X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=MdeModulePkg%2FUniversal%2FNetwork%2FIScsiDxe%2FIScsiProto.c;h=cb1f79b16aa3e6dc11a33d8c88822da62cbdab99;hb=4e1005eca7186cbe61aaae09108f6fdf29959f22;hp=2390737f25186d6a694642c4253aabcfbb79fe73;hpb=e5eed7d3641d71d7ea539e5379ea9c6a5cd97004;p=mirror_edk2.git diff --git a/MdeModulePkg/Universal/Network/IScsiDxe/IScsiProto.c b/MdeModulePkg/Universal/Network/IScsiDxe/IScsiProto.c index 2390737f25..cb1f79b16a 100644 --- a/MdeModulePkg/Universal/Network/IScsiDxe/IScsiProto.c +++ b/MdeModulePkg/Universal/Network/IScsiDxe/IScsiProto.c @@ -1,7 +1,7 @@ /** @file The implementation of iSCSI protocol based on RFC3720. -Copyright (c) 2004 - 2010, Intel Corporation. All rights reserved.
+Copyright (c) 2004 - 2014, Intel Corporation. All rights reserved.
This program and the accompanying materials are licensed and made available under the terms and conditions of the BSD License which accompanies this distribution. The full text of the license may be found at @@ -302,6 +302,11 @@ IScsiSessionLogin ( return EFI_NO_MEDIA; } + // + // Set session identifier + // + CopyMem (Session->Isid, Session->ConfigData.NvData.IsId, 6); + // // Create a connection for the session. // @@ -388,6 +393,8 @@ IScsiReceiveLoginRsp ( EFI_STATUS Status; NET_BUF *Pdu; + Pdu = NULL; + // // Receive the iSCSI login response. // @@ -398,6 +405,7 @@ IScsiReceiveLoginRsp ( // // A Login Response is received, process it. // + ASSERT (Pdu != NULL); Status = IScsiProcessLoginRsp (Conn, Pdu); NetbufFree (Pdu); @@ -435,6 +443,9 @@ IScsiAddKeyValuePair ( CHAR8 *Data; LoginReq = (ISCSI_LOGIN_REQUEST *) NetbufGetByte (Pdu, 0, NULL); + if (LoginReq == NULL) { + return EFI_PROTOCOL_ERROR; + } DataSegLen = NTOH24 (LoginReq->DataSegmentLength); KeyLen = (UINT32) AsciiStrLen (Key); @@ -601,6 +612,9 @@ IScsiProcessLoginRsp ( Session = Conn->Session; LoginRsp = (ISCSI_LOGIN_RESPONSE *) NetbufGetByte (Pdu, 0, NULL); + if (LoginRsp == NULL) { + return EFI_PROTOCOL_ERROR; + } if (!ISCSI_CHECK_OPCODE (LoginRsp, ISCSI_OPCODE_LOGIN_RSP)) { // // It's not a Login Response @@ -687,6 +701,14 @@ IScsiProcessLoginRsp ( LoginRsp->MaxCmdSN = NTOHL (LoginRsp->MaxCmdSN); if ((Conn->CurrentStage == ISCSI_SECURITY_NEGOTIATION) && (Conn->CHAPStep == ISCSI_CHAP_INITIAL)) { + // + // If the Login Request is a leading Login Request, the target MUST use + // the value presented in CmdSN as the target value for ExpCmdSN. + // + if ((Session->State == SESSION_STATE_FREE) && (Session->CmdSN != LoginRsp->ExpCmdSN)) { + return EFI_PROTOCOL_ERROR; + } + // // It's the initial Login Response, initialize the local ExpStatSN, MaxCmdSN // and ExpCmdSN. @@ -2056,6 +2078,7 @@ IScsiGenerateDataOutPduSequence ( NET_BUF *DataOutPdu; ISCSI_CONNECTION *Conn; ISCSI_XFER_CONTEXT *XferContext; + UINT8 *DataOutPacket; PduList = AllocatePool (sizeof (LIST_ENTRY)); if (PduList == NULL) { @@ -2099,7 +2122,14 @@ IScsiGenerateDataOutPduSequence ( // // Set the F bit for the last data out PDU in this sequence. // - ISCSI_SET_FLAG (NetbufGetByte (DataOutPdu, 0, NULL), ISCSI_BHS_FLAG_FINAL); + DataOutPacket = NetbufGetByte (DataOutPdu, 0, NULL); + if (DataOutPacket == NULL) { + IScsiFreeNbufList (PduList); + PduList = NULL; + goto ON_EXIT; + } + + ISCSI_SET_FLAG (DataOutPacket, ISCSI_BHS_FLAG_FINAL); ON_EXIT: @@ -2180,6 +2210,9 @@ IScsiOnDataInRcvd ( EFI_STATUS Status; DataInHdr = (ISCSI_SCSI_DATA_IN *) NetbufGetByte (Pdu, 0, NULL); + if (DataInHdr == NULL) { + return EFI_PROTOCOL_ERROR; + } DataInHdr->InitiatorTaskTag = NTOHL (DataInHdr->InitiatorTaskTag); DataInHdr->ExpCmdSN = NTOHL (DataInHdr->ExpCmdSN); @@ -2268,6 +2301,9 @@ IScsiOnR2TRcvd ( UINT8 *Data; R2THdr = (ISCSI_READY_TO_TRANSFER *) NetbufGetByte (Pdu, 0, NULL); + if (R2THdr == NULL) { + return EFI_PROTOCOL_ERROR; + } R2THdr->InitiatorTaskTag = NTOHL (R2THdr->InitiatorTaskTag); R2THdr->TargetTransferTag = NTOHL (R2THdr->TargetTransferTag); @@ -2331,6 +2367,9 @@ IScsiOnScsiRspRcvd ( UINT32 DataSegLen; ScsiRspHdr = (SCSI_RESPONSE *) NetbufGetByte (Pdu, 0, NULL); + if (ScsiRspHdr == NULL) { + return EFI_PROTOCOL_ERROR; + } ScsiRspHdr->InitiatorTaskTag = NTOHL (ScsiRspHdr->InitiatorTaskTag); if (ScsiRspHdr->InitiatorTaskTag != Tcb->InitiatorTaskTag) { @@ -2393,6 +2432,9 @@ IScsiOnScsiRspRcvd ( DataSegLen = ISCSI_GET_DATASEG_LEN (ScsiRspHdr); if (DataSegLen != 0) { SenseData = (ISCSI_SENSE_DATA *) NetbufGetByte (Pdu, sizeof (SCSI_RESPONSE), NULL); + if (SenseData == NULL) { + return EFI_PROTOCOL_ERROR; + } SenseData->Length = NTOHS (SenseData->Length); @@ -2427,6 +2469,9 @@ IScsiOnNopInRcvd ( EFI_STATUS Status; NopInHdr = (ISCSI_NOP_IN *) NetbufGetByte (Pdu, 0, NULL); + if (NopInHdr == NULL) { + return EFI_PROTOCOL_ERROR; + } NopInHdr->StatSN = NTOHL (NopInHdr->StatSN); NopInHdr->ExpCmdSN = NTOHL (NopInHdr->ExpCmdSN); @@ -2461,6 +2506,7 @@ IScsiOnNopInRcvd ( the Packet. @retval EFI_DEVICE_ERROR Session state was not as required. @retval EFI_OUT_OF_RESOURCES Failed to allocate memory. + @retval EFI_NOT_READY The target can not accept new commands. @retval Others Other errors as indicated. **/ EFI_STATUS @@ -2482,7 +2528,7 @@ IScsiExecuteScsiCommand ( UINT8 *Data; ISCSI_IN_BUFFER_CONTEXT InBufferContext; UINT64 Timeout; - UINT8 *Buffer; + UINT8 *PduHdr; Private = ISCSI_DRIVER_DATA_FROM_EXT_SCSI_PASS_THRU (PassThru); Session = &Private->Session; @@ -2492,7 +2538,8 @@ IScsiExecuteScsiCommand ( Timeout = 0; if (Session->State != SESSION_STATE_LOGGED_IN) { - return EFI_DEVICE_ERROR; + Status = EFI_DEVICE_ERROR; + goto ON_EXIT; } Conn = NET_LIST_USER_STRUCT_S ( @@ -2520,8 +2567,13 @@ IScsiExecuteScsiCommand ( } XferContext = &Tcb->XferContext; - Buffer = NetbufGetByte (Pdu, 0, NULL); - XferContext->Offset = ISCSI_GET_DATASEG_LEN (Buffer); + PduHdr = NetbufGetByte (Pdu, 0, NULL); + if (PduHdr == NULL) { + Status = EFI_PROTOCOL_ERROR; + NetbufFree (Pdu); + goto ON_EXIT; + } + XferContext->Offset = ISCSI_GET_DATASEG_LEN (PduHdr); // // Transmit the SCSI Command PDU. @@ -2577,7 +2629,13 @@ IScsiExecuteScsiCommand ( goto ON_EXIT; } - switch (ISCSI_GET_OPCODE (NetbufGetByte (Pdu, 0, NULL))) { + PduHdr = NetbufGetByte (Pdu, 0, NULL); + if (PduHdr == NULL) { + Status = EFI_PROTOCOL_ERROR; + NetbufFree (Pdu); + goto ON_EXIT; + } + switch (ISCSI_GET_OPCODE (PduHdr)) { case ISCSI_OPCODE_SCSI_DATA_IN: Status = IScsiOnDataInRcvd (Pdu, Tcb, Packet); break; @@ -2624,15 +2682,6 @@ ON_EXIT: IScsiDelTcb (Tcb); } - if ((Status != EFI_SUCCESS) && (Status != EFI_NOT_READY)) { - // - // Reinstate the session. - // - if (EFI_ERROR (IScsiSessionReinstatement (Private))) { - Status = EFI_DEVICE_ERROR; - } - } - return Status; } @@ -2653,7 +2702,7 @@ IScsiSessionReinstatement ( EFI_STATUS Status; Session = &Private->Session; - ASSERT (Session->State == SESSION_STATE_LOGGED_IN); + ASSERT (Session->State != SESSION_STATE_FREE); // // Abort the session and re-init it. @@ -2681,21 +2730,10 @@ IScsiSessionInit ( IN BOOLEAN Recovery ) { - UINT32 Random; - if (!Recovery) { Session->Signature = ISCSI_SESSION_SIGNATURE; Session->State = SESSION_STATE_FREE; - Random = NET_RANDOM (NetRandomInitSeed ()); - - Session->Isid[0] = ISID_BYTE_0; - Session->Isid[1] = ISID_BYTE_1; - Session->Isid[2] = ISID_BYTE_2; - Session->Isid[3] = ISID_BYTE_3; - Session->Isid[4] = (UINT8) Random; - Session->Isid[5] = (UINT8) (Random >> 8); - InitializeListHead (&Session->Conns); InitializeListHead (&Session->TcbList); }