1f8829a4aSRandall Stewart /*- 2b1006367SRandall Stewart * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved. 3*dec0177dSRandall Stewart * Copyright (c) 2008-2011, by Randall Stewart, rrs@lakerest.net and 4*dec0177dSRandall Stewart * Michael Tuexen, tuexen@fh-muenster.de 5*dec0177dSRandall Stewart * All rights reserved. 6f8829a4aSRandall Stewart * 7f8829a4aSRandall Stewart * Redistribution and use in source and binary forms, with or without 8f8829a4aSRandall Stewart * modification, are permitted provided that the following conditions are met: 9f8829a4aSRandall Stewart * 10f8829a4aSRandall Stewart * a) Redistributions of source code must retain the above copyright notice, 11f8829a4aSRandall Stewart * this list of conditions and the following disclaimer. 12f8829a4aSRandall Stewart * 13f8829a4aSRandall Stewart * b) Redistributions in binary form must reproduce the above copyright 14f8829a4aSRandall Stewart * notice, this list of conditions and the following disclaimer in 15f8829a4aSRandall Stewart * the documentation and/or other materials provided with the distribution. 16f8829a4aSRandall Stewart * 17f8829a4aSRandall Stewart * c) Neither the name of Cisco Systems, Inc. nor the names of its 18f8829a4aSRandall Stewart * contributors may be used to endorse or promote products derived 19f8829a4aSRandall Stewart * from this software without specific prior written permission. 20f8829a4aSRandall Stewart * 21f8829a4aSRandall Stewart * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 22f8829a4aSRandall Stewart * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 23f8829a4aSRandall Stewart * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24f8829a4aSRandall Stewart * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 25f8829a4aSRandall Stewart * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 26f8829a4aSRandall Stewart * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 27f8829a4aSRandall Stewart * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 28f8829a4aSRandall Stewart * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 29f8829a4aSRandall Stewart * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 30f8829a4aSRandall Stewart * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 31f8829a4aSRandall Stewart * THE POSSIBILITY OF SUCH DAMAGE. 32f8829a4aSRandall Stewart */ 33f8829a4aSRandall Stewart 34f8829a4aSRandall Stewart /* $KAME: sctp_asconf.c,v 1.24 2005/03/06 16:04:16 itojun Exp $ */ 35f8829a4aSRandall Stewart 36f8829a4aSRandall Stewart #include <sys/cdefs.h> 37cef8ad06SRandall Stewart __FBSDID("$FreeBSD$"); 38f8829a4aSRandall Stewart #include <netinet/sctp_os.h> 39f8829a4aSRandall Stewart #include <netinet/sctp_var.h> 4042551e99SRandall Stewart #include <netinet/sctp_sysctl.h> 41f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h> 42f8829a4aSRandall Stewart #include <netinet/sctp_header.h> 43f8829a4aSRandall Stewart #include <netinet/sctputil.h> 44f8829a4aSRandall Stewart #include <netinet/sctp_output.h> 45f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h> 46851b7298SRandall Stewart #include <netinet/sctp_timer.h> 47f8829a4aSRandall Stewart 48f8829a4aSRandall Stewart /* 49f8829a4aSRandall Stewart * debug flags: 50f8829a4aSRandall Stewart * SCTP_DEBUG_ASCONF1: protocol info, general info and errors 51f8829a4aSRandall Stewart * SCTP_DEBUG_ASCONF2: detailed info 52f8829a4aSRandall Stewart */ 53f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 54f8829a4aSRandall Stewart #endif /* SCTP_DEBUG */ 55f8829a4aSRandall Stewart 56f8829a4aSRandall Stewart 57ad81507eSRandall Stewart static void 58f8829a4aSRandall Stewart sctp_asconf_get_source_ip(struct mbuf *m, struct sockaddr *sa) 59f8829a4aSRandall Stewart { 60f8829a4aSRandall Stewart struct ip *iph; 61f8829a4aSRandall Stewart struct sockaddr_in *sin; 62f8829a4aSRandall Stewart 63f8829a4aSRandall Stewart #ifdef INET6 64f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 65f8829a4aSRandall Stewart 66f8829a4aSRandall Stewart #endif 67f8829a4aSRandall Stewart 68f8829a4aSRandall Stewart iph = mtod(m, struct ip *); 69f8829a4aSRandall Stewart if (iph->ip_v == IPVERSION) { 70f8829a4aSRandall Stewart /* IPv4 source */ 71f8829a4aSRandall Stewart sin = (struct sockaddr_in *)sa; 72f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 73f8829a4aSRandall Stewart sin->sin_family = AF_INET; 74f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 75f8829a4aSRandall Stewart sin->sin_port = 0; 76f8829a4aSRandall Stewart sin->sin_addr.s_addr = iph->ip_src.s_addr; 77ad81507eSRandall Stewart return; 78f8829a4aSRandall Stewart } 79f8829a4aSRandall Stewart #ifdef INET6 80f8829a4aSRandall Stewart else if (iph->ip_v == (IPV6_VERSION >> 4)) { 81f8829a4aSRandall Stewart /* IPv6 source */ 82f8829a4aSRandall Stewart struct ip6_hdr *ip6; 83f8829a4aSRandall Stewart 84f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 85f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 86f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 87f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 88f8829a4aSRandall Stewart sin6->sin6_port = 0; 89f8829a4aSRandall Stewart ip6 = mtod(m, struct ip6_hdr *); 90f8829a4aSRandall Stewart sin6->sin6_addr = ip6->ip6_src; 91ad81507eSRandall Stewart return; 92f8829a4aSRandall Stewart } 93f8829a4aSRandall Stewart #endif /* INET6 */ 94f8829a4aSRandall Stewart else 95ad81507eSRandall Stewart return; 96f8829a4aSRandall Stewart } 97f8829a4aSRandall Stewart 98f8829a4aSRandall Stewart /* 99f8829a4aSRandall Stewart * draft-ietf-tsvwg-addip-sctp 100f8829a4aSRandall Stewart * 101f8829a4aSRandall Stewart * An ASCONF parameter queue exists per asoc which holds the pending address 102f8829a4aSRandall Stewart * operations. Lists are updated upon receipt of ASCONF-ACK. 103f8829a4aSRandall Stewart * 10418e198d3SRandall Stewart * A restricted_addrs list exists per assoc to hold local addresses that are 10518e198d3SRandall Stewart * not (yet) usable by the assoc as a source address. These addresses are 10618e198d3SRandall Stewart * either pending an ASCONF operation (and exist on the ASCONF parameter 10718e198d3SRandall Stewart * queue), or they are permanently restricted (the peer has returned an 10818e198d3SRandall Stewart * ERROR indication to an ASCONF(ADD), or the peer does not support ASCONF). 10918e198d3SRandall Stewart * 110f8829a4aSRandall Stewart * Deleted addresses are always immediately removed from the lists as they will 111f8829a4aSRandall Stewart * (shortly) no longer exist in the kernel. We send ASCONFs as a courtesy, 112f8829a4aSRandall Stewart * only if allowed. 113f8829a4aSRandall Stewart */ 114f8829a4aSRandall Stewart 115f8829a4aSRandall Stewart /* 11618e198d3SRandall Stewart * ASCONF parameter processing. 11718e198d3SRandall Stewart * response_required: set if a reply is required (eg. SUCCESS_REPORT). 11818e198d3SRandall Stewart * returns a mbuf to an "error" response parameter or NULL/"success" if ok. 11918e198d3SRandall Stewart * FIX: allocating this many mbufs on the fly is pretty inefficient... 120f8829a4aSRandall Stewart */ 121f8829a4aSRandall Stewart static struct mbuf * 122f8829a4aSRandall Stewart sctp_asconf_success_response(uint32_t id) 123f8829a4aSRandall Stewart { 124f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 125f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 126f8829a4aSRandall Stewart 127f8829a4aSRandall Stewart m_reply = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_paramhdr), 128f8829a4aSRandall Stewart 0, M_DONTWAIT, 1, MT_DATA); 129f8829a4aSRandall Stewart if (m_reply == NULL) { 130ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 131ad81507eSRandall Stewart "asconf_success_response: couldn't get mbuf!\n"); 132f8829a4aSRandall Stewart return NULL; 133f8829a4aSRandall Stewart } 134f8829a4aSRandall Stewart aph = mtod(m_reply, struct sctp_asconf_paramhdr *); 135f8829a4aSRandall Stewart aph->correlation_id = id; 136f8829a4aSRandall Stewart aph->ph.param_type = htons(SCTP_SUCCESS_REPORT); 137f8829a4aSRandall Stewart aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr); 138139bc87fSRandall Stewart SCTP_BUF_LEN(m_reply) = aph->ph.param_length; 139f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 140f8829a4aSRandall Stewart 141f8829a4aSRandall Stewart return m_reply; 142f8829a4aSRandall Stewart } 143f8829a4aSRandall Stewart 144f8829a4aSRandall Stewart static struct mbuf * 145f8829a4aSRandall Stewart sctp_asconf_error_response(uint32_t id, uint16_t cause, uint8_t * error_tlv, 146f8829a4aSRandall Stewart uint16_t tlv_length) 147f8829a4aSRandall Stewart { 148f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 149f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 150f8829a4aSRandall Stewart struct sctp_error_cause *error; 151f8829a4aSRandall Stewart uint8_t *tlv; 152f8829a4aSRandall Stewart 153f8829a4aSRandall Stewart m_reply = sctp_get_mbuf_for_msg((sizeof(struct sctp_asconf_paramhdr) + 154f8829a4aSRandall Stewart tlv_length + 155f8829a4aSRandall Stewart sizeof(struct sctp_error_cause)), 156f8829a4aSRandall Stewart 0, M_DONTWAIT, 1, MT_DATA); 157f8829a4aSRandall Stewart if (m_reply == NULL) { 158ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 159ad81507eSRandall Stewart "asconf_error_response: couldn't get mbuf!\n"); 160f8829a4aSRandall Stewart return NULL; 161f8829a4aSRandall Stewart } 162f8829a4aSRandall Stewart aph = mtod(m_reply, struct sctp_asconf_paramhdr *); 163f8829a4aSRandall Stewart error = (struct sctp_error_cause *)(aph + 1); 164f8829a4aSRandall Stewart 165f8829a4aSRandall Stewart aph->correlation_id = id; 166f8829a4aSRandall Stewart aph->ph.param_type = htons(SCTP_ERROR_CAUSE_IND); 167f8829a4aSRandall Stewart error->code = htons(cause); 168f8829a4aSRandall Stewart error->length = tlv_length + sizeof(struct sctp_error_cause); 169f8829a4aSRandall Stewart aph->ph.param_length = error->length + 170f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr); 171f8829a4aSRandall Stewart 172f8829a4aSRandall Stewart if (aph->ph.param_length > MLEN) { 173ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 174ad81507eSRandall Stewart "asconf_error_response: tlv_length (%xh) too big\n", 175f8829a4aSRandall Stewart tlv_length); 176f8829a4aSRandall Stewart sctp_m_freem(m_reply); /* discard */ 177f8829a4aSRandall Stewart return NULL; 178f8829a4aSRandall Stewart } 179f8829a4aSRandall Stewart if (error_tlv != NULL) { 180f8829a4aSRandall Stewart tlv = (uint8_t *) (error + 1); 181f8829a4aSRandall Stewart memcpy(tlv, error_tlv, tlv_length); 182f8829a4aSRandall Stewart } 183139bc87fSRandall Stewart SCTP_BUF_LEN(m_reply) = aph->ph.param_length; 184f8829a4aSRandall Stewart error->length = htons(error->length); 185f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 186f8829a4aSRandall Stewart 187f8829a4aSRandall Stewart return m_reply; 188f8829a4aSRandall Stewart } 189f8829a4aSRandall Stewart 190f8829a4aSRandall Stewart static struct mbuf * 191f8829a4aSRandall Stewart sctp_process_asconf_add_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph, 192f8829a4aSRandall Stewart struct sctp_tcb *stcb, int response_required) 193f8829a4aSRandall Stewart { 194f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 195f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 196f8829a4aSRandall Stewart struct sctp_ipv4addr_param *v4addr; 197f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 198f8829a4aSRandall Stewart struct sockaddr *sa; 199f8829a4aSRandall Stewart struct sockaddr_in *sin; 200f8829a4aSRandall Stewart int zero_address = 0; 201f8829a4aSRandall Stewart 202f8829a4aSRandall Stewart #ifdef INET6 203f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 204f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 205f8829a4aSRandall Stewart 206f8829a4aSRandall Stewart #endif /* INET6 */ 207f8829a4aSRandall Stewart 208f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 209f8829a4aSRandall Stewart v4addr = (struct sctp_ipv4addr_param *)(aph + 1); 210f8829a4aSRandall Stewart #ifdef INET6 211f8829a4aSRandall Stewart v6addr = (struct sctp_ipv6addr_param *)(aph + 1); 212f8829a4aSRandall Stewart #endif /* INET6 */ 213f8829a4aSRandall Stewart param_type = ntohs(v4addr->ph.param_type); 214f8829a4aSRandall Stewart param_length = ntohs(v4addr->ph.param_length); 215f8829a4aSRandall Stewart 216f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 217f8829a4aSRandall Stewart switch (param_type) { 218f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 219f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 220f8829a4aSRandall Stewart /* invalid param size */ 221f8829a4aSRandall Stewart return NULL; 222f8829a4aSRandall Stewart } 223f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 224f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 225f8829a4aSRandall Stewart sin->sin_family = AF_INET; 226f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 227f8829a4aSRandall Stewart sin->sin_port = stcb->rport; 228f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 229f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 230f8829a4aSRandall Stewart zero_address = 1; 231ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding "); 232ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 233f8829a4aSRandall Stewart break; 234f8829a4aSRandall Stewart case SCTP_IPV6_ADDRESS: 235f8829a4aSRandall Stewart #ifdef INET6 236f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 237f8829a4aSRandall Stewart /* invalid param size */ 238f8829a4aSRandall Stewart return NULL; 239f8829a4aSRandall Stewart } 240f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 241f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 242f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 243f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 244f8829a4aSRandall Stewart sin6->sin6_port = stcb->rport; 245f8829a4aSRandall Stewart memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr, 246f8829a4aSRandall Stewart sizeof(struct in6_addr)); 247f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 248f8829a4aSRandall Stewart zero_address = 1; 249ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding "); 250ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 251f8829a4aSRandall Stewart #else 252f8829a4aSRandall Stewart /* IPv6 not enabled! */ 253f8829a4aSRandall Stewart /* FIX ME: currently sends back an invalid param error */ 254f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 255f8829a4aSRandall Stewart SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph, aparam_length); 256ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 257ad81507eSRandall Stewart "process_asconf_add_ip: v6 disabled- skipping "); 258ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 259f8829a4aSRandall Stewart return m_reply; 260ad81507eSRandall Stewart #endif 261f8829a4aSRandall Stewart break; 262f8829a4aSRandall Stewart default: 263f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 264f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 265f8829a4aSRandall Stewart aparam_length); 266f8829a4aSRandall Stewart return m_reply; 267f8829a4aSRandall Stewart } /* end switch */ 268f8829a4aSRandall Stewart 269f8829a4aSRandall Stewart /* if 0.0.0.0/::0, add the source address instead */ 270b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 271f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_source; 272f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, sa); 273ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 274ad81507eSRandall Stewart "process_asconf_add_ip: using source addr "); 275ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 276f8829a4aSRandall Stewart } 277f8829a4aSRandall Stewart /* add the address */ 278a5d547adSRandall Stewart if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE, 279a5d547adSRandall Stewart SCTP_ADDR_DYNAMIC_ADDED) != 0) { 280ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 281ad81507eSRandall Stewart "process_asconf_add_ip: error adding address\n"); 282f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 283f8829a4aSRandall Stewart SCTP_CAUSE_RESOURCE_SHORTAGE, (uint8_t *) aph, 284f8829a4aSRandall Stewart aparam_length); 285f8829a4aSRandall Stewart } else { 286f8829a4aSRandall Stewart /* notify upper layer */ 287ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_ADD_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 288f8829a4aSRandall Stewart if (response_required) { 289f8829a4aSRandall Stewart m_reply = 290f8829a4aSRandall Stewart sctp_asconf_success_response(aph->correlation_id); 291f8829a4aSRandall Stewart } 2923c503c28SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, 2933c503c28SRandall Stewart NULL, SCTP_FROM_SCTP_ASCONF + SCTP_LOC_1); 2943c503c28SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, 2953c503c28SRandall Stewart stcb, NULL); 296f8829a4aSRandall Stewart } 297f8829a4aSRandall Stewart 298f8829a4aSRandall Stewart return m_reply; 299f8829a4aSRandall Stewart } 300f8829a4aSRandall Stewart 301f8829a4aSRandall Stewart static int 3021b649582SRandall Stewart sctp_asconf_del_remote_addrs_except(struct sctp_tcb *stcb, struct sockaddr *src) 303f8829a4aSRandall Stewart { 304f8829a4aSRandall Stewart struct sctp_nets *src_net, *net; 305f8829a4aSRandall Stewart 306f8829a4aSRandall Stewart /* make sure the source address exists as a destination net */ 307f8829a4aSRandall Stewart src_net = sctp_findnet(stcb, src); 308f8829a4aSRandall Stewart if (src_net == NULL) { 309f8829a4aSRandall Stewart /* not found */ 310f8829a4aSRandall Stewart return -1; 311f8829a4aSRandall Stewart } 312f8829a4aSRandall Stewart /* delete all destination addresses except the source */ 313f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 314f8829a4aSRandall Stewart if (net != src_net) { 315f8829a4aSRandall Stewart /* delete this address */ 316f8829a4aSRandall Stewart sctp_remove_net(stcb, net); 317ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 318ad81507eSRandall Stewart "asconf_del_remote_addrs_except: deleting "); 319ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, 320ad81507eSRandall Stewart (struct sockaddr *)&net->ro._l_addr); 321f8829a4aSRandall Stewart /* notify upper layer */ 322f8829a4aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, 323ceaad40aSRandall Stewart (struct sockaddr *)&net->ro._l_addr, SCTP_SO_NOT_LOCKED); 324f8829a4aSRandall Stewart } 325f8829a4aSRandall Stewart } 326f8829a4aSRandall Stewart return 0; 327f8829a4aSRandall Stewart } 328f8829a4aSRandall Stewart 329f8829a4aSRandall Stewart static struct mbuf * 330f8829a4aSRandall Stewart sctp_process_asconf_delete_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph, 331f8829a4aSRandall Stewart struct sctp_tcb *stcb, int response_required) 332f8829a4aSRandall Stewart { 333f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 334f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 335f8829a4aSRandall Stewart struct sctp_ipv4addr_param *v4addr; 336f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 337f8829a4aSRandall Stewart struct sockaddr *sa; 338f8829a4aSRandall Stewart struct sockaddr_in *sin; 339f8829a4aSRandall Stewart int zero_address = 0; 340f8829a4aSRandall Stewart int result; 341f8829a4aSRandall Stewart 342f8829a4aSRandall Stewart #ifdef INET6 343f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 344f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 345f8829a4aSRandall Stewart 346f8829a4aSRandall Stewart #endif /* INET6 */ 347f8829a4aSRandall Stewart 348f8829a4aSRandall Stewart /* get the source IP address for src and 0.0.0.0/::0 delete checks */ 349f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, (struct sockaddr *)&sa_source); 350f8829a4aSRandall Stewart 351f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 352f8829a4aSRandall Stewart v4addr = (struct sctp_ipv4addr_param *)(aph + 1); 353f8829a4aSRandall Stewart #ifdef INET6 354f8829a4aSRandall Stewart v6addr = (struct sctp_ipv6addr_param *)(aph + 1); 355f8829a4aSRandall Stewart #endif /* INET6 */ 356f8829a4aSRandall Stewart param_type = ntohs(v4addr->ph.param_type); 357f8829a4aSRandall Stewart param_length = ntohs(v4addr->ph.param_length); 358f8829a4aSRandall Stewart 359f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 360f8829a4aSRandall Stewart switch (param_type) { 361f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 362f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 363f8829a4aSRandall Stewart /* invalid param size */ 364f8829a4aSRandall Stewart return NULL; 365f8829a4aSRandall Stewart } 366f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 367f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 368f8829a4aSRandall Stewart sin->sin_family = AF_INET; 369f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 370f8829a4aSRandall Stewart sin->sin_port = stcb->rport; 371f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 372f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 373f8829a4aSRandall Stewart zero_address = 1; 374ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 375ad81507eSRandall Stewart "process_asconf_delete_ip: deleting "); 376ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 377f8829a4aSRandall Stewart break; 378f8829a4aSRandall Stewart case SCTP_IPV6_ADDRESS: 379f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 380f8829a4aSRandall Stewart /* invalid param size */ 381f8829a4aSRandall Stewart return NULL; 382f8829a4aSRandall Stewart } 383f8829a4aSRandall Stewart #ifdef INET6 384f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 385f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 386f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 387f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 388f8829a4aSRandall Stewart sin6->sin6_port = stcb->rport; 389f8829a4aSRandall Stewart memcpy(&sin6->sin6_addr, v6addr->addr, 390f8829a4aSRandall Stewart sizeof(struct in6_addr)); 391f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 392f8829a4aSRandall Stewart zero_address = 1; 393ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 394ad81507eSRandall Stewart "process_asconf_delete_ip: deleting "); 395ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 396f8829a4aSRandall Stewart #else 397f8829a4aSRandall Stewart /* IPv6 not enabled! No "action" needed; just ack it */ 398ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 399ad81507eSRandall Stewart "process_asconf_delete_ip: v6 disabled- ignoring: "); 400ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 401f8829a4aSRandall Stewart /* just respond with a "success" ASCONF-ACK */ 402f8829a4aSRandall Stewart return NULL; 403ad81507eSRandall Stewart #endif 404f8829a4aSRandall Stewart break; 405f8829a4aSRandall Stewart default: 406f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 407f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 408f8829a4aSRandall Stewart aparam_length); 409f8829a4aSRandall Stewart return m_reply; 410f8829a4aSRandall Stewart } 411f8829a4aSRandall Stewart 412f8829a4aSRandall Stewart /* make sure the source address is not being deleted */ 413f8829a4aSRandall Stewart if (sctp_cmpaddr(sa, (struct sockaddr *)&sa_source)) { 414f8829a4aSRandall Stewart /* trying to delete the source address! */ 415ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete source addr\n"); 416f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 417f8829a4aSRandall Stewart SCTP_CAUSE_DELETING_SRC_ADDR, (uint8_t *) aph, 418f8829a4aSRandall Stewart aparam_length); 419f8829a4aSRandall Stewart return m_reply; 420f8829a4aSRandall Stewart } 421f8829a4aSRandall Stewart /* if deleting 0.0.0.0/::0, delete all addresses except src addr */ 422b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 423f8829a4aSRandall Stewart result = sctp_asconf_del_remote_addrs_except(stcb, 424f8829a4aSRandall Stewart (struct sockaddr *)&sa_source); 425f8829a4aSRandall Stewart 426f8829a4aSRandall Stewart if (result) { 427f8829a4aSRandall Stewart /* src address did not exist? */ 428ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: src addr does not exist?\n"); 429f8829a4aSRandall Stewart /* what error to reply with?? */ 430f8829a4aSRandall Stewart m_reply = 431f8829a4aSRandall Stewart sctp_asconf_error_response(aph->correlation_id, 432f8829a4aSRandall Stewart SCTP_CAUSE_REQUEST_REFUSED, (uint8_t *) aph, 433f8829a4aSRandall Stewart aparam_length); 434f8829a4aSRandall Stewart } else if (response_required) { 435f8829a4aSRandall Stewart m_reply = 436f8829a4aSRandall Stewart sctp_asconf_success_response(aph->correlation_id); 437f8829a4aSRandall Stewart } 438f8829a4aSRandall Stewart return m_reply; 439f8829a4aSRandall Stewart } 440f8829a4aSRandall Stewart /* delete the address */ 441f8829a4aSRandall Stewart result = sctp_del_remote_addr(stcb, sa); 442f8829a4aSRandall Stewart /* 443f8829a4aSRandall Stewart * note if result == -2, the address doesn't exist in the asoc but 444f8829a4aSRandall Stewart * since it's being deleted anyways, we just ack the delete -- but 445f8829a4aSRandall Stewart * this probably means something has already gone awry 446f8829a4aSRandall Stewart */ 447f8829a4aSRandall Stewart if (result == -1) { 448f8829a4aSRandall Stewart /* only one address in the asoc */ 449ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete last IP addr!\n"); 450f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 451f8829a4aSRandall Stewart SCTP_CAUSE_DELETING_LAST_ADDR, (uint8_t *) aph, 452f8829a4aSRandall Stewart aparam_length); 453f8829a4aSRandall Stewart } else { 454f8829a4aSRandall Stewart if (response_required) { 455f8829a4aSRandall Stewart m_reply = sctp_asconf_success_response(aph->correlation_id); 456f8829a4aSRandall Stewart } 457f8829a4aSRandall Stewart /* notify upper layer */ 458ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 459f8829a4aSRandall Stewart } 460f8829a4aSRandall Stewart return m_reply; 461f8829a4aSRandall Stewart } 462f8829a4aSRandall Stewart 463f8829a4aSRandall Stewart static struct mbuf * 464f8829a4aSRandall Stewart sctp_process_asconf_set_primary(struct mbuf *m, 4651b649582SRandall Stewart struct sctp_asconf_paramhdr *aph, 4661b649582SRandall Stewart struct sctp_tcb *stcb, int response_required) 467f8829a4aSRandall Stewart { 468f8829a4aSRandall Stewart struct mbuf *m_reply = NULL; 469f8829a4aSRandall Stewart struct sockaddr_storage sa_source, sa_store; 470f8829a4aSRandall Stewart struct sctp_ipv4addr_param *v4addr; 471f8829a4aSRandall Stewart uint16_t param_type, param_length, aparam_length; 472f8829a4aSRandall Stewart struct sockaddr *sa; 473f8829a4aSRandall Stewart struct sockaddr_in *sin; 474f8829a4aSRandall Stewart int zero_address = 0; 475f8829a4aSRandall Stewart 476f8829a4aSRandall Stewart #ifdef INET6 477f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 478f8829a4aSRandall Stewart struct sctp_ipv6addr_param *v6addr; 479f8829a4aSRandall Stewart 480f8829a4aSRandall Stewart #endif /* INET6 */ 481f8829a4aSRandall Stewart 482f8829a4aSRandall Stewart aparam_length = ntohs(aph->ph.param_length); 483f8829a4aSRandall Stewart v4addr = (struct sctp_ipv4addr_param *)(aph + 1); 484f8829a4aSRandall Stewart #ifdef INET6 485f8829a4aSRandall Stewart v6addr = (struct sctp_ipv6addr_param *)(aph + 1); 486f8829a4aSRandall Stewart #endif /* INET6 */ 487f8829a4aSRandall Stewart param_type = ntohs(v4addr->ph.param_type); 488f8829a4aSRandall Stewart param_length = ntohs(v4addr->ph.param_length); 489f8829a4aSRandall Stewart 490f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_store; 491f8829a4aSRandall Stewart switch (param_type) { 492f8829a4aSRandall Stewart case SCTP_IPV4_ADDRESS: 493f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv4addr_param)) { 494f8829a4aSRandall Stewart /* invalid param size */ 495f8829a4aSRandall Stewart return NULL; 496f8829a4aSRandall Stewart } 497f8829a4aSRandall Stewart sin = (struct sockaddr_in *)&sa_store; 498f8829a4aSRandall Stewart bzero(sin, sizeof(*sin)); 499f8829a4aSRandall Stewart sin->sin_family = AF_INET; 500f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 501f8829a4aSRandall Stewart sin->sin_addr.s_addr = v4addr->addr; 502f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 503f8829a4aSRandall Stewart zero_address = 1; 504ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: "); 505ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 506f8829a4aSRandall Stewart break; 507f8829a4aSRandall Stewart case SCTP_IPV6_ADDRESS: 508f8829a4aSRandall Stewart if (param_length != sizeof(struct sctp_ipv6addr_param)) { 509f8829a4aSRandall Stewart /* invalid param size */ 510f8829a4aSRandall Stewart return NULL; 511f8829a4aSRandall Stewart } 512f8829a4aSRandall Stewart #ifdef INET6 513f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&sa_store; 514f8829a4aSRandall Stewart bzero(sin6, sizeof(*sin6)); 515f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 516f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 517f8829a4aSRandall Stewart memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr, 518f8829a4aSRandall Stewart sizeof(struct in6_addr)); 519f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 520f8829a4aSRandall Stewart zero_address = 1; 521ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: "); 522ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 523f8829a4aSRandall Stewart #else 524f8829a4aSRandall Stewart /* IPv6 not enabled! No "action" needed; just ack it */ 525ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 526ad81507eSRandall Stewart "process_asconf_set_primary: v6 disabled- ignoring: "); 527ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 528f8829a4aSRandall Stewart /* just respond with a "success" ASCONF-ACK */ 529f8829a4aSRandall Stewart return NULL; 530ad81507eSRandall Stewart #endif 531f8829a4aSRandall Stewart break; 532f8829a4aSRandall Stewart default: 533f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 534f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 535f8829a4aSRandall Stewart aparam_length); 536f8829a4aSRandall Stewart return m_reply; 537f8829a4aSRandall Stewart } 538f8829a4aSRandall Stewart 539f8829a4aSRandall Stewart /* if 0.0.0.0/::0, use the source address instead */ 540b3f1ea41SRandall Stewart if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) { 541f8829a4aSRandall Stewart sa = (struct sockaddr *)&sa_source; 542f8829a4aSRandall Stewart sctp_asconf_get_source_ip(m, sa); 543ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 544ad81507eSRandall Stewart "process_asconf_set_primary: using source addr "); 545ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 546f8829a4aSRandall Stewart } 547f8829a4aSRandall Stewart /* set the primary address */ 548f8829a4aSRandall Stewart if (sctp_set_primary_addr(stcb, sa, NULL) == 0) { 549ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 550ad81507eSRandall Stewart "process_asconf_set_primary: primary address set\n"); 551f8829a4aSRandall Stewart /* notify upper layer */ 552ceaad40aSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_ASCONF_SET_PRIMARY, stcb, 0, sa, SCTP_SO_NOT_LOCKED); 553f8829a4aSRandall Stewart 554f8829a4aSRandall Stewart if (response_required) { 555f8829a4aSRandall Stewart m_reply = sctp_asconf_success_response(aph->correlation_id); 556f8829a4aSRandall Stewart } 557851b7298SRandall Stewart /* 558851b7298SRandall Stewart * Mobility adaptation. Ideally, when the reception of SET 559851b7298SRandall Stewart * PRIMARY with DELETE IP ADDRESS of the previous primary 560851b7298SRandall Stewart * destination, unacknowledged DATA are retransmitted 561851b7298SRandall Stewart * immediately to the new primary destination for seamless 562b5c16493SMichael Tuexen * handover. If the destination is UNCONFIRMED and marked to 563b5c16493SMichael Tuexen * REQ_PRIM, The retransmission occur when reception of the 564b5c16493SMichael Tuexen * HEARTBEAT-ACK. (See sctp_handle_heartbeat_ack in 565851b7298SRandall Stewart * sctp_input.c) Also, when change of the primary 566851b7298SRandall Stewart * destination, it is better that all subsequent new DATA 567851b7298SRandall Stewart * containing already queued DATA are transmitted to the new 568851b7298SRandall Stewart * primary destination. (by micchie) 569851b7298SRandall Stewart */ 570851b7298SRandall Stewart if ((sctp_is_mobility_feature_on(stcb->sctp_ep, 571851b7298SRandall Stewart SCTP_MOBILITY_BASE) || 572851b7298SRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 573851b7298SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) && 574851b7298SRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 575851b7298SRandall Stewart SCTP_MOBILITY_PRIM_DELETED) && 576851b7298SRandall Stewart (stcb->asoc.primary_destination->dest_state & 577851b7298SRandall Stewart SCTP_ADDR_UNCONFIRMED) == 0) { 578851b7298SRandall Stewart 579851b7298SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_PRIM_DELETED, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTP_TIMER + SCTP_LOC_7); 580851b7298SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 581851b7298SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 582851b7298SRandall Stewart sctp_assoc_immediate_retrans(stcb, 583851b7298SRandall Stewart stcb->asoc.primary_destination); 584851b7298SRandall Stewart } 585851b7298SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 586851b7298SRandall Stewart SCTP_MOBILITY_BASE)) { 5879eea4a2dSMichael Tuexen sctp_move_chunks_from_net(stcb, 5889eea4a2dSMichael Tuexen stcb->asoc.deleted_primary); 589851b7298SRandall Stewart } 590851b7298SRandall Stewart sctp_delete_prim_timer(stcb->sctp_ep, stcb, 591851b7298SRandall Stewart stcb->asoc.deleted_primary); 592851b7298SRandall Stewart } 593f8829a4aSRandall Stewart } else { 594f8829a4aSRandall Stewart /* couldn't set the requested primary address! */ 595ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 596ad81507eSRandall Stewart "process_asconf_set_primary: set primary failed!\n"); 597f8829a4aSRandall Stewart /* must have been an invalid address, so report */ 598f8829a4aSRandall Stewart m_reply = sctp_asconf_error_response(aph->correlation_id, 599f8829a4aSRandall Stewart SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph, 600f8829a4aSRandall Stewart aparam_length); 601f8829a4aSRandall Stewart } 602f8829a4aSRandall Stewart 603f8829a4aSRandall Stewart return m_reply; 604f8829a4aSRandall Stewart } 605f8829a4aSRandall Stewart 606f8829a4aSRandall Stewart /* 607f8829a4aSRandall Stewart * handles an ASCONF chunk. 608f8829a4aSRandall Stewart * if all parameters are processed ok, send a plain (empty) ASCONF-ACK 609f8829a4aSRandall Stewart */ 610f8829a4aSRandall Stewart void 611f8829a4aSRandall Stewart sctp_handle_asconf(struct mbuf *m, unsigned int offset, 6122afb3e84SRandall Stewart struct sctp_asconf_chunk *cp, struct sctp_tcb *stcb, 6132afb3e84SRandall Stewart int first) 614f8829a4aSRandall Stewart { 615f8829a4aSRandall Stewart struct sctp_association *asoc; 616f8829a4aSRandall Stewart uint32_t serial_num; 6172afb3e84SRandall Stewart struct mbuf *n, *m_ack, *m_result, *m_tail; 618f8829a4aSRandall Stewart struct sctp_asconf_ack_chunk *ack_cp; 619f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph, *ack_aph; 620f8829a4aSRandall Stewart struct sctp_ipv6addr_param *p_addr; 621f8829a4aSRandall Stewart unsigned int asconf_limit; 622f8829a4aSRandall Stewart int error = 0; /* did an error occur? */ 623f8829a4aSRandall Stewart 624f8829a4aSRandall Stewart /* asconf param buffer */ 625f42a358aSRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 6262afb3e84SRandall Stewart struct sctp_asconf_ack *ack, *ack_next; 627f8829a4aSRandall Stewart 628f8829a4aSRandall Stewart /* verify minimum length */ 629f8829a4aSRandall Stewart if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_chunk)) { 630ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 631ad81507eSRandall Stewart "handle_asconf: chunk too small = %xh\n", 632f8829a4aSRandall Stewart ntohs(cp->ch.chunk_length)); 633f8829a4aSRandall Stewart return; 634f8829a4aSRandall Stewart } 635f8829a4aSRandall Stewart asoc = &stcb->asoc; 636f8829a4aSRandall Stewart serial_num = ntohl(cp->serial_number); 637f8829a4aSRandall Stewart 63820b07a4dSMichael Tuexen if (SCTP_TSN_GE(asoc->asconf_seq_in, serial_num)) { 639f8829a4aSRandall Stewart /* got a duplicate ASCONF */ 640ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 641ad81507eSRandall Stewart "handle_asconf: got duplicate serial number = %xh\n", 642f8829a4aSRandall Stewart serial_num); 643f8829a4aSRandall Stewart return; 644f8829a4aSRandall Stewart } else if (serial_num != (asoc->asconf_seq_in + 1)) { 645ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: incorrect serial number = %xh (expected next = %xh)\n", 646f8829a4aSRandall Stewart serial_num, asoc->asconf_seq_in + 1); 647f8829a4aSRandall Stewart return; 648f8829a4aSRandall Stewart } 649f8829a4aSRandall Stewart /* it's the expected "next" sequence number, so process it */ 650f8829a4aSRandall Stewart asoc->asconf_seq_in = serial_num; /* update sequence */ 651f8829a4aSRandall Stewart /* get length of all the param's in the ASCONF */ 652f8829a4aSRandall Stewart asconf_limit = offset + ntohs(cp->ch.chunk_length); 653ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 654ad81507eSRandall Stewart "handle_asconf: asconf_limit=%u, sequence=%xh\n", 655f8829a4aSRandall Stewart asconf_limit, serial_num); 6562afb3e84SRandall Stewart 6572afb3e84SRandall Stewart if (first) { 6582afb3e84SRandall Stewart /* delete old cache */ 6592afb3e84SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: Now processing firstASCONF. Try to delte old cache\n"); 6602afb3e84SRandall Stewart 6614a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(ack, &asoc->asconf_ack_sent, next, ack_next) { 6622afb3e84SRandall Stewart if (ack->serial_number == serial_num) 6632afb3e84SRandall Stewart break; 6642afb3e84SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: delete old(%u) < first(%u)\n", 6652afb3e84SRandall Stewart ack->serial_number, serial_num); 6664a9ef3f8SMichael Tuexen TAILQ_REMOVE(&asoc->asconf_ack_sent, ack, next); 6672afb3e84SRandall Stewart if (ack->data != NULL) { 6682afb3e84SRandall Stewart sctp_m_freem(ack->data); 6692afb3e84SRandall Stewart } 670b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), ack); 6712afb3e84SRandall Stewart } 672f8829a4aSRandall Stewart } 673139bc87fSRandall Stewart m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0, 674f8829a4aSRandall Stewart M_DONTWAIT, 1, MT_DATA); 675f8829a4aSRandall Stewart if (m_ack == NULL) { 676ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 677ad81507eSRandall Stewart "handle_asconf: couldn't get mbuf!\n"); 678f8829a4aSRandall Stewart return; 679f8829a4aSRandall Stewart } 680f8829a4aSRandall Stewart m_tail = m_ack; /* current reply chain's tail */ 681f8829a4aSRandall Stewart 682f8829a4aSRandall Stewart /* fill in ASCONF-ACK header */ 683f8829a4aSRandall Stewart ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *); 684f8829a4aSRandall Stewart ack_cp->ch.chunk_type = SCTP_ASCONF_ACK; 685f8829a4aSRandall Stewart ack_cp->ch.chunk_flags = 0; 686f8829a4aSRandall Stewart ack_cp->serial_number = htonl(serial_num); 687f8829a4aSRandall Stewart /* set initial lengths (eg. just an ASCONF-ACK), ntohx at the end! */ 688139bc87fSRandall Stewart SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk); 689f8829a4aSRandall Stewart ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk); 690f8829a4aSRandall Stewart 691f8829a4aSRandall Stewart /* skip the lookup address parameter */ 692f8829a4aSRandall Stewart offset += sizeof(struct sctp_asconf_chunk); 693f8829a4aSRandall Stewart p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), (uint8_t *) & aparam_buf); 694f8829a4aSRandall Stewart if (p_addr == NULL) { 695ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 696ad81507eSRandall Stewart "handle_asconf: couldn't get lookup addr!\n"); 697f8829a4aSRandall Stewart /* respond with a missing/invalid mandatory parameter error */ 698f8829a4aSRandall Stewart return; 699f8829a4aSRandall Stewart } 700f8829a4aSRandall Stewart /* param_length is already validated in process_control... */ 701f8829a4aSRandall Stewart offset += ntohs(p_addr->ph.param_length); /* skip lookup addr */ 702f8829a4aSRandall Stewart 703f8829a4aSRandall Stewart /* get pointer to first asconf param in ASCONF-ACK */ 704f8829a4aSRandall Stewart ack_aph = (struct sctp_asconf_paramhdr *)(mtod(m_ack, caddr_t)+sizeof(struct sctp_asconf_ack_chunk)); 705f8829a4aSRandall Stewart if (ack_aph == NULL) { 706ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Gak in asconf2\n"); 707f8829a4aSRandall Stewart return; 708f8829a4aSRandall Stewart } 709f8829a4aSRandall Stewart /* get pointer to first asconf param in ASCONF */ 710f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *) & aparam_buf); 711f8829a4aSRandall Stewart if (aph == NULL) { 712ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Empty ASCONF received?\n"); 713f8829a4aSRandall Stewart goto send_reply; 714f8829a4aSRandall Stewart } 715f8829a4aSRandall Stewart /* process through all parameters */ 716f8829a4aSRandall Stewart while (aph != NULL) { 717f8829a4aSRandall Stewart unsigned int param_length, param_type; 718f8829a4aSRandall Stewart 719f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 720f8829a4aSRandall Stewart param_length = ntohs(aph->ph.param_length); 721f8829a4aSRandall Stewart if (offset + param_length > asconf_limit) { 722f8829a4aSRandall Stewart /* parameter goes beyond end of chunk! */ 723f8829a4aSRandall Stewart sctp_m_freem(m_ack); 724f8829a4aSRandall Stewart return; 725f8829a4aSRandall Stewart } 726f8829a4aSRandall Stewart m_result = NULL; 727f8829a4aSRandall Stewart 728f8829a4aSRandall Stewart if (param_length > sizeof(aparam_buf)) { 729ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length); 730f8829a4aSRandall Stewart sctp_m_freem(m_ack); 731f8829a4aSRandall Stewart return; 732f8829a4aSRandall Stewart } 733f8829a4aSRandall Stewart if (param_length <= sizeof(struct sctp_paramhdr)) { 734ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length); 735f8829a4aSRandall Stewart sctp_m_freem(m_ack); 736f8829a4aSRandall Stewart } 737f8829a4aSRandall Stewart /* get the entire parameter */ 738f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf); 739f8829a4aSRandall Stewart if (aph == NULL) { 740ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: couldn't get entire param\n"); 741f8829a4aSRandall Stewart sctp_m_freem(m_ack); 742f8829a4aSRandall Stewart return; 743f8829a4aSRandall Stewart } 744f8829a4aSRandall Stewart switch (param_type) { 745f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 746f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 747f8829a4aSRandall Stewart m_result = sctp_process_asconf_add_ip(m, aph, stcb, 748f8829a4aSRandall Stewart error); 749f8829a4aSRandall Stewart break; 750f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 751f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 752f8829a4aSRandall Stewart m_result = sctp_process_asconf_delete_ip(m, aph, stcb, 753f8829a4aSRandall Stewart error); 754f8829a4aSRandall Stewart break; 755f8829a4aSRandall Stewart case SCTP_ERROR_CAUSE_IND: 756f8829a4aSRandall Stewart /* not valid in an ASCONF chunk */ 757f8829a4aSRandall Stewart break; 758f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 759f8829a4aSRandall Stewart asoc->peer_supports_asconf = 1; 760f8829a4aSRandall Stewart m_result = sctp_process_asconf_set_primary(m, aph, 761f8829a4aSRandall Stewart stcb, error); 762f8829a4aSRandall Stewart break; 763830d754dSRandall Stewart case SCTP_NAT_VTAGS: 764830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: sees a NAT VTAG state parameter\n"); 765830d754dSRandall Stewart break; 766f8829a4aSRandall Stewart case SCTP_SUCCESS_REPORT: 767f8829a4aSRandall Stewart /* not valid in an ASCONF chunk */ 768f8829a4aSRandall Stewart break; 769f8829a4aSRandall Stewart case SCTP_ULP_ADAPTATION: 770f8829a4aSRandall Stewart /* FIX */ 771f8829a4aSRandall Stewart break; 772f8829a4aSRandall Stewart default: 773f8829a4aSRandall Stewart if ((param_type & 0x8000) == 0) { 774f8829a4aSRandall Stewart /* Been told to STOP at this param */ 775f8829a4aSRandall Stewart asconf_limit = offset; 776f8829a4aSRandall Stewart /* 777f8829a4aSRandall Stewart * FIX FIX - We need to call 778f8829a4aSRandall Stewart * sctp_arethere_unrecognized_parameters() 779f8829a4aSRandall Stewart * to get a operr and send it for any 780f8829a4aSRandall Stewart * param's with the 0x4000 bit set OR do it 781f8829a4aSRandall Stewart * here ourselves... note we still must STOP 782f8829a4aSRandall Stewart * if the 0x8000 bit is clear. 783f8829a4aSRandall Stewart */ 784f8829a4aSRandall Stewart } 785f8829a4aSRandall Stewart /* unknown/invalid param type */ 786f8829a4aSRandall Stewart break; 787f8829a4aSRandall Stewart } /* switch */ 788f8829a4aSRandall Stewart 789f8829a4aSRandall Stewart /* add any (error) result to the reply mbuf chain */ 790f8829a4aSRandall Stewart if (m_result != NULL) { 791139bc87fSRandall Stewart SCTP_BUF_NEXT(m_tail) = m_result; 792f8829a4aSRandall Stewart m_tail = m_result; 793f8829a4aSRandall Stewart /* update lengths, make sure it's aligned too */ 794139bc87fSRandall Stewart SCTP_BUF_LEN(m_result) = SCTP_SIZE32(SCTP_BUF_LEN(m_result)); 795139bc87fSRandall Stewart ack_cp->ch.chunk_length += SCTP_BUF_LEN(m_result); 796f8829a4aSRandall Stewart /* set flag to force success reports */ 797f8829a4aSRandall Stewart error = 1; 798f8829a4aSRandall Stewart } 799f8829a4aSRandall Stewart offset += SCTP_SIZE32(param_length); 800f8829a4aSRandall Stewart /* update remaining ASCONF message length to process */ 801f8829a4aSRandall Stewart if (offset >= asconf_limit) { 802f8829a4aSRandall Stewart /* no more data in the mbuf chain */ 803f8829a4aSRandall Stewart break; 804f8829a4aSRandall Stewart } 805f8829a4aSRandall Stewart /* get pointer to next asconf param */ 806f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, 807f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr), 808f8829a4aSRandall Stewart (uint8_t *) & aparam_buf); 809f8829a4aSRandall Stewart if (aph == NULL) { 810f8829a4aSRandall Stewart /* can't get an asconf paramhdr */ 811ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: can't get asconf param hdr!\n"); 812f8829a4aSRandall Stewart /* FIX ME - add error here... */ 813f8829a4aSRandall Stewart } 814ad81507eSRandall Stewart } 815f8829a4aSRandall Stewart 816f8829a4aSRandall Stewart send_reply: 817f8829a4aSRandall Stewart ack_cp->ch.chunk_length = htons(ack_cp->ch.chunk_length); 818f8829a4aSRandall Stewart /* save the ASCONF-ACK reply */ 819b3f1ea41SRandall Stewart ack = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asconf_ack), 8202afb3e84SRandall Stewart struct sctp_asconf_ack); 8212afb3e84SRandall Stewart if (ack == NULL) { 8222afb3e84SRandall Stewart sctp_m_freem(m_ack); 8232afb3e84SRandall Stewart return; 8242afb3e84SRandall Stewart } 8252afb3e84SRandall Stewart ack->serial_number = serial_num; 8262afb3e84SRandall Stewart ack->last_sent_to = NULL; 8272afb3e84SRandall Stewart ack->data = m_ack; 828fc066a61SMichael Tuexen ack->len = 0; 8292afb3e84SRandall Stewart n = m_ack; 8302afb3e84SRandall Stewart while (n) { 8312afb3e84SRandall Stewart ack->len += SCTP_BUF_LEN(n); 8322afb3e84SRandall Stewart n = SCTP_BUF_NEXT(n); 8332afb3e84SRandall Stewart } 8342afb3e84SRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_ack_sent, ack, next); 835f8829a4aSRandall Stewart 836f8829a4aSRandall Stewart /* see if last_control_chunk_from is set properly (use IP src addr) */ 837f8829a4aSRandall Stewart if (stcb->asoc.last_control_chunk_from == NULL) { 838f8829a4aSRandall Stewart /* 839f8829a4aSRandall Stewart * this could happen if the source address was just newly 840f8829a4aSRandall Stewart * added 841f8829a4aSRandall Stewart */ 842f8829a4aSRandall Stewart struct ip *iph; 843f8829a4aSRandall Stewart struct sctphdr *sh; 844f8829a4aSRandall Stewart struct sockaddr_storage from_store; 845f8829a4aSRandall Stewart struct sockaddr *from = (struct sockaddr *)&from_store; 846f8829a4aSRandall Stewart 847ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: looking up net for IP source address\n"); 848f8829a4aSRandall Stewart /* pullup already done, IP options already stripped */ 849f8829a4aSRandall Stewart iph = mtod(m, struct ip *); 850f8829a4aSRandall Stewart sh = (struct sctphdr *)((caddr_t)iph + sizeof(*iph)); 8515e2c2d87SRandall Stewart switch (iph->ip_v) { 8525e2c2d87SRandall Stewart case IPVERSION: 8535e2c2d87SRandall Stewart { 854f8829a4aSRandall Stewart struct sockaddr_in *from4; 855f8829a4aSRandall Stewart 856f8829a4aSRandall Stewart from4 = (struct sockaddr_in *)&from_store; 857f8829a4aSRandall Stewart bzero(from4, sizeof(*from4)); 858f8829a4aSRandall Stewart from4->sin_family = AF_INET; 859f8829a4aSRandall Stewart from4->sin_len = sizeof(struct sockaddr_in); 860f8829a4aSRandall Stewart from4->sin_addr.s_addr = iph->ip_src.s_addr; 861f8829a4aSRandall Stewart from4->sin_port = sh->src_port; 8625e2c2d87SRandall Stewart break; 8635e2c2d87SRandall Stewart } 8645e2c2d87SRandall Stewart #ifdef INET6 8655e2c2d87SRandall Stewart case IPV6_VERSION >> 4: 8665e2c2d87SRandall Stewart { 867f8829a4aSRandall Stewart struct ip6_hdr *ip6; 868f8829a4aSRandall Stewart struct sockaddr_in6 *from6; 869f8829a4aSRandall Stewart 870f8829a4aSRandall Stewart ip6 = mtod(m, struct ip6_hdr *); 871f8829a4aSRandall Stewart from6 = (struct sockaddr_in6 *)&from_store; 872f8829a4aSRandall Stewart bzero(from6, sizeof(*from6)); 873f8829a4aSRandall Stewart from6->sin6_family = AF_INET6; 874f8829a4aSRandall Stewart from6->sin6_len = sizeof(struct sockaddr_in6); 875f8829a4aSRandall Stewart from6->sin6_addr = ip6->ip6_src; 876f8829a4aSRandall Stewart from6->sin6_port = sh->src_port; 8775e2c2d87SRandall Stewart /* 8785e2c2d87SRandall Stewart * Get the scopes in properly to the sin6 8795e2c2d87SRandall Stewart * addr's 8805e2c2d87SRandall Stewart */ 881f8829a4aSRandall Stewart /* we probably don't need these operations */ 882f8829a4aSRandall Stewart (void)sa6_recoverscope(from6); 883fc14de76SRandall Stewart sa6_embedscope(from6, 884482444b4SRandall Stewart MODULE_GLOBAL(ip6_use_defzone)); 885fc14de76SRandall Stewart 8865e2c2d87SRandall Stewart break; 8875e2c2d87SRandall Stewart } 8885e2c2d87SRandall Stewart #endif 8895e2c2d87SRandall Stewart default: 890f8829a4aSRandall Stewart /* unknown address type */ 891f8829a4aSRandall Stewart from = NULL; 892f8829a4aSRandall Stewart } 893f8829a4aSRandall Stewart if (from != NULL) { 894ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Looking for IP source: "); 895ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, from); 896f8829a4aSRandall Stewart /* look up the from address */ 897f8829a4aSRandall Stewart stcb->asoc.last_control_chunk_from = sctp_findnet(stcb, from); 898f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 899ad81507eSRandall Stewart if (stcb->asoc.last_control_chunk_from == NULL) 900ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: IP source address not found?!\n"); 901ad81507eSRandall Stewart #endif 902f8829a4aSRandall Stewart } 903f8829a4aSRandall Stewart } 904f8829a4aSRandall Stewart } 905f8829a4aSRandall Stewart 906f8829a4aSRandall Stewart /* 907f8829a4aSRandall Stewart * does the address match? returns 0 if not, 1 if so 908f8829a4aSRandall Stewart */ 909f8829a4aSRandall Stewart static uint32_t 910f8829a4aSRandall Stewart sctp_asconf_addr_match(struct sctp_asconf_addr *aa, struct sockaddr *sa) 911f8829a4aSRandall Stewart { 912f8829a4aSRandall Stewart #ifdef INET6 913f8829a4aSRandall Stewart if (sa->sa_family == AF_INET6) { 914f8829a4aSRandall Stewart /* IPv6 sa address */ 915f8829a4aSRandall Stewart /* XXX scopeid */ 916f8829a4aSRandall Stewart struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa; 917f8829a4aSRandall Stewart 918f8829a4aSRandall Stewart if ((aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) && 919f8829a4aSRandall Stewart (memcmp(&aa->ap.addrp.addr, &sin6->sin6_addr, 920f8829a4aSRandall Stewart sizeof(struct in6_addr)) == 0)) { 921f8829a4aSRandall Stewart return (1); 922f8829a4aSRandall Stewart } 923f8829a4aSRandall Stewart } else 924f8829a4aSRandall Stewart #endif /* INET6 */ 925f8829a4aSRandall Stewart if (sa->sa_family == AF_INET) { 926f8829a4aSRandall Stewart /* IPv4 sa address */ 927f8829a4aSRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 928f8829a4aSRandall Stewart 929f8829a4aSRandall Stewart if ((aa->ap.addrp.ph.param_type == SCTP_IPV4_ADDRESS) && 930f8829a4aSRandall Stewart (memcmp(&aa->ap.addrp.addr, &sin->sin_addr, 931f8829a4aSRandall Stewart sizeof(struct in_addr)) == 0)) { 932f8829a4aSRandall Stewart return (1); 933f8829a4aSRandall Stewart } 934f8829a4aSRandall Stewart } 935f8829a4aSRandall Stewart return (0); 936f8829a4aSRandall Stewart } 937f8829a4aSRandall Stewart 938f8829a4aSRandall Stewart /* 939c54a18d2SRandall Stewart * does the address match? returns 0 if not, 1 if so 940c54a18d2SRandall Stewart */ 941c54a18d2SRandall Stewart static uint32_t 942c54a18d2SRandall Stewart sctp_addr_match( 943c54a18d2SRandall Stewart struct sctp_ipv6addr_param *v6addr, 944c54a18d2SRandall Stewart struct sockaddr *sa) 945c54a18d2SRandall Stewart { 946c54a18d2SRandall Stewart uint16_t param_type, param_length; 947c54a18d2SRandall Stewart struct sctp_ipv4addr_param *v4addr = (struct sctp_ipv4addr_param *)v6addr; 948c54a18d2SRandall Stewart 949d6af161aSRandall Stewart #ifdef INET6 950c54a18d2SRandall Stewart if (sa->sa_family == AF_INET6) { 951c54a18d2SRandall Stewart /* IPv6 sa address */ 952c54a18d2SRandall Stewart /* XXX scopeid */ 953c54a18d2SRandall Stewart struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa; 954c54a18d2SRandall Stewart 955c54a18d2SRandall Stewart param_type = ntohs(v6addr->ph.param_type); 956c54a18d2SRandall Stewart param_length = ntohs(v6addr->ph.param_length); 957c54a18d2SRandall Stewart 958c54a18d2SRandall Stewart if ((param_type == SCTP_IPV6_ADDRESS) && 959c54a18d2SRandall Stewart param_length == sizeof(struct sctp_ipv6addr_param) && 960c54a18d2SRandall Stewart (memcmp(&v6addr->addr, &sin6->sin6_addr, 961c54a18d2SRandall Stewart sizeof(struct in6_addr)) == 0)) { 962c54a18d2SRandall Stewart return (1); 963c54a18d2SRandall Stewart } 964d6af161aSRandall Stewart } 965d6af161aSRandall Stewart #endif 966c54a18d2SRandall Stewart if (sa->sa_family == AF_INET) { 967c54a18d2SRandall Stewart /* IPv4 sa address */ 968c54a18d2SRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 969c54a18d2SRandall Stewart 970c54a18d2SRandall Stewart param_type = ntohs(v4addr->ph.param_type); 971c54a18d2SRandall Stewart param_length = ntohs(v4addr->ph.param_length); 972c54a18d2SRandall Stewart 973c54a18d2SRandall Stewart if ((param_type == SCTP_IPV4_ADDRESS) && 974c54a18d2SRandall Stewart param_length == sizeof(struct sctp_ipv4addr_param) && 975c54a18d2SRandall Stewart (memcmp(&v4addr->addr, &sin->sin_addr, 976c54a18d2SRandall Stewart sizeof(struct in_addr)) == 0)) { 977c54a18d2SRandall Stewart return (1); 978c54a18d2SRandall Stewart } 979c54a18d2SRandall Stewart } 980c54a18d2SRandall Stewart return (0); 981c54a18d2SRandall Stewart } 982c54a18d2SRandall Stewart 983c54a18d2SRandall Stewart /* 984f8829a4aSRandall Stewart * Cleanup for non-responded/OP ERR'd ASCONF 985f8829a4aSRandall Stewart */ 986f8829a4aSRandall Stewart void 987f8829a4aSRandall Stewart sctp_asconf_cleanup(struct sctp_tcb *stcb, struct sctp_nets *net) 988f8829a4aSRandall Stewart { 989f8829a4aSRandall Stewart /* mark peer as ASCONF incapable */ 990f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 991f8829a4aSRandall Stewart /* 992f8829a4aSRandall Stewart * clear out any existing asconfs going out 993f8829a4aSRandall Stewart */ 9943c503c28SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net, 9953c503c28SRandall Stewart SCTP_FROM_SCTP_ASCONF + SCTP_LOC_2); 996c54a18d2SRandall Stewart stcb->asoc.asconf_seq_out_acked = stcb->asoc.asconf_seq_out; 997f8829a4aSRandall Stewart /* remove the old ASCONF on our outbound queue */ 998f8829a4aSRandall Stewart sctp_toss_old_asconf(stcb); 999f8829a4aSRandall Stewart } 1000f8829a4aSRandall Stewart 1001f8829a4aSRandall Stewart /* 10022dad8a55SRandall Stewart * cleanup any cached source addresses that may be topologically 10032dad8a55SRandall Stewart * incorrect after a new address has been added to this interface. 10042dad8a55SRandall Stewart */ 10052dad8a55SRandall Stewart static void 10062dad8a55SRandall Stewart sctp_asconf_nets_cleanup(struct sctp_tcb *stcb, struct sctp_ifn *ifn) 10072dad8a55SRandall Stewart { 10082dad8a55SRandall Stewart struct sctp_nets *net; 10092dad8a55SRandall Stewart 10102dad8a55SRandall Stewart /* 10112dad8a55SRandall Stewart * Ideally, we want to only clear cached routes and source addresses 10122dad8a55SRandall Stewart * that are topologically incorrect. But since there is no easy way 10132dad8a55SRandall Stewart * to know whether the newly added address on the ifn would cause a 10142dad8a55SRandall Stewart * routing change (i.e. a new egress interface would be chosen) 10152dad8a55SRandall Stewart * without doing a new routing lookup and source address selection, 10162dad8a55SRandall Stewart * we will (for now) just flush any cached route using a different 10172dad8a55SRandall Stewart * ifn (and cached source addrs) and let output re-choose them 10182dad8a55SRandall Stewart * during the next send on that net. 10192dad8a55SRandall Stewart */ 10202dad8a55SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 10212dad8a55SRandall Stewart /* 10222dad8a55SRandall Stewart * clear any cached route (and cached source address) if the 10232dad8a55SRandall Stewart * route's interface is NOT the same as the address change. 10242dad8a55SRandall Stewart * If it's the same interface, just clear the cached source 10252dad8a55SRandall Stewart * address. 10262dad8a55SRandall Stewart */ 10272dad8a55SRandall Stewart if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro) && 1028fc066a61SMichael Tuexen ((ifn == NULL) || 1029fc066a61SMichael Tuexen (SCTP_GET_IF_INDEX_FROM_ROUTE(&net->ro) != ifn->ifn_index))) { 10302dad8a55SRandall Stewart /* clear any cached route */ 10312dad8a55SRandall Stewart RTFREE(net->ro.ro_rt); 10322dad8a55SRandall Stewart net->ro.ro_rt = NULL; 10332dad8a55SRandall Stewart } 10342dad8a55SRandall Stewart /* clear any cached source address */ 10352dad8a55SRandall Stewart if (net->src_addr_selected) { 10362dad8a55SRandall Stewart sctp_free_ifa(net->ro._s_addr); 10372dad8a55SRandall Stewart net->ro._s_addr = NULL; 10382dad8a55SRandall Stewart net->src_addr_selected = 0; 10392dad8a55SRandall Stewart } 10402dad8a55SRandall Stewart } 10412dad8a55SRandall Stewart } 10422dad8a55SRandall Stewart 1043851b7298SRandall Stewart 1044851b7298SRandall Stewart void 1045851b7298SRandall Stewart sctp_assoc_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *dstnet) 1046851b7298SRandall Stewart { 1047851b7298SRandall Stewart int error; 1048851b7298SRandall Stewart 1049851b7298SRandall Stewart if (dstnet->dest_state & SCTP_ADDR_UNCONFIRMED) { 1050851b7298SRandall Stewart return; 1051851b7298SRandall Stewart } 1052851b7298SRandall Stewart if (stcb->asoc.deleted_primary == NULL) { 1053851b7298SRandall Stewart return; 1054851b7298SRandall Stewart } 1055851b7298SRandall Stewart if (!TAILQ_EMPTY(&stcb->asoc.sent_queue)) { 1056b27a6b7dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "assoc_immediate_retrans: Deleted primary is "); 1057851b7298SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa); 1058851b7298SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "Current Primary is "); 1059851b7298SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.primary_destination->ro._l_addr.sa); 1060851b7298SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, 1061851b7298SRandall Stewart stcb->asoc.deleted_primary, 1062851b7298SRandall Stewart SCTP_FROM_SCTP_TIMER + SCTP_LOC_8); 1063851b7298SRandall Stewart stcb->asoc.num_send_timers_up--; 1064851b7298SRandall Stewart if (stcb->asoc.num_send_timers_up < 0) { 1065851b7298SRandall Stewart stcb->asoc.num_send_timers_up = 0; 1066851b7298SRandall Stewart } 1067851b7298SRandall Stewart SCTP_TCB_LOCK_ASSERT(stcb); 1068851b7298SRandall Stewart error = sctp_t3rxt_timer(stcb->sctp_ep, stcb, 1069851b7298SRandall Stewart stcb->asoc.deleted_primary); 1070851b7298SRandall Stewart if (error) { 1071851b7298SRandall Stewart SCTP_INP_DECR_REF(stcb->sctp_ep); 1072851b7298SRandall Stewart return; 1073851b7298SRandall Stewart } 1074851b7298SRandall Stewart SCTP_TCB_LOCK_ASSERT(stcb); 1075851b7298SRandall Stewart #ifdef SCTP_AUDITING_ENABLED 1076f31e6c7fSMichael Tuexen sctp_auditing(4, stcb->sctp_ep, stcb, stcb->asoc.deleted_primary); 1077851b7298SRandall Stewart #endif 1078851b7298SRandall Stewart sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1079851b7298SRandall Stewart if ((stcb->asoc.num_send_timers_up == 0) && 1080851b7298SRandall Stewart (stcb->asoc.sent_queue_cnt > 0)) { 1081851b7298SRandall Stewart struct sctp_tmit_chunk *chk; 1082851b7298SRandall Stewart 1083851b7298SRandall Stewart chk = TAILQ_FIRST(&stcb->asoc.sent_queue); 1084851b7298SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, 1085851b7298SRandall Stewart stcb, chk->whoTo); 1086851b7298SRandall Stewart } 1087851b7298SRandall Stewart } 1088851b7298SRandall Stewart return; 1089851b7298SRandall Stewart } 1090851b7298SRandall Stewart 10912afb3e84SRandall Stewart static int 10922afb3e84SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *, struct sctp_ifa *, uint16_t); 10932afb3e84SRandall Stewart 1094851b7298SRandall Stewart void 10952afb3e84SRandall Stewart sctp_net_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *net) 10962afb3e84SRandall Stewart { 10972afb3e84SRandall Stewart struct sctp_tmit_chunk *chk; 10982afb3e84SRandall Stewart 1099b27a6b7dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "net_immediate_retrans: RTO is %d\n", net->RTO); 11002afb3e84SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, net, 11012afb3e84SRandall Stewart SCTP_FROM_SCTP_TIMER + SCTP_LOC_5); 11022afb3e84SRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net); 11032afb3e84SRandall Stewart net->error_count = 0; 11042afb3e84SRandall Stewart TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) { 11052afb3e84SRandall Stewart if (chk->whoTo == net) { 1106851b7298SRandall Stewart if (chk->sent < SCTP_DATAGRAM_RESEND) { 11072afb3e84SRandall Stewart chk->sent = SCTP_DATAGRAM_RESEND; 11082afb3e84SRandall Stewart sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1109d55b0b1bSRandall Stewart sctp_flight_size_decrease(chk); 1110d55b0b1bSRandall Stewart sctp_total_flight_decrease(stcb, chk); 1111d55b0b1bSRandall Stewart net->marked_retrans++; 1112d55b0b1bSRandall Stewart stcb->asoc.marked_retrans++; 11132afb3e84SRandall Stewart } 11142afb3e84SRandall Stewart } 11152afb3e84SRandall Stewart } 1116d55b0b1bSRandall Stewart if (net->marked_retrans) { 1117d55b0b1bSRandall Stewart sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1118d55b0b1bSRandall Stewart } 1119851b7298SRandall Stewart } 11202afb3e84SRandall Stewart 11212afb3e84SRandall Stewart static void 11222afb3e84SRandall Stewart sctp_path_check_and_react(struct sctp_tcb *stcb, struct sctp_ifa *newifa) 11232afb3e84SRandall Stewart { 11242afb3e84SRandall Stewart struct sctp_nets *net; 11252afb3e84SRandall Stewart int addrnum, changed; 11262afb3e84SRandall Stewart 11272afb3e84SRandall Stewart /* 11282afb3e84SRandall Stewart * If number of local valid addresses is 1, the valid address is 11292afb3e84SRandall Stewart * probably newly added address. Several valid addresses in this 11302afb3e84SRandall Stewart * association. A source address may not be changed. Additionally, 11312afb3e84SRandall Stewart * they can be configured on a same interface as "alias" addresses. 11322afb3e84SRandall Stewart * (by micchie) 11332afb3e84SRandall Stewart */ 11342afb3e84SRandall Stewart addrnum = sctp_local_addr_count(stcb); 11352afb3e84SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "p_check_react(): %d local addresses\n", 11362afb3e84SRandall Stewart addrnum); 11372afb3e84SRandall Stewart if (addrnum == 1) { 11382afb3e84SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 11392afb3e84SRandall Stewart /* clear any cached route and source address */ 11402afb3e84SRandall Stewart if (net->ro.ro_rt) { 11412afb3e84SRandall Stewart RTFREE(net->ro.ro_rt); 11422afb3e84SRandall Stewart net->ro.ro_rt = NULL; 11432afb3e84SRandall Stewart } 11442afb3e84SRandall Stewart if (net->src_addr_selected) { 11452afb3e84SRandall Stewart sctp_free_ifa(net->ro._s_addr); 11462afb3e84SRandall Stewart net->ro._s_addr = NULL; 11472afb3e84SRandall Stewart net->src_addr_selected = 0; 11482afb3e84SRandall Stewart } 11492afb3e84SRandall Stewart /* Retransmit unacknowledged DATA chunks immediately */ 11502afb3e84SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 11512afb3e84SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 11522afb3e84SRandall Stewart sctp_net_immediate_retrans(stcb, net); 11532afb3e84SRandall Stewart } 11542afb3e84SRandall Stewart /* also, SET PRIMARY is maybe already sent */ 11552afb3e84SRandall Stewart } 11562afb3e84SRandall Stewart return; 11572afb3e84SRandall Stewart } 11582afb3e84SRandall Stewart /* Multiple local addresses exsist in the association. */ 11592afb3e84SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 11602afb3e84SRandall Stewart /* clear any cached route and source address */ 11612afb3e84SRandall Stewart if (net->ro.ro_rt) { 11622afb3e84SRandall Stewart RTFREE(net->ro.ro_rt); 11632afb3e84SRandall Stewart net->ro.ro_rt = NULL; 11642afb3e84SRandall Stewart } 11652afb3e84SRandall Stewart if (net->src_addr_selected) { 11662afb3e84SRandall Stewart sctp_free_ifa(net->ro._s_addr); 11672afb3e84SRandall Stewart net->ro._s_addr = NULL; 11682afb3e84SRandall Stewart net->src_addr_selected = 0; 11692afb3e84SRandall Stewart } 11702afb3e84SRandall Stewart /* 11712afb3e84SRandall Stewart * Check if the nexthop is corresponding to the new address. 11722afb3e84SRandall Stewart * If the new address is corresponding to the current 11732afb3e84SRandall Stewart * nexthop, the path will be changed. If the new address is 11742afb3e84SRandall Stewart * NOT corresponding to the current nexthop, the path will 11752afb3e84SRandall Stewart * not be changed. 11762afb3e84SRandall Stewart */ 11772afb3e84SRandall Stewart SCTP_RTALLOC((sctp_route_t *) & net->ro, 11782afb3e84SRandall Stewart stcb->sctp_ep->def_vrf_id); 11792afb3e84SRandall Stewart if (net->ro.ro_rt == NULL) 11802afb3e84SRandall Stewart continue; 11812afb3e84SRandall Stewart 11822afb3e84SRandall Stewart changed = 0; 11832afb3e84SRandall Stewart if (net->ro._l_addr.sa.sa_family == AF_INET) { 11842afb3e84SRandall Stewart if (sctp_v4src_match_nexthop(newifa, (sctp_route_t *) & net->ro)) 11852afb3e84SRandall Stewart changed = 1; 11862afb3e84SRandall Stewart } 11875e2c2d87SRandall Stewart #ifdef INET6 11882afb3e84SRandall Stewart if (net->ro._l_addr.sa.sa_family == AF_INET6) { 11892afb3e84SRandall Stewart if (sctp_v6src_match_nexthop( 11902afb3e84SRandall Stewart &newifa->address.sin6, (sctp_route_t *) & net->ro)) 11912afb3e84SRandall Stewart changed = 1; 11922afb3e84SRandall Stewart } 11935e2c2d87SRandall Stewart #endif 11942afb3e84SRandall Stewart /* 11952afb3e84SRandall Stewart * if the newly added address does not relate routing 11962afb3e84SRandall Stewart * information, we skip. 11972afb3e84SRandall Stewart */ 11982afb3e84SRandall Stewart if (changed == 0) 11992afb3e84SRandall Stewart continue; 12002afb3e84SRandall Stewart /* Retransmit unacknowledged DATA chunks immediately */ 12012afb3e84SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 12022afb3e84SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 12032afb3e84SRandall Stewart sctp_net_immediate_retrans(stcb, net); 12042afb3e84SRandall Stewart } 12052afb3e84SRandall Stewart /* Send SET PRIMARY for this new address */ 12062afb3e84SRandall Stewart if (net == stcb->asoc.primary_destination) { 12072afb3e84SRandall Stewart (void)sctp_asconf_queue_mgmt(stcb, newifa, 12082afb3e84SRandall Stewart SCTP_SET_PRIM_ADDR); 12092afb3e84SRandall Stewart } 12102afb3e84SRandall Stewart } 12112afb3e84SRandall Stewart } 12122afb3e84SRandall Stewart 12132dad8a55SRandall Stewart /* 1214f8829a4aSRandall Stewart * process an ADD/DELETE IP ack from peer. 12151b649582SRandall Stewart * addr: corresponding sctp_ifa to the address being added/deleted. 1216f8829a4aSRandall Stewart * type: SCTP_ADD_IP_ADDRESS or SCTP_DEL_IP_ADDRESS. 1217f8829a4aSRandall Stewart * flag: 1=success, 0=failure. 1218f8829a4aSRandall Stewart */ 1219f8829a4aSRandall Stewart static void 122042551e99SRandall Stewart sctp_asconf_addr_mgmt_ack(struct sctp_tcb *stcb, struct sctp_ifa *addr, 1221f8829a4aSRandall Stewart uint16_t type, uint32_t flag) 1222f8829a4aSRandall Stewart { 1223f8829a4aSRandall Stewart /* 1224f8829a4aSRandall Stewart * do the necessary asoc list work- if we get a failure indication, 12252dad8a55SRandall Stewart * leave the address on the assoc's restricted list. If we get a 12262dad8a55SRandall Stewart * success indication, remove the address from the restricted list. 1227f8829a4aSRandall Stewart */ 1228f8829a4aSRandall Stewart /* 1229f8829a4aSRandall Stewart * Note: this will only occur for ADD_IP_ADDRESS, since 1230f8829a4aSRandall Stewart * DEL_IP_ADDRESS is never actually added to the list... 1231f8829a4aSRandall Stewart */ 1232f8829a4aSRandall Stewart if (flag) { 12331b649582SRandall Stewart /* success case, so remove from the restricted list */ 12341b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, addr); 12352dad8a55SRandall Stewart 12363232788eSRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 1237d55b0b1bSRandall Stewart SCTP_MOBILITY_BASE) || 1238d55b0b1bSRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 1239d55b0b1bSRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 12402afb3e84SRandall Stewart sctp_path_check_and_react(stcb, addr); 12412afb3e84SRandall Stewart return; 12422afb3e84SRandall Stewart } 12433232788eSRandall Stewart /* clear any cached/topologically incorrect source addresses */ 12442dad8a55SRandall Stewart sctp_asconf_nets_cleanup(stcb, addr->ifn_p); 1245f8829a4aSRandall Stewart } 1246f8829a4aSRandall Stewart /* else, leave it on the list */ 1247f8829a4aSRandall Stewart } 1248f8829a4aSRandall Stewart 1249f8829a4aSRandall Stewart /* 12501b649582SRandall Stewart * add an asconf add/delete/set primary IP address parameter to the queue. 1251f8829a4aSRandall Stewart * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR. 12521b649582SRandall Stewart * returns 0 if queued, -1 if not queued/removed. 12531b649582SRandall Stewart * NOTE: if adding, but a delete for the same address is already scheduled 12541b649582SRandall Stewart * (and not yet sent out), simply remove it from queue. Same for deleting 12551b649582SRandall Stewart * an address already scheduled for add. If a duplicate operation is found, 12561b649582SRandall Stewart * ignore the new one. 1257f8829a4aSRandall Stewart */ 12581b649582SRandall Stewart static int 12591b649582SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *stcb, struct sctp_ifa *ifa, 126018e198d3SRandall Stewart uint16_t type) 1261f8829a4aSRandall Stewart { 1262f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 1263f8829a4aSRandall Stewart struct sockaddr *sa; 1264f8829a4aSRandall Stewart 1265f8829a4aSRandall Stewart /* make sure the request isn't already in the queue */ 12664a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1267f8829a4aSRandall Stewart /* address match? */ 126842551e99SRandall Stewart if (sctp_asconf_addr_match(aa, &ifa->address.sa) == 0) 1269f8829a4aSRandall Stewart continue; 1270c54a18d2SRandall Stewart /* 1271c54a18d2SRandall Stewart * is the request already in queue but not sent? pass the 1272c54a18d2SRandall Stewart * request already sent in order to resolve the following 1273c54a18d2SRandall Stewart * case: 1. arrival of ADD, then sent 2. arrival of DEL. we 1274c54a18d2SRandall Stewart * can't remove the ADD request already sent 3. arrival of 1275c54a18d2SRandall Stewart * ADD 1276c54a18d2SRandall Stewart */ 1277c54a18d2SRandall Stewart if (aa->ap.aph.ph.param_type == type && aa->sent == 0) { 1278f8829a4aSRandall Stewart return (-1); 1279f8829a4aSRandall Stewart } 1280f8829a4aSRandall Stewart /* is the negative request already in queue, and not sent */ 12811b649582SRandall Stewart if ((aa->sent == 0) && (type == SCTP_ADD_IP_ADDRESS) && 12821b649582SRandall Stewart (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS)) { 1283f8829a4aSRandall Stewart /* add requested, delete already queued */ 1284f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 12851b649582SRandall Stewart /* remove the ifa from the restricted list */ 12861b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, ifa); 12871b649582SRandall Stewart /* free the asconf param */ 1288207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 12891b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: add removes queued entry\n"); 12901b649582SRandall Stewart return (-1); 12911b649582SRandall Stewart } 12921b649582SRandall Stewart if ((aa->sent == 0) && (type == SCTP_DEL_IP_ADDRESS) && 12931b649582SRandall Stewart (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS)) { 12941b649582SRandall Stewart /* delete requested, add already queued */ 12951b649582SRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 12961b649582SRandall Stewart /* remove the aa->ifa from the restricted list */ 12971b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, aa->ifa); 12981b649582SRandall Stewart /* free the asconf param */ 12991b649582SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 13001b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: delete removes queued entry\n"); 1301f8829a4aSRandall Stewart return (-1); 1302f8829a4aSRandall Stewart } 1303f8829a4aSRandall Stewart } /* for each aa */ 1304f8829a4aSRandall Stewart 1305f8829a4aSRandall Stewart /* adding new request to the queue */ 13061b649582SRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 13071b649582SRandall Stewart SCTP_M_ASC_ADDR); 1308f8829a4aSRandall Stewart if (aa == NULL) { 1309f8829a4aSRandall Stewart /* didn't get memory */ 13101b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "asconf_queue_mgmt: failed to get memory!\n"); 1311f8829a4aSRandall Stewart return (-1); 1312f8829a4aSRandall Stewart } 1313830d754dSRandall Stewart aa->special_del = 0; 1314f8829a4aSRandall Stewart /* fill in asconf address parameter fields */ 1315f8829a4aSRandall Stewart /* top level elements are "networked" during send */ 1316f8829a4aSRandall Stewart aa->ap.aph.ph.param_type = type; 1317f8829a4aSRandall Stewart aa->ifa = ifa; 1318bff64a4dSRandall Stewart atomic_add_int(&ifa->refcount, 1); 1319f8829a4aSRandall Stewart /* correlation_id filled in during send routine later... */ 132042551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 1321f8829a4aSRandall Stewart /* IPv6 address */ 1322f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 1323f8829a4aSRandall Stewart 132442551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sa; 1325f8829a4aSRandall Stewart sa = (struct sockaddr *)sin6; 1326f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 1327f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param)); 13281b649582SRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + 1329f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param); 1330f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr, 1331f8829a4aSRandall Stewart sizeof(struct in6_addr)); 133242551e99SRandall Stewart } else if (ifa->address.sa.sa_family == AF_INET) { 1333f8829a4aSRandall Stewart /* IPv4 address */ 13341b649582SRandall Stewart struct sockaddr_in *sin; 1335f8829a4aSRandall Stewart 13361b649582SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 1337f8829a4aSRandall Stewart sa = (struct sockaddr *)sin; 1338f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 1339f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param)); 13401b649582SRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + 1341f8829a4aSRandall Stewart sizeof(struct sctp_ipv4addr_param); 1342f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin->sin_addr, 1343f8829a4aSRandall Stewart sizeof(struct in_addr)); 1344f8829a4aSRandall Stewart } else { 1345f8829a4aSRandall Stewart /* invalid family! */ 1346207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 13473232788eSRandall Stewart sctp_free_ifa(ifa); 1348f8829a4aSRandall Stewart return (-1); 1349f8829a4aSRandall Stewart } 1350f8829a4aSRandall Stewart aa->sent = 0; /* clear sent flag */ 1351f8829a4aSRandall Stewart 1352f8829a4aSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 1353f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 1354*dec0177dSRandall Stewart if (SCTP_BASE_SYSCTL(sctp_debug_on) & SCTP_DEBUG_ASCONF2) { 1355c54a18d2SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 1356c54a18d2SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: inserted asconf ADD_IP_ADDRESS: "); 1357c54a18d2SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1358c54a18d2SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 13591b649582SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: appended asconf DEL_IP_ADDRESS: "); 1360ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1361f8829a4aSRandall Stewart } else { 13621b649582SRandall Stewart SCTP_PRINTF("asconf_queue_mgmt: appended asconf SET_PRIM_ADDR: "); 1363ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 1364f8829a4aSRandall Stewart } 1365f8829a4aSRandall Stewart } 1366ad81507eSRandall Stewart #endif 1367f8829a4aSRandall Stewart 1368f8829a4aSRandall Stewart return (0); 1369f8829a4aSRandall Stewart } 1370f8829a4aSRandall Stewart 13711b649582SRandall Stewart 13721b649582SRandall Stewart /* 13731b649582SRandall Stewart * add an asconf operation for the given ifa and type. 13741b649582SRandall Stewart * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR. 13751b649582SRandall Stewart * returns 0 if completed, -1 if not completed, 1 if immediate send is 13761b649582SRandall Stewart * advisable. 13771b649582SRandall Stewart */ 13781b649582SRandall Stewart static int 13791b649582SRandall Stewart sctp_asconf_queue_add(struct sctp_tcb *stcb, struct sctp_ifa *ifa, 13801b649582SRandall Stewart uint16_t type) 13811b649582SRandall Stewart { 13821b649582SRandall Stewart uint32_t status; 13831b649582SRandall Stewart int pending_delete_queued = 0; 13841b649582SRandall Stewart 13851b649582SRandall Stewart /* see if peer supports ASCONF */ 13861b649582SRandall Stewart if (stcb->asoc.peer_supports_asconf == 0) { 13871b649582SRandall Stewart return (-1); 13881b649582SRandall Stewart } 13891b649582SRandall Stewart /* 13901b649582SRandall Stewart * if this is deleting the last address from the assoc, mark it as 13911b649582SRandall Stewart * pending. 13921b649582SRandall Stewart */ 13931b649582SRandall Stewart if ((type == SCTP_DEL_IP_ADDRESS) && !stcb->asoc.asconf_del_pending && 13941b649582SRandall Stewart (sctp_local_addr_count(stcb) < 2)) { 13951b649582SRandall Stewart /* set the pending delete info only */ 13961b649582SRandall Stewart stcb->asoc.asconf_del_pending = 1; 13971b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending = ifa; 13981b649582SRandall Stewart atomic_add_int(&ifa->refcount, 1); 13991b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, 14001b649582SRandall Stewart "asconf_queue_add: mark delete last address pending\n"); 14011b649582SRandall Stewart return (-1); 14021b649582SRandall Stewart } 1403c54a18d2SRandall Stewart /* queue an asconf parameter */ 1404c54a18d2SRandall Stewart status = sctp_asconf_queue_mgmt(stcb, ifa, type); 1405c54a18d2SRandall Stewart 14061b649582SRandall Stewart /* 14071b649582SRandall Stewart * if this is an add, and there is a delete also pending (i.e. the 14081b649582SRandall Stewart * last local address is being changed), queue the pending delete 14091b649582SRandall Stewart * too. 14101b649582SRandall Stewart */ 1411c54a18d2SRandall Stewart if ((type == SCTP_ADD_IP_ADDRESS) && stcb->asoc.asconf_del_pending && (status == 0)) { 14121b649582SRandall Stewart /* queue in the pending delete */ 14131b649582SRandall Stewart if (sctp_asconf_queue_mgmt(stcb, 14141b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending, 14151b649582SRandall Stewart SCTP_DEL_IP_ADDRESS) == 0) { 14161b649582SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_add: queing pending delete\n"); 14171b649582SRandall Stewart pending_delete_queued = 1; 14181b649582SRandall Stewart /* clear out the pending delete info */ 14191b649582SRandall Stewart stcb->asoc.asconf_del_pending = 0; 14201b649582SRandall Stewart sctp_free_ifa(stcb->asoc.asconf_addr_del_pending); 14211b649582SRandall Stewart stcb->asoc.asconf_addr_del_pending = NULL; 14221b649582SRandall Stewart } 14231b649582SRandall Stewart } 1424c54a18d2SRandall Stewart if (pending_delete_queued) { 14251b649582SRandall Stewart struct sctp_nets *net; 14261b649582SRandall Stewart 14271b649582SRandall Stewart /* 14281b649582SRandall Stewart * since we know that the only/last address is now being 14291b649582SRandall Stewart * changed in this case, reset the cwnd/rto on all nets to 14301b649582SRandall Stewart * start as a new address and path. Also clear the error 14311b649582SRandall Stewart * counts to give the assoc the best chance to complete the 14321b649582SRandall Stewart * address change. 14331b649582SRandall Stewart */ 14341b649582SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 14351b649582SRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, 14361b649582SRandall Stewart net); 14371b649582SRandall Stewart net->RTO = 0; 14381b649582SRandall Stewart net->error_count = 0; 14391b649582SRandall Stewart } 14401b649582SRandall Stewart stcb->asoc.overall_error_count = 0; 1441b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 1442c4739e2fSRandall Stewart sctp_misc_ints(SCTP_THRESHOLD_CLEAR, 1443c4739e2fSRandall Stewart stcb->asoc.overall_error_count, 1444c4739e2fSRandall Stewart 0, 1445c4739e2fSRandall Stewart SCTP_FROM_SCTP_ASCONF, 1446c4739e2fSRandall Stewart __LINE__); 1447c4739e2fSRandall Stewart } 14481b649582SRandall Stewart /* queue in an advisory set primary too */ 14491b649582SRandall Stewart (void)sctp_asconf_queue_mgmt(stcb, ifa, SCTP_SET_PRIM_ADDR); 14501b649582SRandall Stewart /* let caller know we should send this out immediately */ 14511b649582SRandall Stewart status = 1; 14521b649582SRandall Stewart } 14531b649582SRandall Stewart return (status); 14541b649582SRandall Stewart } 14551b649582SRandall Stewart 14563232788eSRandall Stewart /*- 14573232788eSRandall Stewart * add an asconf delete IP address parameter to the queue by sockaddr and 14583232788eSRandall Stewart * possibly with no sctp_ifa available. This is only called by the routine 14593232788eSRandall Stewart * that checks the addresses in an INIT-ACK against the current address list. 1460f8829a4aSRandall Stewart * returns 0 if completed, non-zero if not completed. 14613232788eSRandall Stewart * NOTE: if an add is already scheduled (and not yet sent out), simply 14623232788eSRandall Stewart * remove it from queue. If a duplicate operation is found, ignore the 14633232788eSRandall Stewart * new one. 1464f8829a4aSRandall Stewart */ 14651b649582SRandall Stewart static int 14663232788eSRandall Stewart sctp_asconf_queue_sa_delete(struct sctp_tcb *stcb, struct sockaddr *sa) 1467f8829a4aSRandall Stewart { 1468bff64a4dSRandall Stewart struct sctp_ifa *ifa; 1469f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 147042551e99SRandall Stewart uint32_t vrf_id; 1471f8829a4aSRandall Stewart 1472ad81507eSRandall Stewart if (stcb == NULL) { 1473ad81507eSRandall Stewart return (-1); 1474ad81507eSRandall Stewart } 1475f8829a4aSRandall Stewart /* see if peer supports ASCONF */ 1476f8829a4aSRandall Stewart if (stcb->asoc.peer_supports_asconf == 0) { 1477f8829a4aSRandall Stewart return (-1); 1478f8829a4aSRandall Stewart } 1479f8829a4aSRandall Stewart /* make sure the request isn't already in the queue */ 14804a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1481f8829a4aSRandall Stewart /* address match? */ 1482f8829a4aSRandall Stewart if (sctp_asconf_addr_match(aa, sa) == 0) 1483f8829a4aSRandall Stewart continue; 1484f8829a4aSRandall Stewart /* is the request already in queue (sent or not) */ 14853232788eSRandall Stewart if (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) { 1486f8829a4aSRandall Stewart return (-1); 1487f8829a4aSRandall Stewart } 1488f8829a4aSRandall Stewart /* is the negative request already in queue, and not sent */ 1489f8829a4aSRandall Stewart if (aa->sent == 1) 1490f8829a4aSRandall Stewart continue; 14913232788eSRandall Stewart if (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS) { 14923232788eSRandall Stewart /* add already queued, so remove existing entry */ 1493f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next); 14941b649582SRandall Stewart sctp_del_local_addr_restricted(stcb, aa->ifa); 1495f8829a4aSRandall Stewart /* free the entry */ 1496207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 1497f8829a4aSRandall Stewart return (-1); 1498f8829a4aSRandall Stewart } 1499f8829a4aSRandall Stewart } /* for each aa */ 15003232788eSRandall Stewart 15013232788eSRandall Stewart /* find any existing ifa-- NOTE ifa CAN be allowed to be NULL */ 1502bff64a4dSRandall Stewart if (stcb) { 1503bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 1504bff64a4dSRandall Stewart } else { 1505bff64a4dSRandall Stewart vrf_id = SCTP_DEFAULT_VRFID; 1506bff64a4dSRandall Stewart } 1507851b7298SRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 15083232788eSRandall Stewart 1509f8829a4aSRandall Stewart /* adding new request to the queue */ 15101b649582SRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 15111b649582SRandall Stewart SCTP_M_ASC_ADDR); 1512f8829a4aSRandall Stewart if (aa == NULL) { 1513f8829a4aSRandall Stewart /* didn't get memory */ 1514ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 15153232788eSRandall Stewart "sctp_asconf_queue_sa_delete: failed to get memory!\n"); 1516f8829a4aSRandall Stewart return (-1); 1517f8829a4aSRandall Stewart } 1518830d754dSRandall Stewart aa->special_del = 0; 1519f8829a4aSRandall Stewart /* fill in asconf address parameter fields */ 1520f8829a4aSRandall Stewart /* top level elements are "networked" during send */ 15213232788eSRandall Stewart aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS; 1522bff64a4dSRandall Stewart aa->ifa = ifa; 15233232788eSRandall Stewart if (ifa) 1524bff64a4dSRandall Stewart atomic_add_int(&ifa->refcount, 1); 1525f8829a4aSRandall Stewart /* correlation_id filled in during send routine later... */ 1526f8829a4aSRandall Stewart if (sa->sa_family == AF_INET6) { 1527f8829a4aSRandall Stewart /* IPv6 address */ 1528f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 1529f8829a4aSRandall Stewart 1530f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 1531f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 1532f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param)); 1533f8829a4aSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param); 1534f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr, 1535f8829a4aSRandall Stewart sizeof(struct in6_addr)); 1536f8829a4aSRandall Stewart } else if (sa->sa_family == AF_INET) { 1537f8829a4aSRandall Stewart /* IPv4 address */ 1538f8829a4aSRandall Stewart struct sockaddr_in *sin = (struct sockaddr_in *)sa; 1539f8829a4aSRandall Stewart 1540f8829a4aSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 1541f8829a4aSRandall Stewart aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param)); 1542f8829a4aSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param); 1543f8829a4aSRandall Stewart memcpy(&aa->ap.addrp.addr, &sin->sin_addr, 1544f8829a4aSRandall Stewart sizeof(struct in_addr)); 1545f8829a4aSRandall Stewart } else { 1546f8829a4aSRandall Stewart /* invalid family! */ 1547207304d4SRandall Stewart SCTP_FREE(aa, SCTP_M_ASC_ADDR); 15483232788eSRandall Stewart if (ifa) 15493232788eSRandall Stewart sctp_free_ifa(ifa); 1550f8829a4aSRandall Stewart return (-1); 1551f8829a4aSRandall Stewart } 1552f8829a4aSRandall Stewart aa->sent = 0; /* clear sent flag */ 1553f8829a4aSRandall Stewart 15543232788eSRandall Stewart /* delete goes to the back of the queue */ 1555f8829a4aSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 1556f8829a4aSRandall Stewart 1557c99efcf6SRandall Stewart /* sa_ignore MEMLEAK {memory is put on the tailq} */ 1558f8829a4aSRandall Stewart return (0); 1559f8829a4aSRandall Stewart } 1560f8829a4aSRandall Stewart 1561f8829a4aSRandall Stewart /* 1562f8829a4aSRandall Stewart * find a specific asconf param on our "sent" queue 1563f8829a4aSRandall Stewart */ 1564f8829a4aSRandall Stewart static struct sctp_asconf_addr * 1565f8829a4aSRandall Stewart sctp_asconf_find_param(struct sctp_tcb *stcb, uint32_t correlation_id) 1566f8829a4aSRandall Stewart { 1567f8829a4aSRandall Stewart struct sctp_asconf_addr *aa; 1568f8829a4aSRandall Stewart 1569f8829a4aSRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 1570f8829a4aSRandall Stewart if (aa->ap.aph.correlation_id == correlation_id && 1571f8829a4aSRandall Stewart aa->sent == 1) { 1572f8829a4aSRandall Stewart /* found it */ 1573f8829a4aSRandall Stewart return (aa); 1574f8829a4aSRandall Stewart } 1575f8829a4aSRandall Stewart } 1576f8829a4aSRandall Stewart /* didn't find it */ 1577f8829a4aSRandall Stewart return (NULL); 1578f8829a4aSRandall Stewart } 1579f8829a4aSRandall Stewart 1580f8829a4aSRandall Stewart /* 1581f8829a4aSRandall Stewart * process an SCTP_ERROR_CAUSE_IND for a ASCONF-ACK parameter and do 1582f8829a4aSRandall Stewart * notifications based on the error response 1583f8829a4aSRandall Stewart */ 1584f8829a4aSRandall Stewart static void 1585f8829a4aSRandall Stewart sctp_asconf_process_error(struct sctp_tcb *stcb, 1586f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph) 1587f8829a4aSRandall Stewart { 1588f8829a4aSRandall Stewart struct sctp_error_cause *eh; 1589f8829a4aSRandall Stewart struct sctp_paramhdr *ph; 1590f8829a4aSRandall Stewart uint16_t param_type; 1591f8829a4aSRandall Stewart uint16_t error_code; 1592f8829a4aSRandall Stewart 1593f8829a4aSRandall Stewart eh = (struct sctp_error_cause *)(aph + 1); 1594f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)(eh + 1); 1595f8829a4aSRandall Stewart /* validate lengths */ 1596f8829a4aSRandall Stewart if (htons(eh->length) + sizeof(struct sctp_error_cause) > 1597f8829a4aSRandall Stewart htons(aph->ph.param_length)) { 1598f8829a4aSRandall Stewart /* invalid error cause length */ 1599ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1600ad81507eSRandall Stewart "asconf_process_error: cause element too long\n"); 1601f8829a4aSRandall Stewart return; 1602f8829a4aSRandall Stewart } 1603f8829a4aSRandall Stewart if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) > 1604f8829a4aSRandall Stewart htons(eh->length)) { 1605f8829a4aSRandall Stewart /* invalid included TLV length */ 1606ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1607ad81507eSRandall Stewart "asconf_process_error: included TLV too long\n"); 1608f8829a4aSRandall Stewart return; 1609f8829a4aSRandall Stewart } 1610f8829a4aSRandall Stewart /* which error code ? */ 1611f8829a4aSRandall Stewart error_code = ntohs(eh->code); 1612f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 1613f8829a4aSRandall Stewart /* FIX: this should go back up the REMOTE_ERROR ULP notify */ 1614f8829a4aSRandall Stewart switch (error_code) { 1615f8829a4aSRandall Stewart case SCTP_CAUSE_RESOURCE_SHORTAGE: 1616f8829a4aSRandall Stewart /* we allow ourselves to "try again" for this error */ 1617f8829a4aSRandall Stewart break; 1618f8829a4aSRandall Stewart default: 1619f8829a4aSRandall Stewart /* peer can't handle it... */ 1620f8829a4aSRandall Stewart switch (param_type) { 1621f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 1622f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 1623f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1624f8829a4aSRandall Stewart break; 1625f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 1626f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1627f8829a4aSRandall Stewart break; 1628f8829a4aSRandall Stewart default: 1629f8829a4aSRandall Stewart break; 1630f8829a4aSRandall Stewart } 1631f8829a4aSRandall Stewart } 1632f8829a4aSRandall Stewart } 1633f8829a4aSRandall Stewart 1634f8829a4aSRandall Stewart /* 163518e198d3SRandall Stewart * process an asconf queue param. 163618e198d3SRandall Stewart * aparam: parameter to process, will be removed from the queue. 163718e198d3SRandall Stewart * flag: 1=success case, 0=failure case 1638f8829a4aSRandall Stewart */ 1639f8829a4aSRandall Stewart static void 1640f8829a4aSRandall Stewart sctp_asconf_process_param_ack(struct sctp_tcb *stcb, 1641f8829a4aSRandall Stewart struct sctp_asconf_addr *aparam, uint32_t flag) 1642f8829a4aSRandall Stewart { 1643f8829a4aSRandall Stewart uint16_t param_type; 1644f8829a4aSRandall Stewart 1645f8829a4aSRandall Stewart /* process this param */ 1646f8829a4aSRandall Stewart param_type = aparam->ap.aph.ph.param_type; 1647f8829a4aSRandall Stewart switch (param_type) { 1648f8829a4aSRandall Stewart case SCTP_ADD_IP_ADDRESS: 1649ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1650ad81507eSRandall Stewart "process_param_ack: added IP address\n"); 1651f8829a4aSRandall Stewart sctp_asconf_addr_mgmt_ack(stcb, aparam->ifa, param_type, flag); 1652f8829a4aSRandall Stewart break; 1653f8829a4aSRandall Stewart case SCTP_DEL_IP_ADDRESS: 1654ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1655ad81507eSRandall Stewart "process_param_ack: deleted IP address\n"); 1656f8829a4aSRandall Stewart /* nothing really to do... lists already updated */ 1657f8829a4aSRandall Stewart break; 1658f8829a4aSRandall Stewart case SCTP_SET_PRIM_ADDR: 1659c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1660c54a18d2SRandall Stewart "process_param_ack: set primary IP address\n"); 1661f8829a4aSRandall Stewart /* nothing to do... peer may start using this addr */ 1662f8829a4aSRandall Stewart if (flag == 0) 1663f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1664f8829a4aSRandall Stewart break; 1665f8829a4aSRandall Stewart default: 1666f8829a4aSRandall Stewart /* should NEVER happen */ 1667f8829a4aSRandall Stewart break; 1668f8829a4aSRandall Stewart } 1669f8829a4aSRandall Stewart 1670f8829a4aSRandall Stewart /* remove the param and free it */ 1671f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.asconf_queue, aparam, next); 16723232788eSRandall Stewart if (aparam->ifa) 1673bff64a4dSRandall Stewart sctp_free_ifa(aparam->ifa); 1674207304d4SRandall Stewart SCTP_FREE(aparam, SCTP_M_ASC_ADDR); 1675f8829a4aSRandall Stewart } 1676f8829a4aSRandall Stewart 1677f8829a4aSRandall Stewart /* 1678f8829a4aSRandall Stewart * cleanup from a bad asconf ack parameter 1679f8829a4aSRandall Stewart */ 1680f8829a4aSRandall Stewart static void 1681f8829a4aSRandall Stewart sctp_asconf_ack_clear(struct sctp_tcb *stcb) 1682f8829a4aSRandall Stewart { 1683f8829a4aSRandall Stewart /* assume peer doesn't really know how to do asconfs */ 1684f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf = 0; 1685f8829a4aSRandall Stewart /* XXX we could free the pending queue here */ 1686f8829a4aSRandall Stewart } 1687f8829a4aSRandall Stewart 1688f8829a4aSRandall Stewart void 1689f8829a4aSRandall Stewart sctp_handle_asconf_ack(struct mbuf *m, int offset, 1690f8829a4aSRandall Stewart struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb, 16913232788eSRandall Stewart struct sctp_nets *net, int *abort_no_unlock) 1692f8829a4aSRandall Stewart { 1693f8829a4aSRandall Stewart struct sctp_association *asoc; 1694f8829a4aSRandall Stewart uint32_t serial_num; 1695f8829a4aSRandall Stewart uint16_t ack_length; 1696f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 1697f8829a4aSRandall Stewart struct sctp_asconf_addr *aa, *aa_next; 1698f8829a4aSRandall Stewart uint32_t last_error_id = 0; /* last error correlation id */ 1699f8829a4aSRandall Stewart uint32_t id; 1700f8829a4aSRandall Stewart struct sctp_asconf_addr *ap; 1701f8829a4aSRandall Stewart 1702f8829a4aSRandall Stewart /* asconf param buffer */ 1703f42a358aSRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 1704f8829a4aSRandall Stewart 1705f8829a4aSRandall Stewart /* verify minimum length */ 1706f8829a4aSRandall Stewart if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) { 1707ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1708ad81507eSRandall Stewart "handle_asconf_ack: chunk too small = %xh\n", 1709f8829a4aSRandall Stewart ntohs(cp->ch.chunk_length)); 1710f8829a4aSRandall Stewart return; 1711f8829a4aSRandall Stewart } 1712f8829a4aSRandall Stewart asoc = &stcb->asoc; 1713f8829a4aSRandall Stewart serial_num = ntohl(cp->serial_number); 1714f8829a4aSRandall Stewart 1715f8829a4aSRandall Stewart /* 1716f8829a4aSRandall Stewart * NOTE: we may want to handle this differently- currently, we will 1717f8829a4aSRandall Stewart * abort when we get an ack for the expected serial number + 1 (eg. 1718f8829a4aSRandall Stewart * we didn't send it), process an ack normally if it is the expected 1719f8829a4aSRandall Stewart * serial number, and re-send the previous ack for *ALL* other 1720f8829a4aSRandall Stewart * serial numbers 1721f8829a4aSRandall Stewart */ 1722f8829a4aSRandall Stewart 1723f8829a4aSRandall Stewart /* 1724f8829a4aSRandall Stewart * if the serial number is the next expected, but I didn't send it, 1725f8829a4aSRandall Stewart * abort the asoc, since someone probably just hijacked us... 1726f8829a4aSRandall Stewart */ 1727f8829a4aSRandall Stewart if (serial_num == (asoc->asconf_seq_out + 1)) { 1728ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got unexpected next serial number! Aborting asoc!\n"); 1729f8829a4aSRandall Stewart sctp_abort_an_association(stcb->sctp_ep, stcb, 1730ceaad40aSRandall Stewart SCTP_CAUSE_ILLEGAL_ASCONF_ACK, NULL, SCTP_SO_NOT_LOCKED); 17313232788eSRandall Stewart *abort_no_unlock = 1; 1732f8829a4aSRandall Stewart return; 1733f8829a4aSRandall Stewart } 1734c54a18d2SRandall Stewart if (serial_num != asoc->asconf_seq_out_acked + 1) { 1735f8829a4aSRandall Stewart /* got a duplicate/unexpected ASCONF-ACK */ 1736ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got duplicate/unexpected serial number = %xh (expected = %xh)\n", 1737c54a18d2SRandall Stewart serial_num, asoc->asconf_seq_out_acked + 1); 1738f8829a4aSRandall Stewart return; 1739f8829a4aSRandall Stewart } 1740c54a18d2SRandall Stewart if (serial_num == asoc->asconf_seq_out - 1) { 1741f8829a4aSRandall Stewart /* stop our timer */ 17423c503c28SRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net, 17433c503c28SRandall Stewart SCTP_FROM_SCTP_ASCONF + SCTP_LOC_3); 1744c54a18d2SRandall Stewart } 1745f8829a4aSRandall Stewart /* process the ASCONF-ACK contents */ 1746f8829a4aSRandall Stewart ack_length = ntohs(cp->ch.chunk_length) - 1747f8829a4aSRandall Stewart sizeof(struct sctp_asconf_ack_chunk); 1748f8829a4aSRandall Stewart offset += sizeof(struct sctp_asconf_ack_chunk); 1749f8829a4aSRandall Stewart /* process through all parameters */ 1750f8829a4aSRandall Stewart while (ack_length >= sizeof(struct sctp_asconf_paramhdr)) { 1751f8829a4aSRandall Stewart unsigned int param_length, param_type; 1752f8829a4aSRandall Stewart 1753f8829a4aSRandall Stewart /* get pointer to next asconf parameter */ 1754f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, 1755f8829a4aSRandall Stewart sizeof(struct sctp_asconf_paramhdr), aparam_buf); 1756f8829a4aSRandall Stewart if (aph == NULL) { 1757f8829a4aSRandall Stewart /* can't get an asconf paramhdr */ 1758f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1759f8829a4aSRandall Stewart return; 1760f8829a4aSRandall Stewart } 1761f8829a4aSRandall Stewart param_type = ntohs(aph->ph.param_type); 1762f8829a4aSRandall Stewart param_length = ntohs(aph->ph.param_length); 1763f8829a4aSRandall Stewart if (param_length > ack_length) { 1764f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1765f8829a4aSRandall Stewart return; 1766f8829a4aSRandall Stewart } 1767f8829a4aSRandall Stewart if (param_length < sizeof(struct sctp_paramhdr)) { 1768f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1769f8829a4aSRandall Stewart return; 1770f8829a4aSRandall Stewart } 1771f8829a4aSRandall Stewart /* get the complete parameter... */ 1772f8829a4aSRandall Stewart if (param_length > sizeof(aparam_buf)) { 1773ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 1774ad81507eSRandall Stewart "param length (%u) larger than buffer size!\n", param_length); 1775f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1776f8829a4aSRandall Stewart return; 1777f8829a4aSRandall Stewart } 1778f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf); 1779f8829a4aSRandall Stewart if (aph == NULL) { 1780f8829a4aSRandall Stewart sctp_asconf_ack_clear(stcb); 1781f8829a4aSRandall Stewart return; 1782f8829a4aSRandall Stewart } 1783f8829a4aSRandall Stewart /* correlation_id is transparent to peer, no ntohl needed */ 1784f8829a4aSRandall Stewart id = aph->correlation_id; 1785f8829a4aSRandall Stewart 1786f8829a4aSRandall Stewart switch (param_type) { 1787f8829a4aSRandall Stewart case SCTP_ERROR_CAUSE_IND: 1788f8829a4aSRandall Stewart last_error_id = id; 1789f8829a4aSRandall Stewart /* find the corresponding asconf param in our queue */ 1790f8829a4aSRandall Stewart ap = sctp_asconf_find_param(stcb, id); 1791f8829a4aSRandall Stewart if (ap == NULL) { 1792f8829a4aSRandall Stewart /* hmm... can't find this in our queue! */ 1793f8829a4aSRandall Stewart break; 1794f8829a4aSRandall Stewart } 1795f8829a4aSRandall Stewart /* process the parameter, failed flag */ 1796f8829a4aSRandall Stewart sctp_asconf_process_param_ack(stcb, ap, 0); 1797f8829a4aSRandall Stewart /* process the error response */ 1798f8829a4aSRandall Stewart sctp_asconf_process_error(stcb, aph); 1799f8829a4aSRandall Stewart break; 1800f8829a4aSRandall Stewart case SCTP_SUCCESS_REPORT: 1801f8829a4aSRandall Stewart /* find the corresponding asconf param in our queue */ 1802f8829a4aSRandall Stewart ap = sctp_asconf_find_param(stcb, id); 1803f8829a4aSRandall Stewart if (ap == NULL) { 1804f8829a4aSRandall Stewart /* hmm... can't find this in our queue! */ 1805f8829a4aSRandall Stewart break; 1806f8829a4aSRandall Stewart } 1807f8829a4aSRandall Stewart /* process the parameter, success flag */ 1808f8829a4aSRandall Stewart sctp_asconf_process_param_ack(stcb, ap, 1); 1809f8829a4aSRandall Stewart break; 1810f8829a4aSRandall Stewart default: 1811f8829a4aSRandall Stewart break; 1812f8829a4aSRandall Stewart } /* switch */ 1813f8829a4aSRandall Stewart 1814f8829a4aSRandall Stewart /* update remaining ASCONF-ACK message length to process */ 1815f8829a4aSRandall Stewart ack_length -= SCTP_SIZE32(param_length); 1816f8829a4aSRandall Stewart if (ack_length <= 0) { 1817f8829a4aSRandall Stewart /* no more data in the mbuf chain */ 1818f8829a4aSRandall Stewart break; 1819f8829a4aSRandall Stewart } 1820f8829a4aSRandall Stewart offset += SCTP_SIZE32(param_length); 1821f8829a4aSRandall Stewart } /* while */ 1822f8829a4aSRandall Stewart 1823f8829a4aSRandall Stewart /* 1824f8829a4aSRandall Stewart * if there are any "sent" params still on the queue, these are 1825f8829a4aSRandall Stewart * implicitly "success", or "failed" (if we got an error back) ... 1826f8829a4aSRandall Stewart * so process these appropriately 1827f8829a4aSRandall Stewart * 1828f8829a4aSRandall Stewart * we assume that the correlation_id's are monotonically increasing 1829f8829a4aSRandall Stewart * beginning from 1 and that we don't have *that* many outstanding 1830f8829a4aSRandall Stewart * at any given time 1831f8829a4aSRandall Stewart */ 1832f8829a4aSRandall Stewart if (last_error_id == 0) 1833f8829a4aSRandall Stewart last_error_id--;/* set to "max" value */ 18344a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) { 1835f8829a4aSRandall Stewart if (aa->sent == 1) { 1836f8829a4aSRandall Stewart /* 1837f8829a4aSRandall Stewart * implicitly successful or failed if correlation_id 1838f8829a4aSRandall Stewart * < last_error_id, then success else, failure 1839f8829a4aSRandall Stewart */ 1840f8829a4aSRandall Stewart if (aa->ap.aph.correlation_id < last_error_id) 184118e198d3SRandall Stewart sctp_asconf_process_param_ack(stcb, aa, 1); 1842f8829a4aSRandall Stewart else 184318e198d3SRandall Stewart sctp_asconf_process_param_ack(stcb, aa, 0); 1844f8829a4aSRandall Stewart } else { 1845f8829a4aSRandall Stewart /* 1846f8829a4aSRandall Stewart * since we always process in order (FIFO queue) if 1847f8829a4aSRandall Stewart * we reach one that hasn't been sent, the rest 1848f8829a4aSRandall Stewart * should not have been sent either. so, we're 1849f8829a4aSRandall Stewart * done... 1850f8829a4aSRandall Stewart */ 1851f8829a4aSRandall Stewart break; 1852f8829a4aSRandall Stewart } 1853f8829a4aSRandall Stewart } 1854f8829a4aSRandall Stewart 1855f8829a4aSRandall Stewart /* update the next sequence number to use */ 1856c54a18d2SRandall Stewart asoc->asconf_seq_out_acked++; 1857f8829a4aSRandall Stewart /* remove the old ASCONF on our outbound queue */ 1858f8829a4aSRandall Stewart sctp_toss_old_asconf(stcb); 1859f8829a4aSRandall Stewart if (!TAILQ_EMPTY(&stcb->asoc.asconf_queue)) { 18601b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 1861f8829a4aSRandall Stewart /* we have more params, so restart our timer */ 1862f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, 1863f8829a4aSRandall Stewart stcb, net); 18641b649582SRandall Stewart #else 18651b649582SRandall Stewart /* we have more params, so send out more */ 18663232788eSRandall Stewart sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED); 18671b649582SRandall Stewart #endif 1868f8829a4aSRandall Stewart } 1869f8829a4aSRandall Stewart } 1870f8829a4aSRandall Stewart 18715e2c2d87SRandall Stewart #ifdef INET6 1872f8829a4aSRandall Stewart static uint32_t 1873f8829a4aSRandall Stewart sctp_is_scopeid_in_nets(struct sctp_tcb *stcb, struct sockaddr *sa) 1874f8829a4aSRandall Stewart { 1875f8829a4aSRandall Stewart struct sockaddr_in6 *sin6, *net6; 1876f8829a4aSRandall Stewart struct sctp_nets *net; 1877f8829a4aSRandall Stewart 1878f8829a4aSRandall Stewart if (sa->sa_family != AF_INET6) { 1879f8829a4aSRandall Stewart /* wrong family */ 1880f8829a4aSRandall Stewart return (0); 1881f8829a4aSRandall Stewart } 1882f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 1883f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) == 0) { 1884f8829a4aSRandall Stewart /* not link local address */ 1885f8829a4aSRandall Stewart return (0); 1886f8829a4aSRandall Stewart } 1887f8829a4aSRandall Stewart /* hunt through our destination nets list for this scope_id */ 1888f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 1889f8829a4aSRandall Stewart if (((struct sockaddr *)(&net->ro._l_addr))->sa_family != 1890f8829a4aSRandall Stewart AF_INET6) 1891f8829a4aSRandall Stewart continue; 1892f8829a4aSRandall Stewart net6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1893f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&net6->sin6_addr) == 0) 1894f8829a4aSRandall Stewart continue; 1895f8829a4aSRandall Stewart if (sctp_is_same_scope(sin6, net6)) { 1896f8829a4aSRandall Stewart /* found one */ 1897f8829a4aSRandall Stewart return (1); 1898f8829a4aSRandall Stewart } 1899f8829a4aSRandall Stewart } 1900f8829a4aSRandall Stewart /* didn't find one */ 1901f8829a4aSRandall Stewart return (0); 1902f8829a4aSRandall Stewart } 1903f8829a4aSRandall Stewart 19045e2c2d87SRandall Stewart #endif 19055e2c2d87SRandall Stewart 1906f8829a4aSRandall Stewart /* 1907f8829a4aSRandall Stewart * address management functions 1908f8829a4aSRandall Stewart */ 1909f8829a4aSRandall Stewart static void 1910f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 19113232788eSRandall Stewart struct sctp_ifa *ifa, uint16_t type, int addr_locked) 1912f8829a4aSRandall Stewart { 1913f8829a4aSRandall Stewart int status; 1914f8829a4aSRandall Stewart 1915f8829a4aSRandall Stewart 1916f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0 && 1917f8829a4aSRandall Stewart sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) { 1918f8829a4aSRandall Stewart /* subset bound, no ASCONF allowed case, so ignore */ 1919f8829a4aSRandall Stewart return; 1920f8829a4aSRandall Stewart } 1921f8829a4aSRandall Stewart /* 1922f8829a4aSRandall Stewart * note: we know this is not the subset bound, no ASCONF case eg. 1923f8829a4aSRandall Stewart * this is boundall or subset bound w/ASCONF allowed 1924f8829a4aSRandall Stewart */ 1925f8829a4aSRandall Stewart 1926f8829a4aSRandall Stewart /* first, make sure it's a good address family */ 192742551e99SRandall Stewart if (ifa->address.sa.sa_family != AF_INET6 && 192842551e99SRandall Stewart ifa->address.sa.sa_family != AF_INET) { 1929f8829a4aSRandall Stewart return; 1930f8829a4aSRandall Stewart } 1931f8829a4aSRandall Stewart /* make sure we're "allowed" to add this type of addr */ 193242551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 1933f8829a4aSRandall Stewart /* invalid if we're not a v6 endpoint */ 1934f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) 1935f8829a4aSRandall Stewart return; 1936f8829a4aSRandall Stewart /* is the v6 addr really valid ? */ 193742551e99SRandall Stewart if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 1938f8829a4aSRandall Stewart return; 1939f8829a4aSRandall Stewart } 1940f8829a4aSRandall Stewart } 1941f8829a4aSRandall Stewart /* put this address on the "pending/do not use yet" list */ 19421b649582SRandall Stewart sctp_add_local_addr_restricted(stcb, ifa); 1943f8829a4aSRandall Stewart /* 1944f8829a4aSRandall Stewart * check address scope if address is out of scope, don't queue 1945f8829a4aSRandall Stewart * anything... note: this would leave the address on both inp and 1946f8829a4aSRandall Stewart * asoc lists 1947f8829a4aSRandall Stewart */ 19485e2c2d87SRandall Stewart switch (ifa->address.sa.sa_family) { 19495e2c2d87SRandall Stewart #ifdef INET6 19505e2c2d87SRandall Stewart case AF_INET6: 19515e2c2d87SRandall Stewart { 1952f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 1953f8829a4aSRandall Stewart 195442551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sin6; 1955f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 1956f8829a4aSRandall Stewart /* we skip unspecifed addresses */ 1957f8829a4aSRandall Stewart return; 1958f8829a4aSRandall Stewart } 1959f8829a4aSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 1960f8829a4aSRandall Stewart if (stcb->asoc.local_scope == 0) { 1961f8829a4aSRandall Stewart return; 1962f8829a4aSRandall Stewart } 1963f8829a4aSRandall Stewart /* is it the right link local scope? */ 196442551e99SRandall Stewart if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) { 1965f8829a4aSRandall Stewart return; 1966f8829a4aSRandall Stewart } 1967f8829a4aSRandall Stewart } 1968f8829a4aSRandall Stewart if (stcb->asoc.site_scope == 0 && 1969f8829a4aSRandall Stewart IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) { 1970f8829a4aSRandall Stewart return; 1971f8829a4aSRandall Stewart } 19725e2c2d87SRandall Stewart break; 19735e2c2d87SRandall Stewart } 19745e2c2d87SRandall Stewart #endif 19755e2c2d87SRandall Stewart case AF_INET: 19765e2c2d87SRandall Stewart { 1977f8829a4aSRandall Stewart struct sockaddr_in *sin; 1978f8829a4aSRandall Stewart struct in6pcb *inp6; 1979f8829a4aSRandall Stewart 1980f8829a4aSRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 1981f8829a4aSRandall Stewart /* invalid if we are a v6 only endpoint */ 1982f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 198344b7479bSRandall Stewart SCTP_IPV6_V6ONLY(inp6)) 1984f8829a4aSRandall Stewart return; 1985f8829a4aSRandall Stewart 198642551e99SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 1987f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 0) { 1988f8829a4aSRandall Stewart /* we skip unspecifed addresses */ 1989f8829a4aSRandall Stewart return; 1990f8829a4aSRandall Stewart } 1991f8829a4aSRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 1992f8829a4aSRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 1993f8829a4aSRandall Stewart return; 1994f8829a4aSRandall Stewart } 19955e2c2d87SRandall Stewart break; 19965e2c2d87SRandall Stewart } 19975e2c2d87SRandall Stewart default: 1998f8829a4aSRandall Stewart /* else, not AF_INET or AF_INET6, so skip */ 1999f8829a4aSRandall Stewart return; 2000f8829a4aSRandall Stewart } 2001f8829a4aSRandall Stewart 2002f8829a4aSRandall Stewart /* queue an asconf for this address add/delete */ 2003f8829a4aSRandall Stewart if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF)) { 2004f8829a4aSRandall Stewart /* does the peer do asconf? */ 2005f8829a4aSRandall Stewart if (stcb->asoc.peer_supports_asconf) { 2006f8829a4aSRandall Stewart /* queue an asconf for this addr */ 2007f8829a4aSRandall Stewart status = sctp_asconf_queue_add(stcb, ifa, type); 20081b649582SRandall Stewart 2009f8829a4aSRandall Stewart /* 20101b649582SRandall Stewart * if queued ok, and in the open state, send out the 20111b649582SRandall Stewart * ASCONF. If in the non-open state, these will be 20121b649582SRandall Stewart * sent when the state goes open. 2013f8829a4aSRandall Stewart */ 2014f8829a4aSRandall Stewart if (status == 0 && 2015f8829a4aSRandall Stewart SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 20161b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 2017f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, inp, 2018f8829a4aSRandall Stewart stcb, stcb->asoc.primary_destination); 20191b649582SRandall Stewart #else 20203232788eSRandall Stewart sctp_send_asconf(stcb, stcb->asoc.primary_destination, 20213232788eSRandall Stewart addr_locked); 20221b649582SRandall Stewart #endif 2023f8829a4aSRandall Stewart } 2024f8829a4aSRandall Stewart } 2025f8829a4aSRandall Stewart } 2026f8829a4aSRandall Stewart } 2027f8829a4aSRandall Stewart 202842551e99SRandall Stewart 202942551e99SRandall Stewart int 20301b649582SRandall Stewart sctp_asconf_iterator_ep(struct sctp_inpcb *inp, void *ptr, uint32_t val) 2031f8829a4aSRandall Stewart { 203242551e99SRandall Stewart struct sctp_asconf_iterator *asc; 203342551e99SRandall Stewart struct sctp_ifa *ifa; 203442551e99SRandall Stewart struct sctp_laddr *l; 203542551e99SRandall Stewart int cnt_invalid = 0; 2036f8829a4aSRandall Stewart 203742551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 203842551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 203942551e99SRandall Stewart ifa = l->ifa; 204042551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 2041f8829a4aSRandall Stewart /* invalid if we're not a v6 endpoint */ 2042f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) { 204342551e99SRandall Stewart cnt_invalid++; 204442551e99SRandall Stewart if (asc->cnt == cnt_invalid) 204542551e99SRandall Stewart return (1); 204642551e99SRandall Stewart else 204742551e99SRandall Stewart continue; 2048f8829a4aSRandall Stewart } 204942551e99SRandall Stewart } else if (ifa->address.sa.sa_family == AF_INET) { 2050f8829a4aSRandall Stewart /* invalid if we are a v6 only endpoint */ 2051f8829a4aSRandall Stewart struct in6pcb *inp6; 2052f8829a4aSRandall Stewart 2053f8829a4aSRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 2054f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 205544b7479bSRandall Stewart SCTP_IPV6_V6ONLY(inp6)) { 205642551e99SRandall Stewart cnt_invalid++; 205742551e99SRandall Stewart if (asc->cnt == cnt_invalid) 205842551e99SRandall Stewart return (1); 205942551e99SRandall Stewart else 206042551e99SRandall Stewart continue; 2061f8829a4aSRandall Stewart } 2062f8829a4aSRandall Stewart } else { 2063f8829a4aSRandall Stewart /* invalid address family */ 206442551e99SRandall Stewart cnt_invalid++; 206542551e99SRandall Stewart if (asc->cnt == cnt_invalid) 206642551e99SRandall Stewart return (1); 2067f8829a4aSRandall Stewart else 206842551e99SRandall Stewart continue; 2069f8829a4aSRandall Stewart } 207042551e99SRandall Stewart } 207142551e99SRandall Stewart return (0); 207242551e99SRandall Stewart } 2073f8829a4aSRandall Stewart 20741b649582SRandall Stewart static int 20751b649582SRandall Stewart sctp_asconf_iterator_ep_end(struct sctp_inpcb *inp, void *ptr, uint32_t val) 207642551e99SRandall Stewart { 207742551e99SRandall Stewart struct sctp_ifa *ifa; 207842551e99SRandall Stewart struct sctp_asconf_iterator *asc; 207942551e99SRandall Stewart struct sctp_laddr *laddr, *nladdr, *l; 208042551e99SRandall Stewart 208142551e99SRandall Stewart /* Only for specific case not bound all */ 208242551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 208342551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 208442551e99SRandall Stewart ifa = l->ifa; 208542551e99SRandall Stewart if (l->action == SCTP_ADD_IP_ADDRESS) { 20863c503c28SRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, 20873c503c28SRandall Stewart sctp_nxt_addr) { 208842551e99SRandall Stewart if (laddr->ifa == ifa) { 208942551e99SRandall Stewart laddr->action = 0; 209042551e99SRandall Stewart break; 209142551e99SRandall Stewart } 209242551e99SRandall Stewart } 209342551e99SRandall Stewart } else if (l->action == SCTP_DEL_IP_ADDRESS) { 20944a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) { 209542551e99SRandall Stewart /* remove only after all guys are done */ 209642551e99SRandall Stewart if (laddr->ifa == ifa) { 209742551e99SRandall Stewart sctp_del_local_addr_ep(inp, ifa); 209842551e99SRandall Stewart } 209942551e99SRandall Stewart } 210042551e99SRandall Stewart } 210142551e99SRandall Stewart } 210242551e99SRandall Stewart return (0); 210342551e99SRandall Stewart } 210442551e99SRandall Stewart 210542551e99SRandall Stewart void 21061b649582SRandall Stewart sctp_asconf_iterator_stcb(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 21071b649582SRandall Stewart void *ptr, uint32_t val) 210842551e99SRandall Stewart { 210942551e99SRandall Stewart struct sctp_asconf_iterator *asc; 211042551e99SRandall Stewart struct sctp_ifa *ifa; 211142551e99SRandall Stewart struct sctp_laddr *l; 211242551e99SRandall Stewart int cnt_invalid = 0; 211342551e99SRandall Stewart int type, status; 21141b649582SRandall Stewart int num_queued = 0; 211542551e99SRandall Stewart 211642551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 211742551e99SRandall Stewart LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) { 211842551e99SRandall Stewart ifa = l->ifa; 211942551e99SRandall Stewart type = l->action; 212022a67197SRandall Stewart 212122a67197SRandall Stewart /* address's vrf_id must be the vrf_id of the assoc */ 212222a67197SRandall Stewart if (ifa->vrf_id != stcb->asoc.vrf_id) { 212322a67197SRandall Stewart continue; 212422a67197SRandall Stewart } 212542551e99SRandall Stewart /* Same checks again for assoc */ 21265e2c2d87SRandall Stewart switch (ifa->address.sa.sa_family) { 21275e2c2d87SRandall Stewart #ifdef INET6 21285e2c2d87SRandall Stewart case AF_INET6: 21295e2c2d87SRandall Stewart { 213042551e99SRandall Stewart /* invalid if we're not a v6 endpoint */ 213142551e99SRandall Stewart struct sockaddr_in6 *sin6; 213242551e99SRandall Stewart 213342551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) { 213442551e99SRandall Stewart cnt_invalid++; 213542551e99SRandall Stewart if (asc->cnt == cnt_invalid) 213642551e99SRandall Stewart return; 213742551e99SRandall Stewart else 213842551e99SRandall Stewart continue; 213942551e99SRandall Stewart } 214042551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&ifa->address.sin6; 214142551e99SRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 214242551e99SRandall Stewart /* we skip unspecifed addresses */ 214342551e99SRandall Stewart continue; 214442551e99SRandall Stewart } 214542551e99SRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 214642551e99SRandall Stewart if (stcb->asoc.local_scope == 0) { 214742551e99SRandall Stewart continue; 214842551e99SRandall Stewart } 214942551e99SRandall Stewart /* is it the right link local scope? */ 215042551e99SRandall Stewart if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) { 215142551e99SRandall Stewart continue; 215242551e99SRandall Stewart } 215342551e99SRandall Stewart } 21545e2c2d87SRandall Stewart break; 21555e2c2d87SRandall Stewart } 21565e2c2d87SRandall Stewart #endif 21575e2c2d87SRandall Stewart case AF_INET: 21585e2c2d87SRandall Stewart { 215942551e99SRandall Stewart /* invalid if we are a v6 only endpoint */ 216042551e99SRandall Stewart struct in6pcb *inp6; 216142551e99SRandall Stewart struct sockaddr_in *sin; 216242551e99SRandall Stewart 216342551e99SRandall Stewart inp6 = (struct in6pcb *)&inp->ip_inp.inp; 216442551e99SRandall Stewart /* invalid if we are a v6 only endpoint */ 216542551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 216642551e99SRandall Stewart SCTP_IPV6_V6ONLY(inp6)) 216742551e99SRandall Stewart continue; 216842551e99SRandall Stewart 216942551e99SRandall Stewart sin = (struct sockaddr_in *)&ifa->address.sa; 217042551e99SRandall Stewart if (sin->sin_addr.s_addr == 0) { 217142551e99SRandall Stewart /* we skip unspecifed addresses */ 217242551e99SRandall Stewart continue; 217342551e99SRandall Stewart } 217442551e99SRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 217542551e99SRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 2176c2ede4b3SMartin Blapp continue; 217742551e99SRandall Stewart } 217842551e99SRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 217942551e99SRandall Stewart SCTP_IPV6_V6ONLY(inp6)) { 218042551e99SRandall Stewart cnt_invalid++; 218142551e99SRandall Stewart if (asc->cnt == cnt_invalid) 218242551e99SRandall Stewart return; 218342551e99SRandall Stewart else 218442551e99SRandall Stewart continue; 218542551e99SRandall Stewart } 21865e2c2d87SRandall Stewart break; 21875e2c2d87SRandall Stewart } 21885e2c2d87SRandall Stewart default: 218942551e99SRandall Stewart /* invalid address family */ 219042551e99SRandall Stewart cnt_invalid++; 219142551e99SRandall Stewart if (asc->cnt == cnt_invalid) 2192f8829a4aSRandall Stewart return; 219342551e99SRandall Stewart else 219442551e99SRandall Stewart continue; 21955e2c2d87SRandall Stewart break; 2196f8829a4aSRandall Stewart } 2197f8829a4aSRandall Stewart 219842551e99SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 21991b649582SRandall Stewart /* prevent this address from being used as a source */ 22001b649582SRandall Stewart sctp_add_local_addr_restricted(stcb, ifa); 220142551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 2202f8829a4aSRandall Stewart struct sctp_nets *net; 2203f8829a4aSRandall Stewart 2204f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 220517205eccSRandall Stewart sctp_rtentry_t *rt; 2206f8829a4aSRandall Stewart 2207f8829a4aSRandall Stewart /* delete this address if cached */ 2208851b7298SRandall Stewart if (net->ro._s_addr == ifa) { 220942551e99SRandall Stewart sctp_free_ifa(net->ro._s_addr); 221042551e99SRandall Stewart net->ro._s_addr = NULL; 221142551e99SRandall Stewart net->src_addr_selected = 0; 2212f8829a4aSRandall Stewart rt = net->ro.ro_rt; 221342551e99SRandall Stewart if (rt) { 221442551e99SRandall Stewart RTFREE(rt); 2215f8829a4aSRandall Stewart net->ro.ro_rt = NULL; 2216f8829a4aSRandall Stewart } 221742551e99SRandall Stewart /* 221842551e99SRandall Stewart * Now we deleted our src address, 221942551e99SRandall Stewart * should we not also now reset the 222042551e99SRandall Stewart * cwnd/rto to start as if its a new 222142551e99SRandall Stewart * address? 222242551e99SRandall Stewart */ 2223b54d3a6cSRandall Stewart stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net); 2224108df27cSRandall Stewart net->RTO = 0; 222542551e99SRandall Stewart 2226f8829a4aSRandall Stewart } 2227f8829a4aSRandall Stewart } 222842551e99SRandall Stewart } else if (type == SCTP_SET_PRIM_ADDR) { 222942551e99SRandall Stewart if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) { 22301b649582SRandall Stewart /* must validate the ifa is in the ep */ 223142551e99SRandall Stewart if (sctp_is_addr_in_ep(stcb->sctp_ep, ifa) == 0) { 223242551e99SRandall Stewart continue; 2233f8829a4aSRandall Stewart } 223442551e99SRandall Stewart } else { 223542551e99SRandall Stewart /* Need to check scopes for this guy */ 223642551e99SRandall Stewart if (sctp_is_address_in_scope(ifa, 223742551e99SRandall Stewart stcb->asoc.ipv4_addr_legal, 223842551e99SRandall Stewart stcb->asoc.ipv6_addr_legal, 223942551e99SRandall Stewart stcb->asoc.loopback_scope, 224042551e99SRandall Stewart stcb->asoc.ipv4_local_scope, 224142551e99SRandall Stewart stcb->asoc.local_scope, 224242551e99SRandall Stewart stcb->asoc.site_scope, 0) == 0) { 224342551e99SRandall Stewart continue; 2244f8829a4aSRandall Stewart } 224542551e99SRandall Stewart } 224642551e99SRandall Stewart } 224742551e99SRandall Stewart /* queue an asconf for this address add/delete */ 22481b649582SRandall Stewart if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF) && 22491b649582SRandall Stewart stcb->asoc.peer_supports_asconf) { 225042551e99SRandall Stewart /* queue an asconf for this addr */ 225142551e99SRandall Stewart status = sctp_asconf_queue_add(stcb, ifa, type); 225242551e99SRandall Stewart /* 22531b649582SRandall Stewart * if queued ok, and in the open state, update the 22541b649582SRandall Stewart * count of queued params. If in the non-open 22551b649582SRandall Stewart * state, these get sent when the assoc goes open. 225642551e99SRandall Stewart */ 22571b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 22581b649582SRandall Stewart if (status >= 0) { 22591b649582SRandall Stewart num_queued++; 226042551e99SRandall Stewart } 226142551e99SRandall Stewart } 226242551e99SRandall Stewart } 226342551e99SRandall Stewart } 22641b649582SRandall Stewart /* 22651b649582SRandall Stewart * If we have queued params in the open state, send out an ASCONF. 22661b649582SRandall Stewart */ 22671b649582SRandall Stewart if (num_queued > 0) { 22683232788eSRandall Stewart sctp_send_asconf(stcb, stcb->asoc.primary_destination, 22693232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 22701b649582SRandall Stewart } 227142551e99SRandall Stewart } 227242551e99SRandall Stewart 227342551e99SRandall Stewart void 22741b649582SRandall Stewart sctp_asconf_iterator_end(void *ptr, uint32_t val) 227542551e99SRandall Stewart { 227642551e99SRandall Stewart struct sctp_asconf_iterator *asc; 227742551e99SRandall Stewart struct sctp_ifa *ifa; 22784a9ef3f8SMichael Tuexen struct sctp_laddr *l, *nl; 227942551e99SRandall Stewart 228042551e99SRandall Stewart asc = (struct sctp_asconf_iterator *)ptr; 22814a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(l, &asc->list_of_work, sctp_nxt_addr, nl) { 228242551e99SRandall Stewart ifa = l->ifa; 228342551e99SRandall Stewart if (l->action == SCTP_ADD_IP_ADDRESS) { 228442551e99SRandall Stewart /* Clear the defer use flag */ 228542551e99SRandall Stewart ifa->localifa_flags &= ~SCTP_ADDR_DEFER_USE; 228642551e99SRandall Stewart } 228742551e99SRandall Stewart sctp_free_ifa(ifa); 2288b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), l); 228942551e99SRandall Stewart SCTP_DECR_LADDR_COUNT(); 229042551e99SRandall Stewart } 2291207304d4SRandall Stewart SCTP_FREE(asc, SCTP_M_ASC_IT); 2292f8829a4aSRandall Stewart } 2293f8829a4aSRandall Stewart 2294f8829a4aSRandall Stewart /* 22951b649582SRandall Stewart * sa is the sockaddr to ask the peer to set primary to. 22961b649582SRandall Stewart * returns: 0 = completed, -1 = error 2297f8829a4aSRandall Stewart */ 2298c4739e2fSRandall Stewart int32_t 2299f8829a4aSRandall Stewart sctp_set_primary_ip_address_sa(struct sctp_tcb *stcb, struct sockaddr *sa) 2300f8829a4aSRandall Stewart { 23013232788eSRandall Stewart uint32_t vrf_id; 23023232788eSRandall Stewart struct sctp_ifa *ifa; 2303f8829a4aSRandall Stewart 23043232788eSRandall Stewart /* find the ifa for the desired set primary */ 23053232788eSRandall Stewart vrf_id = stcb->asoc.vrf_id; 23063232788eSRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 23073232788eSRandall Stewart if (ifa == NULL) { 23083232788eSRandall Stewart /* Invalid address */ 23093232788eSRandall Stewart return (-1); 23103232788eSRandall Stewart } 2311f8829a4aSRandall Stewart /* queue an ASCONF:SET_PRIM_ADDR to be sent */ 23123232788eSRandall Stewart if (!sctp_asconf_queue_add(stcb, ifa, SCTP_SET_PRIM_ADDR)) { 2313f8829a4aSRandall Stewart /* set primary queuing succeeded */ 2314ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2315ad81507eSRandall Stewart "set_primary_ip_address_sa: queued on tcb=%p, ", 2316f8829a4aSRandall Stewart stcb); 2317ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 23181b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 23191b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 23201b649582SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 23211b649582SRandall Stewart stcb->sctp_ep, stcb, 23221b649582SRandall Stewart stcb->asoc.primary_destination); 23231b649582SRandall Stewart #else 23243232788eSRandall Stewart sctp_send_asconf(stcb, stcb->asoc.primary_destination, 23253232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 23261b649582SRandall Stewart #endif 23271b649582SRandall Stewart } 2328f8829a4aSRandall Stewart } else { 2329ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address_sa: failed to add to queue on tcb=%p, ", 2330f8829a4aSRandall Stewart stcb); 2331ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa); 2332f8829a4aSRandall Stewart return (-1); 2333f8829a4aSRandall Stewart } 2334f8829a4aSRandall Stewart return (0); 2335f8829a4aSRandall Stewart } 2336f8829a4aSRandall Stewart 2337f8829a4aSRandall Stewart void 233842551e99SRandall Stewart sctp_set_primary_ip_address(struct sctp_ifa *ifa) 2339f8829a4aSRandall Stewart { 2340f8829a4aSRandall Stewart struct sctp_inpcb *inp; 2341f8829a4aSRandall Stewart 2342f8829a4aSRandall Stewart /* go through all our PCB's */ 2343b3f1ea41SRandall Stewart LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) { 2344f8829a4aSRandall Stewart struct sctp_tcb *stcb; 2345f8829a4aSRandall Stewart 2346f8829a4aSRandall Stewart /* process for all associations for this endpoint */ 2347f8829a4aSRandall Stewart LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) { 2348f8829a4aSRandall Stewart /* queue an ASCONF:SET_PRIM_ADDR to be sent */ 2349f8829a4aSRandall Stewart if (!sctp_asconf_queue_add(stcb, ifa, 2350f8829a4aSRandall Stewart SCTP_SET_PRIM_ADDR)) { 2351f8829a4aSRandall Stewart /* set primary queuing succeeded */ 2352ceaad40aSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address: queued on stcb=%p, ", 2353f8829a4aSRandall Stewart stcb); 2354ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &ifa->address.sa); 23551b649582SRandall Stewart if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) { 23561b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 23571b649582SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 23581b649582SRandall Stewart stcb->sctp_ep, stcb, 23591b649582SRandall Stewart stcb->asoc.primary_destination); 23601b649582SRandall Stewart #else 23613232788eSRandall Stewart sctp_send_asconf(stcb, stcb->asoc.primary_destination, 23623232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 23631b649582SRandall Stewart #endif 23641b649582SRandall Stewart } 2365f8829a4aSRandall Stewart } 2366f8829a4aSRandall Stewart } /* for each stcb */ 2367f8829a4aSRandall Stewart } /* for each inp */ 2368f8829a4aSRandall Stewart } 2369f8829a4aSRandall Stewart 2370c54a18d2SRandall Stewart int 2371c54a18d2SRandall Stewart sctp_is_addr_pending(struct sctp_tcb *stcb, struct sctp_ifa *sctp_ifa) 2372c54a18d2SRandall Stewart { 2373c54a18d2SRandall Stewart struct sctp_tmit_chunk *chk, *nchk; 2374c54a18d2SRandall Stewart unsigned int offset, asconf_limit; 2375c54a18d2SRandall Stewart struct sctp_asconf_chunk *acp; 2376c54a18d2SRandall Stewart struct sctp_asconf_paramhdr *aph; 2377c54a18d2SRandall Stewart uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE]; 2378c54a18d2SRandall Stewart struct sctp_ipv6addr_param *p_addr; 2379c54a18d2SRandall Stewart int add_cnt, del_cnt; 2380c54a18d2SRandall Stewart uint16_t last_param_type; 2381c54a18d2SRandall Stewart 2382c54a18d2SRandall Stewart add_cnt = del_cnt = 0; 2383c54a18d2SRandall Stewart last_param_type = 0; 23844a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &stcb->asoc.asconf_send_queue, sctp_next, nchk) { 2385c54a18d2SRandall Stewart if (chk->data == NULL) { 2386c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: No mbuf data?\n"); 2387c54a18d2SRandall Stewart continue; 2388c54a18d2SRandall Stewart } 2389c54a18d2SRandall Stewart offset = 0; 2390c54a18d2SRandall Stewart acp = mtod(chk->data, struct sctp_asconf_chunk *); 2391c54a18d2SRandall Stewart offset += sizeof(struct sctp_asconf_chunk); 2392c54a18d2SRandall Stewart asconf_limit = ntohs(acp->ch.chunk_length); 2393c54a18d2SRandall Stewart p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_paramhdr), aparam_buf); 2394c54a18d2SRandall Stewart if (p_addr == NULL) { 2395c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get lookup addr!\n"); 2396c54a18d2SRandall Stewart continue; 2397c54a18d2SRandall Stewart } 2398c54a18d2SRandall Stewart offset += ntohs(p_addr->ph.param_length); 2399c54a18d2SRandall Stewart 2400c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf); 2401c54a18d2SRandall Stewart if (aph == NULL) { 2402c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: Empty ASCONF will be sent?\n"); 2403c54a18d2SRandall Stewart continue; 2404c54a18d2SRandall Stewart } 2405c54a18d2SRandall Stewart while (aph != NULL) { 2406c54a18d2SRandall Stewart unsigned int param_length, param_type; 2407c54a18d2SRandall Stewart 2408c54a18d2SRandall Stewart param_type = ntohs(aph->ph.param_type); 2409c54a18d2SRandall Stewart param_length = ntohs(aph->ph.param_length); 2410c54a18d2SRandall Stewart if (offset + param_length > asconf_limit) { 2411c54a18d2SRandall Stewart /* parameter goes beyond end of chunk! */ 2412c54a18d2SRandall Stewart break; 2413c54a18d2SRandall Stewart } 2414c54a18d2SRandall Stewart if (param_length > sizeof(aparam_buf)) { 2415c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length); 2416c54a18d2SRandall Stewart break; 2417c54a18d2SRandall Stewart } 2418c54a18d2SRandall Stewart if (param_length <= sizeof(struct sctp_paramhdr)) { 2419c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length); 2420c54a18d2SRandall Stewart break; 2421c54a18d2SRandall Stewart } 2422c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf); 2423c54a18d2SRandall Stewart if (aph == NULL) { 2424c54a18d2SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get entire param\n"); 2425c54a18d2SRandall Stewart break; 2426c54a18d2SRandall Stewart } 2427c54a18d2SRandall Stewart p_addr = (struct sctp_ipv6addr_param *)(aph + 1); 2428c54a18d2SRandall Stewart if (sctp_addr_match(p_addr, &sctp_ifa->address.sa) != 0) { 2429c54a18d2SRandall Stewart switch (param_type) { 2430c54a18d2SRandall Stewart case SCTP_ADD_IP_ADDRESS: 2431c54a18d2SRandall Stewart add_cnt++; 2432c54a18d2SRandall Stewart break; 2433c54a18d2SRandall Stewart case SCTP_DEL_IP_ADDRESS: 2434c54a18d2SRandall Stewart del_cnt++; 2435c54a18d2SRandall Stewart break; 2436c54a18d2SRandall Stewart default: 2437c54a18d2SRandall Stewart break; 2438c54a18d2SRandall Stewart } 2439c54a18d2SRandall Stewart last_param_type = param_type; 2440c54a18d2SRandall Stewart } 2441c54a18d2SRandall Stewart offset += SCTP_SIZE32(param_length); 2442c54a18d2SRandall Stewart if (offset >= asconf_limit) { 2443c54a18d2SRandall Stewart /* no more data in the mbuf chain */ 2444c54a18d2SRandall Stewart break; 2445c54a18d2SRandall Stewart } 2446c54a18d2SRandall Stewart /* get pointer to next asconf param */ 2447c54a18d2SRandall Stewart aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf); 2448c54a18d2SRandall Stewart } 2449c54a18d2SRandall Stewart } 2450c54a18d2SRandall Stewart 2451c54a18d2SRandall Stewart /* 2452c54a18d2SRandall Stewart * we want to find the sequences which consist of ADD -> DEL -> ADD 2453c54a18d2SRandall Stewart * or DEL -> ADD 2454c54a18d2SRandall Stewart */ 2455c54a18d2SRandall Stewart if (add_cnt > del_cnt || 2456c54a18d2SRandall Stewart (add_cnt == del_cnt && last_param_type == SCTP_ADD_IP_ADDRESS)) { 2457c54a18d2SRandall Stewart return 1; 2458c54a18d2SRandall Stewart } 2459c54a18d2SRandall Stewart return 0; 2460c54a18d2SRandall Stewart } 2461c54a18d2SRandall Stewart 2462f8829a4aSRandall Stewart static struct sockaddr * 24633232788eSRandall Stewart sctp_find_valid_localaddr(struct sctp_tcb *stcb, int addr_locked) 2464f8829a4aSRandall Stewart { 246542551e99SRandall Stewart struct sctp_vrf *vrf = NULL; 246642551e99SRandall Stewart struct sctp_ifn *sctp_ifn; 246742551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 2468f8829a4aSRandall Stewart 24693232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2470c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 247142551e99SRandall Stewart vrf = sctp_find_vrf(stcb->asoc.vrf_id); 2472ad81507eSRandall Stewart if (vrf == NULL) { 24733232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2474c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 2475ad81507eSRandall Stewart return (NULL); 2476ad81507eSRandall Stewart } 247742551e99SRandall Stewart LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) { 247842551e99SRandall Stewart if (stcb->asoc.loopback_scope == 0 && 247942551e99SRandall Stewart SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) { 2480f8829a4aSRandall Stewart /* Skip if loopback_scope not set */ 2481f8829a4aSRandall Stewart continue; 2482f8829a4aSRandall Stewart } 248342551e99SRandall Stewart LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) { 248442551e99SRandall Stewart if (sctp_ifa->address.sa.sa_family == AF_INET && 2485f8829a4aSRandall Stewart stcb->asoc.ipv4_addr_legal) { 2486f8829a4aSRandall Stewart struct sockaddr_in *sin; 2487f8829a4aSRandall Stewart 248842551e99SRandall Stewart sin = (struct sockaddr_in *)&sctp_ifa->address.sa; 2489f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 0) { 2490f8829a4aSRandall Stewart /* skip unspecifed addresses */ 2491f8829a4aSRandall Stewart continue; 2492f8829a4aSRandall Stewart } 2493f8829a4aSRandall Stewart if (stcb->asoc.ipv4_local_scope == 0 && 2494f8829a4aSRandall Stewart IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) 2495f8829a4aSRandall Stewart continue; 2496f8829a4aSRandall Stewart 2497c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, sctp_ifa) && 2498c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, sctp_ifa))) 2499f8829a4aSRandall Stewart continue; 2500f8829a4aSRandall Stewart /* found a valid local v4 address to use */ 25013232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2502c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 250342551e99SRandall Stewart return (&sctp_ifa->address.sa); 250442551e99SRandall Stewart } else if (sctp_ifa->address.sa.sa_family == AF_INET6 && 2505f8829a4aSRandall Stewart stcb->asoc.ipv6_addr_legal) { 2506f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 2507f8829a4aSRandall Stewart 250842551e99SRandall Stewart if (sctp_ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 2509f8829a4aSRandall Stewart continue; 251042551e99SRandall Stewart } 251142551e99SRandall Stewart sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa; 2512f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 2513f8829a4aSRandall Stewart /* we skip unspecifed addresses */ 2514f8829a4aSRandall Stewart continue; 2515f8829a4aSRandall Stewart } 2516f8829a4aSRandall Stewart if (stcb->asoc.local_scope == 0 && 2517f8829a4aSRandall Stewart IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) 2518f8829a4aSRandall Stewart continue; 2519f8829a4aSRandall Stewart if (stcb->asoc.site_scope == 0 && 2520f8829a4aSRandall Stewart IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) 2521f8829a4aSRandall Stewart continue; 2522f8829a4aSRandall Stewart 2523c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, sctp_ifa) && 2524c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, sctp_ifa))) 2525c54a18d2SRandall Stewart continue; 2526f8829a4aSRandall Stewart /* found a valid local v6 address to use */ 25273232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2528c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 252942551e99SRandall Stewart return (&sctp_ifa->address.sa); 2530f8829a4aSRandall Stewart } 2531f8829a4aSRandall Stewart } 2532f8829a4aSRandall Stewart } 2533f8829a4aSRandall Stewart /* no valid addresses found */ 25343232788eSRandall Stewart if (addr_locked == SCTP_ADDR_NOT_LOCKED) 2535c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 2536f8829a4aSRandall Stewart return (NULL); 2537f8829a4aSRandall Stewart } 2538f8829a4aSRandall Stewart 2539f8829a4aSRandall Stewart static struct sockaddr * 2540f8829a4aSRandall Stewart sctp_find_valid_localaddr_ep(struct sctp_tcb *stcb) 2541f8829a4aSRandall Stewart { 2542f8829a4aSRandall Stewart struct sctp_laddr *laddr; 2543f8829a4aSRandall Stewart 2544f8829a4aSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 2545f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 2546f8829a4aSRandall Stewart continue; 2547f8829a4aSRandall Stewart } 2548f8829a4aSRandall Stewart /* is the address restricted ? */ 2549c54a18d2SRandall Stewart if (sctp_is_addr_restricted(stcb, laddr->ifa) && 2550c54a18d2SRandall Stewart (!sctp_is_addr_pending(stcb, laddr->ifa))) 2551f8829a4aSRandall Stewart continue; 2552f8829a4aSRandall Stewart 2553f8829a4aSRandall Stewart /* found a valid local address to use */ 255442551e99SRandall Stewart return (&laddr->ifa->address.sa); 2555f8829a4aSRandall Stewart } 2556f8829a4aSRandall Stewart /* no valid addresses found */ 2557f8829a4aSRandall Stewart return (NULL); 2558f8829a4aSRandall Stewart } 2559f8829a4aSRandall Stewart 2560f8829a4aSRandall Stewart /* 256118e198d3SRandall Stewart * builds an ASCONF chunk from queued ASCONF params. 256218e198d3SRandall Stewart * returns NULL on error (no mbuf, no ASCONF params queued, etc). 2563f8829a4aSRandall Stewart */ 2564f8829a4aSRandall Stewart struct mbuf * 25653232788eSRandall Stewart sctp_compose_asconf(struct sctp_tcb *stcb, int *retlen, int addr_locked) 2566f8829a4aSRandall Stewart { 2567f8829a4aSRandall Stewart struct mbuf *m_asconf, *m_asconf_chk; 2568f8829a4aSRandall Stewart struct sctp_asconf_addr *aa; 2569f8829a4aSRandall Stewart struct sctp_asconf_chunk *acp; 2570f8829a4aSRandall Stewart struct sctp_asconf_paramhdr *aph; 2571f8829a4aSRandall Stewart struct sctp_asconf_addr_param *aap; 2572f8829a4aSRandall Stewart uint32_t p_length; 2573f8829a4aSRandall Stewart uint32_t correlation_id = 1; /* 0 is reserved... */ 2574f8829a4aSRandall Stewart caddr_t ptr, lookup_ptr; 2575f8829a4aSRandall Stewart uint8_t lookup_used = 0; 2576f8829a4aSRandall Stewart 2577f8829a4aSRandall Stewart /* are there any asconf params to send? */ 2578c54a18d2SRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 2579c54a18d2SRandall Stewart if (aa->sent == 0) 2580c54a18d2SRandall Stewart break; 2581f8829a4aSRandall Stewart } 2582c54a18d2SRandall Stewart if (aa == NULL) 25831b649582SRandall Stewart return (NULL); 2584c54a18d2SRandall Stewart 2585f8829a4aSRandall Stewart /* 2586f8829a4aSRandall Stewart * get a chunk header mbuf and a cluster for the asconf params since 2587f8829a4aSRandall Stewart * it's simpler to fill in the asconf chunk header lookup address on 2588f8829a4aSRandall Stewart * the fly 2589f8829a4aSRandall Stewart */ 2590139bc87fSRandall Stewart m_asconf_chk = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_chunk), 0, M_DONTWAIT, 1, MT_DATA); 2591f8829a4aSRandall Stewart if (m_asconf_chk == NULL) { 2592f8829a4aSRandall Stewart /* no mbuf's */ 2593ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2594ad81507eSRandall Stewart "compose_asconf: couldn't get chunk mbuf!\n"); 2595f8829a4aSRandall Stewart return (NULL); 2596f8829a4aSRandall Stewart } 2597139bc87fSRandall Stewart m_asconf = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA); 2598f8829a4aSRandall Stewart if (m_asconf == NULL) { 2599f8829a4aSRandall Stewart /* no mbuf's */ 2600ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2601ad81507eSRandall Stewart "compose_asconf: couldn't get mbuf!\n"); 2602f8829a4aSRandall Stewart sctp_m_freem(m_asconf_chk); 2603f8829a4aSRandall Stewart return (NULL); 2604f8829a4aSRandall Stewart } 2605139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) = sizeof(struct sctp_asconf_chunk); 2606139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf) = 0; 2607f8829a4aSRandall Stewart acp = mtod(m_asconf_chk, struct sctp_asconf_chunk *); 2608f8829a4aSRandall Stewart bzero(acp, sizeof(struct sctp_asconf_chunk)); 2609f8829a4aSRandall Stewart /* save pointers to lookup address and asconf params */ 2610f8829a4aSRandall Stewart lookup_ptr = (caddr_t)(acp + 1); /* after the header */ 2611f8829a4aSRandall Stewart ptr = mtod(m_asconf, caddr_t); /* beginning of cluster */ 2612f8829a4aSRandall Stewart 2613f8829a4aSRandall Stewart /* fill in chunk header info */ 2614f8829a4aSRandall Stewart acp->ch.chunk_type = SCTP_ASCONF; 2615f8829a4aSRandall Stewart acp->ch.chunk_flags = 0; 2616f8829a4aSRandall Stewart acp->serial_number = htonl(stcb->asoc.asconf_seq_out); 2617c54a18d2SRandall Stewart stcb->asoc.asconf_seq_out++; 2618f8829a4aSRandall Stewart 2619f8829a4aSRandall Stewart /* add parameters... up to smallest MTU allowed */ 2620f8829a4aSRandall Stewart TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) { 2621c54a18d2SRandall Stewart if (aa->sent) 2622c54a18d2SRandall Stewart continue; 2623f8829a4aSRandall Stewart /* get the parameter length */ 2624f8829a4aSRandall Stewart p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length); 2625f8829a4aSRandall Stewart /* will it fit in current chunk? */ 2626139bc87fSRandall Stewart if (SCTP_BUF_LEN(m_asconf) + p_length > stcb->asoc.smallest_mtu) { 2627f8829a4aSRandall Stewart /* won't fit, so we're done with this chunk */ 2628f8829a4aSRandall Stewart break; 2629f8829a4aSRandall Stewart } 2630f8829a4aSRandall Stewart /* assign (and store) a correlation id */ 2631f8829a4aSRandall Stewart aa->ap.aph.correlation_id = correlation_id++; 2632f8829a4aSRandall Stewart 2633f8829a4aSRandall Stewart /* 2634f8829a4aSRandall Stewart * fill in address if we're doing a delete this is a simple 2635f8829a4aSRandall Stewart * way for us to fill in the correlation address, which 2636f8829a4aSRandall Stewart * should only be used by the peer if we're deleting our 2637f8829a4aSRandall Stewart * source address and adding a new address (e.g. renumbering 2638f8829a4aSRandall Stewart * case) 2639f8829a4aSRandall Stewart */ 2640f8829a4aSRandall Stewart if (lookup_used == 0 && 2641830d754dSRandall Stewart (aa->special_del == 0) && 2642f8829a4aSRandall Stewart aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) { 2643f8829a4aSRandall Stewart struct sctp_ipv6addr_param *lookup; 2644f8829a4aSRandall Stewart uint16_t p_size, addr_size; 2645f8829a4aSRandall Stewart 2646f8829a4aSRandall Stewart lookup = (struct sctp_ipv6addr_param *)lookup_ptr; 2647f8829a4aSRandall Stewart lookup->ph.param_type = 2648f8829a4aSRandall Stewart htons(aa->ap.addrp.ph.param_type); 2649f8829a4aSRandall Stewart if (aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) { 2650f8829a4aSRandall Stewart /* copy IPv6 address */ 2651f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv6addr_param); 2652f8829a4aSRandall Stewart addr_size = sizeof(struct in6_addr); 2653f8829a4aSRandall Stewart } else { 2654f8829a4aSRandall Stewart /* copy IPv4 address */ 2655f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv4addr_param); 2656f8829a4aSRandall Stewart addr_size = sizeof(struct in_addr); 2657f8829a4aSRandall Stewart } 2658f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(p_size)); 2659f8829a4aSRandall Stewart memcpy(lookup->addr, &aa->ap.addrp.addr, addr_size); 2660139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size); 2661f8829a4aSRandall Stewart lookup_used = 1; 2662f8829a4aSRandall Stewart } 2663f8829a4aSRandall Stewart /* copy into current space */ 2664f8829a4aSRandall Stewart memcpy(ptr, &aa->ap, p_length); 2665f8829a4aSRandall Stewart 2666f8829a4aSRandall Stewart /* network elements and update lengths */ 2667f8829a4aSRandall Stewart aph = (struct sctp_asconf_paramhdr *)ptr; 2668f8829a4aSRandall Stewart aap = (struct sctp_asconf_addr_param *)ptr; 2669f8829a4aSRandall Stewart /* correlation_id is transparent to peer, no htonl needed */ 2670f8829a4aSRandall Stewart aph->ph.param_type = htons(aph->ph.param_type); 2671f8829a4aSRandall Stewart aph->ph.param_length = htons(aph->ph.param_length); 2672f8829a4aSRandall Stewart aap->addrp.ph.param_type = htons(aap->addrp.ph.param_type); 2673f8829a4aSRandall Stewart aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length); 2674f8829a4aSRandall Stewart 2675139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf) += SCTP_SIZE32(p_length); 2676f8829a4aSRandall Stewart ptr += SCTP_SIZE32(p_length); 2677f8829a4aSRandall Stewart 2678f8829a4aSRandall Stewart /* 2679f8829a4aSRandall Stewart * these params are removed off the pending list upon 2680f8829a4aSRandall Stewart * getting an ASCONF-ACK back from the peer, just set flag 2681f8829a4aSRandall Stewart */ 2682f8829a4aSRandall Stewart aa->sent = 1; 2683f8829a4aSRandall Stewart } 2684f8829a4aSRandall Stewart /* check to see if the lookup addr has been populated yet */ 2685f8829a4aSRandall Stewart if (lookup_used == 0) { 2686f8829a4aSRandall Stewart /* NOTE: if the address param is optional, can skip this... */ 2687f8829a4aSRandall Stewart /* add any valid (existing) address... */ 2688f8829a4aSRandall Stewart struct sctp_ipv6addr_param *lookup; 2689f8829a4aSRandall Stewart uint16_t p_size, addr_size; 2690f8829a4aSRandall Stewart struct sockaddr *found_addr; 2691f8829a4aSRandall Stewart caddr_t addr_ptr; 2692f8829a4aSRandall Stewart 2693f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) 26943232788eSRandall Stewart found_addr = sctp_find_valid_localaddr(stcb, 26953232788eSRandall Stewart addr_locked); 2696f8829a4aSRandall Stewart else 2697f8829a4aSRandall Stewart found_addr = sctp_find_valid_localaddr_ep(stcb); 2698f8829a4aSRandall Stewart 2699f8829a4aSRandall Stewart lookup = (struct sctp_ipv6addr_param *)lookup_ptr; 2700f8829a4aSRandall Stewart if (found_addr != NULL) { 2701f8829a4aSRandall Stewart if (found_addr->sa_family == AF_INET6) { 2702f8829a4aSRandall Stewart /* copy IPv6 address */ 2703f8829a4aSRandall Stewart lookup->ph.param_type = 2704f8829a4aSRandall Stewart htons(SCTP_IPV6_ADDRESS); 2705f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv6addr_param); 2706f8829a4aSRandall Stewart addr_size = sizeof(struct in6_addr); 2707f8829a4aSRandall Stewart addr_ptr = (caddr_t)&((struct sockaddr_in6 *) 2708f8829a4aSRandall Stewart found_addr)->sin6_addr; 2709f8829a4aSRandall Stewart } else { 2710f8829a4aSRandall Stewart /* copy IPv4 address */ 2711f8829a4aSRandall Stewart lookup->ph.param_type = 2712f8829a4aSRandall Stewart htons(SCTP_IPV4_ADDRESS); 2713f8829a4aSRandall Stewart p_size = sizeof(struct sctp_ipv4addr_param); 2714f8829a4aSRandall Stewart addr_size = sizeof(struct in_addr); 2715f8829a4aSRandall Stewart addr_ptr = (caddr_t)&((struct sockaddr_in *) 2716f8829a4aSRandall Stewart found_addr)->sin_addr; 2717f8829a4aSRandall Stewart } 2718f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(p_size)); 2719f8829a4aSRandall Stewart memcpy(lookup->addr, addr_ptr, addr_size); 2720139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size); 2721f8829a4aSRandall Stewart lookup_used = 1; 2722f8829a4aSRandall Stewart } else { 2723f8829a4aSRandall Stewart /* uh oh... don't have any address?? */ 2724ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2725ad81507eSRandall Stewart "compose_asconf: no lookup addr!\n"); 2726f8829a4aSRandall Stewart /* for now, we send a IPv4 address of 0.0.0.0 */ 2727f8829a4aSRandall Stewart lookup->ph.param_type = htons(SCTP_IPV4_ADDRESS); 2728f8829a4aSRandall Stewart lookup->ph.param_length = htons(SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param))); 2729f8829a4aSRandall Stewart bzero(lookup->addr, sizeof(struct in_addr)); 2730139bc87fSRandall Stewart SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param)); 2731f8829a4aSRandall Stewart lookup_used = 1; 2732f8829a4aSRandall Stewart } 2733f8829a4aSRandall Stewart } 2734f8829a4aSRandall Stewart /* chain it all together */ 2735139bc87fSRandall Stewart SCTP_BUF_NEXT(m_asconf_chk) = m_asconf; 27363c503c28SRandall Stewart *retlen = SCTP_BUF_LEN(m_asconf_chk) + SCTP_BUF_LEN(m_asconf); 27373c503c28SRandall Stewart acp->ch.chunk_length = ntohs(*retlen); 2738f8829a4aSRandall Stewart 2739f8829a4aSRandall Stewart return (m_asconf_chk); 2740f8829a4aSRandall Stewart } 2741f8829a4aSRandall Stewart 2742f8829a4aSRandall Stewart /* 2743f8829a4aSRandall Stewart * section to handle address changes before an association is up eg. changes 2744f8829a4aSRandall Stewart * during INIT/INIT-ACK/COOKIE-ECHO handshake 2745f8829a4aSRandall Stewart */ 2746f8829a4aSRandall Stewart 2747f8829a4aSRandall Stewart /* 2748f8829a4aSRandall Stewart * processes the (local) addresses in the INIT-ACK chunk 2749f8829a4aSRandall Stewart */ 2750f8829a4aSRandall Stewart static void 2751f8829a4aSRandall Stewart sctp_process_initack_addresses(struct sctp_tcb *stcb, struct mbuf *m, 2752f8829a4aSRandall Stewart unsigned int offset, unsigned int length) 2753f8829a4aSRandall Stewart { 2754f8829a4aSRandall Stewart struct sctp_paramhdr tmp_param, *ph; 2755f8829a4aSRandall Stewart uint16_t plen, ptype; 275642551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 2757f8829a4aSRandall Stewart struct sctp_ipv6addr_param addr_store; 2758f8829a4aSRandall Stewart struct sockaddr_in6 sin6; 2759f8829a4aSRandall Stewart struct sockaddr_in sin; 2760f8829a4aSRandall Stewart struct sockaddr *sa; 276142551e99SRandall Stewart uint32_t vrf_id; 2762f8829a4aSRandall Stewart 2763ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "processing init-ack addresses\n"); 2764ad81507eSRandall Stewart if (stcb == NULL) /* Un-needed check for SA */ 2765ad81507eSRandall Stewart return; 2766f8829a4aSRandall Stewart 2767f8829a4aSRandall Stewart /* convert to upper bound */ 2768f8829a4aSRandall Stewart length += offset; 2769f8829a4aSRandall Stewart 2770f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) { 2771f8829a4aSRandall Stewart return; 2772f8829a4aSRandall Stewart } 2773f8829a4aSRandall Stewart /* init the addresses */ 2774f8829a4aSRandall Stewart bzero(&sin6, sizeof(sin6)); 2775f8829a4aSRandall Stewart sin6.sin6_family = AF_INET6; 2776f8829a4aSRandall Stewart sin6.sin6_len = sizeof(sin6); 2777f8829a4aSRandall Stewart sin6.sin6_port = stcb->rport; 2778f8829a4aSRandall Stewart 2779f8829a4aSRandall Stewart bzero(&sin, sizeof(sin)); 2780f8829a4aSRandall Stewart sin.sin_len = sizeof(sin); 2781f8829a4aSRandall Stewart sin.sin_family = AF_INET; 2782f8829a4aSRandall Stewart sin.sin_port = stcb->rport; 2783f8829a4aSRandall Stewart 2784f8829a4aSRandall Stewart /* go through the addresses in the init-ack */ 2785f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset, 2786f8829a4aSRandall Stewart sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param); 2787f8829a4aSRandall Stewart while (ph != NULL) { 2788f8829a4aSRandall Stewart ptype = ntohs(ph->param_type); 2789f8829a4aSRandall Stewart plen = ntohs(ph->param_length); 2790f8829a4aSRandall Stewart if (ptype == SCTP_IPV6_ADDRESS) { 2791f8829a4aSRandall Stewart struct sctp_ipv6addr_param *a6p; 2792f8829a4aSRandall Stewart 2793f8829a4aSRandall Stewart /* get the entire IPv6 address param */ 2794f8829a4aSRandall Stewart a6p = (struct sctp_ipv6addr_param *) 2795f8829a4aSRandall Stewart sctp_m_getptr(m, offset, 2796f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param), 2797f8829a4aSRandall Stewart (uint8_t *) & addr_store); 2798f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv6addr_param) || 2799f8829a4aSRandall Stewart a6p == NULL) { 2800f8829a4aSRandall Stewart return; 2801f8829a4aSRandall Stewart } 2802f8829a4aSRandall Stewart memcpy(&sin6.sin6_addr, a6p->addr, 2803f8829a4aSRandall Stewart sizeof(struct in6_addr)); 2804f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin6; 2805f8829a4aSRandall Stewart } else if (ptype == SCTP_IPV4_ADDRESS) { 2806f8829a4aSRandall Stewart struct sctp_ipv4addr_param *a4p; 2807f8829a4aSRandall Stewart 2808f8829a4aSRandall Stewart /* get the entire IPv4 address param */ 280942551e99SRandall Stewart a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, offset, 281042551e99SRandall Stewart sizeof(struct sctp_ipv4addr_param), 281142551e99SRandall Stewart (uint8_t *) & addr_store); 2812f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv4addr_param) || 2813f8829a4aSRandall Stewart a4p == NULL) { 2814f8829a4aSRandall Stewart return; 2815f8829a4aSRandall Stewart } 2816f8829a4aSRandall Stewart sin.sin_addr.s_addr = a4p->addr; 2817f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin; 2818f8829a4aSRandall Stewart } else { 2819f8829a4aSRandall Stewart goto next_addr; 2820f8829a4aSRandall Stewart } 2821f8829a4aSRandall Stewart 2822f8829a4aSRandall Stewart /* see if this address really (still) exists */ 2823bff64a4dSRandall Stewart if (stcb) { 2824bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 2825bff64a4dSRandall Stewart } else { 282642551e99SRandall Stewart vrf_id = SCTP_DEFAULT_VRFID; 2827bff64a4dSRandall Stewart } 28283232788eSRandall Stewart sctp_ifa = sctp_find_ifa_by_addr(sa, vrf_id, 28293232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 283042551e99SRandall Stewart if (sctp_ifa == NULL) { 2831f8829a4aSRandall Stewart /* address doesn't exist anymore */ 2832f8829a4aSRandall Stewart int status; 2833f8829a4aSRandall Stewart 2834f8829a4aSRandall Stewart /* are ASCONFs allowed ? */ 2835f8829a4aSRandall Stewart if ((sctp_is_feature_on(stcb->sctp_ep, 2836f8829a4aSRandall Stewart SCTP_PCB_FLAGS_DO_ASCONF)) && 2837f8829a4aSRandall Stewart stcb->asoc.peer_supports_asconf) { 2838f8829a4aSRandall Stewart /* queue an ASCONF DEL_IP_ADDRESS */ 28393232788eSRandall Stewart status = sctp_asconf_queue_sa_delete(stcb, sa); 2840f8829a4aSRandall Stewart /* 28411b649582SRandall Stewart * if queued ok, and in correct state, send 28421b649582SRandall Stewart * out the ASCONF. 2843f8829a4aSRandall Stewart */ 2844f8829a4aSRandall Stewart if (status == 0 && 2845f8829a4aSRandall Stewart SCTP_GET_STATE(&stcb->asoc) == 2846f8829a4aSRandall Stewart SCTP_STATE_OPEN) { 28471b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF 2848f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, 2849f8829a4aSRandall Stewart stcb->sctp_ep, stcb, 2850f8829a4aSRandall Stewart stcb->asoc.primary_destination); 28511b649582SRandall Stewart #else 28523232788eSRandall Stewart sctp_send_asconf(stcb, stcb->asoc.primary_destination, 28533232788eSRandall Stewart SCTP_ADDR_NOT_LOCKED); 28541b649582SRandall Stewart #endif 2855f8829a4aSRandall Stewart } 2856f8829a4aSRandall Stewart } 2857f8829a4aSRandall Stewart } 2858f8829a4aSRandall Stewart next_addr: 2859f8829a4aSRandall Stewart /* 2860f8829a4aSRandall Stewart * Sanity check: Make sure the length isn't 0, otherwise 2861f8829a4aSRandall Stewart * we'll be stuck in this loop for a long time... 2862f8829a4aSRandall Stewart */ 2863f8829a4aSRandall Stewart if (SCTP_SIZE32(plen) == 0) { 2864ad81507eSRandall Stewart SCTP_PRINTF("process_initack_addrs: bad len (%d) type=%xh\n", 2865f8829a4aSRandall Stewart plen, ptype); 2866f8829a4aSRandall Stewart return; 2867f8829a4aSRandall Stewart } 2868f8829a4aSRandall Stewart /* get next parameter */ 2869f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 2870f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) 2871f8829a4aSRandall Stewart return; 2872f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset, 2873f8829a4aSRandall Stewart sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param); 2874f8829a4aSRandall Stewart } /* while */ 2875f8829a4aSRandall Stewart } 2876f8829a4aSRandall Stewart 2877f8829a4aSRandall Stewart /* FIX ME: need to verify return result for v6 address type if v6 disabled */ 2878f8829a4aSRandall Stewart /* 2879f8829a4aSRandall Stewart * checks to see if a specific address is in the initack address list returns 2880f8829a4aSRandall Stewart * 1 if found, 0 if not 2881f8829a4aSRandall Stewart */ 2882f8829a4aSRandall Stewart static uint32_t 2883f8829a4aSRandall Stewart sctp_addr_in_initack(struct sctp_tcb *stcb, struct mbuf *m, uint32_t offset, 2884f8829a4aSRandall Stewart uint32_t length, struct sockaddr *sa) 2885f8829a4aSRandall Stewart { 2886f8829a4aSRandall Stewart struct sctp_paramhdr tmp_param, *ph; 2887f8829a4aSRandall Stewart uint16_t plen, ptype; 2888f8829a4aSRandall Stewart struct sctp_ipv6addr_param addr_store; 2889f8829a4aSRandall Stewart struct sockaddr_in *sin; 2890f8829a4aSRandall Stewart struct sctp_ipv4addr_param *a4p; 2891f8829a4aSRandall Stewart 2892f8829a4aSRandall Stewart #ifdef INET6 289342551e99SRandall Stewart struct sockaddr_in6 *sin6; 2894f8829a4aSRandall Stewart struct sctp_ipv6addr_param *a6p; 289542551e99SRandall Stewart struct sockaddr_in6 sin6_tmp; 2896f8829a4aSRandall Stewart 2897f8829a4aSRandall Stewart #endif /* INET6 */ 2898f8829a4aSRandall Stewart 2899f8829a4aSRandall Stewart if ( 2900f8829a4aSRandall Stewart #ifdef INET6 2901f8829a4aSRandall Stewart (sa->sa_family != AF_INET6) && 2902f8829a4aSRandall Stewart #endif /* INET6 */ 2903f8829a4aSRandall Stewart (sa->sa_family != AF_INET)) 2904f8829a4aSRandall Stewart return (0); 2905f8829a4aSRandall Stewart 2906ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF2, "find_initack_addr: starting search for "); 2907ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa); 2908f8829a4aSRandall Stewart /* convert to upper bound */ 2909f8829a4aSRandall Stewart length += offset; 2910f8829a4aSRandall Stewart 2911f8829a4aSRandall Stewart if ((offset + sizeof(struct sctp_paramhdr)) > length) { 2912ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2913ad81507eSRandall Stewart "find_initack_addr: invalid offset?\n"); 2914f8829a4aSRandall Stewart return (0); 2915f8829a4aSRandall Stewart } 2916f8829a4aSRandall Stewart /* go through the addresses in the init-ack */ 2917f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset, 2918f8829a4aSRandall Stewart sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param); 2919f8829a4aSRandall Stewart while (ph != NULL) { 2920f8829a4aSRandall Stewart ptype = ntohs(ph->param_type); 2921f8829a4aSRandall Stewart plen = ntohs(ph->param_length); 2922f8829a4aSRandall Stewart #ifdef INET6 2923f8829a4aSRandall Stewart if (ptype == SCTP_IPV6_ADDRESS && sa->sa_family == AF_INET6) { 2924f8829a4aSRandall Stewart /* get the entire IPv6 address param */ 2925f8829a4aSRandall Stewart a6p = (struct sctp_ipv6addr_param *) 2926f8829a4aSRandall Stewart sctp_m_getptr(m, offset, 2927f8829a4aSRandall Stewart sizeof(struct sctp_ipv6addr_param), 2928f8829a4aSRandall Stewart (uint8_t *) & addr_store); 2929f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv6addr_param) || 2930ad81507eSRandall Stewart (ph == NULL) || 2931ad81507eSRandall Stewart (a6p == NULL)) { 2932f8829a4aSRandall Stewart return (0); 2933f8829a4aSRandall Stewart } 2934f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)sa; 2935f8829a4aSRandall Stewart if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) { 2936f8829a4aSRandall Stewart /* create a copy and clear scope */ 2937f8829a4aSRandall Stewart memcpy(&sin6_tmp, sin6, 2938f8829a4aSRandall Stewart sizeof(struct sockaddr_in6)); 2939f8829a4aSRandall Stewart sin6 = &sin6_tmp; 2940f8829a4aSRandall Stewart in6_clearscope(&sin6->sin6_addr); 2941f8829a4aSRandall Stewart } 2942f8829a4aSRandall Stewart if (memcmp(&sin6->sin6_addr, a6p->addr, 2943f8829a4aSRandall Stewart sizeof(struct in6_addr)) == 0) { 2944f8829a4aSRandall Stewart /* found it */ 2945f8829a4aSRandall Stewart return (1); 2946f8829a4aSRandall Stewart } 2947f8829a4aSRandall Stewart } else 2948f8829a4aSRandall Stewart #endif /* INET6 */ 2949f8829a4aSRandall Stewart 2950f8829a4aSRandall Stewart if (ptype == SCTP_IPV4_ADDRESS && 2951f8829a4aSRandall Stewart sa->sa_family == AF_INET) { 2952f8829a4aSRandall Stewart /* get the entire IPv4 address param */ 2953f8829a4aSRandall Stewart a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, 2954f8829a4aSRandall Stewart offset, sizeof(struct sctp_ipv4addr_param), 2955f8829a4aSRandall Stewart (uint8_t *) & addr_store); 2956f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv4addr_param) || 2957ad81507eSRandall Stewart (ph == NULL) || 2958ad81507eSRandall Stewart (a4p == NULL)) { 2959f8829a4aSRandall Stewart return (0); 2960f8829a4aSRandall Stewart } 2961f8829a4aSRandall Stewart sin = (struct sockaddr_in *)sa; 2962f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == a4p->addr) { 2963f8829a4aSRandall Stewart /* found it */ 2964f8829a4aSRandall Stewart return (1); 2965f8829a4aSRandall Stewart } 2966f8829a4aSRandall Stewart } 2967f8829a4aSRandall Stewart /* get next parameter */ 2968f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 2969f8829a4aSRandall Stewart if (offset + sizeof(struct sctp_paramhdr) > length) 2970f8829a4aSRandall Stewart return (0); 2971f8829a4aSRandall Stewart ph = (struct sctp_paramhdr *) 2972f8829a4aSRandall Stewart sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), 2973f8829a4aSRandall Stewart (uint8_t *) & tmp_param); 2974f8829a4aSRandall Stewart } /* while */ 2975f8829a4aSRandall Stewart /* not found! */ 2976f8829a4aSRandall Stewart return (0); 2977f8829a4aSRandall Stewart } 2978f8829a4aSRandall Stewart 2979f8829a4aSRandall Stewart /* 2980f8829a4aSRandall Stewart * makes sure that the current endpoint local addr list is consistent with 2981f8829a4aSRandall Stewart * the new association (eg. subset bound, asconf allowed) adds addresses as 2982f8829a4aSRandall Stewart * necessary 2983f8829a4aSRandall Stewart */ 2984f8829a4aSRandall Stewart static void 2985f8829a4aSRandall Stewart sctp_check_address_list_ep(struct sctp_tcb *stcb, struct mbuf *m, int offset, 2986f8829a4aSRandall Stewart int length, struct sockaddr *init_addr) 2987f8829a4aSRandall Stewart { 2988f8829a4aSRandall Stewart struct sctp_laddr *laddr; 2989f8829a4aSRandall Stewart 2990f8829a4aSRandall Stewart /* go through the endpoint list */ 2991f8829a4aSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 2992f8829a4aSRandall Stewart /* be paranoid and validate the laddr */ 2993f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 2994ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 2995ad81507eSRandall Stewart "check_addr_list_ep: laddr->ifa is NULL"); 2996f8829a4aSRandall Stewart continue; 2997f8829a4aSRandall Stewart } 299842551e99SRandall Stewart if (laddr->ifa == NULL) { 2999ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "check_addr_list_ep: laddr->ifa->ifa_addr is NULL"); 3000f8829a4aSRandall Stewart continue; 3001f8829a4aSRandall Stewart } 3002f8829a4aSRandall Stewart /* do i have it implicitly? */ 300342551e99SRandall Stewart if (sctp_cmpaddr(&laddr->ifa->address.sa, init_addr)) { 3004f8829a4aSRandall Stewart continue; 3005f8829a4aSRandall Stewart } 3006f8829a4aSRandall Stewart /* check to see if in the init-ack */ 3007f8829a4aSRandall Stewart if (!sctp_addr_in_initack(stcb, m, offset, length, 300842551e99SRandall Stewart &laddr->ifa->address.sa)) { 3009f8829a4aSRandall Stewart /* try to add it */ 3010f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, laddr->ifa, 30113232788eSRandall Stewart SCTP_ADD_IP_ADDRESS, SCTP_ADDR_NOT_LOCKED); 3012f8829a4aSRandall Stewart } 3013f8829a4aSRandall Stewart } 3014f8829a4aSRandall Stewart } 3015f8829a4aSRandall Stewart 3016f8829a4aSRandall Stewart /* 3017f8829a4aSRandall Stewart * makes sure that the current kernel address list is consistent with the new 3018f8829a4aSRandall Stewart * association (with all addrs bound) adds addresses as necessary 3019f8829a4aSRandall Stewart */ 3020f8829a4aSRandall Stewart static void 3021f8829a4aSRandall Stewart sctp_check_address_list_all(struct sctp_tcb *stcb, struct mbuf *m, int offset, 3022f8829a4aSRandall Stewart int length, struct sockaddr *init_addr, 3023f8829a4aSRandall Stewart uint16_t local_scope, uint16_t site_scope, 3024f8829a4aSRandall Stewart uint16_t ipv4_scope, uint16_t loopback_scope) 3025f8829a4aSRandall Stewart { 302642551e99SRandall Stewart struct sctp_vrf *vrf = NULL; 302742551e99SRandall Stewart struct sctp_ifn *sctp_ifn; 302842551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 302942551e99SRandall Stewart uint32_t vrf_id; 3030f8829a4aSRandall Stewart 3031bff64a4dSRandall Stewart if (stcb) { 3032bff64a4dSRandall Stewart vrf_id = stcb->asoc.vrf_id; 3033bff64a4dSRandall Stewart } else { 3034ad81507eSRandall Stewart return; 3035bff64a4dSRandall Stewart } 3036c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 303742551e99SRandall Stewart vrf = sctp_find_vrf(vrf_id); 303842551e99SRandall Stewart if (vrf == NULL) { 3039c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 304042551e99SRandall Stewart return; 304142551e99SRandall Stewart } 3042f8829a4aSRandall Stewart /* go through all our known interfaces */ 304342551e99SRandall Stewart LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) { 304442551e99SRandall Stewart if (loopback_scope == 0 && SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) { 3045f8829a4aSRandall Stewart /* skip loopback interface */ 3046f8829a4aSRandall Stewart continue; 3047f8829a4aSRandall Stewart } 3048f8829a4aSRandall Stewart /* go through each interface address */ 304942551e99SRandall Stewart LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) { 3050f8829a4aSRandall Stewart /* do i have it implicitly? */ 305142551e99SRandall Stewart if (sctp_cmpaddr(&sctp_ifa->address.sa, init_addr)) { 3052f8829a4aSRandall Stewart continue; 3053f8829a4aSRandall Stewart } 3054f8829a4aSRandall Stewart /* check to see if in the init-ack */ 3055f8829a4aSRandall Stewart if (!sctp_addr_in_initack(stcb, m, offset, length, 305642551e99SRandall Stewart &sctp_ifa->address.sa)) { 3057f8829a4aSRandall Stewart /* try to add it */ 3058f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, 30593232788eSRandall Stewart sctp_ifa, SCTP_ADD_IP_ADDRESS, 30603232788eSRandall Stewart SCTP_ADDR_LOCKED); 3061f8829a4aSRandall Stewart } 3062f8829a4aSRandall Stewart } /* end foreach ifa */ 3063f8829a4aSRandall Stewart } /* end foreach ifn */ 3064c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 3065f8829a4aSRandall Stewart } 3066f8829a4aSRandall Stewart 3067f8829a4aSRandall Stewart /* 3068f8829a4aSRandall Stewart * validates an init-ack chunk (from a cookie-echo) with current addresses 3069f8829a4aSRandall Stewart * adds addresses from the init-ack into our local address list, if needed 3070f8829a4aSRandall Stewart * queues asconf adds/deletes addresses as needed and makes appropriate list 3071f8829a4aSRandall Stewart * changes for source address selection m, offset: points to the start of the 3072f8829a4aSRandall Stewart * address list in an init-ack chunk length: total length of the address 3073f8829a4aSRandall Stewart * params only init_addr: address where my INIT-ACK was sent from 3074f8829a4aSRandall Stewart */ 3075f8829a4aSRandall Stewart void 3076f8829a4aSRandall Stewart sctp_check_address_list(struct sctp_tcb *stcb, struct mbuf *m, int offset, 3077f8829a4aSRandall Stewart int length, struct sockaddr *init_addr, 3078f8829a4aSRandall Stewart uint16_t local_scope, uint16_t site_scope, 3079f8829a4aSRandall Stewart uint16_t ipv4_scope, uint16_t loopback_scope) 3080f8829a4aSRandall Stewart { 3081f8829a4aSRandall Stewart /* process the local addresses in the initack */ 3082f8829a4aSRandall Stewart sctp_process_initack_addresses(stcb, m, offset, length); 3083f8829a4aSRandall Stewart 3084f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 3085f8829a4aSRandall Stewart /* bound all case */ 3086f8829a4aSRandall Stewart sctp_check_address_list_all(stcb, m, offset, length, init_addr, 3087f8829a4aSRandall Stewart local_scope, site_scope, ipv4_scope, loopback_scope); 3088f8829a4aSRandall Stewart } else { 3089f8829a4aSRandall Stewart /* subset bound case */ 3090f8829a4aSRandall Stewart if (sctp_is_feature_on(stcb->sctp_ep, 3091f8829a4aSRandall Stewart SCTP_PCB_FLAGS_DO_ASCONF)) { 3092f8829a4aSRandall Stewart /* asconf's allowed */ 3093f8829a4aSRandall Stewart sctp_check_address_list_ep(stcb, m, offset, length, 3094f8829a4aSRandall Stewart init_addr); 3095f8829a4aSRandall Stewart } 3096f8829a4aSRandall Stewart /* else, no asconfs allowed, so what we sent is what we get */ 3097f8829a4aSRandall Stewart } 3098f8829a4aSRandall Stewart } 3099f8829a4aSRandall Stewart 3100f8829a4aSRandall Stewart /* 3101f8829a4aSRandall Stewart * sctp_bindx() support 3102f8829a4aSRandall Stewart */ 3103f8829a4aSRandall Stewart uint32_t 31043c503c28SRandall Stewart sctp_addr_mgmt_ep_sa(struct sctp_inpcb *inp, struct sockaddr *sa, 310580fefe0aSRandall Stewart uint32_t type, uint32_t vrf_id, struct sctp_ifa *sctp_ifap) 3106f8829a4aSRandall Stewart { 310742551e99SRandall Stewart struct sctp_ifa *ifa; 3108f8829a4aSRandall Stewart 310942551e99SRandall Stewart if (sa->sa_len == 0) { 3110c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL); 3111f8829a4aSRandall Stewart return (EINVAL); 311242551e99SRandall Stewart } 311380fefe0aSRandall Stewart if (sctp_ifap) { 311480fefe0aSRandall Stewart ifa = sctp_ifap; 311580fefe0aSRandall Stewart } else if (type == SCTP_ADD_IP_ADDRESS) { 311642551e99SRandall Stewart /* For an add the address MUST be on the system */ 3117851b7298SRandall Stewart ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED); 311842551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 311942551e99SRandall Stewart /* For a delete we need to find it in the inp */ 3120851b7298SRandall Stewart ifa = sctp_find_ifa_in_ep(inp, sa, SCTP_ADDR_NOT_LOCKED); 312142551e99SRandall Stewart } else { 312242551e99SRandall Stewart ifa = NULL; 312342551e99SRandall Stewart } 3124f8829a4aSRandall Stewart if (ifa != NULL) { 312542551e99SRandall Stewart if (type == SCTP_ADD_IP_ADDRESS) { 312642551e99SRandall Stewart sctp_add_local_addr_ep(inp, ifa, type); 312742551e99SRandall Stewart } else if (type == SCTP_DEL_IP_ADDRESS) { 312842551e99SRandall Stewart struct sctp_laddr *laddr; 312942551e99SRandall Stewart 31303c503c28SRandall Stewart if (inp->laddr_count < 2) { 31313c503c28SRandall Stewart /* can't delete the last local address */ 3132c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL); 31333c503c28SRandall Stewart return (EINVAL); 31343c503c28SRandall Stewart } 31353c503c28SRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, 31363c503c28SRandall Stewart sctp_nxt_addr) { 313742551e99SRandall Stewart if (ifa == laddr->ifa) { 313842551e99SRandall Stewart /* Mark in the delete */ 313942551e99SRandall Stewart laddr->action = type; 314042551e99SRandall Stewart } 314142551e99SRandall Stewart } 314242551e99SRandall Stewart } 314387b4fcd3SMichael Tuexen if (!LIST_EMPTY(&inp->sctp_asoc_list)) { 314487b4fcd3SMichael Tuexen /* 314587b4fcd3SMichael Tuexen * There is no need to start the iterator if the inp 314687b4fcd3SMichael Tuexen * has no associations. 314787b4fcd3SMichael Tuexen */ 314887b4fcd3SMichael Tuexen struct sctp_asconf_iterator *asc; 314987b4fcd3SMichael Tuexen struct sctp_laddr *wi; 315087b4fcd3SMichael Tuexen 315187b4fcd3SMichael Tuexen SCTP_MALLOC(asc, struct sctp_asconf_iterator *, 315287b4fcd3SMichael Tuexen sizeof(struct sctp_asconf_iterator), 315387b4fcd3SMichael Tuexen SCTP_M_ASC_IT); 315487b4fcd3SMichael Tuexen if (asc == NULL) { 315587b4fcd3SMichael Tuexen SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM); 315687b4fcd3SMichael Tuexen return (ENOMEM); 315787b4fcd3SMichael Tuexen } 315887b4fcd3SMichael Tuexen wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 315987b4fcd3SMichael Tuexen if (wi == NULL) { 316087b4fcd3SMichael Tuexen SCTP_FREE(asc, SCTP_M_ASC_IT); 316187b4fcd3SMichael Tuexen SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM); 316287b4fcd3SMichael Tuexen return (ENOMEM); 316387b4fcd3SMichael Tuexen } 316442551e99SRandall Stewart LIST_INIT(&asc->list_of_work); 316542551e99SRandall Stewart asc->cnt = 1; 316642551e99SRandall Stewart SCTP_INCR_LADDR_COUNT(); 316742551e99SRandall Stewart wi->ifa = ifa; 316842551e99SRandall Stewart wi->action = type; 316942551e99SRandall Stewart atomic_add_int(&ifa->refcount, 1); 317042551e99SRandall Stewart LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr); 31711b649582SRandall Stewart (void)sctp_initiate_iterator(sctp_asconf_iterator_ep, 31721b649582SRandall Stewart sctp_asconf_iterator_stcb, 31731b649582SRandall Stewart sctp_asconf_iterator_ep_end, 317442551e99SRandall Stewart SCTP_PCB_ANY_FLAGS, 31753c503c28SRandall Stewart SCTP_PCB_ANY_FEATURES, 31761b649582SRandall Stewart SCTP_ASOC_ANY_STATE, 31771b649582SRandall Stewart (void *)asc, 0, 31781b649582SRandall Stewart sctp_asconf_iterator_end, inp, 0); 317987b4fcd3SMichael Tuexen } 318087b4fcd3SMichael Tuexen return (0); 3181f8829a4aSRandall Stewart } else { 3182f8829a4aSRandall Stewart /* invalid address! */ 3183c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EADDRNOTAVAIL); 3184f8829a4aSRandall Stewart return (EADDRNOTAVAIL); 3185f8829a4aSRandall Stewart } 3186f8829a4aSRandall Stewart } 3187830d754dSRandall Stewart 3188830d754dSRandall Stewart void 3189830d754dSRandall Stewart sctp_asconf_send_nat_state_update(struct sctp_tcb *stcb, 3190830d754dSRandall Stewart struct sctp_nets *net) 3191830d754dSRandall Stewart { 3192830d754dSRandall Stewart struct sctp_asconf_addr *aa; 3193830d754dSRandall Stewart struct sctp_ifa *sctp_ifap; 3194830d754dSRandall Stewart struct sctp_asconf_tag_param *vtag; 3195830d754dSRandall Stewart struct sockaddr_in *to; 3196830d754dSRandall Stewart 3197830d754dSRandall Stewart #ifdef INET6 3198830d754dSRandall Stewart struct sockaddr_in6 *to6; 3199830d754dSRandall Stewart 3200830d754dSRandall Stewart #endif 3201830d754dSRandall Stewart if (net == NULL) { 3202830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing net\n"); 3203830d754dSRandall Stewart return; 3204830d754dSRandall Stewart } 3205830d754dSRandall Stewart if (stcb == NULL) { 3206830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing stcb\n"); 3207830d754dSRandall Stewart return; 3208830d754dSRandall Stewart } 3209830d754dSRandall Stewart /* 3210830d754dSRandall Stewart * Need to have in the asconf: - vtagparam(my_vtag/peer_vtag) - 3211830d754dSRandall Stewart * add(0.0.0.0) - del(0.0.0.0) - Any global addresses add(addr) 3212830d754dSRandall Stewart */ 3213830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3214830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3215830d754dSRandall Stewart if (aa == NULL) { 3216830d754dSRandall Stewart /* didn't get memory */ 3217830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3218830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3219830d754dSRandall Stewart return; 3220830d754dSRandall Stewart } 3221830d754dSRandall Stewart aa->special_del = 0; 3222830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3223830d754dSRandall Stewart /* top level elements are "networked" during send */ 3224830d754dSRandall Stewart aa->ifa = NULL; 3225830d754dSRandall Stewart aa->sent = 0; /* clear sent flag */ 3226830d754dSRandall Stewart vtag = (struct sctp_asconf_tag_param *)&aa->ap.aph; 3227830d754dSRandall Stewart vtag->aph.ph.param_type = SCTP_NAT_VTAGS; 3228830d754dSRandall Stewart vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param); 3229830d754dSRandall Stewart vtag->local_vtag = htonl(stcb->asoc.my_vtag); 3230830d754dSRandall Stewart vtag->remote_vtag = htonl(stcb->asoc.peer_vtag); 3231830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3232830d754dSRandall Stewart 3233830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3234830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3235830d754dSRandall Stewart if (aa == NULL) { 3236830d754dSRandall Stewart /* didn't get memory */ 3237830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3238830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3239830d754dSRandall Stewart return; 3240830d754dSRandall Stewart } 3241830d754dSRandall Stewart memset(aa, 0, sizeof(struct sctp_asconf_addr)); 3242830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3243830d754dSRandall Stewart /* ADD(0.0.0.0) */ 3244830d754dSRandall Stewart if (net->ro._l_addr.sa.sa_family == AF_INET) { 3245830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3246830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param); 3247830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 3248830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param); 3249830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3250830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3251830d754dSRandall Stewart } 3252830d754dSRandall Stewart #ifdef INET6 3253830d754dSRandall Stewart else if (net->ro._l_addr.sa.sa_family == AF_INET6) { 3254830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3255830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param); 3256830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 3257830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param); 3258830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3259830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3260830d754dSRandall Stewart } 3261830d754dSRandall Stewart #endif /* INET6 */ 3262830d754dSRandall Stewart SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa), 3263830d754dSRandall Stewart SCTP_M_ASC_ADDR); 3264830d754dSRandall Stewart if (aa == NULL) { 3265830d754dSRandall Stewart /* didn't get memory */ 3266830d754dSRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, 3267830d754dSRandall Stewart "sctp_asconf_send_nat_state_update: failed to get memory!\n"); 3268830d754dSRandall Stewart return; 3269830d754dSRandall Stewart } 3270830d754dSRandall Stewart memset(aa, 0, sizeof(struct sctp_asconf_addr)); 3271830d754dSRandall Stewart /* fill in asconf address parameter fields */ 3272830d754dSRandall Stewart /* ADD(0.0.0.0) */ 3273830d754dSRandall Stewart if (net->ro._l_addr.sa.sa_family == AF_INET) { 3274830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS; 3275830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param); 3276830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS; 3277830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param); 3278830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3279830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3280830d754dSRandall Stewart } 3281830d754dSRandall Stewart #ifdef INET6 3282830d754dSRandall Stewart else if (net->ro._l_addr.sa.sa_family == AF_INET6) { 3283830d754dSRandall Stewart aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS; 3284830d754dSRandall Stewart aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param); 3285830d754dSRandall Stewart aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS; 3286830d754dSRandall Stewart aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param); 3287830d754dSRandall Stewart /* No need to add an address, we are using 0.0.0.0 */ 3288830d754dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next); 3289830d754dSRandall Stewart } 3290830d754dSRandall Stewart #endif /* INET6 */ 3291830d754dSRandall Stewart /* Now we must hunt the addresses and add all global addresses */ 3292830d754dSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 3293830d754dSRandall Stewart struct sctp_vrf *vrf = NULL; 3294830d754dSRandall Stewart struct sctp_ifn *sctp_ifnp; 3295830d754dSRandall Stewart uint32_t vrf_id; 3296830d754dSRandall Stewart 3297830d754dSRandall Stewart vrf_id = stcb->sctp_ep->def_vrf_id; 3298830d754dSRandall Stewart vrf = sctp_find_vrf(vrf_id); 3299830d754dSRandall Stewart if (vrf == NULL) { 3300830d754dSRandall Stewart goto skip_rest; 3301830d754dSRandall Stewart } 3302830d754dSRandall Stewart SCTP_IPI_ADDR_RLOCK(); 3303830d754dSRandall Stewart LIST_FOREACH(sctp_ifnp, &vrf->ifnlist, next_ifn) { 3304830d754dSRandall Stewart LIST_FOREACH(sctp_ifap, &sctp_ifnp->ifalist, next_ifa) { 3305830d754dSRandall Stewart if (sctp_ifap->address.sa.sa_family == AF_INET) { 3306830d754dSRandall Stewart to = &sctp_ifap->address.sin; 3307830d754dSRandall Stewart 3308830d754dSRandall Stewart if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) { 3309830d754dSRandall Stewart continue; 3310830d754dSRandall Stewart } 3311830d754dSRandall Stewart if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) { 3312830d754dSRandall Stewart continue; 3313830d754dSRandall Stewart } 3314830d754dSRandall Stewart } 3315830d754dSRandall Stewart #ifdef INET6 3316830d754dSRandall Stewart else if (sctp_ifap->address.sa.sa_family == AF_INET6) { 3317830d754dSRandall Stewart to6 = &sctp_ifap->address.sin6; 3318830d754dSRandall Stewart if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) { 3319830d754dSRandall Stewart continue; 3320830d754dSRandall Stewart } 3321830d754dSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) { 3322830d754dSRandall Stewart continue; 3323830d754dSRandall Stewart } 3324830d754dSRandall Stewart } 3325830d754dSRandall Stewart #endif 3326830d754dSRandall Stewart sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS); 3327830d754dSRandall Stewart } 3328830d754dSRandall Stewart } 3329830d754dSRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 3330830d754dSRandall Stewart } else { 3331830d754dSRandall Stewart struct sctp_laddr *laddr; 3332830d754dSRandall Stewart 3333830d754dSRandall Stewart LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 3334830d754dSRandall Stewart if (laddr->ifa == NULL) { 3335830d754dSRandall Stewart continue; 3336830d754dSRandall Stewart } 3337830d754dSRandall Stewart if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) 3338830d754dSRandall Stewart /* 3339830d754dSRandall Stewart * Address being deleted by the system, dont 3340830d754dSRandall Stewart * list. 3341830d754dSRandall Stewart */ 3342830d754dSRandall Stewart continue; 3343830d754dSRandall Stewart if (laddr->action == SCTP_DEL_IP_ADDRESS) { 3344830d754dSRandall Stewart /* 3345830d754dSRandall Stewart * Address being deleted on this ep don't 3346830d754dSRandall Stewart * list. 3347830d754dSRandall Stewart */ 3348830d754dSRandall Stewart continue; 3349830d754dSRandall Stewart } 3350830d754dSRandall Stewart sctp_ifap = laddr->ifa; 3351830d754dSRandall Stewart if (sctp_ifap->address.sa.sa_family == AF_INET) { 3352830d754dSRandall Stewart to = &sctp_ifap->address.sin; 3353830d754dSRandall Stewart 3354830d754dSRandall Stewart if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) { 3355830d754dSRandall Stewart continue; 3356830d754dSRandall Stewart } 3357830d754dSRandall Stewart if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) { 3358830d754dSRandall Stewart continue; 3359830d754dSRandall Stewart } 3360830d754dSRandall Stewart } 3361830d754dSRandall Stewart #ifdef INET6 3362830d754dSRandall Stewart else if (sctp_ifap->address.sa.sa_family == AF_INET6) { 3363830d754dSRandall Stewart to6 = &sctp_ifap->address.sin6; 3364830d754dSRandall Stewart if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) { 3365830d754dSRandall Stewart continue; 3366830d754dSRandall Stewart } 3367830d754dSRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) { 3368830d754dSRandall Stewart continue; 3369830d754dSRandall Stewart } 3370830d754dSRandall Stewart } 3371830d754dSRandall Stewart #endif 3372830d754dSRandall Stewart sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS); 3373830d754dSRandall Stewart } 3374830d754dSRandall Stewart } 3375830d754dSRandall Stewart skip_rest: 3376830d754dSRandall Stewart /* Now we must send the asconf into the queue */ 3377830d754dSRandall Stewart sctp_send_asconf(stcb, net, 0); 3378830d754dSRandall Stewart } 3379