text: /** @file
  
  Copyright (c) 2005 - 2018, Intel Corporation. All rights reserved.<BR>
  SPDX-License-Identifier: BSD-2-Clause-Patent
  
  **/
  
  #ifndef __EFI_IP4_INPUT_H__
  #define __EFI_IP4_INPUT_H__
  
  #define IP4_MIN_HEADLEN  20
  #define IP4_MAX_HEADLEN  60
  ///
  /// 8(ESP header) + 16(max IV) + 16(max padding) + 2(ESP tail) + 12(max ICV) = 54
  ///
  #define IP4_MAX_IPSEC_HEADLEN  54
  
  #define IP4_ASSEMLE_HASH_SIZE  31
  #define IP4_FRAGMENT_LIFE      120
  #define IP4_MAX_PACKET_SIZE    65535
  
  ///
  /// Per packet information for input process. LinkFlag specifies whether
  /// the packet is received as Link layer unicast, multicast or broadcast.
  /// The CastType is the IP layer cast type, such as IP multicast or unicast.
  /// Start, End and Length are staffs used to assemble the packets. Start
  /// is the sequence number of the first byte of data in the packet. Length
  /// is the number of bytes of data. End = Start + Length, that is, the
  /// sequence number of last byte + 1. Each assembled packet has a count down
  /// life. If it isn't consumed before Life reaches zero, the packet is released.
  ///
  typedef struct {
    UINTN         LinkFlag;
    INTN          CastType;
    INTN          Start;
    INTN          End;
    INTN          Length;
    UINT32        Life;
    EFI_STATUS    Status;
  } IP4_CLIP_INFO;
  
  ///
  /// Structure used to assemble IP packets.
  ///
  typedef struct {
    LIST_ENTRY       Link;
  
    //
    // Identity of one IP4 packet. Each fragment of a packet has
    // the same (Dst, Src, Id, Protocol).
    //
    IP4_ADDR         Dst;
    IP4_ADDR         Src;
    UINT16           Id;
    UINT8            Protocol;
  
    INTN             TotalLen;
    INTN             CurLen;
    LIST_ENTRY       Fragments;           // List of all the fragments of this packet
  
    IP4_HEAD         *Head;               // IP head of the first fragment
    IP4_CLIP_INFO    *Info;               // Per packet info of the first fragment
    INTN             Life;                // Count down life for the packet.
  } IP4_ASSEMBLE_ENTRY;
  
  ///
  /// Each Ip service instance has an assemble table to reassemble
  /// the packets before delivery to its children. It is organized
  /// as hash table.
  ///
  typedef struct {
    LIST_ENTRY    Bucket[IP4_ASSEMLE_HASH_SIZE];
  } IP4_ASSEMBLE_TABLE;
  
  #define IP4_GET_CLIP_INFO(Packet)  ((IP4_CLIP_INFO *) ((Packet)->ProtoData))
  
  #define IP4_ASSEMBLE_HASH(Dst, Src, Id, Proto)  \
            (((Dst) + (Src) + ((Id) << 16) + (Proto)) % IP4_ASSEMLE_HASH_SIZE)
  
  #define IP4_RXDATA_WRAP_SIZE(NumFrag) \
            (sizeof (IP4_RXDATA_WRAP) + sizeof (EFI_IP4_FRAGMENT_DATA) * ((NumFrag) - 1))
  
  /**
    Initialize an already allocated assemble table. This is generally
    the assemble table embedded in the IP4 service instance.
  
    @param[in, out]  Table                  The assemble table to initialize.
  
  **/
  VOID
  Ip4InitAssembleTable (
    IN OUT IP4_ASSEMBLE_TABLE  *Table
    );
  
  /**
    Clean up the assemble table: remove all the fragments
    and assemble entries.
  
    @param[in]  Table                  The assemble table to clean up
  
  **/
  VOID
  Ip4CleanAssembleTable (
    IN IP4_ASSEMBLE_TABLE  *Table
    );
  
  /**
    The IP4 input routine. It is called by the IP4_INTERFACE when a
    IP4 fragment is received from MNP.
  
    @param[in]  Ip4Instance        The IP4 child that request the receive, most like
                                   it is NULL.
    @param[in]  Packet             The IP4 packet received.
    @param[in]  IoStatus           The return status of receive request.
    @param[in]  Flag               The link layer flag for the packet received, such
                                   as multicast.
    @param[in]  Context            The IP4 service instance that own the MNP.
  
  **/
  VOID
  Ip4AccpetFrame (
    IN IP4_PROTOCOL  *Ip4Instance,
    IN NET_BUF       *Packet,
    IN EFI_STATUS    IoStatus,
    IN UINT32        Flag,
    IN VOID          *Context
    );
  
  /**
    Demultiple the packet. the packet delivery is processed in two
    passes. The first pass will enqueue a shared copy of the packet
    to each IP4 child that accepts the packet. The second pass will
    deliver a non-shared copy of the packet to each IP4 child that
    has pending receive requests. Data is copied if more than one
    child wants to consume the packet because each IP child needs
    its own copy of the packet to make changes.
  
    @param[in]  IpSb               The IP4 service instance that received the packet.
    @param[in]  Head               The header of the received packet.
    @param[in]  Packet             The data of the received packet.
    @param[in]  Option             Point to the IP4 packet header options.
    @param[in]  OptionLen          Length of the IP4 packet header options.
  
    @retval EFI_NOT_FOUND          No IP child accepts the packet.
    @retval EFI_SUCCESS            The packet is enqueued or delivered to some IP
                                   children.
  
  **/
  EFI_STATUS
  Ip4Demultiplex (
    IN IP4_SERVICE  *IpSb,
    IN IP4_HEAD     *Head,
    IN NET_BUF      *Packet,
    IN UINT8        *Option,
    IN UINT32       OptionLen
    );
  
  /**
    Enqueue a received packet to all the IP children that share
    the same interface.
  
    @param[in]  IpSb               The IP4 service instance that receive the packet.
    @param[in]  Head               The header of the received packet.
    @param[in]  Packet             The data of the received packet.
    @param[in]  Option             Point to the IP4 packet header options.
    @param[in]  OptionLen          Length of the IP4 packet header options.
    @param[in]  IpIf               The interface to enqueue the packet to.
  
    @return The number of the IP4 children that accepts the packet
  
  **/
  INTN
  Ip4InterfaceEnquePacket (
    IN IP4_SERVICE    *IpSb,
    IN IP4_HEAD       *Head,
    IN NET_BUF        *Packet,
    IN UINT8          *Option,
    IN UINT32         OptionLen,
    IN IP4_INTERFACE  *IpIf
    );
  
  /**
    Deliver the received packets to upper layer if there are both received
    requests and enqueued packets. If the enqueued packet is shared, it will
    duplicate it to a non-shared packet, release the shared packet, then
    deliver the non-shared packet up.
  
    @param[in]  IpInstance         The IP child to deliver the packet up.
  
    @retval EFI_OUT_OF_RESOURCES   Failed to allocate resources to deliver the
                                   packets.
    @retval EFI_SUCCESS            All the enqueued packets that can be delivered
                                   are delivered up.
  
  **/
  EFI_STATUS
  Ip4InstanceDeliverPacket (
    IN IP4_PROTOCOL  *IpInstance
    );
  
  /**
    Timeout the fragment and enqueued packets.
  
    @param[in]  IpSb                   The IP4 service instance to timeout
  
  **/
  VOID
  Ip4PacketTimerTicking (
    IN IP4_SERVICE  *IpSb
    );
  
  /**
    The work function to locate IPsec protocol to process the inbound or
    outbound IP packets. The process routine handls the packet with following
    actions: bypass the packet, discard the packet, or protect the packet.
  
    @param[in]       IpSb          The IP4 service instance.
    @param[in, out]  Head          The caller supplied IP4 header.
    @param[in, out]  Netbuf        The IP4 packet to be processed by IPsec.
    @param[in, out]  Options       The caller supplied options.
    @param[in, out]  OptionsLen    The length of the option.
    @param[in]       Direction     The directionality in an SPD entry,
                                   EfiIPsecInBound or EfiIPsecOutBound.
    @param[in]       Context       The token's wrap.
  
    @retval EFI_SUCCESS            The IPsec protocol is not available or disabled.
    @retval EFI_SUCCESS            The packet was bypassed and all buffers remain the same.
    @retval EFI_SUCCESS            The packet was protected.
    @retval EFI_ACCESS_DENIED      The packet was discarded.
    @retval EFI_OUT_OF_RESOURCES   There is no sufficient resource to complete the operation.
    @retval EFI_BUFFER_TOO_SMALL   The number of non-empty block is bigger than the
                                   number of input data blocks when build a fragment table.
  
  **/
  EFI_STATUS
  Ip4IpSecProcessPacket (
    IN     IP4_SERVICE            *IpSb,
    IN OUT IP4_HEAD               **Head,
    IN OUT NET_BUF                **Netbuf,
    IN OUT UINT8                  **Options,
    IN OUT UINT32                 *OptionsLen,
    IN     EFI_IPSEC_TRAFFIC_DIR  Direction,
    IN     VOID                   *Context
    );
  
  #endif
  