mirror of
https://github.com/edk2-porting/linux-next.git
synced 2024-12-23 04:34:11 +08:00
1b52fa98ed
Fix race condition during destruction calls to avoid possibility of accessing object after it has been freed. Instead of waking up a wait queue directly, which is susceptible to a race where the object is freed between the reference count going to 0 and the wake_up(), use a completion to wait in the function doing the freeing. Signed-off-by: Sean Hefty <sean.hefty@intel.com> Signed-off-by: Roland Dreier <rolandd@cisco.com>
862 lines
24 KiB
C
862 lines
24 KiB
C
/*
|
|
* Copyright (c) 2005 Intel Inc. All rights reserved.
|
|
* Copyright (c) 2005-2006 Voltaire, Inc. All rights reserved.
|
|
*
|
|
* This software is available to you under a choice of one of two
|
|
* licenses. You may choose to be licensed under the terms of the GNU
|
|
* General Public License (GPL) Version 2, available from the file
|
|
* COPYING in the main directory of this source tree, or the
|
|
* OpenIB.org BSD license below:
|
|
*
|
|
* Redistribution and use in source and binary forms, with or
|
|
* without modification, are permitted provided that the following
|
|
* conditions are met:
|
|
*
|
|
* - Redistributions of source code must retain the above
|
|
* copyright notice, this list of conditions and the following
|
|
* disclaimer.
|
|
*
|
|
* - Redistributions in binary form must reproduce the above
|
|
* copyright notice, this list of conditions and the following
|
|
* disclaimer in the documentation and/or other materials
|
|
* provided with the distribution.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
* SOFTWARE.
|
|
*
|
|
* $Id: mad_rmpp.c 1921 2005-03-02 22:58:44Z sean.hefty $
|
|
*/
|
|
|
|
#include <linux/dma-mapping.h>
|
|
|
|
#include "mad_priv.h"
|
|
#include "mad_rmpp.h"
|
|
|
|
enum rmpp_state {
|
|
RMPP_STATE_ACTIVE,
|
|
RMPP_STATE_TIMEOUT,
|
|
RMPP_STATE_COMPLETE
|
|
};
|
|
|
|
struct mad_rmpp_recv {
|
|
struct ib_mad_agent_private *agent;
|
|
struct list_head list;
|
|
struct work_struct timeout_work;
|
|
struct work_struct cleanup_work;
|
|
struct completion comp;
|
|
enum rmpp_state state;
|
|
spinlock_t lock;
|
|
atomic_t refcount;
|
|
|
|
struct ib_ah *ah;
|
|
struct ib_mad_recv_wc *rmpp_wc;
|
|
struct ib_mad_recv_buf *cur_seg_buf;
|
|
int last_ack;
|
|
int seg_num;
|
|
int newwin;
|
|
|
|
__be64 tid;
|
|
u32 src_qp;
|
|
u16 slid;
|
|
u8 mgmt_class;
|
|
u8 class_version;
|
|
u8 method;
|
|
};
|
|
|
|
static inline void deref_rmpp_recv(struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
if (atomic_dec_and_test(&rmpp_recv->refcount))
|
|
complete(&rmpp_recv->comp);
|
|
}
|
|
|
|
static void destroy_rmpp_recv(struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
deref_rmpp_recv(rmpp_recv);
|
|
wait_for_completion(&rmpp_recv->comp);
|
|
ib_destroy_ah(rmpp_recv->ah);
|
|
kfree(rmpp_recv);
|
|
}
|
|
|
|
void ib_cancel_rmpp_recvs(struct ib_mad_agent_private *agent)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv, *temp_rmpp_recv;
|
|
unsigned long flags;
|
|
|
|
spin_lock_irqsave(&agent->lock, flags);
|
|
list_for_each_entry(rmpp_recv, &agent->rmpp_list, list) {
|
|
cancel_delayed_work(&rmpp_recv->timeout_work);
|
|
cancel_delayed_work(&rmpp_recv->cleanup_work);
|
|
}
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
|
|
flush_workqueue(agent->qp_info->port_priv->wq);
|
|
|
|
list_for_each_entry_safe(rmpp_recv, temp_rmpp_recv,
|
|
&agent->rmpp_list, list) {
|
|
list_del(&rmpp_recv->list);
|
|
if (rmpp_recv->state != RMPP_STATE_COMPLETE)
|
|
ib_free_recv_mad(rmpp_recv->rmpp_wc);
|
|
destroy_rmpp_recv(rmpp_recv);
|
|
}
|
|
}
|
|
|
|
static void format_ack(struct ib_mad_send_buf *msg,
|
|
struct ib_rmpp_mad *data,
|
|
struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
struct ib_rmpp_mad *ack = msg->mad;
|
|
unsigned long flags;
|
|
|
|
memcpy(ack, &data->mad_hdr, msg->hdr_len);
|
|
|
|
ack->mad_hdr.method ^= IB_MGMT_METHOD_RESP;
|
|
ack->rmpp_hdr.rmpp_type = IB_MGMT_RMPP_TYPE_ACK;
|
|
ib_set_rmpp_flags(&ack->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
|
|
|
|
spin_lock_irqsave(&rmpp_recv->lock, flags);
|
|
rmpp_recv->last_ack = rmpp_recv->seg_num;
|
|
ack->rmpp_hdr.seg_num = cpu_to_be32(rmpp_recv->seg_num);
|
|
ack->rmpp_hdr.paylen_newwin = cpu_to_be32(rmpp_recv->newwin);
|
|
spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
}
|
|
|
|
static void ack_recv(struct mad_rmpp_recv *rmpp_recv,
|
|
struct ib_mad_recv_wc *recv_wc)
|
|
{
|
|
struct ib_mad_send_buf *msg;
|
|
int ret, hdr_len;
|
|
|
|
hdr_len = ib_get_mad_data_offset(recv_wc->recv_buf.mad->mad_hdr.mgmt_class);
|
|
msg = ib_create_send_mad(&rmpp_recv->agent->agent, recv_wc->wc->src_qp,
|
|
recv_wc->wc->pkey_index, 1, hdr_len,
|
|
0, GFP_KERNEL);
|
|
if (!msg)
|
|
return;
|
|
|
|
format_ack(msg, (struct ib_rmpp_mad *) recv_wc->recv_buf.mad, rmpp_recv);
|
|
msg->ah = rmpp_recv->ah;
|
|
ret = ib_post_send_mad(msg, NULL);
|
|
if (ret)
|
|
ib_free_send_mad(msg);
|
|
}
|
|
|
|
static struct ib_mad_send_buf *alloc_response_msg(struct ib_mad_agent *agent,
|
|
struct ib_mad_recv_wc *recv_wc)
|
|
{
|
|
struct ib_mad_send_buf *msg;
|
|
struct ib_ah *ah;
|
|
int hdr_len;
|
|
|
|
ah = ib_create_ah_from_wc(agent->qp->pd, recv_wc->wc,
|
|
recv_wc->recv_buf.grh, agent->port_num);
|
|
if (IS_ERR(ah))
|
|
return (void *) ah;
|
|
|
|
hdr_len = ib_get_mad_data_offset(recv_wc->recv_buf.mad->mad_hdr.mgmt_class);
|
|
msg = ib_create_send_mad(agent, recv_wc->wc->src_qp,
|
|
recv_wc->wc->pkey_index, 1,
|
|
hdr_len, 0, GFP_KERNEL);
|
|
if (IS_ERR(msg))
|
|
ib_destroy_ah(ah);
|
|
else
|
|
msg->ah = ah;
|
|
|
|
return msg;
|
|
}
|
|
|
|
void ib_rmpp_send_handler(struct ib_mad_send_wc *mad_send_wc)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad = mad_send_wc->send_buf->mad;
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_ACK)
|
|
ib_destroy_ah(mad_send_wc->send_buf->ah);
|
|
ib_free_send_mad(mad_send_wc->send_buf);
|
|
}
|
|
|
|
static void nack_recv(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *recv_wc, u8 rmpp_status)
|
|
{
|
|
struct ib_mad_send_buf *msg;
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int ret;
|
|
|
|
msg = alloc_response_msg(&agent->agent, recv_wc);
|
|
if (IS_ERR(msg))
|
|
return;
|
|
|
|
rmpp_mad = msg->mad;
|
|
memcpy(rmpp_mad, recv_wc->recv_buf.mad, msg->hdr_len);
|
|
|
|
rmpp_mad->mad_hdr.method ^= IB_MGMT_METHOD_RESP;
|
|
rmpp_mad->rmpp_hdr.rmpp_version = IB_MGMT_RMPP_VERSION;
|
|
rmpp_mad->rmpp_hdr.rmpp_type = IB_MGMT_RMPP_TYPE_ABORT;
|
|
ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
|
|
rmpp_mad->rmpp_hdr.rmpp_status = rmpp_status;
|
|
rmpp_mad->rmpp_hdr.seg_num = 0;
|
|
rmpp_mad->rmpp_hdr.paylen_newwin = 0;
|
|
|
|
ret = ib_post_send_mad(msg, NULL);
|
|
if (ret) {
|
|
ib_destroy_ah(msg->ah);
|
|
ib_free_send_mad(msg);
|
|
}
|
|
}
|
|
|
|
static void recv_timeout_handler(void *data)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv = data;
|
|
struct ib_mad_recv_wc *rmpp_wc;
|
|
unsigned long flags;
|
|
|
|
spin_lock_irqsave(&rmpp_recv->agent->lock, flags);
|
|
if (rmpp_recv->state != RMPP_STATE_ACTIVE) {
|
|
spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
|
|
return;
|
|
}
|
|
rmpp_recv->state = RMPP_STATE_TIMEOUT;
|
|
list_del(&rmpp_recv->list);
|
|
spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
|
|
|
|
rmpp_wc = rmpp_recv->rmpp_wc;
|
|
nack_recv(rmpp_recv->agent, rmpp_wc, IB_MGMT_RMPP_STATUS_T2L);
|
|
destroy_rmpp_recv(rmpp_recv);
|
|
ib_free_recv_mad(rmpp_wc);
|
|
}
|
|
|
|
static void recv_cleanup_handler(void *data)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv = data;
|
|
unsigned long flags;
|
|
|
|
spin_lock_irqsave(&rmpp_recv->agent->lock, flags);
|
|
list_del(&rmpp_recv->list);
|
|
spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
|
|
destroy_rmpp_recv(rmpp_recv);
|
|
}
|
|
|
|
static struct mad_rmpp_recv *
|
|
create_rmpp_recv(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv;
|
|
struct ib_mad_hdr *mad_hdr;
|
|
|
|
rmpp_recv = kmalloc(sizeof *rmpp_recv, GFP_KERNEL);
|
|
if (!rmpp_recv)
|
|
return NULL;
|
|
|
|
rmpp_recv->ah = ib_create_ah_from_wc(agent->agent.qp->pd,
|
|
mad_recv_wc->wc,
|
|
mad_recv_wc->recv_buf.grh,
|
|
agent->agent.port_num);
|
|
if (IS_ERR(rmpp_recv->ah))
|
|
goto error;
|
|
|
|
rmpp_recv->agent = agent;
|
|
init_completion(&rmpp_recv->comp);
|
|
INIT_WORK(&rmpp_recv->timeout_work, recv_timeout_handler, rmpp_recv);
|
|
INIT_WORK(&rmpp_recv->cleanup_work, recv_cleanup_handler, rmpp_recv);
|
|
spin_lock_init(&rmpp_recv->lock);
|
|
rmpp_recv->state = RMPP_STATE_ACTIVE;
|
|
atomic_set(&rmpp_recv->refcount, 1);
|
|
|
|
rmpp_recv->rmpp_wc = mad_recv_wc;
|
|
rmpp_recv->cur_seg_buf = &mad_recv_wc->recv_buf;
|
|
rmpp_recv->newwin = 1;
|
|
rmpp_recv->seg_num = 1;
|
|
rmpp_recv->last_ack = 0;
|
|
|
|
mad_hdr = &mad_recv_wc->recv_buf.mad->mad_hdr;
|
|
rmpp_recv->tid = mad_hdr->tid;
|
|
rmpp_recv->src_qp = mad_recv_wc->wc->src_qp;
|
|
rmpp_recv->slid = mad_recv_wc->wc->slid;
|
|
rmpp_recv->mgmt_class = mad_hdr->mgmt_class;
|
|
rmpp_recv->class_version = mad_hdr->class_version;
|
|
rmpp_recv->method = mad_hdr->method;
|
|
return rmpp_recv;
|
|
|
|
error: kfree(rmpp_recv);
|
|
return NULL;
|
|
}
|
|
|
|
static struct mad_rmpp_recv *
|
|
find_rmpp_recv(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv;
|
|
struct ib_mad_hdr *mad_hdr = &mad_recv_wc->recv_buf.mad->mad_hdr;
|
|
|
|
list_for_each_entry(rmpp_recv, &agent->rmpp_list, list) {
|
|
if (rmpp_recv->tid == mad_hdr->tid &&
|
|
rmpp_recv->src_qp == mad_recv_wc->wc->src_qp &&
|
|
rmpp_recv->slid == mad_recv_wc->wc->slid &&
|
|
rmpp_recv->mgmt_class == mad_hdr->mgmt_class &&
|
|
rmpp_recv->class_version == mad_hdr->class_version &&
|
|
rmpp_recv->method == mad_hdr->method)
|
|
return rmpp_recv;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static struct mad_rmpp_recv *
|
|
acquire_rmpp_recv(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv;
|
|
unsigned long flags;
|
|
|
|
spin_lock_irqsave(&agent->lock, flags);
|
|
rmpp_recv = find_rmpp_recv(agent, mad_recv_wc);
|
|
if (rmpp_recv)
|
|
atomic_inc(&rmpp_recv->refcount);
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
return rmpp_recv;
|
|
}
|
|
|
|
static struct mad_rmpp_recv *
|
|
insert_rmpp_recv(struct ib_mad_agent_private *agent,
|
|
struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
struct mad_rmpp_recv *cur_rmpp_recv;
|
|
|
|
cur_rmpp_recv = find_rmpp_recv(agent, rmpp_recv->rmpp_wc);
|
|
if (!cur_rmpp_recv)
|
|
list_add_tail(&rmpp_recv->list, &agent->rmpp_list);
|
|
|
|
return cur_rmpp_recv;
|
|
}
|
|
|
|
static inline int get_last_flag(struct ib_mad_recv_buf *seg)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *) seg->mad;
|
|
return ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) & IB_MGMT_RMPP_FLAG_LAST;
|
|
}
|
|
|
|
static inline int get_seg_num(struct ib_mad_recv_buf *seg)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *) seg->mad;
|
|
return be32_to_cpu(rmpp_mad->rmpp_hdr.seg_num);
|
|
}
|
|
|
|
static inline struct ib_mad_recv_buf * get_next_seg(struct list_head *rmpp_list,
|
|
struct ib_mad_recv_buf *seg)
|
|
{
|
|
if (seg->list.next == rmpp_list)
|
|
return NULL;
|
|
|
|
return container_of(seg->list.next, struct ib_mad_recv_buf, list);
|
|
}
|
|
|
|
static inline int window_size(struct ib_mad_agent_private *agent)
|
|
{
|
|
return max(agent->qp_info->recv_queue.max_active >> 3, 1);
|
|
}
|
|
|
|
static struct ib_mad_recv_buf * find_seg_location(struct list_head *rmpp_list,
|
|
int seg_num)
|
|
{
|
|
struct ib_mad_recv_buf *seg_buf;
|
|
int cur_seg_num;
|
|
|
|
list_for_each_entry_reverse(seg_buf, rmpp_list, list) {
|
|
cur_seg_num = get_seg_num(seg_buf);
|
|
if (seg_num > cur_seg_num)
|
|
return seg_buf;
|
|
if (seg_num == cur_seg_num)
|
|
break;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static void update_seg_num(struct mad_rmpp_recv *rmpp_recv,
|
|
struct ib_mad_recv_buf *new_buf)
|
|
{
|
|
struct list_head *rmpp_list = &rmpp_recv->rmpp_wc->rmpp_list;
|
|
|
|
while (new_buf && (get_seg_num(new_buf) == rmpp_recv->seg_num + 1)) {
|
|
rmpp_recv->cur_seg_buf = new_buf;
|
|
rmpp_recv->seg_num++;
|
|
new_buf = get_next_seg(rmpp_list, new_buf);
|
|
}
|
|
}
|
|
|
|
static inline int get_mad_len(struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int hdr_size, data_size, pad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *)rmpp_recv->cur_seg_buf->mad;
|
|
|
|
hdr_size = ib_get_mad_data_offset(rmpp_mad->mad_hdr.mgmt_class);
|
|
data_size = sizeof(struct ib_rmpp_mad) - hdr_size;
|
|
pad = IB_MGMT_RMPP_DATA - be32_to_cpu(rmpp_mad->rmpp_hdr.paylen_newwin);
|
|
if (pad > IB_MGMT_RMPP_DATA || pad < 0)
|
|
pad = 0;
|
|
|
|
return hdr_size + rmpp_recv->seg_num * data_size - pad;
|
|
}
|
|
|
|
static struct ib_mad_recv_wc * complete_rmpp(struct mad_rmpp_recv *rmpp_recv)
|
|
{
|
|
struct ib_mad_recv_wc *rmpp_wc;
|
|
|
|
ack_recv(rmpp_recv, rmpp_recv->rmpp_wc);
|
|
if (rmpp_recv->seg_num > 1)
|
|
cancel_delayed_work(&rmpp_recv->timeout_work);
|
|
|
|
rmpp_wc = rmpp_recv->rmpp_wc;
|
|
rmpp_wc->mad_len = get_mad_len(rmpp_recv);
|
|
/* 10 seconds until we can find the packet lifetime */
|
|
queue_delayed_work(rmpp_recv->agent->qp_info->port_priv->wq,
|
|
&rmpp_recv->cleanup_work, msecs_to_jiffies(10000));
|
|
return rmpp_wc;
|
|
}
|
|
|
|
static struct ib_mad_recv_wc *
|
|
continue_rmpp(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv;
|
|
struct ib_mad_recv_buf *prev_buf;
|
|
struct ib_mad_recv_wc *done_wc;
|
|
int seg_num;
|
|
unsigned long flags;
|
|
|
|
rmpp_recv = acquire_rmpp_recv(agent, mad_recv_wc);
|
|
if (!rmpp_recv)
|
|
goto drop1;
|
|
|
|
seg_num = get_seg_num(&mad_recv_wc->recv_buf);
|
|
|
|
spin_lock_irqsave(&rmpp_recv->lock, flags);
|
|
if ((rmpp_recv->state == RMPP_STATE_TIMEOUT) ||
|
|
(seg_num > rmpp_recv->newwin))
|
|
goto drop3;
|
|
|
|
if ((seg_num <= rmpp_recv->last_ack) ||
|
|
(rmpp_recv->state == RMPP_STATE_COMPLETE)) {
|
|
spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
ack_recv(rmpp_recv, mad_recv_wc);
|
|
goto drop2;
|
|
}
|
|
|
|
prev_buf = find_seg_location(&rmpp_recv->rmpp_wc->rmpp_list, seg_num);
|
|
if (!prev_buf)
|
|
goto drop3;
|
|
|
|
done_wc = NULL;
|
|
list_add(&mad_recv_wc->recv_buf.list, &prev_buf->list);
|
|
if (rmpp_recv->cur_seg_buf == prev_buf) {
|
|
update_seg_num(rmpp_recv, &mad_recv_wc->recv_buf);
|
|
if (get_last_flag(rmpp_recv->cur_seg_buf)) {
|
|
rmpp_recv->state = RMPP_STATE_COMPLETE;
|
|
spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
done_wc = complete_rmpp(rmpp_recv);
|
|
goto out;
|
|
} else if (rmpp_recv->seg_num == rmpp_recv->newwin) {
|
|
rmpp_recv->newwin += window_size(agent);
|
|
spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
ack_recv(rmpp_recv, mad_recv_wc);
|
|
goto out;
|
|
}
|
|
}
|
|
spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
out:
|
|
deref_rmpp_recv(rmpp_recv);
|
|
return done_wc;
|
|
|
|
drop3: spin_unlock_irqrestore(&rmpp_recv->lock, flags);
|
|
drop2: deref_rmpp_recv(rmpp_recv);
|
|
drop1: ib_free_recv_mad(mad_recv_wc);
|
|
return NULL;
|
|
}
|
|
|
|
static struct ib_mad_recv_wc *
|
|
start_rmpp(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct mad_rmpp_recv *rmpp_recv;
|
|
unsigned long flags;
|
|
|
|
rmpp_recv = create_rmpp_recv(agent, mad_recv_wc);
|
|
if (!rmpp_recv) {
|
|
ib_free_recv_mad(mad_recv_wc);
|
|
return NULL;
|
|
}
|
|
|
|
spin_lock_irqsave(&agent->lock, flags);
|
|
if (insert_rmpp_recv(agent, rmpp_recv)) {
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
/* duplicate first MAD */
|
|
destroy_rmpp_recv(rmpp_recv);
|
|
return continue_rmpp(agent, mad_recv_wc);
|
|
}
|
|
atomic_inc(&rmpp_recv->refcount);
|
|
|
|
if (get_last_flag(&mad_recv_wc->recv_buf)) {
|
|
rmpp_recv->state = RMPP_STATE_COMPLETE;
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
complete_rmpp(rmpp_recv);
|
|
} else {
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
/* 40 seconds until we can find the packet lifetimes */
|
|
queue_delayed_work(agent->qp_info->port_priv->wq,
|
|
&rmpp_recv->timeout_work,
|
|
msecs_to_jiffies(40000));
|
|
rmpp_recv->newwin += window_size(agent);
|
|
ack_recv(rmpp_recv, mad_recv_wc);
|
|
mad_recv_wc = NULL;
|
|
}
|
|
deref_rmpp_recv(rmpp_recv);
|
|
return mad_recv_wc;
|
|
}
|
|
|
|
static int send_next_seg(struct ib_mad_send_wr_private *mad_send_wr)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int timeout;
|
|
u32 paylen = 0;
|
|
|
|
rmpp_mad = mad_send_wr->send_buf.mad;
|
|
ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
|
|
rmpp_mad->rmpp_hdr.seg_num = cpu_to_be32(++mad_send_wr->seg_num);
|
|
|
|
if (mad_send_wr->seg_num == 1) {
|
|
rmpp_mad->rmpp_hdr.rmpp_rtime_flags |= IB_MGMT_RMPP_FLAG_FIRST;
|
|
paylen = mad_send_wr->send_buf.seg_count * IB_MGMT_RMPP_DATA -
|
|
mad_send_wr->pad;
|
|
}
|
|
|
|
if (mad_send_wr->seg_num == mad_send_wr->send_buf.seg_count) {
|
|
rmpp_mad->rmpp_hdr.rmpp_rtime_flags |= IB_MGMT_RMPP_FLAG_LAST;
|
|
paylen = IB_MGMT_RMPP_DATA - mad_send_wr->pad;
|
|
}
|
|
rmpp_mad->rmpp_hdr.paylen_newwin = cpu_to_be32(paylen);
|
|
|
|
/* 2 seconds for an ACK until we can find the packet lifetime */
|
|
timeout = mad_send_wr->send_buf.timeout_ms;
|
|
if (!timeout || timeout > 2000)
|
|
mad_send_wr->timeout = msecs_to_jiffies(2000);
|
|
|
|
return ib_send_mad(mad_send_wr);
|
|
}
|
|
|
|
static void abort_send(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc, u8 rmpp_status)
|
|
{
|
|
struct ib_mad_send_wr_private *mad_send_wr;
|
|
struct ib_mad_send_wc wc;
|
|
unsigned long flags;
|
|
|
|
spin_lock_irqsave(&agent->lock, flags);
|
|
mad_send_wr = ib_find_send_mad(agent, mad_recv_wc);
|
|
if (!mad_send_wr)
|
|
goto out; /* Unmatched send */
|
|
|
|
if ((mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) ||
|
|
(!mad_send_wr->timeout) || (mad_send_wr->status != IB_WC_SUCCESS))
|
|
goto out; /* Send is already done */
|
|
|
|
ib_mark_mad_done(mad_send_wr);
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
|
|
wc.status = IB_WC_REM_ABORT_ERR;
|
|
wc.vendor_err = rmpp_status;
|
|
wc.send_buf = &mad_send_wr->send_buf;
|
|
ib_mad_complete_send_wr(mad_send_wr, &wc);
|
|
return;
|
|
out:
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
}
|
|
|
|
static inline void adjust_last_ack(struct ib_mad_send_wr_private *wr,
|
|
int seg_num)
|
|
{
|
|
struct list_head *list;
|
|
|
|
wr->last_ack = seg_num;
|
|
list = &wr->last_ack_seg->list;
|
|
list_for_each_entry(wr->last_ack_seg, list, list)
|
|
if (wr->last_ack_seg->num == seg_num)
|
|
break;
|
|
}
|
|
|
|
static void process_rmpp_ack(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct ib_mad_send_wr_private *mad_send_wr;
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
unsigned long flags;
|
|
int seg_num, newwin, ret;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
|
|
if (rmpp_mad->rmpp_hdr.rmpp_status) {
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
return;
|
|
}
|
|
|
|
seg_num = be32_to_cpu(rmpp_mad->rmpp_hdr.seg_num);
|
|
newwin = be32_to_cpu(rmpp_mad->rmpp_hdr.paylen_newwin);
|
|
if (newwin < seg_num) {
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_W2S);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_W2S);
|
|
return;
|
|
}
|
|
|
|
spin_lock_irqsave(&agent->lock, flags);
|
|
mad_send_wr = ib_find_send_mad(agent, mad_recv_wc);
|
|
if (!mad_send_wr)
|
|
goto out; /* Unmatched ACK */
|
|
|
|
if ((mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) ||
|
|
(!mad_send_wr->timeout) || (mad_send_wr->status != IB_WC_SUCCESS))
|
|
goto out; /* Send is already done */
|
|
|
|
if (seg_num > mad_send_wr->send_buf.seg_count ||
|
|
seg_num > mad_send_wr->newwin) {
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_S2B);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_S2B);
|
|
return;
|
|
}
|
|
|
|
if (newwin < mad_send_wr->newwin || seg_num < mad_send_wr->last_ack)
|
|
goto out; /* Old ACK */
|
|
|
|
if (seg_num > mad_send_wr->last_ack) {
|
|
adjust_last_ack(mad_send_wr, seg_num);
|
|
mad_send_wr->retries = mad_send_wr->send_buf.retries;
|
|
}
|
|
mad_send_wr->newwin = newwin;
|
|
if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) {
|
|
/* If no response is expected, the ACK completes the send */
|
|
if (!mad_send_wr->send_buf.timeout_ms) {
|
|
struct ib_mad_send_wc wc;
|
|
|
|
ib_mark_mad_done(mad_send_wr);
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
|
|
wc.status = IB_WC_SUCCESS;
|
|
wc.vendor_err = 0;
|
|
wc.send_buf = &mad_send_wr->send_buf;
|
|
ib_mad_complete_send_wr(mad_send_wr, &wc);
|
|
return;
|
|
}
|
|
if (mad_send_wr->refcount == 1)
|
|
ib_reset_mad_timeout(mad_send_wr,
|
|
mad_send_wr->send_buf.timeout_ms);
|
|
} else if (mad_send_wr->refcount == 1 &&
|
|
mad_send_wr->seg_num < mad_send_wr->newwin &&
|
|
mad_send_wr->seg_num < mad_send_wr->send_buf.seg_count) {
|
|
/* Send failure will just result in a timeout/retry */
|
|
ret = send_next_seg(mad_send_wr);
|
|
if (ret)
|
|
goto out;
|
|
|
|
mad_send_wr->refcount++;
|
|
list_del(&mad_send_wr->agent_list);
|
|
list_add_tail(&mad_send_wr->agent_list,
|
|
&mad_send_wr->mad_agent_priv->send_list);
|
|
}
|
|
out:
|
|
spin_unlock_irqrestore(&agent->lock, flags);
|
|
}
|
|
|
|
static struct ib_mad_recv_wc *
|
|
process_rmpp_data(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct ib_rmpp_hdr *rmpp_hdr;
|
|
u8 rmpp_status;
|
|
|
|
rmpp_hdr = &((struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad)->rmpp_hdr;
|
|
|
|
if (rmpp_hdr->rmpp_status) {
|
|
rmpp_status = IB_MGMT_RMPP_STATUS_BAD_STATUS;
|
|
goto bad;
|
|
}
|
|
|
|
if (rmpp_hdr->seg_num == __constant_htonl(1)) {
|
|
if (!(ib_get_rmpp_flags(rmpp_hdr) & IB_MGMT_RMPP_FLAG_FIRST)) {
|
|
rmpp_status = IB_MGMT_RMPP_STATUS_BAD_SEG;
|
|
goto bad;
|
|
}
|
|
return start_rmpp(agent, mad_recv_wc);
|
|
} else {
|
|
if (ib_get_rmpp_flags(rmpp_hdr) & IB_MGMT_RMPP_FLAG_FIRST) {
|
|
rmpp_status = IB_MGMT_RMPP_STATUS_BAD_SEG;
|
|
goto bad;
|
|
}
|
|
return continue_rmpp(agent, mad_recv_wc);
|
|
}
|
|
bad:
|
|
nack_recv(agent, mad_recv_wc, rmpp_status);
|
|
ib_free_recv_mad(mad_recv_wc);
|
|
return NULL;
|
|
}
|
|
|
|
static void process_rmpp_stop(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_status != IB_MGMT_RMPP_STATUS_RESX) {
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
} else
|
|
abort_send(agent, mad_recv_wc, rmpp_mad->rmpp_hdr.rmpp_status);
|
|
}
|
|
|
|
static void process_rmpp_abort(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_status < IB_MGMT_RMPP_STATUS_ABORT_MIN ||
|
|
rmpp_mad->rmpp_hdr.rmpp_status > IB_MGMT_RMPP_STATUS_ABORT_MAX) {
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
|
|
} else
|
|
abort_send(agent, mad_recv_wc, rmpp_mad->rmpp_hdr.rmpp_status);
|
|
}
|
|
|
|
struct ib_mad_recv_wc *
|
|
ib_process_rmpp_recv_wc(struct ib_mad_agent_private *agent,
|
|
struct ib_mad_recv_wc *mad_recv_wc)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
|
|
rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
|
|
if (!(rmpp_mad->rmpp_hdr.rmpp_rtime_flags & IB_MGMT_RMPP_FLAG_ACTIVE))
|
|
return mad_recv_wc;
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_version != IB_MGMT_RMPP_VERSION) {
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_UNV);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_UNV);
|
|
goto out;
|
|
}
|
|
|
|
switch (rmpp_mad->rmpp_hdr.rmpp_type) {
|
|
case IB_MGMT_RMPP_TYPE_DATA:
|
|
return process_rmpp_data(agent, mad_recv_wc);
|
|
case IB_MGMT_RMPP_TYPE_ACK:
|
|
process_rmpp_ack(agent, mad_recv_wc);
|
|
break;
|
|
case IB_MGMT_RMPP_TYPE_STOP:
|
|
process_rmpp_stop(agent, mad_recv_wc);
|
|
break;
|
|
case IB_MGMT_RMPP_TYPE_ABORT:
|
|
process_rmpp_abort(agent, mad_recv_wc);
|
|
break;
|
|
default:
|
|
abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BADT);
|
|
nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BADT);
|
|
break;
|
|
}
|
|
out:
|
|
ib_free_recv_mad(mad_recv_wc);
|
|
return NULL;
|
|
}
|
|
|
|
int ib_send_rmpp_mad(struct ib_mad_send_wr_private *mad_send_wr)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int ret;
|
|
|
|
rmpp_mad = mad_send_wr->send_buf.mad;
|
|
if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
|
|
IB_MGMT_RMPP_FLAG_ACTIVE))
|
|
return IB_RMPP_RESULT_UNHANDLED;
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_DATA) {
|
|
mad_send_wr->seg_num = 1;
|
|
return IB_RMPP_RESULT_INTERNAL;
|
|
}
|
|
|
|
mad_send_wr->newwin = 1;
|
|
|
|
/* We need to wait for the final ACK even if there isn't a response */
|
|
mad_send_wr->refcount += (mad_send_wr->timeout == 0);
|
|
ret = send_next_seg(mad_send_wr);
|
|
if (!ret)
|
|
return IB_RMPP_RESULT_CONSUMED;
|
|
return ret;
|
|
}
|
|
|
|
int ib_process_rmpp_send_wc(struct ib_mad_send_wr_private *mad_send_wr,
|
|
struct ib_mad_send_wc *mad_send_wc)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int ret;
|
|
|
|
rmpp_mad = mad_send_wr->send_buf.mad;
|
|
if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
|
|
IB_MGMT_RMPP_FLAG_ACTIVE))
|
|
return IB_RMPP_RESULT_UNHANDLED; /* RMPP not active */
|
|
|
|
if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_DATA)
|
|
return IB_RMPP_RESULT_INTERNAL; /* ACK, STOP, or ABORT */
|
|
|
|
if (mad_send_wc->status != IB_WC_SUCCESS ||
|
|
mad_send_wr->status != IB_WC_SUCCESS)
|
|
return IB_RMPP_RESULT_PROCESSED; /* Canceled or send error */
|
|
|
|
if (!mad_send_wr->timeout)
|
|
return IB_RMPP_RESULT_PROCESSED; /* Response received */
|
|
|
|
if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) {
|
|
mad_send_wr->timeout =
|
|
msecs_to_jiffies(mad_send_wr->send_buf.timeout_ms);
|
|
return IB_RMPP_RESULT_PROCESSED; /* Send done */
|
|
}
|
|
|
|
if (mad_send_wr->seg_num == mad_send_wr->newwin ||
|
|
mad_send_wr->seg_num == mad_send_wr->send_buf.seg_count)
|
|
return IB_RMPP_RESULT_PROCESSED; /* Wait for ACK */
|
|
|
|
ret = send_next_seg(mad_send_wr);
|
|
if (ret) {
|
|
mad_send_wc->status = IB_WC_GENERAL_ERR;
|
|
return IB_RMPP_RESULT_PROCESSED;
|
|
}
|
|
return IB_RMPP_RESULT_CONSUMED;
|
|
}
|
|
|
|
int ib_retry_rmpp(struct ib_mad_send_wr_private *mad_send_wr)
|
|
{
|
|
struct ib_rmpp_mad *rmpp_mad;
|
|
int ret;
|
|
|
|
rmpp_mad = mad_send_wr->send_buf.mad;
|
|
if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
|
|
IB_MGMT_RMPP_FLAG_ACTIVE))
|
|
return IB_RMPP_RESULT_UNHANDLED; /* RMPP not active */
|
|
|
|
if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count)
|
|
return IB_RMPP_RESULT_PROCESSED;
|
|
|
|
mad_send_wr->seg_num = mad_send_wr->last_ack;
|
|
mad_send_wr->cur_seg = mad_send_wr->last_ack_seg;
|
|
|
|
ret = send_next_seg(mad_send_wr);
|
|
if (ret)
|
|
return IB_RMPP_RESULT_PROCESSED;
|
|
|
|
return IB_RMPP_RESULT_CONSUMED;
|
|
}
|