pjproject/pjnath/src/pjnath/ice_session.c

2343 lines
66 KiB
C

/* $Id$ */
/*
* Copyright (C) 2003-2007 Benny Prijono <benny@prijono.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#include <pjnath/ice_session.h>
#include <pjnath/errno.h>
#include <pj/addr_resolv.h>
#include <pj/array.h>
#include <pj/assert.h>
#include <pj/guid.h>
#include <pj/log.h>
#include <pj/os.h>
#include <pj/pool.h>
#include <pj/rand.h>
#include <pj/string.h>
/* String names for candidate types */
static const char *cand_type_names[] =
{
"Host",
"Server Reflexive",
"Peer Reflexive",
"Relayed"
};
/* String names for pj_ice_sess_check_state */
#if PJ_LOG_MAX_LEVEL >= 4
static const char *check_state_name[] =
{
"Frozen",
"Waiting",
"In Progress",
"Succeeded",
"Failed"
};
static const char *clist_state_name[] =
{
"Idle",
"Running",
"Completed"
};
#endif /* PJ_LOG_MAX_LEVEL >= 4 */
static const char *role_names[] =
{
"Unknown",
"Controlled",
"Controlling"
};
/* Default ICE session preferences, according to draft-ice */
static pj_uint8_t cand_type_prefs[4] =
{
126, /**< PJ_ICE_HOST_PREF */
100, /**< PJ_ICE_SRFLX_PREF. */
110, /**< PJ_ICE_PRFLX_PREF */
0 /**< PJ_ICE_RELAYED_PREF */
};
#define CHECK_NAME_LEN 128
#define LOG4(expr) PJ_LOG(4,expr)
#define LOG5(expr) PJ_LOG(4,expr)
#define GET_LCAND_ID(cand) (cand - ice->lcand)
#define GET_CHECK_ID(cl, chk) (chk - (cl)->checks)
/* The data that will be attached to the STUN session on each
* component.
*/
typedef struct stun_data
{
pj_ice_sess *ice;
unsigned comp_id;
pj_ice_sess_comp *comp;
} stun_data;
/* The data that will be attached to the timer to perform
* periodic check.
*/
typedef struct timer_data
{
pj_ice_sess *ice;
pj_ice_sess_checklist *clist;
} timer_data;
/* Forward declarations */
static void destroy_ice(pj_ice_sess *ice,
pj_status_t reason);
static pj_status_t start_periodic_check(pj_timer_heap_t *th,
pj_timer_entry *te);
static void periodic_timer(pj_timer_heap_t *th,
pj_timer_entry *te);
static void handle_incoming_check(pj_ice_sess *ice,
const pj_ice_rx_check *rcheck);
/* These are the callbacks registered to the STUN sessions */
static pj_status_t on_stun_send_msg(pj_stun_session *sess,
const void *pkt,
pj_size_t pkt_size,
const pj_sockaddr_t *dst_addr,
unsigned addr_len);
static pj_status_t on_stun_rx_request(pj_stun_session *sess,
const pj_uint8_t *pkt,
unsigned pkt_len,
const pj_stun_msg *msg,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len);
static void on_stun_request_complete(pj_stun_session *stun_sess,
pj_status_t status,
pj_stun_tx_data *tdata,
const pj_stun_msg *response,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len);
static pj_status_t on_stun_rx_indication(pj_stun_session *sess,
const pj_uint8_t *pkt,
unsigned pkt_len,
const pj_stun_msg *msg,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len);
/* These are the callbacks for performing STUN authentication */
static pj_status_t stun_auth_get_auth(void *user_data,
pj_pool_t *pool,
pj_str_t *realm,
pj_str_t *nonce);
static pj_status_t stun_auth_get_cred(const pj_stun_msg *msg,
void *user_data,
pj_pool_t *pool,
pj_str_t *realm,
pj_str_t *username,
pj_str_t *nonce,
int *data_type,
pj_str_t *data);
static pj_status_t stun_auth_get_password(const pj_stun_msg *msg,
void *user_data,
const pj_str_t *realm,
const pj_str_t *username,
pj_pool_t *pool,
int *data_type,
pj_str_t *data);
PJ_DEF(const char*) pj_ice_get_cand_type_name(pj_ice_cand_type type)
{
PJ_ASSERT_RETURN(type <= PJ_ICE_CAND_TYPE_RELAYED, "???");
return cand_type_names[type];
}
/* Get the prefix for the foundation */
static int get_type_prefix(pj_ice_cand_type type)
{
switch (type) {
case PJ_ICE_CAND_TYPE_HOST: return 'H';
case PJ_ICE_CAND_TYPE_SRFLX: return 'S';
case PJ_ICE_CAND_TYPE_PRFLX: return 'P';
case PJ_ICE_CAND_TYPE_RELAYED: return 'R';
default:
pj_assert(!"Invalid type");
return 'U';
}
}
/* Calculate foundation */
PJ_DEF(void) pj_ice_calc_foundation(pj_pool_t *pool,
pj_str_t *foundation,
pj_ice_cand_type type,
const pj_sockaddr *base_addr)
{
char buf[64];
pj_ansi_snprintf(buf, sizeof(buf), "%c%x",
get_type_prefix(type),
(int)pj_ntohl(base_addr->ipv4.sin_addr.s_addr));
pj_strdup2(pool, foundation, buf);
}
/* Init component */
static pj_status_t init_comp(pj_ice_sess *ice,
unsigned comp_id,
pj_ice_sess_comp *comp)
{
pj_stun_session_cb sess_cb;
pj_stun_auth_cred auth_cred;
stun_data *sd;
pj_status_t status;
/* Init STUN callbacks */
pj_bzero(&sess_cb, sizeof(sess_cb));
sess_cb.on_request_complete = &on_stun_request_complete;
sess_cb.on_rx_indication = &on_stun_rx_indication;
sess_cb.on_rx_request = &on_stun_rx_request;
sess_cb.on_send_msg = &on_stun_send_msg;
/* Create STUN session for this candidate */
status = pj_stun_session_create(&ice->stun_cfg, NULL,
&sess_cb, PJ_FALSE,
&comp->stun_sess);
if (status != PJ_SUCCESS)
return status;
/* Associate data with this STUN session */
sd = PJ_POOL_ZALLOC_T(ice->pool, struct stun_data);
sd->ice = ice;
sd->comp_id = comp_id;
sd->comp = comp;
pj_stun_session_set_user_data(comp->stun_sess, sd);
/* Init STUN authentication credential */
pj_bzero(&auth_cred, sizeof(auth_cred));
auth_cred.type = PJ_STUN_AUTH_CRED_DYNAMIC;
auth_cred.data.dyn_cred.get_auth = &stun_auth_get_auth;
auth_cred.data.dyn_cred.get_cred = &stun_auth_get_cred;
auth_cred.data.dyn_cred.get_password = &stun_auth_get_password;
auth_cred.data.dyn_cred.user_data = comp->stun_sess;
pj_stun_session_set_credential(comp->stun_sess, &auth_cred);
return PJ_SUCCESS;
}
/*
* Create ICE session.
*/
PJ_DEF(pj_status_t) pj_ice_sess_create(pj_stun_config *stun_cfg,
const char *name,
pj_ice_sess_role role,
unsigned comp_cnt,
const pj_ice_sess_cb *cb,
const pj_str_t *local_ufrag,
const pj_str_t *local_passwd,
pj_ice_sess **p_ice)
{
pj_pool_t *pool;
pj_ice_sess *ice;
unsigned i;
pj_status_t status;
PJ_ASSERT_RETURN(stun_cfg && cb && p_ice, PJ_EINVAL);
if (name == NULL)
name = "ice%p";
pool = pj_pool_create(stun_cfg->pf, name, 4000, 4000, NULL);
ice = PJ_POOL_ZALLOC_T(pool, pj_ice_sess);
ice->pool = pool;
ice->role = role;
ice->tie_breaker.u32.hi = pj_rand();
ice->tie_breaker.u32.lo = pj_rand();
ice->prefs = cand_type_prefs;
pj_ansi_snprintf(ice->obj_name, sizeof(ice->obj_name),
name, ice);
status = pj_mutex_create_recursive(pool, ice->obj_name,
&ice->mutex);
if (status != PJ_SUCCESS) {
destroy_ice(ice, status);
return status;
}
pj_memcpy(&ice->cb, cb, sizeof(*cb));
pj_memcpy(&ice->stun_cfg, stun_cfg, sizeof(*stun_cfg));
ice->comp_cnt = comp_cnt;
for (i=0; i<comp_cnt; ++i) {
pj_ice_sess_comp *comp;
comp = &ice->comp[i];
comp->valid_check = NULL;
status = init_comp(ice, i+1, comp);
if (status != PJ_SUCCESS) {
destroy_ice(ice, status);
return status;
}
}
if (local_ufrag == NULL) {
ice->rx_ufrag.ptr = (char*) pj_pool_alloc(ice->pool, 16);
pj_create_random_string(ice->rx_ufrag.ptr, 16);
ice->rx_ufrag.slen = 16;
} else {
pj_strdup(ice->pool, &ice->rx_ufrag, local_ufrag);
}
if (local_passwd == NULL) {
ice->rx_pass.ptr = (char*) pj_pool_alloc(ice->pool, 16);
pj_create_random_string(ice->rx_pass.ptr, 16);
ice->rx_pass.slen = 16;
} else {
pj_strdup(ice->pool, &ice->rx_pass, local_passwd);
}
pj_list_init(&ice->early_check);
/* Done */
*p_ice = ice;
LOG4((ice->obj_name,
"ICE session created, comp_cnt=%d, role is %s agent",
comp_cnt, role_names[ice->role]));
return PJ_SUCCESS;
}
/*
* Destroy
*/
static void destroy_ice(pj_ice_sess *ice,
pj_status_t reason)
{
unsigned i;
if (reason == PJ_SUCCESS) {
LOG4((ice->obj_name, "Destroying ICE session"));
}
for (i=0; i<ice->comp_cnt; ++i) {
if (ice->comp[i].stun_sess) {
pj_stun_session_destroy(ice->comp[i].stun_sess);
ice->comp[i].stun_sess = NULL;
}
}
if (ice->clist.timer.id) {
pj_timer_heap_cancel(ice->stun_cfg.timer_heap, &ice->clist.timer);
ice->clist.timer.id = PJ_FALSE;
}
if (ice->mutex) {
pj_mutex_destroy(ice->mutex);
ice->mutex = NULL;
}
if (ice->pool) {
pj_pool_t *pool = ice->pool;
ice->pool = NULL;
pj_pool_release(pool);
}
}
/*
* Destroy
*/
PJ_DEF(pj_status_t) pj_ice_sess_destroy(pj_ice_sess *ice)
{
PJ_ASSERT_RETURN(ice, PJ_EINVAL);
destroy_ice(ice, PJ_SUCCESS);
return PJ_SUCCESS;
}
/*
* Change session role.
*/
PJ_DEF(pj_status_t) pj_ice_sess_change_role(pj_ice_sess *ice,
pj_ice_sess_role new_role)
{
PJ_ASSERT_RETURN(ice, PJ_EINVAL);
if (new_role != ice->role) {
ice->role = new_role;
LOG4((ice->obj_name, "Role changed to %s", role_names[new_role]));
}
return PJ_SUCCESS;
}
/*
* Change type preference
*/
PJ_DEF(pj_status_t) pj_ice_sess_set_prefs(pj_ice_sess *ice,
const pj_uint8_t prefs[4])
{
PJ_ASSERT_RETURN(ice && prefs, PJ_EINVAL);
ice->prefs = (pj_uint8_t*) pj_pool_calloc(ice->pool, PJ_ARRAY_SIZE(prefs),
sizeof(pj_uint8_t));
pj_memcpy(ice->prefs, prefs, sizeof(prefs));
return PJ_SUCCESS;
}
/* Find component by ID */
static pj_ice_sess_comp *find_comp(const pj_ice_sess *ice, unsigned comp_id)
{
pj_assert(comp_id > 0 && comp_id <= ice->comp_cnt);
return (pj_ice_sess_comp*) &ice->comp[comp_id-1];
}
/* Callback by STUN authentication when it needs to send 401 */
static pj_status_t stun_auth_get_auth(void *user_data,
pj_pool_t *pool,
pj_str_t *realm,
pj_str_t *nonce)
{
PJ_UNUSED_ARG(user_data);
PJ_UNUSED_ARG(pool);
realm->slen = 0;
nonce->slen = 0;
return PJ_SUCCESS;
}
/* Get credential to be sent with outgoing message */
static pj_status_t stun_auth_get_cred(const pj_stun_msg *msg,
void *user_data,
pj_pool_t *pool,
pj_str_t *realm,
pj_str_t *username,
pj_str_t *nonce,
int *data_type,
pj_str_t *data)
{
pj_stun_session *sess = (pj_stun_session *)user_data;
stun_data *sd = (stun_data*) pj_stun_session_get_user_data(sess);
pj_ice_sess *ice = sd->ice;
PJ_UNUSED_ARG(pool);
realm->slen = nonce->slen = 0;
if (PJ_STUN_IS_RESPONSE(msg->hdr.type)) {
/* Outgoing responses need to have the same credential as
* incoming requests.
*/
*username = ice->rx_uname;
*data_type = 0;
*data = ice->rx_pass;
}
else {
*username = ice->tx_uname;
*data_type = 0;
*data = ice->tx_pass;
}
return PJ_SUCCESS;
}
/* Get password to be used to authenticate incoming message */
static pj_status_t stun_auth_get_password(const pj_stun_msg *msg,
void *user_data,
const pj_str_t *realm,
const pj_str_t *username,
pj_pool_t *pool,
int *data_type,
pj_str_t *data)
{
pj_stun_session *sess = (pj_stun_session *)user_data;
stun_data *sd = (stun_data*) pj_stun_session_get_user_data(sess);
pj_ice_sess *ice = sd->ice;
PJ_UNUSED_ARG(realm);
PJ_UNUSED_ARG(pool);
if (PJ_STUN_IS_SUCCESS_RESPONSE(msg->hdr.type) ||
PJ_STUN_IS_ERROR_RESPONSE(msg->hdr.type))
{
/* Incoming response is authenticated with TX credential */
/* Verify username */
if (pj_strcmp(username, &ice->tx_uname) != 0)
return PJ_STATUS_FROM_STUN_CODE(PJ_STUN_SC_UNKNOWN_USERNAME);
*data_type = 0;
*data = ice->tx_pass;
} else {
/* Incoming request is authenticated with RX credential */
/* The agent MUST accept a credential if the username consists
* of two values separated by a colon, where the first value is
* equal to the username fragment generated by the agent in an offer
* or answer for a session in-progress, and the MESSAGE-INTEGRITY
* is the output of a hash of the password and the STUN packet's
* contents.
*/
const char *pos;
pj_str_t ufrag;
pos = (const char*)pj_memchr(username->ptr, ':', username->slen);
if (pos == NULL)
return PJ_STATUS_FROM_STUN_CODE(PJ_STUN_SC_UNKNOWN_USERNAME);
ufrag.ptr = (char*)username->ptr;
ufrag.slen = (pos - username->ptr);
if (pj_strcmp(&ufrag, &ice->rx_ufrag) != 0)
return PJ_STATUS_FROM_STUN_CODE(PJ_STUN_SC_UNKNOWN_USERNAME);
*data_type = 0;
*data = ice->rx_pass;
}
return PJ_SUCCESS;
}
static pj_uint32_t CALC_CAND_PRIO(pj_ice_sess *ice,
pj_ice_cand_type type,
pj_uint32_t local_pref,
pj_uint32_t comp_id)
{
return ((ice->prefs[type] & 0xFF) << 24) +
((local_pref & 0xFFFF) << 8) +
(((256 - comp_id) & 0xFF) << 0);
}
/*
* Add ICE candidate
*/
PJ_DEF(pj_status_t) pj_ice_sess_add_cand(pj_ice_sess *ice,
unsigned comp_id,
pj_ice_cand_type type,
pj_uint16_t local_pref,
const pj_str_t *foundation,
const pj_sockaddr_t *addr,
const pj_sockaddr_t *base_addr,
const pj_sockaddr_t *rel_addr,
int addr_len,
unsigned *p_cand_id)
{
pj_ice_sess_cand *lcand;
pj_status_t status = PJ_SUCCESS;
char tmp[128];
PJ_ASSERT_RETURN(ice && comp_id &&
foundation && addr && base_addr && addr_len,
PJ_EINVAL);
PJ_ASSERT_RETURN(comp_id <= ice->comp_cnt, PJ_EINVAL);
pj_mutex_lock(ice->mutex);
if (ice->lcand_cnt >= PJ_ARRAY_SIZE(ice->lcand)) {
status = PJ_ETOOMANY;
goto on_error;
}
lcand = &ice->lcand[ice->lcand_cnt];
lcand->comp_id = comp_id;
lcand->type = type;
pj_strdup(ice->pool, &lcand->foundation, foundation);
lcand->prio = CALC_CAND_PRIO(ice, type, local_pref, lcand->comp_id);
pj_memcpy(&lcand->addr, addr, addr_len);
pj_memcpy(&lcand->base_addr, base_addr, addr_len);
if (rel_addr)
pj_memcpy(&lcand->rel_addr, rel_addr, addr_len);
else
pj_bzero(&lcand->rel_addr, sizeof(lcand->rel_addr));
pj_ansi_strcpy(tmp, pj_inet_ntoa(lcand->addr.ipv4.sin_addr));
LOG4((ice->obj_name,
"Candidate %d added: comp_id=%d, type=%s, foundation=%.*s, "
"addr=%s:%d, base=%s:%d, prio=0x%x (%u)",
ice->lcand_cnt,
lcand->comp_id,
cand_type_names[lcand->type],
(int)lcand->foundation.slen,
lcand->foundation.ptr,
tmp,
(int)pj_ntohs(lcand->addr.ipv4.sin_port),
pj_inet_ntoa(lcand->base_addr.ipv4.sin_addr),
(int)pj_htons(lcand->base_addr.ipv4.sin_port),
lcand->prio, lcand->prio));
if (p_cand_id)
*p_cand_id = ice->lcand_cnt;
++ice->lcand_cnt;
on_error:
pj_mutex_unlock(ice->mutex);
return status;
}
/* Find default candidate ID for the component */
PJ_DEF(pj_status_t) pj_ice_sess_find_default_cand(pj_ice_sess *ice,
unsigned comp_id,
int *cand_id)
{
unsigned i;
PJ_ASSERT_RETURN(ice && comp_id && cand_id, PJ_EINVAL);
PJ_ASSERT_RETURN(comp_id <= ice->comp_cnt, PJ_EINVAL);
*cand_id = -1;
pj_mutex_lock(ice->mutex);
/* First find in valid list if we have nominated pair */
for (i=0; i<ice->valid_list.count; ++i) {
pj_ice_sess_check *check = &ice->valid_list.checks[i];
if (check->lcand->comp_id == comp_id) {
*cand_id = GET_LCAND_ID(check->lcand);
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
}
/* If there's no nominated pair, find relayed candidate */
for (i=0; i<ice->lcand_cnt; ++i) {
pj_ice_sess_cand *lcand = &ice->lcand[i];
if (lcand->comp_id==comp_id &&
lcand->type == PJ_ICE_CAND_TYPE_RELAYED)
{
*cand_id = GET_LCAND_ID(lcand);
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
}
/* If there's no relayed candidate, find reflexive candidate */
for (i=0; i<ice->lcand_cnt; ++i) {
pj_ice_sess_cand *lcand = &ice->lcand[i];
if (lcand->comp_id==comp_id &&
(lcand->type == PJ_ICE_CAND_TYPE_SRFLX ||
lcand->type == PJ_ICE_CAND_TYPE_PRFLX))
{
*cand_id = GET_LCAND_ID(lcand);
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
}
/* Otherwise return host candidate */
for (i=0; i<ice->lcand_cnt; ++i) {
pj_ice_sess_cand *lcand = &ice->lcand[i];
if (lcand->comp_id==comp_id &&
lcand->type == PJ_ICE_CAND_TYPE_HOST)
{
*cand_id = GET_LCAND_ID(lcand);
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
}
/* Still no candidate is found! :( */
pj_mutex_unlock(ice->mutex);
pj_assert(!"Should have a candidate by now");
return PJ_EBUG;
}
#ifndef MIN
# define MIN(a,b) (a < b ? a : b)
#endif
#ifndef MAX
# define MAX(a,b) (a > b ? a : b)
#endif
static pj_timestamp CALC_CHECK_PRIO(const pj_ice_sess *ice,
const pj_ice_sess_cand *lcand,
const pj_ice_sess_cand *rcand)
{
pj_uint32_t O, A;
pj_timestamp prio;
/* Original formula:
* pair priority = 2^32*MIN(O,A) + 2*MAX(O,A) + (O>A?1:0)
*/
if (ice->role == PJ_ICE_SESS_ROLE_CONTROLLING) {
O = lcand->prio;
A = rcand->prio;
} else {
O = rcand->prio;
A = lcand->prio;
}
/*
return ((pj_uint64_t)1 << 32) * MIN(O, A) +
(pj_uint64_t)2 * MAX(O, A) + (O>A ? 1 : 0);
*/
prio.u32.hi = MIN(O,A);
prio.u32.lo = (MAX(O, A) << 1) + (O>A ? 1 : 0);
return prio;
}
PJ_INLINE(int) CMP_CHECK_PRIO(const pj_ice_sess_check *c1,
const pj_ice_sess_check *c2)
{
return pj_cmp_timestamp(&c1->prio, &c2->prio);
}
#if PJ_LOG_MAX_LEVEL >= 4
static const char *dump_check(char *buffer, unsigned bufsize,
const pj_ice_sess_checklist *clist,
const pj_ice_sess_check *check)
{
const pj_ice_sess_cand *lcand = check->lcand;
const pj_ice_sess_cand *rcand = check->rcand;
char laddr[CHECK_NAME_LEN];
int len;
pj_ansi_strcpy(laddr, pj_inet_ntoa(lcand->addr.ipv4.sin_addr));
if (lcand->addr.addr.sa_family == pj_AF_INET()) {
len = pj_ansi_snprintf(buffer, bufsize,
"%d: [%d] %s:%d-->%s:%d",
GET_CHECK_ID(clist, check),
check->lcand->comp_id,
laddr, (int)pj_ntohs(lcand->addr.ipv4.sin_port),
pj_inet_ntoa(rcand->addr.ipv4.sin_addr),
(int)pj_ntohs(rcand->addr.ipv4.sin_port));
} else {
len = pj_ansi_snprintf(buffer, bufsize, "IPv6->IPv6");
}
if (len < 0)
len = 0;
else if (len >= (int)bufsize)
len = bufsize - 1;
buffer[len] = '\0';
return buffer;
}
static void dump_checklist(const char *title, const pj_ice_sess *ice,
const pj_ice_sess_checklist *clist)
{
unsigned i;
char buffer[CHECK_NAME_LEN];
LOG4((ice->obj_name, "%s", title));
for (i=0; i<clist->count; ++i) {
const pj_ice_sess_check *c = &clist->checks[i];
LOG4((ice->obj_name, " %s (%s, state=%s)",
dump_check(buffer, sizeof(buffer), clist, c),
(c->nominated ? "nominated" : "not nominated"),
check_state_name[c->state]));
}
}
#else
#define dump_checklist(title, ice, clist)
#endif
static void check_set_state(pj_ice_sess *ice, pj_ice_sess_check *check,
pj_ice_sess_check_state st,
pj_status_t err_code)
{
char buf[CHECK_NAME_LEN];
pj_assert(check->state < PJ_ICE_SESS_CHECK_STATE_SUCCEEDED);
LOG5((ice->obj_name, "Check %s: state changed from %s to %s",
dump_check(buf, sizeof(buf), &ice->clist, check),
check_state_name[check->state],
check_state_name[st]));
check->state = st;
check->err_code = err_code;
}
static void clist_set_state(pj_ice_sess *ice, pj_ice_sess_checklist *clist,
pj_ice_sess_checklist_state st)
{
if (clist->state != st) {
LOG5((ice->obj_name, "Checklist: state changed from %s to %s",
clist_state_name[clist->state],
clist_state_name[st]));
clist->state = st;
}
}
/* Sort checklist based on priority */
static void sort_checklist(pj_ice_sess_checklist *clist)
{
unsigned i;
for (i=0; i<clist->count-1; ++i) {
unsigned j, highest = i;
for (j=i+1; j<clist->count; ++j) {
if (CMP_CHECK_PRIO(&clist->checks[j], &clist->checks[highest]) > 0) {
highest = j;
}
}
if (highest != i) {
pj_ice_sess_check tmp;
pj_memcpy(&tmp, &clist->checks[i], sizeof(pj_ice_sess_check));
pj_memcpy(&clist->checks[i], &clist->checks[highest],
sizeof(pj_ice_sess_check));
pj_memcpy(&clist->checks[highest], &tmp,
sizeof(pj_ice_sess_check));
}
}
}
enum
{
SOCKADDR_EQUAL = 0,
SOCKADDR_NOT_EQUAL = 1
};
/* Utility: compare sockaddr.
* Returns 0 if equal.
*/
static int sockaddr_cmp(const pj_sockaddr *a1, const pj_sockaddr *a2)
{
if (a1->addr.sa_family != a2->addr.sa_family)
return SOCKADDR_NOT_EQUAL;
if (a1->addr.sa_family == pj_AF_INET()) {
return !(a1->ipv4.sin_addr.s_addr == a2->ipv4.sin_addr.s_addr &&
a1->ipv4.sin_port == a2->ipv4.sin_port);
} else if (a1->addr.sa_family == pj_AF_INET6()) {
return pj_memcmp(&a1->ipv6, &a2->ipv6, sizeof(a1->ipv6));
} else {
pj_assert(!"Invalid address family!");
return SOCKADDR_NOT_EQUAL;
}
}
/* Prune checklist, this must have been done after the checklist
* is sorted.
*/
static pj_status_t prune_checklist(pj_ice_sess *ice,
pj_ice_sess_checklist *clist)
{
unsigned i;
/* Since an agent cannot send requests directly from a reflexive
* candidate, but only from its base, the agent next goes through the
* sorted list of candidate pairs. For each pair where the local
* candidate is server reflexive, the server reflexive candidate MUST be
* replaced by its base. Once this has been done, the agent MUST prune
* the list. This is done by removing a pair if its local and remote
* candidates are identical to the local and remote candidates of a pair
* higher up on the priority list. The result is a sequence of ordered
* candidate pairs, called the check list for that media stream.
*/
/* First replace SRFLX candidates with their base */
for (i=0; i<clist->count; ++i) {
pj_ice_sess_cand *srflx = clist->checks[i].lcand;
if (clist->checks[i].lcand->type == PJ_ICE_CAND_TYPE_SRFLX) {
/* Find the base for this candidate */
unsigned j;
for (j=0; j<ice->lcand_cnt; ++j) {
pj_ice_sess_cand *host = &ice->lcand[j];
if (host->type != PJ_ICE_CAND_TYPE_HOST)
continue;
if (sockaddr_cmp(&srflx->base_addr, &host->addr) == 0) {
/* Replace this SRFLX with its BASE */
clist->checks[i].lcand = host;
break;
}
}
if (j==ice->lcand_cnt) {
/* Host candidate not found this this srflx! */
LOG4((ice->obj_name,
"Base candidate %s:%d not found for srflx candidate %d",
pj_inet_ntoa(srflx->base_addr.ipv4.sin_addr),
pj_ntohs(srflx->base_addr.ipv4.sin_port),
GET_LCAND_ID(clist->checks[i].lcand)));
return PJNATH_EICENOHOSTCAND;
}
}
}
/* Next remove a pair if its local and remote candidates are identical
* to the local and remote candidates of a pair higher up on the priority
* list
*/
/*
* Not in ICE!
* Remove host candidates if their base are the the same!
*/
for (i=0; i<clist->count; ++i) {
pj_ice_sess_cand *licand = clist->checks[i].lcand;
pj_ice_sess_cand *ricand = clist->checks[i].rcand;
unsigned j;
for (j=i+1; j<clist->count;) {
pj_ice_sess_cand *ljcand = clist->checks[j].lcand;
pj_ice_sess_cand *rjcand = clist->checks[j].rcand;
const char *reason = NULL;
if ((licand == ljcand) && (ricand == rjcand)) {
reason = "duplicate found";
} else if ((rjcand == ricand) &&
(sockaddr_cmp(&ljcand->base_addr,
&licand->base_addr)==0))
{
reason = "equal base";
}
if (reason != NULL) {
/* Found duplicate, remove it */
char buf[CHECK_NAME_LEN];
LOG5((ice->obj_name, "Check %s pruned (%s)",
dump_check(buf, sizeof(buf), &ice->clist,
&clist->checks[j]),
reason));
pj_array_erase(clist->checks, sizeof(clist->checks[0]),
clist->count, j);
--clist->count;
} else {
++j;
}
}
}
return PJ_SUCCESS;
}
/* This function is called when ICE processing completes */
static void on_ice_complete(pj_ice_sess *ice, pj_status_t status)
{
if (!ice->is_complete) {
char errmsg[PJ_ERR_MSG_SIZE];
ice->is_complete = PJ_TRUE;
ice->ice_status = status;
/* Log message */
LOG4((ice->obj_name, "ICE process complete, status=%s",
pj_strerror(status, errmsg, sizeof(errmsg)).ptr));
dump_checklist("Valid list", ice, &ice->valid_list);
/* Call callback */
if (ice->cb.on_ice_complete) {
(*ice->cb.on_ice_complete)(ice, status);
}
}
}
/* This function is called when one check completes */
static pj_bool_t on_check_complete(pj_ice_sess *ice,
pj_ice_sess_check *check)
{
unsigned i;
pj_assert(check->state >= PJ_ICE_SESS_CHECK_STATE_SUCCEEDED);
/* 7.1.2.2.2. Updating Pair States
*
* The agent sets the state of the pair that generated the check to
* Succeeded. The success of this check might also cause the state of
* other checks to change as well. The agent MUST perform the following
* two steps:
*
* 1. The agent changes the states for all other Frozen pairs for the
* same media stream and same foundation to Waiting. Typically
* these other pairs will have different component IDs but not
* always.
*/
if (check->err_code==PJ_SUCCESS) {
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (pj_strcmp(&c->lcand->foundation, &check->lcand->foundation)==0
&& c->state == PJ_ICE_SESS_CHECK_STATE_FROZEN)
{
check_set_state(ice, c, PJ_ICE_SESS_CHECK_STATE_WAITING, 0);
}
}
}
/* 8.2. Updating States
*
* For both controlling and controlled agents, the state of ICE
* processing depends on the presence of nominated candidate pairs in
* the valid list and on the state of the check list:
*
* o If there are no nominated pairs in the valid list for a media
* stream and the state of the check list is Running, ICE processing
* continues.
*
* o If there is at least one nominated pair in the valid list:
*
* - The agent MUST remove all Waiting and Frozen pairs in the check
* list for the same component as the nominated pairs for that
* media stream
*
* - If an In-Progress pair in the check list is for the same
* component as a nominated pair, the agent SHOULD cease
* retransmissions for its check if its pair priority is lower
* than the lowest priority nominated pair for that component
*/
if (check->err_code==PJ_SUCCESS && check->nominated) {
pj_ice_sess_comp *comp;
char buf[CHECK_NAME_LEN];
LOG5((ice->obj_name, "Check %d is successful and nominated",
GET_CHECK_ID(&ice->clist, check)));
comp = find_comp(ice, check->lcand->comp_id);
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (c->lcand->comp_id == check->lcand->comp_id) {
if (c->state < PJ_ICE_SESS_CHECK_STATE_IN_PROGRESS) {
/* Just fail Frozen/Waiting check */
LOG5((ice->obj_name,
"Check %s to be failed because state is %s",
dump_check(buf, sizeof(buf), &ice->clist, c),
check_state_name[c->state]));
check_set_state(ice, c, PJ_ICE_SESS_CHECK_STATE_FAILED,
PJ_ECANCELLED);
} else if (c->state == PJ_ICE_SESS_CHECK_STATE_IN_PROGRESS
&& (PJ_ICE_CANCEL_ALL ||
CMP_CHECK_PRIO(c, check) < 0)) {
/* State is IN_PROGRESS, cancel transaction */
if (c->tdata) {
LOG5((ice->obj_name,
"Cancelling check %s (In Progress)",
dump_check(buf, sizeof(buf), &ice->clist, c)));
pj_stun_session_cancel_req(comp->stun_sess,
c->tdata, PJ_FALSE, 0);
c->tdata = NULL;
check_set_state(ice, c, PJ_ICE_SESS_CHECK_STATE_FAILED,
PJ_ECANCELLED);
}
}
}
}
/* Update the nominated check for the component */
if (comp->valid_check == NULL) {
comp->valid_check = check;
} else {
if (CMP_CHECK_PRIO(comp->valid_check, check) < 0)
comp->valid_check = check;
}
}
/* Still in 8.2. Updating States
*
* o Once there is at least one nominated pair in the valid list for
* every component of at least one media stream and the state of the
* check list is Running:
*
* * The agent MUST change the state of processing for its check
* list for that media stream to Completed.
*
* * The agent MUST continue to respond to any checks it may still
* receive for that media stream, and MUST perform triggered
* checks if required by the processing of Section 7.2.
*
* * The agent MAY begin transmitting media for this media stream as
* described in Section 11.1
*/
/* See if all components have nominated pair. If they do, then mark
* ICE processing as success, otherwise wait.
*/
for (i=0; i<ice->comp_cnt; ++i) {
if (ice->comp[i].valid_check == NULL)
break;
}
if (i == ice->comp_cnt) {
/* All components have nominated pair */
on_ice_complete(ice, PJ_SUCCESS);
return PJ_TRUE;
}
/* Note: this is the stuffs that we don't do in 7.1.2.2.2, since our
* ICE session only supports one media stream for now:
*
* 7.1.2.2.2. Updating Pair States
*
* 2. If there is a pair in the valid list for every component of this
* media stream (where this is the actual number of components being
* used, in cases where the number of components signaled in the SDP
* differs from offerer to answerer), the success of this check may
* unfreeze checks for other media streams.
*/
/* 7.1.2.3. Check List and Timer State Updates
* Regardless of whether the check was successful or failed, the
* completion of the transaction may require updating of check list and
* timer states.
*
* If all of the pairs in the check list are now either in the Failed or
* Succeeded state, and there is not a pair in the valid list for each
* component of the media stream, the state of the check list is set to
* Failed.
*/
/*
* See if all checks in the checklist have completed. If we do,
* then mark ICE processing as failed.
*/
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (c->state < PJ_ICE_SESS_CHECK_STATE_SUCCEEDED) {
break;
}
}
if (i == ice->clist.count) {
/* All checks have completed, but we don't have nominated pair.
* If agent's role is controlled, check if all components have
* valid pair. If it does, this means the controlled agent has
* finished the check list early and it's waiting for controlling
* agent to send a check with USE-CANDIDATE flag set.
*/
if (ice->role == PJ_ICE_SESS_ROLE_CONTROLLED) {
unsigned comp_id;
for (comp_id=1; comp_id <= ice->comp_cnt; ++comp_id) {
unsigned j;
for (j=0; j<ice->valid_list.count; ++j) {
pj_ice_sess_check *vc = &ice->valid_list.checks[j];
if (vc->lcand->comp_id == comp_id)
break;
}
if (j == ice->valid_list.count)
break;
}
if (comp_id <= ice->comp_cnt) {
/* This component ID doesn't have valid pair.
* Mark ICE as failed.
*/
on_ice_complete(ice, PJNATH_EICEFAILED);
return PJ_TRUE;
} else {
/* All components have a valid pair.
* We should wait until we receive nominated checks.
*/
return PJ_FALSE;
}
}
on_ice_complete(ice, PJNATH_EICEFAILED);
return PJ_TRUE;
}
/* We still have checks to perform */
return PJ_FALSE;
}
/* Create checklist by pairing local candidates with remote candidates */
PJ_DEF(pj_status_t) pj_ice_sess_create_check_list(
pj_ice_sess *ice,
const pj_str_t *rem_ufrag,
const pj_str_t *rem_passwd,
unsigned rcand_cnt,
const pj_ice_sess_cand rcand[])
{
pj_ice_sess_checklist *clist;
char buf[128];
pj_str_t username;
timer_data *td;
unsigned i, j;
unsigned highest_comp = 0;
pj_status_t status;
PJ_ASSERT_RETURN(ice && rem_ufrag && rem_passwd && rcand_cnt && rcand,
PJ_EINVAL);
PJ_ASSERT_RETURN(rcand_cnt + ice->rcand_cnt <= PJ_ICE_MAX_CAND,
PJ_ETOOMANY);
pj_mutex_lock(ice->mutex);
/* Save credentials */
username.ptr = buf;
pj_strcpy(&username, rem_ufrag);
pj_strcat2(&username, ":");
pj_strcat(&username, &ice->rx_ufrag);
pj_strdup(ice->pool, &ice->tx_uname, &username);
pj_strdup(ice->pool, &ice->tx_ufrag, rem_ufrag);
pj_strdup(ice->pool, &ice->tx_pass, rem_passwd);
pj_strcpy(&username, &ice->rx_ufrag);
pj_strcat2(&username, ":");
pj_strcat(&username, rem_ufrag);
pj_strdup(ice->pool, &ice->rx_uname, &username);
/* Save remote candidates */
ice->rcand_cnt = 0;
for (i=0; i<rcand_cnt; ++i) {
pj_ice_sess_cand *cn = &ice->rcand[ice->rcand_cnt];
/* Ignore candidate which has no matching component ID */
if (rcand[i].comp_id==0 || rcand[i].comp_id > ice->comp_cnt) {
continue;
}
if (rcand[i].comp_id > highest_comp)
highest_comp = rcand[i].comp_id;
pj_memcpy(cn, &rcand[i], sizeof(pj_ice_sess_cand));
pj_strdup(ice->pool, &cn->foundation, &rcand[i].foundation);
ice->rcand_cnt++;
}
/* Generate checklist */
clist = &ice->clist;
for (i=0; i<ice->lcand_cnt; ++i) {
for (j=0; j<ice->rcand_cnt; ++j) {
pj_ice_sess_cand *lcand = &ice->lcand[i];
pj_ice_sess_cand *rcand = &ice->rcand[j];
pj_ice_sess_check *chk = &clist->checks[clist->count];
if (clist->count >= PJ_ICE_MAX_CHECKS) {
pj_mutex_unlock(ice->mutex);
return PJ_ETOOMANY;
}
/* A local candidate is paired with a remote candidate if
* and only if the two candidates have the same component ID
* and have the same IP address version.
*/
if ((lcand->comp_id != rcand->comp_id) ||
(lcand->addr.addr.sa_family != rcand->addr.addr.sa_family))
{
continue;
}
chk->lcand = lcand;
chk->rcand = rcand;
chk->state = PJ_ICE_SESS_CHECK_STATE_FROZEN;
chk->prio = CALC_CHECK_PRIO(ice, lcand, rcand);
clist->count++;
}
}
/* Sort checklist based on priority */
sort_checklist(clist);
/* Prune the checklist */
status = prune_checklist(ice, clist);
if (status != PJ_SUCCESS) {
pj_mutex_unlock(ice->mutex);
return status;
}
/* Disable our components which don't have matching component */
if (ice->comp_cnt==2 && highest_comp==1) {
ice->comp_cnt = 1;
}
/* Init timer entry in the checklist. Initially the timer ID is FALSE
* because timer is not running.
*/
clist->timer.id = PJ_FALSE;
td = PJ_POOL_ZALLOC_T(ice->pool, timer_data);
td->ice = ice;
td->clist = clist;
clist->timer.user_data = (void*)td;
clist->timer.cb = &periodic_timer;
/* Log checklist */
dump_checklist("Checklist created:", ice, clist);
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
/* This is the data that will be attached as user data to outgoing
* STUN requests, and it will be given back when we receive completion
* status of the request.
*/
struct req_data
{
pj_ice_sess *ice;
pj_ice_sess_checklist *clist;
unsigned ckid;
};
/* Perform check on the specified candidate pair */
static pj_status_t perform_check(pj_ice_sess *ice,
pj_ice_sess_checklist *clist,
unsigned check_id)
{
pj_ice_sess_comp *comp;
struct req_data *rd;
pj_ice_sess_check *check;
const pj_ice_sess_cand *lcand;
const pj_ice_sess_cand *rcand;
pj_uint32_t prio;
char buffer[128];
pj_status_t status;
check = &clist->checks[check_id];
lcand = check->lcand;
rcand = check->rcand;
comp = find_comp(ice, lcand->comp_id);
LOG5((ice->obj_name,
"Sending connectivity check for check %s",
dump_check(buffer, sizeof(buffer), clist, check)));
/* Create request */
status = pj_stun_session_create_req(comp->stun_sess,
PJ_STUN_BINDING_REQUEST,
NULL, &check->tdata);
if (status != PJ_SUCCESS) {
pjnath_perror(ice->obj_name, "Error creating STUN request", status);
return status;
}
/* Attach data to be retrieved later when STUN request transaction
* completes and on_stun_request_complete() callback is called.
*/
rd = PJ_POOL_ZALLOC_T(check->tdata->pool, struct req_data);
rd->ice = ice;
rd->clist = clist;
rd->ckid = check_id;
check->tdata->user_data = (void*) rd;
/* Add PRIORITY */
prio = CALC_CAND_PRIO(ice, PJ_ICE_CAND_TYPE_PRFLX, 65535,
lcand->comp_id);
pj_stun_msg_add_uint_attr(check->tdata->pool, check->tdata->msg,
PJ_STUN_ATTR_PRIORITY, prio);
/* Add USE-CANDIDATE and set this check to nominated.
* Also add ICE-CONTROLLING or ICE-CONTROLLED
*/
if (ice->role == PJ_ICE_SESS_ROLE_CONTROLLING) {
pj_stun_msg_add_empty_attr(check->tdata->pool, check->tdata->msg,
PJ_STUN_ATTR_USE_CANDIDATE);
check->nominated = PJ_TRUE;
pj_stun_msg_add_uint64_attr(check->tdata->pool, check->tdata->msg,
PJ_STUN_ATTR_ICE_CONTROLLING,
&ice->tie_breaker);
} else {
pj_stun_msg_add_uint64_attr(check->tdata->pool, check->tdata->msg,
PJ_STUN_ATTR_ICE_CONTROLLED,
&ice->tie_breaker);
}
/* Note that USERNAME and MESSAGE-INTEGRITY will be added by the
* STUN session.
*/
/* Initiate STUN transaction to send the request */
status = pj_stun_session_send_msg(comp->stun_sess, PJ_FALSE,
&rcand->addr,
sizeof(pj_sockaddr_in), check->tdata);
if (status != PJ_SUCCESS) {
check->tdata = NULL;
pjnath_perror(ice->obj_name, "Error sending STUN request", status);
return status;
}
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_IN_PROGRESS,
PJ_SUCCESS);
return PJ_SUCCESS;
}
/* Start periodic check for the specified checklist.
* This callback is called by timer on every Ta (20msec by default)
*/
static pj_status_t start_periodic_check(pj_timer_heap_t *th,
pj_timer_entry *te)
{
timer_data *td;
pj_ice_sess *ice;
pj_ice_sess_checklist *clist;
unsigned i, start_count=0;
pj_status_t status;
td = (struct timer_data*) te->user_data;
ice = td->ice;
clist = td->clist;
pj_mutex_lock(ice->mutex);
/* Set timer ID to FALSE first */
te->id = PJ_FALSE;
/* Set checklist state to Running */
clist_set_state(ice, clist, PJ_ICE_SESS_CHECKLIST_ST_RUNNING);
LOG5((ice->obj_name, "Starting checklist periodic check"));
/* Send STUN Binding request for check with highest priority on
* Waiting state.
*/
for (i=0; i<clist->count; ++i) {
pj_ice_sess_check *check = &clist->checks[i];
if (check->state == PJ_ICE_SESS_CHECK_STATE_WAITING) {
status = perform_check(ice, clist, i);
if (status != PJ_SUCCESS) {
pj_mutex_unlock(ice->mutex);
return status;
}
++start_count;
break;
}
}
/* If we don't have anything in Waiting state, perform check to
* highest priority pair that is in Frozen state.
*/
if (start_count==0) {
for (i=0; i<clist->count; ++i) {
pj_ice_sess_check *check = &clist->checks[i];
if (check->state == PJ_ICE_SESS_CHECK_STATE_FROZEN) {
status = perform_check(ice, clist, i);
if (status != PJ_SUCCESS) {
pj_mutex_unlock(ice->mutex);
return status;
}
++start_count;
break;
}
}
}
/* Cannot start check because there's no suitable candidate pair.
*/
if (start_count!=0) {
/* Schedule for next timer */
pj_time_val timeout = {0, PJ_ICE_TA_VAL};
te->id = PJ_TRUE;
pj_time_val_normalize(&timeout);
pj_timer_heap_schedule(th, te, &timeout);
}
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
/* Timer callback to perform periodic check */
static void periodic_timer(pj_timer_heap_t *th,
pj_timer_entry *te)
{
start_periodic_check(th, te);
}
/* Utility: find string in string array */
const pj_str_t *find_str(const pj_str_t *strlist[], unsigned count,
const pj_str_t *str)
{
unsigned i;
for (i=0; i<count; ++i) {
if (pj_strcmp(strlist[i], str)==0)
return strlist[i];
}
return NULL;
}
/*
* Start ICE periodic check. This function will return immediately, and
* application will be notified about the connectivity check status in
* #pj_ice_sess_cb callback.
*/
PJ_DEF(pj_status_t) pj_ice_sess_start_check(pj_ice_sess *ice)
{
pj_ice_sess_checklist *clist;
const pj_ice_sess_cand *cand0;
const pj_str_t *flist[PJ_ICE_MAX_CAND];
pj_ice_rx_check *rcheck;
unsigned i, flist_cnt = 0;
PJ_ASSERT_RETURN(ice, PJ_EINVAL);
/* Checklist must have been created */
PJ_ASSERT_RETURN(ice->clist.count > 0, PJ_EINVALIDOP);
LOG4((ice->obj_name, "Starting ICE check.."));
/* The agent examines the check list for the first media stream (a
* media stream is the first media stream when it is described by
* the first m-line in the SDP offer and answer). For that media
* stream, it:
*
* - Groups together all of the pairs with the same foundation,
*
* - For each group, sets the state of the pair with the lowest
* component ID to Waiting. If there is more than one such pair,
* the one with the highest priority is used.
*/
clist = &ice->clist;
/* Pickup the first pair for component 1. */
for (i=0; i<clist->count; ++i) {
if (clist->checks[i].lcand->comp_id == 1)
break;
}
if (i == clist->count) {
pj_assert(!"Unable to find checklist for component 1");
return PJNATH_EICEINCOMPID;
}
/* Set this check to WAITING */
check_set_state(ice, &clist->checks[i],
PJ_ICE_SESS_CHECK_STATE_WAITING, PJ_SUCCESS);
cand0 = clist->checks[i].lcand;
flist[flist_cnt++] = &clist->checks[i].lcand->foundation;
/* Find all of the other pairs in that check list with the same
* component ID, but different foundations, and sets all of their
* states to Waiting as well.
*/
for (++i; i<clist->count; ++i) {
const pj_ice_sess_cand *cand1;
cand1 = clist->checks[i].lcand;
if (cand1->comp_id==cand0->comp_id &&
find_str(flist, flist_cnt, &cand1->foundation)==NULL)
{
check_set_state(ice, &clist->checks[i],
PJ_ICE_SESS_CHECK_STATE_WAITING, PJ_SUCCESS);
flist[flist_cnt++] = &cand1->foundation;
}
}
/* First, perform all pending triggered checks, simultaneously. */
rcheck = ice->early_check.next;
while (rcheck != &ice->early_check) {
LOG4((ice->obj_name,
"Performing delayed triggerred check for component %d",
rcheck->comp_id));
handle_incoming_check(ice, rcheck);
rcheck = rcheck->next;
}
pj_list_init(&ice->early_check);
/* Start periodic check */
return start_periodic_check(ice->stun_cfg.timer_heap, &clist->timer);
}
//////////////////////////////////////////////////////////////////////////////
/* Callback called by STUN session to send the STUN message.
* STUN session also doesn't have a transport, remember?!
*/
static pj_status_t on_stun_send_msg(pj_stun_session *sess,
const void *pkt,
pj_size_t pkt_size,
const pj_sockaddr_t *dst_addr,
unsigned addr_len)
{
stun_data *sd = (stun_data*) pj_stun_session_get_user_data(sess);
pj_ice_sess *ice = sd->ice;
return (*ice->cb.on_tx_pkt)(ice, sd->comp_id,
pkt, pkt_size,
dst_addr, addr_len);
}
/* This callback is called when outgoing STUN request completed */
static void on_stun_request_complete(pj_stun_session *stun_sess,
pj_status_t status,
pj_stun_tx_data *tdata,
const pj_stun_msg *response,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len)
{
struct req_data *rd = (struct req_data*) tdata->user_data;
pj_ice_sess *ice;
pj_ice_sess_check *check, *new_check;
pj_ice_sess_cand *lcand;
pj_ice_sess_checklist *clist;
pj_stun_xor_mapped_addr_attr *xaddr;
char buffer[CHECK_NAME_LEN];
unsigned i;
PJ_UNUSED_ARG(stun_sess);
PJ_UNUSED_ARG(src_addr_len);
ice = rd->ice;
check = &rd->clist->checks[rd->ckid];
clist = rd->clist;
/* Mark STUN transaction as complete */
pj_assert(tdata == check->tdata);
check->tdata = NULL;
pj_mutex_lock(ice->mutex);
/* Init lcand to NULL. lcand will be found from the mapped address
* found in the response.
*/
lcand = NULL;
if (status != PJ_SUCCESS) {
char errmsg[PJ_ERR_MSG_SIZE];
if (status==PJ_STATUS_FROM_STUN_CODE(PJ_STUN_SC_ROLE_CONFLICT)) {
/* Role conclict response.
*
* 7.1.2.1. Failure Cases:
*
* If the request had contained the ICE-CONTROLLED attribute,
* the agent MUST switch to the controlling role if it has not
* already done so. If the request had contained the
* ICE-CONTROLLING attribute, the agent MUST switch to the
* controlled role if it has not already done so. Once it has
* switched, the agent MUST immediately retry the request with
* the ICE-CONTROLLING or ICE-CONTROLLED attribute reflecting
* its new role.
*/
pj_ice_sess_role new_role = PJ_ICE_SESS_ROLE_UNKNOWN;
pj_stun_msg *req = tdata->msg;
if (pj_stun_msg_find_attr(req, PJ_STUN_ATTR_ICE_CONTROLLING, 0)) {
new_role = PJ_ICE_SESS_ROLE_CONTROLLED;
} else if (pj_stun_msg_find_attr(req, PJ_STUN_ATTR_ICE_CONTROLLED,
0)) {
new_role = PJ_ICE_SESS_ROLE_CONTROLLING;
} else {
pj_assert(!"We should have put CONTROLLING/CONTROLLED attr!");
new_role = PJ_ICE_SESS_ROLE_CONTROLLED;
}
if (new_role != ice->role) {
LOG4((ice->obj_name,
"Changing role because of role conflict response"));
pj_ice_sess_change_role(ice, new_role);
}
/* Resend request */
LOG4((ice->obj_name, "Resending check because of role conflict"));
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_WAITING, 0);
perform_check(ice, clist, rd->ckid);
pj_mutex_unlock(ice->mutex);
return;
}
pj_strerror(status, errmsg, sizeof(errmsg));
LOG4((ice->obj_name,
"Check %s%s: connectivity check FAILED: %s",
dump_check(buffer, sizeof(buffer), &ice->clist, check),
(check->nominated ? " (nominated)" : " (not nominated)"),
errmsg));
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_FAILED, status);
on_check_complete(ice, check);
pj_mutex_unlock(ice->mutex);
return;
}
/* 7.1.2.1. Failure Cases
*
* The agent MUST check that the source IP address and port of the
* response equals the destination IP address and port that the Binding
* Request was sent to, and that the destination IP address and port of
* the response match the source IP address and port that the Binding
* Request was sent from.
*/
if (sockaddr_cmp(&check->rcand->addr, (const pj_sockaddr*)src_addr) != 0) {
status = PJNATH_EICEINSRCADDR;
LOG4((ice->obj_name,
"Check %s%s: connectivity check FAILED: source address mismatch",
dump_check(buffer, sizeof(buffer), &ice->clist, check),
(check->nominated ? " (nominated)" : " (not nominated)")));
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_FAILED, status);
on_check_complete(ice, check);
pj_mutex_unlock(ice->mutex);
return;
}
/* 7.1.2.2. Success Cases
*
* A check is considered to be a success if all of the following are
* true:
*
* o the STUN transaction generated a success response
*
* o the source IP address and port of the response equals the
* destination IP address and port that the Binding Request was sent
* to
*
* o the destination IP address and port of the response match the
* source IP address and port that the Binding Request was sent from
*/
LOG4((ice->obj_name,
"Check %s%s: connectivity check SUCCESS",
dump_check(buffer, sizeof(buffer), &ice->clist, check),
(check->nominated ? " (nominated)" : " (not nominated)")));
/* Get the STUN XOR-MAPPED-ADDRESS attribute. */
xaddr = (pj_stun_xor_mapped_addr_attr*)
pj_stun_msg_find_attr(response, PJ_STUN_ATTR_XOR_MAPPED_ADDR,0);
if (!xaddr) {
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_FAILED,
PJNATH_ESTUNNOMAPPEDADDR);
on_check_complete(ice, check);
pj_mutex_unlock(ice->mutex);
return;
}
/* Find local candidate that matches the XOR-MAPPED-ADDRESS */
pj_assert(lcand == NULL);
for (i=0; i<ice->lcand_cnt; ++i) {
if (sockaddr_cmp(&xaddr->sockaddr, &ice->lcand[i].addr) == 0) {
/* Match */
lcand = &ice->lcand[i];
break;
}
}
/* 7.1.2.2.1. Discovering Peer Reflexive Candidates
* If the transport address returned in XOR-MAPPED-ADDRESS does not match
* any of the local candidates that the agent knows about, the mapped
* address represents a new candidate - a peer reflexive candidate.
*/
if (lcand == NULL) {
unsigned cand_id;
pj_str_t foundation;
pj_ice_calc_foundation(ice->pool, &foundation, PJ_ICE_CAND_TYPE_PRFLX,
&check->lcand->base_addr);
/* Still in 7.1.2.2.1. Discovering Peer Reflexive Candidates
* Its priority is set equal to the value of the PRIORITY attribute
* in the Binding Request.
*
* I think the priority calculated by add_cand() should be the same
* as the one calculated in perform_check(), so there's no need to
* get the priority from the PRIORITY attribute.
*/
/* Add new peer reflexive candidate */
status = pj_ice_sess_add_cand(ice, check->lcand->comp_id,
PJ_ICE_CAND_TYPE_PRFLX,
65535, &foundation,
&xaddr->sockaddr,
&check->lcand->base_addr, NULL,
sizeof(pj_sockaddr_in), &cand_id);
if (status != PJ_SUCCESS) {
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_FAILED,
status);
on_check_complete(ice, check);
pj_mutex_unlock(ice->mutex);
return;
}
/* Update local candidate */
lcand = &ice->lcand[cand_id];
}
/* 7.1.2.2.3. Constructing a Valid Pair
* Next, the agent constructs a candidate pair whose local candidate
* equals the mapped address of the response, and whose remote candidate
* equals the destination address to which the request was sent.
*/
/* Add pair to valid list */
pj_assert(ice->valid_list.count < PJ_ICE_MAX_CHECKS);
new_check = &ice->valid_list.checks[ice->valid_list.count++];
new_check->lcand = lcand;
new_check->rcand = check->rcand;
new_check->prio = CALC_CHECK_PRIO(ice, lcand, check->rcand);
new_check->state = PJ_ICE_SESS_CHECK_STATE_SUCCEEDED;
new_check->nominated = check->nominated;
new_check->err_code = PJ_SUCCESS;
/* Sort valid_list */
sort_checklist(&ice->valid_list);
/* 7.1.2.2.2. Updating Pair States
*
* The agent sets the state of the pair that generated the check to
* Succeeded. The success of this check might also cause the state of
* other checks to change as well.
*/
check_set_state(ice, check, PJ_ICE_SESS_CHECK_STATE_SUCCEEDED,
PJ_SUCCESS);
/* Perform 7.1.2.2.2. Updating Pair States.
* This may terminate ICE processing.
*/
if (on_check_complete(ice, check)) {
/* ICE complete! */
pj_mutex_unlock(ice->mutex);
return;
}
pj_mutex_unlock(ice->mutex);
}
/* This callback is called by the STUN session associated with a candidate
* when it receives incoming request.
*/
static pj_status_t on_stun_rx_request(pj_stun_session *sess,
const pj_uint8_t *pkt,
unsigned pkt_len,
const pj_stun_msg *msg,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len)
{
stun_data *sd;
pj_ice_sess *ice;
pj_stun_priority_attr *prio_attr;
pj_stun_use_candidate_attr *uc_attr;
pj_stun_uint64_attr *role_attr;
pj_stun_tx_data *tdata;
pj_ice_rx_check *rcheck, tmp_rcheck;
pj_status_t status;
PJ_UNUSED_ARG(pkt);
PJ_UNUSED_ARG(pkt_len);
/* Reject any requests except Binding request */
if (msg->hdr.type != PJ_STUN_BINDING_REQUEST) {
status = pj_stun_session_create_res(sess, msg,
PJ_STUN_SC_BAD_REQUEST,
NULL, &tdata);
if (status != PJ_SUCCESS)
return status;
return pj_stun_session_send_msg(sess, PJ_TRUE,
src_addr, src_addr_len, tdata);
}
sd = (stun_data*) pj_stun_session_get_user_data(sess);
ice = sd->ice;
pj_mutex_lock(ice->mutex);
/*
* Note:
* Be aware that when STUN request is received, we might not get
* SDP answer yet, so we might not have remote candidates and
* checklist yet. This case will be handled after we send
* a response.
*/
/* Get PRIORITY attribute */
prio_attr = (pj_stun_priority_attr*)
pj_stun_msg_find_attr(msg, PJ_STUN_ATTR_PRIORITY, 0);
if (prio_attr == NULL) {
LOG5((ice->obj_name, "Received Binding request with no PRIORITY"));
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
/* Get USE-CANDIDATE attribute */
uc_attr = (pj_stun_use_candidate_attr*)
pj_stun_msg_find_attr(msg, PJ_STUN_ATTR_USE_CANDIDATE, 0);
/* Get ICE-CONTROLLING or ICE-CONTROLLED */
role_attr = (pj_stun_uint64_attr*)
pj_stun_msg_find_attr(msg, PJ_STUN_ATTR_ICE_CONTROLLING, 0);
if (role_attr == NULL) {
role_attr = (pj_stun_uint64_attr*)
pj_stun_msg_find_attr(msg, PJ_STUN_ATTR_ICE_CONTROLLED, 0);
}
/* Handle the case when request comes before answer is received.
* We need to put credential in the response, and since we haven't
* got the response, copy the username from the request.
*/
if (ice->rcand_cnt == 0) {
pj_stun_string_attr *uname_attr;
uname_attr = (pj_stun_string_attr*)
pj_stun_msg_find_attr(msg, PJ_STUN_ATTR_USERNAME, 0);
pj_assert(uname_attr != NULL);
pj_strdup(ice->pool, &ice->rx_uname, &uname_attr->value);
}
/* 7.2.1.1. Detecting and Repairing Role Conflicts
*/
if (ice->role == PJ_ICE_SESS_ROLE_CONTROLLING &&
role_attr && role_attr->hdr.type == PJ_STUN_ATTR_ICE_CONTROLLING)
{
if (pj_cmp_timestamp(&ice->tie_breaker, &role_attr->value) < 0) {
/* Switch role to controlled */
LOG4((ice->obj_name,
"Changing role because of ICE-CONTROLLING attribute"));
pj_ice_sess_change_role(ice, PJ_ICE_SESS_ROLE_CONTROLLED);
} else {
/* Generate 487 response */
status = pj_stun_session_create_res(sess, msg,
PJ_STUN_SC_ROLE_CONFLICT,
NULL, &tdata);
if (status == PJ_SUCCESS) {
pj_stun_session_send_msg(sess, PJ_TRUE,
src_addr, src_addr_len, tdata);
}
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
} else if (ice->role == PJ_ICE_SESS_ROLE_CONTROLLED &&
role_attr && role_attr->hdr.type == PJ_STUN_ATTR_ICE_CONTROLLED)
{
if (pj_cmp_timestamp(&ice->tie_breaker, &role_attr->value) < 0) {
/* Generate 487 response */
status = pj_stun_session_create_res(sess, msg,
PJ_STUN_SC_ROLE_CONFLICT,
NULL, &tdata);
if (status == PJ_SUCCESS) {
pj_stun_session_send_msg(sess, PJ_TRUE,
src_addr, src_addr_len, tdata);
}
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
} else {
/* Switch role to controlled */
LOG4((ice->obj_name,
"Changing role because of ICE-CONTROLLED attribute"));
pj_ice_sess_change_role(ice, PJ_ICE_SESS_ROLE_CONTROLLING);
}
}
/*
* First send response to this request
*/
status = pj_stun_session_create_res(sess, msg, 0, NULL, &tdata);
if (status != PJ_SUCCESS) {
pj_mutex_unlock(ice->mutex);
return status;
}
status = pj_stun_msg_add_sockaddr_attr(tdata->pool, tdata->msg,
PJ_STUN_ATTR_XOR_MAPPED_ADDR,
PJ_TRUE, src_addr, src_addr_len);
status = pj_stun_session_send_msg(sess, PJ_TRUE,
src_addr, src_addr_len, tdata);
/*
* Handling early check.
*
* It's possible that we receive this request before we receive SDP
* answer. In this case, we can't perform trigger check since we
* don't have checklist yet, so just save this check in a pending
* triggered check array to be acted upon later.
*/
if (ice->rcand_cnt == 0) {
rcheck = PJ_POOL_ZALLOC_T(ice->pool, pj_ice_rx_check);
} else {
rcheck = &tmp_rcheck;
}
/* Init rcheck */
rcheck->comp_id = sd->comp_id;
rcheck->src_addr_len = src_addr_len;
pj_memcpy(&rcheck->src_addr, src_addr, src_addr_len);
rcheck->use_candidate = (uc_attr != NULL);
rcheck->priority = prio_attr->value;
rcheck->role_attr = role_attr;
if (ice->rcand_cnt == 0) {
/* We don't have answer yet, so keep this request for later */
LOG4((ice->obj_name, "Received an early check for comp %d",
rcheck->comp_id));
pj_list_push_back(&ice->early_check, rcheck);
} else {
/* Handle this check */
handle_incoming_check(ice, rcheck);
}
pj_mutex_unlock(ice->mutex);
return PJ_SUCCESS;
}
/* Handle incoming Binding request and perform triggered check.
* This function may be called by on_stun_rx_request(), or when
* SDP answer is received and we have received early checks.
*/
static void handle_incoming_check(pj_ice_sess *ice,
const pj_ice_rx_check *rcheck)
{
pj_ice_sess_comp *comp;
pj_ice_sess_cand *lcand = NULL;
pj_ice_sess_cand *rcand;
unsigned i;
pj_bool_t is_relayed;
comp = find_comp(ice, rcheck->comp_id);
/* Find remote candidate based on the source transport address of
* the request.
*/
for (i=0; i<ice->rcand_cnt; ++i) {
if (sockaddr_cmp(&rcheck->src_addr, &ice->rcand[i].addr)==0)
break;
}
/* 7.2.1.3. Learning Peer Reflexive Candidates
* If the source transport address of the request does not match any
* existing remote candidates, it represents a new peer reflexive remote
* candidate.
*/
if (i == ice->rcand_cnt) {
rcand = &ice->rcand[ice->rcand_cnt++];
rcand->comp_id = rcheck->comp_id;
rcand->type = PJ_ICE_CAND_TYPE_PRFLX;
rcand->prio = rcheck->priority;
pj_memcpy(&rcand->addr, &rcheck->src_addr, rcheck->src_addr_len);
/* Foundation is random, unique from other foundation */
rcand->foundation.ptr = (char*) pj_pool_alloc(ice->pool, 36);
rcand->foundation.slen = pj_ansi_snprintf(rcand->foundation.ptr, 36,
"f%p",
rcand->foundation.ptr);
LOG4((ice->obj_name,
"Added new remote candidate from the request: %s:%d",
pj_inet_ntoa(rcand->addr.ipv4.sin_addr),
(int)pj_ntohs(rcand->addr.ipv4.sin_port)));
} else {
/* Remote candidate found */
rcand = &ice->rcand[i];
}
#if 0
/* Find again the local candidate by matching the base address
* with the local candidates in the checklist. Checks may have
* been pruned before, so it's possible that if we use the lcand
* as it is, we wouldn't be able to find the check in the checklist
* and we will end up creating a new check unnecessarily.
*/
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (/*c->lcand == lcand ||*/
sockaddr_cmp(&c->lcand->base_addr, &lcand->base_addr)==0)
{
lcand = c->lcand;
break;
}
}
#else
/* Just get candidate with the highest priority for the specified
* component ID in the checklist.
*/
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (c->lcand->comp_id == rcheck->comp_id) {
lcand = c->lcand;
break;
}
}
if (lcand == NULL) {
/* Should not happen, but just in case remote is sending a
* Binding request for a component which it doesn't have.
*/
LOG4((ice->obj_name,
"Received Binding request but no local candidate is found!"));
return;
}
#endif
/*
* Create candidate pair for this request.
*/
/* First check if the source address is the source address of the
* STUN relay, to determine if local candidate is relayed candidate.
*/
PJ_TODO(DETERMINE_IF_REQUEST_COMES_FROM_RELAYED_CANDIDATE);
is_relayed = PJ_FALSE;
/*
* 7.2.1.4. Triggered Checks
*
* Now that we have local and remote candidate, check if we already
* have this pair in our checklist.
*/
for (i=0; i<ice->clist.count; ++i) {
pj_ice_sess_check *c = &ice->clist.checks[i];
if (c->lcand == lcand && c->rcand == rcand)
break;
}
/* If the pair is already on the check list:
* - If the state of that pair is Waiting or Frozen, its state is
* changed to In-Progress and a check for that pair is performed
* immediately. This is called a triggered check.
*
* - If the state of that pair is In-Progress, the agent SHOULD
* generate an immediate retransmit of the Binding Request for the
* check in progress. This is to facilitate rapid completion of
* ICE when both agents are behind NAT.
*
* - If the state of that pair is Failed or Succeeded, no triggered
* check is sent.
*/
if (i != ice->clist.count) {
pj_ice_sess_check *c = &ice->clist.checks[i];
/* If USE-CANDIDATE is present, set nominated flag
* Note: DO NOT overwrite nominated flag if one is already set.
*/
c->nominated = ((rcheck->use_candidate) || c->nominated);
if (c->state == PJ_ICE_SESS_CHECK_STATE_FROZEN ||
c->state == PJ_ICE_SESS_CHECK_STATE_WAITING)
{
LOG5((ice->obj_name, "Performing triggered check for check %d",i));
perform_check(ice, &ice->clist, i);
} else if (c->state == PJ_ICE_SESS_CHECK_STATE_IN_PROGRESS) {
/* Should retransmit immediately
*/
LOG5((ice->obj_name, "Triggered check for check %d not performed "
"because it's in progress. Retransmitting", i));
pj_stun_session_retransmit_req(comp->stun_sess, c->tdata);
} else if (c->state == PJ_ICE_SESS_CHECK_STATE_SUCCEEDED) {
/* Check complete for this component.
* Note this may end ICE process.
*/
pj_bool_t complete;
unsigned j;
/* If this check is nominated, scan the valid_list for the
* same check and update the nominated flag. A controlled
* agent might have finished the check earlier.
*/
if (rcheck->use_candidate) {
for (j=0; j<ice->valid_list.count; ++j) {
pj_ice_sess_check *vc = &ice->valid_list.checks[j];
if (vc->lcand == c->lcand && vc->rcand == c->rcand) {
vc->nominated = PJ_TRUE;
}
}
}
LOG5((ice->obj_name, "Triggered check for check %d not performed "
"because it's completed", i));
complete = on_check_complete(ice, c);
if (complete) {
return;
}
}
}
/* If the pair is not already on the check list:
* - The pair is inserted into the check list based on its priority.
* - Its state is set to In-Progress
* - A triggered check for that pair is performed immediately.
*/
/* Note: only do this if we don't have too many checks in checklist */
else if (ice->clist.count < PJ_ICE_MAX_CHECKS) {
pj_ice_sess_check *c = &ice->clist.checks[ice->clist.count];
c->lcand = lcand;
c->rcand = rcand;
c->prio = CALC_CHECK_PRIO(ice, lcand, rcand);
c->state = PJ_ICE_SESS_CHECK_STATE_WAITING;
c->nominated = rcheck->use_candidate;
c->err_code = PJ_SUCCESS;
LOG4((ice->obj_name, "New triggered check added: %d",
ice->clist.count));
perform_check(ice, &ice->clist, ice->clist.count++);
} else {
LOG4((ice->obj_name, "Error: unable to perform triggered check: "
"TOO MANY CHECKS IN CHECKLIST!"));
}
}
static pj_status_t on_stun_rx_indication(pj_stun_session *sess,
const pj_uint8_t *pkt,
unsigned pkt_len,
const pj_stun_msg *msg,
const pj_sockaddr_t *src_addr,
unsigned src_addr_len)
{
PJ_UNUSED_ARG(sess);
PJ_UNUSED_ARG(pkt);
PJ_UNUSED_ARG(pkt_len);
PJ_UNUSED_ARG(msg);
PJ_UNUSED_ARG(src_addr);
PJ_UNUSED_ARG(src_addr_len);
PJ_TODO(SUPPORT_RX_BIND_REQUEST_AS_INDICATION);
return PJ_ENOTSUP;
}
PJ_DEF(pj_status_t) pj_ice_sess_send_data(pj_ice_sess *ice,
unsigned comp_id,
const void *data,
pj_size_t data_len)
{
pj_status_t status = PJ_SUCCESS;
pj_ice_sess_comp *comp;
PJ_ASSERT_RETURN(ice && comp_id, PJ_EINVAL);
/* It is possible that comp_cnt is less than comp_id, when remote
* doesn't support all the components that we have.
*/
if (comp_id > ice->comp_cnt) {
return PJNATH_EICEINCOMPID;
}
pj_mutex_lock(ice->mutex);
comp = find_comp(ice, comp_id);
if (comp == NULL) {
status = PJNATH_EICEINCOMPID;
goto on_return;
}
if (comp->valid_check == NULL) {
status = PJNATH_EICEINPROGRESS;
goto on_return;
}
status = (*ice->cb.on_tx_pkt)(ice, comp_id, data, data_len,
&comp->valid_check->rcand->addr,
sizeof(pj_sockaddr_in));
on_return:
pj_mutex_unlock(ice->mutex);
return status;
}
PJ_DEF(pj_status_t) pj_ice_sess_on_rx_pkt(pj_ice_sess *ice,
unsigned comp_id,
void *pkt,
pj_size_t pkt_size,
const pj_sockaddr_t *src_addr,
int src_addr_len)
{
pj_status_t status = PJ_SUCCESS;
pj_ice_sess_comp *comp;
pj_status_t stun_status;
PJ_ASSERT_RETURN(ice, PJ_EINVAL);
pj_mutex_lock(ice->mutex);
comp = find_comp(ice, comp_id);
if (comp == NULL) {
status = PJNATH_EICEINCOMPID;
goto on_return;
}
stun_status = pj_stun_msg_check((const pj_uint8_t*)pkt, pkt_size,
PJ_STUN_IS_DATAGRAM);
if (stun_status == PJ_SUCCESS) {
status = pj_stun_session_on_rx_pkt(comp->stun_sess, pkt, pkt_size,
PJ_STUN_IS_DATAGRAM,
NULL, src_addr, src_addr_len);
if (status != PJ_SUCCESS) {
char errmsg[PJ_ERR_MSG_SIZE];
pj_strerror(status, errmsg, sizeof(errmsg));
LOG4((ice->obj_name, "Error processing incoming message: %s",
errmsg));
}
} else {
(*ice->cb.on_rx_data)(ice, comp_id, pkt, pkt_size,
src_addr, src_addr_len);
}
on_return:
pj_mutex_unlock(ice->mutex);
return status;
}