1f8829a4aSRandall Stewart /*- 2b1006367SRandall Stewart * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved. 35d40cf5dSRandall Stewart * Copyright (c) 2008-2011, by Randall Stewart. All rights reserved. 45d40cf5dSRandall Stewart * Copyright (c) 2008-2011, by Michael Tuexen. All rights reserved. 5f8829a4aSRandall Stewart * 6f8829a4aSRandall Stewart * Redistribution and use in source and binary forms, with or without 7f8829a4aSRandall Stewart * modification, are permitted provided that the following conditions are met: 8f8829a4aSRandall Stewart * 9f8829a4aSRandall Stewart * a) Redistributions of source code must retain the above copyright notice, 10f8829a4aSRandall Stewart * this list of conditions and the following disclaimer. 11f8829a4aSRandall Stewart * 12f8829a4aSRandall Stewart * b) Redistributions in binary form must reproduce the above copyright 13f8829a4aSRandall Stewart * notice, this list of conditions and the following disclaimer in 14f8829a4aSRandall Stewart * the documentation and/or other materials provided with the distribution. 15f8829a4aSRandall Stewart * 16f8829a4aSRandall Stewart * c) Neither the name of Cisco Systems, Inc. nor the names of its 17f8829a4aSRandall Stewart * contributors may be used to endorse or promote products derived 18f8829a4aSRandall Stewart * from this software without specific prior written permission. 19f8829a4aSRandall Stewart * 20f8829a4aSRandall Stewart * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 21f8829a4aSRandall Stewart * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 22f8829a4aSRandall Stewart * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23f8829a4aSRandall Stewart * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 24f8829a4aSRandall Stewart * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 25f8829a4aSRandall Stewart * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 26f8829a4aSRandall Stewart * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 27f8829a4aSRandall Stewart * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 28f8829a4aSRandall Stewart * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29f8829a4aSRandall Stewart * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 30f8829a4aSRandall Stewart * THE POSSIBILITY OF SUCH DAMAGE. 31f8829a4aSRandall Stewart */ 32f8829a4aSRandall Stewart 33f8829a4aSRandall Stewart /* $KAME: sctp_asconf.c,v 1.24 2005/03/06 16:04:16 itojun Exp $ */ 34f8829a4aSRandall Stewart 35f8829a4aSRandall Stewart #include <sys/cdefs.h> 36cef8ad06SRandall Stewart __FBSDID("$FreeBSD$"); 37f8829a4aSRandall Stewart #include <netinet/sctp_os.h> 38f8829a4aSRandall Stewart #include <netinet/sctp_var.h> 3942551e99SRandall Stewart #include <netinet/sctp_sysctl.h> 40f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h> 41f8829a4aSRandall Stewart #include <netinet/sctp_header.h> 42f8829a4aSRandall Stewart #include <netinet/sctputil.h> 43f8829a4aSRandall Stewart #include <netinet/sctp_output.h> 44f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h> 45851b7298SRandall Stewart #include <netinet/sctp_timer.h> 46f8829a4aSRandall Stewart 47f8829a4aSRandall Stewart /* 48f8829a4aSRandall Stewart * debug flags: 49f8829a4aSRandall Stewart * SCTP_DEBUG_ASCONF1: protocol info, general info and errors 50f8829a4aSRandall Stewart * SCTP_DEBUG_ASCONF2: detailed info 51f8829a4aSRandall Stewart */ 52f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 53f8829a4aSRandall Stewart #endif /* SCTP_DEBUG */ 54f8829a4aSRandall Stewart 55f8829a4aSRandall Stewart 56ad81507eSRandall Stewart static void 57f8829a4aSRandall Stewart sctp_asconf_get_source_ip(struct mbuf *m, struct sockaddr *sa) 58f8829a4aSRandall Stewart { 59f8829a4aSRandall Stewart struct ip *iph; 60e6194c2eSMichael Tuexen 61e6194c2eSMichael Tuexen #ifdef INET 62f8829a4aSRandall Stewart struct sockaddr_in *sin; 63f8829a4aSRandall Stewart 64e6194c2eSMichael Tuexen #endif 65f8829a4aSRandall Stewart #ifdef INET6 66f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 67f8829a4aSRandall Stewart 68f8829a4aSRandall Stewart #endif 69f8829a4aSRandall Stewart 70f8829a4aSRandall Stewart iph = mtod(m, struct ip *); 71e6194c2eSMichael Tuexen switch (iph->ip_v) { 72e6194c2eSMichael Tuexen #ifdef INET 73e6194c2eSMichael Tuexen case IPVERSION: 74e6194c2eSMichael Tuexen { 75f8829a4aSRandall Stewart /* IPv4 source */ 76f8829a4aSRandall Stewart sin = (struct sockaddr_in *)sa; 77f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 78f8829a4aSRandall Stewart sin->sin_family = AF_INET; 79f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 80f8829a4aSRandall Stewart sin->sin_port = 0; 81f8829a4aSRandall Stewart sin->sin_addr.s_addr = iph->ip_src.s_addr; 82e6194c2eSMichael Tuexen break; 83f8829a4aSRandall Stewart } 84e6194c2eSMichael Tuexen #endif 85f8829a4aSRandall Stewart #ifdef INET6 86e6194c2eSMichael Tuexen case (IPV6_VERSION >> 4): 87e6194c2eSMichael Tuexen { 88f8829a4aSRandall Stewart /* IPv6 source */ 89f8829a4aSRandall Stewart struct ip6_hdr *ip6; 90f8829a4aSRandall Stewart 91f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 92f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 93f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 94f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 95f8829a4aSRandall Stewart sin6->sin6_port = 0; 96f8829a4aSRandall Stewart ip6 = mtod(m, struct ip6_hdr *); 97f8829a4aSRandall Stewart sin6->sin6_addr = ip6->ip6_src; 98e6194c2eSMichael Tuexen break; 99f8829a4aSRandall Stewart } 100f8829a4aSRandall Stewart #endif /* INET6 */ 101e6194c2eSMichael Tuexen default: 102e6194c2eSMichael Tuexen break; 103e6194c2eSMichael Tuexen } 104ad81507eSRandall Stewart return; 105f8829a4aSRandall Stewart } 106f8829a4aSRandall Stewart 107f8829a4aSRandall Stewart /* 108f8829a4aSRandall Stewart * draft-ietf-tsvwg-addip-sctp 109f8829a4aSRandall Stewart * 110f8829a4aSRandall Stewart * An ASCONF parameter queue exists per asoc which holds the pending address 111f8829a4aSRandall Stewart * operations. Lists are updated upon receipt of ASCONF-ACK. 112f8829a4aSRandall Stewart * 11318e198d3SRandall Stewart * A restricted_addrs list exists per assoc to hold local addresses that are 11418e198d3SRandall Stewart * not (yet) usable by the assoc as a source address. These addresses are 11518e198d3SRandall Stewart * either pending an ASCONF operation (and exist on the ASCONF parameter 11618e198d3SRandall Stewart * queue), or they are permanently restricted (the peer has returned an 11718e198d3SRandall Stewart * ERROR indication to an ASCONF(ADD), or the peer does not support ASCONF). 11818e198d3SRandall Stewart * 119f8829a4aSRandall Stewart * Deleted addresses are always immediately removed from the lists as they will 120f8829a4aSRandall Stewart * (shortly) no longer exist in the kernel. We send ASCONFs as a courtesy, 121f8829a4aSRandall Stewart * only if allowed. 122f8829a4aSRandall Stewart */ 123f8829a4aSRandall Stewart 124f8829a4aSRandall Stewart /* 12518e198d3SRandall Stewart * ASCONF parameter processing. 12618e198d3SRandall Stewart * response_required: set if a reply is required (eg. SUCCESS_REPORT). 12718e198d3SRandall Stewart * returns a mbuf to an "error" response parameter or NULL/"success" if ok. 12818e198d3SRandall Stewart * FIX: allocating this many mbufs on the fly is pretty inefficient... 129f8829a4aSRandall Stewart */ 130f8829a4aSRandall Stewart static struct mbuf * 131f8829a4aSRandall Stewart sctp_asconf_success_response(uint32_t id) 132f8829a4aSRandall Stewart { 133f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 134f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 135f8829a4aSRandall Stewart 136f8829a4aSRandall Stewart m_reply = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_paramhdr), 137f8829a4aSRandall Stewart 0, M_DONTWAIT, 1, MT_DATA); 138f8829a4aSRandall Stewart if (m_reply == NULL) { 139ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 140ad81507eSRandall Stewart "asconf_success_response: couldn't get mbuf!\n"); 141*60990c0cSMichael Tuexen return (NULL); 142f8829a4aSRandall Stewart } 143f8829a4aSRandall Stewart aph = mtod(m_reply, struct sctp_asconf_paramhdr *); 144f8829a4aSRandall Stewart aph->correlation_id = id; 145f8829a4aSRandall Stewart aph->ph.param_type = htons(SCTP_SUCCESS_REPORT); 146f8829a4aSRandall Stewart aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr); 147139bc87fSRandall Stewart SCTP_BUF_LEN(m_reply) = aph->ph.param_length; 148f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 149f8829a4aSRandall Stewart 150*60990c0cSMichael Tuexen return (m_reply); 151f8829a4aSRandall Stewart } 152f8829a4aSRandall Stewart 153f8829a4aSRandall Stewart static struct mbuf * 154f8829a4aSRandall Stewart sctp_asconf_error_response(uint32_t id, uint16_t cause, uint8_t * error_tlv, 155f8829a4aSRandall Stewart uint16_t tlv_length) 156f8829a4aSRandall Stewart { 157f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 158f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 159f8829a4aSRandall Stewart struct sctp_error_cause *error; 160f8829a4aSRandall Stewart uint8_t *tlv; 161f8829a4aSRandall Stewart 162f8829a4aSRandall Stewart m_reply = sctp_get_mbuf_for_msg((sizeof(struct sctp_asconf_paramhdr) + 163f8829a4aSRandall Stewart tlv_length + 164f8829a4aSRandall Stewart sizeof(struct sctp_error_cause)), 165f8829a4aSRandall Stewart 0, M_DONTWAIT, 1, MT_DATA); 166f8829a4aSRandall Stewart if (m_reply == NULL) { 167ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 168ad81507eSRandall Stewart "asconf_error_response: couldn't get mbuf!\n"); 169*60990c0cSMichael Tuexen return (NULL); 170f8829a4aSRandall Stewart } 171f8829a4aSRandall Stewart aph = mtod(m_reply, struct sctp_asconf_paramhdr *); 172f8829a4aSRandall Stewart error = (struct sctp_error_cause *)(aph + 1); 173f8829a4aSRandall Stewart 174f8829a4aSRandall Stewart aph->correlation_id = id; 175f8829a4aSRandall Stewart aph->ph.param_type = htons(SCTP_ERROR_CAUSE_IND); 176f8829a4aSRandall Stewart error->code = htons(cause); 177f8829a4aSRandall Stewart error->length = tlv_length + sizeof(struct sctp_error_cause); 178f8829a4aSRandall Stewart aph->ph.param_length = error->length + 179f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr); 180f8829a4aSRandall Stewart 181f8829a4aSRandall Stewart if (aph->ph.param_length > MLEN) { 182ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 183ad81507eSRandall Stewart "asconf_error_response: tlv_length (%xh) too big\n", 184f8829a4aSRandall Stewart tlv_length); 185f8829a4aSRandall Stewart sctp_m_freem(m_reply); /* discard */ 186*60990c0cSMichael Tuexen return (NULL); 187f8829a4aSRandall Stewart } 188f8829a4aSRandall Stewart if (error_tlv != NULL) { 189f8829a4aSRandall Stewart tlv = (uint8_t *) (error + 1); 190f8829a4aSRandall Stewart memcpy(tlv, error_tlv, tlv_length); 191f8829a4aSRandall Stewart } 192139bc87fSRandall Stewart SCTP_BUF_LEN(m_reply) = aph->ph.param_length; 193f8829a4aSRandall Stewart error->length = htons(error->length); 194f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 195f8829a4aSRandall Stewart 196*60990c0cSMichael Tuexen return (m_reply); 197f8829a4aSRandall Stewart } 198f8829a4aSRandall Stewart 199f8829a4aSRandall Stewart static struct mbuf * 200f8829a4aSRandall Stewart sctp_process_asconf_add_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph, 201ca85e948SMichael Tuexen struct sctp_tcb *stcb, int send_hb, int response_required) 202f8829a4aSRandall Stewart { 203ca85e948SMichael Tuexen struct sctp_nets *net; 204f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 205f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 206e6194c2eSMichael Tuexen struct sctp_paramhdr *ph; 207f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 208f8829a4aSRandall Stewart struct sockaddr *sa; 209f8829a4aSRandall Stewart int zero_address = 0; 21092776dfdSMichael Tuexen int bad_address = 0; 211f8829a4aSRandall Stewart 212e6194c2eSMichael Tuexen #ifdef INET 213e6194c2eSMichael Tuexen struct sockaddr_in *sin; 214e6194c2eSMichael Tuexen struct sctp_ipv4addr_param *v4addr; 215e6194c2eSMichael Tuexen 216e6194c2eSMichael Tuexen #endif 217f8829a4aSRandall Stewart #ifdef INET6 218f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 219f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 220f8829a4aSRandall Stewart 221e6194c2eSMichael Tuexen #endif 222f8829a4aSRandall Stewart 223f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 224e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *)(aph + 1); 225e6194c2eSMichael Tuexen param_type = ntohs(ph->param_type); 226e6194c2eSMichael Tuexen param_length = ntohs(ph->param_length); 227f8829a4aSRandall Stewart 228f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 229f8829a4aSRandall Stewart switch (param_type) { 230e6194c2eSMichael Tuexen #ifdef INET 231f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 232f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 233f8829a4aSRandall Stewart /* invalid param size */ 234*60990c0cSMichael Tuexen return (NULL); 235f8829a4aSRandall Stewart } 236e6194c2eSMichael Tuexen v4addr = (struct sctp_ipv4addr_param *)ph; 237f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 238f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 239f8829a4aSRandall Stewart sin->sin_family = AF_INET; 240f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 241f8829a4aSRandall Stewart sin->sin_port = stcb->rport; 242f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 24392776dfdSMichael Tuexen if ((sin->sin_addr.s_addr == INADDR_BROADCAST) || 24492776dfdSMichael Tuexen IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) { 2453657c405SMichael Tuexen bad_address = 1; 24692776dfdSMichael Tuexen } 247f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 248f8829a4aSRandall Stewart zero_address = 1; 249ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding "); 250ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 251f8829a4aSRandall Stewart break; 252e6194c2eSMichael Tuexen #endif 253f8829a4aSRandall Stewart #ifdef INET6 254e6194c2eSMichael Tuexen case SCTP_IPV6_ADDRESS: 255f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 256f8829a4aSRandall Stewart /* invalid param size */ 257*60990c0cSMichael Tuexen return (NULL); 258f8829a4aSRandall Stewart } 259e6194c2eSMichael Tuexen v6addr = (struct sctp_ipv6addr_param *)ph; 260f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 261f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 262f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 263f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 264f8829a4aSRandall Stewart sin6->sin6_port = stcb->rport; 265f8829a4aSRandall Stewart memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr, 266f8829a4aSRandall Stewart sizeof(struct in6_addr)); 26792776dfdSMichael Tuexen if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) { 26892776dfdSMichael Tuexen bad_address = 1; 26992776dfdSMichael Tuexen } 270f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 271f8829a4aSRandall Stewart zero_address = 1; 272ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding "); 273ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 274f8829a4aSRandall Stewart break; 275e6194c2eSMichael Tuexen #endif 276f8829a4aSRandall Stewart default: 277f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 27892776dfdSMichael Tuexen SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph, 279f8829a4aSRandall Stewart aparam_length); 280*60990c0cSMichael Tuexen return (m_reply); 281f8829a4aSRandall Stewart } /* end switch */ 282f8829a4aSRandall Stewart 283f8829a4aSRandall Stewart /* if 0.0.0.0/::0, add the source address instead */ 284b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 285f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_source; 286f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, sa); 287ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 288ad81507eSRandall Stewart "process_asconf_add_ip: using source addr "); 289ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 290f8829a4aSRandall Stewart } 291f8829a4aSRandall Stewart /* add the address */ 29292776dfdSMichael Tuexen if (bad_address) { 29392776dfdSMichael Tuexen m_reply = sctp_asconf_error_response(aph->correlation_id, 29492776dfdSMichael Tuexen SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph, 29592776dfdSMichael Tuexen aparam_length); 29692776dfdSMichael Tuexen } else if (sctp_add_remote_addr(stcb, sa, &net, SCTP_DONOT_SETSCOPE, 297a5d547adSRandall Stewart SCTP_ADDR_DYNAMIC_ADDED) != 0) { 298ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 299ad81507eSRandall Stewart "process_asconf_add_ip: error adding address\n"); 300f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 301f8829a4aSRandall Stewart SCTP_CAUSE_RESOURCE_SHORTAGE, (uint8_t *) aph, 302f8829a4aSRandall Stewart aparam_length); 303f8829a4aSRandall Stewart } else { 304f8829a4aSRandall Stewart /* notify upper layer */ 305ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_ADD_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 306f8829a4aSRandall Stewart if (response_required) { 307f8829a4aSRandall Stewart m_reply = 308f8829a4aSRandall Stewart sctp_asconf_success_response(aph->correlation_id); 309f8829a4aSRandall Stewart } 310ca85e948SMichael Tuexen sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, stcb->sctp_ep, stcb, net); 3113c503c28SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, 312ca85e948SMichael Tuexen stcb, net); 313ca85e948SMichael Tuexen if (send_hb) { 314ca85e948SMichael Tuexen sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 315ca85e948SMichael Tuexen } 316f8829a4aSRandall Stewart } 317*60990c0cSMichael Tuexen return (m_reply); 318f8829a4aSRandall Stewart } 319f8829a4aSRandall Stewart 320f8829a4aSRandall Stewart static int 3211b649582SRandall Stewart sctp_asconf_del_remote_addrs_except(struct sctp_tcb *stcb, struct sockaddr *src) 322f8829a4aSRandall Stewart { 323f8829a4aSRandall Stewart struct sctp_nets *src_net, *net; 324f8829a4aSRandall Stewart 325f8829a4aSRandall Stewart /* make sure the source address exists as a destination net */ 326f8829a4aSRandall Stewart src_net = sctp_findnet(stcb, src); 327f8829a4aSRandall Stewart if (src_net == NULL) { 328f8829a4aSRandall Stewart /* not found */ 329*60990c0cSMichael Tuexen return (-1); 330f8829a4aSRandall Stewart } 331f8829a4aSRandall Stewart /* delete all destination addresses except the source */ 332f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 333f8829a4aSRandall Stewart if (net != src_net) { 334f8829a4aSRandall Stewart /* delete this address */ 335f8829a4aSRandall Stewart sctp_remove_net(stcb, net); 336ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 337ad81507eSRandall Stewart "asconf_del_remote_addrs_except: deleting "); 338ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, 339ad81507eSRandall Stewart (struct sockaddr *)&net->ro._l_addr); 340f8829a4aSRandall Stewart /* notify upper layer */ 341f8829a4aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, 342ceaad40aSRandall Stewart (struct sockaddr *)&net->ro._l_addr, SCTP_SO_NOT_LOCKED); 343f8829a4aSRandall Stewart } 344f8829a4aSRandall Stewart } 345*60990c0cSMichael Tuexen return (0); 346f8829a4aSRandall Stewart } 347f8829a4aSRandall Stewart 348f8829a4aSRandall Stewart static struct mbuf * 349f8829a4aSRandall Stewart sctp_process_asconf_delete_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph, 350f8829a4aSRandall Stewart struct sctp_tcb *stcb, int response_required) 351f8829a4aSRandall Stewart { 352f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 353f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 354e6194c2eSMichael Tuexen struct sctp_paramhdr *ph; 355f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 356f8829a4aSRandall Stewart struct sockaddr *sa; 357f8829a4aSRandall Stewart int zero_address = 0; 358f8829a4aSRandall Stewart int result; 359f8829a4aSRandall Stewart 360e6194c2eSMichael Tuexen #ifdef INET 361e6194c2eSMichael Tuexen struct sockaddr_in *sin; 362e6194c2eSMichael Tuexen struct sctp_ipv4addr_param *v4addr; 363e6194c2eSMichael Tuexen 364e6194c2eSMichael Tuexen #endif 365f8829a4aSRandall Stewart #ifdef INET6 366f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 367f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 368f8829a4aSRandall Stewart 369e6194c2eSMichael Tuexen #endif 370f8829a4aSRandall Stewart 371f8829a4aSRandall Stewart /* get the source IP address for src and 0.0.0.0/::0 delete checks */ 372f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, (struct sockaddr *)&sa_source); 373f8829a4aSRandall Stewart 374f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 375e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *)(aph + 1); 376e6194c2eSMichael Tuexen param_type = ntohs(ph->param_type); 377e6194c2eSMichael Tuexen param_length = ntohs(ph->param_length); 378f8829a4aSRandall Stewart 379f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 380f8829a4aSRandall Stewart switch (param_type) { 381e6194c2eSMichael Tuexen #ifdef INET 382f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 383f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 384f8829a4aSRandall Stewart /* invalid param size */ 385*60990c0cSMichael Tuexen return (NULL); 386f8829a4aSRandall Stewart } 387e6194c2eSMichael Tuexen v4addr = (struct sctp_ipv4addr_param *)ph; 388f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 389f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 390f8829a4aSRandall Stewart sin->sin_family = AF_INET; 391f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 392f8829a4aSRandall Stewart sin->sin_port = stcb->rport; 393f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 394f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 395f8829a4aSRandall Stewart zero_address = 1; 396ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 397ad81507eSRandall Stewart "process_asconf_delete_ip: deleting "); 398ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 399f8829a4aSRandall Stewart break; 400e6194c2eSMichael Tuexen #endif 401e6194c2eSMichael Tuexen #ifdef INET6 402f8829a4aSRandall Stewart case SCTP_IPV6_ADDRESS: 403f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 404f8829a4aSRandall Stewart /* invalid param size */ 405*60990c0cSMichael Tuexen return (NULL); 406f8829a4aSRandall Stewart } 407e6194c2eSMichael Tuexen v6addr = (struct sctp_ipv6addr_param *)ph; 408f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 409f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 410f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 411f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 412f8829a4aSRandall Stewart sin6->sin6_port = stcb->rport; 413f8829a4aSRandall Stewart memcpy(&sin6->sin6_addr, v6addr->addr, 414f8829a4aSRandall Stewart sizeof(struct in6_addr)); 415f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 416f8829a4aSRandall Stewart zero_address = 1; 417ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 418ad81507eSRandall Stewart "process_asconf_delete_ip: deleting "); 419ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 420f8829a4aSRandall Stewart break; 421e6194c2eSMichael Tuexen #endif 422f8829a4aSRandall Stewart default: 423f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 424f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 425f8829a4aSRandall Stewart aparam_length); 426*60990c0cSMichael Tuexen return (m_reply); 427f8829a4aSRandall Stewart } 428f8829a4aSRandall Stewart 429f8829a4aSRandall Stewart /* make sure the source address is not being deleted */ 430f8829a4aSRandall Stewart if (sctp_cmpaddr(sa, (struct sockaddr *)&sa_source)) { 431f8829a4aSRandall Stewart /* trying to delete the source address! */ 432ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete source addr\n"); 433f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 434f8829a4aSRandall Stewart SCTP_CAUSE_DELETING_SRC_ADDR, (uint8_t *) aph, 435f8829a4aSRandall Stewart aparam_length); 436*60990c0cSMichael Tuexen return (m_reply); 437f8829a4aSRandall Stewart } 438f8829a4aSRandall Stewart /* if deleting 0.0.0.0/::0, delete all addresses except src addr */ 439b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 440f8829a4aSRandall Stewart result = sctp_asconf_del_remote_addrs_except(stcb, 441f8829a4aSRandall Stewart (struct sockaddr *)&sa_source); 442f8829a4aSRandall Stewart 443f8829a4aSRandall Stewart if (result) { 444f8829a4aSRandall Stewart /* src address did not exist? */ 445ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: src addr does not exist?\n"); 446f8829a4aSRandall Stewart /* what error to reply with?? */ 447f8829a4aSRandall Stewart m_reply = 448f8829a4aSRandall Stewart sctp_asconf_error_response(aph->correlation_id, 449f8829a4aSRandall Stewart SCTP_CAUSE_REQUEST_REFUSED, (uint8_t *) aph, 450f8829a4aSRandall Stewart aparam_length); 451f8829a4aSRandall Stewart } else if (response_required) { 452f8829a4aSRandall Stewart m_reply = 453f8829a4aSRandall Stewart sctp_asconf_success_response(aph->correlation_id); 454f8829a4aSRandall Stewart } 455*60990c0cSMichael Tuexen return (m_reply); 456f8829a4aSRandall Stewart } 457f8829a4aSRandall Stewart /* delete the address */ 458f8829a4aSRandall Stewart result = sctp_del_remote_addr(stcb, sa); 459f8829a4aSRandall Stewart /* 460f8829a4aSRandall Stewart * note if result == -2, the address doesn't exist in the asoc but 461f8829a4aSRandall Stewart * since it's being deleted anyways, we just ack the delete -- but 462f8829a4aSRandall Stewart * this probably means something has already gone awry 463f8829a4aSRandall Stewart */ 464f8829a4aSRandall Stewart if (result == -1) { 465f8829a4aSRandall Stewart /* only one address in the asoc */ 466ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete last IP addr!\n"); 467f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 468f8829a4aSRandall Stewart SCTP_CAUSE_DELETING_LAST_ADDR, (uint8_t *) aph, 469f8829a4aSRandall Stewart aparam_length); 470f8829a4aSRandall Stewart } else { 471f8829a4aSRandall Stewart if (response_required) { 472f8829a4aSRandall Stewart m_reply = sctp_asconf_success_response(aph->correlation_id); 473f8829a4aSRandall Stewart } 474f8829a4aSRandall Stewart /* notify upper layer */ 475ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 476f8829a4aSRandall Stewart } 477*60990c0cSMichael Tuexen return (m_reply); 478f8829a4aSRandall Stewart } 479f8829a4aSRandall Stewart 480f8829a4aSRandall Stewart static struct mbuf * 481f8829a4aSRandall Stewart sctp_process_asconf_set_primary(struct mbuf *m, 4821b649582SRandall Stewart struct sctp_asconf_paramhdr *aph, 4831b649582SRandall Stewart struct sctp_tcb *stcb, int response_required) 484f8829a4aSRandall Stewart { 485f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 486f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 487e6194c2eSMichael Tuexen struct sctp_paramhdr *ph; 488f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 489f8829a4aSRandall Stewart struct sockaddr *sa; 490f8829a4aSRandall Stewart int zero_address = 0; 491f8829a4aSRandall Stewart 492e6194c2eSMichael Tuexen #ifdef INET 493e6194c2eSMichael Tuexen struct sockaddr_in *sin; 494e6194c2eSMichael Tuexen struct sctp_ipv4addr_param *v4addr; 495e6194c2eSMichael Tuexen 496e6194c2eSMichael Tuexen #endif 497f8829a4aSRandall Stewart #ifdef INET6 498f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 499f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 500f8829a4aSRandall Stewart 501e6194c2eSMichael Tuexen #endif 502f8829a4aSRandall Stewart 503f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 504e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *)(aph + 1); 505e6194c2eSMichael Tuexen param_type = ntohs(ph->param_type); 506e6194c2eSMichael Tuexen param_length = ntohs(ph->param_length); 507f8829a4aSRandall Stewart 508f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 509f8829a4aSRandall Stewart switch (param_type) { 510e6194c2eSMichael Tuexen #ifdef INET 511f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 512f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 513f8829a4aSRandall Stewart /* invalid param size */ 514*60990c0cSMichael Tuexen return (NULL); 515f8829a4aSRandall Stewart } 516e6194c2eSMichael Tuexen v4addr = (struct sctp_ipv4addr_param *)ph; 517f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 518f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 519f8829a4aSRandall Stewart sin->sin_family = AF_INET; 520f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 521f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 522f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 523f8829a4aSRandall Stewart zero_address = 1; 524ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: "); 525ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 526f8829a4aSRandall Stewart break; 527e6194c2eSMichael Tuexen #endif 528e6194c2eSMichael Tuexen #ifdef INET6 529f8829a4aSRandall Stewart case SCTP_IPV6_ADDRESS: 530f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 531f8829a4aSRandall Stewart /* invalid param size */ 532*60990c0cSMichael Tuexen return (NULL); 533f8829a4aSRandall Stewart } 534e6194c2eSMichael Tuexen v6addr = (struct sctp_ipv6addr_param *)ph; 535f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 536f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 537f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 538f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 539f8829a4aSRandall Stewart memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr, 540f8829a4aSRandall Stewart sizeof(struct in6_addr)); 541f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 542f8829a4aSRandall Stewart zero_address = 1; 543ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: "); 544ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 545f8829a4aSRandall Stewart break; 546e6194c2eSMichael Tuexen #endif 547f8829a4aSRandall Stewart default: 548f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 549f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 550f8829a4aSRandall Stewart aparam_length); 551*60990c0cSMichael Tuexen return (m_reply); 552f8829a4aSRandall Stewart } 553f8829a4aSRandall Stewart 554f8829a4aSRandall Stewart /* if 0.0.0.0/::0, use the source address instead */ 555b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 556f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_source; 557f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, sa); 558ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 559ad81507eSRandall Stewart "process_asconf_set_primary: using source addr "); 560ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 561f8829a4aSRandall Stewart } 562f8829a4aSRandall Stewart /* set the primary address */ 563f8829a4aSRandall Stewart if (sctp_set_primary_addr(stcb, sa, NULL) == 0) { 564ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 565ad81507eSRandall Stewart "process_asconf_set_primary: primary address set\n"); 566f8829a4aSRandall Stewart /* notify upper layer */ 567ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_SET_PRIMARY, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 568ca85e948SMichael Tuexen if ((stcb->asoc.primary_destination->dest_state & SCTP_ADDR_REACHABLE) && 569ca85e948SMichael Tuexen (!(stcb->asoc.primary_destination->dest_state & SCTP_ADDR_PF)) && 570ca85e948SMichael Tuexen (stcb->asoc.alternate)) { 571ca85e948SMichael Tuexen sctp_free_remote_addr(stcb->asoc.alternate); 572ca85e948SMichael Tuexen stcb->asoc.alternate = NULL; 573ca85e948SMichael Tuexen } 574f8829a4aSRandall Stewart if (response_required) { 575f8829a4aSRandall Stewart m_reply = sctp_asconf_success_response(aph->correlation_id); 576f8829a4aSRandall Stewart } 577851b7298SRandall Stewart /* 578851b7298SRandall Stewart * Mobility adaptation. Ideally, when the reception of SET 579851b7298SRandall Stewart * PRIMARY with DELETE IP ADDRESS of the previous primary 580851b7298SRandall Stewart * destination, unacknowledged DATA are retransmitted 581851b7298SRandall Stewart * immediately to the new primary destination for seamless 582b5c16493SMichael Tuexen * handover. If the destination is UNCONFIRMED and marked to 583b5c16493SMichael Tuexen * REQ_PRIM, The retransmission occur when reception of the 584b5c16493SMichael Tuexen * HEARTBEAT-ACK. (See sctp_handle_heartbeat_ack in 585851b7298SRandall Stewart * sctp_input.c) Also, when change of the primary 586851b7298SRandall Stewart * destination, it is better that all subsequent new DATA 587851b7298SRandall Stewart * containing already queued DATA are transmitted to the new 588851b7298SRandall Stewart * primary destination. (by micchie) 589851b7298SRandall Stewart */ 590851b7298SRandall Stewart if ((sctp_is_mobility_feature_on(stcb->sctp_ep, 591851b7298SRandall Stewart SCTP_MOBILITY_BASE) || 592851b7298SRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 593851b7298SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) && 594851b7298SRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 595851b7298SRandall Stewart SCTP_MOBILITY_PRIM_DELETED) && 596851b7298SRandall Stewart (stcb->asoc.primary_destination->dest_state & 597851b7298SRandall Stewart SCTP_ADDR_UNCONFIRMED) == 0) { 598851b7298SRandall Stewart 599851b7298SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_PRIM_DELETED, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTP_TIMER + SCTP_LOC_7); 600851b7298SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 601851b7298SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 602851b7298SRandall Stewart sctp_assoc_immediate_retrans(stcb, 603851b7298SRandall Stewart stcb->asoc.primary_destination); 604851b7298SRandall Stewart } 605851b7298SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 606851b7298SRandall Stewart SCTP_MOBILITY_BASE)) { 6079eea4a2dSMichael Tuexen sctp_move_chunks_from_net(stcb, 6089eea4a2dSMichael Tuexen stcb->asoc.deleted_primary); 609851b7298SRandall Stewart } 610851b7298SRandall Stewart sctp_delete_prim_timer(stcb->sctp_ep, stcb, 611851b7298SRandall Stewart stcb->asoc.deleted_primary); 612851b7298SRandall Stewart } 613f8829a4aSRandall Stewart } else { 614f8829a4aSRandall Stewart /* couldn't set the requested primary address! */ 615ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 616ad81507eSRandall Stewart "process_asconf_set_primary: set primary failed!\n"); 617f8829a4aSRandall Stewart /* must have been an invalid address, so report */ 618f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 619f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 620f8829a4aSRandall Stewart aparam_length); 621f8829a4aSRandall Stewart } 622f8829a4aSRandall Stewart 623*60990c0cSMichael Tuexen return (m_reply); 624f8829a4aSRandall Stewart } 625f8829a4aSRandall Stewart 626f8829a4aSRandall Stewart /* 627f8829a4aSRandall Stewart * handles an ASCONF chunk. 628f8829a4aSRandall Stewart * if all parameters are processed ok, send a plain (empty) ASCONF-ACK 629f8829a4aSRandall Stewart */ 630f8829a4aSRandall Stewart void 631f8829a4aSRandall Stewart sctp_handle_asconf(struct mbuf *m, unsigned int offset, 6322afb3e84SRandall Stewart struct sctp_asconf_chunk *cp, struct sctp_tcb *stcb, 6332afb3e84SRandall Stewart int first) 634f8829a4aSRandall Stewart { 635f8829a4aSRandall Stewart struct sctp_association *asoc; 636f8829a4aSRandall Stewart uint32_t serial_num; 6372afb3e84SRandall Stewart struct mbuf *n, *m_ack, *m_result, *m_tail; 638f8829a4aSRandall Stewart struct sctp_asconf_ack_chunk *ack_cp; 639f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph, *ack_aph; 640f8829a4aSRandall Stewart struct sctp_ipv6addr_param *p_addr; 641ca85e948SMichael Tuexen unsigned int asconf_limit, cnt; 642f8829a4aSRandall Stewart int error = 0; /* did an error occur? */ 643f8829a4aSRandall Stewart 644f8829a4aSRandall Stewart /* asconf param buffer */ 645f42a358aSRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 6462afb3e84SRandall Stewart struct sctp_asconf_ack *ack, *ack_next; 647f8829a4aSRandall Stewart 648f8829a4aSRandall Stewart /* verify minimum length */ 649f8829a4aSRandall Stewart if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_chunk)) { 650ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 651ad81507eSRandall Stewart "handle_asconf: chunk too small = %xh\n", 652f8829a4aSRandall Stewart ntohs(cp->ch.chunk_length)); 653f8829a4aSRandall Stewart return; 654f8829a4aSRandall Stewart } 655f8829a4aSRandall Stewart asoc = &stcb->asoc; 656f8829a4aSRandall Stewart serial_num = ntohl(cp->serial_number); 657f8829a4aSRandall Stewart 65820b07a4dSMichael Tuexen if (SCTP_TSN_GE(asoc->asconf_seq_in, serial_num)) { 659f8829a4aSRandall Stewart /* got a duplicate ASCONF */ 660ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 661ad81507eSRandall Stewart "handle_asconf: got duplicate serial number = %xh\n", 662f8829a4aSRandall Stewart serial_num); 663f8829a4aSRandall Stewart return; 664f8829a4aSRandall Stewart } else if (serial_num != (asoc->asconf_seq_in + 1)) { 665ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: incorrect serial number = %xh (expected next = %xh)\n", 666f8829a4aSRandall Stewart serial_num, asoc->asconf_seq_in + 1); 667f8829a4aSRandall Stewart return; 668f8829a4aSRandall Stewart } 669f8829a4aSRandall Stewart /* it's the expected "next" sequence number, so process it */ 670f8829a4aSRandall Stewart asoc->asconf_seq_in = serial_num; /* update sequence */ 671f8829a4aSRandall Stewart /* get length of all the param's in the ASCONF */ 672f8829a4aSRandall Stewart asconf_limit = offset + ntohs(cp->ch.chunk_length); 673ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 674ad81507eSRandall Stewart "handle_asconf: asconf_limit=%u, sequence=%xh\n", 675f8829a4aSRandall Stewart asconf_limit, serial_num); 6762afb3e84SRandall Stewart 6772afb3e84SRandall Stewart if (first) { 6782afb3e84SRandall Stewart /* delete old cache */ 679e6194c2eSMichael Tuexen SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: Now processing first ASCONF. Try to delete old cache\n"); 6802afb3e84SRandall Stewart 6814a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(ack, &asoc->asconf_ack_sent, next, ack_next) { 6822afb3e84SRandall Stewart if (ack->serial_number == serial_num) 6832afb3e84SRandall Stewart break; 6842afb3e84SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: delete old(%u) < first(%u)\n", 6852afb3e84SRandall Stewart ack->serial_number, serial_num); 6864a9ef3f8SMichael Tuexen TAILQ_REMOVE(&asoc->asconf_ack_sent, ack, next); 6872afb3e84SRandall Stewart if (ack->data != NULL) { 6882afb3e84SRandall Stewart sctp_m_freem(ack->data); 6892afb3e84SRandall Stewart } 690b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), ack); 6912afb3e84SRandall Stewart } 692f8829a4aSRandall Stewart } 693139bc87fSRandall Stewart m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0, 694f8829a4aSRandall Stewart M_DONTWAIT, 1, MT_DATA); 695f8829a4aSRandall Stewart if (m_ack == NULL) { 696ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 697ad81507eSRandall Stewart "handle_asconf: couldn't get mbuf!\n"); 698f8829a4aSRandall Stewart return; 699f8829a4aSRandall Stewart } 700f8829a4aSRandall Stewart m_tail = m_ack; /* current reply chain's tail */ 701f8829a4aSRandall Stewart 702f8829a4aSRandall Stewart /* fill in ASCONF-ACK header */ 703f8829a4aSRandall Stewart ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *); 704f8829a4aSRandall Stewart ack_cp->ch.chunk_type = SCTP_ASCONF_ACK; 705f8829a4aSRandall Stewart ack_cp->ch.chunk_flags = 0; 706f8829a4aSRandall Stewart ack_cp->serial_number = htonl(serial_num); 707f8829a4aSRandall Stewart /* set initial lengths (eg. just an ASCONF-ACK), ntohx at the end! */ 708139bc87fSRandall Stewart SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk); 709f8829a4aSRandall Stewart ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk); 710f8829a4aSRandall Stewart 711f8829a4aSRandall Stewart /* skip the lookup address parameter */ 712f8829a4aSRandall Stewart offset += sizeof(struct sctp_asconf_chunk); 713f8829a4aSRandall Stewart p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), (uint8_t *) & aparam_buf); 714f8829a4aSRandall Stewart if (p_addr == NULL) { 715ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 716ad81507eSRandall Stewart "handle_asconf: couldn't get lookup addr!\n"); 717f8829a4aSRandall Stewart /* respond with a missing/invalid mandatory parameter error */ 718f8829a4aSRandall Stewart return; 719f8829a4aSRandall Stewart } 720f8829a4aSRandall Stewart /* param_length is already validated in process_control... */ 721f8829a4aSRandall Stewart offset += ntohs(p_addr->ph.param_length); /* skip lookup addr */ 722f8829a4aSRandall Stewart 723f8829a4aSRandall Stewart /* get pointer to first asconf param in ASCONF-ACK */ 724f8829a4aSRandall Stewart ack_aph = (struct sctp_asconf_paramhdr *)(mtod(m_ack, caddr_t)+sizeof(struct sctp_asconf_ack_chunk)); 725f8829a4aSRandall Stewart if (ack_aph == NULL) { 726ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Gak in asconf2\n"); 727f8829a4aSRandall Stewart return; 728f8829a4aSRandall Stewart } 729f8829a4aSRandall Stewart /* get pointer to first asconf param in ASCONF */ 730f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *) & aparam_buf); 731f8829a4aSRandall Stewart if (aph == NULL) { 732ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Empty ASCONF received?\n"); 733f8829a4aSRandall Stewart goto send_reply; 734f8829a4aSRandall Stewart } 735f8829a4aSRandall Stewart /* process through all parameters */ 736ca85e948SMichael Tuexen cnt = 0; 737f8829a4aSRandall Stewart while (aph != NULL) { 738f8829a4aSRandall Stewart unsigned int param_length, param_type; 739f8829a4aSRandall Stewart 740f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 741f8829a4aSRandall Stewart param_length = ntohs(aph->ph.param_length); 742f8829a4aSRandall Stewart if (offset + param_length > asconf_limit) { 743f8829a4aSRandall Stewart /* parameter goes beyond end of chunk! */ 744f8829a4aSRandall Stewart sctp_m_freem(m_ack); 745f8829a4aSRandall Stewart return; 746f8829a4aSRandall Stewart } 747f8829a4aSRandall Stewart m_result = NULL; 748f8829a4aSRandall Stewart 749f8829a4aSRandall Stewart if (param_length > sizeof(aparam_buf)) { 750ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length); 751f8829a4aSRandall Stewart sctp_m_freem(m_ack); 752f8829a4aSRandall Stewart return; 753f8829a4aSRandall Stewart } 754f8829a4aSRandall Stewart if (param_length <= sizeof(struct sctp_paramhdr)) { 755ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length); 756f8829a4aSRandall Stewart sctp_m_freem(m_ack); 757f8829a4aSRandall Stewart } 758f8829a4aSRandall Stewart /* get the entire parameter */ 759f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf); 760f8829a4aSRandall Stewart if (aph == NULL) { 761ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: couldn't get entire param\n"); 762f8829a4aSRandall Stewart sctp_m_freem(m_ack); 763f8829a4aSRandall Stewart return; 764f8829a4aSRandall Stewart } 765f8829a4aSRandall Stewart switch (param_type) { 766f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 767f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 768f8829a4aSRandall Stewart m_result = sctp_process_asconf_add_ip(m, aph, stcb, 769ca85e948SMichael Tuexen (cnt < SCTP_BASE_SYSCTL(sctp_hb_maxburst)), error); 770ca85e948SMichael Tuexen cnt++; 771f8829a4aSRandall Stewart break; 772f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 773f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 774f8829a4aSRandall Stewart m_result = sctp_process_asconf_delete_ip(m, aph, stcb, 775f8829a4aSRandall Stewart error); 776f8829a4aSRandall Stewart break; 777f8829a4aSRandall Stewart case SCTP_ERROR_CAUSE_IND: 778f8829a4aSRandall Stewart /* not valid in an ASCONF chunk */ 779f8829a4aSRandall Stewart break; 780f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 781f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 782f8829a4aSRandall Stewart m_result = sctp_process_asconf_set_primary(m, aph, 783f8829a4aSRandall Stewart stcb, error); 784f8829a4aSRandall Stewart break; 785830d754dSRandall Stewart case SCTP_NAT_VTAGS: 786830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: sees a NAT VTAG state parameter\n"); 787830d754dSRandall Stewart break; 788f8829a4aSRandall Stewart case SCTP_SUCCESS_REPORT: 789f8829a4aSRandall Stewart /* not valid in an ASCONF chunk */ 790f8829a4aSRandall Stewart break; 791f8829a4aSRandall Stewart case SCTP_ULP_ADAPTATION: 792f8829a4aSRandall Stewart /* FIX */ 793f8829a4aSRandall Stewart break; 794f8829a4aSRandall Stewart default: 795f8829a4aSRandall Stewart if ((param_type & 0x8000) == 0) { 796f8829a4aSRandall Stewart /* Been told to STOP at this param */ 797f8829a4aSRandall Stewart asconf_limit = offset; 798f8829a4aSRandall Stewart /* 799f8829a4aSRandall Stewart * FIX FIX - We need to call 800f8829a4aSRandall Stewart * sctp_arethere_unrecognized_parameters() 801f8829a4aSRandall Stewart * to get a operr and send it for any 802f8829a4aSRandall Stewart * param's with the 0x4000 bit set OR do it 803f8829a4aSRandall Stewart * here ourselves... note we still must STOP 804f8829a4aSRandall Stewart * if the 0x8000 bit is clear. 805f8829a4aSRandall Stewart */ 806f8829a4aSRandall Stewart } 807f8829a4aSRandall Stewart /* unknown/invalid param type */ 808f8829a4aSRandall Stewart break; 809f8829a4aSRandall Stewart } /* switch */ 810f8829a4aSRandall Stewart 811f8829a4aSRandall Stewart /* add any (error) result to the reply mbuf chain */ 812f8829a4aSRandall Stewart if (m_result != NULL) { 813139bc87fSRandall Stewart SCTP_BUF_NEXT(m_tail) = m_result; 814f8829a4aSRandall Stewart m_tail = m_result; 815f8829a4aSRandall Stewart /* update lengths, make sure it's aligned too */ 816139bc87fSRandall Stewart SCTP_BUF_LEN(m_result) = SCTP_SIZE32(SCTP_BUF_LEN(m_result)); 817139bc87fSRandall Stewart ack_cp->ch.chunk_length += SCTP_BUF_LEN(m_result); 818f8829a4aSRandall Stewart /* set flag to force success reports */ 819f8829a4aSRandall Stewart error = 1; 820f8829a4aSRandall Stewart } 821f8829a4aSRandall Stewart offset += SCTP_SIZE32(param_length); 822f8829a4aSRandall Stewart /* update remaining ASCONF message length to process */ 823f8829a4aSRandall Stewart if (offset >= asconf_limit) { 824f8829a4aSRandall Stewart /* no more data in the mbuf chain */ 825f8829a4aSRandall Stewart break; 826f8829a4aSRandall Stewart } 827f8829a4aSRandall Stewart /* get pointer to next asconf param */ 828f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, 829f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr), 830f8829a4aSRandall Stewart (uint8_t *) & aparam_buf); 831f8829a4aSRandall Stewart if (aph == NULL) { 832f8829a4aSRandall Stewart /* can't get an asconf paramhdr */ 833ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: can't get asconf param hdr!\n"); 834f8829a4aSRandall Stewart /* FIX ME - add error here... */ 835f8829a4aSRandall Stewart } 836ad81507eSRandall Stewart } 837f8829a4aSRandall Stewart 838f8829a4aSRandall Stewart send_reply: 839f8829a4aSRandall Stewart ack_cp->ch.chunk_length = htons(ack_cp->ch.chunk_length); 840f8829a4aSRandall Stewart /* save the ASCONF-ACK reply */ 841b3f1ea41SRandall Stewart ack = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asconf_ack), 8422afb3e84SRandall Stewart struct sctp_asconf_ack); 8432afb3e84SRandall Stewart if (ack == NULL) { 8442afb3e84SRandall Stewart sctp_m_freem(m_ack); 8452afb3e84SRandall Stewart return; 8462afb3e84SRandall Stewart } 8472afb3e84SRandall Stewart ack->serial_number = serial_num; 8482afb3e84SRandall Stewart ack->last_sent_to = NULL; 8492afb3e84SRandall Stewart ack->data = m_ack; 850fc066a61SMichael Tuexen ack->len = 0; 851e6194c2eSMichael Tuexen for (n = m_ack; n != NULL; n = SCTP_BUF_NEXT(n)) { 8522afb3e84SRandall Stewart ack->len += SCTP_BUF_LEN(n); 8532afb3e84SRandall Stewart } 8542afb3e84SRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_ack_sent, ack, next); 855f8829a4aSRandall Stewart 856f8829a4aSRandall Stewart /* see if last_control_chunk_from is set properly (use IP src addr) */ 857f8829a4aSRandall Stewart if (stcb->asoc.last_control_chunk_from == NULL) { 858f8829a4aSRandall Stewart /* 859f8829a4aSRandall Stewart * this could happen if the source address was just newly 860f8829a4aSRandall Stewart * added 861f8829a4aSRandall Stewart */ 862f8829a4aSRandall Stewart struct ip *iph; 863f8829a4aSRandall Stewart struct sctphdr *sh; 864f8829a4aSRandall Stewart struct sockaddr_storage from_store; 865f8829a4aSRandall Stewart struct sockaddr *from = (struct sockaddr *)&from_store; 866f8829a4aSRandall Stewart 867ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: looking up net for IP source address\n"); 868f8829a4aSRandall Stewart /* pullup already done, IP options already stripped */ 869f8829a4aSRandall Stewart iph = mtod(m, struct ip *); 8705e2c2d87SRandall Stewart switch (iph->ip_v) { 871e6194c2eSMichael Tuexen #ifdef INET 8725e2c2d87SRandall Stewart case IPVERSION: 8735e2c2d87SRandall Stewart { 874f8829a4aSRandall Stewart struct sockaddr_in *from4; 875f8829a4aSRandall Stewart 876e6194c2eSMichael Tuexen sh = (struct sctphdr *)((caddr_t)iph + sizeof(*iph)); 877f8829a4aSRandall Stewart from4 = (struct sockaddr_in *)&from_store; 878f8829a4aSRandall Stewart bzero(from4, sizeof(*from4)); 879f8829a4aSRandall Stewart from4->sin_family = AF_INET; 880f8829a4aSRandall Stewart from4->sin_len = sizeof(struct sockaddr_in); 881f8829a4aSRandall Stewart from4->sin_addr.s_addr = iph->ip_src.s_addr; 882f8829a4aSRandall Stewart from4->sin_port = sh->src_port; 8835e2c2d87SRandall Stewart break; 8845e2c2d87SRandall Stewart } 885e6194c2eSMichael Tuexen #endif 8865e2c2d87SRandall Stewart #ifdef INET6 8875e2c2d87SRandall Stewart case IPV6_VERSION >> 4: 8885e2c2d87SRandall Stewart { 889f8829a4aSRandall Stewart struct ip6_hdr *ip6; 890f8829a4aSRandall Stewart struct sockaddr_in6 *from6; 891f8829a4aSRandall Stewart 892f8829a4aSRandall Stewart ip6 = mtod(m, struct ip6_hdr *); 893e6194c2eSMichael Tuexen sh = (struct sctphdr *)((caddr_t)ip6 + sizeof(*ip6)); 894f8829a4aSRandall Stewart from6 = (struct sockaddr_in6 *)&from_store; 895f8829a4aSRandall Stewart bzero(from6, sizeof(*from6)); 896f8829a4aSRandall Stewart from6->sin6_family = AF_INET6; 897f8829a4aSRandall Stewart from6->sin6_len = sizeof(struct sockaddr_in6); 898f8829a4aSRandall Stewart from6->sin6_addr = ip6->ip6_src; 899f8829a4aSRandall Stewart from6->sin6_port = sh->src_port; 9005e2c2d87SRandall Stewart /* 9015e2c2d87SRandall Stewart * Get the scopes in properly to the sin6 9025e2c2d87SRandall Stewart * addr's 9035e2c2d87SRandall Stewart */ 904f8829a4aSRandall Stewart /* we probably don't need these operations */ 905f8829a4aSRandall Stewart (void)sa6_recoverscope(from6); 906fc14de76SRandall Stewart sa6_embedscope(from6, 907482444b4SRandall Stewart MODULE_GLOBAL(ip6_use_defzone)); 908fc14de76SRandall Stewart 9095e2c2d87SRandall Stewart break; 9105e2c2d87SRandall Stewart } 9115e2c2d87SRandall Stewart #endif 9125e2c2d87SRandall Stewart default: 913f8829a4aSRandall Stewart /* unknown address type */ 914f8829a4aSRandall Stewart from = NULL; 915f8829a4aSRandall Stewart } 916f8829a4aSRandall Stewart if (from != NULL) { 917ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Looking for IP source: "); 918ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, from); 919f8829a4aSRandall Stewart /* look up the from address */ 920f8829a4aSRandall Stewart stcb->asoc.last_control_chunk_from = sctp_findnet(stcb, from); 921f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 922ad81507eSRandall Stewart if (stcb->asoc.last_control_chunk_from == NULL) 923ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: IP source address not found?!\n"); 924ad81507eSRandall Stewart #endif 925f8829a4aSRandall Stewart } 926f8829a4aSRandall Stewart } 927f8829a4aSRandall Stewart } 928f8829a4aSRandall Stewart 929f8829a4aSRandall Stewart /* 930f8829a4aSRandall Stewart * does the address match? returns 0 if not, 1 if so 931f8829a4aSRandall Stewart */ 932f8829a4aSRandall Stewart static uint32_t 933f8829a4aSRandall Stewart sctp_asconf_addr_match(struct sctp_asconf_addr *aa, struct sockaddr *sa) 934f8829a4aSRandall Stewart { 935e6194c2eSMichael Tuexen switch (sa->sa_family) { 936f8829a4aSRandall Stewart #ifdef INET6 937e6194c2eSMichael Tuexen case AF_INET6: 938e6194c2eSMichael Tuexen { 939f8829a4aSRandall Stewart /* XXX scopeid */ 940f8829a4aSRandall Stewart struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa; 941f8829a4aSRandall Stewart 942f8829a4aSRandall Stewart if ((aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) && 943f8829a4aSRandall Stewart (memcmp(&aa->ap.addrp.addr, &sin6->sin6_addr, 944f8829a4aSRandall Stewart sizeof(struct in6_addr)) == 0)) { 945f8829a4aSRandall Stewart return (1); 946f8829a4aSRandall Stewart } 947e6194c2eSMichael Tuexen break; 948e6194c2eSMichael Tuexen } 949e6194c2eSMichael Tuexen #endif 950e6194c2eSMichael Tuexen #ifdef INET 951e6194c2eSMichael Tuexen case AF_INET: 952e6194c2eSMichael Tuexen { 953f8829a4aSRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 954f8829a4aSRandall Stewart 955f8829a4aSRandall Stewart if ((aa->ap.addrp.ph.param_type == SCTP_IPV4_ADDRESS) && 956f8829a4aSRandall Stewart (memcmp(&aa->ap.addrp.addr, &sin->sin_addr, 957f8829a4aSRandall Stewart sizeof(struct in_addr)) == 0)) { 958f8829a4aSRandall Stewart return (1); 959f8829a4aSRandall Stewart } 960e6194c2eSMichael Tuexen break; 961e6194c2eSMichael Tuexen } 962e6194c2eSMichael Tuexen #endif 963e6194c2eSMichael Tuexen default: 964e6194c2eSMichael Tuexen break; 965f8829a4aSRandall Stewart } 966f8829a4aSRandall Stewart return (0); 967f8829a4aSRandall Stewart } 968f8829a4aSRandall Stewart 969f8829a4aSRandall Stewart /* 970c54a18d2SRandall Stewart * does the address match? returns 0 if not, 1 if so 971c54a18d2SRandall Stewart */ 972c54a18d2SRandall Stewart static uint32_t 973e6194c2eSMichael Tuexen sctp_addr_match(struct sctp_paramhdr *ph, struct sockaddr *sa) 974c54a18d2SRandall Stewart { 975c54a18d2SRandall Stewart uint16_t param_type, param_length; 976c54a18d2SRandall Stewart 977e6194c2eSMichael Tuexen param_type = ntohs(ph->param_type); 978e6194c2eSMichael Tuexen param_length = ntohs(ph->param_length); 979e6194c2eSMichael Tuexen switch (sa->sa_family) { 980d6af161aSRandall Stewart #ifdef INET6 981e6194c2eSMichael Tuexen case AF_INET6: 982e6194c2eSMichael Tuexen { 983c54a18d2SRandall Stewart /* XXX scopeid */ 984c54a18d2SRandall Stewart struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa; 985e6194c2eSMichael Tuexen struct sctp_ipv6addr_param *v6addr; 986c54a18d2SRandall Stewart 987e6194c2eSMichael Tuexen v6addr = (struct sctp_ipv6addr_param *)ph; 988c54a18d2SRandall Stewart if ((param_type == SCTP_IPV6_ADDRESS) && 989c54a18d2SRandall Stewart param_length == sizeof(struct sctp_ipv6addr_param) && 990c54a18d2SRandall Stewart (memcmp(&v6addr->addr, &sin6->sin6_addr, 991c54a18d2SRandall Stewart sizeof(struct in6_addr)) == 0)) { 992c54a18d2SRandall Stewart return (1); 993c54a18d2SRandall Stewart } 994e6194c2eSMichael Tuexen break; 995d6af161aSRandall Stewart } 996d6af161aSRandall Stewart #endif 997e6194c2eSMichael Tuexen #ifdef INET 998e6194c2eSMichael Tuexen case AF_INET: 999e6194c2eSMichael Tuexen { 1000c54a18d2SRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 1001e6194c2eSMichael Tuexen struct sctp_ipv4addr_param *v4addr; 1002c54a18d2SRandall Stewart 1003e6194c2eSMichael Tuexen v4addr = (struct sctp_ipv4addr_param *)ph; 1004c54a18d2SRandall Stewart if ((param_type == SCTP_IPV4_ADDRESS) && 1005c54a18d2SRandall Stewart param_length == sizeof(struct sctp_ipv4addr_param) && 1006c54a18d2SRandall Stewart (memcmp(&v4addr->addr, &sin->sin_addr, 1007c54a18d2SRandall Stewart sizeof(struct in_addr)) == 0)) { 1008c54a18d2SRandall Stewart return (1); 1009c54a18d2SRandall Stewart } 1010e6194c2eSMichael Tuexen break; 1011e6194c2eSMichael Tuexen } 1012e6194c2eSMichael Tuexen #endif 1013e6194c2eSMichael Tuexen default: 1014e6194c2eSMichael Tuexen break; 1015c54a18d2SRandall Stewart } 1016c54a18d2SRandall Stewart return (0); 1017c54a18d2SRandall Stewart } 1018c54a18d2SRandall Stewart 1019c54a18d2SRandall Stewart /* 1020f8829a4aSRandall Stewart * Cleanup for non-responded/OP ERR'd ASCONF 1021f8829a4aSRandall Stewart */ 1022f8829a4aSRandall Stewart void 1023f8829a4aSRandall Stewart sctp_asconf_cleanup(struct sctp_tcb *stcb, struct sctp_nets *net) 1024f8829a4aSRandall Stewart { 1025f8829a4aSRandall Stewart /* mark peer as ASCONF incapable */ 1026f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1027f8829a4aSRandall Stewart /* 1028f8829a4aSRandall Stewart * clear out any existing asconfs going out 1029f8829a4aSRandall Stewart */ 10303c503c28SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net, 10313c503c28SRandall Stewart SCTP_FROM_SCTP_ASCONF + SCTP_LOC_2); 1032c54a18d2SRandall Stewart stcb->asoc.asconf_seq_out_acked = stcb->asoc.asconf_seq_out; 1033f8829a4aSRandall Stewart /* remove the old ASCONF on our outbound queue */ 1034f8829a4aSRandall Stewart sctp_toss_old_asconf(stcb); 1035f8829a4aSRandall Stewart } 1036f8829a4aSRandall Stewart 1037f8829a4aSRandall Stewart /* 10382dad8a55SRandall Stewart * cleanup any cached source addresses that may be topologically 10392dad8a55SRandall Stewart * incorrect after a new address has been added to this interface. 10402dad8a55SRandall Stewart */ 10412dad8a55SRandall Stewart static void 10422dad8a55SRandall Stewart sctp_asconf_nets_cleanup(struct sctp_tcb *stcb, struct sctp_ifn *ifn) 10432dad8a55SRandall Stewart { 10442dad8a55SRandall Stewart struct sctp_nets *net; 10452dad8a55SRandall Stewart 10462dad8a55SRandall Stewart /* 10472dad8a55SRandall Stewart * Ideally, we want to only clear cached routes and source addresses 10482dad8a55SRandall Stewart * that are topologically incorrect. But since there is no easy way 10492dad8a55SRandall Stewart * to know whether the newly added address on the ifn would cause a 10502dad8a55SRandall Stewart * routing change (i.e. a new egress interface would be chosen) 10512dad8a55SRandall Stewart * without doing a new routing lookup and source address selection, 10522dad8a55SRandall Stewart * we will (for now) just flush any cached route using a different 10532dad8a55SRandall Stewart * ifn (and cached source addrs) and let output re-choose them 10542dad8a55SRandall Stewart * during the next send on that net. 10552dad8a55SRandall Stewart */ 10562dad8a55SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 10572dad8a55SRandall Stewart /* 10582dad8a55SRandall Stewart * clear any cached route (and cached source address) if the 10592dad8a55SRandall Stewart * route's interface is NOT the same as the address change. 10602dad8a55SRandall Stewart * If it's the same interface, just clear the cached source 10612dad8a55SRandall Stewart * address. 10622dad8a55SRandall Stewart */ 10632dad8a55SRandall Stewart if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro) && 1064fc066a61SMichael Tuexen ((ifn == NULL) || 1065fc066a61SMichael Tuexen (SCTP_GET_IF_INDEX_FROM_ROUTE(&net->ro) != ifn->ifn_index))) { 10662dad8a55SRandall Stewart /* clear any cached route */ 10672dad8a55SRandall Stewart RTFREE(net->ro.ro_rt); 10682dad8a55SRandall Stewart net->ro.ro_rt = NULL; 10692dad8a55SRandall Stewart } 10702dad8a55SRandall Stewart /* clear any cached source address */ 10712dad8a55SRandall Stewart if (net->src_addr_selected) { 10722dad8a55SRandall Stewart sctp_free_ifa(net->ro._s_addr); 10732dad8a55SRandall Stewart net->ro._s_addr = NULL; 10742dad8a55SRandall Stewart net->src_addr_selected = 0; 10752dad8a55SRandall Stewart } 10762dad8a55SRandall Stewart } 10772dad8a55SRandall Stewart } 10782dad8a55SRandall Stewart 1079851b7298SRandall Stewart 1080851b7298SRandall Stewart void 1081851b7298SRandall Stewart sctp_assoc_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *dstnet) 1082851b7298SRandall Stewart { 1083851b7298SRandall Stewart int error; 1084851b7298SRandall Stewart 1085851b7298SRandall Stewart if (dstnet->dest_state & SCTP_ADDR_UNCONFIRMED) { 1086851b7298SRandall Stewart return; 1087851b7298SRandall Stewart } 1088851b7298SRandall Stewart if (stcb->asoc.deleted_primary == NULL) { 1089851b7298SRandall Stewart return; 1090851b7298SRandall Stewart } 1091851b7298SRandall Stewart if (!TAILQ_EMPTY(&stcb->asoc.sent_queue)) { 1092b27a6b7dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "assoc_immediate_retrans: Deleted primary is "); 1093851b7298SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa); 1094851b7298SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Current Primary is "); 1095851b7298SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.primary_destination->ro._l_addr.sa); 1096851b7298SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, 1097851b7298SRandall Stewart stcb->asoc.deleted_primary, 1098851b7298SRandall Stewart SCTP_FROM_SCTP_TIMER + SCTP_LOC_8); 1099851b7298SRandall Stewart stcb->asoc.num_send_timers_up--; 1100851b7298SRandall Stewart if (stcb->asoc.num_send_timers_up < 0) { 1101851b7298SRandall Stewart stcb->asoc.num_send_timers_up = 0; 1102851b7298SRandall Stewart } 1103851b7298SRandall Stewart SCTP_TCB_LOCK_ASSERT(stcb); 1104851b7298SRandall Stewart error = sctp_t3rxt_timer(stcb->sctp_ep, stcb, 1105851b7298SRandall Stewart stcb->asoc.deleted_primary); 1106851b7298SRandall Stewart if (error) { 1107851b7298SRandall Stewart SCTP_INP_DECR_REF(stcb->sctp_ep); 1108851b7298SRandall Stewart return; 1109851b7298SRandall Stewart } 1110851b7298SRandall Stewart SCTP_TCB_LOCK_ASSERT(stcb); 1111851b7298SRandall Stewart #ifdef SCTP_AUDITING_ENABLED 1112f31e6c7fSMichael Tuexen sctp_auditing(4, stcb->sctp_ep, stcb, stcb->asoc.deleted_primary); 1113851b7298SRandall Stewart #endif 1114851b7298SRandall Stewart sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1115851b7298SRandall Stewart if ((stcb->asoc.num_send_timers_up == 0) && 1116851b7298SRandall Stewart (stcb->asoc.sent_queue_cnt > 0)) { 1117851b7298SRandall Stewart struct sctp_tmit_chunk *chk; 1118851b7298SRandall Stewart 1119851b7298SRandall Stewart chk = TAILQ_FIRST(&stcb->asoc.sent_queue); 1120851b7298SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, 1121851b7298SRandall Stewart stcb, chk->whoTo); 1122851b7298SRandall Stewart } 1123851b7298SRandall Stewart } 1124851b7298SRandall Stewart return; 1125851b7298SRandall Stewart } 1126851b7298SRandall Stewart 11272afb3e84SRandall Stewart static int 11282afb3e84SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *, struct sctp_ifa *, uint16_t); 11292afb3e84SRandall Stewart 1130851b7298SRandall Stewart void 11312afb3e84SRandall Stewart sctp_net_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *net) 11322afb3e84SRandall Stewart { 11332afb3e84SRandall Stewart struct sctp_tmit_chunk *chk; 11342afb3e84SRandall Stewart 1135b27a6b7dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "net_immediate_retrans: RTO is %d\n", net->RTO); 11362afb3e84SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, net, 11372afb3e84SRandall Stewart SCTP_FROM_SCTP_TIMER + SCTP_LOC_5); 11382afb3e84SRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net); 11392afb3e84SRandall Stewart net->error_count = 0; 11402afb3e84SRandall Stewart TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) { 11412afb3e84SRandall Stewart if (chk->whoTo == net) { 1142851b7298SRandall Stewart if (chk->sent < SCTP_DATAGRAM_RESEND) { 11432afb3e84SRandall Stewart chk->sent = SCTP_DATAGRAM_RESEND; 11442afb3e84SRandall Stewart sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1145d55b0b1bSRandall Stewart sctp_flight_size_decrease(chk); 1146d55b0b1bSRandall Stewart sctp_total_flight_decrease(stcb, chk); 1147d55b0b1bSRandall Stewart net->marked_retrans++; 1148d55b0b1bSRandall Stewart stcb->asoc.marked_retrans++; 11492afb3e84SRandall Stewart } 11502afb3e84SRandall Stewart } 11512afb3e84SRandall Stewart } 1152d55b0b1bSRandall Stewart if (net->marked_retrans) { 1153d55b0b1bSRandall Stewart sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1154d55b0b1bSRandall Stewart } 1155851b7298SRandall Stewart } 11562afb3e84SRandall Stewart 11572afb3e84SRandall Stewart static void 11582afb3e84SRandall Stewart sctp_path_check_and_react(struct sctp_tcb *stcb, struct sctp_ifa *newifa) 11592afb3e84SRandall Stewart { 11602afb3e84SRandall Stewart struct sctp_nets *net; 11612afb3e84SRandall Stewart int addrnum, changed; 11622afb3e84SRandall Stewart 11632afb3e84SRandall Stewart /* 11642afb3e84SRandall Stewart * If number of local valid addresses is 1, the valid address is 11652afb3e84SRandall Stewart * probably newly added address. Several valid addresses in this 11662afb3e84SRandall Stewart * association. A source address may not be changed. Additionally, 11672afb3e84SRandall Stewart * they can be configured on a same interface as "alias" addresses. 11682afb3e84SRandall Stewart * (by micchie) 11692afb3e84SRandall Stewart */ 11702afb3e84SRandall Stewart addrnum = sctp_local_addr_count(stcb); 11712afb3e84SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "p_check_react(): %d local addresses\n", 11722afb3e84SRandall Stewart addrnum); 11732afb3e84SRandall Stewart if (addrnum == 1) { 11742afb3e84SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 11752afb3e84SRandall Stewart /* clear any cached route and source address */ 11762afb3e84SRandall Stewart if (net->ro.ro_rt) { 11772afb3e84SRandall Stewart RTFREE(net->ro.ro_rt); 11782afb3e84SRandall Stewart net->ro.ro_rt = NULL; 11792afb3e84SRandall Stewart } 11802afb3e84SRandall Stewart if (net->src_addr_selected) { 11812afb3e84SRandall Stewart sctp_free_ifa(net->ro._s_addr); 11822afb3e84SRandall Stewart net->ro._s_addr = NULL; 11832afb3e84SRandall Stewart net->src_addr_selected = 0; 11842afb3e84SRandall Stewart } 11852afb3e84SRandall Stewart /* Retransmit unacknowledged DATA chunks immediately */ 11862afb3e84SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 11872afb3e84SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 11882afb3e84SRandall Stewart sctp_net_immediate_retrans(stcb, net); 11892afb3e84SRandall Stewart } 11902afb3e84SRandall Stewart /* also, SET PRIMARY is maybe already sent */ 11912afb3e84SRandall Stewart } 11922afb3e84SRandall Stewart return; 11932afb3e84SRandall Stewart } 11942afb3e84SRandall Stewart /* Multiple local addresses exsist in the association. */ 11952afb3e84SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 11962afb3e84SRandall Stewart /* clear any cached route and source address */ 11972afb3e84SRandall Stewart if (net->ro.ro_rt) { 11982afb3e84SRandall Stewart RTFREE(net->ro.ro_rt); 11992afb3e84SRandall Stewart net->ro.ro_rt = NULL; 12002afb3e84SRandall Stewart } 12012afb3e84SRandall Stewart if (net->src_addr_selected) { 12022afb3e84SRandall Stewart sctp_free_ifa(net->ro._s_addr); 12032afb3e84SRandall Stewart net->ro._s_addr = NULL; 12042afb3e84SRandall Stewart net->src_addr_selected = 0; 12052afb3e84SRandall Stewart } 12062afb3e84SRandall Stewart /* 12072afb3e84SRandall Stewart * Check if the nexthop is corresponding to the new address. 12082afb3e84SRandall Stewart * If the new address is corresponding to the current 12092afb3e84SRandall Stewart * nexthop, the path will be changed. If the new address is 12102afb3e84SRandall Stewart * NOT corresponding to the current nexthop, the path will 12112afb3e84SRandall Stewart * not be changed. 12122afb3e84SRandall Stewart */ 12132afb3e84SRandall Stewart SCTP_RTALLOC((sctp_route_t *) & net->ro, 12142afb3e84SRandall Stewart stcb->sctp_ep->def_vrf_id); 12152afb3e84SRandall Stewart if (net->ro.ro_rt == NULL) 12162afb3e84SRandall Stewart continue; 12172afb3e84SRandall Stewart 12182afb3e84SRandall Stewart changed = 0; 1219e6194c2eSMichael Tuexen switch (net->ro._l_addr.sa.sa_family) { 1220e6194c2eSMichael Tuexen #ifdef INET 1221e6194c2eSMichael Tuexen case AF_INET: 1222e6194c2eSMichael Tuexen if (sctp_v4src_match_nexthop(newifa, (sctp_route_t *) & net->ro)) { 12232afb3e84SRandall Stewart changed = 1; 12242afb3e84SRandall Stewart } 1225e6194c2eSMichael Tuexen break; 12265e2c2d87SRandall Stewart #endif 1227e6194c2eSMichael Tuexen #ifdef INET6 1228e6194c2eSMichael Tuexen case AF_INET6: 1229e6194c2eSMichael Tuexen if (sctp_v6src_match_nexthop( 1230e6194c2eSMichael Tuexen &newifa->address.sin6, (sctp_route_t *) & net->ro)) { 1231e6194c2eSMichael Tuexen changed = 1; 1232e6194c2eSMichael Tuexen } 1233e6194c2eSMichael Tuexen break; 1234e6194c2eSMichael Tuexen #endif 1235e6194c2eSMichael Tuexen default: 1236e6194c2eSMichael Tuexen break; 1237e6194c2eSMichael Tuexen } 12382afb3e84SRandall Stewart /* 12392afb3e84SRandall Stewart * if the newly added address does not relate routing 12402afb3e84SRandall Stewart * information, we skip. 12412afb3e84SRandall Stewart */ 12422afb3e84SRandall Stewart if (changed == 0) 12432afb3e84SRandall Stewart continue; 12442afb3e84SRandall Stewart /* Retransmit unacknowledged DATA chunks immediately */ 12452afb3e84SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 12462afb3e84SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 12472afb3e84SRandall Stewart sctp_net_immediate_retrans(stcb, net); 12482afb3e84SRandall Stewart } 12492afb3e84SRandall Stewart /* Send SET PRIMARY for this new address */ 12502afb3e84SRandall Stewart if (net == stcb->asoc.primary_destination) { 12512afb3e84SRandall Stewart (void)sctp_asconf_queue_mgmt(stcb, newifa, 12522afb3e84SRandall Stewart SCTP_SET_PRIM_ADDR); 12532afb3e84SRandall Stewart } 12542afb3e84SRandall Stewart } 12552afb3e84SRandall Stewart } 12562afb3e84SRandall Stewart 12572dad8a55SRandall Stewart /* 1258f8829a4aSRandall Stewart * process an ADD/DELETE IP ack from peer. 12591b649582SRandall Stewart * addr: corresponding sctp_ifa to the address being added/deleted. 1260f8829a4aSRandall Stewart * type: SCTP_ADD_IP_ADDRESS or SCTP_DEL_IP_ADDRESS. 1261f8829a4aSRandall Stewart * flag: 1=success, 0=failure. 1262f8829a4aSRandall Stewart */ 1263f8829a4aSRandall Stewart static void 12647215cc1bSMichael Tuexen sctp_asconf_addr_mgmt_ack(struct sctp_tcb *stcb, struct sctp_ifa *addr, uint32_t flag) 1265f8829a4aSRandall Stewart { 1266f8829a4aSRandall Stewart /* 1267f8829a4aSRandall Stewart * do the necessary asoc list work- if we get a failure indication, 12682dad8a55SRandall Stewart * leave the address on the assoc's restricted list. If we get a 12692dad8a55SRandall Stewart * success indication, remove the address from the restricted list. 1270f8829a4aSRandall Stewart */ 1271f8829a4aSRandall Stewart /* 1272f8829a4aSRandall Stewart * Note: this will only occur for ADD_IP_ADDRESS, since 1273f8829a4aSRandall Stewart * DEL_IP_ADDRESS is never actually added to the list... 1274f8829a4aSRandall Stewart */ 1275f8829a4aSRandall Stewart if (flag) { 12761b649582SRandall Stewart /* success case, so remove from the restricted list */ 12771b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, addr); 12782dad8a55SRandall Stewart 12793232788eSRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 1280d55b0b1bSRandall Stewart SCTP_MOBILITY_BASE) || 1281d55b0b1bSRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 1282d55b0b1bSRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 12832afb3e84SRandall Stewart sctp_path_check_and_react(stcb, addr); 12842afb3e84SRandall Stewart return; 12852afb3e84SRandall Stewart } 12863232788eSRandall Stewart /* clear any cached/topologically incorrect source addresses */ 12872dad8a55SRandall Stewart sctp_asconf_nets_cleanup(stcb, addr->ifn_p); 1288f8829a4aSRandall Stewart } 1289f8829a4aSRandall Stewart /* else, leave it on the list */ 1290f8829a4aSRandall Stewart } 1291f8829a4aSRandall Stewart 1292f8829a4aSRandall Stewart /* 12931b649582SRandall Stewart * add an asconf add/delete/set primary IP address parameter to the queue. 1294f8829a4aSRandall Stewart * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR. 12951b649582SRandall Stewart * returns 0 if queued, -1 if not queued/removed. 12961b649582SRandall Stewart * NOTE: if adding, but a delete for the same address is already scheduled 12971b649582SRandall Stewart * (and not yet sent out), simply remove it from queue. Same for deleting 12981b649582SRandall Stewart * an address already scheduled for add. If a duplicate operation is found, 12991b649582SRandall Stewart * ignore the new one. 1300f8829a4aSRandall Stewart */ 13011b649582SRandall Stewart static int 13021b649582SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *stcb, struct sctp_ifa *ifa, 130318e198d3SRandall Stewart uint16_t type) 1304f8829a4aSRandall Stewart { 1305f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 1306f8829a4aSRandall Stewart struct sockaddr *sa; 1307f8829a4aSRandall Stewart 1308f8829a4aSRandall Stewart /* make sure the request isn't already in the queue */ 13094a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1310f8829a4aSRandall Stewart /* address match? */ 131142551e99SRandall Stewart if (sctp_asconf_addr_match(aa, &ifa->address.sa) == 0) 1312f8829a4aSRandall Stewart continue; 1313c54a18d2SRandall Stewart /* 1314c54a18d2SRandall Stewart * is the request already in queue but not sent? pass the 1315c54a18d2SRandall Stewart * request already sent in order to resolve the following 1316c54a18d2SRandall Stewart * case: 1. arrival of ADD, then sent 2. arrival of DEL. we 1317c54a18d2SRandall Stewart * can't remove the ADD request already sent 3. arrival of 1318c54a18d2SRandall Stewart * ADD 1319c54a18d2SRandall Stewart */ 1320c54a18d2SRandall Stewart if (aa->ap.aph.ph.param_type == type && aa->sent == 0) { 1321f8829a4aSRandall Stewart return (-1); 1322f8829a4aSRandall Stewart } 1323f8829a4aSRandall Stewart /* is the negative request already in queue, and not sent */ 13241b649582SRandall Stewart if ((aa->sent == 0) && (type == SCTP_ADD_IP_ADDRESS) && 13251b649582SRandall Stewart (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS)) { 1326f8829a4aSRandall Stewart /* add requested, delete already queued */ 1327f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 13281b649582SRandall Stewart /* remove the ifa from the restricted list */ 13291b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, ifa); 13301b649582SRandall Stewart /* free the asconf param */ 1331207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 13321b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: add removes queued entry\n"); 13331b649582SRandall Stewart return (-1); 13341b649582SRandall Stewart } 13351b649582SRandall Stewart if ((aa->sent == 0) && (type == SCTP_DEL_IP_ADDRESS) && 13361b649582SRandall Stewart (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS)) { 13371b649582SRandall Stewart /* delete requested, add already queued */ 13381b649582SRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 13391b649582SRandall Stewart /* remove the aa->ifa from the restricted list */ 13401b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, aa->ifa); 13411b649582SRandall Stewart /* free the asconf param */ 13421b649582SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 13431b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: delete removes queued entry\n"); 1344f8829a4aSRandall Stewart return (-1); 1345f8829a4aSRandall Stewart } 1346f8829a4aSRandall Stewart } /* for each aa */ 1347f8829a4aSRandall Stewart 1348f8829a4aSRandall Stewart /* adding new request to the queue */ 13491b649582SRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 13501b649582SRandall Stewart SCTP_M_ASC_ADDR); 1351f8829a4aSRandall Stewart if (aa == NULL) { 1352f8829a4aSRandall Stewart /* didn't get memory */ 13531b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "asconf_queue_mgmt: failed to get memory!\n"); 1354f8829a4aSRandall Stewart return (-1); 1355f8829a4aSRandall Stewart } 1356830d754dSRandall Stewart aa->special_del = 0; 1357f8829a4aSRandall Stewart /* fill in asconf address parameter fields */ 1358f8829a4aSRandall Stewart /* top level elements are "networked" during send */ 1359f8829a4aSRandall Stewart aa->ap.aph.ph.param_type = type; 1360f8829a4aSRandall Stewart aa->ifa = ifa; 1361bff64a4dSRandall Stewart atomic_add_int(&ifa->refcount, 1); 1362f8829a4aSRandall Stewart /* correlation_id filled in during send routine later... */ 1363e6194c2eSMichael Tuexen switch (ifa->address.sa.sa_family) { 1364e6194c2eSMichael Tuexen #ifdef INET6 1365e6194c2eSMichael Tuexen case AF_INET6: 1366e6194c2eSMichael Tuexen { 1367f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 1368f8829a4aSRandall Stewart 136942551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sa; 1370f8829a4aSRandall Stewart sa = (struct sockaddr *)sin6; 1371f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 1372f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param)); 13731b649582SRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + 1374f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param); 1375f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr, 1376f8829a4aSRandall Stewart sizeof(struct in6_addr)); 1377e6194c2eSMichael Tuexen break; 1378e6194c2eSMichael Tuexen } 1379e6194c2eSMichael Tuexen #endif 1380e6194c2eSMichael Tuexen #ifdef INET 1381e6194c2eSMichael Tuexen case AF_INET: 1382e6194c2eSMichael Tuexen { 13831b649582SRandall Stewart struct sockaddr_in *sin; 1384f8829a4aSRandall Stewart 13851b649582SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 1386f8829a4aSRandall Stewart sa = (struct sockaddr *)sin; 1387f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 1388f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param)); 13891b649582SRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + 1390f8829a4aSRandall Stewart sizeof(struct sctp_ipv4addr_param); 1391f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin->sin_addr, 1392f8829a4aSRandall Stewart sizeof(struct in_addr)); 1393e6194c2eSMichael Tuexen break; 1394e6194c2eSMichael Tuexen } 1395e6194c2eSMichael Tuexen #endif 1396e6194c2eSMichael Tuexen default: 1397f8829a4aSRandall Stewart /* invalid family! */ 1398207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 13993232788eSRandall Stewart sctp_free_ifa(ifa); 1400f8829a4aSRandall Stewart return (-1); 1401f8829a4aSRandall Stewart } 1402f8829a4aSRandall Stewart aa->sent = 0; /* clear sent flag */ 1403f8829a4aSRandall Stewart 1404f8829a4aSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 1405f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 1406dec0177dSRandall Stewart if (SCTP_BASE_SYSCTL(sctp_debug_on) & SCTP_DEBUG_ASCONF2) { 1407c54a18d2SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 1408c54a18d2SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: inserted asconf ADD_IP_ADDRESS: "); 1409c54a18d2SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1410c54a18d2SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 14111b649582SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: appended asconf DEL_IP_ADDRESS: "); 1412ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1413f8829a4aSRandall Stewart } else { 14141b649582SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: appended asconf SET_PRIM_ADDR: "); 1415ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1416f8829a4aSRandall Stewart } 1417f8829a4aSRandall Stewart } 1418ad81507eSRandall Stewart #endif 1419f8829a4aSRandall Stewart 1420f8829a4aSRandall Stewart return (0); 1421f8829a4aSRandall Stewart } 1422f8829a4aSRandall Stewart 14231b649582SRandall Stewart 14241b649582SRandall Stewart /* 14251b649582SRandall Stewart * add an asconf operation for the given ifa and type. 14261b649582SRandall Stewart * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR. 14271b649582SRandall Stewart * returns 0 if completed, -1 if not completed, 1 if immediate send is 14281b649582SRandall Stewart * advisable. 14291b649582SRandall Stewart */ 14301b649582SRandall Stewart static int 14311b649582SRandall Stewart sctp_asconf_queue_add(struct sctp_tcb *stcb, struct sctp_ifa *ifa, 14321b649582SRandall Stewart uint16_t type) 14331b649582SRandall Stewart { 14341b649582SRandall Stewart uint32_t status; 14351b649582SRandall Stewart int pending_delete_queued = 0; 14361b649582SRandall Stewart 14371b649582SRandall Stewart /* see if peer supports ASCONF */ 14381b649582SRandall Stewart if (stcb->asoc.peer_supports_asconf == 0) { 14391b649582SRandall Stewart return (-1); 14401b649582SRandall Stewart } 14411b649582SRandall Stewart /* 14421b649582SRandall Stewart * if this is deleting the last address from the assoc, mark it as 14431b649582SRandall Stewart * pending. 14441b649582SRandall Stewart */ 14451b649582SRandall Stewart if ((type == SCTP_DEL_IP_ADDRESS) && !stcb->asoc.asconf_del_pending && 14461b649582SRandall Stewart (sctp_local_addr_count(stcb) < 2)) { 14471b649582SRandall Stewart /* set the pending delete info only */ 14481b649582SRandall Stewart stcb->asoc.asconf_del_pending = 1; 14491b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending = ifa; 14501b649582SRandall Stewart atomic_add_int(&ifa->refcount, 1); 14511b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, 14521b649582SRandall Stewart "asconf_queue_add: mark delete last address pending\n"); 14531b649582SRandall Stewart return (-1); 14541b649582SRandall Stewart } 1455c54a18d2SRandall Stewart /* queue an asconf parameter */ 1456c54a18d2SRandall Stewart status = sctp_asconf_queue_mgmt(stcb, ifa, type); 1457c54a18d2SRandall Stewart 14581b649582SRandall Stewart /* 14591b649582SRandall Stewart * if this is an add, and there is a delete also pending (i.e. the 14601b649582SRandall Stewart * last local address is being changed), queue the pending delete 14611b649582SRandall Stewart * too. 14621b649582SRandall Stewart */ 1463c54a18d2SRandall Stewart if ((type == SCTP_ADD_IP_ADDRESS) && stcb->asoc.asconf_del_pending && (status == 0)) { 14641b649582SRandall Stewart /* queue in the pending delete */ 14651b649582SRandall Stewart if (sctp_asconf_queue_mgmt(stcb, 14661b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending, 14671b649582SRandall Stewart SCTP_DEL_IP_ADDRESS) == 0) { 14681b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_add: queing pending delete\n"); 14691b649582SRandall Stewart pending_delete_queued = 1; 14701b649582SRandall Stewart /* clear out the pending delete info */ 14711b649582SRandall Stewart stcb->asoc.asconf_del_pending = 0; 14721b649582SRandall Stewart sctp_free_ifa(stcb->asoc.asconf_addr_del_pending); 14731b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending = NULL; 14741b649582SRandall Stewart } 14751b649582SRandall Stewart } 1476c54a18d2SRandall Stewart if (pending_delete_queued) { 14771b649582SRandall Stewart struct sctp_nets *net; 14781b649582SRandall Stewart 14791b649582SRandall Stewart /* 14801b649582SRandall Stewart * since we know that the only/last address is now being 14811b649582SRandall Stewart * changed in this case, reset the cwnd/rto on all nets to 14821b649582SRandall Stewart * start as a new address and path. Also clear the error 14831b649582SRandall Stewart * counts to give the assoc the best chance to complete the 14841b649582SRandall Stewart * address change. 14851b649582SRandall Stewart */ 14861b649582SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 14871b649582SRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, 14881b649582SRandall Stewart net); 14891b649582SRandall Stewart net->RTO = 0; 14901b649582SRandall Stewart net->error_count = 0; 14911b649582SRandall Stewart } 14921b649582SRandall Stewart stcb->asoc.overall_error_count = 0; 1493b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 1494c4739e2fSRandall Stewart sctp_misc_ints(SCTP_THRESHOLD_CLEAR, 1495c4739e2fSRandall Stewart stcb->asoc.overall_error_count, 1496c4739e2fSRandall Stewart 0, 1497c4739e2fSRandall Stewart SCTP_FROM_SCTP_ASCONF, 1498c4739e2fSRandall Stewart __LINE__); 1499c4739e2fSRandall Stewart } 15001b649582SRandall Stewart /* queue in an advisory set primary too */ 15011b649582SRandall Stewart (void)sctp_asconf_queue_mgmt(stcb, ifa, SCTP_SET_PRIM_ADDR); 15021b649582SRandall Stewart /* let caller know we should send this out immediately */ 15031b649582SRandall Stewart status = 1; 15041b649582SRandall Stewart } 15051b649582SRandall Stewart return (status); 15061b649582SRandall Stewart } 15071b649582SRandall Stewart 15083232788eSRandall Stewart /*- 15093232788eSRandall Stewart * add an asconf delete IP address parameter to the queue by sockaddr and 15103232788eSRandall Stewart * possibly with no sctp_ifa available. This is only called by the routine 15113232788eSRandall Stewart * that checks the addresses in an INIT-ACK against the current address list. 1512f8829a4aSRandall Stewart * returns 0 if completed, non-zero if not completed. 15133232788eSRandall Stewart * NOTE: if an add is already scheduled (and not yet sent out), simply 15143232788eSRandall Stewart * remove it from queue. If a duplicate operation is found, ignore the 15153232788eSRandall Stewart * new one. 1516f8829a4aSRandall Stewart */ 15171b649582SRandall Stewart static int 15183232788eSRandall Stewart sctp_asconf_queue_sa_delete(struct sctp_tcb *stcb, struct sockaddr *sa) 1519f8829a4aSRandall Stewart { 1520bff64a4dSRandall Stewart struct sctp_ifa *ifa; 1521f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 152242551e99SRandall Stewart uint32_t vrf_id; 1523f8829a4aSRandall Stewart 1524ad81507eSRandall Stewart if (stcb == NULL) { 1525ad81507eSRandall Stewart return (-1); 1526ad81507eSRandall Stewart } 1527f8829a4aSRandall Stewart /* see if peer supports ASCONF */ 1528f8829a4aSRandall Stewart if (stcb->asoc.peer_supports_asconf == 0) { 1529f8829a4aSRandall Stewart return (-1); 1530f8829a4aSRandall Stewart } 1531f8829a4aSRandall Stewart /* make sure the request isn't already in the queue */ 15324a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1533f8829a4aSRandall Stewart /* address match? */ 1534f8829a4aSRandall Stewart if (sctp_asconf_addr_match(aa, sa) == 0) 1535f8829a4aSRandall Stewart continue; 1536f8829a4aSRandall Stewart /* is the request already in queue (sent or not) */ 15373232788eSRandall Stewart if (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) { 1538f8829a4aSRandall Stewart return (-1); 1539f8829a4aSRandall Stewart } 1540f8829a4aSRandall Stewart /* is the negative request already in queue, and not sent */ 1541f8829a4aSRandall Stewart if (aa->sent == 1) 1542f8829a4aSRandall Stewart continue; 15433232788eSRandall Stewart if (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS) { 15443232788eSRandall Stewart /* add already queued, so remove existing entry */ 1545f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 15461b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, aa->ifa); 1547f8829a4aSRandall Stewart /* free the entry */ 1548207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 1549f8829a4aSRandall Stewart return (-1); 1550f8829a4aSRandall Stewart } 1551f8829a4aSRandall Stewart } /* for each aa */ 15523232788eSRandall Stewart 15533232788eSRandall Stewart /* find any existing ifa-- NOTE ifa CAN be allowed to be NULL */ 1554bff64a4dSRandall Stewart if (stcb) { 1555bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 1556bff64a4dSRandall Stewart } else { 1557bff64a4dSRandall Stewart vrf_id = SCTP_DEFAULT_VRFID; 1558bff64a4dSRandall Stewart } 1559851b7298SRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 15603232788eSRandall Stewart 1561f8829a4aSRandall Stewart /* adding new request to the queue */ 15621b649582SRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 15631b649582SRandall Stewart SCTP_M_ASC_ADDR); 1564f8829a4aSRandall Stewart if (aa == NULL) { 1565f8829a4aSRandall Stewart /* didn't get memory */ 1566ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 15673232788eSRandall Stewart "sctp_asconf_queue_sa_delete: failed to get memory!\n"); 1568f8829a4aSRandall Stewart return (-1); 1569f8829a4aSRandall Stewart } 1570830d754dSRandall Stewart aa->special_del = 0; 1571f8829a4aSRandall Stewart /* fill in asconf address parameter fields */ 1572f8829a4aSRandall Stewart /* top level elements are "networked" during send */ 15733232788eSRandall Stewart aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS; 1574bff64a4dSRandall Stewart aa->ifa = ifa; 15753232788eSRandall Stewart if (ifa) 1576bff64a4dSRandall Stewart atomic_add_int(&ifa->refcount, 1); 1577f8829a4aSRandall Stewart /* correlation_id filled in during send routine later... */ 1578e6194c2eSMichael Tuexen switch (sa->sa_family) { 1579e6194c2eSMichael Tuexen #ifdef INET6 1580e6194c2eSMichael Tuexen case AF_INET6: 1581e6194c2eSMichael Tuexen { 1582f8829a4aSRandall Stewart /* IPv6 address */ 1583f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 1584f8829a4aSRandall Stewart 1585f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 1586f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 1587f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param)); 1588f8829a4aSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param); 1589f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr, 1590f8829a4aSRandall Stewart sizeof(struct in6_addr)); 1591e6194c2eSMichael Tuexen break; 1592e6194c2eSMichael Tuexen } 1593e6194c2eSMichael Tuexen #endif 1594e6194c2eSMichael Tuexen #ifdef INET 1595e6194c2eSMichael Tuexen case AF_INET: 1596e6194c2eSMichael Tuexen { 1597f8829a4aSRandall Stewart /* IPv4 address */ 1598f8829a4aSRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 1599f8829a4aSRandall Stewart 1600f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 1601f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param)); 1602f8829a4aSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param); 1603f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin->sin_addr, 1604f8829a4aSRandall Stewart sizeof(struct in_addr)); 1605e6194c2eSMichael Tuexen break; 1606e6194c2eSMichael Tuexen } 1607e6194c2eSMichael Tuexen #endif 1608e6194c2eSMichael Tuexen default: 1609f8829a4aSRandall Stewart /* invalid family! */ 1610207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 16113232788eSRandall Stewart if (ifa) 16123232788eSRandall Stewart sctp_free_ifa(ifa); 1613f8829a4aSRandall Stewart return (-1); 1614f8829a4aSRandall Stewart } 1615f8829a4aSRandall Stewart aa->sent = 0; /* clear sent flag */ 1616f8829a4aSRandall Stewart 16173232788eSRandall Stewart /* delete goes to the back of the queue */ 1618f8829a4aSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 1619f8829a4aSRandall Stewart 1620c99efcf6SRandall Stewart /* sa_ignore MEMLEAK {memory is put on the tailq} */ 1621f8829a4aSRandall Stewart return (0); 1622f8829a4aSRandall Stewart } 1623f8829a4aSRandall Stewart 1624f8829a4aSRandall Stewart /* 1625f8829a4aSRandall Stewart * find a specific asconf param on our "sent" queue 1626f8829a4aSRandall Stewart */ 1627f8829a4aSRandall Stewart static struct sctp_asconf_addr * 1628f8829a4aSRandall Stewart sctp_asconf_find_param(struct sctp_tcb *stcb, uint32_t correlation_id) 1629f8829a4aSRandall Stewart { 1630f8829a4aSRandall Stewart struct sctp_asconf_addr *aa; 1631f8829a4aSRandall Stewart 1632f8829a4aSRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 1633f8829a4aSRandall Stewart if (aa->ap.aph.correlation_id == correlation_id && 1634f8829a4aSRandall Stewart aa->sent == 1) { 1635f8829a4aSRandall Stewart /* found it */ 1636f8829a4aSRandall Stewart return (aa); 1637f8829a4aSRandall Stewart } 1638f8829a4aSRandall Stewart } 1639f8829a4aSRandall Stewart /* didn't find it */ 1640f8829a4aSRandall Stewart return (NULL); 1641f8829a4aSRandall Stewart } 1642f8829a4aSRandall Stewart 1643f8829a4aSRandall Stewart /* 1644f8829a4aSRandall Stewart * process an SCTP_ERROR_CAUSE_IND for a ASCONF-ACK parameter and do 1645f8829a4aSRandall Stewart * notifications based on the error response 1646f8829a4aSRandall Stewart */ 1647f8829a4aSRandall Stewart static void 1648f8829a4aSRandall Stewart sctp_asconf_process_error(struct sctp_tcb *stcb, 1649f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph) 1650f8829a4aSRandall Stewart { 1651f8829a4aSRandall Stewart struct sctp_error_cause *eh; 1652f8829a4aSRandall Stewart struct sctp_paramhdr *ph; 1653f8829a4aSRandall Stewart uint16_t param_type; 1654f8829a4aSRandall Stewart uint16_t error_code; 1655f8829a4aSRandall Stewart 1656f8829a4aSRandall Stewart eh = (struct sctp_error_cause *)(aph + 1); 1657f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)(eh + 1); 1658f8829a4aSRandall Stewart /* validate lengths */ 1659f8829a4aSRandall Stewart if (htons(eh->length) + sizeof(struct sctp_error_cause) > 1660f8829a4aSRandall Stewart htons(aph->ph.param_length)) { 1661f8829a4aSRandall Stewart /* invalid error cause length */ 1662ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1663ad81507eSRandall Stewart "asconf_process_error: cause element too long\n"); 1664f8829a4aSRandall Stewart return; 1665f8829a4aSRandall Stewart } 1666f8829a4aSRandall Stewart if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) > 1667f8829a4aSRandall Stewart htons(eh->length)) { 1668f8829a4aSRandall Stewart /* invalid included TLV length */ 1669ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1670ad81507eSRandall Stewart "asconf_process_error: included TLV too long\n"); 1671f8829a4aSRandall Stewart return; 1672f8829a4aSRandall Stewart } 1673f8829a4aSRandall Stewart /* which error code ? */ 1674f8829a4aSRandall Stewart error_code = ntohs(eh->code); 1675f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 1676f8829a4aSRandall Stewart /* FIX: this should go back up the REMOTE_ERROR ULP notify */ 1677f8829a4aSRandall Stewart switch (error_code) { 1678f8829a4aSRandall Stewart case SCTP_CAUSE_RESOURCE_SHORTAGE: 1679f8829a4aSRandall Stewart /* we allow ourselves to "try again" for this error */ 1680f8829a4aSRandall Stewart break; 1681f8829a4aSRandall Stewart default: 1682f8829a4aSRandall Stewart /* peer can't handle it... */ 1683f8829a4aSRandall Stewart switch (param_type) { 1684f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 1685f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 1686f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1687f8829a4aSRandall Stewart break; 1688f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 1689f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1690f8829a4aSRandall Stewart break; 1691f8829a4aSRandall Stewart default: 1692f8829a4aSRandall Stewart break; 1693f8829a4aSRandall Stewart } 1694f8829a4aSRandall Stewart } 1695f8829a4aSRandall Stewart } 1696f8829a4aSRandall Stewart 1697f8829a4aSRandall Stewart /* 169818e198d3SRandall Stewart * process an asconf queue param. 169918e198d3SRandall Stewart * aparam: parameter to process, will be removed from the queue. 170018e198d3SRandall Stewart * flag: 1=success case, 0=failure case 1701f8829a4aSRandall Stewart */ 1702f8829a4aSRandall Stewart static void 1703f8829a4aSRandall Stewart sctp_asconf_process_param_ack(struct sctp_tcb *stcb, 1704f8829a4aSRandall Stewart struct sctp_asconf_addr *aparam, uint32_t flag) 1705f8829a4aSRandall Stewart { 1706f8829a4aSRandall Stewart uint16_t param_type; 1707f8829a4aSRandall Stewart 1708f8829a4aSRandall Stewart /* process this param */ 1709f8829a4aSRandall Stewart param_type = aparam->ap.aph.ph.param_type; 1710f8829a4aSRandall Stewart switch (param_type) { 1711f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 1712ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1713ad81507eSRandall Stewart "process_param_ack: added IP address\n"); 17147215cc1bSMichael Tuexen sctp_asconf_addr_mgmt_ack(stcb, aparam->ifa, flag); 1715f8829a4aSRandall Stewart break; 1716f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 1717ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1718ad81507eSRandall Stewart "process_param_ack: deleted IP address\n"); 1719f8829a4aSRandall Stewart /* nothing really to do... lists already updated */ 1720f8829a4aSRandall Stewart break; 1721f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 1722c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1723c54a18d2SRandall Stewart "process_param_ack: set primary IP address\n"); 1724f8829a4aSRandall Stewart /* nothing to do... peer may start using this addr */ 1725f8829a4aSRandall Stewart if (flag == 0) 1726f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1727f8829a4aSRandall Stewart break; 1728f8829a4aSRandall Stewart default: 1729f8829a4aSRandall Stewart /* should NEVER happen */ 1730f8829a4aSRandall Stewart break; 1731f8829a4aSRandall Stewart } 1732f8829a4aSRandall Stewart 1733f8829a4aSRandall Stewart /* remove the param and free it */ 1734f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aparam, next); 17353232788eSRandall Stewart if (aparam->ifa) 1736bff64a4dSRandall Stewart sctp_free_ifa(aparam->ifa); 1737207304d4SRandall Stewart SCTP_FREE(aparam, SCTP_M_ASC_ADDR); 1738f8829a4aSRandall Stewart } 1739f8829a4aSRandall Stewart 1740f8829a4aSRandall Stewart /* 1741f8829a4aSRandall Stewart * cleanup from a bad asconf ack parameter 1742f8829a4aSRandall Stewart */ 1743f8829a4aSRandall Stewart static void 1744f8829a4aSRandall Stewart sctp_asconf_ack_clear(struct sctp_tcb *stcb) 1745f8829a4aSRandall Stewart { 1746f8829a4aSRandall Stewart /* assume peer doesn't really know how to do asconfs */ 1747f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1748f8829a4aSRandall Stewart /* XXX we could free the pending queue here */ 1749f8829a4aSRandall Stewart } 1750f8829a4aSRandall Stewart 1751f8829a4aSRandall Stewart void 1752f8829a4aSRandall Stewart sctp_handle_asconf_ack(struct mbuf *m, int offset, 1753f8829a4aSRandall Stewart struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb, 17543232788eSRandall Stewart struct sctp_nets *net, int *abort_no_unlock) 1755f8829a4aSRandall Stewart { 1756f8829a4aSRandall Stewart struct sctp_association *asoc; 1757f8829a4aSRandall Stewart uint32_t serial_num; 1758f8829a4aSRandall Stewart uint16_t ack_length; 1759f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 1760f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 1761f8829a4aSRandall Stewart uint32_t last_error_id = 0; /* last error correlation id */ 1762f8829a4aSRandall Stewart uint32_t id; 1763f8829a4aSRandall Stewart struct sctp_asconf_addr *ap; 1764f8829a4aSRandall Stewart 1765f8829a4aSRandall Stewart /* asconf param buffer */ 1766f42a358aSRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 1767f8829a4aSRandall Stewart 1768f8829a4aSRandall Stewart /* verify minimum length */ 1769f8829a4aSRandall Stewart if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) { 1770ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1771ad81507eSRandall Stewart "handle_asconf_ack: chunk too small = %xh\n", 1772f8829a4aSRandall Stewart ntohs(cp->ch.chunk_length)); 1773f8829a4aSRandall Stewart return; 1774f8829a4aSRandall Stewart } 1775f8829a4aSRandall Stewart asoc = &stcb->asoc; 1776f8829a4aSRandall Stewart serial_num = ntohl(cp->serial_number); 1777f8829a4aSRandall Stewart 1778f8829a4aSRandall Stewart /* 1779f8829a4aSRandall Stewart * NOTE: we may want to handle this differently- currently, we will 1780f8829a4aSRandall Stewart * abort when we get an ack for the expected serial number + 1 (eg. 1781f8829a4aSRandall Stewart * we didn't send it), process an ack normally if it is the expected 1782f8829a4aSRandall Stewart * serial number, and re-send the previous ack for *ALL* other 1783f8829a4aSRandall Stewart * serial numbers 1784f8829a4aSRandall Stewart */ 1785f8829a4aSRandall Stewart 1786f8829a4aSRandall Stewart /* 1787f8829a4aSRandall Stewart * if the serial number is the next expected, but I didn't send it, 1788f8829a4aSRandall Stewart * abort the asoc, since someone probably just hijacked us... 1789f8829a4aSRandall Stewart */ 1790f8829a4aSRandall Stewart if (serial_num == (asoc->asconf_seq_out + 1)) { 1791ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got unexpected next serial number! Aborting asoc!\n"); 1792f8829a4aSRandall Stewart sctp_abort_an_association(stcb->sctp_ep, stcb, 1793ceaad40aSRandall Stewart SCTP_CAUSE_ILLEGAL_ASCONF_ACK, NULL, SCTP_SO_NOT_LOCKED); 17943232788eSRandall Stewart *abort_no_unlock = 1; 1795f8829a4aSRandall Stewart return; 1796f8829a4aSRandall Stewart } 1797c54a18d2SRandall Stewart if (serial_num != asoc->asconf_seq_out_acked + 1) { 1798f8829a4aSRandall Stewart /* got a duplicate/unexpected ASCONF-ACK */ 1799ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got duplicate/unexpected serial number = %xh (expected = %xh)\n", 1800c54a18d2SRandall Stewart serial_num, asoc->asconf_seq_out_acked + 1); 1801f8829a4aSRandall Stewart return; 1802f8829a4aSRandall Stewart } 1803c54a18d2SRandall Stewart if (serial_num == asoc->asconf_seq_out - 1) { 1804f8829a4aSRandall Stewart /* stop our timer */ 18053c503c28SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net, 18063c503c28SRandall Stewart SCTP_FROM_SCTP_ASCONF + SCTP_LOC_3); 1807c54a18d2SRandall Stewart } 1808f8829a4aSRandall Stewart /* process the ASCONF-ACK contents */ 1809f8829a4aSRandall Stewart ack_length = ntohs(cp->ch.chunk_length) - 1810f8829a4aSRandall Stewart sizeof(struct sctp_asconf_ack_chunk); 1811f8829a4aSRandall Stewart offset += sizeof(struct sctp_asconf_ack_chunk); 1812f8829a4aSRandall Stewart /* process through all parameters */ 1813f8829a4aSRandall Stewart while (ack_length >= sizeof(struct sctp_asconf_paramhdr)) { 1814f8829a4aSRandall Stewart unsigned int param_length, param_type; 1815f8829a4aSRandall Stewart 1816f8829a4aSRandall Stewart /* get pointer to next asconf parameter */ 1817f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, 1818f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr), aparam_buf); 1819f8829a4aSRandall Stewart if (aph == NULL) { 1820f8829a4aSRandall Stewart /* can't get an asconf paramhdr */ 1821f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1822f8829a4aSRandall Stewart return; 1823f8829a4aSRandall Stewart } 1824f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 1825f8829a4aSRandall Stewart param_length = ntohs(aph->ph.param_length); 1826f8829a4aSRandall Stewart if (param_length > ack_length) { 1827f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1828f8829a4aSRandall Stewart return; 1829f8829a4aSRandall Stewart } 1830f8829a4aSRandall Stewart if (param_length < sizeof(struct sctp_paramhdr)) { 1831f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1832f8829a4aSRandall Stewart return; 1833f8829a4aSRandall Stewart } 1834f8829a4aSRandall Stewart /* get the complete parameter... */ 1835f8829a4aSRandall Stewart if (param_length > sizeof(aparam_buf)) { 1836ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1837ad81507eSRandall Stewart "param length (%u) larger than buffer size!\n", param_length); 1838f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1839f8829a4aSRandall Stewart return; 1840f8829a4aSRandall Stewart } 1841f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf); 1842f8829a4aSRandall Stewart if (aph == NULL) { 1843f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1844f8829a4aSRandall Stewart return; 1845f8829a4aSRandall Stewart } 1846f8829a4aSRandall Stewart /* correlation_id is transparent to peer, no ntohl needed */ 1847f8829a4aSRandall Stewart id = aph->correlation_id; 1848f8829a4aSRandall Stewart 1849f8829a4aSRandall Stewart switch (param_type) { 1850f8829a4aSRandall Stewart case SCTP_ERROR_CAUSE_IND: 1851f8829a4aSRandall Stewart last_error_id = id; 1852f8829a4aSRandall Stewart /* find the corresponding asconf param in our queue */ 1853f8829a4aSRandall Stewart ap = sctp_asconf_find_param(stcb, id); 1854f8829a4aSRandall Stewart if (ap == NULL) { 1855f8829a4aSRandall Stewart /* hmm... can't find this in our queue! */ 1856f8829a4aSRandall Stewart break; 1857f8829a4aSRandall Stewart } 1858f8829a4aSRandall Stewart /* process the parameter, failed flag */ 1859f8829a4aSRandall Stewart sctp_asconf_process_param_ack(stcb, ap, 0); 1860f8829a4aSRandall Stewart /* process the error response */ 1861f8829a4aSRandall Stewart sctp_asconf_process_error(stcb, aph); 1862f8829a4aSRandall Stewart break; 1863f8829a4aSRandall Stewart case SCTP_SUCCESS_REPORT: 1864f8829a4aSRandall Stewart /* find the corresponding asconf param in our queue */ 1865f8829a4aSRandall Stewart ap = sctp_asconf_find_param(stcb, id); 1866f8829a4aSRandall Stewart if (ap == NULL) { 1867f8829a4aSRandall Stewart /* hmm... can't find this in our queue! */ 1868f8829a4aSRandall Stewart break; 1869f8829a4aSRandall Stewart } 1870f8829a4aSRandall Stewart /* process the parameter, success flag */ 1871f8829a4aSRandall Stewart sctp_asconf_process_param_ack(stcb, ap, 1); 1872f8829a4aSRandall Stewart break; 1873f8829a4aSRandall Stewart default: 1874f8829a4aSRandall Stewart break; 1875f8829a4aSRandall Stewart } /* switch */ 1876f8829a4aSRandall Stewart 1877f8829a4aSRandall Stewart /* update remaining ASCONF-ACK message length to process */ 1878f8829a4aSRandall Stewart ack_length -= SCTP_SIZE32(param_length); 1879f8829a4aSRandall Stewart if (ack_length <= 0) { 1880f8829a4aSRandall Stewart /* no more data in the mbuf chain */ 1881f8829a4aSRandall Stewart break; 1882f8829a4aSRandall Stewart } 1883f8829a4aSRandall Stewart offset += SCTP_SIZE32(param_length); 1884f8829a4aSRandall Stewart } /* while */ 1885f8829a4aSRandall Stewart 1886f8829a4aSRandall Stewart /* 1887f8829a4aSRandall Stewart * if there are any "sent" params still on the queue, these are 1888f8829a4aSRandall Stewart * implicitly "success", or "failed" (if we got an error back) ... 1889f8829a4aSRandall Stewart * so process these appropriately 1890f8829a4aSRandall Stewart * 1891f8829a4aSRandall Stewart * we assume that the correlation_id's are monotonically increasing 1892f8829a4aSRandall Stewart * beginning from 1 and that we don't have *that* many outstanding 1893f8829a4aSRandall Stewart * at any given time 1894f8829a4aSRandall Stewart */ 1895f8829a4aSRandall Stewart if (last_error_id == 0) 1896f8829a4aSRandall Stewart last_error_id--;/* set to "max" value */ 18974a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1898f8829a4aSRandall Stewart if (aa->sent == 1) { 1899f8829a4aSRandall Stewart /* 1900f8829a4aSRandall Stewart * implicitly successful or failed if correlation_id 1901f8829a4aSRandall Stewart * < last_error_id, then success else, failure 1902f8829a4aSRandall Stewart */ 1903f8829a4aSRandall Stewart if (aa->ap.aph.correlation_id < last_error_id) 190418e198d3SRandall Stewart sctp_asconf_process_param_ack(stcb, aa, 1); 1905f8829a4aSRandall Stewart else 190618e198d3SRandall Stewart sctp_asconf_process_param_ack(stcb, aa, 0); 1907f8829a4aSRandall Stewart } else { 1908f8829a4aSRandall Stewart /* 1909f8829a4aSRandall Stewart * since we always process in order (FIFO queue) if 1910f8829a4aSRandall Stewart * we reach one that hasn't been sent, the rest 1911f8829a4aSRandall Stewart * should not have been sent either. so, we're 1912f8829a4aSRandall Stewart * done... 1913f8829a4aSRandall Stewart */ 1914f8829a4aSRandall Stewart break; 1915f8829a4aSRandall Stewart } 1916f8829a4aSRandall Stewart } 1917f8829a4aSRandall Stewart 1918f8829a4aSRandall Stewart /* update the next sequence number to use */ 1919c54a18d2SRandall Stewart asoc->asconf_seq_out_acked++; 1920f8829a4aSRandall Stewart /* remove the old ASCONF on our outbound queue */ 1921f8829a4aSRandall Stewart sctp_toss_old_asconf(stcb); 1922f8829a4aSRandall Stewart if (!TAILQ_EMPTY(&stcb->asoc.asconf_queue)) { 19231b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 1924f8829a4aSRandall Stewart /* we have more params, so restart our timer */ 1925f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, 1926f8829a4aSRandall Stewart stcb, net); 19271b649582SRandall Stewart #else 19281b649582SRandall Stewart /* we have more params, so send out more */ 19293232788eSRandall Stewart sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED); 19301b649582SRandall Stewart #endif 1931f8829a4aSRandall Stewart } 1932f8829a4aSRandall Stewart } 1933f8829a4aSRandall Stewart 19345e2c2d87SRandall Stewart #ifdef INET6 1935f8829a4aSRandall Stewart static uint32_t 1936f8829a4aSRandall Stewart sctp_is_scopeid_in_nets(struct sctp_tcb *stcb, struct sockaddr *sa) 1937f8829a4aSRandall Stewart { 1938f8829a4aSRandall Stewart struct sockaddr_in6 *sin6, *net6; 1939f8829a4aSRandall Stewart struct sctp_nets *net; 1940f8829a4aSRandall Stewart 1941f8829a4aSRandall Stewart if (sa->sa_family != AF_INET6) { 1942f8829a4aSRandall Stewart /* wrong family */ 1943f8829a4aSRandall Stewart return (0); 1944f8829a4aSRandall Stewart } 1945f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 1946f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) == 0) { 1947f8829a4aSRandall Stewart /* not link local address */ 1948f8829a4aSRandall Stewart return (0); 1949f8829a4aSRandall Stewart } 1950f8829a4aSRandall Stewart /* hunt through our destination nets list for this scope_id */ 1951f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 1952f8829a4aSRandall Stewart if (((struct sockaddr *)(&net->ro._l_addr))->sa_family != 1953f8829a4aSRandall Stewart AF_INET6) 1954f8829a4aSRandall Stewart continue; 1955f8829a4aSRandall Stewart net6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1956f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&net6->sin6_addr) == 0) 1957f8829a4aSRandall Stewart continue; 1958f8829a4aSRandall Stewart if (sctp_is_same_scope(sin6, net6)) { 1959f8829a4aSRandall Stewart /* found one */ 1960f8829a4aSRandall Stewart return (1); 1961f8829a4aSRandall Stewart } 1962f8829a4aSRandall Stewart } 1963f8829a4aSRandall Stewart /* didn't find one */ 1964f8829a4aSRandall Stewart return (0); 1965f8829a4aSRandall Stewart } 1966f8829a4aSRandall Stewart 19675e2c2d87SRandall Stewart #endif 19685e2c2d87SRandall Stewart 1969f8829a4aSRandall Stewart /* 1970f8829a4aSRandall Stewart * address management functions 1971f8829a4aSRandall Stewart */ 1972f8829a4aSRandall Stewart static void 1973f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 19743232788eSRandall Stewart struct sctp_ifa *ifa, uint16_t type, int addr_locked) 1975f8829a4aSRandall Stewart { 1976f8829a4aSRandall Stewart int status; 1977f8829a4aSRandall Stewart 1978f8829a4aSRandall Stewart 1979ca85e948SMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0 || 1980f8829a4aSRandall Stewart sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) { 1981f8829a4aSRandall Stewart /* subset bound, no ASCONF allowed case, so ignore */ 1982f8829a4aSRandall Stewart return; 1983f8829a4aSRandall Stewart } 1984f8829a4aSRandall Stewart /* 1985f8829a4aSRandall Stewart * note: we know this is not the subset bound, no ASCONF case eg. 1986f8829a4aSRandall Stewart * this is boundall or subset bound w/ASCONF allowed 1987f8829a4aSRandall Stewart */ 1988f8829a4aSRandall Stewart 1989f8829a4aSRandall Stewart /* first, make sure it's a good address family */ 1990e6194c2eSMichael Tuexen switch (ifa->address.sa.sa_family) { 1991e6194c2eSMichael Tuexen #ifdef INET6 1992e6194c2eSMichael Tuexen case AF_INET6: 1993e6194c2eSMichael Tuexen break; 1994e6194c2eSMichael Tuexen #endif 1995e6194c2eSMichael Tuexen #ifdef INET 1996e6194c2eSMichael Tuexen case AF_INET: 1997e6194c2eSMichael Tuexen break; 1998e6194c2eSMichael Tuexen #endif 1999e6194c2eSMichael Tuexen default: 2000f8829a4aSRandall Stewart return; 2001f8829a4aSRandall Stewart } 2002e6194c2eSMichael Tuexen #ifdef INET6 2003f8829a4aSRandall Stewart /* make sure we're "allowed" to add this type of addr */ 200442551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 2005f8829a4aSRandall Stewart /* invalid if we're not a v6 endpoint */ 2006f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) 2007f8829a4aSRandall Stewart return; 2008f8829a4aSRandall Stewart /* is the v6 addr really valid ? */ 200942551e99SRandall Stewart if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 2010f8829a4aSRandall Stewart return; 2011f8829a4aSRandall Stewart } 2012f8829a4aSRandall Stewart } 2013e6194c2eSMichael Tuexen #endif 2014f8829a4aSRandall Stewart /* put this address on the "pending/do not use yet" list */ 20151b649582SRandall Stewart sctp_add_local_addr_restricted(stcb, ifa); 2016f8829a4aSRandall Stewart /* 2017f8829a4aSRandall Stewart * check address scope if address is out of scope, don't queue 2018f8829a4aSRandall Stewart * anything... note: this would leave the address on both inp and 2019f8829a4aSRandall Stewart * asoc lists 2020f8829a4aSRandall Stewart */ 20215e2c2d87SRandall Stewart switch (ifa->address.sa.sa_family) { 20225e2c2d87SRandall Stewart #ifdef INET6 20235e2c2d87SRandall Stewart case AF_INET6: 20245e2c2d87SRandall Stewart { 2025f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 2026f8829a4aSRandall Stewart 202742551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sin6; 2028f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 2029f8829a4aSRandall Stewart /* we skip unspecifed addresses */ 2030f8829a4aSRandall Stewart return; 2031f8829a4aSRandall Stewart } 2032f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 2033f8829a4aSRandall Stewart if (stcb->asoc.local_scope == 0) { 2034f8829a4aSRandall Stewart return; 2035f8829a4aSRandall Stewart } 2036f8829a4aSRandall Stewart /* is it the right link local scope? */ 203742551e99SRandall Stewart if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) { 2038f8829a4aSRandall Stewart return; 2039f8829a4aSRandall Stewart } 2040f8829a4aSRandall Stewart } 2041f8829a4aSRandall Stewart if (stcb->asoc.site_scope == 0 && 2042f8829a4aSRandall Stewart IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) { 2043f8829a4aSRandall Stewart return; 2044f8829a4aSRandall Stewart } 20455e2c2d87SRandall Stewart break; 20465e2c2d87SRandall Stewart } 20475e2c2d87SRandall Stewart #endif 2048e6194c2eSMichael Tuexen #ifdef INET 20495e2c2d87SRandall Stewart case AF_INET: 20505e2c2d87SRandall Stewart { 2051f8829a4aSRandall Stewart struct sockaddr_in *sin; 2052f8829a4aSRandall Stewart struct in6pcb *inp6; 2053f8829a4aSRandall Stewart 2054f8829a4aSRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 2055f8829a4aSRandall Stewart /* invalid if we are a v6 only endpoint */ 2056f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 205744b7479bSRandall Stewart SCTP_IPV6_V6ONLY(inp6)) 2058f8829a4aSRandall Stewart return; 2059f8829a4aSRandall Stewart 206042551e99SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 2061f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 0) { 2062f8829a4aSRandall Stewart /* we skip unspecifed addresses */ 2063f8829a4aSRandall Stewart return; 2064f8829a4aSRandall Stewart } 2065f8829a4aSRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 2066f8829a4aSRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 2067f8829a4aSRandall Stewart return; 2068f8829a4aSRandall Stewart } 20695e2c2d87SRandall Stewart break; 20705e2c2d87SRandall Stewart } 2071e6194c2eSMichael Tuexen #endif 20725e2c2d87SRandall Stewart default: 2073f8829a4aSRandall Stewart /* else, not AF_INET or AF_INET6, so skip */ 2074f8829a4aSRandall Stewart return; 2075f8829a4aSRandall Stewart } 2076f8829a4aSRandall Stewart 2077f8829a4aSRandall Stewart /* queue an asconf for this address add/delete */ 2078f8829a4aSRandall Stewart if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF)) { 2079f8829a4aSRandall Stewart /* does the peer do asconf? */ 2080f8829a4aSRandall Stewart if (stcb->asoc.peer_supports_asconf) { 2081f8829a4aSRandall Stewart /* queue an asconf for this addr */ 2082f8829a4aSRandall Stewart status = sctp_asconf_queue_add(stcb, ifa, type); 20831b649582SRandall Stewart 2084f8829a4aSRandall Stewart /* 20851b649582SRandall Stewart * if queued ok, and in the open state, send out the 20861b649582SRandall Stewart * ASCONF. If in the non-open state, these will be 20871b649582SRandall Stewart * sent when the state goes open. 2088f8829a4aSRandall Stewart */ 2089f8829a4aSRandall Stewart if (status == 0 && 2090f8829a4aSRandall Stewart SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 20911b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 2092f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, inp, 2093f8829a4aSRandall Stewart stcb, stcb->asoc.primary_destination); 20941b649582SRandall Stewart #else 2095ca85e948SMichael Tuexen sctp_send_asconf(stcb, NULL, addr_locked); 20961b649582SRandall Stewart #endif 2097f8829a4aSRandall Stewart } 2098f8829a4aSRandall Stewart } 2099f8829a4aSRandall Stewart } 2100f8829a4aSRandall Stewart } 2101f8829a4aSRandall Stewart 210242551e99SRandall Stewart 210342551e99SRandall Stewart int 21047215cc1bSMichael Tuexen sctp_asconf_iterator_ep(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED) 2105f8829a4aSRandall Stewart { 210642551e99SRandall Stewart struct sctp_asconf_iterator *asc; 210742551e99SRandall Stewart struct sctp_ifa *ifa; 210842551e99SRandall Stewart struct sctp_laddr *l; 210942551e99SRandall Stewart int cnt_invalid = 0; 2110f8829a4aSRandall Stewart 211142551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 211242551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 211342551e99SRandall Stewart ifa = l->ifa; 2114e6194c2eSMichael Tuexen switch (ifa->address.sa.sa_family) { 2115e6194c2eSMichael Tuexen #ifdef INET6 2116e6194c2eSMichael Tuexen case AF_INET6: 2117f8829a4aSRandall Stewart /* invalid if we're not a v6 endpoint */ 2118f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) { 211942551e99SRandall Stewart cnt_invalid++; 212042551e99SRandall Stewart if (asc->cnt == cnt_invalid) 212142551e99SRandall Stewart return (1); 2122f8829a4aSRandall Stewart } 2123e6194c2eSMichael Tuexen break; 2124e6194c2eSMichael Tuexen #endif 2125e6194c2eSMichael Tuexen #ifdef INET 2126e6194c2eSMichael Tuexen case AF_INET: 2127e6194c2eSMichael Tuexen { 2128f8829a4aSRandall Stewart /* invalid if we are a v6 only endpoint */ 2129f8829a4aSRandall Stewart struct in6pcb *inp6; 2130f8829a4aSRandall Stewart 2131f8829a4aSRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 2132f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 213344b7479bSRandall Stewart SCTP_IPV6_V6ONLY(inp6)) { 213442551e99SRandall Stewart cnt_invalid++; 213542551e99SRandall Stewart if (asc->cnt == cnt_invalid) 213642551e99SRandall Stewart return (1); 2137f8829a4aSRandall Stewart } 2138e6194c2eSMichael Tuexen break; 2139e6194c2eSMichael Tuexen } 2140e6194c2eSMichael Tuexen #endif 2141e6194c2eSMichael Tuexen default: 2142f8829a4aSRandall Stewart /* invalid address family */ 214342551e99SRandall Stewart cnt_invalid++; 214442551e99SRandall Stewart if (asc->cnt == cnt_invalid) 214542551e99SRandall Stewart return (1); 2146f8829a4aSRandall Stewart } 214742551e99SRandall Stewart } 214842551e99SRandall Stewart return (0); 214942551e99SRandall Stewart } 2150f8829a4aSRandall Stewart 21511b649582SRandall Stewart static int 21527215cc1bSMichael Tuexen sctp_asconf_iterator_ep_end(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED) 215342551e99SRandall Stewart { 215442551e99SRandall Stewart struct sctp_ifa *ifa; 215542551e99SRandall Stewart struct sctp_asconf_iterator *asc; 215642551e99SRandall Stewart struct sctp_laddr *laddr, *nladdr, *l; 215742551e99SRandall Stewart 215842551e99SRandall Stewart /* Only for specific case not bound all */ 215942551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 216042551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 216142551e99SRandall Stewart ifa = l->ifa; 216242551e99SRandall Stewart if (l->action == SCTP_ADD_IP_ADDRESS) { 21633c503c28SRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, 21643c503c28SRandall Stewart sctp_nxt_addr) { 216542551e99SRandall Stewart if (laddr->ifa == ifa) { 216642551e99SRandall Stewart laddr->action = 0; 216742551e99SRandall Stewart break; 216842551e99SRandall Stewart } 216942551e99SRandall Stewart } 217042551e99SRandall Stewart } else if (l->action == SCTP_DEL_IP_ADDRESS) { 21714a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) { 217242551e99SRandall Stewart /* remove only after all guys are done */ 217342551e99SRandall Stewart if (laddr->ifa == ifa) { 217442551e99SRandall Stewart sctp_del_local_addr_ep(inp, ifa); 217542551e99SRandall Stewart } 217642551e99SRandall Stewart } 217742551e99SRandall Stewart } 217842551e99SRandall Stewart } 217942551e99SRandall Stewart return (0); 218042551e99SRandall Stewart } 218142551e99SRandall Stewart 218242551e99SRandall Stewart void 21831b649582SRandall Stewart sctp_asconf_iterator_stcb(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 21847215cc1bSMichael Tuexen void *ptr, uint32_t val SCTP_UNUSED) 218542551e99SRandall Stewart { 218642551e99SRandall Stewart struct sctp_asconf_iterator *asc; 218742551e99SRandall Stewart struct sctp_ifa *ifa; 218842551e99SRandall Stewart struct sctp_laddr *l; 218942551e99SRandall Stewart int cnt_invalid = 0; 219042551e99SRandall Stewart int type, status; 21911b649582SRandall Stewart int num_queued = 0; 219242551e99SRandall Stewart 219342551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 219442551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 219542551e99SRandall Stewart ifa = l->ifa; 219642551e99SRandall Stewart type = l->action; 219722a67197SRandall Stewart 219822a67197SRandall Stewart /* address's vrf_id must be the vrf_id of the assoc */ 219922a67197SRandall Stewart if (ifa->vrf_id != stcb->asoc.vrf_id) { 220022a67197SRandall Stewart continue; 220122a67197SRandall Stewart } 220242551e99SRandall Stewart /* Same checks again for assoc */ 22035e2c2d87SRandall Stewart switch (ifa->address.sa.sa_family) { 22045e2c2d87SRandall Stewart #ifdef INET6 22055e2c2d87SRandall Stewart case AF_INET6: 22065e2c2d87SRandall Stewart { 220742551e99SRandall Stewart /* invalid if we're not a v6 endpoint */ 220842551e99SRandall Stewart struct sockaddr_in6 *sin6; 220942551e99SRandall Stewart 221042551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) { 221142551e99SRandall Stewart cnt_invalid++; 221242551e99SRandall Stewart if (asc->cnt == cnt_invalid) 221342551e99SRandall Stewart return; 221442551e99SRandall Stewart else 221542551e99SRandall Stewart continue; 221642551e99SRandall Stewart } 221742551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sin6; 221842551e99SRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 221942551e99SRandall Stewart /* we skip unspecifed addresses */ 222042551e99SRandall Stewart continue; 222142551e99SRandall Stewart } 222242551e99SRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 222342551e99SRandall Stewart if (stcb->asoc.local_scope == 0) { 222442551e99SRandall Stewart continue; 222542551e99SRandall Stewart } 222642551e99SRandall Stewart /* is it the right link local scope? */ 222742551e99SRandall Stewart if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) { 222842551e99SRandall Stewart continue; 222942551e99SRandall Stewart } 223042551e99SRandall Stewart } 22315e2c2d87SRandall Stewart break; 22325e2c2d87SRandall Stewart } 22335e2c2d87SRandall Stewart #endif 2234e6194c2eSMichael Tuexen #ifdef INET 22355e2c2d87SRandall Stewart case AF_INET: 22365e2c2d87SRandall Stewart { 223742551e99SRandall Stewart /* invalid if we are a v6 only endpoint */ 223842551e99SRandall Stewart struct in6pcb *inp6; 223942551e99SRandall Stewart struct sockaddr_in *sin; 224042551e99SRandall Stewart 224142551e99SRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 224242551e99SRandall Stewart /* invalid if we are a v6 only endpoint */ 224342551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 224442551e99SRandall Stewart SCTP_IPV6_V6ONLY(inp6)) 224542551e99SRandall Stewart continue; 224642551e99SRandall Stewart 224742551e99SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 224842551e99SRandall Stewart if (sin->sin_addr.s_addr == 0) { 224942551e99SRandall Stewart /* we skip unspecifed addresses */ 225042551e99SRandall Stewart continue; 225142551e99SRandall Stewart } 225242551e99SRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 225342551e99SRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 2254c2ede4b3SMartin Blapp continue; 225542551e99SRandall Stewart } 225642551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 225742551e99SRandall Stewart SCTP_IPV6_V6ONLY(inp6)) { 225842551e99SRandall Stewart cnt_invalid++; 225942551e99SRandall Stewart if (asc->cnt == cnt_invalid) 226042551e99SRandall Stewart return; 226142551e99SRandall Stewart else 226242551e99SRandall Stewart continue; 226342551e99SRandall Stewart } 22645e2c2d87SRandall Stewart break; 22655e2c2d87SRandall Stewart } 2266e6194c2eSMichael Tuexen #endif 22675e2c2d87SRandall Stewart default: 226842551e99SRandall Stewart /* invalid address family */ 226942551e99SRandall Stewart cnt_invalid++; 227042551e99SRandall Stewart if (asc->cnt == cnt_invalid) 2271f8829a4aSRandall Stewart return; 227242551e99SRandall Stewart else 227342551e99SRandall Stewart continue; 22745e2c2d87SRandall Stewart break; 2275f8829a4aSRandall Stewart } 2276f8829a4aSRandall Stewart 227742551e99SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 22781b649582SRandall Stewart /* prevent this address from being used as a source */ 22791b649582SRandall Stewart sctp_add_local_addr_restricted(stcb, ifa); 228042551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 2281f8829a4aSRandall Stewart struct sctp_nets *net; 2282f8829a4aSRandall Stewart 2283f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 228417205eccSRandall Stewart sctp_rtentry_t *rt; 2285f8829a4aSRandall Stewart 2286f8829a4aSRandall Stewart /* delete this address if cached */ 2287851b7298SRandall Stewart if (net->ro._s_addr == ifa) { 228842551e99SRandall Stewart sctp_free_ifa(net->ro._s_addr); 228942551e99SRandall Stewart net->ro._s_addr = NULL; 229042551e99SRandall Stewart net->src_addr_selected = 0; 2291f8829a4aSRandall Stewart rt = net->ro.ro_rt; 229242551e99SRandall Stewart if (rt) { 229342551e99SRandall Stewart RTFREE(rt); 2294f8829a4aSRandall Stewart net->ro.ro_rt = NULL; 2295f8829a4aSRandall Stewart } 229642551e99SRandall Stewart /* 229742551e99SRandall Stewart * Now we deleted our src address, 229842551e99SRandall Stewart * should we not also now reset the 229942551e99SRandall Stewart * cwnd/rto to start as if its a new 230042551e99SRandall Stewart * address? 230142551e99SRandall Stewart */ 2302b54d3a6cSRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net); 2303108df27cSRandall Stewart net->RTO = 0; 230442551e99SRandall Stewart 2305f8829a4aSRandall Stewart } 2306f8829a4aSRandall Stewart } 230742551e99SRandall Stewart } else if (type == SCTP_SET_PRIM_ADDR) { 230842551e99SRandall Stewart if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) { 23091b649582SRandall Stewart /* must validate the ifa is in the ep */ 231042551e99SRandall Stewart if (sctp_is_addr_in_ep(stcb->sctp_ep, ifa) == 0) { 231142551e99SRandall Stewart continue; 2312f8829a4aSRandall Stewart } 231342551e99SRandall Stewart } else { 231442551e99SRandall Stewart /* Need to check scopes for this guy */ 231542551e99SRandall Stewart if (sctp_is_address_in_scope(ifa, 231642551e99SRandall Stewart stcb->asoc.ipv4_addr_legal, 231742551e99SRandall Stewart stcb->asoc.ipv6_addr_legal, 231842551e99SRandall Stewart stcb->asoc.loopback_scope, 231942551e99SRandall Stewart stcb->asoc.ipv4_local_scope, 232042551e99SRandall Stewart stcb->asoc.local_scope, 232142551e99SRandall Stewart stcb->asoc.site_scope, 0) == 0) { 232242551e99SRandall Stewart continue; 2323f8829a4aSRandall Stewart } 232442551e99SRandall Stewart } 232542551e99SRandall Stewart } 232642551e99SRandall Stewart /* queue an asconf for this address add/delete */ 23271b649582SRandall Stewart if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF) && 23281b649582SRandall Stewart stcb->asoc.peer_supports_asconf) { 232942551e99SRandall Stewart /* queue an asconf for this addr */ 233042551e99SRandall Stewart status = sctp_asconf_queue_add(stcb, ifa, type); 233142551e99SRandall Stewart /* 23321b649582SRandall Stewart * if queued ok, and in the open state, update the 23331b649582SRandall Stewart * count of queued params. If in the non-open 23341b649582SRandall Stewart * state, these get sent when the assoc goes open. 233542551e99SRandall Stewart */ 23361b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 23371b649582SRandall Stewart if (status >= 0) { 23381b649582SRandall Stewart num_queued++; 233942551e99SRandall Stewart } 234042551e99SRandall Stewart } 234142551e99SRandall Stewart } 234242551e99SRandall Stewart } 23431b649582SRandall Stewart /* 23441b649582SRandall Stewart * If we have queued params in the open state, send out an ASCONF. 23451b649582SRandall Stewart */ 23461b649582SRandall Stewart if (num_queued > 0) { 2347ca85e948SMichael Tuexen sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED); 23481b649582SRandall Stewart } 234942551e99SRandall Stewart } 235042551e99SRandall Stewart 235142551e99SRandall Stewart void 23527215cc1bSMichael Tuexen sctp_asconf_iterator_end(void *ptr, uint32_t val SCTP_UNUSED) 235342551e99SRandall Stewart { 235442551e99SRandall Stewart struct sctp_asconf_iterator *asc; 235542551e99SRandall Stewart struct sctp_ifa *ifa; 23564a9ef3f8SMichael Tuexen struct sctp_laddr *l, *nl; 235742551e99SRandall Stewart 235842551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 23594a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(l, &asc->list_of_work, sctp_nxt_addr, nl) { 236042551e99SRandall Stewart ifa = l->ifa; 236142551e99SRandall Stewart if (l->action == SCTP_ADD_IP_ADDRESS) { 236242551e99SRandall Stewart /* Clear the defer use flag */ 236342551e99SRandall Stewart ifa->localifa_flags &= ~SCTP_ADDR_DEFER_USE; 236442551e99SRandall Stewart } 236542551e99SRandall Stewart sctp_free_ifa(ifa); 2366b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), l); 236742551e99SRandall Stewart SCTP_DECR_LADDR_COUNT(); 236842551e99SRandall Stewart } 2369207304d4SRandall Stewart SCTP_FREE(asc, SCTP_M_ASC_IT); 2370f8829a4aSRandall Stewart } 2371f8829a4aSRandall Stewart 2372f8829a4aSRandall Stewart /* 23731b649582SRandall Stewart * sa is the sockaddr to ask the peer to set primary to. 23741b649582SRandall Stewart * returns: 0 = completed, -1 = error 2375f8829a4aSRandall Stewart */ 2376c4739e2fSRandall Stewart int32_t 2377f8829a4aSRandall Stewart sctp_set_primary_ip_address_sa(struct sctp_tcb *stcb, struct sockaddr *sa) 2378f8829a4aSRandall Stewart { 23793232788eSRandall Stewart uint32_t vrf_id; 23803232788eSRandall Stewart struct sctp_ifa *ifa; 2381f8829a4aSRandall Stewart 23823232788eSRandall Stewart /* find the ifa for the desired set primary */ 23833232788eSRandall Stewart vrf_id = stcb->asoc.vrf_id; 23843232788eSRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 23853232788eSRandall Stewart if (ifa == NULL) { 23863232788eSRandall Stewart /* Invalid address */ 23873232788eSRandall Stewart return (-1); 23883232788eSRandall Stewart } 2389f8829a4aSRandall Stewart /* queue an ASCONF:SET_PRIM_ADDR to be sent */ 23903232788eSRandall Stewart if (!sctp_asconf_queue_add(stcb, ifa, SCTP_SET_PRIM_ADDR)) { 2391f8829a4aSRandall Stewart /* set primary queuing succeeded */ 2392ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2393ad81507eSRandall Stewart "set_primary_ip_address_sa: queued on tcb=%p, ", 2394f8829a4aSRandall Stewart stcb); 2395ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 23961b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 23971b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 23981b649582SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 23991b649582SRandall Stewart stcb->sctp_ep, stcb, 24001b649582SRandall Stewart stcb->asoc.primary_destination); 24011b649582SRandall Stewart #else 2402ca85e948SMichael Tuexen sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED); 24031b649582SRandall Stewart #endif 24041b649582SRandall Stewart } 2405f8829a4aSRandall Stewart } else { 2406ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address_sa: failed to add to queue on tcb=%p, ", 2407f8829a4aSRandall Stewart stcb); 2408ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 2409f8829a4aSRandall Stewart return (-1); 2410f8829a4aSRandall Stewart } 2411f8829a4aSRandall Stewart return (0); 2412f8829a4aSRandall Stewart } 2413f8829a4aSRandall Stewart 2414f8829a4aSRandall Stewart void 241542551e99SRandall Stewart sctp_set_primary_ip_address(struct sctp_ifa *ifa) 2416f8829a4aSRandall Stewart { 2417f8829a4aSRandall Stewart struct sctp_inpcb *inp; 2418f8829a4aSRandall Stewart 2419f8829a4aSRandall Stewart /* go through all our PCB's */ 2420b3f1ea41SRandall Stewart LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) { 2421f8829a4aSRandall Stewart struct sctp_tcb *stcb; 2422f8829a4aSRandall Stewart 2423f8829a4aSRandall Stewart /* process for all associations for this endpoint */ 2424f8829a4aSRandall Stewart LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) { 2425f8829a4aSRandall Stewart /* queue an ASCONF:SET_PRIM_ADDR to be sent */ 2426f8829a4aSRandall Stewart if (!sctp_asconf_queue_add(stcb, ifa, 2427f8829a4aSRandall Stewart SCTP_SET_PRIM_ADDR)) { 2428f8829a4aSRandall Stewart /* set primary queuing succeeded */ 2429ceaad40aSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address: queued on stcb=%p, ", 2430f8829a4aSRandall Stewart stcb); 2431ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &ifa->address.sa); 24321b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 24331b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 24341b649582SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 24351b649582SRandall Stewart stcb->sctp_ep, stcb, 24361b649582SRandall Stewart stcb->asoc.primary_destination); 24371b649582SRandall Stewart #else 2438ca85e948SMichael Tuexen sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED); 24391b649582SRandall Stewart #endif 24401b649582SRandall Stewart } 2441f8829a4aSRandall Stewart } 2442f8829a4aSRandall Stewart } /* for each stcb */ 2443f8829a4aSRandall Stewart } /* for each inp */ 2444f8829a4aSRandall Stewart } 2445f8829a4aSRandall Stewart 2446c54a18d2SRandall Stewart int 2447c54a18d2SRandall Stewart sctp_is_addr_pending(struct sctp_tcb *stcb, struct sctp_ifa *sctp_ifa) 2448c54a18d2SRandall Stewart { 2449c54a18d2SRandall Stewart struct sctp_tmit_chunk *chk, *nchk; 2450c54a18d2SRandall Stewart unsigned int offset, asconf_limit; 2451c54a18d2SRandall Stewart struct sctp_asconf_chunk *acp; 2452c54a18d2SRandall Stewart struct sctp_asconf_paramhdr *aph; 2453c54a18d2SRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 2454e6194c2eSMichael Tuexen struct sctp_paramhdr *ph; 2455c54a18d2SRandall Stewart int add_cnt, del_cnt; 2456c54a18d2SRandall Stewart uint16_t last_param_type; 2457c54a18d2SRandall Stewart 2458c54a18d2SRandall Stewart add_cnt = del_cnt = 0; 2459c54a18d2SRandall Stewart last_param_type = 0; 24604a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &stcb->asoc.asconf_send_queue, sctp_next, nchk) { 2461c54a18d2SRandall Stewart if (chk->data == NULL) { 2462c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: No mbuf data?\n"); 2463c54a18d2SRandall Stewart continue; 2464c54a18d2SRandall Stewart } 2465c54a18d2SRandall Stewart offset = 0; 2466c54a18d2SRandall Stewart acp = mtod(chk->data, struct sctp_asconf_chunk *); 2467c54a18d2SRandall Stewart offset += sizeof(struct sctp_asconf_chunk); 2468c54a18d2SRandall Stewart asconf_limit = ntohs(acp->ch.chunk_length); 2469e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_paramhdr), aparam_buf); 2470e6194c2eSMichael Tuexen if (ph == NULL) { 2471c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get lookup addr!\n"); 2472c54a18d2SRandall Stewart continue; 2473c54a18d2SRandall Stewart } 2474e6194c2eSMichael Tuexen offset += ntohs(ph->param_length); 2475c54a18d2SRandall Stewart 2476c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf); 2477c54a18d2SRandall Stewart if (aph == NULL) { 2478c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: Empty ASCONF will be sent?\n"); 2479c54a18d2SRandall Stewart continue; 2480c54a18d2SRandall Stewart } 2481c54a18d2SRandall Stewart while (aph != NULL) { 2482c54a18d2SRandall Stewart unsigned int param_length, param_type; 2483c54a18d2SRandall Stewart 2484c54a18d2SRandall Stewart param_type = ntohs(aph->ph.param_type); 2485c54a18d2SRandall Stewart param_length = ntohs(aph->ph.param_length); 2486c54a18d2SRandall Stewart if (offset + param_length > asconf_limit) { 2487c54a18d2SRandall Stewart /* parameter goes beyond end of chunk! */ 2488c54a18d2SRandall Stewart break; 2489c54a18d2SRandall Stewart } 2490c54a18d2SRandall Stewart if (param_length > sizeof(aparam_buf)) { 2491c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length); 2492c54a18d2SRandall Stewart break; 2493c54a18d2SRandall Stewart } 2494c54a18d2SRandall Stewart if (param_length <= sizeof(struct sctp_paramhdr)) { 2495c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length); 2496c54a18d2SRandall Stewart break; 2497c54a18d2SRandall Stewart } 2498c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf); 2499c54a18d2SRandall Stewart if (aph == NULL) { 2500c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get entire param\n"); 2501c54a18d2SRandall Stewart break; 2502c54a18d2SRandall Stewart } 2503e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *)(aph + 1); 2504e6194c2eSMichael Tuexen if (sctp_addr_match(ph, &sctp_ifa->address.sa) != 0) { 2505c54a18d2SRandall Stewart switch (param_type) { 2506c54a18d2SRandall Stewart case SCTP_ADD_IP_ADDRESS: 2507c54a18d2SRandall Stewart add_cnt++; 2508c54a18d2SRandall Stewart break; 2509c54a18d2SRandall Stewart case SCTP_DEL_IP_ADDRESS: 2510c54a18d2SRandall Stewart del_cnt++; 2511c54a18d2SRandall Stewart break; 2512c54a18d2SRandall Stewart default: 2513c54a18d2SRandall Stewart break; 2514c54a18d2SRandall Stewart } 2515c54a18d2SRandall Stewart last_param_type = param_type; 2516c54a18d2SRandall Stewart } 2517c54a18d2SRandall Stewart offset += SCTP_SIZE32(param_length); 2518c54a18d2SRandall Stewart if (offset >= asconf_limit) { 2519c54a18d2SRandall Stewart /* no more data in the mbuf chain */ 2520c54a18d2SRandall Stewart break; 2521c54a18d2SRandall Stewart } 2522c54a18d2SRandall Stewart /* get pointer to next asconf param */ 2523c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf); 2524c54a18d2SRandall Stewart } 2525c54a18d2SRandall Stewart } 2526c54a18d2SRandall Stewart 2527c54a18d2SRandall Stewart /* 2528c54a18d2SRandall Stewart * we want to find the sequences which consist of ADD -> DEL -> ADD 2529c54a18d2SRandall Stewart * or DEL -> ADD 2530c54a18d2SRandall Stewart */ 2531c54a18d2SRandall Stewart if (add_cnt > del_cnt || 2532c54a18d2SRandall Stewart (add_cnt == del_cnt && last_param_type == SCTP_ADD_IP_ADDRESS)) { 2533*60990c0cSMichael Tuexen return (1); 2534c54a18d2SRandall Stewart } 2535*60990c0cSMichael Tuexen return (0); 2536c54a18d2SRandall Stewart } 2537c54a18d2SRandall Stewart 2538f8829a4aSRandall Stewart static struct sockaddr * 25393232788eSRandall Stewart sctp_find_valid_localaddr(struct sctp_tcb *stcb, int addr_locked) 2540f8829a4aSRandall Stewart { 254142551e99SRandall Stewart struct sctp_vrf *vrf = NULL; 254242551e99SRandall Stewart struct sctp_ifn *sctp_ifn; 254342551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 2544f8829a4aSRandall Stewart 25453232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2546c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 254742551e99SRandall Stewart vrf = sctp_find_vrf(stcb->asoc.vrf_id); 2548ad81507eSRandall Stewart if (vrf == NULL) { 25493232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2550c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 2551ad81507eSRandall Stewart return (NULL); 2552ad81507eSRandall Stewart } 255342551e99SRandall Stewart LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) { 255442551e99SRandall Stewart if (stcb->asoc.loopback_scope == 0 && 255542551e99SRandall Stewart SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) { 2556f8829a4aSRandall Stewart /* Skip if loopback_scope not set */ 2557f8829a4aSRandall Stewart continue; 2558f8829a4aSRandall Stewart } 255942551e99SRandall Stewart LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) { 2560e6194c2eSMichael Tuexen switch (sctp_ifa->address.sa.sa_family) { 2561e6194c2eSMichael Tuexen #ifdef INET 2562e6194c2eSMichael Tuexen case AF_INET: 2563e6194c2eSMichael Tuexen if (stcb->asoc.ipv4_addr_legal) { 2564f8829a4aSRandall Stewart struct sockaddr_in *sin; 2565f8829a4aSRandall Stewart 256642551e99SRandall Stewart sin = (struct sockaddr_in *)&sctp_ifa->address.sa; 2567f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 0) { 2568f8829a4aSRandall Stewart /* skip unspecifed addresses */ 2569f8829a4aSRandall Stewart continue; 2570f8829a4aSRandall Stewart } 2571f8829a4aSRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 2572f8829a4aSRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) 2573f8829a4aSRandall Stewart continue; 2574f8829a4aSRandall Stewart 2575c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, sctp_ifa) && 2576c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, sctp_ifa))) 2577f8829a4aSRandall Stewart continue; 2578e6194c2eSMichael Tuexen /* 2579e6194c2eSMichael Tuexen * found a valid local v4 address to 2580e6194c2eSMichael Tuexen * use 2581e6194c2eSMichael Tuexen */ 25823232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2583c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 258442551e99SRandall Stewart return (&sctp_ifa->address.sa); 2585e6194c2eSMichael Tuexen } 2586e6194c2eSMichael Tuexen break; 2587e6194c2eSMichael Tuexen #endif 2588e6194c2eSMichael Tuexen #ifdef INET6 2589e6194c2eSMichael Tuexen case AF_INET6: 2590e6194c2eSMichael Tuexen if (stcb->asoc.ipv6_addr_legal) { 2591f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 2592f8829a4aSRandall Stewart 259342551e99SRandall Stewart if (sctp_ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 2594f8829a4aSRandall Stewart continue; 259542551e99SRandall Stewart } 259642551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa; 2597f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 2598e6194c2eSMichael Tuexen /* 2599e6194c2eSMichael Tuexen * we skip unspecifed 2600e6194c2eSMichael Tuexen * addresses 2601e6194c2eSMichael Tuexen */ 2602f8829a4aSRandall Stewart continue; 2603f8829a4aSRandall Stewart } 2604f8829a4aSRandall Stewart if (stcb->asoc.local_scope == 0 && 2605f8829a4aSRandall Stewart IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) 2606f8829a4aSRandall Stewart continue; 2607f8829a4aSRandall Stewart if (stcb->asoc.site_scope == 0 && 2608f8829a4aSRandall Stewart IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) 2609f8829a4aSRandall Stewart continue; 2610f8829a4aSRandall Stewart 2611c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, sctp_ifa) && 2612c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, sctp_ifa))) 2613c54a18d2SRandall Stewart continue; 2614e6194c2eSMichael Tuexen /* 2615e6194c2eSMichael Tuexen * found a valid local v6 address to 2616e6194c2eSMichael Tuexen * use 2617e6194c2eSMichael Tuexen */ 26183232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2619c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 262042551e99SRandall Stewart return (&sctp_ifa->address.sa); 2621f8829a4aSRandall Stewart } 2622e6194c2eSMichael Tuexen break; 2623e6194c2eSMichael Tuexen #endif 2624e6194c2eSMichael Tuexen default: 2625e6194c2eSMichael Tuexen break; 2626e6194c2eSMichael Tuexen } 2627f8829a4aSRandall Stewart } 2628f8829a4aSRandall Stewart } 2629f8829a4aSRandall Stewart /* no valid addresses found */ 26303232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2631c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 2632f8829a4aSRandall Stewart return (NULL); 2633f8829a4aSRandall Stewart } 2634f8829a4aSRandall Stewart 2635f8829a4aSRandall Stewart static struct sockaddr * 2636f8829a4aSRandall Stewart sctp_find_valid_localaddr_ep(struct sctp_tcb *stcb) 2637f8829a4aSRandall Stewart { 2638f8829a4aSRandall Stewart struct sctp_laddr *laddr; 2639f8829a4aSRandall Stewart 2640f8829a4aSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 2641f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 2642f8829a4aSRandall Stewart continue; 2643f8829a4aSRandall Stewart } 2644f8829a4aSRandall Stewart /* is the address restricted ? */ 2645c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, laddr->ifa) && 2646c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, laddr->ifa))) 2647f8829a4aSRandall Stewart continue; 2648f8829a4aSRandall Stewart 2649f8829a4aSRandall Stewart /* found a valid local address to use */ 265042551e99SRandall Stewart return (&laddr->ifa->address.sa); 2651f8829a4aSRandall Stewart } 2652f8829a4aSRandall Stewart /* no valid addresses found */ 2653f8829a4aSRandall Stewart return (NULL); 2654f8829a4aSRandall Stewart } 2655f8829a4aSRandall Stewart 2656f8829a4aSRandall Stewart /* 265718e198d3SRandall Stewart * builds an ASCONF chunk from queued ASCONF params. 265818e198d3SRandall Stewart * returns NULL on error (no mbuf, no ASCONF params queued, etc). 2659f8829a4aSRandall Stewart */ 2660f8829a4aSRandall Stewart struct mbuf * 26613232788eSRandall Stewart sctp_compose_asconf(struct sctp_tcb *stcb, int *retlen, int addr_locked) 2662f8829a4aSRandall Stewart { 2663f8829a4aSRandall Stewart struct mbuf *m_asconf, *m_asconf_chk; 2664f8829a4aSRandall Stewart struct sctp_asconf_addr *aa; 2665f8829a4aSRandall Stewart struct sctp_asconf_chunk *acp; 2666f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 2667f8829a4aSRandall Stewart struct sctp_asconf_addr_param *aap; 2668f8829a4aSRandall Stewart uint32_t p_length; 2669f8829a4aSRandall Stewart uint32_t correlation_id = 1; /* 0 is reserved... */ 2670f8829a4aSRandall Stewart caddr_t ptr, lookup_ptr; 2671f8829a4aSRandall Stewart uint8_t lookup_used = 0; 2672f8829a4aSRandall Stewart 2673f8829a4aSRandall Stewart /* are there any asconf params to send? */ 2674c54a18d2SRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 2675c54a18d2SRandall Stewart if (aa->sent == 0) 2676c54a18d2SRandall Stewart break; 2677f8829a4aSRandall Stewart } 2678c54a18d2SRandall Stewart if (aa == NULL) 26791b649582SRandall Stewart return (NULL); 2680c54a18d2SRandall Stewart 2681f8829a4aSRandall Stewart /* 2682f8829a4aSRandall Stewart * get a chunk header mbuf and a cluster for the asconf params since 2683f8829a4aSRandall Stewart * it's simpler to fill in the asconf chunk header lookup address on 2684f8829a4aSRandall Stewart * the fly 2685f8829a4aSRandall Stewart */ 2686139bc87fSRandall Stewart m_asconf_chk = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_chunk), 0, M_DONTWAIT, 1, MT_DATA); 2687f8829a4aSRandall Stewart if (m_asconf_chk == NULL) { 2688f8829a4aSRandall Stewart /* no mbuf's */ 2689ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2690ad81507eSRandall Stewart "compose_asconf: couldn't get chunk mbuf!\n"); 2691f8829a4aSRandall Stewart return (NULL); 2692f8829a4aSRandall Stewart } 2693139bc87fSRandall Stewart m_asconf = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA); 2694f8829a4aSRandall Stewart if (m_asconf == NULL) { 2695f8829a4aSRandall Stewart /* no mbuf's */ 2696ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2697ad81507eSRandall Stewart "compose_asconf: couldn't get mbuf!\n"); 2698f8829a4aSRandall Stewart sctp_m_freem(m_asconf_chk); 2699f8829a4aSRandall Stewart return (NULL); 2700f8829a4aSRandall Stewart } 2701139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) = sizeof(struct sctp_asconf_chunk); 2702139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf) = 0; 2703f8829a4aSRandall Stewart acp = mtod(m_asconf_chk, struct sctp_asconf_chunk *); 2704f8829a4aSRandall Stewart bzero(acp, sizeof(struct sctp_asconf_chunk)); 2705f8829a4aSRandall Stewart /* save pointers to lookup address and asconf params */ 2706f8829a4aSRandall Stewart lookup_ptr = (caddr_t)(acp + 1); /* after the header */ 2707f8829a4aSRandall Stewart ptr = mtod(m_asconf, caddr_t); /* beginning of cluster */ 2708f8829a4aSRandall Stewart 2709f8829a4aSRandall Stewart /* fill in chunk header info */ 2710f8829a4aSRandall Stewart acp->ch.chunk_type = SCTP_ASCONF; 2711f8829a4aSRandall Stewart acp->ch.chunk_flags = 0; 2712f8829a4aSRandall Stewart acp->serial_number = htonl(stcb->asoc.asconf_seq_out); 2713c54a18d2SRandall Stewart stcb->asoc.asconf_seq_out++; 2714f8829a4aSRandall Stewart 2715f8829a4aSRandall Stewart /* add parameters... up to smallest MTU allowed */ 2716f8829a4aSRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 2717c54a18d2SRandall Stewart if (aa->sent) 2718c54a18d2SRandall Stewart continue; 2719f8829a4aSRandall Stewart /* get the parameter length */ 2720f8829a4aSRandall Stewart p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length); 2721f8829a4aSRandall Stewart /* will it fit in current chunk? */ 2722139bc87fSRandall Stewart if (SCTP_BUF_LEN(m_asconf) + p_length > stcb->asoc.smallest_mtu) { 2723f8829a4aSRandall Stewart /* won't fit, so we're done with this chunk */ 2724f8829a4aSRandall Stewart break; 2725f8829a4aSRandall Stewart } 2726f8829a4aSRandall Stewart /* assign (and store) a correlation id */ 2727f8829a4aSRandall Stewart aa->ap.aph.correlation_id = correlation_id++; 2728f8829a4aSRandall Stewart 2729f8829a4aSRandall Stewart /* 2730f8829a4aSRandall Stewart * fill in address if we're doing a delete this is a simple 2731f8829a4aSRandall Stewart * way for us to fill in the correlation address, which 2732f8829a4aSRandall Stewart * should only be used by the peer if we're deleting our 2733f8829a4aSRandall Stewart * source address and adding a new address (e.g. renumbering 2734f8829a4aSRandall Stewart * case) 2735f8829a4aSRandall Stewart */ 2736f8829a4aSRandall Stewart if (lookup_used == 0 && 2737830d754dSRandall Stewart (aa->special_del == 0) && 2738f8829a4aSRandall Stewart aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) { 2739f8829a4aSRandall Stewart struct sctp_ipv6addr_param *lookup; 2740f8829a4aSRandall Stewart uint16_t p_size, addr_size; 2741f8829a4aSRandall Stewart 2742f8829a4aSRandall Stewart lookup = (struct sctp_ipv6addr_param *)lookup_ptr; 2743f8829a4aSRandall Stewart lookup->ph.param_type = 2744f8829a4aSRandall Stewart htons(aa->ap.addrp.ph.param_type); 2745f8829a4aSRandall Stewart if (aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) { 2746f8829a4aSRandall Stewart /* copy IPv6 address */ 2747f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv6addr_param); 2748f8829a4aSRandall Stewart addr_size = sizeof(struct in6_addr); 2749f8829a4aSRandall Stewart } else { 2750f8829a4aSRandall Stewart /* copy IPv4 address */ 2751f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv4addr_param); 2752f8829a4aSRandall Stewart addr_size = sizeof(struct in_addr); 2753f8829a4aSRandall Stewart } 2754f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(p_size)); 2755f8829a4aSRandall Stewart memcpy(lookup->addr, &aa->ap.addrp.addr, addr_size); 2756139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size); 2757f8829a4aSRandall Stewart lookup_used = 1; 2758f8829a4aSRandall Stewart } 2759f8829a4aSRandall Stewart /* copy into current space */ 2760f8829a4aSRandall Stewart memcpy(ptr, &aa->ap, p_length); 2761f8829a4aSRandall Stewart 2762f8829a4aSRandall Stewart /* network elements and update lengths */ 2763f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)ptr; 2764f8829a4aSRandall Stewart aap = (struct sctp_asconf_addr_param *)ptr; 2765f8829a4aSRandall Stewart /* correlation_id is transparent to peer, no htonl needed */ 2766f8829a4aSRandall Stewart aph->ph.param_type = htons(aph->ph.param_type); 2767f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 2768f8829a4aSRandall Stewart aap->addrp.ph.param_type = htons(aap->addrp.ph.param_type); 2769f8829a4aSRandall Stewart aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length); 2770f8829a4aSRandall Stewart 2771139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf) += SCTP_SIZE32(p_length); 2772f8829a4aSRandall Stewart ptr += SCTP_SIZE32(p_length); 2773f8829a4aSRandall Stewart 2774f8829a4aSRandall Stewart /* 2775f8829a4aSRandall Stewart * these params are removed off the pending list upon 2776f8829a4aSRandall Stewart * getting an ASCONF-ACK back from the peer, just set flag 2777f8829a4aSRandall Stewart */ 2778f8829a4aSRandall Stewart aa->sent = 1; 2779f8829a4aSRandall Stewart } 2780f8829a4aSRandall Stewart /* check to see if the lookup addr has been populated yet */ 2781f8829a4aSRandall Stewart if (lookup_used == 0) { 2782f8829a4aSRandall Stewart /* NOTE: if the address param is optional, can skip this... */ 2783f8829a4aSRandall Stewart /* add any valid (existing) address... */ 2784f8829a4aSRandall Stewart struct sctp_ipv6addr_param *lookup; 2785f8829a4aSRandall Stewart uint16_t p_size, addr_size; 2786f8829a4aSRandall Stewart struct sockaddr *found_addr; 2787f8829a4aSRandall Stewart caddr_t addr_ptr; 2788f8829a4aSRandall Stewart 2789f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) 27903232788eSRandall Stewart found_addr = sctp_find_valid_localaddr(stcb, 27913232788eSRandall Stewart addr_locked); 2792f8829a4aSRandall Stewart else 2793f8829a4aSRandall Stewart found_addr = sctp_find_valid_localaddr_ep(stcb); 2794f8829a4aSRandall Stewart 2795f8829a4aSRandall Stewart lookup = (struct sctp_ipv6addr_param *)lookup_ptr; 2796f8829a4aSRandall Stewart if (found_addr != NULL) { 2797e6194c2eSMichael Tuexen switch (found_addr->sa_family) { 2798e6194c2eSMichael Tuexen #ifdef INET6 2799e6194c2eSMichael Tuexen case AF_INET6: 2800f8829a4aSRandall Stewart /* copy IPv6 address */ 2801f8829a4aSRandall Stewart lookup->ph.param_type = 2802f8829a4aSRandall Stewart htons(SCTP_IPV6_ADDRESS); 2803f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv6addr_param); 2804f8829a4aSRandall Stewart addr_size = sizeof(struct in6_addr); 2805f8829a4aSRandall Stewart addr_ptr = (caddr_t)&((struct sockaddr_in6 *) 2806f8829a4aSRandall Stewart found_addr)->sin6_addr; 2807e6194c2eSMichael Tuexen break; 2808e6194c2eSMichael Tuexen #endif 2809e6194c2eSMichael Tuexen #ifdef INET 2810e6194c2eSMichael Tuexen case AF_INET: 2811f8829a4aSRandall Stewart /* copy IPv4 address */ 2812f8829a4aSRandall Stewart lookup->ph.param_type = 2813f8829a4aSRandall Stewart htons(SCTP_IPV4_ADDRESS); 2814f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv4addr_param); 2815f8829a4aSRandall Stewart addr_size = sizeof(struct in_addr); 2816f8829a4aSRandall Stewart addr_ptr = (caddr_t)&((struct sockaddr_in *) 2817f8829a4aSRandall Stewart found_addr)->sin_addr; 2818e6194c2eSMichael Tuexen break; 2819e6194c2eSMichael Tuexen #endif 2820e6194c2eSMichael Tuexen default: 2821e6194c2eSMichael Tuexen p_size = 0; 2822e6194c2eSMichael Tuexen addr_size = 0; 2823e6194c2eSMichael Tuexen addr_ptr = NULL; 2824e6194c2eSMichael Tuexen break; 2825f8829a4aSRandall Stewart } 2826f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(p_size)); 2827f8829a4aSRandall Stewart memcpy(lookup->addr, addr_ptr, addr_size); 2828139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size); 2829f8829a4aSRandall Stewart } else { 2830f8829a4aSRandall Stewart /* uh oh... don't have any address?? */ 2831ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2832ad81507eSRandall Stewart "compose_asconf: no lookup addr!\n"); 2833e6194c2eSMichael Tuexen /* XXX for now, we send a IPv4 address of 0.0.0.0 */ 2834f8829a4aSRandall Stewart lookup->ph.param_type = htons(SCTP_IPV4_ADDRESS); 2835f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param))); 2836f8829a4aSRandall Stewart bzero(lookup->addr, sizeof(struct in_addr)); 2837139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param)); 2838f8829a4aSRandall Stewart } 2839f8829a4aSRandall Stewart } 2840f8829a4aSRandall Stewart /* chain it all together */ 2841139bc87fSRandall Stewart SCTP_BUF_NEXT(m_asconf_chk) = m_asconf; 28423c503c28SRandall Stewart *retlen = SCTP_BUF_LEN(m_asconf_chk) + SCTP_BUF_LEN(m_asconf); 28433c503c28SRandall Stewart acp->ch.chunk_length = ntohs(*retlen); 2844f8829a4aSRandall Stewart 2845f8829a4aSRandall Stewart return (m_asconf_chk); 2846f8829a4aSRandall Stewart } 2847f8829a4aSRandall Stewart 2848f8829a4aSRandall Stewart /* 2849f8829a4aSRandall Stewart * section to handle address changes before an association is up eg. changes 2850f8829a4aSRandall Stewart * during INIT/INIT-ACK/COOKIE-ECHO handshake 2851f8829a4aSRandall Stewart */ 2852f8829a4aSRandall Stewart 2853f8829a4aSRandall Stewart /* 2854f8829a4aSRandall Stewart * processes the (local) addresses in the INIT-ACK chunk 2855f8829a4aSRandall Stewart */ 2856f8829a4aSRandall Stewart static void 2857f8829a4aSRandall Stewart sctp_process_initack_addresses(struct sctp_tcb *stcb, struct mbuf *m, 2858f8829a4aSRandall Stewart unsigned int offset, unsigned int length) 2859f8829a4aSRandall Stewart { 2860f8829a4aSRandall Stewart struct sctp_paramhdr tmp_param, *ph; 2861f8829a4aSRandall Stewart uint16_t plen, ptype; 286242551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 2863f8829a4aSRandall Stewart struct sctp_ipv6addr_param addr_store; 2864e6194c2eSMichael Tuexen 2865e6194c2eSMichael Tuexen #ifdef INET6 2866f8829a4aSRandall Stewart struct sockaddr_in6 sin6; 2867e6194c2eSMichael Tuexen 2868e6194c2eSMichael Tuexen #endif 2869e6194c2eSMichael Tuexen #ifdef INET 2870f8829a4aSRandall Stewart struct sockaddr_in sin; 2871e6194c2eSMichael Tuexen 2872e6194c2eSMichael Tuexen #endif 2873f8829a4aSRandall Stewart struct sockaddr *sa; 287442551e99SRandall Stewart uint32_t vrf_id; 2875f8829a4aSRandall Stewart 2876ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "processing init-ack addresses\n"); 2877ad81507eSRandall Stewart if (stcb == NULL) /* Un-needed check for SA */ 2878ad81507eSRandall Stewart return; 2879f8829a4aSRandall Stewart 2880f8829a4aSRandall Stewart /* convert to upper bound */ 2881f8829a4aSRandall Stewart length += offset; 2882f8829a4aSRandall Stewart 2883f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) { 2884f8829a4aSRandall Stewart return; 2885f8829a4aSRandall Stewart } 2886f8829a4aSRandall Stewart /* init the addresses */ 2887e6194c2eSMichael Tuexen #ifdef INET6 2888f8829a4aSRandall Stewart bzero(&sin6, sizeof(sin6)); 2889f8829a4aSRandall Stewart sin6.sin6_family = AF_INET6; 2890f8829a4aSRandall Stewart sin6.sin6_len = sizeof(sin6); 2891f8829a4aSRandall Stewart sin6.sin6_port = stcb->rport; 2892e6194c2eSMichael Tuexen #endif 2893f8829a4aSRandall Stewart 2894e6194c2eSMichael Tuexen #ifdef INET 2895f8829a4aSRandall Stewart bzero(&sin, sizeof(sin)); 2896f8829a4aSRandall Stewart sin.sin_family = AF_INET; 2897e6194c2eSMichael Tuexen sin.sin_len = sizeof(sin); 2898f8829a4aSRandall Stewart sin.sin_port = stcb->rport; 2899e6194c2eSMichael Tuexen #endif 2900f8829a4aSRandall Stewart 2901f8829a4aSRandall Stewart /* go through the addresses in the init-ack */ 2902e6194c2eSMichael Tuexen ph = (struct sctp_paramhdr *) 2903e6194c2eSMichael Tuexen sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), 2904e6194c2eSMichael Tuexen (uint8_t *) & tmp_param); 2905f8829a4aSRandall Stewart while (ph != NULL) { 2906f8829a4aSRandall Stewart ptype = ntohs(ph->param_type); 2907f8829a4aSRandall Stewart plen = ntohs(ph->param_length); 2908e6194c2eSMichael Tuexen switch (ptype) { 2909e6194c2eSMichael Tuexen #ifdef INET6 2910e6194c2eSMichael Tuexen case SCTP_IPV6_ADDRESS: 2911e6194c2eSMichael Tuexen { 2912f8829a4aSRandall Stewart struct sctp_ipv6addr_param *a6p; 2913f8829a4aSRandall Stewart 2914f8829a4aSRandall Stewart /* get the entire IPv6 address param */ 2915f8829a4aSRandall Stewart a6p = (struct sctp_ipv6addr_param *) 2916f8829a4aSRandall Stewart sctp_m_getptr(m, offset, 2917f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param), 2918f8829a4aSRandall Stewart (uint8_t *) & addr_store); 2919f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv6addr_param) || 2920f8829a4aSRandall Stewart a6p == NULL) { 2921f8829a4aSRandall Stewart return; 2922f8829a4aSRandall Stewart } 2923f8829a4aSRandall Stewart memcpy(&sin6.sin6_addr, a6p->addr, 2924f8829a4aSRandall Stewart sizeof(struct in6_addr)); 2925f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin6; 2926e6194c2eSMichael Tuexen break; 2927e6194c2eSMichael Tuexen } 2928e6194c2eSMichael Tuexen #endif 2929e6194c2eSMichael Tuexen #ifdef INET 2930e6194c2eSMichael Tuexen case SCTP_IPV4_ADDRESS: 2931e6194c2eSMichael Tuexen { 2932f8829a4aSRandall Stewart struct sctp_ipv4addr_param *a4p; 2933f8829a4aSRandall Stewart 2934f8829a4aSRandall Stewart /* get the entire IPv4 address param */ 293542551e99SRandall Stewart a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, offset, 293642551e99SRandall Stewart sizeof(struct sctp_ipv4addr_param), 293742551e99SRandall Stewart (uint8_t *) & addr_store); 2938f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv4addr_param) || 2939f8829a4aSRandall Stewart a4p == NULL) { 2940f8829a4aSRandall Stewart return; 2941f8829a4aSRandall Stewart } 2942f8829a4aSRandall Stewart sin.sin_addr.s_addr = a4p->addr; 2943f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin; 29441d663b46SMichael Tuexen break; 2945e6194c2eSMichael Tuexen } 2946e6194c2eSMichael Tuexen #endif 2947e6194c2eSMichael Tuexen default: 2948f8829a4aSRandall Stewart goto next_addr; 2949f8829a4aSRandall Stewart } 2950f8829a4aSRandall Stewart 2951f8829a4aSRandall Stewart /* see if this address really (still) exists */ 2952bff64a4dSRandall Stewart if (stcb) { 2953bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 2954bff64a4dSRandall Stewart } else { 295542551e99SRandall Stewart vrf_id = SCTP_DEFAULT_VRFID; 2956bff64a4dSRandall Stewart } 29573232788eSRandall Stewart sctp_ifa = sctp_find_ifa_by_addr(sa, vrf_id, 29583232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 295942551e99SRandall Stewart if (sctp_ifa == NULL) { 2960f8829a4aSRandall Stewart /* address doesn't exist anymore */ 2961f8829a4aSRandall Stewart int status; 2962f8829a4aSRandall Stewart 2963f8829a4aSRandall Stewart /* are ASCONFs allowed ? */ 2964f8829a4aSRandall Stewart if ((sctp_is_feature_on(stcb->sctp_ep, 2965f8829a4aSRandall Stewart SCTP_PCB_FLAGS_DO_ASCONF)) && 2966f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf) { 2967f8829a4aSRandall Stewart /* queue an ASCONF DEL_IP_ADDRESS */ 29683232788eSRandall Stewart status = sctp_asconf_queue_sa_delete(stcb, sa); 2969f8829a4aSRandall Stewart /* 29701b649582SRandall Stewart * if queued ok, and in correct state, send 29711b649582SRandall Stewart * out the ASCONF. 2972f8829a4aSRandall Stewart */ 2973f8829a4aSRandall Stewart if (status == 0 && 2974f8829a4aSRandall Stewart SCTP_GET_STATE(&stcb->asoc) == 2975f8829a4aSRandall Stewart SCTP_STATE_OPEN) { 29761b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 2977f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 2978f8829a4aSRandall Stewart stcb->sctp_ep, stcb, 2979f8829a4aSRandall Stewart stcb->asoc.primary_destination); 29801b649582SRandall Stewart #else 2981ca85e948SMichael Tuexen sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED); 29821b649582SRandall Stewart #endif 2983f8829a4aSRandall Stewart } 2984f8829a4aSRandall Stewart } 2985f8829a4aSRandall Stewart } 2986f8829a4aSRandall Stewart next_addr: 2987f8829a4aSRandall Stewart /* 2988f8829a4aSRandall Stewart * Sanity check: Make sure the length isn't 0, otherwise 2989f8829a4aSRandall Stewart * we'll be stuck in this loop for a long time... 2990f8829a4aSRandall Stewart */ 2991f8829a4aSRandall Stewart if (SCTP_SIZE32(plen) == 0) { 2992ad81507eSRandall Stewart SCTP_PRINTF("process_initack_addrs: bad len (%d) type=%xh\n", 2993f8829a4aSRandall Stewart plen, ptype); 2994f8829a4aSRandall Stewart return; 2995f8829a4aSRandall Stewart } 2996f8829a4aSRandall Stewart /* get next parameter */ 2997f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 2998f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) 2999f8829a4aSRandall Stewart return; 3000f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset, 3001f8829a4aSRandall Stewart sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param); 3002f8829a4aSRandall Stewart } /* while */ 3003f8829a4aSRandall Stewart } 3004f8829a4aSRandall Stewart 3005f8829a4aSRandall Stewart /* FIX ME: need to verify return result for v6 address type if v6 disabled */ 3006f8829a4aSRandall Stewart /* 3007f8829a4aSRandall Stewart * checks to see if a specific address is in the initack address list returns 3008f8829a4aSRandall Stewart * 1 if found, 0 if not 3009f8829a4aSRandall Stewart */ 3010f8829a4aSRandall Stewart static uint32_t 30117215cc1bSMichael Tuexen sctp_addr_in_initack(struct mbuf *m, uint32_t offset, uint32_t length, struct sockaddr *sa) 3012f8829a4aSRandall Stewart { 3013f8829a4aSRandall Stewart struct sctp_paramhdr tmp_param, *ph; 3014f8829a4aSRandall Stewart uint16_t plen, ptype; 3015f8829a4aSRandall Stewart struct sctp_ipv6addr_param addr_store; 3016e6194c2eSMichael Tuexen 3017e6194c2eSMichael Tuexen #ifdef INET 3018f8829a4aSRandall Stewart struct sockaddr_in *sin; 3019f8829a4aSRandall Stewart struct sctp_ipv4addr_param *a4p; 3020f8829a4aSRandall Stewart 3021e6194c2eSMichael Tuexen #endif 3022f8829a4aSRandall Stewart #ifdef INET6 302342551e99SRandall Stewart struct sockaddr_in6 *sin6; 3024f8829a4aSRandall Stewart struct sctp_ipv6addr_param *a6p; 302542551e99SRandall Stewart struct sockaddr_in6 sin6_tmp; 3026f8829a4aSRandall Stewart 3027e6194c2eSMichael Tuexen #endif 3028f8829a4aSRandall Stewart 3029e6194c2eSMichael Tuexen switch (sa->sa_family) { 3030e6194c2eSMichael Tuexen #ifdef INET 3031e6194c2eSMichael Tuexen case AF_INET: 3032e6194c2eSMichael Tuexen break; 3033e6194c2eSMichael Tuexen #endif 3034f8829a4aSRandall Stewart #ifdef INET6 3035e6194c2eSMichael Tuexen case AF_INET6: 3036e6194c2eSMichael Tuexen break; 3037e6194c2eSMichael Tuexen #endif 3038e6194c2eSMichael Tuexen default: 3039f8829a4aSRandall Stewart return (0); 3040e6194c2eSMichael Tuexen } 3041f8829a4aSRandall Stewart 3042ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "find_initack_addr: starting search for "); 3043ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 3044f8829a4aSRandall Stewart /* convert to upper bound */ 3045f8829a4aSRandall Stewart length += offset; 3046f8829a4aSRandall Stewart 3047f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) { 3048ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3049ad81507eSRandall Stewart "find_initack_addr: invalid offset?\n"); 3050f8829a4aSRandall Stewart return (0); 3051f8829a4aSRandall Stewart } 3052f8829a4aSRandall Stewart /* go through the addresses in the init-ack */ 3053f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset, 3054f8829a4aSRandall Stewart sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param); 3055f8829a4aSRandall Stewart while (ph != NULL) { 3056f8829a4aSRandall Stewart ptype = ntohs(ph->param_type); 3057f8829a4aSRandall Stewart plen = ntohs(ph->param_length); 3058e6194c2eSMichael Tuexen switch (ptype) { 3059f8829a4aSRandall Stewart #ifdef INET6 3060e6194c2eSMichael Tuexen case SCTP_IPV6_ADDRESS: 3061e6194c2eSMichael Tuexen if (sa->sa_family == AF_INET6) { 3062e6194c2eSMichael Tuexen /* get the entire IPv6 address param */ 3063e6194c2eSMichael Tuexen if (plen != sizeof(struct sctp_ipv6addr_param)) { 3064e6194c2eSMichael Tuexen break; 3065e6194c2eSMichael Tuexen } 3066f8829a4aSRandall Stewart /* get the entire IPv6 address param */ 3067f8829a4aSRandall Stewart a6p = (struct sctp_ipv6addr_param *) 3068f8829a4aSRandall Stewart sctp_m_getptr(m, offset, 3069f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param), 3070f8829a4aSRandall Stewart (uint8_t *) & addr_store); 3071e6194c2eSMichael Tuexen if (a6p == NULL) { 3072f8829a4aSRandall Stewart return (0); 3073f8829a4aSRandall Stewart } 3074f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 3075f8829a4aSRandall Stewart if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) { 3076f8829a4aSRandall Stewart /* create a copy and clear scope */ 3077f8829a4aSRandall Stewart memcpy(&sin6_tmp, sin6, 3078f8829a4aSRandall Stewart sizeof(struct sockaddr_in6)); 3079f8829a4aSRandall Stewart sin6 = &sin6_tmp; 3080f8829a4aSRandall Stewart in6_clearscope(&sin6->sin6_addr); 3081f8829a4aSRandall Stewart } 3082f8829a4aSRandall Stewart if (memcmp(&sin6->sin6_addr, a6p->addr, 3083f8829a4aSRandall Stewart sizeof(struct in6_addr)) == 0) { 3084f8829a4aSRandall Stewart /* found it */ 3085f8829a4aSRandall Stewart return (1); 3086f8829a4aSRandall Stewart } 3087e6194c2eSMichael Tuexen } 3088e6194c2eSMichael Tuexen break; 3089f8829a4aSRandall Stewart #endif /* INET6 */ 3090e6194c2eSMichael Tuexen #ifdef INET 3091e6194c2eSMichael Tuexen case SCTP_IPV4_ADDRESS: 3092e6194c2eSMichael Tuexen if (sa->sa_family == AF_INET) { 3093e6194c2eSMichael Tuexen if (plen != sizeof(struct sctp_ipv4addr_param)) { 3094e6194c2eSMichael Tuexen break; 3095e6194c2eSMichael Tuexen } 3096f8829a4aSRandall Stewart /* get the entire IPv4 address param */ 3097e6194c2eSMichael Tuexen a4p = (struct sctp_ipv4addr_param *) 3098e6194c2eSMichael Tuexen sctp_m_getptr(m, offset, 3099e6194c2eSMichael Tuexen sizeof(struct sctp_ipv4addr_param), 3100f8829a4aSRandall Stewart (uint8_t *) & addr_store); 3101e6194c2eSMichael Tuexen if (a4p == NULL) { 3102f8829a4aSRandall Stewart return (0); 3103f8829a4aSRandall Stewart } 3104f8829a4aSRandall Stewart sin = (struct sockaddr_in *)sa; 3105f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == a4p->addr) { 3106f8829a4aSRandall Stewart /* found it */ 3107f8829a4aSRandall Stewart return (1); 3108f8829a4aSRandall Stewart } 3109f8829a4aSRandall Stewart } 3110e6194c2eSMichael Tuexen break; 3111e6194c2eSMichael Tuexen #endif 3112e6194c2eSMichael Tuexen default: 3113e6194c2eSMichael Tuexen break; 3114e6194c2eSMichael Tuexen } 3115f8829a4aSRandall Stewart /* get next parameter */ 3116f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 3117e6194c2eSMichael Tuexen if (offset + sizeof(struct sctp_paramhdr) > length) { 3118f8829a4aSRandall Stewart return (0); 3119e6194c2eSMichael Tuexen } 3120f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *) 3121f8829a4aSRandall Stewart sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), 3122f8829a4aSRandall Stewart (uint8_t *) & tmp_param); 3123f8829a4aSRandall Stewart } /* while */ 3124f8829a4aSRandall Stewart /* not found! */ 3125f8829a4aSRandall Stewart return (0); 3126f8829a4aSRandall Stewart } 3127f8829a4aSRandall Stewart 3128f8829a4aSRandall Stewart /* 3129f8829a4aSRandall Stewart * makes sure that the current endpoint local addr list is consistent with 3130f8829a4aSRandall Stewart * the new association (eg. subset bound, asconf allowed) adds addresses as 3131f8829a4aSRandall Stewart * necessary 3132f8829a4aSRandall Stewart */ 3133f8829a4aSRandall Stewart static void 3134f8829a4aSRandall Stewart sctp_check_address_list_ep(struct sctp_tcb *stcb, struct mbuf *m, int offset, 3135f8829a4aSRandall Stewart int length, struct sockaddr *init_addr) 3136f8829a4aSRandall Stewart { 3137f8829a4aSRandall Stewart struct sctp_laddr *laddr; 3138f8829a4aSRandall Stewart 3139f8829a4aSRandall Stewart /* go through the endpoint list */ 3140f8829a4aSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 3141f8829a4aSRandall Stewart /* be paranoid and validate the laddr */ 3142f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 3143ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3144ad81507eSRandall Stewart "check_addr_list_ep: laddr->ifa is NULL"); 3145f8829a4aSRandall Stewart continue; 3146f8829a4aSRandall Stewart } 314742551e99SRandall Stewart if (laddr->ifa == NULL) { 3148ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "check_addr_list_ep: laddr->ifa->ifa_addr is NULL"); 3149f8829a4aSRandall Stewart continue; 3150f8829a4aSRandall Stewart } 3151f8829a4aSRandall Stewart /* do i have it implicitly? */ 315242551e99SRandall Stewart if (sctp_cmpaddr(&laddr->ifa->address.sa, init_addr)) { 3153f8829a4aSRandall Stewart continue; 3154f8829a4aSRandall Stewart } 3155f8829a4aSRandall Stewart /* check to see if in the init-ack */ 31567215cc1bSMichael Tuexen if (!sctp_addr_in_initack(m, offset, length, &laddr->ifa->address.sa)) { 3157f8829a4aSRandall Stewart /* try to add it */ 3158f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, laddr->ifa, 31593232788eSRandall Stewart SCTP_ADD_IP_ADDRESS, SCTP_ADDR_NOT_LOCKED); 3160f8829a4aSRandall Stewart } 3161f8829a4aSRandall Stewart } 3162f8829a4aSRandall Stewart } 3163f8829a4aSRandall Stewart 3164f8829a4aSRandall Stewart /* 3165f8829a4aSRandall Stewart * makes sure that the current kernel address list is consistent with the new 3166f8829a4aSRandall Stewart * association (with all addrs bound) adds addresses as necessary 3167f8829a4aSRandall Stewart */ 3168f8829a4aSRandall Stewart static void 3169f8829a4aSRandall Stewart sctp_check_address_list_all(struct sctp_tcb *stcb, struct mbuf *m, int offset, 3170f8829a4aSRandall Stewart int length, struct sockaddr *init_addr, 3171f8829a4aSRandall Stewart uint16_t local_scope, uint16_t site_scope, 3172f8829a4aSRandall Stewart uint16_t ipv4_scope, uint16_t loopback_scope) 3173f8829a4aSRandall Stewart { 317442551e99SRandall Stewart struct sctp_vrf *vrf = NULL; 317542551e99SRandall Stewart struct sctp_ifn *sctp_ifn; 317642551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 317742551e99SRandall Stewart uint32_t vrf_id; 3178f8829a4aSRandall Stewart 31797215cc1bSMichael Tuexen #ifdef INET 31807215cc1bSMichael Tuexen struct sockaddr_in *sin; 31817215cc1bSMichael Tuexen 31827215cc1bSMichael Tuexen #endif 31837215cc1bSMichael Tuexen #ifdef INET6 31847215cc1bSMichael Tuexen struct sockaddr_in6 *sin6; 31857215cc1bSMichael Tuexen 31867215cc1bSMichael Tuexen #endif 31877215cc1bSMichael Tuexen 3188bff64a4dSRandall Stewart if (stcb) { 3189bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 3190bff64a4dSRandall Stewart } else { 3191ad81507eSRandall Stewart return; 3192bff64a4dSRandall Stewart } 3193c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 319442551e99SRandall Stewart vrf = sctp_find_vrf(vrf_id); 319542551e99SRandall Stewart if (vrf == NULL) { 3196c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 319742551e99SRandall Stewart return; 319842551e99SRandall Stewart } 3199f8829a4aSRandall Stewart /* go through all our known interfaces */ 320042551e99SRandall Stewart LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) { 320142551e99SRandall Stewart if (loopback_scope == 0 && SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) { 3202f8829a4aSRandall Stewart /* skip loopback interface */ 3203f8829a4aSRandall Stewart continue; 3204f8829a4aSRandall Stewart } 3205f8829a4aSRandall Stewart /* go through each interface address */ 320642551e99SRandall Stewart LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) { 3207f8829a4aSRandall Stewart /* do i have it implicitly? */ 320842551e99SRandall Stewart if (sctp_cmpaddr(&sctp_ifa->address.sa, init_addr)) { 3209f8829a4aSRandall Stewart continue; 3210f8829a4aSRandall Stewart } 32117215cc1bSMichael Tuexen switch (sctp_ifa->address.sa.sa_family) { 32127215cc1bSMichael Tuexen #ifdef INET 32137215cc1bSMichael Tuexen case AF_INET: 32147215cc1bSMichael Tuexen sin = (struct sockaddr_in *)&sctp_ifa->address.sin; 32157215cc1bSMichael Tuexen if ((ipv4_scope == 0) && 32167215cc1bSMichael Tuexen (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) { 32177215cc1bSMichael Tuexen /* private address not in scope */ 32187215cc1bSMichael Tuexen continue; 32197215cc1bSMichael Tuexen } 32207215cc1bSMichael Tuexen break; 32217215cc1bSMichael Tuexen #endif 32227215cc1bSMichael Tuexen #ifdef INET6 32237215cc1bSMichael Tuexen case AF_INET6: 32247215cc1bSMichael Tuexen sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sin6; 32257215cc1bSMichael Tuexen if ((local_scope == 0) && 32267215cc1bSMichael Tuexen (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))) { 32277215cc1bSMichael Tuexen continue; 32287215cc1bSMichael Tuexen } 32297215cc1bSMichael Tuexen if ((site_scope == 0) && 32307215cc1bSMichael Tuexen (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) { 32317215cc1bSMichael Tuexen continue; 32327215cc1bSMichael Tuexen } 32337215cc1bSMichael Tuexen break; 32347215cc1bSMichael Tuexen #endif 32357215cc1bSMichael Tuexen default: 32367215cc1bSMichael Tuexen break; 32377215cc1bSMichael Tuexen } 3238f8829a4aSRandall Stewart /* check to see if in the init-ack */ 32397215cc1bSMichael Tuexen if (!sctp_addr_in_initack(m, offset, length, &sctp_ifa->address.sa)) { 3240f8829a4aSRandall Stewart /* try to add it */ 3241f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, 32423232788eSRandall Stewart sctp_ifa, SCTP_ADD_IP_ADDRESS, 32433232788eSRandall Stewart SCTP_ADDR_LOCKED); 3244f8829a4aSRandall Stewart } 3245f8829a4aSRandall Stewart } /* end foreach ifa */ 3246f8829a4aSRandall Stewart } /* end foreach ifn */ 3247c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 3248f8829a4aSRandall Stewart } 3249f8829a4aSRandall Stewart 3250f8829a4aSRandall Stewart /* 3251f8829a4aSRandall Stewart * validates an init-ack chunk (from a cookie-echo) with current addresses 3252f8829a4aSRandall Stewart * adds addresses from the init-ack into our local address list, if needed 3253f8829a4aSRandall Stewart * queues asconf adds/deletes addresses as needed and makes appropriate list 3254f8829a4aSRandall Stewart * changes for source address selection m, offset: points to the start of the 3255f8829a4aSRandall Stewart * address list in an init-ack chunk length: total length of the address 3256f8829a4aSRandall Stewart * params only init_addr: address where my INIT-ACK was sent from 3257f8829a4aSRandall Stewart */ 3258f8829a4aSRandall Stewart void 3259f8829a4aSRandall Stewart sctp_check_address_list(struct sctp_tcb *stcb, struct mbuf *m, int offset, 3260f8829a4aSRandall Stewart int length, struct sockaddr *init_addr, 3261f8829a4aSRandall Stewart uint16_t local_scope, uint16_t site_scope, 3262f8829a4aSRandall Stewart uint16_t ipv4_scope, uint16_t loopback_scope) 3263f8829a4aSRandall Stewart { 3264f8829a4aSRandall Stewart /* process the local addresses in the initack */ 3265f8829a4aSRandall Stewart sctp_process_initack_addresses(stcb, m, offset, length); 3266f8829a4aSRandall Stewart 3267f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 3268f8829a4aSRandall Stewart /* bound all case */ 3269f8829a4aSRandall Stewart sctp_check_address_list_all(stcb, m, offset, length, init_addr, 3270f8829a4aSRandall Stewart local_scope, site_scope, ipv4_scope, loopback_scope); 3271f8829a4aSRandall Stewart } else { 3272f8829a4aSRandall Stewart /* subset bound case */ 3273f8829a4aSRandall Stewart if (sctp_is_feature_on(stcb->sctp_ep, 3274f8829a4aSRandall Stewart SCTP_PCB_FLAGS_DO_ASCONF)) { 3275f8829a4aSRandall Stewart /* asconf's allowed */ 3276f8829a4aSRandall Stewart sctp_check_address_list_ep(stcb, m, offset, length, 3277f8829a4aSRandall Stewart init_addr); 3278f8829a4aSRandall Stewart } 3279f8829a4aSRandall Stewart /* else, no asconfs allowed, so what we sent is what we get */ 3280f8829a4aSRandall Stewart } 3281f8829a4aSRandall Stewart } 3282f8829a4aSRandall Stewart 3283f8829a4aSRandall Stewart /* 3284f8829a4aSRandall Stewart * sctp_bindx() support 3285f8829a4aSRandall Stewart */ 3286f8829a4aSRandall Stewart uint32_t 32873c503c28SRandall Stewart sctp_addr_mgmt_ep_sa(struct sctp_inpcb *inp, struct sockaddr *sa, 328880fefe0aSRandall Stewart uint32_t type, uint32_t vrf_id, struct sctp_ifa *sctp_ifap) 3289f8829a4aSRandall Stewart { 329042551e99SRandall Stewart struct sctp_ifa *ifa; 32912678fe1eSMichael Tuexen struct sctp_laddr *laddr, *nladdr; 3292f8829a4aSRandall Stewart 329342551e99SRandall Stewart if (sa->sa_len == 0) { 3294c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL); 3295f8829a4aSRandall Stewart return (EINVAL); 329642551e99SRandall Stewart } 329780fefe0aSRandall Stewart if (sctp_ifap) { 329880fefe0aSRandall Stewart ifa = sctp_ifap; 329980fefe0aSRandall Stewart } else if (type == SCTP_ADD_IP_ADDRESS) { 330042551e99SRandall Stewart /* For an add the address MUST be on the system */ 3301851b7298SRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 330242551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 330342551e99SRandall Stewart /* For a delete we need to find it in the inp */ 3304851b7298SRandall Stewart ifa = sctp_find_ifa_in_ep(inp, sa, SCTP_ADDR_NOT_LOCKED); 330542551e99SRandall Stewart } else { 330642551e99SRandall Stewart ifa = NULL; 330742551e99SRandall Stewart } 3308f8829a4aSRandall Stewart if (ifa != NULL) { 330942551e99SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 331042551e99SRandall Stewart sctp_add_local_addr_ep(inp, ifa, type); 331142551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 33123c503c28SRandall Stewart if (inp->laddr_count < 2) { 33133c503c28SRandall Stewart /* can't delete the last local address */ 3314c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL); 33153c503c28SRandall Stewart return (EINVAL); 33163c503c28SRandall Stewart } 33173c503c28SRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, 33183c503c28SRandall Stewart sctp_nxt_addr) { 331942551e99SRandall Stewart if (ifa == laddr->ifa) { 332042551e99SRandall Stewart /* Mark in the delete */ 332142551e99SRandall Stewart laddr->action = type; 332242551e99SRandall Stewart } 332342551e99SRandall Stewart } 332442551e99SRandall Stewart } 33252678fe1eSMichael Tuexen if (LIST_EMPTY(&inp->sctp_asoc_list)) { 332687b4fcd3SMichael Tuexen /* 332787b4fcd3SMichael Tuexen * There is no need to start the iterator if the inp 332887b4fcd3SMichael Tuexen * has no associations. 332987b4fcd3SMichael Tuexen */ 33302678fe1eSMichael Tuexen if (type == SCTP_DEL_IP_ADDRESS) { 33312678fe1eSMichael Tuexen LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) { 33322678fe1eSMichael Tuexen if (laddr->ifa == ifa) { 33332678fe1eSMichael Tuexen sctp_del_local_addr_ep(inp, ifa); 33342678fe1eSMichael Tuexen } 33352678fe1eSMichael Tuexen } 33362678fe1eSMichael Tuexen } 33372678fe1eSMichael Tuexen } else { 333887b4fcd3SMichael Tuexen struct sctp_asconf_iterator *asc; 333987b4fcd3SMichael Tuexen struct sctp_laddr *wi; 334087b4fcd3SMichael Tuexen 334187b4fcd3SMichael Tuexen SCTP_MALLOC(asc, struct sctp_asconf_iterator *, 334287b4fcd3SMichael Tuexen sizeof(struct sctp_asconf_iterator), 334387b4fcd3SMichael Tuexen SCTP_M_ASC_IT); 334487b4fcd3SMichael Tuexen if (asc == NULL) { 334587b4fcd3SMichael Tuexen SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM); 334687b4fcd3SMichael Tuexen return (ENOMEM); 334787b4fcd3SMichael Tuexen } 334887b4fcd3SMichael Tuexen wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 334987b4fcd3SMichael Tuexen if (wi == NULL) { 335087b4fcd3SMichael Tuexen SCTP_FREE(asc, SCTP_M_ASC_IT); 335187b4fcd3SMichael Tuexen SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM); 335287b4fcd3SMichael Tuexen return (ENOMEM); 335387b4fcd3SMichael Tuexen } 335442551e99SRandall Stewart LIST_INIT(&asc->list_of_work); 335542551e99SRandall Stewart asc->cnt = 1; 335642551e99SRandall Stewart SCTP_INCR_LADDR_COUNT(); 335742551e99SRandall Stewart wi->ifa = ifa; 335842551e99SRandall Stewart wi->action = type; 335942551e99SRandall Stewart atomic_add_int(&ifa->refcount, 1); 336042551e99SRandall Stewart LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr); 33611b649582SRandall Stewart (void)sctp_initiate_iterator(sctp_asconf_iterator_ep, 33621b649582SRandall Stewart sctp_asconf_iterator_stcb, 33631b649582SRandall Stewart sctp_asconf_iterator_ep_end, 336442551e99SRandall Stewart SCTP_PCB_ANY_FLAGS, 33653c503c28SRandall Stewart SCTP_PCB_ANY_FEATURES, 33661b649582SRandall Stewart SCTP_ASOC_ANY_STATE, 33671b649582SRandall Stewart (void *)asc, 0, 33681b649582SRandall Stewart sctp_asconf_iterator_end, inp, 0); 336987b4fcd3SMichael Tuexen } 337087b4fcd3SMichael Tuexen return (0); 3371f8829a4aSRandall Stewart } else { 3372f8829a4aSRandall Stewart /* invalid address! */ 3373c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EADDRNOTAVAIL); 3374f8829a4aSRandall Stewart return (EADDRNOTAVAIL); 3375f8829a4aSRandall Stewart } 3376f8829a4aSRandall Stewart } 3377830d754dSRandall Stewart 3378830d754dSRandall Stewart void 3379830d754dSRandall Stewart sctp_asconf_send_nat_state_update(struct sctp_tcb *stcb, 3380830d754dSRandall Stewart struct sctp_nets *net) 3381830d754dSRandall Stewart { 3382830d754dSRandall Stewart struct sctp_asconf_addr *aa; 3383830d754dSRandall Stewart struct sctp_ifa *sctp_ifap; 3384830d754dSRandall Stewart struct sctp_asconf_tag_param *vtag; 3385e6194c2eSMichael Tuexen 3386e6194c2eSMichael Tuexen #ifdef INET 3387830d754dSRandall Stewart struct sockaddr_in *to; 3388830d754dSRandall Stewart 3389e6194c2eSMichael Tuexen #endif 3390830d754dSRandall Stewart #ifdef INET6 3391830d754dSRandall Stewart struct sockaddr_in6 *to6; 3392830d754dSRandall Stewart 3393830d754dSRandall Stewart #endif 3394830d754dSRandall Stewart if (net == NULL) { 3395830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing net\n"); 3396830d754dSRandall Stewart return; 3397830d754dSRandall Stewart } 3398830d754dSRandall Stewart if (stcb == NULL) { 3399830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing stcb\n"); 3400830d754dSRandall Stewart return; 3401830d754dSRandall Stewart } 3402830d754dSRandall Stewart /* 3403830d754dSRandall Stewart * Need to have in the asconf: - vtagparam(my_vtag/peer_vtag) - 3404830d754dSRandall Stewart * add(0.0.0.0) - del(0.0.0.0) - Any global addresses add(addr) 3405830d754dSRandall Stewart */ 3406830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3407830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3408830d754dSRandall Stewart if (aa == NULL) { 3409830d754dSRandall Stewart /* didn't get memory */ 3410830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3411830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3412830d754dSRandall Stewart return; 3413830d754dSRandall Stewart } 3414830d754dSRandall Stewart aa->special_del = 0; 3415830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3416830d754dSRandall Stewart /* top level elements are "networked" during send */ 3417830d754dSRandall Stewart aa->ifa = NULL; 3418830d754dSRandall Stewart aa->sent = 0; /* clear sent flag */ 3419830d754dSRandall Stewart vtag = (struct sctp_asconf_tag_param *)&aa->ap.aph; 3420830d754dSRandall Stewart vtag->aph.ph.param_type = SCTP_NAT_VTAGS; 3421830d754dSRandall Stewart vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param); 3422830d754dSRandall Stewart vtag->local_vtag = htonl(stcb->asoc.my_vtag); 3423830d754dSRandall Stewart vtag->remote_vtag = htonl(stcb->asoc.peer_vtag); 3424830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3425830d754dSRandall Stewart 3426830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3427830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3428830d754dSRandall Stewart if (aa == NULL) { 3429830d754dSRandall Stewart /* didn't get memory */ 3430830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3431830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3432830d754dSRandall Stewart return; 3433830d754dSRandall Stewart } 3434830d754dSRandall Stewart memset(aa, 0, sizeof(struct sctp_asconf_addr)); 3435830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3436830d754dSRandall Stewart /* ADD(0.0.0.0) */ 3437e6194c2eSMichael Tuexen switch (net->ro._l_addr.sa.sa_family) { 3438e6194c2eSMichael Tuexen #ifdef INET 3439e6194c2eSMichael Tuexen case AF_INET: 3440830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3441830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param); 3442830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 3443830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param); 3444830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3445830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3446e6194c2eSMichael Tuexen break; 3447e6194c2eSMichael Tuexen #endif 3448830d754dSRandall Stewart #ifdef INET6 3449e6194c2eSMichael Tuexen case AF_INET6: 3450830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3451830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param); 3452830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 3453830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param); 3454830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3455830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3456e6194c2eSMichael Tuexen break; 3457e6194c2eSMichael Tuexen #endif 3458830d754dSRandall Stewart } 3459830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3460830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3461830d754dSRandall Stewart if (aa == NULL) { 3462830d754dSRandall Stewart /* didn't get memory */ 3463830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3464830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3465830d754dSRandall Stewart return; 3466830d754dSRandall Stewart } 3467830d754dSRandall Stewart memset(aa, 0, sizeof(struct sctp_asconf_addr)); 3468830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3469830d754dSRandall Stewart /* ADD(0.0.0.0) */ 3470e6194c2eSMichael Tuexen switch (net->ro._l_addr.sa.sa_family) { 3471e6194c2eSMichael Tuexen #ifdef INET 3472e6194c2eSMichael Tuexen case AF_INET: 3473830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3474830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param); 3475830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 3476830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param); 3477830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3478830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3479e6194c2eSMichael Tuexen break; 3480e6194c2eSMichael Tuexen #endif 3481830d754dSRandall Stewart #ifdef INET6 3482e6194c2eSMichael Tuexen case AF_INET6: 3483830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS; 3484830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param); 3485830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 3486830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param); 3487830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3488830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3489e6194c2eSMichael Tuexen break; 3490e6194c2eSMichael Tuexen #endif 3491830d754dSRandall Stewart } 3492830d754dSRandall Stewart /* Now we must hunt the addresses and add all global addresses */ 3493830d754dSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 3494830d754dSRandall Stewart struct sctp_vrf *vrf = NULL; 3495830d754dSRandall Stewart struct sctp_ifn *sctp_ifnp; 3496830d754dSRandall Stewart uint32_t vrf_id; 3497830d754dSRandall Stewart 3498830d754dSRandall Stewart vrf_id = stcb->sctp_ep->def_vrf_id; 3499830d754dSRandall Stewart vrf = sctp_find_vrf(vrf_id); 3500830d754dSRandall Stewart if (vrf == NULL) { 3501830d754dSRandall Stewart goto skip_rest; 3502830d754dSRandall Stewart } 3503830d754dSRandall Stewart SCTP_IPI_ADDR_RLOCK(); 3504830d754dSRandall Stewart LIST_FOREACH(sctp_ifnp, &vrf->ifnlist, next_ifn) { 3505830d754dSRandall Stewart LIST_FOREACH(sctp_ifap, &sctp_ifnp->ifalist, next_ifa) { 3506e6194c2eSMichael Tuexen switch (sctp_ifap->address.sa.sa_family) { 3507e6194c2eSMichael Tuexen #ifdef INET 3508e6194c2eSMichael Tuexen case AF_INET: 3509830d754dSRandall Stewart to = &sctp_ifap->address.sin; 3510830d754dSRandall Stewart if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) { 3511830d754dSRandall Stewart continue; 3512830d754dSRandall Stewart } 3513830d754dSRandall Stewart if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) { 3514830d754dSRandall Stewart continue; 3515830d754dSRandall Stewart } 3516e6194c2eSMichael Tuexen break; 3517e6194c2eSMichael Tuexen #endif 3518830d754dSRandall Stewart #ifdef INET6 3519e6194c2eSMichael Tuexen case AF_INET6: 3520830d754dSRandall Stewart to6 = &sctp_ifap->address.sin6; 3521830d754dSRandall Stewart if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) { 3522830d754dSRandall Stewart continue; 3523830d754dSRandall Stewart } 3524830d754dSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) { 3525830d754dSRandall Stewart continue; 3526830d754dSRandall Stewart } 3527e6194c2eSMichael Tuexen break; 3528830d754dSRandall Stewart #endif 3529e6194c2eSMichael Tuexen default: 3530e6194c2eSMichael Tuexen continue; 3531e6194c2eSMichael Tuexen } 3532830d754dSRandall Stewart sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS); 3533830d754dSRandall Stewart } 3534830d754dSRandall Stewart } 3535830d754dSRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 3536830d754dSRandall Stewart } else { 3537830d754dSRandall Stewart struct sctp_laddr *laddr; 3538830d754dSRandall Stewart 3539830d754dSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 3540830d754dSRandall Stewart if (laddr->ifa == NULL) { 3541830d754dSRandall Stewart continue; 3542830d754dSRandall Stewart } 3543830d754dSRandall Stewart if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) 3544830d754dSRandall Stewart /* 3545830d754dSRandall Stewart * Address being deleted by the system, dont 3546830d754dSRandall Stewart * list. 3547830d754dSRandall Stewart */ 3548830d754dSRandall Stewart continue; 3549830d754dSRandall Stewart if (laddr->action == SCTP_DEL_IP_ADDRESS) { 3550830d754dSRandall Stewart /* 3551830d754dSRandall Stewart * Address being deleted on this ep don't 3552830d754dSRandall Stewart * list. 3553830d754dSRandall Stewart */ 3554830d754dSRandall Stewart continue; 3555830d754dSRandall Stewart } 3556830d754dSRandall Stewart sctp_ifap = laddr->ifa; 3557e6194c2eSMichael Tuexen switch (sctp_ifap->address.sa.sa_family) { 3558e6194c2eSMichael Tuexen #ifdef INET 3559e6194c2eSMichael Tuexen case AF_INET: 3560830d754dSRandall Stewart to = &sctp_ifap->address.sin; 3561830d754dSRandall Stewart if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) { 3562830d754dSRandall Stewart continue; 3563830d754dSRandall Stewart } 3564830d754dSRandall Stewart if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) { 3565830d754dSRandall Stewart continue; 3566830d754dSRandall Stewart } 3567e6194c2eSMichael Tuexen break; 3568e6194c2eSMichael Tuexen #endif 3569830d754dSRandall Stewart #ifdef INET6 3570e6194c2eSMichael Tuexen case AF_INET6: 3571830d754dSRandall Stewart to6 = &sctp_ifap->address.sin6; 3572830d754dSRandall Stewart if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) { 3573830d754dSRandall Stewart continue; 3574830d754dSRandall Stewart } 3575830d754dSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) { 3576830d754dSRandall Stewart continue; 3577830d754dSRandall Stewart } 3578e6194c2eSMichael Tuexen break; 3579830d754dSRandall Stewart #endif 3580e6194c2eSMichael Tuexen default: 3581e6194c2eSMichael Tuexen continue; 3582e6194c2eSMichael Tuexen } 3583830d754dSRandall Stewart sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS); 3584830d754dSRandall Stewart } 3585830d754dSRandall Stewart } 3586830d754dSRandall Stewart skip_rest: 3587830d754dSRandall Stewart /* Now we must send the asconf into the queue */ 3588ca85e948SMichael Tuexen sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED); 3589830d754dSRandall Stewart } 3590