xref: /freebsd/sys/netinet/sctp_asconf.c (revision 60990c0c060ca786f943cc978d4be566a1939d50)
1f8829a4aSRandall Stewart /*-
2b1006367SRandall Stewart  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
35d40cf5dSRandall Stewart  * Copyright (c) 2008-2011, by Randall Stewart. All rights reserved.
45d40cf5dSRandall Stewart  * Copyright (c) 2008-2011, by Michael Tuexen. All rights reserved.
5f8829a4aSRandall Stewart  *
6f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
7f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
8f8829a4aSRandall Stewart  *
9f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
10f8829a4aSRandall Stewart  *    this list of conditions and the following disclaimer.
11f8829a4aSRandall Stewart  *
12f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
13f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
14f8829a4aSRandall Stewart  *    the documentation and/or other materials provided with the distribution.
15f8829a4aSRandall Stewart  *
16f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
18f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
19f8829a4aSRandall Stewart  *
20f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
31f8829a4aSRandall Stewart  */
32f8829a4aSRandall Stewart 
33f8829a4aSRandall Stewart /* $KAME: sctp_asconf.c,v 1.24 2005/03/06 16:04:16 itojun Exp $	 */
34f8829a4aSRandall Stewart 
35f8829a4aSRandall Stewart #include <sys/cdefs.h>
36cef8ad06SRandall Stewart __FBSDID("$FreeBSD$");
37f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
38f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
3942551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
40f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
41f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
42f8829a4aSRandall Stewart #include <netinet/sctputil.h>
43f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
44f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
45851b7298SRandall Stewart #include <netinet/sctp_timer.h>
46f8829a4aSRandall Stewart 
47f8829a4aSRandall Stewart /*
48f8829a4aSRandall Stewart  * debug flags:
49f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF1: protocol info, general info and errors
50f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF2: detailed info
51f8829a4aSRandall Stewart  */
52f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
53f8829a4aSRandall Stewart #endif				/* SCTP_DEBUG */
54f8829a4aSRandall Stewart 
55f8829a4aSRandall Stewart 
56ad81507eSRandall Stewart static void
57f8829a4aSRandall Stewart sctp_asconf_get_source_ip(struct mbuf *m, struct sockaddr *sa)
58f8829a4aSRandall Stewart {
59f8829a4aSRandall Stewart 	struct ip *iph;
60e6194c2eSMichael Tuexen 
61e6194c2eSMichael Tuexen #ifdef INET
62f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
63f8829a4aSRandall Stewart 
64e6194c2eSMichael Tuexen #endif
65f8829a4aSRandall Stewart #ifdef INET6
66f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
67f8829a4aSRandall Stewart 
68f8829a4aSRandall Stewart #endif
69f8829a4aSRandall Stewart 
70f8829a4aSRandall Stewart 	iph = mtod(m, struct ip *);
71e6194c2eSMichael Tuexen 	switch (iph->ip_v) {
72e6194c2eSMichael Tuexen #ifdef INET
73e6194c2eSMichael Tuexen 	case IPVERSION:
74e6194c2eSMichael Tuexen 		{
75f8829a4aSRandall Stewart 			/* IPv4 source */
76f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
77f8829a4aSRandall Stewart 			bzero(sin, sizeof(*sin));
78f8829a4aSRandall Stewart 			sin->sin_family = AF_INET;
79f8829a4aSRandall Stewart 			sin->sin_len = sizeof(struct sockaddr_in);
80f8829a4aSRandall Stewart 			sin->sin_port = 0;
81f8829a4aSRandall Stewart 			sin->sin_addr.s_addr = iph->ip_src.s_addr;
82e6194c2eSMichael Tuexen 			break;
83f8829a4aSRandall Stewart 		}
84e6194c2eSMichael Tuexen #endif
85f8829a4aSRandall Stewart #ifdef INET6
86e6194c2eSMichael Tuexen 	case (IPV6_VERSION >> 4):
87e6194c2eSMichael Tuexen 		{
88f8829a4aSRandall Stewart 			/* IPv6 source */
89f8829a4aSRandall Stewart 			struct ip6_hdr *ip6;
90f8829a4aSRandall Stewart 
91f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
92f8829a4aSRandall Stewart 			bzero(sin6, sizeof(*sin6));
93f8829a4aSRandall Stewart 			sin6->sin6_family = AF_INET6;
94f8829a4aSRandall Stewart 			sin6->sin6_len = sizeof(struct sockaddr_in6);
95f8829a4aSRandall Stewart 			sin6->sin6_port = 0;
96f8829a4aSRandall Stewart 			ip6 = mtod(m, struct ip6_hdr *);
97f8829a4aSRandall Stewart 			sin6->sin6_addr = ip6->ip6_src;
98e6194c2eSMichael Tuexen 			break;
99f8829a4aSRandall Stewart 		}
100f8829a4aSRandall Stewart #endif				/* INET6 */
101e6194c2eSMichael Tuexen 	default:
102e6194c2eSMichael Tuexen 		break;
103e6194c2eSMichael Tuexen 	}
104ad81507eSRandall Stewart 	return;
105f8829a4aSRandall Stewart }
106f8829a4aSRandall Stewart 
107f8829a4aSRandall Stewart /*
108f8829a4aSRandall Stewart  * draft-ietf-tsvwg-addip-sctp
109f8829a4aSRandall Stewart  *
110f8829a4aSRandall Stewart  * An ASCONF parameter queue exists per asoc which holds the pending address
111f8829a4aSRandall Stewart  * operations.  Lists are updated upon receipt of ASCONF-ACK.
112f8829a4aSRandall Stewart  *
11318e198d3SRandall Stewart  * A restricted_addrs list exists per assoc to hold local addresses that are
11418e198d3SRandall Stewart  * not (yet) usable by the assoc as a source address.  These addresses are
11518e198d3SRandall Stewart  * either pending an ASCONF operation (and exist on the ASCONF parameter
11618e198d3SRandall Stewart  * queue), or they are permanently restricted (the peer has returned an
11718e198d3SRandall Stewart  * ERROR indication to an ASCONF(ADD), or the peer does not support ASCONF).
11818e198d3SRandall Stewart  *
119f8829a4aSRandall Stewart  * Deleted addresses are always immediately removed from the lists as they will
120f8829a4aSRandall Stewart  * (shortly) no longer exist in the kernel.  We send ASCONFs as a courtesy,
121f8829a4aSRandall Stewart  * only if allowed.
122f8829a4aSRandall Stewart  */
123f8829a4aSRandall Stewart 
124f8829a4aSRandall Stewart /*
12518e198d3SRandall Stewart  * ASCONF parameter processing.
12618e198d3SRandall Stewart  * response_required: set if a reply is required (eg. SUCCESS_REPORT).
12718e198d3SRandall Stewart  * returns a mbuf to an "error" response parameter or NULL/"success" if ok.
12818e198d3SRandall Stewart  * FIX: allocating this many mbufs on the fly is pretty inefficient...
129f8829a4aSRandall Stewart  */
130f8829a4aSRandall Stewart static struct mbuf *
131f8829a4aSRandall Stewart sctp_asconf_success_response(uint32_t id)
132f8829a4aSRandall Stewart {
133f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
134f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
135f8829a4aSRandall Stewart 
136f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_paramhdr),
137f8829a4aSRandall Stewart 	    0, M_DONTWAIT, 1, MT_DATA);
138f8829a4aSRandall Stewart 	if (m_reply == NULL) {
139ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
140ad81507eSRandall Stewart 		    "asconf_success_response: couldn't get mbuf!\n");
141*60990c0cSMichael Tuexen 		return (NULL);
142f8829a4aSRandall Stewart 	}
143f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
144f8829a4aSRandall Stewart 	aph->correlation_id = id;
145f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_SUCCESS_REPORT);
146f8829a4aSRandall Stewart 	aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr);
147139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
148f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
149f8829a4aSRandall Stewart 
150*60990c0cSMichael Tuexen 	return (m_reply);
151f8829a4aSRandall Stewart }
152f8829a4aSRandall Stewart 
153f8829a4aSRandall Stewart static struct mbuf *
154f8829a4aSRandall Stewart sctp_asconf_error_response(uint32_t id, uint16_t cause, uint8_t * error_tlv,
155f8829a4aSRandall Stewart     uint16_t tlv_length)
156f8829a4aSRandall Stewart {
157f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
158f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
159f8829a4aSRandall Stewart 	struct sctp_error_cause *error;
160f8829a4aSRandall Stewart 	uint8_t *tlv;
161f8829a4aSRandall Stewart 
162f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg((sizeof(struct sctp_asconf_paramhdr) +
163f8829a4aSRandall Stewart 	    tlv_length +
164f8829a4aSRandall Stewart 	    sizeof(struct sctp_error_cause)),
165f8829a4aSRandall Stewart 	    0, M_DONTWAIT, 1, MT_DATA);
166f8829a4aSRandall Stewart 	if (m_reply == NULL) {
167ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
168ad81507eSRandall Stewart 		    "asconf_error_response: couldn't get mbuf!\n");
169*60990c0cSMichael Tuexen 		return (NULL);
170f8829a4aSRandall Stewart 	}
171f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
172f8829a4aSRandall Stewart 	error = (struct sctp_error_cause *)(aph + 1);
173f8829a4aSRandall Stewart 
174f8829a4aSRandall Stewart 	aph->correlation_id = id;
175f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_ERROR_CAUSE_IND);
176f8829a4aSRandall Stewart 	error->code = htons(cause);
177f8829a4aSRandall Stewart 	error->length = tlv_length + sizeof(struct sctp_error_cause);
178f8829a4aSRandall Stewart 	aph->ph.param_length = error->length +
179f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_paramhdr);
180f8829a4aSRandall Stewart 
181f8829a4aSRandall Stewart 	if (aph->ph.param_length > MLEN) {
182ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
183ad81507eSRandall Stewart 		    "asconf_error_response: tlv_length (%xh) too big\n",
184f8829a4aSRandall Stewart 		    tlv_length);
185f8829a4aSRandall Stewart 		sctp_m_freem(m_reply);	/* discard */
186*60990c0cSMichael Tuexen 		return (NULL);
187f8829a4aSRandall Stewart 	}
188f8829a4aSRandall Stewart 	if (error_tlv != NULL) {
189f8829a4aSRandall Stewart 		tlv = (uint8_t *) (error + 1);
190f8829a4aSRandall Stewart 		memcpy(tlv, error_tlv, tlv_length);
191f8829a4aSRandall Stewart 	}
192139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
193f8829a4aSRandall Stewart 	error->length = htons(error->length);
194f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
195f8829a4aSRandall Stewart 
196*60990c0cSMichael Tuexen 	return (m_reply);
197f8829a4aSRandall Stewart }
198f8829a4aSRandall Stewart 
199f8829a4aSRandall Stewart static struct mbuf *
200f8829a4aSRandall Stewart sctp_process_asconf_add_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph,
201ca85e948SMichael Tuexen     struct sctp_tcb *stcb, int send_hb, int response_required)
202f8829a4aSRandall Stewart {
203ca85e948SMichael Tuexen 	struct sctp_nets *net;
204f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
205f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
206e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
207f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
208f8829a4aSRandall Stewart 	struct sockaddr *sa;
209f8829a4aSRandall Stewart 	int zero_address = 0;
21092776dfdSMichael Tuexen 	int bad_address = 0;
211f8829a4aSRandall Stewart 
212e6194c2eSMichael Tuexen #ifdef INET
213e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
214e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
215e6194c2eSMichael Tuexen 
216e6194c2eSMichael Tuexen #endif
217f8829a4aSRandall Stewart #ifdef INET6
218f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
219f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
220f8829a4aSRandall Stewart 
221e6194c2eSMichael Tuexen #endif
222f8829a4aSRandall Stewart 
223f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
224e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
225e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
226e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
227f8829a4aSRandall Stewart 
228f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
229f8829a4aSRandall Stewart 	switch (param_type) {
230e6194c2eSMichael Tuexen #ifdef INET
231f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
232f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
233f8829a4aSRandall Stewart 			/* invalid param size */
234*60990c0cSMichael Tuexen 			return (NULL);
235f8829a4aSRandall Stewart 		}
236e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
237f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
238f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
239f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
240f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
241f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
242f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
24392776dfdSMichael Tuexen 		if ((sin->sin_addr.s_addr == INADDR_BROADCAST) ||
24492776dfdSMichael Tuexen 		    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
2453657c405SMichael Tuexen 			bad_address = 1;
24692776dfdSMichael Tuexen 		}
247f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
248f8829a4aSRandall Stewart 			zero_address = 1;
249ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
250ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
251f8829a4aSRandall Stewart 		break;
252e6194c2eSMichael Tuexen #endif
253f8829a4aSRandall Stewart #ifdef INET6
254e6194c2eSMichael Tuexen 	case SCTP_IPV6_ADDRESS:
255f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
256f8829a4aSRandall Stewart 			/* invalid param size */
257*60990c0cSMichael Tuexen 			return (NULL);
258f8829a4aSRandall Stewart 		}
259e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
260f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
261f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
262f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
263f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
264f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
265f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
266f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
26792776dfdSMichael Tuexen 		if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
26892776dfdSMichael Tuexen 			bad_address = 1;
26992776dfdSMichael Tuexen 		}
270f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
271f8829a4aSRandall Stewart 			zero_address = 1;
272ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
273ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
274f8829a4aSRandall Stewart 		break;
275e6194c2eSMichael Tuexen #endif
276f8829a4aSRandall Stewart 	default:
277f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
27892776dfdSMichael Tuexen 		    SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph,
279f8829a4aSRandall Stewart 		    aparam_length);
280*60990c0cSMichael Tuexen 		return (m_reply);
281f8829a4aSRandall Stewart 	}			/* end switch */
282f8829a4aSRandall Stewart 
283f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, add the source address instead */
284b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
285f8829a4aSRandall Stewart 		sa = (struct sockaddr *)&sa_source;
286f8829a4aSRandall Stewart 		sctp_asconf_get_source_ip(m, sa);
287ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
288ad81507eSRandall Stewart 		    "process_asconf_add_ip: using source addr ");
289ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
290f8829a4aSRandall Stewart 	}
291f8829a4aSRandall Stewart 	/* add the address */
29292776dfdSMichael Tuexen 	if (bad_address) {
29392776dfdSMichael Tuexen 		m_reply = sctp_asconf_error_response(aph->correlation_id,
29492776dfdSMichael Tuexen 		    SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph,
29592776dfdSMichael Tuexen 		    aparam_length);
29692776dfdSMichael Tuexen 	} else if (sctp_add_remote_addr(stcb, sa, &net, SCTP_DONOT_SETSCOPE,
297a5d547adSRandall Stewart 	    SCTP_ADDR_DYNAMIC_ADDED) != 0) {
298ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
299ad81507eSRandall Stewart 		    "process_asconf_add_ip: error adding address\n");
300f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
301f8829a4aSRandall Stewart 		    SCTP_CAUSE_RESOURCE_SHORTAGE, (uint8_t *) aph,
302f8829a4aSRandall Stewart 		    aparam_length);
303f8829a4aSRandall Stewart 	} else {
304f8829a4aSRandall Stewart 		/* notify upper layer */
305ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_ADD_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
306f8829a4aSRandall Stewart 		if (response_required) {
307f8829a4aSRandall Stewart 			m_reply =
308f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
309f8829a4aSRandall Stewart 		}
310ca85e948SMichael Tuexen 		sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, stcb->sctp_ep, stcb, net);
3113c503c28SRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep,
312ca85e948SMichael Tuexen 		    stcb, net);
313ca85e948SMichael Tuexen 		if (send_hb) {
314ca85e948SMichael Tuexen 			sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
315ca85e948SMichael Tuexen 		}
316f8829a4aSRandall Stewart 	}
317*60990c0cSMichael Tuexen 	return (m_reply);
318f8829a4aSRandall Stewart }
319f8829a4aSRandall Stewart 
320f8829a4aSRandall Stewart static int
3211b649582SRandall Stewart sctp_asconf_del_remote_addrs_except(struct sctp_tcb *stcb, struct sockaddr *src)
322f8829a4aSRandall Stewart {
323f8829a4aSRandall Stewart 	struct sctp_nets *src_net, *net;
324f8829a4aSRandall Stewart 
325f8829a4aSRandall Stewart 	/* make sure the source address exists as a destination net */
326f8829a4aSRandall Stewart 	src_net = sctp_findnet(stcb, src);
327f8829a4aSRandall Stewart 	if (src_net == NULL) {
328f8829a4aSRandall Stewart 		/* not found */
329*60990c0cSMichael Tuexen 		return (-1);
330f8829a4aSRandall Stewart 	}
331f8829a4aSRandall Stewart 	/* delete all destination addresses except the source */
332f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
333f8829a4aSRandall Stewart 		if (net != src_net) {
334f8829a4aSRandall Stewart 			/* delete this address */
335f8829a4aSRandall Stewart 			sctp_remove_net(stcb, net);
336ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
337ad81507eSRandall Stewart 			    "asconf_del_remote_addrs_except: deleting ");
338ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1,
339ad81507eSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr);
340f8829a4aSRandall Stewart 			/* notify upper layer */
341f8829a4aSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0,
342ceaad40aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, SCTP_SO_NOT_LOCKED);
343f8829a4aSRandall Stewart 		}
344f8829a4aSRandall Stewart 	}
345*60990c0cSMichael Tuexen 	return (0);
346f8829a4aSRandall Stewart }
347f8829a4aSRandall Stewart 
348f8829a4aSRandall Stewart static struct mbuf *
349f8829a4aSRandall Stewart sctp_process_asconf_delete_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph,
350f8829a4aSRandall Stewart     struct sctp_tcb *stcb, int response_required)
351f8829a4aSRandall Stewart {
352f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
353f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
354e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
355f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
356f8829a4aSRandall Stewart 	struct sockaddr *sa;
357f8829a4aSRandall Stewart 	int zero_address = 0;
358f8829a4aSRandall Stewart 	int result;
359f8829a4aSRandall Stewart 
360e6194c2eSMichael Tuexen #ifdef INET
361e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
362e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
363e6194c2eSMichael Tuexen 
364e6194c2eSMichael Tuexen #endif
365f8829a4aSRandall Stewart #ifdef INET6
366f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
367f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
368f8829a4aSRandall Stewart 
369e6194c2eSMichael Tuexen #endif
370f8829a4aSRandall Stewart 
371f8829a4aSRandall Stewart 	/* get the source IP address for src and 0.0.0.0/::0 delete checks */
372f8829a4aSRandall Stewart 	sctp_asconf_get_source_ip(m, (struct sockaddr *)&sa_source);
373f8829a4aSRandall Stewart 
374f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
375e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
376e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
377e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
378f8829a4aSRandall Stewart 
379f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
380f8829a4aSRandall Stewart 	switch (param_type) {
381e6194c2eSMichael Tuexen #ifdef INET
382f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
383f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
384f8829a4aSRandall Stewart 			/* invalid param size */
385*60990c0cSMichael Tuexen 			return (NULL);
386f8829a4aSRandall Stewart 		}
387e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
388f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
389f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
390f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
391f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
392f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
393f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
394f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
395f8829a4aSRandall Stewart 			zero_address = 1;
396ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
397ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
398ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
399f8829a4aSRandall Stewart 		break;
400e6194c2eSMichael Tuexen #endif
401e6194c2eSMichael Tuexen #ifdef INET6
402f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
403f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
404f8829a4aSRandall Stewart 			/* invalid param size */
405*60990c0cSMichael Tuexen 			return (NULL);
406f8829a4aSRandall Stewart 		}
407e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
408f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
409f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
410f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
411f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
412f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
413f8829a4aSRandall Stewart 		memcpy(&sin6->sin6_addr, v6addr->addr,
414f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
415f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
416f8829a4aSRandall Stewart 			zero_address = 1;
417ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
418ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
419ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
420f8829a4aSRandall Stewart 		break;
421e6194c2eSMichael Tuexen #endif
422f8829a4aSRandall Stewart 	default:
423f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
424f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
425f8829a4aSRandall Stewart 		    aparam_length);
426*60990c0cSMichael Tuexen 		return (m_reply);
427f8829a4aSRandall Stewart 	}
428f8829a4aSRandall Stewart 
429f8829a4aSRandall Stewart 	/* make sure the source address is not being deleted */
430f8829a4aSRandall Stewart 	if (sctp_cmpaddr(sa, (struct sockaddr *)&sa_source)) {
431f8829a4aSRandall Stewart 		/* trying to delete the source address! */
432ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete source addr\n");
433f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
434f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_SRC_ADDR, (uint8_t *) aph,
435f8829a4aSRandall Stewart 		    aparam_length);
436*60990c0cSMichael Tuexen 		return (m_reply);
437f8829a4aSRandall Stewart 	}
438f8829a4aSRandall Stewart 	/* if deleting 0.0.0.0/::0, delete all addresses except src addr */
439b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
440f8829a4aSRandall Stewart 		result = sctp_asconf_del_remote_addrs_except(stcb,
441f8829a4aSRandall Stewart 		    (struct sockaddr *)&sa_source);
442f8829a4aSRandall Stewart 
443f8829a4aSRandall Stewart 		if (result) {
444f8829a4aSRandall Stewart 			/* src address did not exist? */
445ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: src addr does not exist?\n");
446f8829a4aSRandall Stewart 			/* what error to reply with?? */
447f8829a4aSRandall Stewart 			m_reply =
448f8829a4aSRandall Stewart 			    sctp_asconf_error_response(aph->correlation_id,
449f8829a4aSRandall Stewart 			    SCTP_CAUSE_REQUEST_REFUSED, (uint8_t *) aph,
450f8829a4aSRandall Stewart 			    aparam_length);
451f8829a4aSRandall Stewart 		} else if (response_required) {
452f8829a4aSRandall Stewart 			m_reply =
453f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
454f8829a4aSRandall Stewart 		}
455*60990c0cSMichael Tuexen 		return (m_reply);
456f8829a4aSRandall Stewart 	}
457f8829a4aSRandall Stewart 	/* delete the address */
458f8829a4aSRandall Stewart 	result = sctp_del_remote_addr(stcb, sa);
459f8829a4aSRandall Stewart 	/*
460f8829a4aSRandall Stewart 	 * note if result == -2, the address doesn't exist in the asoc but
461f8829a4aSRandall Stewart 	 * since it's being deleted anyways, we just ack the delete -- but
462f8829a4aSRandall Stewart 	 * this probably means something has already gone awry
463f8829a4aSRandall Stewart 	 */
464f8829a4aSRandall Stewart 	if (result == -1) {
465f8829a4aSRandall Stewart 		/* only one address in the asoc */
466ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete last IP addr!\n");
467f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
468f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_LAST_ADDR, (uint8_t *) aph,
469f8829a4aSRandall Stewart 		    aparam_length);
470f8829a4aSRandall Stewart 	} else {
471f8829a4aSRandall Stewart 		if (response_required) {
472f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
473f8829a4aSRandall Stewart 		}
474f8829a4aSRandall Stewart 		/* notify upper layer */
475ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
476f8829a4aSRandall Stewart 	}
477*60990c0cSMichael Tuexen 	return (m_reply);
478f8829a4aSRandall Stewart }
479f8829a4aSRandall Stewart 
480f8829a4aSRandall Stewart static struct mbuf *
481f8829a4aSRandall Stewart sctp_process_asconf_set_primary(struct mbuf *m,
4821b649582SRandall Stewart     struct sctp_asconf_paramhdr *aph,
4831b649582SRandall Stewart     struct sctp_tcb *stcb, int response_required)
484f8829a4aSRandall Stewart {
485f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
486f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
487e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
488f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
489f8829a4aSRandall Stewart 	struct sockaddr *sa;
490f8829a4aSRandall Stewart 	int zero_address = 0;
491f8829a4aSRandall Stewart 
492e6194c2eSMichael Tuexen #ifdef INET
493e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
494e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
495e6194c2eSMichael Tuexen 
496e6194c2eSMichael Tuexen #endif
497f8829a4aSRandall Stewart #ifdef INET6
498f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
499f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
500f8829a4aSRandall Stewart 
501e6194c2eSMichael Tuexen #endif
502f8829a4aSRandall Stewart 
503f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
504e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
505e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
506e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
507f8829a4aSRandall Stewart 
508f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
509f8829a4aSRandall Stewart 	switch (param_type) {
510e6194c2eSMichael Tuexen #ifdef INET
511f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
512f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
513f8829a4aSRandall Stewart 			/* invalid param size */
514*60990c0cSMichael Tuexen 			return (NULL);
515f8829a4aSRandall Stewart 		}
516e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
517f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
518f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
519f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
520f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
521f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
522f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
523f8829a4aSRandall Stewart 			zero_address = 1;
524ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
525ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
526f8829a4aSRandall Stewart 		break;
527e6194c2eSMichael Tuexen #endif
528e6194c2eSMichael Tuexen #ifdef INET6
529f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
530f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
531f8829a4aSRandall Stewart 			/* invalid param size */
532*60990c0cSMichael Tuexen 			return (NULL);
533f8829a4aSRandall Stewart 		}
534e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
535f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
536f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
537f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
538f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
539f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
540f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
541f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
542f8829a4aSRandall Stewart 			zero_address = 1;
543ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
544ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
545f8829a4aSRandall Stewart 		break;
546e6194c2eSMichael Tuexen #endif
547f8829a4aSRandall Stewart 	default:
548f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
549f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
550f8829a4aSRandall Stewart 		    aparam_length);
551*60990c0cSMichael Tuexen 		return (m_reply);
552f8829a4aSRandall Stewart 	}
553f8829a4aSRandall Stewart 
554f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, use the source address instead */
555b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
556f8829a4aSRandall Stewart 		sa = (struct sockaddr *)&sa_source;
557f8829a4aSRandall Stewart 		sctp_asconf_get_source_ip(m, sa);
558ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
559ad81507eSRandall Stewart 		    "process_asconf_set_primary: using source addr ");
560ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
561f8829a4aSRandall Stewart 	}
562f8829a4aSRandall Stewart 	/* set the primary address */
563f8829a4aSRandall Stewart 	if (sctp_set_primary_addr(stcb, sa, NULL) == 0) {
564ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
565ad81507eSRandall Stewart 		    "process_asconf_set_primary: primary address set\n");
566f8829a4aSRandall Stewart 		/* notify upper layer */
567ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_SET_PRIMARY, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
568ca85e948SMichael Tuexen 		if ((stcb->asoc.primary_destination->dest_state & SCTP_ADDR_REACHABLE) &&
569ca85e948SMichael Tuexen 		    (!(stcb->asoc.primary_destination->dest_state & SCTP_ADDR_PF)) &&
570ca85e948SMichael Tuexen 		    (stcb->asoc.alternate)) {
571ca85e948SMichael Tuexen 			sctp_free_remote_addr(stcb->asoc.alternate);
572ca85e948SMichael Tuexen 			stcb->asoc.alternate = NULL;
573ca85e948SMichael Tuexen 		}
574f8829a4aSRandall Stewart 		if (response_required) {
575f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
576f8829a4aSRandall Stewart 		}
577851b7298SRandall Stewart 		/*
578851b7298SRandall Stewart 		 * Mobility adaptation. Ideally, when the reception of SET
579851b7298SRandall Stewart 		 * PRIMARY with DELETE IP ADDRESS of the previous primary
580851b7298SRandall Stewart 		 * destination, unacknowledged DATA are retransmitted
581851b7298SRandall Stewart 		 * immediately to the new primary destination for seamless
582b5c16493SMichael Tuexen 		 * handover. If the destination is UNCONFIRMED and marked to
583b5c16493SMichael Tuexen 		 * REQ_PRIM, The retransmission occur when reception of the
584b5c16493SMichael Tuexen 		 * HEARTBEAT-ACK.  (See sctp_handle_heartbeat_ack in
585851b7298SRandall Stewart 		 * sctp_input.c) Also, when change of the primary
586851b7298SRandall Stewart 		 * destination, it is better that all subsequent new DATA
587851b7298SRandall Stewart 		 * containing already queued DATA are transmitted to the new
588851b7298SRandall Stewart 		 * primary destination. (by micchie)
589851b7298SRandall Stewart 		 */
590851b7298SRandall Stewart 		if ((sctp_is_mobility_feature_on(stcb->sctp_ep,
591851b7298SRandall Stewart 		    SCTP_MOBILITY_BASE) ||
592851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
593851b7298SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) &&
594851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
595851b7298SRandall Stewart 		    SCTP_MOBILITY_PRIM_DELETED) &&
596851b7298SRandall Stewart 		    (stcb->asoc.primary_destination->dest_state &
597851b7298SRandall Stewart 		    SCTP_ADDR_UNCONFIRMED) == 0) {
598851b7298SRandall Stewart 
599851b7298SRandall Stewart 			sctp_timer_stop(SCTP_TIMER_TYPE_PRIM_DELETED, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTP_TIMER + SCTP_LOC_7);
600851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
601851b7298SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
602851b7298SRandall Stewart 				sctp_assoc_immediate_retrans(stcb,
603851b7298SRandall Stewart 				    stcb->asoc.primary_destination);
604851b7298SRandall Stewart 			}
605851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
606851b7298SRandall Stewart 			    SCTP_MOBILITY_BASE)) {
6079eea4a2dSMichael Tuexen 				sctp_move_chunks_from_net(stcb,
6089eea4a2dSMichael Tuexen 				    stcb->asoc.deleted_primary);
609851b7298SRandall Stewart 			}
610851b7298SRandall Stewart 			sctp_delete_prim_timer(stcb->sctp_ep, stcb,
611851b7298SRandall Stewart 			    stcb->asoc.deleted_primary);
612851b7298SRandall Stewart 		}
613f8829a4aSRandall Stewart 	} else {
614f8829a4aSRandall Stewart 		/* couldn't set the requested primary address! */
615ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
616ad81507eSRandall Stewart 		    "process_asconf_set_primary: set primary failed!\n");
617f8829a4aSRandall Stewart 		/* must have been an invalid address, so report */
618f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
619f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
620f8829a4aSRandall Stewart 		    aparam_length);
621f8829a4aSRandall Stewart 	}
622f8829a4aSRandall Stewart 
623*60990c0cSMichael Tuexen 	return (m_reply);
624f8829a4aSRandall Stewart }
625f8829a4aSRandall Stewart 
626f8829a4aSRandall Stewart /*
627f8829a4aSRandall Stewart  * handles an ASCONF chunk.
628f8829a4aSRandall Stewart  * if all parameters are processed ok, send a plain (empty) ASCONF-ACK
629f8829a4aSRandall Stewart  */
630f8829a4aSRandall Stewart void
631f8829a4aSRandall Stewart sctp_handle_asconf(struct mbuf *m, unsigned int offset,
6322afb3e84SRandall Stewart     struct sctp_asconf_chunk *cp, struct sctp_tcb *stcb,
6332afb3e84SRandall Stewart     int first)
634f8829a4aSRandall Stewart {
635f8829a4aSRandall Stewart 	struct sctp_association *asoc;
636f8829a4aSRandall Stewart 	uint32_t serial_num;
6372afb3e84SRandall Stewart 	struct mbuf *n, *m_ack, *m_result, *m_tail;
638f8829a4aSRandall Stewart 	struct sctp_asconf_ack_chunk *ack_cp;
639f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph, *ack_aph;
640f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *p_addr;
641ca85e948SMichael Tuexen 	unsigned int asconf_limit, cnt;
642f8829a4aSRandall Stewart 	int error = 0;		/* did an error occur? */
643f8829a4aSRandall Stewart 
644f8829a4aSRandall Stewart 	/* asconf param buffer */
645f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
6462afb3e84SRandall Stewart 	struct sctp_asconf_ack *ack, *ack_next;
647f8829a4aSRandall Stewart 
648f8829a4aSRandall Stewart 	/* verify minimum length */
649f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_chunk)) {
650ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
651ad81507eSRandall Stewart 		    "handle_asconf: chunk too small = %xh\n",
652f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
653f8829a4aSRandall Stewart 		return;
654f8829a4aSRandall Stewart 	}
655f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
656f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
657f8829a4aSRandall Stewart 
65820b07a4dSMichael Tuexen 	if (SCTP_TSN_GE(asoc->asconf_seq_in, serial_num)) {
659f8829a4aSRandall Stewart 		/* got a duplicate ASCONF */
660ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
661ad81507eSRandall Stewart 		    "handle_asconf: got duplicate serial number = %xh\n",
662f8829a4aSRandall Stewart 		    serial_num);
663f8829a4aSRandall Stewart 		return;
664f8829a4aSRandall Stewart 	} else if (serial_num != (asoc->asconf_seq_in + 1)) {
665ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: incorrect serial number = %xh (expected next = %xh)\n",
666f8829a4aSRandall Stewart 		    serial_num, asoc->asconf_seq_in + 1);
667f8829a4aSRandall Stewart 		return;
668f8829a4aSRandall Stewart 	}
669f8829a4aSRandall Stewart 	/* it's the expected "next" sequence number, so process it */
670f8829a4aSRandall Stewart 	asoc->asconf_seq_in = serial_num;	/* update sequence */
671f8829a4aSRandall Stewart 	/* get length of all the param's in the ASCONF */
672f8829a4aSRandall Stewart 	asconf_limit = offset + ntohs(cp->ch.chunk_length);
673ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1,
674ad81507eSRandall Stewart 	    "handle_asconf: asconf_limit=%u, sequence=%xh\n",
675f8829a4aSRandall Stewart 	    asconf_limit, serial_num);
6762afb3e84SRandall Stewart 
6772afb3e84SRandall Stewart 	if (first) {
6782afb3e84SRandall Stewart 		/* delete old cache */
679e6194c2eSMichael Tuexen 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: Now processing first ASCONF. Try to delete old cache\n");
6802afb3e84SRandall Stewart 
6814a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(ack, &asoc->asconf_ack_sent, next, ack_next) {
6822afb3e84SRandall Stewart 			if (ack->serial_number == serial_num)
6832afb3e84SRandall Stewart 				break;
6842afb3e84SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: delete old(%u) < first(%u)\n",
6852afb3e84SRandall Stewart 			    ack->serial_number, serial_num);
6864a9ef3f8SMichael Tuexen 			TAILQ_REMOVE(&asoc->asconf_ack_sent, ack, next);
6872afb3e84SRandall Stewart 			if (ack->data != NULL) {
6882afb3e84SRandall Stewart 				sctp_m_freem(ack->data);
6892afb3e84SRandall Stewart 			}
690b3f1ea41SRandall Stewart 			SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), ack);
6912afb3e84SRandall Stewart 		}
692f8829a4aSRandall Stewart 	}
693139bc87fSRandall Stewart 	m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0,
694f8829a4aSRandall Stewart 	    M_DONTWAIT, 1, MT_DATA);
695f8829a4aSRandall Stewart 	if (m_ack == NULL) {
696ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
697ad81507eSRandall Stewart 		    "handle_asconf: couldn't get mbuf!\n");
698f8829a4aSRandall Stewart 		return;
699f8829a4aSRandall Stewart 	}
700f8829a4aSRandall Stewart 	m_tail = m_ack;		/* current reply chain's tail */
701f8829a4aSRandall Stewart 
702f8829a4aSRandall Stewart 	/* fill in ASCONF-ACK header */
703f8829a4aSRandall Stewart 	ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *);
704f8829a4aSRandall Stewart 	ack_cp->ch.chunk_type = SCTP_ASCONF_ACK;
705f8829a4aSRandall Stewart 	ack_cp->ch.chunk_flags = 0;
706f8829a4aSRandall Stewart 	ack_cp->serial_number = htonl(serial_num);
707f8829a4aSRandall Stewart 	/* set initial lengths (eg. just an ASCONF-ACK), ntohx at the end! */
708139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk);
709f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk);
710f8829a4aSRandall Stewart 
711f8829a4aSRandall Stewart 	/* skip the lookup address parameter */
712f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_chunk);
713f8829a4aSRandall Stewart 	p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), (uint8_t *) & aparam_buf);
714f8829a4aSRandall Stewart 	if (p_addr == NULL) {
715ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
716ad81507eSRandall Stewart 		    "handle_asconf: couldn't get lookup addr!\n");
717f8829a4aSRandall Stewart 		/* respond with a missing/invalid mandatory parameter error */
718f8829a4aSRandall Stewart 		return;
719f8829a4aSRandall Stewart 	}
720f8829a4aSRandall Stewart 	/* param_length is already validated in process_control... */
721f8829a4aSRandall Stewart 	offset += ntohs(p_addr->ph.param_length);	/* skip lookup addr */
722f8829a4aSRandall Stewart 
723f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF-ACK */
724f8829a4aSRandall Stewart 	ack_aph = (struct sctp_asconf_paramhdr *)(mtod(m_ack, caddr_t)+sizeof(struct sctp_asconf_ack_chunk));
725f8829a4aSRandall Stewart 	if (ack_aph == NULL) {
726ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Gak in asconf2\n");
727f8829a4aSRandall Stewart 		return;
728f8829a4aSRandall Stewart 	}
729f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF */
730f8829a4aSRandall Stewart 	aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *) & aparam_buf);
731f8829a4aSRandall Stewart 	if (aph == NULL) {
732ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Empty ASCONF received?\n");
733f8829a4aSRandall Stewart 		goto send_reply;
734f8829a4aSRandall Stewart 	}
735f8829a4aSRandall Stewart 	/* process through all parameters */
736ca85e948SMichael Tuexen 	cnt = 0;
737f8829a4aSRandall Stewart 	while (aph != NULL) {
738f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
739f8829a4aSRandall Stewart 
740f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
741f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
742f8829a4aSRandall Stewart 		if (offset + param_length > asconf_limit) {
743f8829a4aSRandall Stewart 			/* parameter goes beyond end of chunk! */
744f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
745f8829a4aSRandall Stewart 			return;
746f8829a4aSRandall Stewart 		}
747f8829a4aSRandall Stewart 		m_result = NULL;
748f8829a4aSRandall Stewart 
749f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
750ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length);
751f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
752f8829a4aSRandall Stewart 			return;
753f8829a4aSRandall Stewart 		}
754f8829a4aSRandall Stewart 		if (param_length <= sizeof(struct sctp_paramhdr)) {
755ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length);
756f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
757f8829a4aSRandall Stewart 		}
758f8829a4aSRandall Stewart 		/* get the entire parameter */
759f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
760f8829a4aSRandall Stewart 		if (aph == NULL) {
761ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: couldn't get entire param\n");
762f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
763f8829a4aSRandall Stewart 			return;
764f8829a4aSRandall Stewart 		}
765f8829a4aSRandall Stewart 		switch (param_type) {
766f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
767f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
768f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_add_ip(m, aph, stcb,
769ca85e948SMichael Tuexen 			    (cnt < SCTP_BASE_SYSCTL(sctp_hb_maxburst)), error);
770ca85e948SMichael Tuexen 			cnt++;
771f8829a4aSRandall Stewart 			break;
772f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
773f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
774f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_delete_ip(m, aph, stcb,
775f8829a4aSRandall Stewart 			    error);
776f8829a4aSRandall Stewart 			break;
777f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
778f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
779f8829a4aSRandall Stewart 			break;
780f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
781f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
782f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_set_primary(m, aph,
783f8829a4aSRandall Stewart 			    stcb, error);
784f8829a4aSRandall Stewart 			break;
785830d754dSRandall Stewart 		case SCTP_NAT_VTAGS:
786830d754dSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: sees a NAT VTAG state parameter\n");
787830d754dSRandall Stewart 			break;
788f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
789f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
790f8829a4aSRandall Stewart 			break;
791f8829a4aSRandall Stewart 		case SCTP_ULP_ADAPTATION:
792f8829a4aSRandall Stewart 			/* FIX */
793f8829a4aSRandall Stewart 			break;
794f8829a4aSRandall Stewart 		default:
795f8829a4aSRandall Stewart 			if ((param_type & 0x8000) == 0) {
796f8829a4aSRandall Stewart 				/* Been told to STOP at this param */
797f8829a4aSRandall Stewart 				asconf_limit = offset;
798f8829a4aSRandall Stewart 				/*
799f8829a4aSRandall Stewart 				 * FIX FIX - We need to call
800f8829a4aSRandall Stewart 				 * sctp_arethere_unrecognized_parameters()
801f8829a4aSRandall Stewart 				 * to get a operr and send it for any
802f8829a4aSRandall Stewart 				 * param's with the 0x4000 bit set OR do it
803f8829a4aSRandall Stewart 				 * here ourselves... note we still must STOP
804f8829a4aSRandall Stewart 				 * if the 0x8000 bit is clear.
805f8829a4aSRandall Stewart 				 */
806f8829a4aSRandall Stewart 			}
807f8829a4aSRandall Stewart 			/* unknown/invalid param type */
808f8829a4aSRandall Stewart 			break;
809f8829a4aSRandall Stewart 		}		/* switch */
810f8829a4aSRandall Stewart 
811f8829a4aSRandall Stewart 		/* add any (error) result to the reply mbuf chain */
812f8829a4aSRandall Stewart 		if (m_result != NULL) {
813139bc87fSRandall Stewart 			SCTP_BUF_NEXT(m_tail) = m_result;
814f8829a4aSRandall Stewart 			m_tail = m_result;
815f8829a4aSRandall Stewart 			/* update lengths, make sure it's aligned too */
816139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_result) = SCTP_SIZE32(SCTP_BUF_LEN(m_result));
817139bc87fSRandall Stewart 			ack_cp->ch.chunk_length += SCTP_BUF_LEN(m_result);
818f8829a4aSRandall Stewart 			/* set flag to force success reports */
819f8829a4aSRandall Stewart 			error = 1;
820f8829a4aSRandall Stewart 		}
821f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
822f8829a4aSRandall Stewart 		/* update remaining ASCONF message length to process */
823f8829a4aSRandall Stewart 		if (offset >= asconf_limit) {
824f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
825f8829a4aSRandall Stewart 			break;
826f8829a4aSRandall Stewart 		}
827f8829a4aSRandall Stewart 		/* get pointer to next asconf param */
828f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
829f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr),
830f8829a4aSRandall Stewart 		    (uint8_t *) & aparam_buf);
831f8829a4aSRandall Stewart 		if (aph == NULL) {
832f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
833ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: can't get asconf param hdr!\n");
834f8829a4aSRandall Stewart 			/* FIX ME - add error here... */
835f8829a4aSRandall Stewart 		}
836ad81507eSRandall Stewart 	}
837f8829a4aSRandall Stewart 
838f8829a4aSRandall Stewart send_reply:
839f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = htons(ack_cp->ch.chunk_length);
840f8829a4aSRandall Stewart 	/* save the ASCONF-ACK reply */
841b3f1ea41SRandall Stewart 	ack = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asconf_ack),
8422afb3e84SRandall Stewart 	    struct sctp_asconf_ack);
8432afb3e84SRandall Stewart 	if (ack == NULL) {
8442afb3e84SRandall Stewart 		sctp_m_freem(m_ack);
8452afb3e84SRandall Stewart 		return;
8462afb3e84SRandall Stewart 	}
8472afb3e84SRandall Stewart 	ack->serial_number = serial_num;
8482afb3e84SRandall Stewart 	ack->last_sent_to = NULL;
8492afb3e84SRandall Stewart 	ack->data = m_ack;
850fc066a61SMichael Tuexen 	ack->len = 0;
851e6194c2eSMichael Tuexen 	for (n = m_ack; n != NULL; n = SCTP_BUF_NEXT(n)) {
8522afb3e84SRandall Stewart 		ack->len += SCTP_BUF_LEN(n);
8532afb3e84SRandall Stewart 	}
8542afb3e84SRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_ack_sent, ack, next);
855f8829a4aSRandall Stewart 
856f8829a4aSRandall Stewart 	/* see if last_control_chunk_from is set properly (use IP src addr) */
857f8829a4aSRandall Stewart 	if (stcb->asoc.last_control_chunk_from == NULL) {
858f8829a4aSRandall Stewart 		/*
859f8829a4aSRandall Stewart 		 * this could happen if the source address was just newly
860f8829a4aSRandall Stewart 		 * added
861f8829a4aSRandall Stewart 		 */
862f8829a4aSRandall Stewart 		struct ip *iph;
863f8829a4aSRandall Stewart 		struct sctphdr *sh;
864f8829a4aSRandall Stewart 		struct sockaddr_storage from_store;
865f8829a4aSRandall Stewart 		struct sockaddr *from = (struct sockaddr *)&from_store;
866f8829a4aSRandall Stewart 
867ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: looking up net for IP source address\n");
868f8829a4aSRandall Stewart 		/* pullup already done, IP options already stripped */
869f8829a4aSRandall Stewart 		iph = mtod(m, struct ip *);
8705e2c2d87SRandall Stewart 		switch (iph->ip_v) {
871e6194c2eSMichael Tuexen #ifdef INET
8725e2c2d87SRandall Stewart 		case IPVERSION:
8735e2c2d87SRandall Stewart 			{
874f8829a4aSRandall Stewart 				struct sockaddr_in *from4;
875f8829a4aSRandall Stewart 
876e6194c2eSMichael Tuexen 				sh = (struct sctphdr *)((caddr_t)iph + sizeof(*iph));
877f8829a4aSRandall Stewart 				from4 = (struct sockaddr_in *)&from_store;
878f8829a4aSRandall Stewart 				bzero(from4, sizeof(*from4));
879f8829a4aSRandall Stewart 				from4->sin_family = AF_INET;
880f8829a4aSRandall Stewart 				from4->sin_len = sizeof(struct sockaddr_in);
881f8829a4aSRandall Stewart 				from4->sin_addr.s_addr = iph->ip_src.s_addr;
882f8829a4aSRandall Stewart 				from4->sin_port = sh->src_port;
8835e2c2d87SRandall Stewart 				break;
8845e2c2d87SRandall Stewart 			}
885e6194c2eSMichael Tuexen #endif
8865e2c2d87SRandall Stewart #ifdef INET6
8875e2c2d87SRandall Stewart 		case IPV6_VERSION >> 4:
8885e2c2d87SRandall Stewart 			{
889f8829a4aSRandall Stewart 				struct ip6_hdr *ip6;
890f8829a4aSRandall Stewart 				struct sockaddr_in6 *from6;
891f8829a4aSRandall Stewart 
892f8829a4aSRandall Stewart 				ip6 = mtod(m, struct ip6_hdr *);
893e6194c2eSMichael Tuexen 				sh = (struct sctphdr *)((caddr_t)ip6 + sizeof(*ip6));
894f8829a4aSRandall Stewart 				from6 = (struct sockaddr_in6 *)&from_store;
895f8829a4aSRandall Stewart 				bzero(from6, sizeof(*from6));
896f8829a4aSRandall Stewart 				from6->sin6_family = AF_INET6;
897f8829a4aSRandall Stewart 				from6->sin6_len = sizeof(struct sockaddr_in6);
898f8829a4aSRandall Stewart 				from6->sin6_addr = ip6->ip6_src;
899f8829a4aSRandall Stewart 				from6->sin6_port = sh->src_port;
9005e2c2d87SRandall Stewart 				/*
9015e2c2d87SRandall Stewart 				 * Get the scopes in properly to the sin6
9025e2c2d87SRandall Stewart 				 * addr's
9035e2c2d87SRandall Stewart 				 */
904f8829a4aSRandall Stewart 				/* we probably don't need these operations */
905f8829a4aSRandall Stewart 				(void)sa6_recoverscope(from6);
906fc14de76SRandall Stewart 				sa6_embedscope(from6,
907482444b4SRandall Stewart 				    MODULE_GLOBAL(ip6_use_defzone));
908fc14de76SRandall Stewart 
9095e2c2d87SRandall Stewart 				break;
9105e2c2d87SRandall Stewart 			}
9115e2c2d87SRandall Stewart #endif
9125e2c2d87SRandall Stewart 		default:
913f8829a4aSRandall Stewart 			/* unknown address type */
914f8829a4aSRandall Stewart 			from = NULL;
915f8829a4aSRandall Stewart 		}
916f8829a4aSRandall Stewart 		if (from != NULL) {
917ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "Looking for IP source: ");
918ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, from);
919f8829a4aSRandall Stewart 			/* look up the from address */
920f8829a4aSRandall Stewart 			stcb->asoc.last_control_chunk_from = sctp_findnet(stcb, from);
921f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
922ad81507eSRandall Stewart 			if (stcb->asoc.last_control_chunk_from == NULL)
923ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: IP source address not found?!\n");
924ad81507eSRandall Stewart #endif
925f8829a4aSRandall Stewart 		}
926f8829a4aSRandall Stewart 	}
927f8829a4aSRandall Stewart }
928f8829a4aSRandall Stewart 
929f8829a4aSRandall Stewart /*
930f8829a4aSRandall Stewart  * does the address match? returns 0 if not, 1 if so
931f8829a4aSRandall Stewart  */
932f8829a4aSRandall Stewart static uint32_t
933f8829a4aSRandall Stewart sctp_asconf_addr_match(struct sctp_asconf_addr *aa, struct sockaddr *sa)
934f8829a4aSRandall Stewart {
935e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
936f8829a4aSRandall Stewart #ifdef INET6
937e6194c2eSMichael Tuexen 	case AF_INET6:
938e6194c2eSMichael Tuexen 		{
939f8829a4aSRandall Stewart 			/* XXX scopeid */
940f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
941f8829a4aSRandall Stewart 
942f8829a4aSRandall Stewart 			if ((aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) &&
943f8829a4aSRandall Stewart 			    (memcmp(&aa->ap.addrp.addr, &sin6->sin6_addr,
944f8829a4aSRandall Stewart 			    sizeof(struct in6_addr)) == 0)) {
945f8829a4aSRandall Stewart 				return (1);
946f8829a4aSRandall Stewart 			}
947e6194c2eSMichael Tuexen 			break;
948e6194c2eSMichael Tuexen 		}
949e6194c2eSMichael Tuexen #endif
950e6194c2eSMichael Tuexen #ifdef INET
951e6194c2eSMichael Tuexen 	case AF_INET:
952e6194c2eSMichael Tuexen 		{
953f8829a4aSRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
954f8829a4aSRandall Stewart 
955f8829a4aSRandall Stewart 			if ((aa->ap.addrp.ph.param_type == SCTP_IPV4_ADDRESS) &&
956f8829a4aSRandall Stewart 			    (memcmp(&aa->ap.addrp.addr, &sin->sin_addr,
957f8829a4aSRandall Stewart 			    sizeof(struct in_addr)) == 0)) {
958f8829a4aSRandall Stewart 				return (1);
959f8829a4aSRandall Stewart 			}
960e6194c2eSMichael Tuexen 			break;
961e6194c2eSMichael Tuexen 		}
962e6194c2eSMichael Tuexen #endif
963e6194c2eSMichael Tuexen 	default:
964e6194c2eSMichael Tuexen 		break;
965f8829a4aSRandall Stewart 	}
966f8829a4aSRandall Stewart 	return (0);
967f8829a4aSRandall Stewart }
968f8829a4aSRandall Stewart 
969f8829a4aSRandall Stewart /*
970c54a18d2SRandall Stewart  * does the address match? returns 0 if not, 1 if so
971c54a18d2SRandall Stewart  */
972c54a18d2SRandall Stewart static uint32_t
973e6194c2eSMichael Tuexen sctp_addr_match(struct sctp_paramhdr *ph, struct sockaddr *sa)
974c54a18d2SRandall Stewart {
975c54a18d2SRandall Stewart 	uint16_t param_type, param_length;
976c54a18d2SRandall Stewart 
977e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
978e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
979e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
980d6af161aSRandall Stewart #ifdef INET6
981e6194c2eSMichael Tuexen 	case AF_INET6:
982e6194c2eSMichael Tuexen 		{
983c54a18d2SRandall Stewart 			/* XXX scopeid */
984c54a18d2SRandall Stewart 			struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
985e6194c2eSMichael Tuexen 			struct sctp_ipv6addr_param *v6addr;
986c54a18d2SRandall Stewart 
987e6194c2eSMichael Tuexen 			v6addr = (struct sctp_ipv6addr_param *)ph;
988c54a18d2SRandall Stewart 			if ((param_type == SCTP_IPV6_ADDRESS) &&
989c54a18d2SRandall Stewart 			    param_length == sizeof(struct sctp_ipv6addr_param) &&
990c54a18d2SRandall Stewart 			    (memcmp(&v6addr->addr, &sin6->sin6_addr,
991c54a18d2SRandall Stewart 			    sizeof(struct in6_addr)) == 0)) {
992c54a18d2SRandall Stewart 				return (1);
993c54a18d2SRandall Stewart 			}
994e6194c2eSMichael Tuexen 			break;
995d6af161aSRandall Stewart 		}
996d6af161aSRandall Stewart #endif
997e6194c2eSMichael Tuexen #ifdef INET
998e6194c2eSMichael Tuexen 	case AF_INET:
999e6194c2eSMichael Tuexen 		{
1000c54a18d2SRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
1001e6194c2eSMichael Tuexen 			struct sctp_ipv4addr_param *v4addr;
1002c54a18d2SRandall Stewart 
1003e6194c2eSMichael Tuexen 			v4addr = (struct sctp_ipv4addr_param *)ph;
1004c54a18d2SRandall Stewart 			if ((param_type == SCTP_IPV4_ADDRESS) &&
1005c54a18d2SRandall Stewart 			    param_length == sizeof(struct sctp_ipv4addr_param) &&
1006c54a18d2SRandall Stewart 			    (memcmp(&v4addr->addr, &sin->sin_addr,
1007c54a18d2SRandall Stewart 			    sizeof(struct in_addr)) == 0)) {
1008c54a18d2SRandall Stewart 				return (1);
1009c54a18d2SRandall Stewart 			}
1010e6194c2eSMichael Tuexen 			break;
1011e6194c2eSMichael Tuexen 		}
1012e6194c2eSMichael Tuexen #endif
1013e6194c2eSMichael Tuexen 	default:
1014e6194c2eSMichael Tuexen 		break;
1015c54a18d2SRandall Stewart 	}
1016c54a18d2SRandall Stewart 	return (0);
1017c54a18d2SRandall Stewart }
1018c54a18d2SRandall Stewart 
1019c54a18d2SRandall Stewart /*
1020f8829a4aSRandall Stewart  * Cleanup for non-responded/OP ERR'd ASCONF
1021f8829a4aSRandall Stewart  */
1022f8829a4aSRandall Stewart void
1023f8829a4aSRandall Stewart sctp_asconf_cleanup(struct sctp_tcb *stcb, struct sctp_nets *net)
1024f8829a4aSRandall Stewart {
1025f8829a4aSRandall Stewart 	/* mark peer as ASCONF incapable */
1026f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
1027f8829a4aSRandall Stewart 	/*
1028f8829a4aSRandall Stewart 	 * clear out any existing asconfs going out
1029f8829a4aSRandall Stewart 	 */
10303c503c28SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
10313c503c28SRandall Stewart 	    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_2);
1032c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out_acked = stcb->asoc.asconf_seq_out;
1033f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
1034f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
1035f8829a4aSRandall Stewart }
1036f8829a4aSRandall Stewart 
1037f8829a4aSRandall Stewart /*
10382dad8a55SRandall Stewart  * cleanup any cached source addresses that may be topologically
10392dad8a55SRandall Stewart  * incorrect after a new address has been added to this interface.
10402dad8a55SRandall Stewart  */
10412dad8a55SRandall Stewart static void
10422dad8a55SRandall Stewart sctp_asconf_nets_cleanup(struct sctp_tcb *stcb, struct sctp_ifn *ifn)
10432dad8a55SRandall Stewart {
10442dad8a55SRandall Stewart 	struct sctp_nets *net;
10452dad8a55SRandall Stewart 
10462dad8a55SRandall Stewart 	/*
10472dad8a55SRandall Stewart 	 * Ideally, we want to only clear cached routes and source addresses
10482dad8a55SRandall Stewart 	 * that are topologically incorrect.  But since there is no easy way
10492dad8a55SRandall Stewart 	 * to know whether the newly added address on the ifn would cause a
10502dad8a55SRandall Stewart 	 * routing change (i.e. a new egress interface would be chosen)
10512dad8a55SRandall Stewart 	 * without doing a new routing lookup and source address selection,
10522dad8a55SRandall Stewart 	 * we will (for now) just flush any cached route using a different
10532dad8a55SRandall Stewart 	 * ifn (and cached source addrs) and let output re-choose them
10542dad8a55SRandall Stewart 	 * during the next send on that net.
10552dad8a55SRandall Stewart 	 */
10562dad8a55SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
10572dad8a55SRandall Stewart 		/*
10582dad8a55SRandall Stewart 		 * clear any cached route (and cached source address) if the
10592dad8a55SRandall Stewart 		 * route's interface is NOT the same as the address change.
10602dad8a55SRandall Stewart 		 * If it's the same interface, just clear the cached source
10612dad8a55SRandall Stewart 		 * address.
10622dad8a55SRandall Stewart 		 */
10632dad8a55SRandall Stewart 		if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro) &&
1064fc066a61SMichael Tuexen 		    ((ifn == NULL) ||
1065fc066a61SMichael Tuexen 		    (SCTP_GET_IF_INDEX_FROM_ROUTE(&net->ro) != ifn->ifn_index))) {
10662dad8a55SRandall Stewart 			/* clear any cached route */
10672dad8a55SRandall Stewart 			RTFREE(net->ro.ro_rt);
10682dad8a55SRandall Stewart 			net->ro.ro_rt = NULL;
10692dad8a55SRandall Stewart 		}
10702dad8a55SRandall Stewart 		/* clear any cached source address */
10712dad8a55SRandall Stewart 		if (net->src_addr_selected) {
10722dad8a55SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
10732dad8a55SRandall Stewart 			net->ro._s_addr = NULL;
10742dad8a55SRandall Stewart 			net->src_addr_selected = 0;
10752dad8a55SRandall Stewart 		}
10762dad8a55SRandall Stewart 	}
10772dad8a55SRandall Stewart }
10782dad8a55SRandall Stewart 
1079851b7298SRandall Stewart 
1080851b7298SRandall Stewart void
1081851b7298SRandall Stewart sctp_assoc_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *dstnet)
1082851b7298SRandall Stewart {
1083851b7298SRandall Stewart 	int error;
1084851b7298SRandall Stewart 
1085851b7298SRandall Stewart 	if (dstnet->dest_state & SCTP_ADDR_UNCONFIRMED) {
1086851b7298SRandall Stewart 		return;
1087851b7298SRandall Stewart 	}
1088851b7298SRandall Stewart 	if (stcb->asoc.deleted_primary == NULL) {
1089851b7298SRandall Stewart 		return;
1090851b7298SRandall Stewart 	}
1091851b7298SRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.sent_queue)) {
1092b27a6b7dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "assoc_immediate_retrans: Deleted primary is ");
1093851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1094851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Current Primary is ");
1095851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.primary_destination->ro._l_addr.sa);
1096851b7298SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb,
1097851b7298SRandall Stewart 		    stcb->asoc.deleted_primary,
1098851b7298SRandall Stewart 		    SCTP_FROM_SCTP_TIMER + SCTP_LOC_8);
1099851b7298SRandall Stewart 		stcb->asoc.num_send_timers_up--;
1100851b7298SRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1101851b7298SRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1102851b7298SRandall Stewart 		}
1103851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1104851b7298SRandall Stewart 		error = sctp_t3rxt_timer(stcb->sctp_ep, stcb,
1105851b7298SRandall Stewart 		    stcb->asoc.deleted_primary);
1106851b7298SRandall Stewart 		if (error) {
1107851b7298SRandall Stewart 			SCTP_INP_DECR_REF(stcb->sctp_ep);
1108851b7298SRandall Stewart 			return;
1109851b7298SRandall Stewart 		}
1110851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1111851b7298SRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1112f31e6c7fSMichael Tuexen 		sctp_auditing(4, stcb->sctp_ep, stcb, stcb->asoc.deleted_primary);
1113851b7298SRandall Stewart #endif
1114851b7298SRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1115851b7298SRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
1116851b7298SRandall Stewart 		    (stcb->asoc.sent_queue_cnt > 0)) {
1117851b7298SRandall Stewart 			struct sctp_tmit_chunk *chk;
1118851b7298SRandall Stewart 
1119851b7298SRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1120851b7298SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep,
1121851b7298SRandall Stewart 			    stcb, chk->whoTo);
1122851b7298SRandall Stewart 		}
1123851b7298SRandall Stewart 	}
1124851b7298SRandall Stewart 	return;
1125851b7298SRandall Stewart }
1126851b7298SRandall Stewart 
11272afb3e84SRandall Stewart static int
11282afb3e84SRandall Stewart     sctp_asconf_queue_mgmt(struct sctp_tcb *, struct sctp_ifa *, uint16_t);
11292afb3e84SRandall Stewart 
1130851b7298SRandall Stewart void
11312afb3e84SRandall Stewart sctp_net_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *net)
11322afb3e84SRandall Stewart {
11332afb3e84SRandall Stewart 	struct sctp_tmit_chunk *chk;
11342afb3e84SRandall Stewart 
1135b27a6b7dSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "net_immediate_retrans: RTO is %d\n", net->RTO);
11362afb3e84SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, net,
11372afb3e84SRandall Stewart 	    SCTP_FROM_SCTP_TIMER + SCTP_LOC_5);
11382afb3e84SRandall Stewart 	stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
11392afb3e84SRandall Stewart 	net->error_count = 0;
11402afb3e84SRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
11412afb3e84SRandall Stewart 		if (chk->whoTo == net) {
1142851b7298SRandall Stewart 			if (chk->sent < SCTP_DATAGRAM_RESEND) {
11432afb3e84SRandall Stewart 				chk->sent = SCTP_DATAGRAM_RESEND;
11442afb3e84SRandall Stewart 				sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1145d55b0b1bSRandall Stewart 				sctp_flight_size_decrease(chk);
1146d55b0b1bSRandall Stewart 				sctp_total_flight_decrease(stcb, chk);
1147d55b0b1bSRandall Stewart 				net->marked_retrans++;
1148d55b0b1bSRandall Stewart 				stcb->asoc.marked_retrans++;
11492afb3e84SRandall Stewart 			}
11502afb3e84SRandall Stewart 		}
11512afb3e84SRandall Stewart 	}
1152d55b0b1bSRandall Stewart 	if (net->marked_retrans) {
1153d55b0b1bSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1154d55b0b1bSRandall Stewart 	}
1155851b7298SRandall Stewart }
11562afb3e84SRandall Stewart 
11572afb3e84SRandall Stewart static void
11582afb3e84SRandall Stewart sctp_path_check_and_react(struct sctp_tcb *stcb, struct sctp_ifa *newifa)
11592afb3e84SRandall Stewart {
11602afb3e84SRandall Stewart 	struct sctp_nets *net;
11612afb3e84SRandall Stewart 	int addrnum, changed;
11622afb3e84SRandall Stewart 
11632afb3e84SRandall Stewart 	/*
11642afb3e84SRandall Stewart 	 * If number of local valid addresses is 1, the valid address is
11652afb3e84SRandall Stewart 	 * probably newly added address. Several valid addresses in this
11662afb3e84SRandall Stewart 	 * association.  A source address may not be changed.  Additionally,
11672afb3e84SRandall Stewart 	 * they can be configured on a same interface as "alias" addresses.
11682afb3e84SRandall Stewart 	 * (by micchie)
11692afb3e84SRandall Stewart 	 */
11702afb3e84SRandall Stewart 	addrnum = sctp_local_addr_count(stcb);
11712afb3e84SRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "p_check_react(): %d local addresses\n",
11722afb3e84SRandall Stewart 	    addrnum);
11732afb3e84SRandall Stewart 	if (addrnum == 1) {
11742afb3e84SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
11752afb3e84SRandall Stewart 			/* clear any cached route and source address */
11762afb3e84SRandall Stewart 			if (net->ro.ro_rt) {
11772afb3e84SRandall Stewart 				RTFREE(net->ro.ro_rt);
11782afb3e84SRandall Stewart 				net->ro.ro_rt = NULL;
11792afb3e84SRandall Stewart 			}
11802afb3e84SRandall Stewart 			if (net->src_addr_selected) {
11812afb3e84SRandall Stewart 				sctp_free_ifa(net->ro._s_addr);
11822afb3e84SRandall Stewart 				net->ro._s_addr = NULL;
11832afb3e84SRandall Stewart 				net->src_addr_selected = 0;
11842afb3e84SRandall Stewart 			}
11852afb3e84SRandall Stewart 			/* Retransmit unacknowledged DATA chunks immediately */
11862afb3e84SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
11872afb3e84SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
11882afb3e84SRandall Stewart 				sctp_net_immediate_retrans(stcb, net);
11892afb3e84SRandall Stewart 			}
11902afb3e84SRandall Stewart 			/* also, SET PRIMARY is maybe already sent */
11912afb3e84SRandall Stewart 		}
11922afb3e84SRandall Stewart 		return;
11932afb3e84SRandall Stewart 	}
11942afb3e84SRandall Stewart 	/* Multiple local addresses exsist in the association.  */
11952afb3e84SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
11962afb3e84SRandall Stewart 		/* clear any cached route and source address */
11972afb3e84SRandall Stewart 		if (net->ro.ro_rt) {
11982afb3e84SRandall Stewart 			RTFREE(net->ro.ro_rt);
11992afb3e84SRandall Stewart 			net->ro.ro_rt = NULL;
12002afb3e84SRandall Stewart 		}
12012afb3e84SRandall Stewart 		if (net->src_addr_selected) {
12022afb3e84SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
12032afb3e84SRandall Stewart 			net->ro._s_addr = NULL;
12042afb3e84SRandall Stewart 			net->src_addr_selected = 0;
12052afb3e84SRandall Stewart 		}
12062afb3e84SRandall Stewart 		/*
12072afb3e84SRandall Stewart 		 * Check if the nexthop is corresponding to the new address.
12082afb3e84SRandall Stewart 		 * If the new address is corresponding to the current
12092afb3e84SRandall Stewart 		 * nexthop, the path will be changed. If the new address is
12102afb3e84SRandall Stewart 		 * NOT corresponding to the current nexthop, the path will
12112afb3e84SRandall Stewart 		 * not be changed.
12122afb3e84SRandall Stewart 		 */
12132afb3e84SRandall Stewart 		SCTP_RTALLOC((sctp_route_t *) & net->ro,
12142afb3e84SRandall Stewart 		    stcb->sctp_ep->def_vrf_id);
12152afb3e84SRandall Stewart 		if (net->ro.ro_rt == NULL)
12162afb3e84SRandall Stewart 			continue;
12172afb3e84SRandall Stewart 
12182afb3e84SRandall Stewart 		changed = 0;
1219e6194c2eSMichael Tuexen 		switch (net->ro._l_addr.sa.sa_family) {
1220e6194c2eSMichael Tuexen #ifdef INET
1221e6194c2eSMichael Tuexen 		case AF_INET:
1222e6194c2eSMichael Tuexen 			if (sctp_v4src_match_nexthop(newifa, (sctp_route_t *) & net->ro)) {
12232afb3e84SRandall Stewart 				changed = 1;
12242afb3e84SRandall Stewart 			}
1225e6194c2eSMichael Tuexen 			break;
12265e2c2d87SRandall Stewart #endif
1227e6194c2eSMichael Tuexen #ifdef INET6
1228e6194c2eSMichael Tuexen 		case AF_INET6:
1229e6194c2eSMichael Tuexen 			if (sctp_v6src_match_nexthop(
1230e6194c2eSMichael Tuexen 			    &newifa->address.sin6, (sctp_route_t *) & net->ro)) {
1231e6194c2eSMichael Tuexen 				changed = 1;
1232e6194c2eSMichael Tuexen 			}
1233e6194c2eSMichael Tuexen 			break;
1234e6194c2eSMichael Tuexen #endif
1235e6194c2eSMichael Tuexen 		default:
1236e6194c2eSMichael Tuexen 			break;
1237e6194c2eSMichael Tuexen 		}
12382afb3e84SRandall Stewart 		/*
12392afb3e84SRandall Stewart 		 * if the newly added address does not relate routing
12402afb3e84SRandall Stewart 		 * information, we skip.
12412afb3e84SRandall Stewart 		 */
12422afb3e84SRandall Stewart 		if (changed == 0)
12432afb3e84SRandall Stewart 			continue;
12442afb3e84SRandall Stewart 		/* Retransmit unacknowledged DATA chunks immediately */
12452afb3e84SRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
12462afb3e84SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
12472afb3e84SRandall Stewart 			sctp_net_immediate_retrans(stcb, net);
12482afb3e84SRandall Stewart 		}
12492afb3e84SRandall Stewart 		/* Send SET PRIMARY for this new address */
12502afb3e84SRandall Stewart 		if (net == stcb->asoc.primary_destination) {
12512afb3e84SRandall Stewart 			(void)sctp_asconf_queue_mgmt(stcb, newifa,
12522afb3e84SRandall Stewart 			    SCTP_SET_PRIM_ADDR);
12532afb3e84SRandall Stewart 		}
12542afb3e84SRandall Stewart 	}
12552afb3e84SRandall Stewart }
12562afb3e84SRandall Stewart 
12572dad8a55SRandall Stewart /*
1258f8829a4aSRandall Stewart  * process an ADD/DELETE IP ack from peer.
12591b649582SRandall Stewart  * addr: corresponding sctp_ifa to the address being added/deleted.
1260f8829a4aSRandall Stewart  * type: SCTP_ADD_IP_ADDRESS or SCTP_DEL_IP_ADDRESS.
1261f8829a4aSRandall Stewart  * flag: 1=success, 0=failure.
1262f8829a4aSRandall Stewart  */
1263f8829a4aSRandall Stewart static void
12647215cc1bSMichael Tuexen sctp_asconf_addr_mgmt_ack(struct sctp_tcb *stcb, struct sctp_ifa *addr, uint32_t flag)
1265f8829a4aSRandall Stewart {
1266f8829a4aSRandall Stewart 	/*
1267f8829a4aSRandall Stewart 	 * do the necessary asoc list work- if we get a failure indication,
12682dad8a55SRandall Stewart 	 * leave the address on the assoc's restricted list.  If we get a
12692dad8a55SRandall Stewart 	 * success indication, remove the address from the restricted list.
1270f8829a4aSRandall Stewart 	 */
1271f8829a4aSRandall Stewart 	/*
1272f8829a4aSRandall Stewart 	 * Note: this will only occur for ADD_IP_ADDRESS, since
1273f8829a4aSRandall Stewart 	 * DEL_IP_ADDRESS is never actually added to the list...
1274f8829a4aSRandall Stewart 	 */
1275f8829a4aSRandall Stewart 	if (flag) {
12761b649582SRandall Stewart 		/* success case, so remove from the restricted list */
12771b649582SRandall Stewart 		sctp_del_local_addr_restricted(stcb, addr);
12782dad8a55SRandall Stewart 
12793232788eSRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
1280d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_BASE) ||
1281d55b0b1bSRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
1282d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
12832afb3e84SRandall Stewart 			sctp_path_check_and_react(stcb, addr);
12842afb3e84SRandall Stewart 			return;
12852afb3e84SRandall Stewart 		}
12863232788eSRandall Stewart 		/* clear any cached/topologically incorrect source addresses */
12872dad8a55SRandall Stewart 		sctp_asconf_nets_cleanup(stcb, addr->ifn_p);
1288f8829a4aSRandall Stewart 	}
1289f8829a4aSRandall Stewart 	/* else, leave it on the list */
1290f8829a4aSRandall Stewart }
1291f8829a4aSRandall Stewart 
1292f8829a4aSRandall Stewart /*
12931b649582SRandall Stewart  * add an asconf add/delete/set primary IP address parameter to the queue.
1294f8829a4aSRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
12951b649582SRandall Stewart  * returns 0 if queued, -1 if not queued/removed.
12961b649582SRandall Stewart  * NOTE: if adding, but a delete for the same address is already scheduled
12971b649582SRandall Stewart  * (and not yet sent out), simply remove it from queue.  Same for deleting
12981b649582SRandall Stewart  * an address already scheduled for add.  If a duplicate operation is found,
12991b649582SRandall Stewart  * ignore the new one.
1300f8829a4aSRandall Stewart  */
13011b649582SRandall Stewart static int
13021b649582SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
130318e198d3SRandall Stewart     uint16_t type)
1304f8829a4aSRandall Stewart {
1305f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1306f8829a4aSRandall Stewart 	struct sockaddr *sa;
1307f8829a4aSRandall Stewart 
1308f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
13094a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1310f8829a4aSRandall Stewart 		/* address match? */
131142551e99SRandall Stewart 		if (sctp_asconf_addr_match(aa, &ifa->address.sa) == 0)
1312f8829a4aSRandall Stewart 			continue;
1313c54a18d2SRandall Stewart 		/*
1314c54a18d2SRandall Stewart 		 * is the request already in queue but not sent? pass the
1315c54a18d2SRandall Stewart 		 * request already sent in order to resolve the following
1316c54a18d2SRandall Stewart 		 * case: 1. arrival of ADD, then sent 2. arrival of DEL. we
1317c54a18d2SRandall Stewart 		 * can't remove the ADD request already sent 3. arrival of
1318c54a18d2SRandall Stewart 		 * ADD
1319c54a18d2SRandall Stewart 		 */
1320c54a18d2SRandall Stewart 		if (aa->ap.aph.ph.param_type == type && aa->sent == 0) {
1321f8829a4aSRandall Stewart 			return (-1);
1322f8829a4aSRandall Stewart 		}
1323f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
13241b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_ADD_IP_ADDRESS) &&
13251b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS)) {
1326f8829a4aSRandall Stewart 			/* add requested, delete already queued */
1327f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
13281b649582SRandall Stewart 			/* remove the ifa from the restricted list */
13291b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, ifa);
13301b649582SRandall Stewart 			/* free the asconf param */
1331207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13321b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: add removes queued entry\n");
13331b649582SRandall Stewart 			return (-1);
13341b649582SRandall Stewart 		}
13351b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_DEL_IP_ADDRESS) &&
13361b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS)) {
13371b649582SRandall Stewart 			/* delete requested, add already queued */
13381b649582SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
13391b649582SRandall Stewart 			/* remove the aa->ifa from the restricted list */
13401b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
13411b649582SRandall Stewart 			/* free the asconf param */
13421b649582SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13431b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: delete removes queued entry\n");
1344f8829a4aSRandall Stewart 			return (-1);
1345f8829a4aSRandall Stewart 		}
1346f8829a4aSRandall Stewart 	}			/* for each aa */
1347f8829a4aSRandall Stewart 
1348f8829a4aSRandall Stewart 	/* adding new request to the queue */
13491b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
13501b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1351f8829a4aSRandall Stewart 	if (aa == NULL) {
1352f8829a4aSRandall Stewart 		/* didn't get memory */
13531b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "asconf_queue_mgmt: failed to get memory!\n");
1354f8829a4aSRandall Stewart 		return (-1);
1355f8829a4aSRandall Stewart 	}
1356830d754dSRandall Stewart 	aa->special_del = 0;
1357f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1358f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
1359f8829a4aSRandall Stewart 	aa->ap.aph.ph.param_type = type;
1360f8829a4aSRandall Stewart 	aa->ifa = ifa;
1361bff64a4dSRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
1362f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
1363e6194c2eSMichael Tuexen 	switch (ifa->address.sa.sa_family) {
1364e6194c2eSMichael Tuexen #ifdef INET6
1365e6194c2eSMichael Tuexen 	case AF_INET6:
1366e6194c2eSMichael Tuexen 		{
1367f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1368f8829a4aSRandall Stewart 
136942551e99SRandall Stewart 			sin6 = (struct sockaddr_in6 *)&ifa->address.sa;
1370f8829a4aSRandall Stewart 			sa = (struct sockaddr *)sin6;
1371f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1372f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
13731b649582SRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1374f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv6addr_param);
1375f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1376f8829a4aSRandall Stewart 			    sizeof(struct in6_addr));
1377e6194c2eSMichael Tuexen 			break;
1378e6194c2eSMichael Tuexen 		}
1379e6194c2eSMichael Tuexen #endif
1380e6194c2eSMichael Tuexen #ifdef INET
1381e6194c2eSMichael Tuexen 	case AF_INET:
1382e6194c2eSMichael Tuexen 		{
13831b649582SRandall Stewart 			struct sockaddr_in *sin;
1384f8829a4aSRandall Stewart 
13851b649582SRandall Stewart 			sin = (struct sockaddr_in *)&ifa->address.sa;
1386f8829a4aSRandall Stewart 			sa = (struct sockaddr *)sin;
1387f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1388f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
13891b649582SRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1390f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv4addr_param);
1391f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1392f8829a4aSRandall Stewart 			    sizeof(struct in_addr));
1393e6194c2eSMichael Tuexen 			break;
1394e6194c2eSMichael Tuexen 		}
1395e6194c2eSMichael Tuexen #endif
1396e6194c2eSMichael Tuexen 	default:
1397f8829a4aSRandall Stewart 		/* invalid family! */
1398207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13993232788eSRandall Stewart 		sctp_free_ifa(ifa);
1400f8829a4aSRandall Stewart 		return (-1);
1401f8829a4aSRandall Stewart 	}
1402f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1403f8829a4aSRandall Stewart 
1404f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1405f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
1406dec0177dSRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_debug_on) & SCTP_DEBUG_ASCONF2) {
1407c54a18d2SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
1408c54a18d2SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: inserted asconf ADD_IP_ADDRESS: ");
1409c54a18d2SRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1410c54a18d2SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
14111b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf DEL_IP_ADDRESS: ");
1412ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1413f8829a4aSRandall Stewart 		} else {
14141b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf SET_PRIM_ADDR: ");
1415ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1416f8829a4aSRandall Stewart 		}
1417f8829a4aSRandall Stewart 	}
1418ad81507eSRandall Stewart #endif
1419f8829a4aSRandall Stewart 
1420f8829a4aSRandall Stewart 	return (0);
1421f8829a4aSRandall Stewart }
1422f8829a4aSRandall Stewart 
14231b649582SRandall Stewart 
14241b649582SRandall Stewart /*
14251b649582SRandall Stewart  * add an asconf operation for the given ifa and type.
14261b649582SRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
14271b649582SRandall Stewart  * returns 0 if completed, -1 if not completed, 1 if immediate send is
14281b649582SRandall Stewart  * advisable.
14291b649582SRandall Stewart  */
14301b649582SRandall Stewart static int
14311b649582SRandall Stewart sctp_asconf_queue_add(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
14321b649582SRandall Stewart     uint16_t type)
14331b649582SRandall Stewart {
14341b649582SRandall Stewart 	uint32_t status;
14351b649582SRandall Stewart 	int pending_delete_queued = 0;
14361b649582SRandall Stewart 
14371b649582SRandall Stewart 	/* see if peer supports ASCONF */
14381b649582SRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
14391b649582SRandall Stewart 		return (-1);
14401b649582SRandall Stewart 	}
14411b649582SRandall Stewart 	/*
14421b649582SRandall Stewart 	 * if this is deleting the last address from the assoc, mark it as
14431b649582SRandall Stewart 	 * pending.
14441b649582SRandall Stewart 	 */
14451b649582SRandall Stewart 	if ((type == SCTP_DEL_IP_ADDRESS) && !stcb->asoc.asconf_del_pending &&
14461b649582SRandall Stewart 	    (sctp_local_addr_count(stcb) < 2)) {
14471b649582SRandall Stewart 		/* set the pending delete info only */
14481b649582SRandall Stewart 		stcb->asoc.asconf_del_pending = 1;
14491b649582SRandall Stewart 		stcb->asoc.asconf_addr_del_pending = ifa;
14501b649582SRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
14511b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF2,
14521b649582SRandall Stewart 		    "asconf_queue_add: mark delete last address pending\n");
14531b649582SRandall Stewart 		return (-1);
14541b649582SRandall Stewart 	}
1455c54a18d2SRandall Stewart 	/* queue an asconf parameter */
1456c54a18d2SRandall Stewart 	status = sctp_asconf_queue_mgmt(stcb, ifa, type);
1457c54a18d2SRandall Stewart 
14581b649582SRandall Stewart 	/*
14591b649582SRandall Stewart 	 * if this is an add, and there is a delete also pending (i.e. the
14601b649582SRandall Stewart 	 * last local address is being changed), queue the pending delete
14611b649582SRandall Stewart 	 * too.
14621b649582SRandall Stewart 	 */
1463c54a18d2SRandall Stewart 	if ((type == SCTP_ADD_IP_ADDRESS) && stcb->asoc.asconf_del_pending && (status == 0)) {
14641b649582SRandall Stewart 		/* queue in the pending delete */
14651b649582SRandall Stewart 		if (sctp_asconf_queue_mgmt(stcb,
14661b649582SRandall Stewart 		    stcb->asoc.asconf_addr_del_pending,
14671b649582SRandall Stewart 		    SCTP_DEL_IP_ADDRESS) == 0) {
14681b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_add: queing pending delete\n");
14691b649582SRandall Stewart 			pending_delete_queued = 1;
14701b649582SRandall Stewart 			/* clear out the pending delete info */
14711b649582SRandall Stewart 			stcb->asoc.asconf_del_pending = 0;
14721b649582SRandall Stewart 			sctp_free_ifa(stcb->asoc.asconf_addr_del_pending);
14731b649582SRandall Stewart 			stcb->asoc.asconf_addr_del_pending = NULL;
14741b649582SRandall Stewart 		}
14751b649582SRandall Stewart 	}
1476c54a18d2SRandall Stewart 	if (pending_delete_queued) {
14771b649582SRandall Stewart 		struct sctp_nets *net;
14781b649582SRandall Stewart 
14791b649582SRandall Stewart 		/*
14801b649582SRandall Stewart 		 * since we know that the only/last address is now being
14811b649582SRandall Stewart 		 * changed in this case, reset the cwnd/rto on all nets to
14821b649582SRandall Stewart 		 * start as a new address and path.  Also clear the error
14831b649582SRandall Stewart 		 * counts to give the assoc the best chance to complete the
14841b649582SRandall Stewart 		 * address change.
14851b649582SRandall Stewart 		 */
14861b649582SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
14871b649582SRandall Stewart 			stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb,
14881b649582SRandall Stewart 			    net);
14891b649582SRandall Stewart 			net->RTO = 0;
14901b649582SRandall Stewart 			net->error_count = 0;
14911b649582SRandall Stewart 		}
14921b649582SRandall Stewart 		stcb->asoc.overall_error_count = 0;
1493b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
1494c4739e2fSRandall Stewart 			sctp_misc_ints(SCTP_THRESHOLD_CLEAR,
1495c4739e2fSRandall Stewart 			    stcb->asoc.overall_error_count,
1496c4739e2fSRandall Stewart 			    0,
1497c4739e2fSRandall Stewart 			    SCTP_FROM_SCTP_ASCONF,
1498c4739e2fSRandall Stewart 			    __LINE__);
1499c4739e2fSRandall Stewart 		}
15001b649582SRandall Stewart 		/* queue in an advisory set primary too */
15011b649582SRandall Stewart 		(void)sctp_asconf_queue_mgmt(stcb, ifa, SCTP_SET_PRIM_ADDR);
15021b649582SRandall Stewart 		/* let caller know we should send this out immediately */
15031b649582SRandall Stewart 		status = 1;
15041b649582SRandall Stewart 	}
15051b649582SRandall Stewart 	return (status);
15061b649582SRandall Stewart }
15071b649582SRandall Stewart 
15083232788eSRandall Stewart /*-
15093232788eSRandall Stewart  * add an asconf delete IP address parameter to the queue by sockaddr and
15103232788eSRandall Stewart  * possibly with no sctp_ifa available.  This is only called by the routine
15113232788eSRandall Stewart  * that checks the addresses in an INIT-ACK against the current address list.
1512f8829a4aSRandall Stewart  * returns 0 if completed, non-zero if not completed.
15133232788eSRandall Stewart  * NOTE: if an add is already scheduled (and not yet sent out), simply
15143232788eSRandall Stewart  * remove it from queue.  If a duplicate operation is found, ignore the
15153232788eSRandall Stewart  * new one.
1516f8829a4aSRandall Stewart  */
15171b649582SRandall Stewart static int
15183232788eSRandall Stewart sctp_asconf_queue_sa_delete(struct sctp_tcb *stcb, struct sockaddr *sa)
1519f8829a4aSRandall Stewart {
1520bff64a4dSRandall Stewart 	struct sctp_ifa *ifa;
1521f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
152242551e99SRandall Stewart 	uint32_t vrf_id;
1523f8829a4aSRandall Stewart 
1524ad81507eSRandall Stewart 	if (stcb == NULL) {
1525ad81507eSRandall Stewart 		return (-1);
1526ad81507eSRandall Stewart 	}
1527f8829a4aSRandall Stewart 	/* see if peer supports ASCONF */
1528f8829a4aSRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
1529f8829a4aSRandall Stewart 		return (-1);
1530f8829a4aSRandall Stewart 	}
1531f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
15324a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1533f8829a4aSRandall Stewart 		/* address match? */
1534f8829a4aSRandall Stewart 		if (sctp_asconf_addr_match(aa, sa) == 0)
1535f8829a4aSRandall Stewart 			continue;
1536f8829a4aSRandall Stewart 		/* is the request already in queue (sent or not) */
15373232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
1538f8829a4aSRandall Stewart 			return (-1);
1539f8829a4aSRandall Stewart 		}
1540f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
1541f8829a4aSRandall Stewart 		if (aa->sent == 1)
1542f8829a4aSRandall Stewart 			continue;
15433232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS) {
15443232788eSRandall Stewart 			/* add already queued, so remove existing entry */
1545f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
15461b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
1547f8829a4aSRandall Stewart 			/* free the entry */
1548207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
1549f8829a4aSRandall Stewart 			return (-1);
1550f8829a4aSRandall Stewart 		}
1551f8829a4aSRandall Stewart 	}			/* for each aa */
15523232788eSRandall Stewart 
15533232788eSRandall Stewart 	/* find any existing ifa-- NOTE ifa CAN be allowed to be NULL */
1554bff64a4dSRandall Stewart 	if (stcb) {
1555bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
1556bff64a4dSRandall Stewart 	} else {
1557bff64a4dSRandall Stewart 		vrf_id = SCTP_DEFAULT_VRFID;
1558bff64a4dSRandall Stewart 	}
1559851b7298SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
15603232788eSRandall Stewart 
1561f8829a4aSRandall Stewart 	/* adding new request to the queue */
15621b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
15631b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1564f8829a4aSRandall Stewart 	if (aa == NULL) {
1565f8829a4aSRandall Stewart 		/* didn't get memory */
1566ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
15673232788eSRandall Stewart 		    "sctp_asconf_queue_sa_delete: failed to get memory!\n");
1568f8829a4aSRandall Stewart 		return (-1);
1569f8829a4aSRandall Stewart 	}
1570830d754dSRandall Stewart 	aa->special_del = 0;
1571f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1572f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
15733232788eSRandall Stewart 	aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
1574bff64a4dSRandall Stewart 	aa->ifa = ifa;
15753232788eSRandall Stewart 	if (ifa)
1576bff64a4dSRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
1577f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
1578e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
1579e6194c2eSMichael Tuexen #ifdef INET6
1580e6194c2eSMichael Tuexen 	case AF_INET6:
1581e6194c2eSMichael Tuexen 		{
1582f8829a4aSRandall Stewart 			/* IPv6 address */
1583f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1584f8829a4aSRandall Stewart 
1585f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
1586f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1587f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
1588f8829a4aSRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param);
1589f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1590f8829a4aSRandall Stewart 			    sizeof(struct in6_addr));
1591e6194c2eSMichael Tuexen 			break;
1592e6194c2eSMichael Tuexen 		}
1593e6194c2eSMichael Tuexen #endif
1594e6194c2eSMichael Tuexen #ifdef INET
1595e6194c2eSMichael Tuexen 	case AF_INET:
1596e6194c2eSMichael Tuexen 		{
1597f8829a4aSRandall Stewart 			/* IPv4 address */
1598f8829a4aSRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
1599f8829a4aSRandall Stewart 
1600f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1601f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
1602f8829a4aSRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param);
1603f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1604f8829a4aSRandall Stewart 			    sizeof(struct in_addr));
1605e6194c2eSMichael Tuexen 			break;
1606e6194c2eSMichael Tuexen 		}
1607e6194c2eSMichael Tuexen #endif
1608e6194c2eSMichael Tuexen 	default:
1609f8829a4aSRandall Stewart 		/* invalid family! */
1610207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
16113232788eSRandall Stewart 		if (ifa)
16123232788eSRandall Stewart 			sctp_free_ifa(ifa);
1613f8829a4aSRandall Stewart 		return (-1);
1614f8829a4aSRandall Stewart 	}
1615f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1616f8829a4aSRandall Stewart 
16173232788eSRandall Stewart 	/* delete goes to the back of the queue */
1618f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1619f8829a4aSRandall Stewart 
1620c99efcf6SRandall Stewart 	/* sa_ignore MEMLEAK {memory is put on the tailq} */
1621f8829a4aSRandall Stewart 	return (0);
1622f8829a4aSRandall Stewart }
1623f8829a4aSRandall Stewart 
1624f8829a4aSRandall Stewart /*
1625f8829a4aSRandall Stewart  * find a specific asconf param on our "sent" queue
1626f8829a4aSRandall Stewart  */
1627f8829a4aSRandall Stewart static struct sctp_asconf_addr *
1628f8829a4aSRandall Stewart sctp_asconf_find_param(struct sctp_tcb *stcb, uint32_t correlation_id)
1629f8829a4aSRandall Stewart {
1630f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
1631f8829a4aSRandall Stewart 
1632f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
1633f8829a4aSRandall Stewart 		if (aa->ap.aph.correlation_id == correlation_id &&
1634f8829a4aSRandall Stewart 		    aa->sent == 1) {
1635f8829a4aSRandall Stewart 			/* found it */
1636f8829a4aSRandall Stewart 			return (aa);
1637f8829a4aSRandall Stewart 		}
1638f8829a4aSRandall Stewart 	}
1639f8829a4aSRandall Stewart 	/* didn't find it */
1640f8829a4aSRandall Stewart 	return (NULL);
1641f8829a4aSRandall Stewart }
1642f8829a4aSRandall Stewart 
1643f8829a4aSRandall Stewart /*
1644f8829a4aSRandall Stewart  * process an SCTP_ERROR_CAUSE_IND for a ASCONF-ACK parameter and do
1645f8829a4aSRandall Stewart  * notifications based on the error response
1646f8829a4aSRandall Stewart  */
1647f8829a4aSRandall Stewart static void
1648f8829a4aSRandall Stewart sctp_asconf_process_error(struct sctp_tcb *stcb,
1649f8829a4aSRandall Stewart     struct sctp_asconf_paramhdr *aph)
1650f8829a4aSRandall Stewart {
1651f8829a4aSRandall Stewart 	struct sctp_error_cause *eh;
1652f8829a4aSRandall Stewart 	struct sctp_paramhdr *ph;
1653f8829a4aSRandall Stewart 	uint16_t param_type;
1654f8829a4aSRandall Stewart 	uint16_t error_code;
1655f8829a4aSRandall Stewart 
1656f8829a4aSRandall Stewart 	eh = (struct sctp_error_cause *)(aph + 1);
1657f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)(eh + 1);
1658f8829a4aSRandall Stewart 	/* validate lengths */
1659f8829a4aSRandall Stewart 	if (htons(eh->length) + sizeof(struct sctp_error_cause) >
1660f8829a4aSRandall Stewart 	    htons(aph->ph.param_length)) {
1661f8829a4aSRandall Stewart 		/* invalid error cause length */
1662ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1663ad81507eSRandall Stewart 		    "asconf_process_error: cause element too long\n");
1664f8829a4aSRandall Stewart 		return;
1665f8829a4aSRandall Stewart 	}
1666f8829a4aSRandall Stewart 	if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) >
1667f8829a4aSRandall Stewart 	    htons(eh->length)) {
1668f8829a4aSRandall Stewart 		/* invalid included TLV length */
1669ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1670ad81507eSRandall Stewart 		    "asconf_process_error: included TLV too long\n");
1671f8829a4aSRandall Stewart 		return;
1672f8829a4aSRandall Stewart 	}
1673f8829a4aSRandall Stewart 	/* which error code ? */
1674f8829a4aSRandall Stewart 	error_code = ntohs(eh->code);
1675f8829a4aSRandall Stewart 	param_type = ntohs(aph->ph.param_type);
1676f8829a4aSRandall Stewart 	/* FIX: this should go back up the REMOTE_ERROR ULP notify */
1677f8829a4aSRandall Stewart 	switch (error_code) {
1678f8829a4aSRandall Stewart 	case SCTP_CAUSE_RESOURCE_SHORTAGE:
1679f8829a4aSRandall Stewart 		/* we allow ourselves to "try again" for this error */
1680f8829a4aSRandall Stewart 		break;
1681f8829a4aSRandall Stewart 	default:
1682f8829a4aSRandall Stewart 		/* peer can't handle it... */
1683f8829a4aSRandall Stewart 		switch (param_type) {
1684f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
1685f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
1686f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1687f8829a4aSRandall Stewart 			break;
1688f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
1689f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1690f8829a4aSRandall Stewart 			break;
1691f8829a4aSRandall Stewart 		default:
1692f8829a4aSRandall Stewart 			break;
1693f8829a4aSRandall Stewart 		}
1694f8829a4aSRandall Stewart 	}
1695f8829a4aSRandall Stewart }
1696f8829a4aSRandall Stewart 
1697f8829a4aSRandall Stewart /*
169818e198d3SRandall Stewart  * process an asconf queue param.
169918e198d3SRandall Stewart  * aparam: parameter to process, will be removed from the queue.
170018e198d3SRandall Stewart  * flag: 1=success case, 0=failure case
1701f8829a4aSRandall Stewart  */
1702f8829a4aSRandall Stewart static void
1703f8829a4aSRandall Stewart sctp_asconf_process_param_ack(struct sctp_tcb *stcb,
1704f8829a4aSRandall Stewart     struct sctp_asconf_addr *aparam, uint32_t flag)
1705f8829a4aSRandall Stewart {
1706f8829a4aSRandall Stewart 	uint16_t param_type;
1707f8829a4aSRandall Stewart 
1708f8829a4aSRandall Stewart 	/* process this param */
1709f8829a4aSRandall Stewart 	param_type = aparam->ap.aph.ph.param_type;
1710f8829a4aSRandall Stewart 	switch (param_type) {
1711f8829a4aSRandall Stewart 	case SCTP_ADD_IP_ADDRESS:
1712ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1713ad81507eSRandall Stewart 		    "process_param_ack: added IP address\n");
17147215cc1bSMichael Tuexen 		sctp_asconf_addr_mgmt_ack(stcb, aparam->ifa, flag);
1715f8829a4aSRandall Stewart 		break;
1716f8829a4aSRandall Stewart 	case SCTP_DEL_IP_ADDRESS:
1717ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1718ad81507eSRandall Stewart 		    "process_param_ack: deleted IP address\n");
1719f8829a4aSRandall Stewart 		/* nothing really to do... lists already updated */
1720f8829a4aSRandall Stewart 		break;
1721f8829a4aSRandall Stewart 	case SCTP_SET_PRIM_ADDR:
1722c54a18d2SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1723c54a18d2SRandall Stewart 		    "process_param_ack: set primary IP address\n");
1724f8829a4aSRandall Stewart 		/* nothing to do... peer may start using this addr */
1725f8829a4aSRandall Stewart 		if (flag == 0)
1726f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1727f8829a4aSRandall Stewart 		break;
1728f8829a4aSRandall Stewart 	default:
1729f8829a4aSRandall Stewart 		/* should NEVER happen */
1730f8829a4aSRandall Stewart 		break;
1731f8829a4aSRandall Stewart 	}
1732f8829a4aSRandall Stewart 
1733f8829a4aSRandall Stewart 	/* remove the param and free it */
1734f8829a4aSRandall Stewart 	TAILQ_REMOVE(&stcb->asoc.asconf_queue, aparam, next);
17353232788eSRandall Stewart 	if (aparam->ifa)
1736bff64a4dSRandall Stewart 		sctp_free_ifa(aparam->ifa);
1737207304d4SRandall Stewart 	SCTP_FREE(aparam, SCTP_M_ASC_ADDR);
1738f8829a4aSRandall Stewart }
1739f8829a4aSRandall Stewart 
1740f8829a4aSRandall Stewart /*
1741f8829a4aSRandall Stewart  * cleanup from a bad asconf ack parameter
1742f8829a4aSRandall Stewart  */
1743f8829a4aSRandall Stewart static void
1744f8829a4aSRandall Stewart sctp_asconf_ack_clear(struct sctp_tcb *stcb)
1745f8829a4aSRandall Stewart {
1746f8829a4aSRandall Stewart 	/* assume peer doesn't really know how to do asconfs */
1747f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
1748f8829a4aSRandall Stewart 	/* XXX we could free the pending queue here */
1749f8829a4aSRandall Stewart }
1750f8829a4aSRandall Stewart 
1751f8829a4aSRandall Stewart void
1752f8829a4aSRandall Stewart sctp_handle_asconf_ack(struct mbuf *m, int offset,
1753f8829a4aSRandall Stewart     struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb,
17543232788eSRandall Stewart     struct sctp_nets *net, int *abort_no_unlock)
1755f8829a4aSRandall Stewart {
1756f8829a4aSRandall Stewart 	struct sctp_association *asoc;
1757f8829a4aSRandall Stewart 	uint32_t serial_num;
1758f8829a4aSRandall Stewart 	uint16_t ack_length;
1759f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
1760f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1761f8829a4aSRandall Stewart 	uint32_t last_error_id = 0;	/* last error correlation id */
1762f8829a4aSRandall Stewart 	uint32_t id;
1763f8829a4aSRandall Stewart 	struct sctp_asconf_addr *ap;
1764f8829a4aSRandall Stewart 
1765f8829a4aSRandall Stewart 	/* asconf param buffer */
1766f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
1767f8829a4aSRandall Stewart 
1768f8829a4aSRandall Stewart 	/* verify minimum length */
1769f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) {
1770ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1771ad81507eSRandall Stewart 		    "handle_asconf_ack: chunk too small = %xh\n",
1772f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
1773f8829a4aSRandall Stewart 		return;
1774f8829a4aSRandall Stewart 	}
1775f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
1776f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
1777f8829a4aSRandall Stewart 
1778f8829a4aSRandall Stewart 	/*
1779f8829a4aSRandall Stewart 	 * NOTE: we may want to handle this differently- currently, we will
1780f8829a4aSRandall Stewart 	 * abort when we get an ack for the expected serial number + 1 (eg.
1781f8829a4aSRandall Stewart 	 * we didn't send it), process an ack normally if it is the expected
1782f8829a4aSRandall Stewart 	 * serial number, and re-send the previous ack for *ALL* other
1783f8829a4aSRandall Stewart 	 * serial numbers
1784f8829a4aSRandall Stewart 	 */
1785f8829a4aSRandall Stewart 
1786f8829a4aSRandall Stewart 	/*
1787f8829a4aSRandall Stewart 	 * if the serial number is the next expected, but I didn't send it,
1788f8829a4aSRandall Stewart 	 * abort the asoc, since someone probably just hijacked us...
1789f8829a4aSRandall Stewart 	 */
1790f8829a4aSRandall Stewart 	if (serial_num == (asoc->asconf_seq_out + 1)) {
1791ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got unexpected next serial number! Aborting asoc!\n");
1792f8829a4aSRandall Stewart 		sctp_abort_an_association(stcb->sctp_ep, stcb,
1793ceaad40aSRandall Stewart 		    SCTP_CAUSE_ILLEGAL_ASCONF_ACK, NULL, SCTP_SO_NOT_LOCKED);
17943232788eSRandall Stewart 		*abort_no_unlock = 1;
1795f8829a4aSRandall Stewart 		return;
1796f8829a4aSRandall Stewart 	}
1797c54a18d2SRandall Stewart 	if (serial_num != asoc->asconf_seq_out_acked + 1) {
1798f8829a4aSRandall Stewart 		/* got a duplicate/unexpected ASCONF-ACK */
1799ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got duplicate/unexpected serial number = %xh (expected = %xh)\n",
1800c54a18d2SRandall Stewart 		    serial_num, asoc->asconf_seq_out_acked + 1);
1801f8829a4aSRandall Stewart 		return;
1802f8829a4aSRandall Stewart 	}
1803c54a18d2SRandall Stewart 	if (serial_num == asoc->asconf_seq_out - 1) {
1804f8829a4aSRandall Stewart 		/* stop our timer */
18053c503c28SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
18063c503c28SRandall Stewart 		    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_3);
1807c54a18d2SRandall Stewart 	}
1808f8829a4aSRandall Stewart 	/* process the ASCONF-ACK contents */
1809f8829a4aSRandall Stewart 	ack_length = ntohs(cp->ch.chunk_length) -
1810f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_ack_chunk);
1811f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_ack_chunk);
1812f8829a4aSRandall Stewart 	/* process through all parameters */
1813f8829a4aSRandall Stewart 	while (ack_length >= sizeof(struct sctp_asconf_paramhdr)) {
1814f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
1815f8829a4aSRandall Stewart 
1816f8829a4aSRandall Stewart 		/* get pointer to next asconf parameter */
1817f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
1818f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr), aparam_buf);
1819f8829a4aSRandall Stewart 		if (aph == NULL) {
1820f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
1821f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1822f8829a4aSRandall Stewart 			return;
1823f8829a4aSRandall Stewart 		}
1824f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
1825f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
1826f8829a4aSRandall Stewart 		if (param_length > ack_length) {
1827f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1828f8829a4aSRandall Stewart 			return;
1829f8829a4aSRandall Stewart 		}
1830f8829a4aSRandall Stewart 		if (param_length < sizeof(struct sctp_paramhdr)) {
1831f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1832f8829a4aSRandall Stewart 			return;
1833f8829a4aSRandall Stewart 		}
1834f8829a4aSRandall Stewart 		/* get the complete parameter... */
1835f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
1836ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
1837ad81507eSRandall Stewart 			    "param length (%u) larger than buffer size!\n", param_length);
1838f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1839f8829a4aSRandall Stewart 			return;
1840f8829a4aSRandall Stewart 		}
1841f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
1842f8829a4aSRandall Stewart 		if (aph == NULL) {
1843f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1844f8829a4aSRandall Stewart 			return;
1845f8829a4aSRandall Stewart 		}
1846f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no ntohl needed */
1847f8829a4aSRandall Stewart 		id = aph->correlation_id;
1848f8829a4aSRandall Stewart 
1849f8829a4aSRandall Stewart 		switch (param_type) {
1850f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
1851f8829a4aSRandall Stewart 			last_error_id = id;
1852f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1853f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1854f8829a4aSRandall Stewart 			if (ap == NULL) {
1855f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1856f8829a4aSRandall Stewart 				break;
1857f8829a4aSRandall Stewart 			}
1858f8829a4aSRandall Stewart 			/* process the parameter, failed flag */
1859f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 0);
1860f8829a4aSRandall Stewart 			/* process the error response */
1861f8829a4aSRandall Stewart 			sctp_asconf_process_error(stcb, aph);
1862f8829a4aSRandall Stewart 			break;
1863f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
1864f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1865f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1866f8829a4aSRandall Stewart 			if (ap == NULL) {
1867f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1868f8829a4aSRandall Stewart 				break;
1869f8829a4aSRandall Stewart 			}
1870f8829a4aSRandall Stewart 			/* process the parameter, success flag */
1871f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 1);
1872f8829a4aSRandall Stewart 			break;
1873f8829a4aSRandall Stewart 		default:
1874f8829a4aSRandall Stewart 			break;
1875f8829a4aSRandall Stewart 		}		/* switch */
1876f8829a4aSRandall Stewart 
1877f8829a4aSRandall Stewart 		/* update remaining ASCONF-ACK message length to process */
1878f8829a4aSRandall Stewart 		ack_length -= SCTP_SIZE32(param_length);
1879f8829a4aSRandall Stewart 		if (ack_length <= 0) {
1880f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
1881f8829a4aSRandall Stewart 			break;
1882f8829a4aSRandall Stewart 		}
1883f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
1884f8829a4aSRandall Stewart 	}			/* while */
1885f8829a4aSRandall Stewart 
1886f8829a4aSRandall Stewart 	/*
1887f8829a4aSRandall Stewart 	 * if there are any "sent" params still on the queue, these are
1888f8829a4aSRandall Stewart 	 * implicitly "success", or "failed" (if we got an error back) ...
1889f8829a4aSRandall Stewart 	 * so process these appropriately
1890f8829a4aSRandall Stewart 	 *
1891f8829a4aSRandall Stewart 	 * we assume that the correlation_id's are monotonically increasing
1892f8829a4aSRandall Stewart 	 * beginning from 1 and that we don't have *that* many outstanding
1893f8829a4aSRandall Stewart 	 * at any given time
1894f8829a4aSRandall Stewart 	 */
1895f8829a4aSRandall Stewart 	if (last_error_id == 0)
1896f8829a4aSRandall Stewart 		last_error_id--;/* set to "max" value */
18974a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1898f8829a4aSRandall Stewart 		if (aa->sent == 1) {
1899f8829a4aSRandall Stewart 			/*
1900f8829a4aSRandall Stewart 			 * implicitly successful or failed if correlation_id
1901f8829a4aSRandall Stewart 			 * < last_error_id, then success else, failure
1902f8829a4aSRandall Stewart 			 */
1903f8829a4aSRandall Stewart 			if (aa->ap.aph.correlation_id < last_error_id)
190418e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 1);
1905f8829a4aSRandall Stewart 			else
190618e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 0);
1907f8829a4aSRandall Stewart 		} else {
1908f8829a4aSRandall Stewart 			/*
1909f8829a4aSRandall Stewart 			 * since we always process in order (FIFO queue) if
1910f8829a4aSRandall Stewart 			 * we reach one that hasn't been sent, the rest
1911f8829a4aSRandall Stewart 			 * should not have been sent either. so, we're
1912f8829a4aSRandall Stewart 			 * done...
1913f8829a4aSRandall Stewart 			 */
1914f8829a4aSRandall Stewart 			break;
1915f8829a4aSRandall Stewart 		}
1916f8829a4aSRandall Stewart 	}
1917f8829a4aSRandall Stewart 
1918f8829a4aSRandall Stewart 	/* update the next sequence number to use */
1919c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked++;
1920f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
1921f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
1922f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.asconf_queue)) {
19231b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
1924f8829a4aSRandall Stewart 		/* we have more params, so restart our timer */
1925f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep,
1926f8829a4aSRandall Stewart 		    stcb, net);
19271b649582SRandall Stewart #else
19281b649582SRandall Stewart 		/* we have more params, so send out more */
19293232788eSRandall Stewart 		sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
19301b649582SRandall Stewart #endif
1931f8829a4aSRandall Stewart 	}
1932f8829a4aSRandall Stewart }
1933f8829a4aSRandall Stewart 
19345e2c2d87SRandall Stewart #ifdef INET6
1935f8829a4aSRandall Stewart static uint32_t
1936f8829a4aSRandall Stewart sctp_is_scopeid_in_nets(struct sctp_tcb *stcb, struct sockaddr *sa)
1937f8829a4aSRandall Stewart {
1938f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6, *net6;
1939f8829a4aSRandall Stewart 	struct sctp_nets *net;
1940f8829a4aSRandall Stewart 
1941f8829a4aSRandall Stewart 	if (sa->sa_family != AF_INET6) {
1942f8829a4aSRandall Stewart 		/* wrong family */
1943f8829a4aSRandall Stewart 		return (0);
1944f8829a4aSRandall Stewart 	}
1945f8829a4aSRandall Stewart 	sin6 = (struct sockaddr_in6 *)sa;
1946f8829a4aSRandall Stewart 	if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) == 0) {
1947f8829a4aSRandall Stewart 		/* not link local address */
1948f8829a4aSRandall Stewart 		return (0);
1949f8829a4aSRandall Stewart 	}
1950f8829a4aSRandall Stewart 	/* hunt through our destination nets list for this scope_id */
1951f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1952f8829a4aSRandall Stewart 		if (((struct sockaddr *)(&net->ro._l_addr))->sa_family !=
1953f8829a4aSRandall Stewart 		    AF_INET6)
1954f8829a4aSRandall Stewart 			continue;
1955f8829a4aSRandall Stewart 		net6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1956f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_LINKLOCAL(&net6->sin6_addr) == 0)
1957f8829a4aSRandall Stewart 			continue;
1958f8829a4aSRandall Stewart 		if (sctp_is_same_scope(sin6, net6)) {
1959f8829a4aSRandall Stewart 			/* found one */
1960f8829a4aSRandall Stewart 			return (1);
1961f8829a4aSRandall Stewart 		}
1962f8829a4aSRandall Stewart 	}
1963f8829a4aSRandall Stewart 	/* didn't find one */
1964f8829a4aSRandall Stewart 	return (0);
1965f8829a4aSRandall Stewart }
1966f8829a4aSRandall Stewart 
19675e2c2d87SRandall Stewart #endif
19685e2c2d87SRandall Stewart 
1969f8829a4aSRandall Stewart /*
1970f8829a4aSRandall Stewart  * address management functions
1971f8829a4aSRandall Stewart  */
1972f8829a4aSRandall Stewart static void
1973f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
19743232788eSRandall Stewart     struct sctp_ifa *ifa, uint16_t type, int addr_locked)
1975f8829a4aSRandall Stewart {
1976f8829a4aSRandall Stewart 	int status;
1977f8829a4aSRandall Stewart 
1978f8829a4aSRandall Stewart 
1979ca85e948SMichael Tuexen 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0 ||
1980f8829a4aSRandall Stewart 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
1981f8829a4aSRandall Stewart 		/* subset bound, no ASCONF allowed case, so ignore */
1982f8829a4aSRandall Stewart 		return;
1983f8829a4aSRandall Stewart 	}
1984f8829a4aSRandall Stewart 	/*
1985f8829a4aSRandall Stewart 	 * note: we know this is not the subset bound, no ASCONF case eg.
1986f8829a4aSRandall Stewart 	 * this is boundall or subset bound w/ASCONF allowed
1987f8829a4aSRandall Stewart 	 */
1988f8829a4aSRandall Stewart 
1989f8829a4aSRandall Stewart 	/* first, make sure it's a good address family */
1990e6194c2eSMichael Tuexen 	switch (ifa->address.sa.sa_family) {
1991e6194c2eSMichael Tuexen #ifdef INET6
1992e6194c2eSMichael Tuexen 	case AF_INET6:
1993e6194c2eSMichael Tuexen 		break;
1994e6194c2eSMichael Tuexen #endif
1995e6194c2eSMichael Tuexen #ifdef INET
1996e6194c2eSMichael Tuexen 	case AF_INET:
1997e6194c2eSMichael Tuexen 		break;
1998e6194c2eSMichael Tuexen #endif
1999e6194c2eSMichael Tuexen 	default:
2000f8829a4aSRandall Stewart 		return;
2001f8829a4aSRandall Stewart 	}
2002e6194c2eSMichael Tuexen #ifdef INET6
2003f8829a4aSRandall Stewart 	/* make sure we're "allowed" to add this type of addr */
200442551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
2005f8829a4aSRandall Stewart 		/* invalid if we're not a v6 endpoint */
2006f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0)
2007f8829a4aSRandall Stewart 			return;
2008f8829a4aSRandall Stewart 		/* is the v6 addr really valid ? */
200942551e99SRandall Stewart 		if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
2010f8829a4aSRandall Stewart 			return;
2011f8829a4aSRandall Stewart 		}
2012f8829a4aSRandall Stewart 	}
2013e6194c2eSMichael Tuexen #endif
2014f8829a4aSRandall Stewart 	/* put this address on the "pending/do not use yet" list */
20151b649582SRandall Stewart 	sctp_add_local_addr_restricted(stcb, ifa);
2016f8829a4aSRandall Stewart 	/*
2017f8829a4aSRandall Stewart 	 * check address scope if address is out of scope, don't queue
2018f8829a4aSRandall Stewart 	 * anything... note: this would leave the address on both inp and
2019f8829a4aSRandall Stewart 	 * asoc lists
2020f8829a4aSRandall Stewart 	 */
20215e2c2d87SRandall Stewart 	switch (ifa->address.sa.sa_family) {
20225e2c2d87SRandall Stewart #ifdef INET6
20235e2c2d87SRandall Stewart 	case AF_INET6:
20245e2c2d87SRandall Stewart 		{
2025f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
2026f8829a4aSRandall Stewart 
202742551e99SRandall Stewart 			sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
2028f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2029f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
2030f8829a4aSRandall Stewart 				return;
2031f8829a4aSRandall Stewart 			}
2032f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
2033f8829a4aSRandall Stewart 				if (stcb->asoc.local_scope == 0) {
2034f8829a4aSRandall Stewart 					return;
2035f8829a4aSRandall Stewart 				}
2036f8829a4aSRandall Stewart 				/* is it the right link local scope? */
203742551e99SRandall Stewart 				if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
2038f8829a4aSRandall Stewart 					return;
2039f8829a4aSRandall Stewart 				}
2040f8829a4aSRandall Stewart 			}
2041f8829a4aSRandall Stewart 			if (stcb->asoc.site_scope == 0 &&
2042f8829a4aSRandall Stewart 			    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) {
2043f8829a4aSRandall Stewart 				return;
2044f8829a4aSRandall Stewart 			}
20455e2c2d87SRandall Stewart 			break;
20465e2c2d87SRandall Stewart 		}
20475e2c2d87SRandall Stewart #endif
2048e6194c2eSMichael Tuexen #ifdef INET
20495e2c2d87SRandall Stewart 	case AF_INET:
20505e2c2d87SRandall Stewart 		{
2051f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
2052f8829a4aSRandall Stewart 			struct in6pcb *inp6;
2053f8829a4aSRandall Stewart 
2054f8829a4aSRandall Stewart 			inp6 = (struct in6pcb *)&inp->ip_inp.inp;
2055f8829a4aSRandall Stewart 			/* invalid if we are a v6 only endpoint */
2056f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
205744b7479bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp6))
2058f8829a4aSRandall Stewart 				return;
2059f8829a4aSRandall Stewart 
206042551e99SRandall Stewart 			sin = (struct sockaddr_in *)&ifa->address.sa;
2061f8829a4aSRandall Stewart 			if (sin->sin_addr.s_addr == 0) {
2062f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
2063f8829a4aSRandall Stewart 				return;
2064f8829a4aSRandall Stewart 			}
2065f8829a4aSRandall Stewart 			if (stcb->asoc.ipv4_local_scope == 0 &&
2066f8829a4aSRandall Stewart 			    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
2067f8829a4aSRandall Stewart 				return;
2068f8829a4aSRandall Stewart 			}
20695e2c2d87SRandall Stewart 			break;
20705e2c2d87SRandall Stewart 		}
2071e6194c2eSMichael Tuexen #endif
20725e2c2d87SRandall Stewart 	default:
2073f8829a4aSRandall Stewart 		/* else, not AF_INET or AF_INET6, so skip */
2074f8829a4aSRandall Stewart 		return;
2075f8829a4aSRandall Stewart 	}
2076f8829a4aSRandall Stewart 
2077f8829a4aSRandall Stewart 	/* queue an asconf for this address add/delete */
2078f8829a4aSRandall Stewart 	if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
2079f8829a4aSRandall Stewart 		/* does the peer do asconf? */
2080f8829a4aSRandall Stewart 		if (stcb->asoc.peer_supports_asconf) {
2081f8829a4aSRandall Stewart 			/* queue an asconf for this addr */
2082f8829a4aSRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
20831b649582SRandall Stewart 
2084f8829a4aSRandall Stewart 			/*
20851b649582SRandall Stewart 			 * if queued ok, and in the open state, send out the
20861b649582SRandall Stewart 			 * ASCONF.  If in the non-open state, these will be
20871b649582SRandall Stewart 			 * sent when the state goes open.
2088f8829a4aSRandall Stewart 			 */
2089f8829a4aSRandall Stewart 			if (status == 0 &&
2090f8829a4aSRandall Stewart 			    SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
20911b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
2092f8829a4aSRandall Stewart 				sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, inp,
2093f8829a4aSRandall Stewart 				    stcb, stcb->asoc.primary_destination);
20941b649582SRandall Stewart #else
2095ca85e948SMichael Tuexen 				sctp_send_asconf(stcb, NULL, addr_locked);
20961b649582SRandall Stewart #endif
2097f8829a4aSRandall Stewart 			}
2098f8829a4aSRandall Stewart 		}
2099f8829a4aSRandall Stewart 	}
2100f8829a4aSRandall Stewart }
2101f8829a4aSRandall Stewart 
210242551e99SRandall Stewart 
210342551e99SRandall Stewart int
21047215cc1bSMichael Tuexen sctp_asconf_iterator_ep(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED)
2105f8829a4aSRandall Stewart {
210642551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
210742551e99SRandall Stewart 	struct sctp_ifa *ifa;
210842551e99SRandall Stewart 	struct sctp_laddr *l;
210942551e99SRandall Stewart 	int cnt_invalid = 0;
2110f8829a4aSRandall Stewart 
211142551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
211242551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
211342551e99SRandall Stewart 		ifa = l->ifa;
2114e6194c2eSMichael Tuexen 		switch (ifa->address.sa.sa_family) {
2115e6194c2eSMichael Tuexen #ifdef INET6
2116e6194c2eSMichael Tuexen 		case AF_INET6:
2117f8829a4aSRandall Stewart 			/* invalid if we're not a v6 endpoint */
2118f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
211942551e99SRandall Stewart 				cnt_invalid++;
212042551e99SRandall Stewart 				if (asc->cnt == cnt_invalid)
212142551e99SRandall Stewart 					return (1);
2122f8829a4aSRandall Stewart 			}
2123e6194c2eSMichael Tuexen 			break;
2124e6194c2eSMichael Tuexen #endif
2125e6194c2eSMichael Tuexen #ifdef INET
2126e6194c2eSMichael Tuexen 		case AF_INET:
2127e6194c2eSMichael Tuexen 			{
2128f8829a4aSRandall Stewart 				/* invalid if we are a v6 only endpoint */
2129f8829a4aSRandall Stewart 				struct in6pcb *inp6;
2130f8829a4aSRandall Stewart 
2131f8829a4aSRandall Stewart 				inp6 = (struct in6pcb *)&inp->ip_inp.inp;
2132f8829a4aSRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
213344b7479bSRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6)) {
213442551e99SRandall Stewart 					cnt_invalid++;
213542551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
213642551e99SRandall Stewart 						return (1);
2137f8829a4aSRandall Stewart 				}
2138e6194c2eSMichael Tuexen 				break;
2139e6194c2eSMichael Tuexen 			}
2140e6194c2eSMichael Tuexen #endif
2141e6194c2eSMichael Tuexen 		default:
2142f8829a4aSRandall Stewart 			/* invalid address family */
214342551e99SRandall Stewart 			cnt_invalid++;
214442551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
214542551e99SRandall Stewart 				return (1);
2146f8829a4aSRandall Stewart 		}
214742551e99SRandall Stewart 	}
214842551e99SRandall Stewart 	return (0);
214942551e99SRandall Stewart }
2150f8829a4aSRandall Stewart 
21511b649582SRandall Stewart static int
21527215cc1bSMichael Tuexen sctp_asconf_iterator_ep_end(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED)
215342551e99SRandall Stewart {
215442551e99SRandall Stewart 	struct sctp_ifa *ifa;
215542551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
215642551e99SRandall Stewart 	struct sctp_laddr *laddr, *nladdr, *l;
215742551e99SRandall Stewart 
215842551e99SRandall Stewart 	/* Only for specific case not bound all */
215942551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
216042551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
216142551e99SRandall Stewart 		ifa = l->ifa;
216242551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
21633c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
21643c503c28SRandall Stewart 			    sctp_nxt_addr) {
216542551e99SRandall Stewart 				if (laddr->ifa == ifa) {
216642551e99SRandall Stewart 					laddr->action = 0;
216742551e99SRandall Stewart 					break;
216842551e99SRandall Stewart 				}
216942551e99SRandall Stewart 			}
217042551e99SRandall Stewart 		} else if (l->action == SCTP_DEL_IP_ADDRESS) {
21714a9ef3f8SMichael Tuexen 			LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) {
217242551e99SRandall Stewart 				/* remove only after all guys are done */
217342551e99SRandall Stewart 				if (laddr->ifa == ifa) {
217442551e99SRandall Stewart 					sctp_del_local_addr_ep(inp, ifa);
217542551e99SRandall Stewart 				}
217642551e99SRandall Stewart 			}
217742551e99SRandall Stewart 		}
217842551e99SRandall Stewart 	}
217942551e99SRandall Stewart 	return (0);
218042551e99SRandall Stewart }
218142551e99SRandall Stewart 
218242551e99SRandall Stewart void
21831b649582SRandall Stewart sctp_asconf_iterator_stcb(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
21847215cc1bSMichael Tuexen     void *ptr, uint32_t val SCTP_UNUSED)
218542551e99SRandall Stewart {
218642551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
218742551e99SRandall Stewart 	struct sctp_ifa *ifa;
218842551e99SRandall Stewart 	struct sctp_laddr *l;
218942551e99SRandall Stewart 	int cnt_invalid = 0;
219042551e99SRandall Stewart 	int type, status;
21911b649582SRandall Stewart 	int num_queued = 0;
219242551e99SRandall Stewart 
219342551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
219442551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
219542551e99SRandall Stewart 		ifa = l->ifa;
219642551e99SRandall Stewart 		type = l->action;
219722a67197SRandall Stewart 
219822a67197SRandall Stewart 		/* address's vrf_id must be the vrf_id of the assoc */
219922a67197SRandall Stewart 		if (ifa->vrf_id != stcb->asoc.vrf_id) {
220022a67197SRandall Stewart 			continue;
220122a67197SRandall Stewart 		}
220242551e99SRandall Stewart 		/* Same checks again for assoc */
22035e2c2d87SRandall Stewart 		switch (ifa->address.sa.sa_family) {
22045e2c2d87SRandall Stewart #ifdef INET6
22055e2c2d87SRandall Stewart 		case AF_INET6:
22065e2c2d87SRandall Stewart 			{
220742551e99SRandall Stewart 				/* invalid if we're not a v6 endpoint */
220842551e99SRandall Stewart 				struct sockaddr_in6 *sin6;
220942551e99SRandall Stewart 
221042551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
221142551e99SRandall Stewart 					cnt_invalid++;
221242551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
221342551e99SRandall Stewart 						return;
221442551e99SRandall Stewart 					else
221542551e99SRandall Stewart 						continue;
221642551e99SRandall Stewart 				}
221742551e99SRandall Stewart 				sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
221842551e99SRandall Stewart 				if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
221942551e99SRandall Stewart 					/* we skip unspecifed addresses */
222042551e99SRandall Stewart 					continue;
222142551e99SRandall Stewart 				}
222242551e99SRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
222342551e99SRandall Stewart 					if (stcb->asoc.local_scope == 0) {
222442551e99SRandall Stewart 						continue;
222542551e99SRandall Stewart 					}
222642551e99SRandall Stewart 					/* is it the right link local scope? */
222742551e99SRandall Stewart 					if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
222842551e99SRandall Stewart 						continue;
222942551e99SRandall Stewart 					}
223042551e99SRandall Stewart 				}
22315e2c2d87SRandall Stewart 				break;
22325e2c2d87SRandall Stewart 			}
22335e2c2d87SRandall Stewart #endif
2234e6194c2eSMichael Tuexen #ifdef INET
22355e2c2d87SRandall Stewart 		case AF_INET:
22365e2c2d87SRandall Stewart 			{
223742551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
223842551e99SRandall Stewart 				struct in6pcb *inp6;
223942551e99SRandall Stewart 				struct sockaddr_in *sin;
224042551e99SRandall Stewart 
224142551e99SRandall Stewart 				inp6 = (struct in6pcb *)&inp->ip_inp.inp;
224242551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
224342551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
224442551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6))
224542551e99SRandall Stewart 					continue;
224642551e99SRandall Stewart 
224742551e99SRandall Stewart 				sin = (struct sockaddr_in *)&ifa->address.sa;
224842551e99SRandall Stewart 				if (sin->sin_addr.s_addr == 0) {
224942551e99SRandall Stewart 					/* we skip unspecifed addresses */
225042551e99SRandall Stewart 					continue;
225142551e99SRandall Stewart 				}
225242551e99SRandall Stewart 				if (stcb->asoc.ipv4_local_scope == 0 &&
225342551e99SRandall Stewart 				    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
2254c2ede4b3SMartin Blapp 					continue;
225542551e99SRandall Stewart 				}
225642551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
225742551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6)) {
225842551e99SRandall Stewart 					cnt_invalid++;
225942551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
226042551e99SRandall Stewart 						return;
226142551e99SRandall Stewart 					else
226242551e99SRandall Stewart 						continue;
226342551e99SRandall Stewart 				}
22645e2c2d87SRandall Stewart 				break;
22655e2c2d87SRandall Stewart 			}
2266e6194c2eSMichael Tuexen #endif
22675e2c2d87SRandall Stewart 		default:
226842551e99SRandall Stewart 			/* invalid address family */
226942551e99SRandall Stewart 			cnt_invalid++;
227042551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
2271f8829a4aSRandall Stewart 				return;
227242551e99SRandall Stewart 			else
227342551e99SRandall Stewart 				continue;
22745e2c2d87SRandall Stewart 			break;
2275f8829a4aSRandall Stewart 		}
2276f8829a4aSRandall Stewart 
227742551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
22781b649582SRandall Stewart 			/* prevent this address from being used as a source */
22791b649582SRandall Stewart 			sctp_add_local_addr_restricted(stcb, ifa);
228042551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
2281f8829a4aSRandall Stewart 			struct sctp_nets *net;
2282f8829a4aSRandall Stewart 
2283f8829a4aSRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
228417205eccSRandall Stewart 				sctp_rtentry_t *rt;
2285f8829a4aSRandall Stewart 
2286f8829a4aSRandall Stewart 				/* delete this address if cached */
2287851b7298SRandall Stewart 				if (net->ro._s_addr == ifa) {
228842551e99SRandall Stewart 					sctp_free_ifa(net->ro._s_addr);
228942551e99SRandall Stewart 					net->ro._s_addr = NULL;
229042551e99SRandall Stewart 					net->src_addr_selected = 0;
2291f8829a4aSRandall Stewart 					rt = net->ro.ro_rt;
229242551e99SRandall Stewart 					if (rt) {
229342551e99SRandall Stewart 						RTFREE(rt);
2294f8829a4aSRandall Stewart 						net->ro.ro_rt = NULL;
2295f8829a4aSRandall Stewart 					}
229642551e99SRandall Stewart 					/*
229742551e99SRandall Stewart 					 * Now we deleted our src address,
229842551e99SRandall Stewart 					 * should we not also now reset the
229942551e99SRandall Stewart 					 * cwnd/rto to start as if its a new
230042551e99SRandall Stewart 					 * address?
230142551e99SRandall Stewart 					 */
2302b54d3a6cSRandall Stewart 					stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
2303108df27cSRandall Stewart 					net->RTO = 0;
230442551e99SRandall Stewart 
2305f8829a4aSRandall Stewart 				}
2306f8829a4aSRandall Stewart 			}
230742551e99SRandall Stewart 		} else if (type == SCTP_SET_PRIM_ADDR) {
230842551e99SRandall Stewart 			if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
23091b649582SRandall Stewart 				/* must validate the ifa is in the ep */
231042551e99SRandall Stewart 				if (sctp_is_addr_in_ep(stcb->sctp_ep, ifa) == 0) {
231142551e99SRandall Stewart 					continue;
2312f8829a4aSRandall Stewart 				}
231342551e99SRandall Stewart 			} else {
231442551e99SRandall Stewart 				/* Need to check scopes for this guy */
231542551e99SRandall Stewart 				if (sctp_is_address_in_scope(ifa,
231642551e99SRandall Stewart 				    stcb->asoc.ipv4_addr_legal,
231742551e99SRandall Stewart 				    stcb->asoc.ipv6_addr_legal,
231842551e99SRandall Stewart 				    stcb->asoc.loopback_scope,
231942551e99SRandall Stewart 				    stcb->asoc.ipv4_local_scope,
232042551e99SRandall Stewart 				    stcb->asoc.local_scope,
232142551e99SRandall Stewart 				    stcb->asoc.site_scope, 0) == 0) {
232242551e99SRandall Stewart 					continue;
2323f8829a4aSRandall Stewart 				}
232442551e99SRandall Stewart 			}
232542551e99SRandall Stewart 		}
232642551e99SRandall Stewart 		/* queue an asconf for this address add/delete */
23271b649582SRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF) &&
23281b649582SRandall Stewart 		    stcb->asoc.peer_supports_asconf) {
232942551e99SRandall Stewart 			/* queue an asconf for this addr */
233042551e99SRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
233142551e99SRandall Stewart 			/*
23321b649582SRandall Stewart 			 * if queued ok, and in the open state, update the
23331b649582SRandall Stewart 			 * count of queued params.  If in the non-open
23341b649582SRandall Stewart 			 * state, these get sent when the assoc goes open.
233542551e99SRandall Stewart 			 */
23361b649582SRandall Stewart 			if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
23371b649582SRandall Stewart 				if (status >= 0) {
23381b649582SRandall Stewart 					num_queued++;
233942551e99SRandall Stewart 				}
234042551e99SRandall Stewart 			}
234142551e99SRandall Stewart 		}
234242551e99SRandall Stewart 	}
23431b649582SRandall Stewart 	/*
23441b649582SRandall Stewart 	 * If we have queued params in the open state, send out an ASCONF.
23451b649582SRandall Stewart 	 */
23461b649582SRandall Stewart 	if (num_queued > 0) {
2347ca85e948SMichael Tuexen 		sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
23481b649582SRandall Stewart 	}
234942551e99SRandall Stewart }
235042551e99SRandall Stewart 
235142551e99SRandall Stewart void
23527215cc1bSMichael Tuexen sctp_asconf_iterator_end(void *ptr, uint32_t val SCTP_UNUSED)
235342551e99SRandall Stewart {
235442551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
235542551e99SRandall Stewart 	struct sctp_ifa *ifa;
23564a9ef3f8SMichael Tuexen 	struct sctp_laddr *l, *nl;
235742551e99SRandall Stewart 
235842551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
23594a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(l, &asc->list_of_work, sctp_nxt_addr, nl) {
236042551e99SRandall Stewart 		ifa = l->ifa;
236142551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
236242551e99SRandall Stewart 			/* Clear the defer use flag */
236342551e99SRandall Stewart 			ifa->localifa_flags &= ~SCTP_ADDR_DEFER_USE;
236442551e99SRandall Stewart 		}
236542551e99SRandall Stewart 		sctp_free_ifa(ifa);
2366b3f1ea41SRandall Stewart 		SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), l);
236742551e99SRandall Stewart 		SCTP_DECR_LADDR_COUNT();
236842551e99SRandall Stewart 	}
2369207304d4SRandall Stewart 	SCTP_FREE(asc, SCTP_M_ASC_IT);
2370f8829a4aSRandall Stewart }
2371f8829a4aSRandall Stewart 
2372f8829a4aSRandall Stewart /*
23731b649582SRandall Stewart  * sa is the sockaddr to ask the peer to set primary to.
23741b649582SRandall Stewart  * returns: 0 = completed, -1 = error
2375f8829a4aSRandall Stewart  */
2376c4739e2fSRandall Stewart int32_t
2377f8829a4aSRandall Stewart sctp_set_primary_ip_address_sa(struct sctp_tcb *stcb, struct sockaddr *sa)
2378f8829a4aSRandall Stewart {
23793232788eSRandall Stewart 	uint32_t vrf_id;
23803232788eSRandall Stewart 	struct sctp_ifa *ifa;
2381f8829a4aSRandall Stewart 
23823232788eSRandall Stewart 	/* find the ifa for the desired set primary */
23833232788eSRandall Stewart 	vrf_id = stcb->asoc.vrf_id;
23843232788eSRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
23853232788eSRandall Stewart 	if (ifa == NULL) {
23863232788eSRandall Stewart 		/* Invalid address */
23873232788eSRandall Stewart 		return (-1);
23883232788eSRandall Stewart 	}
2389f8829a4aSRandall Stewart 	/* queue an ASCONF:SET_PRIM_ADDR to be sent */
23903232788eSRandall Stewart 	if (!sctp_asconf_queue_add(stcb, ifa, SCTP_SET_PRIM_ADDR)) {
2391f8829a4aSRandall Stewart 		/* set primary queuing succeeded */
2392ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2393ad81507eSRandall Stewart 		    "set_primary_ip_address_sa: queued on tcb=%p, ",
2394f8829a4aSRandall Stewart 		    stcb);
2395ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
23961b649582SRandall Stewart 		if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
23971b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
23981b649582SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
23991b649582SRandall Stewart 			    stcb->sctp_ep, stcb,
24001b649582SRandall Stewart 			    stcb->asoc.primary_destination);
24011b649582SRandall Stewart #else
2402ca85e948SMichael Tuexen 			sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
24031b649582SRandall Stewart #endif
24041b649582SRandall Stewart 		}
2405f8829a4aSRandall Stewart 	} else {
2406ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address_sa: failed to add to queue on tcb=%p, ",
2407f8829a4aSRandall Stewart 		    stcb);
2408ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
2409f8829a4aSRandall Stewart 		return (-1);
2410f8829a4aSRandall Stewart 	}
2411f8829a4aSRandall Stewart 	return (0);
2412f8829a4aSRandall Stewart }
2413f8829a4aSRandall Stewart 
2414f8829a4aSRandall Stewart void
241542551e99SRandall Stewart sctp_set_primary_ip_address(struct sctp_ifa *ifa)
2416f8829a4aSRandall Stewart {
2417f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
2418f8829a4aSRandall Stewart 
2419f8829a4aSRandall Stewart 	/* go through all our PCB's */
2420b3f1ea41SRandall Stewart 	LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) {
2421f8829a4aSRandall Stewart 		struct sctp_tcb *stcb;
2422f8829a4aSRandall Stewart 
2423f8829a4aSRandall Stewart 		/* process for all associations for this endpoint */
2424f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
2425f8829a4aSRandall Stewart 			/* queue an ASCONF:SET_PRIM_ADDR to be sent */
2426f8829a4aSRandall Stewart 			if (!sctp_asconf_queue_add(stcb, ifa,
2427f8829a4aSRandall Stewart 			    SCTP_SET_PRIM_ADDR)) {
2428f8829a4aSRandall Stewart 				/* set primary queuing succeeded */
2429ceaad40aSRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address: queued on stcb=%p, ",
2430f8829a4aSRandall Stewart 				    stcb);
2431ad81507eSRandall Stewart 				SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &ifa->address.sa);
24321b649582SRandall Stewart 				if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
24331b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
24341b649582SRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
24351b649582SRandall Stewart 					    stcb->sctp_ep, stcb,
24361b649582SRandall Stewart 					    stcb->asoc.primary_destination);
24371b649582SRandall Stewart #else
2438ca85e948SMichael Tuexen 					sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
24391b649582SRandall Stewart #endif
24401b649582SRandall Stewart 				}
2441f8829a4aSRandall Stewart 			}
2442f8829a4aSRandall Stewart 		}		/* for each stcb */
2443f8829a4aSRandall Stewart 	}			/* for each inp */
2444f8829a4aSRandall Stewart }
2445f8829a4aSRandall Stewart 
2446c54a18d2SRandall Stewart int
2447c54a18d2SRandall Stewart sctp_is_addr_pending(struct sctp_tcb *stcb, struct sctp_ifa *sctp_ifa)
2448c54a18d2SRandall Stewart {
2449c54a18d2SRandall Stewart 	struct sctp_tmit_chunk *chk, *nchk;
2450c54a18d2SRandall Stewart 	unsigned int offset, asconf_limit;
2451c54a18d2SRandall Stewart 	struct sctp_asconf_chunk *acp;
2452c54a18d2SRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2453c54a18d2SRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
2454e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
2455c54a18d2SRandall Stewart 	int add_cnt, del_cnt;
2456c54a18d2SRandall Stewart 	uint16_t last_param_type;
2457c54a18d2SRandall Stewart 
2458c54a18d2SRandall Stewart 	add_cnt = del_cnt = 0;
2459c54a18d2SRandall Stewart 	last_param_type = 0;
24604a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &stcb->asoc.asconf_send_queue, sctp_next, nchk) {
2461c54a18d2SRandall Stewart 		if (chk->data == NULL) {
2462c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: No mbuf data?\n");
2463c54a18d2SRandall Stewart 			continue;
2464c54a18d2SRandall Stewart 		}
2465c54a18d2SRandall Stewart 		offset = 0;
2466c54a18d2SRandall Stewart 		acp = mtod(chk->data, struct sctp_asconf_chunk *);
2467c54a18d2SRandall Stewart 		offset += sizeof(struct sctp_asconf_chunk);
2468c54a18d2SRandall Stewart 		asconf_limit = ntohs(acp->ch.chunk_length);
2469e6194c2eSMichael Tuexen 		ph = (struct sctp_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_paramhdr), aparam_buf);
2470e6194c2eSMichael Tuexen 		if (ph == NULL) {
2471c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get lookup addr!\n");
2472c54a18d2SRandall Stewart 			continue;
2473c54a18d2SRandall Stewart 		}
2474e6194c2eSMichael Tuexen 		offset += ntohs(ph->param_length);
2475c54a18d2SRandall Stewart 
2476c54a18d2SRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2477c54a18d2SRandall Stewart 		if (aph == NULL) {
2478c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: Empty ASCONF will be sent?\n");
2479c54a18d2SRandall Stewart 			continue;
2480c54a18d2SRandall Stewart 		}
2481c54a18d2SRandall Stewart 		while (aph != NULL) {
2482c54a18d2SRandall Stewart 			unsigned int param_length, param_type;
2483c54a18d2SRandall Stewart 
2484c54a18d2SRandall Stewart 			param_type = ntohs(aph->ph.param_type);
2485c54a18d2SRandall Stewart 			param_length = ntohs(aph->ph.param_length);
2486c54a18d2SRandall Stewart 			if (offset + param_length > asconf_limit) {
2487c54a18d2SRandall Stewart 				/* parameter goes beyond end of chunk! */
2488c54a18d2SRandall Stewart 				break;
2489c54a18d2SRandall Stewart 			}
2490c54a18d2SRandall Stewart 			if (param_length > sizeof(aparam_buf)) {
2491c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length);
2492c54a18d2SRandall Stewart 				break;
2493c54a18d2SRandall Stewart 			}
2494c54a18d2SRandall Stewart 			if (param_length <= sizeof(struct sctp_paramhdr)) {
2495c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length);
2496c54a18d2SRandall Stewart 				break;
2497c54a18d2SRandall Stewart 			}
2498c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf);
2499c54a18d2SRandall Stewart 			if (aph == NULL) {
2500c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get entire param\n");
2501c54a18d2SRandall Stewart 				break;
2502c54a18d2SRandall Stewart 			}
2503e6194c2eSMichael Tuexen 			ph = (struct sctp_paramhdr *)(aph + 1);
2504e6194c2eSMichael Tuexen 			if (sctp_addr_match(ph, &sctp_ifa->address.sa) != 0) {
2505c54a18d2SRandall Stewart 				switch (param_type) {
2506c54a18d2SRandall Stewart 				case SCTP_ADD_IP_ADDRESS:
2507c54a18d2SRandall Stewart 					add_cnt++;
2508c54a18d2SRandall Stewart 					break;
2509c54a18d2SRandall Stewart 				case SCTP_DEL_IP_ADDRESS:
2510c54a18d2SRandall Stewart 					del_cnt++;
2511c54a18d2SRandall Stewart 					break;
2512c54a18d2SRandall Stewart 				default:
2513c54a18d2SRandall Stewart 					break;
2514c54a18d2SRandall Stewart 				}
2515c54a18d2SRandall Stewart 				last_param_type = param_type;
2516c54a18d2SRandall Stewart 			}
2517c54a18d2SRandall Stewart 			offset += SCTP_SIZE32(param_length);
2518c54a18d2SRandall Stewart 			if (offset >= asconf_limit) {
2519c54a18d2SRandall Stewart 				/* no more data in the mbuf chain */
2520c54a18d2SRandall Stewart 				break;
2521c54a18d2SRandall Stewart 			}
2522c54a18d2SRandall Stewart 			/* get pointer to next asconf param */
2523c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2524c54a18d2SRandall Stewart 		}
2525c54a18d2SRandall Stewart 	}
2526c54a18d2SRandall Stewart 
2527c54a18d2SRandall Stewart 	/*
2528c54a18d2SRandall Stewart 	 * we want to find the sequences which consist of ADD -> DEL -> ADD
2529c54a18d2SRandall Stewart 	 * or DEL -> ADD
2530c54a18d2SRandall Stewart 	 */
2531c54a18d2SRandall Stewart 	if (add_cnt > del_cnt ||
2532c54a18d2SRandall Stewart 	    (add_cnt == del_cnt && last_param_type == SCTP_ADD_IP_ADDRESS)) {
2533*60990c0cSMichael Tuexen 		return (1);
2534c54a18d2SRandall Stewart 	}
2535*60990c0cSMichael Tuexen 	return (0);
2536c54a18d2SRandall Stewart }
2537c54a18d2SRandall Stewart 
2538f8829a4aSRandall Stewart static struct sockaddr *
25393232788eSRandall Stewart sctp_find_valid_localaddr(struct sctp_tcb *stcb, int addr_locked)
2540f8829a4aSRandall Stewart {
254142551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
254242551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
254342551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2544f8829a4aSRandall Stewart 
25453232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2546c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
254742551e99SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
2548ad81507eSRandall Stewart 	if (vrf == NULL) {
25493232788eSRandall Stewart 		if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2550c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
2551ad81507eSRandall Stewart 		return (NULL);
2552ad81507eSRandall Stewart 	}
255342551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
255442551e99SRandall Stewart 		if (stcb->asoc.loopback_scope == 0 &&
255542551e99SRandall Stewart 		    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
2556f8829a4aSRandall Stewart 			/* Skip if loopback_scope not set */
2557f8829a4aSRandall Stewart 			continue;
2558f8829a4aSRandall Stewart 		}
255942551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
2560e6194c2eSMichael Tuexen 			switch (sctp_ifa->address.sa.sa_family) {
2561e6194c2eSMichael Tuexen #ifdef INET
2562e6194c2eSMichael Tuexen 			case AF_INET:
2563e6194c2eSMichael Tuexen 				if (stcb->asoc.ipv4_addr_legal) {
2564f8829a4aSRandall Stewart 					struct sockaddr_in *sin;
2565f8829a4aSRandall Stewart 
256642551e99SRandall Stewart 					sin = (struct sockaddr_in *)&sctp_ifa->address.sa;
2567f8829a4aSRandall Stewart 					if (sin->sin_addr.s_addr == 0) {
2568f8829a4aSRandall Stewart 						/* skip unspecifed addresses */
2569f8829a4aSRandall Stewart 						continue;
2570f8829a4aSRandall Stewart 					}
2571f8829a4aSRandall Stewart 					if (stcb->asoc.ipv4_local_scope == 0 &&
2572f8829a4aSRandall Stewart 					    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))
2573f8829a4aSRandall Stewart 						continue;
2574f8829a4aSRandall Stewart 
2575c54a18d2SRandall Stewart 					if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2576c54a18d2SRandall Stewart 					    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2577f8829a4aSRandall Stewart 						continue;
2578e6194c2eSMichael Tuexen 					/*
2579e6194c2eSMichael Tuexen 					 * found a valid local v4 address to
2580e6194c2eSMichael Tuexen 					 * use
2581e6194c2eSMichael Tuexen 					 */
25823232788eSRandall Stewart 					if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2583c99efcf6SRandall Stewart 						SCTP_IPI_ADDR_RUNLOCK();
258442551e99SRandall Stewart 					return (&sctp_ifa->address.sa);
2585e6194c2eSMichael Tuexen 				}
2586e6194c2eSMichael Tuexen 				break;
2587e6194c2eSMichael Tuexen #endif
2588e6194c2eSMichael Tuexen #ifdef INET6
2589e6194c2eSMichael Tuexen 			case AF_INET6:
2590e6194c2eSMichael Tuexen 				if (stcb->asoc.ipv6_addr_legal) {
2591f8829a4aSRandall Stewart 					struct sockaddr_in6 *sin6;
2592f8829a4aSRandall Stewart 
259342551e99SRandall Stewart 					if (sctp_ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
2594f8829a4aSRandall Stewart 						continue;
259542551e99SRandall Stewart 					}
259642551e99SRandall Stewart 					sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa;
2597f8829a4aSRandall Stewart 					if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2598e6194c2eSMichael Tuexen 						/*
2599e6194c2eSMichael Tuexen 						 * we skip unspecifed
2600e6194c2eSMichael Tuexen 						 * addresses
2601e6194c2eSMichael Tuexen 						 */
2602f8829a4aSRandall Stewart 						continue;
2603f8829a4aSRandall Stewart 					}
2604f8829a4aSRandall Stewart 					if (stcb->asoc.local_scope == 0 &&
2605f8829a4aSRandall Stewart 					    IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))
2606f8829a4aSRandall Stewart 						continue;
2607f8829a4aSRandall Stewart 					if (stcb->asoc.site_scope == 0 &&
2608f8829a4aSRandall Stewart 					    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))
2609f8829a4aSRandall Stewart 						continue;
2610f8829a4aSRandall Stewart 
2611c54a18d2SRandall Stewart 					if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2612c54a18d2SRandall Stewart 					    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2613c54a18d2SRandall Stewart 						continue;
2614e6194c2eSMichael Tuexen 					/*
2615e6194c2eSMichael Tuexen 					 * found a valid local v6 address to
2616e6194c2eSMichael Tuexen 					 * use
2617e6194c2eSMichael Tuexen 					 */
26183232788eSRandall Stewart 					if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2619c99efcf6SRandall Stewart 						SCTP_IPI_ADDR_RUNLOCK();
262042551e99SRandall Stewart 					return (&sctp_ifa->address.sa);
2621f8829a4aSRandall Stewart 				}
2622e6194c2eSMichael Tuexen 				break;
2623e6194c2eSMichael Tuexen #endif
2624e6194c2eSMichael Tuexen 			default:
2625e6194c2eSMichael Tuexen 				break;
2626e6194c2eSMichael Tuexen 			}
2627f8829a4aSRandall Stewart 		}
2628f8829a4aSRandall Stewart 	}
2629f8829a4aSRandall Stewart 	/* no valid addresses found */
26303232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2631c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
2632f8829a4aSRandall Stewart 	return (NULL);
2633f8829a4aSRandall Stewart }
2634f8829a4aSRandall Stewart 
2635f8829a4aSRandall Stewart static struct sockaddr *
2636f8829a4aSRandall Stewart sctp_find_valid_localaddr_ep(struct sctp_tcb *stcb)
2637f8829a4aSRandall Stewart {
2638f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
2639f8829a4aSRandall Stewart 
2640f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
2641f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
2642f8829a4aSRandall Stewart 			continue;
2643f8829a4aSRandall Stewart 		}
2644f8829a4aSRandall Stewart 		/* is the address restricted ? */
2645c54a18d2SRandall Stewart 		if (sctp_is_addr_restricted(stcb, laddr->ifa) &&
2646c54a18d2SRandall Stewart 		    (!sctp_is_addr_pending(stcb, laddr->ifa)))
2647f8829a4aSRandall Stewart 			continue;
2648f8829a4aSRandall Stewart 
2649f8829a4aSRandall Stewart 		/* found a valid local address to use */
265042551e99SRandall Stewart 		return (&laddr->ifa->address.sa);
2651f8829a4aSRandall Stewart 	}
2652f8829a4aSRandall Stewart 	/* no valid addresses found */
2653f8829a4aSRandall Stewart 	return (NULL);
2654f8829a4aSRandall Stewart }
2655f8829a4aSRandall Stewart 
2656f8829a4aSRandall Stewart /*
265718e198d3SRandall Stewart  * builds an ASCONF chunk from queued ASCONF params.
265818e198d3SRandall Stewart  * returns NULL on error (no mbuf, no ASCONF params queued, etc).
2659f8829a4aSRandall Stewart  */
2660f8829a4aSRandall Stewart struct mbuf *
26613232788eSRandall Stewart sctp_compose_asconf(struct sctp_tcb *stcb, int *retlen, int addr_locked)
2662f8829a4aSRandall Stewart {
2663f8829a4aSRandall Stewart 	struct mbuf *m_asconf, *m_asconf_chk;
2664f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
2665f8829a4aSRandall Stewart 	struct sctp_asconf_chunk *acp;
2666f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2667f8829a4aSRandall Stewart 	struct sctp_asconf_addr_param *aap;
2668f8829a4aSRandall Stewart 	uint32_t p_length;
2669f8829a4aSRandall Stewart 	uint32_t correlation_id = 1;	/* 0 is reserved... */
2670f8829a4aSRandall Stewart 	caddr_t ptr, lookup_ptr;
2671f8829a4aSRandall Stewart 	uint8_t lookup_used = 0;
2672f8829a4aSRandall Stewart 
2673f8829a4aSRandall Stewart 	/* are there any asconf params to send? */
2674c54a18d2SRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2675c54a18d2SRandall Stewart 		if (aa->sent == 0)
2676c54a18d2SRandall Stewart 			break;
2677f8829a4aSRandall Stewart 	}
2678c54a18d2SRandall Stewart 	if (aa == NULL)
26791b649582SRandall Stewart 		return (NULL);
2680c54a18d2SRandall Stewart 
2681f8829a4aSRandall Stewart 	/*
2682f8829a4aSRandall Stewart 	 * get a chunk header mbuf and a cluster for the asconf params since
2683f8829a4aSRandall Stewart 	 * it's simpler to fill in the asconf chunk header lookup address on
2684f8829a4aSRandall Stewart 	 * the fly
2685f8829a4aSRandall Stewart 	 */
2686139bc87fSRandall Stewart 	m_asconf_chk = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_chunk), 0, M_DONTWAIT, 1, MT_DATA);
2687f8829a4aSRandall Stewart 	if (m_asconf_chk == NULL) {
2688f8829a4aSRandall Stewart 		/* no mbuf's */
2689ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2690ad81507eSRandall Stewart 		    "compose_asconf: couldn't get chunk mbuf!\n");
2691f8829a4aSRandall Stewart 		return (NULL);
2692f8829a4aSRandall Stewart 	}
2693139bc87fSRandall Stewart 	m_asconf = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA);
2694f8829a4aSRandall Stewart 	if (m_asconf == NULL) {
2695f8829a4aSRandall Stewart 		/* no mbuf's */
2696ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2697ad81507eSRandall Stewart 		    "compose_asconf: couldn't get mbuf!\n");
2698f8829a4aSRandall Stewart 		sctp_m_freem(m_asconf_chk);
2699f8829a4aSRandall Stewart 		return (NULL);
2700f8829a4aSRandall Stewart 	}
2701139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf_chk) = sizeof(struct sctp_asconf_chunk);
2702139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf) = 0;
2703f8829a4aSRandall Stewart 	acp = mtod(m_asconf_chk, struct sctp_asconf_chunk *);
2704f8829a4aSRandall Stewart 	bzero(acp, sizeof(struct sctp_asconf_chunk));
2705f8829a4aSRandall Stewart 	/* save pointers to lookup address and asconf params */
2706f8829a4aSRandall Stewart 	lookup_ptr = (caddr_t)(acp + 1);	/* after the header */
2707f8829a4aSRandall Stewart 	ptr = mtod(m_asconf, caddr_t);	/* beginning of cluster */
2708f8829a4aSRandall Stewart 
2709f8829a4aSRandall Stewart 	/* fill in chunk header info */
2710f8829a4aSRandall Stewart 	acp->ch.chunk_type = SCTP_ASCONF;
2711f8829a4aSRandall Stewart 	acp->ch.chunk_flags = 0;
2712f8829a4aSRandall Stewart 	acp->serial_number = htonl(stcb->asoc.asconf_seq_out);
2713c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out++;
2714f8829a4aSRandall Stewart 
2715f8829a4aSRandall Stewart 	/* add parameters... up to smallest MTU allowed */
2716f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2717c54a18d2SRandall Stewart 		if (aa->sent)
2718c54a18d2SRandall Stewart 			continue;
2719f8829a4aSRandall Stewart 		/* get the parameter length */
2720f8829a4aSRandall Stewart 		p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length);
2721f8829a4aSRandall Stewart 		/* will it fit in current chunk? */
2722139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m_asconf) + p_length > stcb->asoc.smallest_mtu) {
2723f8829a4aSRandall Stewart 			/* won't fit, so we're done with this chunk */
2724f8829a4aSRandall Stewart 			break;
2725f8829a4aSRandall Stewart 		}
2726f8829a4aSRandall Stewart 		/* assign (and store) a correlation id */
2727f8829a4aSRandall Stewart 		aa->ap.aph.correlation_id = correlation_id++;
2728f8829a4aSRandall Stewart 
2729f8829a4aSRandall Stewart 		/*
2730f8829a4aSRandall Stewart 		 * fill in address if we're doing a delete this is a simple
2731f8829a4aSRandall Stewart 		 * way for us to fill in the correlation address, which
2732f8829a4aSRandall Stewart 		 * should only be used by the peer if we're deleting our
2733f8829a4aSRandall Stewart 		 * source address and adding a new address (e.g. renumbering
2734f8829a4aSRandall Stewart 		 * case)
2735f8829a4aSRandall Stewart 		 */
2736f8829a4aSRandall Stewart 		if (lookup_used == 0 &&
2737830d754dSRandall Stewart 		    (aa->special_del == 0) &&
2738f8829a4aSRandall Stewart 		    aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
2739f8829a4aSRandall Stewart 			struct sctp_ipv6addr_param *lookup;
2740f8829a4aSRandall Stewart 			uint16_t p_size, addr_size;
2741f8829a4aSRandall Stewart 
2742f8829a4aSRandall Stewart 			lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2743f8829a4aSRandall Stewart 			lookup->ph.param_type =
2744f8829a4aSRandall Stewart 			    htons(aa->ap.addrp.ph.param_type);
2745f8829a4aSRandall Stewart 			if (aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) {
2746f8829a4aSRandall Stewart 				/* copy IPv6 address */
2747f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2748f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2749f8829a4aSRandall Stewart 			} else {
2750f8829a4aSRandall Stewart 				/* copy IPv4 address */
2751f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2752f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2753f8829a4aSRandall Stewart 			}
2754f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2755f8829a4aSRandall Stewart 			memcpy(lookup->addr, &aa->ap.addrp.addr, addr_size);
2756139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2757f8829a4aSRandall Stewart 			lookup_used = 1;
2758f8829a4aSRandall Stewart 		}
2759f8829a4aSRandall Stewart 		/* copy into current space */
2760f8829a4aSRandall Stewart 		memcpy(ptr, &aa->ap, p_length);
2761f8829a4aSRandall Stewart 
2762f8829a4aSRandall Stewart 		/* network elements and update lengths */
2763f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)ptr;
2764f8829a4aSRandall Stewart 		aap = (struct sctp_asconf_addr_param *)ptr;
2765f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no htonl needed */
2766f8829a4aSRandall Stewart 		aph->ph.param_type = htons(aph->ph.param_type);
2767f8829a4aSRandall Stewart 		aph->ph.param_length = htons(aph->ph.param_length);
2768f8829a4aSRandall Stewart 		aap->addrp.ph.param_type = htons(aap->addrp.ph.param_type);
2769f8829a4aSRandall Stewart 		aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length);
2770f8829a4aSRandall Stewart 
2771139bc87fSRandall Stewart 		SCTP_BUF_LEN(m_asconf) += SCTP_SIZE32(p_length);
2772f8829a4aSRandall Stewart 		ptr += SCTP_SIZE32(p_length);
2773f8829a4aSRandall Stewart 
2774f8829a4aSRandall Stewart 		/*
2775f8829a4aSRandall Stewart 		 * these params are removed off the pending list upon
2776f8829a4aSRandall Stewart 		 * getting an ASCONF-ACK back from the peer, just set flag
2777f8829a4aSRandall Stewart 		 */
2778f8829a4aSRandall Stewart 		aa->sent = 1;
2779f8829a4aSRandall Stewart 	}
2780f8829a4aSRandall Stewart 	/* check to see if the lookup addr has been populated yet */
2781f8829a4aSRandall Stewart 	if (lookup_used == 0) {
2782f8829a4aSRandall Stewart 		/* NOTE: if the address param is optional, can skip this... */
2783f8829a4aSRandall Stewart 		/* add any valid (existing) address... */
2784f8829a4aSRandall Stewart 		struct sctp_ipv6addr_param *lookup;
2785f8829a4aSRandall Stewart 		uint16_t p_size, addr_size;
2786f8829a4aSRandall Stewart 		struct sockaddr *found_addr;
2787f8829a4aSRandall Stewart 		caddr_t addr_ptr;
2788f8829a4aSRandall Stewart 
2789f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL)
27903232788eSRandall Stewart 			found_addr = sctp_find_valid_localaddr(stcb,
27913232788eSRandall Stewart 			    addr_locked);
2792f8829a4aSRandall Stewart 		else
2793f8829a4aSRandall Stewart 			found_addr = sctp_find_valid_localaddr_ep(stcb);
2794f8829a4aSRandall Stewart 
2795f8829a4aSRandall Stewart 		lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2796f8829a4aSRandall Stewart 		if (found_addr != NULL) {
2797e6194c2eSMichael Tuexen 			switch (found_addr->sa_family) {
2798e6194c2eSMichael Tuexen #ifdef INET6
2799e6194c2eSMichael Tuexen 			case AF_INET6:
2800f8829a4aSRandall Stewart 				/* copy IPv6 address */
2801f8829a4aSRandall Stewart 				lookup->ph.param_type =
2802f8829a4aSRandall Stewart 				    htons(SCTP_IPV6_ADDRESS);
2803f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2804f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2805f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in6 *)
2806f8829a4aSRandall Stewart 				    found_addr)->sin6_addr;
2807e6194c2eSMichael Tuexen 				break;
2808e6194c2eSMichael Tuexen #endif
2809e6194c2eSMichael Tuexen #ifdef INET
2810e6194c2eSMichael Tuexen 			case AF_INET:
2811f8829a4aSRandall Stewart 				/* copy IPv4 address */
2812f8829a4aSRandall Stewart 				lookup->ph.param_type =
2813f8829a4aSRandall Stewart 				    htons(SCTP_IPV4_ADDRESS);
2814f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2815f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2816f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in *)
2817f8829a4aSRandall Stewart 				    found_addr)->sin_addr;
2818e6194c2eSMichael Tuexen 				break;
2819e6194c2eSMichael Tuexen #endif
2820e6194c2eSMichael Tuexen 			default:
2821e6194c2eSMichael Tuexen 				p_size = 0;
2822e6194c2eSMichael Tuexen 				addr_size = 0;
2823e6194c2eSMichael Tuexen 				addr_ptr = NULL;
2824e6194c2eSMichael Tuexen 				break;
2825f8829a4aSRandall Stewart 			}
2826f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2827f8829a4aSRandall Stewart 			memcpy(lookup->addr, addr_ptr, addr_size);
2828139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2829f8829a4aSRandall Stewart 		} else {
2830f8829a4aSRandall Stewart 			/* uh oh... don't have any address?? */
2831ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
2832ad81507eSRandall Stewart 			    "compose_asconf: no lookup addr!\n");
2833e6194c2eSMichael Tuexen 			/* XXX for now, we send a IPv4 address of 0.0.0.0 */
2834f8829a4aSRandall Stewart 			lookup->ph.param_type = htons(SCTP_IPV4_ADDRESS);
2835f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param)));
2836f8829a4aSRandall Stewart 			bzero(lookup->addr, sizeof(struct in_addr));
2837139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param));
2838f8829a4aSRandall Stewart 		}
2839f8829a4aSRandall Stewart 	}
2840f8829a4aSRandall Stewart 	/* chain it all together */
2841139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_asconf_chk) = m_asconf;
28423c503c28SRandall Stewart 	*retlen = SCTP_BUF_LEN(m_asconf_chk) + SCTP_BUF_LEN(m_asconf);
28433c503c28SRandall Stewart 	acp->ch.chunk_length = ntohs(*retlen);
2844f8829a4aSRandall Stewart 
2845f8829a4aSRandall Stewart 	return (m_asconf_chk);
2846f8829a4aSRandall Stewart }
2847f8829a4aSRandall Stewart 
2848f8829a4aSRandall Stewart /*
2849f8829a4aSRandall Stewart  * section to handle address changes before an association is up eg. changes
2850f8829a4aSRandall Stewart  * during INIT/INIT-ACK/COOKIE-ECHO handshake
2851f8829a4aSRandall Stewart  */
2852f8829a4aSRandall Stewart 
2853f8829a4aSRandall Stewart /*
2854f8829a4aSRandall Stewart  * processes the (local) addresses in the INIT-ACK chunk
2855f8829a4aSRandall Stewart  */
2856f8829a4aSRandall Stewart static void
2857f8829a4aSRandall Stewart sctp_process_initack_addresses(struct sctp_tcb *stcb, struct mbuf *m,
2858f8829a4aSRandall Stewart     unsigned int offset, unsigned int length)
2859f8829a4aSRandall Stewart {
2860f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
2861f8829a4aSRandall Stewart 	uint16_t plen, ptype;
286242551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2863f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param addr_store;
2864e6194c2eSMichael Tuexen 
2865e6194c2eSMichael Tuexen #ifdef INET6
2866f8829a4aSRandall Stewart 	struct sockaddr_in6 sin6;
2867e6194c2eSMichael Tuexen 
2868e6194c2eSMichael Tuexen #endif
2869e6194c2eSMichael Tuexen #ifdef INET
2870f8829a4aSRandall Stewart 	struct sockaddr_in sin;
2871e6194c2eSMichael Tuexen 
2872e6194c2eSMichael Tuexen #endif
2873f8829a4aSRandall Stewart 	struct sockaddr *sa;
287442551e99SRandall Stewart 	uint32_t vrf_id;
2875f8829a4aSRandall Stewart 
2876ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "processing init-ack addresses\n");
2877ad81507eSRandall Stewart 	if (stcb == NULL)	/* Un-needed check for SA */
2878ad81507eSRandall Stewart 		return;
2879f8829a4aSRandall Stewart 
2880f8829a4aSRandall Stewart 	/* convert to upper bound */
2881f8829a4aSRandall Stewart 	length += offset;
2882f8829a4aSRandall Stewart 
2883f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
2884f8829a4aSRandall Stewart 		return;
2885f8829a4aSRandall Stewart 	}
2886f8829a4aSRandall Stewart 	/* init the addresses */
2887e6194c2eSMichael Tuexen #ifdef INET6
2888f8829a4aSRandall Stewart 	bzero(&sin6, sizeof(sin6));
2889f8829a4aSRandall Stewart 	sin6.sin6_family = AF_INET6;
2890f8829a4aSRandall Stewart 	sin6.sin6_len = sizeof(sin6);
2891f8829a4aSRandall Stewart 	sin6.sin6_port = stcb->rport;
2892e6194c2eSMichael Tuexen #endif
2893f8829a4aSRandall Stewart 
2894e6194c2eSMichael Tuexen #ifdef INET
2895f8829a4aSRandall Stewart 	bzero(&sin, sizeof(sin));
2896f8829a4aSRandall Stewart 	sin.sin_family = AF_INET;
2897e6194c2eSMichael Tuexen 	sin.sin_len = sizeof(sin);
2898f8829a4aSRandall Stewart 	sin.sin_port = stcb->rport;
2899e6194c2eSMichael Tuexen #endif
2900f8829a4aSRandall Stewart 
2901f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
2902e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)
2903e6194c2eSMichael Tuexen 	    sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr),
2904e6194c2eSMichael Tuexen 	    (uint8_t *) & tmp_param);
2905f8829a4aSRandall Stewart 	while (ph != NULL) {
2906f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
2907f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
2908e6194c2eSMichael Tuexen 		switch (ptype) {
2909e6194c2eSMichael Tuexen #ifdef INET6
2910e6194c2eSMichael Tuexen 		case SCTP_IPV6_ADDRESS:
2911e6194c2eSMichael Tuexen 			{
2912f8829a4aSRandall Stewart 				struct sctp_ipv6addr_param *a6p;
2913f8829a4aSRandall Stewart 
2914f8829a4aSRandall Stewart 				/* get the entire IPv6 address param */
2915f8829a4aSRandall Stewart 				a6p = (struct sctp_ipv6addr_param *)
2916f8829a4aSRandall Stewart 				    sctp_m_getptr(m, offset,
2917f8829a4aSRandall Stewart 				    sizeof(struct sctp_ipv6addr_param),
2918f8829a4aSRandall Stewart 				    (uint8_t *) & addr_store);
2919f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv6addr_param) ||
2920f8829a4aSRandall Stewart 				    a6p == NULL) {
2921f8829a4aSRandall Stewart 					return;
2922f8829a4aSRandall Stewart 				}
2923f8829a4aSRandall Stewart 				memcpy(&sin6.sin6_addr, a6p->addr,
2924f8829a4aSRandall Stewart 				    sizeof(struct in6_addr));
2925f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin6;
2926e6194c2eSMichael Tuexen 				break;
2927e6194c2eSMichael Tuexen 			}
2928e6194c2eSMichael Tuexen #endif
2929e6194c2eSMichael Tuexen #ifdef INET
2930e6194c2eSMichael Tuexen 		case SCTP_IPV4_ADDRESS:
2931e6194c2eSMichael Tuexen 			{
2932f8829a4aSRandall Stewart 				struct sctp_ipv4addr_param *a4p;
2933f8829a4aSRandall Stewart 
2934f8829a4aSRandall Stewart 				/* get the entire IPv4 address param */
293542551e99SRandall Stewart 				a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, offset,
293642551e99SRandall Stewart 				    sizeof(struct sctp_ipv4addr_param),
293742551e99SRandall Stewart 				    (uint8_t *) & addr_store);
2938f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv4addr_param) ||
2939f8829a4aSRandall Stewart 				    a4p == NULL) {
2940f8829a4aSRandall Stewart 					return;
2941f8829a4aSRandall Stewart 				}
2942f8829a4aSRandall Stewart 				sin.sin_addr.s_addr = a4p->addr;
2943f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin;
29441d663b46SMichael Tuexen 				break;
2945e6194c2eSMichael Tuexen 			}
2946e6194c2eSMichael Tuexen #endif
2947e6194c2eSMichael Tuexen 		default:
2948f8829a4aSRandall Stewart 			goto next_addr;
2949f8829a4aSRandall Stewart 		}
2950f8829a4aSRandall Stewart 
2951f8829a4aSRandall Stewart 		/* see if this address really (still) exists */
2952bff64a4dSRandall Stewart 		if (stcb) {
2953bff64a4dSRandall Stewart 			vrf_id = stcb->asoc.vrf_id;
2954bff64a4dSRandall Stewart 		} else {
295542551e99SRandall Stewart 			vrf_id = SCTP_DEFAULT_VRFID;
2956bff64a4dSRandall Stewart 		}
29573232788eSRandall Stewart 		sctp_ifa = sctp_find_ifa_by_addr(sa, vrf_id,
29583232788eSRandall Stewart 		    SCTP_ADDR_NOT_LOCKED);
295942551e99SRandall Stewart 		if (sctp_ifa == NULL) {
2960f8829a4aSRandall Stewart 			/* address doesn't exist anymore */
2961f8829a4aSRandall Stewart 			int status;
2962f8829a4aSRandall Stewart 
2963f8829a4aSRandall Stewart 			/* are ASCONFs allowed ? */
2964f8829a4aSRandall Stewart 			if ((sctp_is_feature_on(stcb->sctp_ep,
2965f8829a4aSRandall Stewart 			    SCTP_PCB_FLAGS_DO_ASCONF)) &&
2966f8829a4aSRandall Stewart 			    stcb->asoc.peer_supports_asconf) {
2967f8829a4aSRandall Stewart 				/* queue an ASCONF DEL_IP_ADDRESS */
29683232788eSRandall Stewart 				status = sctp_asconf_queue_sa_delete(stcb, sa);
2969f8829a4aSRandall Stewart 				/*
29701b649582SRandall Stewart 				 * if queued ok, and in correct state, send
29711b649582SRandall Stewart 				 * out the ASCONF.
2972f8829a4aSRandall Stewart 				 */
2973f8829a4aSRandall Stewart 				if (status == 0 &&
2974f8829a4aSRandall Stewart 				    SCTP_GET_STATE(&stcb->asoc) ==
2975f8829a4aSRandall Stewart 				    SCTP_STATE_OPEN) {
29761b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
2977f8829a4aSRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
2978f8829a4aSRandall Stewart 					    stcb->sctp_ep, stcb,
2979f8829a4aSRandall Stewart 					    stcb->asoc.primary_destination);
29801b649582SRandall Stewart #else
2981ca85e948SMichael Tuexen 					sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
29821b649582SRandall Stewart #endif
2983f8829a4aSRandall Stewart 				}
2984f8829a4aSRandall Stewart 			}
2985f8829a4aSRandall Stewart 		}
2986f8829a4aSRandall Stewart next_addr:
2987f8829a4aSRandall Stewart 		/*
2988f8829a4aSRandall Stewart 		 * Sanity check:  Make sure the length isn't 0, otherwise
2989f8829a4aSRandall Stewart 		 * we'll be stuck in this loop for a long time...
2990f8829a4aSRandall Stewart 		 */
2991f8829a4aSRandall Stewart 		if (SCTP_SIZE32(plen) == 0) {
2992ad81507eSRandall Stewart 			SCTP_PRINTF("process_initack_addrs: bad len (%d) type=%xh\n",
2993f8829a4aSRandall Stewart 			    plen, ptype);
2994f8829a4aSRandall Stewart 			return;
2995f8829a4aSRandall Stewart 		}
2996f8829a4aSRandall Stewart 		/* get next parameter */
2997f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
2998f8829a4aSRandall Stewart 		if ((offset + sizeof(struct sctp_paramhdr)) > length)
2999f8829a4aSRandall Stewart 			return;
3000f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
3001f8829a4aSRandall Stewart 		    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
3002f8829a4aSRandall Stewart 	}			/* while */
3003f8829a4aSRandall Stewart }
3004f8829a4aSRandall Stewart 
3005f8829a4aSRandall Stewart /* FIX ME: need to verify return result for v6 address type if v6 disabled */
3006f8829a4aSRandall Stewart /*
3007f8829a4aSRandall Stewart  * checks to see if a specific address is in the initack address list returns
3008f8829a4aSRandall Stewart  * 1 if found, 0 if not
3009f8829a4aSRandall Stewart  */
3010f8829a4aSRandall Stewart static uint32_t
30117215cc1bSMichael Tuexen sctp_addr_in_initack(struct mbuf *m, uint32_t offset, uint32_t length, struct sockaddr *sa)
3012f8829a4aSRandall Stewart {
3013f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
3014f8829a4aSRandall Stewart 	uint16_t plen, ptype;
3015f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param addr_store;
3016e6194c2eSMichael Tuexen 
3017e6194c2eSMichael Tuexen #ifdef INET
3018f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
3019f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *a4p;
3020f8829a4aSRandall Stewart 
3021e6194c2eSMichael Tuexen #endif
3022f8829a4aSRandall Stewart #ifdef INET6
302342551e99SRandall Stewart 	struct sockaddr_in6 *sin6;
3024f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *a6p;
302542551e99SRandall Stewart 	struct sockaddr_in6 sin6_tmp;
3026f8829a4aSRandall Stewart 
3027e6194c2eSMichael Tuexen #endif
3028f8829a4aSRandall Stewart 
3029e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
3030e6194c2eSMichael Tuexen #ifdef INET
3031e6194c2eSMichael Tuexen 	case AF_INET:
3032e6194c2eSMichael Tuexen 		break;
3033e6194c2eSMichael Tuexen #endif
3034f8829a4aSRandall Stewart #ifdef INET6
3035e6194c2eSMichael Tuexen 	case AF_INET6:
3036e6194c2eSMichael Tuexen 		break;
3037e6194c2eSMichael Tuexen #endif
3038e6194c2eSMichael Tuexen 	default:
3039f8829a4aSRandall Stewart 		return (0);
3040e6194c2eSMichael Tuexen 	}
3041f8829a4aSRandall Stewart 
3042ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "find_initack_addr: starting search for ");
3043ad81507eSRandall Stewart 	SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
3044f8829a4aSRandall Stewart 	/* convert to upper bound */
3045f8829a4aSRandall Stewart 	length += offset;
3046f8829a4aSRandall Stewart 
3047f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
3048ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3049ad81507eSRandall Stewart 		    "find_initack_addr: invalid offset?\n");
3050f8829a4aSRandall Stewart 		return (0);
3051f8829a4aSRandall Stewart 	}
3052f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
3053f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
3054f8829a4aSRandall Stewart 	    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
3055f8829a4aSRandall Stewart 	while (ph != NULL) {
3056f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
3057f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
3058e6194c2eSMichael Tuexen 		switch (ptype) {
3059f8829a4aSRandall Stewart #ifdef INET6
3060e6194c2eSMichael Tuexen 		case SCTP_IPV6_ADDRESS:
3061e6194c2eSMichael Tuexen 			if (sa->sa_family == AF_INET6) {
3062e6194c2eSMichael Tuexen 				/* get the entire IPv6 address param */
3063e6194c2eSMichael Tuexen 				if (plen != sizeof(struct sctp_ipv6addr_param)) {
3064e6194c2eSMichael Tuexen 					break;
3065e6194c2eSMichael Tuexen 				}
3066f8829a4aSRandall Stewart 				/* get the entire IPv6 address param */
3067f8829a4aSRandall Stewart 				a6p = (struct sctp_ipv6addr_param *)
3068f8829a4aSRandall Stewart 				    sctp_m_getptr(m, offset,
3069f8829a4aSRandall Stewart 				    sizeof(struct sctp_ipv6addr_param),
3070f8829a4aSRandall Stewart 				    (uint8_t *) & addr_store);
3071e6194c2eSMichael Tuexen 				if (a6p == NULL) {
3072f8829a4aSRandall Stewart 					return (0);
3073f8829a4aSRandall Stewart 				}
3074f8829a4aSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
3075f8829a4aSRandall Stewart 				if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
3076f8829a4aSRandall Stewart 					/* create a copy and clear scope */
3077f8829a4aSRandall Stewart 					memcpy(&sin6_tmp, sin6,
3078f8829a4aSRandall Stewart 					    sizeof(struct sockaddr_in6));
3079f8829a4aSRandall Stewart 					sin6 = &sin6_tmp;
3080f8829a4aSRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
3081f8829a4aSRandall Stewart 				}
3082f8829a4aSRandall Stewart 				if (memcmp(&sin6->sin6_addr, a6p->addr,
3083f8829a4aSRandall Stewart 				    sizeof(struct in6_addr)) == 0) {
3084f8829a4aSRandall Stewart 					/* found it */
3085f8829a4aSRandall Stewart 					return (1);
3086f8829a4aSRandall Stewart 				}
3087e6194c2eSMichael Tuexen 			}
3088e6194c2eSMichael Tuexen 			break;
3089f8829a4aSRandall Stewart #endif				/* INET6 */
3090e6194c2eSMichael Tuexen #ifdef INET
3091e6194c2eSMichael Tuexen 		case SCTP_IPV4_ADDRESS:
3092e6194c2eSMichael Tuexen 			if (sa->sa_family == AF_INET) {
3093e6194c2eSMichael Tuexen 				if (plen != sizeof(struct sctp_ipv4addr_param)) {
3094e6194c2eSMichael Tuexen 					break;
3095e6194c2eSMichael Tuexen 				}
3096f8829a4aSRandall Stewart 				/* get the entire IPv4 address param */
3097e6194c2eSMichael Tuexen 				a4p = (struct sctp_ipv4addr_param *)
3098e6194c2eSMichael Tuexen 				    sctp_m_getptr(m, offset,
3099e6194c2eSMichael Tuexen 				    sizeof(struct sctp_ipv4addr_param),
3100f8829a4aSRandall Stewart 				    (uint8_t *) & addr_store);
3101e6194c2eSMichael Tuexen 				if (a4p == NULL) {
3102f8829a4aSRandall Stewart 					return (0);
3103f8829a4aSRandall Stewart 				}
3104f8829a4aSRandall Stewart 				sin = (struct sockaddr_in *)sa;
3105f8829a4aSRandall Stewart 				if (sin->sin_addr.s_addr == a4p->addr) {
3106f8829a4aSRandall Stewart 					/* found it */
3107f8829a4aSRandall Stewart 					return (1);
3108f8829a4aSRandall Stewart 				}
3109f8829a4aSRandall Stewart 			}
3110e6194c2eSMichael Tuexen 			break;
3111e6194c2eSMichael Tuexen #endif
3112e6194c2eSMichael Tuexen 		default:
3113e6194c2eSMichael Tuexen 			break;
3114e6194c2eSMichael Tuexen 		}
3115f8829a4aSRandall Stewart 		/* get next parameter */
3116f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
3117e6194c2eSMichael Tuexen 		if (offset + sizeof(struct sctp_paramhdr) > length) {
3118f8829a4aSRandall Stewart 			return (0);
3119e6194c2eSMichael Tuexen 		}
3120f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)
3121f8829a4aSRandall Stewart 		    sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr),
3122f8829a4aSRandall Stewart 		    (uint8_t *) & tmp_param);
3123f8829a4aSRandall Stewart 	}			/* while */
3124f8829a4aSRandall Stewart 	/* not found! */
3125f8829a4aSRandall Stewart 	return (0);
3126f8829a4aSRandall Stewart }
3127f8829a4aSRandall Stewart 
3128f8829a4aSRandall Stewart /*
3129f8829a4aSRandall Stewart  * makes sure that the current endpoint local addr list is consistent with
3130f8829a4aSRandall Stewart  * the new association (eg. subset bound, asconf allowed) adds addresses as
3131f8829a4aSRandall Stewart  * necessary
3132f8829a4aSRandall Stewart  */
3133f8829a4aSRandall Stewart static void
3134f8829a4aSRandall Stewart sctp_check_address_list_ep(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3135f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr)
3136f8829a4aSRandall Stewart {
3137f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
3138f8829a4aSRandall Stewart 
3139f8829a4aSRandall Stewart 	/* go through the endpoint list */
3140f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
3141f8829a4aSRandall Stewart 		/* be paranoid and validate the laddr */
3142f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
3143ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
3144ad81507eSRandall Stewart 			    "check_addr_list_ep: laddr->ifa is NULL");
3145f8829a4aSRandall Stewart 			continue;
3146f8829a4aSRandall Stewart 		}
314742551e99SRandall Stewart 		if (laddr->ifa == NULL) {
3148ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "check_addr_list_ep: laddr->ifa->ifa_addr is NULL");
3149f8829a4aSRandall Stewart 			continue;
3150f8829a4aSRandall Stewart 		}
3151f8829a4aSRandall Stewart 		/* do i have it implicitly? */
315242551e99SRandall Stewart 		if (sctp_cmpaddr(&laddr->ifa->address.sa, init_addr)) {
3153f8829a4aSRandall Stewart 			continue;
3154f8829a4aSRandall Stewart 		}
3155f8829a4aSRandall Stewart 		/* check to see if in the init-ack */
31567215cc1bSMichael Tuexen 		if (!sctp_addr_in_initack(m, offset, length, &laddr->ifa->address.sa)) {
3157f8829a4aSRandall Stewart 			/* try to add it */
3158f8829a4aSRandall Stewart 			sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, laddr->ifa,
31593232788eSRandall Stewart 			    SCTP_ADD_IP_ADDRESS, SCTP_ADDR_NOT_LOCKED);
3160f8829a4aSRandall Stewart 		}
3161f8829a4aSRandall Stewart 	}
3162f8829a4aSRandall Stewart }
3163f8829a4aSRandall Stewart 
3164f8829a4aSRandall Stewart /*
3165f8829a4aSRandall Stewart  * makes sure that the current kernel address list is consistent with the new
3166f8829a4aSRandall Stewart  * association (with all addrs bound) adds addresses as necessary
3167f8829a4aSRandall Stewart  */
3168f8829a4aSRandall Stewart static void
3169f8829a4aSRandall Stewart sctp_check_address_list_all(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3170f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3171f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3172f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3173f8829a4aSRandall Stewart {
317442551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
317542551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
317642551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
317742551e99SRandall Stewart 	uint32_t vrf_id;
3178f8829a4aSRandall Stewart 
31797215cc1bSMichael Tuexen #ifdef INET
31807215cc1bSMichael Tuexen 	struct sockaddr_in *sin;
31817215cc1bSMichael Tuexen 
31827215cc1bSMichael Tuexen #endif
31837215cc1bSMichael Tuexen #ifdef INET6
31847215cc1bSMichael Tuexen 	struct sockaddr_in6 *sin6;
31857215cc1bSMichael Tuexen 
31867215cc1bSMichael Tuexen #endif
31877215cc1bSMichael Tuexen 
3188bff64a4dSRandall Stewart 	if (stcb) {
3189bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
3190bff64a4dSRandall Stewart 	} else {
3191ad81507eSRandall Stewart 		return;
3192bff64a4dSRandall Stewart 	}
3193c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
319442551e99SRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
319542551e99SRandall Stewart 	if (vrf == NULL) {
3196c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
319742551e99SRandall Stewart 		return;
319842551e99SRandall Stewart 	}
3199f8829a4aSRandall Stewart 	/* go through all our known interfaces */
320042551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
320142551e99SRandall Stewart 		if (loopback_scope == 0 && SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
3202f8829a4aSRandall Stewart 			/* skip loopback interface */
3203f8829a4aSRandall Stewart 			continue;
3204f8829a4aSRandall Stewart 		}
3205f8829a4aSRandall Stewart 		/* go through each interface address */
320642551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
3207f8829a4aSRandall Stewart 			/* do i have it implicitly? */
320842551e99SRandall Stewart 			if (sctp_cmpaddr(&sctp_ifa->address.sa, init_addr)) {
3209f8829a4aSRandall Stewart 				continue;
3210f8829a4aSRandall Stewart 			}
32117215cc1bSMichael Tuexen 			switch (sctp_ifa->address.sa.sa_family) {
32127215cc1bSMichael Tuexen #ifdef INET
32137215cc1bSMichael Tuexen 			case AF_INET:
32147215cc1bSMichael Tuexen 				sin = (struct sockaddr_in *)&sctp_ifa->address.sin;
32157215cc1bSMichael Tuexen 				if ((ipv4_scope == 0) &&
32167215cc1bSMichael Tuexen 				    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
32177215cc1bSMichael Tuexen 					/* private address not in scope */
32187215cc1bSMichael Tuexen 					continue;
32197215cc1bSMichael Tuexen 				}
32207215cc1bSMichael Tuexen 				break;
32217215cc1bSMichael Tuexen #endif
32227215cc1bSMichael Tuexen #ifdef INET6
32237215cc1bSMichael Tuexen 			case AF_INET6:
32247215cc1bSMichael Tuexen 				sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sin6;
32257215cc1bSMichael Tuexen 				if ((local_scope == 0) &&
32267215cc1bSMichael Tuexen 				    (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))) {
32277215cc1bSMichael Tuexen 					continue;
32287215cc1bSMichael Tuexen 				}
32297215cc1bSMichael Tuexen 				if ((site_scope == 0) &&
32307215cc1bSMichael Tuexen 				    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
32317215cc1bSMichael Tuexen 					continue;
32327215cc1bSMichael Tuexen 				}
32337215cc1bSMichael Tuexen 				break;
32347215cc1bSMichael Tuexen #endif
32357215cc1bSMichael Tuexen 			default:
32367215cc1bSMichael Tuexen 				break;
32377215cc1bSMichael Tuexen 			}
3238f8829a4aSRandall Stewart 			/* check to see if in the init-ack */
32397215cc1bSMichael Tuexen 			if (!sctp_addr_in_initack(m, offset, length, &sctp_ifa->address.sa)) {
3240f8829a4aSRandall Stewart 				/* try to add it */
3241f8829a4aSRandall Stewart 				sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb,
32423232788eSRandall Stewart 				    sctp_ifa, SCTP_ADD_IP_ADDRESS,
32433232788eSRandall Stewart 				    SCTP_ADDR_LOCKED);
3244f8829a4aSRandall Stewart 			}
3245f8829a4aSRandall Stewart 		}		/* end foreach ifa */
3246f8829a4aSRandall Stewart 	}			/* end foreach ifn */
3247c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
3248f8829a4aSRandall Stewart }
3249f8829a4aSRandall Stewart 
3250f8829a4aSRandall Stewart /*
3251f8829a4aSRandall Stewart  * validates an init-ack chunk (from a cookie-echo) with current addresses
3252f8829a4aSRandall Stewart  * adds addresses from the init-ack into our local address list, if needed
3253f8829a4aSRandall Stewart  * queues asconf adds/deletes addresses as needed and makes appropriate list
3254f8829a4aSRandall Stewart  * changes for source address selection m, offset: points to the start of the
3255f8829a4aSRandall Stewart  * address list in an init-ack chunk length: total length of the address
3256f8829a4aSRandall Stewart  * params only init_addr: address where my INIT-ACK was sent from
3257f8829a4aSRandall Stewart  */
3258f8829a4aSRandall Stewart void
3259f8829a4aSRandall Stewart sctp_check_address_list(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3260f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3261f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3262f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3263f8829a4aSRandall Stewart {
3264f8829a4aSRandall Stewart 	/* process the local addresses in the initack */
3265f8829a4aSRandall Stewart 	sctp_process_initack_addresses(stcb, m, offset, length);
3266f8829a4aSRandall Stewart 
3267f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3268f8829a4aSRandall Stewart 		/* bound all case */
3269f8829a4aSRandall Stewart 		sctp_check_address_list_all(stcb, m, offset, length, init_addr,
3270f8829a4aSRandall Stewart 		    local_scope, site_scope, ipv4_scope, loopback_scope);
3271f8829a4aSRandall Stewart 	} else {
3272f8829a4aSRandall Stewart 		/* subset bound case */
3273f8829a4aSRandall Stewart 		if (sctp_is_feature_on(stcb->sctp_ep,
3274f8829a4aSRandall Stewart 		    SCTP_PCB_FLAGS_DO_ASCONF)) {
3275f8829a4aSRandall Stewart 			/* asconf's allowed */
3276f8829a4aSRandall Stewart 			sctp_check_address_list_ep(stcb, m, offset, length,
3277f8829a4aSRandall Stewart 			    init_addr);
3278f8829a4aSRandall Stewart 		}
3279f8829a4aSRandall Stewart 		/* else, no asconfs allowed, so what we sent is what we get */
3280f8829a4aSRandall Stewart 	}
3281f8829a4aSRandall Stewart }
3282f8829a4aSRandall Stewart 
3283f8829a4aSRandall Stewart /*
3284f8829a4aSRandall Stewart  * sctp_bindx() support
3285f8829a4aSRandall Stewart  */
3286f8829a4aSRandall Stewart uint32_t
32873c503c28SRandall Stewart sctp_addr_mgmt_ep_sa(struct sctp_inpcb *inp, struct sockaddr *sa,
328880fefe0aSRandall Stewart     uint32_t type, uint32_t vrf_id, struct sctp_ifa *sctp_ifap)
3289f8829a4aSRandall Stewart {
329042551e99SRandall Stewart 	struct sctp_ifa *ifa;
32912678fe1eSMichael Tuexen 	struct sctp_laddr *laddr, *nladdr;
3292f8829a4aSRandall Stewart 
329342551e99SRandall Stewart 	if (sa->sa_len == 0) {
3294c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
3295f8829a4aSRandall Stewart 		return (EINVAL);
329642551e99SRandall Stewart 	}
329780fefe0aSRandall Stewart 	if (sctp_ifap) {
329880fefe0aSRandall Stewart 		ifa = sctp_ifap;
329980fefe0aSRandall Stewart 	} else if (type == SCTP_ADD_IP_ADDRESS) {
330042551e99SRandall Stewart 		/* For an add the address MUST be on the system */
3301851b7298SRandall Stewart 		ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
330242551e99SRandall Stewart 	} else if (type == SCTP_DEL_IP_ADDRESS) {
330342551e99SRandall Stewart 		/* For a delete we need to find it in the inp */
3304851b7298SRandall Stewart 		ifa = sctp_find_ifa_in_ep(inp, sa, SCTP_ADDR_NOT_LOCKED);
330542551e99SRandall Stewart 	} else {
330642551e99SRandall Stewart 		ifa = NULL;
330742551e99SRandall Stewart 	}
3308f8829a4aSRandall Stewart 	if (ifa != NULL) {
330942551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
331042551e99SRandall Stewart 			sctp_add_local_addr_ep(inp, ifa, type);
331142551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
33123c503c28SRandall Stewart 			if (inp->laddr_count < 2) {
33133c503c28SRandall Stewart 				/* can't delete the last local address */
3314c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
33153c503c28SRandall Stewart 				return (EINVAL);
33163c503c28SRandall Stewart 			}
33173c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
33183c503c28SRandall Stewart 			    sctp_nxt_addr) {
331942551e99SRandall Stewart 				if (ifa == laddr->ifa) {
332042551e99SRandall Stewart 					/* Mark in the delete */
332142551e99SRandall Stewart 					laddr->action = type;
332242551e99SRandall Stewart 				}
332342551e99SRandall Stewart 			}
332442551e99SRandall Stewart 		}
33252678fe1eSMichael Tuexen 		if (LIST_EMPTY(&inp->sctp_asoc_list)) {
332687b4fcd3SMichael Tuexen 			/*
332787b4fcd3SMichael Tuexen 			 * There is no need to start the iterator if the inp
332887b4fcd3SMichael Tuexen 			 * has no associations.
332987b4fcd3SMichael Tuexen 			 */
33302678fe1eSMichael Tuexen 			if (type == SCTP_DEL_IP_ADDRESS) {
33312678fe1eSMichael Tuexen 				LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) {
33322678fe1eSMichael Tuexen 					if (laddr->ifa == ifa) {
33332678fe1eSMichael Tuexen 						sctp_del_local_addr_ep(inp, ifa);
33342678fe1eSMichael Tuexen 					}
33352678fe1eSMichael Tuexen 				}
33362678fe1eSMichael Tuexen 			}
33372678fe1eSMichael Tuexen 		} else {
333887b4fcd3SMichael Tuexen 			struct sctp_asconf_iterator *asc;
333987b4fcd3SMichael Tuexen 			struct sctp_laddr *wi;
334087b4fcd3SMichael Tuexen 
334187b4fcd3SMichael Tuexen 			SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
334287b4fcd3SMichael Tuexen 			    sizeof(struct sctp_asconf_iterator),
334387b4fcd3SMichael Tuexen 			    SCTP_M_ASC_IT);
334487b4fcd3SMichael Tuexen 			if (asc == NULL) {
334587b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
334687b4fcd3SMichael Tuexen 				return (ENOMEM);
334787b4fcd3SMichael Tuexen 			}
334887b4fcd3SMichael Tuexen 			wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
334987b4fcd3SMichael Tuexen 			if (wi == NULL) {
335087b4fcd3SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
335187b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
335287b4fcd3SMichael Tuexen 				return (ENOMEM);
335387b4fcd3SMichael Tuexen 			}
335442551e99SRandall Stewart 			LIST_INIT(&asc->list_of_work);
335542551e99SRandall Stewart 			asc->cnt = 1;
335642551e99SRandall Stewart 			SCTP_INCR_LADDR_COUNT();
335742551e99SRandall Stewart 			wi->ifa = ifa;
335842551e99SRandall Stewart 			wi->action = type;
335942551e99SRandall Stewart 			atomic_add_int(&ifa->refcount, 1);
336042551e99SRandall Stewart 			LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
33611b649582SRandall Stewart 			(void)sctp_initiate_iterator(sctp_asconf_iterator_ep,
33621b649582SRandall Stewart 			    sctp_asconf_iterator_stcb,
33631b649582SRandall Stewart 			    sctp_asconf_iterator_ep_end,
336442551e99SRandall Stewart 			    SCTP_PCB_ANY_FLAGS,
33653c503c28SRandall Stewart 			    SCTP_PCB_ANY_FEATURES,
33661b649582SRandall Stewart 			    SCTP_ASOC_ANY_STATE,
33671b649582SRandall Stewart 			    (void *)asc, 0,
33681b649582SRandall Stewart 			    sctp_asconf_iterator_end, inp, 0);
336987b4fcd3SMichael Tuexen 		}
337087b4fcd3SMichael Tuexen 		return (0);
3371f8829a4aSRandall Stewart 	} else {
3372f8829a4aSRandall Stewart 		/* invalid address! */
3373c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EADDRNOTAVAIL);
3374f8829a4aSRandall Stewart 		return (EADDRNOTAVAIL);
3375f8829a4aSRandall Stewart 	}
3376f8829a4aSRandall Stewart }
3377830d754dSRandall Stewart 
3378830d754dSRandall Stewart void
3379830d754dSRandall Stewart sctp_asconf_send_nat_state_update(struct sctp_tcb *stcb,
3380830d754dSRandall Stewart     struct sctp_nets *net)
3381830d754dSRandall Stewart {
3382830d754dSRandall Stewart 	struct sctp_asconf_addr *aa;
3383830d754dSRandall Stewart 	struct sctp_ifa *sctp_ifap;
3384830d754dSRandall Stewart 	struct sctp_asconf_tag_param *vtag;
3385e6194c2eSMichael Tuexen 
3386e6194c2eSMichael Tuexen #ifdef INET
3387830d754dSRandall Stewart 	struct sockaddr_in *to;
3388830d754dSRandall Stewart 
3389e6194c2eSMichael Tuexen #endif
3390830d754dSRandall Stewart #ifdef INET6
3391830d754dSRandall Stewart 	struct sockaddr_in6 *to6;
3392830d754dSRandall Stewart 
3393830d754dSRandall Stewart #endif
3394830d754dSRandall Stewart 	if (net == NULL) {
3395830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing net\n");
3396830d754dSRandall Stewart 		return;
3397830d754dSRandall Stewart 	}
3398830d754dSRandall Stewart 	if (stcb == NULL) {
3399830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing stcb\n");
3400830d754dSRandall Stewart 		return;
3401830d754dSRandall Stewart 	}
3402830d754dSRandall Stewart 	/*
3403830d754dSRandall Stewart 	 * Need to have in the asconf: - vtagparam(my_vtag/peer_vtag) -
3404830d754dSRandall Stewart 	 * add(0.0.0.0) - del(0.0.0.0) - Any global addresses add(addr)
3405830d754dSRandall Stewart 	 */
3406830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3407830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3408830d754dSRandall Stewart 	if (aa == NULL) {
3409830d754dSRandall Stewart 		/* didn't get memory */
3410830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3411830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3412830d754dSRandall Stewart 		return;
3413830d754dSRandall Stewart 	}
3414830d754dSRandall Stewart 	aa->special_del = 0;
3415830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3416830d754dSRandall Stewart 	/* top level elements are "networked" during send */
3417830d754dSRandall Stewart 	aa->ifa = NULL;
3418830d754dSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
3419830d754dSRandall Stewart 	vtag = (struct sctp_asconf_tag_param *)&aa->ap.aph;
3420830d754dSRandall Stewart 	vtag->aph.ph.param_type = SCTP_NAT_VTAGS;
3421830d754dSRandall Stewart 	vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param);
3422830d754dSRandall Stewart 	vtag->local_vtag = htonl(stcb->asoc.my_vtag);
3423830d754dSRandall Stewart 	vtag->remote_vtag = htonl(stcb->asoc.peer_vtag);
3424830d754dSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3425830d754dSRandall Stewart 
3426830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3427830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3428830d754dSRandall Stewart 	if (aa == NULL) {
3429830d754dSRandall Stewart 		/* didn't get memory */
3430830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3431830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3432830d754dSRandall Stewart 		return;
3433830d754dSRandall Stewart 	}
3434830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3435830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3436830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3437e6194c2eSMichael Tuexen 	switch (net->ro._l_addr.sa.sa_family) {
3438e6194c2eSMichael Tuexen #ifdef INET
3439e6194c2eSMichael Tuexen 	case AF_INET:
3440830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3441830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3442830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3443830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3444830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3445830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3446e6194c2eSMichael Tuexen 		break;
3447e6194c2eSMichael Tuexen #endif
3448830d754dSRandall Stewart #ifdef INET6
3449e6194c2eSMichael Tuexen 	case AF_INET6:
3450830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3451830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3452830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3453830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3454830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3455830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3456e6194c2eSMichael Tuexen 		break;
3457e6194c2eSMichael Tuexen #endif
3458830d754dSRandall Stewart 	}
3459830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3460830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3461830d754dSRandall Stewart 	if (aa == NULL) {
3462830d754dSRandall Stewart 		/* didn't get memory */
3463830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3464830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3465830d754dSRandall Stewart 		return;
3466830d754dSRandall Stewart 	}
3467830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3468830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3469830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3470e6194c2eSMichael Tuexen 	switch (net->ro._l_addr.sa.sa_family) {
3471e6194c2eSMichael Tuexen #ifdef INET
3472e6194c2eSMichael Tuexen 	case AF_INET:
3473830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3474830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3475830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3476830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3477830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3478830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3479e6194c2eSMichael Tuexen 		break;
3480e6194c2eSMichael Tuexen #endif
3481830d754dSRandall Stewart #ifdef INET6
3482e6194c2eSMichael Tuexen 	case AF_INET6:
3483830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
3484830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3485830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3486830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3487830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3488830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3489e6194c2eSMichael Tuexen 		break;
3490e6194c2eSMichael Tuexen #endif
3491830d754dSRandall Stewart 	}
3492830d754dSRandall Stewart 	/* Now we must hunt the addresses and add all global addresses */
3493830d754dSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3494830d754dSRandall Stewart 		struct sctp_vrf *vrf = NULL;
3495830d754dSRandall Stewart 		struct sctp_ifn *sctp_ifnp;
3496830d754dSRandall Stewart 		uint32_t vrf_id;
3497830d754dSRandall Stewart 
3498830d754dSRandall Stewart 		vrf_id = stcb->sctp_ep->def_vrf_id;
3499830d754dSRandall Stewart 		vrf = sctp_find_vrf(vrf_id);
3500830d754dSRandall Stewart 		if (vrf == NULL) {
3501830d754dSRandall Stewart 			goto skip_rest;
3502830d754dSRandall Stewart 		}
3503830d754dSRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
3504830d754dSRandall Stewart 		LIST_FOREACH(sctp_ifnp, &vrf->ifnlist, next_ifn) {
3505830d754dSRandall Stewart 			LIST_FOREACH(sctp_ifap, &sctp_ifnp->ifalist, next_ifa) {
3506e6194c2eSMichael Tuexen 				switch (sctp_ifap->address.sa.sa_family) {
3507e6194c2eSMichael Tuexen #ifdef INET
3508e6194c2eSMichael Tuexen 				case AF_INET:
3509830d754dSRandall Stewart 					to = &sctp_ifap->address.sin;
3510830d754dSRandall Stewart 					if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3511830d754dSRandall Stewart 						continue;
3512830d754dSRandall Stewart 					}
3513830d754dSRandall Stewart 					if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3514830d754dSRandall Stewart 						continue;
3515830d754dSRandall Stewart 					}
3516e6194c2eSMichael Tuexen 					break;
3517e6194c2eSMichael Tuexen #endif
3518830d754dSRandall Stewart #ifdef INET6
3519e6194c2eSMichael Tuexen 				case AF_INET6:
3520830d754dSRandall Stewart 					to6 = &sctp_ifap->address.sin6;
3521830d754dSRandall Stewart 					if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3522830d754dSRandall Stewart 						continue;
3523830d754dSRandall Stewart 					}
3524830d754dSRandall Stewart 					if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3525830d754dSRandall Stewart 						continue;
3526830d754dSRandall Stewart 					}
3527e6194c2eSMichael Tuexen 					break;
3528830d754dSRandall Stewart #endif
3529e6194c2eSMichael Tuexen 				default:
3530e6194c2eSMichael Tuexen 					continue;
3531e6194c2eSMichael Tuexen 				}
3532830d754dSRandall Stewart 				sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3533830d754dSRandall Stewart 			}
3534830d754dSRandall Stewart 		}
3535830d754dSRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
3536830d754dSRandall Stewart 	} else {
3537830d754dSRandall Stewart 		struct sctp_laddr *laddr;
3538830d754dSRandall Stewart 
3539830d754dSRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
3540830d754dSRandall Stewart 			if (laddr->ifa == NULL) {
3541830d754dSRandall Stewart 				continue;
3542830d754dSRandall Stewart 			}
3543830d754dSRandall Stewart 			if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED)
3544830d754dSRandall Stewart 				/*
3545830d754dSRandall Stewart 				 * Address being deleted by the system, dont
3546830d754dSRandall Stewart 				 * list.
3547830d754dSRandall Stewart 				 */
3548830d754dSRandall Stewart 				continue;
3549830d754dSRandall Stewart 			if (laddr->action == SCTP_DEL_IP_ADDRESS) {
3550830d754dSRandall Stewart 				/*
3551830d754dSRandall Stewart 				 * Address being deleted on this ep don't
3552830d754dSRandall Stewart 				 * list.
3553830d754dSRandall Stewart 				 */
3554830d754dSRandall Stewart 				continue;
3555830d754dSRandall Stewart 			}
3556830d754dSRandall Stewart 			sctp_ifap = laddr->ifa;
3557e6194c2eSMichael Tuexen 			switch (sctp_ifap->address.sa.sa_family) {
3558e6194c2eSMichael Tuexen #ifdef INET
3559e6194c2eSMichael Tuexen 			case AF_INET:
3560830d754dSRandall Stewart 				to = &sctp_ifap->address.sin;
3561830d754dSRandall Stewart 				if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3562830d754dSRandall Stewart 					continue;
3563830d754dSRandall Stewart 				}
3564830d754dSRandall Stewart 				if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3565830d754dSRandall Stewart 					continue;
3566830d754dSRandall Stewart 				}
3567e6194c2eSMichael Tuexen 				break;
3568e6194c2eSMichael Tuexen #endif
3569830d754dSRandall Stewart #ifdef INET6
3570e6194c2eSMichael Tuexen 			case AF_INET6:
3571830d754dSRandall Stewart 				to6 = &sctp_ifap->address.sin6;
3572830d754dSRandall Stewart 				if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3573830d754dSRandall Stewart 					continue;
3574830d754dSRandall Stewart 				}
3575830d754dSRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3576830d754dSRandall Stewart 					continue;
3577830d754dSRandall Stewart 				}
3578e6194c2eSMichael Tuexen 				break;
3579830d754dSRandall Stewart #endif
3580e6194c2eSMichael Tuexen 			default:
3581e6194c2eSMichael Tuexen 				continue;
3582e6194c2eSMichael Tuexen 			}
3583830d754dSRandall Stewart 			sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3584830d754dSRandall Stewart 		}
3585830d754dSRandall Stewart 	}
3586830d754dSRandall Stewart skip_rest:
3587830d754dSRandall Stewart 	/* Now we must send the asconf into the queue */
3588ca85e948SMichael Tuexen 	sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
3589830d754dSRandall Stewart }
3590