1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*******************************************************************************
3  * This file contains the login functions used by the iSCSI Target driver.
4  *
5  * (c) Copyright 2007-2013 Datera, Inc.
6  *
7  * Author: Nicholas A. Bellinger <nab@linux-iscsi.org>
8  *
9  ******************************************************************************/
10 
11 #include <crypto/hash.h>
12 #include <linux/module.h>
13 #include <linux/string.h>
14 #include <linux/kthread.h>
15 #include <linux/sched/signal.h>
16 #include <linux/idr.h>
17 #include <linux/tcp.h>        /* TCP_NODELAY */
18 #include <net/ip.h>
19 #include <net/ipv6.h>         /* ipv6_addr_v4mapped() */
20 #include <scsi/iscsi_proto.h>
21 #include <target/target_core_base.h>
22 #include <target/target_core_fabric.h>
23 
24 #include <target/iscsi/iscsi_target_core.h>
25 #include <target/iscsi/iscsi_target_stat.h>
26 #include "iscsi_target_device.h"
27 #include "iscsi_target_nego.h"
28 #include "iscsi_target_erl0.h"
29 #include "iscsi_target_erl2.h"
30 #include "iscsi_target_login.h"
31 #include "iscsi_target_tpg.h"
32 #include "iscsi_target_util.h"
33 #include "iscsi_target.h"
34 #include "iscsi_target_parameters.h"
35 
36 #include <target/iscsi/iscsi_transport.h>
37 
38 static struct iscsi_login *iscsi_login_init_conn(struct iscsit_conn *conn)
39 {
40 	struct iscsi_login *login;
41 
42 	login = kzalloc(sizeof(struct iscsi_login), GFP_KERNEL);
43 	if (!login) {
44 		pr_err("Unable to allocate memory for struct iscsi_login.\n");
45 		return NULL;
46 	}
47 	conn->login = login;
48 	login->conn = conn;
49 	login->first_request = 1;
50 
51 	login->req_buf = kzalloc(MAX_KEY_VALUE_PAIRS, GFP_KERNEL);
52 	if (!login->req_buf) {
53 		pr_err("Unable to allocate memory for response buffer.\n");
54 		goto out_login;
55 	}
56 
57 	login->rsp_buf = kzalloc(MAX_KEY_VALUE_PAIRS, GFP_KERNEL);
58 	if (!login->rsp_buf) {
59 		pr_err("Unable to allocate memory for request buffer.\n");
60 		goto out_req_buf;
61 	}
62 
63 	conn->conn_login = login;
64 
65 	return login;
66 
67 out_req_buf:
68 	kfree(login->req_buf);
69 out_login:
70 	kfree(login);
71 	return NULL;
72 }
73 
74 /*
75  * Used by iscsi_target_nego.c:iscsi_target_locate_portal() to setup
76  * per struct iscsit_conn libcrypto contexts for crc32c and crc32-intel
77  */
78 int iscsi_login_setup_crypto(struct iscsit_conn *conn)
79 {
80 	struct crypto_ahash *tfm;
81 
82 	/*
83 	 * Setup slicing by CRC32C algorithm for RX and TX libcrypto contexts
84 	 * which will default to crc32c_intel.ko for cpu_has_xmm4_2, or fallback
85 	 * to software 1x8 byte slicing from crc32c.ko
86 	 */
87 	tfm = crypto_alloc_ahash("crc32c", 0, CRYPTO_ALG_ASYNC);
88 	if (IS_ERR(tfm)) {
89 		pr_err("crypto_alloc_ahash() failed\n");
90 		return -ENOMEM;
91 	}
92 
93 	conn->conn_rx_hash = ahash_request_alloc(tfm, GFP_KERNEL);
94 	if (!conn->conn_rx_hash) {
95 		pr_err("ahash_request_alloc() failed for conn_rx_hash\n");
96 		crypto_free_ahash(tfm);
97 		return -ENOMEM;
98 	}
99 	ahash_request_set_callback(conn->conn_rx_hash, 0, NULL, NULL);
100 
101 	conn->conn_tx_hash = ahash_request_alloc(tfm, GFP_KERNEL);
102 	if (!conn->conn_tx_hash) {
103 		pr_err("ahash_request_alloc() failed for conn_tx_hash\n");
104 		ahash_request_free(conn->conn_rx_hash);
105 		conn->conn_rx_hash = NULL;
106 		crypto_free_ahash(tfm);
107 		return -ENOMEM;
108 	}
109 	ahash_request_set_callback(conn->conn_tx_hash, 0, NULL, NULL);
110 
111 	return 0;
112 }
113 
114 static int iscsi_login_check_initiator_version(
115 	struct iscsit_conn *conn,
116 	u8 version_max,
117 	u8 version_min)
118 {
119 	if ((version_max != 0x00) || (version_min != 0x00)) {
120 		pr_err("Unsupported iSCSI IETF Pre-RFC Revision,"
121 			" version Min/Max 0x%02x/0x%02x, rejecting login.\n",
122 			version_min, version_max);
123 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_INITIATOR_ERR,
124 				ISCSI_LOGIN_STATUS_NO_VERSION);
125 		return -1;
126 	}
127 
128 	return 0;
129 }
130 
131 int iscsi_check_for_session_reinstatement(struct iscsit_conn *conn)
132 {
133 	int sessiontype;
134 	struct iscsi_param *initiatorname_param = NULL, *sessiontype_param = NULL;
135 	struct iscsi_portal_group *tpg = conn->tpg;
136 	struct iscsit_session *sess = NULL, *sess_p = NULL;
137 	struct se_portal_group *se_tpg = &tpg->tpg_se_tpg;
138 	struct se_session *se_sess, *se_sess_tmp;
139 
140 	initiatorname_param = iscsi_find_param_from_key(
141 			INITIATORNAME, conn->param_list);
142 	sessiontype_param = iscsi_find_param_from_key(
143 			SESSIONTYPE, conn->param_list);
144 	if (!initiatorname_param || !sessiontype_param) {
145 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_INITIATOR_ERR,
146 			ISCSI_LOGIN_STATUS_MISSING_FIELDS);
147 		return -1;
148 	}
149 
150 	sessiontype = (strncmp(sessiontype_param->value, NORMAL, 6)) ? 1 : 0;
151 
152 	spin_lock_bh(&se_tpg->session_lock);
153 	list_for_each_entry_safe(se_sess, se_sess_tmp, &se_tpg->tpg_sess_list,
154 			sess_list) {
155 
156 		sess_p = se_sess->fabric_sess_ptr;
157 		spin_lock(&sess_p->conn_lock);
158 		if (atomic_read(&sess_p->session_fall_back_to_erl0) ||
159 		    atomic_read(&sess_p->session_logout) ||
160 		    atomic_read(&sess_p->session_close) ||
161 		    (sess_p->time2retain_timer_flags & ISCSI_TF_EXPIRED)) {
162 			spin_unlock(&sess_p->conn_lock);
163 			continue;
164 		}
165 		if (!memcmp(sess_p->isid, conn->sess->isid, 6) &&
166 		   (!strcmp(sess_p->sess_ops->InitiatorName,
167 			    initiatorname_param->value) &&
168 		   (sess_p->sess_ops->SessionType == sessiontype))) {
169 			atomic_set(&sess_p->session_reinstatement, 1);
170 			atomic_set(&sess_p->session_fall_back_to_erl0, 1);
171 			atomic_set(&sess_p->session_close, 1);
172 			spin_unlock(&sess_p->conn_lock);
173 			iscsit_inc_session_usage_count(sess_p);
174 			iscsit_stop_time2retain_timer(sess_p);
175 			sess = sess_p;
176 			break;
177 		}
178 		spin_unlock(&sess_p->conn_lock);
179 	}
180 	spin_unlock_bh(&se_tpg->session_lock);
181 	/*
182 	 * If the Time2Retain handler has expired, the session is already gone.
183 	 */
184 	if (!sess)
185 		return 0;
186 
187 	pr_debug("%s iSCSI Session SID %u is still active for %s,"
188 		" performing session reinstatement.\n", (sessiontype) ?
189 		"Discovery" : "Normal", sess->sid,
190 		sess->sess_ops->InitiatorName);
191 
192 	spin_lock_bh(&sess->conn_lock);
193 	if (sess->session_state == TARG_SESS_STATE_FAILED) {
194 		spin_unlock_bh(&sess->conn_lock);
195 		iscsit_dec_session_usage_count(sess);
196 		return 0;
197 	}
198 	spin_unlock_bh(&sess->conn_lock);
199 
200 	iscsit_stop_session(sess, 1, 1);
201 	iscsit_dec_session_usage_count(sess);
202 
203 	return 0;
204 }
205 
206 static int iscsi_login_set_conn_values(
207 	struct iscsit_session *sess,
208 	struct iscsit_conn *conn,
209 	__be16 cid)
210 {
211 	int ret;
212 	conn->sess		= sess;
213 	conn->cid		= be16_to_cpu(cid);
214 	/*
215 	 * Generate a random Status sequence number (statsn) for the new
216 	 * iSCSI connection.
217 	 */
218 	ret = get_random_bytes_wait(&conn->stat_sn, sizeof(u32));
219 	if (unlikely(ret))
220 		return ret;
221 
222 	mutex_lock(&auth_id_lock);
223 	conn->auth_id		= iscsit_global->auth_id++;
224 	mutex_unlock(&auth_id_lock);
225 	return 0;
226 }
227 
228 __printf(2, 3) int iscsi_change_param_sprintf(
229 	struct iscsit_conn *conn,
230 	const char *fmt, ...)
231 {
232 	va_list args;
233 	unsigned char buf[64];
234 
235 	memset(buf, 0, sizeof buf);
236 
237 	va_start(args, fmt);
238 	vsnprintf(buf, sizeof buf, fmt, args);
239 	va_end(args);
240 
241 	if (iscsi_change_param_value(buf, conn->param_list, 0) < 0) {
242 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
243 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
244 		return -1;
245 	}
246 
247 	return 0;
248 }
249 EXPORT_SYMBOL(iscsi_change_param_sprintf);
250 
251 /*
252  *	This is the leading connection of a new session,
253  *	or session reinstatement.
254  */
255 static int iscsi_login_zero_tsih_s1(
256 	struct iscsit_conn *conn,
257 	unsigned char *buf)
258 {
259 	struct iscsit_session *sess = NULL;
260 	struct iscsi_login_req *pdu = (struct iscsi_login_req *)buf;
261 	int ret;
262 
263 	sess = kzalloc(sizeof(struct iscsit_session), GFP_KERNEL);
264 	if (!sess) {
265 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
266 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
267 		pr_err("Could not allocate memory for session\n");
268 		return -ENOMEM;
269 	}
270 
271 	if (iscsi_login_set_conn_values(sess, conn, pdu->cid))
272 		goto free_sess;
273 
274 	sess->init_task_tag	= pdu->itt;
275 	memcpy(&sess->isid, pdu->isid, 6);
276 	sess->exp_cmd_sn	= be32_to_cpu(pdu->cmdsn);
277 	INIT_LIST_HEAD(&sess->sess_conn_list);
278 	INIT_LIST_HEAD(&sess->sess_ooo_cmdsn_list);
279 	INIT_LIST_HEAD(&sess->cr_active_list);
280 	INIT_LIST_HEAD(&sess->cr_inactive_list);
281 	init_completion(&sess->async_msg_comp);
282 	init_completion(&sess->reinstatement_comp);
283 	init_completion(&sess->session_wait_comp);
284 	init_completion(&sess->session_waiting_on_uc_comp);
285 	mutex_init(&sess->cmdsn_mutex);
286 	spin_lock_init(&sess->conn_lock);
287 	spin_lock_init(&sess->cr_a_lock);
288 	spin_lock_init(&sess->cr_i_lock);
289 	spin_lock_init(&sess->session_usage_lock);
290 	spin_lock_init(&sess->ttt_lock);
291 
292 	timer_setup(&sess->time2retain_timer,
293 		    iscsit_handle_time2retain_timeout, 0);
294 
295 	ret = ida_alloc(&sess_ida, GFP_KERNEL);
296 	if (ret < 0) {
297 		pr_err("Session ID allocation failed %d\n", ret);
298 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
299 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
300 		goto free_sess;
301 	}
302 
303 	sess->session_index = ret;
304 	sess->creation_time = get_jiffies_64();
305 	/*
306 	 * The FFP CmdSN window values will be allocated from the TPG's
307 	 * Initiator Node's ACL once the login has been successfully completed.
308 	 */
309 	atomic_set(&sess->max_cmd_sn, be32_to_cpu(pdu->cmdsn));
310 
311 	sess->sess_ops = kzalloc(sizeof(struct iscsi_sess_ops), GFP_KERNEL);
312 	if (!sess->sess_ops) {
313 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
314 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
315 		pr_err("Unable to allocate memory for"
316 				" struct iscsi_sess_ops.\n");
317 		goto free_id;
318 	}
319 
320 	sess->se_sess = transport_alloc_session(TARGET_PROT_NORMAL);
321 	if (IS_ERR(sess->se_sess)) {
322 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
323 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
324 		goto free_ops;
325 	}
326 
327 	return 0;
328 
329 free_ops:
330 	kfree(sess->sess_ops);
331 free_id:
332 	ida_free(&sess_ida, sess->session_index);
333 free_sess:
334 	kfree(sess);
335 	conn->sess = NULL;
336 	return -ENOMEM;
337 }
338 
339 static int iscsi_login_zero_tsih_s2(
340 	struct iscsit_conn *conn)
341 {
342 	struct iscsi_node_attrib *na;
343 	struct iscsit_session *sess = conn->sess;
344 	struct iscsi_param *param;
345 	bool iser = false;
346 
347 	sess->tpg = conn->tpg;
348 
349 	/*
350 	 * Assign a new TPG Session Handle.  Note this is protected with
351 	 * struct iscsi_portal_group->np_login_sem from iscsit_access_np().
352 	 */
353 	sess->tsih = ++sess->tpg->ntsih;
354 	if (!sess->tsih)
355 		sess->tsih = ++sess->tpg->ntsih;
356 
357 	/*
358 	 * Create the default params from user defined values..
359 	 */
360 	if (iscsi_copy_param_list(&conn->param_list,
361 				conn->tpg->param_list, 1) < 0) {
362 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
363 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
364 		return -1;
365 	}
366 
367 	if (conn->conn_transport->transport_type == ISCSI_INFINIBAND)
368 		iser = true;
369 
370 	iscsi_set_keys_to_negotiate(conn->param_list, iser);
371 
372 	if (sess->sess_ops->SessionType)
373 		return iscsi_set_keys_irrelevant_for_discovery(
374 				conn->param_list);
375 
376 	na = iscsit_tpg_get_node_attrib(sess);
377 
378 	/*
379 	 * If ACL allows non-authorized access in TPG with CHAP,
380 	 * then set None to AuthMethod.
381 	 */
382 	param = iscsi_find_param_from_key(AUTHMETHOD, conn->param_list);
383 	if (param && !strstr(param->value, NONE)) {
384 		if (!iscsi_conn_auth_required(conn))
385 			if (iscsi_change_param_sprintf(conn, "AuthMethod=%s",
386 						       NONE))
387 				return -1;
388 	}
389 
390 	/*
391 	 * Need to send TargetPortalGroupTag back in first login response
392 	 * on any iSCSI connection where the Initiator provides TargetName.
393 	 * See 5.3.1.  Login Phase Start
394 	 *
395 	 * In our case, we have already located the struct iscsi_tiqn at this point.
396 	 */
397 	if (iscsi_change_param_sprintf(conn, "TargetPortalGroupTag=%hu", sess->tpg->tpgt))
398 		return -1;
399 
400 	/*
401 	 * Workaround for Initiators that have broken connection recovery logic.
402 	 *
403 	 * "We would really like to get rid of this." Linux-iSCSI.org team
404 	 */
405 	if (iscsi_change_param_sprintf(conn, "ErrorRecoveryLevel=%d", na->default_erl))
406 		return -1;
407 
408 	/*
409 	 * Set RDMAExtensions=Yes by default for iSER enabled network portals
410 	 */
411 	if (iser) {
412 		struct iscsi_param *param;
413 		unsigned long mrdsl, off;
414 		int rc;
415 
416 		if (iscsi_change_param_sprintf(conn, "RDMAExtensions=Yes"))
417 			return -1;
418 
419 		/*
420 		 * Make MaxRecvDataSegmentLength PAGE_SIZE aligned for
421 		 * Immediate Data + Unsolicited Data-OUT if necessary..
422 		 */
423 		param = iscsi_find_param_from_key("MaxRecvDataSegmentLength",
424 						  conn->param_list);
425 		if (!param) {
426 			iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
427 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
428 			return -1;
429 		}
430 		rc = kstrtoul(param->value, 0, &mrdsl);
431 		if (rc < 0) {
432 			iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
433 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
434 			return -1;
435 		}
436 		off = mrdsl % PAGE_SIZE;
437 		if (!off)
438 			goto check_prot;
439 
440 		if (mrdsl < PAGE_SIZE)
441 			mrdsl = PAGE_SIZE;
442 		else
443 			mrdsl -= off;
444 
445 		pr_warn("Aligning ISER MaxRecvDataSegmentLength: %lu down"
446 			" to PAGE_SIZE\n", mrdsl);
447 
448 		if (iscsi_change_param_sprintf(conn, "MaxRecvDataSegmentLength=%lu\n", mrdsl))
449 			return -1;
450 		/*
451 		 * ISER currently requires that ImmediateData + Unsolicited
452 		 * Data be disabled when protection / signature MRs are enabled.
453 		 */
454 check_prot:
455 		if (sess->se_sess->sup_prot_ops &
456 		   (TARGET_PROT_DOUT_STRIP | TARGET_PROT_DOUT_PASS |
457 		    TARGET_PROT_DOUT_INSERT)) {
458 
459 			if (iscsi_change_param_sprintf(conn, "ImmediateData=No"))
460 				return -1;
461 
462 			if (iscsi_change_param_sprintf(conn, "InitialR2T=Yes"))
463 				return -1;
464 
465 			pr_debug("Forcing ImmediateData=No + InitialR2T=Yes for"
466 				 " T10-PI enabled ISER session\n");
467 		}
468 	}
469 
470 	return 0;
471 }
472 
473 static int iscsi_login_non_zero_tsih_s1(
474 	struct iscsit_conn *conn,
475 	unsigned char *buf)
476 {
477 	struct iscsi_login_req *pdu = (struct iscsi_login_req *)buf;
478 
479 	return iscsi_login_set_conn_values(NULL, conn, pdu->cid);
480 }
481 
482 /*
483  *	Add a new connection to an existing session.
484  */
485 static int iscsi_login_non_zero_tsih_s2(
486 	struct iscsit_conn *conn,
487 	unsigned char *buf)
488 {
489 	struct iscsi_portal_group *tpg = conn->tpg;
490 	struct iscsit_session *sess = NULL, *sess_p = NULL;
491 	struct se_portal_group *se_tpg = &tpg->tpg_se_tpg;
492 	struct se_session *se_sess, *se_sess_tmp;
493 	struct iscsi_login_req *pdu = (struct iscsi_login_req *)buf;
494 	bool iser = false;
495 
496 	spin_lock_bh(&se_tpg->session_lock);
497 	list_for_each_entry_safe(se_sess, se_sess_tmp, &se_tpg->tpg_sess_list,
498 			sess_list) {
499 
500 		sess_p = (struct iscsit_session *)se_sess->fabric_sess_ptr;
501 		if (atomic_read(&sess_p->session_fall_back_to_erl0) ||
502 		    atomic_read(&sess_p->session_logout) ||
503 		    atomic_read(&sess_p->session_close) ||
504 		   (sess_p->time2retain_timer_flags & ISCSI_TF_EXPIRED))
505 			continue;
506 		if (!memcmp(sess_p->isid, pdu->isid, 6) &&
507 		     (sess_p->tsih == be16_to_cpu(pdu->tsih))) {
508 			iscsit_inc_session_usage_count(sess_p);
509 			iscsit_stop_time2retain_timer(sess_p);
510 			sess = sess_p;
511 			break;
512 		}
513 	}
514 	spin_unlock_bh(&se_tpg->session_lock);
515 
516 	/*
517 	 * If the Time2Retain handler has expired, the session is already gone.
518 	 */
519 	if (!sess) {
520 		pr_err("Initiator attempting to add a connection to"
521 			" a non-existent session, rejecting iSCSI Login.\n");
522 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_INITIATOR_ERR,
523 				ISCSI_LOGIN_STATUS_NO_SESSION);
524 		return -1;
525 	}
526 
527 	/*
528 	 * Stop the Time2Retain timer if this is a failed session, we restart
529 	 * the timer if the login is not successful.
530 	 */
531 	spin_lock_bh(&sess->conn_lock);
532 	if (sess->session_state == TARG_SESS_STATE_FAILED)
533 		atomic_set(&sess->session_continuation, 1);
534 	spin_unlock_bh(&sess->conn_lock);
535 
536 	if (iscsi_login_set_conn_values(sess, conn, pdu->cid) < 0 ||
537 	    iscsi_copy_param_list(&conn->param_list,
538 			conn->tpg->param_list, 0) < 0) {
539 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
540 				ISCSI_LOGIN_STATUS_NO_RESOURCES);
541 		return -1;
542 	}
543 
544 	if (conn->conn_transport->transport_type == ISCSI_INFINIBAND)
545 		iser = true;
546 
547 	iscsi_set_keys_to_negotiate(conn->param_list, iser);
548 	/*
549 	 * Need to send TargetPortalGroupTag back in first login response
550 	 * on any iSCSI connection where the Initiator provides TargetName.
551 	 * See 5.3.1.  Login Phase Start
552 	 *
553 	 * In our case, we have already located the struct iscsi_tiqn at this point.
554 	 */
555 	if (iscsi_change_param_sprintf(conn, "TargetPortalGroupTag=%hu", sess->tpg->tpgt))
556 		return -1;
557 
558 	return 0;
559 }
560 
561 int iscsi_login_post_auth_non_zero_tsih(
562 	struct iscsit_conn *conn,
563 	u16 cid,
564 	u32 exp_statsn)
565 {
566 	struct iscsit_conn *conn_ptr = NULL;
567 	struct iscsi_conn_recovery *cr = NULL;
568 	struct iscsit_session *sess = conn->sess;
569 
570 	/*
571 	 * By following item 5 in the login table,  if we have found
572 	 * an existing ISID and a valid/existing TSIH and an existing
573 	 * CID we do connection reinstatement.  Currently we dont not
574 	 * support it so we send back an non-zero status class to the
575 	 * initiator and release the new connection.
576 	 */
577 	conn_ptr = iscsit_get_conn_from_cid_rcfr(sess, cid);
578 	if (conn_ptr) {
579 		pr_err("Connection exists with CID %hu for %s,"
580 			" performing connection reinstatement.\n",
581 			conn_ptr->cid, sess->sess_ops->InitiatorName);
582 
583 		iscsit_connection_reinstatement_rcfr(conn_ptr);
584 		iscsit_dec_conn_usage_count(conn_ptr);
585 	}
586 
587 	/*
588 	 * Check for any connection recovery entries containing CID.
589 	 * We use the original ExpStatSN sent in the first login request
590 	 * to acknowledge commands for the failed connection.
591 	 *
592 	 * Also note that an explict logout may have already been sent,
593 	 * but the response may not be sent due to additional connection
594 	 * loss.
595 	 */
596 	if (sess->sess_ops->ErrorRecoveryLevel == 2) {
597 		cr = iscsit_get_inactive_connection_recovery_entry(
598 				sess, cid);
599 		if (cr) {
600 			pr_debug("Performing implicit logout"
601 				" for connection recovery on CID: %hu\n",
602 					conn->cid);
603 			iscsit_discard_cr_cmds_by_expstatsn(cr, exp_statsn);
604 		}
605 	}
606 
607 	/*
608 	 * Else we follow item 4 from the login table in that we have
609 	 * found an existing ISID and a valid/existing TSIH and a new
610 	 * CID we go ahead and continue to add a new connection to the
611 	 * session.
612 	 */
613 	pr_debug("Adding CID %hu to existing session for %s.\n",
614 			cid, sess->sess_ops->InitiatorName);
615 
616 	if ((atomic_read(&sess->nconn) + 1) > sess->sess_ops->MaxConnections) {
617 		pr_err("Adding additional connection to this session"
618 			" would exceed MaxConnections %d, login failed.\n",
619 				sess->sess_ops->MaxConnections);
620 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_INITIATOR_ERR,
621 				ISCSI_LOGIN_STATUS_ISID_ERROR);
622 		return -1;
623 	}
624 
625 	return 0;
626 }
627 
628 static void iscsi_post_login_start_timers(struct iscsit_conn *conn)
629 {
630 	struct iscsit_session *sess = conn->sess;
631 	/*
632 	 * FIXME: Unsolicited NopIN support for ISER
633 	 */
634 	if (conn->conn_transport->transport_type == ISCSI_INFINIBAND)
635 		return;
636 
637 	if (!sess->sess_ops->SessionType)
638 		iscsit_start_nopin_timer(conn);
639 }
640 
641 int iscsit_start_kthreads(struct iscsit_conn *conn)
642 {
643 	int ret = 0;
644 
645 	spin_lock(&iscsit_global->ts_bitmap_lock);
646 	conn->bitmap_id = bitmap_find_free_region(iscsit_global->ts_bitmap,
647 					ISCSIT_BITMAP_BITS, get_order(1));
648 	spin_unlock(&iscsit_global->ts_bitmap_lock);
649 
650 	if (conn->bitmap_id < 0) {
651 		pr_err("bitmap_find_free_region() failed for"
652 		       " iscsit_start_kthreads()\n");
653 		return -ENOMEM;
654 	}
655 
656 	conn->tx_thread = kthread_run(iscsi_target_tx_thread, conn,
657 				      "%s", ISCSI_TX_THREAD_NAME);
658 	if (IS_ERR(conn->tx_thread)) {
659 		pr_err("Unable to start iscsi_target_tx_thread\n");
660 		ret = PTR_ERR(conn->tx_thread);
661 		goto out_bitmap;
662 	}
663 	conn->tx_thread_active = true;
664 
665 	conn->rx_thread = kthread_run(iscsi_target_rx_thread, conn,
666 				      "%s", ISCSI_RX_THREAD_NAME);
667 	if (IS_ERR(conn->rx_thread)) {
668 		pr_err("Unable to start iscsi_target_rx_thread\n");
669 		ret = PTR_ERR(conn->rx_thread);
670 		goto out_tx;
671 	}
672 	conn->rx_thread_active = true;
673 
674 	return 0;
675 out_tx:
676 	send_sig(SIGINT, conn->tx_thread, 1);
677 	kthread_stop(conn->tx_thread);
678 	conn->tx_thread_active = false;
679 out_bitmap:
680 	spin_lock(&iscsit_global->ts_bitmap_lock);
681 	bitmap_release_region(iscsit_global->ts_bitmap, conn->bitmap_id,
682 			      get_order(1));
683 	spin_unlock(&iscsit_global->ts_bitmap_lock);
684 	return ret;
685 }
686 
687 void iscsi_post_login_handler(
688 	struct iscsi_np *np,
689 	struct iscsit_conn *conn,
690 	u8 zero_tsih)
691 {
692 	int stop_timer = 0;
693 	struct iscsit_session *sess = conn->sess;
694 	struct se_session *se_sess = sess->se_sess;
695 	struct iscsi_portal_group *tpg = sess->tpg;
696 	struct se_portal_group *se_tpg = &tpg->tpg_se_tpg;
697 
698 	iscsit_inc_conn_usage_count(conn);
699 
700 	iscsit_collect_login_stats(conn, ISCSI_STATUS_CLS_SUCCESS,
701 			ISCSI_LOGIN_STATUS_ACCEPT);
702 
703 	pr_debug("Moving to TARG_CONN_STATE_LOGGED_IN.\n");
704 	conn->conn_state = TARG_CONN_STATE_LOGGED_IN;
705 
706 	iscsi_set_connection_parameters(conn->conn_ops, conn->param_list);
707 	/*
708 	 * SCSI Initiator -> SCSI Target Port Mapping
709 	 */
710 	if (!zero_tsih) {
711 		iscsi_set_session_parameters(sess->sess_ops,
712 				conn->param_list, 0);
713 		iscsi_release_param_list(conn->param_list);
714 		conn->param_list = NULL;
715 
716 		spin_lock_bh(&sess->conn_lock);
717 		atomic_set(&sess->session_continuation, 0);
718 		if (sess->session_state == TARG_SESS_STATE_FAILED) {
719 			pr_debug("Moving to"
720 					" TARG_SESS_STATE_LOGGED_IN.\n");
721 			sess->session_state = TARG_SESS_STATE_LOGGED_IN;
722 			stop_timer = 1;
723 		}
724 
725 		pr_debug("iSCSI Login successful on CID: %hu from %pISpc to"
726 			" %pISpc,%hu\n", conn->cid, &conn->login_sockaddr,
727 			&conn->local_sockaddr, tpg->tpgt);
728 
729 		list_add_tail(&conn->conn_list, &sess->sess_conn_list);
730 		atomic_inc(&sess->nconn);
731 		pr_debug("Incremented iSCSI Connection count to %d"
732 			" from node: %s\n", atomic_read(&sess->nconn),
733 			sess->sess_ops->InitiatorName);
734 		spin_unlock_bh(&sess->conn_lock);
735 
736 		iscsi_post_login_start_timers(conn);
737 		/*
738 		 * Determine CPU mask to ensure connection's RX and TX kthreads
739 		 * are scheduled on the same CPU.
740 		 */
741 		iscsit_thread_get_cpumask(conn);
742 		conn->conn_rx_reset_cpumask = 1;
743 		conn->conn_tx_reset_cpumask = 1;
744 		/*
745 		 * Wakeup the sleeping iscsi_target_rx_thread() now that
746 		 * iscsit_conn is in TARG_CONN_STATE_LOGGED_IN state.
747 		 */
748 		complete(&conn->rx_login_comp);
749 		iscsit_dec_conn_usage_count(conn);
750 
751 		if (stop_timer) {
752 			spin_lock_bh(&se_tpg->session_lock);
753 			iscsit_stop_time2retain_timer(sess);
754 			spin_unlock_bh(&se_tpg->session_lock);
755 		}
756 		iscsit_dec_session_usage_count(sess);
757 		return;
758 	}
759 
760 	iscsi_set_session_parameters(sess->sess_ops, conn->param_list, 1);
761 	iscsi_release_param_list(conn->param_list);
762 	conn->param_list = NULL;
763 
764 	iscsit_determine_maxcmdsn(sess);
765 
766 	spin_lock_bh(&se_tpg->session_lock);
767 	__transport_register_session(&sess->tpg->tpg_se_tpg,
768 			se_sess->se_node_acl, se_sess, sess);
769 	pr_debug("Moving to TARG_SESS_STATE_LOGGED_IN.\n");
770 	sess->session_state = TARG_SESS_STATE_LOGGED_IN;
771 
772 	pr_debug("iSCSI Login successful on CID: %hu from %pISpc to %pISpc,%hu\n",
773 		conn->cid, &conn->login_sockaddr, &conn->local_sockaddr,
774 		tpg->tpgt);
775 
776 	spin_lock_bh(&sess->conn_lock);
777 	list_add_tail(&conn->conn_list, &sess->sess_conn_list);
778 	atomic_inc(&sess->nconn);
779 	pr_debug("Incremented iSCSI Connection count to %d from node:"
780 		" %s\n", atomic_read(&sess->nconn),
781 		sess->sess_ops->InitiatorName);
782 	spin_unlock_bh(&sess->conn_lock);
783 
784 	sess->sid = tpg->sid++;
785 	if (!sess->sid)
786 		sess->sid = tpg->sid++;
787 	pr_debug("Established iSCSI session from node: %s\n",
788 			sess->sess_ops->InitiatorName);
789 
790 	tpg->nsessions++;
791 	if (tpg->tpg_tiqn)
792 		tpg->tpg_tiqn->tiqn_nsessions++;
793 
794 	pr_debug("Incremented number of active iSCSI sessions to %u on"
795 		" iSCSI Target Portal Group: %hu\n", tpg->nsessions, tpg->tpgt);
796 	spin_unlock_bh(&se_tpg->session_lock);
797 
798 	iscsi_post_login_start_timers(conn);
799 	/*
800 	 * Determine CPU mask to ensure connection's RX and TX kthreads
801 	 * are scheduled on the same CPU.
802 	 */
803 	iscsit_thread_get_cpumask(conn);
804 	conn->conn_rx_reset_cpumask = 1;
805 	conn->conn_tx_reset_cpumask = 1;
806 	/*
807 	 * Wakeup the sleeping iscsi_target_rx_thread() now that
808 	 * iscsit_conn is in TARG_CONN_STATE_LOGGED_IN state.
809 	 */
810 	complete(&conn->rx_login_comp);
811 	iscsit_dec_conn_usage_count(conn);
812 }
813 
814 int iscsit_setup_np(
815 	struct iscsi_np *np,
816 	struct sockaddr_storage *sockaddr)
817 {
818 	struct socket *sock = NULL;
819 	int backlog = ISCSIT_TCP_BACKLOG, ret, len;
820 
821 	switch (np->np_network_transport) {
822 	case ISCSI_TCP:
823 		np->np_ip_proto = IPPROTO_TCP;
824 		np->np_sock_type = SOCK_STREAM;
825 		break;
826 	case ISCSI_SCTP_TCP:
827 		np->np_ip_proto = IPPROTO_SCTP;
828 		np->np_sock_type = SOCK_STREAM;
829 		break;
830 	case ISCSI_SCTP_UDP:
831 		np->np_ip_proto = IPPROTO_SCTP;
832 		np->np_sock_type = SOCK_SEQPACKET;
833 		break;
834 	default:
835 		pr_err("Unsupported network_transport: %d\n",
836 				np->np_network_transport);
837 		return -EINVAL;
838 	}
839 
840 	ret = sock_create(sockaddr->ss_family, np->np_sock_type,
841 			np->np_ip_proto, &sock);
842 	if (ret < 0) {
843 		pr_err("sock_create() failed.\n");
844 		return ret;
845 	}
846 	np->np_socket = sock;
847 	/*
848 	 * Setup the np->np_sockaddr from the passed sockaddr setup
849 	 * in iscsi_target_configfs.c code..
850 	 */
851 	memcpy(&np->np_sockaddr, sockaddr,
852 			sizeof(struct sockaddr_storage));
853 
854 	if (sockaddr->ss_family == AF_INET6)
855 		len = sizeof(struct sockaddr_in6);
856 	else
857 		len = sizeof(struct sockaddr_in);
858 	/*
859 	 * Set SO_REUSEADDR, and disable Nagle Algorithm with TCP_NODELAY.
860 	 */
861 	if (np->np_network_transport == ISCSI_TCP)
862 		tcp_sock_set_nodelay(sock->sk);
863 	sock_set_reuseaddr(sock->sk);
864 	ip_sock_set_freebind(sock->sk);
865 
866 	ret = kernel_bind(sock, (struct sockaddr *)&np->np_sockaddr, len);
867 	if (ret < 0) {
868 		pr_err("kernel_bind() failed: %d\n", ret);
869 		goto fail;
870 	}
871 
872 	ret = kernel_listen(sock, backlog);
873 	if (ret != 0) {
874 		pr_err("kernel_listen() failed: %d\n", ret);
875 		goto fail;
876 	}
877 
878 	return 0;
879 fail:
880 	np->np_socket = NULL;
881 	sock_release(sock);
882 	return ret;
883 }
884 
885 int iscsi_target_setup_login_socket(
886 	struct iscsi_np *np,
887 	struct sockaddr_storage *sockaddr)
888 {
889 	struct iscsit_transport *t;
890 	int rc;
891 
892 	t = iscsit_get_transport(np->np_network_transport);
893 	if (!t)
894 		return -EINVAL;
895 
896 	rc = t->iscsit_setup_np(np, sockaddr);
897 	if (rc < 0) {
898 		iscsit_put_transport(t);
899 		return rc;
900 	}
901 
902 	np->np_transport = t;
903 	np->enabled = true;
904 	return 0;
905 }
906 
907 int iscsit_accept_np(struct iscsi_np *np, struct iscsit_conn *conn)
908 {
909 	struct socket *new_sock, *sock = np->np_socket;
910 	struct sockaddr_in sock_in;
911 	struct sockaddr_in6 sock_in6;
912 	int rc;
913 
914 	rc = kernel_accept(sock, &new_sock, 0);
915 	if (rc < 0)
916 		return rc;
917 
918 	conn->sock = new_sock;
919 	conn->login_family = np->np_sockaddr.ss_family;
920 
921 	if (np->np_sockaddr.ss_family == AF_INET6) {
922 		memset(&sock_in6, 0, sizeof(struct sockaddr_in6));
923 
924 		rc = conn->sock->ops->getname(conn->sock,
925 				(struct sockaddr *)&sock_in6, 1);
926 		if (rc >= 0) {
927 			if (!ipv6_addr_v4mapped(&sock_in6.sin6_addr)) {
928 				memcpy(&conn->login_sockaddr, &sock_in6, sizeof(sock_in6));
929 			} else {
930 				/* Pretend to be an ipv4 socket */
931 				sock_in.sin_family = AF_INET;
932 				sock_in.sin_port = sock_in6.sin6_port;
933 				memcpy(&sock_in.sin_addr, &sock_in6.sin6_addr.s6_addr32[3], 4);
934 				memcpy(&conn->login_sockaddr, &sock_in, sizeof(sock_in));
935 			}
936 		}
937 
938 		rc = conn->sock->ops->getname(conn->sock,
939 				(struct sockaddr *)&sock_in6, 0);
940 		if (rc >= 0) {
941 			if (!ipv6_addr_v4mapped(&sock_in6.sin6_addr)) {
942 				memcpy(&conn->local_sockaddr, &sock_in6, sizeof(sock_in6));
943 			} else {
944 				/* Pretend to be an ipv4 socket */
945 				sock_in.sin_family = AF_INET;
946 				sock_in.sin_port = sock_in6.sin6_port;
947 				memcpy(&sock_in.sin_addr, &sock_in6.sin6_addr.s6_addr32[3], 4);
948 				memcpy(&conn->local_sockaddr, &sock_in, sizeof(sock_in));
949 			}
950 		}
951 	} else {
952 		memset(&sock_in, 0, sizeof(struct sockaddr_in));
953 
954 		rc = conn->sock->ops->getname(conn->sock,
955 				(struct sockaddr *)&sock_in, 1);
956 		if (rc >= 0)
957 			memcpy(&conn->login_sockaddr, &sock_in, sizeof(sock_in));
958 
959 		rc = conn->sock->ops->getname(conn->sock,
960 				(struct sockaddr *)&sock_in, 0);
961 		if (rc >= 0)
962 			memcpy(&conn->local_sockaddr, &sock_in, sizeof(sock_in));
963 	}
964 
965 	return 0;
966 }
967 
968 int iscsit_get_login_rx(struct iscsit_conn *conn, struct iscsi_login *login)
969 {
970 	struct iscsi_login_req *login_req;
971 	u32 padding = 0, payload_length;
972 
973 	if (iscsi_login_rx_data(conn, login->req, ISCSI_HDR_LEN) < 0)
974 		return -1;
975 
976 	login_req = (struct iscsi_login_req *)login->req;
977 	payload_length	= ntoh24(login_req->dlength);
978 	padding = ((-payload_length) & 3);
979 
980 	pr_debug("Got Login Command, Flags 0x%02x, ITT: 0x%08x,"
981 		" CmdSN: 0x%08x, ExpStatSN: 0x%08x, CID: %hu, Length: %u\n",
982 		login_req->flags, login_req->itt, login_req->cmdsn,
983 		login_req->exp_statsn, login_req->cid, payload_length);
984 	/*
985 	 * Setup the initial iscsi_login values from the leading
986 	 * login request PDU.
987 	 */
988 	if (login->first_request) {
989 		login_req = (struct iscsi_login_req *)login->req;
990 		login->leading_connection = (!login_req->tsih) ? 1 : 0;
991 		login->current_stage	= ISCSI_LOGIN_CURRENT_STAGE(login_req->flags);
992 		login->version_min	= login_req->min_version;
993 		login->version_max	= login_req->max_version;
994 		memcpy(login->isid, login_req->isid, 6);
995 		login->cmd_sn		= be32_to_cpu(login_req->cmdsn);
996 		login->init_task_tag	= login_req->itt;
997 		login->initial_exp_statsn = be32_to_cpu(login_req->exp_statsn);
998 		login->cid		= be16_to_cpu(login_req->cid);
999 		login->tsih		= be16_to_cpu(login_req->tsih);
1000 	}
1001 
1002 	if (iscsi_target_check_login_request(conn, login) < 0)
1003 		return -1;
1004 
1005 	memset(login->req_buf, 0, MAX_KEY_VALUE_PAIRS);
1006 	if (iscsi_login_rx_data(conn, login->req_buf,
1007 				payload_length + padding) < 0)
1008 		return -1;
1009 
1010 	return 0;
1011 }
1012 
1013 int iscsit_put_login_tx(struct iscsit_conn *conn, struct iscsi_login *login,
1014 			u32 length)
1015 {
1016 	if (iscsi_login_tx_data(conn, login->rsp, login->rsp_buf, length) < 0)
1017 		return -1;
1018 
1019 	return 0;
1020 }
1021 
1022 static int
1023 iscsit_conn_set_transport(struct iscsit_conn *conn, struct iscsit_transport *t)
1024 {
1025 	int rc;
1026 
1027 	if (!t->owner) {
1028 		conn->conn_transport = t;
1029 		return 0;
1030 	}
1031 
1032 	rc = try_module_get(t->owner);
1033 	if (!rc) {
1034 		pr_err("try_module_get() failed for %s\n", t->name);
1035 		return -EINVAL;
1036 	}
1037 
1038 	conn->conn_transport = t;
1039 	return 0;
1040 }
1041 
1042 static struct iscsit_conn *iscsit_alloc_conn(struct iscsi_np *np)
1043 {
1044 	struct iscsit_conn *conn;
1045 
1046 	conn = kzalloc(sizeof(struct iscsit_conn), GFP_KERNEL);
1047 	if (!conn) {
1048 		pr_err("Could not allocate memory for new connection\n");
1049 		return NULL;
1050 	}
1051 	pr_debug("Moving to TARG_CONN_STATE_FREE.\n");
1052 	conn->conn_state = TARG_CONN_STATE_FREE;
1053 
1054 	init_waitqueue_head(&conn->queues_wq);
1055 	INIT_LIST_HEAD(&conn->conn_list);
1056 	INIT_LIST_HEAD(&conn->conn_cmd_list);
1057 	INIT_LIST_HEAD(&conn->immed_queue_list);
1058 	INIT_LIST_HEAD(&conn->response_queue_list);
1059 	init_completion(&conn->conn_post_wait_comp);
1060 	init_completion(&conn->conn_wait_comp);
1061 	init_completion(&conn->conn_wait_rcfr_comp);
1062 	init_completion(&conn->conn_waiting_on_uc_comp);
1063 	init_completion(&conn->conn_logout_comp);
1064 	init_completion(&conn->rx_half_close_comp);
1065 	init_completion(&conn->tx_half_close_comp);
1066 	init_completion(&conn->rx_login_comp);
1067 	spin_lock_init(&conn->cmd_lock);
1068 	spin_lock_init(&conn->conn_usage_lock);
1069 	spin_lock_init(&conn->immed_queue_lock);
1070 	spin_lock_init(&conn->nopin_timer_lock);
1071 	spin_lock_init(&conn->response_queue_lock);
1072 	spin_lock_init(&conn->state_lock);
1073 	spin_lock_init(&conn->login_worker_lock);
1074 	spin_lock_init(&conn->login_timer_lock);
1075 
1076 	timer_setup(&conn->nopin_response_timer,
1077 		    iscsit_handle_nopin_response_timeout, 0);
1078 	timer_setup(&conn->nopin_timer, iscsit_handle_nopin_timeout, 0);
1079 	timer_setup(&conn->login_timer, iscsit_login_timeout, 0);
1080 
1081 	if (iscsit_conn_set_transport(conn, np->np_transport) < 0)
1082 		goto free_conn;
1083 
1084 	conn->conn_ops = kzalloc(sizeof(struct iscsi_conn_ops), GFP_KERNEL);
1085 	if (!conn->conn_ops) {
1086 		pr_err("Unable to allocate memory for struct iscsi_conn_ops.\n");
1087 		goto put_transport;
1088 	}
1089 
1090 	if (!zalloc_cpumask_var(&conn->conn_cpumask, GFP_KERNEL)) {
1091 		pr_err("Unable to allocate conn->conn_cpumask\n");
1092 		goto free_conn_ops;
1093 	}
1094 
1095 	if (!zalloc_cpumask_var(&conn->allowed_cpumask, GFP_KERNEL)) {
1096 		pr_err("Unable to allocate conn->allowed_cpumask\n");
1097 		goto free_conn_cpumask;
1098 	}
1099 
1100 	conn->cmd_cnt = target_alloc_cmd_counter();
1101 	if (!conn->cmd_cnt)
1102 		goto free_conn_allowed_cpumask;
1103 
1104 	return conn;
1105 
1106 free_conn_allowed_cpumask:
1107 	free_cpumask_var(conn->allowed_cpumask);
1108 free_conn_cpumask:
1109 	free_cpumask_var(conn->conn_cpumask);
1110 free_conn_ops:
1111 	kfree(conn->conn_ops);
1112 put_transport:
1113 	iscsit_put_transport(conn->conn_transport);
1114 free_conn:
1115 	kfree(conn);
1116 	return NULL;
1117 }
1118 
1119 void iscsit_free_conn(struct iscsit_conn *conn)
1120 {
1121 	target_free_cmd_counter(conn->cmd_cnt);
1122 	free_cpumask_var(conn->allowed_cpumask);
1123 	free_cpumask_var(conn->conn_cpumask);
1124 	kfree(conn->conn_ops);
1125 	iscsit_put_transport(conn->conn_transport);
1126 	kfree(conn);
1127 }
1128 
1129 void iscsi_target_login_sess_out(struct iscsit_conn *conn,
1130 				 bool zero_tsih, bool new_sess)
1131 {
1132 	if (!new_sess)
1133 		goto old_sess_out;
1134 
1135 	pr_err("iSCSI Login negotiation failed.\n");
1136 	iscsit_collect_login_stats(conn, ISCSI_STATUS_CLS_INITIATOR_ERR,
1137 				   ISCSI_LOGIN_STATUS_INIT_ERR);
1138 	if (!zero_tsih || !conn->sess)
1139 		goto old_sess_out;
1140 
1141 	transport_free_session(conn->sess->se_sess);
1142 	ida_free(&sess_ida, conn->sess->session_index);
1143 	kfree(conn->sess->sess_ops);
1144 	kfree(conn->sess);
1145 	conn->sess = NULL;
1146 
1147 old_sess_out:
1148 	/*
1149 	 * If login negotiation fails check if the Time2Retain timer
1150 	 * needs to be restarted.
1151 	 */
1152 	if (!zero_tsih && conn->sess) {
1153 		spin_lock_bh(&conn->sess->conn_lock);
1154 		if (conn->sess->session_state == TARG_SESS_STATE_FAILED) {
1155 			struct se_portal_group *se_tpg =
1156 					&conn->tpg->tpg_se_tpg;
1157 
1158 			atomic_set(&conn->sess->session_continuation, 0);
1159 			spin_unlock_bh(&conn->sess->conn_lock);
1160 			spin_lock_bh(&se_tpg->session_lock);
1161 			iscsit_start_time2retain_handler(conn->sess);
1162 			spin_unlock_bh(&se_tpg->session_lock);
1163 		} else
1164 			spin_unlock_bh(&conn->sess->conn_lock);
1165 		iscsit_dec_session_usage_count(conn->sess);
1166 	}
1167 
1168 	ahash_request_free(conn->conn_tx_hash);
1169 	if (conn->conn_rx_hash) {
1170 		struct crypto_ahash *tfm;
1171 
1172 		tfm = crypto_ahash_reqtfm(conn->conn_rx_hash);
1173 		ahash_request_free(conn->conn_rx_hash);
1174 		crypto_free_ahash(tfm);
1175 	}
1176 
1177 	if (conn->param_list) {
1178 		iscsi_release_param_list(conn->param_list);
1179 		conn->param_list = NULL;
1180 	}
1181 	iscsi_target_nego_release(conn);
1182 
1183 	if (conn->sock) {
1184 		sock_release(conn->sock);
1185 		conn->sock = NULL;
1186 	}
1187 
1188 	if (conn->conn_transport->iscsit_wait_conn)
1189 		conn->conn_transport->iscsit_wait_conn(conn);
1190 
1191 	if (conn->conn_transport->iscsit_free_conn)
1192 		conn->conn_transport->iscsit_free_conn(conn);
1193 
1194 	iscsit_free_conn(conn);
1195 }
1196 
1197 static int __iscsi_target_login_thread(struct iscsi_np *np)
1198 {
1199 	u8 *buffer, zero_tsih = 0;
1200 	int ret = 0, rc;
1201 	struct iscsit_conn *conn = NULL;
1202 	struct iscsi_login *login;
1203 	struct iscsi_portal_group *tpg = NULL;
1204 	struct iscsi_login_req *pdu;
1205 	struct iscsi_tpg_np *tpg_np;
1206 	bool new_sess = false;
1207 
1208 	flush_signals(current);
1209 
1210 	spin_lock_bh(&np->np_thread_lock);
1211 	if (atomic_dec_if_positive(&np->np_reset_count) >= 0) {
1212 		np->np_thread_state = ISCSI_NP_THREAD_ACTIVE;
1213 		spin_unlock_bh(&np->np_thread_lock);
1214 		complete(&np->np_restart_comp);
1215 		return 1;
1216 	} else if (np->np_thread_state == ISCSI_NP_THREAD_SHUTDOWN) {
1217 		spin_unlock_bh(&np->np_thread_lock);
1218 		goto exit;
1219 	} else {
1220 		np->np_thread_state = ISCSI_NP_THREAD_ACTIVE;
1221 	}
1222 	spin_unlock_bh(&np->np_thread_lock);
1223 
1224 	conn = iscsit_alloc_conn(np);
1225 	if (!conn) {
1226 		/* Get another socket */
1227 		return 1;
1228 	}
1229 
1230 	rc = np->np_transport->iscsit_accept_np(np, conn);
1231 	if (rc == -ENOSYS) {
1232 		complete(&np->np_restart_comp);
1233 		iscsit_free_conn(conn);
1234 		goto exit;
1235 	} else if (rc < 0) {
1236 		spin_lock_bh(&np->np_thread_lock);
1237 		if (atomic_dec_if_positive(&np->np_reset_count) >= 0) {
1238 			np->np_thread_state = ISCSI_NP_THREAD_ACTIVE;
1239 			spin_unlock_bh(&np->np_thread_lock);
1240 			complete(&np->np_restart_comp);
1241 			iscsit_free_conn(conn);
1242 			/* Get another socket */
1243 			return 1;
1244 		}
1245 		spin_unlock_bh(&np->np_thread_lock);
1246 		iscsit_free_conn(conn);
1247 		return 1;
1248 	}
1249 	/*
1250 	 * Perform the remaining iSCSI connection initialization items..
1251 	 */
1252 	login = iscsi_login_init_conn(conn);
1253 	if (!login) {
1254 		goto new_sess_out;
1255 	}
1256 
1257 	iscsit_start_login_timer(conn, current);
1258 
1259 	pr_debug("Moving to TARG_CONN_STATE_XPT_UP.\n");
1260 	conn->conn_state = TARG_CONN_STATE_XPT_UP;
1261 	/*
1262 	 * This will process the first login request + payload..
1263 	 */
1264 	rc = np->np_transport->iscsit_get_login_rx(conn, login);
1265 	if (rc == 1)
1266 		return 1;
1267 	else if (rc < 0)
1268 		goto new_sess_out;
1269 
1270 	buffer = &login->req[0];
1271 	pdu = (struct iscsi_login_req *)buffer;
1272 	/*
1273 	 * Used by iscsit_tx_login_rsp() for Login Resonses PDUs
1274 	 * when Status-Class != 0.
1275 	*/
1276 	conn->login_itt	= pdu->itt;
1277 
1278 	spin_lock_bh(&np->np_thread_lock);
1279 	if (np->np_thread_state != ISCSI_NP_THREAD_ACTIVE) {
1280 		spin_unlock_bh(&np->np_thread_lock);
1281 		pr_err("iSCSI Network Portal on %pISpc currently not"
1282 			" active.\n", &np->np_sockaddr);
1283 		iscsit_tx_login_rsp(conn, ISCSI_STATUS_CLS_TARGET_ERR,
1284 				ISCSI_LOGIN_STATUS_SVC_UNAVAILABLE);
1285 		goto new_sess_out;
1286 	}
1287 	spin_unlock_bh(&np->np_thread_lock);
1288 
1289 	conn->network_transport = np->np_network_transport;
1290 
1291 	pr_debug("Received iSCSI login request from %pISpc on %s Network"
1292 		" Portal %pISpc\n", &conn->login_sockaddr, np->np_transport->name,
1293 		&conn->local_sockaddr);
1294 
1295 	pr_debug("Moving to TARG_CONN_STATE_IN_LOGIN.\n");
1296 	conn->conn_state	= TARG_CONN_STATE_IN_LOGIN;
1297 
1298 	if (iscsi_login_check_initiator_version(conn, pdu->max_version,
1299 			pdu->min_version) < 0)
1300 		goto new_sess_out;
1301 
1302 	zero_tsih = (pdu->tsih == 0x0000);
1303 	if (zero_tsih) {
1304 		/*
1305 		 * This is the leading connection of a new session.
1306 		 * We wait until after authentication to check for
1307 		 * session reinstatement.
1308 		 */
1309 		if (iscsi_login_zero_tsih_s1(conn, buffer) < 0)
1310 			goto new_sess_out;
1311 	} else {
1312 		/*
1313 		 * Add a new connection to an existing session.
1314 		 * We check for a non-existant session in
1315 		 * iscsi_login_non_zero_tsih_s2() below based
1316 		 * on ISID/TSIH, but wait until after authentication
1317 		 * to check for connection reinstatement, etc.
1318 		 */
1319 		if (iscsi_login_non_zero_tsih_s1(conn, buffer) < 0)
1320 			goto new_sess_out;
1321 	}
1322 	/*
1323 	 * SessionType: Discovery
1324 	 *
1325 	 * 	Locates Default Portal
1326 	 *
1327 	 * SessionType: Normal
1328 	 *
1329 	 * 	Locates Target Portal from NP -> Target IQN
1330 	 */
1331 	rc = iscsi_target_locate_portal(np, conn, login);
1332 	if (rc < 0) {
1333 		tpg = conn->tpg;
1334 		goto new_sess_out;
1335 	}
1336 	login->zero_tsih = zero_tsih;
1337 
1338 	if (conn->sess)
1339 		conn->sess->se_sess->sup_prot_ops =
1340 			conn->conn_transport->iscsit_get_sup_prot_ops(conn);
1341 
1342 	tpg = conn->tpg;
1343 	if (!tpg) {
1344 		pr_err("Unable to locate struct iscsit_conn->tpg\n");
1345 		goto new_sess_out;
1346 	}
1347 
1348 	if (zero_tsih) {
1349 		if (iscsi_login_zero_tsih_s2(conn) < 0)
1350 			goto new_sess_out;
1351 	} else {
1352 		if (iscsi_login_non_zero_tsih_s2(conn, buffer) < 0)
1353 			goto old_sess_out;
1354 	}
1355 
1356 	if (conn->conn_transport->iscsit_validate_params) {
1357 		ret = conn->conn_transport->iscsit_validate_params(conn);
1358 		if (ret < 0) {
1359 			if (zero_tsih)
1360 				goto new_sess_out;
1361 			else
1362 				goto old_sess_out;
1363 		}
1364 	}
1365 
1366 	ret = iscsi_target_start_negotiation(login, conn);
1367 	if (ret < 0)
1368 		goto new_sess_out;
1369 
1370 	if (ret == 1) {
1371 		tpg_np = conn->tpg_np;
1372 
1373 		iscsi_post_login_handler(np, conn, zero_tsih);
1374 		iscsit_deaccess_np(np, tpg, tpg_np);
1375 	}
1376 
1377 	tpg = NULL;
1378 	tpg_np = NULL;
1379 	/* Get another socket */
1380 	return 1;
1381 
1382 new_sess_out:
1383 	new_sess = true;
1384 old_sess_out:
1385 	iscsit_stop_login_timer(conn);
1386 	tpg_np = conn->tpg_np;
1387 	iscsi_target_login_sess_out(conn, zero_tsih, new_sess);
1388 	new_sess = false;
1389 
1390 	if (tpg) {
1391 		iscsit_deaccess_np(np, tpg, tpg_np);
1392 		tpg = NULL;
1393 		tpg_np = NULL;
1394 	}
1395 
1396 	return 1;
1397 
1398 exit:
1399 	spin_lock_bh(&np->np_thread_lock);
1400 	np->np_thread_state = ISCSI_NP_THREAD_EXIT;
1401 	spin_unlock_bh(&np->np_thread_lock);
1402 
1403 	return 0;
1404 }
1405 
1406 int iscsi_target_login_thread(void *arg)
1407 {
1408 	struct iscsi_np *np = arg;
1409 	int ret;
1410 
1411 	allow_signal(SIGINT);
1412 
1413 	while (1) {
1414 		ret = __iscsi_target_login_thread(np);
1415 		/*
1416 		 * We break and exit here unless another sock_accept() call
1417 		 * is expected.
1418 		 */
1419 		if (ret != 1)
1420 			break;
1421 	}
1422 
1423 	while (!kthread_should_stop()) {
1424 		msleep(100);
1425 	}
1426 
1427 	return 0;
1428 }
1429