Free memory including the "base pointer". Fix two places in which it was
on the stack to harmonize. The only stack variable is in reception of
new E1 messages (e1ap_handle_message()), which uses
ASN_STRUCT_FREE_CONTENTS_ONLY().
This fixes bugs similar to these logs:
Direct leak of 40 byte(s) in 1 object(s) allocated from:
#0 0x7f418f4e68a3 in calloc (/lib64/libasan.so.8+0xe68a3) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
#1 0x00000049e367 in calloc_or_fail /home/richie/oai/common/utils/utils.h:74
#2 0x00000049e367 in encode_e1_bearer_context_release_command /home/richie/oai/openair2/E1AP/lib/e1ap_bearer_context_management.c:1235
#3 0x000000482951 in e1apCUCP_send_BEARER_CONTEXT_RELEASE_COMMAND /home/richie/oai/openair2/E1AP/e1ap.c:546
#4 0x000000482951 in E1AP_CUCP_task /home/richie/oai/openair2/E1AP/e1ap.c:856
#5 0x7f418f428ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
Direct leak of 40 byte(s) in 1 object(s) allocated from:
#0 0x7f418f4e68a3 in calloc (/lib64/libasan.so.8+0xe68a3) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
#1 0x00000049380a in calloc_or_fail /home/richie/oai/common/utils/utils.h:74
#2 0x00000049380a in encode_E1_bearer_context_setup_request /home/richie/oai/openair2/E1AP/lib/e1ap_bearer_context_management.c:578
#3 0x00000047f6a2 in e1apCUCP_send_BEARER_CONTEXT_SETUP_REQUEST /home/richie/oai/openair2/E1AP/e1ap.c:378
#4 0x0000004829f8 in E1AP_CUCP_task /home/richie/oai/openair2/E1AP/e1ap.c:846
#5 0x7f418f428ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
Direct leak of 40 byte(s) in 1 object(s) allocated from:
#0 0x7f418f4e68a3 in calloc (/lib64/libasan.so.8+0xe68a3) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
#1 0x00000046ede7 in calloc_or_fail /home/richie/oai/common/utils/utils.h:74
#2 0x00000046ede7 in encode_e1ap_cuup_setup_response /home/richie/oai/openair2/E1AP/lib/e1ap_interface_management.c:305
#3 0x00000047e412 in e1ap_send_SETUP_RESPONSE /home/richie/oai/openair2/E1AP/e1ap.c:167
#4 0x000000482a68 in E1AP_CUCP_task /home/richie/oai/openair2/E1AP/e1ap.c:836
#5 0x7f418f428ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 10b8ccd49f75c21babf1d7abe51bb63589d8471f)
246 lines
7.5 KiB
C
246 lines
7.5 KiB
C
/*
|
|
* Licensed to the OpenAirInterface (OAI) Software Alliance under one or more
|
|
* contributor license agreements. See the NOTICE file distributed with
|
|
* this work for additional information regarding copyright ownership.
|
|
* The OpenAirInterface Software Alliance licenses this file to You under
|
|
* the OAI Public License, Version 1.1 (the "License"); you may not use this file
|
|
* except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.openairinterface.org/?page_id=698
|
|
*
|
|
* Author and copyright: Laurent Thomas, open-cells.com
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*-------------------------------------------------------------------------------
|
|
* For more information about the OpenAirInterface (OAI) Software Alliance:
|
|
* contact@openairinterface.org
|
|
*/
|
|
|
|
#include <time.h>
|
|
#include <stdlib.h>
|
|
#include "e1ap_common.h"
|
|
#include "e1ap_default_values.h"
|
|
#include "e1ap_asnc.h"
|
|
#include "common/openairinterface5g_limits.h"
|
|
#include "common/utils/ocp_itti/intertask_interface.h"
|
|
|
|
static e1ap_upcp_inst_t *e1ap_inst[NUMBER_OF_gNB_MAX] = {0};
|
|
|
|
e1ap_upcp_inst_t *getCxtE1(instance_t instance)
|
|
{
|
|
AssertFatal(instance < sizeofArray(e1ap_inst), "instance exceeds limit\n");
|
|
return e1ap_inst[instance];
|
|
}
|
|
|
|
void createE1inst(E1_t type, instance_t instance, uint64_t gnb_id, e1ap_net_config_t *nc, e1ap_setup_req_t *req)
|
|
{
|
|
AssertFatal(e1ap_inst[instance] == NULL, "Double call to E1 instance %d\n", (int)instance);
|
|
e1ap_inst[instance] = calloc(1, sizeof(e1ap_upcp_inst_t));
|
|
e1ap_inst[instance]->type = type;
|
|
e1ap_inst[instance]->instance = instance;
|
|
e1ap_inst[instance]->gnb_id = gnb_id;
|
|
e1ap_inst[instance]->cuup.assoc_id = -1;
|
|
if (nc)
|
|
memcpy(&e1ap_inst[instance]->net_config, nc, sizeof(*nc));
|
|
if (req) {
|
|
AssertFatal(type == UPtype, "E1 setup request only to be stored for CU-UP\n");
|
|
memcpy(&e1ap_inst[instance]->cuup.setupReq, req, sizeof(*req));
|
|
}
|
|
e1ap_inst[instance]->gtpInstN3 = -1;
|
|
e1ap_inst[instance]->gtpInstF1U = -1;
|
|
}
|
|
|
|
static E1AP_TransactionID_t transacID[E1AP_MAX_NUM_TRANSAC_IDS] = {0};
|
|
|
|
void e1ap_common_init() {
|
|
srand(time(NULL));
|
|
}
|
|
|
|
static bool check_transac_id(E1AP_TransactionID_t id, int *freeIdx)
|
|
{
|
|
bool isFreeIdxSet = false;
|
|
for (int i=0; i < E1AP_MAX_NUM_TRANSAC_IDS; i++) {
|
|
if (id == transacID[i])
|
|
return false;
|
|
else if (!isFreeIdxSet && (transacID[i] == 0)) {
|
|
*freeIdx = i;
|
|
isFreeIdxSet = true;
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
long E1AP_get_next_transaction_identifier() {
|
|
E1AP_TransactionID_t genTransacId;
|
|
bool isTransacIdValid = false;
|
|
int freeIdx = 0;
|
|
|
|
while (!isTransacIdValid) {
|
|
genTransacId = rand() & 255;
|
|
isTransacIdValid = check_transac_id(genTransacId, &freeIdx);
|
|
}
|
|
|
|
AssertFatal(freeIdx < E1AP_MAX_NUM_TRANSAC_IDS, "Free Index exceeds array length\n");
|
|
transacID[freeIdx] = genTransacId;
|
|
return genTransacId;
|
|
}
|
|
|
|
void E1AP_free_transaction_identifier(long id) {
|
|
|
|
for (int i=0; i < E1AP_MAX_NUM_TRANSAC_IDS; i++) {
|
|
if (id == transacID[i]) {
|
|
transacID[i] = 0;
|
|
return;
|
|
}
|
|
}
|
|
LOG_E(E1AP, "Couldn't find transaction ID %ld in list\n", id);
|
|
}
|
|
|
|
int e1ap_decode_initiating_message(E1AP_E1AP_PDU_t *pdu) {
|
|
DevAssert(pdu != NULL);
|
|
|
|
switch(pdu->choice.initiatingMessage->procedureCode) {
|
|
case E1AP_ProcedureCode_id_gNB_CU_UP_E1Setup:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_gNB_CU_UP_ConfigurationUpdate:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextSetup:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextModification:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextRelease:
|
|
break;
|
|
|
|
default:
|
|
LOG_E(E1AP, "Unsupported procedure code (%d) for initiating message\n",
|
|
(int)pdu->choice.initiatingMessage->procedureCode);
|
|
return -1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int e1ap_decode_successful_outcome(E1AP_E1AP_PDU_t *pdu) {
|
|
DevAssert(pdu != NULL);
|
|
switch(pdu->choice.successfulOutcome->procedureCode) {
|
|
case E1AP_ProcedureCode_id_gNB_CU_UP_E1Setup:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextSetup:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextModification:
|
|
break;
|
|
|
|
case E1AP_ProcedureCode_id_bearerContextRelease:
|
|
break;
|
|
|
|
default:
|
|
LOG_E(E1AP, "Unsupported procedure code (%d) for successful message\n",
|
|
(int)pdu->choice.successfulOutcome->procedureCode);
|
|
return -1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int e1ap_decode_unsuccessful_outcome(E1AP_E1AP_PDU_t *pdu) {
|
|
DevAssert(pdu != NULL);
|
|
switch(pdu->choice.unsuccessfulOutcome->procedureCode) {
|
|
case E1AP_ProcedureCode_id_gNB_CU_UP_E1Setup:
|
|
break;
|
|
|
|
default:
|
|
LOG_E(E1AP, "Unsupported procedure code (%d) for unsuccessful message\n",
|
|
(int)pdu->choice.unsuccessfulOutcome->procedureCode);
|
|
return -1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int e1ap_decode_pdu(E1AP_E1AP_PDU_t *pdu, const uint8_t *const buffer, uint32_t length) {
|
|
asn_dec_rval_t dec_ret;
|
|
DevAssert(buffer != NULL);
|
|
dec_ret = aper_decode(NULL,
|
|
&asn_DEF_E1AP_E1AP_PDU,
|
|
(void **)&pdu,
|
|
buffer,
|
|
length,
|
|
0,
|
|
0);
|
|
|
|
if (LOG_DEBUGFLAG(DEBUG_ASN1)) {
|
|
LOG_E(E1AP, "----------------- ASN1 DECODER PRINT START----------------- \n");
|
|
xer_fprint(stdout, &asn_DEF_E1AP_E1AP_PDU, pdu);
|
|
LOG_E(E1AP, "----------------- ASN1 DECODER PRINT END ----------------- \n");
|
|
}
|
|
|
|
if (dec_ret.code != RC_OK) {
|
|
AssertFatal(1==0,"Failed to decode pdu\n");
|
|
return -1;
|
|
}
|
|
|
|
switch(pdu->present) {
|
|
case E1AP_E1AP_PDU_PR_initiatingMessage:
|
|
return e1ap_decode_initiating_message(pdu);
|
|
|
|
case E1AP_E1AP_PDU_PR_successfulOutcome:
|
|
return e1ap_decode_successful_outcome(pdu);
|
|
|
|
case E1AP_E1AP_PDU_PR_unsuccessfulOutcome:
|
|
return e1ap_decode_unsuccessful_outcome(pdu);
|
|
|
|
default:
|
|
LOG_E(E1AP, "Unknown presence (%d) or not implemented\n", (int)pdu->present);
|
|
break;
|
|
}
|
|
|
|
return -1;
|
|
}
|
|
|
|
int e1ap_encode_send(E1_t type, sctp_assoc_t assoc_id, E1AP_E1AP_PDU_t *pdu, uint16_t stream, const char *func)
|
|
{
|
|
DevAssert(pdu != NULL);
|
|
|
|
if (LOG_DEBUGFLAG(DEBUG_ASN1)) {
|
|
LOG_E(E1AP, "----------------- ASN1 ENCODER PRINT START ----------------- \n");
|
|
xer_fprint(stdout, &asn_DEF_E1AP_E1AP_PDU, pdu);
|
|
LOG_E(E1AP, "----------------- ASN1 ENCODER PRINT END----------------- \n");
|
|
}
|
|
|
|
char errbuf[2048]; /* Buffer for error message */
|
|
size_t errlen = sizeof(errbuf); /* Size of the buffer */
|
|
int ret = asn_check_constraints(&asn_DEF_E1AP_E1AP_PDU, pdu, errbuf, &errlen);
|
|
|
|
if(ret) {
|
|
LOG_E(E1AP, "%s: Constraint validation failed: %s\n", func, errbuf);
|
|
}
|
|
|
|
void *buffer = NULL;
|
|
ssize_t encoded = aper_encode_to_new_buffer(&asn_DEF_E1AP_E1AP_PDU, 0, pdu, &buffer);
|
|
ASN_STRUCT_FREE(asn_DEF_E1AP_E1AP_PDU, pdu);
|
|
|
|
if (encoded < 0) {
|
|
LOG_E(E1AP, "%s: Failed to encode E1AP message\n", func);
|
|
return -1;
|
|
}
|
|
MessageDef *message = itti_alloc_new_message((type == CPtype) ? TASK_CUCP_E1 : TASK_CUUP_E1, 0, SCTP_DATA_REQ);
|
|
sctp_data_req_t *s = &message->ittiMsg.sctp_data_req;
|
|
s->assoc_id = assoc_id;
|
|
s->buffer = buffer;
|
|
s->buffer_length = encoded;
|
|
s->stream = stream;
|
|
LOG_D(E1AP, "%s: Sending ITTI message to SCTP Task\n", func);
|
|
itti_send_msg_to_task(TASK_SCTP, 0 /*unused by callee*/, message);
|
|
|
|
return encoded;
|
|
}
|