net/sctp/output.c

   1 /* SCTP kernel implementation
   2  * (C) Copyright IBM Corp. 2001, 2004
   3  * Copyright (c) 1999-2000 Cisco, Inc.
   4  * Copyright (c) 1999-2001 Motorola, Inc.
   5  *
   6  * This file is part of the SCTP kernel implementation
   7  *
   8  * These functions handle output processing.
   9  *
  10  * This SCTP implementation is free software;
  11  * you can redistribute it and/or modify it under the terms of
  12  * the GNU General Public License as published by
  13  * the Free Software Foundation; either version 2, or (at your option)
  14  * any later version.
  15  *
  16  * This SCTP implementation is distributed in the hope that it
  17  * will be useful, but WITHOUT ANY WARRANTY; without even the implied
  18  *                 ************************
  19  * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  20  * See the GNU General Public License for more details.
  21  *
  22  * You should have received a copy of the GNU General Public License
  23  * along with GNU CC; see the file COPYING.  If not, see
  24  * <http://www.gnu.org/licenses/>.
  25  *
  26  * Please send any bug reports or fixes you make to the
  27  * email address(es):
  28  *    lksctp developers <linux-sctp@vger.kernel.org>
  29  *
  30  * Written or modified by:
  31  *    La Monte H.P. Yarroll <piggy@acm.org>
  32  *    Karl Knutson          <karl@athena.chicago.il.us>
  33  *    Jon Grimm             <jgrimm@austin.ibm.com>
  34  *    Sridhar Samudrala     <sri@us.ibm.com>
  35  */
  36
  37 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  38
  39 #include <linux/types.h>
  40 #include <linux/kernel.h>
  41 #include <linux/wait.h>
  42 #include <linux/time.h>
  43 #include <linux/ip.h>
  44 #include <linux/ipv6.h>
  45 #include <linux/init.h>
  46 #include <linux/slab.h>
  47 #include <net/inet_ecn.h>
  48 #include <net/ip.h>
  49 #include <net/icmp.h>
  50 #include <net/net_namespace.h>
  51
  52 #include <linux/socket.h> /* for sa_family_t */
  53 #include <net/sock.h>
  54
  55 #include <net/sctp/sctp.h>
  56 #include <net/sctp/sm.h>
  57 #include <net/sctp/checksum.h>
  58
  59 /* Forward declarations for private helpers. */
  60 static enum sctp_xmit __sctp_packet_append_chunk(struct sctp_packet *packet,
  61                                                  struct sctp_chunk *chunk);
  62 static enum sctp_xmit sctp_packet_can_append_data(struct sctp_packet *packet,
  63                                                   struct sctp_chunk *chunk);
  64 static void sctp_packet_append_data(struct sctp_packet *packet,
  65                                     struct sctp_chunk *chunk);
  66 static enum sctp_xmit sctp_packet_will_fit(struct sctp_packet *packet,
  67                                            struct sctp_chunk *chunk,
  68                                            u16 chunk_len);
  69
  70 static void sctp_packet_reset(struct sctp_packet *packet)
  71 {
  72         /* sctp_packet_transmit() relies on this to reset size to the
  73          * current overhead after sending packets.
  74          */
  75         packet->size = packet->overhead;
  76
  77         packet->has_cookie_echo = 0;
  78         packet->has_sack = 0;
  79         packet->has_data = 0;
  80         packet->has_auth = 0;
  81         packet->ipfragok = 0;
  82         packet->auth = NULL;
  83 }
  84
  85 /* Config a packet.
  86  * This appears to be a followup set of initializations.
  87  */
  88 void sctp_packet_config(struct sctp_packet *packet, __u32 vtag,
  89                         int ecn_capable)
  90 {
  91         struct sctp_transport *tp = packet->transport;
  92         struct sctp_association *asoc = tp->asoc;
  93         struct sctp_sock *sp = NULL;
  94         struct sock *sk;
  95
  96         pr_debug("%s: packet:%p vtag:0x%x\n", __func__, packet, vtag);
  97         packet->vtag = vtag;
  98
  99         /* do the following jobs only once for a flush schedule */
 100         if (!sctp_packet_empty(packet))
 101                 return;
 102
 103         /* set packet max_size with pathmtu, then calculate overhead */
 104         packet->max_size = tp->pathmtu;
 105
 106         if (asoc) {
 107                 sk = asoc->base.sk;
 108                 sp = sctp_sk(sk);
 109         }
 110         packet->overhead = sctp_mtu_payload(sp, 0, 0);
 111         packet->size = packet->overhead;
 112
 113         if (!asoc)
 114                 return;
 115
 116         /* update dst or transport pathmtu if in need */
 117         if (!sctp_transport_dst_check(tp)) {
 118                 sctp_transport_route(tp, NULL, sp);
 119                 if (asoc->param_flags & SPP_PMTUD_ENABLE)
 120                         sctp_assoc_sync_pmtu(asoc);
 121         } else if (!sctp_transport_pmtu_check(tp)) {
 122                 if (asoc->param_flags & SPP_PMTUD_ENABLE)
 123                         sctp_assoc_sync_pmtu(asoc);
 124         }
 125
 126         if (asoc->pmtu_pending) {
 127                 if (asoc->param_flags & SPP_PMTUD_ENABLE)
 128                         sctp_assoc_sync_pmtu(asoc);
 129                 asoc->pmtu_pending = 0;
 130         }
 131
 132         /* If there a is a prepend chunk stick it on the list before
 133          * any other chunks get appended.
 134          */
 135         if (ecn_capable) {
 136                 struct sctp_chunk *chunk = sctp_get_ecne_prepend(asoc);
 137
 138                 if (chunk)
 139                         sctp_packet_append_chunk(packet, chunk);
 140         }
 141
 142         if (!tp->dst)
 143                 return;
 144
 145         /* set packet max_size with gso_max_size if gso is enabled*/
 146         rcu_read_lock();
 147         if (__sk_dst_get(sk) != tp->dst) {
 148                 dst_hold(tp->dst);
 149                 sk_setup_caps(sk, tp->dst);
 150         }
 151         packet->max_size = sk_can_gso(sk) ? tp->dst->dev->gso_max_size
 152                                           : asoc->pathmtu;
 153         rcu_read_unlock();
 154 }
 155
 156 /* Initialize the packet structure. */
 157 void sctp_packet_init(struct sctp_packet *packet,
 158                       struct sctp_transport *transport,
 159                       __u16 sport, __u16 dport)
 160 {
 161         pr_debug("%s: packet:%p transport:%p\n", __func__, packet, transport);
 162
 163         packet->transport = transport;
 164         packet->source_port = sport;
 165         packet->destination_port = dport;
 166         INIT_LIST_HEAD(&packet->chunk_list);
 167         /* The overhead will be calculated by sctp_packet_config() */
 168         packet->overhead = 0;
 169         sctp_packet_reset(packet);
 170         packet->vtag = 0;
 171 }
 172
 173 /* Free a packet.  */
 174 void sctp_packet_free(struct sctp_packet *packet)
 175 {
 176         struct sctp_chunk *chunk, *tmp;
 177
 178         pr_debug("%s: packet:%p\n", __func__, packet);
 179
 180         list_for_each_entry_safe(chunk, tmp, &packet->chunk_list, list) {
 181                 list_del_init(&chunk->list);
 182                 sctp_chunk_free(chunk);
 183         }
 184 }
 185
 186 /* This routine tries to append the chunk to the offered packet. If adding
 187  * the chunk causes the packet to exceed the path MTU and COOKIE_ECHO chunk
 188  * is not present in the packet, it transmits the input packet.
 189  * Data can be bundled with a packet containing a COOKIE_ECHO chunk as long
 190  * as it can fit in the packet, but any more data that does not fit in this
 191  * packet can be sent only after receiving the COOKIE_ACK.
 192  */
 193 enum sctp_xmit sctp_packet_transmit_chunk(struct sctp_packet *packet,
 194                                           struct sctp_chunk *chunk,
 195                                           int one_packet, gfp_t gfp)
 196 {
 197         enum sctp_xmit retval;
 198
 199         pr_debug("%s: packet:%p size:%zu chunk:%p size:%d\n", __func__,
 200                  packet, packet->size, chunk, chunk->skb ? chunk->skb->len : -1);
 201
 202         switch ((retval = (sctp_packet_append_chunk(packet, chunk)))) {
 203         case SCTP_XMIT_PMTU_FULL:
 204                 if (!packet->has_cookie_echo) {
 205                         int error = 0;
 206
 207                         error = sctp_packet_transmit(packet, gfp);
 208                         if (error < 0)
 209                                 chunk->skb->sk->sk_err = -error;
 210
 211                         /* If we have an empty packet, then we can NOT ever
 212                          * return PMTU_FULL.
 213                          */
 214                         if (!one_packet)
 215                                 retval = sctp_packet_append_chunk(packet,
 216                                                                   chunk);
 217                 }
 218                 break;
 219
 220         case SCTP_XMIT_RWND_FULL:
 221         case SCTP_XMIT_OK:
 222         case SCTP_XMIT_DELAY:
 223                 break;
 224         }
 225
 226         return retval;
 227 }
 228
 229 /* Try to bundle an auth chunk into the packet. */
 230 static enum sctp_xmit sctp_packet_bundle_auth(struct sctp_packet *pkt,
 231                                               struct sctp_chunk *chunk)
 232 {
 233         struct sctp_association *asoc = pkt->transport->asoc;
 234         enum sctp_xmit retval = SCTP_XMIT_OK;
 235         struct sctp_chunk *auth;
 236
 237         /* if we don't have an association, we can't do authentication */
 238         if (!asoc)
 239                 return retval;
 240
 241         /* See if this is an auth chunk we are bundling or if
 242          * auth is already bundled.
 243          */
 244         if (chunk->chunk_hdr->type == SCTP_CID_AUTH || pkt->has_auth)
 245                 return retval;
 246
 247         /* if the peer did not request this chunk to be authenticated,
 248          * don't do it
 249          */
 250         if (!chunk->auth)
 251                 return retval;
 252
 253         auth = sctp_make_auth(asoc, chunk->shkey->key_id);
 254         if (!auth)
 255                 return retval;
 256
 257         auth->shkey = chunk->shkey;
 258         sctp_auth_shkey_hold(auth->shkey);
 259
 260         retval = __sctp_packet_append_chunk(pkt, auth);
 261
 262         if (retval != SCTP_XMIT_OK)
 263                 sctp_chunk_free(auth);
 264
 265         return retval;
 266 }
 267
 268 /* Try to bundle a SACK with the packet. */
 269 static enum sctp_xmit sctp_packet_bundle_sack(struct sctp_packet *pkt,
 270                                               struct sctp_chunk *chunk)
 271 {
 272         enum sctp_xmit retval = SCTP_XMIT_OK;
 273
 274         /* If sending DATA and haven't aleady bundled a SACK, try to
 275          * bundle one in to the packet.
 276          */
 277         if (sctp_chunk_is_data(chunk) && !pkt->has_sack &&
 278             !pkt->has_cookie_echo) {
 279                 struct sctp_association *asoc;
 280                 struct timer_list *timer;
 281                 asoc = pkt->transport->asoc;
 282                 timer = &asoc->timers[SCTP_EVENT_TIMEOUT_SACK];
 283
 284                 /* If the SACK timer is running, we have a pending SACK */
 285                 if (timer_pending(timer)) {
 286                         struct sctp_chunk *sack;
 287
 288                         if (pkt->transport->sack_generation !=
 289                             pkt->transport->asoc->peer.sack_generation)
 290                                 return retval;
 291
 292                         asoc->a_rwnd = asoc->rwnd;
 293                         sack = sctp_make_sack(asoc);
 294                         if (sack) {
 295                                 retval = __sctp_packet_append_chunk(pkt, sack);
 296                                 if (retval != SCTP_XMIT_OK) {
 297                                         sctp_chunk_free(sack);
 298                                         goto out;
 299                                 }
 300                                 asoc->peer.sack_needed = 0;
 301                                 if (del_timer(timer))
 302                                         sctp_association_put(asoc);
 303                         }
 304                 }
 305         }
 306 out:
 307         return retval;
 308 }
 309
 310
 311 /* Append a chunk to the offered packet reporting back any inability to do
 312  * so.
 313  */
 314 static enum sctp_xmit __sctp_packet_append_chunk(struct sctp_packet *packet,
 315                                                  struct sctp_chunk *chunk)
 316 {
 317         __u16 chunk_len = SCTP_PAD4(ntohs(chunk->chunk_hdr->length));
 318         enum sctp_xmit retval = SCTP_XMIT_OK;
 319
 320         /* Check to see if this chunk will fit into the packet */
 321         retval = sctp_packet_will_fit(packet, chunk, chunk_len);
 322         if (retval != SCTP_XMIT_OK)
 323                 goto finish;
 324
 325         /* We believe that this chunk is OK to add to the packet */
 326         switch (chunk->chunk_hdr->type) {
 327         case SCTP_CID_DATA:
 328         case SCTP_CID_I_DATA:
 329                 /* Account for the data being in the packet */
 330                 sctp_packet_append_data(packet, chunk);
 331                 /* Disallow SACK bundling after DATA. */
 332                 packet->has_sack = 1;
 333                 /* Disallow AUTH bundling after DATA */
 334                 packet->has_auth = 1;
 335                 /* Let it be knows that packet has DATA in it */
 336                 packet->has_data = 1;
 337                 /* timestamp the chunk for rtx purposes */
 338                 chunk->sent_at = jiffies;
 339                 /* Mainly used for prsctp RTX policy */
 340                 chunk->sent_count++;
 341                 break;
 342         case SCTP_CID_COOKIE_ECHO:
 343                 packet->has_cookie_echo = 1;
 344                 break;
 345
 346         case SCTP_CID_SACK:
 347                 packet->has_sack = 1;
 348                 if (chunk->asoc)
 349                         chunk->asoc->stats.osacks++;
 350                 break;
 351
 352         case SCTP_CID_AUTH:
 353                 packet->has_auth = 1;
 354                 packet->auth = chunk;
 355                 break;
 356         }
 357
 358         /* It is OK to send this chunk.  */
 359         list_add_tail(&chunk->list, &packet->chunk_list);
 360         packet->size += chunk_len;
 361         chunk->transport = packet->transport;
 362 finish:
 363         return retval;
 364 }
 365
 366 /* Append a chunk to the offered packet reporting back any inability to do
 367  * so.
 368  */
 369 enum sctp_xmit sctp_packet_append_chunk(struct sctp_packet *packet,
 370                                         struct sctp_chunk *chunk)
 371 {
 372         enum sctp_xmit retval = SCTP_XMIT_OK;
 373
 374         pr_debug("%s: packet:%p chunk:%p\n", __func__, packet, chunk);
 375
 376         /* Data chunks are special.  Before seeing what else we can
 377          * bundle into this packet, check to see if we are allowed to
 378          * send this DATA.
 379          */
 380         if (sctp_chunk_is_data(chunk)) {
 381                 retval = sctp_packet_can_append_data(packet, chunk);
 382                 if (retval != SCTP_XMIT_OK)
 383                         goto finish;
 384         }
 385
 386         /* Try to bundle AUTH chunk */
 387         retval = sctp_packet_bundle_auth(packet, chunk);
 388         if (retval != SCTP_XMIT_OK)
 389                 goto finish;
 390
 391         /* Try to bundle SACK chunk */
 392         retval = sctp_packet_bundle_sack(packet, chunk);
 393         if (retval != SCTP_XMIT_OK)
 394                 goto finish;
 395
 396         retval = __sctp_packet_append_chunk(packet, chunk);
 397
 398 finish:
 399         return retval;
 400 }
 401
 402 static void sctp_packet_gso_append(struct sk_buff *head, struct sk_buff *skb)
 403 {
 404         if (SCTP_OUTPUT_CB(head)->last == head)
 405                 skb_shinfo(head)->frag_list = skb;
 406         else
 407                 SCTP_OUTPUT_CB(head)->last->next = skb;
 408         SCTP_OUTPUT_CB(head)->last = skb;
 409
 410         head->truesize += skb->truesize;
 411         head->data_len += skb->len;
 412         head->len += skb->len;
 413         refcount_add(skb->truesize, &head->sk->sk_wmem_alloc);
 414
 415         __skb_header_release(skb);
 416 }
 417
 418 static int sctp_packet_pack(struct sctp_packet *packet,
 419                             struct sk_buff *head, int gso, gfp_t gfp)
 420 {
 421         struct sctp_transport *tp = packet->transport;
 422         struct sctp_auth_chunk *auth = NULL;
 423         struct sctp_chunk *chunk, *tmp;
 424         int pkt_count = 0, pkt_size;
 425         struct sock *sk = head->sk;
 426         struct sk_buff *nskb;
 427         int auth_len = 0;
 428
 429         if (gso) {
 430                 skb_shinfo(head)->gso_type = sk->sk_gso_type;
 431                 SCTP_OUTPUT_CB(head)->last = head;
 432         } else {
 433                 nskb = head;
 434                 pkt_size = packet->size;
 435                 goto merge;
 436         }
 437
 438         do {
 439                 /* calculate the pkt_size and alloc nskb */
 440                 pkt_size = packet->overhead;
 441                 list_for_each_entry_safe(chunk, tmp, &packet->chunk_list,
 442                                          list) {
 443                         int padded = SCTP_PAD4(chunk->skb->len);
 444
 445                         if (chunk == packet->auth)
 446                                 auth_len = padded;
 447                         else if (auth_len + padded + packet->overhead >
 448                                  tp->pathmtu)
 449                                 return 0;
 450                         else if (pkt_size + padded > tp->pathmtu)
 451                                 break;
 452                         pkt_size += padded;
 453                 }
 454                 nskb = alloc_skb(pkt_size + MAX_HEADER, gfp);
 455                 if (!nskb)
 456                         return 0;
 457                 skb_reserve(nskb, packet->overhead + MAX_HEADER);
 458
 459 merge:
 460                 /* merge chunks into nskb and append nskb into head list */
 461                 pkt_size -= packet->overhead;
 462                 list_for_each_entry_safe(chunk, tmp, &packet->chunk_list, list) {
 463                         int padding;
 464
 465                         list_del_init(&chunk->list);
 466                         if (sctp_chunk_is_data(chunk)) {
 467                                 if (!sctp_chunk_retransmitted(chunk) &&
 468                                     !tp->rto_pending) {
 469                                         chunk->rtt_in_progress = 1;
 470                                         tp->rto_pending = 1;
 471                                 }
 472                         }
 473
 474                         padding = SCTP_PAD4(chunk->skb->len) - chunk->skb->len;
 475                         if (padding)
 476                                 skb_put_zero(chunk->skb, padding);
 477
 478                         if (chunk == packet->auth)
 479                                 auth = (struct sctp_auth_chunk *)
 480                                                         skb_tail_pointer(nskb);
 481
 482                         skb_put_data(nskb, chunk->skb->data, chunk->skb->len);
 483
 484                         pr_debug("*** Chunk:%p[%s] %s 0x%x, length:%d, chunk->skb->len:%d, rtt_in_progress:%d\n",
 485                                  chunk,
 486                                  sctp_cname(SCTP_ST_CHUNK(chunk->chunk_hdr->type)),
 487                                  chunk->has_tsn ? "TSN" : "No TSN",
 488                                  chunk->has_tsn ? ntohl(chunk->subh.data_hdr->tsn) : 0,
 489                                  ntohs(chunk->chunk_hdr->length), chunk->skb->len,
 490                                  chunk->rtt_in_progress);
 491
 492                         pkt_size -= SCTP_PAD4(chunk->skb->len);
 493
 494                         if (!sctp_chunk_is_data(chunk) && chunk != packet->auth)
 495                                 sctp_chunk_free(chunk);
 496
 497                         if (!pkt_size)
 498                                 break;
 499                 }
 500
 501                 if (auth) {
 502                         sctp_auth_calculate_hmac(tp->asoc, nskb, auth,
 503                                                  packet->auth->shkey, gfp);
 504                         /* free auth if no more chunks, or add it back */
 505                         if (list_empty(&packet->chunk_list))
 506                                 sctp_chunk_free(packet->auth);
 507                         else
 508                                 list_add(&packet->auth->list,
 509                                          &packet->chunk_list);
 510                 }
 511
 512                 if (gso)
 513                         sctp_packet_gso_append(head, nskb);
 514
 515                 pkt_count++;
 516         } while (!list_empty(&packet->chunk_list));
 517
 518         if (gso) {
 519                 memset(head->cb, 0, max(sizeof(struct inet_skb_parm),
 520                                         sizeof(struct inet6_skb_parm)));
 521                 skb_shinfo(head)->gso_segs = pkt_count;
 522                 skb_shinfo(head)->gso_size = GSO_BY_FRAGS;
 523                 rcu_read_lock();
 524                 if (skb_dst(head) != tp->dst) {
 525                         dst_hold(tp->dst);
 526                         sk_setup_caps(sk, tp->dst);
 527                 }
 528                 rcu_read_unlock();
 529                 goto chksum;
 530         }
 531
 532         if (sctp_checksum_disable)
 533                 return 1;
 534
 535         if (!(skb_dst(head)->dev->features & NETIF_F_SCTP_CRC) ||
 536             dst_xfrm(skb_dst(head)) || packet->ipfragok) {
 537                 struct sctphdr *sh =
 538                         (struct sctphdr *)skb_transport_header(head);
 539
 540                 sh->checksum = sctp_compute_cksum(head, 0);
 541         } else {
 542 chksum:
 543                 head->ip_summed = CHECKSUM_PARTIAL;
 544                 head->csum_not_inet = 1;
 545                 head->csum_start = skb_transport_header(head) - head->head;
 546                 head->csum_offset = offsetof(struct sctphdr, checksum);
 547         }
 548
 549         return pkt_count;
 550 }
 551
 552 /* All packets are sent to the network through this function from
 553  * sctp_outq_tail().
 554  *
 555  * The return value is always 0 for now.
 556  */
 557 int sctp_packet_transmit(struct sctp_packet *packet, gfp_t gfp)
 558 {
 559         struct sctp_transport *tp = packet->transport;
 560         struct sctp_association *asoc = tp->asoc;
 561         struct sctp_chunk *chunk, *tmp;
 562         int pkt_count, gso = 0;
 563         struct dst_entry *dst;
 564         struct sk_buff *head;
 565         struct sctphdr *sh;
 566         struct sock *sk;
 567
 568         pr_debug("%s: packet:%p\n", __func__, packet);
 569         if (list_empty(&packet->chunk_list))
 570                 return 0;
 571         chunk = list_entry(packet->chunk_list.next, struct sctp_chunk, list);
 572         sk = chunk->skb->sk;
 573
 574         /* check gso */
 575         if (packet->size > tp->pathmtu && !packet->ipfragok) {
 576                 if (!sk_can_gso(sk)) {
 577                         pr_err_once("Trying to GSO but underlying device doesn't support it.");
 578                         goto out;
 579                 }
 580                 gso = 1;
 581         }
 582
 583         /* alloc head skb */
 584         head = alloc_skb((gso ? packet->overhead : packet->size) +
 585                          MAX_HEADER, gfp);
 586         if (!head)
 587                 goto out;
 588         skb_reserve(head, packet->overhead + MAX_HEADER);
 589         skb_set_owner_w(head, sk);
 590
 591         /* set sctp header */
 592         sh = skb_push(head, sizeof(struct sctphdr));
 593         skb_reset_transport_header(head);
 594         sh->source = htons(packet->source_port);
 595         sh->dest = htons(packet->destination_port);
 596         sh->vtag = htonl(packet->vtag);
 597         sh->checksum = 0;
 598
 599         /* drop packet if no dst */
 600         dst = dst_clone(tp->dst);
 601         if (!dst) {
 602                 IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
 603                 kfree_skb(head);
 604                 goto out;
 605         }
 606         skb_dst_set(head, dst);
 607
 608         /* pack up chunks */
 609         pkt_count = sctp_packet_pack(packet, head, gso, gfp);
 610         if (!pkt_count) {
 611                 kfree_skb(head);
 612                 goto out;
 613         }
 614         pr_debug("***sctp_transmit_packet*** skb->len:%d\n", head->len);
 615
 616         /* start autoclose timer */
 617         if (packet->has_data && sctp_state(asoc, ESTABLISHED) &&
 618             asoc->timeouts[SCTP_EVENT_TIMEOUT_AUTOCLOSE]) {
 619                 struct timer_list *timer =
 620                         &asoc->timers[SCTP_EVENT_TIMEOUT_AUTOCLOSE];
 621                 unsigned long timeout =
 622                         asoc->timeouts[SCTP_EVENT_TIMEOUT_AUTOCLOSE];
 623
 624                 if (!mod_timer(timer, jiffies + timeout))
 625                         sctp_association_hold(asoc);
 626         }
 627
 628         /* sctp xmit */
 629         tp->af_specific->ecn_capable(sk);
 630         if (asoc) {
 631                 asoc->stats.opackets += pkt_count;
 632                 if (asoc->peer.last_sent_to != tp)
 633                         asoc->peer.last_sent_to = tp;
 634         }
 635         head->ignore_df = packet->ipfragok;
 636         if (tp->dst_pending_confirm)
 637                 skb_set_dst_pending_confirm(head, 1);
 638         /* neighbour should be confirmed on successful transmission or
 639          * positive error
 640          */
 641         if (tp->af_specific->sctp_xmit(head, tp) >= 0 &&
 642             tp->dst_pending_confirm)
 643                 tp->dst_pending_confirm = 0;
 644
 645 out:
 646         list_for_each_entry_safe(chunk, tmp, &packet->chunk_list, list) {
 647                 list_del_init(&chunk->list);
 648                 if (!sctp_chunk_is_data(chunk))
 649                         sctp_chunk_free(chunk);
 650         }
 651         sctp_packet_reset(packet);
 652         return 0;
 653 }
 654
 655 /********************************************************************
 656  * 2nd Level Abstractions
 657  ********************************************************************/
 658
 659 /* This private function check to see if a chunk can be added */
 660 static enum sctp_xmit sctp_packet_can_append_data(struct sctp_packet *packet,
 661                                                   struct sctp_chunk *chunk)
 662 {
 663         size_t datasize, rwnd, inflight, flight_size;
 664         struct sctp_transport *transport = packet->transport;
 665         struct sctp_association *asoc = transport->asoc;
 666         struct sctp_outq *q = &asoc->outqueue;
 667
 668         /* RFC 2960 6.1  Transmission of DATA Chunks
 669          *
 670          * A) At any given time, the data sender MUST NOT transmit new data to
 671          * any destination transport address if its peer's rwnd indicates
 672          * that the peer has no buffer space (i.e. rwnd is 0, see Section
 673          * 6.2.1).  However, regardless of the value of rwnd (including if it
 674          * is 0), the data sender can always have one DATA chunk in flight to
 675          * the receiver if allowed by cwnd (see rule B below).  This rule
 676          * allows the sender to probe for a change in rwnd that the sender
 677          * missed due to the SACK having been lost in transit from the data
 678          * receiver to the data sender.
 679          */
 680
 681         rwnd = asoc->peer.rwnd;
 682         inflight = q->outstanding_bytes;
 683         flight_size = transport->flight_size;
 684
 685         datasize = sctp_data_size(chunk);
 686
 687         if (datasize > rwnd && inflight > 0)
 688                 /* We have (at least) one data chunk in flight,
 689                  * so we can't fall back to rule 6.1 B).
 690                  */
 691                 return SCTP_XMIT_RWND_FULL;
 692
 693         /* RFC 2960 6.1  Transmission of DATA Chunks
 694          *
 695          * B) At any given time, the sender MUST NOT transmit new data
 696          * to a given transport address if it has cwnd or more bytes
 697          * of data outstanding to that transport address.
 698          */
 699         /* RFC 7.2.4 & the Implementers Guide 2.8.
 700          *
 701          * 3) ...
 702          *    When a Fast Retransmit is being performed the sender SHOULD
 703          *    ignore the value of cwnd and SHOULD NOT delay retransmission.
 704          */
 705         if (chunk->fast_retransmit != SCTP_NEED_FRTX &&
 706             flight_size >= transport->cwnd)
 707                 return SCTP_XMIT_RWND_FULL;
 708
 709         /* Nagle's algorithm to solve small-packet problem:
 710          * Inhibit the sending of new chunks when new outgoing data arrives
 711          * if any previously transmitted data on the connection remains
 712          * unacknowledged.
 713          */
 714
 715         if ((sctp_sk(asoc->base.sk)->nodelay || inflight == 0) &&
 716             !asoc->force_delay)
 717                 /* Nothing unacked */
 718                 return SCTP_XMIT_OK;
 719
 720         if (!sctp_packet_empty(packet))
 721                 /* Append to packet */
 722                 return SCTP_XMIT_OK;
 723
 724         if (!sctp_state(asoc, ESTABLISHED))
 725                 return SCTP_XMIT_OK;
 726
 727         /* Check whether this chunk and all the rest of pending data will fit
 728          * or delay in hopes of bundling a full sized packet.
 729          */
 730         if (chunk->skb->len + q->out_qlen > transport->pathmtu -
 731             packet->overhead - sctp_datachk_len(&chunk->asoc->stream) - 4)
 732                 /* Enough data queued to fill a packet */
 733                 return SCTP_XMIT_OK;
 734
 735         /* Don't delay large message writes that may have been fragmented */
 736         if (!chunk->msg->can_delay)
 737                 return SCTP_XMIT_OK;
 738
 739         /* Defer until all data acked or packet full */
 740         return SCTP_XMIT_DELAY;
 741 }
 742
 743 /* This private function does management things when adding DATA chunk */
 744 static void sctp_packet_append_data(struct sctp_packet *packet,
 745                                 struct sctp_chunk *chunk)
 746 {
 747         struct sctp_transport *transport = packet->transport;
 748         size_t datasize = sctp_data_size(chunk);
 749         struct sctp_association *asoc = transport->asoc;
 750         u32 rwnd = asoc->peer.rwnd;
 751
 752         /* Keep track of how many bytes are in flight over this transport. */
 753         transport->flight_size += datasize;
 754
 755         /* Keep track of how many bytes are in flight to the receiver. */
 756         asoc->outqueue.outstanding_bytes += datasize;
 757
 758         /* Update our view of the receiver's rwnd. */
 759         if (datasize < rwnd)
 760                 rwnd -= datasize;
 761         else
 762                 rwnd = 0;
 763
 764         asoc->peer.rwnd = rwnd;
 765         sctp_chunk_assign_tsn(chunk);
 766         asoc->stream.si->assign_number(chunk);
 767 }
 768
 769 static enum sctp_xmit sctp_packet_will_fit(struct sctp_packet *packet,
 770                                            struct sctp_chunk *chunk,
 771                                            u16 chunk_len)
 772 {
 773         enum sctp_xmit retval = SCTP_XMIT_OK;
 774         size_t psize, pmtu, maxsize;
 775
 776         /* Don't bundle in this packet if this chunk's auth key doesn't
 777          * match other chunks already enqueued on this packet. Also,
 778          * don't bundle the chunk with auth key if other chunks in this
 779          * packet don't have auth key.
 780          */
 781         if ((packet->auth && chunk->shkey != packet->auth->shkey) ||
 782             (!packet->auth && chunk->shkey &&
 783              chunk->chunk_hdr->type != SCTP_CID_AUTH))
 784                 return SCTP_XMIT_PMTU_FULL;
 785
 786         psize = packet->size;
 787         if (packet->transport->asoc)
 788                 pmtu = packet->transport->asoc->pathmtu;
 789         else
 790                 pmtu = packet->transport->pathmtu;
 791
 792         /* Decide if we need to fragment or resubmit later. */
 793         if (psize + chunk_len > pmtu) {
 794                 /* It's OK to fragment at IP level if any one of the following
 795                  * is true:
 796                  *      1. The packet is empty (meaning this chunk is greater
 797                  *         the MTU)
 798                  *      2. The packet doesn't have any data in it yet and data
 799                  *         requires authentication.
 800                  */
 801                 if (sctp_packet_empty(packet) ||
 802                     (!packet->has_data && chunk->auth)) {
 803                         /* We no longer do re-fragmentation.
 804                          * Just fragment at the IP layer, if we
 805                          * actually hit this condition
 806                          */
 807                         packet->ipfragok = 1;
 808                         goto out;
 809                 }
 810
 811                 /* Similarly, if this chunk was built before a PMTU
 812                  * reduction, we have to fragment it at IP level now. So
 813                  * if the packet already contains something, we need to
 814                  * flush.
 815                  */
 816                 maxsize = pmtu - packet->overhead;
 817                 if (packet->auth)
 818                         maxsize -= SCTP_PAD4(packet->auth->skb->len);
 819                 if (chunk_len > maxsize)
 820                         retval = SCTP_XMIT_PMTU_FULL;
 821
 822                 /* It is also okay to fragment if the chunk we are
 823                  * adding is a control chunk, but only if current packet
 824                  * is not a GSO one otherwise it causes fragmentation of
 825                  * a large frame. So in this case we allow the
 826                  * fragmentation by forcing it to be in a new packet.
 827                  */
 828                 if (!sctp_chunk_is_data(chunk) && packet->has_data)
 829                         retval = SCTP_XMIT_PMTU_FULL;
 830
 831                 if (psize + chunk_len > packet->max_size)
 832                         /* Hit GSO/PMTU limit, gotta flush */
 833                         retval = SCTP_XMIT_PMTU_FULL;
 834
 835                 if (!packet->transport->burst_limited &&
 836                     psize + chunk_len > (packet->transport->cwnd >> 1))
 837                         /* Do not allow a single GSO packet to use more
 838                          * than half of cwnd.
 839                          */
 840                         retval = SCTP_XMIT_PMTU_FULL;
 841
 842                 if (packet->transport->burst_limited &&
 843                     psize + chunk_len > (packet->transport->burst_limited >> 1))
 844                         /* Do not allow a single GSO packet to use more
 845                          * than half of original cwnd.
 846                          */
 847                         retval = SCTP_XMIT_PMTU_FULL;
 848                 /* Otherwise it will fit in the GSO packet */
 849         }
 850
 851 out:
 852         return retval;
 853 }