Re: [PATCH] sctp: Make "Invalid Stream Identifier" ERROR followsSACK when bundling

From: xufeng zhang
Date: Sun Jul 22 2012 - 22:24:20 EST


On 07/23/2012 08:49 AM, Neil Horman wrote:

Not sure I understand how you came into this error. If we get an invalid
stream, we issue an SCTP_REPORT_TSN side effect, followed by an SCTP_CMD_REPLY
which sends the error chunk. The reply goes through
sctp_outq_tail->sctp_outq_chunk->sctp_outq_transmit_chunk->sctp_outq_append_chunk.
That last function checks to see if a sack is already part of the packet, and if
there isn't one, appends one, using the updated tsn map.
Yes, you are right, but consider the invalid stream identifier's DATA chunk is the first
DATA chunk in the association which will need SACK immediately.
Here is what I thought of the scenario:
sctp_sf_eat_data_6_2()
-->sctp_eat_data()
-->sctp_make_op_error()
-->sctp_add_cmd_sf(commands, SCTP_CMD_REPLY, SCTP_CHUNK(err))
-->sctp_outq_tail() /* First enqueue ERROR chunk */
-->sctp_add_cmd_sf(commands, SCTP_CMD_GEN_SACK, SCTP_FORCE())
-->sctp_gen_sack()
-->sctp_make_sack()
-->sctp_add_cmd_sf(commands, SCTP_CMD_REPLY, SCTP_CHUNK(sack))
-->sctp_outq_tail() /* Then enqueue SACK chunk */

So SACK chunk is enqueued after ERROR chunk.
So Can you explain in
some more detail how you're getting into this situation?
Actually it's triggered by a customer's test case, but we can also reproduce this problem
easily by explicitly contaminating the sctp stack:
--- a/net/sctp/sm_make_chunk.c
+++ b/net/sctp/sm_make_chunk.c
@@ -701,7 +701,7 @@ struct sctp_chunk *sctp_make_datafrag_empty(struct sctp_association *asoc,
* creating the chunk.
*/
dp.tsn = 0;
- dp.stream = htons(sinfo->sinfo_stream);
+ dp.stream = htons(sinfo->sinfo_stream) + 10;
dp.ppid = sinfo->sinfo_ppid;

/* Set the flags for an unordered send. */


Then run sctp_darn application and capture the sctp packet at the same time.



Thanks,
Xufeng Zhang
Thanks!
Neil

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/