]> git.proxmox.com Git - mirror_edk2.git/blame - MdeModulePkg/Universal/Network/Ip4Dxe/Ip4Input.c
Update IPsec.h file to follow approved ECR which will be collected into future UEFI...
[mirror_edk2.git] / MdeModulePkg / Universal / Network / Ip4Dxe / Ip4Input.c
CommitLineData
772db4bb 1/** @file\r
3e8c18da 2 IP4 input process.\r
3 \r
e5eed7d3
HT
4Copyright (c) 2005 - 2010, Intel Corporation. All rights reserved.<BR>\r
5This program and the accompanying materials\r
772db4bb 6are licensed and made available under the terms and conditions of the BSD License\r
7which accompanies this distribution. The full text of the license may be found at\r
8http://opensource.org/licenses/bsd-license.php\r
9\r
10THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
11WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
12\r
772db4bb 13**/\r
14\r
15#include "Ip4Impl.h"\r
16\r
17\r
18/**\r
96e1079f 19 Create an empty assemble entry for the packet identified by\r
772db4bb 20 (Dst, Src, Id, Protocol). The default life for the packet is\r
21 120 seconds.\r
22\r
3e8c18da 23 @param[in] Dst The destination address\r
24 @param[in] Src The source address\r
25 @param[in] Id The ID field in IP header\r
26 @param[in] Protocol The protocol field in IP header\r
772db4bb 27\r
28 @return NULL if failed to allocate memory for the entry, otherwise\r
3e8c18da 29 the point to just created reassemble entry.\r
772db4bb 30\r
31**/\r
772db4bb 32IP4_ASSEMBLE_ENTRY *\r
33Ip4CreateAssembleEntry (\r
34 IN IP4_ADDR Dst,\r
35 IN IP4_ADDR Src,\r
36 IN UINT16 Id,\r
37 IN UINT8 Protocol\r
38 )\r
39{\r
40\r
41 IP4_ASSEMBLE_ENTRY *Assemble;\r
42\r
e48e37fc 43 Assemble = AllocatePool (sizeof (IP4_ASSEMBLE_ENTRY));\r
772db4bb 44\r
45 if (Assemble == NULL) {\r
46 return NULL;\r
47 }\r
48\r
e48e37fc 49 InitializeListHead (&Assemble->Link);\r
50 InitializeListHead (&Assemble->Fragments);\r
772db4bb 51\r
52 Assemble->Dst = Dst;\r
53 Assemble->Src = Src;\r
54 Assemble->Id = Id;\r
55 Assemble->Protocol = Protocol;\r
56 Assemble->TotalLen = 0;\r
57 Assemble->CurLen = 0;\r
58 Assemble->Head = NULL;\r
59 Assemble->Info = NULL;\r
60 Assemble->Life = IP4_FRAGMENT_LIFE;\r
61\r
62 return Assemble;\r
63}\r
64\r
65\r
66/**\r
96e1079f 67 Release all the fragments of a packet, then free the assemble entry.\r
772db4bb 68\r
3e8c18da 69 @param[in] Assemble The assemble entry to free\r
772db4bb 70\r
71**/\r
772db4bb 72VOID\r
73Ip4FreeAssembleEntry (\r
74 IN IP4_ASSEMBLE_ENTRY *Assemble\r
75 )\r
76{\r
e48e37fc 77 LIST_ENTRY *Entry;\r
78 LIST_ENTRY *Next;\r
772db4bb 79 NET_BUF *Fragment;\r
80\r
81 NET_LIST_FOR_EACH_SAFE (Entry, Next, &Assemble->Fragments) {\r
82 Fragment = NET_LIST_USER_STRUCT (Entry, NET_BUF, List);\r
83\r
e48e37fc 84 RemoveEntryList (Entry);\r
772db4bb 85 NetbufFree (Fragment);\r
86 }\r
87\r
766c7483 88 FreePool (Assemble);\r
772db4bb 89}\r
90\r
91\r
92/**\r
93 Initialize an already allocated assemble table. This is generally\r
94 the assemble table embedded in the IP4 service instance.\r
95\r
3e8c18da 96 @param[in, out] Table The assemble table to initialize.\r
772db4bb 97\r
98**/\r
99VOID\r
100Ip4InitAssembleTable (\r
96e1079f 101 IN OUT IP4_ASSEMBLE_TABLE *Table\r
772db4bb 102 )\r
103{\r
104 UINT32 Index;\r
105\r
106 for (Index = 0; Index < IP4_ASSEMLE_HASH_SIZE; Index++) {\r
e48e37fc 107 InitializeListHead (&Table->Bucket[Index]);\r
772db4bb 108 }\r
109}\r
110\r
111\r
112/**\r
113 Clean up the assemble table: remove all the fragments\r
114 and assemble entries.\r
115\r
3e8c18da 116 @param[in] Table The assemble table to clean up\r
772db4bb 117\r
118**/\r
119VOID\r
120Ip4CleanAssembleTable (\r
121 IN IP4_ASSEMBLE_TABLE *Table\r
122 )\r
123{\r
e48e37fc 124 LIST_ENTRY *Entry;\r
125 LIST_ENTRY *Next;\r
772db4bb 126 IP4_ASSEMBLE_ENTRY *Assemble;\r
127 UINT32 Index;\r
128\r
129 for (Index = 0; Index < IP4_ASSEMLE_HASH_SIZE; Index++) {\r
130 NET_LIST_FOR_EACH_SAFE (Entry, Next, &Table->Bucket[Index]) {\r
131 Assemble = NET_LIST_USER_STRUCT (Entry, IP4_ASSEMBLE_ENTRY, Link);\r
132\r
e48e37fc 133 RemoveEntryList (Entry);\r
772db4bb 134 Ip4FreeAssembleEntry (Assemble);\r
135 }\r
136 }\r
137}\r
138\r
139\r
140/**\r
141 Trim the packet to fit in [Start, End), and update the per\r
142 packet information.\r
143\r
144 @param Packet Packet to trim\r
145 @param Start The sequence of the first byte to fit in\r
146 @param End One beyond the sequence of last byte to fit in.\r
147\r
772db4bb 148**/\r
772db4bb 149VOID\r
150Ip4TrimPacket (\r
96e1079f 151 IN OUT NET_BUF *Packet,\r
152 IN INTN Start,\r
153 IN INTN End\r
772db4bb 154 )\r
155{\r
156 IP4_CLIP_INFO *Info;\r
157 INTN Len;\r
158\r
159 Info = IP4_GET_CLIP_INFO (Packet);\r
160\r
161 ASSERT (Info->Start + Info->Length == Info->End);\r
162 ASSERT ((Info->Start < End) && (Start < Info->End));\r
163\r
164 if (Info->Start < Start) {\r
165 Len = Start - Info->Start;\r
166\r
167 NetbufTrim (Packet, (UINT32) Len, NET_BUF_HEAD);\r
168 Info->Start = Start;\r
169 Info->Length -= Len;\r
170 }\r
171\r
172 if (End < Info->End) {\r
173 Len = End - Info->End;\r
174\r
175 NetbufTrim (Packet, (UINT32) Len, NET_BUF_TAIL);\r
176 Info->End = End;\r
177 Info->Length -= Len;\r
178 }\r
179}\r
180\r
181\r
182/**\r
183 Release all the fragments of the packet. This is the callback for\r
184 the assembled packet's OnFree. It will free the assemble entry,\r
185 which in turn will free all the fragments of the packet.\r
186\r
3e8c18da 187 @param[in] Arg The assemble entry to free\r
772db4bb 188\r
189**/\r
772db4bb 190VOID\r
e798cd87 191EFIAPI\r
772db4bb 192Ip4OnFreeFragments (\r
193 IN VOID *Arg\r
194 )\r
195{\r
196 Ip4FreeAssembleEntry ((IP4_ASSEMBLE_ENTRY *) Arg);\r
197}\r
198\r
199\r
200/**\r
201 Reassemble the IP fragments. If all the fragments of the packet\r
202 have been received, it will wrap the packet in a net buffer then\r
203 return it to caller. If the packet can't be assembled, NULL is\r
204 return.\r
205\r
96e1079f 206 @param Table The assemble table used. New assemble entry will be created\r
207 if the Packet is from a new chain of fragments.\r
208 @param Packet The fragment to assemble. It might be freed if the fragment\r
209 can't be re-assembled.\r
772db4bb 210\r
211 @return NULL if the packet can't be reassemble. The point to just assembled\r
96e1079f 212 packet if all the fragments of the packet have arrived.\r
772db4bb 213\r
214**/\r
772db4bb 215NET_BUF *\r
216Ip4Reassemble (\r
96e1079f 217 IN OUT IP4_ASSEMBLE_TABLE *Table,\r
218 IN OUT NET_BUF *Packet\r
772db4bb 219 )\r
220{\r
221 IP4_HEAD *IpHead;\r
222 IP4_CLIP_INFO *This;\r
223 IP4_CLIP_INFO *Node;\r
224 IP4_ASSEMBLE_ENTRY *Assemble;\r
e48e37fc 225 LIST_ENTRY *Head;\r
226 LIST_ENTRY *Prev;\r
227 LIST_ENTRY *Cur;\r
772db4bb 228 NET_BUF *Fragment;\r
229 NET_BUF *NewPacket;\r
230 INTN Index;\r
231\r
f6b7393c 232 IpHead = Packet->Ip.Ip4;\r
772db4bb 233 This = IP4_GET_CLIP_INFO (Packet);\r
234\r
235 ASSERT (IpHead != NULL);\r
236\r
237 //\r
238 // First: find the related assemble entry\r
239 //\r
240 Assemble = NULL;\r
241 Index = IP4_ASSEMBLE_HASH (IpHead->Dst, IpHead->Src, IpHead->Id, IpHead->Protocol);\r
242\r
243 NET_LIST_FOR_EACH (Cur, &Table->Bucket[Index]) {\r
244 Assemble = NET_LIST_USER_STRUCT (Cur, IP4_ASSEMBLE_ENTRY, Link);\r
245\r
246 if ((Assemble->Dst == IpHead->Dst) && (Assemble->Src == IpHead->Src) &&\r
247 (Assemble->Id == IpHead->Id) && (Assemble->Protocol == IpHead->Protocol)) {\r
248 break;\r
249 }\r
250 }\r
251\r
252 //\r
253 // Create a new assemble entry if no assemble entry is related to this packet\r
254 //\r
255 if (Cur == &Table->Bucket[Index]) {\r
256 Assemble = Ip4CreateAssembleEntry (\r
257 IpHead->Dst,\r
258 IpHead->Src,\r
259 IpHead->Id,\r
260 IpHead->Protocol\r
261 );\r
262\r
263 if (Assemble == NULL) {\r
264 goto DROP;\r
265 }\r
266\r
e48e37fc 267 InsertHeadList (&Table->Bucket[Index], &Assemble->Link);\r
772db4bb 268 }\r
894d038a 269 //\r
270 // Assemble shouldn't be NULL here\r
271 //\r
272 ASSERT (Assemble != NULL);\r
772db4bb 273\r
274 //\r
275 // Find the point to insert the packet: before the first\r
276 // fragment with THIS.Start < CUR.Start. the previous one\r
277 // has PREV.Start <= THIS.Start < CUR.Start.\r
278 //\r
279 Head = &Assemble->Fragments;\r
280\r
281 NET_LIST_FOR_EACH (Cur, Head) {\r
282 Fragment = NET_LIST_USER_STRUCT (Cur, NET_BUF, List);\r
283\r
284 if (This->Start < IP4_GET_CLIP_INFO (Fragment)->Start) {\r
285 break;\r
286 }\r
287 }\r
288\r
289 //\r
290 // Check whether the current fragment overlaps with the previous one.\r
291 // It holds that: PREV.Start <= THIS.Start < THIS.End. Only need to\r
292 // check whether THIS.Start < PREV.End for overlap. If two fragments\r
293 // overlaps, trim the overlapped part off THIS fragment.\r
294 //\r
a167ecb1 295 if ((Cur != Head) && ((Prev = Cur->BackLink) != Head)) {\r
772db4bb 296 Fragment = NET_LIST_USER_STRUCT (Prev, NET_BUF, List);\r
297 Node = IP4_GET_CLIP_INFO (Fragment);\r
298\r
299 if (This->Start < Node->End) {\r
300 if (This->End <= Node->End) {\r
301 NetbufFree (Packet);\r
302 return NULL;\r
303 }\r
304\r
305 Ip4TrimPacket (Packet, Node->End, This->End);\r
306 }\r
307 }\r
308\r
309 //\r
310 // Insert the fragment into the packet. The fragment may be removed\r
311 // from the list by the following checks.\r
312 //\r
313 NetListInsertBefore (Cur, &Packet->List);\r
314\r
315 //\r
316 // Check the packets after the insert point. It holds that:\r
317 // THIS.Start <= NODE.Start < NODE.End. The equality holds\r
318 // if PREV and NEXT are continuous. THIS fragment may fill\r
319 // several holes. Remove the completely overlapped fragments\r
320 //\r
321 while (Cur != Head) {\r
322 Fragment = NET_LIST_USER_STRUCT (Cur, NET_BUF, List);\r
323 Node = IP4_GET_CLIP_INFO (Fragment);\r
324\r
325 //\r
326 // Remove fragments completely overlapped by this fragment\r
327 //\r
328 if (Node->End <= This->End) {\r
329 Cur = Cur->ForwardLink;\r
330\r
e48e37fc 331 RemoveEntryList (&Fragment->List);\r
772db4bb 332 Assemble->CurLen -= Node->Length;\r
333\r
334 NetbufFree (Fragment);\r
335 continue;\r
336 }\r
337\r
338 //\r
339 // The conditions are: THIS.Start <= NODE.Start, and THIS.End <\r
340 // NODE.End. Two fragments overlaps if NODE.Start < THIS.End.\r
341 // If two fragments start at the same offset, remove THIS fragment\r
342 // because ((THIS.Start == NODE.Start) && (THIS.End < NODE.End)).\r
343 //\r
344 if (Node->Start < This->End) {\r
345 if (This->Start == Node->Start) {\r
e48e37fc 346 RemoveEntryList (&Packet->List);\r
772db4bb 347 goto DROP;\r
348 }\r
349\r
350 Ip4TrimPacket (Packet, This->Start, Node->Start);\r
351 }\r
352\r
353 break;\r
354 }\r
355\r
356 //\r
357 // Update the assemble info: increase the current length. If it is\r
358 // the frist fragment, update the packet's IP head and per packet\r
359 // info. If it is the last fragment, update the total length.\r
360 //\r
361 Assemble->CurLen += This->Length;\r
362\r
363 if (This->Start == 0) {\r
364 //\r
365 // Once the first fragment is enqueued, it can't be removed\r
366 // from the fragment list. So, Assemble->Head always point\r
367 // to valid memory area.\r
368 //\r
369 ASSERT (Assemble->Head == NULL);\r
370\r
371 Assemble->Head = IpHead;\r
372 Assemble->Info = IP4_GET_CLIP_INFO (Packet);\r
373 }\r
374\r
375 //\r
376 // Don't update the length more than once.\r
377 //\r
378 if (IP4_LAST_FRAGMENT (IpHead->Fragment) && (Assemble->TotalLen == 0)) {\r
379 Assemble->TotalLen = This->End;\r
380 }\r
381\r
382 //\r
383 // Deliver the whole packet if all the fragments received.\r
384 // All fragments received if:\r
96e1079f 385 // 1. received the last one, so, the total length is know\r
772db4bb 386 // 2. received all the data. If the last fragment on the\r
387 // queue ends at the total length, all data is received.\r
388 //\r
389 if ((Assemble->TotalLen != 0) && (Assemble->CurLen >= Assemble->TotalLen)) {\r
390\r
e48e37fc 391 RemoveEntryList (&Assemble->Link);\r
772db4bb 392\r
393 //\r
394 // If the packet is properly formated, the last fragment's End\r
395 // equals to the packet's total length. Otherwise, the packet\r
396 // is a fake, drop it now.\r
397 //\r
398 Fragment = NET_LIST_USER_STRUCT (Head->BackLink, NET_BUF, List);\r
399\r
400 if (IP4_GET_CLIP_INFO (Fragment)->End != Assemble->TotalLen) {\r
401 Ip4FreeAssembleEntry (Assemble);\r
402 return NULL;\r
403 }\r
404\r
405 //\r
406 // Wrap the packet in a net buffer then deliver it up\r
407 //\r
408 NewPacket = NetbufFromBufList (\r
409 &Assemble->Fragments,\r
410 0,\r
411 0,\r
412 Ip4OnFreeFragments,\r
413 Assemble\r
414 );\r
415\r
416 if (NewPacket == NULL) {\r
417 Ip4FreeAssembleEntry (Assemble);\r
418 return NULL;\r
419 }\r
420\r
f6b7393c 421 NewPacket->Ip.Ip4 = Assemble->Head;\r
687a2e5f 422 CopyMem (IP4_GET_CLIP_INFO (NewPacket), Assemble->Info, sizeof (*IP4_GET_CLIP_INFO (NewPacket)));\r
772db4bb 423 return NewPacket;\r
424 }\r
425\r
426 return NULL;\r
427\r
428DROP:\r
429 NetbufFree (Packet);\r
430 return NULL;\r
431}\r
432\r
a1503a32 433/**\r
434 The callback function for the net buffer which wraps the packet processed by \r
435 IPsec. It releases the wrap packet and also signals IPsec to free the resources. \r
436\r
437 @param[in] Arg The wrap context\r
438\r
439**/\r
440VOID\r
e798cd87 441EFIAPI\r
a1503a32 442Ip4IpSecFree (\r
443 IN VOID *Arg\r
444 )\r
445{\r
446 IP4_IPSEC_WRAP *Wrap;\r
447\r
448 Wrap = (IP4_IPSEC_WRAP *) Arg;\r
449\r
450 if (Wrap->IpSecRecycleSignal != NULL) {\r
451 gBS->SignalEvent (Wrap->IpSecRecycleSignal);\r
452 }\r
453\r
454 NetbufFree (Wrap->Packet);\r
455\r
456 FreePool (Wrap);\r
457\r
458 return;\r
459}\r
460\r
461/**\r
462 The work function to locate IPsec protocol to process the inbound or \r
463 outbound IP packets. The process routine handls the packet with following\r
464 actions: bypass the packet, discard the packet, or protect the packet. \r
465\r
705f53a9 466 @param[in] IpSb The IP4 service instance.\r
467 @param[in, out] Head The The caller supplied IP4 header.\r
468 @param[in, out] Netbuf The IP4 packet to be processed by IPsec.\r
469 @param[in, out] Options The caller supplied options.\r
470 @param[in, out] OptionsLen The length of the option.\r
a1503a32 471 @param[in] Direction The directionality in an SPD entry, \r
705f53a9 472 EfiIPsecInBound or EfiIPsecOutBound.\r
473 @param[in] Context The token's wrap.\r
a1503a32 474\r
475 @retval EFI_SUCCESS The IPsec protocol is not available or disabled.\r
476 @retval EFI_SUCCESS The packet was bypassed and all buffers remain the same.\r
477 @retval EFI_SUCCESS The packet was protected.\r
478 @retval EFI_ACCESS_DENIED The packet was discarded. \r
479 @retval EFI_OUT_OF_RESOURCES There is no suffcient resource to complete the operation.\r
480 @retval EFI_BUFFER_TOO_SMALL The number of non-empty block is bigger than the \r
481 number of input data blocks when build a fragment table.\r
482\r
483**/\r
484EFI_STATUS\r
485Ip4IpSecProcessPacket (\r
705f53a9 486 IN IP4_SERVICE *IpSb,\r
487 IN OUT IP4_HEAD **Head,\r
488 IN OUT NET_BUF **Netbuf,\r
489 IN OUT UINT8 **Options,\r
490 IN OUT UINT32 *OptionsLen,\r
491 IN EFI_IPSEC_TRAFFIC_DIR Direction,\r
492 IN VOID *Context\r
a1503a32 493 )\r
494{\r
495 NET_FRAGMENT *FragmentTable;\r
705f53a9 496 NET_FRAGMENT *OriginalFragmentTable;\r
a1503a32 497 UINT32 FragmentCount;\r
705f53a9 498 UINT32 OriginalFragmentCount;\r
a1503a32 499 EFI_EVENT RecycleEvent;\r
500 NET_BUF *Packet;\r
501 IP4_TXTOKEN_WRAP *TxWrap;\r
502 IP4_IPSEC_WRAP *IpSecWrap;\r
503 EFI_STATUS Status;\r
705f53a9 504 IP4_HEAD ZeroHead;\r
a1503a32 505\r
506 Status = EFI_SUCCESS;\r
507 Packet = *Netbuf;\r
508 RecycleEvent = NULL;\r
509 IpSecWrap = NULL;\r
510 FragmentTable = NULL;\r
511 TxWrap = (IP4_TXTOKEN_WRAP *) Context; \r
512 FragmentCount = Packet->BlockOpNum;\r
705f53a9 513\r
514 ZeroMem (&ZeroHead, sizeof (IP4_HEAD));\r
a1503a32 515 \r
516 if (mIpSec == NULL) {\r
517 gBS->LocateProtocol (&gEfiIpSecProtocolGuid, NULL, (VOID **) &mIpSec);\r
9e375eb1 518 if (mIpSec == NULL) {\r
519 goto ON_EXIT;\r
a1503a32 520 }\r
521 }\r
522\r
a1503a32 523 //\r
524 // Check whether the IPsec enable variable is set.\r
525 //\r
526 if (mIpSec->DisabledFlag) {\r
527 //\r
528 // If IPsec is disabled, restore the original MTU\r
529 // \r
530 IpSb->MaxPacketSize = IpSb->OldMaxPacketSize;\r
531 goto ON_EXIT;\r
532 } else {\r
533 //\r
534 // If IPsec is enabled, use the MTU which reduce the IPsec header length. \r
535 //\r
536 IpSb->MaxPacketSize = IpSb->OldMaxPacketSize - IP4_MAX_IPSEC_HEADLEN; \r
537 }\r
538\r
539 //\r
540 // Rebuild fragment table from netbuf to ease IPsec process.\r
541 //\r
542 FragmentTable = AllocateZeroPool (FragmentCount * sizeof (NET_FRAGMENT));\r
543\r
544 if (FragmentTable == NULL) {\r
545 Status = EFI_OUT_OF_RESOURCES;\r
546 goto ON_EXIT;\r
547 }\r
548 \r
549 Status = NetbufBuildExt (Packet, FragmentTable, &FragmentCount);\r
705f53a9 550 \r
551 //\r
552 // Record the original FragmentTable and count.\r
553 //\r
554 OriginalFragmentTable = FragmentTable;\r
555 OriginalFragmentCount = FragmentCount;\r
a1503a32 556\r
557 if (EFI_ERROR (Status)) {\r
558 FreePool (FragmentTable);\r
559 goto ON_EXIT;\r
560 }\r
561\r
562 //\r
563 // Convert host byte order to network byte order\r
564 //\r
705f53a9 565 Ip4NtohHead (*Head);\r
a1503a32 566 \r
705f53a9 567 Status = mIpSec->ProcessExt (\r
a1503a32 568 mIpSec,\r
569 IpSb->Controller,\r
570 IP_VERSION_4,\r
705f53a9 571 (VOID *) (*Head),\r
572 &(*Head)->Protocol,\r
573 Options,\r
574 OptionsLen,\r
a1503a32 575 (EFI_IPSEC_FRAGMENT_DATA **) (&FragmentTable),\r
576 &FragmentCount,\r
577 Direction,\r
578 &RecycleEvent\r
579 );\r
580 //\r
581 // Convert back to host byte order\r
582 //\r
705f53a9 583 Ip4NtohHead (*Head);\r
a1503a32 584 \r
585 if (EFI_ERROR (Status)) {\r
586 goto ON_EXIT;\r
587 }\r
588\r
705f53a9 589 if (OriginalFragmentTable == FragmentTable && OriginalFragmentCount == FragmentCount) {\r
590 goto ON_EXIT;\r
591 }\r
592\r
a1503a32 593 if (Direction == EfiIPsecOutBound && TxWrap != NULL) {\r
594 \r
595 TxWrap->IpSecRecycleSignal = RecycleEvent;\r
596 TxWrap->Packet = NetbufFromExt (\r
597 FragmentTable,\r
598 FragmentCount,\r
599 IP4_MAX_HEADLEN,\r
600 0,\r
601 Ip4FreeTxToken,\r
602 TxWrap\r
603 );\r
604 if (TxWrap->Packet == NULL) {\r
605 Status = EFI_OUT_OF_RESOURCES;\r
606 goto ON_EXIT;\r
607 }\r
608\r
705f53a9 609 //\r
610 // Free orginal Netbuf.\r
611 //\r
612 NetIpSecNetbufFree (*Netbuf);\r
a1503a32 613 *Netbuf = TxWrap->Packet;\r
614 \r
615 } else {\r
616 \r
617 IpSecWrap = AllocateZeroPool (sizeof (IP4_IPSEC_WRAP));\r
618 \r
619 if (IpSecWrap == NULL) {\r
620 goto ON_EXIT;\r
621 }\r
622 \r
623 IpSecWrap->IpSecRecycleSignal = RecycleEvent;\r
624 IpSecWrap->Packet = Packet;\r
625 Packet = NetbufFromExt (\r
626 FragmentTable, \r
627 FragmentCount, \r
628 IP4_MAX_HEADLEN, \r
629 0, \r
630 Ip4IpSecFree, \r
631 IpSecWrap\r
632 );\r
633 \r
634 if (Packet == NULL) {\r
635 Status = EFI_OUT_OF_RESOURCES;\r
636 goto ON_EXIT;\r
637 }\r
638\r
705f53a9 639 if (Direction == EfiIPsecInBound && 0 != CompareMem (*Head, &ZeroHead, sizeof (IP4_HEAD))) {\r
640 Ip4PrependHead (Packet, *Head, *Options, *OptionsLen);\r
a1503a32 641 Ip4NtohHead (Packet->Ip.Ip4);\r
705f53a9 642 NetbufTrim (Packet, ((*Head)->HeadLen << 2), TRUE);\r
a1503a32 643\r
644 CopyMem (\r
645 IP4_GET_CLIP_INFO (Packet),\r
646 IP4_GET_CLIP_INFO (IpSecWrap->Packet),\r
647 sizeof (IP4_CLIP_INFO)\r
648 );\r
649 }\r
a1503a32 650 *Netbuf = Packet;\r
651 }\r
652\r
653ON_EXIT:\r
654 return Status;\r
655}\r
772db4bb 656\r
657/**\r
705f53a9 658 Pre-process the IPv4 packet. First validates the IPv4 packet, and\r
659 then reassembles packet if it is necessary.\r
660 \r
661 @param[in] IpSb Pointer to IP4_SERVICE.\r
662 @param[in, out] Packet Pointer to the Packet to be processed.\r
663 @param[in] Head Pointer to the IP4_HEAD.\r
664 @param[in] Option Pointer to a buffer which contains the IPv4 option.\r
665 @param[in] OptionLen The length of Option in bytes.\r
666 @param[in] Flag The link layer flag for the packet received, such\r
667 as multicast.\r
772db4bb 668\r
705f53a9 669 @retval EFI_SEUCCESS The recieved packet is in well form.\r
670 @retval EFI_INVAILD_PARAMETER The recieved packet is malformed. \r
772db4bb 671\r
672**/\r
705f53a9 673EFI_STATUS\r
674Ip4PreProcessPacket (\r
675 IN IP4_SERVICE *IpSb,\r
676 IN OUT NET_BUF **Packet,\r
677 IN IP4_HEAD *Head,\r
678 IN UINT8 *Option,\r
679 IN UINT32 OptionLen, \r
680 IN UINT32 Flag\r
681 ) \r
772db4bb 682{\r
772db4bb 683 IP4_CLIP_INFO *Info;\r
772db4bb 684 UINT32 HeadLen;\r
772db4bb 685 UINT32 TotalLen;\r
686 UINT16 Checksum;\r
772db4bb 687\r
688 //\r
96e1079f 689 // Check that the IP4 header is correctly formatted\r
772db4bb 690 //\r
705f53a9 691 if ((*Packet)->TotalSize < IP4_MIN_HEADLEN) {\r
692 return EFI_INVALID_PARAMETER;\r
772db4bb 693 }\r
705f53a9 694 \r
772db4bb 695 HeadLen = (Head->HeadLen << 2);\r
696 TotalLen = NTOHS (Head->TotalLen);\r
697\r
698 //\r
699 // Mnp may deliver frame trailer sequence up, trim it off.\r
700 //\r
705f53a9 701 if (TotalLen < (*Packet)->TotalSize) {\r
702 NetbufTrim (*Packet, (*Packet)->TotalSize - TotalLen, FALSE);\r
772db4bb 703 }\r
704\r
705 if ((Head->Ver != 4) || (HeadLen < IP4_MIN_HEADLEN) ||\r
705f53a9 706 (TotalLen < HeadLen) || (TotalLen != (*Packet)->TotalSize)) {\r
707 return EFI_INVALID_PARAMETER;\r
772db4bb 708 }\r
709\r
710 //\r
711 // Some OS may send IP packets without checksum.\r
712 //\r
687a2e5f 713 Checksum = (UINT16) (~NetblockChecksum ((UINT8 *) Head, HeadLen));\r
772db4bb 714\r
715 if ((Head->Checksum != 0) && (Checksum != 0)) {\r
705f53a9 716 return EFI_INVALID_PARAMETER;\r
772db4bb 717 }\r
718\r
719 //\r
720 // Convert the IP header to host byte order, then get the per packet info.\r
721 //\r
705f53a9 722 (*Packet)->Ip.Ip4 = Ip4NtohHead (Head);\r
772db4bb 723\r
705f53a9 724 Info = IP4_GET_CLIP_INFO (*Packet);\r
772db4bb 725 Info->LinkFlag = Flag;\r
726 Info->CastType = Ip4GetHostCast (IpSb, Head->Dst, Head->Src);\r
727 Info->Start = (Head->Fragment & IP4_HEAD_OFFSET_MASK) << 3;\r
728 Info->Length = Head->TotalLen - HeadLen;\r
729 Info->End = Info->Start + Info->Length;\r
730 Info->Status = EFI_SUCCESS;\r
731\r
732 //\r
733 // The packet is destinated to us if the CastType is non-zero.\r
734 //\r
735 if ((Info->CastType == 0) || (Info->End > IP4_MAX_PACKET_SIZE)) {\r
705f53a9 736 return EFI_INVALID_PARAMETER;\r
772db4bb 737 }\r
738\r
739 //\r
740 // Validate the options. Don't call the Ip4OptionIsValid if\r
741 // there is no option to save some CPU process.\r
742 //\r
705f53a9 743 \r
744 if ((OptionLen > 0) && !Ip4OptionIsValid (Option, OptionLen, TRUE)) {\r
745 return EFI_INVALID_PARAMETER;\r
772db4bb 746 }\r
747\r
748 //\r
749 // Trim the head off, after this point, the packet is headless.\r
750 // and Packet->TotalLen == Info->Length.\r
751 //\r
705f53a9 752 NetbufTrim (*Packet, HeadLen, TRUE);\r
772db4bb 753\r
754 //\r
755 // Reassemble the packet if this is a fragment. The packet is a\r
756 // fragment if its head has MF (more fragment) set, or it starts\r
757 // at non-zero byte.\r
758 //\r
b2c0a175 759 if (((Head->Fragment & IP4_HEAD_MF_MASK) != 0) || (Info->Start != 0)) {\r
772db4bb 760 //\r
761 // Drop the fragment if DF is set but it is fragmented. Gateway\r
762 // need to send a type 4 destination unreache ICMP message here.\r
763 //\r
b2c0a175 764 if ((Head->Fragment & IP4_HEAD_DF_MASK) != 0) {\r
705f53a9 765 return EFI_INVALID_PARAMETER;\r
772db4bb 766 }\r
767\r
768 //\r
769 // The length of all but the last fragments is in the unit of 8 bytes.\r
770 //\r
b2c0a175 771 if (((Head->Fragment & IP4_HEAD_MF_MASK) != 0) && (Info->Length % 8 != 0)) {\r
705f53a9 772 return EFI_INVALID_PARAMETER;\r
772db4bb 773 }\r
774\r
705f53a9 775 *Packet = Ip4Reassemble (&IpSb->Assemble, *Packet);\r
772db4bb 776\r
777 //\r
778 // Packet assembly isn't complete, start receive more packet.\r
779 //\r
705f53a9 780 if (*Packet == NULL) {\r
781 return EFI_INVALID_PARAMETER;\r
772db4bb 782 }\r
783 }\r
705f53a9 784 \r
785 return EFI_SUCCESS;\r
786}\r
787\r
788/**\r
789 The IP4 input routine. It is called by the IP4_INTERFACE when a\r
790 IP4 fragment is received from MNP.\r
791\r
792 @param[in] Ip4Instance The IP4 child that request the receive, most like\r
793 it is NULL.\r
794 @param[in] Packet The IP4 packet received.\r
795 @param[in] IoStatus The return status of receive request.\r
796 @param[in] Flag The link layer flag for the packet received, such\r
797 as multicast.\r
798 @param[in] Context The IP4 service instance that own the MNP.\r
799\r
800**/\r
801VOID\r
802Ip4AccpetFrame (\r
803 IN IP4_PROTOCOL *Ip4Instance,\r
804 IN NET_BUF *Packet,\r
805 IN EFI_STATUS IoStatus,\r
806 IN UINT32 Flag,\r
807 IN VOID *Context\r
808 )\r
809{\r
810 IP4_SERVICE *IpSb;\r
811 IP4_HEAD *Head;\r
812 EFI_STATUS Status;\r
813 IP4_HEAD ZeroHead;\r
814 UINT8 *Option;\r
815 UINT32 OptionLen;\r
816 \r
817 IpSb = (IP4_SERVICE *) Context;\r
818 Option = NULL;\r
819\r
820 if (EFI_ERROR (IoStatus) || (IpSb->State == IP4_SERVICE_DESTORY)) {\r
821 goto DROP;\r
822 }\r
823\r
824 Head = (IP4_HEAD *) NetbufGetByte (Packet, 0, NULL); \r
825 OptionLen = (Head->HeadLen << 2) - IP4_MIN_HEADLEN;\r
826 if (OptionLen > 0) {\r
827 Option = (UINT8 *) (Head + 1);\r
828 }\r
829\r
830 //\r
831 // Validate packet format and reassemble packet if it is necessary.\r
832 //\r
833 Status = Ip4PreProcessPacket (\r
834 IpSb, \r
835 &Packet, \r
836 Head, \r
837 Option,\r
838 OptionLen, \r
839 Flag\r
840 );\r
841\r
842 if (EFI_ERROR (Status)) {\r
843 goto RESTART;\r
844 }\r
772db4bb 845\r
846 //\r
a1503a32 847 // After trim off, the packet is a esp/ah/udp/tcp/icmp6 net buffer,\r
848 // and no need consider any other ahead ext headers.\r
849 //\r
850 Status = Ip4IpSecProcessPacket (\r
851 IpSb, \r
705f53a9 852 &Head, \r
a1503a32 853 &Packet, \r
705f53a9 854 &Option,\r
855 &OptionLen, \r
a1503a32 856 EfiIPsecInBound,\r
857 NULL\r
858 );\r
859\r
705f53a9 860 if (EFI_ERROR (Status)) {\r
a1503a32 861 goto RESTART;\r
862 }\r
705f53a9 863 \r
864 //\r
865 // If the packet is protected by tunnel mode, parse the inner Ip Packet.\r
866 //\r
867 ZeroMem (&ZeroHead, sizeof (IP4_HEAD));\r
868 if (0 == CompareMem (Head, &ZeroHead, sizeof (IP4_HEAD))) {\r
772db4bb 869 // Packet may have been changed. Head, HeadLen, TotalLen, and\r
870 // info must be reloaded bofore use. The ownership of the packet\r
871 // is transfered to the packet process logic.\r
872 //\r
705f53a9 873 Head = (IP4_HEAD *) NetbufGetByte (Packet, 0, NULL);\r
874 Status = Ip4PreProcessPacket (\r
875 IpSb, \r
876 &Packet, \r
877 Head, \r
878 Option,\r
879 OptionLen, \r
880 Flag\r
881 );\r
882 if (EFI_ERROR (Status)) {\r
883 goto RESTART;\r
884 }\r
885 }\r
f6b7393c 886 Head = Packet->Ip.Ip4;\r
772db4bb 887 IP4_GET_CLIP_INFO (Packet)->Status = EFI_SUCCESS;\r
888\r
889 switch (Head->Protocol) {\r
f6b7393c 890 case EFI_IP_PROTO_ICMP:\r
772db4bb 891 Ip4IcmpHandle (IpSb, Head, Packet);\r
892 break;\r
893\r
894 case IP4_PROTO_IGMP:\r
895 Ip4IgmpHandle (IpSb, Head, Packet);\r
896 break;\r
897\r
898 default:\r
899 Ip4Demultiplex (IpSb, Head, Packet);\r
900 }\r
901\r
902 Packet = NULL;\r
903\r
36ee91ca 904 //\r
905 // Dispatch the DPCs queued by the NotifyFunction of the rx token's events\r
906 // which are signaled with received data.\r
907 //\r
d8d26fb2 908 DispatchDpc ();\r
36ee91ca 909\r
772db4bb 910RESTART:\r
911 Ip4ReceiveFrame (IpSb->DefaultInterface, NULL, Ip4AccpetFrame, IpSb);\r
912\r
913DROP:\r
914 if (Packet != NULL) {\r
915 NetbufFree (Packet);\r
916 }\r
917\r
918 return ;\r
919}\r
920\r
921\r
922/**\r
923 Check whether this IP child accepts the packet.\r
924\r
3e8c18da 925 @param[in] IpInstance The IP child to check\r
926 @param[in] Head The IP header of the packet\r
927 @param[in] Packet The data of the packet\r
772db4bb 928\r
96e1079f 929 @retval TRUE If the child wants to receive the packet.\r
930 @retval FALSE Otherwise.\r
772db4bb 931\r
932**/\r
933BOOLEAN\r
934Ip4InstanceFrameAcceptable (\r
935 IN IP4_PROTOCOL *IpInstance,\r
936 IN IP4_HEAD *Head,\r
937 IN NET_BUF *Packet\r
938 )\r
939{\r
940 IP4_ICMP_ERROR_HEAD Icmp;\r
941 EFI_IP4_CONFIG_DATA *Config;\r
942 IP4_CLIP_INFO *Info;\r
943 UINT16 Proto;\r
944 UINT32 Index;\r
945\r
946 Config = &IpInstance->ConfigData;\r
947\r
948 //\r
949 // Dirty trick for the Tiano UEFI network stack implmentation. If\r
950 // ReceiveTimeout == -1, the receive of the packet for this instance\r
96e1079f 951 // is disabled. The UEFI spec don't have such capability. We add\r
772db4bb 952 // this to improve the performance because IP will make a copy of\r
953 // the received packet for each accepting instance. Some IP instances\r
954 // used by UDP/TCP only send packets, they don't wants to receive.\r
955 //\r
956 if (Config->ReceiveTimeout == (UINT32)(-1)) {\r
957 return FALSE;\r
958 }\r
959\r
960 if (Config->AcceptPromiscuous) {\r
961 return TRUE;\r
962 }\r
963\r
964 //\r
965 // Use protocol from the IP header embedded in the ICMP error\r
966 // message to filter, instead of ICMP itself. ICMP handle will\r
9899d8b6 967 // call Ip4Demultiplex to deliver ICMP errors.\r
772db4bb 968 //\r
969 Proto = Head->Protocol;\r
970\r
9899d8b6 971 if ((Proto == EFI_IP_PROTO_ICMP) && (!Config->AcceptAnyProtocol) && (Proto != Config->DefaultProtocol)) {\r
772db4bb 972 NetbufCopy (Packet, 0, sizeof (Icmp.Head), (UINT8 *) &Icmp.Head);\r
973\r
974 if (mIcmpClass[Icmp.Head.Type].IcmpClass == ICMP_ERROR_MESSAGE) {\r
975 if (!Config->AcceptIcmpErrors) {\r
976 return FALSE;\r
977 }\r
978\r
979 NetbufCopy (Packet, 0, sizeof (Icmp), (UINT8 *) &Icmp);\r
980 Proto = Icmp.IpHead.Protocol;\r
981 }\r
982 }\r
983\r
984 //\r
985 // Match the protocol\r
986 //\r
987 if (!Config->AcceptAnyProtocol && (Proto != Config->DefaultProtocol)) {\r
988 return FALSE;\r
989 }\r
990\r
991 //\r
992 // Check for broadcast, the caller has computed the packet's\r
993 // cast type for this child's interface.\r
994 //\r
995 Info = IP4_GET_CLIP_INFO (Packet);\r
996\r
997 if (IP4_IS_BROADCAST (Info->CastType)) {\r
998 return Config->AcceptBroadcast;\r
999 }\r
1000\r
1001 //\r
1002 // If it is a multicast packet, check whether we are in the group.\r
1003 //\r
1004 if (Info->CastType == IP4_MULTICAST) {\r
1005 //\r
1006 // Receive the multicast if the instance wants to receive all packets.\r
1007 //\r
1008 if (!IpInstance->ConfigData.UseDefaultAddress && (IpInstance->Interface->Ip == 0)) {\r
1009 return TRUE;\r
1010 }\r
1011\r
1012 for (Index = 0; Index < IpInstance->GroupCount; Index++) {\r
1013 if (IpInstance->Groups[Index] == HTONL (Head->Dst)) {\r
1014 break;\r
1015 }\r
1016 }\r
1017\r
1018 return (BOOLEAN)(Index < IpInstance->GroupCount);\r
1019 }\r
1020\r
1021 return TRUE;\r
1022}\r
1023\r
1024\r
1025/**\r
1026 Enqueue a shared copy of the packet to the IP4 child if the\r
1027 packet is acceptable to it. Here the data of the packet is\r
1028 shared, but the net buffer isn't.\r
1029\r
3e8c18da 1030 @param[in] IpInstance The IP4 child to enqueue the packet to\r
1031 @param[in] Head The IP header of the received packet\r
1032 @param[in] Packet The data of the received packet\r
772db4bb 1033\r
1034 @retval EFI_NOT_STARTED The IP child hasn't been configured.\r
1035 @retval EFI_INVALID_PARAMETER The child doesn't want to receive the packet\r
1036 @retval EFI_OUT_OF_RESOURCES Failed to allocate some resource\r
1037 @retval EFI_SUCCESS A shared copy the packet is enqueued to the child.\r
1038\r
1039**/\r
1040EFI_STATUS\r
1041Ip4InstanceEnquePacket (\r
1042 IN IP4_PROTOCOL *IpInstance,\r
1043 IN IP4_HEAD *Head,\r
1044 IN NET_BUF *Packet\r
1045 )\r
1046{\r
1047 IP4_CLIP_INFO *Info;\r
1048 NET_BUF *Clone;\r
1049\r
1050 //\r
1051 // Check whether the packet is acceptable to this instance.\r
1052 //\r
1053 if (IpInstance->State != IP4_STATE_CONFIGED) {\r
1054 return EFI_NOT_STARTED;\r
1055 }\r
1056\r
1057 if (!Ip4InstanceFrameAcceptable (IpInstance, Head, Packet)) {\r
1058 return EFI_INVALID_PARAMETER;\r
1059 }\r
1060\r
1061 //\r
1062 // Enque a shared copy of the packet.\r
1063 //\r
1064 Clone = NetbufClone (Packet);\r
1065\r
1066 if (Clone == NULL) {\r
1067 return EFI_OUT_OF_RESOURCES;\r
1068 }\r
1069\r
1070 //\r
1071 // Set the receive time out for the assembled packet. If it expires,\r
1072 // packet will be removed from the queue.\r
1073 //\r
1074 Info = IP4_GET_CLIP_INFO (Clone);\r
1075 Info->Life = IP4_US_TO_SEC (IpInstance->ConfigData.ReceiveTimeout);\r
1076\r
e48e37fc 1077 InsertTailList (&IpInstance->Received, &Clone->List);\r
772db4bb 1078 return EFI_SUCCESS;\r
1079}\r
1080\r
1081\r
1082/**\r
1083 The signal handle of IP4's recycle event. It is called back\r
1084 when the upper layer release the packet.\r
1085\r
3e8c18da 1086 @param Event The IP4's recycle event.\r
1087 @param Context The context of the handle, which is a\r
1088 IP4_RXDATA_WRAP\r
772db4bb 1089\r
1090**/\r
772db4bb 1091VOID\r
1092EFIAPI\r
1093Ip4OnRecyclePacket (\r
1094 IN EFI_EVENT Event,\r
1095 IN VOID *Context\r
1096 )\r
1097{\r
1098 IP4_RXDATA_WRAP *Wrap;\r
1099\r
1100 Wrap = (IP4_RXDATA_WRAP *) Context;\r
1101\r
e48e37fc 1102 EfiAcquireLockOrFail (&Wrap->IpInstance->RecycleLock);\r
1103 RemoveEntryList (&Wrap->Link);\r
1104 EfiReleaseLock (&Wrap->IpInstance->RecycleLock);\r
772db4bb 1105\r
1106 ASSERT (!NET_BUF_SHARED (Wrap->Packet));\r
1107 NetbufFree (Wrap->Packet);\r
1108\r
1109 gBS->CloseEvent (Wrap->RxData.RecycleSignal);\r
766c7483 1110 FreePool (Wrap);\r
772db4bb 1111}\r
1112\r
1113\r
1114/**\r
1115 Wrap the received packet to a IP4_RXDATA_WRAP, which will be\r
1116 delivered to the upper layer. Each IP4 child that accepts the\r
1117 packet will get a not-shared copy of the packet which is wrapped\r
1118 in the IP4_RXDATA_WRAP. The IP4_RXDATA_WRAP->RxData is passed\r
1119 to the upper layer. Upper layer will signal the recycle event in\r
1120 it when it is done with the packet.\r
1121\r
3e8c18da 1122 @param[in] IpInstance The IP4 child to receive the packet\r
1123 @param[in] Packet The packet to deliver up.\r
772db4bb 1124\r
3e8c18da 1125 @retval Wrap if warp the packet succeed.\r
1126 @retval NULL failed to wrap the packet .\r
772db4bb 1127\r
1128**/\r
1129IP4_RXDATA_WRAP *\r
1130Ip4WrapRxData (\r
1131 IN IP4_PROTOCOL *IpInstance,\r
1132 IN NET_BUF *Packet\r
1133 )\r
1134{\r
1135 IP4_RXDATA_WRAP *Wrap;\r
1136 EFI_IP4_RECEIVE_DATA *RxData;\r
1137 EFI_STATUS Status;\r
1138\r
e48e37fc 1139 Wrap = AllocatePool (IP4_RXDATA_WRAP_SIZE (Packet->BlockOpNum));\r
772db4bb 1140\r
1141 if (Wrap == NULL) {\r
1142 return NULL;\r
1143 }\r
1144\r
e48e37fc 1145 InitializeListHead (&Wrap->Link);\r
772db4bb 1146\r
1147 Wrap->IpInstance = IpInstance;\r
1148 Wrap->Packet = Packet;\r
1149 RxData = &Wrap->RxData;\r
1150\r
e48e37fc 1151 ZeroMem (&RxData->TimeStamp, sizeof (EFI_TIME));\r
772db4bb 1152\r
1153 Status = gBS->CreateEvent (\r
1154 EVT_NOTIFY_SIGNAL,\r
e48e37fc 1155 TPL_NOTIFY,\r
772db4bb 1156 Ip4OnRecyclePacket,\r
1157 Wrap,\r
1158 &RxData->RecycleSignal\r
1159 );\r
1160\r
1161 if (EFI_ERROR (Status)) {\r
766c7483 1162 FreePool (Wrap);\r
772db4bb 1163 return NULL;\r
1164 }\r
1165\r
f6b7393c 1166 ASSERT (Packet->Ip.Ip4 != NULL);\r
772db4bb 1167\r
1168 //\r
1169 // The application expects a network byte order header.\r
1170 //\r
f6b7393c 1171 RxData->HeaderLength = (Packet->Ip.Ip4->HeadLen << 2);\r
1172 RxData->Header = (EFI_IP4_HEADER *) Ip4NtohHead (Packet->Ip.Ip4);\r
772db4bb 1173\r
1174 RxData->OptionsLength = RxData->HeaderLength - IP4_MIN_HEADLEN;\r
1175 RxData->Options = NULL;\r
1176\r
1177 if (RxData->OptionsLength != 0) {\r
1178 RxData->Options = (VOID *) (RxData->Header + 1);\r
1179 }\r
1180\r
1181 RxData->DataLength = Packet->TotalSize;\r
1182\r
1183 //\r
1184 // Build the fragment table to be delivered up.\r
1185 //\r
1186 RxData->FragmentCount = Packet->BlockOpNum;\r
1187 NetbufBuildExt (Packet, (NET_FRAGMENT *) RxData->FragmentTable, &RxData->FragmentCount);\r
1188\r
1189 return Wrap;\r
1190}\r
1191\r
1192\r
1193/**\r
1194 Deliver the received packets to upper layer if there are both received\r
1195 requests and enqueued packets. If the enqueued packet is shared, it will\r
1196 duplicate it to a non-shared packet, release the shared packet, then\r
1197 deliver the non-shared packet up.\r
1198\r
3e8c18da 1199 @param[in] IpInstance The IP child to deliver the packet up.\r
772db4bb 1200\r
1201 @retval EFI_OUT_OF_RESOURCES Failed to allocate resources to deliver the\r
1202 packets.\r
1203 @retval EFI_SUCCESS All the enqueued packets that can be delivered\r
1204 are delivered up.\r
1205\r
1206**/\r
1207EFI_STATUS\r
1208Ip4InstanceDeliverPacket (\r
1209 IN IP4_PROTOCOL *IpInstance\r
1210 )\r
1211{\r
1212 EFI_IP4_COMPLETION_TOKEN *Token;\r
1213 IP4_RXDATA_WRAP *Wrap;\r
1214 NET_BUF *Packet;\r
1215 NET_BUF *Dup;\r
1216 UINT8 *Head;\r
1217\r
1218 //\r
1219 // Deliver a packet if there are both a packet and a receive token.\r
1220 //\r
e48e37fc 1221 while (!IsListEmpty (&IpInstance->Received) &&\r
772db4bb 1222 !NetMapIsEmpty (&IpInstance->RxTokens)) {\r
1223\r
1224 Packet = NET_LIST_HEAD (&IpInstance->Received, NET_BUF, List);\r
1225\r
1226 if (!NET_BUF_SHARED (Packet)) {\r
1227 //\r
1228 // If this is the only instance that wants the packet, wrap it up.\r
1229 //\r
1230 Wrap = Ip4WrapRxData (IpInstance, Packet);\r
1231\r
1232 if (Wrap == NULL) {\r
1233 return EFI_OUT_OF_RESOURCES;\r
1234 }\r
1235\r
e48e37fc 1236 RemoveEntryList (&Packet->List);\r
772db4bb 1237\r
1238 } else {\r
1239 //\r
1240 // Create a duplicated packet if this packet is shared\r
1241 //\r
1242 Dup = NetbufDuplicate (Packet, NULL, IP4_MAX_HEADLEN);\r
1243\r
1244 if (Dup == NULL) {\r
1245 return EFI_OUT_OF_RESOURCES;\r
1246 }\r
1247\r
1248 //\r
1249 // Copy the IP head over. The packet to deliver up is\r
1250 // headless. Trim the head off after copy. The IP head\r
1251 // may be not continuous before the data.\r
1252 //\r
1253 Head = NetbufAllocSpace (Dup, IP4_MAX_HEADLEN, NET_BUF_HEAD);\r
f6b7393c 1254 Dup->Ip.Ip4 = (IP4_HEAD *) Head;\r
772db4bb 1255\r
f6b7393c 1256 CopyMem (Head, Packet->Ip.Ip4, Packet->Ip.Ip4->HeadLen << 2);\r
772db4bb 1257 NetbufTrim (Dup, IP4_MAX_HEADLEN, TRUE);\r
1258\r
1259 Wrap = Ip4WrapRxData (IpInstance, Dup);\r
1260\r
1261 if (Wrap == NULL) {\r
1262 NetbufFree (Dup);\r
1263 return EFI_OUT_OF_RESOURCES;\r
1264 }\r
1265\r
e48e37fc 1266 RemoveEntryList (&Packet->List);\r
772db4bb 1267 NetbufFree (Packet);\r
1268\r
1269 Packet = Dup;\r
1270 }\r
1271\r
1272 //\r
1273 // Insert it into the delivered packet, then get a user's\r
1274 // receive token, pass the wrapped packet up.\r
1275 //\r
e48e37fc 1276 EfiAcquireLockOrFail (&IpInstance->RecycleLock);\r
1277 InsertHeadList (&IpInstance->Delivered, &Wrap->Link);\r
1278 EfiReleaseLock (&IpInstance->RecycleLock);\r
772db4bb 1279\r
1280 Token = NetMapRemoveHead (&IpInstance->RxTokens, NULL);\r
1281 Token->Status = IP4_GET_CLIP_INFO (Packet)->Status;\r
1282 Token->Packet.RxData = &Wrap->RxData;\r
1283\r
1284 gBS->SignalEvent (Token->Event);\r
1285 }\r
1286\r
1287 return EFI_SUCCESS;\r
1288}\r
1289\r
1290\r
1291/**\r
1292 Enqueue a received packet to all the IP children that share\r
1293 the same interface.\r
1294\r
3e8c18da 1295 @param[in] IpSb The IP4 service instance that receive the packet\r
1296 @param[in] Head The header of the received packet\r
1297 @param[in] Packet The data of the received packet\r
1298 @param[in] IpIf The interface to enqueue the packet to\r
772db4bb 1299\r
1300 @return The number of the IP4 children that accepts the packet\r
1301\r
1302**/\r
1303INTN\r
1304Ip4InterfaceEnquePacket (\r
1305 IN IP4_SERVICE *IpSb,\r
1306 IN IP4_HEAD *Head,\r
1307 IN NET_BUF *Packet,\r
1308 IN IP4_INTERFACE *IpIf\r
1309 )\r
1310{\r
1311 IP4_PROTOCOL *IpInstance;\r
1312 IP4_CLIP_INFO *Info;\r
e48e37fc 1313 LIST_ENTRY *Entry;\r
772db4bb 1314 INTN Enqueued;\r
1315 INTN LocalType;\r
1316 INTN SavedType;\r
1317\r
1318 //\r
1319 // First, check that the packet is acceptable to this interface\r
1320 // and find the local cast type for the interface. A packet sent\r
1321 // to say 192.168.1.1 should NOT be delliever to 10.0.0.1 unless\r
1322 // promiscuous receiving.\r
1323 //\r
1324 LocalType = 0;\r
1325 Info = IP4_GET_CLIP_INFO (Packet);\r
1326\r
1327 if ((Info->CastType == IP4_MULTICAST) || (Info->CastType == IP4_LOCAL_BROADCAST)) {\r
1328 //\r
1329 // If the CastType is multicast, don't need to filter against\r
1330 // the group address here, Ip4InstanceFrameAcceptable will do\r
1331 // that later.\r
1332 //\r
1333 LocalType = Info->CastType;\r
1334\r
1335 } else {\r
1336 //\r
1337 // Check the destination againist local IP. If the station\r
1338 // address is 0.0.0.0, it means receiving all the IP destined\r
1339 // to local non-zero IP. Otherwise, it is necessary to compare\r
1340 // the destination to the interface's IP address.\r
1341 //\r
1342 if (IpIf->Ip == IP4_ALLZERO_ADDRESS) {\r
1343 LocalType = IP4_LOCAL_HOST;\r
1344\r
1345 } else {\r
1346 LocalType = Ip4GetNetCast (Head->Dst, IpIf);\r
1347\r
1348 if ((LocalType == 0) && IpIf->PromiscRecv) {\r
1349 LocalType = IP4_PROMISCUOUS;\r
1350 }\r
1351 }\r
1352 }\r
1353\r
1354 if (LocalType == 0) {\r
1355 return 0;\r
1356 }\r
1357\r
1358 //\r
1359 // Iterate through the ip instances on the interface, enqueue\r
1360 // the packet if filter passed. Save the original cast type,\r
1361 // and pass the local cast type to the IP children on the\r
1362 // interface. The global cast type will be restored later.\r
1363 //\r
1364 SavedType = Info->CastType;\r
1365 Info->CastType = LocalType;\r
1366\r
1367 Enqueued = 0;\r
1368\r
1369 NET_LIST_FOR_EACH (Entry, &IpIf->IpInstances) {\r
1370 IpInstance = NET_LIST_USER_STRUCT (Entry, IP4_PROTOCOL, AddrLink);\r
1371 NET_CHECK_SIGNATURE (IpInstance, IP4_PROTOCOL_SIGNATURE);\r
1372\r
1373 if (Ip4InstanceEnquePacket (IpInstance, Head, Packet) == EFI_SUCCESS) {\r
1374 Enqueued++;\r
1375 }\r
1376 }\r
1377\r
1378 Info->CastType = SavedType;\r
1379 return Enqueued;\r
1380}\r
1381\r
1382\r
1383/**\r
1384 Deliver the packet for each IP4 child on the interface.\r
1385\r
3e8c18da 1386 @param[in] IpSb The IP4 service instance that received the packet\r
1387 @param[in] IpIf The IP4 interface to deliver the packet.\r
772db4bb 1388\r
1389 @retval EFI_SUCCESS It always returns EFI_SUCCESS now\r
1390\r
1391**/\r
1392EFI_STATUS\r
1393Ip4InterfaceDeliverPacket (\r
1394 IN IP4_SERVICE *IpSb,\r
1395 IN IP4_INTERFACE *IpIf\r
1396 )\r
1397{\r
1398 IP4_PROTOCOL *Ip4Instance;\r
e48e37fc 1399 LIST_ENTRY *Entry;\r
772db4bb 1400\r
1401 NET_LIST_FOR_EACH (Entry, &IpIf->IpInstances) {\r
1402 Ip4Instance = NET_LIST_USER_STRUCT (Entry, IP4_PROTOCOL, AddrLink);\r
1403 Ip4InstanceDeliverPacket (Ip4Instance);\r
1404 }\r
1405\r
1406 return EFI_SUCCESS;\r
1407}\r
1408\r
1409\r
1410/**\r
1411 Demultiple the packet. the packet delivery is processed in two\r
1412 passes. The first pass will enque a shared copy of the packet\r
1413 to each IP4 child that accepts the packet. The second pass will\r
1414 deliver a non-shared copy of the packet to each IP4 child that\r
1415 has pending receive requests. Data is copied if more than one\r
96e1079f 1416 child wants to consume the packet because each IP child needs\r
772db4bb 1417 its own copy of the packet to make changes.\r
1418\r
3e8c18da 1419 @param[in] IpSb The IP4 service instance that received the packet\r
1420 @param[in] Head The header of the received packet\r
1421 @param[in] Packet The data of the received packet\r
772db4bb 1422\r
1423 @retval EFI_NOT_FOUND No IP child accepts the packet\r
1424 @retval EFI_SUCCESS The packet is enqueued or delivered to some IP\r
1425 children.\r
1426\r
1427**/\r
1428EFI_STATUS\r
1429Ip4Demultiplex (\r
1430 IN IP4_SERVICE *IpSb,\r
1431 IN IP4_HEAD *Head,\r
1432 IN NET_BUF *Packet\r
1433 )\r
1434{\r
e48e37fc 1435 LIST_ENTRY *Entry;\r
772db4bb 1436 IP4_INTERFACE *IpIf;\r
1437 INTN Enqueued;\r
1438\r
1439 //\r
1440 // Two pass delivery: first, enque a shared copy of the packet\r
1441 // to each instance that accept the packet.\r
1442 //\r
1443 Enqueued = 0;\r
1444\r
1445 NET_LIST_FOR_EACH (Entry, &IpSb->Interfaces) {\r
1446 IpIf = NET_LIST_USER_STRUCT (Entry, IP4_INTERFACE, Link);\r
1447\r
1448 if (IpIf->Configured) {\r
1449 Enqueued += Ip4InterfaceEnquePacket (IpSb, Head, Packet, IpIf);\r
1450 }\r
1451 }\r
1452\r
1453 //\r
1454 // Second: deliver a duplicate of the packet to each instance.\r
1455 // Release the local reference first, so that the last instance\r
1456 // getting the packet will not copy the data.\r
1457 //\r
1458 NetbufFree (Packet);\r
1459\r
1460 if (Enqueued == 0) {\r
1461 return EFI_NOT_FOUND;\r
1462 }\r
1463\r
1464 NET_LIST_FOR_EACH (Entry, &IpSb->Interfaces) {\r
1465 IpIf = NET_LIST_USER_STRUCT (Entry, IP4_INTERFACE, Link);\r
1466\r
1467 if (IpIf->Configured) {\r
1468 Ip4InterfaceDeliverPacket (IpSb, IpIf);\r
1469 }\r
1470 }\r
1471\r
1472 return EFI_SUCCESS;\r
1473}\r
1474\r
1475\r
1476/**\r
1477 Timeout the fragment and enqueued packets.\r
1478\r
3e8c18da 1479 @param[in] IpSb The IP4 service instance to timeout\r
772db4bb 1480\r
1481**/\r
1482VOID\r
1483Ip4PacketTimerTicking (\r
1484 IN IP4_SERVICE *IpSb\r
1485 )\r
1486{\r
e48e37fc 1487 LIST_ENTRY *InstanceEntry;\r
1488 LIST_ENTRY *Entry;\r
1489 LIST_ENTRY *Next;\r
772db4bb 1490 IP4_PROTOCOL *IpInstance;\r
1491 IP4_ASSEMBLE_ENTRY *Assemble;\r
1492 NET_BUF *Packet;\r
1493 IP4_CLIP_INFO *Info;\r
1494 UINT32 Index;\r
1495\r
1496 //\r
1497 // First, time out the fragments. The packet's life is counting down\r
1498 // once the first-arrived fragment was received.\r
1499 //\r
1500 for (Index = 0; Index < IP4_ASSEMLE_HASH_SIZE; Index++) {\r
1501 NET_LIST_FOR_EACH_SAFE (Entry, Next, &IpSb->Assemble.Bucket[Index]) {\r
1502 Assemble = NET_LIST_USER_STRUCT (Entry, IP4_ASSEMBLE_ENTRY, Link);\r
1503\r
1504 if ((Assemble->Life > 0) && (--Assemble->Life == 0)) {\r
e48e37fc 1505 RemoveEntryList (Entry);\r
772db4bb 1506 Ip4FreeAssembleEntry (Assemble);\r
1507 }\r
1508 }\r
1509 }\r
1510\r
1511 NET_LIST_FOR_EACH (InstanceEntry, &IpSb->Children) {\r
1512 IpInstance = NET_LIST_USER_STRUCT (InstanceEntry, IP4_PROTOCOL, Link);\r
1513\r
1514 //\r
1515 // Second, time out the assembled packets enqueued on each IP child.\r
1516 //\r
1517 NET_LIST_FOR_EACH_SAFE (Entry, Next, &IpInstance->Received) {\r
1518 Packet = NET_LIST_USER_STRUCT (Entry, NET_BUF, List);\r
1519 Info = IP4_GET_CLIP_INFO (Packet);\r
1520\r
1521 if ((Info->Life > 0) && (--Info->Life == 0)) {\r
e48e37fc 1522 RemoveEntryList (Entry);\r
772db4bb 1523 NetbufFree (Packet);\r
1524 }\r
1525 }\r
1526\r
1527 //\r
1528 // Third: time out the transmitted packets.\r
1529 //\r
1530 NetMapIterate (&IpInstance->TxTokens, Ip4SentPacketTicking, NULL);\r
1531 }\r
1532}\r