[retry] Hold reference while timer is running and during expiry callback

Guarantee that a retry timer cannot go out of scope while the timer is
running, and provide a guarantee to the expiry callback that the timer
will remain in scope during the entire callback (similar to the
guarantee provided to interface methods).

Signed-off-by: Michael Brown <mcb30@ipxe.org>

src/include/ipxe/retry.h

 	 * timeout has already exceeded @c MAX_TIMEOUT.
 	 */
 	void ( * expired ) ( struct retry_timer *timer, int over );
+	/** Reference counter
+	 *
+	 * If this interface is not part of a reference-counted
+	 * object, this field may be NULL.
+	 */
+	struct refcnt *refcnt;
 };
 
 /**
  *
  * @v timer		Retry timer
  * @v expired		Timer expired callback
+ * @v refcnt		Reference counter, or NULL
  */
 static inline __attribute__ (( always_inline )) void
 timer_init ( struct retry_timer *timer,
-	     void ( * expired ) ( struct retry_timer *timer, int over ) ) {
+	     void ( * expired ) ( struct retry_timer *timer, int over ),
+	     struct refcnt *refcnt ) {
 	timer->expired = expired;
+	timer->refcnt = refcnt;
 }
 
 extern void start_timer ( struct retry_timer *timer );

src/net/aoe.c

 	if ( ! aoe )
 		return -ENOMEM;
 	ref_init ( &aoe->refcnt, aoe_free );
-	timer_init ( &aoe->timer, aoe_timer_expired );
+	timer_init ( &aoe->timer, aoe_timer_expired, &aoe->refcnt );
 	aoe->netdev = netdev_get ( netdev );
 	memcpy ( aoe->target, netdev->ll_broadcast, sizeof ( aoe->target ) );
 	aoe->tag = AOE_TAG_MAGIC;

src/net/infiniband/ib_mi.c

 	madx = zalloc ( sizeof ( *madx ) );
 	if ( ! madx )
 		return NULL;
-	timer_init ( &madx->timer, ib_mi_timer_expired );
+	timer_init ( &madx->timer, ib_mi_timer_expired, NULL );
 	madx->mi = mi;
 	madx->op = op;
 

src/net/ipv4.c

 		free_iob ( iobuf );
 
 		/* Set the reassembly timer */
-		timer_init ( &fragbuf->frag_timer, ipv4_frag_expired );
+		timer_init ( &fragbuf->frag_timer, ipv4_frag_expired, NULL );
 		start_timer_fixed ( &fragbuf->frag_timer, IP_FRAG_TIMEOUT );
 
 		/* Add the fragment buffer to the list of fragment buffers */

src/net/retry.c

  * be stopped and the timer's callback function will be called.
  */
 void start_timer ( struct retry_timer *timer ) {
-	if ( ! timer->running )
+	if ( ! timer->running ) {
 		list_add ( &timer->list, &timers );
+		ref_get ( timer->refcnt );
+	}
 	timer->start = currticks();
 	timer->running = 1;
 
 			      timer, timer->timeout );
 		}
 	}
+
+	ref_put ( timer->refcnt );
 }
 
 /**
 	      timer, timer->timeout );
 
 	/* Call expiry callback */
-	timer->expired ( timer, fail );	
+	timer->expired ( timer, fail );
+
+	ref_put ( timer->refcnt );
 }
 
 /**

src/net/tcp.c

 	DBGC ( tcp, "TCP %p allocated\n", tcp );
 	ref_init ( &tcp->refcnt, NULL );
 	intf_init ( &tcp->xfer, &tcp_xfer_desc, &tcp->refcnt );
-	timer_init ( &tcp->timer, tcp_expired );
-	timer_init ( &tcp->wait, tcp_wait_expired );
+	timer_init ( &tcp->timer, tcp_expired, &tcp->refcnt );
+	timer_init ( &tcp->wait, tcp_wait_expired, &tcp->refcnt );
 	tcp->prev_tcp_state = TCP_CLOSED;
 	tcp->tcp_state = TCP_STATE_SENT ( TCP_SYN );
 	tcp_dump_state ( tcp );

src/net/udp/dhcp.c

 	ref_init ( &dhcp->refcnt, dhcp_free );
 	intf_init ( &dhcp->job, &dhcp_job_desc, &dhcp->refcnt );
 	intf_init ( &dhcp->xfer, &dhcp_xfer_desc, &dhcp->refcnt );
-	timer_init ( &dhcp->timer, dhcp_timer_expired );
+	timer_init ( &dhcp->timer, dhcp_timer_expired, &dhcp->refcnt );
 	dhcp->netdev = netdev_get ( netdev );
 	dhcp->local.sin_family = AF_INET;
 	dhcp->local.sin_port = htons ( BOOTPC_PORT );
 	ref_init ( &dhcp->refcnt, dhcp_free );
 	intf_init ( &dhcp->job, &dhcp_job_desc, &dhcp->refcnt );
 	intf_init ( &dhcp->xfer, &dhcp_xfer_desc, &dhcp->refcnt );
-	timer_init ( &dhcp->timer, dhcp_timer_expired );
+	timer_init ( &dhcp->timer, dhcp_timer_expired, &dhcp->refcnt );
 	dhcp->netdev = netdev_get ( netdev );
 	dhcp->local.sin_family = AF_INET;
 	fetch_ipv4_setting ( netdev_settings ( netdev ), &ip_setting,

src/net/udp/dns.c

 	ref_init ( &dns->refcnt, NULL );
 	intf_init ( &dns->resolv, &dns_resolv_desc, &dns->refcnt );
 	intf_init ( &dns->socket, &dns_socket_desc, &dns->refcnt );
-	timer_init ( &dns->timer, dns_timer_expired );
+	timer_init ( &dns->timer, dns_timer_expired, &dns->refcnt );
 	memcpy ( &dns->sa, sa, sizeof ( dns->sa ) );
 
 	/* Create query */

src/net/udp/slam.c

 	intf_init ( &slam->xfer, &slam_xfer_desc, &slam->refcnt );
 	intf_init ( &slam->socket, &slam_socket_desc, &slam->refcnt );
 	intf_init ( &slam->mc_socket, &slam_mc_socket_desc, &slam->refcnt );
-	timer_init ( &slam->master_timer, slam_master_timer_expired );
-	timer_init ( &slam->slave_timer, slam_slave_timer_expired );
+	timer_init ( &slam->master_timer, slam_master_timer_expired,
+		     &slam->refcnt );
+	timer_init ( &slam->slave_timer, slam_slave_timer_expired,
+		     &slam->refcnt );
 	/* Fake an invalid cached header of { 0x00, ... } */
 	slam->header_len = 1;
 	/* Fake parameters for initial NACK */

src/net/udp/tftp.c

 	intf_init ( &tftp->xfer, &tftp_xfer_desc, &tftp->refcnt );
 	intf_init ( &tftp->socket, &tftp_socket_desc, &tftp->refcnt );
 	intf_init ( &tftp->mc_socket, &tftp_mc_socket_desc, &tftp->refcnt );
-	timer_init ( &tftp->timer, tftp_timer_expired );
+	timer_init ( &tftp->timer, tftp_timer_expired, &tftp->refcnt );
 	tftp->uri = uri_get ( uri );
 	tftp->blksize = TFTP_DEFAULT_BLKSIZE;
 	tftp->flags = flags;