ZG2100NetIfSource - ZG2100 Network interface source

Users » donatien » Code » ZG2100NetIfSource

ZG2100 Network interface source

lwip/core/tcp_in.c@4:e00281c7453d, 2010-08-06 (annotated)

Committer:: donatien
Date:: Fri Aug 06 10:46:03 2010 +0000
Revision:: 4:e00281c7453d
Parent:: 1:3a7c15057192

Who changed what in which revision?

User	Revision	Line number	New contents of line
donatien	0:b802fc31f1db	1	/**
donatien	0:b802fc31f1db	2	* @file
donatien	0:b802fc31f1db	3	* Transmission Control Protocol, incoming traffic
donatien	0:b802fc31f1db	4	*
donatien	0:b802fc31f1db	5	* The input processing functions of the TCP layer.
donatien	0:b802fc31f1db	6	*
donatien	0:b802fc31f1db	7	* These functions are generally called in the order (ip_input() ->)
donatien	0:b802fc31f1db	8	* tcp_input() -> * tcp_process() -> tcp_receive() (-> application).
donatien	0:b802fc31f1db	9	*
donatien	0:b802fc31f1db	10	*/
donatien	0:b802fc31f1db	11
donatien	0:b802fc31f1db	12	/*
donatien	0:b802fc31f1db	13	* Copyright (c) 2001-2004 Swedish Institute of Computer Science.
donatien	0:b802fc31f1db	14	* All rights reserved.
donatien	0:b802fc31f1db	15	*
donatien	0:b802fc31f1db	16	* Redistribution and use in source and binary forms, with or without modification,
donatien	0:b802fc31f1db	17	* are permitted provided that the following conditions are met:
donatien	0:b802fc31f1db	18	*
donatien	0:b802fc31f1db	19	* 1. Redistributions of source code must retain the above copyright notice,
donatien	0:b802fc31f1db	20	* this list of conditions and the following disclaimer.
donatien	0:b802fc31f1db	21	* 2. Redistributions in binary form must reproduce the above copyright notice,
donatien	0:b802fc31f1db	22	* this list of conditions and the following disclaimer in the documentation
donatien	0:b802fc31f1db	23	* and/or other materials provided with the distribution.
donatien	0:b802fc31f1db	24	* 3. The name of the author may not be used to endorse or promote products
donatien	0:b802fc31f1db	25	* derived from this software without specific prior written permission.
donatien	0:b802fc31f1db	26	*
donatien	0:b802fc31f1db	27	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
donatien	0:b802fc31f1db	28	* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
donatien	0:b802fc31f1db	29	* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT
donatien	0:b802fc31f1db	30	* SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
donatien	0:b802fc31f1db	31	* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
donatien	0:b802fc31f1db	32	* OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
donatien	0:b802fc31f1db	33	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
donatien	0:b802fc31f1db	34	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
donatien	0:b802fc31f1db	35	* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
donatien	0:b802fc31f1db	36	* OF SUCH DAMAGE.
donatien	0:b802fc31f1db	37	*
donatien	0:b802fc31f1db	38	* This file is part of the lwIP TCP/IP stack.
donatien	0:b802fc31f1db	39	*
donatien	0:b802fc31f1db	40	* Author: Adam Dunkels <adam@sics.se>
donatien	0:b802fc31f1db	41	*
donatien	0:b802fc31f1db	42	*/
donatien	0:b802fc31f1db	43
donatien	0:b802fc31f1db	44	#include "lwip/opt.h"
donatien	0:b802fc31f1db	45
donatien	0:b802fc31f1db	46	#if LWIP_TCP /* don't build if not configured for use in lwipopts.h */
donatien	0:b802fc31f1db	47
donatien	0:b802fc31f1db	48	#include "lwip/tcp_impl.h"
donatien	0:b802fc31f1db	49	#include "lwip/def.h"
donatien	0:b802fc31f1db	50	#include "lwip/ip_addr.h"
donatien	0:b802fc31f1db	51	#include "lwip/netif.h"
donatien	0:b802fc31f1db	52	#include "lwip/mem.h"
donatien	0:b802fc31f1db	53	#include "lwip/memp.h"
donatien	0:b802fc31f1db	54	#include "lwip/inet_chksum.h"
donatien	0:b802fc31f1db	55	#include "lwip/stats.h"
donatien	0:b802fc31f1db	56	#include "lwip/snmp.h"
donatien	0:b802fc31f1db	57	#include "arch/perf.h"
donatien	0:b802fc31f1db	58
donatien	0:b802fc31f1db	59	/* These variables are global to all functions involved in the input
donatien	0:b802fc31f1db	60	processing of TCP segments. They are set by the tcp_input()
donatien	0:b802fc31f1db	61	function. */
donatien	0:b802fc31f1db	62	static struct tcp_seg inseg;
donatien	0:b802fc31f1db	63	static struct tcp_hdr *tcphdr;
donatien	0:b802fc31f1db	64	static struct ip_hdr *iphdr;
donatien	0:b802fc31f1db	65	static u32_t seqno, ackno;
donatien	0:b802fc31f1db	66	static u8_t flags;
donatien	0:b802fc31f1db	67	static u16_t tcplen;
donatien	0:b802fc31f1db	68
donatien	0:b802fc31f1db	69	static u8_t recv_flags;
donatien	0:b802fc31f1db	70	static struct pbuf *recv_data;
donatien	0:b802fc31f1db	71
donatien	0:b802fc31f1db	72	struct tcp_pcb *tcp_input_pcb;
donatien	0:b802fc31f1db	73
donatien	0:b802fc31f1db	74	/* Forward declarations. */
donatien	0:b802fc31f1db	75	static err_t tcp_process(struct tcp_pcb *pcb);
donatien	0:b802fc31f1db	76	static void tcp_receive(struct tcp_pcb *pcb);
donatien	0:b802fc31f1db	77	static void tcp_parseopt(struct tcp_pcb *pcb);
donatien	0:b802fc31f1db	78
donatien	0:b802fc31f1db	79	static err_t tcp_listen_input(struct tcp_pcb_listen *pcb);
donatien	0:b802fc31f1db	80	static err_t tcp_timewait_input(struct tcp_pcb *pcb);
donatien	0:b802fc31f1db	81
donatien	0:b802fc31f1db	82	/**
donatien	0:b802fc31f1db	83	* The initial input processing of TCP. It verifies the TCP header, demultiplexes
donatien	0:b802fc31f1db	84	* the segment between the PCBs and passes it on to tcp_process(), which implements
donatien	0:b802fc31f1db	85	* the TCP finite state machine. This function is called by the IP layer (in
donatien	0:b802fc31f1db	86	* ip_input()).
donatien	0:b802fc31f1db	87	*
donatien	0:b802fc31f1db	88	* @param p received TCP segment to process (p->payload pointing to the IP header)
donatien	0:b802fc31f1db	89	* @param inp network interface on which this segment was received
donatien	0:b802fc31f1db	90	*/
donatien	0:b802fc31f1db	91	void
donatien	0:b802fc31f1db	92	tcp_input(struct pbuf p, struct netif inp)
donatien	0:b802fc31f1db	93	{
donatien	0:b802fc31f1db	94	struct tcp_pcb pcb, prev;
donatien	0:b802fc31f1db	95	struct tcp_pcb_listen *lpcb;
donatien	1:3a7c15057192	96	#if SO_REUSE
donatien	1:3a7c15057192	97	struct tcp_pcb *lpcb_prev = NULL;
donatien	1:3a7c15057192	98	struct tcp_pcb_listen *lpcb_any = NULL;
donatien	1:3a7c15057192	99	#endif /* SO_REUSE */
donatien	0:b802fc31f1db	100	u8_t hdrlen;
donatien	0:b802fc31f1db	101	err_t err;
donatien	0:b802fc31f1db	102
donatien	0:b802fc31f1db	103	PERF_START;
donatien	0:b802fc31f1db	104
donatien	0:b802fc31f1db	105	TCP_STATS_INC(tcp.recv);
donatien	0:b802fc31f1db	106	snmp_inc_tcpinsegs();
donatien	0:b802fc31f1db	107
donatien	0:b802fc31f1db	108	iphdr = (struct ip_hdr *)p->payload;
donatien	0:b802fc31f1db	109	tcphdr = (struct tcp_hdr )((u8_t )p->payload + IPH_HL(iphdr) * 4);
donatien	0:b802fc31f1db	110
donatien	0:b802fc31f1db	111	#if TCP_INPUT_DEBUG
donatien	0:b802fc31f1db	112	tcp_debug_print(tcphdr);
donatien	0:b802fc31f1db	113	#endif
donatien	0:b802fc31f1db	114
donatien	0:b802fc31f1db	115	/* remove header from payload */
donatien	0:b802fc31f1db	116	if (pbuf_header(p, -((s16_t)(IPH_HL(iphdr) * 4))) \|\| (p->tot_len < sizeof(struct tcp_hdr))) {
donatien	0:b802fc31f1db	117	/* drop short packets */
donatien	0:b802fc31f1db	118	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: short packet (%"U16_F" bytes) discarded\n", p->tot_len));
donatien	0:b802fc31f1db	119	TCP_STATS_INC(tcp.lenerr);
donatien	0:b802fc31f1db	120	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	121	snmp_inc_tcpinerrs();
donatien	0:b802fc31f1db	122	pbuf_free(p);
donatien	0:b802fc31f1db	123	return;
donatien	0:b802fc31f1db	124	}
donatien	0:b802fc31f1db	125
donatien	0:b802fc31f1db	126	/* Don't even process incoming broadcasts/multicasts. */
donatien	1:3a7c15057192	127	if (ip_addr_isbroadcast(&current_iphdr_dest, inp) \|\|
donatien	1:3a7c15057192	128	ip_addr_ismulticast(&current_iphdr_dest)) {
donatien	0:b802fc31f1db	129	TCP_STATS_INC(tcp.proterr);
donatien	0:b802fc31f1db	130	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	131	snmp_inc_tcpinerrs();
donatien	0:b802fc31f1db	132	pbuf_free(p);
donatien	0:b802fc31f1db	133	return;
donatien	0:b802fc31f1db	134	}
donatien	0:b802fc31f1db	135
donatien	0:b802fc31f1db	136	#if CHECKSUM_CHECK_TCP
donatien	0:b802fc31f1db	137	/* Verify TCP checksum. */
donatien	1:3a7c15057192	138	if (inet_chksum_pseudo(p, ip_current_src_addr(), ip_current_dest_addr(),
donatien	0:b802fc31f1db	139	IP_PROTO_TCP, p->tot_len) != 0) {
donatien	0:b802fc31f1db	140	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: packet discarded due to failing checksum 0x%04"X16_F"\n",
donatien	1:3a7c15057192	141	inet_chksum_pseudo(p, ip_current_src_addr(), ip_current_dest_addr(),
donatien	0:b802fc31f1db	142	IP_PROTO_TCP, p->tot_len)));
donatien	0:b802fc31f1db	143	#if TCP_DEBUG
donatien	0:b802fc31f1db	144	tcp_debug_print(tcphdr);
donatien	0:b802fc31f1db	145	#endif /* TCP_DEBUG */
donatien	0:b802fc31f1db	146	TCP_STATS_INC(tcp.chkerr);
donatien	0:b802fc31f1db	147	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	148	snmp_inc_tcpinerrs();
donatien	0:b802fc31f1db	149	pbuf_free(p);
donatien	0:b802fc31f1db	150	return;
donatien	0:b802fc31f1db	151	}
donatien	0:b802fc31f1db	152	#endif
donatien	0:b802fc31f1db	153
donatien	0:b802fc31f1db	154	/* Move the payload pointer in the pbuf so that it points to the
donatien	0:b802fc31f1db	155	TCP data instead of the TCP header. */
donatien	0:b802fc31f1db	156	hdrlen = TCPH_HDRLEN(tcphdr);
donatien	0:b802fc31f1db	157	if(pbuf_header(p, -(hdrlen * 4))){
donatien	0:b802fc31f1db	158	/* drop short packets */
donatien	0:b802fc31f1db	159	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: short packet\n"));
donatien	0:b802fc31f1db	160	TCP_STATS_INC(tcp.lenerr);
donatien	0:b802fc31f1db	161	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	162	snmp_inc_tcpinerrs();
donatien	0:b802fc31f1db	163	pbuf_free(p);
donatien	0:b802fc31f1db	164	return;
donatien	0:b802fc31f1db	165	}
donatien	0:b802fc31f1db	166
donatien	0:b802fc31f1db	167	/* Convert fields in TCP header to host byte order. */
donatien	0:b802fc31f1db	168	tcphdr->src = ntohs(tcphdr->src);
donatien	0:b802fc31f1db	169	tcphdr->dest = ntohs(tcphdr->dest);
donatien	0:b802fc31f1db	170	seqno = tcphdr->seqno = ntohl(tcphdr->seqno);
donatien	0:b802fc31f1db	171	ackno = tcphdr->ackno = ntohl(tcphdr->ackno);
donatien	0:b802fc31f1db	172	tcphdr->wnd = ntohs(tcphdr->wnd);
donatien	0:b802fc31f1db	173
donatien	0:b802fc31f1db	174	flags = TCPH_FLAGS(tcphdr);
donatien	0:b802fc31f1db	175	tcplen = p->tot_len + ((flags & (TCP_FIN \| TCP_SYN)) ? 1 : 0);
donatien	0:b802fc31f1db	176
donatien	0:b802fc31f1db	177	/* Demultiplex an incoming segment. First, we check if it is destined
donatien	0:b802fc31f1db	178	for an active connection. */
donatien	0:b802fc31f1db	179	prev = NULL;
donatien	0:b802fc31f1db	180
donatien	0:b802fc31f1db	181
donatien	0:b802fc31f1db	182	for(pcb = tcp_active_pcbs; pcb != NULL; pcb = pcb->next) {
donatien	0:b802fc31f1db	183	LWIP_ASSERT("tcp_input: active pcb->state != CLOSED", pcb->state != CLOSED);
donatien	0:b802fc31f1db	184	LWIP_ASSERT("tcp_input: active pcb->state != TIME-WAIT", pcb->state != TIME_WAIT);
donatien	0:b802fc31f1db	185	LWIP_ASSERT("tcp_input: active pcb->state != LISTEN", pcb->state != LISTEN);
donatien	0:b802fc31f1db	186	if (pcb->remote_port == tcphdr->src &&
donatien	0:b802fc31f1db	187	pcb->local_port == tcphdr->dest &&
donatien	1:3a7c15057192	188	ip_addr_cmp(&(pcb->remote_ip), &current_iphdr_src) &&
donatien	1:3a7c15057192	189	ip_addr_cmp(&(pcb->local_ip), &current_iphdr_dest)) {
donatien	0:b802fc31f1db	190
donatien	0:b802fc31f1db	191	/* Move this PCB to the front of the list so that subsequent
donatien	0:b802fc31f1db	192	lookups will be faster (we exploit locality in TCP segment
donatien	0:b802fc31f1db	193	arrivals). */
donatien	0:b802fc31f1db	194	LWIP_ASSERT("tcp_input: pcb->next != pcb (before cache)", pcb->next != pcb);
donatien	0:b802fc31f1db	195	if (prev != NULL) {
donatien	0:b802fc31f1db	196	prev->next = pcb->next;
donatien	0:b802fc31f1db	197	pcb->next = tcp_active_pcbs;
donatien	0:b802fc31f1db	198	tcp_active_pcbs = pcb;
donatien	0:b802fc31f1db	199	}
donatien	0:b802fc31f1db	200	LWIP_ASSERT("tcp_input: pcb->next != pcb (after cache)", pcb->next != pcb);
donatien	0:b802fc31f1db	201	break;
donatien	0:b802fc31f1db	202	}
donatien	0:b802fc31f1db	203	prev = pcb;
donatien	0:b802fc31f1db	204	}
donatien	0:b802fc31f1db	205
donatien	0:b802fc31f1db	206	if (pcb == NULL) {
donatien	0:b802fc31f1db	207	/* If it did not go to an active connection, we check the connections
donatien	0:b802fc31f1db	208	in the TIME-WAIT state. */
donatien	0:b802fc31f1db	209	for(pcb = tcp_tw_pcbs; pcb != NULL; pcb = pcb->next) {
donatien	0:b802fc31f1db	210	LWIP_ASSERT("tcp_input: TIME-WAIT pcb->state == TIME-WAIT", pcb->state == TIME_WAIT);
donatien	0:b802fc31f1db	211	if (pcb->remote_port == tcphdr->src &&
donatien	0:b802fc31f1db	212	pcb->local_port == tcphdr->dest &&
donatien	1:3a7c15057192	213	ip_addr_cmp(&(pcb->remote_ip), &current_iphdr_src) &&
donatien	1:3a7c15057192	214	ip_addr_cmp(&(pcb->local_ip), &current_iphdr_dest)) {
donatien	0:b802fc31f1db	215	/* We don't really care enough to move this PCB to the front
donatien	0:b802fc31f1db	216	of the list since we are not very likely to receive that
donatien	0:b802fc31f1db	217	many segments for connections in TIME-WAIT. */
donatien	0:b802fc31f1db	218	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: packed for TIME_WAITing connection.\n"));
donatien	0:b802fc31f1db	219	tcp_timewait_input(pcb);
donatien	0:b802fc31f1db	220	pbuf_free(p);
donatien	0:b802fc31f1db	221	return;
donatien	0:b802fc31f1db	222	}
donatien	0:b802fc31f1db	223	}
donatien	0:b802fc31f1db	224
donatien	1:3a7c15057192	225	/* Finally, if we still did not get a match, we check all PCBs that
donatien	1:3a7c15057192	226	are LISTENing for incoming connections. */
donatien	0:b802fc31f1db	227	prev = NULL;
donatien	0:b802fc31f1db	228	for(lpcb = tcp_listen_pcbs.listen_pcbs; lpcb != NULL; lpcb = lpcb->next) {
donatien	1:3a7c15057192	229	if (lpcb->local_port == tcphdr->dest) {
donatien	1:3a7c15057192	230	#if SO_REUSE
donatien	1:3a7c15057192	231	if (ip_addr_cmp(&(lpcb->local_ip), &current_iphdr_dest)) {
donatien	1:3a7c15057192	232	/* found an exact match */
donatien	1:3a7c15057192	233	break;
donatien	1:3a7c15057192	234	} else if(ip_addr_isany(&(lpcb->local_ip))) {
donatien	1:3a7c15057192	235	/* found an ANY-match */
donatien	1:3a7c15057192	236	lpcb_any = lpcb;
donatien	1:3a7c15057192	237	lpcb_prev = prev;
donatien	0:b802fc31f1db	238	}
donatien	1:3a7c15057192	239	#else /* SO_REUSE */
donatien	1:3a7c15057192	240	if (ip_addr_cmp(&(lpcb->local_ip), &current_iphdr_dest) \|\|
donatien	1:3a7c15057192	241	ip_addr_isany(&(lpcb->local_ip))) {
donatien	1:3a7c15057192	242	/* found a match */
donatien	1:3a7c15057192	243	break;
donatien	1:3a7c15057192	244	}
donatien	1:3a7c15057192	245	#endif /* SO_REUSE */
donatien	0:b802fc31f1db	246	}
donatien	0:b802fc31f1db	247	prev = (struct tcp_pcb *)lpcb;
donatien	0:b802fc31f1db	248	}
donatien	1:3a7c15057192	249	#if SO_REUSE
donatien	1:3a7c15057192	250	/* first try specific local IP */
donatien	1:3a7c15057192	251	if (lpcb == NULL) {
donatien	1:3a7c15057192	252	/* only pass to ANY if no specific local IP has been found */
donatien	1:3a7c15057192	253	lpcb = lpcb_any;
donatien	1:3a7c15057192	254	prev = lpcb_prev;
donatien	1:3a7c15057192	255	}
donatien	1:3a7c15057192	256	#endif /* SO_REUSE */
donatien	1:3a7c15057192	257	if (lpcb != NULL) {
donatien	1:3a7c15057192	258	/* Move this PCB to the front of the list so that subsequent
donatien	1:3a7c15057192	259	lookups will be faster (we exploit locality in TCP segment
donatien	1:3a7c15057192	260	arrivals). */
donatien	1:3a7c15057192	261	if (prev != NULL) {
donatien	1:3a7c15057192	262	((struct tcp_pcb_listen *)prev)->next = lpcb->next;
donatien	1:3a7c15057192	263	/* our successor is the remainder of the listening list */
donatien	1:3a7c15057192	264	lpcb->next = tcp_listen_pcbs.listen_pcbs;
donatien	1:3a7c15057192	265	/* put this listening pcb at the head of the listening list */
donatien	1:3a7c15057192	266	tcp_listen_pcbs.listen_pcbs = lpcb;
donatien	1:3a7c15057192	267	}
donatien	1:3a7c15057192	268
donatien	1:3a7c15057192	269	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: packed for LISTENing connection.\n"));
donatien	1:3a7c15057192	270	tcp_listen_input(lpcb);
donatien	1:3a7c15057192	271	pbuf_free(p);
donatien	1:3a7c15057192	272	return;
donatien	1:3a7c15057192	273	}
donatien	0:b802fc31f1db	274	}
donatien	0:b802fc31f1db	275
donatien	0:b802fc31f1db	276	#if TCP_INPUT_DEBUG
donatien	0:b802fc31f1db	277	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("+-+-+-+-+-+-+-+-+-+-+-+-+-+- tcp_input: flags "));
donatien	0:b802fc31f1db	278	tcp_debug_print_flags(TCPH_FLAGS(tcphdr));
donatien	0:b802fc31f1db	279	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n"));
donatien	0:b802fc31f1db	280	#endif /* TCP_INPUT_DEBUG */
donatien	0:b802fc31f1db	281
donatien	0:b802fc31f1db	282
donatien	0:b802fc31f1db	283	if (pcb != NULL) {
donatien	0:b802fc31f1db	284	/* The incoming segment belongs to a connection. */
donatien	0:b802fc31f1db	285	#if TCP_INPUT_DEBUG
donatien	0:b802fc31f1db	286	#if TCP_DEBUG
donatien	0:b802fc31f1db	287	tcp_debug_print_state(pcb->state);
donatien	0:b802fc31f1db	288	#endif /* TCP_DEBUG */
donatien	0:b802fc31f1db	289	#endif /* TCP_INPUT_DEBUG */
donatien	0:b802fc31f1db	290
donatien	0:b802fc31f1db	291	/* Set up a tcp_seg structure. */
donatien	0:b802fc31f1db	292	inseg.next = NULL;
donatien	0:b802fc31f1db	293	inseg.len = p->tot_len;
donatien	0:b802fc31f1db	294	inseg.dataptr = p->payload;
donatien	0:b802fc31f1db	295	inseg.p = p;
donatien	0:b802fc31f1db	296	inseg.tcphdr = tcphdr;
donatien	0:b802fc31f1db	297
donatien	0:b802fc31f1db	298	recv_data = NULL;
donatien	0:b802fc31f1db	299	recv_flags = 0;
donatien	0:b802fc31f1db	300
donatien	0:b802fc31f1db	301	/* If there is data which was previously "refused" by upper layer */
donatien	0:b802fc31f1db	302	if (pcb->refused_data != NULL) {
donatien	0:b802fc31f1db	303	/* Notify again application with data previously received. */
donatien	0:b802fc31f1db	304	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: notify kept packet\n"));
donatien	0:b802fc31f1db	305	TCP_EVENT_RECV(pcb, pcb->refused_data, ERR_OK, err);
donatien	0:b802fc31f1db	306	if (err == ERR_OK) {
donatien	0:b802fc31f1db	307	pcb->refused_data = NULL;
donatien	0:b802fc31f1db	308	} else {
donatien	0:b802fc31f1db	309	/* if err == ERR_ABRT, 'pcb' is already deallocated */
donatien	0:b802fc31f1db	310	/* drop incoming packets, because pcb is "full" */
donatien	0:b802fc31f1db	311	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: drop incoming packets, because pcb is \"full\"\n"));
donatien	0:b802fc31f1db	312	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	313	snmp_inc_tcpinerrs();
donatien	0:b802fc31f1db	314	pbuf_free(p);
donatien	0:b802fc31f1db	315	return;
donatien	0:b802fc31f1db	316	}
donatien	0:b802fc31f1db	317	}
donatien	0:b802fc31f1db	318	tcp_input_pcb = pcb;
donatien	0:b802fc31f1db	319	err = tcp_process(pcb);
donatien	0:b802fc31f1db	320	/* A return value of ERR_ABRT means that tcp_abort() was called
donatien	0:b802fc31f1db	321	and that the pcb has been freed. If so, we don't do anything. */
donatien	0:b802fc31f1db	322	if (err != ERR_ABRT) {
donatien	0:b802fc31f1db	323	if (recv_flags & TF_RESET) {
donatien	0:b802fc31f1db	324	/* TF_RESET means that the connection was reset by the other
donatien	0:b802fc31f1db	325	end. We then call the error callback to inform the
donatien	0:b802fc31f1db	326	application that the connection is dead before we
donatien	0:b802fc31f1db	327	deallocate the PCB. */
donatien	0:b802fc31f1db	328	TCP_EVENT_ERR(pcb->errf, pcb->callback_arg, ERR_RST);
donatien	0:b802fc31f1db	329	tcp_pcb_remove(&tcp_active_pcbs, pcb);
donatien	0:b802fc31f1db	330	memp_free(MEMP_TCP_PCB, pcb);
donatien	0:b802fc31f1db	331	} else if (recv_flags & TF_CLOSED) {
donatien	0:b802fc31f1db	332	/* The connection has been closed and we will deallocate the
donatien	0:b802fc31f1db	333	PCB. */
donatien	0:b802fc31f1db	334	tcp_pcb_remove(&tcp_active_pcbs, pcb);
donatien	0:b802fc31f1db	335	memp_free(MEMP_TCP_PCB, pcb);
donatien	0:b802fc31f1db	336	} else {
donatien	0:b802fc31f1db	337	err = ERR_OK;
donatien	0:b802fc31f1db	338	/* If the application has registered a "sent" function to be
donatien	0:b802fc31f1db	339	called when new send buffer space is available, we call it
donatien	0:b802fc31f1db	340	now. */
donatien	0:b802fc31f1db	341	if (pcb->acked > 0) {
donatien	0:b802fc31f1db	342	TCP_EVENT_SENT(pcb, pcb->acked, err);
donatien	0:b802fc31f1db	343	if (err == ERR_ABRT) {
donatien	0:b802fc31f1db	344	goto aborted;
donatien	0:b802fc31f1db	345	}
donatien	0:b802fc31f1db	346	}
donatien	0:b802fc31f1db	347
donatien	0:b802fc31f1db	348	if (recv_data != NULL) {
donatien	1:3a7c15057192	349	if (pcb->flags & TF_RXCLOSED) {
donatien	1:3a7c15057192	350	/* received data although already closed -> abort (send RST) to
donatien	1:3a7c15057192	351	notify the remote host that not all data has been processed */
donatien	1:3a7c15057192	352	pbuf_free(recv_data);
donatien	1:3a7c15057192	353	tcp_abort(pcb);
donatien	1:3a7c15057192	354	goto aborted;
donatien	1:3a7c15057192	355	}
donatien	1:3a7c15057192	356	if (flags & TCP_PSH) {
donatien	0:b802fc31f1db	357	recv_data->flags \|= PBUF_FLAG_PUSH;
donatien	0:b802fc31f1db	358	}
donatien	0:b802fc31f1db	359
donatien	0:b802fc31f1db	360	/* Notify application that data has been received. */
donatien	0:b802fc31f1db	361	TCP_EVENT_RECV(pcb, recv_data, ERR_OK, err);
donatien	0:b802fc31f1db	362	if (err == ERR_ABRT) {
donatien	0:b802fc31f1db	363	goto aborted;
donatien	0:b802fc31f1db	364	}
donatien	0:b802fc31f1db	365
donatien	0:b802fc31f1db	366	/* If the upper layer can't receive this data, store it */
donatien	0:b802fc31f1db	367	if (err != ERR_OK) {
donatien	0:b802fc31f1db	368	pcb->refused_data = recv_data;
donatien	0:b802fc31f1db	369	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_input: keep incoming packet, because pcb is \"full\"\n"));
donatien	0:b802fc31f1db	370	}
donatien	0:b802fc31f1db	371	}
donatien	0:b802fc31f1db	372
donatien	0:b802fc31f1db	373	/* If a FIN segment was received, we call the callback
donatien	0:b802fc31f1db	374	function with a NULL buffer to indicate EOF. */
donatien	0:b802fc31f1db	375	if (recv_flags & TF_GOT_FIN) {
donatien	0:b802fc31f1db	376	/* correct rcv_wnd as the application won't call tcp_recved()
donatien	0:b802fc31f1db	377	for the FIN's seqno */
donatien	0:b802fc31f1db	378	if (pcb->rcv_wnd != TCP_WND) {
donatien	0:b802fc31f1db	379	pcb->rcv_wnd++;
donatien	0:b802fc31f1db	380	}
donatien	1:3a7c15057192	381	TCP_EVENT_CLOSED(pcb, err);
donatien	0:b802fc31f1db	382	if (err == ERR_ABRT) {
donatien	0:b802fc31f1db	383	goto aborted;
donatien	0:b802fc31f1db	384	}
donatien	0:b802fc31f1db	385	}
donatien	0:b802fc31f1db	386
donatien	0:b802fc31f1db	387	tcp_input_pcb = NULL;
donatien	0:b802fc31f1db	388	/* Try to send something out. */
donatien	0:b802fc31f1db	389	tcp_output(pcb);
donatien	0:b802fc31f1db	390	#if TCP_INPUT_DEBUG
donatien	0:b802fc31f1db	391	#if TCP_DEBUG
donatien	0:b802fc31f1db	392	tcp_debug_print_state(pcb->state);
donatien	0:b802fc31f1db	393	#endif /* TCP_DEBUG */
donatien	0:b802fc31f1db	394	#endif /* TCP_INPUT_DEBUG */
donatien	0:b802fc31f1db	395	}
donatien	0:b802fc31f1db	396	}
donatien	0:b802fc31f1db	397	/* Jump target if pcb has been aborted in a callback (by calling tcp_abort()).
donatien	0:b802fc31f1db	398	Below this line, 'pcb' may not be dereferenced! */
donatien	0:b802fc31f1db	399	aborted:
donatien	0:b802fc31f1db	400	tcp_input_pcb = NULL;
donatien	1:3a7c15057192	401	recv_data = NULL;
donatien	0:b802fc31f1db	402
donatien	0:b802fc31f1db	403	/* give up our reference to inseg.p */
donatien	0:b802fc31f1db	404	if (inseg.p != NULL)
donatien	0:b802fc31f1db	405	{
donatien	0:b802fc31f1db	406	pbuf_free(inseg.p);
donatien	0:b802fc31f1db	407	inseg.p = NULL;
donatien	0:b802fc31f1db	408	}
donatien	0:b802fc31f1db	409	} else {
donatien	0:b802fc31f1db	410
donatien	0:b802fc31f1db	411	/* If no matching PCB was found, send a TCP RST (reset) to the
donatien	0:b802fc31f1db	412	sender. */
donatien	0:b802fc31f1db	413	LWIP_DEBUGF(TCP_RST_DEBUG, ("tcp_input: no PCB match found, resetting.\n"));
donatien	0:b802fc31f1db	414	if (!(TCPH_FLAGS(tcphdr) & TCP_RST)) {
donatien	0:b802fc31f1db	415	TCP_STATS_INC(tcp.proterr);
donatien	0:b802fc31f1db	416	TCP_STATS_INC(tcp.drop);
donatien	0:b802fc31f1db	417	tcp_rst(ackno, seqno + tcplen,
donatien	1:3a7c15057192	418	ip_current_dest_addr(), ip_current_src_addr(),
donatien	0:b802fc31f1db	419	tcphdr->dest, tcphdr->src);
donatien	0:b802fc31f1db	420	}
donatien	0:b802fc31f1db	421	pbuf_free(p);
donatien	0:b802fc31f1db	422	}
donatien	0:b802fc31f1db	423
donatien	0:b802fc31f1db	424	LWIP_ASSERT("tcp_input: tcp_pcbs_sane()", tcp_pcbs_sane());
donatien	0:b802fc31f1db	425	PERF_STOP("tcp_input");
donatien	0:b802fc31f1db	426	}
donatien	0:b802fc31f1db	427
donatien	0:b802fc31f1db	428	/**
donatien	0:b802fc31f1db	429	* Called by tcp_input() when a segment arrives for a listening
donatien	0:b802fc31f1db	430	* connection (from tcp_input()).
donatien	0:b802fc31f1db	431	*
donatien	0:b802fc31f1db	432	* @param pcb the tcp_pcb_listen for which a segment arrived
donatien	0:b802fc31f1db	433	* @return ERR_OK if the segment was processed
donatien	0:b802fc31f1db	434	* another err_t on error
donatien	0:b802fc31f1db	435	*
donatien	0:b802fc31f1db	436	* @note the return value is not (yet?) used in tcp_input()
donatien	0:b802fc31f1db	437	* @note the segment which arrived is saved in global variables, therefore only the pcb
donatien	0:b802fc31f1db	438	* involved is passed as a parameter to this function
donatien	0:b802fc31f1db	439	*/
donatien	0:b802fc31f1db	440	static err_t
donatien	0:b802fc31f1db	441	tcp_listen_input(struct tcp_pcb_listen *pcb)
donatien	0:b802fc31f1db	442	{
donatien	0:b802fc31f1db	443	struct tcp_pcb *npcb;
donatien	0:b802fc31f1db	444	err_t rc;
donatien	0:b802fc31f1db	445
donatien	0:b802fc31f1db	446	/* In the LISTEN state, we check for incoming SYN segments,
donatien	0:b802fc31f1db	447	creates a new PCB, and responds with a SYN\|ACK. */
donatien	0:b802fc31f1db	448	if (flags & TCP_ACK) {
donatien	0:b802fc31f1db	449	/* For incoming segments with the ACK flag set, respond with a
donatien	0:b802fc31f1db	450	RST. */
donatien	0:b802fc31f1db	451	LWIP_DEBUGF(TCP_RST_DEBUG, ("tcp_listen_input: ACK in LISTEN, sending reset\n"));
donatien	0:b802fc31f1db	452	tcp_rst(ackno + 1, seqno + tcplen,
donatien	1:3a7c15057192	453	ip_current_dest_addr(), ip_current_src_addr(),
donatien	0:b802fc31f1db	454	tcphdr->dest, tcphdr->src);
donatien	0:b802fc31f1db	455	} else if (flags & TCP_SYN) {
donatien	0:b802fc31f1db	456	LWIP_DEBUGF(TCP_DEBUG, ("TCP connection request %"U16_F" -> %"U16_F".\n", tcphdr->src, tcphdr->dest));
donatien	0:b802fc31f1db	457	#if TCP_LISTEN_BACKLOG
donatien	0:b802fc31f1db	458	if (pcb->accepts_pending >= pcb->backlog) {
donatien	0:b802fc31f1db	459	LWIP_DEBUGF(TCP_DEBUG, ("tcp_listen_input: listen backlog exceeded for port %"U16_F"\n", tcphdr->dest));
donatien	0:b802fc31f1db	460	return ERR_ABRT;
donatien	0:b802fc31f1db	461	}
donatien	0:b802fc31f1db	462	#endif /* TCP_LISTEN_BACKLOG */
donatien	0:b802fc31f1db	463	npcb = tcp_alloc(pcb->prio);
donatien	0:b802fc31f1db	464	/* If a new PCB could not be created (probably due to lack of memory),
donatien	0:b802fc31f1db	465	we don't do anything, but rely on the sender will retransmit the
donatien	0:b802fc31f1db	466	SYN at a time when we have more memory available. */
donatien	0:b802fc31f1db	467	if (npcb == NULL) {
donatien	0:b802fc31f1db	468	LWIP_DEBUGF(TCP_DEBUG, ("tcp_listen_input: could not allocate PCB\n"));
donatien	0:b802fc31f1db	469	TCP_STATS_INC(tcp.memerr);
donatien	0:b802fc31f1db	470	return ERR_MEM;
donatien	0:b802fc31f1db	471	}
donatien	0:b802fc31f1db	472	#if TCP_LISTEN_BACKLOG
donatien	0:b802fc31f1db	473	pcb->accepts_pending++;
donatien	0:b802fc31f1db	474	#endif /* TCP_LISTEN_BACKLOG */
donatien	0:b802fc31f1db	475	/* Set up the new PCB. */
donatien	1:3a7c15057192	476	ip_addr_copy(npcb->local_ip, current_iphdr_dest);
donatien	0:b802fc31f1db	477	npcb->local_port = pcb->local_port;
donatien	1:3a7c15057192	478	ip_addr_copy(npcb->remote_ip, current_iphdr_src);
donatien	0:b802fc31f1db	479	npcb->remote_port = tcphdr->src;
donatien	0:b802fc31f1db	480	npcb->state = SYN_RCVD;
donatien	0:b802fc31f1db	481	npcb->rcv_nxt = seqno + 1;
donatien	0:b802fc31f1db	482	npcb->rcv_ann_right_edge = npcb->rcv_nxt;
donatien	0:b802fc31f1db	483	npcb->snd_wnd = tcphdr->wnd;
donatien	0:b802fc31f1db	484	npcb->ssthresh = npcb->snd_wnd;
donatien	0:b802fc31f1db	485	npcb->snd_wl1 = seqno - 1;/* initialise to seqno-1 to force window update */
donatien	0:b802fc31f1db	486	npcb->callback_arg = pcb->callback_arg;
donatien	0:b802fc31f1db	487	#if LWIP_CALLBACK_API
donatien	0:b802fc31f1db	488	npcb->accept = pcb->accept;
donatien	0:b802fc31f1db	489	#endif /* LWIP_CALLBACK_API */
donatien	0:b802fc31f1db	490	/* inherit socket options */
donatien	1:3a7c15057192	491	npcb->so_options = pcb->so_options & SOF_INHERITED;
donatien	0:b802fc31f1db	492	/* Register the new PCB so that we can begin receiving segments
donatien	0:b802fc31f1db	493	for it. */
donatien	0:b802fc31f1db	494	TCP_REG(&tcp_active_pcbs, npcb);
donatien	0:b802fc31f1db	495
donatien	0:b802fc31f1db	496	/* Parse any options in the SYN. */
donatien	0:b802fc31f1db	497	tcp_parseopt(npcb);
donatien	0:b802fc31f1db	498	#if TCP_CALCULATE_EFF_SEND_MSS
donatien	0:b802fc31f1db	499	npcb->mss = tcp_eff_send_mss(npcb->mss, &(npcb->remote_ip));
donatien	0:b802fc31f1db	500	#endif /* TCP_CALCULATE_EFF_SEND_MSS */
donatien	0:b802fc31f1db	501
donatien	0:b802fc31f1db	502	snmp_inc_tcppassiveopens();
donatien	0:b802fc31f1db	503
donatien	0:b802fc31f1db	504	/* Send a SYN\|ACK together with the MSS option. */
donatien	0:b802fc31f1db	505	rc = tcp_enqueue_flags(npcb, TCP_SYN \| TCP_ACK);
donatien	0:b802fc31f1db	506	if (rc != ERR_OK) {
donatien	0:b802fc31f1db	507	tcp_abandon(npcb, 0);
donatien	0:b802fc31f1db	508	return rc;
donatien	0:b802fc31f1db	509	}
donatien	0:b802fc31f1db	510	return tcp_output(npcb);
donatien	0:b802fc31f1db	511	}
donatien	0:b802fc31f1db	512	return ERR_OK;
donatien	0:b802fc31f1db	513	}
donatien	0:b802fc31f1db	514
donatien	0:b802fc31f1db	515	/**
donatien	0:b802fc31f1db	516	* Called by tcp_input() when a segment arrives for a connection in
donatien	0:b802fc31f1db	517	* TIME_WAIT.
donatien	0:b802fc31f1db	518	*
donatien	0:b802fc31f1db	519	* @param pcb the tcp_pcb for which a segment arrived
donatien	0:b802fc31f1db	520	*
donatien	0:b802fc31f1db	521	* @note the segment which arrived is saved in global variables, therefore only the pcb
donatien	0:b802fc31f1db	522	* involved is passed as a parameter to this function
donatien	0:b802fc31f1db	523	*/
donatien	0:b802fc31f1db	524	static err_t
donatien	0:b802fc31f1db	525	tcp_timewait_input(struct tcp_pcb *pcb)
donatien	0:b802fc31f1db	526	{
donatien	0:b802fc31f1db	527	/* RFC 1337: in TIME_WAIT, ignore RST and ACK FINs + any 'acceptable' segments */
donatien	0:b802fc31f1db	528	/* RFC 793 3.9 Event Processing - Segment Arrives:
donatien	0:b802fc31f1db	529	* - first check sequence number - we skip that one in TIME_WAIT (always
donatien	0:b802fc31f1db	530	* acceptable since we only send ACKs)
donatien	0:b802fc31f1db	531	* - second check the RST bit (... return) */
donatien	0:b802fc31f1db	532	if (flags & TCP_RST) {
donatien	0:b802fc31f1db	533	return ERR_OK;
donatien	0:b802fc31f1db	534	}
donatien	0:b802fc31f1db	535	/* - fourth, check the SYN bit, */
donatien	0:b802fc31f1db	536	if (flags & TCP_SYN) {
donatien	0:b802fc31f1db	537	/* If an incoming segment is not acceptable, an acknowledgment
donatien	0:b802fc31f1db	538	should be sent in reply */
donatien	0:b802fc31f1db	539	if (TCP_SEQ_BETWEEN(seqno, pcb->rcv_nxt, pcb->rcv_nxt+pcb->rcv_wnd)) {
donatien	0:b802fc31f1db	540	/* If the SYN is in the window it is an error, send a reset */
donatien	1:3a7c15057192	541	tcp_rst(ackno, seqno + tcplen, ip_current_dest_addr(), ip_current_src_addr(),
donatien	0:b802fc31f1db	542	tcphdr->dest, tcphdr->src);
donatien	0:b802fc31f1db	543	return ERR_OK;
donatien	0:b802fc31f1db	544	}
donatien	0:b802fc31f1db	545	} else if (flags & TCP_FIN) {
donatien	0:b802fc31f1db	546	/* - eighth, check the FIN bit: Remain in the TIME-WAIT state.
donatien	0:b802fc31f1db	547	Restart the 2 MSL time-wait timeout.*/
donatien	0:b802fc31f1db	548	pcb->tmr = tcp_ticks;
donatien	0:b802fc31f1db	549	}
donatien	0:b802fc31f1db	550
donatien	0:b802fc31f1db	551	if ((tcplen > 0)) {
donatien	0:b802fc31f1db	552	/* Acknowledge data, FIN or out-of-window SYN */
donatien	0:b802fc31f1db	553	pcb->flags \|= TF_ACK_NOW;
donatien	0:b802fc31f1db	554	return tcp_output(pcb);
donatien	0:b802fc31f1db	555	}
donatien	0:b802fc31f1db	556	return ERR_OK;
donatien	0:b802fc31f1db	557	}
donatien	0:b802fc31f1db	558
donatien	0:b802fc31f1db	559	/**
donatien	0:b802fc31f1db	560	* Implements the TCP state machine. Called by tcp_input. In some
donatien	0:b802fc31f1db	561	* states tcp_receive() is called to receive data. The tcp_seg
donatien	0:b802fc31f1db	562	* argument will be freed by the caller (tcp_input()) unless the
donatien	0:b802fc31f1db	563	* recv_data pointer in the pcb is set.
donatien	0:b802fc31f1db	564	*
donatien	0:b802fc31f1db	565	* @param pcb the tcp_pcb for which a segment arrived
donatien	0:b802fc31f1db	566	*
donatien	0:b802fc31f1db	567	* @note the segment which arrived is saved in global variables, therefore only the pcb
donatien	0:b802fc31f1db	568	* involved is passed as a parameter to this function
donatien	0:b802fc31f1db	569	*/
donatien	0:b802fc31f1db	570	static err_t
donatien	0:b802fc31f1db	571	tcp_process(struct tcp_pcb *pcb)
donatien	0:b802fc31f1db	572	{
donatien	0:b802fc31f1db	573	struct tcp_seg *rseg;
donatien	0:b802fc31f1db	574	u8_t acceptable = 0;
donatien	0:b802fc31f1db	575	err_t err;
donatien	0:b802fc31f1db	576
donatien	0:b802fc31f1db	577	err = ERR_OK;
donatien	0:b802fc31f1db	578
donatien	0:b802fc31f1db	579	/* Process incoming RST segments. */
donatien	0:b802fc31f1db	580	if (flags & TCP_RST) {
donatien	0:b802fc31f1db	581	/* First, determine if the reset is acceptable. */
donatien	0:b802fc31f1db	582	if (pcb->state == SYN_SENT) {
donatien	0:b802fc31f1db	583	if (ackno == pcb->snd_nxt) {
donatien	0:b802fc31f1db	584	acceptable = 1;
donatien	0:b802fc31f1db	585	}
donatien	0:b802fc31f1db	586	} else {
donatien	0:b802fc31f1db	587	if (TCP_SEQ_BETWEEN(seqno, pcb->rcv_nxt,
donatien	0:b802fc31f1db	588	pcb->rcv_nxt+pcb->rcv_wnd)) {
donatien	0:b802fc31f1db	589	acceptable = 1;
donatien	0:b802fc31f1db	590	}
donatien	0:b802fc31f1db	591	}
donatien	0:b802fc31f1db	592
donatien	0:b802fc31f1db	593	if (acceptable) {
donatien	0:b802fc31f1db	594	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_process: Connection RESET\n"));
donatien	0:b802fc31f1db	595	LWIP_ASSERT("tcp_input: pcb->state != CLOSED", pcb->state != CLOSED);
donatien	0:b802fc31f1db	596	recv_flags \|= TF_RESET;
donatien	0:b802fc31f1db	597	pcb->flags &= ~TF_ACK_DELAY;
donatien	0:b802fc31f1db	598	return ERR_RST;
donatien	0:b802fc31f1db	599	} else {
donatien	0:b802fc31f1db	600	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_process: unacceptable reset seqno %"U32_F" rcv_nxt %"U32_F"\n",
donatien	0:b802fc31f1db	601	seqno, pcb->rcv_nxt));
donatien	0:b802fc31f1db	602	LWIP_DEBUGF(TCP_DEBUG, ("tcp_process: unacceptable reset seqno %"U32_F" rcv_nxt %"U32_F"\n",
donatien	0:b802fc31f1db	603	seqno, pcb->rcv_nxt));
donatien	0:b802fc31f1db	604	return ERR_OK;
donatien	0:b802fc31f1db	605	}
donatien	0:b802fc31f1db	606	}
donatien	0:b802fc31f1db	607
donatien	0:b802fc31f1db	608	if ((flags & TCP_SYN) && (pcb->state != SYN_SENT && pcb->state != SYN_RCVD)) {
donatien	0:b802fc31f1db	609	/* Cope with new connection attempt after remote end crashed */
donatien	0:b802fc31f1db	610	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	611	return ERR_OK;
donatien	0:b802fc31f1db	612	}
donatien	0:b802fc31f1db	613
donatien	0:b802fc31f1db	614	if ((pcb->flags & TF_RXCLOSED) == 0) {
donatien	0:b802fc31f1db	615	/* Update the PCB (in)activity timer unless rx is closed (see tcp_shutdown) */
donatien	0:b802fc31f1db	616	pcb->tmr = tcp_ticks;
donatien	0:b802fc31f1db	617	}
donatien	0:b802fc31f1db	618	pcb->keep_cnt_sent = 0;
donatien	0:b802fc31f1db	619
donatien	0:b802fc31f1db	620	tcp_parseopt(pcb);
donatien	0:b802fc31f1db	621
donatien	0:b802fc31f1db	622	/* Do different things depending on the TCP state. */
donatien	0:b802fc31f1db	623	switch (pcb->state) {
donatien	0:b802fc31f1db	624	case SYN_SENT:
donatien	0:b802fc31f1db	625	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("SYN-SENT: ackno %"U32_F" pcb->snd_nxt %"U32_F" unacked %"U32_F"\n", ackno,
donatien	0:b802fc31f1db	626	pcb->snd_nxt, ntohl(pcb->unacked->tcphdr->seqno)));
donatien	0:b802fc31f1db	627	/* received SYN ACK with expected sequence number? */
donatien	0:b802fc31f1db	628	if ((flags & TCP_ACK) && (flags & TCP_SYN)
donatien	0:b802fc31f1db	629	&& ackno == ntohl(pcb->unacked->tcphdr->seqno) + 1) {
donatien	0:b802fc31f1db	630	pcb->snd_buf++;
donatien	0:b802fc31f1db	631	pcb->rcv_nxt = seqno + 1;
donatien	0:b802fc31f1db	632	pcb->rcv_ann_right_edge = pcb->rcv_nxt;
donatien	0:b802fc31f1db	633	pcb->lastack = ackno;
donatien	0:b802fc31f1db	634	pcb->snd_wnd = tcphdr->wnd;
donatien	0:b802fc31f1db	635	pcb->snd_wl1 = seqno - 1; /* initialise to seqno - 1 to force window update */
donatien	0:b802fc31f1db	636	pcb->state = ESTABLISHED;
donatien	0:b802fc31f1db	637
donatien	0:b802fc31f1db	638	#if TCP_CALCULATE_EFF_SEND_MSS
donatien	0:b802fc31f1db	639	pcb->mss = tcp_eff_send_mss(pcb->mss, &(pcb->remote_ip));
donatien	0:b802fc31f1db	640	#endif /* TCP_CALCULATE_EFF_SEND_MSS */
donatien	0:b802fc31f1db	641
donatien	0:b802fc31f1db	642	/* Set ssthresh again after changing pcb->mss (already set in tcp_connect
donatien	0:b802fc31f1db	643	* but for the default value of pcb->mss) */
donatien	0:b802fc31f1db	644	pcb->ssthresh = pcb->mss * 10;
donatien	0:b802fc31f1db	645
donatien	0:b802fc31f1db	646	pcb->cwnd = ((pcb->cwnd == 1) ? (pcb->mss * 2) : pcb->mss);
donatien	0:b802fc31f1db	647	LWIP_ASSERT("pcb->snd_queuelen > 0", (pcb->snd_queuelen > 0));
donatien	0:b802fc31f1db	648	--pcb->snd_queuelen;
donatien	0:b802fc31f1db	649	LWIP_DEBUGF(TCP_QLEN_DEBUG, ("tcp_process: SYN-SENT --queuelen %"U16_F"\n", (u16_t)pcb->snd_queuelen));
donatien	0:b802fc31f1db	650	rseg = pcb->unacked;
donatien	0:b802fc31f1db	651	pcb->unacked = rseg->next;
donatien	0:b802fc31f1db	652
donatien	0:b802fc31f1db	653	/* If there's nothing left to acknowledge, stop the retransmit
donatien	0:b802fc31f1db	654	timer, otherwise reset it to start again */
donatien	0:b802fc31f1db	655	if(pcb->unacked == NULL)
donatien	0:b802fc31f1db	656	pcb->rtime = -1;
donatien	0:b802fc31f1db	657	else {
donatien	0:b802fc31f1db	658	pcb->rtime = 0;
donatien	0:b802fc31f1db	659	pcb->nrtx = 0;
donatien	0:b802fc31f1db	660	}
donatien	0:b802fc31f1db	661
donatien	0:b802fc31f1db	662	tcp_seg_free(rseg);
donatien	0:b802fc31f1db	663
donatien	0:b802fc31f1db	664	/* Call the user specified function to call when sucessfully
donatien	0:b802fc31f1db	665	* connected. */
donatien	0:b802fc31f1db	666	TCP_EVENT_CONNECTED(pcb, ERR_OK, err);
donatien	0:b802fc31f1db	667	if (err == ERR_ABRT) {
donatien	0:b802fc31f1db	668	return ERR_ABRT;
donatien	0:b802fc31f1db	669	}
donatien	0:b802fc31f1db	670	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	671	}
donatien	0:b802fc31f1db	672	/* received ACK? possibly a half-open connection */
donatien	0:b802fc31f1db	673	else if (flags & TCP_ACK) {
donatien	0:b802fc31f1db	674	/* send a RST to bring the other side in a non-synchronized state. */
donatien	1:3a7c15057192	675	tcp_rst(ackno, seqno + tcplen, ip_current_dest_addr(), ip_current_src_addr(),
donatien	0:b802fc31f1db	676	tcphdr->dest, tcphdr->src);
donatien	0:b802fc31f1db	677	}
donatien	0:b802fc31f1db	678	break;
donatien	0:b802fc31f1db	679	case SYN_RCVD:
donatien	0:b802fc31f1db	680	if (flags & TCP_ACK) {
donatien	0:b802fc31f1db	681	/* expected ACK number? */
donatien	0:b802fc31f1db	682	if (TCP_SEQ_BETWEEN(ackno, pcb->lastack+1, pcb->snd_nxt)) {
donatien	0:b802fc31f1db	683	u16_t old_cwnd;
donatien	0:b802fc31f1db	684	pcb->state = ESTABLISHED;
donatien	0:b802fc31f1db	685	LWIP_DEBUGF(TCP_DEBUG, ("TCP connection established %"U16_F" -> %"U16_F".\n", inseg.tcphdr->src, inseg.tcphdr->dest));
donatien	0:b802fc31f1db	686	#if LWIP_CALLBACK_API
donatien	0:b802fc31f1db	687	LWIP_ASSERT("pcb->accept != NULL", pcb->accept != NULL);
donatien	0:b802fc31f1db	688	#endif
donatien	0:b802fc31f1db	689	/* Call the accept function. */
donatien	0:b802fc31f1db	690	TCP_EVENT_ACCEPT(pcb, ERR_OK, err);
donatien	0:b802fc31f1db	691	if (err != ERR_OK) {
donatien	0:b802fc31f1db	692	/* If the accept function returns with an error, we abort
donatien	0:b802fc31f1db	693	* the connection. */
donatien	0:b802fc31f1db	694	/* Already aborted? */
donatien	0:b802fc31f1db	695	if (err != ERR_ABRT) {
donatien	0:b802fc31f1db	696	tcp_abort(pcb);
donatien	0:b802fc31f1db	697	}
donatien	0:b802fc31f1db	698	return ERR_ABRT;
donatien	0:b802fc31f1db	699	}
donatien	0:b802fc31f1db	700	old_cwnd = pcb->cwnd;
donatien	0:b802fc31f1db	701	/* If there was any data contained within this ACK,
donatien	0:b802fc31f1db	702	* we'd better pass it on to the application as well. */
donatien	0:b802fc31f1db	703	tcp_receive(pcb);
donatien	0:b802fc31f1db	704
donatien	0:b802fc31f1db	705	/* Prevent ACK for SYN to generate a sent event */
donatien	0:b802fc31f1db	706	if (pcb->acked != 0) {
donatien	0:b802fc31f1db	707	pcb->acked--;
donatien	0:b802fc31f1db	708	}
donatien	0:b802fc31f1db	709
donatien	0:b802fc31f1db	710	pcb->cwnd = ((old_cwnd == 1) ? (pcb->mss * 2) : pcb->mss);
donatien	0:b802fc31f1db	711
donatien	0:b802fc31f1db	712	if (recv_flags & TF_GOT_FIN) {
donatien	0:b802fc31f1db	713	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	714	pcb->state = CLOSE_WAIT;
donatien	0:b802fc31f1db	715	}
donatien	0:b802fc31f1db	716	} else {
donatien	0:b802fc31f1db	717	/* incorrect ACK number, send RST */
donatien	1:3a7c15057192	718	tcp_rst(ackno, seqno + tcplen, ip_current_dest_addr(), ip_current_src_addr(),
donatien	0:b802fc31f1db	719	tcphdr->dest, tcphdr->src);
donatien	0:b802fc31f1db	720	}
donatien	0:b802fc31f1db	721	} else if ((flags & TCP_SYN) && (seqno == pcb->rcv_nxt - 1)) {
donatien	0:b802fc31f1db	722	/* Looks like another copy of the SYN - retransmit our SYN-ACK */
donatien	0:b802fc31f1db	723	tcp_rexmit(pcb);
donatien	0:b802fc31f1db	724	}
donatien	0:b802fc31f1db	725	break;
donatien	0:b802fc31f1db	726	case CLOSE_WAIT:
donatien	0:b802fc31f1db	727	/* FALLTHROUGH */
donatien	0:b802fc31f1db	728	case ESTABLISHED:
donatien	0:b802fc31f1db	729	tcp_receive(pcb);
donatien	0:b802fc31f1db	730	if (recv_flags & TF_GOT_FIN) { /* passive close */
donatien	0:b802fc31f1db	731	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	732	pcb->state = CLOSE_WAIT;
donatien	0:b802fc31f1db	733	}
donatien	0:b802fc31f1db	734	break;
donatien	0:b802fc31f1db	735	case FIN_WAIT_1:
donatien	0:b802fc31f1db	736	tcp_receive(pcb);
donatien	0:b802fc31f1db	737	if (recv_flags & TF_GOT_FIN) {
donatien	0:b802fc31f1db	738	if ((flags & TCP_ACK) && (ackno == pcb->snd_nxt)) {
donatien	0:b802fc31f1db	739	LWIP_DEBUGF(TCP_DEBUG,
donatien	0:b802fc31f1db	740	("TCP connection closed: FIN_WAIT_1 %"U16_F" -> %"U16_F".\n", inseg.tcphdr->src, inseg.tcphdr->dest));
donatien	0:b802fc31f1db	741	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	742	tcp_pcb_purge(pcb);
donatien	0:b802fc31f1db	743	TCP_RMV(&tcp_active_pcbs, pcb);
donatien	0:b802fc31f1db	744	pcb->state = TIME_WAIT;
donatien	0:b802fc31f1db	745	TCP_REG(&tcp_tw_pcbs, pcb);
donatien	0:b802fc31f1db	746	} else {
donatien	0:b802fc31f1db	747	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	748	pcb->state = CLOSING;
donatien	0:b802fc31f1db	749	}
donatien	0:b802fc31f1db	750	} else if ((flags & TCP_ACK) && (ackno == pcb->snd_nxt)) {
donatien	0:b802fc31f1db	751	pcb->state = FIN_WAIT_2;
donatien	0:b802fc31f1db	752	}
donatien	0:b802fc31f1db	753	break;
donatien	0:b802fc31f1db	754	case FIN_WAIT_2:
donatien	0:b802fc31f1db	755	tcp_receive(pcb);
donatien	0:b802fc31f1db	756	if (recv_flags & TF_GOT_FIN) {
donatien	0:b802fc31f1db	757	LWIP_DEBUGF(TCP_DEBUG, ("TCP connection closed: FIN_WAIT_2 %"U16_F" -> %"U16_F".\n", inseg.tcphdr->src, inseg.tcphdr->dest));
donatien	0:b802fc31f1db	758	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	759	tcp_pcb_purge(pcb);
donatien	0:b802fc31f1db	760	TCP_RMV(&tcp_active_pcbs, pcb);
donatien	0:b802fc31f1db	761	pcb->state = TIME_WAIT;
donatien	0:b802fc31f1db	762	TCP_REG(&tcp_tw_pcbs, pcb);
donatien	0:b802fc31f1db	763	}
donatien	0:b802fc31f1db	764	break;
donatien	0:b802fc31f1db	765	case CLOSING:
donatien	0:b802fc31f1db	766	tcp_receive(pcb);
donatien	0:b802fc31f1db	767	if (flags & TCP_ACK && ackno == pcb->snd_nxt) {
donatien	0:b802fc31f1db	768	LWIP_DEBUGF(TCP_DEBUG, ("TCP connection closed: CLOSING %"U16_F" -> %"U16_F".\n", inseg.tcphdr->src, inseg.tcphdr->dest));
donatien	0:b802fc31f1db	769	tcp_pcb_purge(pcb);
donatien	0:b802fc31f1db	770	TCP_RMV(&tcp_active_pcbs, pcb);
donatien	0:b802fc31f1db	771	pcb->state = TIME_WAIT;
donatien	0:b802fc31f1db	772	TCP_REG(&tcp_tw_pcbs, pcb);
donatien	0:b802fc31f1db	773	}
donatien	0:b802fc31f1db	774	break;
donatien	0:b802fc31f1db	775	case LAST_ACK:
donatien	0:b802fc31f1db	776	tcp_receive(pcb);
donatien	0:b802fc31f1db	777	if (flags & TCP_ACK && ackno == pcb->snd_nxt) {
donatien	0:b802fc31f1db	778	LWIP_DEBUGF(TCP_DEBUG, ("TCP connection closed: LAST_ACK %"U16_F" -> %"U16_F".\n", inseg.tcphdr->src, inseg.tcphdr->dest));
donatien	0:b802fc31f1db	779	/* bugfix #21699: don't set pcb->state to CLOSED here or we risk leaking segments */
donatien	0:b802fc31f1db	780	recv_flags \|= TF_CLOSED;
donatien	0:b802fc31f1db	781	}
donatien	0:b802fc31f1db	782	break;
donatien	0:b802fc31f1db	783	default:
donatien	0:b802fc31f1db	784	break;
donatien	0:b802fc31f1db	785	}
donatien	0:b802fc31f1db	786	return ERR_OK;
donatien	0:b802fc31f1db	787	}
donatien	0:b802fc31f1db	788
donatien	0:b802fc31f1db	789	#if TCP_QUEUE_OOSEQ
donatien	0:b802fc31f1db	790	/**
donatien	0:b802fc31f1db	791	* Insert segment into the list (segments covered with new one will be deleted)
donatien	0:b802fc31f1db	792	*
donatien	0:b802fc31f1db	793	* Called from tcp_receive()
donatien	0:b802fc31f1db	794	*/
donatien	0:b802fc31f1db	795	static void
donatien	0:b802fc31f1db	796	tcp_oos_insert_segment(struct tcp_seg cseg, struct tcp_seg next)
donatien	0:b802fc31f1db	797	{
donatien	0:b802fc31f1db	798	struct tcp_seg *old_seg;
donatien	0:b802fc31f1db	799
donatien	0:b802fc31f1db	800	if (TCPH_FLAGS(cseg->tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	801	/* received segment overlaps all following segments */
donatien	0:b802fc31f1db	802	tcp_segs_free(next);
donatien	0:b802fc31f1db	803	next = NULL;
donatien	0:b802fc31f1db	804	}
donatien	0:b802fc31f1db	805	else {
donatien	0:b802fc31f1db	806	/* delete some following segments
donatien	0:b802fc31f1db	807	oos queue may have segments with FIN flag */
donatien	0:b802fc31f1db	808	while (next &&
donatien	0:b802fc31f1db	809	TCP_SEQ_GEQ((seqno + cseg->len),
donatien	0:b802fc31f1db	810	(next->tcphdr->seqno + next->len))) {
donatien	0:b802fc31f1db	811	/* cseg with FIN already processed */
donatien	0:b802fc31f1db	812	if (TCPH_FLAGS(next->tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	813	TCPH_SET_FLAG(cseg->tcphdr, TCP_FIN);
donatien	0:b802fc31f1db	814	}
donatien	0:b802fc31f1db	815	old_seg = next;
donatien	0:b802fc31f1db	816	next = next->next;
donatien	0:b802fc31f1db	817	tcp_seg_free(old_seg);
donatien	0:b802fc31f1db	818	}
donatien	0:b802fc31f1db	819	if (next &&
donatien	0:b802fc31f1db	820	TCP_SEQ_GT(seqno + cseg->len, next->tcphdr->seqno)) {
donatien	0:b802fc31f1db	821	/* We need to trim the incoming segment. */
donatien	0:b802fc31f1db	822	cseg->len = (u16_t)(next->tcphdr->seqno - seqno);
donatien	0:b802fc31f1db	823	pbuf_realloc(cseg->p, cseg->len);
donatien	0:b802fc31f1db	824	}
donatien	0:b802fc31f1db	825	}
donatien	0:b802fc31f1db	826	cseg->next = next;
donatien	0:b802fc31f1db	827	}
donatien	0:b802fc31f1db	828	#endif /* TCP_QUEUE_OOSEQ */
donatien	0:b802fc31f1db	829
donatien	0:b802fc31f1db	830	/**
donatien	0:b802fc31f1db	831	* Called by tcp_process. Checks if the given segment is an ACK for outstanding
donatien	0:b802fc31f1db	832	* data, and if so frees the memory of the buffered data. Next, is places the
donatien	0:b802fc31f1db	833	* segment on any of the receive queues (pcb->recved or pcb->ooseq). If the segment
donatien	0:b802fc31f1db	834	* is buffered, the pbuf is referenced by pbuf_ref so that it will not be freed until
donatien	0:b802fc31f1db	835	* i it has been removed from the buffer.
donatien	0:b802fc31f1db	836	*
donatien	0:b802fc31f1db	837	* If the incoming segment constitutes an ACK for a segment that was used for RTT
donatien	0:b802fc31f1db	838	* estimation, the RTT is estimated here as well.
donatien	0:b802fc31f1db	839	*
donatien	0:b802fc31f1db	840	* Called from tcp_process().
donatien	0:b802fc31f1db	841	*/
donatien	0:b802fc31f1db	842	static void
donatien	0:b802fc31f1db	843	tcp_receive(struct tcp_pcb *pcb)
donatien	0:b802fc31f1db	844	{
donatien	0:b802fc31f1db	845	struct tcp_seg *next;
donatien	0:b802fc31f1db	846	#if TCP_QUEUE_OOSEQ
donatien	0:b802fc31f1db	847	struct tcp_seg prev, cseg;
donatien	0:b802fc31f1db	848	#endif /* TCP_QUEUE_OOSEQ */
donatien	0:b802fc31f1db	849	struct pbuf *p;
donatien	0:b802fc31f1db	850	s32_t off;
donatien	0:b802fc31f1db	851	s16_t m;
donatien	0:b802fc31f1db	852	u32_t right_wnd_edge;
donatien	0:b802fc31f1db	853	u16_t new_tot_len;
donatien	0:b802fc31f1db	854	int found_dupack = 0;
donatien	0:b802fc31f1db	855
donatien	0:b802fc31f1db	856	if (flags & TCP_ACK) {
donatien	0:b802fc31f1db	857	right_wnd_edge = pcb->snd_wnd + pcb->snd_wl2;
donatien	0:b802fc31f1db	858
donatien	0:b802fc31f1db	859	/* Update window. */
donatien	0:b802fc31f1db	860	if (TCP_SEQ_LT(pcb->snd_wl1, seqno) \|\|
donatien	0:b802fc31f1db	861	(pcb->snd_wl1 == seqno && TCP_SEQ_LT(pcb->snd_wl2, ackno)) \|\|
donatien	0:b802fc31f1db	862	(pcb->snd_wl2 == ackno && tcphdr->wnd > pcb->snd_wnd)) {
donatien	0:b802fc31f1db	863	pcb->snd_wnd = tcphdr->wnd;
donatien	0:b802fc31f1db	864	pcb->snd_wl1 = seqno;
donatien	0:b802fc31f1db	865	pcb->snd_wl2 = ackno;
donatien	0:b802fc31f1db	866	if (pcb->snd_wnd > 0 && pcb->persist_backoff > 0) {
donatien	0:b802fc31f1db	867	pcb->persist_backoff = 0;
donatien	0:b802fc31f1db	868	}
donatien	0:b802fc31f1db	869	LWIP_DEBUGF(TCP_WND_DEBUG, ("tcp_receive: window update %"U16_F"\n", pcb->snd_wnd));
donatien	0:b802fc31f1db	870	#if TCP_WND_DEBUG
donatien	0:b802fc31f1db	871	} else {
donatien	0:b802fc31f1db	872	if (pcb->snd_wnd != tcphdr->wnd) {
donatien	0:b802fc31f1db	873	LWIP_DEBUGF(TCP_WND_DEBUG,
donatien	0:b802fc31f1db	874	("tcp_receive: no window update lastack %"U32_F" ackno %"
donatien	0:b802fc31f1db	875	U32_F" wl1 %"U32_F" seqno %"U32_F" wl2 %"U32_F"\n",
donatien	0:b802fc31f1db	876	pcb->lastack, ackno, pcb->snd_wl1, seqno, pcb->snd_wl2));
donatien	0:b802fc31f1db	877	}
donatien	0:b802fc31f1db	878	#endif /* TCP_WND_DEBUG */
donatien	0:b802fc31f1db	879	}
donatien	0:b802fc31f1db	880
donatien	0:b802fc31f1db	881	/* (From Stevens TCP/IP Illustrated Vol II, p970.) Its only a
donatien	0:b802fc31f1db	882	* duplicate ack if:
donatien	0:b802fc31f1db	883	* 1) It doesn't ACK new data
donatien	0:b802fc31f1db	884	* 2) length of received packet is zero (i.e. no payload)
donatien	0:b802fc31f1db	885	* 3) the advertised window hasn't changed
donatien	0:b802fc31f1db	886	* 4) There is outstanding unacknowledged data (retransmission timer running)
donatien	0:b802fc31f1db	887	* 5) The ACK is == biggest ACK sequence number so far seen (snd_una)
donatien	0:b802fc31f1db	888	*
donatien	0:b802fc31f1db	889	* If it passes all five, should process as a dupack:
donatien	0:b802fc31f1db	890	* a) dupacks < 3: do nothing
donatien	0:b802fc31f1db	891	* b) dupacks == 3: fast retransmit
donatien	0:b802fc31f1db	892	* c) dupacks > 3: increase cwnd
donatien	0:b802fc31f1db	893	*
donatien	0:b802fc31f1db	894	* If it only passes 1-3, should reset dupack counter (and add to
donatien	0:b802fc31f1db	895	* stats, which we don't do in lwIP)
donatien	0:b802fc31f1db	896	*
donatien	0:b802fc31f1db	897	* If it only passes 1, should reset dupack counter
donatien	0:b802fc31f1db	898	*
donatien	0:b802fc31f1db	899	*/
donatien	0:b802fc31f1db	900
donatien	0:b802fc31f1db	901	/* Clause 1 */
donatien	0:b802fc31f1db	902	if (TCP_SEQ_LEQ(ackno, pcb->lastack)) {
donatien	0:b802fc31f1db	903	pcb->acked = 0;
donatien	0:b802fc31f1db	904	/* Clause 2 */
donatien	0:b802fc31f1db	905	if (tcplen == 0) {
donatien	0:b802fc31f1db	906	/* Clause 3 */
donatien	0:b802fc31f1db	907	if (pcb->snd_wl2 + pcb->snd_wnd == right_wnd_edge){
donatien	0:b802fc31f1db	908	/* Clause 4 */
donatien	0:b802fc31f1db	909	if (pcb->rtime >= 0) {
donatien	0:b802fc31f1db	910	/* Clause 5 */
donatien	0:b802fc31f1db	911	if (pcb->lastack == ackno) {
donatien	0:b802fc31f1db	912	found_dupack = 1;
donatien	0:b802fc31f1db	913	if (pcb->dupacks + 1 > pcb->dupacks)
donatien	0:b802fc31f1db	914	++pcb->dupacks;
donatien	0:b802fc31f1db	915	if (pcb->dupacks > 3) {
donatien	0:b802fc31f1db	916	/* Inflate the congestion window, but not if it means that
donatien	0:b802fc31f1db	917	the value overflows. */
donatien	0:b802fc31f1db	918	if ((u16_t)(pcb->cwnd + pcb->mss) > pcb->cwnd) {
donatien	0:b802fc31f1db	919	pcb->cwnd += pcb->mss;
donatien	0:b802fc31f1db	920	}
donatien	0:b802fc31f1db	921	} else if (pcb->dupacks == 3) {
donatien	0:b802fc31f1db	922	/* Do fast retransmit */
donatien	0:b802fc31f1db	923	tcp_rexmit_fast(pcb);
donatien	0:b802fc31f1db	924	}
donatien	0:b802fc31f1db	925	}
donatien	0:b802fc31f1db	926	}
donatien	0:b802fc31f1db	927	}
donatien	0:b802fc31f1db	928	}
donatien	0:b802fc31f1db	929	/* If Clause (1) or more is true, but not a duplicate ack, reset
donatien	0:b802fc31f1db	930	* count of consecutive duplicate acks */
donatien	0:b802fc31f1db	931	if (!found_dupack) {
donatien	0:b802fc31f1db	932	pcb->dupacks = 0;
donatien	0:b802fc31f1db	933	}
donatien	0:b802fc31f1db	934	} else if (TCP_SEQ_BETWEEN(ackno, pcb->lastack+1, pcb->snd_nxt)){
donatien	0:b802fc31f1db	935	/* We come here when the ACK acknowledges new data. */
donatien	0:b802fc31f1db	936
donatien	0:b802fc31f1db	937	/* Reset the "IN Fast Retransmit" flag, since we are no longer
donatien	0:b802fc31f1db	938	in fast retransmit. Also reset the congestion window to the
donatien	0:b802fc31f1db	939	slow start threshold. */
donatien	0:b802fc31f1db	940	if (pcb->flags & TF_INFR) {
donatien	0:b802fc31f1db	941	pcb->flags &= ~TF_INFR;
donatien	0:b802fc31f1db	942	pcb->cwnd = pcb->ssthresh;
donatien	0:b802fc31f1db	943	}
donatien	0:b802fc31f1db	944
donatien	0:b802fc31f1db	945	/* Reset the number of retransmissions. */
donatien	0:b802fc31f1db	946	pcb->nrtx = 0;
donatien	0:b802fc31f1db	947
donatien	0:b802fc31f1db	948	/* Reset the retransmission time-out. */
donatien	0:b802fc31f1db	949	pcb->rto = (pcb->sa >> 3) + pcb->sv;
donatien	0:b802fc31f1db	950
donatien	0:b802fc31f1db	951	/* Update the send buffer space. Diff between the two can never exceed 64K? */
donatien	0:b802fc31f1db	952	pcb->acked = (u16_t)(ackno - pcb->lastack);
donatien	0:b802fc31f1db	953
donatien	0:b802fc31f1db	954	pcb->snd_buf += pcb->acked;
donatien	0:b802fc31f1db	955
donatien	0:b802fc31f1db	956	/* Reset the fast retransmit variables. */
donatien	0:b802fc31f1db	957	pcb->dupacks = 0;
donatien	0:b802fc31f1db	958	pcb->lastack = ackno;
donatien	0:b802fc31f1db	959
donatien	0:b802fc31f1db	960	/* Update the congestion control variables (cwnd and
donatien	0:b802fc31f1db	961	ssthresh). */
donatien	0:b802fc31f1db	962	if (pcb->state >= ESTABLISHED) {
donatien	0:b802fc31f1db	963	if (pcb->cwnd < pcb->ssthresh) {
donatien	0:b802fc31f1db	964	if ((u16_t)(pcb->cwnd + pcb->mss) > pcb->cwnd) {
donatien	0:b802fc31f1db	965	pcb->cwnd += pcb->mss;
donatien	0:b802fc31f1db	966	}
donatien	0:b802fc31f1db	967	LWIP_DEBUGF(TCP_CWND_DEBUG, ("tcp_receive: slow start cwnd %"U16_F"\n", pcb->cwnd));
donatien	0:b802fc31f1db	968	} else {
donatien	0:b802fc31f1db	969	u16_t new_cwnd = (pcb->cwnd + pcb->mss * pcb->mss / pcb->cwnd);
donatien	0:b802fc31f1db	970	if (new_cwnd > pcb->cwnd) {
donatien	0:b802fc31f1db	971	pcb->cwnd = new_cwnd;
donatien	0:b802fc31f1db	972	}
donatien	0:b802fc31f1db	973	LWIP_DEBUGF(TCP_CWND_DEBUG, ("tcp_receive: congestion avoidance cwnd %"U16_F"\n", pcb->cwnd));
donatien	0:b802fc31f1db	974	}
donatien	0:b802fc31f1db	975	}
donatien	0:b802fc31f1db	976	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: ACK for %"U32_F", unacked->seqno %"U32_F":%"U32_F"\n",
donatien	0:b802fc31f1db	977	ackno,
donatien	0:b802fc31f1db	978	pcb->unacked != NULL?
donatien	0:b802fc31f1db	979	ntohl(pcb->unacked->tcphdr->seqno): 0,
donatien	0:b802fc31f1db	980	pcb->unacked != NULL?
donatien	0:b802fc31f1db	981	ntohl(pcb->unacked->tcphdr->seqno) + TCP_TCPLEN(pcb->unacked): 0));
donatien	0:b802fc31f1db	982
donatien	0:b802fc31f1db	983	/* Remove segment from the unacknowledged list if the incoming
donatien	0:b802fc31f1db	984	ACK acknowlegdes them. */
donatien	0:b802fc31f1db	985	while (pcb->unacked != NULL &&
donatien	0:b802fc31f1db	986	TCP_SEQ_LEQ(ntohl(pcb->unacked->tcphdr->seqno) +
donatien	0:b802fc31f1db	987	TCP_TCPLEN(pcb->unacked), ackno)) {
donatien	0:b802fc31f1db	988	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: removing %"U32_F":%"U32_F" from pcb->unacked\n",
donatien	0:b802fc31f1db	989	ntohl(pcb->unacked->tcphdr->seqno),
donatien	0:b802fc31f1db	990	ntohl(pcb->unacked->tcphdr->seqno) +
donatien	0:b802fc31f1db	991	TCP_TCPLEN(pcb->unacked)));
donatien	0:b802fc31f1db	992
donatien	0:b802fc31f1db	993	next = pcb->unacked;
donatien	0:b802fc31f1db	994	pcb->unacked = pcb->unacked->next;
donatien	0:b802fc31f1db	995
donatien	0:b802fc31f1db	996	LWIP_DEBUGF(TCP_QLEN_DEBUG, ("tcp_receive: queuelen %"U16_F" ... ", (u16_t)pcb->snd_queuelen));
donatien	0:b802fc31f1db	997	LWIP_ASSERT("pcb->snd_queuelen >= pbuf_clen(next->p)", (pcb->snd_queuelen >= pbuf_clen(next->p)));
donatien	0:b802fc31f1db	998	/* Prevent ACK for FIN to generate a sent event */
donatien	0:b802fc31f1db	999	if ((pcb->acked != 0) && ((TCPH_FLAGS(next->tcphdr) & TCP_FIN) != 0)) {
donatien	0:b802fc31f1db	1000	pcb->acked--;
donatien	0:b802fc31f1db	1001	}
donatien	0:b802fc31f1db	1002
donatien	0:b802fc31f1db	1003	pcb->snd_queuelen -= pbuf_clen(next->p);
donatien	0:b802fc31f1db	1004	tcp_seg_free(next);
donatien	0:b802fc31f1db	1005
donatien	0:b802fc31f1db	1006	LWIP_DEBUGF(TCP_QLEN_DEBUG, ("%"U16_F" (after freeing unacked)\n", (u16_t)pcb->snd_queuelen));
donatien	0:b802fc31f1db	1007	if (pcb->snd_queuelen != 0) {
donatien	0:b802fc31f1db	1008	LWIP_ASSERT("tcp_receive: valid queue length", pcb->unacked != NULL \|\|
donatien	0:b802fc31f1db	1009	pcb->unsent != NULL);
donatien	0:b802fc31f1db	1010	}
donatien	0:b802fc31f1db	1011	}
donatien	0:b802fc31f1db	1012
donatien	0:b802fc31f1db	1013	/* If there's nothing left to acknowledge, stop the retransmit
donatien	0:b802fc31f1db	1014	timer, otherwise reset it to start again */
donatien	0:b802fc31f1db	1015	if(pcb->unacked == NULL)
donatien	0:b802fc31f1db	1016	pcb->rtime = -1;
donatien	0:b802fc31f1db	1017	else
donatien	0:b802fc31f1db	1018	pcb->rtime = 0;
donatien	0:b802fc31f1db	1019
donatien	0:b802fc31f1db	1020	pcb->polltmr = 0;
donatien	0:b802fc31f1db	1021	} else {
donatien	0:b802fc31f1db	1022	/* Fix bug bug #21582: out of sequence ACK, didn't really ack anything */
donatien	0:b802fc31f1db	1023	pcb->acked = 0;
donatien	0:b802fc31f1db	1024	}
donatien	0:b802fc31f1db	1025
donatien	0:b802fc31f1db	1026	/* We go through the ->unsent list to see if any of the segments
donatien	0:b802fc31f1db	1027	on the list are acknowledged by the ACK. This may seem
donatien	0:b802fc31f1db	1028	strange since an "unsent" segment shouldn't be acked. The
donatien	0:b802fc31f1db	1029	rationale is that lwIP puts all outstanding segments on the
donatien	0:b802fc31f1db	1030	->unsent list after a retransmission, so these segments may
donatien	0:b802fc31f1db	1031	in fact have been sent once. */
donatien	0:b802fc31f1db	1032	while (pcb->unsent != NULL &&
donatien	0:b802fc31f1db	1033	TCP_SEQ_BETWEEN(ackno, ntohl(pcb->unsent->tcphdr->seqno) +
donatien	0:b802fc31f1db	1034	TCP_TCPLEN(pcb->unsent), pcb->snd_nxt)) {
donatien	0:b802fc31f1db	1035	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: removing %"U32_F":%"U32_F" from pcb->unsent\n",
donatien	0:b802fc31f1db	1036	ntohl(pcb->unsent->tcphdr->seqno), ntohl(pcb->unsent->tcphdr->seqno) +
donatien	0:b802fc31f1db	1037	TCP_TCPLEN(pcb->unsent)));
donatien	0:b802fc31f1db	1038
donatien	0:b802fc31f1db	1039	next = pcb->unsent;
donatien	0:b802fc31f1db	1040	pcb->unsent = pcb->unsent->next;
donatien	0:b802fc31f1db	1041	LWIP_DEBUGF(TCP_QLEN_DEBUG, ("tcp_receive: queuelen %"U16_F" ... ", (u16_t)pcb->snd_queuelen));
donatien	0:b802fc31f1db	1042	LWIP_ASSERT("pcb->snd_queuelen >= pbuf_clen(next->p)", (pcb->snd_queuelen >= pbuf_clen(next->p)));
donatien	0:b802fc31f1db	1043	/* Prevent ACK for FIN to generate a sent event */
donatien	0:b802fc31f1db	1044	if ((pcb->acked != 0) && ((TCPH_FLAGS(next->tcphdr) & TCP_FIN) != 0)) {
donatien	0:b802fc31f1db	1045	pcb->acked--;
donatien	0:b802fc31f1db	1046	}
donatien	0:b802fc31f1db	1047	pcb->snd_queuelen -= pbuf_clen(next->p);
donatien	0:b802fc31f1db	1048	tcp_seg_free(next);
donatien	0:b802fc31f1db	1049	LWIP_DEBUGF(TCP_QLEN_DEBUG, ("%"U16_F" (after freeing unsent)\n", (u16_t)pcb->snd_queuelen));
donatien	0:b802fc31f1db	1050	if (pcb->snd_queuelen != 0) {
donatien	0:b802fc31f1db	1051	LWIP_ASSERT("tcp_receive: valid queue length",
donatien	0:b802fc31f1db	1052	pcb->unacked != NULL \|\| pcb->unsent != NULL);
donatien	0:b802fc31f1db	1053	}
donatien	0:b802fc31f1db	1054	}
donatien	0:b802fc31f1db	1055	/* End of ACK for new data processing. */
donatien	0:b802fc31f1db	1056
donatien	0:b802fc31f1db	1057	LWIP_DEBUGF(TCP_RTO_DEBUG, ("tcp_receive: pcb->rttest %"U32_F" rtseq %"U32_F" ackno %"U32_F"\n",
donatien	0:b802fc31f1db	1058	pcb->rttest, pcb->rtseq, ackno));
donatien	0:b802fc31f1db	1059
donatien	0:b802fc31f1db	1060	/* RTT estimation calculations. This is done by checking if the
donatien	0:b802fc31f1db	1061	incoming segment acknowledges the segment we use to take a
donatien	0:b802fc31f1db	1062	round-trip time measurement. */
donatien	0:b802fc31f1db	1063	if (pcb->rttest && TCP_SEQ_LT(pcb->rtseq, ackno)) {
donatien	0:b802fc31f1db	1064	/* diff between this shouldn't exceed 32K since this are tcp timer ticks
donatien	0:b802fc31f1db	1065	and a round-trip shouldn't be that long... */
donatien	0:b802fc31f1db	1066	m = (s16_t)(tcp_ticks - pcb->rttest);
donatien	0:b802fc31f1db	1067
donatien	0:b802fc31f1db	1068	LWIP_DEBUGF(TCP_RTO_DEBUG, ("tcp_receive: experienced rtt %"U16_F" ticks (%"U16_F" msec).\n",
donatien	0:b802fc31f1db	1069	m, m * TCP_SLOW_INTERVAL));
donatien	0:b802fc31f1db	1070
donatien	0:b802fc31f1db	1071	/* This is taken directly from VJs original code in his paper */
donatien	0:b802fc31f1db	1072	m = m - (pcb->sa >> 3);
donatien	0:b802fc31f1db	1073	pcb->sa += m;
donatien	0:b802fc31f1db	1074	if (m < 0) {
donatien	0:b802fc31f1db	1075	m = -m;
donatien	0:b802fc31f1db	1076	}
donatien	0:b802fc31f1db	1077	m = m - (pcb->sv >> 2);
donatien	0:b802fc31f1db	1078	pcb->sv += m;
donatien	0:b802fc31f1db	1079	pcb->rto = (pcb->sa >> 3) + pcb->sv;
donatien	0:b802fc31f1db	1080
donatien	0:b802fc31f1db	1081	LWIP_DEBUGF(TCP_RTO_DEBUG, ("tcp_receive: RTO %"U16_F" (%"U16_F" milliseconds)\n",
donatien	0:b802fc31f1db	1082	pcb->rto, pcb->rto * TCP_SLOW_INTERVAL));
donatien	0:b802fc31f1db	1083
donatien	0:b802fc31f1db	1084	pcb->rttest = 0;
donatien	0:b802fc31f1db	1085	}
donatien	0:b802fc31f1db	1086	}
donatien	0:b802fc31f1db	1087
donatien	0:b802fc31f1db	1088	/* If the incoming segment contains data, we must process it
donatien	0:b802fc31f1db	1089	further. */
donatien	0:b802fc31f1db	1090	if (tcplen > 0) {
donatien	0:b802fc31f1db	1091	/* This code basically does three things:
donatien	0:b802fc31f1db	1092
donatien	0:b802fc31f1db	1093	+) If the incoming segment contains data that is the next
donatien	0:b802fc31f1db	1094	in-sequence data, this data is passed to the application. This
donatien	0:b802fc31f1db	1095	might involve trimming the first edge of the data. The rcv_nxt
donatien	0:b802fc31f1db	1096	variable and the advertised window are adjusted.
donatien	0:b802fc31f1db	1097
donatien	0:b802fc31f1db	1098	+) If the incoming segment has data that is above the next
donatien	0:b802fc31f1db	1099	sequence number expected (->rcv_nxt), the segment is placed on
donatien	0:b802fc31f1db	1100	the ->ooseq queue. This is done by finding the appropriate
donatien	0:b802fc31f1db	1101	place in the ->ooseq queue (which is ordered by sequence
donatien	0:b802fc31f1db	1102	number) and trim the segment in both ends if needed. An
donatien	0:b802fc31f1db	1103	immediate ACK is sent to indicate that we received an
donatien	0:b802fc31f1db	1104	out-of-sequence segment.
donatien	0:b802fc31f1db	1105
donatien	0:b802fc31f1db	1106	+) Finally, we check if the first segment on the ->ooseq queue
donatien	0:b802fc31f1db	1107	now is in sequence (i.e., if rcv_nxt >= ooseq->seqno). If
donatien	0:b802fc31f1db	1108	rcv_nxt > ooseq->seqno, we must trim the first edge of the
donatien	0:b802fc31f1db	1109	segment on ->ooseq before we adjust rcv_nxt. The data in the
donatien	0:b802fc31f1db	1110	segments that are now on sequence are chained onto the
donatien	0:b802fc31f1db	1111	incoming segment so that we only need to call the application
donatien	0:b802fc31f1db	1112	once.
donatien	0:b802fc31f1db	1113	*/
donatien	0:b802fc31f1db	1114
donatien	0:b802fc31f1db	1115	/* First, we check if we must trim the first edge. We have to do
donatien	0:b802fc31f1db	1116	this if the sequence number of the incoming segment is less
donatien	0:b802fc31f1db	1117	than rcv_nxt, and the sequence number plus the length of the
donatien	0:b802fc31f1db	1118	segment is larger than rcv_nxt. */
donatien	0:b802fc31f1db	1119	/* if (TCP_SEQ_LT(seqno, pcb->rcv_nxt)){
donatien	0:b802fc31f1db	1120	if (TCP_SEQ_LT(pcb->rcv_nxt, seqno + tcplen)) {*/
donatien	0:b802fc31f1db	1121	if (TCP_SEQ_BETWEEN(pcb->rcv_nxt, seqno + 1, seqno + tcplen - 1)){
donatien	0:b802fc31f1db	1122	/* Trimming the first edge is done by pushing the payload
donatien	0:b802fc31f1db	1123	pointer in the pbuf downwards. This is somewhat tricky since
donatien	0:b802fc31f1db	1124	we do not want to discard the full contents of the pbuf up to
donatien	0:b802fc31f1db	1125	the new starting point of the data since we have to keep the
donatien	0:b802fc31f1db	1126	TCP header which is present in the first pbuf in the chain.
donatien	0:b802fc31f1db	1127
donatien	0:b802fc31f1db	1128	What is done is really quite a nasty hack: the first pbuf in
donatien	0:b802fc31f1db	1129	the pbuf chain is pointed to by inseg.p. Since we need to be
donatien	0:b802fc31f1db	1130	able to deallocate the whole pbuf, we cannot change this
donatien	0:b802fc31f1db	1131	inseg.p pointer to point to any of the later pbufs in the
donatien	0:b802fc31f1db	1132	chain. Instead, we point the ->payload pointer in the first
donatien	0:b802fc31f1db	1133	pbuf to data in one of the later pbufs. We also set the
donatien	0:b802fc31f1db	1134	inseg.data pointer to point to the right place. This way, the
donatien	0:b802fc31f1db	1135	->p pointer will still point to the first pbuf, but the
donatien	0:b802fc31f1db	1136	->p->payload pointer will point to data in another pbuf.
donatien	0:b802fc31f1db	1137
donatien	0:b802fc31f1db	1138	After we are done with adjusting the pbuf pointers we must
donatien	0:b802fc31f1db	1139	adjust the ->data pointer in the seg and the segment
donatien	0:b802fc31f1db	1140	length.*/
donatien	0:b802fc31f1db	1141
donatien	0:b802fc31f1db	1142	off = pcb->rcv_nxt - seqno;
donatien	0:b802fc31f1db	1143	p = inseg.p;
donatien	0:b802fc31f1db	1144	LWIP_ASSERT("inseg.p != NULL", inseg.p);
donatien	0:b802fc31f1db	1145	LWIP_ASSERT("insane offset!", (off < 0x7fff));
donatien	0:b802fc31f1db	1146	if (inseg.p->len < off) {
donatien	0:b802fc31f1db	1147	LWIP_ASSERT("pbuf too short!", (((s32_t)inseg.p->tot_len) >= off));
donatien	0:b802fc31f1db	1148	new_tot_len = (u16_t)(inseg.p->tot_len - off);
donatien	0:b802fc31f1db	1149	while (p->len < off) {
donatien	0:b802fc31f1db	1150	off -= p->len;
donatien	0:b802fc31f1db	1151	/* KJM following line changed (with addition of new_tot_len var)
donatien	0:b802fc31f1db	1152	to fix bug #9076
donatien	0:b802fc31f1db	1153	inseg.p->tot_len -= p->len; */
donatien	0:b802fc31f1db	1154	p->tot_len = new_tot_len;
donatien	0:b802fc31f1db	1155	p->len = 0;
donatien	0:b802fc31f1db	1156	p = p->next;
donatien	0:b802fc31f1db	1157	}
donatien	0:b802fc31f1db	1158	if(pbuf_header(p, (s16_t)-off)) {
donatien	0:b802fc31f1db	1159	/* Do we need to cope with this failing? Assert for now */
donatien	0:b802fc31f1db	1160	LWIP_ASSERT("pbuf_header failed", 0);
donatien	0:b802fc31f1db	1161	}
donatien	0:b802fc31f1db	1162	} else {
donatien	0:b802fc31f1db	1163	if(pbuf_header(inseg.p, (s16_t)-off)) {
donatien	0:b802fc31f1db	1164	/* Do we need to cope with this failing? Assert for now */
donatien	0:b802fc31f1db	1165	LWIP_ASSERT("pbuf_header failed", 0);
donatien	0:b802fc31f1db	1166	}
donatien	0:b802fc31f1db	1167	}
donatien	0:b802fc31f1db	1168	/* KJM following line changed to use p->payload rather than inseg->p->payload
donatien	0:b802fc31f1db	1169	to fix bug #9076 */
donatien	0:b802fc31f1db	1170	inseg.dataptr = p->payload;
donatien	0:b802fc31f1db	1171	inseg.len -= (u16_t)(pcb->rcv_nxt - seqno);
donatien	0:b802fc31f1db	1172	inseg.tcphdr->seqno = seqno = pcb->rcv_nxt;
donatien	0:b802fc31f1db	1173	}
donatien	0:b802fc31f1db	1174	else {
donatien	0:b802fc31f1db	1175	if (TCP_SEQ_LT(seqno, pcb->rcv_nxt)){
donatien	0:b802fc31f1db	1176	/* the whole segment is < rcv_nxt */
donatien	0:b802fc31f1db	1177	/* must be a duplicate of a packet that has already been correctly handled */
donatien	0:b802fc31f1db	1178
donatien	0:b802fc31f1db	1179	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: duplicate seqno %"U32_F"\n", seqno));
donatien	0:b802fc31f1db	1180	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	1181	}
donatien	0:b802fc31f1db	1182	}
donatien	0:b802fc31f1db	1183
donatien	0:b802fc31f1db	1184	/* The sequence number must be within the window (above rcv_nxt
donatien	0:b802fc31f1db	1185	and below rcv_nxt + rcv_wnd) in order to be further
donatien	0:b802fc31f1db	1186	processed. */
donatien	0:b802fc31f1db	1187	if (TCP_SEQ_BETWEEN(seqno, pcb->rcv_nxt,
donatien	0:b802fc31f1db	1188	pcb->rcv_nxt + pcb->rcv_wnd - 1)){
donatien	0:b802fc31f1db	1189	if (pcb->rcv_nxt == seqno) {
donatien	0:b802fc31f1db	1190	/* The incoming segment is the next in sequence. We check if
donatien	0:b802fc31f1db	1191	we have to trim the end of the segment and update rcv_nxt
donatien	0:b802fc31f1db	1192	and pass the data to the application. */
donatien	0:b802fc31f1db	1193	tcplen = TCP_TCPLEN(&inseg);
donatien	0:b802fc31f1db	1194
donatien	0:b802fc31f1db	1195	if (tcplen > pcb->rcv_wnd) {
donatien	0:b802fc31f1db	1196	LWIP_DEBUGF(TCP_INPUT_DEBUG,
donatien	0:b802fc31f1db	1197	("tcp_receive: other end overran receive window"
donatien	0:b802fc31f1db	1198	"seqno %"U32_F" len %"U16_F" right edge %"U32_F"\n",
donatien	0:b802fc31f1db	1199	seqno, tcplen, pcb->rcv_nxt + pcb->rcv_wnd));
donatien	0:b802fc31f1db	1200	if (TCPH_FLAGS(inseg.tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	1201	/* Must remove the FIN from the header as we're trimming
donatien	0:b802fc31f1db	1202	* that byte of sequence-space from the packet */
donatien	0:b802fc31f1db	1203	TCPH_FLAGS_SET(inseg.tcphdr, TCPH_FLAGS(inseg.tcphdr) &~ TCP_FIN);
donatien	0:b802fc31f1db	1204	}
donatien	0:b802fc31f1db	1205	/* Adjust length of segment to fit in the window. */
donatien	0:b802fc31f1db	1206	inseg.len = pcb->rcv_wnd;
donatien	0:b802fc31f1db	1207	if (TCPH_FLAGS(inseg.tcphdr) & TCP_SYN) {
donatien	0:b802fc31f1db	1208	inseg.len -= 1;
donatien	0:b802fc31f1db	1209	}
donatien	0:b802fc31f1db	1210	pbuf_realloc(inseg.p, inseg.len);
donatien	0:b802fc31f1db	1211	tcplen = TCP_TCPLEN(&inseg);
donatien	0:b802fc31f1db	1212	LWIP_ASSERT("tcp_receive: segment not trimmed correctly to rcv_wnd\n",
donatien	0:b802fc31f1db	1213	(seqno + tcplen) == (pcb->rcv_nxt + pcb->rcv_wnd));
donatien	0:b802fc31f1db	1214	}
donatien	0:b802fc31f1db	1215	#if TCP_QUEUE_OOSEQ
donatien	0:b802fc31f1db	1216	/* Received in-sequence data, adjust ooseq data if:
donatien	0:b802fc31f1db	1217	- FIN has been received or
donatien	0:b802fc31f1db	1218	- inseq overlaps with ooseq */
donatien	0:b802fc31f1db	1219	if (pcb->ooseq != NULL) {
donatien	0:b802fc31f1db	1220	if (TCPH_FLAGS(inseg.tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	1221	LWIP_DEBUGF(TCP_INPUT_DEBUG,
donatien	0:b802fc31f1db	1222	("tcp_receive: received in-order FIN, binning ooseq queue\n"));
donatien	0:b802fc31f1db	1223	/* Received in-order FIN means anything that was received
donatien	0:b802fc31f1db	1224	* out of order must now have been received in-order, so
donatien	0:b802fc31f1db	1225	* bin the ooseq queue */
donatien	0:b802fc31f1db	1226	while (pcb->ooseq != NULL) {
donatien	0:b802fc31f1db	1227	struct tcp_seg *old_ooseq = pcb->ooseq;
donatien	0:b802fc31f1db	1228	pcb->ooseq = pcb->ooseq->next;
donatien	0:b802fc31f1db	1229	tcp_seg_free(old_ooseq);
donatien	0:b802fc31f1db	1230	}
donatien	0:b802fc31f1db	1231	}
donatien	0:b802fc31f1db	1232	else {
donatien	0:b802fc31f1db	1233	next = pcb->ooseq;
donatien	0:b802fc31f1db	1234	/* Remove all segments on ooseq that are covered by inseg already.
donatien	0:b802fc31f1db	1235	* FIN is copied from ooseq to inseg if present. */
donatien	0:b802fc31f1db	1236	while (next &&
donatien	0:b802fc31f1db	1237	TCP_SEQ_GEQ(seqno + tcplen,
donatien	0:b802fc31f1db	1238	next->tcphdr->seqno + next->len)) {
donatien	0:b802fc31f1db	1239	/* inseg cannot have FIN here (already processed above) */
donatien	0:b802fc31f1db	1240	if (TCPH_FLAGS(next->tcphdr) & TCP_FIN &&
donatien	0:b802fc31f1db	1241	(TCPH_FLAGS(inseg.tcphdr) & TCP_SYN) == 0) {
donatien	0:b802fc31f1db	1242	TCPH_SET_FLAG(inseg.tcphdr, TCP_FIN);
donatien	0:b802fc31f1db	1243	tcplen = TCP_TCPLEN(&inseg);
donatien	0:b802fc31f1db	1244	}
donatien	0:b802fc31f1db	1245	prev = next;
donatien	0:b802fc31f1db	1246	next = next->next;
donatien	0:b802fc31f1db	1247	tcp_seg_free(prev);
donatien	0:b802fc31f1db	1248	}
donatien	0:b802fc31f1db	1249	/* Now trim right side of inseg if it overlaps with the first
donatien	0:b802fc31f1db	1250	* segment on ooseq */
donatien	0:b802fc31f1db	1251	if (next &&
donatien	0:b802fc31f1db	1252	TCP_SEQ_GT(seqno + tcplen,
donatien	0:b802fc31f1db	1253	next->tcphdr->seqno)) {
donatien	0:b802fc31f1db	1254	/* inseg cannot have FIN here (already processed above) */
donatien	0:b802fc31f1db	1255	inseg.len = (u16_t)(next->tcphdr->seqno - seqno);
donatien	0:b802fc31f1db	1256	if (TCPH_FLAGS(inseg.tcphdr) & TCP_SYN) {
donatien	0:b802fc31f1db	1257	inseg.len -= 1;
donatien	0:b802fc31f1db	1258	}
donatien	0:b802fc31f1db	1259	pbuf_realloc(inseg.p, inseg.len);
donatien	0:b802fc31f1db	1260	tcplen = TCP_TCPLEN(&inseg);
donatien	0:b802fc31f1db	1261	LWIP_ASSERT("tcp_receive: segment not trimmed correctly to ooseq queue\n",
donatien	0:b802fc31f1db	1262	(seqno + tcplen) == next->tcphdr->seqno);
donatien	0:b802fc31f1db	1263	}
donatien	0:b802fc31f1db	1264	pcb->ooseq = next;
donatien	0:b802fc31f1db	1265	}
donatien	0:b802fc31f1db	1266	}
donatien	0:b802fc31f1db	1267	#endif /* TCP_QUEUE_OOSEQ */
donatien	0:b802fc31f1db	1268
donatien	0:b802fc31f1db	1269	pcb->rcv_nxt = seqno + tcplen;
donatien	0:b802fc31f1db	1270
donatien	0:b802fc31f1db	1271	/* Update the receiver's (our) window. */
donatien	0:b802fc31f1db	1272	LWIP_ASSERT("tcp_receive: tcplen > rcv_wnd\n", pcb->rcv_wnd >= tcplen);
donatien	0:b802fc31f1db	1273	pcb->rcv_wnd -= tcplen;
donatien	0:b802fc31f1db	1274
donatien	0:b802fc31f1db	1275	tcp_update_rcv_ann_wnd(pcb);
donatien	0:b802fc31f1db	1276
donatien	0:b802fc31f1db	1277	/* If there is data in the segment, we make preparations to
donatien	0:b802fc31f1db	1278	pass this up to the application. The ->recv_data variable
donatien	0:b802fc31f1db	1279	is used for holding the pbuf that goes to the
donatien	0:b802fc31f1db	1280	application. The code for reassembling out-of-sequence data
donatien	0:b802fc31f1db	1281	chains its data on this pbuf as well.
donatien	0:b802fc31f1db	1282
donatien	0:b802fc31f1db	1283	If the segment was a FIN, we set the TF_GOT_FIN flag that will
donatien	0:b802fc31f1db	1284	be used to indicate to the application that the remote side has
donatien	0:b802fc31f1db	1285	closed its end of the connection. */
donatien	0:b802fc31f1db	1286	if (inseg.p->tot_len > 0) {
donatien	0:b802fc31f1db	1287	recv_data = inseg.p;
donatien	0:b802fc31f1db	1288	/* Since this pbuf now is the responsibility of the
donatien	0:b802fc31f1db	1289	application, we delete our reference to it so that we won't
donatien	0:b802fc31f1db	1290	(mistakingly) deallocate it. */
donatien	0:b802fc31f1db	1291	inseg.p = NULL;
donatien	0:b802fc31f1db	1292	}
donatien	0:b802fc31f1db	1293	if (TCPH_FLAGS(inseg.tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	1294	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: received FIN.\n"));
donatien	0:b802fc31f1db	1295	recv_flags \|= TF_GOT_FIN;
donatien	0:b802fc31f1db	1296	}
donatien	0:b802fc31f1db	1297
donatien	0:b802fc31f1db	1298	#if TCP_QUEUE_OOSEQ
donatien	0:b802fc31f1db	1299	/* We now check if we have segments on the ->ooseq queue that
donatien	0:b802fc31f1db	1300	are now in sequence. */
donatien	0:b802fc31f1db	1301	while (pcb->ooseq != NULL &&
donatien	0:b802fc31f1db	1302	pcb->ooseq->tcphdr->seqno == pcb->rcv_nxt) {
donatien	0:b802fc31f1db	1303
donatien	0:b802fc31f1db	1304	cseg = pcb->ooseq;
donatien	0:b802fc31f1db	1305	seqno = pcb->ooseq->tcphdr->seqno;
donatien	0:b802fc31f1db	1306
donatien	0:b802fc31f1db	1307	pcb->rcv_nxt += TCP_TCPLEN(cseg);
donatien	0:b802fc31f1db	1308	LWIP_ASSERT("tcp_receive: ooseq tcplen > rcv_wnd\n",
donatien	0:b802fc31f1db	1309	pcb->rcv_wnd >= TCP_TCPLEN(cseg));
donatien	0:b802fc31f1db	1310	pcb->rcv_wnd -= TCP_TCPLEN(cseg);
donatien	0:b802fc31f1db	1311
donatien	0:b802fc31f1db	1312	tcp_update_rcv_ann_wnd(pcb);
donatien	0:b802fc31f1db	1313
donatien	0:b802fc31f1db	1314	if (cseg->p->tot_len > 0) {
donatien	0:b802fc31f1db	1315	/* Chain this pbuf onto the pbuf that we will pass to
donatien	0:b802fc31f1db	1316	the application. */
donatien	0:b802fc31f1db	1317	if (recv_data) {
donatien	0:b802fc31f1db	1318	pbuf_cat(recv_data, cseg->p);
donatien	0:b802fc31f1db	1319	} else {
donatien	0:b802fc31f1db	1320	recv_data = cseg->p;
donatien	0:b802fc31f1db	1321	}
donatien	0:b802fc31f1db	1322	cseg->p = NULL;
donatien	0:b802fc31f1db	1323	}
donatien	0:b802fc31f1db	1324	if (TCPH_FLAGS(cseg->tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	1325	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_receive: dequeued FIN.\n"));
donatien	0:b802fc31f1db	1326	recv_flags \|= TF_GOT_FIN;
donatien	0:b802fc31f1db	1327	if (pcb->state == ESTABLISHED) { /* force passive close or we can move to active close */
donatien	0:b802fc31f1db	1328	pcb->state = CLOSE_WAIT;
donatien	0:b802fc31f1db	1329	}
donatien	0:b802fc31f1db	1330	}
donatien	0:b802fc31f1db	1331
donatien	0:b802fc31f1db	1332	pcb->ooseq = cseg->next;
donatien	0:b802fc31f1db	1333	tcp_seg_free(cseg);
donatien	0:b802fc31f1db	1334	}
donatien	0:b802fc31f1db	1335	#endif /* TCP_QUEUE_OOSEQ */
donatien	0:b802fc31f1db	1336
donatien	0:b802fc31f1db	1337
donatien	0:b802fc31f1db	1338	/* Acknowledge the segment(s). */
donatien	0:b802fc31f1db	1339	tcp_ack(pcb);
donatien	0:b802fc31f1db	1340
donatien	0:b802fc31f1db	1341	} else {
donatien	0:b802fc31f1db	1342	/* We get here if the incoming segment is out-of-sequence. */
donatien	0:b802fc31f1db	1343	tcp_send_empty_ack(pcb);
donatien	0:b802fc31f1db	1344	#if TCP_QUEUE_OOSEQ
donatien	0:b802fc31f1db	1345	/* We queue the segment on the ->ooseq queue. */
donatien	0:b802fc31f1db	1346	if (pcb->ooseq == NULL) {
donatien	0:b802fc31f1db	1347	pcb->ooseq = tcp_seg_copy(&inseg);
donatien	0:b802fc31f1db	1348	} else {
donatien	0:b802fc31f1db	1349	/* If the queue is not empty, we walk through the queue and
donatien	0:b802fc31f1db	1350	try to find a place where the sequence number of the
donatien	0:b802fc31f1db	1351	incoming segment is between the sequence numbers of the
donatien	0:b802fc31f1db	1352	previous and the next segment on the ->ooseq queue. That is
donatien	0:b802fc31f1db	1353	the place where we put the incoming segment. If needed, we
donatien	0:b802fc31f1db	1354	trim the second edges of the previous and the incoming
donatien	0:b802fc31f1db	1355	segment so that it will fit into the sequence.
donatien	0:b802fc31f1db	1356
donatien	0:b802fc31f1db	1357	If the incoming segment has the same sequence number as a
donatien	0:b802fc31f1db	1358	segment on the ->ooseq queue, we discard the segment that
donatien	0:b802fc31f1db	1359	contains less data. */
donatien	0:b802fc31f1db	1360
donatien	0:b802fc31f1db	1361	prev = NULL;
donatien	0:b802fc31f1db	1362	for(next = pcb->ooseq; next != NULL; next = next->next) {
donatien	0:b802fc31f1db	1363	if (seqno == next->tcphdr->seqno) {
donatien	0:b802fc31f1db	1364	/* The sequence number of the incoming segment is the
donatien	0:b802fc31f1db	1365	same as the sequence number of the segment on
donatien	0:b802fc31f1db	1366	->ooseq. We check the lengths to see which one to
donatien	0:b802fc31f1db	1367	discard. */
donatien	0:b802fc31f1db	1368	if (inseg.len > next->len) {
donatien	0:b802fc31f1db	1369	/* The incoming segment is larger than the old
donatien	0:b802fc31f1db	1370	segment. We replace some segments with the new
donatien	0:b802fc31f1db	1371	one. */
donatien	0:b802fc31f1db	1372	cseg = tcp_seg_copy(&inseg);
donatien	0:b802fc31f1db	1373	if (cseg != NULL) {
donatien	0:b802fc31f1db	1374	if (prev != NULL) {
donatien	0:b802fc31f1db	1375	prev->next = cseg;
donatien	0:b802fc31f1db	1376	} else {
donatien	0:b802fc31f1db	1377	pcb->ooseq = cseg;
donatien	0:b802fc31f1db	1378	}
donatien	0:b802fc31f1db	1379	tcp_oos_insert_segment(cseg, next);
donatien	0:b802fc31f1db	1380	}
donatien	0:b802fc31f1db	1381	break;
donatien	0:b802fc31f1db	1382	} else {
donatien	0:b802fc31f1db	1383	/* Either the lenghts are the same or the incoming
donatien	0:b802fc31f1db	1384	segment was smaller than the old one; in either
donatien	0:b802fc31f1db	1385	case, we ditch the incoming segment. */
donatien	0:b802fc31f1db	1386	break;
donatien	0:b802fc31f1db	1387	}
donatien	0:b802fc31f1db	1388	} else {
donatien	0:b802fc31f1db	1389	if (prev == NULL) {
donatien	0:b802fc31f1db	1390	if (TCP_SEQ_LT(seqno, next->tcphdr->seqno)) {
donatien	0:b802fc31f1db	1391	/* The sequence number of the incoming segment is lower
donatien	0:b802fc31f1db	1392	than the sequence number of the first segment on the
donatien	0:b802fc31f1db	1393	queue. We put the incoming segment first on the
donatien	0:b802fc31f1db	1394	queue. */
donatien	0:b802fc31f1db	1395	cseg = tcp_seg_copy(&inseg);
donatien	0:b802fc31f1db	1396	if (cseg != NULL) {
donatien	0:b802fc31f1db	1397	pcb->ooseq = cseg;
donatien	0:b802fc31f1db	1398	tcp_oos_insert_segment(cseg, next);
donatien	0:b802fc31f1db	1399	}
donatien	0:b802fc31f1db	1400	break;
donatien	0:b802fc31f1db	1401	}
donatien	0:b802fc31f1db	1402	} else {
donatien	0:b802fc31f1db	1403	/*if (TCP_SEQ_LT(prev->tcphdr->seqno, seqno) &&
donatien	0:b802fc31f1db	1404	TCP_SEQ_LT(seqno, next->tcphdr->seqno)) {*/
donatien	0:b802fc31f1db	1405	if (TCP_SEQ_BETWEEN(seqno, prev->tcphdr->seqno+1, next->tcphdr->seqno-1)) {
donatien	0:b802fc31f1db	1406	/* The sequence number of the incoming segment is in
donatien	0:b802fc31f1db	1407	between the sequence numbers of the previous and
donatien	0:b802fc31f1db	1408	the next segment on ->ooseq. We trim trim the previous
donatien	0:b802fc31f1db	1409	segment, delete next segments that included in received segment
donatien	0:b802fc31f1db	1410	and trim received, if needed. */
donatien	0:b802fc31f1db	1411	cseg = tcp_seg_copy(&inseg);
donatien	0:b802fc31f1db	1412	if (cseg != NULL) {
donatien	0:b802fc31f1db	1413	if (TCP_SEQ_GT(prev->tcphdr->seqno + prev->len, seqno)) {
donatien	0:b802fc31f1db	1414	/* We need to trim the prev segment. */
donatien	0:b802fc31f1db	1415	prev->len = (u16_t)(seqno - prev->tcphdr->seqno);
donatien	0:b802fc31f1db	1416	pbuf_realloc(prev->p, prev->len);
donatien	0:b802fc31f1db	1417	}
donatien	0:b802fc31f1db	1418	prev->next = cseg;
donatien	0:b802fc31f1db	1419	tcp_oos_insert_segment(cseg, next);
donatien	0:b802fc31f1db	1420	}
donatien	0:b802fc31f1db	1421	break;
donatien	0:b802fc31f1db	1422	}
donatien	0:b802fc31f1db	1423	}
donatien	0:b802fc31f1db	1424	/* If the "next" segment is the last segment on the
donatien	0:b802fc31f1db	1425	ooseq queue, we add the incoming segment to the end
donatien	0:b802fc31f1db	1426	of the list. */
donatien	0:b802fc31f1db	1427	if (next->next == NULL &&
donatien	0:b802fc31f1db	1428	TCP_SEQ_GT(seqno, next->tcphdr->seqno)) {
donatien	0:b802fc31f1db	1429	if (TCPH_FLAGS(next->tcphdr) & TCP_FIN) {
donatien	0:b802fc31f1db	1430	/* segment "next" already contains all data */
donatien	0:b802fc31f1db	1431	break;
donatien	0:b802fc31f1db	1432	}
donatien	0:b802fc31f1db	1433	next->next = tcp_seg_copy(&inseg);
donatien	0:b802fc31f1db	1434	if (next->next != NULL) {
donatien	0:b802fc31f1db	1435	if (TCP_SEQ_GT(next->tcphdr->seqno + next->len, seqno)) {
donatien	0:b802fc31f1db	1436	/* We need to trim the last segment. */
donatien	0:b802fc31f1db	1437	next->len = (u16_t)(seqno - next->tcphdr->seqno);
donatien	0:b802fc31f1db	1438	pbuf_realloc(next->p, next->len);
donatien	0:b802fc31f1db	1439	}
donatien	1:3a7c15057192	1440	/* check if the remote side overruns our receive window */
donatien	1:3a7c15057192	1441	if ((u32_t)tcplen + seqno > pcb->rcv_nxt + (u32_t)pcb->rcv_wnd) {
donatien	1:3a7c15057192	1442	LWIP_DEBUGF(TCP_INPUT_DEBUG,
donatien	1:3a7c15057192	1443	("tcp_receive: other end overran receive window"
donatien	1:3a7c15057192	1444	"seqno %"U32_F" len %"U16_F" right edge %"U32_F"\n",
donatien	1:3a7c15057192	1445	seqno, tcplen, pcb->rcv_nxt + pcb->rcv_wnd));
donatien	1:3a7c15057192	1446	if (TCPH_FLAGS(next->next->tcphdr) & TCP_FIN) {
donatien	1:3a7c15057192	1447	/* Must remove the FIN from the header as we're trimming
donatien	1:3a7c15057192	1448	* that byte of sequence-space from the packet */
donatien	1:3a7c15057192	1449	TCPH_FLAGS_SET(next->next->tcphdr, TCPH_FLAGS(next->next->tcphdr) &~ TCP_FIN);
donatien	1:3a7c15057192	1450	}
donatien	1:3a7c15057192	1451	/* Adjust length of segment to fit in the window. */
donatien	1:3a7c15057192	1452	next->next->len = pcb->rcv_nxt + pcb->rcv_wnd - seqno;
donatien	1:3a7c15057192	1453	pbuf_realloc(next->next->p, next->next->len);
donatien	1:3a7c15057192	1454	tcplen = TCP_TCPLEN(next->next);
donatien	1:3a7c15057192	1455	LWIP_ASSERT("tcp_receive: segment not trimmed correctly to rcv_wnd\n",
donatien	1:3a7c15057192	1456	(seqno + tcplen) == (pcb->rcv_nxt + pcb->rcv_wnd));
donatien	1:3a7c15057192	1457	}
donatien	0:b802fc31f1db	1458	}
donatien	0:b802fc31f1db	1459	break;
donatien	0:b802fc31f1db	1460	}
donatien	0:b802fc31f1db	1461	}
donatien	0:b802fc31f1db	1462	prev = next;
donatien	0:b802fc31f1db	1463	}
donatien	0:b802fc31f1db	1464	}
donatien	0:b802fc31f1db	1465	#endif /* TCP_QUEUE_OOSEQ */
donatien	0:b802fc31f1db	1466
donatien	0:b802fc31f1db	1467	}
donatien	0:b802fc31f1db	1468	} else {
donatien	0:b802fc31f1db	1469	/* The incoming segment is not withing the window. */
donatien	0:b802fc31f1db	1470	tcp_send_empty_ack(pcb);
donatien	0:b802fc31f1db	1471	}
donatien	0:b802fc31f1db	1472	} else {
donatien	0:b802fc31f1db	1473	/* Segments with length 0 is taken care of here. Segments that
donatien	0:b802fc31f1db	1474	fall out of the window are ACKed. */
donatien	0:b802fc31f1db	1475	/*if (TCP_SEQ_GT(pcb->rcv_nxt, seqno) \|\|
donatien	0:b802fc31f1db	1476	TCP_SEQ_GEQ(seqno, pcb->rcv_nxt + pcb->rcv_wnd)) {*/
donatien	0:b802fc31f1db	1477	if(!TCP_SEQ_BETWEEN(seqno, pcb->rcv_nxt, pcb->rcv_nxt + pcb->rcv_wnd-1)){
donatien	0:b802fc31f1db	1478	tcp_ack_now(pcb);
donatien	0:b802fc31f1db	1479	}
donatien	0:b802fc31f1db	1480	}
donatien	0:b802fc31f1db	1481	}
donatien	0:b802fc31f1db	1482
donatien	0:b802fc31f1db	1483	/**
donatien	0:b802fc31f1db	1484	* Parses the options contained in the incoming segment.
donatien	0:b802fc31f1db	1485	*
donatien	0:b802fc31f1db	1486	* Called from tcp_listen_input() and tcp_process().
donatien	0:b802fc31f1db	1487	* Currently, only the MSS option is supported!
donatien	0:b802fc31f1db	1488	*
donatien	0:b802fc31f1db	1489	* @param pcb the tcp_pcb for which a segment arrived
donatien	0:b802fc31f1db	1490	*/
donatien	0:b802fc31f1db	1491	static void
donatien	0:b802fc31f1db	1492	tcp_parseopt(struct tcp_pcb *pcb)
donatien	0:b802fc31f1db	1493	{
donatien	0:b802fc31f1db	1494	u16_t c, max_c;
donatien	0:b802fc31f1db	1495	u16_t mss;
donatien	0:b802fc31f1db	1496	u8_t *opts, opt;
donatien	0:b802fc31f1db	1497	#if LWIP_TCP_TIMESTAMPS
donatien	0:b802fc31f1db	1498	u32_t tsval;
donatien	0:b802fc31f1db	1499	#endif
donatien	0:b802fc31f1db	1500
donatien	0:b802fc31f1db	1501	opts = (u8_t *)tcphdr + TCP_HLEN;
donatien	0:b802fc31f1db	1502
donatien	0:b802fc31f1db	1503	/* Parse the TCP MSS option, if present. */
donatien	0:b802fc31f1db	1504	if(TCPH_HDRLEN(tcphdr) > 0x5) {
donatien	0:b802fc31f1db	1505	max_c = (TCPH_HDRLEN(tcphdr) - 5) << 2;
donatien	0:b802fc31f1db	1506	for (c = 0; c < max_c; ) {
donatien	0:b802fc31f1db	1507	opt = opts[c];
donatien	0:b802fc31f1db	1508	switch (opt) {
donatien	0:b802fc31f1db	1509	case 0x00:
donatien	0:b802fc31f1db	1510	/* End of options. */
donatien	0:b802fc31f1db	1511	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: EOL\n"));
donatien	0:b802fc31f1db	1512	return;
donatien	0:b802fc31f1db	1513	case 0x01:
donatien	0:b802fc31f1db	1514	/* NOP option. */
donatien	0:b802fc31f1db	1515	++c;
donatien	0:b802fc31f1db	1516	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: NOP\n"));
donatien	0:b802fc31f1db	1517	break;
donatien	0:b802fc31f1db	1518	case 0x02:
donatien	0:b802fc31f1db	1519	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: MSS\n"));
donatien	0:b802fc31f1db	1520	if (opts[c + 1] != 0x04 \|\| c + 0x04 > max_c) {
donatien	0:b802fc31f1db	1521	/* Bad length */
donatien	0:b802fc31f1db	1522	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: bad length\n"));
donatien	0:b802fc31f1db	1523	return;
donatien	0:b802fc31f1db	1524	}
donatien	0:b802fc31f1db	1525	/* An MSS option with the right option length. */
donatien	0:b802fc31f1db	1526	mss = (opts[c + 2] << 8) \| opts[c + 3];
donatien	0:b802fc31f1db	1527	/* Limit the mss to the configured TCP_MSS and prevent division by zero */
donatien	0:b802fc31f1db	1528	pcb->mss = ((mss > TCP_MSS) \|\| (mss == 0)) ? TCP_MSS : mss;
donatien	0:b802fc31f1db	1529	/* Advance to next option */
donatien	0:b802fc31f1db	1530	c += 0x04;
donatien	0:b802fc31f1db	1531	break;
donatien	0:b802fc31f1db	1532	#if LWIP_TCP_TIMESTAMPS
donatien	0:b802fc31f1db	1533	case 0x08:
donatien	0:b802fc31f1db	1534	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: TS\n"));
donatien	0:b802fc31f1db	1535	if (opts[c + 1] != 0x0A \|\| c + 0x0A > max_c) {
donatien	0:b802fc31f1db	1536	/* Bad length */
donatien	0:b802fc31f1db	1537	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: bad length\n"));
donatien	0:b802fc31f1db	1538	return;
donatien	0:b802fc31f1db	1539	}
donatien	0:b802fc31f1db	1540	/* TCP timestamp option with valid length */
donatien	0:b802fc31f1db	1541	tsval = (opts[c+2]) \| (opts[c+3] << 8) \|
donatien	0:b802fc31f1db	1542	(opts[c+4] << 16) \| (opts[c+5] << 24);
donatien	0:b802fc31f1db	1543	if (flags & TCP_SYN) {
donatien	0:b802fc31f1db	1544	pcb->ts_recent = ntohl(tsval);
donatien	0:b802fc31f1db	1545	pcb->flags \|= TF_TIMESTAMP;
donatien	0:b802fc31f1db	1546	} else if (TCP_SEQ_BETWEEN(pcb->ts_lastacksent, seqno, seqno+tcplen)) {
donatien	0:b802fc31f1db	1547	pcb->ts_recent = ntohl(tsval);
donatien	0:b802fc31f1db	1548	}
donatien	0:b802fc31f1db	1549	/* Advance to next option */
donatien	0:b802fc31f1db	1550	c += 0x0A;
donatien	0:b802fc31f1db	1551	break;
donatien	0:b802fc31f1db	1552	#endif
donatien	0:b802fc31f1db	1553	default:
donatien	0:b802fc31f1db	1554	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: other\n"));
donatien	0:b802fc31f1db	1555	if (opts[c + 1] == 0) {
donatien	0:b802fc31f1db	1556	LWIP_DEBUGF(TCP_INPUT_DEBUG, ("tcp_parseopt: bad length\n"));
donatien	0:b802fc31f1db	1557	/* If the length field is zero, the options are malformed
donatien	0:b802fc31f1db	1558	and we don't process them further. */
donatien	0:b802fc31f1db	1559	return;
donatien	0:b802fc31f1db	1560	}
donatien	0:b802fc31f1db	1561	/* All other options have a length field, so that we easily
donatien	0:b802fc31f1db	1562	can skip past them. */
donatien	0:b802fc31f1db	1563	c += opts[c + 1];
donatien	0:b802fc31f1db	1564	}
donatien	0:b802fc31f1db	1565	}
donatien	0:b802fc31f1db	1566	}
donatien	0:b802fc31f1db	1567	}
donatien	0:b802fc31f1db	1568
donatien	0:b802fc31f1db	1569	#endif /* LWIP_TCP */

Repository toolbox

Export to desktop IDE

Build repository

Repository details

Type:	Program
Created:	09 Jul 2010
Imports:	20
Forks:	0
Commits:	5
Dependents:	0
Dependencies:	0
Followers:	3

This repository is Public (Unlisted).

lwip/core/tcp_in.c@4:e00281c7453d, 2010-08-06 (annotated)

Who changed what in which revision?

Repository toolbox

Repository details

Important Information for this Arm website

Access Warning