xref: /freebsd/sys/netinet/sctp_asconf.c (revision dec0177df602beb15a9f94c92bda75f24116502f)
1f8829a4aSRandall Stewart /*-
2b1006367SRandall Stewart  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3*dec0177dSRandall Stewart  * Copyright (c) 2008-2011, by Randall Stewart, rrs@lakerest.net and
4*dec0177dSRandall Stewart  *                          Michael Tuexen, tuexen@fh-muenster.de
5*dec0177dSRandall Stewart  *                          All rights reserved.
6f8829a4aSRandall Stewart  *
7f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
8f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
9f8829a4aSRandall Stewart  *
10f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
11f8829a4aSRandall Stewart  *   this list of conditions and the following disclaimer.
12f8829a4aSRandall Stewart  *
13f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
14f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
15f8829a4aSRandall Stewart  *   the documentation and/or other materials provided with the distribution.
16f8829a4aSRandall Stewart  *
17f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
18f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
19f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
20f8829a4aSRandall Stewart  *
21f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
22f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
23f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
25f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
31f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
32f8829a4aSRandall Stewart  */
33f8829a4aSRandall Stewart 
34f8829a4aSRandall Stewart /* $KAME: sctp_asconf.c,v 1.24 2005/03/06 16:04:16 itojun Exp $	 */
35f8829a4aSRandall Stewart 
36f8829a4aSRandall Stewart #include <sys/cdefs.h>
37cef8ad06SRandall Stewart __FBSDID("$FreeBSD$");
38f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
4042551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
41f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
42f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
43f8829a4aSRandall Stewart #include <netinet/sctputil.h>
44f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
45f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
46851b7298SRandall Stewart #include <netinet/sctp_timer.h>
47f8829a4aSRandall Stewart 
48f8829a4aSRandall Stewart /*
49f8829a4aSRandall Stewart  * debug flags:
50f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF1: protocol info, general info and errors
51f8829a4aSRandall Stewart  * SCTP_DEBUG_ASCONF2: detailed info
52f8829a4aSRandall Stewart  */
53f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
54f8829a4aSRandall Stewart #endif				/* SCTP_DEBUG */
55f8829a4aSRandall Stewart 
56f8829a4aSRandall Stewart 
57ad81507eSRandall Stewart static void
58f8829a4aSRandall Stewart sctp_asconf_get_source_ip(struct mbuf *m, struct sockaddr *sa)
59f8829a4aSRandall Stewart {
60f8829a4aSRandall Stewart 	struct ip *iph;
61f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
62f8829a4aSRandall Stewart 
63f8829a4aSRandall Stewart #ifdef INET6
64f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
65f8829a4aSRandall Stewart 
66f8829a4aSRandall Stewart #endif
67f8829a4aSRandall Stewart 
68f8829a4aSRandall Stewart 	iph = mtod(m, struct ip *);
69f8829a4aSRandall Stewart 	if (iph->ip_v == IPVERSION) {
70f8829a4aSRandall Stewart 		/* IPv4 source */
71f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)sa;
72f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
73f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
74f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
75f8829a4aSRandall Stewart 		sin->sin_port = 0;
76f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = iph->ip_src.s_addr;
77ad81507eSRandall Stewart 		return;
78f8829a4aSRandall Stewart 	}
79f8829a4aSRandall Stewart #ifdef INET6
80f8829a4aSRandall Stewart 	else if (iph->ip_v == (IPV6_VERSION >> 4)) {
81f8829a4aSRandall Stewart 		/* IPv6 source */
82f8829a4aSRandall Stewart 		struct ip6_hdr *ip6;
83f8829a4aSRandall Stewart 
84f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)sa;
85f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
86f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
87f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
88f8829a4aSRandall Stewart 		sin6->sin6_port = 0;
89f8829a4aSRandall Stewart 		ip6 = mtod(m, struct ip6_hdr *);
90f8829a4aSRandall Stewart 		sin6->sin6_addr = ip6->ip6_src;
91ad81507eSRandall Stewart 		return;
92f8829a4aSRandall Stewart 	}
93f8829a4aSRandall Stewart #endif				/* INET6 */
94f8829a4aSRandall Stewart 	else
95ad81507eSRandall Stewart 		return;
96f8829a4aSRandall Stewart }
97f8829a4aSRandall Stewart 
98f8829a4aSRandall Stewart /*
99f8829a4aSRandall Stewart  * draft-ietf-tsvwg-addip-sctp
100f8829a4aSRandall Stewart  *
101f8829a4aSRandall Stewart  * An ASCONF parameter queue exists per asoc which holds the pending address
102f8829a4aSRandall Stewart  * operations.  Lists are updated upon receipt of ASCONF-ACK.
103f8829a4aSRandall Stewart  *
10418e198d3SRandall Stewart  * A restricted_addrs list exists per assoc to hold local addresses that are
10518e198d3SRandall Stewart  * not (yet) usable by the assoc as a source address.  These addresses are
10618e198d3SRandall Stewart  * either pending an ASCONF operation (and exist on the ASCONF parameter
10718e198d3SRandall Stewart  * queue), or they are permanently restricted (the peer has returned an
10818e198d3SRandall Stewart  * ERROR indication to an ASCONF(ADD), or the peer does not support ASCONF).
10918e198d3SRandall Stewart  *
110f8829a4aSRandall Stewart  * Deleted addresses are always immediately removed from the lists as they will
111f8829a4aSRandall Stewart  * (shortly) no longer exist in the kernel.  We send ASCONFs as a courtesy,
112f8829a4aSRandall Stewart  * only if allowed.
113f8829a4aSRandall Stewart  */
114f8829a4aSRandall Stewart 
115f8829a4aSRandall Stewart /*
11618e198d3SRandall Stewart  * ASCONF parameter processing.
11718e198d3SRandall Stewart  * response_required: set if a reply is required (eg. SUCCESS_REPORT).
11818e198d3SRandall Stewart  * returns a mbuf to an "error" response parameter or NULL/"success" if ok.
11918e198d3SRandall Stewart  * FIX: allocating this many mbufs on the fly is pretty inefficient...
120f8829a4aSRandall Stewart  */
121f8829a4aSRandall Stewart static struct mbuf *
122f8829a4aSRandall Stewart sctp_asconf_success_response(uint32_t id)
123f8829a4aSRandall Stewart {
124f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
125f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
126f8829a4aSRandall Stewart 
127f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_paramhdr),
128f8829a4aSRandall Stewart 	    0, M_DONTWAIT, 1, MT_DATA);
129f8829a4aSRandall Stewart 	if (m_reply == NULL) {
130ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
131ad81507eSRandall Stewart 		    "asconf_success_response: couldn't get mbuf!\n");
132f8829a4aSRandall Stewart 		return NULL;
133f8829a4aSRandall Stewart 	}
134f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
135f8829a4aSRandall Stewart 	aph->correlation_id = id;
136f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_SUCCESS_REPORT);
137f8829a4aSRandall Stewart 	aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr);
138139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
139f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
140f8829a4aSRandall Stewart 
141f8829a4aSRandall Stewart 	return m_reply;
142f8829a4aSRandall Stewart }
143f8829a4aSRandall Stewart 
144f8829a4aSRandall Stewart static struct mbuf *
145f8829a4aSRandall Stewart sctp_asconf_error_response(uint32_t id, uint16_t cause, uint8_t * error_tlv,
146f8829a4aSRandall Stewart     uint16_t tlv_length)
147f8829a4aSRandall Stewart {
148f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
149f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
150f8829a4aSRandall Stewart 	struct sctp_error_cause *error;
151f8829a4aSRandall Stewart 	uint8_t *tlv;
152f8829a4aSRandall Stewart 
153f8829a4aSRandall Stewart 	m_reply = sctp_get_mbuf_for_msg((sizeof(struct sctp_asconf_paramhdr) +
154f8829a4aSRandall Stewart 	    tlv_length +
155f8829a4aSRandall Stewart 	    sizeof(struct sctp_error_cause)),
156f8829a4aSRandall Stewart 	    0, M_DONTWAIT, 1, MT_DATA);
157f8829a4aSRandall Stewart 	if (m_reply == NULL) {
158ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
159ad81507eSRandall Stewart 		    "asconf_error_response: couldn't get mbuf!\n");
160f8829a4aSRandall Stewart 		return NULL;
161f8829a4aSRandall Stewart 	}
162f8829a4aSRandall Stewart 	aph = mtod(m_reply, struct sctp_asconf_paramhdr *);
163f8829a4aSRandall Stewart 	error = (struct sctp_error_cause *)(aph + 1);
164f8829a4aSRandall Stewart 
165f8829a4aSRandall Stewart 	aph->correlation_id = id;
166f8829a4aSRandall Stewart 	aph->ph.param_type = htons(SCTP_ERROR_CAUSE_IND);
167f8829a4aSRandall Stewart 	error->code = htons(cause);
168f8829a4aSRandall Stewart 	error->length = tlv_length + sizeof(struct sctp_error_cause);
169f8829a4aSRandall Stewart 	aph->ph.param_length = error->length +
170f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_paramhdr);
171f8829a4aSRandall Stewart 
172f8829a4aSRandall Stewart 	if (aph->ph.param_length > MLEN) {
173ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
174ad81507eSRandall Stewart 		    "asconf_error_response: tlv_length (%xh) too big\n",
175f8829a4aSRandall Stewart 		    tlv_length);
176f8829a4aSRandall Stewart 		sctp_m_freem(m_reply);	/* discard */
177f8829a4aSRandall Stewart 		return NULL;
178f8829a4aSRandall Stewart 	}
179f8829a4aSRandall Stewart 	if (error_tlv != NULL) {
180f8829a4aSRandall Stewart 		tlv = (uint8_t *) (error + 1);
181f8829a4aSRandall Stewart 		memcpy(tlv, error_tlv, tlv_length);
182f8829a4aSRandall Stewart 	}
183139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
184f8829a4aSRandall Stewart 	error->length = htons(error->length);
185f8829a4aSRandall Stewart 	aph->ph.param_length = htons(aph->ph.param_length);
186f8829a4aSRandall Stewart 
187f8829a4aSRandall Stewart 	return m_reply;
188f8829a4aSRandall Stewart }
189f8829a4aSRandall Stewart 
190f8829a4aSRandall Stewart static struct mbuf *
191f8829a4aSRandall Stewart sctp_process_asconf_add_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph,
192f8829a4aSRandall Stewart     struct sctp_tcb *stcb, int response_required)
193f8829a4aSRandall Stewart {
194f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
195f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
196f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *v4addr;
197f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
198f8829a4aSRandall Stewart 	struct sockaddr *sa;
199f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
200f8829a4aSRandall Stewart 	int zero_address = 0;
201f8829a4aSRandall Stewart 
202f8829a4aSRandall Stewart #ifdef INET6
203f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
204f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
205f8829a4aSRandall Stewart 
206f8829a4aSRandall Stewart #endif				/* INET6 */
207f8829a4aSRandall Stewart 
208f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
209f8829a4aSRandall Stewart 	v4addr = (struct sctp_ipv4addr_param *)(aph + 1);
210f8829a4aSRandall Stewart #ifdef INET6
211f8829a4aSRandall Stewart 	v6addr = (struct sctp_ipv6addr_param *)(aph + 1);
212f8829a4aSRandall Stewart #endif				/* INET6 */
213f8829a4aSRandall Stewart 	param_type = ntohs(v4addr->ph.param_type);
214f8829a4aSRandall Stewart 	param_length = ntohs(v4addr->ph.param_length);
215f8829a4aSRandall Stewart 
216f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
217f8829a4aSRandall Stewart 	switch (param_type) {
218f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
219f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
220f8829a4aSRandall Stewart 			/* invalid param size */
221f8829a4aSRandall Stewart 			return NULL;
222f8829a4aSRandall Stewart 		}
223f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
224f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
225f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
226f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
227f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
228f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
229f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
230f8829a4aSRandall Stewart 			zero_address = 1;
231ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
232ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
233f8829a4aSRandall Stewart 		break;
234f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
235f8829a4aSRandall Stewart #ifdef INET6
236f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
237f8829a4aSRandall Stewart 			/* invalid param size */
238f8829a4aSRandall Stewart 			return NULL;
239f8829a4aSRandall Stewart 		}
240f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
241f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
242f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
243f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
244f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
245f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
246f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
247f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
248f8829a4aSRandall Stewart 			zero_address = 1;
249ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_add_ip: adding ");
250ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
251f8829a4aSRandall Stewart #else
252f8829a4aSRandall Stewart 		/* IPv6 not enabled! */
253f8829a4aSRandall Stewart 		/* FIX ME: currently sends back an invalid param error */
254f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
255f8829a4aSRandall Stewart 		    SCTP_CAUSE_INVALID_PARAM, (uint8_t *) aph, aparam_length);
256ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
257ad81507eSRandall Stewart 		    "process_asconf_add_ip: v6 disabled- skipping ");
258ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
259f8829a4aSRandall Stewart 		return m_reply;
260ad81507eSRandall Stewart #endif
261f8829a4aSRandall Stewart 		break;
262f8829a4aSRandall Stewart 	default:
263f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
264f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
265f8829a4aSRandall Stewart 		    aparam_length);
266f8829a4aSRandall Stewart 		return m_reply;
267f8829a4aSRandall Stewart 	}			/* end switch */
268f8829a4aSRandall Stewart 
269f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, add the source address instead */
270b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
271f8829a4aSRandall Stewart 		sa = (struct sockaddr *)&sa_source;
272f8829a4aSRandall Stewart 		sctp_asconf_get_source_ip(m, sa);
273ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
274ad81507eSRandall Stewart 		    "process_asconf_add_ip: using source addr ");
275ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
276f8829a4aSRandall Stewart 	}
277f8829a4aSRandall Stewart 	/* add the address */
278a5d547adSRandall Stewart 	if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE,
279a5d547adSRandall Stewart 	    SCTP_ADDR_DYNAMIC_ADDED) != 0) {
280ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
281ad81507eSRandall Stewart 		    "process_asconf_add_ip: error adding address\n");
282f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
283f8829a4aSRandall Stewart 		    SCTP_CAUSE_RESOURCE_SHORTAGE, (uint8_t *) aph,
284f8829a4aSRandall Stewart 		    aparam_length);
285f8829a4aSRandall Stewart 	} else {
286f8829a4aSRandall Stewart 		/* notify upper layer */
287ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_ADD_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
288f8829a4aSRandall Stewart 		if (response_required) {
289f8829a4aSRandall Stewart 			m_reply =
290f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
291f8829a4aSRandall Stewart 		}
2923c503c28SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb,
2933c503c28SRandall Stewart 		    NULL, SCTP_FROM_SCTP_ASCONF + SCTP_LOC_1);
2943c503c28SRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep,
2953c503c28SRandall Stewart 		    stcb, NULL);
296f8829a4aSRandall Stewart 	}
297f8829a4aSRandall Stewart 
298f8829a4aSRandall Stewart 	return m_reply;
299f8829a4aSRandall Stewart }
300f8829a4aSRandall Stewart 
301f8829a4aSRandall Stewart static int
3021b649582SRandall Stewart sctp_asconf_del_remote_addrs_except(struct sctp_tcb *stcb, struct sockaddr *src)
303f8829a4aSRandall Stewart {
304f8829a4aSRandall Stewart 	struct sctp_nets *src_net, *net;
305f8829a4aSRandall Stewart 
306f8829a4aSRandall Stewart 	/* make sure the source address exists as a destination net */
307f8829a4aSRandall Stewart 	src_net = sctp_findnet(stcb, src);
308f8829a4aSRandall Stewart 	if (src_net == NULL) {
309f8829a4aSRandall Stewart 		/* not found */
310f8829a4aSRandall Stewart 		return -1;
311f8829a4aSRandall Stewart 	}
312f8829a4aSRandall Stewart 	/* delete all destination addresses except the source */
313f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
314f8829a4aSRandall Stewart 		if (net != src_net) {
315f8829a4aSRandall Stewart 			/* delete this address */
316f8829a4aSRandall Stewart 			sctp_remove_net(stcb, net);
317ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
318ad81507eSRandall Stewart 			    "asconf_del_remote_addrs_except: deleting ");
319ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1,
320ad81507eSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr);
321f8829a4aSRandall Stewart 			/* notify upper layer */
322f8829a4aSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0,
323ceaad40aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, SCTP_SO_NOT_LOCKED);
324f8829a4aSRandall Stewart 		}
325f8829a4aSRandall Stewart 	}
326f8829a4aSRandall Stewart 	return 0;
327f8829a4aSRandall Stewart }
328f8829a4aSRandall Stewart 
329f8829a4aSRandall Stewart static struct mbuf *
330f8829a4aSRandall Stewart sctp_process_asconf_delete_ip(struct mbuf *m, struct sctp_asconf_paramhdr *aph,
331f8829a4aSRandall Stewart     struct sctp_tcb *stcb, int response_required)
332f8829a4aSRandall Stewart {
333f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
334f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
335f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *v4addr;
336f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
337f8829a4aSRandall Stewart 	struct sockaddr *sa;
338f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
339f8829a4aSRandall Stewart 	int zero_address = 0;
340f8829a4aSRandall Stewart 	int result;
341f8829a4aSRandall Stewart 
342f8829a4aSRandall Stewart #ifdef INET6
343f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
344f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
345f8829a4aSRandall Stewart 
346f8829a4aSRandall Stewart #endif				/* INET6 */
347f8829a4aSRandall Stewart 
348f8829a4aSRandall Stewart 	/* get the source IP address for src and 0.0.0.0/::0 delete checks */
349f8829a4aSRandall Stewart 	sctp_asconf_get_source_ip(m, (struct sockaddr *)&sa_source);
350f8829a4aSRandall Stewart 
351f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
352f8829a4aSRandall Stewart 	v4addr = (struct sctp_ipv4addr_param *)(aph + 1);
353f8829a4aSRandall Stewart #ifdef INET6
354f8829a4aSRandall Stewart 	v6addr = (struct sctp_ipv6addr_param *)(aph + 1);
355f8829a4aSRandall Stewart #endif				/* INET6 */
356f8829a4aSRandall Stewart 	param_type = ntohs(v4addr->ph.param_type);
357f8829a4aSRandall Stewart 	param_length = ntohs(v4addr->ph.param_length);
358f8829a4aSRandall Stewart 
359f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
360f8829a4aSRandall Stewart 	switch (param_type) {
361f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
362f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
363f8829a4aSRandall Stewart 			/* invalid param size */
364f8829a4aSRandall Stewart 			return NULL;
365f8829a4aSRandall Stewart 		}
366f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
367f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
368f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
369f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
370f8829a4aSRandall Stewart 		sin->sin_port = stcb->rport;
371f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
372f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
373f8829a4aSRandall Stewart 			zero_address = 1;
374ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
375ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
376ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
377f8829a4aSRandall Stewart 		break;
378f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
379f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
380f8829a4aSRandall Stewart 			/* invalid param size */
381f8829a4aSRandall Stewart 			return NULL;
382f8829a4aSRandall Stewart 		}
383f8829a4aSRandall Stewart #ifdef INET6
384f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
385f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
386f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
387f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
388f8829a4aSRandall Stewart 		sin6->sin6_port = stcb->rport;
389f8829a4aSRandall Stewart 		memcpy(&sin6->sin6_addr, v6addr->addr,
390f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
391f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
392f8829a4aSRandall Stewart 			zero_address = 1;
393ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
394ad81507eSRandall Stewart 		    "process_asconf_delete_ip: deleting ");
395ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
396f8829a4aSRandall Stewart #else
397f8829a4aSRandall Stewart 		/* IPv6 not enabled!  No "action" needed; just ack it */
398ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
399ad81507eSRandall Stewart 		    "process_asconf_delete_ip: v6 disabled- ignoring: ");
400ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
401f8829a4aSRandall Stewart 		/* just respond with a "success" ASCONF-ACK */
402f8829a4aSRandall Stewart 		return NULL;
403ad81507eSRandall Stewart #endif
404f8829a4aSRandall Stewart 		break;
405f8829a4aSRandall Stewart 	default:
406f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
407f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
408f8829a4aSRandall Stewart 		    aparam_length);
409f8829a4aSRandall Stewart 		return m_reply;
410f8829a4aSRandall Stewart 	}
411f8829a4aSRandall Stewart 
412f8829a4aSRandall Stewart 	/* make sure the source address is not being deleted */
413f8829a4aSRandall Stewart 	if (sctp_cmpaddr(sa, (struct sockaddr *)&sa_source)) {
414f8829a4aSRandall Stewart 		/* trying to delete the source address! */
415ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete source addr\n");
416f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
417f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_SRC_ADDR, (uint8_t *) aph,
418f8829a4aSRandall Stewart 		    aparam_length);
419f8829a4aSRandall Stewart 		return m_reply;
420f8829a4aSRandall Stewart 	}
421f8829a4aSRandall Stewart 	/* if deleting 0.0.0.0/::0, delete all addresses except src addr */
422b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
423f8829a4aSRandall Stewart 		result = sctp_asconf_del_remote_addrs_except(stcb,
424f8829a4aSRandall Stewart 		    (struct sockaddr *)&sa_source);
425f8829a4aSRandall Stewart 
426f8829a4aSRandall Stewart 		if (result) {
427f8829a4aSRandall Stewart 			/* src address did not exist? */
428ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: src addr does not exist?\n");
429f8829a4aSRandall Stewart 			/* what error to reply with?? */
430f8829a4aSRandall Stewart 			m_reply =
431f8829a4aSRandall Stewart 			    sctp_asconf_error_response(aph->correlation_id,
432f8829a4aSRandall Stewart 			    SCTP_CAUSE_REQUEST_REFUSED, (uint8_t *) aph,
433f8829a4aSRandall Stewart 			    aparam_length);
434f8829a4aSRandall Stewart 		} else if (response_required) {
435f8829a4aSRandall Stewart 			m_reply =
436f8829a4aSRandall Stewart 			    sctp_asconf_success_response(aph->correlation_id);
437f8829a4aSRandall Stewart 		}
438f8829a4aSRandall Stewart 		return m_reply;
439f8829a4aSRandall Stewart 	}
440f8829a4aSRandall Stewart 	/* delete the address */
441f8829a4aSRandall Stewart 	result = sctp_del_remote_addr(stcb, sa);
442f8829a4aSRandall Stewart 	/*
443f8829a4aSRandall Stewart 	 * note if result == -2, the address doesn't exist in the asoc but
444f8829a4aSRandall Stewart 	 * since it's being deleted anyways, we just ack the delete -- but
445f8829a4aSRandall Stewart 	 * this probably means something has already gone awry
446f8829a4aSRandall Stewart 	 */
447f8829a4aSRandall Stewart 	if (result == -1) {
448f8829a4aSRandall Stewart 		/* only one address in the asoc */
449ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_delete_ip: tried to delete last IP addr!\n");
450f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
451f8829a4aSRandall Stewart 		    SCTP_CAUSE_DELETING_LAST_ADDR, (uint8_t *) aph,
452f8829a4aSRandall Stewart 		    aparam_length);
453f8829a4aSRandall Stewart 	} else {
454f8829a4aSRandall Stewart 		if (response_required) {
455f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
456f8829a4aSRandall Stewart 		}
457f8829a4aSRandall Stewart 		/* notify upper layer */
458ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_DELETE_IP, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
459f8829a4aSRandall Stewart 	}
460f8829a4aSRandall Stewart 	return m_reply;
461f8829a4aSRandall Stewart }
462f8829a4aSRandall Stewart 
463f8829a4aSRandall Stewart static struct mbuf *
464f8829a4aSRandall Stewart sctp_process_asconf_set_primary(struct mbuf *m,
4651b649582SRandall Stewart     struct sctp_asconf_paramhdr *aph,
4661b649582SRandall Stewart     struct sctp_tcb *stcb, int response_required)
467f8829a4aSRandall Stewart {
468f8829a4aSRandall Stewart 	struct mbuf *m_reply = NULL;
469f8829a4aSRandall Stewart 	struct sockaddr_storage sa_source, sa_store;
470f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *v4addr;
471f8829a4aSRandall Stewart 	uint16_t param_type, param_length, aparam_length;
472f8829a4aSRandall Stewart 	struct sockaddr *sa;
473f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
474f8829a4aSRandall Stewart 	int zero_address = 0;
475f8829a4aSRandall Stewart 
476f8829a4aSRandall Stewart #ifdef INET6
477f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
478f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *v6addr;
479f8829a4aSRandall Stewart 
480f8829a4aSRandall Stewart #endif				/* INET6 */
481f8829a4aSRandall Stewart 
482f8829a4aSRandall Stewart 	aparam_length = ntohs(aph->ph.param_length);
483f8829a4aSRandall Stewart 	v4addr = (struct sctp_ipv4addr_param *)(aph + 1);
484f8829a4aSRandall Stewart #ifdef INET6
485f8829a4aSRandall Stewart 	v6addr = (struct sctp_ipv6addr_param *)(aph + 1);
486f8829a4aSRandall Stewart #endif				/* INET6 */
487f8829a4aSRandall Stewart 	param_type = ntohs(v4addr->ph.param_type);
488f8829a4aSRandall Stewart 	param_length = ntohs(v4addr->ph.param_length);
489f8829a4aSRandall Stewart 
490f8829a4aSRandall Stewart 	sa = (struct sockaddr *)&sa_store;
491f8829a4aSRandall Stewart 	switch (param_type) {
492f8829a4aSRandall Stewart 	case SCTP_IPV4_ADDRESS:
493f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
494f8829a4aSRandall Stewart 			/* invalid param size */
495f8829a4aSRandall Stewart 			return NULL;
496f8829a4aSRandall Stewart 		}
497f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&sa_store;
498f8829a4aSRandall Stewart 		bzero(sin, sizeof(*sin));
499f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
500f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
501f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = v4addr->addr;
502f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
503f8829a4aSRandall Stewart 			zero_address = 1;
504ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
505ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
506f8829a4aSRandall Stewart 		break;
507f8829a4aSRandall Stewart 	case SCTP_IPV6_ADDRESS:
508f8829a4aSRandall Stewart 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
509f8829a4aSRandall Stewart 			/* invalid param size */
510f8829a4aSRandall Stewart 			return NULL;
511f8829a4aSRandall Stewart 		}
512f8829a4aSRandall Stewart #ifdef INET6
513f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sa_store;
514f8829a4aSRandall Stewart 		bzero(sin6, sizeof(*sin6));
515f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
516f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
517f8829a4aSRandall Stewart 		memcpy((caddr_t)&sin6->sin6_addr, v6addr->addr,
518f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
519f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
520f8829a4aSRandall Stewart 			zero_address = 1;
521ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "process_asconf_set_primary: ");
522ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
523f8829a4aSRandall Stewart #else
524f8829a4aSRandall Stewart 		/* IPv6 not enabled!  No "action" needed; just ack it */
525ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
526ad81507eSRandall Stewart 		    "process_asconf_set_primary: v6 disabled- ignoring: ");
527ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
528f8829a4aSRandall Stewart 		/* just respond with a "success" ASCONF-ACK */
529f8829a4aSRandall Stewart 		return NULL;
530ad81507eSRandall Stewart #endif
531f8829a4aSRandall Stewart 		break;
532f8829a4aSRandall Stewart 	default:
533f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
534f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
535f8829a4aSRandall Stewart 		    aparam_length);
536f8829a4aSRandall Stewart 		return m_reply;
537f8829a4aSRandall Stewart 	}
538f8829a4aSRandall Stewart 
539f8829a4aSRandall Stewart 	/* if 0.0.0.0/::0, use the source address instead */
540b3f1ea41SRandall Stewart 	if (zero_address && SCTP_BASE_SYSCTL(sctp_nat_friendly)) {
541f8829a4aSRandall Stewart 		sa = (struct sockaddr *)&sa_source;
542f8829a4aSRandall Stewart 		sctp_asconf_get_source_ip(m, sa);
543ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
544ad81507eSRandall Stewart 		    "process_asconf_set_primary: using source addr ");
545ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
546f8829a4aSRandall Stewart 	}
547f8829a4aSRandall Stewart 	/* set the primary address */
548f8829a4aSRandall Stewart 	if (sctp_set_primary_addr(stcb, sa, NULL) == 0) {
549ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
550ad81507eSRandall Stewart 		    "process_asconf_set_primary: primary address set\n");
551f8829a4aSRandall Stewart 		/* notify upper layer */
552ceaad40aSRandall Stewart 		sctp_ulp_notify(SCTP_NOTIFY_ASCONF_SET_PRIMARY, stcb, 0, sa, SCTP_SO_NOT_LOCKED);
553f8829a4aSRandall Stewart 
554f8829a4aSRandall Stewart 		if (response_required) {
555f8829a4aSRandall Stewart 			m_reply = sctp_asconf_success_response(aph->correlation_id);
556f8829a4aSRandall Stewart 		}
557851b7298SRandall Stewart 		/*
558851b7298SRandall Stewart 		 * Mobility adaptation. Ideally, when the reception of SET
559851b7298SRandall Stewart 		 * PRIMARY with DELETE IP ADDRESS of the previous primary
560851b7298SRandall Stewart 		 * destination, unacknowledged DATA are retransmitted
561851b7298SRandall Stewart 		 * immediately to the new primary destination for seamless
562b5c16493SMichael Tuexen 		 * handover. If the destination is UNCONFIRMED and marked to
563b5c16493SMichael Tuexen 		 * REQ_PRIM, The retransmission occur when reception of the
564b5c16493SMichael Tuexen 		 * HEARTBEAT-ACK.  (See sctp_handle_heartbeat_ack in
565851b7298SRandall Stewart 		 * sctp_input.c) Also, when change of the primary
566851b7298SRandall Stewart 		 * destination, it is better that all subsequent new DATA
567851b7298SRandall Stewart 		 * containing already queued DATA are transmitted to the new
568851b7298SRandall Stewart 		 * primary destination. (by micchie)
569851b7298SRandall Stewart 		 */
570851b7298SRandall Stewart 		if ((sctp_is_mobility_feature_on(stcb->sctp_ep,
571851b7298SRandall Stewart 		    SCTP_MOBILITY_BASE) ||
572851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
573851b7298SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) &&
574851b7298SRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
575851b7298SRandall Stewart 		    SCTP_MOBILITY_PRIM_DELETED) &&
576851b7298SRandall Stewart 		    (stcb->asoc.primary_destination->dest_state &
577851b7298SRandall Stewart 		    SCTP_ADDR_UNCONFIRMED) == 0) {
578851b7298SRandall Stewart 
579851b7298SRandall Stewart 			sctp_timer_stop(SCTP_TIMER_TYPE_PRIM_DELETED, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTP_TIMER + SCTP_LOC_7);
580851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
581851b7298SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
582851b7298SRandall Stewart 				sctp_assoc_immediate_retrans(stcb,
583851b7298SRandall Stewart 				    stcb->asoc.primary_destination);
584851b7298SRandall Stewart 			}
585851b7298SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
586851b7298SRandall Stewart 			    SCTP_MOBILITY_BASE)) {
5879eea4a2dSMichael Tuexen 				sctp_move_chunks_from_net(stcb,
5889eea4a2dSMichael Tuexen 				    stcb->asoc.deleted_primary);
589851b7298SRandall Stewart 			}
590851b7298SRandall Stewart 			sctp_delete_prim_timer(stcb->sctp_ep, stcb,
591851b7298SRandall Stewart 			    stcb->asoc.deleted_primary);
592851b7298SRandall Stewart 		}
593f8829a4aSRandall Stewart 	} else {
594f8829a4aSRandall Stewart 		/* couldn't set the requested primary address! */
595ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
596ad81507eSRandall Stewart 		    "process_asconf_set_primary: set primary failed!\n");
597f8829a4aSRandall Stewart 		/* must have been an invalid address, so report */
598f8829a4aSRandall Stewart 		m_reply = sctp_asconf_error_response(aph->correlation_id,
599f8829a4aSRandall Stewart 		    SCTP_CAUSE_UNRESOLVABLE_ADDR, (uint8_t *) aph,
600f8829a4aSRandall Stewart 		    aparam_length);
601f8829a4aSRandall Stewart 	}
602f8829a4aSRandall Stewart 
603f8829a4aSRandall Stewart 	return m_reply;
604f8829a4aSRandall Stewart }
605f8829a4aSRandall Stewart 
606f8829a4aSRandall Stewart /*
607f8829a4aSRandall Stewart  * handles an ASCONF chunk.
608f8829a4aSRandall Stewart  * if all parameters are processed ok, send a plain (empty) ASCONF-ACK
609f8829a4aSRandall Stewart  */
610f8829a4aSRandall Stewart void
611f8829a4aSRandall Stewart sctp_handle_asconf(struct mbuf *m, unsigned int offset,
6122afb3e84SRandall Stewart     struct sctp_asconf_chunk *cp, struct sctp_tcb *stcb,
6132afb3e84SRandall Stewart     int first)
614f8829a4aSRandall Stewart {
615f8829a4aSRandall Stewart 	struct sctp_association *asoc;
616f8829a4aSRandall Stewart 	uint32_t serial_num;
6172afb3e84SRandall Stewart 	struct mbuf *n, *m_ack, *m_result, *m_tail;
618f8829a4aSRandall Stewart 	struct sctp_asconf_ack_chunk *ack_cp;
619f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph, *ack_aph;
620f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *p_addr;
621f8829a4aSRandall Stewart 	unsigned int asconf_limit;
622f8829a4aSRandall Stewart 	int error = 0;		/* did an error occur? */
623f8829a4aSRandall Stewart 
624f8829a4aSRandall Stewart 	/* asconf param buffer */
625f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
6262afb3e84SRandall Stewart 	struct sctp_asconf_ack *ack, *ack_next;
627f8829a4aSRandall Stewart 
628f8829a4aSRandall Stewart 	/* verify minimum length */
629f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_chunk)) {
630ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
631ad81507eSRandall Stewart 		    "handle_asconf: chunk too small = %xh\n",
632f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
633f8829a4aSRandall Stewart 		return;
634f8829a4aSRandall Stewart 	}
635f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
636f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
637f8829a4aSRandall Stewart 
63820b07a4dSMichael Tuexen 	if (SCTP_TSN_GE(asoc->asconf_seq_in, serial_num)) {
639f8829a4aSRandall Stewart 		/* got a duplicate ASCONF */
640ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
641ad81507eSRandall Stewart 		    "handle_asconf: got duplicate serial number = %xh\n",
642f8829a4aSRandall Stewart 		    serial_num);
643f8829a4aSRandall Stewart 		return;
644f8829a4aSRandall Stewart 	} else if (serial_num != (asoc->asconf_seq_in + 1)) {
645ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: incorrect serial number = %xh (expected next = %xh)\n",
646f8829a4aSRandall Stewart 		    serial_num, asoc->asconf_seq_in + 1);
647f8829a4aSRandall Stewart 		return;
648f8829a4aSRandall Stewart 	}
649f8829a4aSRandall Stewart 	/* it's the expected "next" sequence number, so process it */
650f8829a4aSRandall Stewart 	asoc->asconf_seq_in = serial_num;	/* update sequence */
651f8829a4aSRandall Stewart 	/* get length of all the param's in the ASCONF */
652f8829a4aSRandall Stewart 	asconf_limit = offset + ntohs(cp->ch.chunk_length);
653ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1,
654ad81507eSRandall Stewart 	    "handle_asconf: asconf_limit=%u, sequence=%xh\n",
655f8829a4aSRandall Stewart 	    asconf_limit, serial_num);
6562afb3e84SRandall Stewart 
6572afb3e84SRandall Stewart 	if (first) {
6582afb3e84SRandall Stewart 		/* delete old cache */
6592afb3e84SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: Now processing firstASCONF. Try to delte old cache\n");
6602afb3e84SRandall Stewart 
6614a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(ack, &asoc->asconf_ack_sent, next, ack_next) {
6622afb3e84SRandall Stewart 			if (ack->serial_number == serial_num)
6632afb3e84SRandall Stewart 				break;
6642afb3e84SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: delete old(%u) < first(%u)\n",
6652afb3e84SRandall Stewart 			    ack->serial_number, serial_num);
6664a9ef3f8SMichael Tuexen 			TAILQ_REMOVE(&asoc->asconf_ack_sent, ack, next);
6672afb3e84SRandall Stewart 			if (ack->data != NULL) {
6682afb3e84SRandall Stewart 				sctp_m_freem(ack->data);
6692afb3e84SRandall Stewart 			}
670b3f1ea41SRandall Stewart 			SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), ack);
6712afb3e84SRandall Stewart 		}
672f8829a4aSRandall Stewart 	}
673139bc87fSRandall Stewart 	m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0,
674f8829a4aSRandall Stewart 	    M_DONTWAIT, 1, MT_DATA);
675f8829a4aSRandall Stewart 	if (m_ack == NULL) {
676ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
677ad81507eSRandall Stewart 		    "handle_asconf: couldn't get mbuf!\n");
678f8829a4aSRandall Stewart 		return;
679f8829a4aSRandall Stewart 	}
680f8829a4aSRandall Stewart 	m_tail = m_ack;		/* current reply chain's tail */
681f8829a4aSRandall Stewart 
682f8829a4aSRandall Stewart 	/* fill in ASCONF-ACK header */
683f8829a4aSRandall Stewart 	ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *);
684f8829a4aSRandall Stewart 	ack_cp->ch.chunk_type = SCTP_ASCONF_ACK;
685f8829a4aSRandall Stewart 	ack_cp->ch.chunk_flags = 0;
686f8829a4aSRandall Stewart 	ack_cp->serial_number = htonl(serial_num);
687f8829a4aSRandall Stewart 	/* set initial lengths (eg. just an ASCONF-ACK), ntohx at the end! */
688139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk);
689f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk);
690f8829a4aSRandall Stewart 
691f8829a4aSRandall Stewart 	/* skip the lookup address parameter */
692f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_chunk);
693f8829a4aSRandall Stewart 	p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr), (uint8_t *) & aparam_buf);
694f8829a4aSRandall Stewart 	if (p_addr == NULL) {
695ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
696ad81507eSRandall Stewart 		    "handle_asconf: couldn't get lookup addr!\n");
697f8829a4aSRandall Stewart 		/* respond with a missing/invalid mandatory parameter error */
698f8829a4aSRandall Stewart 		return;
699f8829a4aSRandall Stewart 	}
700f8829a4aSRandall Stewart 	/* param_length is already validated in process_control... */
701f8829a4aSRandall Stewart 	offset += ntohs(p_addr->ph.param_length);	/* skip lookup addr */
702f8829a4aSRandall Stewart 
703f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF-ACK */
704f8829a4aSRandall Stewart 	ack_aph = (struct sctp_asconf_paramhdr *)(mtod(m_ack, caddr_t)+sizeof(struct sctp_asconf_ack_chunk));
705f8829a4aSRandall Stewart 	if (ack_aph == NULL) {
706ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Gak in asconf2\n");
707f8829a4aSRandall Stewart 		return;
708f8829a4aSRandall Stewart 	}
709f8829a4aSRandall Stewart 	/* get pointer to first asconf param in ASCONF */
710f8829a4aSRandall Stewart 	aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, sizeof(struct sctp_asconf_paramhdr), (uint8_t *) & aparam_buf);
711f8829a4aSRandall Stewart 	if (aph == NULL) {
712ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Empty ASCONF received?\n");
713f8829a4aSRandall Stewart 		goto send_reply;
714f8829a4aSRandall Stewart 	}
715f8829a4aSRandall Stewart 	/* process through all parameters */
716f8829a4aSRandall Stewart 	while (aph != NULL) {
717f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
718f8829a4aSRandall Stewart 
719f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
720f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
721f8829a4aSRandall Stewart 		if (offset + param_length > asconf_limit) {
722f8829a4aSRandall Stewart 			/* parameter goes beyond end of chunk! */
723f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
724f8829a4aSRandall Stewart 			return;
725f8829a4aSRandall Stewart 		}
726f8829a4aSRandall Stewart 		m_result = NULL;
727f8829a4aSRandall Stewart 
728f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
729ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length);
730f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
731f8829a4aSRandall Stewart 			return;
732f8829a4aSRandall Stewart 		}
733f8829a4aSRandall Stewart 		if (param_length <= sizeof(struct sctp_paramhdr)) {
734ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length);
735f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
736f8829a4aSRandall Stewart 		}
737f8829a4aSRandall Stewart 		/* get the entire parameter */
738f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
739f8829a4aSRandall Stewart 		if (aph == NULL) {
740ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: couldn't get entire param\n");
741f8829a4aSRandall Stewart 			sctp_m_freem(m_ack);
742f8829a4aSRandall Stewart 			return;
743f8829a4aSRandall Stewart 		}
744f8829a4aSRandall Stewart 		switch (param_type) {
745f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
746f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
747f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_add_ip(m, aph, stcb,
748f8829a4aSRandall Stewart 			    error);
749f8829a4aSRandall Stewart 			break;
750f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
751f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
752f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_delete_ip(m, aph, stcb,
753f8829a4aSRandall Stewart 			    error);
754f8829a4aSRandall Stewart 			break;
755f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
756f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
757f8829a4aSRandall Stewart 			break;
758f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
759f8829a4aSRandall Stewart 			asoc->peer_supports_asconf = 1;
760f8829a4aSRandall Stewart 			m_result = sctp_process_asconf_set_primary(m, aph,
761f8829a4aSRandall Stewart 			    stcb, error);
762f8829a4aSRandall Stewart 			break;
763830d754dSRandall Stewart 		case SCTP_NAT_VTAGS:
764830d754dSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: sees a NAT VTAG state parameter\n");
765830d754dSRandall Stewart 			break;
766f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
767f8829a4aSRandall Stewart 			/* not valid in an ASCONF chunk */
768f8829a4aSRandall Stewart 			break;
769f8829a4aSRandall Stewart 		case SCTP_ULP_ADAPTATION:
770f8829a4aSRandall Stewart 			/* FIX */
771f8829a4aSRandall Stewart 			break;
772f8829a4aSRandall Stewart 		default:
773f8829a4aSRandall Stewart 			if ((param_type & 0x8000) == 0) {
774f8829a4aSRandall Stewart 				/* Been told to STOP at this param */
775f8829a4aSRandall Stewart 				asconf_limit = offset;
776f8829a4aSRandall Stewart 				/*
777f8829a4aSRandall Stewart 				 * FIX FIX - We need to call
778f8829a4aSRandall Stewart 				 * sctp_arethere_unrecognized_parameters()
779f8829a4aSRandall Stewart 				 * to get a operr and send it for any
780f8829a4aSRandall Stewart 				 * param's with the 0x4000 bit set OR do it
781f8829a4aSRandall Stewart 				 * here ourselves... note we still must STOP
782f8829a4aSRandall Stewart 				 * if the 0x8000 bit is clear.
783f8829a4aSRandall Stewart 				 */
784f8829a4aSRandall Stewart 			}
785f8829a4aSRandall Stewart 			/* unknown/invalid param type */
786f8829a4aSRandall Stewart 			break;
787f8829a4aSRandall Stewart 		}		/* switch */
788f8829a4aSRandall Stewart 
789f8829a4aSRandall Stewart 		/* add any (error) result to the reply mbuf chain */
790f8829a4aSRandall Stewart 		if (m_result != NULL) {
791139bc87fSRandall Stewart 			SCTP_BUF_NEXT(m_tail) = m_result;
792f8829a4aSRandall Stewart 			m_tail = m_result;
793f8829a4aSRandall Stewart 			/* update lengths, make sure it's aligned too */
794139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_result) = SCTP_SIZE32(SCTP_BUF_LEN(m_result));
795139bc87fSRandall Stewart 			ack_cp->ch.chunk_length += SCTP_BUF_LEN(m_result);
796f8829a4aSRandall Stewart 			/* set flag to force success reports */
797f8829a4aSRandall Stewart 			error = 1;
798f8829a4aSRandall Stewart 		}
799f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
800f8829a4aSRandall Stewart 		/* update remaining ASCONF message length to process */
801f8829a4aSRandall Stewart 		if (offset >= asconf_limit) {
802f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
803f8829a4aSRandall Stewart 			break;
804f8829a4aSRandall Stewart 		}
805f8829a4aSRandall Stewart 		/* get pointer to next asconf param */
806f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
807f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr),
808f8829a4aSRandall Stewart 		    (uint8_t *) & aparam_buf);
809f8829a4aSRandall Stewart 		if (aph == NULL) {
810f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
811ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: can't get asconf param hdr!\n");
812f8829a4aSRandall Stewart 			/* FIX ME - add error here... */
813f8829a4aSRandall Stewart 		}
814ad81507eSRandall Stewart 	}
815f8829a4aSRandall Stewart 
816f8829a4aSRandall Stewart send_reply:
817f8829a4aSRandall Stewart 	ack_cp->ch.chunk_length = htons(ack_cp->ch.chunk_length);
818f8829a4aSRandall Stewart 	/* save the ASCONF-ACK reply */
819b3f1ea41SRandall Stewart 	ack = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asconf_ack),
8202afb3e84SRandall Stewart 	    struct sctp_asconf_ack);
8212afb3e84SRandall Stewart 	if (ack == NULL) {
8222afb3e84SRandall Stewart 		sctp_m_freem(m_ack);
8232afb3e84SRandall Stewart 		return;
8242afb3e84SRandall Stewart 	}
8252afb3e84SRandall Stewart 	ack->serial_number = serial_num;
8262afb3e84SRandall Stewart 	ack->last_sent_to = NULL;
8272afb3e84SRandall Stewart 	ack->data = m_ack;
828fc066a61SMichael Tuexen 	ack->len = 0;
8292afb3e84SRandall Stewart 	n = m_ack;
8302afb3e84SRandall Stewart 	while (n) {
8312afb3e84SRandall Stewart 		ack->len += SCTP_BUF_LEN(n);
8322afb3e84SRandall Stewart 		n = SCTP_BUF_NEXT(n);
8332afb3e84SRandall Stewart 	}
8342afb3e84SRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_ack_sent, ack, next);
835f8829a4aSRandall Stewart 
836f8829a4aSRandall Stewart 	/* see if last_control_chunk_from is set properly (use IP src addr) */
837f8829a4aSRandall Stewart 	if (stcb->asoc.last_control_chunk_from == NULL) {
838f8829a4aSRandall Stewart 		/*
839f8829a4aSRandall Stewart 		 * this could happen if the source address was just newly
840f8829a4aSRandall Stewart 		 * added
841f8829a4aSRandall Stewart 		 */
842f8829a4aSRandall Stewart 		struct ip *iph;
843f8829a4aSRandall Stewart 		struct sctphdr *sh;
844f8829a4aSRandall Stewart 		struct sockaddr_storage from_store;
845f8829a4aSRandall Stewart 		struct sockaddr *from = (struct sockaddr *)&from_store;
846f8829a4aSRandall Stewart 
847ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: looking up net for IP source address\n");
848f8829a4aSRandall Stewart 		/* pullup already done, IP options already stripped */
849f8829a4aSRandall Stewart 		iph = mtod(m, struct ip *);
850f8829a4aSRandall Stewart 		sh = (struct sctphdr *)((caddr_t)iph + sizeof(*iph));
8515e2c2d87SRandall Stewart 		switch (iph->ip_v) {
8525e2c2d87SRandall Stewart 		case IPVERSION:
8535e2c2d87SRandall Stewart 			{
854f8829a4aSRandall Stewart 				struct sockaddr_in *from4;
855f8829a4aSRandall Stewart 
856f8829a4aSRandall Stewart 				from4 = (struct sockaddr_in *)&from_store;
857f8829a4aSRandall Stewart 				bzero(from4, sizeof(*from4));
858f8829a4aSRandall Stewart 				from4->sin_family = AF_INET;
859f8829a4aSRandall Stewart 				from4->sin_len = sizeof(struct sockaddr_in);
860f8829a4aSRandall Stewart 				from4->sin_addr.s_addr = iph->ip_src.s_addr;
861f8829a4aSRandall Stewart 				from4->sin_port = sh->src_port;
8625e2c2d87SRandall Stewart 				break;
8635e2c2d87SRandall Stewart 			}
8645e2c2d87SRandall Stewart #ifdef INET6
8655e2c2d87SRandall Stewart 		case IPV6_VERSION >> 4:
8665e2c2d87SRandall Stewart 			{
867f8829a4aSRandall Stewart 				struct ip6_hdr *ip6;
868f8829a4aSRandall Stewart 				struct sockaddr_in6 *from6;
869f8829a4aSRandall Stewart 
870f8829a4aSRandall Stewart 				ip6 = mtod(m, struct ip6_hdr *);
871f8829a4aSRandall Stewart 				from6 = (struct sockaddr_in6 *)&from_store;
872f8829a4aSRandall Stewart 				bzero(from6, sizeof(*from6));
873f8829a4aSRandall Stewart 				from6->sin6_family = AF_INET6;
874f8829a4aSRandall Stewart 				from6->sin6_len = sizeof(struct sockaddr_in6);
875f8829a4aSRandall Stewart 				from6->sin6_addr = ip6->ip6_src;
876f8829a4aSRandall Stewart 				from6->sin6_port = sh->src_port;
8775e2c2d87SRandall Stewart 				/*
8785e2c2d87SRandall Stewart 				 * Get the scopes in properly to the sin6
8795e2c2d87SRandall Stewart 				 * addr's
8805e2c2d87SRandall Stewart 				 */
881f8829a4aSRandall Stewart 				/* we probably don't need these operations */
882f8829a4aSRandall Stewart 				(void)sa6_recoverscope(from6);
883fc14de76SRandall Stewart 				sa6_embedscope(from6,
884482444b4SRandall Stewart 				    MODULE_GLOBAL(ip6_use_defzone));
885fc14de76SRandall Stewart 
8865e2c2d87SRandall Stewart 				break;
8875e2c2d87SRandall Stewart 			}
8885e2c2d87SRandall Stewart #endif
8895e2c2d87SRandall Stewart 		default:
890f8829a4aSRandall Stewart 			/* unknown address type */
891f8829a4aSRandall Stewart 			from = NULL;
892f8829a4aSRandall Stewart 		}
893f8829a4aSRandall Stewart 		if (from != NULL) {
894ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "Looking for IP source: ");
895ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, from);
896f8829a4aSRandall Stewart 			/* look up the from address */
897f8829a4aSRandall Stewart 			stcb->asoc.last_control_chunk_from = sctp_findnet(stcb, from);
898f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
899ad81507eSRandall Stewart 			if (stcb->asoc.last_control_chunk_from == NULL)
900ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: IP source address not found?!\n");
901ad81507eSRandall Stewart #endif
902f8829a4aSRandall Stewart 		}
903f8829a4aSRandall Stewart 	}
904f8829a4aSRandall Stewart }
905f8829a4aSRandall Stewart 
906f8829a4aSRandall Stewart /*
907f8829a4aSRandall Stewart  * does the address match? returns 0 if not, 1 if so
908f8829a4aSRandall Stewart  */
909f8829a4aSRandall Stewart static uint32_t
910f8829a4aSRandall Stewart sctp_asconf_addr_match(struct sctp_asconf_addr *aa, struct sockaddr *sa)
911f8829a4aSRandall Stewart {
912f8829a4aSRandall Stewart #ifdef INET6
913f8829a4aSRandall Stewart 	if (sa->sa_family == AF_INET6) {
914f8829a4aSRandall Stewart 		/* IPv6 sa address */
915f8829a4aSRandall Stewart 		/* XXX scopeid */
916f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
917f8829a4aSRandall Stewart 
918f8829a4aSRandall Stewart 		if ((aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) &&
919f8829a4aSRandall Stewart 		    (memcmp(&aa->ap.addrp.addr, &sin6->sin6_addr,
920f8829a4aSRandall Stewart 		    sizeof(struct in6_addr)) == 0)) {
921f8829a4aSRandall Stewart 			return (1);
922f8829a4aSRandall Stewart 		}
923f8829a4aSRandall Stewart 	} else
924f8829a4aSRandall Stewart #endif				/* INET6 */
925f8829a4aSRandall Stewart 	if (sa->sa_family == AF_INET) {
926f8829a4aSRandall Stewart 		/* IPv4 sa address */
927f8829a4aSRandall Stewart 		struct sockaddr_in *sin = (struct sockaddr_in *)sa;
928f8829a4aSRandall Stewart 
929f8829a4aSRandall Stewart 		if ((aa->ap.addrp.ph.param_type == SCTP_IPV4_ADDRESS) &&
930f8829a4aSRandall Stewart 		    (memcmp(&aa->ap.addrp.addr, &sin->sin_addr,
931f8829a4aSRandall Stewart 		    sizeof(struct in_addr)) == 0)) {
932f8829a4aSRandall Stewart 			return (1);
933f8829a4aSRandall Stewart 		}
934f8829a4aSRandall Stewart 	}
935f8829a4aSRandall Stewart 	return (0);
936f8829a4aSRandall Stewart }
937f8829a4aSRandall Stewart 
938f8829a4aSRandall Stewart /*
939c54a18d2SRandall Stewart  * does the address match? returns 0 if not, 1 if so
940c54a18d2SRandall Stewart  */
941c54a18d2SRandall Stewart static uint32_t
942c54a18d2SRandall Stewart sctp_addr_match(
943c54a18d2SRandall Stewart     struct sctp_ipv6addr_param *v6addr,
944c54a18d2SRandall Stewart     struct sockaddr *sa)
945c54a18d2SRandall Stewart {
946c54a18d2SRandall Stewart 	uint16_t param_type, param_length;
947c54a18d2SRandall Stewart 	struct sctp_ipv4addr_param *v4addr = (struct sctp_ipv4addr_param *)v6addr;
948c54a18d2SRandall Stewart 
949d6af161aSRandall Stewart #ifdef INET6
950c54a18d2SRandall Stewart 	if (sa->sa_family == AF_INET6) {
951c54a18d2SRandall Stewart 		/* IPv6 sa address */
952c54a18d2SRandall Stewart 		/* XXX scopeid */
953c54a18d2SRandall Stewart 		struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)sa;
954c54a18d2SRandall Stewart 
955c54a18d2SRandall Stewart 		param_type = ntohs(v6addr->ph.param_type);
956c54a18d2SRandall Stewart 		param_length = ntohs(v6addr->ph.param_length);
957c54a18d2SRandall Stewart 
958c54a18d2SRandall Stewart 		if ((param_type == SCTP_IPV6_ADDRESS) &&
959c54a18d2SRandall Stewart 		    param_length == sizeof(struct sctp_ipv6addr_param) &&
960c54a18d2SRandall Stewart 		    (memcmp(&v6addr->addr, &sin6->sin6_addr,
961c54a18d2SRandall Stewart 		    sizeof(struct in6_addr)) == 0)) {
962c54a18d2SRandall Stewart 			return (1);
963c54a18d2SRandall Stewart 		}
964d6af161aSRandall Stewart 	}
965d6af161aSRandall Stewart #endif
966c54a18d2SRandall Stewart 	if (sa->sa_family == AF_INET) {
967c54a18d2SRandall Stewart 		/* IPv4 sa address */
968c54a18d2SRandall Stewart 		struct sockaddr_in *sin = (struct sockaddr_in *)sa;
969c54a18d2SRandall Stewart 
970c54a18d2SRandall Stewart 		param_type = ntohs(v4addr->ph.param_type);
971c54a18d2SRandall Stewart 		param_length = ntohs(v4addr->ph.param_length);
972c54a18d2SRandall Stewart 
973c54a18d2SRandall Stewart 		if ((param_type == SCTP_IPV4_ADDRESS) &&
974c54a18d2SRandall Stewart 		    param_length == sizeof(struct sctp_ipv4addr_param) &&
975c54a18d2SRandall Stewart 		    (memcmp(&v4addr->addr, &sin->sin_addr,
976c54a18d2SRandall Stewart 		    sizeof(struct in_addr)) == 0)) {
977c54a18d2SRandall Stewart 			return (1);
978c54a18d2SRandall Stewart 		}
979c54a18d2SRandall Stewart 	}
980c54a18d2SRandall Stewart 	return (0);
981c54a18d2SRandall Stewart }
982c54a18d2SRandall Stewart 
983c54a18d2SRandall Stewart /*
984f8829a4aSRandall Stewart  * Cleanup for non-responded/OP ERR'd ASCONF
985f8829a4aSRandall Stewart  */
986f8829a4aSRandall Stewart void
987f8829a4aSRandall Stewart sctp_asconf_cleanup(struct sctp_tcb *stcb, struct sctp_nets *net)
988f8829a4aSRandall Stewart {
989f8829a4aSRandall Stewart 	/* mark peer as ASCONF incapable */
990f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
991f8829a4aSRandall Stewart 	/*
992f8829a4aSRandall Stewart 	 * clear out any existing asconfs going out
993f8829a4aSRandall Stewart 	 */
9943c503c28SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
9953c503c28SRandall Stewart 	    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_2);
996c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out_acked = stcb->asoc.asconf_seq_out;
997f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
998f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
999f8829a4aSRandall Stewart }
1000f8829a4aSRandall Stewart 
1001f8829a4aSRandall Stewart /*
10022dad8a55SRandall Stewart  * cleanup any cached source addresses that may be topologically
10032dad8a55SRandall Stewart  * incorrect after a new address has been added to this interface.
10042dad8a55SRandall Stewart  */
10052dad8a55SRandall Stewart static void
10062dad8a55SRandall Stewart sctp_asconf_nets_cleanup(struct sctp_tcb *stcb, struct sctp_ifn *ifn)
10072dad8a55SRandall Stewart {
10082dad8a55SRandall Stewart 	struct sctp_nets *net;
10092dad8a55SRandall Stewart 
10102dad8a55SRandall Stewart 	/*
10112dad8a55SRandall Stewart 	 * Ideally, we want to only clear cached routes and source addresses
10122dad8a55SRandall Stewart 	 * that are topologically incorrect.  But since there is no easy way
10132dad8a55SRandall Stewart 	 * to know whether the newly added address on the ifn would cause a
10142dad8a55SRandall Stewart 	 * routing change (i.e. a new egress interface would be chosen)
10152dad8a55SRandall Stewart 	 * without doing a new routing lookup and source address selection,
10162dad8a55SRandall Stewart 	 * we will (for now) just flush any cached route using a different
10172dad8a55SRandall Stewart 	 * ifn (and cached source addrs) and let output re-choose them
10182dad8a55SRandall Stewart 	 * during the next send on that net.
10192dad8a55SRandall Stewart 	 */
10202dad8a55SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
10212dad8a55SRandall Stewart 		/*
10222dad8a55SRandall Stewart 		 * clear any cached route (and cached source address) if the
10232dad8a55SRandall Stewart 		 * route's interface is NOT the same as the address change.
10242dad8a55SRandall Stewart 		 * If it's the same interface, just clear the cached source
10252dad8a55SRandall Stewart 		 * address.
10262dad8a55SRandall Stewart 		 */
10272dad8a55SRandall Stewart 		if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro) &&
1028fc066a61SMichael Tuexen 		    ((ifn == NULL) ||
1029fc066a61SMichael Tuexen 		    (SCTP_GET_IF_INDEX_FROM_ROUTE(&net->ro) != ifn->ifn_index))) {
10302dad8a55SRandall Stewart 			/* clear any cached route */
10312dad8a55SRandall Stewart 			RTFREE(net->ro.ro_rt);
10322dad8a55SRandall Stewart 			net->ro.ro_rt = NULL;
10332dad8a55SRandall Stewart 		}
10342dad8a55SRandall Stewart 		/* clear any cached source address */
10352dad8a55SRandall Stewart 		if (net->src_addr_selected) {
10362dad8a55SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
10372dad8a55SRandall Stewart 			net->ro._s_addr = NULL;
10382dad8a55SRandall Stewart 			net->src_addr_selected = 0;
10392dad8a55SRandall Stewart 		}
10402dad8a55SRandall Stewart 	}
10412dad8a55SRandall Stewart }
10422dad8a55SRandall Stewart 
1043851b7298SRandall Stewart 
1044851b7298SRandall Stewart void
1045851b7298SRandall Stewart sctp_assoc_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *dstnet)
1046851b7298SRandall Stewart {
1047851b7298SRandall Stewart 	int error;
1048851b7298SRandall Stewart 
1049851b7298SRandall Stewart 	if (dstnet->dest_state & SCTP_ADDR_UNCONFIRMED) {
1050851b7298SRandall Stewart 		return;
1051851b7298SRandall Stewart 	}
1052851b7298SRandall Stewart 	if (stcb->asoc.deleted_primary == NULL) {
1053851b7298SRandall Stewart 		return;
1054851b7298SRandall Stewart 	}
1055851b7298SRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.sent_queue)) {
1056b27a6b7dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "assoc_immediate_retrans: Deleted primary is ");
1057851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1058851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "Current Primary is ");
1059851b7298SRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.primary_destination->ro._l_addr.sa);
1060851b7298SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb,
1061851b7298SRandall Stewart 		    stcb->asoc.deleted_primary,
1062851b7298SRandall Stewart 		    SCTP_FROM_SCTP_TIMER + SCTP_LOC_8);
1063851b7298SRandall Stewart 		stcb->asoc.num_send_timers_up--;
1064851b7298SRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1065851b7298SRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1066851b7298SRandall Stewart 		}
1067851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1068851b7298SRandall Stewart 		error = sctp_t3rxt_timer(stcb->sctp_ep, stcb,
1069851b7298SRandall Stewart 		    stcb->asoc.deleted_primary);
1070851b7298SRandall Stewart 		if (error) {
1071851b7298SRandall Stewart 			SCTP_INP_DECR_REF(stcb->sctp_ep);
1072851b7298SRandall Stewart 			return;
1073851b7298SRandall Stewart 		}
1074851b7298SRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1075851b7298SRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1076f31e6c7fSMichael Tuexen 		sctp_auditing(4, stcb->sctp_ep, stcb, stcb->asoc.deleted_primary);
1077851b7298SRandall Stewart #endif
1078851b7298SRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1079851b7298SRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
1080851b7298SRandall Stewart 		    (stcb->asoc.sent_queue_cnt > 0)) {
1081851b7298SRandall Stewart 			struct sctp_tmit_chunk *chk;
1082851b7298SRandall Stewart 
1083851b7298SRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1084851b7298SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep,
1085851b7298SRandall Stewart 			    stcb, chk->whoTo);
1086851b7298SRandall Stewart 		}
1087851b7298SRandall Stewart 	}
1088851b7298SRandall Stewart 	return;
1089851b7298SRandall Stewart }
1090851b7298SRandall Stewart 
10912afb3e84SRandall Stewart static int
10922afb3e84SRandall Stewart     sctp_asconf_queue_mgmt(struct sctp_tcb *, struct sctp_ifa *, uint16_t);
10932afb3e84SRandall Stewart 
1094851b7298SRandall Stewart void
10952afb3e84SRandall Stewart sctp_net_immediate_retrans(struct sctp_tcb *stcb, struct sctp_nets *net)
10962afb3e84SRandall Stewart {
10972afb3e84SRandall Stewart 	struct sctp_tmit_chunk *chk;
10982afb3e84SRandall Stewart 
1099b27a6b7dSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "net_immediate_retrans: RTO is %d\n", net->RTO);
11002afb3e84SRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, net,
11012afb3e84SRandall Stewart 	    SCTP_FROM_SCTP_TIMER + SCTP_LOC_5);
11022afb3e84SRandall Stewart 	stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
11032afb3e84SRandall Stewart 	net->error_count = 0;
11042afb3e84SRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
11052afb3e84SRandall Stewart 		if (chk->whoTo == net) {
1106851b7298SRandall Stewart 			if (chk->sent < SCTP_DATAGRAM_RESEND) {
11072afb3e84SRandall Stewart 				chk->sent = SCTP_DATAGRAM_RESEND;
11082afb3e84SRandall Stewart 				sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1109d55b0b1bSRandall Stewart 				sctp_flight_size_decrease(chk);
1110d55b0b1bSRandall Stewart 				sctp_total_flight_decrease(stcb, chk);
1111d55b0b1bSRandall Stewart 				net->marked_retrans++;
1112d55b0b1bSRandall Stewart 				stcb->asoc.marked_retrans++;
11132afb3e84SRandall Stewart 			}
11142afb3e84SRandall Stewart 		}
11152afb3e84SRandall Stewart 	}
1116d55b0b1bSRandall Stewart 	if (net->marked_retrans) {
1117d55b0b1bSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1118d55b0b1bSRandall Stewart 	}
1119851b7298SRandall Stewart }
11202afb3e84SRandall Stewart 
11212afb3e84SRandall Stewart static void
11222afb3e84SRandall Stewart sctp_path_check_and_react(struct sctp_tcb *stcb, struct sctp_ifa *newifa)
11232afb3e84SRandall Stewart {
11242afb3e84SRandall Stewart 	struct sctp_nets *net;
11252afb3e84SRandall Stewart 	int addrnum, changed;
11262afb3e84SRandall Stewart 
11272afb3e84SRandall Stewart 	/*
11282afb3e84SRandall Stewart 	 * If number of local valid addresses is 1, the valid address is
11292afb3e84SRandall Stewart 	 * probably newly added address. Several valid addresses in this
11302afb3e84SRandall Stewart 	 * association.  A source address may not be changed.  Additionally,
11312afb3e84SRandall Stewart 	 * they can be configured on a same interface as "alias" addresses.
11322afb3e84SRandall Stewart 	 * (by micchie)
11332afb3e84SRandall Stewart 	 */
11342afb3e84SRandall Stewart 	addrnum = sctp_local_addr_count(stcb);
11352afb3e84SRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF1, "p_check_react(): %d local addresses\n",
11362afb3e84SRandall Stewart 	    addrnum);
11372afb3e84SRandall Stewart 	if (addrnum == 1) {
11382afb3e84SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
11392afb3e84SRandall Stewart 			/* clear any cached route and source address */
11402afb3e84SRandall Stewart 			if (net->ro.ro_rt) {
11412afb3e84SRandall Stewart 				RTFREE(net->ro.ro_rt);
11422afb3e84SRandall Stewart 				net->ro.ro_rt = NULL;
11432afb3e84SRandall Stewart 			}
11442afb3e84SRandall Stewart 			if (net->src_addr_selected) {
11452afb3e84SRandall Stewart 				sctp_free_ifa(net->ro._s_addr);
11462afb3e84SRandall Stewart 				net->ro._s_addr = NULL;
11472afb3e84SRandall Stewart 				net->src_addr_selected = 0;
11482afb3e84SRandall Stewart 			}
11492afb3e84SRandall Stewart 			/* Retransmit unacknowledged DATA chunks immediately */
11502afb3e84SRandall Stewart 			if (sctp_is_mobility_feature_on(stcb->sctp_ep,
11512afb3e84SRandall Stewart 			    SCTP_MOBILITY_FASTHANDOFF)) {
11522afb3e84SRandall Stewart 				sctp_net_immediate_retrans(stcb, net);
11532afb3e84SRandall Stewart 			}
11542afb3e84SRandall Stewart 			/* also, SET PRIMARY is maybe already sent */
11552afb3e84SRandall Stewart 		}
11562afb3e84SRandall Stewart 		return;
11572afb3e84SRandall Stewart 	}
11582afb3e84SRandall Stewart 	/* Multiple local addresses exsist in the association.  */
11592afb3e84SRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
11602afb3e84SRandall Stewart 		/* clear any cached route and source address */
11612afb3e84SRandall Stewart 		if (net->ro.ro_rt) {
11622afb3e84SRandall Stewart 			RTFREE(net->ro.ro_rt);
11632afb3e84SRandall Stewart 			net->ro.ro_rt = NULL;
11642afb3e84SRandall Stewart 		}
11652afb3e84SRandall Stewart 		if (net->src_addr_selected) {
11662afb3e84SRandall Stewart 			sctp_free_ifa(net->ro._s_addr);
11672afb3e84SRandall Stewart 			net->ro._s_addr = NULL;
11682afb3e84SRandall Stewart 			net->src_addr_selected = 0;
11692afb3e84SRandall Stewart 		}
11702afb3e84SRandall Stewart 		/*
11712afb3e84SRandall Stewart 		 * Check if the nexthop is corresponding to the new address.
11722afb3e84SRandall Stewart 		 * If the new address is corresponding to the current
11732afb3e84SRandall Stewart 		 * nexthop, the path will be changed. If the new address is
11742afb3e84SRandall Stewart 		 * NOT corresponding to the current nexthop, the path will
11752afb3e84SRandall Stewart 		 * not be changed.
11762afb3e84SRandall Stewart 		 */
11772afb3e84SRandall Stewart 		SCTP_RTALLOC((sctp_route_t *) & net->ro,
11782afb3e84SRandall Stewart 		    stcb->sctp_ep->def_vrf_id);
11792afb3e84SRandall Stewart 		if (net->ro.ro_rt == NULL)
11802afb3e84SRandall Stewart 			continue;
11812afb3e84SRandall Stewart 
11822afb3e84SRandall Stewart 		changed = 0;
11832afb3e84SRandall Stewart 		if (net->ro._l_addr.sa.sa_family == AF_INET) {
11842afb3e84SRandall Stewart 			if (sctp_v4src_match_nexthop(newifa, (sctp_route_t *) & net->ro))
11852afb3e84SRandall Stewart 				changed = 1;
11862afb3e84SRandall Stewart 		}
11875e2c2d87SRandall Stewart #ifdef INET6
11882afb3e84SRandall Stewart 		if (net->ro._l_addr.sa.sa_family == AF_INET6) {
11892afb3e84SRandall Stewart 			if (sctp_v6src_match_nexthop(
11902afb3e84SRandall Stewart 			    &newifa->address.sin6, (sctp_route_t *) & net->ro))
11912afb3e84SRandall Stewart 				changed = 1;
11922afb3e84SRandall Stewart 		}
11935e2c2d87SRandall Stewart #endif
11942afb3e84SRandall Stewart 		/*
11952afb3e84SRandall Stewart 		 * if the newly added address does not relate routing
11962afb3e84SRandall Stewart 		 * information, we skip.
11972afb3e84SRandall Stewart 		 */
11982afb3e84SRandall Stewart 		if (changed == 0)
11992afb3e84SRandall Stewart 			continue;
12002afb3e84SRandall Stewart 		/* Retransmit unacknowledged DATA chunks immediately */
12012afb3e84SRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
12022afb3e84SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
12032afb3e84SRandall Stewart 			sctp_net_immediate_retrans(stcb, net);
12042afb3e84SRandall Stewart 		}
12052afb3e84SRandall Stewart 		/* Send SET PRIMARY for this new address */
12062afb3e84SRandall Stewart 		if (net == stcb->asoc.primary_destination) {
12072afb3e84SRandall Stewart 			(void)sctp_asconf_queue_mgmt(stcb, newifa,
12082afb3e84SRandall Stewart 			    SCTP_SET_PRIM_ADDR);
12092afb3e84SRandall Stewart 		}
12102afb3e84SRandall Stewart 	}
12112afb3e84SRandall Stewart }
12122afb3e84SRandall Stewart 
12132dad8a55SRandall Stewart /*
1214f8829a4aSRandall Stewart  * process an ADD/DELETE IP ack from peer.
12151b649582SRandall Stewart  * addr: corresponding sctp_ifa to the address being added/deleted.
1216f8829a4aSRandall Stewart  * type: SCTP_ADD_IP_ADDRESS or SCTP_DEL_IP_ADDRESS.
1217f8829a4aSRandall Stewart  * flag: 1=success, 0=failure.
1218f8829a4aSRandall Stewart  */
1219f8829a4aSRandall Stewart static void
122042551e99SRandall Stewart sctp_asconf_addr_mgmt_ack(struct sctp_tcb *stcb, struct sctp_ifa *addr,
1221f8829a4aSRandall Stewart     uint16_t type, uint32_t flag)
1222f8829a4aSRandall Stewart {
1223f8829a4aSRandall Stewart 	/*
1224f8829a4aSRandall Stewart 	 * do the necessary asoc list work- if we get a failure indication,
12252dad8a55SRandall Stewart 	 * leave the address on the assoc's restricted list.  If we get a
12262dad8a55SRandall Stewart 	 * success indication, remove the address from the restricted list.
1227f8829a4aSRandall Stewart 	 */
1228f8829a4aSRandall Stewart 	/*
1229f8829a4aSRandall Stewart 	 * Note: this will only occur for ADD_IP_ADDRESS, since
1230f8829a4aSRandall Stewart 	 * DEL_IP_ADDRESS is never actually added to the list...
1231f8829a4aSRandall Stewart 	 */
1232f8829a4aSRandall Stewart 	if (flag) {
12331b649582SRandall Stewart 		/* success case, so remove from the restricted list */
12341b649582SRandall Stewart 		sctp_del_local_addr_restricted(stcb, addr);
12352dad8a55SRandall Stewart 
12363232788eSRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
1237d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_BASE) ||
1238d55b0b1bSRandall Stewart 		    sctp_is_mobility_feature_on(stcb->sctp_ep,
1239d55b0b1bSRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
12402afb3e84SRandall Stewart 			sctp_path_check_and_react(stcb, addr);
12412afb3e84SRandall Stewart 			return;
12422afb3e84SRandall Stewart 		}
12433232788eSRandall Stewart 		/* clear any cached/topologically incorrect source addresses */
12442dad8a55SRandall Stewart 		sctp_asconf_nets_cleanup(stcb, addr->ifn_p);
1245f8829a4aSRandall Stewart 	}
1246f8829a4aSRandall Stewart 	/* else, leave it on the list */
1247f8829a4aSRandall Stewart }
1248f8829a4aSRandall Stewart 
1249f8829a4aSRandall Stewart /*
12501b649582SRandall Stewart  * add an asconf add/delete/set primary IP address parameter to the queue.
1251f8829a4aSRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
12521b649582SRandall Stewart  * returns 0 if queued, -1 if not queued/removed.
12531b649582SRandall Stewart  * NOTE: if adding, but a delete for the same address is already scheduled
12541b649582SRandall Stewart  * (and not yet sent out), simply remove it from queue.  Same for deleting
12551b649582SRandall Stewart  * an address already scheduled for add.  If a duplicate operation is found,
12561b649582SRandall Stewart  * ignore the new one.
1257f8829a4aSRandall Stewart  */
12581b649582SRandall Stewart static int
12591b649582SRandall Stewart sctp_asconf_queue_mgmt(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
126018e198d3SRandall Stewart     uint16_t type)
1261f8829a4aSRandall Stewart {
1262f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1263f8829a4aSRandall Stewart 	struct sockaddr *sa;
1264f8829a4aSRandall Stewart 
1265f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
12664a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1267f8829a4aSRandall Stewart 		/* address match? */
126842551e99SRandall Stewart 		if (sctp_asconf_addr_match(aa, &ifa->address.sa) == 0)
1269f8829a4aSRandall Stewart 			continue;
1270c54a18d2SRandall Stewart 		/*
1271c54a18d2SRandall Stewart 		 * is the request already in queue but not sent? pass the
1272c54a18d2SRandall Stewart 		 * request already sent in order to resolve the following
1273c54a18d2SRandall Stewart 		 * case: 1. arrival of ADD, then sent 2. arrival of DEL. we
1274c54a18d2SRandall Stewart 		 * can't remove the ADD request already sent 3. arrival of
1275c54a18d2SRandall Stewart 		 * ADD
1276c54a18d2SRandall Stewart 		 */
1277c54a18d2SRandall Stewart 		if (aa->ap.aph.ph.param_type == type && aa->sent == 0) {
1278f8829a4aSRandall Stewart 			return (-1);
1279f8829a4aSRandall Stewart 		}
1280f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
12811b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_ADD_IP_ADDRESS) &&
12821b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS)) {
1283f8829a4aSRandall Stewart 			/* add requested, delete already queued */
1284f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
12851b649582SRandall Stewart 			/* remove the ifa from the restricted list */
12861b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, ifa);
12871b649582SRandall Stewart 			/* free the asconf param */
1288207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
12891b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: add removes queued entry\n");
12901b649582SRandall Stewart 			return (-1);
12911b649582SRandall Stewart 		}
12921b649582SRandall Stewart 		if ((aa->sent == 0) && (type == SCTP_DEL_IP_ADDRESS) &&
12931b649582SRandall Stewart 		    (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS)) {
12941b649582SRandall Stewart 			/* delete requested, add already queued */
12951b649582SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
12961b649582SRandall Stewart 			/* remove the aa->ifa from the restricted list */
12971b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
12981b649582SRandall Stewart 			/* free the asconf param */
12991b649582SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13001b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_mgmt: delete removes queued entry\n");
1301f8829a4aSRandall Stewart 			return (-1);
1302f8829a4aSRandall Stewart 		}
1303f8829a4aSRandall Stewart 	}			/* for each aa */
1304f8829a4aSRandall Stewart 
1305f8829a4aSRandall Stewart 	/* adding new request to the queue */
13061b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
13071b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1308f8829a4aSRandall Stewart 	if (aa == NULL) {
1309f8829a4aSRandall Stewart 		/* didn't get memory */
13101b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "asconf_queue_mgmt: failed to get memory!\n");
1311f8829a4aSRandall Stewart 		return (-1);
1312f8829a4aSRandall Stewart 	}
1313830d754dSRandall Stewart 	aa->special_del = 0;
1314f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1315f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
1316f8829a4aSRandall Stewart 	aa->ap.aph.ph.param_type = type;
1317f8829a4aSRandall Stewart 	aa->ifa = ifa;
1318bff64a4dSRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
1319f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
132042551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
1321f8829a4aSRandall Stewart 		/* IPv6 address */
1322f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
1323f8829a4aSRandall Stewart 
132442551e99SRandall Stewart 		sin6 = (struct sockaddr_in6 *)&ifa->address.sa;
1325f8829a4aSRandall Stewart 		sa = (struct sockaddr *)sin6;
1326f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1327f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
13281b649582SRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1329f8829a4aSRandall Stewart 		    sizeof(struct sctp_ipv6addr_param);
1330f8829a4aSRandall Stewart 		memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1331f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
133242551e99SRandall Stewart 	} else if (ifa->address.sa.sa_family == AF_INET) {
1333f8829a4aSRandall Stewart 		/* IPv4 address */
13341b649582SRandall Stewart 		struct sockaddr_in *sin;
1335f8829a4aSRandall Stewart 
13361b649582SRandall Stewart 		sin = (struct sockaddr_in *)&ifa->address.sa;
1337f8829a4aSRandall Stewart 		sa = (struct sockaddr *)sin;
1338f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1339f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
13401b649582SRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1341f8829a4aSRandall Stewart 		    sizeof(struct sctp_ipv4addr_param);
1342f8829a4aSRandall Stewart 		memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1343f8829a4aSRandall Stewart 		    sizeof(struct in_addr));
1344f8829a4aSRandall Stewart 	} else {
1345f8829a4aSRandall Stewart 		/* invalid family! */
1346207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
13473232788eSRandall Stewart 		sctp_free_ifa(ifa);
1348f8829a4aSRandall Stewart 		return (-1);
1349f8829a4aSRandall Stewart 	}
1350f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1351f8829a4aSRandall Stewart 
1352f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1353f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
1354*dec0177dSRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_debug_on) & SCTP_DEBUG_ASCONF2) {
1355c54a18d2SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
1356c54a18d2SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: inserted asconf ADD_IP_ADDRESS: ");
1357c54a18d2SRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1358c54a18d2SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
13591b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf DEL_IP_ADDRESS: ");
1360ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1361f8829a4aSRandall Stewart 		} else {
13621b649582SRandall Stewart 			SCTP_PRINTF("asconf_queue_mgmt: appended asconf SET_PRIM_ADDR: ");
1363ad81507eSRandall Stewart 			SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
1364f8829a4aSRandall Stewart 		}
1365f8829a4aSRandall Stewart 	}
1366ad81507eSRandall Stewart #endif
1367f8829a4aSRandall Stewart 
1368f8829a4aSRandall Stewart 	return (0);
1369f8829a4aSRandall Stewart }
1370f8829a4aSRandall Stewart 
13711b649582SRandall Stewart 
13721b649582SRandall Stewart /*
13731b649582SRandall Stewart  * add an asconf operation for the given ifa and type.
13741b649582SRandall Stewart  * type = SCTP_ADD_IP_ADDRESS, SCTP_DEL_IP_ADDRESS, SCTP_SET_PRIM_ADDR.
13751b649582SRandall Stewart  * returns 0 if completed, -1 if not completed, 1 if immediate send is
13761b649582SRandall Stewart  * advisable.
13771b649582SRandall Stewart  */
13781b649582SRandall Stewart static int
13791b649582SRandall Stewart sctp_asconf_queue_add(struct sctp_tcb *stcb, struct sctp_ifa *ifa,
13801b649582SRandall Stewart     uint16_t type)
13811b649582SRandall Stewart {
13821b649582SRandall Stewart 	uint32_t status;
13831b649582SRandall Stewart 	int pending_delete_queued = 0;
13841b649582SRandall Stewart 
13851b649582SRandall Stewart 	/* see if peer supports ASCONF */
13861b649582SRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
13871b649582SRandall Stewart 		return (-1);
13881b649582SRandall Stewart 	}
13891b649582SRandall Stewart 	/*
13901b649582SRandall Stewart 	 * if this is deleting the last address from the assoc, mark it as
13911b649582SRandall Stewart 	 * pending.
13921b649582SRandall Stewart 	 */
13931b649582SRandall Stewart 	if ((type == SCTP_DEL_IP_ADDRESS) && !stcb->asoc.asconf_del_pending &&
13941b649582SRandall Stewart 	    (sctp_local_addr_count(stcb) < 2)) {
13951b649582SRandall Stewart 		/* set the pending delete info only */
13961b649582SRandall Stewart 		stcb->asoc.asconf_del_pending = 1;
13971b649582SRandall Stewart 		stcb->asoc.asconf_addr_del_pending = ifa;
13981b649582SRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
13991b649582SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF2,
14001b649582SRandall Stewart 		    "asconf_queue_add: mark delete last address pending\n");
14011b649582SRandall Stewart 		return (-1);
14021b649582SRandall Stewart 	}
1403c54a18d2SRandall Stewart 	/* queue an asconf parameter */
1404c54a18d2SRandall Stewart 	status = sctp_asconf_queue_mgmt(stcb, ifa, type);
1405c54a18d2SRandall Stewart 
14061b649582SRandall Stewart 	/*
14071b649582SRandall Stewart 	 * if this is an add, and there is a delete also pending (i.e. the
14081b649582SRandall Stewart 	 * last local address is being changed), queue the pending delete
14091b649582SRandall Stewart 	 * too.
14101b649582SRandall Stewart 	 */
1411c54a18d2SRandall Stewart 	if ((type == SCTP_ADD_IP_ADDRESS) && stcb->asoc.asconf_del_pending && (status == 0)) {
14121b649582SRandall Stewart 		/* queue in the pending delete */
14131b649582SRandall Stewart 		if (sctp_asconf_queue_mgmt(stcb,
14141b649582SRandall Stewart 		    stcb->asoc.asconf_addr_del_pending,
14151b649582SRandall Stewart 		    SCTP_DEL_IP_ADDRESS) == 0) {
14161b649582SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF2, "asconf_queue_add: queing pending delete\n");
14171b649582SRandall Stewart 			pending_delete_queued = 1;
14181b649582SRandall Stewart 			/* clear out the pending delete info */
14191b649582SRandall Stewart 			stcb->asoc.asconf_del_pending = 0;
14201b649582SRandall Stewart 			sctp_free_ifa(stcb->asoc.asconf_addr_del_pending);
14211b649582SRandall Stewart 			stcb->asoc.asconf_addr_del_pending = NULL;
14221b649582SRandall Stewart 		}
14231b649582SRandall Stewart 	}
1424c54a18d2SRandall Stewart 	if (pending_delete_queued) {
14251b649582SRandall Stewart 		struct sctp_nets *net;
14261b649582SRandall Stewart 
14271b649582SRandall Stewart 		/*
14281b649582SRandall Stewart 		 * since we know that the only/last address is now being
14291b649582SRandall Stewart 		 * changed in this case, reset the cwnd/rto on all nets to
14301b649582SRandall Stewart 		 * start as a new address and path.  Also clear the error
14311b649582SRandall Stewart 		 * counts to give the assoc the best chance to complete the
14321b649582SRandall Stewart 		 * address change.
14331b649582SRandall Stewart 		 */
14341b649582SRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
14351b649582SRandall Stewart 			stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb,
14361b649582SRandall Stewart 			    net);
14371b649582SRandall Stewart 			net->RTO = 0;
14381b649582SRandall Stewart 			net->error_count = 0;
14391b649582SRandall Stewart 		}
14401b649582SRandall Stewart 		stcb->asoc.overall_error_count = 0;
1441b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
1442c4739e2fSRandall Stewart 			sctp_misc_ints(SCTP_THRESHOLD_CLEAR,
1443c4739e2fSRandall Stewart 			    stcb->asoc.overall_error_count,
1444c4739e2fSRandall Stewart 			    0,
1445c4739e2fSRandall Stewart 			    SCTP_FROM_SCTP_ASCONF,
1446c4739e2fSRandall Stewart 			    __LINE__);
1447c4739e2fSRandall Stewart 		}
14481b649582SRandall Stewart 		/* queue in an advisory set primary too */
14491b649582SRandall Stewart 		(void)sctp_asconf_queue_mgmt(stcb, ifa, SCTP_SET_PRIM_ADDR);
14501b649582SRandall Stewart 		/* let caller know we should send this out immediately */
14511b649582SRandall Stewart 		status = 1;
14521b649582SRandall Stewart 	}
14531b649582SRandall Stewart 	return (status);
14541b649582SRandall Stewart }
14551b649582SRandall Stewart 
14563232788eSRandall Stewart /*-
14573232788eSRandall Stewart  * add an asconf delete IP address parameter to the queue by sockaddr and
14583232788eSRandall Stewart  * possibly with no sctp_ifa available.  This is only called by the routine
14593232788eSRandall Stewart  * that checks the addresses in an INIT-ACK against the current address list.
1460f8829a4aSRandall Stewart  * returns 0 if completed, non-zero if not completed.
14613232788eSRandall Stewart  * NOTE: if an add is already scheduled (and not yet sent out), simply
14623232788eSRandall Stewart  * remove it from queue.  If a duplicate operation is found, ignore the
14633232788eSRandall Stewart  * new one.
1464f8829a4aSRandall Stewart  */
14651b649582SRandall Stewart static int
14663232788eSRandall Stewart sctp_asconf_queue_sa_delete(struct sctp_tcb *stcb, struct sockaddr *sa)
1467f8829a4aSRandall Stewart {
1468bff64a4dSRandall Stewart 	struct sctp_ifa *ifa;
1469f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
147042551e99SRandall Stewart 	uint32_t vrf_id;
1471f8829a4aSRandall Stewart 
1472ad81507eSRandall Stewart 	if (stcb == NULL) {
1473ad81507eSRandall Stewart 		return (-1);
1474ad81507eSRandall Stewart 	}
1475f8829a4aSRandall Stewart 	/* see if peer supports ASCONF */
1476f8829a4aSRandall Stewart 	if (stcb->asoc.peer_supports_asconf == 0) {
1477f8829a4aSRandall Stewart 		return (-1);
1478f8829a4aSRandall Stewart 	}
1479f8829a4aSRandall Stewart 	/* make sure the request isn't already in the queue */
14804a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1481f8829a4aSRandall Stewart 		/* address match? */
1482f8829a4aSRandall Stewart 		if (sctp_asconf_addr_match(aa, sa) == 0)
1483f8829a4aSRandall Stewart 			continue;
1484f8829a4aSRandall Stewart 		/* is the request already in queue (sent or not) */
14853232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
1486f8829a4aSRandall Stewart 			return (-1);
1487f8829a4aSRandall Stewart 		}
1488f8829a4aSRandall Stewart 		/* is the negative request already in queue, and not sent */
1489f8829a4aSRandall Stewart 		if (aa->sent == 1)
1490f8829a4aSRandall Stewart 			continue;
14913232788eSRandall Stewart 		if (aa->ap.aph.ph.param_type == SCTP_ADD_IP_ADDRESS) {
14923232788eSRandall Stewart 			/* add already queued, so remove existing entry */
1493f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.asconf_queue, aa, next);
14941b649582SRandall Stewart 			sctp_del_local_addr_restricted(stcb, aa->ifa);
1495f8829a4aSRandall Stewart 			/* free the entry */
1496207304d4SRandall Stewart 			SCTP_FREE(aa, SCTP_M_ASC_ADDR);
1497f8829a4aSRandall Stewart 			return (-1);
1498f8829a4aSRandall Stewart 		}
1499f8829a4aSRandall Stewart 	}			/* for each aa */
15003232788eSRandall Stewart 
15013232788eSRandall Stewart 	/* find any existing ifa-- NOTE ifa CAN be allowed to be NULL */
1502bff64a4dSRandall Stewart 	if (stcb) {
1503bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
1504bff64a4dSRandall Stewart 	} else {
1505bff64a4dSRandall Stewart 		vrf_id = SCTP_DEFAULT_VRFID;
1506bff64a4dSRandall Stewart 	}
1507851b7298SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
15083232788eSRandall Stewart 
1509f8829a4aSRandall Stewart 	/* adding new request to the queue */
15101b649582SRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
15111b649582SRandall Stewart 	    SCTP_M_ASC_ADDR);
1512f8829a4aSRandall Stewart 	if (aa == NULL) {
1513f8829a4aSRandall Stewart 		/* didn't get memory */
1514ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
15153232788eSRandall Stewart 		    "sctp_asconf_queue_sa_delete: failed to get memory!\n");
1516f8829a4aSRandall Stewart 		return (-1);
1517f8829a4aSRandall Stewart 	}
1518830d754dSRandall Stewart 	aa->special_del = 0;
1519f8829a4aSRandall Stewart 	/* fill in asconf address parameter fields */
1520f8829a4aSRandall Stewart 	/* top level elements are "networked" during send */
15213232788eSRandall Stewart 	aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
1522bff64a4dSRandall Stewart 	aa->ifa = ifa;
15233232788eSRandall Stewart 	if (ifa)
1524bff64a4dSRandall Stewart 		atomic_add_int(&ifa->refcount, 1);
1525f8829a4aSRandall Stewart 	/* correlation_id filled in during send routine later... */
1526f8829a4aSRandall Stewart 	if (sa->sa_family == AF_INET6) {
1527f8829a4aSRandall Stewart 		/* IPv6 address */
1528f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
1529f8829a4aSRandall Stewart 
1530f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)sa;
1531f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
1532f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
1533f8829a4aSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param);
1534f8829a4aSRandall Stewart 		memcpy(&aa->ap.addrp.addr, &sin6->sin6_addr,
1535f8829a4aSRandall Stewart 		    sizeof(struct in6_addr));
1536f8829a4aSRandall Stewart 	} else if (sa->sa_family == AF_INET) {
1537f8829a4aSRandall Stewart 		/* IPv4 address */
1538f8829a4aSRandall Stewart 		struct sockaddr_in *sin = (struct sockaddr_in *)sa;
1539f8829a4aSRandall Stewart 
1540f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
1541f8829a4aSRandall Stewart 		aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
1542f8829a4aSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param);
1543f8829a4aSRandall Stewart 		memcpy(&aa->ap.addrp.addr, &sin->sin_addr,
1544f8829a4aSRandall Stewart 		    sizeof(struct in_addr));
1545f8829a4aSRandall Stewart 	} else {
1546f8829a4aSRandall Stewart 		/* invalid family! */
1547207304d4SRandall Stewart 		SCTP_FREE(aa, SCTP_M_ASC_ADDR);
15483232788eSRandall Stewart 		if (ifa)
15493232788eSRandall Stewart 			sctp_free_ifa(ifa);
1550f8829a4aSRandall Stewart 		return (-1);
1551f8829a4aSRandall Stewart 	}
1552f8829a4aSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
1553f8829a4aSRandall Stewart 
15543232788eSRandall Stewart 	/* delete goes to the back of the queue */
1555f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
1556f8829a4aSRandall Stewart 
1557c99efcf6SRandall Stewart 	/* sa_ignore MEMLEAK {memory is put on the tailq} */
1558f8829a4aSRandall Stewart 	return (0);
1559f8829a4aSRandall Stewart }
1560f8829a4aSRandall Stewart 
1561f8829a4aSRandall Stewart /*
1562f8829a4aSRandall Stewart  * find a specific asconf param on our "sent" queue
1563f8829a4aSRandall Stewart  */
1564f8829a4aSRandall Stewart static struct sctp_asconf_addr *
1565f8829a4aSRandall Stewart sctp_asconf_find_param(struct sctp_tcb *stcb, uint32_t correlation_id)
1566f8829a4aSRandall Stewart {
1567f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
1568f8829a4aSRandall Stewart 
1569f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
1570f8829a4aSRandall Stewart 		if (aa->ap.aph.correlation_id == correlation_id &&
1571f8829a4aSRandall Stewart 		    aa->sent == 1) {
1572f8829a4aSRandall Stewart 			/* found it */
1573f8829a4aSRandall Stewart 			return (aa);
1574f8829a4aSRandall Stewart 		}
1575f8829a4aSRandall Stewart 	}
1576f8829a4aSRandall Stewart 	/* didn't find it */
1577f8829a4aSRandall Stewart 	return (NULL);
1578f8829a4aSRandall Stewart }
1579f8829a4aSRandall Stewart 
1580f8829a4aSRandall Stewart /*
1581f8829a4aSRandall Stewart  * process an SCTP_ERROR_CAUSE_IND for a ASCONF-ACK parameter and do
1582f8829a4aSRandall Stewart  * notifications based on the error response
1583f8829a4aSRandall Stewart  */
1584f8829a4aSRandall Stewart static void
1585f8829a4aSRandall Stewart sctp_asconf_process_error(struct sctp_tcb *stcb,
1586f8829a4aSRandall Stewart     struct sctp_asconf_paramhdr *aph)
1587f8829a4aSRandall Stewart {
1588f8829a4aSRandall Stewart 	struct sctp_error_cause *eh;
1589f8829a4aSRandall Stewart 	struct sctp_paramhdr *ph;
1590f8829a4aSRandall Stewart 	uint16_t param_type;
1591f8829a4aSRandall Stewart 	uint16_t error_code;
1592f8829a4aSRandall Stewart 
1593f8829a4aSRandall Stewart 	eh = (struct sctp_error_cause *)(aph + 1);
1594f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)(eh + 1);
1595f8829a4aSRandall Stewart 	/* validate lengths */
1596f8829a4aSRandall Stewart 	if (htons(eh->length) + sizeof(struct sctp_error_cause) >
1597f8829a4aSRandall Stewart 	    htons(aph->ph.param_length)) {
1598f8829a4aSRandall Stewart 		/* invalid error cause length */
1599ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1600ad81507eSRandall Stewart 		    "asconf_process_error: cause element too long\n");
1601f8829a4aSRandall Stewart 		return;
1602f8829a4aSRandall Stewart 	}
1603f8829a4aSRandall Stewart 	if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) >
1604f8829a4aSRandall Stewart 	    htons(eh->length)) {
1605f8829a4aSRandall Stewart 		/* invalid included TLV length */
1606ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1607ad81507eSRandall Stewart 		    "asconf_process_error: included TLV too long\n");
1608f8829a4aSRandall Stewart 		return;
1609f8829a4aSRandall Stewart 	}
1610f8829a4aSRandall Stewart 	/* which error code ? */
1611f8829a4aSRandall Stewart 	error_code = ntohs(eh->code);
1612f8829a4aSRandall Stewart 	param_type = ntohs(aph->ph.param_type);
1613f8829a4aSRandall Stewart 	/* FIX: this should go back up the REMOTE_ERROR ULP notify */
1614f8829a4aSRandall Stewart 	switch (error_code) {
1615f8829a4aSRandall Stewart 	case SCTP_CAUSE_RESOURCE_SHORTAGE:
1616f8829a4aSRandall Stewart 		/* we allow ourselves to "try again" for this error */
1617f8829a4aSRandall Stewart 		break;
1618f8829a4aSRandall Stewart 	default:
1619f8829a4aSRandall Stewart 		/* peer can't handle it... */
1620f8829a4aSRandall Stewart 		switch (param_type) {
1621f8829a4aSRandall Stewart 		case SCTP_ADD_IP_ADDRESS:
1622f8829a4aSRandall Stewart 		case SCTP_DEL_IP_ADDRESS:
1623f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1624f8829a4aSRandall Stewart 			break;
1625f8829a4aSRandall Stewart 		case SCTP_SET_PRIM_ADDR:
1626f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1627f8829a4aSRandall Stewart 			break;
1628f8829a4aSRandall Stewart 		default:
1629f8829a4aSRandall Stewart 			break;
1630f8829a4aSRandall Stewart 		}
1631f8829a4aSRandall Stewart 	}
1632f8829a4aSRandall Stewart }
1633f8829a4aSRandall Stewart 
1634f8829a4aSRandall Stewart /*
163518e198d3SRandall Stewart  * process an asconf queue param.
163618e198d3SRandall Stewart  * aparam: parameter to process, will be removed from the queue.
163718e198d3SRandall Stewart  * flag: 1=success case, 0=failure case
1638f8829a4aSRandall Stewart  */
1639f8829a4aSRandall Stewart static void
1640f8829a4aSRandall Stewart sctp_asconf_process_param_ack(struct sctp_tcb *stcb,
1641f8829a4aSRandall Stewart     struct sctp_asconf_addr *aparam, uint32_t flag)
1642f8829a4aSRandall Stewart {
1643f8829a4aSRandall Stewart 	uint16_t param_type;
1644f8829a4aSRandall Stewart 
1645f8829a4aSRandall Stewart 	/* process this param */
1646f8829a4aSRandall Stewart 	param_type = aparam->ap.aph.ph.param_type;
1647f8829a4aSRandall Stewart 	switch (param_type) {
1648f8829a4aSRandall Stewart 	case SCTP_ADD_IP_ADDRESS:
1649ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1650ad81507eSRandall Stewart 		    "process_param_ack: added IP address\n");
1651f8829a4aSRandall Stewart 		sctp_asconf_addr_mgmt_ack(stcb, aparam->ifa, param_type, flag);
1652f8829a4aSRandall Stewart 		break;
1653f8829a4aSRandall Stewart 	case SCTP_DEL_IP_ADDRESS:
1654ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1655ad81507eSRandall Stewart 		    "process_param_ack: deleted IP address\n");
1656f8829a4aSRandall Stewart 		/* nothing really to do... lists already updated */
1657f8829a4aSRandall Stewart 		break;
1658f8829a4aSRandall Stewart 	case SCTP_SET_PRIM_ADDR:
1659c54a18d2SRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1660c54a18d2SRandall Stewart 		    "process_param_ack: set primary IP address\n");
1661f8829a4aSRandall Stewart 		/* nothing to do... peer may start using this addr */
1662f8829a4aSRandall Stewart 		if (flag == 0)
1663f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
1664f8829a4aSRandall Stewart 		break;
1665f8829a4aSRandall Stewart 	default:
1666f8829a4aSRandall Stewart 		/* should NEVER happen */
1667f8829a4aSRandall Stewart 		break;
1668f8829a4aSRandall Stewart 	}
1669f8829a4aSRandall Stewart 
1670f8829a4aSRandall Stewart 	/* remove the param and free it */
1671f8829a4aSRandall Stewart 	TAILQ_REMOVE(&stcb->asoc.asconf_queue, aparam, next);
16723232788eSRandall Stewart 	if (aparam->ifa)
1673bff64a4dSRandall Stewart 		sctp_free_ifa(aparam->ifa);
1674207304d4SRandall Stewart 	SCTP_FREE(aparam, SCTP_M_ASC_ADDR);
1675f8829a4aSRandall Stewart }
1676f8829a4aSRandall Stewart 
1677f8829a4aSRandall Stewart /*
1678f8829a4aSRandall Stewart  * cleanup from a bad asconf ack parameter
1679f8829a4aSRandall Stewart  */
1680f8829a4aSRandall Stewart static void
1681f8829a4aSRandall Stewart sctp_asconf_ack_clear(struct sctp_tcb *stcb)
1682f8829a4aSRandall Stewart {
1683f8829a4aSRandall Stewart 	/* assume peer doesn't really know how to do asconfs */
1684f8829a4aSRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
1685f8829a4aSRandall Stewart 	/* XXX we could free the pending queue here */
1686f8829a4aSRandall Stewart }
1687f8829a4aSRandall Stewart 
1688f8829a4aSRandall Stewart void
1689f8829a4aSRandall Stewart sctp_handle_asconf_ack(struct mbuf *m, int offset,
1690f8829a4aSRandall Stewart     struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb,
16913232788eSRandall Stewart     struct sctp_nets *net, int *abort_no_unlock)
1692f8829a4aSRandall Stewart {
1693f8829a4aSRandall Stewart 	struct sctp_association *asoc;
1694f8829a4aSRandall Stewart 	uint32_t serial_num;
1695f8829a4aSRandall Stewart 	uint16_t ack_length;
1696f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
1697f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa, *aa_next;
1698f8829a4aSRandall Stewart 	uint32_t last_error_id = 0;	/* last error correlation id */
1699f8829a4aSRandall Stewart 	uint32_t id;
1700f8829a4aSRandall Stewart 	struct sctp_asconf_addr *ap;
1701f8829a4aSRandall Stewart 
1702f8829a4aSRandall Stewart 	/* asconf param buffer */
1703f42a358aSRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
1704f8829a4aSRandall Stewart 
1705f8829a4aSRandall Stewart 	/* verify minimum length */
1706f8829a4aSRandall Stewart 	if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) {
1707ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
1708ad81507eSRandall Stewart 		    "handle_asconf_ack: chunk too small = %xh\n",
1709f8829a4aSRandall Stewart 		    ntohs(cp->ch.chunk_length));
1710f8829a4aSRandall Stewart 		return;
1711f8829a4aSRandall Stewart 	}
1712f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
1713f8829a4aSRandall Stewart 	serial_num = ntohl(cp->serial_number);
1714f8829a4aSRandall Stewart 
1715f8829a4aSRandall Stewart 	/*
1716f8829a4aSRandall Stewart 	 * NOTE: we may want to handle this differently- currently, we will
1717f8829a4aSRandall Stewart 	 * abort when we get an ack for the expected serial number + 1 (eg.
1718f8829a4aSRandall Stewart 	 * we didn't send it), process an ack normally if it is the expected
1719f8829a4aSRandall Stewart 	 * serial number, and re-send the previous ack for *ALL* other
1720f8829a4aSRandall Stewart 	 * serial numbers
1721f8829a4aSRandall Stewart 	 */
1722f8829a4aSRandall Stewart 
1723f8829a4aSRandall Stewart 	/*
1724f8829a4aSRandall Stewart 	 * if the serial number is the next expected, but I didn't send it,
1725f8829a4aSRandall Stewart 	 * abort the asoc, since someone probably just hijacked us...
1726f8829a4aSRandall Stewart 	 */
1727f8829a4aSRandall Stewart 	if (serial_num == (asoc->asconf_seq_out + 1)) {
1728ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got unexpected next serial number! Aborting asoc!\n");
1729f8829a4aSRandall Stewart 		sctp_abort_an_association(stcb->sctp_ep, stcb,
1730ceaad40aSRandall Stewart 		    SCTP_CAUSE_ILLEGAL_ASCONF_ACK, NULL, SCTP_SO_NOT_LOCKED);
17313232788eSRandall Stewart 		*abort_no_unlock = 1;
1732f8829a4aSRandall Stewart 		return;
1733f8829a4aSRandall Stewart 	}
1734c54a18d2SRandall Stewart 	if (serial_num != asoc->asconf_seq_out_acked + 1) {
1735f8829a4aSRandall Stewart 		/* got a duplicate/unexpected ASCONF-ACK */
1736ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf_ack: got duplicate/unexpected serial number = %xh (expected = %xh)\n",
1737c54a18d2SRandall Stewart 		    serial_num, asoc->asconf_seq_out_acked + 1);
1738f8829a4aSRandall Stewart 		return;
1739f8829a4aSRandall Stewart 	}
1740c54a18d2SRandall Stewart 	if (serial_num == asoc->asconf_seq_out - 1) {
1741f8829a4aSRandall Stewart 		/* stop our timer */
17423c503c28SRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep, stcb, net,
17433c503c28SRandall Stewart 		    SCTP_FROM_SCTP_ASCONF + SCTP_LOC_3);
1744c54a18d2SRandall Stewart 	}
1745f8829a4aSRandall Stewart 	/* process the ASCONF-ACK contents */
1746f8829a4aSRandall Stewart 	ack_length = ntohs(cp->ch.chunk_length) -
1747f8829a4aSRandall Stewart 	    sizeof(struct sctp_asconf_ack_chunk);
1748f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_asconf_ack_chunk);
1749f8829a4aSRandall Stewart 	/* process through all parameters */
1750f8829a4aSRandall Stewart 	while (ack_length >= sizeof(struct sctp_asconf_paramhdr)) {
1751f8829a4aSRandall Stewart 		unsigned int param_length, param_type;
1752f8829a4aSRandall Stewart 
1753f8829a4aSRandall Stewart 		/* get pointer to next asconf parameter */
1754f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset,
1755f8829a4aSRandall Stewart 		    sizeof(struct sctp_asconf_paramhdr), aparam_buf);
1756f8829a4aSRandall Stewart 		if (aph == NULL) {
1757f8829a4aSRandall Stewart 			/* can't get an asconf paramhdr */
1758f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1759f8829a4aSRandall Stewart 			return;
1760f8829a4aSRandall Stewart 		}
1761f8829a4aSRandall Stewart 		param_type = ntohs(aph->ph.param_type);
1762f8829a4aSRandall Stewart 		param_length = ntohs(aph->ph.param_length);
1763f8829a4aSRandall Stewart 		if (param_length > ack_length) {
1764f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1765f8829a4aSRandall Stewart 			return;
1766f8829a4aSRandall Stewart 		}
1767f8829a4aSRandall Stewart 		if (param_length < sizeof(struct sctp_paramhdr)) {
1768f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1769f8829a4aSRandall Stewart 			return;
1770f8829a4aSRandall Stewart 		}
1771f8829a4aSRandall Stewart 		/* get the complete parameter... */
1772f8829a4aSRandall Stewart 		if (param_length > sizeof(aparam_buf)) {
1773ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
1774ad81507eSRandall Stewart 			    "param length (%u) larger than buffer size!\n", param_length);
1775f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1776f8829a4aSRandall Stewart 			return;
1777f8829a4aSRandall Stewart 		}
1778f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
1779f8829a4aSRandall Stewart 		if (aph == NULL) {
1780f8829a4aSRandall Stewart 			sctp_asconf_ack_clear(stcb);
1781f8829a4aSRandall Stewart 			return;
1782f8829a4aSRandall Stewart 		}
1783f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no ntohl needed */
1784f8829a4aSRandall Stewart 		id = aph->correlation_id;
1785f8829a4aSRandall Stewart 
1786f8829a4aSRandall Stewart 		switch (param_type) {
1787f8829a4aSRandall Stewart 		case SCTP_ERROR_CAUSE_IND:
1788f8829a4aSRandall Stewart 			last_error_id = id;
1789f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1790f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1791f8829a4aSRandall Stewart 			if (ap == NULL) {
1792f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1793f8829a4aSRandall Stewart 				break;
1794f8829a4aSRandall Stewart 			}
1795f8829a4aSRandall Stewart 			/* process the parameter, failed flag */
1796f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 0);
1797f8829a4aSRandall Stewart 			/* process the error response */
1798f8829a4aSRandall Stewart 			sctp_asconf_process_error(stcb, aph);
1799f8829a4aSRandall Stewart 			break;
1800f8829a4aSRandall Stewart 		case SCTP_SUCCESS_REPORT:
1801f8829a4aSRandall Stewart 			/* find the corresponding asconf param in our queue */
1802f8829a4aSRandall Stewart 			ap = sctp_asconf_find_param(stcb, id);
1803f8829a4aSRandall Stewart 			if (ap == NULL) {
1804f8829a4aSRandall Stewart 				/* hmm... can't find this in our queue! */
1805f8829a4aSRandall Stewart 				break;
1806f8829a4aSRandall Stewart 			}
1807f8829a4aSRandall Stewart 			/* process the parameter, success flag */
1808f8829a4aSRandall Stewart 			sctp_asconf_process_param_ack(stcb, ap, 1);
1809f8829a4aSRandall Stewart 			break;
1810f8829a4aSRandall Stewart 		default:
1811f8829a4aSRandall Stewart 			break;
1812f8829a4aSRandall Stewart 		}		/* switch */
1813f8829a4aSRandall Stewart 
1814f8829a4aSRandall Stewart 		/* update remaining ASCONF-ACK message length to process */
1815f8829a4aSRandall Stewart 		ack_length -= SCTP_SIZE32(param_length);
1816f8829a4aSRandall Stewart 		if (ack_length <= 0) {
1817f8829a4aSRandall Stewart 			/* no more data in the mbuf chain */
1818f8829a4aSRandall Stewart 			break;
1819f8829a4aSRandall Stewart 		}
1820f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(param_length);
1821f8829a4aSRandall Stewart 	}			/* while */
1822f8829a4aSRandall Stewart 
1823f8829a4aSRandall Stewart 	/*
1824f8829a4aSRandall Stewart 	 * if there are any "sent" params still on the queue, these are
1825f8829a4aSRandall Stewart 	 * implicitly "success", or "failed" (if we got an error back) ...
1826f8829a4aSRandall Stewart 	 * so process these appropriately
1827f8829a4aSRandall Stewart 	 *
1828f8829a4aSRandall Stewart 	 * we assume that the correlation_id's are monotonically increasing
1829f8829a4aSRandall Stewart 	 * beginning from 1 and that we don't have *that* many outstanding
1830f8829a4aSRandall Stewart 	 * at any given time
1831f8829a4aSRandall Stewart 	 */
1832f8829a4aSRandall Stewart 	if (last_error_id == 0)
1833f8829a4aSRandall Stewart 		last_error_id--;/* set to "max" value */
18344a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(aa, &stcb->asoc.asconf_queue, next, aa_next) {
1835f8829a4aSRandall Stewart 		if (aa->sent == 1) {
1836f8829a4aSRandall Stewart 			/*
1837f8829a4aSRandall Stewart 			 * implicitly successful or failed if correlation_id
1838f8829a4aSRandall Stewart 			 * < last_error_id, then success else, failure
1839f8829a4aSRandall Stewart 			 */
1840f8829a4aSRandall Stewart 			if (aa->ap.aph.correlation_id < last_error_id)
184118e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 1);
1842f8829a4aSRandall Stewart 			else
184318e198d3SRandall Stewart 				sctp_asconf_process_param_ack(stcb, aa, 0);
1844f8829a4aSRandall Stewart 		} else {
1845f8829a4aSRandall Stewart 			/*
1846f8829a4aSRandall Stewart 			 * since we always process in order (FIFO queue) if
1847f8829a4aSRandall Stewart 			 * we reach one that hasn't been sent, the rest
1848f8829a4aSRandall Stewart 			 * should not have been sent either. so, we're
1849f8829a4aSRandall Stewart 			 * done...
1850f8829a4aSRandall Stewart 			 */
1851f8829a4aSRandall Stewart 			break;
1852f8829a4aSRandall Stewart 		}
1853f8829a4aSRandall Stewart 	}
1854f8829a4aSRandall Stewart 
1855f8829a4aSRandall Stewart 	/* update the next sequence number to use */
1856c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked++;
1857f8829a4aSRandall Stewart 	/* remove the old ASCONF on our outbound queue */
1858f8829a4aSRandall Stewart 	sctp_toss_old_asconf(stcb);
1859f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&stcb->asoc.asconf_queue)) {
18601b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
1861f8829a4aSRandall Stewart 		/* we have more params, so restart our timer */
1862f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, stcb->sctp_ep,
1863f8829a4aSRandall Stewart 		    stcb, net);
18641b649582SRandall Stewart #else
18651b649582SRandall Stewart 		/* we have more params, so send out more */
18663232788eSRandall Stewart 		sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
18671b649582SRandall Stewart #endif
1868f8829a4aSRandall Stewart 	}
1869f8829a4aSRandall Stewart }
1870f8829a4aSRandall Stewart 
18715e2c2d87SRandall Stewart #ifdef INET6
1872f8829a4aSRandall Stewart static uint32_t
1873f8829a4aSRandall Stewart sctp_is_scopeid_in_nets(struct sctp_tcb *stcb, struct sockaddr *sa)
1874f8829a4aSRandall Stewart {
1875f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6, *net6;
1876f8829a4aSRandall Stewart 	struct sctp_nets *net;
1877f8829a4aSRandall Stewart 
1878f8829a4aSRandall Stewart 	if (sa->sa_family != AF_INET6) {
1879f8829a4aSRandall Stewart 		/* wrong family */
1880f8829a4aSRandall Stewart 		return (0);
1881f8829a4aSRandall Stewart 	}
1882f8829a4aSRandall Stewart 	sin6 = (struct sockaddr_in6 *)sa;
1883f8829a4aSRandall Stewart 	if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) == 0) {
1884f8829a4aSRandall Stewart 		/* not link local address */
1885f8829a4aSRandall Stewart 		return (0);
1886f8829a4aSRandall Stewart 	}
1887f8829a4aSRandall Stewart 	/* hunt through our destination nets list for this scope_id */
1888f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1889f8829a4aSRandall Stewart 		if (((struct sockaddr *)(&net->ro._l_addr))->sa_family !=
1890f8829a4aSRandall Stewart 		    AF_INET6)
1891f8829a4aSRandall Stewart 			continue;
1892f8829a4aSRandall Stewart 		net6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1893f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_LINKLOCAL(&net6->sin6_addr) == 0)
1894f8829a4aSRandall Stewart 			continue;
1895f8829a4aSRandall Stewart 		if (sctp_is_same_scope(sin6, net6)) {
1896f8829a4aSRandall Stewart 			/* found one */
1897f8829a4aSRandall Stewart 			return (1);
1898f8829a4aSRandall Stewart 		}
1899f8829a4aSRandall Stewart 	}
1900f8829a4aSRandall Stewart 	/* didn't find one */
1901f8829a4aSRandall Stewart 	return (0);
1902f8829a4aSRandall Stewart }
1903f8829a4aSRandall Stewart 
19045e2c2d87SRandall Stewart #endif
19055e2c2d87SRandall Stewart 
1906f8829a4aSRandall Stewart /*
1907f8829a4aSRandall Stewart  * address management functions
1908f8829a4aSRandall Stewart  */
1909f8829a4aSRandall Stewart static void
1910f8829a4aSRandall Stewart sctp_addr_mgmt_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
19113232788eSRandall Stewart     struct sctp_ifa *ifa, uint16_t type, int addr_locked)
1912f8829a4aSRandall Stewart {
1913f8829a4aSRandall Stewart 	int status;
1914f8829a4aSRandall Stewart 
1915f8829a4aSRandall Stewart 
1916f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0 &&
1917f8829a4aSRandall Stewart 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
1918f8829a4aSRandall Stewart 		/* subset bound, no ASCONF allowed case, so ignore */
1919f8829a4aSRandall Stewart 		return;
1920f8829a4aSRandall Stewart 	}
1921f8829a4aSRandall Stewart 	/*
1922f8829a4aSRandall Stewart 	 * note: we know this is not the subset bound, no ASCONF case eg.
1923f8829a4aSRandall Stewart 	 * this is boundall or subset bound w/ASCONF allowed
1924f8829a4aSRandall Stewart 	 */
1925f8829a4aSRandall Stewart 
1926f8829a4aSRandall Stewart 	/* first, make sure it's a good address family */
192742551e99SRandall Stewart 	if (ifa->address.sa.sa_family != AF_INET6 &&
192842551e99SRandall Stewart 	    ifa->address.sa.sa_family != AF_INET) {
1929f8829a4aSRandall Stewart 		return;
1930f8829a4aSRandall Stewart 	}
1931f8829a4aSRandall Stewart 	/* make sure we're "allowed" to add this type of addr */
193242551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
1933f8829a4aSRandall Stewart 		/* invalid if we're not a v6 endpoint */
1934f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0)
1935f8829a4aSRandall Stewart 			return;
1936f8829a4aSRandall Stewart 		/* is the v6 addr really valid ? */
193742551e99SRandall Stewart 		if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
1938f8829a4aSRandall Stewart 			return;
1939f8829a4aSRandall Stewart 		}
1940f8829a4aSRandall Stewart 	}
1941f8829a4aSRandall Stewart 	/* put this address on the "pending/do not use yet" list */
19421b649582SRandall Stewart 	sctp_add_local_addr_restricted(stcb, ifa);
1943f8829a4aSRandall Stewart 	/*
1944f8829a4aSRandall Stewart 	 * check address scope if address is out of scope, don't queue
1945f8829a4aSRandall Stewart 	 * anything... note: this would leave the address on both inp and
1946f8829a4aSRandall Stewart 	 * asoc lists
1947f8829a4aSRandall Stewart 	 */
19485e2c2d87SRandall Stewart 	switch (ifa->address.sa.sa_family) {
19495e2c2d87SRandall Stewart #ifdef INET6
19505e2c2d87SRandall Stewart 	case AF_INET6:
19515e2c2d87SRandall Stewart 		{
1952f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
1953f8829a4aSRandall Stewart 
195442551e99SRandall Stewart 			sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
1955f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
1956f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
1957f8829a4aSRandall Stewart 				return;
1958f8829a4aSRandall Stewart 			}
1959f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
1960f8829a4aSRandall Stewart 				if (stcb->asoc.local_scope == 0) {
1961f8829a4aSRandall Stewart 					return;
1962f8829a4aSRandall Stewart 				}
1963f8829a4aSRandall Stewart 				/* is it the right link local scope? */
196442551e99SRandall Stewart 				if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
1965f8829a4aSRandall Stewart 					return;
1966f8829a4aSRandall Stewart 				}
1967f8829a4aSRandall Stewart 			}
1968f8829a4aSRandall Stewart 			if (stcb->asoc.site_scope == 0 &&
1969f8829a4aSRandall Stewart 			    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) {
1970f8829a4aSRandall Stewart 				return;
1971f8829a4aSRandall Stewart 			}
19725e2c2d87SRandall Stewart 			break;
19735e2c2d87SRandall Stewart 		}
19745e2c2d87SRandall Stewart #endif
19755e2c2d87SRandall Stewart 	case AF_INET:
19765e2c2d87SRandall Stewart 		{
1977f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
1978f8829a4aSRandall Stewart 			struct in6pcb *inp6;
1979f8829a4aSRandall Stewart 
1980f8829a4aSRandall Stewart 			inp6 = (struct in6pcb *)&inp->ip_inp.inp;
1981f8829a4aSRandall Stewart 			/* invalid if we are a v6 only endpoint */
1982f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
198344b7479bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp6))
1984f8829a4aSRandall Stewart 				return;
1985f8829a4aSRandall Stewart 
198642551e99SRandall Stewart 			sin = (struct sockaddr_in *)&ifa->address.sa;
1987f8829a4aSRandall Stewart 			if (sin->sin_addr.s_addr == 0) {
1988f8829a4aSRandall Stewart 				/* we skip unspecifed addresses */
1989f8829a4aSRandall Stewart 				return;
1990f8829a4aSRandall Stewart 			}
1991f8829a4aSRandall Stewart 			if (stcb->asoc.ipv4_local_scope == 0 &&
1992f8829a4aSRandall Stewart 			    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
1993f8829a4aSRandall Stewart 				return;
1994f8829a4aSRandall Stewart 			}
19955e2c2d87SRandall Stewart 			break;
19965e2c2d87SRandall Stewart 		}
19975e2c2d87SRandall Stewart 	default:
1998f8829a4aSRandall Stewart 		/* else, not AF_INET or AF_INET6, so skip */
1999f8829a4aSRandall Stewart 		return;
2000f8829a4aSRandall Stewart 	}
2001f8829a4aSRandall Stewart 
2002f8829a4aSRandall Stewart 	/* queue an asconf for this address add/delete */
2003f8829a4aSRandall Stewart 	if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
2004f8829a4aSRandall Stewart 		/* does the peer do asconf? */
2005f8829a4aSRandall Stewart 		if (stcb->asoc.peer_supports_asconf) {
2006f8829a4aSRandall Stewart 			/* queue an asconf for this addr */
2007f8829a4aSRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
20081b649582SRandall Stewart 
2009f8829a4aSRandall Stewart 			/*
20101b649582SRandall Stewart 			 * if queued ok, and in the open state, send out the
20111b649582SRandall Stewart 			 * ASCONF.  If in the non-open state, these will be
20121b649582SRandall Stewart 			 * sent when the state goes open.
2013f8829a4aSRandall Stewart 			 */
2014f8829a4aSRandall Stewart 			if (status == 0 &&
2015f8829a4aSRandall Stewart 			    SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
20161b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
2017f8829a4aSRandall Stewart 				sctp_timer_start(SCTP_TIMER_TYPE_ASCONF, inp,
2018f8829a4aSRandall Stewart 				    stcb, stcb->asoc.primary_destination);
20191b649582SRandall Stewart #else
20203232788eSRandall Stewart 				sctp_send_asconf(stcb, stcb->asoc.primary_destination,
20213232788eSRandall Stewart 				    addr_locked);
20221b649582SRandall Stewart #endif
2023f8829a4aSRandall Stewart 			}
2024f8829a4aSRandall Stewart 		}
2025f8829a4aSRandall Stewart 	}
2026f8829a4aSRandall Stewart }
2027f8829a4aSRandall Stewart 
202842551e99SRandall Stewart 
202942551e99SRandall Stewart int
20301b649582SRandall Stewart sctp_asconf_iterator_ep(struct sctp_inpcb *inp, void *ptr, uint32_t val)
2031f8829a4aSRandall Stewart {
203242551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
203342551e99SRandall Stewart 	struct sctp_ifa *ifa;
203442551e99SRandall Stewart 	struct sctp_laddr *l;
203542551e99SRandall Stewart 	int cnt_invalid = 0;
2036f8829a4aSRandall Stewart 
203742551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
203842551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
203942551e99SRandall Stewart 		ifa = l->ifa;
204042551e99SRandall Stewart 		if (ifa->address.sa.sa_family == AF_INET6) {
2041f8829a4aSRandall Stewart 			/* invalid if we're not a v6 endpoint */
2042f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
204342551e99SRandall Stewart 				cnt_invalid++;
204442551e99SRandall Stewart 				if (asc->cnt == cnt_invalid)
204542551e99SRandall Stewart 					return (1);
204642551e99SRandall Stewart 				else
204742551e99SRandall Stewart 					continue;
2048f8829a4aSRandall Stewart 			}
204942551e99SRandall Stewart 		} else if (ifa->address.sa.sa_family == AF_INET) {
2050f8829a4aSRandall Stewart 			/* invalid if we are a v6 only endpoint */
2051f8829a4aSRandall Stewart 			struct in6pcb *inp6;
2052f8829a4aSRandall Stewart 
2053f8829a4aSRandall Stewart 			inp6 = (struct in6pcb *)&inp->ip_inp.inp;
2054f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
205544b7479bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp6)) {
205642551e99SRandall Stewart 				cnt_invalid++;
205742551e99SRandall Stewart 				if (asc->cnt == cnt_invalid)
205842551e99SRandall Stewart 					return (1);
205942551e99SRandall Stewart 				else
206042551e99SRandall Stewart 					continue;
2061f8829a4aSRandall Stewart 			}
2062f8829a4aSRandall Stewart 		} else {
2063f8829a4aSRandall Stewart 			/* invalid address family */
206442551e99SRandall Stewart 			cnt_invalid++;
206542551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
206642551e99SRandall Stewart 				return (1);
2067f8829a4aSRandall Stewart 			else
206842551e99SRandall Stewart 				continue;
2069f8829a4aSRandall Stewart 		}
207042551e99SRandall Stewart 	}
207142551e99SRandall Stewart 	return (0);
207242551e99SRandall Stewart }
2073f8829a4aSRandall Stewart 
20741b649582SRandall Stewart static int
20751b649582SRandall Stewart sctp_asconf_iterator_ep_end(struct sctp_inpcb *inp, void *ptr, uint32_t val)
207642551e99SRandall Stewart {
207742551e99SRandall Stewart 	struct sctp_ifa *ifa;
207842551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
207942551e99SRandall Stewart 	struct sctp_laddr *laddr, *nladdr, *l;
208042551e99SRandall Stewart 
208142551e99SRandall Stewart 	/* Only for specific case not bound all */
208242551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
208342551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
208442551e99SRandall Stewart 		ifa = l->ifa;
208542551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
20863c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
20873c503c28SRandall Stewart 			    sctp_nxt_addr) {
208842551e99SRandall Stewart 				if (laddr->ifa == ifa) {
208942551e99SRandall Stewart 					laddr->action = 0;
209042551e99SRandall Stewart 					break;
209142551e99SRandall Stewart 				}
209242551e99SRandall Stewart 			}
209342551e99SRandall Stewart 		} else if (l->action == SCTP_DEL_IP_ADDRESS) {
20944a9ef3f8SMichael Tuexen 			LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) {
209542551e99SRandall Stewart 				/* remove only after all guys are done */
209642551e99SRandall Stewart 				if (laddr->ifa == ifa) {
209742551e99SRandall Stewart 					sctp_del_local_addr_ep(inp, ifa);
209842551e99SRandall Stewart 				}
209942551e99SRandall Stewart 			}
210042551e99SRandall Stewart 		}
210142551e99SRandall Stewart 	}
210242551e99SRandall Stewart 	return (0);
210342551e99SRandall Stewart }
210442551e99SRandall Stewart 
210542551e99SRandall Stewart void
21061b649582SRandall Stewart sctp_asconf_iterator_stcb(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
21071b649582SRandall Stewart     void *ptr, uint32_t val)
210842551e99SRandall Stewart {
210942551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
211042551e99SRandall Stewart 	struct sctp_ifa *ifa;
211142551e99SRandall Stewart 	struct sctp_laddr *l;
211242551e99SRandall Stewart 	int cnt_invalid = 0;
211342551e99SRandall Stewart 	int type, status;
21141b649582SRandall Stewart 	int num_queued = 0;
211542551e99SRandall Stewart 
211642551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
211742551e99SRandall Stewart 	LIST_FOREACH(l, &asc->list_of_work, sctp_nxt_addr) {
211842551e99SRandall Stewart 		ifa = l->ifa;
211942551e99SRandall Stewart 		type = l->action;
212022a67197SRandall Stewart 
212122a67197SRandall Stewart 		/* address's vrf_id must be the vrf_id of the assoc */
212222a67197SRandall Stewart 		if (ifa->vrf_id != stcb->asoc.vrf_id) {
212322a67197SRandall Stewart 			continue;
212422a67197SRandall Stewart 		}
212542551e99SRandall Stewart 		/* Same checks again for assoc */
21265e2c2d87SRandall Stewart 		switch (ifa->address.sa.sa_family) {
21275e2c2d87SRandall Stewart #ifdef INET6
21285e2c2d87SRandall Stewart 		case AF_INET6:
21295e2c2d87SRandall Stewart 			{
213042551e99SRandall Stewart 				/* invalid if we're not a v6 endpoint */
213142551e99SRandall Stewart 				struct sockaddr_in6 *sin6;
213242551e99SRandall Stewart 
213342551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
213442551e99SRandall Stewart 					cnt_invalid++;
213542551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
213642551e99SRandall Stewart 						return;
213742551e99SRandall Stewart 					else
213842551e99SRandall Stewart 						continue;
213942551e99SRandall Stewart 				}
214042551e99SRandall Stewart 				sin6 = (struct sockaddr_in6 *)&ifa->address.sin6;
214142551e99SRandall Stewart 				if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
214242551e99SRandall Stewart 					/* we skip unspecifed addresses */
214342551e99SRandall Stewart 					continue;
214442551e99SRandall Stewart 				}
214542551e99SRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
214642551e99SRandall Stewart 					if (stcb->asoc.local_scope == 0) {
214742551e99SRandall Stewart 						continue;
214842551e99SRandall Stewart 					}
214942551e99SRandall Stewart 					/* is it the right link local scope? */
215042551e99SRandall Stewart 					if (sctp_is_scopeid_in_nets(stcb, &ifa->address.sa) == 0) {
215142551e99SRandall Stewart 						continue;
215242551e99SRandall Stewart 					}
215342551e99SRandall Stewart 				}
21545e2c2d87SRandall Stewart 				break;
21555e2c2d87SRandall Stewart 			}
21565e2c2d87SRandall Stewart #endif
21575e2c2d87SRandall Stewart 		case AF_INET:
21585e2c2d87SRandall Stewart 			{
215942551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
216042551e99SRandall Stewart 				struct in6pcb *inp6;
216142551e99SRandall Stewart 				struct sockaddr_in *sin;
216242551e99SRandall Stewart 
216342551e99SRandall Stewart 				inp6 = (struct in6pcb *)&inp->ip_inp.inp;
216442551e99SRandall Stewart 				/* invalid if we are a v6 only endpoint */
216542551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
216642551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6))
216742551e99SRandall Stewart 					continue;
216842551e99SRandall Stewart 
216942551e99SRandall Stewart 				sin = (struct sockaddr_in *)&ifa->address.sa;
217042551e99SRandall Stewart 				if (sin->sin_addr.s_addr == 0) {
217142551e99SRandall Stewart 					/* we skip unspecifed addresses */
217242551e99SRandall Stewart 					continue;
217342551e99SRandall Stewart 				}
217442551e99SRandall Stewart 				if (stcb->asoc.ipv4_local_scope == 0 &&
217542551e99SRandall Stewart 				    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
2176c2ede4b3SMartin Blapp 					continue;
217742551e99SRandall Stewart 				}
217842551e99SRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
217942551e99SRandall Stewart 				    SCTP_IPV6_V6ONLY(inp6)) {
218042551e99SRandall Stewart 					cnt_invalid++;
218142551e99SRandall Stewart 					if (asc->cnt == cnt_invalid)
218242551e99SRandall Stewart 						return;
218342551e99SRandall Stewart 					else
218442551e99SRandall Stewart 						continue;
218542551e99SRandall Stewart 				}
21865e2c2d87SRandall Stewart 				break;
21875e2c2d87SRandall Stewart 			}
21885e2c2d87SRandall Stewart 		default:
218942551e99SRandall Stewart 			/* invalid address family */
219042551e99SRandall Stewart 			cnt_invalid++;
219142551e99SRandall Stewart 			if (asc->cnt == cnt_invalid)
2192f8829a4aSRandall Stewart 				return;
219342551e99SRandall Stewart 			else
219442551e99SRandall Stewart 				continue;
21955e2c2d87SRandall Stewart 			break;
2196f8829a4aSRandall Stewart 		}
2197f8829a4aSRandall Stewart 
219842551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
21991b649582SRandall Stewart 			/* prevent this address from being used as a source */
22001b649582SRandall Stewart 			sctp_add_local_addr_restricted(stcb, ifa);
220142551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
2202f8829a4aSRandall Stewart 			struct sctp_nets *net;
2203f8829a4aSRandall Stewart 
2204f8829a4aSRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
220517205eccSRandall Stewart 				sctp_rtentry_t *rt;
2206f8829a4aSRandall Stewart 
2207f8829a4aSRandall Stewart 				/* delete this address if cached */
2208851b7298SRandall Stewart 				if (net->ro._s_addr == ifa) {
220942551e99SRandall Stewart 					sctp_free_ifa(net->ro._s_addr);
221042551e99SRandall Stewart 					net->ro._s_addr = NULL;
221142551e99SRandall Stewart 					net->src_addr_selected = 0;
2212f8829a4aSRandall Stewart 					rt = net->ro.ro_rt;
221342551e99SRandall Stewart 					if (rt) {
221442551e99SRandall Stewart 						RTFREE(rt);
2215f8829a4aSRandall Stewart 						net->ro.ro_rt = NULL;
2216f8829a4aSRandall Stewart 					}
221742551e99SRandall Stewart 					/*
221842551e99SRandall Stewart 					 * Now we deleted our src address,
221942551e99SRandall Stewart 					 * should we not also now reset the
222042551e99SRandall Stewart 					 * cwnd/rto to start as if its a new
222142551e99SRandall Stewart 					 * address?
222242551e99SRandall Stewart 					 */
2223b54d3a6cSRandall Stewart 					stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
2224108df27cSRandall Stewart 					net->RTO = 0;
222542551e99SRandall Stewart 
2226f8829a4aSRandall Stewart 				}
2227f8829a4aSRandall Stewart 			}
222842551e99SRandall Stewart 		} else if (type == SCTP_SET_PRIM_ADDR) {
222942551e99SRandall Stewart 			if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
22301b649582SRandall Stewart 				/* must validate the ifa is in the ep */
223142551e99SRandall Stewart 				if (sctp_is_addr_in_ep(stcb->sctp_ep, ifa) == 0) {
223242551e99SRandall Stewart 					continue;
2233f8829a4aSRandall Stewart 				}
223442551e99SRandall Stewart 			} else {
223542551e99SRandall Stewart 				/* Need to check scopes for this guy */
223642551e99SRandall Stewart 				if (sctp_is_address_in_scope(ifa,
223742551e99SRandall Stewart 				    stcb->asoc.ipv4_addr_legal,
223842551e99SRandall Stewart 				    stcb->asoc.ipv6_addr_legal,
223942551e99SRandall Stewart 				    stcb->asoc.loopback_scope,
224042551e99SRandall Stewart 				    stcb->asoc.ipv4_local_scope,
224142551e99SRandall Stewart 				    stcb->asoc.local_scope,
224242551e99SRandall Stewart 				    stcb->asoc.site_scope, 0) == 0) {
224342551e99SRandall Stewart 					continue;
2244f8829a4aSRandall Stewart 				}
224542551e99SRandall Stewart 			}
224642551e99SRandall Stewart 		}
224742551e99SRandall Stewart 		/* queue an asconf for this address add/delete */
22481b649582SRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF) &&
22491b649582SRandall Stewart 		    stcb->asoc.peer_supports_asconf) {
225042551e99SRandall Stewart 			/* queue an asconf for this addr */
225142551e99SRandall Stewart 			status = sctp_asconf_queue_add(stcb, ifa, type);
225242551e99SRandall Stewart 			/*
22531b649582SRandall Stewart 			 * if queued ok, and in the open state, update the
22541b649582SRandall Stewart 			 * count of queued params.  If in the non-open
22551b649582SRandall Stewart 			 * state, these get sent when the assoc goes open.
225642551e99SRandall Stewart 			 */
22571b649582SRandall Stewart 			if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
22581b649582SRandall Stewart 				if (status >= 0) {
22591b649582SRandall Stewart 					num_queued++;
226042551e99SRandall Stewart 				}
226142551e99SRandall Stewart 			}
226242551e99SRandall Stewart 		}
226342551e99SRandall Stewart 	}
22641b649582SRandall Stewart 	/*
22651b649582SRandall Stewart 	 * If we have queued params in the open state, send out an ASCONF.
22661b649582SRandall Stewart 	 */
22671b649582SRandall Stewart 	if (num_queued > 0) {
22683232788eSRandall Stewart 		sctp_send_asconf(stcb, stcb->asoc.primary_destination,
22693232788eSRandall Stewart 		    SCTP_ADDR_NOT_LOCKED);
22701b649582SRandall Stewart 	}
227142551e99SRandall Stewart }
227242551e99SRandall Stewart 
227342551e99SRandall Stewart void
22741b649582SRandall Stewart sctp_asconf_iterator_end(void *ptr, uint32_t val)
227542551e99SRandall Stewart {
227642551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
227742551e99SRandall Stewart 	struct sctp_ifa *ifa;
22784a9ef3f8SMichael Tuexen 	struct sctp_laddr *l, *nl;
227942551e99SRandall Stewart 
228042551e99SRandall Stewart 	asc = (struct sctp_asconf_iterator *)ptr;
22814a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(l, &asc->list_of_work, sctp_nxt_addr, nl) {
228242551e99SRandall Stewart 		ifa = l->ifa;
228342551e99SRandall Stewart 		if (l->action == SCTP_ADD_IP_ADDRESS) {
228442551e99SRandall Stewart 			/* Clear the defer use flag */
228542551e99SRandall Stewart 			ifa->localifa_flags &= ~SCTP_ADDR_DEFER_USE;
228642551e99SRandall Stewart 		}
228742551e99SRandall Stewart 		sctp_free_ifa(ifa);
2288b3f1ea41SRandall Stewart 		SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), l);
228942551e99SRandall Stewart 		SCTP_DECR_LADDR_COUNT();
229042551e99SRandall Stewart 	}
2291207304d4SRandall Stewart 	SCTP_FREE(asc, SCTP_M_ASC_IT);
2292f8829a4aSRandall Stewart }
2293f8829a4aSRandall Stewart 
2294f8829a4aSRandall Stewart /*
22951b649582SRandall Stewart  * sa is the sockaddr to ask the peer to set primary to.
22961b649582SRandall Stewart  * returns: 0 = completed, -1 = error
2297f8829a4aSRandall Stewart  */
2298c4739e2fSRandall Stewart int32_t
2299f8829a4aSRandall Stewart sctp_set_primary_ip_address_sa(struct sctp_tcb *stcb, struct sockaddr *sa)
2300f8829a4aSRandall Stewart {
23013232788eSRandall Stewart 	uint32_t vrf_id;
23023232788eSRandall Stewart 	struct sctp_ifa *ifa;
2303f8829a4aSRandall Stewart 
23043232788eSRandall Stewart 	/* find the ifa for the desired set primary */
23053232788eSRandall Stewart 	vrf_id = stcb->asoc.vrf_id;
23063232788eSRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
23073232788eSRandall Stewart 	if (ifa == NULL) {
23083232788eSRandall Stewart 		/* Invalid address */
23093232788eSRandall Stewart 		return (-1);
23103232788eSRandall Stewart 	}
2311f8829a4aSRandall Stewart 	/* queue an ASCONF:SET_PRIM_ADDR to be sent */
23123232788eSRandall Stewart 	if (!sctp_asconf_queue_add(stcb, ifa, SCTP_SET_PRIM_ADDR)) {
2313f8829a4aSRandall Stewart 		/* set primary queuing succeeded */
2314ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2315ad81507eSRandall Stewart 		    "set_primary_ip_address_sa: queued on tcb=%p, ",
2316f8829a4aSRandall Stewart 		    stcb);
2317ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
23181b649582SRandall Stewart 		if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
23191b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
23201b649582SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
23211b649582SRandall Stewart 			    stcb->sctp_ep, stcb,
23221b649582SRandall Stewart 			    stcb->asoc.primary_destination);
23231b649582SRandall Stewart #else
23243232788eSRandall Stewart 			sctp_send_asconf(stcb, stcb->asoc.primary_destination,
23253232788eSRandall Stewart 			    SCTP_ADDR_NOT_LOCKED);
23261b649582SRandall Stewart #endif
23271b649582SRandall Stewart 		}
2328f8829a4aSRandall Stewart 	} else {
2329ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address_sa: failed to add to queue on tcb=%p, ",
2330f8829a4aSRandall Stewart 		    stcb);
2331ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, sa);
2332f8829a4aSRandall Stewart 		return (-1);
2333f8829a4aSRandall Stewart 	}
2334f8829a4aSRandall Stewart 	return (0);
2335f8829a4aSRandall Stewart }
2336f8829a4aSRandall Stewart 
2337f8829a4aSRandall Stewart void
233842551e99SRandall Stewart sctp_set_primary_ip_address(struct sctp_ifa *ifa)
2339f8829a4aSRandall Stewart {
2340f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
2341f8829a4aSRandall Stewart 
2342f8829a4aSRandall Stewart 	/* go through all our PCB's */
2343b3f1ea41SRandall Stewart 	LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) {
2344f8829a4aSRandall Stewart 		struct sctp_tcb *stcb;
2345f8829a4aSRandall Stewart 
2346f8829a4aSRandall Stewart 		/* process for all associations for this endpoint */
2347f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
2348f8829a4aSRandall Stewart 			/* queue an ASCONF:SET_PRIM_ADDR to be sent */
2349f8829a4aSRandall Stewart 			if (!sctp_asconf_queue_add(stcb, ifa,
2350f8829a4aSRandall Stewart 			    SCTP_SET_PRIM_ADDR)) {
2351f8829a4aSRandall Stewart 				/* set primary queuing succeeded */
2352ceaad40aSRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "set_primary_ip_address: queued on stcb=%p, ",
2353f8829a4aSRandall Stewart 				    stcb);
2354ad81507eSRandall Stewart 				SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &ifa->address.sa);
23551b649582SRandall Stewart 				if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) {
23561b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
23571b649582SRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
23581b649582SRandall Stewart 					    stcb->sctp_ep, stcb,
23591b649582SRandall Stewart 					    stcb->asoc.primary_destination);
23601b649582SRandall Stewart #else
23613232788eSRandall Stewart 					sctp_send_asconf(stcb, stcb->asoc.primary_destination,
23623232788eSRandall Stewart 					    SCTP_ADDR_NOT_LOCKED);
23631b649582SRandall Stewart #endif
23641b649582SRandall Stewart 				}
2365f8829a4aSRandall Stewart 			}
2366f8829a4aSRandall Stewart 		}		/* for each stcb */
2367f8829a4aSRandall Stewart 	}			/* for each inp */
2368f8829a4aSRandall Stewart }
2369f8829a4aSRandall Stewart 
2370c54a18d2SRandall Stewart int
2371c54a18d2SRandall Stewart sctp_is_addr_pending(struct sctp_tcb *stcb, struct sctp_ifa *sctp_ifa)
2372c54a18d2SRandall Stewart {
2373c54a18d2SRandall Stewart 	struct sctp_tmit_chunk *chk, *nchk;
2374c54a18d2SRandall Stewart 	unsigned int offset, asconf_limit;
2375c54a18d2SRandall Stewart 	struct sctp_asconf_chunk *acp;
2376c54a18d2SRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2377c54a18d2SRandall Stewart 	uint8_t aparam_buf[SCTP_PARAM_BUFFER_SIZE];
2378c54a18d2SRandall Stewart 	struct sctp_ipv6addr_param *p_addr;
2379c54a18d2SRandall Stewart 	int add_cnt, del_cnt;
2380c54a18d2SRandall Stewart 	uint16_t last_param_type;
2381c54a18d2SRandall Stewart 
2382c54a18d2SRandall Stewart 	add_cnt = del_cnt = 0;
2383c54a18d2SRandall Stewart 	last_param_type = 0;
23844a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &stcb->asoc.asconf_send_queue, sctp_next, nchk) {
2385c54a18d2SRandall Stewart 		if (chk->data == NULL) {
2386c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: No mbuf data?\n");
2387c54a18d2SRandall Stewart 			continue;
2388c54a18d2SRandall Stewart 		}
2389c54a18d2SRandall Stewart 		offset = 0;
2390c54a18d2SRandall Stewart 		acp = mtod(chk->data, struct sctp_asconf_chunk *);
2391c54a18d2SRandall Stewart 		offset += sizeof(struct sctp_asconf_chunk);
2392c54a18d2SRandall Stewart 		asconf_limit = ntohs(acp->ch.chunk_length);
2393c54a18d2SRandall Stewart 		p_addr = (struct sctp_ipv6addr_param *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_paramhdr), aparam_buf);
2394c54a18d2SRandall Stewart 		if (p_addr == NULL) {
2395c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get lookup addr!\n");
2396c54a18d2SRandall Stewart 			continue;
2397c54a18d2SRandall Stewart 		}
2398c54a18d2SRandall Stewart 		offset += ntohs(p_addr->ph.param_length);
2399c54a18d2SRandall Stewart 
2400c54a18d2SRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2401c54a18d2SRandall Stewart 		if (aph == NULL) {
2402c54a18d2SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: Empty ASCONF will be sent?\n");
2403c54a18d2SRandall Stewart 			continue;
2404c54a18d2SRandall Stewart 		}
2405c54a18d2SRandall Stewart 		while (aph != NULL) {
2406c54a18d2SRandall Stewart 			unsigned int param_length, param_type;
2407c54a18d2SRandall Stewart 
2408c54a18d2SRandall Stewart 			param_type = ntohs(aph->ph.param_type);
2409c54a18d2SRandall Stewart 			param_length = ntohs(aph->ph.param_length);
2410c54a18d2SRandall Stewart 			if (offset + param_length > asconf_limit) {
2411c54a18d2SRandall Stewart 				/* parameter goes beyond end of chunk! */
2412c54a18d2SRandall Stewart 				break;
2413c54a18d2SRandall Stewart 			}
2414c54a18d2SRandall Stewart 			if (param_length > sizeof(aparam_buf)) {
2415c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length);
2416c54a18d2SRandall Stewart 				break;
2417c54a18d2SRandall Stewart 			}
2418c54a18d2SRandall Stewart 			if (param_length <= sizeof(struct sctp_paramhdr)) {
2419c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length);
2420c54a18d2SRandall Stewart 				break;
2421c54a18d2SRandall Stewart 			}
2422c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf);
2423c54a18d2SRandall Stewart 			if (aph == NULL) {
2424c54a18d2SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: couldn't get entire param\n");
2425c54a18d2SRandall Stewart 				break;
2426c54a18d2SRandall Stewart 			}
2427c54a18d2SRandall Stewart 			p_addr = (struct sctp_ipv6addr_param *)(aph + 1);
2428c54a18d2SRandall Stewart 			if (sctp_addr_match(p_addr, &sctp_ifa->address.sa) != 0) {
2429c54a18d2SRandall Stewart 				switch (param_type) {
2430c54a18d2SRandall Stewart 				case SCTP_ADD_IP_ADDRESS:
2431c54a18d2SRandall Stewart 					add_cnt++;
2432c54a18d2SRandall Stewart 					break;
2433c54a18d2SRandall Stewart 				case SCTP_DEL_IP_ADDRESS:
2434c54a18d2SRandall Stewart 					del_cnt++;
2435c54a18d2SRandall Stewart 					break;
2436c54a18d2SRandall Stewart 				default:
2437c54a18d2SRandall Stewart 					break;
2438c54a18d2SRandall Stewart 				}
2439c54a18d2SRandall Stewart 				last_param_type = param_type;
2440c54a18d2SRandall Stewart 			}
2441c54a18d2SRandall Stewart 			offset += SCTP_SIZE32(param_length);
2442c54a18d2SRandall Stewart 			if (offset >= asconf_limit) {
2443c54a18d2SRandall Stewart 				/* no more data in the mbuf chain */
2444c54a18d2SRandall Stewart 				break;
2445c54a18d2SRandall Stewart 			}
2446c54a18d2SRandall Stewart 			/* get pointer to next asconf param */
2447c54a18d2SRandall Stewart 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, sizeof(struct sctp_asconf_paramhdr), aparam_buf);
2448c54a18d2SRandall Stewart 		}
2449c54a18d2SRandall Stewart 	}
2450c54a18d2SRandall Stewart 
2451c54a18d2SRandall Stewart 	/*
2452c54a18d2SRandall Stewart 	 * we want to find the sequences which consist of ADD -> DEL -> ADD
2453c54a18d2SRandall Stewart 	 * or DEL -> ADD
2454c54a18d2SRandall Stewart 	 */
2455c54a18d2SRandall Stewart 	if (add_cnt > del_cnt ||
2456c54a18d2SRandall Stewart 	    (add_cnt == del_cnt && last_param_type == SCTP_ADD_IP_ADDRESS)) {
2457c54a18d2SRandall Stewart 		return 1;
2458c54a18d2SRandall Stewart 	}
2459c54a18d2SRandall Stewart 	return 0;
2460c54a18d2SRandall Stewart }
2461c54a18d2SRandall Stewart 
2462f8829a4aSRandall Stewart static struct sockaddr *
24633232788eSRandall Stewart sctp_find_valid_localaddr(struct sctp_tcb *stcb, int addr_locked)
2464f8829a4aSRandall Stewart {
246542551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
246642551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
246742551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2468f8829a4aSRandall Stewart 
24693232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2470c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
247142551e99SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
2472ad81507eSRandall Stewart 	if (vrf == NULL) {
24733232788eSRandall Stewart 		if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2474c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
2475ad81507eSRandall Stewart 		return (NULL);
2476ad81507eSRandall Stewart 	}
247742551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
247842551e99SRandall Stewart 		if (stcb->asoc.loopback_scope == 0 &&
247942551e99SRandall Stewart 		    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
2480f8829a4aSRandall Stewart 			/* Skip if loopback_scope not set */
2481f8829a4aSRandall Stewart 			continue;
2482f8829a4aSRandall Stewart 		}
248342551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
248442551e99SRandall Stewart 			if (sctp_ifa->address.sa.sa_family == AF_INET &&
2485f8829a4aSRandall Stewart 			    stcb->asoc.ipv4_addr_legal) {
2486f8829a4aSRandall Stewart 				struct sockaddr_in *sin;
2487f8829a4aSRandall Stewart 
248842551e99SRandall Stewart 				sin = (struct sockaddr_in *)&sctp_ifa->address.sa;
2489f8829a4aSRandall Stewart 				if (sin->sin_addr.s_addr == 0) {
2490f8829a4aSRandall Stewart 					/* skip unspecifed addresses */
2491f8829a4aSRandall Stewart 					continue;
2492f8829a4aSRandall Stewart 				}
2493f8829a4aSRandall Stewart 				if (stcb->asoc.ipv4_local_scope == 0 &&
2494f8829a4aSRandall Stewart 				    IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))
2495f8829a4aSRandall Stewart 					continue;
2496f8829a4aSRandall Stewart 
2497c54a18d2SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2498c54a18d2SRandall Stewart 				    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2499f8829a4aSRandall Stewart 					continue;
2500f8829a4aSRandall Stewart 				/* found a valid local v4 address to use */
25013232788eSRandall Stewart 				if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2502c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
250342551e99SRandall Stewart 				return (&sctp_ifa->address.sa);
250442551e99SRandall Stewart 			} else if (sctp_ifa->address.sa.sa_family == AF_INET6 &&
2505f8829a4aSRandall Stewart 			    stcb->asoc.ipv6_addr_legal) {
2506f8829a4aSRandall Stewart 				struct sockaddr_in6 *sin6;
2507f8829a4aSRandall Stewart 
250842551e99SRandall Stewart 				if (sctp_ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
2509f8829a4aSRandall Stewart 					continue;
251042551e99SRandall Stewart 				}
251142551e99SRandall Stewart 				sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa;
2512f8829a4aSRandall Stewart 				if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2513f8829a4aSRandall Stewart 					/* we skip unspecifed addresses */
2514f8829a4aSRandall Stewart 					continue;
2515f8829a4aSRandall Stewart 				}
2516f8829a4aSRandall Stewart 				if (stcb->asoc.local_scope == 0 &&
2517f8829a4aSRandall Stewart 				    IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr))
2518f8829a4aSRandall Stewart 					continue;
2519f8829a4aSRandall Stewart 				if (stcb->asoc.site_scope == 0 &&
2520f8829a4aSRandall Stewart 				    IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))
2521f8829a4aSRandall Stewart 					continue;
2522f8829a4aSRandall Stewart 
2523c54a18d2SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa) &&
2524c54a18d2SRandall Stewart 				    (!sctp_is_addr_pending(stcb, sctp_ifa)))
2525c54a18d2SRandall Stewart 					continue;
2526f8829a4aSRandall Stewart 				/* found a valid local v6 address to use */
25273232788eSRandall Stewart 				if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2528c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
252942551e99SRandall Stewart 				return (&sctp_ifa->address.sa);
2530f8829a4aSRandall Stewart 			}
2531f8829a4aSRandall Stewart 		}
2532f8829a4aSRandall Stewart 	}
2533f8829a4aSRandall Stewart 	/* no valid addresses found */
25343232788eSRandall Stewart 	if (addr_locked == SCTP_ADDR_NOT_LOCKED)
2535c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
2536f8829a4aSRandall Stewart 	return (NULL);
2537f8829a4aSRandall Stewart }
2538f8829a4aSRandall Stewart 
2539f8829a4aSRandall Stewart static struct sockaddr *
2540f8829a4aSRandall Stewart sctp_find_valid_localaddr_ep(struct sctp_tcb *stcb)
2541f8829a4aSRandall Stewart {
2542f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
2543f8829a4aSRandall Stewart 
2544f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
2545f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
2546f8829a4aSRandall Stewart 			continue;
2547f8829a4aSRandall Stewart 		}
2548f8829a4aSRandall Stewart 		/* is the address restricted ? */
2549c54a18d2SRandall Stewart 		if (sctp_is_addr_restricted(stcb, laddr->ifa) &&
2550c54a18d2SRandall Stewart 		    (!sctp_is_addr_pending(stcb, laddr->ifa)))
2551f8829a4aSRandall Stewart 			continue;
2552f8829a4aSRandall Stewart 
2553f8829a4aSRandall Stewart 		/* found a valid local address to use */
255442551e99SRandall Stewart 		return (&laddr->ifa->address.sa);
2555f8829a4aSRandall Stewart 	}
2556f8829a4aSRandall Stewart 	/* no valid addresses found */
2557f8829a4aSRandall Stewart 	return (NULL);
2558f8829a4aSRandall Stewart }
2559f8829a4aSRandall Stewart 
2560f8829a4aSRandall Stewart /*
256118e198d3SRandall Stewart  * builds an ASCONF chunk from queued ASCONF params.
256218e198d3SRandall Stewart  * returns NULL on error (no mbuf, no ASCONF params queued, etc).
2563f8829a4aSRandall Stewart  */
2564f8829a4aSRandall Stewart struct mbuf *
25653232788eSRandall Stewart sctp_compose_asconf(struct sctp_tcb *stcb, int *retlen, int addr_locked)
2566f8829a4aSRandall Stewart {
2567f8829a4aSRandall Stewart 	struct mbuf *m_asconf, *m_asconf_chk;
2568f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aa;
2569f8829a4aSRandall Stewart 	struct sctp_asconf_chunk *acp;
2570f8829a4aSRandall Stewart 	struct sctp_asconf_paramhdr *aph;
2571f8829a4aSRandall Stewart 	struct sctp_asconf_addr_param *aap;
2572f8829a4aSRandall Stewart 	uint32_t p_length;
2573f8829a4aSRandall Stewart 	uint32_t correlation_id = 1;	/* 0 is reserved... */
2574f8829a4aSRandall Stewart 	caddr_t ptr, lookup_ptr;
2575f8829a4aSRandall Stewart 	uint8_t lookup_used = 0;
2576f8829a4aSRandall Stewart 
2577f8829a4aSRandall Stewart 	/* are there any asconf params to send? */
2578c54a18d2SRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2579c54a18d2SRandall Stewart 		if (aa->sent == 0)
2580c54a18d2SRandall Stewart 			break;
2581f8829a4aSRandall Stewart 	}
2582c54a18d2SRandall Stewart 	if (aa == NULL)
25831b649582SRandall Stewart 		return (NULL);
2584c54a18d2SRandall Stewart 
2585f8829a4aSRandall Stewart 	/*
2586f8829a4aSRandall Stewart 	 * get a chunk header mbuf and a cluster for the asconf params since
2587f8829a4aSRandall Stewart 	 * it's simpler to fill in the asconf chunk header lookup address on
2588f8829a4aSRandall Stewart 	 * the fly
2589f8829a4aSRandall Stewart 	 */
2590139bc87fSRandall Stewart 	m_asconf_chk = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_chunk), 0, M_DONTWAIT, 1, MT_DATA);
2591f8829a4aSRandall Stewart 	if (m_asconf_chk == NULL) {
2592f8829a4aSRandall Stewart 		/* no mbuf's */
2593ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2594ad81507eSRandall Stewart 		    "compose_asconf: couldn't get chunk mbuf!\n");
2595f8829a4aSRandall Stewart 		return (NULL);
2596f8829a4aSRandall Stewart 	}
2597139bc87fSRandall Stewart 	m_asconf = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA);
2598f8829a4aSRandall Stewart 	if (m_asconf == NULL) {
2599f8829a4aSRandall Stewart 		/* no mbuf's */
2600ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2601ad81507eSRandall Stewart 		    "compose_asconf: couldn't get mbuf!\n");
2602f8829a4aSRandall Stewart 		sctp_m_freem(m_asconf_chk);
2603f8829a4aSRandall Stewart 		return (NULL);
2604f8829a4aSRandall Stewart 	}
2605139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf_chk) = sizeof(struct sctp_asconf_chunk);
2606139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_asconf) = 0;
2607f8829a4aSRandall Stewart 	acp = mtod(m_asconf_chk, struct sctp_asconf_chunk *);
2608f8829a4aSRandall Stewart 	bzero(acp, sizeof(struct sctp_asconf_chunk));
2609f8829a4aSRandall Stewart 	/* save pointers to lookup address and asconf params */
2610f8829a4aSRandall Stewart 	lookup_ptr = (caddr_t)(acp + 1);	/* after the header */
2611f8829a4aSRandall Stewart 	ptr = mtod(m_asconf, caddr_t);	/* beginning of cluster */
2612f8829a4aSRandall Stewart 
2613f8829a4aSRandall Stewart 	/* fill in chunk header info */
2614f8829a4aSRandall Stewart 	acp->ch.chunk_type = SCTP_ASCONF;
2615f8829a4aSRandall Stewart 	acp->ch.chunk_flags = 0;
2616f8829a4aSRandall Stewart 	acp->serial_number = htonl(stcb->asoc.asconf_seq_out);
2617c54a18d2SRandall Stewart 	stcb->asoc.asconf_seq_out++;
2618f8829a4aSRandall Stewart 
2619f8829a4aSRandall Stewart 	/* add parameters... up to smallest MTU allowed */
2620f8829a4aSRandall Stewart 	TAILQ_FOREACH(aa, &stcb->asoc.asconf_queue, next) {
2621c54a18d2SRandall Stewart 		if (aa->sent)
2622c54a18d2SRandall Stewart 			continue;
2623f8829a4aSRandall Stewart 		/* get the parameter length */
2624f8829a4aSRandall Stewart 		p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length);
2625f8829a4aSRandall Stewart 		/* will it fit in current chunk? */
2626139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m_asconf) + p_length > stcb->asoc.smallest_mtu) {
2627f8829a4aSRandall Stewart 			/* won't fit, so we're done with this chunk */
2628f8829a4aSRandall Stewart 			break;
2629f8829a4aSRandall Stewart 		}
2630f8829a4aSRandall Stewart 		/* assign (and store) a correlation id */
2631f8829a4aSRandall Stewart 		aa->ap.aph.correlation_id = correlation_id++;
2632f8829a4aSRandall Stewart 
2633f8829a4aSRandall Stewart 		/*
2634f8829a4aSRandall Stewart 		 * fill in address if we're doing a delete this is a simple
2635f8829a4aSRandall Stewart 		 * way for us to fill in the correlation address, which
2636f8829a4aSRandall Stewart 		 * should only be used by the peer if we're deleting our
2637f8829a4aSRandall Stewart 		 * source address and adding a new address (e.g. renumbering
2638f8829a4aSRandall Stewart 		 * case)
2639f8829a4aSRandall Stewart 		 */
2640f8829a4aSRandall Stewart 		if (lookup_used == 0 &&
2641830d754dSRandall Stewart 		    (aa->special_del == 0) &&
2642f8829a4aSRandall Stewart 		    aa->ap.aph.ph.param_type == SCTP_DEL_IP_ADDRESS) {
2643f8829a4aSRandall Stewart 			struct sctp_ipv6addr_param *lookup;
2644f8829a4aSRandall Stewart 			uint16_t p_size, addr_size;
2645f8829a4aSRandall Stewart 
2646f8829a4aSRandall Stewart 			lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2647f8829a4aSRandall Stewart 			lookup->ph.param_type =
2648f8829a4aSRandall Stewart 			    htons(aa->ap.addrp.ph.param_type);
2649f8829a4aSRandall Stewart 			if (aa->ap.addrp.ph.param_type == SCTP_IPV6_ADDRESS) {
2650f8829a4aSRandall Stewart 				/* copy IPv6 address */
2651f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2652f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2653f8829a4aSRandall Stewart 			} else {
2654f8829a4aSRandall Stewart 				/* copy IPv4 address */
2655f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2656f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2657f8829a4aSRandall Stewart 			}
2658f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2659f8829a4aSRandall Stewart 			memcpy(lookup->addr, &aa->ap.addrp.addr, addr_size);
2660139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2661f8829a4aSRandall Stewart 			lookup_used = 1;
2662f8829a4aSRandall Stewart 		}
2663f8829a4aSRandall Stewart 		/* copy into current space */
2664f8829a4aSRandall Stewart 		memcpy(ptr, &aa->ap, p_length);
2665f8829a4aSRandall Stewart 
2666f8829a4aSRandall Stewart 		/* network elements and update lengths */
2667f8829a4aSRandall Stewart 		aph = (struct sctp_asconf_paramhdr *)ptr;
2668f8829a4aSRandall Stewart 		aap = (struct sctp_asconf_addr_param *)ptr;
2669f8829a4aSRandall Stewart 		/* correlation_id is transparent to peer, no htonl needed */
2670f8829a4aSRandall Stewart 		aph->ph.param_type = htons(aph->ph.param_type);
2671f8829a4aSRandall Stewart 		aph->ph.param_length = htons(aph->ph.param_length);
2672f8829a4aSRandall Stewart 		aap->addrp.ph.param_type = htons(aap->addrp.ph.param_type);
2673f8829a4aSRandall Stewart 		aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length);
2674f8829a4aSRandall Stewart 
2675139bc87fSRandall Stewart 		SCTP_BUF_LEN(m_asconf) += SCTP_SIZE32(p_length);
2676f8829a4aSRandall Stewart 		ptr += SCTP_SIZE32(p_length);
2677f8829a4aSRandall Stewart 
2678f8829a4aSRandall Stewart 		/*
2679f8829a4aSRandall Stewart 		 * these params are removed off the pending list upon
2680f8829a4aSRandall Stewart 		 * getting an ASCONF-ACK back from the peer, just set flag
2681f8829a4aSRandall Stewart 		 */
2682f8829a4aSRandall Stewart 		aa->sent = 1;
2683f8829a4aSRandall Stewart 	}
2684f8829a4aSRandall Stewart 	/* check to see if the lookup addr has been populated yet */
2685f8829a4aSRandall Stewart 	if (lookup_used == 0) {
2686f8829a4aSRandall Stewart 		/* NOTE: if the address param is optional, can skip this... */
2687f8829a4aSRandall Stewart 		/* add any valid (existing) address... */
2688f8829a4aSRandall Stewart 		struct sctp_ipv6addr_param *lookup;
2689f8829a4aSRandall Stewart 		uint16_t p_size, addr_size;
2690f8829a4aSRandall Stewart 		struct sockaddr *found_addr;
2691f8829a4aSRandall Stewart 		caddr_t addr_ptr;
2692f8829a4aSRandall Stewart 
2693f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL)
26943232788eSRandall Stewart 			found_addr = sctp_find_valid_localaddr(stcb,
26953232788eSRandall Stewart 			    addr_locked);
2696f8829a4aSRandall Stewart 		else
2697f8829a4aSRandall Stewart 			found_addr = sctp_find_valid_localaddr_ep(stcb);
2698f8829a4aSRandall Stewart 
2699f8829a4aSRandall Stewart 		lookup = (struct sctp_ipv6addr_param *)lookup_ptr;
2700f8829a4aSRandall Stewart 		if (found_addr != NULL) {
2701f8829a4aSRandall Stewart 			if (found_addr->sa_family == AF_INET6) {
2702f8829a4aSRandall Stewart 				/* copy IPv6 address */
2703f8829a4aSRandall Stewart 				lookup->ph.param_type =
2704f8829a4aSRandall Stewart 				    htons(SCTP_IPV6_ADDRESS);
2705f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv6addr_param);
2706f8829a4aSRandall Stewart 				addr_size = sizeof(struct in6_addr);
2707f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in6 *)
2708f8829a4aSRandall Stewart 				    found_addr)->sin6_addr;
2709f8829a4aSRandall Stewart 			} else {
2710f8829a4aSRandall Stewart 				/* copy IPv4 address */
2711f8829a4aSRandall Stewart 				lookup->ph.param_type =
2712f8829a4aSRandall Stewart 				    htons(SCTP_IPV4_ADDRESS);
2713f8829a4aSRandall Stewart 				p_size = sizeof(struct sctp_ipv4addr_param);
2714f8829a4aSRandall Stewart 				addr_size = sizeof(struct in_addr);
2715f8829a4aSRandall Stewart 				addr_ptr = (caddr_t)&((struct sockaddr_in *)
2716f8829a4aSRandall Stewart 				    found_addr)->sin_addr;
2717f8829a4aSRandall Stewart 			}
2718f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2719f8829a4aSRandall Stewart 			memcpy(lookup->addr, addr_ptr, addr_size);
2720139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(p_size);
2721f8829a4aSRandall Stewart 			lookup_used = 1;
2722f8829a4aSRandall Stewart 		} else {
2723f8829a4aSRandall Stewart 			/* uh oh... don't have any address?? */
2724ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
2725ad81507eSRandall Stewart 			    "compose_asconf: no lookup addr!\n");
2726f8829a4aSRandall Stewart 			/* for now, we send a IPv4 address of 0.0.0.0 */
2727f8829a4aSRandall Stewart 			lookup->ph.param_type = htons(SCTP_IPV4_ADDRESS);
2728f8829a4aSRandall Stewart 			lookup->ph.param_length = htons(SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param)));
2729f8829a4aSRandall Stewart 			bzero(lookup->addr, sizeof(struct in_addr));
2730139bc87fSRandall Stewart 			SCTP_BUF_LEN(m_asconf_chk) += SCTP_SIZE32(sizeof(struct sctp_ipv4addr_param));
2731f8829a4aSRandall Stewart 			lookup_used = 1;
2732f8829a4aSRandall Stewart 		}
2733f8829a4aSRandall Stewart 	}
2734f8829a4aSRandall Stewart 	/* chain it all together */
2735139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_asconf_chk) = m_asconf;
27363c503c28SRandall Stewart 	*retlen = SCTP_BUF_LEN(m_asconf_chk) + SCTP_BUF_LEN(m_asconf);
27373c503c28SRandall Stewart 	acp->ch.chunk_length = ntohs(*retlen);
2738f8829a4aSRandall Stewart 
2739f8829a4aSRandall Stewart 	return (m_asconf_chk);
2740f8829a4aSRandall Stewart }
2741f8829a4aSRandall Stewart 
2742f8829a4aSRandall Stewart /*
2743f8829a4aSRandall Stewart  * section to handle address changes before an association is up eg. changes
2744f8829a4aSRandall Stewart  * during INIT/INIT-ACK/COOKIE-ECHO handshake
2745f8829a4aSRandall Stewart  */
2746f8829a4aSRandall Stewart 
2747f8829a4aSRandall Stewart /*
2748f8829a4aSRandall Stewart  * processes the (local) addresses in the INIT-ACK chunk
2749f8829a4aSRandall Stewart  */
2750f8829a4aSRandall Stewart static void
2751f8829a4aSRandall Stewart sctp_process_initack_addresses(struct sctp_tcb *stcb, struct mbuf *m,
2752f8829a4aSRandall Stewart     unsigned int offset, unsigned int length)
2753f8829a4aSRandall Stewart {
2754f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
2755f8829a4aSRandall Stewart 	uint16_t plen, ptype;
275642551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
2757f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param addr_store;
2758f8829a4aSRandall Stewart 	struct sockaddr_in6 sin6;
2759f8829a4aSRandall Stewart 	struct sockaddr_in sin;
2760f8829a4aSRandall Stewart 	struct sockaddr *sa;
276142551e99SRandall Stewart 	uint32_t vrf_id;
2762f8829a4aSRandall Stewart 
2763ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "processing init-ack addresses\n");
2764ad81507eSRandall Stewart 	if (stcb == NULL)	/* Un-needed check for SA */
2765ad81507eSRandall Stewart 		return;
2766f8829a4aSRandall Stewart 
2767f8829a4aSRandall Stewart 	/* convert to upper bound */
2768f8829a4aSRandall Stewart 	length += offset;
2769f8829a4aSRandall Stewart 
2770f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
2771f8829a4aSRandall Stewart 		return;
2772f8829a4aSRandall Stewart 	}
2773f8829a4aSRandall Stewart 	/* init the addresses */
2774f8829a4aSRandall Stewart 	bzero(&sin6, sizeof(sin6));
2775f8829a4aSRandall Stewart 	sin6.sin6_family = AF_INET6;
2776f8829a4aSRandall Stewart 	sin6.sin6_len = sizeof(sin6);
2777f8829a4aSRandall Stewart 	sin6.sin6_port = stcb->rport;
2778f8829a4aSRandall Stewart 
2779f8829a4aSRandall Stewart 	bzero(&sin, sizeof(sin));
2780f8829a4aSRandall Stewart 	sin.sin_len = sizeof(sin);
2781f8829a4aSRandall Stewart 	sin.sin_family = AF_INET;
2782f8829a4aSRandall Stewart 	sin.sin_port = stcb->rport;
2783f8829a4aSRandall Stewart 
2784f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
2785f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
2786f8829a4aSRandall Stewart 	    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
2787f8829a4aSRandall Stewart 	while (ph != NULL) {
2788f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
2789f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
2790f8829a4aSRandall Stewart 		if (ptype == SCTP_IPV6_ADDRESS) {
2791f8829a4aSRandall Stewart 			struct sctp_ipv6addr_param *a6p;
2792f8829a4aSRandall Stewart 
2793f8829a4aSRandall Stewart 			/* get the entire IPv6 address param */
2794f8829a4aSRandall Stewart 			a6p = (struct sctp_ipv6addr_param *)
2795f8829a4aSRandall Stewart 			    sctp_m_getptr(m, offset,
2796f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv6addr_param),
2797f8829a4aSRandall Stewart 			    (uint8_t *) & addr_store);
2798f8829a4aSRandall Stewart 			if (plen != sizeof(struct sctp_ipv6addr_param) ||
2799f8829a4aSRandall Stewart 			    a6p == NULL) {
2800f8829a4aSRandall Stewart 				return;
2801f8829a4aSRandall Stewart 			}
2802f8829a4aSRandall Stewart 			memcpy(&sin6.sin6_addr, a6p->addr,
2803f8829a4aSRandall Stewart 			    sizeof(struct in6_addr));
2804f8829a4aSRandall Stewart 			sa = (struct sockaddr *)&sin6;
2805f8829a4aSRandall Stewart 		} else if (ptype == SCTP_IPV4_ADDRESS) {
2806f8829a4aSRandall Stewart 			struct sctp_ipv4addr_param *a4p;
2807f8829a4aSRandall Stewart 
2808f8829a4aSRandall Stewart 			/* get the entire IPv4 address param */
280942551e99SRandall Stewart 			a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m, offset,
281042551e99SRandall Stewart 			    sizeof(struct sctp_ipv4addr_param),
281142551e99SRandall Stewart 			    (uint8_t *) & addr_store);
2812f8829a4aSRandall Stewart 			if (plen != sizeof(struct sctp_ipv4addr_param) ||
2813f8829a4aSRandall Stewart 			    a4p == NULL) {
2814f8829a4aSRandall Stewart 				return;
2815f8829a4aSRandall Stewart 			}
2816f8829a4aSRandall Stewart 			sin.sin_addr.s_addr = a4p->addr;
2817f8829a4aSRandall Stewart 			sa = (struct sockaddr *)&sin;
2818f8829a4aSRandall Stewart 		} else {
2819f8829a4aSRandall Stewart 			goto next_addr;
2820f8829a4aSRandall Stewart 		}
2821f8829a4aSRandall Stewart 
2822f8829a4aSRandall Stewart 		/* see if this address really (still) exists */
2823bff64a4dSRandall Stewart 		if (stcb) {
2824bff64a4dSRandall Stewart 			vrf_id = stcb->asoc.vrf_id;
2825bff64a4dSRandall Stewart 		} else {
282642551e99SRandall Stewart 			vrf_id = SCTP_DEFAULT_VRFID;
2827bff64a4dSRandall Stewart 		}
28283232788eSRandall Stewart 		sctp_ifa = sctp_find_ifa_by_addr(sa, vrf_id,
28293232788eSRandall Stewart 		    SCTP_ADDR_NOT_LOCKED);
283042551e99SRandall Stewart 		if (sctp_ifa == NULL) {
2831f8829a4aSRandall Stewart 			/* address doesn't exist anymore */
2832f8829a4aSRandall Stewart 			int status;
2833f8829a4aSRandall Stewart 
2834f8829a4aSRandall Stewart 			/* are ASCONFs allowed ? */
2835f8829a4aSRandall Stewart 			if ((sctp_is_feature_on(stcb->sctp_ep,
2836f8829a4aSRandall Stewart 			    SCTP_PCB_FLAGS_DO_ASCONF)) &&
2837f8829a4aSRandall Stewart 			    stcb->asoc.peer_supports_asconf) {
2838f8829a4aSRandall Stewart 				/* queue an ASCONF DEL_IP_ADDRESS */
28393232788eSRandall Stewart 				status = sctp_asconf_queue_sa_delete(stcb, sa);
2840f8829a4aSRandall Stewart 				/*
28411b649582SRandall Stewart 				 * if queued ok, and in correct state, send
28421b649582SRandall Stewart 				 * out the ASCONF.
2843f8829a4aSRandall Stewart 				 */
2844f8829a4aSRandall Stewart 				if (status == 0 &&
2845f8829a4aSRandall Stewart 				    SCTP_GET_STATE(&stcb->asoc) ==
2846f8829a4aSRandall Stewart 				    SCTP_STATE_OPEN) {
28471b649582SRandall Stewart #ifdef SCTP_TIMER_BASED_ASCONF
2848f8829a4aSRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_ASCONF,
2849f8829a4aSRandall Stewart 					    stcb->sctp_ep, stcb,
2850f8829a4aSRandall Stewart 					    stcb->asoc.primary_destination);
28511b649582SRandall Stewart #else
28523232788eSRandall Stewart 					sctp_send_asconf(stcb, stcb->asoc.primary_destination,
28533232788eSRandall Stewart 					    SCTP_ADDR_NOT_LOCKED);
28541b649582SRandall Stewart #endif
2855f8829a4aSRandall Stewart 				}
2856f8829a4aSRandall Stewart 			}
2857f8829a4aSRandall Stewart 		}
2858f8829a4aSRandall Stewart next_addr:
2859f8829a4aSRandall Stewart 		/*
2860f8829a4aSRandall Stewart 		 * Sanity check:  Make sure the length isn't 0, otherwise
2861f8829a4aSRandall Stewart 		 * we'll be stuck in this loop for a long time...
2862f8829a4aSRandall Stewart 		 */
2863f8829a4aSRandall Stewart 		if (SCTP_SIZE32(plen) == 0) {
2864ad81507eSRandall Stewart 			SCTP_PRINTF("process_initack_addrs: bad len (%d) type=%xh\n",
2865f8829a4aSRandall Stewart 			    plen, ptype);
2866f8829a4aSRandall Stewart 			return;
2867f8829a4aSRandall Stewart 		}
2868f8829a4aSRandall Stewart 		/* get next parameter */
2869f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
2870f8829a4aSRandall Stewart 		if ((offset + sizeof(struct sctp_paramhdr)) > length)
2871f8829a4aSRandall Stewart 			return;
2872f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
2873f8829a4aSRandall Stewart 		    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
2874f8829a4aSRandall Stewart 	}			/* while */
2875f8829a4aSRandall Stewart }
2876f8829a4aSRandall Stewart 
2877f8829a4aSRandall Stewart /* FIX ME: need to verify return result for v6 address type if v6 disabled */
2878f8829a4aSRandall Stewart /*
2879f8829a4aSRandall Stewart  * checks to see if a specific address is in the initack address list returns
2880f8829a4aSRandall Stewart  * 1 if found, 0 if not
2881f8829a4aSRandall Stewart  */
2882f8829a4aSRandall Stewart static uint32_t
2883f8829a4aSRandall Stewart sctp_addr_in_initack(struct sctp_tcb *stcb, struct mbuf *m, uint32_t offset,
2884f8829a4aSRandall Stewart     uint32_t length, struct sockaddr *sa)
2885f8829a4aSRandall Stewart {
2886f8829a4aSRandall Stewart 	struct sctp_paramhdr tmp_param, *ph;
2887f8829a4aSRandall Stewart 	uint16_t plen, ptype;
2888f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param addr_store;
2889f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
2890f8829a4aSRandall Stewart 	struct sctp_ipv4addr_param *a4p;
2891f8829a4aSRandall Stewart 
2892f8829a4aSRandall Stewart #ifdef INET6
289342551e99SRandall Stewart 	struct sockaddr_in6 *sin6;
2894f8829a4aSRandall Stewart 	struct sctp_ipv6addr_param *a6p;
289542551e99SRandall Stewart 	struct sockaddr_in6 sin6_tmp;
2896f8829a4aSRandall Stewart 
2897f8829a4aSRandall Stewart #endif				/* INET6 */
2898f8829a4aSRandall Stewart 
2899f8829a4aSRandall Stewart 	if (
2900f8829a4aSRandall Stewart #ifdef INET6
2901f8829a4aSRandall Stewart 	    (sa->sa_family != AF_INET6) &&
2902f8829a4aSRandall Stewart #endif				/* INET6 */
2903f8829a4aSRandall Stewart 	    (sa->sa_family != AF_INET))
2904f8829a4aSRandall Stewart 		return (0);
2905f8829a4aSRandall Stewart 
2906ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_ASCONF2, "find_initack_addr: starting search for ");
2907ad81507eSRandall Stewart 	SCTPDBG_ADDR(SCTP_DEBUG_ASCONF2, sa);
2908f8829a4aSRandall Stewart 	/* convert to upper bound */
2909f8829a4aSRandall Stewart 	length += offset;
2910f8829a4aSRandall Stewart 
2911f8829a4aSRandall Stewart 	if ((offset + sizeof(struct sctp_paramhdr)) > length) {
2912ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
2913ad81507eSRandall Stewart 		    "find_initack_addr: invalid offset?\n");
2914f8829a4aSRandall Stewart 		return (0);
2915f8829a4aSRandall Stewart 	}
2916f8829a4aSRandall Stewart 	/* go through the addresses in the init-ack */
2917f8829a4aSRandall Stewart 	ph = (struct sctp_paramhdr *)sctp_m_getptr(m, offset,
2918f8829a4aSRandall Stewart 	    sizeof(struct sctp_paramhdr), (uint8_t *) & tmp_param);
2919f8829a4aSRandall Stewart 	while (ph != NULL) {
2920f8829a4aSRandall Stewart 		ptype = ntohs(ph->param_type);
2921f8829a4aSRandall Stewart 		plen = ntohs(ph->param_length);
2922f8829a4aSRandall Stewart #ifdef INET6
2923f8829a4aSRandall Stewart 		if (ptype == SCTP_IPV6_ADDRESS && sa->sa_family == AF_INET6) {
2924f8829a4aSRandall Stewart 			/* get the entire IPv6 address param */
2925f8829a4aSRandall Stewart 			a6p = (struct sctp_ipv6addr_param *)
2926f8829a4aSRandall Stewart 			    sctp_m_getptr(m, offset,
2927f8829a4aSRandall Stewart 			    sizeof(struct sctp_ipv6addr_param),
2928f8829a4aSRandall Stewart 			    (uint8_t *) & addr_store);
2929f8829a4aSRandall Stewart 			if (plen != sizeof(struct sctp_ipv6addr_param) ||
2930ad81507eSRandall Stewart 			    (ph == NULL) ||
2931ad81507eSRandall Stewart 			    (a6p == NULL)) {
2932f8829a4aSRandall Stewart 				return (0);
2933f8829a4aSRandall Stewart 			}
2934f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
2935f8829a4aSRandall Stewart 			if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
2936f8829a4aSRandall Stewart 				/* create a copy and clear scope */
2937f8829a4aSRandall Stewart 				memcpy(&sin6_tmp, sin6,
2938f8829a4aSRandall Stewart 				    sizeof(struct sockaddr_in6));
2939f8829a4aSRandall Stewart 				sin6 = &sin6_tmp;
2940f8829a4aSRandall Stewart 				in6_clearscope(&sin6->sin6_addr);
2941f8829a4aSRandall Stewart 			}
2942f8829a4aSRandall Stewart 			if (memcmp(&sin6->sin6_addr, a6p->addr,
2943f8829a4aSRandall Stewart 			    sizeof(struct in6_addr)) == 0) {
2944f8829a4aSRandall Stewart 				/* found it */
2945f8829a4aSRandall Stewart 				return (1);
2946f8829a4aSRandall Stewart 			}
2947f8829a4aSRandall Stewart 		} else
2948f8829a4aSRandall Stewart #endif				/* INET6 */
2949f8829a4aSRandall Stewart 
2950f8829a4aSRandall Stewart 			if (ptype == SCTP_IPV4_ADDRESS &&
2951f8829a4aSRandall Stewart 		    sa->sa_family == AF_INET) {
2952f8829a4aSRandall Stewart 			/* get the entire IPv4 address param */
2953f8829a4aSRandall Stewart 			a4p = (struct sctp_ipv4addr_param *)sctp_m_getptr(m,
2954f8829a4aSRandall Stewart 			    offset, sizeof(struct sctp_ipv4addr_param),
2955f8829a4aSRandall Stewart 			    (uint8_t *) & addr_store);
2956f8829a4aSRandall Stewart 			if (plen != sizeof(struct sctp_ipv4addr_param) ||
2957ad81507eSRandall Stewart 			    (ph == NULL) ||
2958ad81507eSRandall Stewart 			    (a4p == NULL)) {
2959f8829a4aSRandall Stewart 				return (0);
2960f8829a4aSRandall Stewart 			}
2961f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
2962f8829a4aSRandall Stewart 			if (sin->sin_addr.s_addr == a4p->addr) {
2963f8829a4aSRandall Stewart 				/* found it */
2964f8829a4aSRandall Stewart 				return (1);
2965f8829a4aSRandall Stewart 			}
2966f8829a4aSRandall Stewart 		}
2967f8829a4aSRandall Stewart 		/* get next parameter */
2968f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
2969f8829a4aSRandall Stewart 		if (offset + sizeof(struct sctp_paramhdr) > length)
2970f8829a4aSRandall Stewart 			return (0);
2971f8829a4aSRandall Stewart 		ph = (struct sctp_paramhdr *)
2972f8829a4aSRandall Stewart 		    sctp_m_getptr(m, offset, sizeof(struct sctp_paramhdr),
2973f8829a4aSRandall Stewart 		    (uint8_t *) & tmp_param);
2974f8829a4aSRandall Stewart 	}			/* while */
2975f8829a4aSRandall Stewart 	/* not found! */
2976f8829a4aSRandall Stewart 	return (0);
2977f8829a4aSRandall Stewart }
2978f8829a4aSRandall Stewart 
2979f8829a4aSRandall Stewart /*
2980f8829a4aSRandall Stewart  * makes sure that the current endpoint local addr list is consistent with
2981f8829a4aSRandall Stewart  * the new association (eg. subset bound, asconf allowed) adds addresses as
2982f8829a4aSRandall Stewart  * necessary
2983f8829a4aSRandall Stewart  */
2984f8829a4aSRandall Stewart static void
2985f8829a4aSRandall Stewart sctp_check_address_list_ep(struct sctp_tcb *stcb, struct mbuf *m, int offset,
2986f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr)
2987f8829a4aSRandall Stewart {
2988f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
2989f8829a4aSRandall Stewart 
2990f8829a4aSRandall Stewart 	/* go through the endpoint list */
2991f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
2992f8829a4aSRandall Stewart 		/* be paranoid and validate the laddr */
2993f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
2994ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1,
2995ad81507eSRandall Stewart 			    "check_addr_list_ep: laddr->ifa is NULL");
2996f8829a4aSRandall Stewart 			continue;
2997f8829a4aSRandall Stewart 		}
299842551e99SRandall Stewart 		if (laddr->ifa == NULL) {
2999ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "check_addr_list_ep: laddr->ifa->ifa_addr is NULL");
3000f8829a4aSRandall Stewart 			continue;
3001f8829a4aSRandall Stewart 		}
3002f8829a4aSRandall Stewart 		/* do i have it implicitly? */
300342551e99SRandall Stewart 		if (sctp_cmpaddr(&laddr->ifa->address.sa, init_addr)) {
3004f8829a4aSRandall Stewart 			continue;
3005f8829a4aSRandall Stewart 		}
3006f8829a4aSRandall Stewart 		/* check to see if in the init-ack */
3007f8829a4aSRandall Stewart 		if (!sctp_addr_in_initack(stcb, m, offset, length,
300842551e99SRandall Stewart 		    &laddr->ifa->address.sa)) {
3009f8829a4aSRandall Stewart 			/* try to add it */
3010f8829a4aSRandall Stewart 			sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb, laddr->ifa,
30113232788eSRandall Stewart 			    SCTP_ADD_IP_ADDRESS, SCTP_ADDR_NOT_LOCKED);
3012f8829a4aSRandall Stewart 		}
3013f8829a4aSRandall Stewart 	}
3014f8829a4aSRandall Stewart }
3015f8829a4aSRandall Stewart 
3016f8829a4aSRandall Stewart /*
3017f8829a4aSRandall Stewart  * makes sure that the current kernel address list is consistent with the new
3018f8829a4aSRandall Stewart  * association (with all addrs bound) adds addresses as necessary
3019f8829a4aSRandall Stewart  */
3020f8829a4aSRandall Stewart static void
3021f8829a4aSRandall Stewart sctp_check_address_list_all(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3022f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3023f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3024f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3025f8829a4aSRandall Stewart {
302642551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
302742551e99SRandall Stewart 	struct sctp_ifn *sctp_ifn;
302842551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
302942551e99SRandall Stewart 	uint32_t vrf_id;
3030f8829a4aSRandall Stewart 
3031bff64a4dSRandall Stewart 	if (stcb) {
3032bff64a4dSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
3033bff64a4dSRandall Stewart 	} else {
3034ad81507eSRandall Stewart 		return;
3035bff64a4dSRandall Stewart 	}
3036c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
303742551e99SRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
303842551e99SRandall Stewart 	if (vrf == NULL) {
3039c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
304042551e99SRandall Stewart 		return;
304142551e99SRandall Stewart 	}
3042f8829a4aSRandall Stewart 	/* go through all our known interfaces */
304342551e99SRandall Stewart 	LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
304442551e99SRandall Stewart 		if (loopback_scope == 0 && SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
3045f8829a4aSRandall Stewart 			/* skip loopback interface */
3046f8829a4aSRandall Stewart 			continue;
3047f8829a4aSRandall Stewart 		}
3048f8829a4aSRandall Stewart 		/* go through each interface address */
304942551e99SRandall Stewart 		LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
3050f8829a4aSRandall Stewart 			/* do i have it implicitly? */
305142551e99SRandall Stewart 			if (sctp_cmpaddr(&sctp_ifa->address.sa, init_addr)) {
3052f8829a4aSRandall Stewart 				continue;
3053f8829a4aSRandall Stewart 			}
3054f8829a4aSRandall Stewart 			/* check to see if in the init-ack */
3055f8829a4aSRandall Stewart 			if (!sctp_addr_in_initack(stcb, m, offset, length,
305642551e99SRandall Stewart 			    &sctp_ifa->address.sa)) {
3057f8829a4aSRandall Stewart 				/* try to add it */
3058f8829a4aSRandall Stewart 				sctp_addr_mgmt_assoc(stcb->sctp_ep, stcb,
30593232788eSRandall Stewart 				    sctp_ifa, SCTP_ADD_IP_ADDRESS,
30603232788eSRandall Stewart 				    SCTP_ADDR_LOCKED);
3061f8829a4aSRandall Stewart 			}
3062f8829a4aSRandall Stewart 		}		/* end foreach ifa */
3063f8829a4aSRandall Stewart 	}			/* end foreach ifn */
3064c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
3065f8829a4aSRandall Stewart }
3066f8829a4aSRandall Stewart 
3067f8829a4aSRandall Stewart /*
3068f8829a4aSRandall Stewart  * validates an init-ack chunk (from a cookie-echo) with current addresses
3069f8829a4aSRandall Stewart  * adds addresses from the init-ack into our local address list, if needed
3070f8829a4aSRandall Stewart  * queues asconf adds/deletes addresses as needed and makes appropriate list
3071f8829a4aSRandall Stewart  * changes for source address selection m, offset: points to the start of the
3072f8829a4aSRandall Stewart  * address list in an init-ack chunk length: total length of the address
3073f8829a4aSRandall Stewart  * params only init_addr: address where my INIT-ACK was sent from
3074f8829a4aSRandall Stewart  */
3075f8829a4aSRandall Stewart void
3076f8829a4aSRandall Stewart sctp_check_address_list(struct sctp_tcb *stcb, struct mbuf *m, int offset,
3077f8829a4aSRandall Stewart     int length, struct sockaddr *init_addr,
3078f8829a4aSRandall Stewart     uint16_t local_scope, uint16_t site_scope,
3079f8829a4aSRandall Stewart     uint16_t ipv4_scope, uint16_t loopback_scope)
3080f8829a4aSRandall Stewart {
3081f8829a4aSRandall Stewart 	/* process the local addresses in the initack */
3082f8829a4aSRandall Stewart 	sctp_process_initack_addresses(stcb, m, offset, length);
3083f8829a4aSRandall Stewart 
3084f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3085f8829a4aSRandall Stewart 		/* bound all case */
3086f8829a4aSRandall Stewart 		sctp_check_address_list_all(stcb, m, offset, length, init_addr,
3087f8829a4aSRandall Stewart 		    local_scope, site_scope, ipv4_scope, loopback_scope);
3088f8829a4aSRandall Stewart 	} else {
3089f8829a4aSRandall Stewart 		/* subset bound case */
3090f8829a4aSRandall Stewart 		if (sctp_is_feature_on(stcb->sctp_ep,
3091f8829a4aSRandall Stewart 		    SCTP_PCB_FLAGS_DO_ASCONF)) {
3092f8829a4aSRandall Stewart 			/* asconf's allowed */
3093f8829a4aSRandall Stewart 			sctp_check_address_list_ep(stcb, m, offset, length,
3094f8829a4aSRandall Stewart 			    init_addr);
3095f8829a4aSRandall Stewart 		}
3096f8829a4aSRandall Stewart 		/* else, no asconfs allowed, so what we sent is what we get */
3097f8829a4aSRandall Stewart 	}
3098f8829a4aSRandall Stewart }
3099f8829a4aSRandall Stewart 
3100f8829a4aSRandall Stewart /*
3101f8829a4aSRandall Stewart  * sctp_bindx() support
3102f8829a4aSRandall Stewart  */
3103f8829a4aSRandall Stewart uint32_t
31043c503c28SRandall Stewart sctp_addr_mgmt_ep_sa(struct sctp_inpcb *inp, struct sockaddr *sa,
310580fefe0aSRandall Stewart     uint32_t type, uint32_t vrf_id, struct sctp_ifa *sctp_ifap)
3106f8829a4aSRandall Stewart {
310742551e99SRandall Stewart 	struct sctp_ifa *ifa;
3108f8829a4aSRandall Stewart 
310942551e99SRandall Stewart 	if (sa->sa_len == 0) {
3110c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
3111f8829a4aSRandall Stewart 		return (EINVAL);
311242551e99SRandall Stewart 	}
311380fefe0aSRandall Stewart 	if (sctp_ifap) {
311480fefe0aSRandall Stewart 		ifa = sctp_ifap;
311580fefe0aSRandall Stewart 	} else if (type == SCTP_ADD_IP_ADDRESS) {
311642551e99SRandall Stewart 		/* For an add the address MUST be on the system */
3117851b7298SRandall Stewart 		ifa = sctp_find_ifa_by_addr(sa, vrf_id, SCTP_ADDR_NOT_LOCKED);
311842551e99SRandall Stewart 	} else if (type == SCTP_DEL_IP_ADDRESS) {
311942551e99SRandall Stewart 		/* For a delete we need to find it in the inp */
3120851b7298SRandall Stewart 		ifa = sctp_find_ifa_in_ep(inp, sa, SCTP_ADDR_NOT_LOCKED);
312142551e99SRandall Stewart 	} else {
312242551e99SRandall Stewart 		ifa = NULL;
312342551e99SRandall Stewart 	}
3124f8829a4aSRandall Stewart 	if (ifa != NULL) {
312542551e99SRandall Stewart 		if (type == SCTP_ADD_IP_ADDRESS) {
312642551e99SRandall Stewart 			sctp_add_local_addr_ep(inp, ifa, type);
312742551e99SRandall Stewart 		} else if (type == SCTP_DEL_IP_ADDRESS) {
312842551e99SRandall Stewart 			struct sctp_laddr *laddr;
312942551e99SRandall Stewart 
31303c503c28SRandall Stewart 			if (inp->laddr_count < 2) {
31313c503c28SRandall Stewart 				/* can't delete the last local address */
3132c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EINVAL);
31333c503c28SRandall Stewart 				return (EINVAL);
31343c503c28SRandall Stewart 			}
31353c503c28SRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list,
31363c503c28SRandall Stewart 			    sctp_nxt_addr) {
313742551e99SRandall Stewart 				if (ifa == laddr->ifa) {
313842551e99SRandall Stewart 					/* Mark in the delete */
313942551e99SRandall Stewart 					laddr->action = type;
314042551e99SRandall Stewart 				}
314142551e99SRandall Stewart 			}
314242551e99SRandall Stewart 		}
314387b4fcd3SMichael Tuexen 		if (!LIST_EMPTY(&inp->sctp_asoc_list)) {
314487b4fcd3SMichael Tuexen 			/*
314587b4fcd3SMichael Tuexen 			 * There is no need to start the iterator if the inp
314687b4fcd3SMichael Tuexen 			 * has no associations.
314787b4fcd3SMichael Tuexen 			 */
314887b4fcd3SMichael Tuexen 			struct sctp_asconf_iterator *asc;
314987b4fcd3SMichael Tuexen 			struct sctp_laddr *wi;
315087b4fcd3SMichael Tuexen 
315187b4fcd3SMichael Tuexen 			SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
315287b4fcd3SMichael Tuexen 			    sizeof(struct sctp_asconf_iterator),
315387b4fcd3SMichael Tuexen 			    SCTP_M_ASC_IT);
315487b4fcd3SMichael Tuexen 			if (asc == NULL) {
315587b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
315687b4fcd3SMichael Tuexen 				return (ENOMEM);
315787b4fcd3SMichael Tuexen 			}
315887b4fcd3SMichael Tuexen 			wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
315987b4fcd3SMichael Tuexen 			if (wi == NULL) {
316087b4fcd3SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
316187b4fcd3SMichael Tuexen 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_ASCONF, ENOMEM);
316287b4fcd3SMichael Tuexen 				return (ENOMEM);
316387b4fcd3SMichael Tuexen 			}
316442551e99SRandall Stewart 			LIST_INIT(&asc->list_of_work);
316542551e99SRandall Stewart 			asc->cnt = 1;
316642551e99SRandall Stewart 			SCTP_INCR_LADDR_COUNT();
316742551e99SRandall Stewart 			wi->ifa = ifa;
316842551e99SRandall Stewart 			wi->action = type;
316942551e99SRandall Stewart 			atomic_add_int(&ifa->refcount, 1);
317042551e99SRandall Stewart 			LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
31711b649582SRandall Stewart 			(void)sctp_initiate_iterator(sctp_asconf_iterator_ep,
31721b649582SRandall Stewart 			    sctp_asconf_iterator_stcb,
31731b649582SRandall Stewart 			    sctp_asconf_iterator_ep_end,
317442551e99SRandall Stewart 			    SCTP_PCB_ANY_FLAGS,
31753c503c28SRandall Stewart 			    SCTP_PCB_ANY_FEATURES,
31761b649582SRandall Stewart 			    SCTP_ASOC_ANY_STATE,
31771b649582SRandall Stewart 			    (void *)asc, 0,
31781b649582SRandall Stewart 			    sctp_asconf_iterator_end, inp, 0);
317987b4fcd3SMichael Tuexen 		}
318087b4fcd3SMichael Tuexen 		return (0);
3181f8829a4aSRandall Stewart 	} else {
3182f8829a4aSRandall Stewart 		/* invalid address! */
3183c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_ASCONF, EADDRNOTAVAIL);
3184f8829a4aSRandall Stewart 		return (EADDRNOTAVAIL);
3185f8829a4aSRandall Stewart 	}
3186f8829a4aSRandall Stewart }
3187830d754dSRandall Stewart 
3188830d754dSRandall Stewart void
3189830d754dSRandall Stewart sctp_asconf_send_nat_state_update(struct sctp_tcb *stcb,
3190830d754dSRandall Stewart     struct sctp_nets *net)
3191830d754dSRandall Stewart {
3192830d754dSRandall Stewart 	struct sctp_asconf_addr *aa;
3193830d754dSRandall Stewart 	struct sctp_ifa *sctp_ifap;
3194830d754dSRandall Stewart 	struct sctp_asconf_tag_param *vtag;
3195830d754dSRandall Stewart 	struct sockaddr_in *to;
3196830d754dSRandall Stewart 
3197830d754dSRandall Stewart #ifdef INET6
3198830d754dSRandall Stewart 	struct sockaddr_in6 *to6;
3199830d754dSRandall Stewart 
3200830d754dSRandall Stewart #endif
3201830d754dSRandall Stewart 	if (net == NULL) {
3202830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing net\n");
3203830d754dSRandall Stewart 		return;
3204830d754dSRandall Stewart 	}
3205830d754dSRandall Stewart 	if (stcb == NULL) {
3206830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1, "sctp_asconf_send_nat_state_update: Missing stcb\n");
3207830d754dSRandall Stewart 		return;
3208830d754dSRandall Stewart 	}
3209830d754dSRandall Stewart 	/*
3210830d754dSRandall Stewart 	 * Need to have in the asconf: - vtagparam(my_vtag/peer_vtag) -
3211830d754dSRandall Stewart 	 * add(0.0.0.0) - del(0.0.0.0) - Any global addresses add(addr)
3212830d754dSRandall Stewart 	 */
3213830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3214830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3215830d754dSRandall Stewart 	if (aa == NULL) {
3216830d754dSRandall Stewart 		/* didn't get memory */
3217830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3218830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3219830d754dSRandall Stewart 		return;
3220830d754dSRandall Stewart 	}
3221830d754dSRandall Stewart 	aa->special_del = 0;
3222830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3223830d754dSRandall Stewart 	/* top level elements are "networked" during send */
3224830d754dSRandall Stewart 	aa->ifa = NULL;
3225830d754dSRandall Stewart 	aa->sent = 0;		/* clear sent flag */
3226830d754dSRandall Stewart 	vtag = (struct sctp_asconf_tag_param *)&aa->ap.aph;
3227830d754dSRandall Stewart 	vtag->aph.ph.param_type = SCTP_NAT_VTAGS;
3228830d754dSRandall Stewart 	vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param);
3229830d754dSRandall Stewart 	vtag->local_vtag = htonl(stcb->asoc.my_vtag);
3230830d754dSRandall Stewart 	vtag->remote_vtag = htonl(stcb->asoc.peer_vtag);
3231830d754dSRandall Stewart 	TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3232830d754dSRandall Stewart 
3233830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3234830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3235830d754dSRandall Stewart 	if (aa == NULL) {
3236830d754dSRandall Stewart 		/* didn't get memory */
3237830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3238830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3239830d754dSRandall Stewart 		return;
3240830d754dSRandall Stewart 	}
3241830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3242830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3243830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3244830d754dSRandall Stewart 	if (net->ro._l_addr.sa.sa_family == AF_INET) {
3245830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3246830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3247830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3248830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3249830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3250830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3251830d754dSRandall Stewart 	}
3252830d754dSRandall Stewart #ifdef INET6
3253830d754dSRandall Stewart 	else if (net->ro._l_addr.sa.sa_family == AF_INET6) {
3254830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3255830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3256830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3257830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3258830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3259830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3260830d754dSRandall Stewart 	}
3261830d754dSRandall Stewart #endif				/* INET6 */
3262830d754dSRandall Stewart 	SCTP_MALLOC(aa, struct sctp_asconf_addr *, sizeof(*aa),
3263830d754dSRandall Stewart 	    SCTP_M_ASC_ADDR);
3264830d754dSRandall Stewart 	if (aa == NULL) {
3265830d754dSRandall Stewart 		/* didn't get memory */
3266830d754dSRandall Stewart 		SCTPDBG(SCTP_DEBUG_ASCONF1,
3267830d754dSRandall Stewart 		    "sctp_asconf_send_nat_state_update: failed to get memory!\n");
3268830d754dSRandall Stewart 		return;
3269830d754dSRandall Stewart 	}
3270830d754dSRandall Stewart 	memset(aa, 0, sizeof(struct sctp_asconf_addr));
3271830d754dSRandall Stewart 	/* fill in asconf address parameter fields */
3272830d754dSRandall Stewart 	/* ADD(0.0.0.0) */
3273830d754dSRandall Stewart 	if (net->ro._l_addr.sa.sa_family == AF_INET) {
3274830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_ADD_IP_ADDRESS;
3275830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3276830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV4_ADDRESS;
3277830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3278830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3279830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3280830d754dSRandall Stewart 	}
3281830d754dSRandall Stewart #ifdef INET6
3282830d754dSRandall Stewart 	else if (net->ro._l_addr.sa.sa_family == AF_INET6) {
3283830d754dSRandall Stewart 		aa->ap.aph.ph.param_type = SCTP_DEL_IP_ADDRESS;
3284830d754dSRandall Stewart 		aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3285830d754dSRandall Stewart 		aa->ap.addrp.ph.param_type = SCTP_IPV6_ADDRESS;
3286830d754dSRandall Stewart 		aa->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3287830d754dSRandall Stewart 		/* No need to add an address, we are using 0.0.0.0 */
3288830d754dSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.asconf_queue, aa, next);
3289830d754dSRandall Stewart 	}
3290830d754dSRandall Stewart #endif				/* INET6 */
3291830d754dSRandall Stewart 	/* Now we must hunt the addresses and add all global addresses */
3292830d754dSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3293830d754dSRandall Stewart 		struct sctp_vrf *vrf = NULL;
3294830d754dSRandall Stewart 		struct sctp_ifn *sctp_ifnp;
3295830d754dSRandall Stewart 		uint32_t vrf_id;
3296830d754dSRandall Stewart 
3297830d754dSRandall Stewart 		vrf_id = stcb->sctp_ep->def_vrf_id;
3298830d754dSRandall Stewart 		vrf = sctp_find_vrf(vrf_id);
3299830d754dSRandall Stewart 		if (vrf == NULL) {
3300830d754dSRandall Stewart 			goto skip_rest;
3301830d754dSRandall Stewart 		}
3302830d754dSRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
3303830d754dSRandall Stewart 		LIST_FOREACH(sctp_ifnp, &vrf->ifnlist, next_ifn) {
3304830d754dSRandall Stewart 			LIST_FOREACH(sctp_ifap, &sctp_ifnp->ifalist, next_ifa) {
3305830d754dSRandall Stewart 				if (sctp_ifap->address.sa.sa_family == AF_INET) {
3306830d754dSRandall Stewart 					to = &sctp_ifap->address.sin;
3307830d754dSRandall Stewart 
3308830d754dSRandall Stewart 					if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3309830d754dSRandall Stewart 						continue;
3310830d754dSRandall Stewart 					}
3311830d754dSRandall Stewart 					if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3312830d754dSRandall Stewart 						continue;
3313830d754dSRandall Stewart 					}
3314830d754dSRandall Stewart 				}
3315830d754dSRandall Stewart #ifdef INET6
3316830d754dSRandall Stewart 				else if (sctp_ifap->address.sa.sa_family == AF_INET6) {
3317830d754dSRandall Stewart 					to6 = &sctp_ifap->address.sin6;
3318830d754dSRandall Stewart 					if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3319830d754dSRandall Stewart 						continue;
3320830d754dSRandall Stewart 					}
3321830d754dSRandall Stewart 					if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3322830d754dSRandall Stewart 						continue;
3323830d754dSRandall Stewart 					}
3324830d754dSRandall Stewart 				}
3325830d754dSRandall Stewart #endif
3326830d754dSRandall Stewart 				sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3327830d754dSRandall Stewart 			}
3328830d754dSRandall Stewart 		}
3329830d754dSRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
3330830d754dSRandall Stewart 	} else {
3331830d754dSRandall Stewart 		struct sctp_laddr *laddr;
3332830d754dSRandall Stewart 
3333830d754dSRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) {
3334830d754dSRandall Stewart 			if (laddr->ifa == NULL) {
3335830d754dSRandall Stewart 				continue;
3336830d754dSRandall Stewart 			}
3337830d754dSRandall Stewart 			if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED)
3338830d754dSRandall Stewart 				/*
3339830d754dSRandall Stewart 				 * Address being deleted by the system, dont
3340830d754dSRandall Stewart 				 * list.
3341830d754dSRandall Stewart 				 */
3342830d754dSRandall Stewart 				continue;
3343830d754dSRandall Stewart 			if (laddr->action == SCTP_DEL_IP_ADDRESS) {
3344830d754dSRandall Stewart 				/*
3345830d754dSRandall Stewart 				 * Address being deleted on this ep don't
3346830d754dSRandall Stewart 				 * list.
3347830d754dSRandall Stewart 				 */
3348830d754dSRandall Stewart 				continue;
3349830d754dSRandall Stewart 			}
3350830d754dSRandall Stewart 			sctp_ifap = laddr->ifa;
3351830d754dSRandall Stewart 			if (sctp_ifap->address.sa.sa_family == AF_INET) {
3352830d754dSRandall Stewart 				to = &sctp_ifap->address.sin;
3353830d754dSRandall Stewart 
3354830d754dSRandall Stewart 				if (IN4_ISPRIVATE_ADDRESS(&to->sin_addr)) {
3355830d754dSRandall Stewart 					continue;
3356830d754dSRandall Stewart 				}
3357830d754dSRandall Stewart 				if (IN4_ISLOOPBACK_ADDRESS(&to->sin_addr)) {
3358830d754dSRandall Stewart 					continue;
3359830d754dSRandall Stewart 				}
3360830d754dSRandall Stewart 			}
3361830d754dSRandall Stewart #ifdef INET6
3362830d754dSRandall Stewart 			else if (sctp_ifap->address.sa.sa_family == AF_INET6) {
3363830d754dSRandall Stewart 				to6 = &sctp_ifap->address.sin6;
3364830d754dSRandall Stewart 				if (IN6_IS_ADDR_LOOPBACK(&to6->sin6_addr)) {
3365830d754dSRandall Stewart 					continue;
3366830d754dSRandall Stewart 				}
3367830d754dSRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&to6->sin6_addr)) {
3368830d754dSRandall Stewart 					continue;
3369830d754dSRandall Stewart 				}
3370830d754dSRandall Stewart 			}
3371830d754dSRandall Stewart #endif
3372830d754dSRandall Stewart 			sctp_asconf_queue_mgmt(stcb, sctp_ifap, SCTP_ADD_IP_ADDRESS);
3373830d754dSRandall Stewart 		}
3374830d754dSRandall Stewart 	}
3375830d754dSRandall Stewart skip_rest:
3376830d754dSRandall Stewart 	/* Now we must send the asconf into the queue */
3377830d754dSRandall Stewart 	sctp_send_asconf(stcb, net, 0);
3378830d754dSRandall Stewart }
3379