2867fc717e
If a Q.931 call record related timer is started on one NFAS D channel expires after NFAS swaps to another D channel, then libpri could crash. For example: 1) Hangup a call. 1a) Send a DISCONNECT. 1b) Start the T305 retransmit timer on the current D channel. 2) The RELEASE comes in on another D channel. 2a) The found call record switches its assignment to the new D channel. 2b) Attempt to stop T305. Unfortunately, the timer was started on another D channel so the attempt does not find the timer to stop. 3) The hangup sequence continues normally and the call record is freed since there is only one call record pool. 4) T305 expires on the original D channel and crashes the system when it uses the stale call record pointer it has saved. Made each D channel timer pool have a unique range of valid timer identifiers. If a given timer identifier is not in the range for the current NFAS D channel, then search the D channel group for the original D channel. JIRA LIBPRI-58 JIRA SWP-2721 git-svn-id: https://origsvn.digium.com/svn/libpri/branches/1.4@2202 2fbb986a-6c06-0410-b554-c9c1f0a7f128
323 lines
8.8 KiB
C
323 lines
8.8 KiB
C
/*
|
|
* libpri: An implementation of Primary Rate ISDN
|
|
*
|
|
* Written by Mark Spencer <markster@digium.com>
|
|
*
|
|
* Copyright (C) 2001-2005, Digium, Inc.
|
|
* All Rights Reserved.
|
|
*/
|
|
|
|
/*
|
|
* See http://www.asterisk.org for more information about
|
|
* the Asterisk project. Please do not directly contact
|
|
* any of the maintainers of this project for assistance;
|
|
* the project provides a web site, mailing lists and IRC
|
|
* channels for your use.
|
|
*
|
|
* This program is free software, distributed under the terms of
|
|
* the GNU General Public License Version 2 as published by the
|
|
* Free Software Foundation. See the LICENSE file included with
|
|
* this program for more details.
|
|
*
|
|
* In addition, when this program is distributed with Asterisk in
|
|
* any form that would qualify as a 'combined work' or as a
|
|
* 'derivative work' (but not mere aggregation), you can redistribute
|
|
* and/or modify the combination under the terms of the license
|
|
* provided with that copy of Asterisk, instead of the license
|
|
* terms granted here.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "libpri.h"
|
|
#include "pri_internal.h"
|
|
|
|
|
|
/*! Initial number of scheduled timer slots. */
|
|
#define SCHED_EVENTS_INITIAL 128
|
|
/*!
|
|
* \brief Maximum number of scheduled timer slots.
|
|
* \note Should be a power of 2 and at least SCHED_EVENTS_INITIAL.
|
|
*/
|
|
#define SCHED_EVENTS_MAX 8192
|
|
|
|
/*! \brief The maximum number of timers that were active at once. */
|
|
static unsigned maxsched = 0;
|
|
/*! Last pool id */
|
|
static unsigned pool_id = 0;
|
|
|
|
/* Scheduler routines */
|
|
|
|
/*!
|
|
* \internal
|
|
* \brief Increase the number of scheduler timer slots available.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
*
|
|
* \retval 0 on success.
|
|
* \retval -1 on error.
|
|
*/
|
|
static int pri_schedule_grow(struct pri *ctrl)
|
|
{
|
|
unsigned num_slots;
|
|
struct pri_sched *timers;
|
|
|
|
/* Determine how many slots in the new timer table. */
|
|
if (ctrl->sched.num_slots) {
|
|
if (SCHED_EVENTS_MAX <= ctrl->sched.num_slots) {
|
|
/* Cannot grow the timer table any more. */
|
|
return -1;
|
|
}
|
|
num_slots = ctrl->sched.num_slots * 2;
|
|
if (SCHED_EVENTS_MAX < num_slots) {
|
|
num_slots = SCHED_EVENTS_MAX;
|
|
}
|
|
} else {
|
|
num_slots = SCHED_EVENTS_INITIAL;
|
|
}
|
|
|
|
/* Get and initialize the new timer table. */
|
|
timers = calloc(num_slots, sizeof(struct pri_sched));
|
|
if (!timers) {
|
|
/* Could not get a new timer table. */
|
|
return -1;
|
|
}
|
|
if (ctrl->sched.timer) {
|
|
/* Copy over the old timer table. */
|
|
memcpy(timers, ctrl->sched.timer,
|
|
ctrl->sched.num_slots * sizeof(struct pri_sched));
|
|
free(ctrl->sched.timer);
|
|
} else {
|
|
/* Creating the timer pool. */
|
|
pool_id += SCHED_EVENTS_MAX;
|
|
if (pool_id < SCHED_EVENTS_MAX
|
|
|| pool_id + (SCHED_EVENTS_MAX - 1) < SCHED_EVENTS_MAX) {
|
|
/*
|
|
* Not likely to happen.
|
|
*
|
|
* Timer id's may be aliased if this D channel is used in an
|
|
* NFAS group with redundant D channels. Another D channel in
|
|
* the group may have the same pool_id.
|
|
*/
|
|
pri_error(ctrl,
|
|
"Pool_id wrapped. Please ignore if you are not using NFAS with backup D channels.\n");
|
|
pool_id = SCHED_EVENTS_MAX;
|
|
}
|
|
ctrl->sched.first_id = pool_id;
|
|
}
|
|
|
|
/* Put the new timer table in place. */
|
|
ctrl->sched.timer = timers;
|
|
ctrl->sched.num_slots = num_slots;
|
|
return 0;
|
|
}
|
|
|
|
/*!
|
|
* \brief Start a timer to schedule an event.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
* \param ms Number of milliseconds to scheduled event.
|
|
* \param function Callback function to call when timeout.
|
|
* \param data Value to give callback function when timeout.
|
|
*
|
|
* \retval 0 if scheduler table is full and could not schedule the event.
|
|
* \retval id Scheduled event id.
|
|
*/
|
|
unsigned pri_schedule_event(struct pri *ctrl, int ms, void (*function)(void *data), void *data)
|
|
{
|
|
unsigned max_used;
|
|
unsigned x;
|
|
struct timeval tv;
|
|
|
|
max_used = ctrl->sched.max_used;
|
|
for (x = 0; x < max_used; ++x) {
|
|
if (!ctrl->sched.timer[x].callback) {
|
|
break;
|
|
}
|
|
}
|
|
if (x == ctrl->sched.num_slots && pri_schedule_grow(ctrl)) {
|
|
pri_error(ctrl, "No more room in scheduler\n");
|
|
return 0;
|
|
}
|
|
if (ctrl->sched.max_used <= x) {
|
|
ctrl->sched.max_used = x + 1;
|
|
}
|
|
if (x >= maxsched) {
|
|
maxsched = x + 1;
|
|
}
|
|
gettimeofday(&tv, NULL);
|
|
tv.tv_sec += ms / 1000;
|
|
tv.tv_usec += (ms % 1000) * 1000;
|
|
if (tv.tv_usec > 1000000) {
|
|
tv.tv_usec -= 1000000;
|
|
tv.tv_sec += 1;
|
|
}
|
|
ctrl->sched.timer[x].when = tv;
|
|
ctrl->sched.timer[x].callback = function;
|
|
ctrl->sched.timer[x].data = data;
|
|
return ctrl->sched.first_id + x;
|
|
}
|
|
|
|
/*!
|
|
* \brief Determine the time of the next scheduled event to expire.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
*
|
|
* \return Time of the next scheduled event to expire or NULL if no timers active.
|
|
*/
|
|
struct timeval *pri_schedule_next(struct pri *ctrl)
|
|
{
|
|
struct timeval *closest = NULL;
|
|
unsigned x;
|
|
|
|
/* Scan the scheduled timer slots backwards so we can update the max_used value. */
|
|
for (x = ctrl->sched.max_used; x--;) {
|
|
if (ctrl->sched.timer[x].callback) {
|
|
if (!closest) {
|
|
/* This is the highest sheduled timer slot in use. */
|
|
closest = &ctrl->sched.timer[x].when;
|
|
ctrl->sched.max_used = x + 1;
|
|
} else if ((closest->tv_sec > ctrl->sched.timer[x].when.tv_sec)
|
|
|| ((closest->tv_sec == ctrl->sched.timer[x].when.tv_sec)
|
|
&& (closest->tv_usec > ctrl->sched.timer[x].when.tv_usec))) {
|
|
closest = &ctrl->sched.timer[x].when;
|
|
}
|
|
}
|
|
}
|
|
if (!closest) {
|
|
/* No scheduled timer slots are active. */
|
|
ctrl->sched.max_used = 0;
|
|
}
|
|
return closest;
|
|
}
|
|
|
|
/*!
|
|
* \internal
|
|
* \brief Run all expired timers or return an event generated by an expired timer.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
* \param tv Current time.
|
|
*
|
|
* \return Event for upper layer to process or NULL if all expired timers run.
|
|
*/
|
|
static pri_event *__pri_schedule_run(struct pri *ctrl, struct timeval *tv)
|
|
{
|
|
unsigned x;
|
|
unsigned max_used;
|
|
void (*callback)(void *);
|
|
void *data;
|
|
|
|
max_used = ctrl->sched.max_used;
|
|
for (x = 0; x < max_used; ++x) {
|
|
if (ctrl->sched.timer[x].callback
|
|
&& ((ctrl->sched.timer[x].when.tv_sec < tv->tv_sec)
|
|
|| ((ctrl->sched.timer[x].when.tv_sec == tv->tv_sec)
|
|
&& (ctrl->sched.timer[x].when.tv_usec <= tv->tv_usec)))) {
|
|
/* This timer has expired. */
|
|
ctrl->schedev = 0;
|
|
callback = ctrl->sched.timer[x].callback;
|
|
data = ctrl->sched.timer[x].data;
|
|
ctrl->sched.timer[x].callback = NULL;
|
|
callback(data);
|
|
if (ctrl->schedev) {
|
|
return &ctrl->ev;
|
|
}
|
|
}
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
/*!
|
|
* \brief Run all expired timers or return an event generated by an expired timer.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
*
|
|
* \return Event for upper layer to process or NULL if all expired timers run.
|
|
*/
|
|
pri_event *pri_schedule_run(struct pri *ctrl)
|
|
{
|
|
struct timeval tv;
|
|
|
|
gettimeofday(&tv, NULL);
|
|
return __pri_schedule_run(ctrl, &tv);
|
|
}
|
|
|
|
/*!
|
|
* \brief Delete a scheduled event.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
* \param id Scheduled event id to delete.
|
|
* 0 is a disabled/unscheduled event id that is ignored.
|
|
*
|
|
* \return Nothing
|
|
*/
|
|
void pri_schedule_del(struct pri *ctrl, unsigned id)
|
|
{
|
|
struct pri *nfas;
|
|
|
|
if (!id) {
|
|
/* Disabled/unscheduled event id. */
|
|
return;
|
|
}
|
|
if (ctrl->sched.first_id <= id
|
|
&& id <= ctrl->sched.first_id + (SCHED_EVENTS_MAX - 1)) {
|
|
ctrl->sched.timer[id - ctrl->sched.first_id].callback = NULL;
|
|
return;
|
|
}
|
|
if (ctrl->nfas) {
|
|
/* Try to find the timer on another D channel. */
|
|
for (nfas = PRI_NFAS_MASTER(ctrl); nfas; nfas = nfas->slave) {
|
|
if (nfas->sched.first_id <= id
|
|
&& id <= nfas->sched.first_id + (SCHED_EVENTS_MAX - 1)) {
|
|
nfas->sched.timer[id - nfas->sched.first_id].callback = NULL;
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
pri_error(ctrl,
|
|
"Asked to delete sched id 0x%08x??? first_id=0x%08x, num_slots=0x%08x\n", id,
|
|
ctrl->sched.first_id, ctrl->sched.num_slots);
|
|
}
|
|
|
|
/*!
|
|
* \brief Is the scheduled event this callback.
|
|
*
|
|
* \param ctrl D channel controller.
|
|
* \param id Scheduled event id to check.
|
|
* 0 is a disabled/unscheduled event id.
|
|
* \param function Callback function to call when timeout.
|
|
* \param data Value to give callback function when timeout.
|
|
*
|
|
* \return TRUE if scheduled event has the callback.
|
|
*/
|
|
int pri_schedule_check(struct pri *ctrl, unsigned id, void (*function)(void *data), void *data)
|
|
{
|
|
struct pri *nfas;
|
|
|
|
if (!id) {
|
|
/* Disabled/unscheduled event id. */
|
|
return 0;
|
|
}
|
|
if (ctrl->sched.first_id <= id
|
|
&& id <= ctrl->sched.first_id + (SCHED_EVENTS_MAX - 1)) {
|
|
return ctrl->sched.timer[id - ctrl->sched.first_id].callback == function
|
|
&& ctrl->sched.timer[id - ctrl->sched.first_id].data == data;
|
|
}
|
|
if (ctrl->nfas) {
|
|
/* Try to find the timer on another D channel. */
|
|
for (nfas = PRI_NFAS_MASTER(ctrl); nfas; nfas = nfas->slave) {
|
|
if (nfas->sched.first_id <= id
|
|
&& id <= nfas->sched.first_id + (SCHED_EVENTS_MAX - 1)) {
|
|
return nfas->sched.timer[id - nfas->sched.first_id].callback == function
|
|
&& nfas->sched.timer[id - nfas->sched.first_id].data == data;
|
|
}
|
|
}
|
|
}
|
|
pri_error(ctrl,
|
|
"Asked to check sched id 0x%08x??? first_id=0x%08x, num_slots=0x%08x\n", id,
|
|
ctrl->sched.first_id, ctrl->sched.num_slots);
|
|
return 0;
|
|
}
|