net/rxrpc/ar-output.c

   1 /* RxRPC packet transmission
   2  *
   3  * Copyright (C) 2007 Red Hat, Inc. All Rights Reserved.
   4  * Written by David Howells (dhowells@redhat.com)
   5  *
   6  * This program is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU General Public License
   8  * as published by the Free Software Foundation; either version
   9  * 2 of the License, or (at your option) any later version.
  10  */
  11
  12 #include <linux/net.h>
  13 #include <linux/gfp.h>
  14 #include <linux/skbuff.h>
  15 #include <linux/circ_buf.h>
  16 #include <linux/export.h>
  17 #include <net/sock.h>
  18 #include <net/af_rxrpc.h>
  19 #include "ar-internal.h"
  20
  21 /*
  22  * Time till packet resend (in jiffies).
  23  */
  24 unsigned rxrpc_resend_timeout = 4 * HZ;
  25
  26 static int rxrpc_send_data(struct kiocb *iocb,
  27                            struct rxrpc_sock *rx,
  28                            struct rxrpc_call *call,
  29                            struct msghdr *msg, size_t len);
  30
  31 /*
  32  * extract control messages from the sendmsg() control buffer
  33  */
  34 static int rxrpc_sendmsg_cmsg(struct rxrpc_sock *rx, struct msghdr *msg,
  35                               unsigned long *user_call_ID,
  36                               enum rxrpc_command *command,
  37                               u32 *abort_code,
  38                               bool server)
  39 {
  40         struct cmsghdr *cmsg;
  41         int len;
  42
  43         *command = RXRPC_CMD_SEND_DATA;
  44
  45         if (msg->msg_controllen == 0)
  46                 return -EINVAL;
  47
  48         for (cmsg = CMSG_FIRSTHDR(msg); cmsg; cmsg = CMSG_NXTHDR(msg, cmsg)) {
  49                 if (!CMSG_OK(msg, cmsg))
  50                         return -EINVAL;
  51
  52                 len = cmsg->cmsg_len - CMSG_ALIGN(sizeof(struct cmsghdr));
  53                 _debug("CMSG %d, %d, %d",
  54                        cmsg->cmsg_level, cmsg->cmsg_type, len);
  55
  56                 if (cmsg->cmsg_level != SOL_RXRPC)
  57                         continue;
  58
  59                 switch (cmsg->cmsg_type) {
  60                 case RXRPC_USER_CALL_ID:
  61                         if (msg->msg_flags & MSG_CMSG_COMPAT) {
  62                                 if (len != sizeof(u32))
  63                                         return -EINVAL;
  64                                 *user_call_ID = *(u32 *) CMSG_DATA(cmsg);
  65                         } else {
  66                                 if (len != sizeof(unsigned long))
  67                                         return -EINVAL;
  68                                 *user_call_ID = *(unsigned long *)
  69                                         CMSG_DATA(cmsg);
  70                         }
  71                         _debug("User Call ID %lx", *user_call_ID);
  72                         break;
  73
  74                 case RXRPC_ABORT:
  75                         if (*command != RXRPC_CMD_SEND_DATA)
  76                                 return -EINVAL;
  77                         *command = RXRPC_CMD_SEND_ABORT;
  78                         if (len != sizeof(*abort_code))
  79                                 return -EINVAL;
  80                         *abort_code = *(unsigned int *) CMSG_DATA(cmsg);
  81                         _debug("Abort %x", *abort_code);
  82                         if (*abort_code == 0)
  83                                 return -EINVAL;
  84                         break;
  85
  86                 case RXRPC_ACCEPT:
  87                         if (*command != RXRPC_CMD_SEND_DATA)
  88                                 return -EINVAL;
  89                         *command = RXRPC_CMD_ACCEPT;
  90                         if (len != 0)
  91                                 return -EINVAL;
  92                         if (!server)
  93                                 return -EISCONN;
  94                         break;
  95
  96                 default:
  97                         return -EINVAL;
  98                 }
  99         }
 100
 101         _leave(" = 0");
 102         return 0;
 103 }
 104
 105 /*
 106  * abort a call, sending an ABORT packet to the peer
 107  */
 108 static void rxrpc_send_abort(struct rxrpc_call *call, u32 abort_code)
 109 {
 110         write_lock_bh(&call->state_lock);
 111
 112         if (call->state <= RXRPC_CALL_COMPLETE) {
 113                 call->state = RXRPC_CALL_LOCALLY_ABORTED;
 114                 call->abort_code = abort_code;
 115                 set_bit(RXRPC_CALL_ABORT, &call->events);
 116                 del_timer_sync(&call->resend_timer);
 117                 del_timer_sync(&call->ack_timer);
 118                 clear_bit(RXRPC_CALL_RESEND_TIMER, &call->events);
 119                 clear_bit(RXRPC_CALL_ACK, &call->events);
 120                 clear_bit(RXRPC_CALL_RUN_RTIMER, &call->flags);
 121                 rxrpc_queue_call(call);
 122         }
 123
 124         write_unlock_bh(&call->state_lock);
 125 }
 126
 127 /*
 128  * send a message forming part of a client call through an RxRPC socket
 129  * - caller holds the socket locked
 130  * - the socket may be either a client socket or a server socket
 131  */
 132 int rxrpc_client_sendmsg(struct kiocb *iocb, struct rxrpc_sock *rx,
 133                          struct rxrpc_transport *trans, struct msghdr *msg,
 134                          size_t len)
 135 {
 136         struct rxrpc_conn_bundle *bundle;
 137         enum rxrpc_command cmd;
 138         struct rxrpc_call *call;
 139         unsigned long user_call_ID = 0;
 140         struct key *key;
 141         __be16 service_id;
 142         u32 abort_code = 0;
 143         int ret;
 144
 145         _enter("");
 146
 147         ASSERT(trans != NULL);
 148
 149         ret = rxrpc_sendmsg_cmsg(rx, msg, &user_call_ID, &cmd, &abort_code,
 150                                  false);
 151         if (ret < 0)
 152                 return ret;
 153
 154         bundle = NULL;
 155         if (trans) {
 156                 service_id = rx->service_id;
 157                 if (msg->msg_name) {
 158                         DECLARE_SOCKADDR(struct sockaddr_rxrpc *, srx,
 159                                          msg->msg_name);
 160                         service_id = htons(srx->srx_service);
 161                 }
 162                 key = rx->key;
 163                 if (key && !rx->key->payload.data)
 164                         key = NULL;
 165                 bundle = rxrpc_get_bundle(rx, trans, key, service_id,
 166                                           GFP_KERNEL);
 167                 if (IS_ERR(bundle))
 168                         return PTR_ERR(bundle);
 169         }
 170
 171         call = rxrpc_get_client_call(rx, trans, bundle, user_call_ID,
 172                                      abort_code == 0, GFP_KERNEL);
 173         if (trans)
 174                 rxrpc_put_bundle(trans, bundle);
 175         if (IS_ERR(call)) {
 176                 _leave(" = %ld", PTR_ERR(call));
 177                 return PTR_ERR(call);
 178         }
 179
 180         _debug("CALL %d USR %lx ST %d on CONN %p",
 181                call->debug_id, call->user_call_ID, call->state, call->conn);
 182
 183         if (call->state >= RXRPC_CALL_COMPLETE) {
 184                 /* it's too late for this call */
 185                 ret = -ESHUTDOWN;
 186         } else if (cmd == RXRPC_CMD_SEND_ABORT) {
 187                 rxrpc_send_abort(call, abort_code);
 188         } else if (cmd != RXRPC_CMD_SEND_DATA) {
 189                 ret = -EINVAL;
 190         } else if (call->state != RXRPC_CALL_CLIENT_SEND_REQUEST) {
 191                 /* request phase complete for this client call */
 192                 ret = -EPROTO;
 193         } else {
 194                 ret = rxrpc_send_data(iocb, rx, call, msg, len);
 195         }
 196
 197         rxrpc_put_call(call);
 198         _leave(" = %d", ret);
 199         return ret;
 200 }
 201
 202 /**
 203  * rxrpc_kernel_send_data - Allow a kernel service to send data on a call
 204  * @call: The call to send data through
 205  * @msg: The data to send
 206  * @len: The amount of data to send
 207  *
 208  * Allow a kernel service to send data on a call.  The call must be in an state
 209  * appropriate to sending data.  No control data should be supplied in @msg,
 210  * nor should an address be supplied.  MSG_MORE should be flagged if there's
 211  * more data to come, otherwise this data will end the transmission phase.
 212  */
 213 int rxrpc_kernel_send_data(struct rxrpc_call *call, struct msghdr *msg,
 214                            size_t len)
 215 {
 216         int ret;
 217
 218         _enter("{%d,%s},", call->debug_id, rxrpc_call_states[call->state]);
 219
 220         ASSERTCMP(msg->msg_name, ==, NULL);
 221         ASSERTCMP(msg->msg_control, ==, NULL);
 222
 223         lock_sock(&call->socket->sk);
 224
 225         _debug("CALL %d USR %lx ST %d on CONN %p",
 226                call->debug_id, call->user_call_ID, call->state, call->conn);
 227
 228         if (call->state >= RXRPC_CALL_COMPLETE) {
 229                 ret = -ESHUTDOWN; /* it's too late for this call */
 230         } else if (call->state != RXRPC_CALL_CLIENT_SEND_REQUEST &&
 231                    call->state != RXRPC_CALL_SERVER_ACK_REQUEST &&
 232                    call->state != RXRPC_CALL_SERVER_SEND_REPLY) {
 233                 ret = -EPROTO; /* request phase complete for this client call */
 234         } else {
 235                 mm_segment_t oldfs = get_fs();
 236                 set_fs(KERNEL_DS);
 237                 ret = rxrpc_send_data(NULL, call->socket, call, msg, len);
 238                 set_fs(oldfs);
 239         }
 240
 241         release_sock(&call->socket->sk);
 242         _leave(" = %d", ret);
 243         return ret;
 244 }
 245
 246 EXPORT_SYMBOL(rxrpc_kernel_send_data);
 247
 248 /**
 249  * rxrpc_kernel_abort_call - Allow a kernel service to abort a call
 250  * @call: The call to be aborted
 251  * @abort_code: The abort code to stick into the ABORT packet
 252  *
 253  * Allow a kernel service to abort a call, if it's still in an abortable state.
 254  */
 255 void rxrpc_kernel_abort_call(struct rxrpc_call *call, u32 abort_code)
 256 {
 257         _enter("{%d},%d", call->debug_id, abort_code);
 258
 259         lock_sock(&call->socket->sk);
 260
 261         _debug("CALL %d USR %lx ST %d on CONN %p",
 262                call->debug_id, call->user_call_ID, call->state, call->conn);
 263
 264         if (call->state < RXRPC_CALL_COMPLETE)
 265                 rxrpc_send_abort(call, abort_code);
 266
 267         release_sock(&call->socket->sk);
 268         _leave("");
 269 }
 270
 271 EXPORT_SYMBOL(rxrpc_kernel_abort_call);
 272
 273 /*
 274  * send a message through a server socket
 275  * - caller holds the socket locked
 276  */
 277 int rxrpc_server_sendmsg(struct kiocb *iocb, struct rxrpc_sock *rx,
 278                          struct msghdr *msg, size_t len)
 279 {
 280         enum rxrpc_command cmd;
 281         struct rxrpc_call *call;
 282         unsigned long user_call_ID = 0;
 283         u32 abort_code = 0;
 284         int ret;
 285
 286         _enter("");
 287
 288         ret = rxrpc_sendmsg_cmsg(rx, msg, &user_call_ID, &cmd, &abort_code,
 289                                  true);
 290         if (ret < 0)
 291                 return ret;
 292
 293         if (cmd == RXRPC_CMD_ACCEPT) {
 294                 call = rxrpc_accept_call(rx, user_call_ID);
 295                 if (IS_ERR(call))
 296                         return PTR_ERR(call);
 297                 rxrpc_put_call(call);
 298                 return 0;
 299         }
 300
 301         call = rxrpc_find_server_call(rx, user_call_ID);
 302         if (!call)
 303                 return -EBADSLT;
 304         if (call->state >= RXRPC_CALL_COMPLETE) {
 305                 ret = -ESHUTDOWN;
 306                 goto out;
 307         }
 308
 309         switch (cmd) {
 310         case RXRPC_CMD_SEND_DATA:
 311                 if (call->state != RXRPC_CALL_CLIENT_SEND_REQUEST &&
 312                     call->state != RXRPC_CALL_SERVER_ACK_REQUEST &&
 313                     call->state != RXRPC_CALL_SERVER_SEND_REPLY) {
 314                         /* Tx phase not yet begun for this call */
 315                         ret = -EPROTO;
 316                         break;
 317                 }
 318
 319                 ret = rxrpc_send_data(iocb, rx, call, msg, len);
 320                 break;
 321
 322         case RXRPC_CMD_SEND_ABORT:
 323                 rxrpc_send_abort(call, abort_code);
 324                 break;
 325         default:
 326                 BUG();
 327         }
 328
 329         out:
 330         rxrpc_put_call(call);
 331         _leave(" = %d", ret);
 332         return ret;
 333 }
 334
 335 /*
 336  * send a packet through the transport endpoint
 337  */
 338 int rxrpc_send_packet(struct rxrpc_transport *trans, struct sk_buff *skb)
 339 {
 340         struct kvec iov[1];
 341         struct msghdr msg;
 342         int ret, opt;
 343
 344         _enter(",{%d}", skb->len);
 345
 346         iov[0].iov_base = skb->head;
 347         iov[0].iov_len = skb->len;
 348
 349         msg.msg_name = &trans->peer->srx.transport.sin;
 350         msg.msg_namelen = sizeof(trans->peer->srx.transport.sin);
 351         msg.msg_control = NULL;
 352         msg.msg_controllen = 0;
 353         msg.msg_flags = 0;
 354
 355         /* send the packet with the don't fragment bit set if we currently
 356          * think it's small enough */
 357         if (skb->len - sizeof(struct rxrpc_header) < trans->peer->maxdata) {
 358                 down_read(&trans->local->defrag_sem);
 359                 /* send the packet by UDP
 360                  * - returns -EMSGSIZE if UDP would have to fragment the packet
 361                  *   to go out of the interface
 362                  *   - in which case, we'll have processed the ICMP error
 363                  *     message and update the peer record
 364                  */
 365                 ret = kernel_sendmsg(trans->local->socket, &msg, iov, 1,
 366                                      iov[0].iov_len);
 367
 368                 up_read(&trans->local->defrag_sem);
 369                 if (ret == -EMSGSIZE)
 370                         goto send_fragmentable;
 371
 372                 _leave(" = %d [%u]", ret, trans->peer->maxdata);
 373                 return ret;
 374         }
 375
 376 send_fragmentable:
 377         /* attempt to send this message with fragmentation enabled */
 378         _debug("send fragment");
 379
 380         down_write(&trans->local->defrag_sem);
 381         opt = IP_PMTUDISC_DONT;
 382         ret = kernel_setsockopt(trans->local->socket, SOL_IP, IP_MTU_DISCOVER,
 383                                 (char *) &opt, sizeof(opt));
 384         if (ret == 0) {
 385                 ret = kernel_sendmsg(trans->local->socket, &msg, iov, 1,
 386                                      iov[0].iov_len);
 387
 388                 opt = IP_PMTUDISC_DO;
 389                 kernel_setsockopt(trans->local->socket, SOL_IP,
 390                                   IP_MTU_DISCOVER, (char *) &opt, sizeof(opt));
 391         }
 392
 393         up_write(&trans->local->defrag_sem);
 394         _leave(" = %d [frag %u]", ret, trans->peer->maxdata);
 395         return ret;
 396 }
 397
 398 /*
 399  * wait for space to appear in the transmit/ACK window
 400  * - caller holds the socket locked
 401  */
 402 static int rxrpc_wait_for_tx_window(struct rxrpc_sock *rx,
 403                                     struct rxrpc_call *call,
 404                                     long *timeo)
 405 {
 406         DECLARE_WAITQUEUE(myself, current);
 407         int ret;
 408
 409         _enter(",{%d},%ld",
 410                CIRC_SPACE(call->acks_head, call->acks_tail, call->acks_winsz),
 411                *timeo);
 412
 413         add_wait_queue(&call->tx_waitq, &myself);
 414
 415         for (;;) {
 416                 set_current_state(TASK_INTERRUPTIBLE);
 417                 ret = 0;
 418                 if (CIRC_SPACE(call->acks_head, call->acks_tail,
 419                                call->acks_winsz) > 0)
 420                         break;
 421                 if (signal_pending(current)) {
 422                         ret = sock_intr_errno(*timeo);
 423                         break;
 424                 }
 425
 426                 release_sock(&rx->sk);
 427                 *timeo = schedule_timeout(*timeo);
 428                 lock_sock(&rx->sk);
 429         }
 430
 431         remove_wait_queue(&call->tx_waitq, &myself);
 432         set_current_state(TASK_RUNNING);
 433         _leave(" = %d", ret);
 434         return ret;
 435 }
 436
 437 /*
 438  * attempt to schedule an instant Tx resend
 439  */
 440 static inline void rxrpc_instant_resend(struct rxrpc_call *call)
 441 {
 442         read_lock_bh(&call->state_lock);
 443         if (try_to_del_timer_sync(&call->resend_timer) >= 0) {
 444                 clear_bit(RXRPC_CALL_RUN_RTIMER, &call->flags);
 445                 if (call->state < RXRPC_CALL_COMPLETE &&
 446                     !test_and_set_bit(RXRPC_CALL_RESEND_TIMER, &call->events))
 447                         rxrpc_queue_call(call);
 448         }
 449         read_unlock_bh(&call->state_lock);
 450 }
 451
 452 /*
 453  * queue a packet for transmission, set the resend timer and attempt
 454  * to send the packet immediately
 455  */
 456 static void rxrpc_queue_packet(struct rxrpc_call *call, struct sk_buff *skb,
 457                                bool last)
 458 {
 459         struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
 460         int ret;
 461
 462         _net("queue skb %p [%d]", skb, call->acks_head);
 463
 464         ASSERT(call->acks_window != NULL);
 465         call->acks_window[call->acks_head] = (unsigned long) skb;
 466         smp_wmb();
 467         call->acks_head = (call->acks_head + 1) & (call->acks_winsz - 1);
 468
 469         if (last || call->state == RXRPC_CALL_SERVER_ACK_REQUEST) {
 470                 _debug("________awaiting reply/ACK__________");
 471                 write_lock_bh(&call->state_lock);
 472                 switch (call->state) {
 473                 case RXRPC_CALL_CLIENT_SEND_REQUEST:
 474                         call->state = RXRPC_CALL_CLIENT_AWAIT_REPLY;
 475                         break;
 476                 case RXRPC_CALL_SERVER_ACK_REQUEST:
 477                         call->state = RXRPC_CALL_SERVER_SEND_REPLY;
 478                         if (!last)
 479                                 break;
 480                 case RXRPC_CALL_SERVER_SEND_REPLY:
 481                         call->state = RXRPC_CALL_SERVER_AWAIT_ACK;
 482                         break;
 483                 default:
 484                         break;
 485                 }
 486                 write_unlock_bh(&call->state_lock);
 487         }
 488
 489         _proto("Tx DATA %%%u { #%u }",
 490                ntohl(sp->hdr.serial), ntohl(sp->hdr.seq));
 491
 492         sp->need_resend = false;
 493         sp->resend_at = jiffies + rxrpc_resend_timeout;
 494         if (!test_and_set_bit(RXRPC_CALL_RUN_RTIMER, &call->flags)) {
 495                 _debug("run timer");
 496                 call->resend_timer.expires = sp->resend_at;
 497                 add_timer(&call->resend_timer);
 498         }
 499
 500         /* attempt to cancel the rx-ACK timer, deferring reply transmission if
 501          * we're ACK'ing the request phase of an incoming call */
 502         ret = -EAGAIN;
 503         if (try_to_del_timer_sync(&call->ack_timer) >= 0) {
 504                 /* the packet may be freed by rxrpc_process_call() before this
 505                  * returns */
 506                 ret = rxrpc_send_packet(call->conn->trans, skb);
 507                 _net("sent skb %p", skb);
 508         } else {
 509                 _debug("failed to delete ACK timer");
 510         }
 511
 512         if (ret < 0) {
 513                 _debug("need instant resend %d", ret);
 514                 sp->need_resend = true;
 515                 rxrpc_instant_resend(call);
 516         }
 517
 518         _leave("");
 519 }
 520
 521 /*
 522  * send data through a socket
 523  * - must be called in process context
 524  * - caller holds the socket locked
 525  */
 526 static int rxrpc_send_data(struct kiocb *iocb,
 527                            struct rxrpc_sock *rx,
 528                            struct rxrpc_call *call,
 529                            struct msghdr *msg, size_t len)
 530 {
 531         struct rxrpc_skb_priv *sp;
 532         unsigned char __user *from;
 533         struct sk_buff *skb;
 534         struct iovec *iov;
 535         struct sock *sk = &rx->sk;
 536         long timeo;
 537         bool more;
 538         int ret, ioc, segment, copied;
 539
 540         _enter(",,,{%zu},%zu", msg->msg_iovlen, len);
 541
 542         timeo = sock_sndtimeo(sk, msg->msg_flags & MSG_DONTWAIT);
 543
 544         /* this should be in poll */
 545         clear_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
 546
 547         if (sk->sk_err || (sk->sk_shutdown & SEND_SHUTDOWN))
 548                 return -EPIPE;
 549
 550         iov = msg->msg_iov;
 551         ioc = msg->msg_iovlen - 1;
 552         from = iov->iov_base;
 553         segment = iov->iov_len;
 554         iov++;
 555         more = msg->msg_flags & MSG_MORE;
 556
 557         skb = call->tx_pending;
 558         call->tx_pending = NULL;
 559
 560         copied = 0;
 561         do {
 562                 int copy;
 563
 564                 if (segment > len)
 565                         segment = len;
 566
 567                 _debug("SEGMENT %d @%p", segment, from);
 568
 569                 if (!skb) {
 570                         size_t size, chunk, max, space;
 571
 572                         _debug("alloc");
 573
 574                         if (CIRC_SPACE(call->acks_head, call->acks_tail,
 575                                        call->acks_winsz) <= 0) {
 576                                 ret = -EAGAIN;
 577                                 if (msg->msg_flags & MSG_DONTWAIT)
 578                                         goto maybe_error;
 579                                 ret = rxrpc_wait_for_tx_window(rx, call,
 580                                                                &timeo);
 581                                 if (ret < 0)
 582                                         goto maybe_error;
 583                         }
 584
 585                         max = call->conn->trans->peer->maxdata;
 586                         max -= call->conn->security_size;
 587                         max &= ~(call->conn->size_align - 1UL);
 588
 589                         chunk = max;
 590                         if (chunk > len && !more)
 591                                 chunk = len;
 592
 593                         space = chunk + call->conn->size_align;
 594                         space &= ~(call->conn->size_align - 1UL);
 595
 596                         size = space + call->conn->header_size;
 597
 598                         _debug("SIZE: %zu/%zu/%zu", chunk, space, size);
 599
 600                         /* create a buffer that we can retain until it's ACK'd */
 601                         skb = sock_alloc_send_skb(
 602                                 sk, size, msg->msg_flags & MSG_DONTWAIT, &ret);
 603                         if (!skb)
 604                                 goto maybe_error;
 605
 606                         rxrpc_new_skb(skb);
 607
 608                         _debug("ALLOC SEND %p", skb);
 609
 610                         ASSERTCMP(skb->mark, ==, 0);
 611
 612                         _debug("HS: %u", call->conn->header_size);
 613                         skb_reserve(skb, call->conn->header_size);
 614                         skb->len += call->conn->header_size;
 615
 616                         sp = rxrpc_skb(skb);
 617                         sp->remain = chunk;
 618                         if (sp->remain > skb_tailroom(skb))
 619                                 sp->remain = skb_tailroom(skb);
 620
 621                         _net("skb: hr %d, tr %d, hl %d, rm %d",
 622                                skb_headroom(skb),
 623                                skb_tailroom(skb),
 624                                skb_headlen(skb),
 625                                sp->remain);
 626
 627                         skb->ip_summed = CHECKSUM_UNNECESSARY;
 628                 }
 629
 630                 _debug("append");
 631                 sp = rxrpc_skb(skb);
 632
 633                 /* append next segment of data to the current buffer */
 634                 copy = skb_tailroom(skb);
 635                 ASSERTCMP(copy, >, 0);
 636                 if (copy > segment)
 637                         copy = segment;
 638                 if (copy > sp->remain)
 639                         copy = sp->remain;
 640
 641                 _debug("add");
 642                 ret = skb_add_data(skb, from, copy);
 643                 _debug("added");
 644                 if (ret < 0)
 645                         goto efault;
 646                 sp->remain -= copy;
 647                 skb->mark += copy;
 648                 copied += copy;
 649
 650                 len -= copy;
 651                 segment -= copy;
 652                 from += copy;
 653                 while (segment == 0 && ioc > 0) {
 654                         from = iov->iov_base;
 655                         segment = iov->iov_len;
 656                         iov++;
 657                         ioc--;
 658                 }
 659                 if (len == 0) {
 660                         segment = 0;
 661                         ioc = 0;
 662                 }
 663
 664                 /* check for the far side aborting the call or a network error
 665                  * occurring */
 666                 if (call->state > RXRPC_CALL_COMPLETE)
 667                         goto call_aborted;
 668
 669                 /* add the packet to the send queue if it's now full */
 670                 if (sp->remain <= 0 || (segment == 0 && !more)) {
 671                         struct rxrpc_connection *conn = call->conn;
 672                         uint32_t seq;
 673                         size_t pad;
 674
 675                         /* pad out if we're using security */
 676                         if (conn->security) {
 677                                 pad = conn->security_size + skb->mark;
 678                                 pad = conn->size_align - pad;
 679                                 pad &= conn->size_align - 1;
 680                                 _debug("pad %zu", pad);
 681                                 if (pad)
 682                                         memset(skb_put(skb, pad), 0, pad);
 683                         }
 684
 685                         seq = atomic_inc_return(&call->sequence);
 686
 687                         sp->hdr.epoch = conn->epoch;
 688                         sp->hdr.cid = call->cid;
 689                         sp->hdr.callNumber = call->call_id;
 690                         sp->hdr.seq = htonl(seq);
 691                         sp->hdr.serial =
 692                                 htonl(atomic_inc_return(&conn->serial));
 693                         sp->hdr.type = RXRPC_PACKET_TYPE_DATA;
 694                         sp->hdr.userStatus = 0;
 695                         sp->hdr.securityIndex = conn->security_ix;
 696                         sp->hdr._rsvd = 0;
 697                         sp->hdr.serviceId = conn->service_id;
 698
 699                         sp->hdr.flags = conn->out_clientflag;
 700                         if (len == 0 && !more)
 701                                 sp->hdr.flags |= RXRPC_LAST_PACKET;
 702                         else if (CIRC_SPACE(call->acks_head, call->acks_tail,
 703                                             call->acks_winsz) > 1)
 704                                 sp->hdr.flags |= RXRPC_MORE_PACKETS;
 705                         if (more && seq & 1)
 706                                 sp->hdr.flags |= RXRPC_REQUEST_ACK;
 707
 708                         ret = rxrpc_secure_packet(
 709                                 call, skb, skb->mark,
 710                                 skb->head + sizeof(struct rxrpc_header));
 711                         if (ret < 0)
 712                                 goto out;
 713
 714                         memcpy(skb->head, &sp->hdr,
 715                                sizeof(struct rxrpc_header));
 716                         rxrpc_queue_packet(call, skb, segment == 0 && !more);
 717                         skb = NULL;
 718                 }
 719
 720         } while (segment > 0);
 721
 722 success:
 723         ret = copied;
 724 out:
 725         call->tx_pending = skb;
 726         _leave(" = %d", ret);
 727         return ret;
 728
 729 call_aborted:
 730         rxrpc_free_skb(skb);
 731         if (call->state == RXRPC_CALL_NETWORK_ERROR)
 732                 ret = call->conn->trans->peer->net_error;
 733         else
 734                 ret = -ECONNABORTED;
 735         _leave(" = %d", ret);
 736         return ret;
 737
 738 maybe_error:
 739         if (copied)
 740                 goto success;
 741         goto out;
 742
 743 efault:
 744         ret = -EFAULT;
 745         goto out;
 746 }