xref: /freebsd/sys/netinet/sctp_asconf.c (revision c9eb4473b4ff0647f8a1254e82bef7c8b163d80e)
1f8829a4aSRandall Stewart /*-
2b1006367SRandall Stewart  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
4807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
5f8829a4aSRandall Stewart  *
6f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
7f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
8f8829a4aSRandall Stewart  *
9f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
10f8829a4aSRandall Stewart  *    this list of conditions and the following disclaimer.
11f8829a4aSRandall Stewart  *
12f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
13f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
14f8829a4aSRandall Stewart  *    the documentation and/or other materials provided with the distribution.
15f8829a4aSRandall Stewart  *
16f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
18f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
19f8829a4aSRandall Stewart  *
20f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
31f8829a4aSRandall Stewart  */
32f8829a4aSRandall Stewart 
33f8829a4aSRandall Stewart #include <sys/cdefs.h>
34cef8ad06SRandall Stewart __FBSDID("$FreeBSD$");
35807aad63SMichael Tuexen 
36f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
37f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
3842551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
40f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
41f8829a4aSRandall Stewart #include <netinet/sctputil.h>
42f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
43f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
44851b7298SRandall Stewart #include <netinet/sctp_timer.h>
45f8829a4aSRandall Stewart 
46f8829a4aSRandall Stewart /*
47f8829a4aSRandall Stewart  * debug flags:
48f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF1: protocol info, general info and errors
49f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF2: detailed info
50f8829a4aSRandall Stewart  */
51f8829a4aSRandall Stewart 
52f8829a4aSRandall Stewart 
53f8829a4aSRandall Stewart /*
54b1754ad1SMichael Tuexen  * RFC 5061
55f8829a4aSRandall Stewart  *
56f8829a4aSRandall Stewart  * An ASCONF parameter queue exists per asoc which holds the pending address
57f8829a4aSRandall Stewart  * operations.  Lists are updated upon receipt of ASCONF-ACK.
58f8829a4aSRandall Stewart  *
5918e198d3SRandall Stewart  * A restricted_addrs list exists per assoc to hold local addresses that are
6018e198d3SRandall Stewart  * not (yet) usable by the assoc as a source address.  These addresses are
6118e198d3SRandall Stewart  * either pending an ASCONF operation (and exist on the ASCONF parameter
6218e198d3SRandall Stewart  * queue), or they are permanently restricted (the peer has returned an
6318e198d3SRandall Stewart  * ERROR indication to an ASCONF(ADD), or the peer does not support ASCONF).
6418e198d3SRandall Stewart  *
65f8829a4aSRandall Stewart  * Deleted addresses are always immediately removed from the lists as they will
66f8829a4aSRandall Stewart  * (shortly) no longer exist in the kernel.  We send ASCONFs as a courtesy,
67f8829a4aSRandall Stewart  * only if allowed.
68f8829a4aSRandall Stewart  */
69f8829a4aSRandall Stewart 
70f8829a4aSRandall Stewart /*
7118e198d3SRandall Stewart  * ASCONF parameter processing.
7218e198d3SRandall Stewart  * response_required: set if a reply is required (eg. SUCCESS_REPORT).
7318e198d3SRandall Stewart  * returns a mbuf to an "error" response parameter or NULL/"success" if ok.
7418e198d3SRandall Stewart  * FIX: allocating this many mbufs on the fly is pretty inefficient...
75f8829a4aSRandall Stewart  */
76f8829a4aSRandall Stewart static struct mbuf *
77f8829a4aSRandall Stewart sctp_asconf_success_response(uint32_t id)
78f8829a4aSRandall Stewart {
79f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
80f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
81f8829a4aSRandall Stewart 
82f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_paramhdr),
83eb1b1807SGleb Smirnoff 	    0, M_NOWAIT, 1, MT_DATA);
84f8829a4aSRandall Stewart 	if (m_reply == NULL) {
85ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
86ad81507eSRandall Stewart 		    "asconf_success_response: couldn't get mbuf!\n");
8760990c0cSMichael Tuexen 		return (NULL);
88f8829a4aSRandall Stewart 	}
89f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
90f8829a4aSRandall Stewart 	aph->correlation_id = id;
91f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_SUCCESS_REPORT);
92f8829a4aSRandall Stewart 	aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr);
93139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
94f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
95f8829a4aSRandall Stewart 
9660990c0cSMichael Tuexen 	return (m_reply);
97f8829a4aSRandall Stewart }
98f8829a4aSRandall Stewart 
99f8829a4aSRandall Stewart static struct mbuf *
100f8829a4aSRandall Stewart sctp_asconf_error_response(uint32_t id, uint16_t cause, uint8_t * error_tlv,
101f8829a4aSRandall Stewart     uint16_t tlv_length)
102f8829a4aSRandall Stewart {
103f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
104f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
105f8829a4aSRandall Stewart 	struct sctp_error_cause *error;
106f8829a4aSRandall Stewart 	uint8_t *tlv;
107f8829a4aSRandall Stewart 
108f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg((sizeof(struct sctp_asconf_paramhdr) +
109f8829a4aSRandall Stewart 	    tlv_length +
110f8829a4aSRandall Stewart 	    sizeof(struct sctp_error_cause)),
111eb1b1807SGleb Smirnoff 	    0, M_NOWAIT, 1, MT_DATA);
112f8829a4aSRandall Stewart 	if (m_reply == NULL) {
113ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
114ad81507eSRandall Stewart 		    "asconf_error_response: couldn't get mbuf!\n");
11560990c0cSMichael Tuexen 		return (NULL);
116f8829a4aSRandall Stewart 	}
117f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
118f8829a4aSRandall Stewart 	error = (struct sctp_error_cause *)(aph + 1);
119f8829a4aSRandall Stewart 
120f8829a4aSRandall Stewart 	aph->correlation_id = id;
121f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_ERROR_CAUSE_IND);
122f8829a4aSRandall Stewart 	error->code = htons(cause);
123f8829a4aSRandall Stewart 	error->length = tlv_length + sizeof(struct sctp_error_cause);
124f8829a4aSRandall Stewart 	aph->ph.param_length = error->length +
125f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_paramhdr);
126f8829a4aSRandall Stewart 
127f8829a4aSRandall Stewart 	if (aph->ph.param_length > MLEN) {
128ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
129ad81507eSRandall Stewart 		    "asconf_error_response: tlv_length (%xh) too big\n",
130f8829a4aSRandall Stewart 		    tlv_length);
131f8829a4aSRandall Stewart 		sctp_m_freem(m_reply);	/* discard */
13260990c0cSMichael Tuexen 		return (NULL);
133f8829a4aSRandall Stewart 	}
134f8829a4aSRandall Stewart 	if (error_tlv != NULL) {
135f8829a4aSRandall Stewart 		tlv = (uint8_t *) (error + 1);
136f8829a4aSRandall Stewart 		memcpy(tlv, error_tlv, tlv_length);
137f8829a4aSRandall Stewart 	}
138139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
139f8829a4aSRandall Stewart 	error->length = htons(error->length);
140f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
141f8829a4aSRandall Stewart 
14260990c0cSMichael Tuexen 	return (m_reply);
143f8829a4aSRandall Stewart }
144f8829a4aSRandall Stewart 
145f8829a4aSRandall Stewart static struct mbuf *
146b1754ad1SMichael Tuexen sctp_process_asconf_add_ip(struct sockaddr *src, struct sctp_asconf_paramhdr *aph,
147ca85e948SMichael Tuexen     struct sctp_tcb *stcb, int send_hb, int response_required)
148f8829a4aSRandall Stewart {
149ca85e948SMichael Tuexen 	struct sctp_nets *net;
150f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
151b1754ad1SMichael Tuexen 	struct sockaddr_storage sa_store;
152e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
153b54ddf22SMichael Tuexen 	uint16_t param_type, aparam_length;
154b54ddf22SMichael Tuexen 
155b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
156b54ddf22SMichael Tuexen 	uint16_t param_length;
157b54ddf22SMichael Tuexen 
158b54ddf22SMichael Tuexen #endif
159f8829a4aSRandall Stewart 	struct sockaddr *sa;
160f8829a4aSRandall Stewart 	int zero_address = 0;
16192776dfdSMichael Tuexen 	int bad_address = 0;
162f8829a4aSRandall Stewart 
163e6194c2eSMichael Tuexen #ifdef INET
164e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
165e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
166e6194c2eSMichael Tuexen 
167e6194c2eSMichael Tuexen #endif
168f8829a4aSRandall Stewart #ifdef INET6
169f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
170f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
171f8829a4aSRandall Stewart 
172e6194c2eSMichael Tuexen #endif
173f8829a4aSRandall Stewart 
174f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
175e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
176e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
177b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
178e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
179b54ddf22SMichael Tuexen #endif
180f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
181f8829a4aSRandall Stewart 	switch (param_type) {
182e6194c2eSMichael Tuexen #ifdef INET
183f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
184f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
185f8829a4aSRandall Stewart 			/* invalid param size */
18660990c0cSMichael Tuexen 			return (NULL);
187f8829a4aSRandall Stewart 		}
188e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
189f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
190f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
191f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
192f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
193f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
194f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
19592776dfdSMichael Tuexen 		if ((sin->sin_addr.s_addr == INADDR_BROADCAST) ||
19692776dfdSMichael Tuexen 		    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
1973657c405SMichael Tuexen 			bad_address = 1;
19892776dfdSMichael Tuexen 		}
199f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
200f8829a4aSRandall Stewart 			zero_address = 1;
201ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
202ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
203f8829a4aSRandall Stewart 		break;
204e6194c2eSMichael Tuexen #endif
205f8829a4aSRandall Stewart #ifdef INET6
206e6194c2eSMichael Tuexen 	case SCTP_IPV6_ADDRESS:
207f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
208f8829a4aSRandall Stewart 			/* invalid param size */
20960990c0cSMichael Tuexen 			return (NULL);
210f8829a4aSRandall Stewart 		}
211e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
212f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
213f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
214f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
215f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
216f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
217f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
218f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
21992776dfdSMichael Tuexen 		if (IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
22092776dfdSMichael Tuexen 			bad_address = 1;
22192776dfdSMichael Tuexen 		}
222f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
223f8829a4aSRandall Stewart 			zero_address = 1;
224ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
225ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
226f8829a4aSRandall Stewart 		break;
227e6194c2eSMichael Tuexen #endif
228f8829a4aSRandall Stewart 	default:
229f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
23092776dfdSMichael Tuexen 		    SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph,
231f8829a4aSRandall Stewart 		    aparam_length);
23260990c0cSMichael Tuexen 		return (m_reply);
233f8829a4aSRandall Stewart 	}			/* end switch */
234f8829a4aSRandall Stewart 
235f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, add the source address instead */
236b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
237b1754ad1SMichael Tuexen 		sa = src;
238ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
239ad81507eSRandall Stewart 		    "process_asconf_add_ip: using source addr ");
240b1754ad1SMichael Tuexen 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, src);
241f8829a4aSRandall Stewart 	}
242f8829a4aSRandall Stewart 	/* add the address */
24392776dfdSMichael Tuexen 	if (bad_address) {
24492776dfdSMichael Tuexen 		m_reply = sctp_asconf_error_response(aph->correlation_id,
24592776dfdSMichael Tuexen 		    SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph,
24692776dfdSMichael Tuexen 		    aparam_length);
24792776dfdSMichael Tuexen 	} else if (sctp_add_remote_addr(stcb, sa, &net, SCTP_DONOT_SETSCOPE,
248a5d547adSRandall Stewart 	    SCTP_ADDR_DYNAMIC_ADDED) != 0) {
249ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
250ad81507eSRandall Stewart 		    "process_asconf_add_ip: error adding address\n");
251f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
252f8829a4aSRandall Stewart 		    SCTP_CAUSE_RESOURCE_SHORTAGE, (uint8_t *) aph,
253f8829a4aSRandall Stewart 		    aparam_length);
254f8829a4aSRandall Stewart 	} else {
255f8829a4aSRandall Stewart 		/* notify upper layer */
256ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_ADD_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
257f8829a4aSRandall Stewart 		if (response_required) {
258f8829a4aSRandall Stewart 			m_reply =
259f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
260f8829a4aSRandall Stewart 		}
261ca85e948SMichael Tuexen 		sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, stcb->sctp_ep, stcb, net);
2623c503c28SRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep,
263ca85e948SMichael Tuexen 		    stcb, net);
264ca85e948SMichael Tuexen 		if (send_hb) {
265ca85e948SMichael Tuexen 			sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
266ca85e948SMichael Tuexen 		}
267f8829a4aSRandall Stewart 	}
26860990c0cSMichael Tuexen 	return (m_reply);
269f8829a4aSRandall Stewart }
270f8829a4aSRandall Stewart 
271f8829a4aSRandall Stewart static int
2721b649582SRandall Stewart sctp_asconf_del_remote_addrs_except(struct sctp_tcb *stcb, struct sockaddr *src)
273f8829a4aSRandall Stewart {
274f8829a4aSRandall Stewart 	struct sctp_nets *src_net, *net;
275f8829a4aSRandall Stewart 
276f8829a4aSRandall Stewart 	/* make sure the source address exists as a destination net */
277f8829a4aSRandall Stewart 	src_net = sctp_findnet(stcb, src);
278f8829a4aSRandall Stewart 	if (src_net == NULL) {
279f8829a4aSRandall Stewart 		/* not found */
28060990c0cSMichael Tuexen 		return (-1);
281f8829a4aSRandall Stewart 	}
282f8829a4aSRandall Stewart 	/* delete all destination addresses except the source */
283f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
284f8829a4aSRandall Stewart 		if (net != src_net) {
285f8829a4aSRandall Stewart 			/* delete this address */
286f8829a4aSRandall Stewart 			sctp_remove_net(stcb, net);
287ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
288ad81507eSRandall Stewart 			    "asconf_del_remote_addrs_except: deleting ");
289ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1,
290ad81507eSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr);
291f8829a4aSRandall Stewart 			/* notify upper layer */
292f8829a4aSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0,
293ceaad40aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, SCTP_SO_NOT_LOCKED);
294f8829a4aSRandall Stewart 		}
295f8829a4aSRandall Stewart 	}
29660990c0cSMichael Tuexen 	return (0);
297f8829a4aSRandall Stewart }
298f8829a4aSRandall Stewart 
299f8829a4aSRandall Stewart static struct mbuf *
300b1754ad1SMichael Tuexen sctp_process_asconf_delete_ip(struct sockaddr *src,
301b1754ad1SMichael Tuexen     struct sctp_asconf_paramhdr *aph,
302f8829a4aSRandall Stewart     struct sctp_tcb *stcb, int response_required)
303f8829a4aSRandall Stewart {
304f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
305b1754ad1SMichael Tuexen 	struct sockaddr_storage sa_store;
306e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
307b54ddf22SMichael Tuexen 	uint16_t param_type, aparam_length;
308b54ddf22SMichael Tuexen 
309b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
310b54ddf22SMichael Tuexen 	uint16_t param_length;
311b54ddf22SMichael Tuexen 
312b54ddf22SMichael Tuexen #endif
313f8829a4aSRandall Stewart 	struct sockaddr *sa;
314f8829a4aSRandall Stewart 	int zero_address = 0;
315f8829a4aSRandall Stewart 	int result;
316f8829a4aSRandall Stewart 
317e6194c2eSMichael Tuexen #ifdef INET
318e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
319e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
320e6194c2eSMichael Tuexen 
321e6194c2eSMichael Tuexen #endif
322f8829a4aSRandall Stewart #ifdef INET6
323f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
324f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
325f8829a4aSRandall Stewart 
326e6194c2eSMichael Tuexen #endif
327f8829a4aSRandall Stewart 
328f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
329e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
330e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
331b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
332e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
333b54ddf22SMichael Tuexen #endif
334f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
335f8829a4aSRandall Stewart 	switch (param_type) {
336e6194c2eSMichael Tuexen #ifdef INET
337f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
338f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
339f8829a4aSRandall Stewart 			/* invalid param size */
34060990c0cSMichael Tuexen 			return (NULL);
341f8829a4aSRandall Stewart 		}
342e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
343f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
344f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
345f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
346f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
347f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
348f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
349f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
350f8829a4aSRandall Stewart 			zero_address = 1;
351ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
352ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
353ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
354f8829a4aSRandall Stewart 		break;
355e6194c2eSMichael Tuexen #endif
356e6194c2eSMichael Tuexen #ifdef INET6
357f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
358f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
359f8829a4aSRandall Stewart 			/* invalid param size */
36060990c0cSMichael Tuexen 			return (NULL);
361f8829a4aSRandall Stewart 		}
362e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
363f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
364f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
365f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
366f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
367f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
368f8829a4aSRandall Stewart 		memcpy(&sin6->sin6_addr, v6addr->addr,
369f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
370f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
371f8829a4aSRandall Stewart 			zero_address = 1;
372ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
373ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
374ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
375f8829a4aSRandall Stewart 		break;
376e6194c2eSMichael Tuexen #endif
377f8829a4aSRandall Stewart 	default:
378f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
379f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
380f8829a4aSRandall Stewart 		    aparam_length);
38160990c0cSMichael Tuexen 		return (m_reply);
382f8829a4aSRandall Stewart 	}
383f8829a4aSRandall Stewart 
384f8829a4aSRandall Stewart 	/* make sure the source address is not being deleted */
385b1754ad1SMichael Tuexen 	if (sctp_cmpaddr(sa, src)) {
386f8829a4aSRandall Stewart 		/* trying to delete the source address! */
387ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete source addr\n");
388f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
389f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_SRC_ADDR, (uint8_t *) aph,
390f8829a4aSRandall Stewart 		    aparam_length);
39160990c0cSMichael Tuexen 		return (m_reply);
392f8829a4aSRandall Stewart 	}
393f8829a4aSRandall Stewart 	/* if deleting 0.0.0.0/::0, delete all addresses except src addr */
394b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
395b1754ad1SMichael Tuexen 		result = sctp_asconf_del_remote_addrs_except(stcb, src);
396f8829a4aSRandall Stewart 
397f8829a4aSRandall Stewart 		if (result) {
398f8829a4aSRandall Stewart 			/* src address did not exist? */
399ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: src addr does not exist?\n");
400f8829a4aSRandall Stewart 			/* what error to reply with?? */
401f8829a4aSRandall Stewart 			m_reply =
402f8829a4aSRandall Stewart 			    sctp_asconf_error_response(aph->correlation_id,
403f8829a4aSRandall Stewart 			    SCTP_CAUSE_REQUEST_REFUSED, (uint8_t *) aph,
404f8829a4aSRandall Stewart 			    aparam_length);
405f8829a4aSRandall Stewart 		} else if (response_required) {
406f8829a4aSRandall Stewart 			m_reply =
407f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
408f8829a4aSRandall Stewart 		}
40960990c0cSMichael Tuexen 		return (m_reply);
410f8829a4aSRandall Stewart 	}
411f8829a4aSRandall Stewart 	/* delete the address */
412f8829a4aSRandall Stewart 	result = sctp_del_remote_addr(stcb, sa);
413f8829a4aSRandall Stewart 	/*
414f8829a4aSRandall Stewart 	 * note if result == -2, the address doesn't exist in the asoc but
415f8829a4aSRandall Stewart 	 * since it's being deleted anyways, we just ack the delete -- but
416f8829a4aSRandall Stewart 	 * this probably means something has already gone awry
417f8829a4aSRandall Stewart 	 */
418f8829a4aSRandall Stewart 	if (result == -1) {
419f8829a4aSRandall Stewart 		/* only one address in the asoc */
420ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete last IP addr!\n");
421f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
422f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_LAST_ADDR, (uint8_t *) aph,
423f8829a4aSRandall Stewart 		    aparam_length);
424f8829a4aSRandall Stewart 	} else {
425f8829a4aSRandall Stewart 		if (response_required) {
426f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
427f8829a4aSRandall Stewart 		}
428f8829a4aSRandall Stewart 		/* notify upper layer */
429ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
430f8829a4aSRandall Stewart 	}
43160990c0cSMichael Tuexen 	return (m_reply);
432f8829a4aSRandall Stewart }
433f8829a4aSRandall Stewart 
434f8829a4aSRandall Stewart static struct mbuf *
435b1754ad1SMichael Tuexen sctp_process_asconf_set_primary(struct sockaddr *src,
4361b649582SRandall Stewart     struct sctp_asconf_paramhdr *aph,
4371b649582SRandall Stewart     struct sctp_tcb *stcb, int response_required)
438f8829a4aSRandall Stewart {
439f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
440b1754ad1SMichael Tuexen 	struct sockaddr_storage sa_store;
441e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
442b54ddf22SMichael Tuexen 	uint16_t param_type, aparam_length;
443b54ddf22SMichael Tuexen 
444b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
445b54ddf22SMichael Tuexen 	uint16_t param_length;
446b54ddf22SMichael Tuexen 
447b54ddf22SMichael Tuexen #endif
448f8829a4aSRandall Stewart 	struct sockaddr *sa;
449f8829a4aSRandall Stewart 	int zero_address = 0;
450f8829a4aSRandall Stewart 
451e6194c2eSMichael Tuexen #ifdef INET
452e6194c2eSMichael Tuexen 	struct sockaddr_in *sin;
453e6194c2eSMichael Tuexen 	struct sctp_ipv4addr_param *v4addr;
454e6194c2eSMichael Tuexen 
455e6194c2eSMichael Tuexen #endif
456f8829a4aSRandall Stewart #ifdef INET6
457f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
458f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
459f8829a4aSRandall Stewart 
460e6194c2eSMichael Tuexen #endif
461f8829a4aSRandall Stewart 
462f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
463e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)(aph + 1);
464e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
465b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
466e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
467b54ddf22SMichael Tuexen #endif
468f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
469f8829a4aSRandall Stewart 	switch (param_type) {
470e6194c2eSMichael Tuexen #ifdef INET
471f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
472f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
473f8829a4aSRandall Stewart 			/* invalid param size */
47460990c0cSMichael Tuexen 			return (NULL);
475f8829a4aSRandall Stewart 		}
476e6194c2eSMichael Tuexen 		v4addr = (struct sctp_ipv4addr_param *)ph;
477f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
478f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
479f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
480f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
481f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
482f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
483f8829a4aSRandall Stewart 			zero_address = 1;
484ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
485ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
486f8829a4aSRandall Stewart 		break;
487e6194c2eSMichael Tuexen #endif
488e6194c2eSMichael Tuexen #ifdef INET6
489f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
490f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
491f8829a4aSRandall Stewart 			/* invalid param size */
49260990c0cSMichael Tuexen 			return (NULL);
493f8829a4aSRandall Stewart 		}
494e6194c2eSMichael Tuexen 		v6addr = (struct sctp_ipv6addr_param *)ph;
495f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
496f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
497f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
498f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
499f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
500f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
501f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
502f8829a4aSRandall Stewart 			zero_address = 1;
503ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
504ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
505f8829a4aSRandall Stewart 		break;
506e6194c2eSMichael Tuexen #endif
507f8829a4aSRandall Stewart 	default:
508f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
509f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
510f8829a4aSRandall Stewart 		    aparam_length);
51160990c0cSMichael Tuexen 		return (m_reply);
512f8829a4aSRandall Stewart 	}
513f8829a4aSRandall Stewart 
514f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, use the source address instead */
515b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
516b1754ad1SMichael Tuexen 		sa = src;
517ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
518ad81507eSRandall Stewart 		    "process_asconf_set_primary: using source addr ");
519b1754ad1SMichael Tuexen 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, src);
520f8829a4aSRandall Stewart 	}
521f8829a4aSRandall Stewart 	/* set the primary address */
522f8829a4aSRandall Stewart 	if (sctp_set_primary_addr(stcb, sa, NULL) == 0) {
523ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
524ad81507eSRandall Stewart 		    "process_asconf_set_primary: primary address set\n");
525f8829a4aSRandall Stewart 		/* notify upper layer */
526ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_SET_PRIMARY, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
527ca85e948SMichael Tuexen 		if ((stcb->asoc.primary_destination->dest_state & SCTP_ADDR_REACHABLE) &&
528ca85e948SMichael Tuexen 		    (!(stcb->asoc.primary_destination->dest_state & SCTP_ADDR_PF)) &&
529ca85e948SMichael Tuexen 		    (stcb->asoc.alternate)) {
530ca85e948SMichael Tuexen 			sctp_free_remote_addr(stcb->asoc.alternate);
531ca85e948SMichael Tuexen 			stcb->asoc.alternate = NULL;
532ca85e948SMichael Tuexen 		}
533f8829a4aSRandall Stewart 		if (response_required) {
534f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
535f8829a4aSRandall Stewart 		}
536851b7298SRandall Stewart 		/*
537851b7298SRandall Stewart 		 * Mobility adaptation. Ideally, when the reception of SET
538851b7298SRandall Stewart 		 * PRIMARY with DELETE IP ADDRESS of the previous primary
539851b7298SRandall Stewart 		 * destination, unacknowledged DATA are retransmitted
540851b7298SRandall Stewart 		 * immediately to the new primary destination for seamless
541b5c16493SMichael Tuexen 		 * handover. If the destination is UNCONFIRMED and marked to
542b5c16493SMichael Tuexen 		 * REQ_PRIM, The retransmission occur when reception of the
543b5c16493SMichael Tuexen 		 * HEARTBEAT-ACK.  (See sctp_handle_heartbeat_ack in
544851b7298SRandall Stewart 		 * sctp_input.c) Also, when change of the primary
545851b7298SRandall Stewart 		 * destination, it is better that all subsequent new DATA
546851b7298SRandall Stewart 		 * containing already queued DATA are transmitted to the new
547851b7298SRandall Stewart 		 * primary destination. (by micchie)
548851b7298SRandall Stewart 		 */
549851b7298SRandall Stewart 		if ((sctp_is_mobility_feature_on(stcb->sctp_ep,
550851b7298SRandall Stewart 		    SCTP_MOBILITY_BASE) ||
551851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
552851b7298SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) &&
553851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
554851b7298SRandall Stewart 		    SCTP_MOBILITY_PRIM_DELETED) &&
555851b7298SRandall Stewart 		    (stcb->asoc.primary_destination->dest_state &
556851b7298SRandall Stewart 		    SCTP_ADDR_UNCONFIRMED) == 0) {
557851b7298SRandall Stewart 
558851b7298SRandall Stewart 			sctp_timer_stop(SCTP_TIMER_TYPE_PRIM_DELETED, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTP_TIMER + SCTP_LOC_7);
559851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
560851b7298SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
561851b7298SRandall Stewart 				sctp_assoc_immediate_retrans(stcb,
562851b7298SRandall Stewart 				    stcb->asoc.primary_destination);
563851b7298SRandall Stewart 			}
564851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
565851b7298SRandall Stewart 			    SCTP_MOBILITY_BASE)) {
5669eea4a2dSMichael Tuexen 				sctp_move_chunks_from_net(stcb,
5679eea4a2dSMichael Tuexen 				    stcb->asoc.deleted_primary);
568851b7298SRandall Stewart 			}
569851b7298SRandall Stewart 			sctp_delete_prim_timer(stcb->sctp_ep, stcb,
570851b7298SRandall Stewart 			    stcb->asoc.deleted_primary);
571851b7298SRandall Stewart 		}
572f8829a4aSRandall Stewart 	} else {
573f8829a4aSRandall Stewart 		/* couldn't set the requested primary address! */
574ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
575ad81507eSRandall Stewart 		    "process_asconf_set_primary: set primary failed!\n");
576f8829a4aSRandall Stewart 		/* must have been an invalid address, so report */
577f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
578f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
579f8829a4aSRandall Stewart 		    aparam_length);
580f8829a4aSRandall Stewart 	}
581f8829a4aSRandall Stewart 
58260990c0cSMichael Tuexen 	return (m_reply);
583f8829a4aSRandall Stewart }
584f8829a4aSRandall Stewart 
585f8829a4aSRandall Stewart /*
586f8829a4aSRandall Stewart  * handles an ASCONF chunk.
587f8829a4aSRandall Stewart  * if all parameters are processed ok, send a plain (empty) ASCONF-ACK
588f8829a4aSRandall Stewart  */
589f8829a4aSRandall Stewart void
590f8829a4aSRandall Stewart sctp_handle_asconf(struct mbuf *m, unsigned int offset,
591b1754ad1SMichael Tuexen     struct sockaddr *src,
5922afb3e84SRandall Stewart     struct sctp_asconf_chunk *cp, struct sctp_tcb *stcb,
5932afb3e84SRandall Stewart     int first)
594f8829a4aSRandall Stewart {
595f8829a4aSRandall Stewart 	struct sctp_association *asoc;
596f8829a4aSRandall Stewart 	uint32_t serial_num;
5972afb3e84SRandall Stewart 	struct mbuf *n, *m_ack, *m_result, *m_tail;
598f8829a4aSRandall Stewart 	struct sctp_asconf_ack_chunk *ack_cp;
599f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph, *ack_aph;
600f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *p_addr;
601ca85e948SMichael Tuexen 	unsigned int asconf_limit, cnt;
602f8829a4aSRandall Stewart 	int error = 0;		/* did an error occur? */
603f8829a4aSRandall Stewart 
604f8829a4aSRandall Stewart 	/* asconf param buffer */
605f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
6062afb3e84SRandall Stewart 	struct sctp_asconf_ack *ack, *ack_next;
607f8829a4aSRandall Stewart 
608f8829a4aSRandall Stewart 	/* verify minimum length */
609f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_chunk)) {
610ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
611ad81507eSRandall Stewart 		    "handle_asconf: chunk too small = %xh\n",
612f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
613f8829a4aSRandall Stewart 		return;
614f8829a4aSRandall Stewart 	}
615f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
616f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
617f8829a4aSRandall Stewart 
61820b07a4dSMichael Tuexen 	if (SCTP_TSN_GE(asoc->asconf_seq_in, serial_num)) {
619f8829a4aSRandall Stewart 		/* got a duplicate ASCONF */
620ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
621ad81507eSRandall Stewart 		    "handle_asconf: got duplicate serial number = %xh\n",
622f8829a4aSRandall Stewart 		    serial_num);
623f8829a4aSRandall Stewart 		return;
624f8829a4aSRandall Stewart 	} else if (serial_num != (asoc->asconf_seq_in + 1)) {
625ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: incorrect serial number = %xh (expected next = %xh)\n",
626f8829a4aSRandall Stewart 		    serial_num, asoc->asconf_seq_in + 1);
627f8829a4aSRandall Stewart 		return;
628f8829a4aSRandall Stewart 	}
629f8829a4aSRandall Stewart 	/* it's the expected "next" sequence number, so process it */
630f8829a4aSRandall Stewart 	asoc->asconf_seq_in = serial_num;	/* update sequence */
631f8829a4aSRandall Stewart 	/* get length of all the param's in the ASCONF */
632f8829a4aSRandall Stewart 	asconf_limit = offset + ntohs(cp->ch.chunk_length);
633ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1,
634ad81507eSRandall Stewart 	    "handle_asconf: asconf_limit=%u, sequence=%xh\n",
635f8829a4aSRandall Stewart 	    asconf_limit, serial_num);
6362afb3e84SRandall Stewart 
6372afb3e84SRandall Stewart 	if (first) {
6382afb3e84SRandall Stewart 		/* delete old cache */
639e6194c2eSMichael Tuexen 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: Now processing first ASCONF. Try to delete old cache\n");
6402afb3e84SRandall Stewart 
6414a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(ack, &asoc->asconf_ack_sent, next, ack_next) {
6422afb3e84SRandall Stewart 			if (ack->serial_number == serial_num)
6432afb3e84SRandall Stewart 				break;
6442afb3e84SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: delete old(%u) < first(%u)\n",
6452afb3e84SRandall Stewart 			    ack->serial_number, serial_num);
6464a9ef3f8SMichael Tuexen 			TAILQ_REMOVE(&asoc->asconf_ack_sent, ack, next);
6472afb3e84SRandall Stewart 			if (ack->data != NULL) {
6482afb3e84SRandall Stewart 				sctp_m_freem(ack->data);
6492afb3e84SRandall Stewart 			}
650b3f1ea41SRandall Stewart 			SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), ack);
6512afb3e84SRandall Stewart 		}
652f8829a4aSRandall Stewart 	}
653139bc87fSRandall Stewart 	m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0,
654eb1b1807SGleb Smirnoff 	    M_NOWAIT, 1, MT_DATA);
655f8829a4aSRandall Stewart 	if (m_ack == NULL) {
656ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
657ad81507eSRandall Stewart 		    "handle_asconf: couldn't get mbuf!\n");
658f8829a4aSRandall Stewart 		return;
659f8829a4aSRandall Stewart 	}
660f8829a4aSRandall Stewart 	m_tail = m_ack;		/* current reply chain's tail */
661f8829a4aSRandall Stewart 
662f8829a4aSRandall Stewart 	/* fill in ASCONF-ACK header */
663f8829a4aSRandall Stewart 	ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *);
664f8829a4aSRandall Stewart 	ack_cp->ch.chunk_type = SCTP_ASCONF_ACK;
665f8829a4aSRandall Stewart 	ack_cp->ch.chunk_flags = 0;
666f8829a4aSRandall Stewart 	ack_cp->serial_number = htonl(serial_num);
667f8829a4aSRandall Stewart 	/* set initial lengths (eg. just an ASCONF-ACK), ntohx at the end! */
668139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk);
669f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk);
670f8829a4aSRandall Stewart 
671f8829a4aSRandall Stewart 	/* skip the lookup address parameter */
672f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_chunk);
673f8829a4aSRandall Stewart 	p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), (uint8_t *) & aparam_buf);
674f8829a4aSRandall Stewart 	if (p_addr == NULL) {
675ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
676ad81507eSRandall Stewart 		    "handle_asconf: couldn't get lookup addr!\n");
677f8829a4aSRandall Stewart 		/* respond with a missing/invalid mandatory parameter error */
678f8829a4aSRandall Stewart 		return;
679f8829a4aSRandall Stewart 	}
680f8829a4aSRandall Stewart 	/* param_length is already validated in process_control... */
681f8829a4aSRandall Stewart 	offset += ntohs(p_addr->ph.param_length);	/* skip lookup addr */
682f8829a4aSRandall Stewart 
683f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF-ACK */
684f8829a4aSRandall Stewart 	ack_aph = (struct sctp_asconf_paramhdr *)(mtod(m_ack, caddr_t)+sizeof(struct sctp_asconf_ack_chunk));
685f8829a4aSRandall Stewart 	if (ack_aph == NULL) {
686ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Gak in asconf2\n");
687f8829a4aSRandall Stewart 		return;
688f8829a4aSRandall Stewart 	}
689f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF */
690f8829a4aSRandall Stewart 	aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *) & aparam_buf);
691f8829a4aSRandall Stewart 	if (aph == NULL) {
692ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Empty ASCONF received?\n");
693f8829a4aSRandall Stewart 		goto send_reply;
694f8829a4aSRandall Stewart 	}
695f8829a4aSRandall Stewart 	/* process through all parameters */
696ca85e948SMichael Tuexen 	cnt = 0;
697f8829a4aSRandall Stewart 	while (aph != NULL) {
698f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
699f8829a4aSRandall Stewart 
700f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
701f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
702f8829a4aSRandall Stewart 		if (offset + param_length > asconf_limit) {
703f8829a4aSRandall Stewart 			/* parameter goes beyond end of chunk! */
704f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
705f8829a4aSRandall Stewart 			return;
706f8829a4aSRandall Stewart 		}
707f8829a4aSRandall Stewart 		m_result = NULL;
708f8829a4aSRandall Stewart 
709f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
710ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length);
711f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
712f8829a4aSRandall Stewart 			return;
713f8829a4aSRandall Stewart 		}
714f8829a4aSRandall Stewart 		if (param_length <= sizeof(struct sctp_paramhdr)) {
715ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length);
716f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
717f8829a4aSRandall Stewart 		}
718f8829a4aSRandall Stewart 		/* get the entire parameter */
719f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
720f8829a4aSRandall Stewart 		if (aph == NULL) {
721ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: couldn't get entire param\n");
722f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
723f8829a4aSRandall Stewart 			return;
724f8829a4aSRandall Stewart 		}
725f8829a4aSRandall Stewart 		switch (param_type) {
726f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
727f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
728b1754ad1SMichael Tuexen 			m_result = sctp_process_asconf_add_ip(src, aph, stcb,
729ca85e948SMichael Tuexen 			    (cnt < SCTP_BASE_SYSCTL(sctp_hb_maxburst)), error);
730ca85e948SMichael Tuexen 			cnt++;
731f8829a4aSRandall Stewart 			break;
732f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
733f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
734b1754ad1SMichael Tuexen 			m_result = sctp_process_asconf_delete_ip(src, aph, stcb,
735f8829a4aSRandall Stewart 			    error);
736f8829a4aSRandall Stewart 			break;
737f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
738f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
739f8829a4aSRandall Stewart 			break;
740f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
741f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
742b1754ad1SMichael Tuexen 			m_result = sctp_process_asconf_set_primary(src, aph,
743f8829a4aSRandall Stewart 			    stcb, error);
744f8829a4aSRandall Stewart 			break;
745830d754dSRandall Stewart 		case SCTP_NAT_VTAGS:
746830d754dSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: sees a NAT VTAG state parameter\n");
747830d754dSRandall Stewart 			break;
748f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
749f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
750f8829a4aSRandall Stewart 			break;
751f8829a4aSRandall Stewart 		case SCTP_ULP_ADAPTATION:
752f8829a4aSRandall Stewart 			/* FIX */
753f8829a4aSRandall Stewart 			break;
754f8829a4aSRandall Stewart 		default:
755f8829a4aSRandall Stewart 			if ((param_type & 0x8000) == 0) {
756f8829a4aSRandall Stewart 				/* Been told to STOP at this param */
757f8829a4aSRandall Stewart 				asconf_limit = offset;
758f8829a4aSRandall Stewart 				/*
759f8829a4aSRandall Stewart 				 * FIX FIX - We need to call
760f8829a4aSRandall Stewart 				 * sctp_arethere_unrecognized_parameters()
761f8829a4aSRandall Stewart 				 * to get a operr and send it for any
762f8829a4aSRandall Stewart 				 * param's with the 0x4000 bit set OR do it
763f8829a4aSRandall Stewart 				 * here ourselves... note we still must STOP
764f8829a4aSRandall Stewart 				 * if the 0x8000 bit is clear.
765f8829a4aSRandall Stewart 				 */
766f8829a4aSRandall Stewart 			}
767f8829a4aSRandall Stewart 			/* unknown/invalid param type */
768f8829a4aSRandall Stewart 			break;
769f8829a4aSRandall Stewart 		}		/* switch */
770f8829a4aSRandall Stewart 
771f8829a4aSRandall Stewart 		/* add any (error) result to the reply mbuf chain */
772f8829a4aSRandall Stewart 		if (m_result != NULL) {
773139bc87fSRandall Stewart 			SCTP_BUF_NEXT(m_tail) = m_result;
774f8829a4aSRandall Stewart 			m_tail = m_result;
775f8829a4aSRandall Stewart 			/* update lengths, make sure it's aligned too */
776139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_result) = SCTP_SIZE32(SCTP_BUF_LEN(m_result));
777139bc87fSRandall Stewart 			ack_cp->ch.chunk_length += SCTP_BUF_LEN(m_result);
778f8829a4aSRandall Stewart 			/* set flag to force success reports */
779f8829a4aSRandall Stewart 			error = 1;
780f8829a4aSRandall Stewart 		}
781f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
782f8829a4aSRandall Stewart 		/* update remaining ASCONF message length to process */
783f8829a4aSRandall Stewart 		if (offset >= asconf_limit) {
784f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
785f8829a4aSRandall Stewart 			break;
786f8829a4aSRandall Stewart 		}
787f8829a4aSRandall Stewart 		/* get pointer to next asconf param */
788f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
789f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr),
790f8829a4aSRandall Stewart 		    (uint8_t *) & aparam_buf);
791f8829a4aSRandall Stewart 		if (aph == NULL) {
792f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
793ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: can't get asconf param hdr!\n");
794f8829a4aSRandall Stewart 			/* FIX ME - add error here... */
795f8829a4aSRandall Stewart 		}
796ad81507eSRandall Stewart 	}
797f8829a4aSRandall Stewart 
798f8829a4aSRandall Stewart send_reply:
799f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = htons(ack_cp->ch.chunk_length);
800f8829a4aSRandall Stewart 	/* save the ASCONF-ACK reply */
801b3f1ea41SRandall Stewart 	ack = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asconf_ack),
8022afb3e84SRandall Stewart 	    struct sctp_asconf_ack);
8032afb3e84SRandall Stewart 	if (ack == NULL) {
8042afb3e84SRandall Stewart 		sctp_m_freem(m_ack);
8052afb3e84SRandall Stewart 		return;
8062afb3e84SRandall Stewart 	}
8072afb3e84SRandall Stewart 	ack->serial_number = serial_num;
8082afb3e84SRandall Stewart 	ack->last_sent_to = NULL;
8092afb3e84SRandall Stewart 	ack->data = m_ack;
810fc066a61SMichael Tuexen 	ack->len = 0;
811e6194c2eSMichael Tuexen 	for (n = m_ack; n != NULL; n = SCTP_BUF_NEXT(n)) {
8122afb3e84SRandall Stewart 		ack->len += SCTP_BUF_LEN(n);
8132afb3e84SRandall Stewart 	}
8142afb3e84SRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_ack_sent, ack, next);
815f8829a4aSRandall Stewart 
816f8829a4aSRandall Stewart 	/* see if last_control_chunk_from is set properly (use IP src addr) */
817f8829a4aSRandall Stewart 	if (stcb->asoc.last_control_chunk_from == NULL) {
818f8829a4aSRandall Stewart 		/*
819f8829a4aSRandall Stewart 		 * this could happen if the source address was just newly
820f8829a4aSRandall Stewart 		 * added
821f8829a4aSRandall Stewart 		 */
822ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: looking up net for IP source address\n");
823ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Looking for IP source: ");
824b82bd838SMichael Tuexen 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, src);
825f8829a4aSRandall Stewart 		/* look up the from address */
826b82bd838SMichael Tuexen 		stcb->asoc.last_control_chunk_from = sctp_findnet(stcb, src);
827f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
828b82bd838SMichael Tuexen 		if (stcb->asoc.last_control_chunk_from == NULL) {
829ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: IP source address not found?!\n");
830f8829a4aSRandall Stewart 		}
831b82bd838SMichael Tuexen #endif
832f8829a4aSRandall Stewart 	}
833f8829a4aSRandall Stewart }
834f8829a4aSRandall Stewart 
835f8829a4aSRandall Stewart /*
836f8829a4aSRandall Stewart  * does the address match? returns 0 if not, 1 if so
837f8829a4aSRandall Stewart  */
838f8829a4aSRandall Stewart static uint32_t
839f8829a4aSRandall Stewart sctp_asconf_addr_match(struct sctp_asconf_addr *aa, struct sockaddr *sa)
840f8829a4aSRandall Stewart {
841e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
842f8829a4aSRandall Stewart #ifdef INET6
843e6194c2eSMichael Tuexen 	case AF_INET6:
844e6194c2eSMichael Tuexen 		{
845f8829a4aSRandall Stewart 			/* XXX scopeid */
846f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
847f8829a4aSRandall Stewart 
848f8829a4aSRandall Stewart 			if ((aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) &&
849f8829a4aSRandall Stewart 			    (memcmp(&aa->ap.addrp.addr, &sin6->sin6_addr,
850f8829a4aSRandall Stewart 			    sizeof(struct in6_addr)) == 0)) {
851f8829a4aSRandall Stewart 				return (1);
852f8829a4aSRandall Stewart 			}
853e6194c2eSMichael Tuexen 			break;
854e6194c2eSMichael Tuexen 		}
855e6194c2eSMichael Tuexen #endif
856e6194c2eSMichael Tuexen #ifdef INET
857e6194c2eSMichael Tuexen 	case AF_INET:
858e6194c2eSMichael Tuexen 		{
859f8829a4aSRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
860f8829a4aSRandall Stewart 
861f8829a4aSRandall Stewart 			if ((aa->ap.addrp.ph.param_type == SCTP_IPV4_ADDRESS) &&
862f8829a4aSRandall Stewart 			    (memcmp(&aa->ap.addrp.addr, &sin->sin_addr,
863f8829a4aSRandall Stewart 			    sizeof(struct in_addr)) == 0)) {
864f8829a4aSRandall Stewart 				return (1);
865f8829a4aSRandall Stewart 			}
866e6194c2eSMichael Tuexen 			break;
867e6194c2eSMichael Tuexen 		}
868e6194c2eSMichael Tuexen #endif
869e6194c2eSMichael Tuexen 	default:
870e6194c2eSMichael Tuexen 		break;
871f8829a4aSRandall Stewart 	}
872f8829a4aSRandall Stewart 	return (0);
873f8829a4aSRandall Stewart }
874f8829a4aSRandall Stewart 
875f8829a4aSRandall Stewart /*
876c54a18d2SRandall Stewart  * does the address match? returns 0 if not, 1 if so
877c54a18d2SRandall Stewart  */
878c54a18d2SRandall Stewart static uint32_t
879e6194c2eSMichael Tuexen sctp_addr_match(struct sctp_paramhdr *ph, struct sockaddr *sa)
880c54a18d2SRandall Stewart {
881b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6)
882c54a18d2SRandall Stewart 	uint16_t param_type, param_length;
883c54a18d2SRandall Stewart 
884e6194c2eSMichael Tuexen 	param_type = ntohs(ph->param_type);
885e6194c2eSMichael Tuexen 	param_length = ntohs(ph->param_length);
886b54ddf22SMichael Tuexen #endif
887e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
888d6af161aSRandall Stewart #ifdef INET6
889e6194c2eSMichael Tuexen 	case AF_INET6:
890e6194c2eSMichael Tuexen 		{
891c54a18d2SRandall Stewart 			/* XXX scopeid */
892c54a18d2SRandall Stewart 			struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
893e6194c2eSMichael Tuexen 			struct sctp_ipv6addr_param *v6addr;
894c54a18d2SRandall Stewart 
895e6194c2eSMichael Tuexen 			v6addr = (struct sctp_ipv6addr_param *)ph;
896c54a18d2SRandall Stewart 			if ((param_type == SCTP_IPV6_ADDRESS) &&
897b54ddf22SMichael Tuexen 			    (param_length == sizeof(struct sctp_ipv6addr_param)) &&
898c54a18d2SRandall Stewart 			    (memcmp(&v6addr->addr, &sin6->sin6_addr,
899c54a18d2SRandall Stewart 			    sizeof(struct in6_addr)) == 0)) {
900c54a18d2SRandall Stewart 				return (1);
901c54a18d2SRandall Stewart 			}
902e6194c2eSMichael Tuexen 			break;
903d6af161aSRandall Stewart 		}
904d6af161aSRandall Stewart #endif
905e6194c2eSMichael Tuexen #ifdef INET
906e6194c2eSMichael Tuexen 	case AF_INET:
907e6194c2eSMichael Tuexen 		{
908c54a18d2SRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
909e6194c2eSMichael Tuexen 			struct sctp_ipv4addr_param *v4addr;
910c54a18d2SRandall Stewart 
911e6194c2eSMichael Tuexen 			v4addr = (struct sctp_ipv4addr_param *)ph;
912c54a18d2SRandall Stewart 			if ((param_type == SCTP_IPV4_ADDRESS) &&
913b54ddf22SMichael Tuexen 			    (param_length == sizeof(struct sctp_ipv4addr_param)) &&
914c54a18d2SRandall Stewart 			    (memcmp(&v4addr->addr, &sin->sin_addr,
915c54a18d2SRandall Stewart 			    sizeof(struct in_addr)) == 0)) {
916c54a18d2SRandall Stewart 				return (1);
917c54a18d2SRandall Stewart 			}
918e6194c2eSMichael Tuexen 			break;
919e6194c2eSMichael Tuexen 		}
920e6194c2eSMichael Tuexen #endif
921e6194c2eSMichael Tuexen 	default:
922e6194c2eSMichael Tuexen 		break;
923c54a18d2SRandall Stewart 	}
924c54a18d2SRandall Stewart 	return (0);
925c54a18d2SRandall Stewart }
926c54a18d2SRandall Stewart 
927c54a18d2SRandall Stewart /*
928f8829a4aSRandall Stewart  * Cleanup for non-responded/OP ERR'd ASCONF
929f8829a4aSRandall Stewart  */
930f8829a4aSRandall Stewart void
931f8829a4aSRandall Stewart sctp_asconf_cleanup(struct sctp_tcb *stcb, struct sctp_nets *net)
932f8829a4aSRandall Stewart {
933f8829a4aSRandall Stewart 	/* mark peer as ASCONF incapable */
934f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
935f8829a4aSRandall Stewart 	/*
936f8829a4aSRandall Stewart 	 * clear out any existing asconfs going out
937f8829a4aSRandall Stewart 	 */
9383c503c28SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
9393c503c28SRandall Stewart 	    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_2);
940c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out_acked = stcb->asoc.asconf_seq_out;
941f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
942f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
943f8829a4aSRandall Stewart }
944f8829a4aSRandall Stewart 
945f8829a4aSRandall Stewart /*
9462dad8a55SRandall Stewart  * cleanup any cached source addresses that may be topologically
9472dad8a55SRandall Stewart  * incorrect after a new address has been added to this interface.
9482dad8a55SRandall Stewart  */
9492dad8a55SRandall Stewart static void
9502dad8a55SRandall Stewart sctp_asconf_nets_cleanup(struct sctp_tcb *stcb, struct sctp_ifn *ifn)
9512dad8a55SRandall Stewart {
9522dad8a55SRandall Stewart 	struct sctp_nets *net;
9532dad8a55SRandall Stewart 
9542dad8a55SRandall Stewart 	/*
9552dad8a55SRandall Stewart 	 * Ideally, we want to only clear cached routes and source addresses
9562dad8a55SRandall Stewart 	 * that are topologically incorrect.  But since there is no easy way
9572dad8a55SRandall Stewart 	 * to know whether the newly added address on the ifn would cause a
9582dad8a55SRandall Stewart 	 * routing change (i.e. a new egress interface would be chosen)
9592dad8a55SRandall Stewart 	 * without doing a new routing lookup and source address selection,
9602dad8a55SRandall Stewart 	 * we will (for now) just flush any cached route using a different
9612dad8a55SRandall Stewart 	 * ifn (and cached source addrs) and let output re-choose them
9622dad8a55SRandall Stewart 	 * during the next send on that net.
9632dad8a55SRandall Stewart 	 */
9642dad8a55SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
9652dad8a55SRandall Stewart 		/*
9662dad8a55SRandall Stewart 		 * clear any cached route (and cached source address) if the
9672dad8a55SRandall Stewart 		 * route's interface is NOT the same as the address change.
9682dad8a55SRandall Stewart 		 * If it's the same interface, just clear the cached source
9692dad8a55SRandall Stewart 		 * address.
9702dad8a55SRandall Stewart 		 */
9712dad8a55SRandall Stewart 		if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro) &&
972fc066a61SMichael Tuexen 		    ((ifn == NULL) ||
973fc066a61SMichael Tuexen 		    (SCTP_GET_IF_INDEX_FROM_ROUTE(&net->ro) != ifn->ifn_index))) {
9742dad8a55SRandall Stewart 			/* clear any cached route */
9752dad8a55SRandall Stewart 			RTFREE(net->ro.ro_rt);
9762dad8a55SRandall Stewart 			net->ro.ro_rt = NULL;
9772dad8a55SRandall Stewart 		}
9782dad8a55SRandall Stewart 		/* clear any cached source address */
9792dad8a55SRandall Stewart 		if (net->src_addr_selected) {
9802dad8a55SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
9812dad8a55SRandall Stewart 			net->ro._s_addr = NULL;
9822dad8a55SRandall Stewart 			net->src_addr_selected = 0;
9832dad8a55SRandall Stewart 		}
9842dad8a55SRandall Stewart 	}
9852dad8a55SRandall Stewart }
9862dad8a55SRandall Stewart 
987851b7298SRandall Stewart 
988851b7298SRandall Stewart void
989851b7298SRandall Stewart sctp_assoc_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *dstnet)
990851b7298SRandall Stewart {
991851b7298SRandall Stewart 	int error;
992851b7298SRandall Stewart 
993851b7298SRandall Stewart 	if (dstnet->dest_state & SCTP_ADDR_UNCONFIRMED) {
994851b7298SRandall Stewart 		return;
995851b7298SRandall Stewart 	}
996851b7298SRandall Stewart 	if (stcb->asoc.deleted_primary == NULL) {
997851b7298SRandall Stewart 		return;
998851b7298SRandall Stewart 	}
999851b7298SRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.sent_queue)) {
1000b27a6b7dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "assoc_immediate_retrans: Deleted primary is ");
1001851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1002851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Current Primary is ");
1003851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.primary_destination->ro._l_addr.sa);
1004851b7298SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb,
1005851b7298SRandall Stewart 		    stcb->asoc.deleted_primary,
1006851b7298SRandall Stewart 		    SCTP_FROM_SCTP_TIMER + SCTP_LOC_8);
1007851b7298SRandall Stewart 		stcb->asoc.num_send_timers_up--;
1008851b7298SRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1009851b7298SRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1010851b7298SRandall Stewart 		}
1011851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1012851b7298SRandall Stewart 		error = sctp_t3rxt_timer(stcb->sctp_ep, stcb,
1013851b7298SRandall Stewart 		    stcb->asoc.deleted_primary);
1014851b7298SRandall Stewart 		if (error) {
1015851b7298SRandall Stewart 			SCTP_INP_DECR_REF(stcb->sctp_ep);
1016851b7298SRandall Stewart 			return;
1017851b7298SRandall Stewart 		}
1018851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1019851b7298SRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1020f31e6c7fSMichael Tuexen 		sctp_auditing(4, stcb->sctp_ep, stcb, stcb->asoc.deleted_primary);
1021851b7298SRandall Stewart #endif
1022851b7298SRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1023851b7298SRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
1024851b7298SRandall Stewart 		    (stcb->asoc.sent_queue_cnt > 0)) {
1025851b7298SRandall Stewart 			struct sctp_tmit_chunk *chk;
1026851b7298SRandall Stewart 
1027851b7298SRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1028851b7298SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep,
1029851b7298SRandall Stewart 			    stcb, chk->whoTo);
1030851b7298SRandall Stewart 		}
1031851b7298SRandall Stewart 	}
1032851b7298SRandall Stewart 	return;
1033851b7298SRandall Stewart }
1034851b7298SRandall Stewart 
10352afb3e84SRandall Stewart static int
10362afb3e84SRandall Stewart     sctp_asconf_queue_mgmt(struct sctp_tcb *, struct sctp_ifa *, uint16_t);
10372afb3e84SRandall Stewart 
1038851b7298SRandall Stewart void
10392afb3e84SRandall Stewart sctp_net_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *net)
10402afb3e84SRandall Stewart {
10412afb3e84SRandall Stewart 	struct sctp_tmit_chunk *chk;
10422afb3e84SRandall Stewart 
1043b27a6b7dSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "net_immediate_retrans: RTO is %d\n", net->RTO);
10442afb3e84SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, net,
10452afb3e84SRandall Stewart 	    SCTP_FROM_SCTP_TIMER + SCTP_LOC_5);
10462afb3e84SRandall Stewart 	stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
10472afb3e84SRandall Stewart 	net->error_count = 0;
10482afb3e84SRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
10492afb3e84SRandall Stewart 		if (chk->whoTo == net) {
1050851b7298SRandall Stewart 			if (chk->sent < SCTP_DATAGRAM_RESEND) {
10512afb3e84SRandall Stewart 				chk->sent = SCTP_DATAGRAM_RESEND;
10522afb3e84SRandall Stewart 				sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1053d55b0b1bSRandall Stewart 				sctp_flight_size_decrease(chk);
1054d55b0b1bSRandall Stewart 				sctp_total_flight_decrease(stcb, chk);
1055d55b0b1bSRandall Stewart 				net->marked_retrans++;
1056d55b0b1bSRandall Stewart 				stcb->asoc.marked_retrans++;
10572afb3e84SRandall Stewart 			}
10582afb3e84SRandall Stewart 		}
10592afb3e84SRandall Stewart 	}
1060d55b0b1bSRandall Stewart 	if (net->marked_retrans) {
1061d55b0b1bSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1062d55b0b1bSRandall Stewart 	}
1063851b7298SRandall Stewart }
10642afb3e84SRandall Stewart 
10652afb3e84SRandall Stewart static void
10662afb3e84SRandall Stewart sctp_path_check_and_react(struct sctp_tcb *stcb, struct sctp_ifa *newifa)
10672afb3e84SRandall Stewart {
10682afb3e84SRandall Stewart 	struct sctp_nets *net;
10692afb3e84SRandall Stewart 	int addrnum, changed;
10702afb3e84SRandall Stewart 
10712afb3e84SRandall Stewart 	/*
10722afb3e84SRandall Stewart 	 * If number of local valid addresses is 1, the valid address is
10732afb3e84SRandall Stewart 	 * probably newly added address. Several valid addresses in this
10742afb3e84SRandall Stewart 	 * association.  A source address may not be changed.  Additionally,
10752afb3e84SRandall Stewart 	 * they can be configured on a same interface as "alias" addresses.
10762afb3e84SRandall Stewart 	 * (by micchie)
10772afb3e84SRandall Stewart 	 */
10782afb3e84SRandall Stewart 	addrnum = sctp_local_addr_count(stcb);
10792afb3e84SRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "p_check_react(): %d local addresses\n",
10802afb3e84SRandall Stewart 	    addrnum);
10812afb3e84SRandall Stewart 	if (addrnum == 1) {
10822afb3e84SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
10832afb3e84SRandall Stewart 			/* clear any cached route and source address */
10842afb3e84SRandall Stewart 			if (net->ro.ro_rt) {
10852afb3e84SRandall Stewart 				RTFREE(net->ro.ro_rt);
10862afb3e84SRandall Stewart 				net->ro.ro_rt = NULL;
10872afb3e84SRandall Stewart 			}
10882afb3e84SRandall Stewart 			if (net->src_addr_selected) {
10892afb3e84SRandall Stewart 				sctp_free_ifa(net->ro._s_addr);
10902afb3e84SRandall Stewart 				net->ro._s_addr = NULL;
10912afb3e84SRandall Stewart 				net->src_addr_selected = 0;
10922afb3e84SRandall Stewart 			}
10932afb3e84SRandall Stewart 			/* Retransmit unacknowledged DATA chunks immediately */
10942afb3e84SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
10952afb3e84SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
10962afb3e84SRandall Stewart 				sctp_net_immediate_retrans(stcb, net);
10972afb3e84SRandall Stewart 			}
10982afb3e84SRandall Stewart 			/* also, SET PRIMARY is maybe already sent */
10992afb3e84SRandall Stewart 		}
11002afb3e84SRandall Stewart 		return;
11012afb3e84SRandall Stewart 	}
11022afb3e84SRandall Stewart 	/* Multiple local addresses exsist in the association.  */
11032afb3e84SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
11042afb3e84SRandall Stewart 		/* clear any cached route and source address */
11052afb3e84SRandall Stewart 		if (net->ro.ro_rt) {
11062afb3e84SRandall Stewart 			RTFREE(net->ro.ro_rt);
11072afb3e84SRandall Stewart 			net->ro.ro_rt = NULL;
11082afb3e84SRandall Stewart 		}
11092afb3e84SRandall Stewart 		if (net->src_addr_selected) {
11102afb3e84SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
11112afb3e84SRandall Stewart 			net->ro._s_addr = NULL;
11122afb3e84SRandall Stewart 			net->src_addr_selected = 0;
11132afb3e84SRandall Stewart 		}
11142afb3e84SRandall Stewart 		/*
11152afb3e84SRandall Stewart 		 * Check if the nexthop is corresponding to the new address.
11162afb3e84SRandall Stewart 		 * If the new address is corresponding to the current
11172afb3e84SRandall Stewart 		 * nexthop, the path will be changed. If the new address is
11182afb3e84SRandall Stewart 		 * NOT corresponding to the current nexthop, the path will
11192afb3e84SRandall Stewart 		 * not be changed.
11202afb3e84SRandall Stewart 		 */
11212afb3e84SRandall Stewart 		SCTP_RTALLOC((sctp_route_t *) & net->ro,
11222afb3e84SRandall Stewart 		    stcb->sctp_ep->def_vrf_id);
11232afb3e84SRandall Stewart 		if (net->ro.ro_rt == NULL)
11242afb3e84SRandall Stewart 			continue;
11252afb3e84SRandall Stewart 
11262afb3e84SRandall Stewart 		changed = 0;
1127e6194c2eSMichael Tuexen 		switch (net->ro._l_addr.sa.sa_family) {
1128e6194c2eSMichael Tuexen #ifdef INET
1129e6194c2eSMichael Tuexen 		case AF_INET:
1130e6194c2eSMichael Tuexen 			if (sctp_v4src_match_nexthop(newifa, (sctp_route_t *) & net->ro)) {
11312afb3e84SRandall Stewart 				changed = 1;
11322afb3e84SRandall Stewart 			}
1133e6194c2eSMichael Tuexen 			break;
11345e2c2d87SRandall Stewart #endif
1135e6194c2eSMichael Tuexen #ifdef INET6
1136e6194c2eSMichael Tuexen 		case AF_INET6:
1137e6194c2eSMichael Tuexen 			if (sctp_v6src_match_nexthop(
1138e6194c2eSMichael Tuexen 			    &newifa->address.sin6, (sctp_route_t *) & net->ro)) {
1139e6194c2eSMichael Tuexen 				changed = 1;
1140e6194c2eSMichael Tuexen 			}
1141e6194c2eSMichael Tuexen 			break;
1142e6194c2eSMichael Tuexen #endif
1143e6194c2eSMichael Tuexen 		default:
1144e6194c2eSMichael Tuexen 			break;
1145e6194c2eSMichael Tuexen 		}
11462afb3e84SRandall Stewart 		/*
11472afb3e84SRandall Stewart 		 * if the newly added address does not relate routing
11482afb3e84SRandall Stewart 		 * information, we skip.
11492afb3e84SRandall Stewart 		 */
11502afb3e84SRandall Stewart 		if (changed == 0)
11512afb3e84SRandall Stewart 			continue;
11522afb3e84SRandall Stewart 		/* Retransmit unacknowledged DATA chunks immediately */
11532afb3e84SRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
11542afb3e84SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
11552afb3e84SRandall Stewart 			sctp_net_immediate_retrans(stcb, net);
11562afb3e84SRandall Stewart 		}
11572afb3e84SRandall Stewart 		/* Send SET PRIMARY for this new address */
11582afb3e84SRandall Stewart 		if (net == stcb->asoc.primary_destination) {
11592afb3e84SRandall Stewart 			(void)sctp_asconf_queue_mgmt(stcb, newifa,
11602afb3e84SRandall Stewart 			    SCTP_SET_PRIM_ADDR);
11612afb3e84SRandall Stewart 		}
11622afb3e84SRandall Stewart 	}
11632afb3e84SRandall Stewart }
11642afb3e84SRandall Stewart 
11652dad8a55SRandall Stewart /*
1166f8829a4aSRandall Stewart  * process an ADD/DELETE IP ack from peer.
11671b649582SRandall Stewart  * addr: corresponding sctp_ifa to the address being added/deleted.
1168f8829a4aSRandall Stewart  * type: SCTP_ADD_IP_ADDRESS or SCTP_DEL_IP_ADDRESS.
1169f8829a4aSRandall Stewart  * flag: 1=success, 0=failure.
1170f8829a4aSRandall Stewart  */
1171f8829a4aSRandall Stewart static void
11727215cc1bSMichael Tuexen sctp_asconf_addr_mgmt_ack(struct sctp_tcb *stcb, struct sctp_ifa *addr, uint32_t flag)
1173f8829a4aSRandall Stewart {
1174f8829a4aSRandall Stewart 	/*
1175f8829a4aSRandall Stewart 	 * do the necessary asoc list work- if we get a failure indication,
11762dad8a55SRandall Stewart 	 * leave the address on the assoc's restricted list.  If we get a
11772dad8a55SRandall Stewart 	 * success indication, remove the address from the restricted list.
1178f8829a4aSRandall Stewart 	 */
1179f8829a4aSRandall Stewart 	/*
1180f8829a4aSRandall Stewart 	 * Note: this will only occur for ADD_IP_ADDRESS, since
1181f8829a4aSRandall Stewart 	 * DEL_IP_ADDRESS is never actually added to the list...
1182f8829a4aSRandall Stewart 	 */
1183f8829a4aSRandall Stewart 	if (flag) {
11841b649582SRandall Stewart 		/* success case, so remove from the restricted list */
11851b649582SRandall Stewart 		sctp_del_local_addr_restricted(stcb, addr);
11862dad8a55SRandall Stewart 
11873232788eSRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
1188d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_BASE) ||
1189d55b0b1bSRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
1190d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
11912afb3e84SRandall Stewart 			sctp_path_check_and_react(stcb, addr);
11922afb3e84SRandall Stewart 			return;
11932afb3e84SRandall Stewart 		}
11943232788eSRandall Stewart 		/* clear any cached/topologically incorrect source addresses */
11952dad8a55SRandall Stewart 		sctp_asconf_nets_cleanup(stcb, addr->ifn_p);
1196f8829a4aSRandall Stewart 	}
1197f8829a4aSRandall Stewart 	/* else, leave it on the list */
1198f8829a4aSRandall Stewart }
1199f8829a4aSRandall Stewart 
1200f8829a4aSRandall Stewart /*
12011b649582SRandall Stewart  * add an asconf add/delete/set primary IP address parameter to the queue.
1202f8829a4aSRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
12031b649582SRandall Stewart  * returns 0 if queued, -1 if not queued/removed.
12041b649582SRandall Stewart  * NOTE: if adding, but a delete for the same address is already scheduled
12051b649582SRandall Stewart  * (and not yet sent out), simply remove it from queue.  Same for deleting
12061b649582SRandall Stewart  * an address already scheduled for add.  If a duplicate operation is found,
12071b649582SRandall Stewart  * ignore the new one.
1208f8829a4aSRandall Stewart  */
12091b649582SRandall Stewart static int
12101b649582SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
121118e198d3SRandall Stewart     uint16_t type)
1212f8829a4aSRandall Stewart {
1213f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1214f8829a4aSRandall Stewart 
1215f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
12164a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1217f8829a4aSRandall Stewart 		/* address match? */
121842551e99SRandall Stewart 		if (sctp_asconf_addr_match(aa, &ifa->address.sa) == 0)
1219f8829a4aSRandall Stewart 			continue;
1220c54a18d2SRandall Stewart 		/*
1221c54a18d2SRandall Stewart 		 * is the request already in queue but not sent? pass the
1222c54a18d2SRandall Stewart 		 * request already sent in order to resolve the following
1223c54a18d2SRandall Stewart 		 * case: 1. arrival of ADD, then sent 2. arrival of DEL. we
1224c54a18d2SRandall Stewart 		 * can't remove the ADD request already sent 3. arrival of
1225c54a18d2SRandall Stewart 		 * ADD
1226c54a18d2SRandall Stewart 		 */
1227c54a18d2SRandall Stewart 		if (aa->ap.aph.ph.param_type == type && aa->sent == 0) {
1228f8829a4aSRandall Stewart 			return (-1);
1229f8829a4aSRandall Stewart 		}
1230f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
12311b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_ADD_IP_ADDRESS) &&
12321b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS)) {
1233f8829a4aSRandall Stewart 			/* add requested, delete already queued */
1234f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
12351b649582SRandall Stewart 			/* remove the ifa from the restricted list */
12361b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, ifa);
12371b649582SRandall Stewart 			/* free the asconf param */
1238207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
12391b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: add removes queued entry\n");
12401b649582SRandall Stewart 			return (-1);
12411b649582SRandall Stewart 		}
12421b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_DEL_IP_ADDRESS) &&
12431b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS)) {
12441b649582SRandall Stewart 			/* delete requested, add already queued */
12451b649582SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
12461b649582SRandall Stewart 			/* remove the aa->ifa from the restricted list */
12471b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
12481b649582SRandall Stewart 			/* free the asconf param */
12491b649582SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
12501b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: delete removes queued entry\n");
1251f8829a4aSRandall Stewart 			return (-1);
1252f8829a4aSRandall Stewart 		}
1253f8829a4aSRandall Stewart 	}			/* for each aa */
1254f8829a4aSRandall Stewart 
1255f8829a4aSRandall Stewart 	/* adding new request to the queue */
12561b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
12571b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1258f8829a4aSRandall Stewart 	if (aa == NULL) {
1259f8829a4aSRandall Stewart 		/* didn't get memory */
12601b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "asconf_queue_mgmt: failed to get memory!\n");
1261f8829a4aSRandall Stewart 		return (-1);
1262f8829a4aSRandall Stewart 	}
1263830d754dSRandall Stewart 	aa->special_del = 0;
1264f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1265f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
1266f8829a4aSRandall Stewart 	aa->ap.aph.ph.param_type = type;
1267f8829a4aSRandall Stewart 	aa->ifa = ifa;
1268bff64a4dSRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
1269f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
1270e6194c2eSMichael Tuexen 	switch (ifa->address.sa.sa_family) {
1271e6194c2eSMichael Tuexen #ifdef INET6
1272e6194c2eSMichael Tuexen 	case AF_INET6:
1273e6194c2eSMichael Tuexen 		{
1274f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1275f8829a4aSRandall Stewart 
127642551e99SRandall Stewart 			sin6 = (struct sockaddr_in6 *)&ifa->address.sa;
1277f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1278f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
12791b649582SRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1280f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv6addr_param);
1281f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1282f8829a4aSRandall Stewart 			    sizeof(struct in6_addr));
1283e6194c2eSMichael Tuexen 			break;
1284e6194c2eSMichael Tuexen 		}
1285e6194c2eSMichael Tuexen #endif
1286e6194c2eSMichael Tuexen #ifdef INET
1287e6194c2eSMichael Tuexen 	case AF_INET:
1288e6194c2eSMichael Tuexen 		{
12891b649582SRandall Stewart 			struct sockaddr_in *sin;
1290f8829a4aSRandall Stewart 
12911b649582SRandall Stewart 			sin = (struct sockaddr_in *)&ifa->address.sa;
1292f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1293f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
12941b649582SRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1295f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv4addr_param);
1296f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1297f8829a4aSRandall Stewart 			    sizeof(struct in_addr));
1298e6194c2eSMichael Tuexen 			break;
1299e6194c2eSMichael Tuexen 		}
1300e6194c2eSMichael Tuexen #endif
1301e6194c2eSMichael Tuexen 	default:
1302f8829a4aSRandall Stewart 		/* invalid family! */
1303207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13043232788eSRandall Stewart 		sctp_free_ifa(ifa);
1305f8829a4aSRandall Stewart 		return (-1);
1306f8829a4aSRandall Stewart 	}
1307f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1308f8829a4aSRandall Stewart 
1309f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1310f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
1311dec0177dSRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_debug_on) & SCTP_DEBUG_ASCONF2) {
1312c54a18d2SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
1313c54a18d2SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: inserted asconf ADD_IP_ADDRESS: ");
131488a95b1fSMichael Tuexen 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, &ifa->address.sa);
1315c54a18d2SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
13161b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf DEL_IP_ADDRESS: ");
131788a95b1fSMichael Tuexen 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, &ifa->address.sa);
1318f8829a4aSRandall Stewart 		} else {
13191b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf SET_PRIM_ADDR: ");
132088a95b1fSMichael Tuexen 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, &ifa->address.sa);
1321f8829a4aSRandall Stewart 		}
1322f8829a4aSRandall Stewart 	}
1323ad81507eSRandall Stewart #endif
1324f8829a4aSRandall Stewart 
1325f8829a4aSRandall Stewart 	return (0);
1326f8829a4aSRandall Stewart }
1327f8829a4aSRandall Stewart 
13281b649582SRandall Stewart 
13291b649582SRandall Stewart /*
13301b649582SRandall Stewart  * add an asconf operation for the given ifa and type.
13311b649582SRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
13321b649582SRandall Stewart  * returns 0 if completed, -1 if not completed, 1 if immediate send is
13331b649582SRandall Stewart  * advisable.
13341b649582SRandall Stewart  */
13351b649582SRandall Stewart static int
13361b649582SRandall Stewart sctp_asconf_queue_add(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
13371b649582SRandall Stewart     uint16_t type)
13381b649582SRandall Stewart {
13391b649582SRandall Stewart 	uint32_t status;
13401b649582SRandall Stewart 	int pending_delete_queued = 0;
13411b649582SRandall Stewart 
13421b649582SRandall Stewart 	/* see if peer supports ASCONF */
13431b649582SRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
13441b649582SRandall Stewart 		return (-1);
13451b649582SRandall Stewart 	}
13461b649582SRandall Stewart 	/*
13471b649582SRandall Stewart 	 * if this is deleting the last address from the assoc, mark it as
13481b649582SRandall Stewart 	 * pending.
13491b649582SRandall Stewart 	 */
13501b649582SRandall Stewart 	if ((type == SCTP_DEL_IP_ADDRESS) && !stcb->asoc.asconf_del_pending &&
13511b649582SRandall Stewart 	    (sctp_local_addr_count(stcb) < 2)) {
13521b649582SRandall Stewart 		/* set the pending delete info only */
13531b649582SRandall Stewart 		stcb->asoc.asconf_del_pending = 1;
13541b649582SRandall Stewart 		stcb->asoc.asconf_addr_del_pending = ifa;
13551b649582SRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
13561b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF2,
13571b649582SRandall Stewart 		    "asconf_queue_add: mark delete last address pending\n");
13581b649582SRandall Stewart 		return (-1);
13591b649582SRandall Stewart 	}
1360c54a18d2SRandall Stewart 	/* queue an asconf parameter */
1361c54a18d2SRandall Stewart 	status = sctp_asconf_queue_mgmt(stcb, ifa, type);
1362c54a18d2SRandall Stewart 
13631b649582SRandall Stewart 	/*
13641b649582SRandall Stewart 	 * if this is an add, and there is a delete also pending (i.e. the
13651b649582SRandall Stewart 	 * last local address is being changed), queue the pending delete
13661b649582SRandall Stewart 	 * too.
13671b649582SRandall Stewart 	 */
1368c54a18d2SRandall Stewart 	if ((type == SCTP_ADD_IP_ADDRESS) && stcb->asoc.asconf_del_pending && (status == 0)) {
13691b649582SRandall Stewart 		/* queue in the pending delete */
13701b649582SRandall Stewart 		if (sctp_asconf_queue_mgmt(stcb,
13711b649582SRandall Stewart 		    stcb->asoc.asconf_addr_del_pending,
13721b649582SRandall Stewart 		    SCTP_DEL_IP_ADDRESS) == 0) {
13731b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_add: queing pending delete\n");
13741b649582SRandall Stewart 			pending_delete_queued = 1;
13751b649582SRandall Stewart 			/* clear out the pending delete info */
13761b649582SRandall Stewart 			stcb->asoc.asconf_del_pending = 0;
13771b649582SRandall Stewart 			sctp_free_ifa(stcb->asoc.asconf_addr_del_pending);
13781b649582SRandall Stewart 			stcb->asoc.asconf_addr_del_pending = NULL;
13791b649582SRandall Stewart 		}
13801b649582SRandall Stewart 	}
1381c54a18d2SRandall Stewart 	if (pending_delete_queued) {
13821b649582SRandall Stewart 		struct sctp_nets *net;
13831b649582SRandall Stewart 
13841b649582SRandall Stewart 		/*
13851b649582SRandall Stewart 		 * since we know that the only/last address is now being
13861b649582SRandall Stewart 		 * changed in this case, reset the cwnd/rto on all nets to
13871b649582SRandall Stewart 		 * start as a new address and path.  Also clear the error
13881b649582SRandall Stewart 		 * counts to give the assoc the best chance to complete the
13891b649582SRandall Stewart 		 * address change.
13901b649582SRandall Stewart 		 */
13911b649582SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
13921b649582SRandall Stewart 			stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb,
13931b649582SRandall Stewart 			    net);
13941b649582SRandall Stewart 			net->RTO = 0;
13951b649582SRandall Stewart 			net->error_count = 0;
13961b649582SRandall Stewart 		}
13971b649582SRandall Stewart 		stcb->asoc.overall_error_count = 0;
1398b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
1399c4739e2fSRandall Stewart 			sctp_misc_ints(SCTP_THRESHOLD_CLEAR,
1400c4739e2fSRandall Stewart 			    stcb->asoc.overall_error_count,
1401c4739e2fSRandall Stewart 			    0,
1402c4739e2fSRandall Stewart 			    SCTP_FROM_SCTP_ASCONF,
1403c4739e2fSRandall Stewart 			    __LINE__);
1404c4739e2fSRandall Stewart 		}
14051b649582SRandall Stewart 		/* queue in an advisory set primary too */
14061b649582SRandall Stewart 		(void)sctp_asconf_queue_mgmt(stcb, ifa, SCTP_SET_PRIM_ADDR);
14071b649582SRandall Stewart 		/* let caller know we should send this out immediately */
14081b649582SRandall Stewart 		status = 1;
14091b649582SRandall Stewart 	}
14101b649582SRandall Stewart 	return (status);
14111b649582SRandall Stewart }
14121b649582SRandall Stewart 
14133232788eSRandall Stewart /*-
14143232788eSRandall Stewart  * add an asconf delete IP address parameter to the queue by sockaddr and
14153232788eSRandall Stewart  * possibly with no sctp_ifa available.  This is only called by the routine
14163232788eSRandall Stewart  * that checks the addresses in an INIT-ACK against the current address list.
1417f8829a4aSRandall Stewart  * returns 0 if completed, non-zero if not completed.
14183232788eSRandall Stewart  * NOTE: if an add is already scheduled (and not yet sent out), simply
14193232788eSRandall Stewart  * remove it from queue.  If a duplicate operation is found, ignore the
14203232788eSRandall Stewart  * new one.
1421f8829a4aSRandall Stewart  */
14221b649582SRandall Stewart static int
14233232788eSRandall Stewart sctp_asconf_queue_sa_delete(struct sctp_tcb *stcb, struct sockaddr *sa)
1424f8829a4aSRandall Stewart {
1425bff64a4dSRandall Stewart 	struct sctp_ifa *ifa;
1426f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
142742551e99SRandall Stewart 	uint32_t vrf_id;
1428f8829a4aSRandall Stewart 
1429ad81507eSRandall Stewart 	if (stcb == NULL) {
1430ad81507eSRandall Stewart 		return (-1);
1431ad81507eSRandall Stewart 	}
1432f8829a4aSRandall Stewart 	/* see if peer supports ASCONF */
1433f8829a4aSRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
1434f8829a4aSRandall Stewart 		return (-1);
1435f8829a4aSRandall Stewart 	}
1436f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
14374a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1438f8829a4aSRandall Stewart 		/* address match? */
1439f8829a4aSRandall Stewart 		if (sctp_asconf_addr_match(aa, sa) == 0)
1440f8829a4aSRandall Stewart 			continue;
1441f8829a4aSRandall Stewart 		/* is the request already in queue (sent or not) */
14423232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
1443f8829a4aSRandall Stewart 			return (-1);
1444f8829a4aSRandall Stewart 		}
1445f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
1446f8829a4aSRandall Stewart 		if (aa->sent == 1)
1447f8829a4aSRandall Stewart 			continue;
14483232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS) {
14493232788eSRandall Stewart 			/* add already queued, so remove existing entry */
1450f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
14511b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
1452f8829a4aSRandall Stewart 			/* free the entry */
1453207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
1454f8829a4aSRandall Stewart 			return (-1);
1455f8829a4aSRandall Stewart 		}
1456f8829a4aSRandall Stewart 	}			/* for each aa */
14573232788eSRandall Stewart 
14583232788eSRandall Stewart 	/* find any existing ifa-- NOTE ifa CAN be allowed to be NULL */
1459bff64a4dSRandall Stewart 	if (stcb) {
1460bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
1461bff64a4dSRandall Stewart 	} else {
1462bff64a4dSRandall Stewart 		vrf_id = SCTP_DEFAULT_VRFID;
1463bff64a4dSRandall Stewart 	}
1464851b7298SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
14653232788eSRandall Stewart 
1466f8829a4aSRandall Stewart 	/* adding new request to the queue */
14671b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
14681b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1469f8829a4aSRandall Stewart 	if (aa == NULL) {
1470f8829a4aSRandall Stewart 		/* didn't get memory */
1471ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
14723232788eSRandall Stewart 		    "sctp_asconf_queue_sa_delete: failed to get memory!\n");
1473f8829a4aSRandall Stewart 		return (-1);
1474f8829a4aSRandall Stewart 	}
1475830d754dSRandall Stewart 	aa->special_del = 0;
1476f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1477f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
14783232788eSRandall Stewart 	aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
1479bff64a4dSRandall Stewart 	aa->ifa = ifa;
14803232788eSRandall Stewart 	if (ifa)
1481bff64a4dSRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
1482f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
1483e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
1484e6194c2eSMichael Tuexen #ifdef INET6
1485e6194c2eSMichael Tuexen 	case AF_INET6:
1486e6194c2eSMichael Tuexen 		{
1487f8829a4aSRandall Stewart 			/* IPv6 address */
1488f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1489f8829a4aSRandall Stewart 
1490f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
1491f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1492f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
1493f8829a4aSRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param);
1494f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1495f8829a4aSRandall Stewart 			    sizeof(struct in6_addr));
1496e6194c2eSMichael Tuexen 			break;
1497e6194c2eSMichael Tuexen 		}
1498e6194c2eSMichael Tuexen #endif
1499e6194c2eSMichael Tuexen #ifdef INET
1500e6194c2eSMichael Tuexen 	case AF_INET:
1501e6194c2eSMichael Tuexen 		{
1502f8829a4aSRandall Stewart 			/* IPv4 address */
1503f8829a4aSRandall Stewart 			struct sockaddr_in *sin = (struct sockaddr_in *)sa;
1504f8829a4aSRandall Stewart 
1505f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1506f8829a4aSRandall Stewart 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
1507f8829a4aSRandall Stewart 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param);
1508f8829a4aSRandall Stewart 			memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1509f8829a4aSRandall Stewart 			    sizeof(struct in_addr));
1510e6194c2eSMichael Tuexen 			break;
1511e6194c2eSMichael Tuexen 		}
1512e6194c2eSMichael Tuexen #endif
1513e6194c2eSMichael Tuexen 	default:
1514f8829a4aSRandall Stewart 		/* invalid family! */
1515207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
15163232788eSRandall Stewart 		if (ifa)
15173232788eSRandall Stewart 			sctp_free_ifa(ifa);
1518f8829a4aSRandall Stewart 		return (-1);
1519f8829a4aSRandall Stewart 	}
1520f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1521f8829a4aSRandall Stewart 
15223232788eSRandall Stewart 	/* delete goes to the back of the queue */
1523f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1524f8829a4aSRandall Stewart 
1525c99efcf6SRandall Stewart 	/* sa_ignore MEMLEAK {memory is put on the tailq} */
1526f8829a4aSRandall Stewart 	return (0);
1527f8829a4aSRandall Stewart }
1528f8829a4aSRandall Stewart 
1529f8829a4aSRandall Stewart /*
1530f8829a4aSRandall Stewart  * find a specific asconf param on our "sent" queue
1531f8829a4aSRandall Stewart  */
1532f8829a4aSRandall Stewart static struct sctp_asconf_addr *
1533f8829a4aSRandall Stewart sctp_asconf_find_param(struct sctp_tcb *stcb, uint32_t correlation_id)
1534f8829a4aSRandall Stewart {
1535f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
1536f8829a4aSRandall Stewart 
1537f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
1538f8829a4aSRandall Stewart 		if (aa->ap.aph.correlation_id == correlation_id &&
1539f8829a4aSRandall Stewart 		    aa->sent == 1) {
1540f8829a4aSRandall Stewart 			/* found it */
1541f8829a4aSRandall Stewart 			return (aa);
1542f8829a4aSRandall Stewart 		}
1543f8829a4aSRandall Stewart 	}
1544f8829a4aSRandall Stewart 	/* didn't find it */
1545f8829a4aSRandall Stewart 	return (NULL);
1546f8829a4aSRandall Stewart }
1547f8829a4aSRandall Stewart 
1548f8829a4aSRandall Stewart /*
1549f8829a4aSRandall Stewart  * process an SCTP_ERROR_CAUSE_IND for a ASCONF-ACK parameter and do
1550f8829a4aSRandall Stewart  * notifications based on the error response
1551f8829a4aSRandall Stewart  */
1552f8829a4aSRandall Stewart static void
1553f8829a4aSRandall Stewart sctp_asconf_process_error(struct sctp_tcb *stcb,
1554f8829a4aSRandall Stewart     struct sctp_asconf_paramhdr *aph)
1555f8829a4aSRandall Stewart {
1556f8829a4aSRandall Stewart 	struct sctp_error_cause *eh;
1557f8829a4aSRandall Stewart 	struct sctp_paramhdr *ph;
1558f8829a4aSRandall Stewart 	uint16_t param_type;
1559f8829a4aSRandall Stewart 	uint16_t error_code;
1560f8829a4aSRandall Stewart 
1561f8829a4aSRandall Stewart 	eh = (struct sctp_error_cause *)(aph + 1);
1562f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)(eh + 1);
1563f8829a4aSRandall Stewart 	/* validate lengths */
1564f8829a4aSRandall Stewart 	if (htons(eh->length) + sizeof(struct sctp_error_cause) >
1565f8829a4aSRandall Stewart 	    htons(aph->ph.param_length)) {
1566f8829a4aSRandall Stewart 		/* invalid error cause length */
1567ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1568ad81507eSRandall Stewart 		    "asconf_process_error: cause element too long\n");
1569f8829a4aSRandall Stewart 		return;
1570f8829a4aSRandall Stewart 	}
1571f8829a4aSRandall Stewart 	if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) >
1572f8829a4aSRandall Stewart 	    htons(eh->length)) {
1573f8829a4aSRandall Stewart 		/* invalid included TLV length */
1574ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1575ad81507eSRandall Stewart 		    "asconf_process_error: included TLV too long\n");
1576f8829a4aSRandall Stewart 		return;
1577f8829a4aSRandall Stewart 	}
1578f8829a4aSRandall Stewart 	/* which error code ? */
1579f8829a4aSRandall Stewart 	error_code = ntohs(eh->code);
1580f8829a4aSRandall Stewart 	param_type = ntohs(aph->ph.param_type);
1581f8829a4aSRandall Stewart 	/* FIX: this should go back up the REMOTE_ERROR ULP notify */
1582f8829a4aSRandall Stewart 	switch (error_code) {
1583f8829a4aSRandall Stewart 	case SCTP_CAUSE_RESOURCE_SHORTAGE:
1584f8829a4aSRandall Stewart 		/* we allow ourselves to "try again" for this error */
1585f8829a4aSRandall Stewart 		break;
1586f8829a4aSRandall Stewart 	default:
1587f8829a4aSRandall Stewart 		/* peer can't handle it... */
1588f8829a4aSRandall Stewart 		switch (param_type) {
1589f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
1590f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
1591f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1592f8829a4aSRandall Stewart 			break;
1593f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
1594f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1595f8829a4aSRandall Stewart 			break;
1596f8829a4aSRandall Stewart 		default:
1597f8829a4aSRandall Stewart 			break;
1598f8829a4aSRandall Stewart 		}
1599f8829a4aSRandall Stewart 	}
1600f8829a4aSRandall Stewart }
1601f8829a4aSRandall Stewart 
1602f8829a4aSRandall Stewart /*
160318e198d3SRandall Stewart  * process an asconf queue param.
160418e198d3SRandall Stewart  * aparam: parameter to process, will be removed from the queue.
160518e198d3SRandall Stewart  * flag: 1=success case, 0=failure case
1606f8829a4aSRandall Stewart  */
1607f8829a4aSRandall Stewart static void
1608f8829a4aSRandall Stewart sctp_asconf_process_param_ack(struct sctp_tcb *stcb,
1609f8829a4aSRandall Stewart     struct sctp_asconf_addr *aparam, uint32_t flag)
1610f8829a4aSRandall Stewart {
1611f8829a4aSRandall Stewart 	uint16_t param_type;
1612f8829a4aSRandall Stewart 
1613f8829a4aSRandall Stewart 	/* process this param */
1614f8829a4aSRandall Stewart 	param_type = aparam->ap.aph.ph.param_type;
1615f8829a4aSRandall Stewart 	switch (param_type) {
1616f8829a4aSRandall Stewart 	case SCTP_ADD_IP_ADDRESS:
1617ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1618ad81507eSRandall Stewart 		    "process_param_ack: added IP address\n");
16197215cc1bSMichael Tuexen 		sctp_asconf_addr_mgmt_ack(stcb, aparam->ifa, flag);
1620f8829a4aSRandall Stewart 		break;
1621f8829a4aSRandall Stewart 	case SCTP_DEL_IP_ADDRESS:
1622ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1623ad81507eSRandall Stewart 		    "process_param_ack: deleted IP address\n");
1624f8829a4aSRandall Stewart 		/* nothing really to do... lists already updated */
1625f8829a4aSRandall Stewart 		break;
1626f8829a4aSRandall Stewart 	case SCTP_SET_PRIM_ADDR:
1627c54a18d2SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1628c54a18d2SRandall Stewart 		    "process_param_ack: set primary IP address\n");
1629f8829a4aSRandall Stewart 		/* nothing to do... peer may start using this addr */
1630f8829a4aSRandall Stewart 		if (flag == 0)
1631f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1632f8829a4aSRandall Stewart 		break;
1633f8829a4aSRandall Stewart 	default:
1634f8829a4aSRandall Stewart 		/* should NEVER happen */
1635f8829a4aSRandall Stewart 		break;
1636f8829a4aSRandall Stewart 	}
1637f8829a4aSRandall Stewart 
1638f8829a4aSRandall Stewart 	/* remove the param and free it */
1639f8829a4aSRandall Stewart 	TAILQ_REMOVE(&stcb->asoc.asconf_queue, aparam, next);
16403232788eSRandall Stewart 	if (aparam->ifa)
1641bff64a4dSRandall Stewart 		sctp_free_ifa(aparam->ifa);
1642207304d4SRandall Stewart 	SCTP_FREE(aparam, SCTP_M_ASC_ADDR);
1643f8829a4aSRandall Stewart }
1644f8829a4aSRandall Stewart 
1645f8829a4aSRandall Stewart /*
1646f8829a4aSRandall Stewart  * cleanup from a bad asconf ack parameter
1647f8829a4aSRandall Stewart  */
1648f8829a4aSRandall Stewart static void
1649f8829a4aSRandall Stewart sctp_asconf_ack_clear(struct sctp_tcb *stcb)
1650f8829a4aSRandall Stewart {
1651f8829a4aSRandall Stewart 	/* assume peer doesn't really know how to do asconfs */
1652f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
1653f8829a4aSRandall Stewart 	/* XXX we could free the pending queue here */
1654f8829a4aSRandall Stewart }
1655f8829a4aSRandall Stewart 
1656f8829a4aSRandall Stewart void
1657f8829a4aSRandall Stewart sctp_handle_asconf_ack(struct mbuf *m, int offset,
1658f8829a4aSRandall Stewart     struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb,
16593232788eSRandall Stewart     struct sctp_nets *net, int *abort_no_unlock)
1660f8829a4aSRandall Stewart {
1661f8829a4aSRandall Stewart 	struct sctp_association *asoc;
1662f8829a4aSRandall Stewart 	uint32_t serial_num;
1663f8829a4aSRandall Stewart 	uint16_t ack_length;
1664f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
1665f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1666f8829a4aSRandall Stewart 	uint32_t last_error_id = 0;	/* last error correlation id */
1667f8829a4aSRandall Stewart 	uint32_t id;
1668f8829a4aSRandall Stewart 	struct sctp_asconf_addr *ap;
1669f8829a4aSRandall Stewart 
1670f8829a4aSRandall Stewart 	/* asconf param buffer */
1671f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
1672f8829a4aSRandall Stewart 
1673f8829a4aSRandall Stewart 	/* verify minimum length */
1674f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) {
1675ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1676ad81507eSRandall Stewart 		    "handle_asconf_ack: chunk too small = %xh\n",
1677f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
1678f8829a4aSRandall Stewart 		return;
1679f8829a4aSRandall Stewart 	}
1680f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
1681f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
1682f8829a4aSRandall Stewart 
1683f8829a4aSRandall Stewart 	/*
1684f8829a4aSRandall Stewart 	 * NOTE: we may want to handle this differently- currently, we will
1685f8829a4aSRandall Stewart 	 * abort when we get an ack for the expected serial number + 1 (eg.
1686f8829a4aSRandall Stewart 	 * we didn't send it), process an ack normally if it is the expected
1687f8829a4aSRandall Stewart 	 * serial number, and re-send the previous ack for *ALL* other
1688f8829a4aSRandall Stewart 	 * serial numbers
1689f8829a4aSRandall Stewart 	 */
1690f8829a4aSRandall Stewart 
1691f8829a4aSRandall Stewart 	/*
1692f8829a4aSRandall Stewart 	 * if the serial number is the next expected, but I didn't send it,
1693f8829a4aSRandall Stewart 	 * abort the asoc, since someone probably just hijacked us...
1694f8829a4aSRandall Stewart 	 */
1695f8829a4aSRandall Stewart 	if (serial_num == (asoc->asconf_seq_out + 1)) {
1696ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got unexpected next serial number! Aborting asoc!\n");
1697a2b42326SMichael Tuexen 		sctp_abort_an_association(stcb->sctp_ep, stcb, NULL, SCTP_SO_NOT_LOCKED);
16983232788eSRandall Stewart 		*abort_no_unlock = 1;
1699f8829a4aSRandall Stewart 		return;
1700f8829a4aSRandall Stewart 	}
1701c54a18d2SRandall Stewart 	if (serial_num != asoc->asconf_seq_out_acked + 1) {
1702f8829a4aSRandall Stewart 		/* got a duplicate/unexpected ASCONF-ACK */
1703ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got duplicate/unexpected serial number = %xh (expected = %xh)\n",
1704c54a18d2SRandall Stewart 		    serial_num, asoc->asconf_seq_out_acked + 1);
1705f8829a4aSRandall Stewart 		return;
1706f8829a4aSRandall Stewart 	}
1707c54a18d2SRandall Stewart 	if (serial_num == asoc->asconf_seq_out - 1) {
1708f8829a4aSRandall Stewart 		/* stop our timer */
17093c503c28SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
17103c503c28SRandall Stewart 		    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_3);
1711c54a18d2SRandall Stewart 	}
1712f8829a4aSRandall Stewart 	/* process the ASCONF-ACK contents */
1713f8829a4aSRandall Stewart 	ack_length = ntohs(cp->ch.chunk_length) -
1714f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_ack_chunk);
1715f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_ack_chunk);
1716f8829a4aSRandall Stewart 	/* process through all parameters */
1717f8829a4aSRandall Stewart 	while (ack_length >= sizeof(struct sctp_asconf_paramhdr)) {
1718f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
1719f8829a4aSRandall Stewart 
1720f8829a4aSRandall Stewart 		/* get pointer to next asconf parameter */
1721f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
1722f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr), aparam_buf);
1723f8829a4aSRandall Stewart 		if (aph == NULL) {
1724f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
1725f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1726f8829a4aSRandall Stewart 			return;
1727f8829a4aSRandall Stewart 		}
1728f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
1729f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
1730f8829a4aSRandall Stewart 		if (param_length > ack_length) {
1731f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1732f8829a4aSRandall Stewart 			return;
1733f8829a4aSRandall Stewart 		}
1734f8829a4aSRandall Stewart 		if (param_length < sizeof(struct sctp_paramhdr)) {
1735f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1736f8829a4aSRandall Stewart 			return;
1737f8829a4aSRandall Stewart 		}
1738f8829a4aSRandall Stewart 		/* get the complete parameter... */
1739f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
1740ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
1741ad81507eSRandall Stewart 			    "param length (%u) larger than buffer size!\n", param_length);
1742f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1743f8829a4aSRandall Stewart 			return;
1744f8829a4aSRandall Stewart 		}
1745f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
1746f8829a4aSRandall Stewart 		if (aph == NULL) {
1747f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1748f8829a4aSRandall Stewart 			return;
1749f8829a4aSRandall Stewart 		}
1750f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no ntohl needed */
1751f8829a4aSRandall Stewart 		id = aph->correlation_id;
1752f8829a4aSRandall Stewart 
1753f8829a4aSRandall Stewart 		switch (param_type) {
1754f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
1755f8829a4aSRandall Stewart 			last_error_id = id;
1756f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1757f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1758f8829a4aSRandall Stewart 			if (ap == NULL) {
1759f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1760f8829a4aSRandall Stewart 				break;
1761f8829a4aSRandall Stewart 			}
1762f8829a4aSRandall Stewart 			/* process the parameter, failed flag */
1763f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 0);
1764f8829a4aSRandall Stewart 			/* process the error response */
1765f8829a4aSRandall Stewart 			sctp_asconf_process_error(stcb, aph);
1766f8829a4aSRandall Stewart 			break;
1767f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
1768f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1769f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1770f8829a4aSRandall Stewart 			if (ap == NULL) {
1771f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1772f8829a4aSRandall Stewart 				break;
1773f8829a4aSRandall Stewart 			}
1774f8829a4aSRandall Stewart 			/* process the parameter, success flag */
1775f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 1);
1776f8829a4aSRandall Stewart 			break;
1777f8829a4aSRandall Stewart 		default:
1778f8829a4aSRandall Stewart 			break;
1779f8829a4aSRandall Stewart 		}		/* switch */
1780f8829a4aSRandall Stewart 
1781f8829a4aSRandall Stewart 		/* update remaining ASCONF-ACK message length to process */
1782f8829a4aSRandall Stewart 		ack_length -= SCTP_SIZE32(param_length);
1783f8829a4aSRandall Stewart 		if (ack_length <= 0) {
1784f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
1785f8829a4aSRandall Stewart 			break;
1786f8829a4aSRandall Stewart 		}
1787f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
1788f8829a4aSRandall Stewart 	}			/* while */
1789f8829a4aSRandall Stewart 
1790f8829a4aSRandall Stewart 	/*
1791f8829a4aSRandall Stewart 	 * if there are any "sent" params still on the queue, these are
1792f8829a4aSRandall Stewart 	 * implicitly "success", or "failed" (if we got an error back) ...
1793f8829a4aSRandall Stewart 	 * so process these appropriately
1794f8829a4aSRandall Stewart 	 *
1795f8829a4aSRandall Stewart 	 * we assume that the correlation_id's are monotonically increasing
1796f8829a4aSRandall Stewart 	 * beginning from 1 and that we don't have *that* many outstanding
1797f8829a4aSRandall Stewart 	 * at any given time
1798f8829a4aSRandall Stewart 	 */
1799f8829a4aSRandall Stewart 	if (last_error_id == 0)
1800f8829a4aSRandall Stewart 		last_error_id--;/* set to "max" value */
18014a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1802f8829a4aSRandall Stewart 		if (aa->sent == 1) {
1803f8829a4aSRandall Stewart 			/*
1804f8829a4aSRandall Stewart 			 * implicitly successful or failed if correlation_id
1805f8829a4aSRandall Stewart 			 * < last_error_id, then success else, failure
1806f8829a4aSRandall Stewart 			 */
1807f8829a4aSRandall Stewart 			if (aa->ap.aph.correlation_id < last_error_id)
180818e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 1);
1809f8829a4aSRandall Stewart 			else
181018e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 0);
1811f8829a4aSRandall Stewart 		} else {
1812f8829a4aSRandall Stewart 			/*
1813f8829a4aSRandall Stewart 			 * since we always process in order (FIFO queue) if
1814f8829a4aSRandall Stewart 			 * we reach one that hasn't been sent, the rest
1815f8829a4aSRandall Stewart 			 * should not have been sent either. so, we're
1816f8829a4aSRandall Stewart 			 * done...
1817f8829a4aSRandall Stewart 			 */
1818f8829a4aSRandall Stewart 			break;
1819f8829a4aSRandall Stewart 		}
1820f8829a4aSRandall Stewart 	}
1821f8829a4aSRandall Stewart 
1822f8829a4aSRandall Stewart 	/* update the next sequence number to use */
1823c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked++;
1824f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
1825f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
1826f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.asconf_queue)) {
18271b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
1828f8829a4aSRandall Stewart 		/* we have more params, so restart our timer */
1829f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep,
1830f8829a4aSRandall Stewart 		    stcb, net);
18311b649582SRandall Stewart #else
18321b649582SRandall Stewart 		/* we have more params, so send out more */
18333232788eSRandall Stewart 		sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
18341b649582SRandall Stewart #endif
1835f8829a4aSRandall Stewart 	}
1836f8829a4aSRandall Stewart }
1837f8829a4aSRandall Stewart 
18385e2c2d87SRandall Stewart #ifdef INET6
1839f8829a4aSRandall Stewart static uint32_t
1840f8829a4aSRandall Stewart sctp_is_scopeid_in_nets(struct sctp_tcb *stcb, struct sockaddr *sa)
1841f8829a4aSRandall Stewart {
1842f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6, *net6;
1843f8829a4aSRandall Stewart 	struct sctp_nets *net;
1844f8829a4aSRandall Stewart 
1845f8829a4aSRandall Stewart 	if (sa->sa_family != AF_INET6) {
1846f8829a4aSRandall Stewart 		/* wrong family */
1847f8829a4aSRandall Stewart 		return (0);
1848f8829a4aSRandall Stewart 	}
1849f8829a4aSRandall Stewart 	sin6 = (struct sockaddr_in6 *)sa;
1850f8829a4aSRandall Stewart 	if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) == 0) {
1851f8829a4aSRandall Stewart 		/* not link local address */
1852f8829a4aSRandall Stewart 		return (0);
1853f8829a4aSRandall Stewart 	}
1854f8829a4aSRandall Stewart 	/* hunt through our destination nets list for this scope_id */
1855f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1856f8829a4aSRandall Stewart 		if (((struct sockaddr *)(&net->ro._l_addr))->sa_family !=
1857f8829a4aSRandall Stewart 		    AF_INET6)
1858f8829a4aSRandall Stewart 			continue;
1859f8829a4aSRandall Stewart 		net6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1860f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_LINKLOCAL(&net6->sin6_addr) == 0)
1861f8829a4aSRandall Stewart 			continue;
1862f8829a4aSRandall Stewart 		if (sctp_is_same_scope(sin6, net6)) {
1863f8829a4aSRandall Stewart 			/* found one */
1864f8829a4aSRandall Stewart 			return (1);
1865f8829a4aSRandall Stewart 		}
1866f8829a4aSRandall Stewart 	}
1867f8829a4aSRandall Stewart 	/* didn't find one */
1868f8829a4aSRandall Stewart 	return (0);
1869f8829a4aSRandall Stewart }
1870f8829a4aSRandall Stewart 
18715e2c2d87SRandall Stewart #endif
18725e2c2d87SRandall Stewart 
1873f8829a4aSRandall Stewart /*
1874f8829a4aSRandall Stewart  * address management functions
1875f8829a4aSRandall Stewart  */
1876f8829a4aSRandall Stewart static void
1877f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
18783232788eSRandall Stewart     struct sctp_ifa *ifa, uint16_t type, int addr_locked)
1879f8829a4aSRandall Stewart {
1880f8829a4aSRandall Stewart 	int status;
1881f8829a4aSRandall Stewart 
1882ca85e948SMichael Tuexen 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0 ||
1883f8829a4aSRandall Stewart 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
1884f8829a4aSRandall Stewart 		/* subset bound, no ASCONF allowed case, so ignore */
1885f8829a4aSRandall Stewart 		return;
1886f8829a4aSRandall Stewart 	}
1887f8829a4aSRandall Stewart 	/*
1888f8829a4aSRandall Stewart 	 * note: we know this is not the subset bound, no ASCONF case eg.
1889f8829a4aSRandall Stewart 	 * this is boundall or subset bound w/ASCONF allowed
1890f8829a4aSRandall Stewart 	 */
1891f8829a4aSRandall Stewart 
1892f8829a4aSRandall Stewart 	/* first, make sure it's a good address family */
1893e6194c2eSMichael Tuexen 	switch (ifa->address.sa.sa_family) {
1894e6194c2eSMichael Tuexen #ifdef INET6
1895e6194c2eSMichael Tuexen 	case AF_INET6:
1896e6194c2eSMichael Tuexen 		break;
1897e6194c2eSMichael Tuexen #endif
1898e6194c2eSMichael Tuexen #ifdef INET
1899e6194c2eSMichael Tuexen 	case AF_INET:
1900e6194c2eSMichael Tuexen 		break;
1901e6194c2eSMichael Tuexen #endif
1902e6194c2eSMichael Tuexen 	default:
1903f8829a4aSRandall Stewart 		return;
1904f8829a4aSRandall Stewart 	}
1905e6194c2eSMichael Tuexen #ifdef INET6
1906f8829a4aSRandall Stewart 	/* make sure we're "allowed" to add this type of addr */
190742551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
1908f8829a4aSRandall Stewart 		/* invalid if we're not a v6 endpoint */
1909f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0)
1910f8829a4aSRandall Stewart 			return;
1911f8829a4aSRandall Stewart 		/* is the v6 addr really valid ? */
191242551e99SRandall Stewart 		if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
1913f8829a4aSRandall Stewart 			return;
1914f8829a4aSRandall Stewart 		}
1915f8829a4aSRandall Stewart 	}
1916e6194c2eSMichael Tuexen #endif
1917f8829a4aSRandall Stewart 	/* put this address on the "pending/do not use yet" list */
19181b649582SRandall Stewart 	sctp_add_local_addr_restricted(stcb, ifa);
1919f8829a4aSRandall Stewart 	/*
1920f8829a4aSRandall Stewart 	 * check address scope if address is out of scope, don't queue
1921f8829a4aSRandall Stewart 	 * anything... note: this would leave the address on both inp and
1922f8829a4aSRandall Stewart 	 * asoc lists
1923f8829a4aSRandall Stewart 	 */
19245e2c2d87SRandall Stewart 	switch (ifa->address.sa.sa_family) {
19255e2c2d87SRandall Stewart #ifdef INET6
19265e2c2d87SRandall Stewart 	case AF_INET6:
19275e2c2d87SRandall Stewart 		{
1928f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1929f8829a4aSRandall Stewart 
193042551e99SRandall Stewart 			sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
1931f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
1932f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
1933f8829a4aSRandall Stewart 				return;
1934f8829a4aSRandall Stewart 			}
1935f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
1936a1cb341bSMichael Tuexen 				if (stcb->asoc.scope.local_scope == 0) {
1937f8829a4aSRandall Stewart 					return;
1938f8829a4aSRandall Stewart 				}
1939f8829a4aSRandall Stewart 				/* is it the right link local scope? */
194042551e99SRandall Stewart 				if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
1941f8829a4aSRandall Stewart 					return;
1942f8829a4aSRandall Stewart 				}
1943f8829a4aSRandall Stewart 			}
1944a1cb341bSMichael Tuexen 			if (stcb->asoc.scope.site_scope == 0 &&
1945f8829a4aSRandall Stewart 			    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) {
1946f8829a4aSRandall Stewart 				return;
1947f8829a4aSRandall Stewart 			}
19485e2c2d87SRandall Stewart 			break;
19495e2c2d87SRandall Stewart 		}
19505e2c2d87SRandall Stewart #endif
1951e6194c2eSMichael Tuexen #ifdef INET
19525e2c2d87SRandall Stewart 	case AF_INET:
19535e2c2d87SRandall Stewart 		{
1954f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
1955f8829a4aSRandall Stewart 			struct in6pcb *inp6;
1956f8829a4aSRandall Stewart 
1957f8829a4aSRandall Stewart 			inp6 = (struct in6pcb *)&inp->ip_inp.inp;
1958f8829a4aSRandall Stewart 			/* invalid if we are a v6 only endpoint */
1959f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
196044b7479bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp6))
1961f8829a4aSRandall Stewart 				return;
1962f8829a4aSRandall Stewart 
196342551e99SRandall Stewart 			sin = (struct sockaddr_in *)&ifa->address.sa;
1964f8829a4aSRandall Stewart 			if (sin->sin_addr.s_addr == 0) {
1965f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
1966f8829a4aSRandall Stewart 				return;
1967f8829a4aSRandall Stewart 			}
1968a1cb341bSMichael Tuexen 			if (stcb->asoc.scope.ipv4_local_scope == 0 &&
1969f8829a4aSRandall Stewart 			    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
1970f8829a4aSRandall Stewart 				return;
1971f8829a4aSRandall Stewart 			}
19725e2c2d87SRandall Stewart 			break;
19735e2c2d87SRandall Stewart 		}
1974e6194c2eSMichael Tuexen #endif
19755e2c2d87SRandall Stewart 	default:
1976f8829a4aSRandall Stewart 		/* else, not AF_INET or AF_INET6, so skip */
1977f8829a4aSRandall Stewart 		return;
1978f8829a4aSRandall Stewart 	}
1979f8829a4aSRandall Stewart 
1980f8829a4aSRandall Stewart 	/* queue an asconf for this address add/delete */
1981f8829a4aSRandall Stewart 	if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
1982f8829a4aSRandall Stewart 		/* does the peer do asconf? */
1983f8829a4aSRandall Stewart 		if (stcb->asoc.peer_supports_asconf) {
1984f8829a4aSRandall Stewart 			/* queue an asconf for this addr */
1985f8829a4aSRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
19861b649582SRandall Stewart 
1987f8829a4aSRandall Stewart 			/*
19881b649582SRandall Stewart 			 * if queued ok, and in the open state, send out the
19891b649582SRandall Stewart 			 * ASCONF.  If in the non-open state, these will be
19901b649582SRandall Stewart 			 * sent when the state goes open.
1991f8829a4aSRandall Stewart 			 */
1992f8829a4aSRandall Stewart 			if (status == 0 &&
1993f8829a4aSRandall Stewart 			    SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
19941b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
1995f8829a4aSRandall Stewart 				sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, inp,
1996f8829a4aSRandall Stewart 				    stcb, stcb->asoc.primary_destination);
19971b649582SRandall Stewart #else
1998ca85e948SMichael Tuexen 				sctp_send_asconf(stcb, NULL, addr_locked);
19991b649582SRandall Stewart #endif
2000f8829a4aSRandall Stewart 			}
2001f8829a4aSRandall Stewart 		}
2002f8829a4aSRandall Stewart 	}
2003f8829a4aSRandall Stewart }
2004f8829a4aSRandall Stewart 
200542551e99SRandall Stewart 
200642551e99SRandall Stewart int
20077215cc1bSMichael Tuexen sctp_asconf_iterator_ep(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED)
2008f8829a4aSRandall Stewart {
200942551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
201042551e99SRandall Stewart 	struct sctp_ifa *ifa;
201142551e99SRandall Stewart 	struct sctp_laddr *l;
201242551e99SRandall Stewart 	int cnt_invalid = 0;
2013f8829a4aSRandall Stewart 
201442551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
201542551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
201642551e99SRandall Stewart 		ifa = l->ifa;
2017e6194c2eSMichael Tuexen 		switch (ifa->address.sa.sa_family) {
2018e6194c2eSMichael Tuexen #ifdef INET6
2019e6194c2eSMichael Tuexen 		case AF_INET6:
2020f8829a4aSRandall Stewart 			/* invalid if we're not a v6 endpoint */
2021f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
202242551e99SRandall Stewart 				cnt_invalid++;
202342551e99SRandall Stewart 				if (asc->cnt == cnt_invalid)
202442551e99SRandall Stewart 					return (1);
2025f8829a4aSRandall Stewart 			}
2026e6194c2eSMichael Tuexen 			break;
2027e6194c2eSMichael Tuexen #endif
2028e6194c2eSMichael Tuexen #ifdef INET
2029e6194c2eSMichael Tuexen 		case AF_INET:
2030e6194c2eSMichael Tuexen 			{
2031f8829a4aSRandall Stewart 				/* invalid if we are a v6 only endpoint */
2032f8829a4aSRandall Stewart 				struct in6pcb *inp6;
2033f8829a4aSRandall Stewart 
2034f8829a4aSRandall Stewart 				inp6 = (struct in6pcb *)&inp->ip_inp.inp;
2035f8829a4aSRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
203644b7479bSRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6)) {
203742551e99SRandall Stewart 					cnt_invalid++;
203842551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
203942551e99SRandall Stewart 						return (1);
2040f8829a4aSRandall Stewart 				}
2041e6194c2eSMichael Tuexen 				break;
2042e6194c2eSMichael Tuexen 			}
2043e6194c2eSMichael Tuexen #endif
2044e6194c2eSMichael Tuexen 		default:
2045f8829a4aSRandall Stewart 			/* invalid address family */
204642551e99SRandall Stewart 			cnt_invalid++;
204742551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
204842551e99SRandall Stewart 				return (1);
2049f8829a4aSRandall Stewart 		}
205042551e99SRandall Stewart 	}
205142551e99SRandall Stewart 	return (0);
205242551e99SRandall Stewart }
2053f8829a4aSRandall Stewart 
20541b649582SRandall Stewart static int
20557215cc1bSMichael Tuexen sctp_asconf_iterator_ep_end(struct sctp_inpcb *inp, void *ptr, uint32_t val SCTP_UNUSED)
205642551e99SRandall Stewart {
205742551e99SRandall Stewart 	struct sctp_ifa *ifa;
205842551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
205942551e99SRandall Stewart 	struct sctp_laddr *laddr, *nladdr, *l;
206042551e99SRandall Stewart 
206142551e99SRandall Stewart 	/* Only for specific case not bound all */
206242551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
206342551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
206442551e99SRandall Stewart 		ifa = l->ifa;
206542551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
20663c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
20673c503c28SRandall Stewart 			    sctp_nxt_addr) {
206842551e99SRandall Stewart 				if (laddr->ifa == ifa) {
206942551e99SRandall Stewart 					laddr->action = 0;
207042551e99SRandall Stewart 					break;
207142551e99SRandall Stewart 				}
207242551e99SRandall Stewart 			}
207342551e99SRandall Stewart 		} else if (l->action == SCTP_DEL_IP_ADDRESS) {
20744a9ef3f8SMichael Tuexen 			LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) {
207542551e99SRandall Stewart 				/* remove only after all guys are done */
207642551e99SRandall Stewart 				if (laddr->ifa == ifa) {
207742551e99SRandall Stewart 					sctp_del_local_addr_ep(inp, ifa);
207842551e99SRandall Stewart 				}
207942551e99SRandall Stewart 			}
208042551e99SRandall Stewart 		}
208142551e99SRandall Stewart 	}
208242551e99SRandall Stewart 	return (0);
208342551e99SRandall Stewart }
208442551e99SRandall Stewart 
208542551e99SRandall Stewart void
20861b649582SRandall Stewart sctp_asconf_iterator_stcb(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
20877215cc1bSMichael Tuexen     void *ptr, uint32_t val SCTP_UNUSED)
208842551e99SRandall Stewart {
208942551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
209042551e99SRandall Stewart 	struct sctp_ifa *ifa;
209142551e99SRandall Stewart 	struct sctp_laddr *l;
209242551e99SRandall Stewart 	int cnt_invalid = 0;
209342551e99SRandall Stewart 	int type, status;
20941b649582SRandall Stewart 	int num_queued = 0;
209542551e99SRandall Stewart 
209642551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
209742551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
209842551e99SRandall Stewart 		ifa = l->ifa;
209942551e99SRandall Stewart 		type = l->action;
210022a67197SRandall Stewart 
210122a67197SRandall Stewart 		/* address's vrf_id must be the vrf_id of the assoc */
210222a67197SRandall Stewart 		if (ifa->vrf_id != stcb->asoc.vrf_id) {
210322a67197SRandall Stewart 			continue;
210422a67197SRandall Stewart 		}
210542551e99SRandall Stewart 		/* Same checks again for assoc */
21065e2c2d87SRandall Stewart 		switch (ifa->address.sa.sa_family) {
21075e2c2d87SRandall Stewart #ifdef INET6
21085e2c2d87SRandall Stewart 		case AF_INET6:
21095e2c2d87SRandall Stewart 			{
211042551e99SRandall Stewart 				/* invalid if we're not a v6 endpoint */
211142551e99SRandall Stewart 				struct sockaddr_in6 *sin6;
211242551e99SRandall Stewart 
211342551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
211442551e99SRandall Stewart 					cnt_invalid++;
211542551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
211642551e99SRandall Stewart 						return;
211742551e99SRandall Stewart 					else
211842551e99SRandall Stewart 						continue;
211942551e99SRandall Stewart 				}
212042551e99SRandall Stewart 				sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
212142551e99SRandall Stewart 				if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
212242551e99SRandall Stewart 					/* we skip unspecifed addresses */
212342551e99SRandall Stewart 					continue;
212442551e99SRandall Stewart 				}
212542551e99SRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
2126a1cb341bSMichael Tuexen 					if (stcb->asoc.scope.local_scope == 0) {
212742551e99SRandall Stewart 						continue;
212842551e99SRandall Stewart 					}
212942551e99SRandall Stewart 					/* is it the right link local scope? */
213042551e99SRandall Stewart 					if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
213142551e99SRandall Stewart 						continue;
213242551e99SRandall Stewart 					}
213342551e99SRandall Stewart 				}
21345e2c2d87SRandall Stewart 				break;
21355e2c2d87SRandall Stewart 			}
21365e2c2d87SRandall Stewart #endif
2137e6194c2eSMichael Tuexen #ifdef INET
21385e2c2d87SRandall Stewart 		case AF_INET:
21395e2c2d87SRandall Stewart 			{
214042551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
214142551e99SRandall Stewart 				struct in6pcb *inp6;
214242551e99SRandall Stewart 				struct sockaddr_in *sin;
214342551e99SRandall Stewart 
214442551e99SRandall Stewart 				inp6 = (struct in6pcb *)&inp->ip_inp.inp;
214542551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
214642551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
214742551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6))
214842551e99SRandall Stewart 					continue;
214942551e99SRandall Stewart 
215042551e99SRandall Stewart 				sin = (struct sockaddr_in *)&ifa->address.sa;
215142551e99SRandall Stewart 				if (sin->sin_addr.s_addr == 0) {
215242551e99SRandall Stewart 					/* we skip unspecifed addresses */
215342551e99SRandall Stewart 					continue;
215442551e99SRandall Stewart 				}
2155a1cb341bSMichael Tuexen 				if (stcb->asoc.scope.ipv4_local_scope == 0 &&
215642551e99SRandall Stewart 				    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
2157c2ede4b3SMartin Blapp 					continue;
215842551e99SRandall Stewart 				}
215942551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
216042551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6)) {
216142551e99SRandall Stewart 					cnt_invalid++;
216242551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
216342551e99SRandall Stewart 						return;
216442551e99SRandall Stewart 					else
216542551e99SRandall Stewart 						continue;
216642551e99SRandall Stewart 				}
21675e2c2d87SRandall Stewart 				break;
21685e2c2d87SRandall Stewart 			}
2169e6194c2eSMichael Tuexen #endif
21705e2c2d87SRandall Stewart 		default:
217142551e99SRandall Stewart 			/* invalid address family */
217242551e99SRandall Stewart 			cnt_invalid++;
217342551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
2174f8829a4aSRandall Stewart 				return;
217542551e99SRandall Stewart 			else
217642551e99SRandall Stewart 				continue;
21775e2c2d87SRandall Stewart 			break;
2178f8829a4aSRandall Stewart 		}
2179f8829a4aSRandall Stewart 
218042551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
21811b649582SRandall Stewart 			/* prevent this address from being used as a source */
21821b649582SRandall Stewart 			sctp_add_local_addr_restricted(stcb, ifa);
218342551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
2184f8829a4aSRandall Stewart 			struct sctp_nets *net;
2185f8829a4aSRandall Stewart 
2186f8829a4aSRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
218717205eccSRandall Stewart 				sctp_rtentry_t *rt;
2188f8829a4aSRandall Stewart 
2189f8829a4aSRandall Stewart 				/* delete this address if cached */
2190851b7298SRandall Stewart 				if (net->ro._s_addr == ifa) {
219142551e99SRandall Stewart 					sctp_free_ifa(net->ro._s_addr);
219242551e99SRandall Stewart 					net->ro._s_addr = NULL;
219342551e99SRandall Stewart 					net->src_addr_selected = 0;
2194f8829a4aSRandall Stewart 					rt = net->ro.ro_rt;
219542551e99SRandall Stewart 					if (rt) {
219642551e99SRandall Stewart 						RTFREE(rt);
2197f8829a4aSRandall Stewart 						net->ro.ro_rt = NULL;
2198f8829a4aSRandall Stewart 					}
219942551e99SRandall Stewart 					/*
220042551e99SRandall Stewart 					 * Now we deleted our src address,
220142551e99SRandall Stewart 					 * should we not also now reset the
220242551e99SRandall Stewart 					 * cwnd/rto to start as if its a new
220342551e99SRandall Stewart 					 * address?
220442551e99SRandall Stewart 					 */
2205b54d3a6cSRandall Stewart 					stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
2206108df27cSRandall Stewart 					net->RTO = 0;
220742551e99SRandall Stewart 
2208f8829a4aSRandall Stewart 				}
2209f8829a4aSRandall Stewart 			}
221042551e99SRandall Stewart 		} else if (type == SCTP_SET_PRIM_ADDR) {
221142551e99SRandall Stewart 			if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
22121b649582SRandall Stewart 				/* must validate the ifa is in the ep */
221342551e99SRandall Stewart 				if (sctp_is_addr_in_ep(stcb->sctp_ep, ifa) == 0) {
221442551e99SRandall Stewart 					continue;
2215f8829a4aSRandall Stewart 				}
221642551e99SRandall Stewart 			} else {
221742551e99SRandall Stewart 				/* Need to check scopes for this guy */
2218a1cb341bSMichael Tuexen 				if (sctp_is_address_in_scope(ifa, &stcb->asoc.scope, 0) == 0) {
221942551e99SRandall Stewart 					continue;
2220f8829a4aSRandall Stewart 				}
222142551e99SRandall Stewart 			}
222242551e99SRandall Stewart 		}
222342551e99SRandall Stewart 		/* queue an asconf for this address add/delete */
22241b649582SRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF) &&
22251b649582SRandall Stewart 		    stcb->asoc.peer_supports_asconf) {
222642551e99SRandall Stewart 			/* queue an asconf for this addr */
222742551e99SRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
222842551e99SRandall Stewart 			/*
22291b649582SRandall Stewart 			 * if queued ok, and in the open state, update the
22301b649582SRandall Stewart 			 * count of queued params.  If in the non-open
22311b649582SRandall Stewart 			 * state, these get sent when the assoc goes open.
223242551e99SRandall Stewart 			 */
22331b649582SRandall Stewart 			if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
22341b649582SRandall Stewart 				if (status >= 0) {
22351b649582SRandall Stewart 					num_queued++;
223642551e99SRandall Stewart 				}
223742551e99SRandall Stewart 			}
223842551e99SRandall Stewart 		}
223942551e99SRandall Stewart 	}
22401b649582SRandall Stewart 	/*
22411b649582SRandall Stewart 	 * If we have queued params in the open state, send out an ASCONF.
22421b649582SRandall Stewart 	 */
22431b649582SRandall Stewart 	if (num_queued > 0) {
2244ca85e948SMichael Tuexen 		sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
22451b649582SRandall Stewart 	}
224642551e99SRandall Stewart }
224742551e99SRandall Stewart 
224842551e99SRandall Stewart void
22497215cc1bSMichael Tuexen sctp_asconf_iterator_end(void *ptr, uint32_t val SCTP_UNUSED)
225042551e99SRandall Stewart {
225142551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
225242551e99SRandall Stewart 	struct sctp_ifa *ifa;
22534a9ef3f8SMichael Tuexen 	struct sctp_laddr *l, *nl;
225442551e99SRandall Stewart 
225542551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
22564a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(l, &asc->list_of_work, sctp_nxt_addr, nl) {
225742551e99SRandall Stewart 		ifa = l->ifa;
225842551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
225942551e99SRandall Stewart 			/* Clear the defer use flag */
226042551e99SRandall Stewart 			ifa->localifa_flags &= ~SCTP_ADDR_DEFER_USE;
226142551e99SRandall Stewart 		}
226242551e99SRandall Stewart 		sctp_free_ifa(ifa);
2263b3f1ea41SRandall Stewart 		SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), l);
226442551e99SRandall Stewart 		SCTP_DECR_LADDR_COUNT();
226542551e99SRandall Stewart 	}
2266207304d4SRandall Stewart 	SCTP_FREE(asc, SCTP_M_ASC_IT);
2267f8829a4aSRandall Stewart }
2268f8829a4aSRandall Stewart 
2269f8829a4aSRandall Stewart /*
22701b649582SRandall Stewart  * sa is the sockaddr to ask the peer to set primary to.
22711b649582SRandall Stewart  * returns: 0 = completed, -1 = error
2272f8829a4aSRandall Stewart  */
2273c4739e2fSRandall Stewart int32_t
2274f8829a4aSRandall Stewart sctp_set_primary_ip_address_sa(struct sctp_tcb *stcb, struct sockaddr *sa)
2275f8829a4aSRandall Stewart {
22763232788eSRandall Stewart 	uint32_t vrf_id;
22773232788eSRandall Stewart 	struct sctp_ifa *ifa;
2278f8829a4aSRandall Stewart 
22793232788eSRandall Stewart 	/* find the ifa for the desired set primary */
22803232788eSRandall Stewart 	vrf_id = stcb->asoc.vrf_id;
22813232788eSRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
22823232788eSRandall Stewart 	if (ifa == NULL) {
22833232788eSRandall Stewart 		/* Invalid address */
22843232788eSRandall Stewart 		return (-1);
22853232788eSRandall Stewart 	}
2286f8829a4aSRandall Stewart 	/* queue an ASCONF:SET_PRIM_ADDR to be sent */
22873232788eSRandall Stewart 	if (!sctp_asconf_queue_add(stcb, ifa, SCTP_SET_PRIM_ADDR)) {
2288f8829a4aSRandall Stewart 		/* set primary queuing succeeded */
2289ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2290ad81507eSRandall Stewart 		    "set_primary_ip_address_sa: queued on tcb=%p, ",
2291dd294dceSMichael Tuexen 		    (void *)stcb);
2292ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
22931b649582SRandall Stewart 		if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
22941b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
22951b649582SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
22961b649582SRandall Stewart 			    stcb->sctp_ep, stcb,
22971b649582SRandall Stewart 			    stcb->asoc.primary_destination);
22981b649582SRandall Stewart #else
2299ca85e948SMichael Tuexen 			sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
23001b649582SRandall Stewart #endif
23011b649582SRandall Stewart 		}
2302f8829a4aSRandall Stewart 	} else {
2303ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address_sa: failed to add to queue on tcb=%p, ",
2304dd294dceSMichael Tuexen 		    (void *)stcb);
2305ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
2306f8829a4aSRandall Stewart 		return (-1);
2307f8829a4aSRandall Stewart 	}
2308f8829a4aSRandall Stewart 	return (0);
2309f8829a4aSRandall Stewart }
2310f8829a4aSRandall Stewart 
2311f8829a4aSRandall Stewart void
231242551e99SRandall Stewart sctp_set_primary_ip_address(struct sctp_ifa *ifa)
2313f8829a4aSRandall Stewart {
2314f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
2315f8829a4aSRandall Stewart 
2316f8829a4aSRandall Stewart 	/* go through all our PCB's */
2317b3f1ea41SRandall Stewart 	LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) {
2318f8829a4aSRandall Stewart 		struct sctp_tcb *stcb;
2319f8829a4aSRandall Stewart 
2320f8829a4aSRandall Stewart 		/* process for all associations for this endpoint */
2321f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
2322f8829a4aSRandall Stewart 			/* queue an ASCONF:SET_PRIM_ADDR to be sent */
2323f8829a4aSRandall Stewart 			if (!sctp_asconf_queue_add(stcb, ifa,
2324f8829a4aSRandall Stewart 			    SCTP_SET_PRIM_ADDR)) {
2325f8829a4aSRandall Stewart 				/* set primary queuing succeeded */
2326ceaad40aSRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address: queued on stcb=%p, ",
2327dd294dceSMichael Tuexen 				    (void *)stcb);
2328ad81507eSRandall Stewart 				SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &ifa->address.sa);
23291b649582SRandall Stewart 				if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
23301b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
23311b649582SRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
23321b649582SRandall Stewart 					    stcb->sctp_ep, stcb,
23331b649582SRandall Stewart 					    stcb->asoc.primary_destination);
23341b649582SRandall Stewart #else
2335ca85e948SMichael Tuexen 					sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
23361b649582SRandall Stewart #endif
23371b649582SRandall Stewart 				}
2338f8829a4aSRandall Stewart 			}
2339f8829a4aSRandall Stewart 		}		/* for each stcb */
2340f8829a4aSRandall Stewart 	}			/* for each inp */
2341f8829a4aSRandall Stewart }
2342f8829a4aSRandall Stewart 
2343c54a18d2SRandall Stewart int
2344c54a18d2SRandall Stewart sctp_is_addr_pending(struct sctp_tcb *stcb, struct sctp_ifa *sctp_ifa)
2345c54a18d2SRandall Stewart {
2346c54a18d2SRandall Stewart 	struct sctp_tmit_chunk *chk, *nchk;
2347c54a18d2SRandall Stewart 	unsigned int offset, asconf_limit;
2348c54a18d2SRandall Stewart 	struct sctp_asconf_chunk *acp;
2349c54a18d2SRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2350c54a18d2SRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
2351e6194c2eSMichael Tuexen 	struct sctp_paramhdr *ph;
2352c54a18d2SRandall Stewart 	int add_cnt, del_cnt;
2353c54a18d2SRandall Stewart 	uint16_t last_param_type;
2354c54a18d2SRandall Stewart 
2355c54a18d2SRandall Stewart 	add_cnt = del_cnt = 0;
2356c54a18d2SRandall Stewart 	last_param_type = 0;
23574a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &stcb->asoc.asconf_send_queue, sctp_next, nchk) {
2358c54a18d2SRandall Stewart 		if (chk->data == NULL) {
2359c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: No mbuf data?\n");
2360c54a18d2SRandall Stewart 			continue;
2361c54a18d2SRandall Stewart 		}
2362c54a18d2SRandall Stewart 		offset = 0;
2363c54a18d2SRandall Stewart 		acp = mtod(chk->data, struct sctp_asconf_chunk *);
2364c54a18d2SRandall Stewart 		offset += sizeof(struct sctp_asconf_chunk);
2365c54a18d2SRandall Stewart 		asconf_limit = ntohs(acp->ch.chunk_length);
2366e6194c2eSMichael Tuexen 		ph = (struct sctp_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_paramhdr), aparam_buf);
2367e6194c2eSMichael Tuexen 		if (ph == NULL) {
2368c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get lookup addr!\n");
2369c54a18d2SRandall Stewart 			continue;
2370c54a18d2SRandall Stewart 		}
2371e6194c2eSMichael Tuexen 		offset += ntohs(ph->param_length);
2372c54a18d2SRandall Stewart 
2373c54a18d2SRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2374c54a18d2SRandall Stewart 		if (aph == NULL) {
2375c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: Empty ASCONF will be sent?\n");
2376c54a18d2SRandall Stewart 			continue;
2377c54a18d2SRandall Stewart 		}
2378c54a18d2SRandall Stewart 		while (aph != NULL) {
2379c54a18d2SRandall Stewart 			unsigned int param_length, param_type;
2380c54a18d2SRandall Stewart 
2381c54a18d2SRandall Stewart 			param_type = ntohs(aph->ph.param_type);
2382c54a18d2SRandall Stewart 			param_length = ntohs(aph->ph.param_length);
2383c54a18d2SRandall Stewart 			if (offset + param_length > asconf_limit) {
2384c54a18d2SRandall Stewart 				/* parameter goes beyond end of chunk! */
2385c54a18d2SRandall Stewart 				break;
2386c54a18d2SRandall Stewart 			}
2387c54a18d2SRandall Stewart 			if (param_length > sizeof(aparam_buf)) {
2388c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length);
2389c54a18d2SRandall Stewart 				break;
2390c54a18d2SRandall Stewart 			}
2391c54a18d2SRandall Stewart 			if (param_length <= sizeof(struct sctp_paramhdr)) {
2392c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length);
2393c54a18d2SRandall Stewart 				break;
2394c54a18d2SRandall Stewart 			}
2395c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf);
2396c54a18d2SRandall Stewart 			if (aph == NULL) {
2397c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get entire param\n");
2398c54a18d2SRandall Stewart 				break;
2399c54a18d2SRandall Stewart 			}
2400e6194c2eSMichael Tuexen 			ph = (struct sctp_paramhdr *)(aph + 1);
2401e6194c2eSMichael Tuexen 			if (sctp_addr_match(ph, &sctp_ifa->address.sa) != 0) {
2402c54a18d2SRandall Stewart 				switch (param_type) {
2403c54a18d2SRandall Stewart 				case SCTP_ADD_IP_ADDRESS:
2404c54a18d2SRandall Stewart 					add_cnt++;
2405c54a18d2SRandall Stewart 					break;
2406c54a18d2SRandall Stewart 				case SCTP_DEL_IP_ADDRESS:
2407c54a18d2SRandall Stewart 					del_cnt++;
2408c54a18d2SRandall Stewart 					break;
2409c54a18d2SRandall Stewart 				default:
2410c54a18d2SRandall Stewart 					break;
2411c54a18d2SRandall Stewart 				}
2412c54a18d2SRandall Stewart 				last_param_type = param_type;
2413c54a18d2SRandall Stewart 			}
2414c54a18d2SRandall Stewart 			offset += SCTP_SIZE32(param_length);
2415c54a18d2SRandall Stewart 			if (offset >= asconf_limit) {
2416c54a18d2SRandall Stewart 				/* no more data in the mbuf chain */
2417c54a18d2SRandall Stewart 				break;
2418c54a18d2SRandall Stewart 			}
2419c54a18d2SRandall Stewart 			/* get pointer to next asconf param */
2420c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2421c54a18d2SRandall Stewart 		}
2422c54a18d2SRandall Stewart 	}
2423c54a18d2SRandall Stewart 
2424c54a18d2SRandall Stewart 	/*
2425c54a18d2SRandall Stewart 	 * we want to find the sequences which consist of ADD -> DEL -> ADD
2426c54a18d2SRandall Stewart 	 * or DEL -> ADD
2427c54a18d2SRandall Stewart 	 */
2428c54a18d2SRandall Stewart 	if (add_cnt > del_cnt ||
2429c54a18d2SRandall Stewart 	    (add_cnt == del_cnt && last_param_type == SCTP_ADD_IP_ADDRESS)) {
243060990c0cSMichael Tuexen 		return (1);
2431c54a18d2SRandall Stewart 	}
243260990c0cSMichael Tuexen 	return (0);
2433c54a18d2SRandall Stewart }
2434c54a18d2SRandall Stewart 
2435f8829a4aSRandall Stewart static struct sockaddr *
24363232788eSRandall Stewart sctp_find_valid_localaddr(struct sctp_tcb *stcb, int addr_locked)
2437f8829a4aSRandall Stewart {
243842551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
243942551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
244042551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2441f8829a4aSRandall Stewart 
24423232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2443c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
244442551e99SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
2445ad81507eSRandall Stewart 	if (vrf == NULL) {
24463232788eSRandall Stewart 		if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2447c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
2448ad81507eSRandall Stewart 		return (NULL);
2449ad81507eSRandall Stewart 	}
245042551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
2451a1cb341bSMichael Tuexen 		if (stcb->asoc.scope.loopback_scope == 0 &&
245242551e99SRandall Stewart 		    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
2453f8829a4aSRandall Stewart 			/* Skip if loopback_scope not set */
2454f8829a4aSRandall Stewart 			continue;
2455f8829a4aSRandall Stewart 		}
245642551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
2457e6194c2eSMichael Tuexen 			switch (sctp_ifa->address.sa.sa_family) {
2458e6194c2eSMichael Tuexen #ifdef INET
2459e6194c2eSMichael Tuexen 			case AF_INET:
2460a1cb341bSMichael Tuexen 				if (stcb->asoc.scope.ipv4_addr_legal) {
2461f8829a4aSRandall Stewart 					struct sockaddr_in *sin;
2462f8829a4aSRandall Stewart 
246342551e99SRandall Stewart 					sin = (struct sockaddr_in *)&sctp_ifa->address.sa;
2464f8829a4aSRandall Stewart 					if (sin->sin_addr.s_addr == 0) {
2465f8829a4aSRandall Stewart 						/* skip unspecifed addresses */
2466f8829a4aSRandall Stewart 						continue;
2467f8829a4aSRandall Stewart 					}
2468a1cb341bSMichael Tuexen 					if (stcb->asoc.scope.ipv4_local_scope == 0 &&
2469f8829a4aSRandall Stewart 					    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))
2470f8829a4aSRandall Stewart 						continue;
2471f8829a4aSRandall Stewart 
2472c54a18d2SRandall Stewart 					if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2473c54a18d2SRandall Stewart 					    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2474f8829a4aSRandall Stewart 						continue;
2475e6194c2eSMichael Tuexen 					/*
2476e6194c2eSMichael Tuexen 					 * found a valid local v4 address to
2477e6194c2eSMichael Tuexen 					 * use
2478e6194c2eSMichael Tuexen 					 */
24793232788eSRandall Stewart 					if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2480c99efcf6SRandall Stewart 						SCTP_IPI_ADDR_RUNLOCK();
248142551e99SRandall Stewart 					return (&sctp_ifa->address.sa);
2482e6194c2eSMichael Tuexen 				}
2483e6194c2eSMichael Tuexen 				break;
2484e6194c2eSMichael Tuexen #endif
2485e6194c2eSMichael Tuexen #ifdef INET6
2486e6194c2eSMichael Tuexen 			case AF_INET6:
2487a1cb341bSMichael Tuexen 				if (stcb->asoc.scope.ipv6_addr_legal) {
2488f8829a4aSRandall Stewart 					struct sockaddr_in6 *sin6;
2489f8829a4aSRandall Stewart 
249042551e99SRandall Stewart 					if (sctp_ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
2491f8829a4aSRandall Stewart 						continue;
249242551e99SRandall Stewart 					}
249342551e99SRandall Stewart 					sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa;
2494f8829a4aSRandall Stewart 					if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2495e6194c2eSMichael Tuexen 						/*
2496e6194c2eSMichael Tuexen 						 * we skip unspecifed
2497e6194c2eSMichael Tuexen 						 * addresses
2498e6194c2eSMichael Tuexen 						 */
2499f8829a4aSRandall Stewart 						continue;
2500f8829a4aSRandall Stewart 					}
2501a1cb341bSMichael Tuexen 					if (stcb->asoc.scope.local_scope == 0 &&
2502f8829a4aSRandall Stewart 					    IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))
2503f8829a4aSRandall Stewart 						continue;
2504a1cb341bSMichael Tuexen 					if (stcb->asoc.scope.site_scope == 0 &&
2505f8829a4aSRandall Stewart 					    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))
2506f8829a4aSRandall Stewart 						continue;
2507f8829a4aSRandall Stewart 
2508c54a18d2SRandall Stewart 					if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2509c54a18d2SRandall Stewart 					    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2510c54a18d2SRandall Stewart 						continue;
2511e6194c2eSMichael Tuexen 					/*
2512e6194c2eSMichael Tuexen 					 * found a valid local v6 address to
2513e6194c2eSMichael Tuexen 					 * use
2514e6194c2eSMichael Tuexen 					 */
25153232788eSRandall Stewart 					if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2516c99efcf6SRandall Stewart 						SCTP_IPI_ADDR_RUNLOCK();
251742551e99SRandall Stewart 					return (&sctp_ifa->address.sa);
2518f8829a4aSRandall Stewart 				}
2519e6194c2eSMichael Tuexen 				break;
2520e6194c2eSMichael Tuexen #endif
2521e6194c2eSMichael Tuexen 			default:
2522e6194c2eSMichael Tuexen 				break;
2523e6194c2eSMichael Tuexen 			}
2524f8829a4aSRandall Stewart 		}
2525f8829a4aSRandall Stewart 	}
2526f8829a4aSRandall Stewart 	/* no valid addresses found */
25273232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2528c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
2529f8829a4aSRandall Stewart 	return (NULL);
2530f8829a4aSRandall Stewart }
2531f8829a4aSRandall Stewart 
2532f8829a4aSRandall Stewart static struct sockaddr *
2533f8829a4aSRandall Stewart sctp_find_valid_localaddr_ep(struct sctp_tcb *stcb)
2534f8829a4aSRandall Stewart {
2535f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
2536f8829a4aSRandall Stewart 
2537f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
2538f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
2539f8829a4aSRandall Stewart 			continue;
2540f8829a4aSRandall Stewart 		}
2541f8829a4aSRandall Stewart 		/* is the address restricted ? */
2542c54a18d2SRandall Stewart 		if (sctp_is_addr_restricted(stcb, laddr->ifa) &&
2543c54a18d2SRandall Stewart 		    (!sctp_is_addr_pending(stcb, laddr->ifa)))
2544f8829a4aSRandall Stewart 			continue;
2545f8829a4aSRandall Stewart 
2546f8829a4aSRandall Stewart 		/* found a valid local address to use */
254742551e99SRandall Stewart 		return (&laddr->ifa->address.sa);
2548f8829a4aSRandall Stewart 	}
2549f8829a4aSRandall Stewart 	/* no valid addresses found */
2550f8829a4aSRandall Stewart 	return (NULL);
2551f8829a4aSRandall Stewart }
2552f8829a4aSRandall Stewart 
2553f8829a4aSRandall Stewart /*
255418e198d3SRandall Stewart  * builds an ASCONF chunk from queued ASCONF params.
255518e198d3SRandall Stewart  * returns NULL on error (no mbuf, no ASCONF params queued, etc).
2556f8829a4aSRandall Stewart  */
2557f8829a4aSRandall Stewart struct mbuf *
25583232788eSRandall Stewart sctp_compose_asconf(struct sctp_tcb *stcb, int *retlen, int addr_locked)
2559f8829a4aSRandall Stewart {
2560f8829a4aSRandall Stewart 	struct mbuf *m_asconf, *m_asconf_chk;
2561f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
2562f8829a4aSRandall Stewart 	struct sctp_asconf_chunk *acp;
2563f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2564f8829a4aSRandall Stewart 	struct sctp_asconf_addr_param *aap;
2565f8829a4aSRandall Stewart 	uint32_t p_length;
2566f8829a4aSRandall Stewart 	uint32_t correlation_id = 1;	/* 0 is reserved... */
2567f8829a4aSRandall Stewart 	caddr_t ptr, lookup_ptr;
2568f8829a4aSRandall Stewart 	uint8_t lookup_used = 0;
2569f8829a4aSRandall Stewart 
2570f8829a4aSRandall Stewart 	/* are there any asconf params to send? */
2571c54a18d2SRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2572c54a18d2SRandall Stewart 		if (aa->sent == 0)
2573c54a18d2SRandall Stewart 			break;
2574f8829a4aSRandall Stewart 	}
2575c54a18d2SRandall Stewart 	if (aa == NULL)
25761b649582SRandall Stewart 		return (NULL);
2577c54a18d2SRandall Stewart 
2578f8829a4aSRandall Stewart 	/*
2579f8829a4aSRandall Stewart 	 * get a chunk header mbuf and a cluster for the asconf params since
2580f8829a4aSRandall Stewart 	 * it's simpler to fill in the asconf chunk header lookup address on
2581f8829a4aSRandall Stewart 	 * the fly
2582f8829a4aSRandall Stewart 	 */
2583eb1b1807SGleb Smirnoff 	m_asconf_chk = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_chunk), 0, M_NOWAIT, 1, MT_DATA);
2584f8829a4aSRandall Stewart 	if (m_asconf_chk == NULL) {
2585f8829a4aSRandall Stewart 		/* no mbuf's */
2586ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2587ad81507eSRandall Stewart 		    "compose_asconf: couldn't get chunk mbuf!\n");
2588f8829a4aSRandall Stewart 		return (NULL);
2589f8829a4aSRandall Stewart 	}
2590eb1b1807SGleb Smirnoff 	m_asconf = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_NOWAIT, 1, MT_DATA);
2591f8829a4aSRandall Stewart 	if (m_asconf == NULL) {
2592f8829a4aSRandall Stewart 		/* no mbuf's */
2593ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2594ad81507eSRandall Stewart 		    "compose_asconf: couldn't get mbuf!\n");
2595f8829a4aSRandall Stewart 		sctp_m_freem(m_asconf_chk);
2596f8829a4aSRandall Stewart 		return (NULL);
2597f8829a4aSRandall Stewart 	}
2598139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf_chk) = sizeof(struct sctp_asconf_chunk);
2599139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf) = 0;
2600f8829a4aSRandall Stewart 	acp = mtod(m_asconf_chk, struct sctp_asconf_chunk *);
2601f8829a4aSRandall Stewart 	bzero(acp, sizeof(struct sctp_asconf_chunk));
2602f8829a4aSRandall Stewart 	/* save pointers to lookup address and asconf params */
2603f8829a4aSRandall Stewart 	lookup_ptr = (caddr_t)(acp + 1);	/* after the header */
2604f8829a4aSRandall Stewart 	ptr = mtod(m_asconf, caddr_t);	/* beginning of cluster */
2605f8829a4aSRandall Stewart 
2606f8829a4aSRandall Stewart 	/* fill in chunk header info */
2607f8829a4aSRandall Stewart 	acp->ch.chunk_type = SCTP_ASCONF;
2608f8829a4aSRandall Stewart 	acp->ch.chunk_flags = 0;
2609f8829a4aSRandall Stewart 	acp->serial_number = htonl(stcb->asoc.asconf_seq_out);
2610c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out++;
2611f8829a4aSRandall Stewart 
2612f8829a4aSRandall Stewart 	/* add parameters... up to smallest MTU allowed */
2613f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2614c54a18d2SRandall Stewart 		if (aa->sent)
2615c54a18d2SRandall Stewart 			continue;
2616f8829a4aSRandall Stewart 		/* get the parameter length */
2617f8829a4aSRandall Stewart 		p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length);
2618f8829a4aSRandall Stewart 		/* will it fit in current chunk? */
2619139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m_asconf) + p_length > stcb->asoc.smallest_mtu) {
2620f8829a4aSRandall Stewart 			/* won't fit, so we're done with this chunk */
2621f8829a4aSRandall Stewart 			break;
2622f8829a4aSRandall Stewart 		}
2623f8829a4aSRandall Stewart 		/* assign (and store) a correlation id */
2624f8829a4aSRandall Stewart 		aa->ap.aph.correlation_id = correlation_id++;
2625f8829a4aSRandall Stewart 
2626f8829a4aSRandall Stewart 		/*
2627f8829a4aSRandall Stewart 		 * fill in address if we're doing a delete this is a simple
2628f8829a4aSRandall Stewart 		 * way for us to fill in the correlation address, which
2629f8829a4aSRandall Stewart 		 * should only be used by the peer if we're deleting our
2630f8829a4aSRandall Stewart 		 * source address and adding a new address (e.g. renumbering
2631f8829a4aSRandall Stewart 		 * case)
2632f8829a4aSRandall Stewart 		 */
2633f8829a4aSRandall Stewart 		if (lookup_used == 0 &&
2634830d754dSRandall Stewart 		    (aa->special_del == 0) &&
2635f8829a4aSRandall Stewart 		    aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
2636f8829a4aSRandall Stewart 			struct sctp_ipv6addr_param *lookup;
2637f8829a4aSRandall Stewart 			uint16_t p_size, addr_size;
2638f8829a4aSRandall Stewart 
2639f8829a4aSRandall Stewart 			lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2640f8829a4aSRandall Stewart 			lookup->ph.param_type =
2641f8829a4aSRandall Stewart 			    htons(aa->ap.addrp.ph.param_type);
2642f8829a4aSRandall Stewart 			if (aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) {
2643f8829a4aSRandall Stewart 				/* copy IPv6 address */
2644f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2645f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2646f8829a4aSRandall Stewart 			} else {
2647f8829a4aSRandall Stewart 				/* copy IPv4 address */
2648f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2649f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2650f8829a4aSRandall Stewart 			}
2651f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2652f8829a4aSRandall Stewart 			memcpy(lookup->addr, &aa->ap.addrp.addr, addr_size);
2653139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2654f8829a4aSRandall Stewart 			lookup_used = 1;
2655f8829a4aSRandall Stewart 		}
2656f8829a4aSRandall Stewart 		/* copy into current space */
2657f8829a4aSRandall Stewart 		memcpy(ptr, &aa->ap, p_length);
2658f8829a4aSRandall Stewart 
2659f8829a4aSRandall Stewart 		/* network elements and update lengths */
2660f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)ptr;
2661f8829a4aSRandall Stewart 		aap = (struct sctp_asconf_addr_param *)ptr;
2662f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no htonl needed */
2663f8829a4aSRandall Stewart 		aph->ph.param_type = htons(aph->ph.param_type);
2664f8829a4aSRandall Stewart 		aph->ph.param_length = htons(aph->ph.param_length);
2665f8829a4aSRandall Stewart 		aap->addrp.ph.param_type = htons(aap->addrp.ph.param_type);
2666f8829a4aSRandall Stewart 		aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length);
2667f8829a4aSRandall Stewart 
2668139bc87fSRandall Stewart 		SCTP_BUF_LEN(m_asconf) += SCTP_SIZE32(p_length);
2669f8829a4aSRandall Stewart 		ptr += SCTP_SIZE32(p_length);
2670f8829a4aSRandall Stewart 
2671f8829a4aSRandall Stewart 		/*
2672f8829a4aSRandall Stewart 		 * these params are removed off the pending list upon
2673f8829a4aSRandall Stewart 		 * getting an ASCONF-ACK back from the peer, just set flag
2674f8829a4aSRandall Stewart 		 */
2675f8829a4aSRandall Stewart 		aa->sent = 1;
2676f8829a4aSRandall Stewart 	}
2677f8829a4aSRandall Stewart 	/* check to see if the lookup addr has been populated yet */
2678f8829a4aSRandall Stewart 	if (lookup_used == 0) {
2679f8829a4aSRandall Stewart 		/* NOTE: if the address param is optional, can skip this... */
2680f8829a4aSRandall Stewart 		/* add any valid (existing) address... */
2681f8829a4aSRandall Stewart 		struct sctp_ipv6addr_param *lookup;
2682f8829a4aSRandall Stewart 		uint16_t p_size, addr_size;
2683f8829a4aSRandall Stewart 		struct sockaddr *found_addr;
2684f8829a4aSRandall Stewart 		caddr_t addr_ptr;
2685f8829a4aSRandall Stewart 
2686f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL)
26873232788eSRandall Stewart 			found_addr = sctp_find_valid_localaddr(stcb,
26883232788eSRandall Stewart 			    addr_locked);
2689f8829a4aSRandall Stewart 		else
2690f8829a4aSRandall Stewart 			found_addr = sctp_find_valid_localaddr_ep(stcb);
2691f8829a4aSRandall Stewart 
2692f8829a4aSRandall Stewart 		lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2693f8829a4aSRandall Stewart 		if (found_addr != NULL) {
2694e6194c2eSMichael Tuexen 			switch (found_addr->sa_family) {
2695e6194c2eSMichael Tuexen #ifdef INET6
2696e6194c2eSMichael Tuexen 			case AF_INET6:
2697f8829a4aSRandall Stewart 				/* copy IPv6 address */
2698f8829a4aSRandall Stewart 				lookup->ph.param_type =
2699f8829a4aSRandall Stewart 				    htons(SCTP_IPV6_ADDRESS);
2700f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2701f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2702f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in6 *)
2703f8829a4aSRandall Stewart 				    found_addr)->sin6_addr;
2704e6194c2eSMichael Tuexen 				break;
2705e6194c2eSMichael Tuexen #endif
2706e6194c2eSMichael Tuexen #ifdef INET
2707e6194c2eSMichael Tuexen 			case AF_INET:
2708f8829a4aSRandall Stewart 				/* copy IPv4 address */
2709f8829a4aSRandall Stewart 				lookup->ph.param_type =
2710f8829a4aSRandall Stewart 				    htons(SCTP_IPV4_ADDRESS);
2711f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2712f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2713f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in *)
2714f8829a4aSRandall Stewart 				    found_addr)->sin_addr;
2715e6194c2eSMichael Tuexen 				break;
2716e6194c2eSMichael Tuexen #endif
2717e6194c2eSMichael Tuexen 			default:
2718e6194c2eSMichael Tuexen 				p_size = 0;
2719e6194c2eSMichael Tuexen 				addr_size = 0;
2720e6194c2eSMichael Tuexen 				addr_ptr = NULL;
2721e6194c2eSMichael Tuexen 				break;
2722f8829a4aSRandall Stewart 			}
2723f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2724f8829a4aSRandall Stewart 			memcpy(lookup->addr, addr_ptr, addr_size);
2725139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2726f8829a4aSRandall Stewart 		} else {
2727f8829a4aSRandall Stewart 			/* uh oh... don't have any address?? */
2728ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
2729ad81507eSRandall Stewart 			    "compose_asconf: no lookup addr!\n");
2730e6194c2eSMichael Tuexen 			/* XXX for now, we send a IPv4 address of 0.0.0.0 */
2731f8829a4aSRandall Stewart 			lookup->ph.param_type = htons(SCTP_IPV4_ADDRESS);
2732f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param)));
2733f8829a4aSRandall Stewart 			bzero(lookup->addr, sizeof(struct in_addr));
2734139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param));
2735f8829a4aSRandall Stewart 		}
2736f8829a4aSRandall Stewart 	}
2737f8829a4aSRandall Stewart 	/* chain it all together */
2738139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_asconf_chk) = m_asconf;
27393c503c28SRandall Stewart 	*retlen = SCTP_BUF_LEN(m_asconf_chk) + SCTP_BUF_LEN(m_asconf);
2740*c9eb4473SMichael Tuexen 	acp->ch.chunk_length = htons(*retlen);
2741f8829a4aSRandall Stewart 
2742f8829a4aSRandall Stewart 	return (m_asconf_chk);
2743f8829a4aSRandall Stewart }
2744f8829a4aSRandall Stewart 
2745f8829a4aSRandall Stewart /*
2746f8829a4aSRandall Stewart  * section to handle address changes before an association is up eg. changes
2747f8829a4aSRandall Stewart  * during INIT/INIT-ACK/COOKIE-ECHO handshake
2748f8829a4aSRandall Stewart  */
2749f8829a4aSRandall Stewart 
2750f8829a4aSRandall Stewart /*
2751f8829a4aSRandall Stewart  * processes the (local) addresses in the INIT-ACK chunk
2752f8829a4aSRandall Stewart  */
2753f8829a4aSRandall Stewart static void
2754f8829a4aSRandall Stewart sctp_process_initack_addresses(struct sctp_tcb *stcb, struct mbuf *m,
2755f8829a4aSRandall Stewart     unsigned int offset, unsigned int length)
2756f8829a4aSRandall Stewart {
2757f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
2758f8829a4aSRandall Stewart 	uint16_t plen, ptype;
275942551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2760e6194c2eSMichael Tuexen 
2761e6194c2eSMichael Tuexen #ifdef INET6
27625e20b91dSMichael Tuexen 	struct sctp_ipv6addr_param addr6_store;
2763f8829a4aSRandall Stewart 	struct sockaddr_in6 sin6;
2764e6194c2eSMichael Tuexen 
2765e6194c2eSMichael Tuexen #endif
2766e6194c2eSMichael Tuexen #ifdef INET
27675e20b91dSMichael Tuexen 	struct sctp_ipv4addr_param addr4_store;
2768f8829a4aSRandall Stewart 	struct sockaddr_in sin;
2769e6194c2eSMichael Tuexen 
2770e6194c2eSMichael Tuexen #endif
2771f8829a4aSRandall Stewart 	struct sockaddr *sa;
277242551e99SRandall Stewart 	uint32_t vrf_id;
2773f8829a4aSRandall Stewart 
2774ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "processing init-ack addresses\n");
2775ad81507eSRandall Stewart 	if (stcb == NULL)	/* Un-needed check for SA */
2776ad81507eSRandall Stewart 		return;
2777f8829a4aSRandall Stewart 
2778f8829a4aSRandall Stewart 	/* convert to upper bound */
2779f8829a4aSRandall Stewart 	length += offset;
2780f8829a4aSRandall Stewart 
2781f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
2782f8829a4aSRandall Stewart 		return;
2783f8829a4aSRandall Stewart 	}
2784f8829a4aSRandall Stewart 	/* init the addresses */
2785e6194c2eSMichael Tuexen #ifdef INET6
2786f8829a4aSRandall Stewart 	bzero(&sin6, sizeof(sin6));
2787f8829a4aSRandall Stewart 	sin6.sin6_family = AF_INET6;
2788f8829a4aSRandall Stewart 	sin6.sin6_len = sizeof(sin6);
2789f8829a4aSRandall Stewart 	sin6.sin6_port = stcb->rport;
2790e6194c2eSMichael Tuexen #endif
2791f8829a4aSRandall Stewart 
2792e6194c2eSMichael Tuexen #ifdef INET
2793f8829a4aSRandall Stewart 	bzero(&sin, sizeof(sin));
2794f8829a4aSRandall Stewart 	sin.sin_family = AF_INET;
2795e6194c2eSMichael Tuexen 	sin.sin_len = sizeof(sin);
2796f8829a4aSRandall Stewart 	sin.sin_port = stcb->rport;
2797e6194c2eSMichael Tuexen #endif
2798f8829a4aSRandall Stewart 
2799f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
2800e6194c2eSMichael Tuexen 	ph = (struct sctp_paramhdr *)
2801e6194c2eSMichael Tuexen 	    sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr),
2802e6194c2eSMichael Tuexen 	    (uint8_t *) & tmp_param);
2803f8829a4aSRandall Stewart 	while (ph != NULL) {
2804f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
2805f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
2806e6194c2eSMichael Tuexen 		switch (ptype) {
2807e6194c2eSMichael Tuexen #ifdef INET6
2808e6194c2eSMichael Tuexen 		case SCTP_IPV6_ADDRESS:
2809e6194c2eSMichael Tuexen 			{
2810f8829a4aSRandall Stewart 				struct sctp_ipv6addr_param *a6p;
2811f8829a4aSRandall Stewart 
2812f8829a4aSRandall Stewart 				/* get the entire IPv6 address param */
2813f8829a4aSRandall Stewart 				a6p = (struct sctp_ipv6addr_param *)
2814f8829a4aSRandall Stewart 				    sctp_m_getptr(m, offset,
2815f8829a4aSRandall Stewart 				    sizeof(struct sctp_ipv6addr_param),
28165e20b91dSMichael Tuexen 				    (uint8_t *) & addr6_store);
2817f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv6addr_param) ||
2818f8829a4aSRandall Stewart 				    a6p == NULL) {
2819f8829a4aSRandall Stewart 					return;
2820f8829a4aSRandall Stewart 				}
2821f8829a4aSRandall Stewart 				memcpy(&sin6.sin6_addr, a6p->addr,
2822f8829a4aSRandall Stewart 				    sizeof(struct in6_addr));
2823f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin6;
2824e6194c2eSMichael Tuexen 				break;
2825e6194c2eSMichael Tuexen 			}
2826e6194c2eSMichael Tuexen #endif
2827e6194c2eSMichael Tuexen #ifdef INET
2828e6194c2eSMichael Tuexen 		case SCTP_IPV4_ADDRESS:
2829e6194c2eSMichael Tuexen 			{
2830f8829a4aSRandall Stewart 				struct sctp_ipv4addr_param *a4p;
2831f8829a4aSRandall Stewart 
2832f8829a4aSRandall Stewart 				/* get the entire IPv4 address param */
283342551e99SRandall Stewart 				a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, offset,
283442551e99SRandall Stewart 				    sizeof(struct sctp_ipv4addr_param),
28355e20b91dSMichael Tuexen 				    (uint8_t *) & addr4_store);
2836f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv4addr_param) ||
2837f8829a4aSRandall Stewart 				    a4p == NULL) {
2838f8829a4aSRandall Stewart 					return;
2839f8829a4aSRandall Stewart 				}
2840f8829a4aSRandall Stewart 				sin.sin_addr.s_addr = a4p->addr;
2841f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin;
28421d663b46SMichael Tuexen 				break;
2843e6194c2eSMichael Tuexen 			}
2844e6194c2eSMichael Tuexen #endif
2845e6194c2eSMichael Tuexen 		default:
2846f8829a4aSRandall Stewart 			goto next_addr;
2847f8829a4aSRandall Stewart 		}
2848f8829a4aSRandall Stewart 
2849f8829a4aSRandall Stewart 		/* see if this address really (still) exists */
2850bff64a4dSRandall Stewart 		if (stcb) {
2851bff64a4dSRandall Stewart 			vrf_id = stcb->asoc.vrf_id;
2852bff64a4dSRandall Stewart 		} else {
285342551e99SRandall Stewart 			vrf_id = SCTP_DEFAULT_VRFID;
2854bff64a4dSRandall Stewart 		}
28553232788eSRandall Stewart 		sctp_ifa = sctp_find_ifa_by_addr(sa, vrf_id,
28563232788eSRandall Stewart 		    SCTP_ADDR_NOT_LOCKED);
285742551e99SRandall Stewart 		if (sctp_ifa == NULL) {
2858f8829a4aSRandall Stewart 			/* address doesn't exist anymore */
2859f8829a4aSRandall Stewart 			int status;
2860f8829a4aSRandall Stewart 
2861f8829a4aSRandall Stewart 			/* are ASCONFs allowed ? */
2862f8829a4aSRandall Stewart 			if ((sctp_is_feature_on(stcb->sctp_ep,
2863f8829a4aSRandall Stewart 			    SCTP_PCB_FLAGS_DO_ASCONF)) &&
2864f8829a4aSRandall Stewart 			    stcb->asoc.peer_supports_asconf) {
2865f8829a4aSRandall Stewart 				/* queue an ASCONF DEL_IP_ADDRESS */
28663232788eSRandall Stewart 				status = sctp_asconf_queue_sa_delete(stcb, sa);
2867f8829a4aSRandall Stewart 				/*
28681b649582SRandall Stewart 				 * if queued ok, and in correct state, send
28691b649582SRandall Stewart 				 * out the ASCONF.
2870f8829a4aSRandall Stewart 				 */
2871f8829a4aSRandall Stewart 				if (status == 0 &&
2872f8829a4aSRandall Stewart 				    SCTP_GET_STATE(&stcb->asoc) ==
2873f8829a4aSRandall Stewart 				    SCTP_STATE_OPEN) {
28741b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
2875f8829a4aSRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
2876f8829a4aSRandall Stewart 					    stcb->sctp_ep, stcb,
2877f8829a4aSRandall Stewart 					    stcb->asoc.primary_destination);
28781b649582SRandall Stewart #else
2879ca85e948SMichael Tuexen 					sctp_send_asconf(stcb, NULL, SCTP_ADDR_NOT_LOCKED);
28801b649582SRandall Stewart #endif
2881f8829a4aSRandall Stewart 				}
2882f8829a4aSRandall Stewart 			}
2883f8829a4aSRandall Stewart 		}
2884f8829a4aSRandall Stewart next_addr:
2885f8829a4aSRandall Stewart 		/*
2886f8829a4aSRandall Stewart 		 * Sanity check:  Make sure the length isn't 0, otherwise
2887f8829a4aSRandall Stewart 		 * we'll be stuck in this loop for a long time...
2888f8829a4aSRandall Stewart 		 */
2889f8829a4aSRandall Stewart 		if (SCTP_SIZE32(plen) == 0) {
2890ad81507eSRandall Stewart 			SCTP_PRINTF("process_initack_addrs: bad len (%d) type=%xh\n",
2891f8829a4aSRandall Stewart 			    plen, ptype);
2892f8829a4aSRandall Stewart 			return;
2893f8829a4aSRandall Stewart 		}
2894f8829a4aSRandall Stewart 		/* get next parameter */
2895f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
2896f8829a4aSRandall Stewart 		if ((offset + sizeof(struct sctp_paramhdr)) > length)
2897f8829a4aSRandall Stewart 			return;
2898f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
2899f8829a4aSRandall Stewart 		    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
2900f8829a4aSRandall Stewart 	}			/* while */
2901f8829a4aSRandall Stewart }
2902f8829a4aSRandall Stewart 
2903f8829a4aSRandall Stewart /* FIX ME: need to verify return result for v6 address type if v6 disabled */
2904f8829a4aSRandall Stewart /*
2905f8829a4aSRandall Stewart  * checks to see if a specific address is in the initack address list returns
2906f8829a4aSRandall Stewart  * 1 if found, 0 if not
2907f8829a4aSRandall Stewart  */
2908f8829a4aSRandall Stewart static uint32_t
29097215cc1bSMichael Tuexen sctp_addr_in_initack(struct mbuf *m, uint32_t offset, uint32_t length, struct sockaddr *sa)
2910f8829a4aSRandall Stewart {
2911f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
2912f8829a4aSRandall Stewart 	uint16_t plen, ptype;
2913e6194c2eSMichael Tuexen 
2914e6194c2eSMichael Tuexen #ifdef INET
2915f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
2916f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *a4p;
29175e20b91dSMichael Tuexen 	struct sctp_ipv6addr_param addr4_store;
2918f8829a4aSRandall Stewart 
2919e6194c2eSMichael Tuexen #endif
2920f8829a4aSRandall Stewart #ifdef INET6
292142551e99SRandall Stewart 	struct sockaddr_in6 *sin6;
2922f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *a6p;
29235e20b91dSMichael Tuexen 	struct sctp_ipv6addr_param addr6_store;
292442551e99SRandall Stewart 	struct sockaddr_in6 sin6_tmp;
2925f8829a4aSRandall Stewart 
2926e6194c2eSMichael Tuexen #endif
2927f8829a4aSRandall Stewart 
2928e6194c2eSMichael Tuexen 	switch (sa->sa_family) {
2929e6194c2eSMichael Tuexen #ifdef INET
2930e6194c2eSMichael Tuexen 	case AF_INET:
2931e6194c2eSMichael Tuexen 		break;
2932e6194c2eSMichael Tuexen #endif
2933f8829a4aSRandall Stewart #ifdef INET6
2934e6194c2eSMichael Tuexen 	case AF_INET6:
2935e6194c2eSMichael Tuexen 		break;
2936e6194c2eSMichael Tuexen #endif
2937e6194c2eSMichael Tuexen 	default:
2938f8829a4aSRandall Stewart 		return (0);
2939e6194c2eSMichael Tuexen 	}
2940f8829a4aSRandall Stewart 
2941ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "find_initack_addr: starting search for ");
2942ad81507eSRandall Stewart 	SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
2943f8829a4aSRandall Stewart 	/* convert to upper bound */
2944f8829a4aSRandall Stewart 	length += offset;
2945f8829a4aSRandall Stewart 
2946f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
2947ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2948ad81507eSRandall Stewart 		    "find_initack_addr: invalid offset?\n");
2949f8829a4aSRandall Stewart 		return (0);
2950f8829a4aSRandall Stewart 	}
2951f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
2952f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
2953f8829a4aSRandall Stewart 	    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
2954f8829a4aSRandall Stewart 	while (ph != NULL) {
2955f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
2956f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
2957e6194c2eSMichael Tuexen 		switch (ptype) {
2958f8829a4aSRandall Stewart #ifdef INET6
2959e6194c2eSMichael Tuexen 		case SCTP_IPV6_ADDRESS:
2960e6194c2eSMichael Tuexen 			if (sa->sa_family == AF_INET6) {
2961e6194c2eSMichael Tuexen 				/* get the entire IPv6 address param */
2962e6194c2eSMichael Tuexen 				if (plen != sizeof(struct sctp_ipv6addr_param)) {
2963e6194c2eSMichael Tuexen 					break;
2964e6194c2eSMichael Tuexen 				}
2965f8829a4aSRandall Stewart 				/* get the entire IPv6 address param */
2966f8829a4aSRandall Stewart 				a6p = (struct sctp_ipv6addr_param *)
2967f8829a4aSRandall Stewart 				    sctp_m_getptr(m, offset,
2968f8829a4aSRandall Stewart 				    sizeof(struct sctp_ipv6addr_param),
29695e20b91dSMichael Tuexen 				    (uint8_t *) & addr6_store);
2970e6194c2eSMichael Tuexen 				if (a6p == NULL) {
2971f8829a4aSRandall Stewart 					return (0);
2972f8829a4aSRandall Stewart 				}
2973f8829a4aSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
2974f8829a4aSRandall Stewart 				if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
2975f8829a4aSRandall Stewart 					/* create a copy and clear scope */
2976f8829a4aSRandall Stewart 					memcpy(&sin6_tmp, sin6,
2977f8829a4aSRandall Stewart 					    sizeof(struct sockaddr_in6));
2978f8829a4aSRandall Stewart 					sin6 = &sin6_tmp;
2979f8829a4aSRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
2980f8829a4aSRandall Stewart 				}
2981f8829a4aSRandall Stewart 				if (memcmp(&sin6->sin6_addr, a6p->addr,
2982f8829a4aSRandall Stewart 				    sizeof(struct in6_addr)) == 0) {
2983f8829a4aSRandall Stewart 					/* found it */
2984f8829a4aSRandall Stewart 					return (1);
2985f8829a4aSRandall Stewart 				}
2986e6194c2eSMichael Tuexen 			}
2987e6194c2eSMichael Tuexen 			break;
2988f8829a4aSRandall Stewart #endif				/* INET6 */
2989e6194c2eSMichael Tuexen #ifdef INET
2990e6194c2eSMichael Tuexen 		case SCTP_IPV4_ADDRESS:
2991e6194c2eSMichael Tuexen 			if (sa->sa_family == AF_INET) {
2992e6194c2eSMichael Tuexen 				if (plen != sizeof(struct sctp_ipv4addr_param)) {
2993e6194c2eSMichael Tuexen 					break;
2994e6194c2eSMichael Tuexen 				}
2995f8829a4aSRandall Stewart 				/* get the entire IPv4 address param */
2996e6194c2eSMichael Tuexen 				a4p = (struct sctp_ipv4addr_param *)
2997e6194c2eSMichael Tuexen 				    sctp_m_getptr(m, offset,
2998e6194c2eSMichael Tuexen 				    sizeof(struct sctp_ipv4addr_param),
29995e20b91dSMichael Tuexen 				    (uint8_t *) & addr4_store);
3000e6194c2eSMichael Tuexen 				if (a4p == NULL) {
3001f8829a4aSRandall Stewart 					return (0);
3002f8829a4aSRandall Stewart 				}
3003f8829a4aSRandall Stewart 				sin = (struct sockaddr_in *)sa;
3004f8829a4aSRandall Stewart 				if (sin->sin_addr.s_addr == a4p->addr) {
3005f8829a4aSRandall Stewart 					/* found it */
3006f8829a4aSRandall Stewart 					return (1);
3007f8829a4aSRandall Stewart 				}
3008f8829a4aSRandall Stewart 			}
3009e6194c2eSMichael Tuexen 			break;
3010e6194c2eSMichael Tuexen #endif
3011e6194c2eSMichael Tuexen 		default:
3012e6194c2eSMichael Tuexen 			break;
3013e6194c2eSMichael Tuexen 		}
3014f8829a4aSRandall Stewart 		/* get next parameter */
3015f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
3016e6194c2eSMichael Tuexen 		if (offset + sizeof(struct sctp_paramhdr) > length) {
3017f8829a4aSRandall Stewart 			return (0);
3018e6194c2eSMichael Tuexen 		}
3019f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)
3020f8829a4aSRandall Stewart 		    sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr),
3021f8829a4aSRandall Stewart 		    (uint8_t *) & tmp_param);
3022f8829a4aSRandall Stewart 	}			/* while */
3023f8829a4aSRandall Stewart 	/* not found! */
3024f8829a4aSRandall Stewart 	return (0);
3025f8829a4aSRandall Stewart }
3026f8829a4aSRandall Stewart 
3027f8829a4aSRandall Stewart /*
3028f8829a4aSRandall Stewart  * makes sure that the current endpoint local addr list is consistent with
3029f8829a4aSRandall Stewart  * the new association (eg. subset bound, asconf allowed) adds addresses as
3030f8829a4aSRandall Stewart  * necessary
3031f8829a4aSRandall Stewart  */
3032f8829a4aSRandall Stewart static void
3033f8829a4aSRandall Stewart sctp_check_address_list_ep(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3034f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr)
3035f8829a4aSRandall Stewart {
3036f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
3037f8829a4aSRandall Stewart 
3038f8829a4aSRandall Stewart 	/* go through the endpoint list */
3039f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
3040f8829a4aSRandall Stewart 		/* be paranoid and validate the laddr */
3041f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
3042ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
3043ad81507eSRandall Stewart 			    "check_addr_list_ep: laddr->ifa is NULL");
3044f8829a4aSRandall Stewart 			continue;
3045f8829a4aSRandall Stewart 		}
304642551e99SRandall Stewart 		if (laddr->ifa == NULL) {
3047ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "check_addr_list_ep: laddr->ifa->ifa_addr is NULL");
3048f8829a4aSRandall Stewart 			continue;
3049f8829a4aSRandall Stewart 		}
3050f8829a4aSRandall Stewart 		/* do i have it implicitly? */
305142551e99SRandall Stewart 		if (sctp_cmpaddr(&laddr->ifa->address.sa, init_addr)) {
3052f8829a4aSRandall Stewart 			continue;
3053f8829a4aSRandall Stewart 		}
3054f8829a4aSRandall Stewart 		/* check to see if in the init-ack */
30557215cc1bSMichael Tuexen 		if (!sctp_addr_in_initack(m, offset, length, &laddr->ifa->address.sa)) {
3056f8829a4aSRandall Stewart 			/* try to add it */
3057f8829a4aSRandall Stewart 			sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, laddr->ifa,
30583232788eSRandall Stewart 			    SCTP_ADD_IP_ADDRESS, SCTP_ADDR_NOT_LOCKED);
3059f8829a4aSRandall Stewart 		}
3060f8829a4aSRandall Stewart 	}
3061f8829a4aSRandall Stewart }
3062f8829a4aSRandall Stewart 
3063f8829a4aSRandall Stewart /*
3064f8829a4aSRandall Stewart  * makes sure that the current kernel address list is consistent with the new
3065f8829a4aSRandall Stewart  * association (with all addrs bound) adds addresses as necessary
3066f8829a4aSRandall Stewart  */
3067f8829a4aSRandall Stewart static void
3068f8829a4aSRandall Stewart sctp_check_address_list_all(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3069f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3070f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3071f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3072f8829a4aSRandall Stewart {
307342551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
307442551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
307542551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
307642551e99SRandall Stewart 	uint32_t vrf_id;
3077f8829a4aSRandall Stewart 
30787215cc1bSMichael Tuexen #ifdef INET
30797215cc1bSMichael Tuexen 	struct sockaddr_in *sin;
30807215cc1bSMichael Tuexen 
30817215cc1bSMichael Tuexen #endif
30827215cc1bSMichael Tuexen #ifdef INET6
30837215cc1bSMichael Tuexen 	struct sockaddr_in6 *sin6;
30847215cc1bSMichael Tuexen 
30857215cc1bSMichael Tuexen #endif
30867215cc1bSMichael Tuexen 
3087bff64a4dSRandall Stewart 	if (stcb) {
3088bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
3089bff64a4dSRandall Stewart 	} else {
3090ad81507eSRandall Stewart 		return;
3091bff64a4dSRandall Stewart 	}
3092c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
309342551e99SRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
309442551e99SRandall Stewart 	if (vrf == NULL) {
3095c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
309642551e99SRandall Stewart 		return;
309742551e99SRandall Stewart 	}
3098f8829a4aSRandall Stewart 	/* go through all our known interfaces */
309942551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
310042551e99SRandall Stewart 		if (loopback_scope == 0 && SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
3101f8829a4aSRandall Stewart 			/* skip loopback interface */
3102f8829a4aSRandall Stewart 			continue;
3103f8829a4aSRandall Stewart 		}
3104f8829a4aSRandall Stewart 		/* go through each interface address */
310542551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
3106f8829a4aSRandall Stewart 			/* do i have it implicitly? */
310742551e99SRandall Stewart 			if (sctp_cmpaddr(&sctp_ifa->address.sa, init_addr)) {
3108f8829a4aSRandall Stewart 				continue;
3109f8829a4aSRandall Stewart 			}
31107215cc1bSMichael Tuexen 			switch (sctp_ifa->address.sa.sa_family) {
31117215cc1bSMichael Tuexen #ifdef INET
31127215cc1bSMichael Tuexen 			case AF_INET:
31137215cc1bSMichael Tuexen 				sin = (struct sockaddr_in *)&sctp_ifa->address.sin;
31147215cc1bSMichael Tuexen 				if ((ipv4_scope == 0) &&
31157215cc1bSMichael Tuexen 				    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
31167215cc1bSMichael Tuexen 					/* private address not in scope */
31177215cc1bSMichael Tuexen 					continue;
31187215cc1bSMichael Tuexen 				}
31197215cc1bSMichael Tuexen 				break;
31207215cc1bSMichael Tuexen #endif
31217215cc1bSMichael Tuexen #ifdef INET6
31227215cc1bSMichael Tuexen 			case AF_INET6:
31237215cc1bSMichael Tuexen 				sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sin6;
31247215cc1bSMichael Tuexen 				if ((local_scope == 0) &&
31257215cc1bSMichael Tuexen 				    (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))) {
31267215cc1bSMichael Tuexen 					continue;
31277215cc1bSMichael Tuexen 				}
31287215cc1bSMichael Tuexen 				if ((site_scope == 0) &&
31297215cc1bSMichael Tuexen 				    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
31307215cc1bSMichael Tuexen 					continue;
31317215cc1bSMichael Tuexen 				}
31327215cc1bSMichael Tuexen 				break;
31337215cc1bSMichael Tuexen #endif
31347215cc1bSMichael Tuexen 			default:
31357215cc1bSMichael Tuexen 				break;
31367215cc1bSMichael Tuexen 			}
3137f8829a4aSRandall Stewart 			/* check to see if in the init-ack */
31387215cc1bSMichael Tuexen 			if (!sctp_addr_in_initack(m, offset, length, &sctp_ifa->address.sa)) {
3139f8829a4aSRandall Stewart 				/* try to add it */
3140f8829a4aSRandall Stewart 				sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb,
31413232788eSRandall Stewart 				    sctp_ifa, SCTP_ADD_IP_ADDRESS,
31423232788eSRandall Stewart 				    SCTP_ADDR_LOCKED);
3143f8829a4aSRandall Stewart 			}
3144f8829a4aSRandall Stewart 		}		/* end foreach ifa */
3145f8829a4aSRandall Stewart 	}			/* end foreach ifn */
3146c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
3147f8829a4aSRandall Stewart }
3148f8829a4aSRandall Stewart 
3149f8829a4aSRandall Stewart /*
3150f8829a4aSRandall Stewart  * validates an init-ack chunk (from a cookie-echo) with current addresses
3151f8829a4aSRandall Stewart  * adds addresses from the init-ack into our local address list, if needed
3152f8829a4aSRandall Stewart  * queues asconf adds/deletes addresses as needed and makes appropriate list
3153f8829a4aSRandall Stewart  * changes for source address selection m, offset: points to the start of the
3154f8829a4aSRandall Stewart  * address list in an init-ack chunk length: total length of the address
3155f8829a4aSRandall Stewart  * params only init_addr: address where my INIT-ACK was sent from
3156f8829a4aSRandall Stewart  */
3157f8829a4aSRandall Stewart void
3158f8829a4aSRandall Stewart sctp_check_address_list(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3159f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3160f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3161f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3162f8829a4aSRandall Stewart {
3163f8829a4aSRandall Stewart 	/* process the local addresses in the initack */
3164f8829a4aSRandall Stewart 	sctp_process_initack_addresses(stcb, m, offset, length);
3165f8829a4aSRandall Stewart 
3166f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3167f8829a4aSRandall Stewart 		/* bound all case */
3168f8829a4aSRandall Stewart 		sctp_check_address_list_all(stcb, m, offset, length, init_addr,
3169f8829a4aSRandall Stewart 		    local_scope, site_scope, ipv4_scope, loopback_scope);
3170f8829a4aSRandall Stewart 	} else {
3171f8829a4aSRandall Stewart 		/* subset bound case */
3172f8829a4aSRandall Stewart 		if (sctp_is_feature_on(stcb->sctp_ep,
3173f8829a4aSRandall Stewart 		    SCTP_PCB_FLAGS_DO_ASCONF)) {
3174f8829a4aSRandall Stewart 			/* asconf's allowed */
3175f8829a4aSRandall Stewart 			sctp_check_address_list_ep(stcb, m, offset, length,
3176f8829a4aSRandall Stewart 			    init_addr);
3177f8829a4aSRandall Stewart 		}
3178f8829a4aSRandall Stewart 		/* else, no asconfs allowed, so what we sent is what we get */
3179f8829a4aSRandall Stewart 	}
3180f8829a4aSRandall Stewart }
3181f8829a4aSRandall Stewart 
3182f8829a4aSRandall Stewart /*
3183f8829a4aSRandall Stewart  * sctp_bindx() support
3184f8829a4aSRandall Stewart  */
3185f8829a4aSRandall Stewart uint32_t
31863c503c28SRandall Stewart sctp_addr_mgmt_ep_sa(struct sctp_inpcb *inp, struct sockaddr *sa,
318780fefe0aSRandall Stewart     uint32_t type, uint32_t vrf_id, struct sctp_ifa *sctp_ifap)
3188f8829a4aSRandall Stewart {
318942551e99SRandall Stewart 	struct sctp_ifa *ifa;
31902678fe1eSMichael Tuexen 	struct sctp_laddr *laddr, *nladdr;
3191f8829a4aSRandall Stewart 
319242551e99SRandall Stewart 	if (sa->sa_len == 0) {
3193c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
3194f8829a4aSRandall Stewart 		return (EINVAL);
319542551e99SRandall Stewart 	}
319680fefe0aSRandall Stewart 	if (sctp_ifap) {
319780fefe0aSRandall Stewart 		ifa = sctp_ifap;
319880fefe0aSRandall Stewart 	} else if (type == SCTP_ADD_IP_ADDRESS) {
319942551e99SRandall Stewart 		/* For an add the address MUST be on the system */
3200851b7298SRandall Stewart 		ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
320142551e99SRandall Stewart 	} else if (type == SCTP_DEL_IP_ADDRESS) {
320242551e99SRandall Stewart 		/* For a delete we need to find it in the inp */
3203851b7298SRandall Stewart 		ifa = sctp_find_ifa_in_ep(inp, sa, SCTP_ADDR_NOT_LOCKED);
320442551e99SRandall Stewart 	} else {
320542551e99SRandall Stewart 		ifa = NULL;
320642551e99SRandall Stewart 	}
3207f8829a4aSRandall Stewart 	if (ifa != NULL) {
320842551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
320942551e99SRandall Stewart 			sctp_add_local_addr_ep(inp, ifa, type);
321042551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
32113c503c28SRandall Stewart 			if (inp->laddr_count < 2) {
32123c503c28SRandall Stewart 				/* can't delete the last local address */
3213c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
32143c503c28SRandall Stewart 				return (EINVAL);
32153c503c28SRandall Stewart 			}
32163c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
32173c503c28SRandall Stewart 			    sctp_nxt_addr) {
321842551e99SRandall Stewart 				if (ifa == laddr->ifa) {
321942551e99SRandall Stewart 					/* Mark in the delete */
322042551e99SRandall Stewart 					laddr->action = type;
322142551e99SRandall Stewart 				}
322242551e99SRandall Stewart 			}
322342551e99SRandall Stewart 		}
32242678fe1eSMichael Tuexen 		if (LIST_EMPTY(&inp->sctp_asoc_list)) {
322587b4fcd3SMichael Tuexen 			/*
322687b4fcd3SMichael Tuexen 			 * There is no need to start the iterator if the inp
322787b4fcd3SMichael Tuexen 			 * has no associations.
322887b4fcd3SMichael Tuexen 			 */
32292678fe1eSMichael Tuexen 			if (type == SCTP_DEL_IP_ADDRESS) {
32302678fe1eSMichael Tuexen 				LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) {
32312678fe1eSMichael Tuexen 					if (laddr->ifa == ifa) {
32322678fe1eSMichael Tuexen 						sctp_del_local_addr_ep(inp, ifa);
32332678fe1eSMichael Tuexen 					}
32342678fe1eSMichael Tuexen 				}
32352678fe1eSMichael Tuexen 			}
32362678fe1eSMichael Tuexen 		} else {
323787b4fcd3SMichael Tuexen 			struct sctp_asconf_iterator *asc;
323887b4fcd3SMichael Tuexen 			struct sctp_laddr *wi;
323987b4fcd3SMichael Tuexen 
324087b4fcd3SMichael Tuexen 			SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
324187b4fcd3SMichael Tuexen 			    sizeof(struct sctp_asconf_iterator),
324287b4fcd3SMichael Tuexen 			    SCTP_M_ASC_IT);
324387b4fcd3SMichael Tuexen 			if (asc == NULL) {
324487b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
324587b4fcd3SMichael Tuexen 				return (ENOMEM);
324687b4fcd3SMichael Tuexen 			}
324787b4fcd3SMichael Tuexen 			wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
324887b4fcd3SMichael Tuexen 			if (wi == NULL) {
324987b4fcd3SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
325087b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
325187b4fcd3SMichael Tuexen 				return (ENOMEM);
325287b4fcd3SMichael Tuexen 			}
325342551e99SRandall Stewart 			LIST_INIT(&asc->list_of_work);
325442551e99SRandall Stewart 			asc->cnt = 1;
325542551e99SRandall Stewart 			SCTP_INCR_LADDR_COUNT();
325642551e99SRandall Stewart 			wi->ifa = ifa;
325742551e99SRandall Stewart 			wi->action = type;
325842551e99SRandall Stewart 			atomic_add_int(&ifa->refcount, 1);
325942551e99SRandall Stewart 			LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
32601b649582SRandall Stewart 			(void)sctp_initiate_iterator(sctp_asconf_iterator_ep,
32611b649582SRandall Stewart 			    sctp_asconf_iterator_stcb,
32621b649582SRandall Stewart 			    sctp_asconf_iterator_ep_end,
326342551e99SRandall Stewart 			    SCTP_PCB_ANY_FLAGS,
32643c503c28SRandall Stewart 			    SCTP_PCB_ANY_FEATURES,
32651b649582SRandall Stewart 			    SCTP_ASOC_ANY_STATE,
32661b649582SRandall Stewart 			    (void *)asc, 0,
32671b649582SRandall Stewart 			    sctp_asconf_iterator_end, inp, 0);
326887b4fcd3SMichael Tuexen 		}
326987b4fcd3SMichael Tuexen 		return (0);
3270f8829a4aSRandall Stewart 	} else {
3271f8829a4aSRandall Stewart 		/* invalid address! */
3272c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EADDRNOTAVAIL);
3273f8829a4aSRandall Stewart 		return (EADDRNOTAVAIL);
3274f8829a4aSRandall Stewart 	}
3275f8829a4aSRandall Stewart }
3276830d754dSRandall Stewart 
3277830d754dSRandall Stewart void
3278830d754dSRandall Stewart sctp_asconf_send_nat_state_update(struct sctp_tcb *stcb,
3279830d754dSRandall Stewart     struct sctp_nets *net)
3280830d754dSRandall Stewart {
3281830d754dSRandall Stewart 	struct sctp_asconf_addr *aa;
3282830d754dSRandall Stewart 	struct sctp_ifa *sctp_ifap;
3283830d754dSRandall Stewart 	struct sctp_asconf_tag_param *vtag;
3284e6194c2eSMichael Tuexen 
3285e6194c2eSMichael Tuexen #ifdef INET
3286830d754dSRandall Stewart 	struct sockaddr_in *to;
3287830d754dSRandall Stewart 
3288e6194c2eSMichael Tuexen #endif
3289830d754dSRandall Stewart #ifdef INET6
3290830d754dSRandall Stewart 	struct sockaddr_in6 *to6;
3291830d754dSRandall Stewart 
3292830d754dSRandall Stewart #endif
3293830d754dSRandall Stewart 	if (net == NULL) {
3294830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing net\n");
3295830d754dSRandall Stewart 		return;
3296830d754dSRandall Stewart 	}
3297830d754dSRandall Stewart 	if (stcb == NULL) {
3298830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing stcb\n");
3299830d754dSRandall Stewart 		return;
3300830d754dSRandall Stewart 	}
3301830d754dSRandall Stewart 	/*
3302830d754dSRandall Stewart 	 * Need to have in the asconf: - vtagparam(my_vtag/peer_vtag) -
3303830d754dSRandall Stewart 	 * add(0.0.0.0) - del(0.0.0.0) - Any global addresses add(addr)
3304830d754dSRandall Stewart 	 */
3305830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3306830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3307830d754dSRandall Stewart 	if (aa == NULL) {
3308830d754dSRandall Stewart 		/* didn't get memory */
3309830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3310830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3311830d754dSRandall Stewart 		return;
3312830d754dSRandall Stewart 	}
3313830d754dSRandall Stewart 	aa->special_del = 0;
3314830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3315830d754dSRandall Stewart 	/* top level elements are "networked" during send */
3316830d754dSRandall Stewart 	aa->ifa = NULL;
3317830d754dSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
3318830d754dSRandall Stewart 	vtag = (struct sctp_asconf_tag_param *)&aa->ap.aph;
3319830d754dSRandall Stewart 	vtag->aph.ph.param_type = SCTP_NAT_VTAGS;
3320830d754dSRandall Stewart 	vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param);
3321830d754dSRandall Stewart 	vtag->local_vtag = htonl(stcb->asoc.my_vtag);
3322830d754dSRandall Stewart 	vtag->remote_vtag = htonl(stcb->asoc.peer_vtag);
3323830d754dSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3324830d754dSRandall Stewart 
3325830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3326830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3327830d754dSRandall Stewart 	if (aa == NULL) {
3328830d754dSRandall Stewart 		/* didn't get memory */
3329830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3330830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3331830d754dSRandall Stewart 		return;
3332830d754dSRandall Stewart 	}
3333830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3334830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3335830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3336e6194c2eSMichael Tuexen 	switch (net->ro._l_addr.sa.sa_family) {
3337e6194c2eSMichael Tuexen #ifdef INET
3338e6194c2eSMichael Tuexen 	case AF_INET:
3339830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3340830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3341830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3342830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3343830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3344830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3345e6194c2eSMichael Tuexen 		break;
3346e6194c2eSMichael Tuexen #endif
3347830d754dSRandall Stewart #ifdef INET6
3348e6194c2eSMichael Tuexen 	case AF_INET6:
3349830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3350830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3351830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3352830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3353830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3354830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3355e6194c2eSMichael Tuexen 		break;
3356e6194c2eSMichael Tuexen #endif
3357830d754dSRandall Stewart 	}
3358830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3359830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3360830d754dSRandall Stewart 	if (aa == NULL) {
3361830d754dSRandall Stewart 		/* didn't get memory */
3362830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3363830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3364830d754dSRandall Stewart 		return;
3365830d754dSRandall Stewart 	}
3366830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3367830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3368830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3369e6194c2eSMichael Tuexen 	switch (net->ro._l_addr.sa.sa_family) {
3370e6194c2eSMichael Tuexen #ifdef INET
3371e6194c2eSMichael Tuexen 	case AF_INET:
3372830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3373830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3374830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3375830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3376830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3377830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3378e6194c2eSMichael Tuexen 		break;
3379e6194c2eSMichael Tuexen #endif
3380830d754dSRandall Stewart #ifdef INET6
3381e6194c2eSMichael Tuexen 	case AF_INET6:
3382830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
3383830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3384830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3385830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3386830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3387830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3388e6194c2eSMichael Tuexen 		break;
3389e6194c2eSMichael Tuexen #endif
3390830d754dSRandall Stewart 	}
3391830d754dSRandall Stewart 	/* Now we must hunt the addresses and add all global addresses */
3392830d754dSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3393830d754dSRandall Stewart 		struct sctp_vrf *vrf = NULL;
3394830d754dSRandall Stewart 		struct sctp_ifn *sctp_ifnp;
3395830d754dSRandall Stewart 		uint32_t vrf_id;
3396830d754dSRandall Stewart 
3397830d754dSRandall Stewart 		vrf_id = stcb->sctp_ep->def_vrf_id;
3398830d754dSRandall Stewart 		vrf = sctp_find_vrf(vrf_id);
3399830d754dSRandall Stewart 		if (vrf == NULL) {
3400830d754dSRandall Stewart 			goto skip_rest;
3401830d754dSRandall Stewart 		}
3402830d754dSRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
3403830d754dSRandall Stewart 		LIST_FOREACH(sctp_ifnp, &vrf->ifnlist, next_ifn) {
3404830d754dSRandall Stewart 			LIST_FOREACH(sctp_ifap, &sctp_ifnp->ifalist, next_ifa) {
3405e6194c2eSMichael Tuexen 				switch (sctp_ifap->address.sa.sa_family) {
3406e6194c2eSMichael Tuexen #ifdef INET
3407e6194c2eSMichael Tuexen 				case AF_INET:
3408830d754dSRandall Stewart 					to = &sctp_ifap->address.sin;
3409830d754dSRandall Stewart 					if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3410830d754dSRandall Stewart 						continue;
3411830d754dSRandall Stewart 					}
3412830d754dSRandall Stewart 					if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3413830d754dSRandall Stewart 						continue;
3414830d754dSRandall Stewart 					}
3415e6194c2eSMichael Tuexen 					break;
3416e6194c2eSMichael Tuexen #endif
3417830d754dSRandall Stewart #ifdef INET6
3418e6194c2eSMichael Tuexen 				case AF_INET6:
3419830d754dSRandall Stewart 					to6 = &sctp_ifap->address.sin6;
3420830d754dSRandall Stewart 					if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3421830d754dSRandall Stewart 						continue;
3422830d754dSRandall Stewart 					}
3423830d754dSRandall Stewart 					if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3424830d754dSRandall Stewart 						continue;
3425830d754dSRandall Stewart 					}
3426e6194c2eSMichael Tuexen 					break;
3427830d754dSRandall Stewart #endif
3428e6194c2eSMichael Tuexen 				default:
3429e6194c2eSMichael Tuexen 					continue;
3430e6194c2eSMichael Tuexen 				}
3431830d754dSRandall Stewart 				sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3432830d754dSRandall Stewart 			}
3433830d754dSRandall Stewart 		}
3434830d754dSRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
3435830d754dSRandall Stewart 	} else {
3436830d754dSRandall Stewart 		struct sctp_laddr *laddr;
3437830d754dSRandall Stewart 
3438830d754dSRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
3439830d754dSRandall Stewart 			if (laddr->ifa == NULL) {
3440830d754dSRandall Stewart 				continue;
3441830d754dSRandall Stewart 			}
3442830d754dSRandall Stewart 			if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED)
3443830d754dSRandall Stewart 				/*
3444830d754dSRandall Stewart 				 * Address being deleted by the system, dont
3445830d754dSRandall Stewart 				 * list.
3446830d754dSRandall Stewart 				 */
3447830d754dSRandall Stewart 				continue;
3448830d754dSRandall Stewart 			if (laddr->action == SCTP_DEL_IP_ADDRESS) {
3449830d754dSRandall Stewart 				/*
3450830d754dSRandall Stewart 				 * Address being deleted on this ep don't
3451830d754dSRandall Stewart 				 * list.
3452830d754dSRandall Stewart 				 */
3453830d754dSRandall Stewart 				continue;
3454830d754dSRandall Stewart 			}
3455830d754dSRandall Stewart 			sctp_ifap = laddr->ifa;
3456e6194c2eSMichael Tuexen 			switch (sctp_ifap->address.sa.sa_family) {
3457e6194c2eSMichael Tuexen #ifdef INET
3458e6194c2eSMichael Tuexen 			case AF_INET:
3459830d754dSRandall Stewart 				to = &sctp_ifap->address.sin;
3460830d754dSRandall Stewart 				if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3461830d754dSRandall Stewart 					continue;
3462830d754dSRandall Stewart 				}
3463830d754dSRandall Stewart 				if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3464830d754dSRandall Stewart 					continue;
3465830d754dSRandall Stewart 				}
3466e6194c2eSMichael Tuexen 				break;
3467e6194c2eSMichael Tuexen #endif
3468830d754dSRandall Stewart #ifdef INET6
3469e6194c2eSMichael Tuexen 			case AF_INET6:
3470830d754dSRandall Stewart 				to6 = &sctp_ifap->address.sin6;
3471830d754dSRandall Stewart 				if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3472830d754dSRandall Stewart 					continue;
3473830d754dSRandall Stewart 				}
3474830d754dSRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3475830d754dSRandall Stewart 					continue;
3476830d754dSRandall Stewart 				}
3477e6194c2eSMichael Tuexen 				break;
3478830d754dSRandall Stewart #endif
3479e6194c2eSMichael Tuexen 			default:
3480e6194c2eSMichael Tuexen 				continue;
3481e6194c2eSMichael Tuexen 			}
3482830d754dSRandall Stewart 			sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3483830d754dSRandall Stewart 		}
3484830d754dSRandall Stewart 	}
3485830d754dSRandall Stewart skip_rest:
3486830d754dSRandall Stewart 	/* Now we must send the asconf into the queue */
3487ca85e948SMichael Tuexen 	sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
3488830d754dSRandall Stewart }
3489