RFC 143 UNKNOWN TRANSPORT · NETWORKING

Regarding proffered official ICP

A timing flaw in the connection setup process

On rfc-editor.org ↗
PUBLISHED
May 1971
AUTHORS
W. Naylor, J. Wong, C. Kline, J. Postel
STREAM
Legacy
BUILDS ON
RFC 123 — Proffered Official ICP, RFC 145 — Initial Connection Protocol Control Commands
OBSOLETED BY
RFC 165 — ICP
CONNECTION SETUP STEPS
20 sequential operations
CRITICAL CONFLICT POINT
Step 16 before step 12
DOI
10.17487/RFC0143

RFC text

Contents
Original text · RFC Editor View on rfc-editor.org ↗
Network Working Group                                         W. Naylor
Request for Comments #143                                     J. Wong
NIC #6728                                                     C. Kline
Categories:  D.1, D.3                                         J. Postel
Obsoletes:  None                                              UCLA - NMC
Updates:  123, 145                                            3 May 1971

                    Regarding Proferred Official ICP

We should like to comment on a race condition discovered in the ICP as
proposed in NWG/RFC #123.  The problem arises when the server attempts
to initiate a second connection to the user's receive socket and the
first connection is not yet closed.  Using a similar notation to that of
NWG/RFC #123 the following table illustrates the sequence of events in
the proferred and proposed ICP.  The last two columns indicate which
actions must be completed before the current action may be initiated.
User and Server are third level programs, and UNCP and SNCP are the
users NCP and Servers NCP respectively.  Allocates have not been
included since they add nothing to the argument.

                                               Required Predecessors
                                               ---------------------
Reference #   Action              Initiator   "Proferred"   Proposed
-----------   ------              ---------   -----------   --------
    1         Listen(L,32)        Server           --          --

    2         Init(U,L,32)        User             --          --

    3         RTS(U,L,'l')        UNCP             2           2

    4         STR(L,U,32)         SNCP          1 and 3     1 and 3

    5         Send(L,S)           Server           4           4

    6         SEND('l',S)         SNCP             5           5

    7         RECEIVE('l',S)      UNCP             6           6

    8         Receive(U,S)        User             7           7

    9         Close(L)            Server           5           5

   10         CLS(L,U)            SNCP          9 and 7     9 and 7

   11         Close(U)            User             8        not used

   12         CLS(U,L)            UNCP            11          10

                                               Required Predecessors
                                               ---------------------
Reference #   Action              Initiator   "Proferred"   Proposed
-----------   ------              ---------   -----------   --------

   13         Init(S,U+1,B )      Server           9           9
                          u

   14         RTS(S,U+1,'l' )     SNCP            13          13
                           2

   15         Init(S+1,U,B )      Server          13        14 and 18
                          s

   16         STR(S+1,U,B )       SNCP            15          15
                         s

   17         Init(U+1,S,B )      User            11          12
                          u

   18         STR(U+1,S,B )       UNCP            17          17
                         u

   19         Init(U,S+1,B )      User            17          17
                          s

   20         RTS(U,S+1,'l' )     UNCP            19          19
                           3

Note that in the Proferred Order column, 16 can occur before 12 in which
case UNCP would find socket U in use and probably return a CLS (U,S+1).
The Server would probably then assume the User was finished with the
conversation.

The above problem is resolved by eliminating the Close from one side and
causing that side to wait for the CLS from the other side before doing
an Init.  We propose that eliminating the user's Close (U) is the best
solution.  (The user NCP must of course return a CLS in response to the
CLS sent by the server NCP).

The Server's Close (L) leads more quickly to the reuse of socket L thus
the serving of another user.

To clarify the above discussion which may seem confusing at first
glance, let us demonstrate the problem in the language of RFC #123.

          Server                              User
          ------                              ----
     (S1) Listen(L,32)                   (U1) Init(U,L,32)

     (S2) [Wait for match]               (U2)

     (S3) Send(L,S)                      (U3) Receive(U,S)

     (S4) Close(L)                       (U4) Close(U)

     (S5) Init(S,U+1,B )                 (U5) Init(U+1,S,B )
                      u                                   u

     (S6) Init(S+1,U,B )                 (U6) Init(U,S+1,B )
                      s                                   s

Notice that since server and user are independent (probably in different
hosts), server could execute (S6) before user executes (U4) and could
receive an error back from user's NCP that socket U is busy.  Similarly,
user could execute (U6) before server executes (S4) and could receive an
error back from his own NCP that socket U is not yet closed (assuming an
implementation where sockets are kept busy until a CLS match).

Various modifications could be made to ICP to solve this problem.  We
propose the following ICP:

          Server                              User
          ------                              ----
          Listen(L,32)                        Init(U,L,32)

          [Wait for match]

          Send(L,S)                           Receive(U,S)

          Close(L)                            [Wait for CLS]

          Init(S,U+1,B )                      Init(U+1,S,B )
                      u                                   u

          [Wait for match]                    Init(U,S+1,B )
                                                          s

          Init(S+1,U,B )
                      s

This ICP assumes the following:

1.  The user can inquire or is notified of the fact that one of his
    connections has been closed.

2.  The server can inquire or is notified that a connection for which
    he has done an Init (or Listen) is now open.

Both of the above seem basic to any NCP - user interface.

This race condition problem would not exist had the dynamic reconnection
features of RFC #36 been included in the NCP protocol and had dynamic
reconnection been used in this ICP.


       [ This RFC was put into machine readable form for entry ]
        [ into the online RFC archives by Walter Pienciak 1/98 ]

AI ELI5

On this page
PROBLEMThe Initial Connection Protocol (ICP) defined in RFC 123 has a race condition: the server tries to open a second connection before the first is completely closed, causing sockets to conflict.
MECHANISMThe race occurs because both the server and user independently decide when to close their connections and open new ones. If these actions overlap, socket numbers collide and operations fail.
RACE CONDITION IDENTIFIEDRFC 143 proposes removing one side's close operation and having that side wait for the other to close first, eliminating the race. It was later replaced by RFC 165 with a more complete solution.

§1The Race Condition Problem

RFC 123 proposed an Initial Connection Procedure (ICP) for establishing connections between computers. However, RFC 143 identifies a timing problem: when the server tries to initiate a second connection while the user's first connection is not yet closed, the ICP can fail. Both the server and user Network Control Programs (NCPs) may attempt to use the same socket numbers at nearly the same moment, causing conflicts.

When two computers try to set up a connection, they sometimes get confused about which sockets to use because they are not waiting for each other.

§2The Sequence of Events

The authors provide a detailed sequence of 20 steps showing when actions must occur. The problem manifests when step 16 (the server opening a new socket) happens before step 12 (the user closing its socket). When this occurs, the user's NCP finds its socket already in use from step 16 and may return an error, causing the server to incorrectly assume the user is finished.

The server tries to open a new connection before the user is done closing the old one. The user gets confused and thinks the conversation is over.

§3The Proposed Solution

RFC 143 proposes eliminating the user's explicit close operation and having the user wait for a close signal from the server before opening new connections. This ensures that sockets remain unavailable until the server explicitly releases them. The server's close operation takes precedence, allowing it to reuse sockets for serving the next user more quickly, while the user NCP simply acknowledges the server's close signal before proceeding.

Instead of both sides closing when they want, let the server close first. The user waits and listens, only then opening new connections.

§4References