Lines Matching +full:max +full:- +full:reason
1 // SPDX-License-Identifier: GPL-2.0
56 * as well. Or notify me, at least. --ANK
58 static const char ip_frag_cache_name[] = "ip4-frags";
87 struct net *net = q->fqdir->net;
90 q->key.v4 = *key;
91 qp->ecn = 0;
92 if (q->fqdir->max_dist) {
94 p = inet_getpeer_v4(net->ipv4.peers, key->saddr, key->vif);
95 if (p && !refcount_inc_not_zero(&p->refcnt))
99 qp->peer = p;
107 if (qp->peer)
108 inet_putpeer(qp->peer);
125 enum skb_drop_reason reason = SKB_DROP_REASON_FRAG_REASM_TIMEOUT;
134 net = qp->q.fqdir->net;
139 if (READ_ONCE(qp->q.fqdir->dead))
142 spin_lock(&qp->q.lock);
144 if (qp->q.flags & INET_FRAG_COMPLETE)
147 qp->q.flags |= INET_FRAG_DROP;
148 inet_frag_kill(&qp->q, &refs);
152 if (!(qp->q.flags & INET_FRAG_FIRST_IN))
157 * deal with head->dev.
159 head = inet_frag_pull_head(&qp->q);
162 head->dev = dev_get_by_index_rcu(net, qp->iif);
163 if (!head->dev)
169 reason = ip_route_input_noref(head, iph->daddr, iph->saddr,
170 ip4h_dscp(iph), head->dev);
171 if (reason)
177 reason = SKB_DROP_REASON_FRAG_REASM_TIMEOUT;
178 if (frag_expire_skip_icmp(qp->q.key.v4.user) &&
179 (skb_rtable(head)->rt_type != RTN_LOCAL))
182 spin_unlock(&qp->q.lock);
187 spin_unlock(&qp->q.lock);
190 kfree_skb_reason(head, reason);
191 inet_frag_putn(&qp->q, refs);
201 .saddr = iph->saddr,
202 .daddr = iph->daddr,
205 .id = iph->id,
206 .protocol = iph->protocol,
210 q = inet_frag_find(net->ipv4.fqdir, &key);
220 struct inet_peer *peer = qp->peer;
221 unsigned int max = qp->q.fqdir->max_dist;
226 if (!peer || !max)
229 start = qp->rid;
230 end = atomic_inc_return(&peer->rid);
231 qp->rid = end;
233 rc = qp->q.fragments_tail && (end - start) > max;
236 __IP_INC_STATS(qp->q.fqdir->net, IPSTATS_MIB_REASMFAILS);
245 if (!mod_timer(&qp->q.timer, jiffies + qp->q.fqdir->timeout)) {
246 refcount_inc(&qp->q.refcnt);
247 return -ETIMEDOUT;
250 sum_truesize = inet_frag_rbtree_purge(&qp->q.rb_fragments,
252 sub_frag_mem_limit(qp->q.fqdir, sum_truesize);
254 qp->q.flags = 0;
255 qp->q.len = 0;
256 qp->q.meat = 0;
257 qp->q.rb_fragments = RB_ROOT;
258 qp->q.fragments_tail = NULL;
259 qp->q.last_run_head = NULL;
260 qp->iif = 0;
261 qp->ecn = 0;
269 struct net *net = qp->q.fqdir->net;
274 int err = -ENOENT;
275 SKB_DR(reason);
279 if (qp->q.flags & INET_FRAG_COMPLETE) {
280 SKB_DR_SET(reason, DUP_FRAG);
284 if (!(IPCB(skb)->flags & IPSKB_FRAG_COMPLETE) &&
287 inet_frag_kill(&qp->q, refs);
291 ecn = ip4_frag_ecn(ip_hdr(skb)->tos);
292 offset = ntohs(ip_hdr(skb)->frag_off);
295 offset <<= 3; /* offset is in 8-byte chunks */
299 end = offset + skb->len - skb_network_offset(skb) - ihl;
300 err = -EINVAL;
307 if (end < qp->q.len ||
308 ((qp->q.flags & INET_FRAG_LAST_IN) && end != qp->q.len))
310 qp->q.flags |= INET_FRAG_LAST_IN;
311 qp->q.len = end;
315 if (skb->ip_summed != CHECKSUM_UNNECESSARY)
316 skb->ip_summed = CHECKSUM_NONE;
318 if (end > qp->q.len) {
319 /* Some bits beyond end -> corruption. */
320 if (qp->q.flags & INET_FRAG_LAST_IN)
322 qp->q.len = end;
328 err = -ENOMEM;
332 err = pskb_trim_rcsum(skb, end - offset);
336 /* Note : skb->rbnode and skb->dev share the same location. */
337 dev = skb->dev;
341 prev_tail = qp->q.fragments_tail;
342 err = inet_frag_queue_insert(&qp->q, skb, offset, end);
347 qp->iif = dev->ifindex;
349 qp->q.stamp = skb->tstamp;
350 qp->q.tstamp_type = skb->tstamp_type;
351 qp->q.meat += skb->len;
352 qp->ecn |= ecn;
353 add_frag_mem_limit(qp->q.fqdir, skb->truesize);
355 qp->q.flags |= INET_FRAG_FIRST_IN;
357 fragsize = skb->len + ihl;
359 if (fragsize > qp->q.max_size)
360 qp->q.max_size = fragsize;
362 if (ip_hdr(skb)->frag_off & htons(IP_DF) &&
363 fragsize > qp->max_df_size)
364 qp->max_df_size = fragsize;
366 if (qp->q.flags == (INET_FRAG_FIRST_IN | INET_FRAG_LAST_IN) &&
367 qp->q.meat == qp->q.len) {
368 unsigned long orefdst = skb->_skb_refdst;
370 skb->_skb_refdst = 0UL;
372 skb->_skb_refdst = orefdst;
374 inet_frag_kill(&qp->q, refs);
380 return -EINPROGRESS;
384 SKB_DR_SET(reason, DUP_FRAG);
385 err = -EINVAL;
388 err = -EINVAL;
391 inet_frag_kill(&qp->q, refs);
394 kfree_skb_reason(skb, reason);
400 return qp->q.key.v4.user == IP_DEFRAG_LOCAL_DELIVER;
408 struct net *net = qp->q.fqdir->net;
414 inet_frag_kill(&qp->q, refs);
416 ecn = ip_frag_ecn_table[qp->ecn];
418 err = -EINVAL;
423 reasm_data = inet_frag_reasm_prepare(&qp->q, skb, prev_tail);
427 len = ip_hdrlen(skb) + qp->q.len;
428 err = -E2BIG;
432 inet_frag_reasm_finish(&qp->q, skb, reasm_data,
435 skb->dev = dev;
436 IPCB(skb)->frag_max_size = max(qp->max_df_size, qp->q.max_size);
439 iph->tot_len = htons(len);
440 iph->tos |= ecn;
443 * call to ip_fragment to avoid forwarding a DF-skb of size s while
447 * frag seen to avoid sending tiny DF-fragments in case skb was built
448 * from one very small df-fragment and one large non-df frag.
450 if (qp->max_df_size == qp->q.max_size) {
451 IPCB(skb)->flags |= IPSKB_FRAG_PMTU;
452 iph->frag_off = htons(IP_DF);
454 iph->frag_off = 0;
460 qp->q.rb_fragments = RB_ROOT;
461 qp->q.fragments_tail = NULL;
462 qp->q.last_run_head = NULL;
467 err = -ENOMEM;
470 net_info_ratelimited("Oversized IP packet from %pI4\n", &qp->q.key.v4.saddr);
487 dev = skb->dev ? : skb_dst_dev_rcu(skb);
493 spin_lock(&qp->q.lock);
497 spin_unlock(&qp->q.lock);
499 inet_frag_putn(&qp->q, refs);
506 return -ENOMEM;
516 if (skb->protocol != htons(ETH_P_IP))
528 if (skb->len < netoff + len || len < (iph.ihl * 4))
607 table[0].data = &net->ipv4.fqdir->high_thresh;
608 table[0].extra1 = &net->ipv4.fqdir->low_thresh;
609 table[1].data = &net->ipv4.fqdir->low_thresh;
610 table[1].extra2 = &net->ipv4.fqdir->high_thresh;
611 table[2].data = &net->ipv4.fqdir->timeout;
612 table[3].data = &net->ipv4.fqdir->max_dist;
619 net->ipv4.frags_hdr = hdr;
626 return -ENOMEM;
633 table = net->ipv4.frags_hdr->ctl_table_arg;
634 unregister_net_sysctl_table(net->ipv4.frags_hdr);
661 res = fqdir_init(&net->ipv4.fqdir, &ip4_frags, net);
678 net->ipv4.fqdir->high_thresh = 4 * 1024 * 1024;
679 net->ipv4.fqdir->low_thresh = 3 * 1024 * 1024;
685 net->ipv4.fqdir->timeout = IP_FRAG_TIME;
687 net->ipv4.fqdir->max_dist = 64;
691 fqdir_exit(net->ipv4.fqdir);
697 fqdir_pre_exit(net->ipv4.fqdir);
703 fqdir_exit(net->ipv4.fqdir);
723 return jhash2((const u32 *)&fq->key.v4,
729 const struct frag_v4_compare_key *key = arg->key;
732 return !!memcmp(&fq->key, key, sizeof(*key));