399. return -TIPC_ERR_NO_NAME;
  400. if (msg_reroute_cnt(msg) > 0)
  401. return -TIPC_ERR_NO_NAME;
  402. *dnode = addr_domain(msg_lookup_scope(msg));
  403. dport = tipc_nametbl_translate(net, msg_nametype(msg),
  404. msg_nameinst(msg),
  405. dnode);
  406. if (!dport)
  407. return -TIPC_ERR_NO_NAME;
  408. msg_incr_reroute_cnt(msg);
  409. msg_set_destnode(msg, *dnode);
  410. msg_set_destport(msg, dport);
  411. return TIPC_OK;
  412. }
  413. /* tipc_msg_reassemble() - clone a buffer chain of fragments and
  414. * reassemble the clones into one message
  415. */
  416. struct sk_buff *tipc_msg_reassemble(struct sk_buff_head *list)
  417. {
  418. struct sk_buff *skb;
  419. struct sk_buff *frag = NULL;
  420. struct sk_buff *head = NULL;
  421. int hdr_sz;
  422. /* Copy header if single buffer */
  423. if (skb_queue_len(list) == 1) {
  424. skb = skb_peek(list);
  425. hdr_sz = skb_headroom(skb) + msg_hdr_sz(buf_msg(skb));
  426. return __pskb_copy(skb, hdr_sz, GFP_ATOMIC);
  427. }
  428. /* Clone all fragments and reassemble */
  429. skb_queue_walk(list, skb) {
  430. frag = skb_clone(skb, GFP_ATOMIC);
  431. if (!frag)
  432. goto error;
  433. frag->next = NULL;
  434. if (tipc_buf_append(&head, &frag))
  435. break;
  436. if (!head)
  437. goto error;
  438. }
  439. return frag;
  440. error:
  441. pr_warn("Failed do clone local mcast rcv buffer\n");
  442. kfree_skb(head);
  443. return NULL;
  444. }