Update code to avoid potential access violation.

[mirror_edk2.git] / NetworkPkg / Mtftp6Dxe / Mtftp6Wrq.c

/** @file\r
  Mtftp6 Wrq process functions implementation.\r
\r
  Copyright (c) 2009 - 2012, Intel Corporation. All rights reserved.<BR>\r
\r
  This program and the accompanying materials\r
  are licensed and made available under the terms and conditions of the BSD License\r
  which accompanies this distribution.  The full text of the license may be found at\r
  http://opensource.org/licenses/bsd-license.php.\r
\r
  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
\r
**/\r
\r
#include "Mtftp6Impl.h"\r
\r
\r
\r
/**\r
  Build and send a Mtftp6 data packet for upload.\r
\r
  @param[in]  Instance              The pointer to the Mtftp6 instance.\r
  @param[in]  BlockNum              The block num to be sent.\r
\r
  @retval EFI_OUT_OF_RESOURCES  Failed to allocate memory for the packet.\r
  @retval EFI_SUCCESS           The data packet was sent.\r
  @retval EFI_ABORTED           The user aborted this process.\r
\r
**/\r
EFI_STATUS\r
Mtftp6WrqSendBlock (\r
  IN MTFTP6_INSTANCE        *Instance,\r
  IN UINT16                 BlockNum\r
  )\r
{\r
  EFI_MTFTP6_PACKET         *Packet;\r
  EFI_MTFTP6_TOKEN          *Token;\r
  NET_BUF                   *UdpPacket;\r
  EFI_STATUS                Status;\r
  UINT16                    DataLen;\r
  UINT8                     *DataBuf;\r
  UINT64                    Start;\r
\r
  //\r
  // Allocate net buffer to create data packet.\r
  //\r
  UdpPacket = NetbufAlloc (Instance->BlkSize + MTFTP6_DATA_HEAD_LEN);\r
\r
  if (UdpPacket == NULL) {\r
    return EFI_OUT_OF_RESOURCES;\r
  }\r
\r
  Packet = (EFI_MTFTP6_PACKET *) NetbufAllocSpace (\r
                                   UdpPacket,\r
                                   MTFTP6_DATA_HEAD_LEN,\r
                                   FALSE\r
                                   );\r
  ASSERT (Packet != NULL);\r
\r
  Packet->Data.OpCode = HTONS (EFI_MTFTP6_OPCODE_DATA);\r
  Packet->Data.Block  = HTONS (BlockNum);\r
\r
  //\r
  // Read the block from either the buffer or PacketNeeded callback\r
  //\r
  Token   = Instance->Token;\r
  DataLen = Instance->BlkSize;\r
\r
  if (Token->Buffer != NULL) {\r
    Start = MultU64x32 (BlockNum - 1, Instance->BlkSize);\r
\r
    if (Token->BufferSize < Start + Instance->BlkSize) {\r
      DataLen           = (UINT16) (Token->BufferSize - Start);\r
      Instance->LastBlk = BlockNum;\r
      Mtftp6SetLastBlockNum (&Instance->BlkList, BlockNum);\r
    }\r
\r
    if (DataLen > 0) {\r
      NetbufAllocSpace (UdpPacket, DataLen, FALSE);\r
      CopyMem (Packet->Data.Data, (UINT8 *) Token->Buffer + Start, DataLen);\r
    }\r
\r
  } else {\r
    //\r
    // Get data from PacketNeeded\r
    //\r
    DataBuf = NULL;\r
    Status  = Token->PacketNeeded (&Instance->Mtftp6, Token, &DataLen, (VOID*) &DataBuf);\r
\r
    if (EFI_ERROR (Status) || (DataLen > Instance->BlkSize)) {\r
      if (DataBuf != NULL) {\r
        gBS->FreePool (DataBuf);\r
      }\r
      //\r
      // The received packet has already been freed.\r
      //\r
      Mtftp6SendError (\r
        Instance,\r
        EFI_MTFTP6_ERRORCODE_REQUEST_DENIED,\r
        (UINT8 *) "User aborted the transfer"\r
        );\r
\r
      return EFI_ABORTED;\r
    }\r
\r
    if (DataLen < Instance->BlkSize) {\r
      Instance->LastBlk = BlockNum;\r
      Mtftp6SetLastBlockNum (&Instance->BlkList, BlockNum);\r
    }\r
\r
    if (DataLen > 0) {\r
      NetbufAllocSpace (UdpPacket, DataLen, FALSE);\r
      CopyMem (Packet->Data.Data, DataBuf, DataLen);\r
      gBS->FreePool (DataBuf);\r
    }\r
  }\r
\r
  //\r
  // Reset current retry count of the instance.\r
  //\r
  Instance->CurRetry = 0;\r
\r
  return Mtftp6TransmitPacket (Instance, UdpPacket);\r
}\r
\r
\r
/**\r
  Function to handle received ACK packet. If the ACK number matches the\r
  expected block number, with more data pending, send the next\r
  block. Otherwise, tell the caller that we are done.\r
\r
  @param[in]  Instance              The pointer to the Mtftp6 instance.\r
  @param[in]  Packet                The pointer to the received packet.\r
  @param[in]  Len                   The length of the packet.\r
  @param[out] UdpPacket             The net buf of received packet.\r
  @param[out] IsCompleted           If TRUE, the upload has been completed.\r
                                    Otherwise, the upload has not been completed.\r
\r
  @retval EFI_SUCCESS           The ACK packet successfully processed.\r
  @retval EFI_TFTP_ERROR        The block number loops back.\r
  @retval Others                Failed to transmit the next data packet.\r
\r
**/\r
EFI_STATUS\r
Mtftp6WrqHandleAck (\r
  IN  MTFTP6_INSTANCE       *Instance,\r
  IN  EFI_MTFTP6_PACKET     *Packet,\r
  IN  UINT32                Len,\r
  OUT NET_BUF               **UdpPacket,\r
  OUT BOOLEAN               *IsCompleted\r
  )\r
{\r
  UINT16                    AckNum;\r
  INTN                      Expected;\r
  UINT64                    TotalBlock;\r
\r
  *IsCompleted = FALSE;\r
  AckNum       = NTOHS (Packet->Ack.Block[0]);\r
  Expected     = Mtftp6GetNextBlockNum (&Instance->BlkList);\r
\r
  ASSERT (Expected >= 0);\r
\r
  //\r
  // Get an unwanted ACK, return EFI_SUCCESS to let Mtftp6WrqInput\r
  // restart receive.\r
  //\r
  if (Expected != AckNum) {\r
    return EFI_SUCCESS;\r
  }\r
\r
  //\r
  // Remove the acked block number, if this is the last block number,\r
  // tell the Mtftp6WrqInput to finish the transfer. This is the last\r
  // block number if the block range are empty..\r
  //\r
  Mtftp6RemoveBlockNum (&Instance->BlkList, AckNum, *IsCompleted, &TotalBlock);\r
\r
  Expected = Mtftp6GetNextBlockNum (&Instance->BlkList);\r
\r
  if (Expected < 0) {\r
    //\r
    // The block range is empty. It may either because the the last\r
    // block has been ACKed, or the sequence number just looped back,\r
    // that is, there is more than 0xffff blocks.\r
    //\r
    if (Instance->LastBlk == AckNum) {\r
      ASSERT (Instance->LastBlk >= 1);\r
      *IsCompleted = TRUE;\r
      return EFI_SUCCESS;\r
\r
    } else {\r
      //\r
      // Free the received packet before send new packet in ReceiveNotify,\r
      // since the udpio might need to be reconfigured.\r
      //\r
      NetbufFree (*UdpPacket);\r
      *UdpPacket = NULL;\r
      //\r
      // Send the Mtftp6 error message if block number rolls back.\r
      //\r
      Mtftp6SendError (\r
        Instance,\r
        EFI_MTFTP6_ERRORCODE_REQUEST_DENIED,\r
        (UINT8 *) "Block number rolls back, not supported, try blksize option"\r
        );\r
\r
      return EFI_TFTP_ERROR;\r
    }\r
  }\r
\r
  //\r
  // Free the receive buffer before send new packet since it might need\r
  // reconfigure udpio.\r
  //\r
  NetbufFree (*UdpPacket);\r
  *UdpPacket = NULL;\r
\r
  return Mtftp6WrqSendBlock (Instance, (UINT16) Expected);\r
}\r
\r
\r
/**\r
  Check whether the received OACK is valid. The OACK is valid\r
  only if:\r
  1. It only include options requested by us.\r
  2. It can only include a smaller block size.\r
  3. It can't change the proposed time out value.\r
  4. Other requirements of the individal MTFTP6 options as required.\r
\r
  @param[in]  ReplyInfo             The pointer to options information in reply packet.\r
  @param[in]  RequestInfo           The pointer to requested options information.\r
\r
  @retval     TRUE                  If the option in OACK is valid.\r
  @retval     FALSE                 If the option is invalid.\r
\r
**/\r
BOOLEAN\r
Mtftp6WrqOackValid (\r
  IN MTFTP6_EXT_OPTION_INFO     *ReplyInfo,\r
  IN MTFTP6_EXT_OPTION_INFO     *RequestInfo\r
  )\r
{\r
  //\r
  // It is invalid for server to return options we don't request\r
  //\r
  if ((ReplyInfo->BitMap & ~RequestInfo->BitMap) != 0) {\r
    return FALSE;\r
  }\r
\r
  //\r
  // Server can only specify a smaller block size to be used and\r
  // return the timeout matches that requested.\r
  //\r
  if ((((ReplyInfo->BitMap & MTFTP6_OPT_BLKSIZE_BIT) != 0) && (ReplyInfo->BlkSize > RequestInfo->BlkSize)) ||\r
      (((ReplyInfo->BitMap & MTFTP6_OPT_TIMEOUT_BIT) != 0) && (ReplyInfo->Timeout != RequestInfo->Timeout))\r
      ) {\r
\r
    return FALSE;\r
  }\r
\r
  return TRUE;\r
}\r
\r
\r
/**\r
  Process the OACK packet for Wrq.\r
\r
  @param[in]  Instance              The pointer to the Mtftp6 instance.\r
  @param[in]  Packet                The pointer to the received packet.\r
  @param[in]  Len                   The length of the packet.\r
  @param[out] UdpPacket             The net buf of received packet.\r
  @param[out] IsCompleted           If TRUE, the upload has been completed.\r
                                    Otherwise, the upload has not been completed.\r
\r
  @retval EFI_SUCCESS           The OACK packet successfully processed.\r
  @retval EFI_TFTP_ERROR        An TFTP communication error happened.\r
  @retval Others                Failed to process the OACK packet.\r
\r
**/\r
EFI_STATUS\r
Mtftp6WrqHandleOack (\r
  IN  MTFTP6_INSTANCE       *Instance,\r
  IN  EFI_MTFTP6_PACKET     *Packet,\r
  IN  UINT32                Len,\r
  OUT NET_BUF               **UdpPacket,\r
  OUT BOOLEAN               *IsCompleted\r
  )\r
{\r
  EFI_MTFTP6_OPTION         *Options;\r
  UINT32                    Count;\r
  MTFTP6_EXT_OPTION_INFO    ExtInfo;\r
  EFI_MTFTP6_PACKET         Dummy;\r
  EFI_STATUS                Status;\r
  INTN                      Expected;\r
\r
  *IsCompleted = FALSE;\r
\r
  //\r
  // Ignore the OACK if already started the upload\r
  //\r
  Expected = Mtftp6GetNextBlockNum (&Instance->BlkList);\r
\r
  if (Expected != 0) {\r
    return EFI_SUCCESS;\r
  }\r
\r
  //\r
  // Parse and validate the options from server\r
  //\r
  ZeroMem (&ExtInfo, sizeof (MTFTP6_EXT_OPTION_INFO));\r
\r
  Status = Mtftp6ParseStart (Packet, Len, &Count, &Options);\r
\r
  if (EFI_ERROR (Status)) {\r
    return Status;\r
  }\r
  ASSERT (Options != NULL);\r
\r
  Status = Mtftp6ParseExtensionOption (Options, Count, FALSE, &ExtInfo);\r
\r
  if (EFI_ERROR(Status) || !Mtftp6WrqOackValid (&ExtInfo, &Instance->ExtInfo)) {\r
    //\r
    // Don't send a MTFTP error packet when out of resource, it can\r
    // only make it worse.\r
    //\r
    if (Status != EFI_OUT_OF_RESOURCES) {\r
      //\r
      // Free the received packet before send new packet in ReceiveNotify,\r
      // since the udpio might need to be reconfigured.\r
      //\r
      NetbufFree (*UdpPacket);\r
      *UdpPacket = NULL;\r
      //\r
      // Send the Mtftp6 error message if invalid Oack packet received.\r
      //\r
      Mtftp6SendError (\r
        Instance,\r
        EFI_MTFTP6_ERRORCODE_ILLEGAL_OPERATION,\r
        (UINT8 *) "Mal-formated OACK packet"\r
        );\r
    }\r
\r
    return EFI_TFTP_ERROR;\r
  }\r
\r
  if (ExtInfo.BlkSize != 0) {\r
    Instance->BlkSize = ExtInfo.BlkSize;\r
  }\r
\r
  if (ExtInfo.Timeout != 0) {\r
    Instance->Timeout = ExtInfo.Timeout;\r
  }\r
\r
  //\r
  // Build a bogus ACK0 packet then pass it to the Mtftp6WrqHandleAck,\r
  // which will start the transmission of the first data block.\r
  //\r
  Dummy.Ack.OpCode   = HTONS (EFI_MTFTP6_OPCODE_ACK);\r
  Dummy.Ack.Block[0] = 0;\r
\r
  return Mtftp6WrqHandleAck (\r
           Instance,\r
           &Dummy,\r
           sizeof (EFI_MTFTP6_ACK_HEADER),\r
           UdpPacket,\r
           IsCompleted\r
           );\r
}\r
\r
\r
/**\r
  The packet process callback for Mtftp6 upload.\r
\r
  @param[in]  UdpPacket             The pointer to the packet received.\r
  @param[in]  UdpEpt                The pointer to the Udp6 access point.\r
  @param[in]  IoStatus              The status from Udp6 instance.\r
  @param[in]  Context               The pointer to the context.\r
\r
**/\r
VOID\r
EFIAPI\r
Mtftp6WrqInput (\r
  IN NET_BUF                *UdpPacket,\r
  IN UDP_END_POINT          *UdpEpt,\r
  IN EFI_STATUS             IoStatus,\r
  IN VOID                   *Context\r
  )\r
{\r
  MTFTP6_INSTANCE           *Instance;\r
  EFI_MTFTP6_PACKET         *Packet;\r
  BOOLEAN                   IsCompleted;\r
  EFI_STATUS                Status;\r
  UINT32                    TotalNum;\r
  UINT32                    Len;\r
  UINT16                    Opcode;\r
\r
  Instance = (MTFTP6_INSTANCE *) Context;\r
\r
  NET_CHECK_SIGNATURE (Instance, MTFTP6_INSTANCE_SIGNATURE);\r
\r
  IsCompleted = FALSE;\r
  Packet      = NULL;\r
  Status      = EFI_SUCCESS;\r
  TotalNum    = 0;\r
\r
  //\r
  // Return error status if Udp6 instance failed to receive.\r
  //\r
  if (EFI_ERROR (IoStatus)) {\r
    Status = IoStatus;\r
    goto ON_EXIT;\r
  }\r
\r
  ASSERT (UdpPacket != NULL);\r
\r
  if (UdpPacket->TotalSize < MTFTP6_OPCODE_LEN) {\r
    goto ON_EXIT;\r
  }\r
\r
  //\r
  // Client send initial request to server's listening port. Server\r
  // will select a UDP port to communicate with the client.\r
  //\r
  if (UdpEpt->RemotePort != Instance->ServerDataPort) {\r
    if (Instance->ServerDataPort != 0) {\r
      goto ON_EXIT;\r
    } else {\r
      Instance->ServerDataPort = UdpEpt->RemotePort;\r
    }\r
  }\r
\r
  //\r
  // Copy the MTFTP packet to a continuous buffer if it isn't already so.\r
  //\r
  Len      = UdpPacket->TotalSize;\r
  TotalNum = UdpPacket->BlockOpNum;\r
\r
  if (TotalNum > 1) {\r
    Packet = AllocateZeroPool (Len);\r
\r
    if (Packet == NULL) {\r
      Status = EFI_OUT_OF_RESOURCES;\r
      goto ON_EXIT;\r
    }\r
\r
    NetbufCopy (UdpPacket, 0, Len, (UINT8 *) Packet);\r
\r
  } else {\r
    Packet = (EFI_MTFTP6_PACKET *) NetbufGetByte (UdpPacket, 0, NULL);\r
    ASSERT (Packet != NULL);\r
  }\r
\r
  Opcode = NTOHS (Packet->OpCode);\r
\r
  //\r
  // Callback to the user's CheckPacket if provided. Abort the transmission\r
  // if CheckPacket returns an EFI_ERROR code.\r
  //\r
  if (Instance->Token->CheckPacket != NULL &&\r
      (Opcode == EFI_MTFTP6_OPCODE_OACK || Opcode == EFI_MTFTP6_OPCODE_ERROR)\r
      ) {\r
\r
    Status = Instance->Token->CheckPacket (\r
                                &Instance->Mtftp6,\r
                                Instance->Token,\r
                                (UINT16) Len,\r
                                Packet\r
                                );\r
\r
    if (EFI_ERROR (Status)) {\r
      //\r
      // Send an error message to the server to inform it\r
      //\r
      if (Opcode != EFI_MTFTP6_OPCODE_ERROR) {\r
        //\r
        // Free the received packet before send new packet in ReceiveNotify,\r
        // since the udpio might need to be reconfigured.\r
        //\r
        NetbufFree (UdpPacket);\r
        UdpPacket = NULL;\r
        //\r
        // Send the Mtftp6 error message if user aborted the current session.\r
        //\r
        Mtftp6SendError (\r
          Instance,\r
          EFI_MTFTP6_ERRORCODE_REQUEST_DENIED,\r
          (UINT8 *) "User aborted the transfer"\r
          );\r
      }\r
\r
      Status = EFI_ABORTED;\r
      goto ON_EXIT;\r
    }\r
  }\r
\r
  //\r
  // Switch the process routines by the operation code.\r
  //\r
  switch (Opcode) {\r
  case EFI_MTFTP6_OPCODE_ACK:\r
    if (Len != MTFTP6_OPCODE_LEN + MTFTP6_BLKNO_LEN) {\r
      goto ON_EXIT;\r
    }\r
    //\r
    // Handle the Ack packet of Wrq.\r
    //\r
    Status = Mtftp6WrqHandleAck (Instance, Packet, Len, &UdpPacket, &IsCompleted);\r
    break;\r
\r
  case EFI_MTFTP6_OPCODE_OACK:\r
    if (Len <= MTFTP6_OPCODE_LEN) {\r
      goto ON_EXIT;\r
    }\r
    //\r
    // Handle the Oack packet of Wrq.\r
    //\r
    Status = Mtftp6WrqHandleOack (Instance, Packet, Len, &UdpPacket, &IsCompleted);\r
    break;\r
\r
  default:\r
    //\r
    // Drop and return eror if received error message.\r
    //\r
    Status = EFI_TFTP_ERROR;\r
    break;\r
  }\r
\r
ON_EXIT:\r
  //\r
  // Free the resources, then if !EFI_ERROR (Status) and not completed,\r
  // restart the receive, otherwise end the session.\r
  //\r
  if (Packet != NULL && TotalNum > 1) {\r
    FreePool (Packet);\r
  }\r
\r
  if (UdpPacket != NULL) {\r
    NetbufFree (UdpPacket);\r
  }\r
\r
  if (!EFI_ERROR (Status) && !IsCompleted) {\r
    Status = UdpIoRecvDatagram (\r
               Instance->UdpIo,\r
               Mtftp6WrqInput,\r
               Instance,\r
               0\r
               );\r
  }\r
  //\r
  // Clean up the current session if failed to continue.\r
  //\r
  if (EFI_ERROR (Status) || IsCompleted) {\r
    Mtftp6OperationClean (Instance, Status);\r
  }\r
}\r
\r
\r
/**\r
  Start the Mtftp6 instance to upload. It will first init some states,\r
  then send the WRQ request packet, and start to receive the packet.\r
\r
  @param[in]  Instance              The pointer to the Mtftp6 instance.\r
  @param[in]  Operation             The operation code of the current packet.\r
\r
  @retval EFI_SUCCESS           The Mtftp6 was started to upload.\r
  @retval Others                Failed to start to upload.\r
\r
**/\r
EFI_STATUS\r
Mtftp6WrqStart (\r
  IN MTFTP6_INSTANCE        *Instance,\r
  IN UINT16                 Operation\r
  )\r
{\r
  EFI_STATUS                Status;\r
\r
  //\r
  // The valid block number range are [0, 0xffff]. For example:\r
  // the client sends an WRQ request to the server, the server\r
  // ACK with an ACK0 to let client start transfer the first\r
  // packet.\r
  //\r
  Status = Mtftp6InitBlockRange (&Instance->BlkList, 0, 0xffff);\r
\r
  if (EFI_ERROR (Status)) {\r
    return Status;\r
  }\r
\r
  Status = Mtftp6SendRequest (Instance, Operation);\r
\r
  if (EFI_ERROR (Status)) {\r
    return Status;\r
  }\r
\r
  return UdpIoRecvDatagram (\r
           Instance->UdpIo,\r
           Mtftp6WrqInput,\r
           Instance,\r
           0\r
           );\r
}\r
\r