1f8829a4aSRandall Stewart /*- 251369649SPedro F. Giffuni * SPDX-License-Identifier: BSD-3-Clause 351369649SPedro F. Giffuni * 4830d754dSRandall Stewart * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved. 5807aad63SMichael Tuexen * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved. 6807aad63SMichael Tuexen * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved. 7f8829a4aSRandall Stewart * 8f8829a4aSRandall Stewart * Redistribution and use in source and binary forms, with or without 9f8829a4aSRandall Stewart * modification, are permitted provided that the following conditions are met: 10f8829a4aSRandall Stewart * 11f8829a4aSRandall Stewart * a) Redistributions of source code must retain the above copyright notice, 12f8829a4aSRandall Stewart * this list of conditions and the following disclaimer. 13f8829a4aSRandall Stewart * 14f8829a4aSRandall Stewart * b) Redistributions in binary form must reproduce the above copyright 15f8829a4aSRandall Stewart * notice, this list of conditions and the following disclaimer in 16f8829a4aSRandall Stewart * the documentation and/or other materials provided with the distribution. 17f8829a4aSRandall Stewart * 18f8829a4aSRandall Stewart * c) Neither the name of Cisco Systems, Inc. nor the names of its 19f8829a4aSRandall Stewart * contributors may be used to endorse or promote products derived 20f8829a4aSRandall Stewart * from this software without specific prior written permission. 21f8829a4aSRandall Stewart * 22f8829a4aSRandall Stewart * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 23f8829a4aSRandall Stewart * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 24f8829a4aSRandall Stewart * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25f8829a4aSRandall Stewart * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 26f8829a4aSRandall Stewart * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 27f8829a4aSRandall Stewart * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 28f8829a4aSRandall Stewart * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 29f8829a4aSRandall Stewart * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 30f8829a4aSRandall Stewart * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 31f8829a4aSRandall Stewart * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 32f8829a4aSRandall Stewart * THE POSSIBILITY OF SUCH DAMAGE. 33f8829a4aSRandall Stewart */ 34f8829a4aSRandall Stewart 35f8829a4aSRandall Stewart #include <sys/cdefs.h> 36f8829a4aSRandall Stewart __FBSDID("$FreeBSD$"); 37f8829a4aSRandall Stewart 38f8829a4aSRandall Stewart #include <netinet/sctp_os.h> 3993164cf9SRandall Stewart #include <sys/proc.h> 40f8829a4aSRandall Stewart #include <netinet/sctp_var.h> 4142551e99SRandall Stewart #include <netinet/sctp_sysctl.h> 42f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h> 43f8829a4aSRandall Stewart #include <netinet/sctputil.h> 44f8829a4aSRandall Stewart #include <netinet/sctp.h> 45f8829a4aSRandall Stewart #include <netinet/sctp_header.h> 46f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h> 47f8829a4aSRandall Stewart #include <netinet/sctp_output.h> 48f8829a4aSRandall Stewart #include <netinet/sctp_timer.h> 4942551e99SRandall Stewart #include <netinet/sctp_bsd_addr.h> 504474d71aSMichael Tuexen #if defined(INET) || defined(INET6) 51c54a18d2SRandall Stewart #include <netinet/udp.h> 524474d71aSMichael Tuexen #endif 5358bdb691SMichael Tuexen #ifdef INET6 5458bdb691SMichael Tuexen #include <netinet6/ip6_var.h> 5558bdb691SMichael Tuexen #endif 56bfc46083SRandall Stewart #include <sys/sched.h> 57bfc46083SRandall Stewart #include <sys/smp.h> 58bfc46083SRandall Stewart #include <sys/unistd.h> 59f8829a4aSRandall Stewart 60f8829a4aSRandall Stewart /* FIX: we don't handle multiple link local scopes */ 61f8829a4aSRandall Stewart /* "scopeless" replacement IN6_ARE_ADDR_EQUAL */ 625e2c2d87SRandall Stewart #ifdef INET6 63f8829a4aSRandall Stewart int 64c54a18d2SRandall Stewart SCTP6_ARE_ADDR_EQUAL(struct sockaddr_in6 *a, struct sockaddr_in6 *b) 65f8829a4aSRandall Stewart { 66c54a18d2SRandall Stewart struct sockaddr_in6 tmp_a, tmp_b; 67f8829a4aSRandall Stewart 68c54a18d2SRandall Stewart memcpy(&tmp_a, a, sizeof(struct sockaddr_in6)); 69482444b4SRandall Stewart if (sa6_embedscope(&tmp_a, MODULE_GLOBAL(ip6_use_defzone)) != 0) { 7060990c0cSMichael Tuexen return (0); 71c54a18d2SRandall Stewart } 72c54a18d2SRandall Stewart memcpy(&tmp_b, b, sizeof(struct sockaddr_in6)); 73482444b4SRandall Stewart if (sa6_embedscope(&tmp_b, MODULE_GLOBAL(ip6_use_defzone)) != 0) { 7460990c0cSMichael Tuexen return (0); 75c54a18d2SRandall Stewart } 76c54a18d2SRandall Stewart return (IN6_ARE_ADDR_EQUAL(&tmp_a.sin6_addr, &tmp_b.sin6_addr)); 77f8829a4aSRandall Stewart } 785e2c2d87SRandall Stewart #endif 795e2c2d87SRandall Stewart 80f8829a4aSRandall Stewart void 81f8829a4aSRandall Stewart sctp_fill_pcbinfo(struct sctp_pcbinfo *spcb) 82f8829a4aSRandall Stewart { 83f8829a4aSRandall Stewart /* 84f8829a4aSRandall Stewart * We really don't need to lock this, but I will just because it 85f8829a4aSRandall Stewart * does not hurt. 86f8829a4aSRandall Stewart */ 87f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 88b3f1ea41SRandall Stewart spcb->ep_count = SCTP_BASE_INFO(ipi_count_ep); 89b3f1ea41SRandall Stewart spcb->asoc_count = SCTP_BASE_INFO(ipi_count_asoc); 90b3f1ea41SRandall Stewart spcb->laddr_count = SCTP_BASE_INFO(ipi_count_laddr); 91b3f1ea41SRandall Stewart spcb->raddr_count = SCTP_BASE_INFO(ipi_count_raddr); 92b3f1ea41SRandall Stewart spcb->chk_count = SCTP_BASE_INFO(ipi_count_chunk); 93b3f1ea41SRandall Stewart spcb->readq_count = SCTP_BASE_INFO(ipi_count_readq); 94b3f1ea41SRandall Stewart spcb->stream_oque = SCTP_BASE_INFO(ipi_count_strmoq); 95b3f1ea41SRandall Stewart spcb->free_chunks = SCTP_BASE_INFO(ipi_free_chunks); 96f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 97f8829a4aSRandall Stewart } 98f8829a4aSRandall Stewart 99a1cb341bSMichael Tuexen /*- 10042551e99SRandall Stewart * Addresses are added to VRF's (Virtual Router's). For BSD we 10142551e99SRandall Stewart * have only the default VRF 0. We maintain a hash list of 10242551e99SRandall Stewart * VRF's. Each VRF has its own list of sctp_ifn's. Each of 10342551e99SRandall Stewart * these has a list of addresses. When we add a new address 10442551e99SRandall Stewart * to a VRF we lookup the ifn/ifn_index, if the ifn does 10542551e99SRandall Stewart * not exist we create it and add it to the list of IFN's 10642551e99SRandall Stewart * within the VRF. Once we have the sctp_ifn, we add the 10742551e99SRandall Stewart * address to the list. So we look something like: 10842551e99SRandall Stewart * 10942551e99SRandall Stewart * hash-vrf-table 11042551e99SRandall Stewart * vrf-> ifn-> ifn -> ifn 11142551e99SRandall Stewart * vrf | 11242551e99SRandall Stewart * ... +--ifa-> ifa -> ifa 11342551e99SRandall Stewart * vrf 11442551e99SRandall Stewart * 115b1ce21c6SRebecca Cran * We keep these separate lists since the SCTP subsystem will 11642551e99SRandall Stewart * point to these from its source address selection nets structure. 11742551e99SRandall Stewart * When an address is deleted it does not happen right away on 11842551e99SRandall Stewart * the SCTP side, it gets scheduled. What we do when a 11942551e99SRandall Stewart * delete happens is immediately remove the address from 12042551e99SRandall Stewart * the master list and decrement the refcount. As our 12142551e99SRandall Stewart * addip iterator works through and frees the src address 12242551e99SRandall Stewart * selection pointing to the sctp_ifa, eventually the refcount 12342551e99SRandall Stewart * will reach 0 and we will delete it. Note that it is assumed 12442551e99SRandall Stewart * that any locking on system level ifn/ifa is done at the 12542551e99SRandall Stewart * caller of these functions and these routines will only 12642551e99SRandall Stewart * lock the SCTP structures as they add or delete things. 12742551e99SRandall Stewart * 12842551e99SRandall Stewart * Other notes on VRF concepts. 12942551e99SRandall Stewart * - An endpoint can be in multiple VRF's 13042551e99SRandall Stewart * - An association lives within a VRF and only one VRF. 13142551e99SRandall Stewart * - Any incoming packet we can deduce the VRF for by 13242551e99SRandall Stewart * looking at the mbuf/pak inbound (for BSD its VRF=0 :D) 13342551e99SRandall Stewart * - Any downward send call or connect call must supply the 13442551e99SRandall Stewart * VRF via ancillary data or via some sort of set default 13542551e99SRandall Stewart * VRF socket option call (again for BSD no brainer since 13642551e99SRandall Stewart * the VRF is always 0). 13742551e99SRandall Stewart * - An endpoint may add multiple VRF's to it. 13842551e99SRandall Stewart * - Listening sockets can accept associations in any 13942551e99SRandall Stewart * of the VRF's they are in but the assoc will end up 14042551e99SRandall Stewart * in only one VRF (gotten from the packet or connect/send). 14142551e99SRandall Stewart * 14242551e99SRandall Stewart */ 14342551e99SRandall Stewart 14442551e99SRandall Stewart struct sctp_vrf * 14517205eccSRandall Stewart sctp_allocate_vrf(int vrf_id) 14642551e99SRandall Stewart { 14742551e99SRandall Stewart struct sctp_vrf *vrf = NULL; 14842551e99SRandall Stewart struct sctp_vrflist *bucket; 14942551e99SRandall Stewart 15042551e99SRandall Stewart /* First allocate the VRF structure */ 15117205eccSRandall Stewart vrf = sctp_find_vrf(vrf_id); 15242551e99SRandall Stewart if (vrf) { 15342551e99SRandall Stewart /* Already allocated */ 15442551e99SRandall Stewart return (vrf); 15542551e99SRandall Stewart } 15642551e99SRandall Stewart SCTP_MALLOC(vrf, struct sctp_vrf *, sizeof(struct sctp_vrf), 157207304d4SRandall Stewart SCTP_M_VRF); 15842551e99SRandall Stewart if (vrf == NULL) { 15942551e99SRandall Stewart /* No memory */ 16042551e99SRandall Stewart #ifdef INVARIANTS 16117205eccSRandall Stewart panic("No memory for VRF:%d", vrf_id); 16242551e99SRandall Stewart #endif 16342551e99SRandall Stewart return (NULL); 16442551e99SRandall Stewart } 16542551e99SRandall Stewart /* setup the VRF */ 16642551e99SRandall Stewart memset(vrf, 0, sizeof(struct sctp_vrf)); 16717205eccSRandall Stewart vrf->vrf_id = vrf_id; 16842551e99SRandall Stewart LIST_INIT(&vrf->ifnlist); 16942551e99SRandall Stewart vrf->total_ifa_count = 0; 17080fefe0aSRandall Stewart vrf->refcount = 0; 171f4c93d24SRandall Stewart /* now also setup table ids */ 172f4c93d24SRandall Stewart SCTP_INIT_VRF_TABLEID(vrf); 1736a27c376SRandall Stewart /* Init the HASH of addresses */ 17417205eccSRandall Stewart vrf->vrf_addr_hash = SCTP_HASH_INIT(SCTP_VRF_ADDR_HASH_SIZE, 17517205eccSRandall Stewart &vrf->vrf_addr_hashmark); 1766a27c376SRandall Stewart if (vrf->vrf_addr_hash == NULL) { 1776a27c376SRandall Stewart /* No memory */ 1786a27c376SRandall Stewart #ifdef INVARIANTS 17917205eccSRandall Stewart panic("No memory for VRF:%d", vrf_id); 18017205eccSRandall Stewart #endif 181207304d4SRandall Stewart SCTP_FREE(vrf, SCTP_M_VRF); 18217205eccSRandall Stewart return (NULL); 18317205eccSRandall Stewart } 1840053ed28SMichael Tuexen 18542551e99SRandall Stewart /* Add it to the hash table */ 186b3f1ea41SRandall Stewart bucket = &SCTP_BASE_INFO(sctp_vrfhash)[(vrf_id & SCTP_BASE_INFO(hashvrfmark))]; 18742551e99SRandall Stewart LIST_INSERT_HEAD(bucket, vrf, next_vrf); 188b3f1ea41SRandall Stewart atomic_add_int(&SCTP_BASE_INFO(ipi_count_vrfs), 1); 18942551e99SRandall Stewart return (vrf); 19042551e99SRandall Stewart } 19142551e99SRandall Stewart 19242551e99SRandall Stewart struct sctp_ifn * 193f4c93d24SRandall Stewart sctp_find_ifn(void *ifn, uint32_t ifn_index) 19442551e99SRandall Stewart { 19542551e99SRandall Stewart struct sctp_ifn *sctp_ifnp; 19617205eccSRandall Stewart struct sctp_ifnlist *hash_ifn_head; 19742551e99SRandall Stewart 19842551e99SRandall Stewart /* 199b1ce21c6SRebecca Cran * We assume the lock is held for the addresses if that's wrong 20042551e99SRandall Stewart * problems could occur :-) 20142551e99SRandall Stewart */ 2027f0ad227SMichael Tuexen SCTP_IPI_ADDR_LOCK_ASSERT(); 203b3f1ea41SRandall Stewart hash_ifn_head = &SCTP_BASE_INFO(vrf_ifn_hash)[(ifn_index & SCTP_BASE_INFO(vrf_ifn_hashmark))]; 20417205eccSRandall Stewart LIST_FOREACH(sctp_ifnp, hash_ifn_head, next_bucket) { 20542551e99SRandall Stewart if (sctp_ifnp->ifn_index == ifn_index) { 20642551e99SRandall Stewart return (sctp_ifnp); 20742551e99SRandall Stewart } 20842551e99SRandall Stewart if (sctp_ifnp->ifn_p && ifn && (sctp_ifnp->ifn_p == ifn)) { 20942551e99SRandall Stewart return (sctp_ifnp); 21042551e99SRandall Stewart } 21142551e99SRandall Stewart } 21242551e99SRandall Stewart return (NULL); 21342551e99SRandall Stewart } 21442551e99SRandall Stewart 21542551e99SRandall Stewart struct sctp_vrf * 21617205eccSRandall Stewart sctp_find_vrf(uint32_t vrf_id) 21742551e99SRandall Stewart { 21842551e99SRandall Stewart struct sctp_vrflist *bucket; 21942551e99SRandall Stewart struct sctp_vrf *liste; 22042551e99SRandall Stewart 221b3f1ea41SRandall Stewart bucket = &SCTP_BASE_INFO(sctp_vrfhash)[(vrf_id & SCTP_BASE_INFO(hashvrfmark))]; 22242551e99SRandall Stewart LIST_FOREACH(liste, bucket, next_vrf) { 22317205eccSRandall Stewart if (vrf_id == liste->vrf_id) { 22442551e99SRandall Stewart return (liste); 22542551e99SRandall Stewart } 22642551e99SRandall Stewart } 22742551e99SRandall Stewart return (NULL); 22842551e99SRandall Stewart } 22942551e99SRandall Stewart 23080fefe0aSRandall Stewart void 23180fefe0aSRandall Stewart sctp_free_vrf(struct sctp_vrf *vrf) 23280fefe0aSRandall Stewart { 233830d754dSRandall Stewart if (SCTP_DECREMENT_AND_CHECK_REFCOUNT(&vrf->refcount)) { 2347a846e9aSRandall Stewart if (vrf->vrf_addr_hash) { 2357a846e9aSRandall Stewart SCTP_HASH_FREE(vrf->vrf_addr_hash, vrf->vrf_addr_hashmark); 2367a846e9aSRandall Stewart vrf->vrf_addr_hash = NULL; 2377a846e9aSRandall Stewart } 23880fefe0aSRandall Stewart /* We zero'd the count */ 23980fefe0aSRandall Stewart LIST_REMOVE(vrf, next_vrf); 24080fefe0aSRandall Stewart SCTP_FREE(vrf, SCTP_M_VRF); 241b3f1ea41SRandall Stewart atomic_subtract_int(&SCTP_BASE_INFO(ipi_count_vrfs), 1); 24280fefe0aSRandall Stewart } 24380fefe0aSRandall Stewart } 244bff64a4dSRandall Stewart 24542551e99SRandall Stewart void 24617205eccSRandall Stewart sctp_free_ifn(struct sctp_ifn *sctp_ifnp) 24717205eccSRandall Stewart { 248830d754dSRandall Stewart if (SCTP_DECREMENT_AND_CHECK_REFCOUNT(&sctp_ifnp->refcount)) { 24917205eccSRandall Stewart /* We zero'd the count */ 25080fefe0aSRandall Stewart if (sctp_ifnp->vrf) { 25180fefe0aSRandall Stewart sctp_free_vrf(sctp_ifnp->vrf); 25280fefe0aSRandall Stewart } 253207304d4SRandall Stewart SCTP_FREE(sctp_ifnp, SCTP_M_IFN); 254b3f1ea41SRandall Stewart atomic_subtract_int(&SCTP_BASE_INFO(ipi_count_ifns), 1); 25517205eccSRandall Stewart } 25617205eccSRandall Stewart } 25717205eccSRandall Stewart 25817205eccSRandall Stewart void 259f4c93d24SRandall Stewart sctp_update_ifn_mtu(uint32_t ifn_index, uint32_t mtu) 26017205eccSRandall Stewart { 26117205eccSRandall Stewart struct sctp_ifn *sctp_ifnp; 26217205eccSRandall Stewart 263f4c93d24SRandall Stewart sctp_ifnp = sctp_find_ifn((void *)NULL, ifn_index); 26417205eccSRandall Stewart if (sctp_ifnp != NULL) { 26517205eccSRandall Stewart sctp_ifnp->ifn_mtu = mtu; 26617205eccSRandall Stewart } 26717205eccSRandall Stewart } 26817205eccSRandall Stewart 26917205eccSRandall Stewart void 27042551e99SRandall Stewart sctp_free_ifa(struct sctp_ifa *sctp_ifap) 27142551e99SRandall Stewart { 272830d754dSRandall Stewart if (SCTP_DECREMENT_AND_CHECK_REFCOUNT(&sctp_ifap->refcount)) { 27342551e99SRandall Stewart /* We zero'd the count */ 27480fefe0aSRandall Stewart if (sctp_ifap->ifn_p) { 27580fefe0aSRandall Stewart sctp_free_ifn(sctp_ifap->ifn_p); 27680fefe0aSRandall Stewart } 277207304d4SRandall Stewart SCTP_FREE(sctp_ifap, SCTP_M_IFA); 278b3f1ea41SRandall Stewart atomic_subtract_int(&SCTP_BASE_INFO(ipi_count_ifas), 1); 27942551e99SRandall Stewart } 28042551e99SRandall Stewart } 28142551e99SRandall Stewart 28217205eccSRandall Stewart static void 28317205eccSRandall Stewart sctp_delete_ifn(struct sctp_ifn *sctp_ifnp, int hold_addr_lock) 28417205eccSRandall Stewart { 28517205eccSRandall Stewart struct sctp_ifn *found; 28617205eccSRandall Stewart 287f4c93d24SRandall Stewart found = sctp_find_ifn(sctp_ifnp->ifn_p, sctp_ifnp->ifn_index); 28817205eccSRandall Stewart if (found == NULL) { 28917205eccSRandall Stewart /* Not in the list.. sorry */ 29017205eccSRandall Stewart return; 29117205eccSRandall Stewart } 2927f0ad227SMichael Tuexen if (hold_addr_lock == 0) { 293c99efcf6SRandall Stewart SCTP_IPI_ADDR_WLOCK(); 2947f0ad227SMichael Tuexen } else { 2957f0ad227SMichael Tuexen SCTP_IPI_ADDR_WLOCK_ASSERT(); 2967f0ad227SMichael Tuexen } 29717205eccSRandall Stewart LIST_REMOVE(sctp_ifnp, next_bucket); 29817205eccSRandall Stewart LIST_REMOVE(sctp_ifnp, next_ifn); 2997f0ad227SMichael Tuexen if (hold_addr_lock == 0) { 300c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 3017f0ad227SMichael Tuexen } 30217205eccSRandall Stewart /* Take away the reference, and possibly free it */ 30317205eccSRandall Stewart sctp_free_ifn(sctp_ifnp); 30417205eccSRandall Stewart } 30517205eccSRandall Stewart 306851b7298SRandall Stewart void 307baf3da66SRandall Stewart sctp_mark_ifa_addr_down(uint32_t vrf_id, struct sockaddr *addr, 308baf3da66SRandall Stewart const char *if_name, uint32_t ifn_index) 309851b7298SRandall Stewart { 310851b7298SRandall Stewart struct sctp_vrf *vrf; 311a1cb341bSMichael Tuexen struct sctp_ifa *sctp_ifap; 312851b7298SRandall Stewart 313c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 314851b7298SRandall Stewart vrf = sctp_find_vrf(vrf_id); 315851b7298SRandall Stewart if (vrf == NULL) { 316baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Can't find vrf_id 0x%x\n", vrf_id); 317851b7298SRandall Stewart goto out; 318851b7298SRandall Stewart } 319851b7298SRandall Stewart sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED); 320851b7298SRandall Stewart if (sctp_ifap == NULL) { 321baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Can't find sctp_ifap for address\n"); 322851b7298SRandall Stewart goto out; 323851b7298SRandall Stewart } 324851b7298SRandall Stewart if (sctp_ifap->ifn_p == NULL) { 325cd0a4ff6SPedro F. Giffuni SCTPDBG(SCTP_DEBUG_PCB4, "IFA has no IFN - can't mark unusable\n"); 326851b7298SRandall Stewart goto out; 327851b7298SRandall Stewart } 328851b7298SRandall Stewart if (if_name) { 32936311411SMichael Tuexen if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, SCTP_IFNAMSIZ) != 0) { 330baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "IFN %s of IFA not the same as %s\n", 33136311411SMichael Tuexen sctp_ifap->ifn_p->ifn_name, if_name); 332851b7298SRandall Stewart goto out; 333851b7298SRandall Stewart } 334851b7298SRandall Stewart } else { 335851b7298SRandall Stewart if (sctp_ifap->ifn_p->ifn_index != ifn_index) { 336baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "IFA owned by ifn_index:%d down command for ifn_index:%d - ignored\n", 337851b7298SRandall Stewart sctp_ifap->ifn_p->ifn_index, ifn_index); 338851b7298SRandall Stewart goto out; 339851b7298SRandall Stewart } 340851b7298SRandall Stewart } 341851b7298SRandall Stewart 342851b7298SRandall Stewart sctp_ifap->localifa_flags &= (~SCTP_ADDR_VALID); 343851b7298SRandall Stewart sctp_ifap->localifa_flags |= SCTP_ADDR_IFA_UNUSEABLE; 344851b7298SRandall Stewart out: 345c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 346851b7298SRandall Stewart } 347851b7298SRandall Stewart 348851b7298SRandall Stewart void 349baf3da66SRandall Stewart sctp_mark_ifa_addr_up(uint32_t vrf_id, struct sockaddr *addr, 350baf3da66SRandall Stewart const char *if_name, uint32_t ifn_index) 351851b7298SRandall Stewart { 352851b7298SRandall Stewart struct sctp_vrf *vrf; 353a1cb341bSMichael Tuexen struct sctp_ifa *sctp_ifap; 354851b7298SRandall Stewart 355c99efcf6SRandall Stewart SCTP_IPI_ADDR_RLOCK(); 356851b7298SRandall Stewart vrf = sctp_find_vrf(vrf_id); 357851b7298SRandall Stewart if (vrf == NULL) { 358baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Can't find vrf_id 0x%x\n", vrf_id); 359851b7298SRandall Stewart goto out; 360851b7298SRandall Stewart } 361851b7298SRandall Stewart sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED); 362851b7298SRandall Stewart if (sctp_ifap == NULL) { 363baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Can't find sctp_ifap for address\n"); 364851b7298SRandall Stewart goto out; 365851b7298SRandall Stewart } 366851b7298SRandall Stewart if (sctp_ifap->ifn_p == NULL) { 367cd0a4ff6SPedro F. Giffuni SCTPDBG(SCTP_DEBUG_PCB4, "IFA has no IFN - can't mark unusable\n"); 368851b7298SRandall Stewart goto out; 369851b7298SRandall Stewart } 370851b7298SRandall Stewart if (if_name) { 37136311411SMichael Tuexen if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, SCTP_IFNAMSIZ) != 0) { 372baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "IFN %s of IFA not the same as %s\n", 37336311411SMichael Tuexen sctp_ifap->ifn_p->ifn_name, if_name); 374851b7298SRandall Stewart goto out; 375851b7298SRandall Stewart } 376851b7298SRandall Stewart } else { 377851b7298SRandall Stewart if (sctp_ifap->ifn_p->ifn_index != ifn_index) { 378baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "IFA owned by ifn_index:%d down command for ifn_index:%d - ignored\n", 379851b7298SRandall Stewart sctp_ifap->ifn_p->ifn_index, ifn_index); 380851b7298SRandall Stewart goto out; 381851b7298SRandall Stewart } 382851b7298SRandall Stewart } 383851b7298SRandall Stewart 384851b7298SRandall Stewart sctp_ifap->localifa_flags &= (~SCTP_ADDR_IFA_UNUSEABLE); 385851b7298SRandall Stewart sctp_ifap->localifa_flags |= SCTP_ADDR_VALID; 386851b7298SRandall Stewart out: 387c99efcf6SRandall Stewart SCTP_IPI_ADDR_RUNLOCK(); 388851b7298SRandall Stewart } 389851b7298SRandall Stewart 390baf3da66SRandall Stewart /*- 391baf3da66SRandall Stewart * Add an ifa to an ifn. 392baf3da66SRandall Stewart * Register the interface as necessary. 393baf3da66SRandall Stewart * NOTE: ADDR write lock MUST be held. 394baf3da66SRandall Stewart */ 395baf3da66SRandall Stewart static void 396baf3da66SRandall Stewart sctp_add_ifa_to_ifn(struct sctp_ifn *sctp_ifnp, struct sctp_ifa *sctp_ifap) 397baf3da66SRandall Stewart { 398baf3da66SRandall Stewart int ifa_af; 399baf3da66SRandall Stewart 400baf3da66SRandall Stewart LIST_INSERT_HEAD(&sctp_ifnp->ifalist, sctp_ifap, next_ifa); 401baf3da66SRandall Stewart sctp_ifap->ifn_p = sctp_ifnp; 402baf3da66SRandall Stewart atomic_add_int(&sctp_ifap->ifn_p->refcount, 1); 403baf3da66SRandall Stewart /* update address counts */ 404baf3da66SRandall Stewart sctp_ifnp->ifa_count++; 405baf3da66SRandall Stewart ifa_af = sctp_ifap->address.sa.sa_family; 406e6194c2eSMichael Tuexen switch (ifa_af) { 407e6194c2eSMichael Tuexen #ifdef INET 408e6194c2eSMichael Tuexen case AF_INET: 409baf3da66SRandall Stewart sctp_ifnp->num_v4++; 410e6194c2eSMichael Tuexen break; 411e6194c2eSMichael Tuexen #endif 412e6194c2eSMichael Tuexen #ifdef INET6 413e6194c2eSMichael Tuexen case AF_INET6: 414baf3da66SRandall Stewart sctp_ifnp->num_v6++; 415e6194c2eSMichael Tuexen break; 416e6194c2eSMichael Tuexen #endif 417e6194c2eSMichael Tuexen default: 418e6194c2eSMichael Tuexen break; 419e6194c2eSMichael Tuexen } 420baf3da66SRandall Stewart if (sctp_ifnp->ifa_count == 1) { 421baf3da66SRandall Stewart /* register the new interface */ 422baf3da66SRandall Stewart sctp_ifnp->registered_af = ifa_af; 423baf3da66SRandall Stewart } 424baf3da66SRandall Stewart } 425baf3da66SRandall Stewart 426baf3da66SRandall Stewart /*- 427baf3da66SRandall Stewart * Remove an ifa from its ifn. 428baf3da66SRandall Stewart * If no more addresses exist, remove the ifn too. Otherwise, re-register 429baf3da66SRandall Stewart * the interface based on the remaining address families left. 430baf3da66SRandall Stewart * NOTE: ADDR write lock MUST be held. 431baf3da66SRandall Stewart */ 432baf3da66SRandall Stewart static void 433baf3da66SRandall Stewart sctp_remove_ifa_from_ifn(struct sctp_ifa *sctp_ifap) 434baf3da66SRandall Stewart { 435baf3da66SRandall Stewart LIST_REMOVE(sctp_ifap, next_ifa); 436baf3da66SRandall Stewart if (sctp_ifap->ifn_p) { 437baf3da66SRandall Stewart /* update address counts */ 438baf3da66SRandall Stewart sctp_ifap->ifn_p->ifa_count--; 439e6194c2eSMichael Tuexen switch (sctp_ifap->address.sa.sa_family) { 440e6194c2eSMichael Tuexen #ifdef INET 441e6194c2eSMichael Tuexen case AF_INET: 442baf3da66SRandall Stewart sctp_ifap->ifn_p->num_v4--; 443e6194c2eSMichael Tuexen break; 444e6194c2eSMichael Tuexen #endif 445e6194c2eSMichael Tuexen #ifdef INET6 446e6194c2eSMichael Tuexen case AF_INET6: 447e6194c2eSMichael Tuexen sctp_ifap->ifn_p->num_v6--; 448e6194c2eSMichael Tuexen break; 449e6194c2eSMichael Tuexen #endif 450e6194c2eSMichael Tuexen default: 451e6194c2eSMichael Tuexen break; 452e6194c2eSMichael Tuexen } 453baf3da66SRandall Stewart 45483fc1165SMichael Tuexen if (LIST_EMPTY(&sctp_ifap->ifn_p->ifalist)) { 455baf3da66SRandall Stewart /* remove the ifn, possibly freeing it */ 456baf3da66SRandall Stewart sctp_delete_ifn(sctp_ifap->ifn_p, SCTP_ADDR_LOCKED); 457baf3da66SRandall Stewart } else { 458baf3da66SRandall Stewart /* re-register address family type, if needed */ 459baf3da66SRandall Stewart if ((sctp_ifap->ifn_p->num_v6 == 0) && 460baf3da66SRandall Stewart (sctp_ifap->ifn_p->registered_af == AF_INET6)) { 461baf3da66SRandall Stewart sctp_ifap->ifn_p->registered_af = AF_INET; 462baf3da66SRandall Stewart } else if ((sctp_ifap->ifn_p->num_v4 == 0) && 463baf3da66SRandall Stewart (sctp_ifap->ifn_p->registered_af == AF_INET)) { 464baf3da66SRandall Stewart sctp_ifap->ifn_p->registered_af = AF_INET6; 465baf3da66SRandall Stewart } 466baf3da66SRandall Stewart /* free the ifn refcount */ 467baf3da66SRandall Stewart sctp_free_ifn(sctp_ifap->ifn_p); 468baf3da66SRandall Stewart } 469baf3da66SRandall Stewart sctp_ifap->ifn_p = NULL; 470baf3da66SRandall Stewart } 471baf3da66SRandall Stewart } 47217205eccSRandall Stewart 47342551e99SRandall Stewart struct sctp_ifa * 47417205eccSRandall Stewart sctp_add_addr_to_vrf(uint32_t vrf_id, void *ifn, uint32_t ifn_index, 475baf3da66SRandall Stewart uint32_t ifn_type, const char *if_name, void *ifa, 476baf3da66SRandall Stewart struct sockaddr *addr, uint32_t ifa_flags, 47717205eccSRandall Stewart int dynamic_add) 47842551e99SRandall Stewart { 47942551e99SRandall Stewart struct sctp_vrf *vrf; 4807f0ad227SMichael Tuexen struct sctp_ifn *sctp_ifnp, *new_sctp_ifnp; 4817f0ad227SMichael Tuexen struct sctp_ifa *sctp_ifap, *new_sctp_ifap; 48217205eccSRandall Stewart struct sctp_ifalist *hash_addr_head; 48317205eccSRandall Stewart struct sctp_ifnlist *hash_ifn_head; 4846a27c376SRandall Stewart uint32_t hash_of_addr; 485ad21a364SRandall Stewart int new_ifn_af = 0; 48642551e99SRandall Stewart 487baf3da66SRandall Stewart #ifdef SCTP_DEBUG 488baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "vrf_id 0x%x: adding address: ", vrf_id); 489baf3da66SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB4, addr); 490baf3da66SRandall Stewart #endif 4917f0ad227SMichael Tuexen SCTP_MALLOC(new_sctp_ifnp, struct sctp_ifn *, 4927f0ad227SMichael Tuexen sizeof(struct sctp_ifn), SCTP_M_IFN); 4937f0ad227SMichael Tuexen if (new_sctp_ifnp == NULL) { 4947f0ad227SMichael Tuexen #ifdef INVARIANTS 4957f0ad227SMichael Tuexen panic("No memory for IFN"); 4967f0ad227SMichael Tuexen #endif 4977f0ad227SMichael Tuexen return (NULL); 4987f0ad227SMichael Tuexen } 4997f0ad227SMichael Tuexen SCTP_MALLOC(new_sctp_ifap, struct sctp_ifa *, sizeof(struct sctp_ifa), SCTP_M_IFA); 5007f0ad227SMichael Tuexen if (new_sctp_ifap == NULL) { 5017f0ad227SMichael Tuexen #ifdef INVARIANTS 5027f0ad227SMichael Tuexen panic("No memory for IFA"); 5037f0ad227SMichael Tuexen #endif 5047f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifnp, SCTP_M_IFN); 5057f0ad227SMichael Tuexen return (NULL); 5067f0ad227SMichael Tuexen } 5077f0ad227SMichael Tuexen 508c99efcf6SRandall Stewart SCTP_IPI_ADDR_WLOCK(); 50980fefe0aSRandall Stewart sctp_ifnp = sctp_find_ifn(ifn, ifn_index); 51080fefe0aSRandall Stewart if (sctp_ifnp) { 51180fefe0aSRandall Stewart vrf = sctp_ifnp->vrf; 51280fefe0aSRandall Stewart } else { 51317205eccSRandall Stewart vrf = sctp_find_vrf(vrf_id); 51442551e99SRandall Stewart if (vrf == NULL) { 51517205eccSRandall Stewart vrf = sctp_allocate_vrf(vrf_id); 51642551e99SRandall Stewart if (vrf == NULL) { 517c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 5187f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifnp, SCTP_M_IFN); 5197f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifap, SCTP_M_IFA); 52042551e99SRandall Stewart return (NULL); 52142551e99SRandall Stewart } 52242551e99SRandall Stewart } 52380fefe0aSRandall Stewart } 52442551e99SRandall Stewart if (sctp_ifnp == NULL) { 52542551e99SRandall Stewart /* 52642551e99SRandall Stewart * build one and add it, can't hold lock until after malloc 52742551e99SRandall Stewart * done though. 52842551e99SRandall Stewart */ 5297f0ad227SMichael Tuexen sctp_ifnp = new_sctp_ifnp; 5307f0ad227SMichael Tuexen new_sctp_ifnp = NULL; 531eacc51c5SRandall Stewart memset(sctp_ifnp, 0, sizeof(struct sctp_ifn)); 53242551e99SRandall Stewart sctp_ifnp->ifn_index = ifn_index; 53342551e99SRandall Stewart sctp_ifnp->ifn_p = ifn; 53442551e99SRandall Stewart sctp_ifnp->ifn_type = ifn_type; 535b201f536SRandall Stewart sctp_ifnp->refcount = 0; 53642551e99SRandall Stewart sctp_ifnp->vrf = vrf; 53780fefe0aSRandall Stewart atomic_add_int(&vrf->refcount, 1); 538ad21a364SRandall Stewart sctp_ifnp->ifn_mtu = SCTP_GATHER_MTU_FROM_IFN_INFO(ifn, ifn_index, addr->sa_family); 53917205eccSRandall Stewart if (if_name != NULL) { 540999f86d6SMichael Tuexen SCTP_SNPRINTF(sctp_ifnp->ifn_name, SCTP_IFNAMSIZ, "%s", if_name); 54117205eccSRandall Stewart } else { 542999f86d6SMichael Tuexen SCTP_SNPRINTF(sctp_ifnp->ifn_name, SCTP_IFNAMSIZ, "%s", "unknown"); 54317205eccSRandall Stewart } 544b3f1ea41SRandall Stewart hash_ifn_head = &SCTP_BASE_INFO(vrf_ifn_hash)[(ifn_index & SCTP_BASE_INFO(vrf_ifn_hashmark))]; 54542551e99SRandall Stewart LIST_INIT(&sctp_ifnp->ifalist); 54617205eccSRandall Stewart LIST_INSERT_HEAD(hash_ifn_head, sctp_ifnp, next_bucket); 54742551e99SRandall Stewart LIST_INSERT_HEAD(&vrf->ifnlist, sctp_ifnp, next_ifn); 548b3f1ea41SRandall Stewart atomic_add_int(&SCTP_BASE_INFO(ipi_count_ifns), 1); 549ad21a364SRandall Stewart new_ifn_af = 1; 55042551e99SRandall Stewart } 551851b7298SRandall Stewart sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED); 55242551e99SRandall Stewart if (sctp_ifap) { 55342551e99SRandall Stewart /* Hmm, it already exists? */ 55442551e99SRandall Stewart if ((sctp_ifap->ifn_p) && 55542551e99SRandall Stewart (sctp_ifap->ifn_p->ifn_index == ifn_index)) { 556baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Using existing ifn %s (0x%x) for ifa %p\n", 557baf3da66SRandall Stewart sctp_ifap->ifn_p->ifn_name, ifn_index, 558dd294dceSMichael Tuexen (void *)sctp_ifap); 55980fefe0aSRandall Stewart if (new_ifn_af) { 56080fefe0aSRandall Stewart /* Remove the created one that we don't want */ 561baf3da66SRandall Stewart sctp_delete_ifn(sctp_ifnp, SCTP_ADDR_LOCKED); 56280fefe0aSRandall Stewart } 56342551e99SRandall Stewart if (sctp_ifap->localifa_flags & SCTP_BEING_DELETED) { 56442551e99SRandall Stewart /* easy to solve, just switch back to active */ 565baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Clearing deleted ifa flag\n"); 56642551e99SRandall Stewart sctp_ifap->localifa_flags = SCTP_ADDR_VALID; 56742551e99SRandall Stewart sctp_ifap->ifn_p = sctp_ifnp; 56880fefe0aSRandall Stewart atomic_add_int(&sctp_ifap->ifn_p->refcount, 1); 569baf3da66SRandall Stewart } 57042551e99SRandall Stewart exit_stage_left: 571c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 5727f0ad227SMichael Tuexen if (new_sctp_ifnp != NULL) { 5737f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifnp, SCTP_M_IFN); 5747f0ad227SMichael Tuexen } 5757f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifap, SCTP_M_IFA); 57642551e99SRandall Stewart return (sctp_ifap); 57742551e99SRandall Stewart } else { 57842551e99SRandall Stewart if (sctp_ifap->ifn_p) { 57942551e99SRandall Stewart /* 580034b88b0SMichael Tuexen * The last IFN gets the address, remove the 581034b88b0SMichael Tuexen * old one 58242551e99SRandall Stewart */ 583baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Moving ifa %p from %s (0x%x) to %s (0x%x)\n", 584dd294dceSMichael Tuexen (void *)sctp_ifap, sctp_ifap->ifn_p->ifn_name, 585baf3da66SRandall Stewart sctp_ifap->ifn_p->ifn_index, if_name, 586baf3da66SRandall Stewart ifn_index); 587baf3da66SRandall Stewart /* remove the address from the old ifn */ 588baf3da66SRandall Stewart sctp_remove_ifa_from_ifn(sctp_ifap); 589baf3da66SRandall Stewart /* move the address over to the new ifn */ 590baf3da66SRandall Stewart sctp_add_ifa_to_ifn(sctp_ifnp, sctp_ifap); 59142551e99SRandall Stewart goto exit_stage_left; 59242551e99SRandall Stewart } else { 59342551e99SRandall Stewart /* repair ifnp which was NULL ? */ 59442551e99SRandall Stewart sctp_ifap->localifa_flags = SCTP_ADDR_VALID; 595baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Repairing ifn %p for ifa %p\n", 596dd294dceSMichael Tuexen (void *)sctp_ifnp, (void *)sctp_ifap); 597baf3da66SRandall Stewart sctp_add_ifa_to_ifn(sctp_ifnp, sctp_ifap); 59842551e99SRandall Stewart } 59942551e99SRandall Stewart goto exit_stage_left; 60042551e99SRandall Stewart } 60142551e99SRandall Stewart } 6027f0ad227SMichael Tuexen sctp_ifap = new_sctp_ifap; 603132dea7dSRandall Stewart memset(sctp_ifap, 0, sizeof(struct sctp_ifa)); 60442551e99SRandall Stewart sctp_ifap->ifn_p = sctp_ifnp; 60542551e99SRandall Stewart atomic_add_int(&sctp_ifnp->refcount, 1); 60622a67197SRandall Stewart sctp_ifap->vrf_id = vrf_id; 60742551e99SRandall Stewart sctp_ifap->ifa = ifa; 60842551e99SRandall Stewart memcpy(&sctp_ifap->address, addr, addr->sa_len); 60942551e99SRandall Stewart sctp_ifap->localifa_flags = SCTP_ADDR_VALID | SCTP_ADDR_DEFER_USE; 61042551e99SRandall Stewart sctp_ifap->flags = ifa_flags; 61142551e99SRandall Stewart /* Set scope */ 6125e2c2d87SRandall Stewart switch (sctp_ifap->address.sa.sa_family) { 613e6194c2eSMichael Tuexen #ifdef INET 6145e2c2d87SRandall Stewart case AF_INET: 6155e2c2d87SRandall Stewart { 61642551e99SRandall Stewart struct sockaddr_in *sin; 61742551e99SRandall Stewart 61824aaac8dSMichael Tuexen sin = &sctp_ifap->address.sin; 61942551e99SRandall Stewart if (SCTP_IFN_IS_IFT_LOOP(sctp_ifap->ifn_p) || 62042551e99SRandall Stewart (IN4_ISLOOPBACK_ADDRESS(&sin->sin_addr))) { 62142551e99SRandall Stewart sctp_ifap->src_is_loop = 1; 62242551e99SRandall Stewart } 62342551e99SRandall Stewart if ((IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) { 62442551e99SRandall Stewart sctp_ifap->src_is_priv = 1; 62542551e99SRandall Stewart } 626ad21a364SRandall Stewart sctp_ifnp->num_v4++; 627ad21a364SRandall Stewart if (new_ifn_af) 628ad21a364SRandall Stewart new_ifn_af = AF_INET; 6295e2c2d87SRandall Stewart break; 6305e2c2d87SRandall Stewart } 631e6194c2eSMichael Tuexen #endif 6325e2c2d87SRandall Stewart #ifdef INET6 6335e2c2d87SRandall Stewart case AF_INET6: 6345e2c2d87SRandall Stewart { 63542551e99SRandall Stewart /* ok to use deprecated addresses? */ 63642551e99SRandall Stewart struct sockaddr_in6 *sin6; 63742551e99SRandall Stewart 63824aaac8dSMichael Tuexen sin6 = &sctp_ifap->address.sin6; 63942551e99SRandall Stewart if (SCTP_IFN_IS_IFT_LOOP(sctp_ifap->ifn_p) || 64042551e99SRandall Stewart (IN6_IS_ADDR_LOOPBACK(&sin6->sin6_addr))) { 64142551e99SRandall Stewart sctp_ifap->src_is_loop = 1; 64242551e99SRandall Stewart } 64342551e99SRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 64442551e99SRandall Stewart sctp_ifap->src_is_priv = 1; 64542551e99SRandall Stewart } 646ad21a364SRandall Stewart sctp_ifnp->num_v6++; 647ad21a364SRandall Stewart if (new_ifn_af) 648ad21a364SRandall Stewart new_ifn_af = AF_INET6; 6495e2c2d87SRandall Stewart break; 6505e2c2d87SRandall Stewart } 6515e2c2d87SRandall Stewart #endif 6525e2c2d87SRandall Stewart default: 653ad21a364SRandall Stewart new_ifn_af = 0; 6545e2c2d87SRandall Stewart break; 65542551e99SRandall Stewart } 6566a27c376SRandall Stewart hash_of_addr = sctp_get_ifa_hash_val(&sctp_ifap->address.sa); 6576a27c376SRandall Stewart 65842551e99SRandall Stewart if ((sctp_ifap->src_is_priv == 0) && 65942551e99SRandall Stewart (sctp_ifap->src_is_loop == 0)) { 66042551e99SRandall Stewart sctp_ifap->src_is_glob = 1; 66142551e99SRandall Stewart } 66217205eccSRandall Stewart hash_addr_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)]; 66317205eccSRandall Stewart LIST_INSERT_HEAD(hash_addr_head, sctp_ifap, next_bucket); 66442551e99SRandall Stewart sctp_ifap->refcount = 1; 66542551e99SRandall Stewart LIST_INSERT_HEAD(&sctp_ifnp->ifalist, sctp_ifap, next_ifa); 66642551e99SRandall Stewart sctp_ifnp->ifa_count++; 66742551e99SRandall Stewart vrf->total_ifa_count++; 668b3f1ea41SRandall Stewart atomic_add_int(&SCTP_BASE_INFO(ipi_count_ifas), 1); 669ad21a364SRandall Stewart if (new_ifn_af) { 670ad21a364SRandall Stewart sctp_ifnp->registered_af = new_ifn_af; 671ad21a364SRandall Stewart } 672c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 6737f0ad227SMichael Tuexen if (new_sctp_ifnp != NULL) { 6747f0ad227SMichael Tuexen SCTP_FREE(new_sctp_ifnp, SCTP_M_IFN); 6757f0ad227SMichael Tuexen } 6767f0ad227SMichael Tuexen 677d06c82f1SRandall Stewart if (dynamic_add) { 678d06c82f1SRandall Stewart /* 679d06c82f1SRandall Stewart * Bump up the refcount so that when the timer completes it 680d06c82f1SRandall Stewart * will drop back down. 681d06c82f1SRandall Stewart */ 682d06c82f1SRandall Stewart struct sctp_laddr *wi; 683d06c82f1SRandall Stewart 684d06c82f1SRandall Stewart atomic_add_int(&sctp_ifap->refcount, 1); 685b3f1ea41SRandall Stewart wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 686d06c82f1SRandall Stewart if (wi == NULL) { 687d06c82f1SRandall Stewart /* 688d06c82f1SRandall Stewart * Gak, what can we do? We have lost an address 689d06c82f1SRandall Stewart * change can you say HOSED? 690d06c82f1SRandall Stewart */ 691baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Lost an address change?\n"); 692d06c82f1SRandall Stewart /* Opps, must decrement the count */ 693baf3da66SRandall Stewart sctp_del_addr_from_vrf(vrf_id, addr, ifn_index, 694baf3da66SRandall Stewart if_name); 695d06c82f1SRandall Stewart return (NULL); 696d06c82f1SRandall Stewart } 697d06c82f1SRandall Stewart SCTP_INCR_LADDR_COUNT(); 6985ba7f91fSMichael Tuexen memset(wi, 0, sizeof(*wi)); 699d61a0ae0SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&wi->start_time); 700d06c82f1SRandall Stewart wi->ifa = sctp_ifap; 701d06c82f1SRandall Stewart wi->action = SCTP_ADD_IP_ADDRESS; 702f7517433SRandall Stewart 703f7517433SRandall Stewart SCTP_WQ_ADDR_LOCK(); 704b3f1ea41SRandall Stewart LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr); 705d06c82f1SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ, 706d06c82f1SRandall Stewart (struct sctp_inpcb *)NULL, 707d06c82f1SRandall Stewart (struct sctp_tcb *)NULL, 708d06c82f1SRandall Stewart (struct sctp_nets *)NULL); 7092c62ba73SMichael Tuexen SCTP_WQ_ADDR_UNLOCK(); 71017205eccSRandall Stewart } else { 71117205eccSRandall Stewart /* it's ready for use */ 71217205eccSRandall Stewart sctp_ifap->localifa_flags &= ~SCTP_ADDR_DEFER_USE; 713d06c82f1SRandall Stewart } 71442551e99SRandall Stewart return (sctp_ifap); 71542551e99SRandall Stewart } 71642551e99SRandall Stewart 717d06c82f1SRandall Stewart void 71817205eccSRandall Stewart sctp_del_addr_from_vrf(uint32_t vrf_id, struct sockaddr *addr, 719851b7298SRandall Stewart uint32_t ifn_index, const char *if_name) 72042551e99SRandall Stewart { 72142551e99SRandall Stewart struct sctp_vrf *vrf; 72242551e99SRandall Stewart struct sctp_ifa *sctp_ifap = NULL; 72342551e99SRandall Stewart 724c99efcf6SRandall Stewart SCTP_IPI_ADDR_WLOCK(); 72517205eccSRandall Stewart vrf = sctp_find_vrf(vrf_id); 72642551e99SRandall Stewart if (vrf == NULL) { 727baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Can't find vrf_id 0x%x\n", vrf_id); 72842551e99SRandall Stewart goto out_now; 72942551e99SRandall Stewart } 7300053ed28SMichael Tuexen 731baf3da66SRandall Stewart #ifdef SCTP_DEBUG 732baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "vrf_id 0x%x: deleting address:", vrf_id); 733baf3da66SRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB4, addr); 734baf3da66SRandall Stewart #endif 735851b7298SRandall Stewart sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED); 73642551e99SRandall Stewart if (sctp_ifap) { 737851b7298SRandall Stewart /* Validate the delete */ 738851b7298SRandall Stewart if (sctp_ifap->ifn_p) { 739851b7298SRandall Stewart int valid = 0; 740851b7298SRandall Stewart 741851b7298SRandall Stewart /*- 742851b7298SRandall Stewart * The name has priority over the ifn_index 7432cf33471SMichael Tuexen * if its given. 744851b7298SRandall Stewart */ 745851b7298SRandall Stewart if (if_name) { 746eb20220eSMichael Tuexen if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, SCTP_IFNAMSIZ) == 0) { 747eb20220eSMichael Tuexen /* They match its a correct delete */ 748851b7298SRandall Stewart valid = 1; 749851b7298SRandall Stewart } 750851b7298SRandall Stewart } 751851b7298SRandall Stewart if (!valid) { 752851b7298SRandall Stewart /* last ditch check ifn_index */ 753851b7298SRandall Stewart if (ifn_index == sctp_ifap->ifn_p->ifn_index) { 754851b7298SRandall Stewart valid = 1; 755851b7298SRandall Stewart } 756851b7298SRandall Stewart } 757851b7298SRandall Stewart if (!valid) { 758baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "ifn:%d ifname:%s does not match addresses\n", 759851b7298SRandall Stewart ifn_index, ((if_name == NULL) ? "NULL" : if_name)); 760baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "ifn:%d ifname:%s - ignoring delete\n", 761851b7298SRandall Stewart sctp_ifap->ifn_p->ifn_index, sctp_ifap->ifn_p->ifn_name); 762c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 763851b7298SRandall Stewart return; 764851b7298SRandall Stewart } 765851b7298SRandall Stewart } 766dd294dceSMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB4, "Deleting ifa %p\n", (void *)sctp_ifap); 76742551e99SRandall Stewart sctp_ifap->localifa_flags &= SCTP_ADDR_VALID; 7689ba5b6b7SMichael Tuexen /* 7699ba5b6b7SMichael Tuexen * We don't set the flag. This means that the structure will 7709ba5b6b7SMichael Tuexen * hang around in EP's that have bound specific to it until 7719ba5b6b7SMichael Tuexen * they close. This gives us TCP like behavior if someone 7729ba5b6b7SMichael Tuexen * removes an address (or for that matter adds it right 7739ba5b6b7SMichael Tuexen * back). 7749ba5b6b7SMichael Tuexen */ 7759ba5b6b7SMichael Tuexen /* sctp_ifap->localifa_flags |= SCTP_BEING_DELETED; */ 77642551e99SRandall Stewart vrf->total_ifa_count--; 7776a27c376SRandall Stewart LIST_REMOVE(sctp_ifap, next_bucket); 778baf3da66SRandall Stewart sctp_remove_ifa_from_ifn(sctp_ifap); 77917205eccSRandall Stewart } 78017205eccSRandall Stewart #ifdef SCTP_DEBUG 78117205eccSRandall Stewart else { 782baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Del Addr-ifn:%d Could not find address:", 78342551e99SRandall Stewart ifn_index); 784ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB1, addr); 78542551e99SRandall Stewart } 78617205eccSRandall Stewart #endif 787ad81507eSRandall Stewart 78842551e99SRandall Stewart out_now: 789c99efcf6SRandall Stewart SCTP_IPI_ADDR_WUNLOCK(); 790d06c82f1SRandall Stewart if (sctp_ifap) { 791d06c82f1SRandall Stewart struct sctp_laddr *wi; 792d06c82f1SRandall Stewart 793b3f1ea41SRandall Stewart wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 794d06c82f1SRandall Stewart if (wi == NULL) { 795d06c82f1SRandall Stewart /* 796d06c82f1SRandall Stewart * Gak, what can we do? We have lost an address 797d06c82f1SRandall Stewart * change can you say HOSED? 798d06c82f1SRandall Stewart */ 799baf3da66SRandall Stewart SCTPDBG(SCTP_DEBUG_PCB4, "Lost an address change?\n"); 800d06c82f1SRandall Stewart 801c99efcf6SRandall Stewart /* Oops, must decrement the count */ 802d06c82f1SRandall Stewart sctp_free_ifa(sctp_ifap); 803d06c82f1SRandall Stewart return; 804d06c82f1SRandall Stewart } 805d06c82f1SRandall Stewart SCTP_INCR_LADDR_COUNT(); 8065ba7f91fSMichael Tuexen memset(wi, 0, sizeof(*wi)); 807d61a0ae0SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&wi->start_time); 808d06c82f1SRandall Stewart wi->ifa = sctp_ifap; 809d06c82f1SRandall Stewart wi->action = SCTP_DEL_IP_ADDRESS; 810f7517433SRandall Stewart SCTP_WQ_ADDR_LOCK(); 811d06c82f1SRandall Stewart /* 812d06c82f1SRandall Stewart * Should this really be a tailq? As it is we will process 813d06c82f1SRandall Stewart * the newest first :-0 814d06c82f1SRandall Stewart */ 815b3f1ea41SRandall Stewart LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr); 816d06c82f1SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ, 817d06c82f1SRandall Stewart (struct sctp_inpcb *)NULL, 818d06c82f1SRandall Stewart (struct sctp_tcb *)NULL, 819d06c82f1SRandall Stewart (struct sctp_nets *)NULL); 8202c62ba73SMichael Tuexen SCTP_WQ_ADDR_UNLOCK(); 821d06c82f1SRandall Stewart } 822d06c82f1SRandall Stewart return; 82342551e99SRandall Stewart } 824f8829a4aSRandall Stewart 825749c49acSMichael Tuexen static int 826749c49acSMichael Tuexen sctp_does_stcb_own_this_addr(struct sctp_tcb *stcb, struct sockaddr *to) 827749c49acSMichael Tuexen { 828b54ddf22SMichael Tuexen int loopback_scope; 829b54ddf22SMichael Tuexen #if defined(INET) 830b54ddf22SMichael Tuexen int ipv4_local_scope, ipv4_addr_legal; 831b54ddf22SMichael Tuexen #endif 832b54ddf22SMichael Tuexen #if defined(INET6) 833b54ddf22SMichael Tuexen int local_scope, site_scope, ipv6_addr_legal; 834b54ddf22SMichael Tuexen #endif 835749c49acSMichael Tuexen struct sctp_vrf *vrf; 836749c49acSMichael Tuexen struct sctp_ifn *sctp_ifn; 837749c49acSMichael Tuexen struct sctp_ifa *sctp_ifa; 838749c49acSMichael Tuexen 839a1cb341bSMichael Tuexen loopback_scope = stcb->asoc.scope.loopback_scope; 840b54ddf22SMichael Tuexen #if defined(INET) 841a1cb341bSMichael Tuexen ipv4_local_scope = stcb->asoc.scope.ipv4_local_scope; 842b54ddf22SMichael Tuexen ipv4_addr_legal = stcb->asoc.scope.ipv4_addr_legal; 843b54ddf22SMichael Tuexen #endif 844b54ddf22SMichael Tuexen #if defined(INET6) 845a1cb341bSMichael Tuexen local_scope = stcb->asoc.scope.local_scope; 846a1cb341bSMichael Tuexen site_scope = stcb->asoc.scope.site_scope; 847a1cb341bSMichael Tuexen ipv6_addr_legal = stcb->asoc.scope.ipv6_addr_legal; 848b54ddf22SMichael Tuexen #endif 849749c49acSMichael Tuexen 850749c49acSMichael Tuexen SCTP_IPI_ADDR_RLOCK(); 851749c49acSMichael Tuexen vrf = sctp_find_vrf(stcb->asoc.vrf_id); 852749c49acSMichael Tuexen if (vrf == NULL) { 853749c49acSMichael Tuexen /* no vrf, no addresses */ 854749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 855749c49acSMichael Tuexen return (0); 856749c49acSMichael Tuexen } 8570053ed28SMichael Tuexen 858749c49acSMichael Tuexen if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 859749c49acSMichael Tuexen LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) { 860749c49acSMichael Tuexen if ((loopback_scope == 0) && 861749c49acSMichael Tuexen SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) { 862749c49acSMichael Tuexen continue; 863749c49acSMichael Tuexen } 864749c49acSMichael Tuexen LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) { 865ca85e948SMichael Tuexen if (sctp_is_addr_restricted(stcb, sctp_ifa) && 866ca85e948SMichael Tuexen (!sctp_is_addr_pending(stcb, sctp_ifa))) { 867ca85e948SMichael Tuexen /* 868ca85e948SMichael Tuexen * We allow pending addresses, where 869ca85e948SMichael Tuexen * we have sent an asconf-add to be 870ca85e948SMichael Tuexen * considered valid. 871ca85e948SMichael Tuexen */ 872749c49acSMichael Tuexen continue; 873ca85e948SMichael Tuexen } 874dcb3fc4cSMichael Tuexen if (sctp_ifa->address.sa.sa_family != to->sa_family) { 875dcb3fc4cSMichael Tuexen continue; 876dcb3fc4cSMichael Tuexen } 877749c49acSMichael Tuexen switch (sctp_ifa->address.sa.sa_family) { 878749c49acSMichael Tuexen #ifdef INET 879749c49acSMichael Tuexen case AF_INET: 880749c49acSMichael Tuexen if (ipv4_addr_legal) { 881749c49acSMichael Tuexen struct sockaddr_in *sin, 882749c49acSMichael Tuexen *rsin; 883749c49acSMichael Tuexen 884749c49acSMichael Tuexen sin = &sctp_ifa->address.sin; 885749c49acSMichael Tuexen rsin = (struct sockaddr_in *)to; 886749c49acSMichael Tuexen if ((ipv4_local_scope == 0) && 887749c49acSMichael Tuexen IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 888749c49acSMichael Tuexen continue; 889749c49acSMichael Tuexen } 8906ba22f19SMichael Tuexen if (prison_check_ip4(stcb->sctp_ep->ip_inp.inp.inp_cred, 8916ba22f19SMichael Tuexen &sin->sin_addr) != 0) { 8926ba22f19SMichael Tuexen continue; 8936ba22f19SMichael Tuexen } 894749c49acSMichael Tuexen if (sin->sin_addr.s_addr == rsin->sin_addr.s_addr) { 895749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 896749c49acSMichael Tuexen return (1); 897749c49acSMichael Tuexen } 898749c49acSMichael Tuexen } 899749c49acSMichael Tuexen break; 900749c49acSMichael Tuexen #endif 901749c49acSMichael Tuexen #ifdef INET6 902749c49acSMichael Tuexen case AF_INET6: 903749c49acSMichael Tuexen if (ipv6_addr_legal) { 904749c49acSMichael Tuexen struct sockaddr_in6 *sin6, 905749c49acSMichael Tuexen *rsin6; 906749c49acSMichael Tuexen 907749c49acSMichael Tuexen sin6 = &sctp_ifa->address.sin6; 908749c49acSMichael Tuexen rsin6 = (struct sockaddr_in6 *)to; 9096ba22f19SMichael Tuexen if (prison_check_ip6(stcb->sctp_ep->ip_inp.inp.inp_cred, 9106ba22f19SMichael Tuexen &sin6->sin6_addr) != 0) { 9116ba22f19SMichael Tuexen continue; 9126ba22f19SMichael Tuexen } 913749c49acSMichael Tuexen if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 914749c49acSMichael Tuexen if (local_scope == 0) 915749c49acSMichael Tuexen continue; 916749c49acSMichael Tuexen if (sin6->sin6_scope_id == 0) { 917749c49acSMichael Tuexen if (sa6_recoverscope(sin6) != 0) 918749c49acSMichael Tuexen continue; 919749c49acSMichael Tuexen } 920749c49acSMichael Tuexen } 921749c49acSMichael Tuexen if ((site_scope == 0) && 922749c49acSMichael Tuexen (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) { 923749c49acSMichael Tuexen continue; 924749c49acSMichael Tuexen } 925749c49acSMichael Tuexen if (SCTP6_ARE_ADDR_EQUAL(sin6, rsin6)) { 926749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 927749c49acSMichael Tuexen return (1); 928749c49acSMichael Tuexen } 929749c49acSMichael Tuexen } 930749c49acSMichael Tuexen break; 931749c49acSMichael Tuexen #endif 932749c49acSMichael Tuexen default: 933749c49acSMichael Tuexen /* TSNH */ 934749c49acSMichael Tuexen break; 935749c49acSMichael Tuexen } 936749c49acSMichael Tuexen } 937749c49acSMichael Tuexen } 938749c49acSMichael Tuexen } else { 939749c49acSMichael Tuexen struct sctp_laddr *laddr; 940749c49acSMichael Tuexen 941749c49acSMichael Tuexen LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list, sctp_nxt_addr) { 942f0d44a49SMichael Tuexen if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) { 943f0d44a49SMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "ifa being deleted\n"); 944f0d44a49SMichael Tuexen continue; 945f0d44a49SMichael Tuexen } 946ca85e948SMichael Tuexen if (sctp_is_addr_restricted(stcb, laddr->ifa) && 947ca85e948SMichael Tuexen (!sctp_is_addr_pending(stcb, laddr->ifa))) { 948ca85e948SMichael Tuexen /* 949ca85e948SMichael Tuexen * We allow pending addresses, where we have 950ca85e948SMichael Tuexen * sent an asconf-add to be considered 951ca85e948SMichael Tuexen * valid. 952ca85e948SMichael Tuexen */ 953749c49acSMichael Tuexen continue; 954749c49acSMichael Tuexen } 955749c49acSMichael Tuexen if (laddr->ifa->address.sa.sa_family != to->sa_family) { 956749c49acSMichael Tuexen continue; 957749c49acSMichael Tuexen } 958749c49acSMichael Tuexen switch (to->sa_family) { 959749c49acSMichael Tuexen #ifdef INET 960749c49acSMichael Tuexen case AF_INET: 961749c49acSMichael Tuexen { 962749c49acSMichael Tuexen struct sockaddr_in *sin, *rsin; 963749c49acSMichael Tuexen 96424aaac8dSMichael Tuexen sin = &laddr->ifa->address.sin; 965749c49acSMichael Tuexen rsin = (struct sockaddr_in *)to; 966749c49acSMichael Tuexen if (sin->sin_addr.s_addr == rsin->sin_addr.s_addr) { 967749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 968749c49acSMichael Tuexen return (1); 969749c49acSMichael Tuexen } 970749c49acSMichael Tuexen break; 971749c49acSMichael Tuexen } 972749c49acSMichael Tuexen #endif 973749c49acSMichael Tuexen #ifdef INET6 974749c49acSMichael Tuexen case AF_INET6: 975749c49acSMichael Tuexen { 976749c49acSMichael Tuexen struct sockaddr_in6 *sin6, *rsin6; 977749c49acSMichael Tuexen 97824aaac8dSMichael Tuexen sin6 = &laddr->ifa->address.sin6; 979749c49acSMichael Tuexen rsin6 = (struct sockaddr_in6 *)to; 980749c49acSMichael Tuexen if (SCTP6_ARE_ADDR_EQUAL(sin6, rsin6)) { 981749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 982749c49acSMichael Tuexen return (1); 983749c49acSMichael Tuexen } 984749c49acSMichael Tuexen break; 985749c49acSMichael Tuexen } 986749c49acSMichael Tuexen 987749c49acSMichael Tuexen #endif 988749c49acSMichael Tuexen default: 989749c49acSMichael Tuexen /* TSNH */ 990749c49acSMichael Tuexen break; 991749c49acSMichael Tuexen } 992749c49acSMichael Tuexen } 993749c49acSMichael Tuexen } 994749c49acSMichael Tuexen SCTP_IPI_ADDR_RUNLOCK(); 995749c49acSMichael Tuexen return (0); 996749c49acSMichael Tuexen } 997749c49acSMichael Tuexen 998f0d44a49SMichael Tuexen static struct sctp_tcb * 999f0d44a49SMichael Tuexen sctp_tcb_special_locate(struct sctp_inpcb **inp_p, struct sockaddr *from, 1000f0d44a49SMichael Tuexen struct sockaddr *to, struct sctp_nets **netp, uint32_t vrf_id) 1001f0d44a49SMichael Tuexen { 1002f0d44a49SMichael Tuexen /**** ASSUMES THE CALLER holds the INP_INFO_RLOCK */ 1003f0d44a49SMichael Tuexen /* 1004f0d44a49SMichael Tuexen * If we support the TCP model, then we must now dig through to see 1005f0d44a49SMichael Tuexen * if we can find our endpoint in the list of tcp ep's. 1006f0d44a49SMichael Tuexen */ 1007f0d44a49SMichael Tuexen uint16_t lport, rport; 1008f0d44a49SMichael Tuexen struct sctppcbhead *ephead; 1009f0d44a49SMichael Tuexen struct sctp_inpcb *inp; 1010f0d44a49SMichael Tuexen struct sctp_laddr *laddr; 1011f0d44a49SMichael Tuexen struct sctp_tcb *stcb; 1012f0d44a49SMichael Tuexen struct sctp_nets *net; 1013f0d44a49SMichael Tuexen 1014f0d44a49SMichael Tuexen if ((to == NULL) || (from == NULL)) { 1015f0d44a49SMichael Tuexen return (NULL); 1016f0d44a49SMichael Tuexen } 10170053ed28SMichael Tuexen 1018f0d44a49SMichael Tuexen switch (to->sa_family) { 1019f0d44a49SMichael Tuexen #ifdef INET 1020f0d44a49SMichael Tuexen case AF_INET: 1021f0d44a49SMichael Tuexen if (from->sa_family == AF_INET) { 1022f0d44a49SMichael Tuexen lport = ((struct sockaddr_in *)to)->sin_port; 1023f0d44a49SMichael Tuexen rport = ((struct sockaddr_in *)from)->sin_port; 1024f0d44a49SMichael Tuexen } else { 1025f0d44a49SMichael Tuexen return (NULL); 1026f0d44a49SMichael Tuexen } 1027f0d44a49SMichael Tuexen break; 1028f0d44a49SMichael Tuexen #endif 1029f0d44a49SMichael Tuexen #ifdef INET6 1030f0d44a49SMichael Tuexen case AF_INET6: 1031f0d44a49SMichael Tuexen if (from->sa_family == AF_INET6) { 1032f0d44a49SMichael Tuexen lport = ((struct sockaddr_in6 *)to)->sin6_port; 1033f0d44a49SMichael Tuexen rport = ((struct sockaddr_in6 *)from)->sin6_port; 1034f0d44a49SMichael Tuexen } else { 1035f0d44a49SMichael Tuexen return (NULL); 1036f0d44a49SMichael Tuexen } 1037f0d44a49SMichael Tuexen break; 1038f0d44a49SMichael Tuexen #endif 1039f0d44a49SMichael Tuexen default: 1040f0d44a49SMichael Tuexen return (NULL); 1041f0d44a49SMichael Tuexen } 1042f0d44a49SMichael Tuexen ephead = &SCTP_BASE_INFO(sctp_tcpephash)[SCTP_PCBHASH_ALLADDR((lport | rport), SCTP_BASE_INFO(hashtcpmark))]; 1043f0d44a49SMichael Tuexen /* 1044f0d44a49SMichael Tuexen * Ok now for each of the guys in this bucket we must look and see: 1045f0d44a49SMichael Tuexen * - Does the remote port match. - Does there single association's 1046f0d44a49SMichael Tuexen * addresses match this address (to). If so we update p_ep to point 1047f0d44a49SMichael Tuexen * to this ep and return the tcb from it. 1048f0d44a49SMichael Tuexen */ 1049f0d44a49SMichael Tuexen LIST_FOREACH(inp, ephead, sctp_hash) { 1050f0d44a49SMichael Tuexen SCTP_INP_RLOCK(inp); 1051f0d44a49SMichael Tuexen if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1052f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1053f0d44a49SMichael Tuexen continue; 1054f0d44a49SMichael Tuexen } 1055f0d44a49SMichael Tuexen if (lport != inp->sctp_lport) { 1056f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1057f0d44a49SMichael Tuexen continue; 1058f0d44a49SMichael Tuexen } 10596ba22f19SMichael Tuexen switch (to->sa_family) { 10606ba22f19SMichael Tuexen #ifdef INET 10616ba22f19SMichael Tuexen case AF_INET: 10626ba22f19SMichael Tuexen { 10636ba22f19SMichael Tuexen struct sockaddr_in *sin; 10646ba22f19SMichael Tuexen 10656ba22f19SMichael Tuexen sin = (struct sockaddr_in *)to; 10666ba22f19SMichael Tuexen if (prison_check_ip4(inp->ip_inp.inp.inp_cred, 10676ba22f19SMichael Tuexen &sin->sin_addr) != 0) { 10686ba22f19SMichael Tuexen SCTP_INP_RUNLOCK(inp); 10696ba22f19SMichael Tuexen continue; 10706ba22f19SMichael Tuexen } 10716ba22f19SMichael Tuexen break; 10726ba22f19SMichael Tuexen } 10736ba22f19SMichael Tuexen #endif 10746ba22f19SMichael Tuexen #ifdef INET6 10756ba22f19SMichael Tuexen case AF_INET6: 10766ba22f19SMichael Tuexen { 10776ba22f19SMichael Tuexen struct sockaddr_in6 *sin6; 10786ba22f19SMichael Tuexen 10796ba22f19SMichael Tuexen sin6 = (struct sockaddr_in6 *)to; 10806ba22f19SMichael Tuexen if (prison_check_ip6(inp->ip_inp.inp.inp_cred, 10816ba22f19SMichael Tuexen &sin6->sin6_addr) != 0) { 10826ba22f19SMichael Tuexen SCTP_INP_RUNLOCK(inp); 10836ba22f19SMichael Tuexen continue; 10846ba22f19SMichael Tuexen } 10856ba22f19SMichael Tuexen break; 10866ba22f19SMichael Tuexen } 10876ba22f19SMichael Tuexen #endif 10886ba22f19SMichael Tuexen default: 10896ba22f19SMichael Tuexen SCTP_INP_RUNLOCK(inp); 10906ba22f19SMichael Tuexen continue; 10916ba22f19SMichael Tuexen } 1092f0d44a49SMichael Tuexen if (inp->def_vrf_id != vrf_id) { 1093f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1094f0d44a49SMichael Tuexen continue; 1095f0d44a49SMichael Tuexen } 1096f0d44a49SMichael Tuexen /* check to see if the ep has one of the addresses */ 1097f0d44a49SMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) { 1098f0d44a49SMichael Tuexen /* We are NOT bound all, so look further */ 1099f0d44a49SMichael Tuexen int match = 0; 1100f0d44a49SMichael Tuexen 1101f0d44a49SMichael Tuexen LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) { 1102f0d44a49SMichael Tuexen if (laddr->ifa == NULL) { 11036e9c45e0SMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n", __func__); 1104f0d44a49SMichael Tuexen continue; 1105f0d44a49SMichael Tuexen } 1106f0d44a49SMichael Tuexen if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) { 1107f0d44a49SMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "ifa being deleted\n"); 1108f0d44a49SMichael Tuexen continue; 1109f0d44a49SMichael Tuexen } 1110f0d44a49SMichael Tuexen if (laddr->ifa->address.sa.sa_family == 1111f0d44a49SMichael Tuexen to->sa_family) { 1112f0d44a49SMichael Tuexen /* see if it matches */ 1113f0d44a49SMichael Tuexen #ifdef INET 1114f0d44a49SMichael Tuexen if (from->sa_family == AF_INET) { 1115f0d44a49SMichael Tuexen struct sockaddr_in *intf_addr, 1116f0d44a49SMichael Tuexen *sin; 1117f0d44a49SMichael Tuexen 1118f0d44a49SMichael Tuexen intf_addr = &laddr->ifa->address.sin; 1119f0d44a49SMichael Tuexen sin = (struct sockaddr_in *)to; 1120f0d44a49SMichael Tuexen if (sin->sin_addr.s_addr == 1121f0d44a49SMichael Tuexen intf_addr->sin_addr.s_addr) { 1122f0d44a49SMichael Tuexen match = 1; 1123f0d44a49SMichael Tuexen break; 1124f0d44a49SMichael Tuexen } 1125f0d44a49SMichael Tuexen } 1126f0d44a49SMichael Tuexen #endif 1127f0d44a49SMichael Tuexen #ifdef INET6 1128f0d44a49SMichael Tuexen if (from->sa_family == AF_INET6) { 1129f0d44a49SMichael Tuexen struct sockaddr_in6 *intf_addr6; 1130f0d44a49SMichael Tuexen struct sockaddr_in6 *sin6; 1131f0d44a49SMichael Tuexen 1132f0d44a49SMichael Tuexen sin6 = (struct sockaddr_in6 *) 1133f0d44a49SMichael Tuexen to; 1134f0d44a49SMichael Tuexen intf_addr6 = &laddr->ifa->address.sin6; 1135f0d44a49SMichael Tuexen 1136f0d44a49SMichael Tuexen if (SCTP6_ARE_ADDR_EQUAL(sin6, 1137f0d44a49SMichael Tuexen intf_addr6)) { 1138f0d44a49SMichael Tuexen match = 1; 1139f0d44a49SMichael Tuexen break; 1140f0d44a49SMichael Tuexen } 1141f0d44a49SMichael Tuexen } 1142f0d44a49SMichael Tuexen #endif 1143f0d44a49SMichael Tuexen } 1144f0d44a49SMichael Tuexen } 1145f0d44a49SMichael Tuexen if (match == 0) { 1146f0d44a49SMichael Tuexen /* This endpoint does not have this address */ 1147f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1148f0d44a49SMichael Tuexen continue; 1149f0d44a49SMichael Tuexen } 1150f0d44a49SMichael Tuexen } 1151f0d44a49SMichael Tuexen /* 1152f0d44a49SMichael Tuexen * Ok if we hit here the ep has the address, does it hold 1153f0d44a49SMichael Tuexen * the tcb? 1154f0d44a49SMichael Tuexen */ 1155f0d44a49SMichael Tuexen /* XXX: Why don't we TAILQ_FOREACH through sctp_asoc_list? */ 1156f0d44a49SMichael Tuexen stcb = LIST_FIRST(&inp->sctp_asoc_list); 1157f0d44a49SMichael Tuexen if (stcb == NULL) { 1158f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1159f0d44a49SMichael Tuexen continue; 1160f0d44a49SMichael Tuexen } 1161f0d44a49SMichael Tuexen SCTP_TCB_LOCK(stcb); 1162f0d44a49SMichael Tuexen if (!sctp_does_stcb_own_this_addr(stcb, to)) { 1163f0d44a49SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1164f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1165f0d44a49SMichael Tuexen continue; 1166f0d44a49SMichael Tuexen } 1167f0d44a49SMichael Tuexen if (stcb->rport != rport) { 1168f0d44a49SMichael Tuexen /* remote port does not match. */ 1169f0d44a49SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1170f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1171f0d44a49SMichael Tuexen continue; 1172f0d44a49SMichael Tuexen } 1173f0d44a49SMichael Tuexen if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 1174f0d44a49SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1175f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1176f0d44a49SMichael Tuexen continue; 1177f0d44a49SMichael Tuexen } 1178f0d44a49SMichael Tuexen if (!sctp_does_stcb_own_this_addr(stcb, to)) { 1179f0d44a49SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1180f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1181f0d44a49SMichael Tuexen continue; 1182f0d44a49SMichael Tuexen } 1183f0d44a49SMichael Tuexen /* Does this TCB have a matching address? */ 1184f0d44a49SMichael Tuexen TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 1185f0d44a49SMichael Tuexen if (net->ro._l_addr.sa.sa_family != from->sa_family) { 1186f0d44a49SMichael Tuexen /* not the same family, can't be a match */ 1187f0d44a49SMichael Tuexen continue; 1188f0d44a49SMichael Tuexen } 1189f0d44a49SMichael Tuexen switch (from->sa_family) { 1190f0d44a49SMichael Tuexen #ifdef INET 1191f0d44a49SMichael Tuexen case AF_INET: 1192f0d44a49SMichael Tuexen { 1193f0d44a49SMichael Tuexen struct sockaddr_in *sin, *rsin; 1194f0d44a49SMichael Tuexen 1195f0d44a49SMichael Tuexen sin = (struct sockaddr_in *)&net->ro._l_addr; 1196f0d44a49SMichael Tuexen rsin = (struct sockaddr_in *)from; 1197f0d44a49SMichael Tuexen if (sin->sin_addr.s_addr == 1198f0d44a49SMichael Tuexen rsin->sin_addr.s_addr) { 1199f0d44a49SMichael Tuexen /* found it */ 1200f0d44a49SMichael Tuexen if (netp != NULL) { 1201f0d44a49SMichael Tuexen *netp = net; 1202f0d44a49SMichael Tuexen } 1203b7b84c0eSMichael Tuexen /* 1204b7b84c0eSMichael Tuexen * Update the endpoint 1205b7b84c0eSMichael Tuexen * pointer 1206b7b84c0eSMichael Tuexen */ 1207f0d44a49SMichael Tuexen *inp_p = inp; 1208f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1209f0d44a49SMichael Tuexen return (stcb); 1210f0d44a49SMichael Tuexen } 1211f0d44a49SMichael Tuexen break; 1212f0d44a49SMichael Tuexen } 1213f0d44a49SMichael Tuexen #endif 1214f0d44a49SMichael Tuexen #ifdef INET6 1215f0d44a49SMichael Tuexen case AF_INET6: 1216f0d44a49SMichael Tuexen { 1217f0d44a49SMichael Tuexen struct sockaddr_in6 *sin6, *rsin6; 1218f0d44a49SMichael Tuexen 1219f0d44a49SMichael Tuexen sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1220f0d44a49SMichael Tuexen rsin6 = (struct sockaddr_in6 *)from; 1221f0d44a49SMichael Tuexen if (SCTP6_ARE_ADDR_EQUAL(sin6, 1222f0d44a49SMichael Tuexen rsin6)) { 1223f0d44a49SMichael Tuexen /* found it */ 1224f0d44a49SMichael Tuexen if (netp != NULL) { 1225f0d44a49SMichael Tuexen *netp = net; 1226f0d44a49SMichael Tuexen } 1227b7b84c0eSMichael Tuexen /* 1228b7b84c0eSMichael Tuexen * Update the endpoint 1229b7b84c0eSMichael Tuexen * pointer 1230b7b84c0eSMichael Tuexen */ 1231f0d44a49SMichael Tuexen *inp_p = inp; 1232f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1233f0d44a49SMichael Tuexen return (stcb); 1234f0d44a49SMichael Tuexen } 1235f0d44a49SMichael Tuexen break; 1236f0d44a49SMichael Tuexen } 1237f0d44a49SMichael Tuexen #endif 1238f0d44a49SMichael Tuexen default: 1239f0d44a49SMichael Tuexen /* TSNH */ 1240f0d44a49SMichael Tuexen break; 1241f0d44a49SMichael Tuexen } 1242f0d44a49SMichael Tuexen } 1243f0d44a49SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1244f0d44a49SMichael Tuexen SCTP_INP_RUNLOCK(inp); 1245f0d44a49SMichael Tuexen } 1246f0d44a49SMichael Tuexen return (NULL); 1247f0d44a49SMichael Tuexen } 1248f0d44a49SMichael Tuexen 1249f8829a4aSRandall Stewart /* 1250f8829a4aSRandall Stewart * rules for use 1251f8829a4aSRandall Stewart * 1252f8829a4aSRandall Stewart * 1) If I return a NULL you must decrement any INP ref cnt. 2) If I find an 1253f8829a4aSRandall Stewart * stcb, both will be locked (locked_tcb and stcb) but decrement will be done 1254f8829a4aSRandall Stewart * (if locked == NULL). 3) Decrement happens on return ONLY if locked == 1255f8829a4aSRandall Stewart * NULL. 1256f8829a4aSRandall Stewart */ 1257f8829a4aSRandall Stewart 1258f8829a4aSRandall Stewart struct sctp_tcb * 1259f8829a4aSRandall Stewart sctp_findassociation_ep_addr(struct sctp_inpcb **inp_p, struct sockaddr *remote, 1260f8829a4aSRandall Stewart struct sctp_nets **netp, struct sockaddr *local, struct sctp_tcb *locked_tcb) 1261f8829a4aSRandall Stewart { 1262f8829a4aSRandall Stewart struct sctpasochead *head; 1263f8829a4aSRandall Stewart struct sctp_inpcb *inp; 1264bff64a4dSRandall Stewart struct sctp_tcb *stcb = NULL; 1265f8829a4aSRandall Stewart struct sctp_nets *net; 1266f8829a4aSRandall Stewart uint16_t rport; 1267f8829a4aSRandall Stewart 1268f8829a4aSRandall Stewart inp = *inp_p; 1269b5e0cd79SMichael Tuexen switch (remote->sa_family) { 1270b5e0cd79SMichael Tuexen #ifdef INET 1271b5e0cd79SMichael Tuexen case AF_INET: 1272f8829a4aSRandall Stewart rport = (((struct sockaddr_in *)remote)->sin_port); 1273b5e0cd79SMichael Tuexen break; 1274b5e0cd79SMichael Tuexen #endif 1275b5e0cd79SMichael Tuexen #ifdef INET6 1276b5e0cd79SMichael Tuexen case AF_INET6: 1277f8829a4aSRandall Stewart rport = (((struct sockaddr_in6 *)remote)->sin6_port); 1278b5e0cd79SMichael Tuexen break; 1279b5e0cd79SMichael Tuexen #endif 1280b5e0cd79SMichael Tuexen default: 1281f8829a4aSRandall Stewart return (NULL); 1282f8829a4aSRandall Stewart } 1283f8829a4aSRandall Stewart if (locked_tcb) { 1284f8829a4aSRandall Stewart /* 1285f8829a4aSRandall Stewart * UN-lock so we can do proper locking here this occurs when 1286f8829a4aSRandall Stewart * called from load_addresses_from_init. 1287f8829a4aSRandall Stewart */ 1288c4739e2fSRandall Stewart atomic_add_int(&locked_tcb->asoc.refcnt, 1); 1289f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(locked_tcb); 1290f8829a4aSRandall Stewart } 1291f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 1292e3976bb8SMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) || 1293e3976bb8SMichael Tuexen (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) { 1294bff64a4dSRandall Stewart /*- 1295f8829a4aSRandall Stewart * Now either this guy is our listener or it's the 1296f8829a4aSRandall Stewart * connector. If it is the one that issued the connect, then 1297f8829a4aSRandall Stewart * it's only chance is to be the first TCB in the list. If 1298f8829a4aSRandall Stewart * it is the acceptor, then do the special_lookup to hash 1299f8829a4aSRandall Stewart * and find the real inp. 1300f8829a4aSRandall Stewart */ 13015d08768aSMichael Tuexen if ((inp->sctp_socket) && SCTP_IS_LISTENING(inp)) { 1302f8829a4aSRandall Stewart /* to is peer addr, from is my addr */ 1303f8829a4aSRandall Stewart stcb = sctp_tcb_special_locate(inp_p, remote, local, 1304bff64a4dSRandall Stewart netp, inp->def_vrf_id); 1305f8829a4aSRandall Stewart if ((stcb != NULL) && (locked_tcb == NULL)) { 1306f8829a4aSRandall Stewart /* we have a locked tcb, lower refcount */ 1307f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 1308f8829a4aSRandall Stewart } 1309f8829a4aSRandall Stewart if ((locked_tcb != NULL) && (locked_tcb != stcb)) { 1310f8829a4aSRandall Stewart SCTP_INP_RLOCK(locked_tcb->sctp_ep); 1311f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1312c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1313f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(locked_tcb->sctp_ep); 1314f8829a4aSRandall Stewart } 1315f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1316f8829a4aSRandall Stewart return (stcb); 1317f8829a4aSRandall Stewart } else { 1318f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 1319f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1320f8829a4aSRandall Stewart goto null_return; 1321f8829a4aSRandall Stewart } 1322f8829a4aSRandall Stewart stcb = LIST_FIRST(&inp->sctp_asoc_list); 1323f8829a4aSRandall Stewart if (stcb == NULL) { 1324f8829a4aSRandall Stewart goto null_return; 1325f8829a4aSRandall Stewart } 1326f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 1327fb8fb8f8SRandall Stewart 1328f8829a4aSRandall Stewart if (stcb->rport != rport) { 1329f8829a4aSRandall Stewart /* remote port does not match. */ 1330f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 1331f8829a4aSRandall Stewart goto null_return; 1332f8829a4aSRandall Stewart } 1333fb8fb8f8SRandall Stewart if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 1334fb8fb8f8SRandall Stewart SCTP_TCB_UNLOCK(stcb); 1335fb8fb8f8SRandall Stewart goto null_return; 1336fb8fb8f8SRandall Stewart } 1337370d524fSMichael Tuexen if (local && !sctp_does_stcb_own_this_addr(stcb, local)) { 1338749c49acSMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1339749c49acSMichael Tuexen goto null_return; 1340749c49acSMichael Tuexen } 1341f8829a4aSRandall Stewart /* now look at the list of remote addresses */ 1342f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 1343a5d547adSRandall Stewart #ifdef INVARIANTS 1344f8829a4aSRandall Stewart if (net == (TAILQ_NEXT(net, sctp_next))) { 1345f8829a4aSRandall Stewart panic("Corrupt net list"); 1346f8829a4aSRandall Stewart } 1347f8829a4aSRandall Stewart #endif 1348f8829a4aSRandall Stewart if (net->ro._l_addr.sa.sa_family != 1349f8829a4aSRandall Stewart remote->sa_family) { 1350f8829a4aSRandall Stewart /* not the same family */ 1351f8829a4aSRandall Stewart continue; 1352f8829a4aSRandall Stewart } 13535e2c2d87SRandall Stewart switch (remote->sa_family) { 1354e6194c2eSMichael Tuexen #ifdef INET 13555e2c2d87SRandall Stewart case AF_INET: 13565e2c2d87SRandall Stewart { 13575e2c2d87SRandall Stewart struct sockaddr_in *sin, 13585e2c2d87SRandall Stewart *rsin; 1359f8829a4aSRandall Stewart 1360f8829a4aSRandall Stewart sin = (struct sockaddr_in *) 1361f8829a4aSRandall Stewart &net->ro._l_addr; 1362f8829a4aSRandall Stewart rsin = (struct sockaddr_in *)remote; 1363f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 1364f8829a4aSRandall Stewart rsin->sin_addr.s_addr) { 1365f8829a4aSRandall Stewart /* found it */ 1366f8829a4aSRandall Stewart if (netp != NULL) { 1367f8829a4aSRandall Stewart *netp = net; 1368f8829a4aSRandall Stewart } 1369f8829a4aSRandall Stewart if (locked_tcb == NULL) { 1370f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 1371f8829a4aSRandall Stewart } else if (locked_tcb != stcb) { 1372f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1373f8829a4aSRandall Stewart } 1374c4739e2fSRandall Stewart if (locked_tcb) { 1375c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1376c4739e2fSRandall Stewart } 13770053ed28SMichael Tuexen 1378f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 1379f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1380f8829a4aSRandall Stewart return (stcb); 1381f8829a4aSRandall Stewart } 13825e2c2d87SRandall Stewart break; 13835e2c2d87SRandall Stewart } 1384e6194c2eSMichael Tuexen #endif 13855e2c2d87SRandall Stewart #ifdef INET6 13865e2c2d87SRandall Stewart case AF_INET6: 13875e2c2d87SRandall Stewart { 13885e2c2d87SRandall Stewart struct sockaddr_in6 *sin6, 13895e2c2d87SRandall Stewart *rsin6; 1390f8829a4aSRandall Stewart 1391f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1392f8829a4aSRandall Stewart rsin6 = (struct sockaddr_in6 *)remote; 1393c54a18d2SRandall Stewart if (SCTP6_ARE_ADDR_EQUAL(sin6, 1394c54a18d2SRandall Stewart rsin6)) { 1395f8829a4aSRandall Stewart /* found it */ 1396f8829a4aSRandall Stewart if (netp != NULL) { 1397f8829a4aSRandall Stewart *netp = net; 1398f8829a4aSRandall Stewart } 1399f8829a4aSRandall Stewart if (locked_tcb == NULL) { 1400f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 1401f8829a4aSRandall Stewart } else if (locked_tcb != stcb) { 1402f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1403f8829a4aSRandall Stewart } 1404c4739e2fSRandall Stewart if (locked_tcb) { 1405c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1406c4739e2fSRandall Stewart } 1407f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 1408f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1409f8829a4aSRandall Stewart return (stcb); 1410f8829a4aSRandall Stewart } 14115e2c2d87SRandall Stewart break; 14125e2c2d87SRandall Stewart } 14135e2c2d87SRandall Stewart #endif 14145e2c2d87SRandall Stewart default: 14155e2c2d87SRandall Stewart /* TSNH */ 14165e2c2d87SRandall Stewart break; 1417f8829a4aSRandall Stewart } 1418f8829a4aSRandall Stewart } 1419f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 1420f8829a4aSRandall Stewart } 1421f8829a4aSRandall Stewart } else { 1422f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 1423f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1424f8829a4aSRandall Stewart goto null_return; 1425f8829a4aSRandall Stewart } 1426f8829a4aSRandall Stewart head = &inp->sctp_tcbhash[SCTP_PCBHASH_ALLADDR(rport, 1427f8829a4aSRandall Stewart inp->sctp_hashmark)]; 1428f8829a4aSRandall Stewart LIST_FOREACH(stcb, head, sctp_tcbhash) { 1429f8829a4aSRandall Stewart if (stcb->rport != rport) { 1430f8829a4aSRandall Stewart /* remote port does not match */ 1431f8829a4aSRandall Stewart continue; 1432f8829a4aSRandall Stewart } 1433f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 1434fb8fb8f8SRandall Stewart if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 1435fb8fb8f8SRandall Stewart SCTP_TCB_UNLOCK(stcb); 1436fb8fb8f8SRandall Stewart continue; 1437fb8fb8f8SRandall Stewart } 1438370d524fSMichael Tuexen if (local && !sctp_does_stcb_own_this_addr(stcb, local)) { 1439749c49acSMichael Tuexen SCTP_TCB_UNLOCK(stcb); 1440749c49acSMichael Tuexen continue; 1441749c49acSMichael Tuexen } 1442fb8fb8f8SRandall Stewart /* now look at the list of remote addresses */ 1443f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 1444a5d547adSRandall Stewart #ifdef INVARIANTS 1445f8829a4aSRandall Stewart if (net == (TAILQ_NEXT(net, sctp_next))) { 1446f8829a4aSRandall Stewart panic("Corrupt net list"); 1447f8829a4aSRandall Stewart } 1448f8829a4aSRandall Stewart #endif 1449f8829a4aSRandall Stewart if (net->ro._l_addr.sa.sa_family != 1450f8829a4aSRandall Stewart remote->sa_family) { 1451f8829a4aSRandall Stewart /* not the same family */ 1452f8829a4aSRandall Stewart continue; 1453f8829a4aSRandall Stewart } 14545e2c2d87SRandall Stewart switch (remote->sa_family) { 1455e6194c2eSMichael Tuexen #ifdef INET 14565e2c2d87SRandall Stewart case AF_INET: 14575e2c2d87SRandall Stewart { 14585e2c2d87SRandall Stewart struct sockaddr_in *sin, 14595e2c2d87SRandall Stewart *rsin; 1460f8829a4aSRandall Stewart 1461f8829a4aSRandall Stewart sin = (struct sockaddr_in *) 1462f8829a4aSRandall Stewart &net->ro._l_addr; 1463f8829a4aSRandall Stewart rsin = (struct sockaddr_in *)remote; 1464f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 1465f8829a4aSRandall Stewart rsin->sin_addr.s_addr) { 1466f8829a4aSRandall Stewart /* found it */ 1467f8829a4aSRandall Stewart if (netp != NULL) { 1468f8829a4aSRandall Stewart *netp = net; 1469f8829a4aSRandall Stewart } 1470f8829a4aSRandall Stewart if (locked_tcb == NULL) { 1471f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 1472f8829a4aSRandall Stewart } else if (locked_tcb != stcb) { 1473f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1474f8829a4aSRandall Stewart } 1475c4739e2fSRandall Stewart if (locked_tcb) { 1476c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1477c4739e2fSRandall Stewart } 1478f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 1479f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1480f8829a4aSRandall Stewart return (stcb); 1481f8829a4aSRandall Stewart } 14825e2c2d87SRandall Stewart break; 14835e2c2d87SRandall Stewart } 1484e6194c2eSMichael Tuexen #endif 14855e2c2d87SRandall Stewart #ifdef INET6 14865e2c2d87SRandall Stewart case AF_INET6: 14875e2c2d87SRandall Stewart { 14885e2c2d87SRandall Stewart struct sockaddr_in6 *sin6, 14895e2c2d87SRandall Stewart *rsin6; 1490f8829a4aSRandall Stewart 1491f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *) 1492f8829a4aSRandall Stewart &net->ro._l_addr; 1493f8829a4aSRandall Stewart rsin6 = (struct sockaddr_in6 *)remote; 1494c54a18d2SRandall Stewart if (SCTP6_ARE_ADDR_EQUAL(sin6, 1495c54a18d2SRandall Stewart rsin6)) { 1496f8829a4aSRandall Stewart /* found it */ 1497f8829a4aSRandall Stewart if (netp != NULL) { 1498f8829a4aSRandall Stewart *netp = net; 1499f8829a4aSRandall Stewart } 1500f8829a4aSRandall Stewart if (locked_tcb == NULL) { 1501f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 1502f8829a4aSRandall Stewart } else if (locked_tcb != stcb) { 1503f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1504f8829a4aSRandall Stewart } 1505c4739e2fSRandall Stewart if (locked_tcb) { 1506c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1507c4739e2fSRandall Stewart } 1508f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 1509f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1510f8829a4aSRandall Stewart return (stcb); 1511f8829a4aSRandall Stewart } 15125e2c2d87SRandall Stewart break; 15135e2c2d87SRandall Stewart } 15145e2c2d87SRandall Stewart #endif 15155e2c2d87SRandall Stewart default: 15165e2c2d87SRandall Stewart /* TSNH */ 15175e2c2d87SRandall Stewart break; 1518f8829a4aSRandall Stewart } 1519f8829a4aSRandall Stewart } 1520f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 1521f8829a4aSRandall Stewart } 1522f8829a4aSRandall Stewart } 1523f8829a4aSRandall Stewart null_return: 1524f8829a4aSRandall Stewart /* clean up for returning null */ 1525f8829a4aSRandall Stewart if (locked_tcb) { 1526f8829a4aSRandall Stewart SCTP_TCB_LOCK(locked_tcb); 1527c4739e2fSRandall Stewart atomic_subtract_int(&locked_tcb->asoc.refcnt, 1); 1528f8829a4aSRandall Stewart } 1529f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 1530f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1531f8829a4aSRandall Stewart /* not found */ 1532f8829a4aSRandall Stewart return (NULL); 1533f8829a4aSRandall Stewart } 1534f8829a4aSRandall Stewart 1535f8829a4aSRandall Stewart /* 1536f8829a4aSRandall Stewart * Find an association for a specific endpoint using the association id given 1537f8829a4aSRandall Stewart * out in the COMM_UP notification 1538f8829a4aSRandall Stewart */ 1539f8829a4aSRandall Stewart struct sctp_tcb * 1540830d754dSRandall Stewart sctp_findasoc_ep_asocid_locked(struct sctp_inpcb *inp, sctp_assoc_t asoc_id, int want_lock) 1541f8829a4aSRandall Stewart { 1542f8829a4aSRandall Stewart /* 1543f8829a4aSRandall Stewart * Use my the assoc_id to find a endpoint 1544f8829a4aSRandall Stewart */ 1545f8829a4aSRandall Stewart struct sctpasochead *head; 1546f8829a4aSRandall Stewart struct sctp_tcb *stcb; 1547f8829a4aSRandall Stewart uint32_t id; 1548f8829a4aSRandall Stewart 1549830d754dSRandall Stewart if (inp == NULL) { 1550830d754dSRandall Stewart SCTP_PRINTF("TSNH ep_associd\n"); 1551f8829a4aSRandall Stewart return (NULL); 1552f8829a4aSRandall Stewart } 1553830d754dSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1554830d754dSRandall Stewart SCTP_PRINTF("TSNH ep_associd0\n"); 1555830d754dSRandall Stewart return (NULL); 1556830d754dSRandall Stewart } 1557f8829a4aSRandall Stewart id = (uint32_t)asoc_id; 1558830d754dSRandall Stewart head = &inp->sctp_asocidhash[SCTP_PCBHASH_ASOC(id, inp->hashasocidmark)]; 1559f8829a4aSRandall Stewart if (head == NULL) { 1560f8829a4aSRandall Stewart /* invalid id TSNH */ 1561830d754dSRandall Stewart SCTP_PRINTF("TSNH ep_associd1\n"); 1562f8829a4aSRandall Stewart return (NULL); 1563f8829a4aSRandall Stewart } 1564830d754dSRandall Stewart LIST_FOREACH(stcb, head, sctp_tcbasocidhash) { 1565f8829a4aSRandall Stewart if (stcb->asoc.assoc_id == id) { 1566f8829a4aSRandall Stewart if (inp != stcb->sctp_ep) { 1567f8829a4aSRandall Stewart /* 1568f8829a4aSRandall Stewart * some other guy has the same id active (id 1569f8829a4aSRandall Stewart * collision ??). 1570f8829a4aSRandall Stewart */ 1571830d754dSRandall Stewart SCTP_PRINTF("TSNH ep_associd2\n"); 1572f8829a4aSRandall Stewart continue; 1573f8829a4aSRandall Stewart } 1574fb8fb8f8SRandall Stewart if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 1575fb8fb8f8SRandall Stewart continue; 1576fb8fb8f8SRandall Stewart } 1577f8829a4aSRandall Stewart if (want_lock) { 1578f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 1579f8829a4aSRandall Stewart } 1580f8829a4aSRandall Stewart return (stcb); 1581f8829a4aSRandall Stewart } 1582f8829a4aSRandall Stewart } 1583f8829a4aSRandall Stewart return (NULL); 1584f8829a4aSRandall Stewart } 1585830d754dSRandall Stewart 1586830d754dSRandall Stewart struct sctp_tcb * 1587830d754dSRandall Stewart sctp_findassociation_ep_asocid(struct sctp_inpcb *inp, sctp_assoc_t asoc_id, int want_lock) 1588830d754dSRandall Stewart { 1589830d754dSRandall Stewart struct sctp_tcb *stcb; 1590830d754dSRandall Stewart 1591830d754dSRandall Stewart SCTP_INP_RLOCK(inp); 1592830d754dSRandall Stewart stcb = sctp_findasoc_ep_asocid_locked(inp, asoc_id, want_lock); 1593830d754dSRandall Stewart SCTP_INP_RUNLOCK(inp); 1594f8829a4aSRandall Stewart return (stcb); 1595f8829a4aSRandall Stewart } 1596f8829a4aSRandall Stewart 1597a1cb341bSMichael Tuexen /* 1598a1cb341bSMichael Tuexen * Endpoint probe expects that the INP_INFO is locked. 1599a1cb341bSMichael Tuexen */ 1600f8829a4aSRandall Stewart static struct sctp_inpcb * 1601f8829a4aSRandall Stewart sctp_endpoint_probe(struct sockaddr *nam, struct sctppcbhead *head, 160242551e99SRandall Stewart uint16_t lport, uint32_t vrf_id) 1603f8829a4aSRandall Stewart { 1604f8829a4aSRandall Stewart struct sctp_inpcb *inp; 1605f8829a4aSRandall Stewart struct sctp_laddr *laddr; 1606e6194c2eSMichael Tuexen #ifdef INET 1607e6194c2eSMichael Tuexen struct sockaddr_in *sin; 1608e6194c2eSMichael Tuexen #endif 16095e2c2d87SRandall Stewart #ifdef INET6 1610e6194c2eSMichael Tuexen struct sockaddr_in6 *sin6; 16115e2c2d87SRandall Stewart struct sockaddr_in6 *intf_addr6; 16125e2c2d87SRandall Stewart #endif 161342551e99SRandall Stewart int fnd; 1614f8829a4aSRandall Stewart 1615e6194c2eSMichael Tuexen #ifdef INET 1616f8829a4aSRandall Stewart sin = NULL; 1617e6194c2eSMichael Tuexen #endif 16185e2c2d87SRandall Stewart #ifdef INET6 16195e2c2d87SRandall Stewart sin6 = NULL; 16205e2c2d87SRandall Stewart #endif 16215e2c2d87SRandall Stewart switch (nam->sa_family) { 1622e6194c2eSMichael Tuexen #ifdef INET 16235e2c2d87SRandall Stewart case AF_INET: 16245e2c2d87SRandall Stewart sin = (struct sockaddr_in *)nam; 16255e2c2d87SRandall Stewart break; 1626e6194c2eSMichael Tuexen #endif 16275e2c2d87SRandall Stewart #ifdef INET6 16285e2c2d87SRandall Stewart case AF_INET6: 16295e2c2d87SRandall Stewart sin6 = (struct sockaddr_in6 *)nam; 16305e2c2d87SRandall Stewart break; 16315e2c2d87SRandall Stewart #endif 16325e2c2d87SRandall Stewart default: 1633f8829a4aSRandall Stewart /* unsupported family */ 1634f8829a4aSRandall Stewart return (NULL); 1635f8829a4aSRandall Stewart } 16366d9e8f2bSRandall Stewart 1637f8829a4aSRandall Stewart if (head == NULL) 1638f8829a4aSRandall Stewart return (NULL); 1639830d754dSRandall Stewart 1640f8829a4aSRandall Stewart LIST_FOREACH(inp, head, sctp_hash) { 1641f8829a4aSRandall Stewart SCTP_INP_RLOCK(inp); 1642f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1643f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1644f8829a4aSRandall Stewart continue; 1645f8829a4aSRandall Stewart } 1646f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) && 1647f8829a4aSRandall Stewart (inp->sctp_lport == lport)) { 1648f8829a4aSRandall Stewart /* got it */ 16496ba22f19SMichael Tuexen switch (nam->sa_family) { 1650e6194c2eSMichael Tuexen #ifdef INET 16516ba22f19SMichael Tuexen case AF_INET: 16526ba22f19SMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 165344b7479bSRandall Stewart SCTP_IPV6_V6ONLY(inp)) { 1654b7b84c0eSMichael Tuexen /* 1655b7b84c0eSMichael Tuexen * IPv4 on a IPv6 socket with ONLY 1656b7b84c0eSMichael Tuexen * IPv6 set 1657b7b84c0eSMichael Tuexen */ 1658f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1659f8829a4aSRandall Stewart continue; 1660f8829a4aSRandall Stewart } 16616ba22f19SMichael Tuexen if (prison_check_ip4(inp->ip_inp.inp.inp_cred, 16626ba22f19SMichael Tuexen &sin->sin_addr) != 0) { 16636ba22f19SMichael Tuexen SCTP_INP_RUNLOCK(inp); 16646ba22f19SMichael Tuexen continue; 16656ba22f19SMichael Tuexen } 16666ba22f19SMichael Tuexen break; 1667e6194c2eSMichael Tuexen #endif 1668e6194c2eSMichael Tuexen #ifdef INET6 16696ba22f19SMichael Tuexen case AF_INET6: 1670b7b84c0eSMichael Tuexen /* 1671b7b84c0eSMichael Tuexen * A V6 address and the endpoint is NOT 1672b7b84c0eSMichael Tuexen * bound V6 1673b7b84c0eSMichael Tuexen */ 16746ba22f19SMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) { 1675f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1676f8829a4aSRandall Stewart continue; 1677f8829a4aSRandall Stewart } 16786ba22f19SMichael Tuexen if (prison_check_ip6(inp->ip_inp.inp.inp_cred, 16796ba22f19SMichael Tuexen &sin6->sin6_addr) != 0) { 16806ba22f19SMichael Tuexen SCTP_INP_RUNLOCK(inp); 16816ba22f19SMichael Tuexen continue; 16826ba22f19SMichael Tuexen } 16836ba22f19SMichael Tuexen break; 1684e6194c2eSMichael Tuexen #endif 16856ba22f19SMichael Tuexen default: 16866ba22f19SMichael Tuexen break; 16876ba22f19SMichael Tuexen } 168842551e99SRandall Stewart /* does a VRF id match? */ 168942551e99SRandall Stewart fnd = 0; 169042551e99SRandall Stewart if (inp->def_vrf_id == vrf_id) 169142551e99SRandall Stewart fnd = 1; 169242551e99SRandall Stewart 1693f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 169442551e99SRandall Stewart if (!fnd) 169542551e99SRandall Stewart continue; 1696f8829a4aSRandall Stewart return (inp); 1697f8829a4aSRandall Stewart } 1698f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1699f8829a4aSRandall Stewart } 1700e6194c2eSMichael Tuexen switch (nam->sa_family) { 1701e6194c2eSMichael Tuexen #ifdef INET 1702e6194c2eSMichael Tuexen case AF_INET: 1703e6194c2eSMichael Tuexen if (sin->sin_addr.s_addr == INADDR_ANY) { 1704f8829a4aSRandall Stewart /* Can't hunt for one that has no address specified */ 1705f8829a4aSRandall Stewart return (NULL); 17065e2c2d87SRandall Stewart } 1707e6194c2eSMichael Tuexen break; 17085e2c2d87SRandall Stewart #endif 1709e6194c2eSMichael Tuexen #ifdef INET6 1710e6194c2eSMichael Tuexen case AF_INET6: 1711e6194c2eSMichael Tuexen if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 1712e6194c2eSMichael Tuexen /* Can't hunt for one that has no address specified */ 1713e6194c2eSMichael Tuexen return (NULL); 1714e6194c2eSMichael Tuexen } 1715e6194c2eSMichael Tuexen break; 1716e6194c2eSMichael Tuexen #endif 1717e6194c2eSMichael Tuexen default: 1718e6194c2eSMichael Tuexen break; 1719e6194c2eSMichael Tuexen } 1720f8829a4aSRandall Stewart /* 1721f8829a4aSRandall Stewart * ok, not bound to all so see if we can find a EP bound to this 1722f8829a4aSRandall Stewart * address. 1723f8829a4aSRandall Stewart */ 1724f8829a4aSRandall Stewart LIST_FOREACH(inp, head, sctp_hash) { 1725f8829a4aSRandall Stewart SCTP_INP_RLOCK(inp); 1726f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 1727f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1728f8829a4aSRandall Stewart continue; 1729f8829a4aSRandall Stewart } 1730f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL)) { 1731f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1732f8829a4aSRandall Stewart continue; 1733f8829a4aSRandall Stewart } 1734f8829a4aSRandall Stewart /* 1735f8829a4aSRandall Stewart * Ok this could be a likely candidate, look at all of its 1736f8829a4aSRandall Stewart * addresses 1737f8829a4aSRandall Stewart */ 1738f8829a4aSRandall Stewart if (inp->sctp_lport != lport) { 1739f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1740f8829a4aSRandall Stewart continue; 1741f8829a4aSRandall Stewart } 174242551e99SRandall Stewart /* does a VRF id match? */ 174342551e99SRandall Stewart fnd = 0; 174442551e99SRandall Stewart if (inp->def_vrf_id == vrf_id) 174542551e99SRandall Stewart fnd = 1; 174642551e99SRandall Stewart 174742551e99SRandall Stewart if (!fnd) { 174842551e99SRandall Stewart SCTP_INP_RUNLOCK(inp); 174942551e99SRandall Stewart continue; 175042551e99SRandall Stewart } 1751f8829a4aSRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) { 1752f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 1753ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n", 17546e9c45e0SMichael Tuexen __func__); 1755f8829a4aSRandall Stewart continue; 1756f8829a4aSRandall Stewart } 1757ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Ok laddr->ifa:%p is possible, ", 1758dd294dceSMichael Tuexen (void *)laddr->ifa); 175942551e99SRandall Stewart if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) { 1760ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Huh IFA being deleted\n"); 1761f8829a4aSRandall Stewart continue; 1762f8829a4aSRandall Stewart } 176342551e99SRandall Stewart if (laddr->ifa->address.sa.sa_family == nam->sa_family) { 1764f8829a4aSRandall Stewart /* possible, see if it matches */ 17655e2c2d87SRandall Stewart switch (nam->sa_family) { 1766e6194c2eSMichael Tuexen #ifdef INET 17675e2c2d87SRandall Stewart case AF_INET: 1768f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 1769e6194c2eSMichael Tuexen laddr->ifa->address.sin.sin_addr.s_addr) { 1770f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1771f8829a4aSRandall Stewart return (inp); 1772f8829a4aSRandall Stewart } 17735e2c2d87SRandall Stewart break; 1774e6194c2eSMichael Tuexen #endif 17755e2c2d87SRandall Stewart #ifdef INET6 17765e2c2d87SRandall Stewart case AF_INET6: 177742551e99SRandall Stewart intf_addr6 = &laddr->ifa->address.sin6; 1778c54a18d2SRandall Stewart if (SCTP6_ARE_ADDR_EQUAL(sin6, 1779c54a18d2SRandall Stewart intf_addr6)) { 1780f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1781f8829a4aSRandall Stewart return (inp); 1782f8829a4aSRandall Stewart } 17835e2c2d87SRandall Stewart break; 17845e2c2d87SRandall Stewart #endif 1785f8829a4aSRandall Stewart } 1786f8829a4aSRandall Stewart } 1787f8829a4aSRandall Stewart } 1788f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 1789f8829a4aSRandall Stewart } 1790f8829a4aSRandall Stewart return (NULL); 1791f8829a4aSRandall Stewart } 1792f8829a4aSRandall Stewart 17936d9e8f2bSRandall Stewart static struct sctp_inpcb * 17946d9e8f2bSRandall Stewart sctp_isport_inuse(struct sctp_inpcb *inp, uint16_t lport, uint32_t vrf_id) 17956d9e8f2bSRandall Stewart { 17966d9e8f2bSRandall Stewart struct sctppcbhead *head; 17976d9e8f2bSRandall Stewart struct sctp_inpcb *t_inp; 17986d9e8f2bSRandall Stewart int fnd; 17996d9e8f2bSRandall Stewart 18006d9e8f2bSRandall Stewart head = &SCTP_BASE_INFO(sctp_ephash)[SCTP_PCBHASH_ALLADDR(lport, 18016d9e8f2bSRandall Stewart SCTP_BASE_INFO(hashmark))]; 18026d9e8f2bSRandall Stewart LIST_FOREACH(t_inp, head, sctp_hash) { 18036d9e8f2bSRandall Stewart if (t_inp->sctp_lport != lport) { 18046d9e8f2bSRandall Stewart continue; 18056d9e8f2bSRandall Stewart } 18066d9e8f2bSRandall Stewart /* is it in the VRF in question */ 18076d9e8f2bSRandall Stewart fnd = 0; 18086d9e8f2bSRandall Stewart if (t_inp->def_vrf_id == vrf_id) 18096d9e8f2bSRandall Stewart fnd = 1; 18106d9e8f2bSRandall Stewart if (!fnd) 18116d9e8f2bSRandall Stewart continue; 18126d9e8f2bSRandall Stewart 18136d9e8f2bSRandall Stewart /* This one is in use. */ 18146d9e8f2bSRandall Stewart /* check the v6/v4 binding issue */ 18156d9e8f2bSRandall Stewart if ((t_inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 18166d9e8f2bSRandall Stewart SCTP_IPV6_V6ONLY(t_inp)) { 18176d9e8f2bSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) { 18186d9e8f2bSRandall Stewart /* collision in V6 space */ 18196d9e8f2bSRandall Stewart return (t_inp); 18206d9e8f2bSRandall Stewart } else { 18216d9e8f2bSRandall Stewart /* inp is BOUND_V4 no conflict */ 18226d9e8f2bSRandall Stewart continue; 18236d9e8f2bSRandall Stewart } 18246d9e8f2bSRandall Stewart } else if (t_inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) { 18256d9e8f2bSRandall Stewart /* t_inp is bound v4 and v6, conflict always */ 18266d9e8f2bSRandall Stewart return (t_inp); 18276d9e8f2bSRandall Stewart } else { 18286d9e8f2bSRandall Stewart /* t_inp is bound only V4 */ 18296d9e8f2bSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) && 18306d9e8f2bSRandall Stewart SCTP_IPV6_V6ONLY(inp)) { 18316d9e8f2bSRandall Stewart /* no conflict */ 18326d9e8f2bSRandall Stewart continue; 18336d9e8f2bSRandall Stewart } 18346d9e8f2bSRandall Stewart /* else fall through to conflict */ 18356d9e8f2bSRandall Stewart } 18366d9e8f2bSRandall Stewart return (t_inp); 18376d9e8f2bSRandall Stewart } 18386d9e8f2bSRandall Stewart return (NULL); 18396d9e8f2bSRandall Stewart } 18406d9e8f2bSRandall Stewart 18416d9e8f2bSRandall Stewart int 18426d9e8f2bSRandall Stewart sctp_swap_inpcb_for_listen(struct sctp_inpcb *inp) 18436d9e8f2bSRandall Stewart { 18446d9e8f2bSRandall Stewart /* For 1-2-1 with port reuse */ 18456d9e8f2bSRandall Stewart struct sctppcbhead *head; 18460426123fSMichael Tuexen struct sctp_inpcb *tinp, *ninp; 18476d9e8f2bSRandall Stewart 18486d9e8f2bSRandall Stewart if (sctp_is_feature_off(inp, SCTP_PCB_FLAGS_PORTREUSE)) { 18496d9e8f2bSRandall Stewart /* only works with port reuse on */ 18506d9e8f2bSRandall Stewart return (-1); 18516d9e8f2bSRandall Stewart } 18526d9e8f2bSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) == 0) { 18536d9e8f2bSRandall Stewart return (0); 18546d9e8f2bSRandall Stewart } 18556d9e8f2bSRandall Stewart SCTP_INP_RUNLOCK(inp); 18560426123fSMichael Tuexen SCTP_INP_INFO_WLOCK(); 18576d9e8f2bSRandall Stewart head = &SCTP_BASE_INFO(sctp_ephash)[SCTP_PCBHASH_ALLADDR(inp->sctp_lport, 18586d9e8f2bSRandall Stewart SCTP_BASE_INFO(hashmark))]; 18596d9e8f2bSRandall Stewart /* Kick out all non-listeners to the TCP hash */ 18600426123fSMichael Tuexen LIST_FOREACH_SAFE(tinp, head, sctp_hash, ninp) { 18616d9e8f2bSRandall Stewart if (tinp->sctp_lport != inp->sctp_lport) { 18626d9e8f2bSRandall Stewart continue; 18636d9e8f2bSRandall Stewart } 18646d9e8f2bSRandall Stewart if (tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 18656d9e8f2bSRandall Stewart continue; 18666d9e8f2bSRandall Stewart } 18676d9e8f2bSRandall Stewart if (tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) { 18686d9e8f2bSRandall Stewart continue; 18696d9e8f2bSRandall Stewart } 18705d08768aSMichael Tuexen if (SCTP_IS_LISTENING(tinp)) { 18716d9e8f2bSRandall Stewart continue; 18726d9e8f2bSRandall Stewart } 18736d9e8f2bSRandall Stewart SCTP_INP_WLOCK(tinp); 18746d9e8f2bSRandall Stewart LIST_REMOVE(tinp, sctp_hash); 18756d9e8f2bSRandall Stewart head = &SCTP_BASE_INFO(sctp_tcpephash)[SCTP_PCBHASH_ALLADDR(tinp->sctp_lport, SCTP_BASE_INFO(hashtcpmark))]; 18766d9e8f2bSRandall Stewart tinp->sctp_flags |= SCTP_PCB_FLAGS_IN_TCPPOOL; 18776d9e8f2bSRandall Stewart LIST_INSERT_HEAD(head, tinp, sctp_hash); 18786d9e8f2bSRandall Stewart SCTP_INP_WUNLOCK(tinp); 18796d9e8f2bSRandall Stewart } 18806d9e8f2bSRandall Stewart SCTP_INP_WLOCK(inp); 18816d9e8f2bSRandall Stewart /* Pull from where he was */ 18826d9e8f2bSRandall Stewart LIST_REMOVE(inp, sctp_hash); 18836d9e8f2bSRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_IN_TCPPOOL; 18846d9e8f2bSRandall Stewart head = &SCTP_BASE_INFO(sctp_ephash)[SCTP_PCBHASH_ALLADDR(inp->sctp_lport, SCTP_BASE_INFO(hashmark))]; 18856d9e8f2bSRandall Stewart LIST_INSERT_HEAD(head, inp, sctp_hash); 18866d9e8f2bSRandall Stewart SCTP_INP_WUNLOCK(inp); 18876d9e8f2bSRandall Stewart SCTP_INP_RLOCK(inp); 18880426123fSMichael Tuexen SCTP_INP_INFO_WUNLOCK(); 18896d9e8f2bSRandall Stewart return (0); 18906d9e8f2bSRandall Stewart } 18916d9e8f2bSRandall Stewart 1892f8829a4aSRandall Stewart struct sctp_inpcb * 1893ad81507eSRandall Stewart sctp_pcb_findep(struct sockaddr *nam, int find_tcp_pool, int have_lock, 1894ad81507eSRandall Stewart uint32_t vrf_id) 1895f8829a4aSRandall Stewart { 1896f8829a4aSRandall Stewart /* 1897f8829a4aSRandall Stewart * First we check the hash table to see if someone has this port 1898f8829a4aSRandall Stewart * bound with just the port. 1899f8829a4aSRandall Stewart */ 1900f8829a4aSRandall Stewart struct sctp_inpcb *inp; 1901f8829a4aSRandall Stewart struct sctppcbhead *head; 1902f8829a4aSRandall Stewart int lport; 1903034b88b0SMichael Tuexen unsigned int i; 1904e6194c2eSMichael Tuexen #ifdef INET 1905e6194c2eSMichael Tuexen struct sockaddr_in *sin; 1906e6194c2eSMichael Tuexen #endif 1907e6194c2eSMichael Tuexen #ifdef INET6 1908e6194c2eSMichael Tuexen struct sockaddr_in6 *sin6; 1909e6194c2eSMichael Tuexen #endif 1910e6194c2eSMichael Tuexen 1911e6194c2eSMichael Tuexen switch (nam->sa_family) { 1912e6194c2eSMichael Tuexen #ifdef INET 1913e6194c2eSMichael Tuexen case AF_INET: 1914f8829a4aSRandall Stewart sin = (struct sockaddr_in *)nam; 191560990c0cSMichael Tuexen lport = sin->sin_port; 1916e6194c2eSMichael Tuexen break; 1917e6194c2eSMichael Tuexen #endif 1918e6194c2eSMichael Tuexen #ifdef INET6 1919e6194c2eSMichael Tuexen case AF_INET6: 1920f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)nam; 192160990c0cSMichael Tuexen lport = sin6->sin6_port; 1922e6194c2eSMichael Tuexen break; 1923e6194c2eSMichael Tuexen #endif 1924e6194c2eSMichael Tuexen default: 1925f8829a4aSRandall Stewart return (NULL); 1926f8829a4aSRandall Stewart } 1927f8829a4aSRandall Stewart /* 1928f8829a4aSRandall Stewart * I could cheat here and just cast to one of the types but we will 1929f8829a4aSRandall Stewart * do it right. It also provides the check against an Unsupported 1930f8829a4aSRandall Stewart * type too. 1931f8829a4aSRandall Stewart */ 1932f8829a4aSRandall Stewart /* Find the head of the ALLADDR chain */ 1933f8829a4aSRandall Stewart if (have_lock == 0) { 1934f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 1935f8829a4aSRandall Stewart } 1936b3f1ea41SRandall Stewart head = &SCTP_BASE_INFO(sctp_ephash)[SCTP_PCBHASH_ALLADDR(lport, 1937b3f1ea41SRandall Stewart SCTP_BASE_INFO(hashmark))]; 193842551e99SRandall Stewart inp = sctp_endpoint_probe(nam, head, lport, vrf_id); 1939f8829a4aSRandall Stewart 1940f8829a4aSRandall Stewart /* 1941f8829a4aSRandall Stewart * If the TCP model exists it could be that the main listening 1942034b88b0SMichael Tuexen * endpoint is gone but there still exists a connected socket for 1943034b88b0SMichael Tuexen * this guy. If so we can return the first one that we find. This 1944034b88b0SMichael Tuexen * may NOT be the correct one so the caller should be wary on the 1945034b88b0SMichael Tuexen * returned INP. Currently the only caller that sets find_tcp_pool 1946034b88b0SMichael Tuexen * is in bindx where we are verifying that a user CAN bind the 1947034b88b0SMichael Tuexen * address. He either has bound it already, or someone else has, or 1948034b88b0SMichael Tuexen * its open to bind, so this is good enough. 1949f8829a4aSRandall Stewart */ 1950f8829a4aSRandall Stewart if (inp == NULL && find_tcp_pool) { 1951034b88b0SMichael Tuexen for (i = 0; i < SCTP_BASE_INFO(hashtcpmark) + 1; i++) { 1952034b88b0SMichael Tuexen head = &SCTP_BASE_INFO(sctp_tcpephash)[i]; 195342551e99SRandall Stewart inp = sctp_endpoint_probe(nam, head, lport, vrf_id); 1954034b88b0SMichael Tuexen if (inp) { 1955034b88b0SMichael Tuexen break; 1956034b88b0SMichael Tuexen } 1957034b88b0SMichael Tuexen } 1958f8829a4aSRandall Stewart } 1959f8829a4aSRandall Stewart if (inp) { 1960f8829a4aSRandall Stewart SCTP_INP_INCR_REF(inp); 1961f8829a4aSRandall Stewart } 1962f8829a4aSRandall Stewart if (have_lock == 0) { 1963f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1964f8829a4aSRandall Stewart } 1965f8829a4aSRandall Stewart return (inp); 1966f8829a4aSRandall Stewart } 1967f8829a4aSRandall Stewart 1968f8829a4aSRandall Stewart /* 1969f8829a4aSRandall Stewart * Find an association for an endpoint with the pointer to whom you want to 1970f8829a4aSRandall Stewart * send to and the endpoint pointer. The address can be IPv4 or IPv6. We may 1971f8829a4aSRandall Stewart * need to change the *to to some other struct like a mbuf... 1972f8829a4aSRandall Stewart */ 1973f8829a4aSRandall Stewart struct sctp_tcb * 1974b1754ad1SMichael Tuexen sctp_findassociation_addr_sa(struct sockaddr *from, struct sockaddr *to, 19759a972525SRandall Stewart struct sctp_inpcb **inp_p, struct sctp_nets **netp, int find_tcp_pool, 19769a972525SRandall Stewart uint32_t vrf_id) 1977f8829a4aSRandall Stewart { 1978c105859eSRandall Stewart struct sctp_inpcb *inp = NULL; 1979f0d44a49SMichael Tuexen struct sctp_tcb *stcb; 1980f8829a4aSRandall Stewart 1981f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 1982f8829a4aSRandall Stewart if (find_tcp_pool) { 1983f8829a4aSRandall Stewart if (inp_p != NULL) { 1984f0d44a49SMichael Tuexen stcb = sctp_tcb_special_locate(inp_p, from, to, netp, 19859a972525SRandall Stewart vrf_id); 1986f8829a4aSRandall Stewart } else { 1987f0d44a49SMichael Tuexen stcb = sctp_tcb_special_locate(&inp, from, to, netp, 19889a972525SRandall Stewart vrf_id); 1989f8829a4aSRandall Stewart } 1990f0d44a49SMichael Tuexen if (stcb != NULL) { 1991f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 1992f0d44a49SMichael Tuexen return (stcb); 1993f8829a4aSRandall Stewart } 1994f8829a4aSRandall Stewart } 199542551e99SRandall Stewart inp = sctp_pcb_findep(to, 0, 1, vrf_id); 1996f8829a4aSRandall Stewart if (inp_p != NULL) { 1997f8829a4aSRandall Stewart *inp_p = inp; 1998f8829a4aSRandall Stewart } 1999f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 2000f8829a4aSRandall Stewart if (inp == NULL) { 2001f8829a4aSRandall Stewart return (NULL); 2002f8829a4aSRandall Stewart } 2003f8829a4aSRandall Stewart /* 2004f8829a4aSRandall Stewart * ok, we have an endpoint, now lets find the assoc for it (if any) 2005f8829a4aSRandall Stewart * we now place the source address or from in the to of the find 2006f8829a4aSRandall Stewart * endpoint call. Since in reality this chain is used from the 2007f8829a4aSRandall Stewart * inbound packet side. 2008f8829a4aSRandall Stewart */ 2009f8829a4aSRandall Stewart if (inp_p != NULL) { 2010f0d44a49SMichael Tuexen stcb = sctp_findassociation_ep_addr(inp_p, from, netp, to, 20119a972525SRandall Stewart NULL); 2012f8829a4aSRandall Stewart } else { 2013f0d44a49SMichael Tuexen stcb = sctp_findassociation_ep_addr(&inp, from, netp, to, 20149a972525SRandall Stewart NULL); 2015f8829a4aSRandall Stewart } 2016f0d44a49SMichael Tuexen return (stcb); 2017f8829a4aSRandall Stewart } 2018f8829a4aSRandall Stewart 2019f8829a4aSRandall Stewart /* 2020f8829a4aSRandall Stewart * This routine will grub through the mbuf that is a INIT or INIT-ACK and 2021f8829a4aSRandall Stewart * find all addresses that the sender has specified in any address list. Each 2022f8829a4aSRandall Stewart * address will be used to lookup the TCB and see if one exits. 2023f8829a4aSRandall Stewart */ 2024f8829a4aSRandall Stewart static struct sctp_tcb * 20257215cc1bSMichael Tuexen sctp_findassociation_special_addr(struct mbuf *m, int offset, 2026f8829a4aSRandall Stewart struct sctphdr *sh, struct sctp_inpcb **inp_p, struct sctp_nets **netp, 2027b1754ad1SMichael Tuexen struct sockaddr *dst) 2028f8829a4aSRandall Stewart { 2029f4358911SMichael Tuexen struct sctp_paramhdr *phdr, param_buf; 2030b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6) 2031f0d44a49SMichael Tuexen struct sctp_tcb *stcb; 2032b54ddf22SMichael Tuexen uint16_t ptype; 2033b54ddf22SMichael Tuexen #endif 2034b54ddf22SMichael Tuexen uint16_t plen; 2035e6194c2eSMichael Tuexen #ifdef INET 2036e6194c2eSMichael Tuexen struct sockaddr_in sin4; 2037e6194c2eSMichael Tuexen #endif 2038e6194c2eSMichael Tuexen #ifdef INET6 2039e6194c2eSMichael Tuexen struct sockaddr_in6 sin6; 2040e6194c2eSMichael Tuexen #endif 2041e6194c2eSMichael Tuexen 2042e6194c2eSMichael Tuexen #ifdef INET 2043f8829a4aSRandall Stewart memset(&sin4, 0, sizeof(sin4)); 2044f8829a4aSRandall Stewart sin4.sin_len = sizeof(sin4); 2045f8829a4aSRandall Stewart sin4.sin_family = AF_INET; 2046f8829a4aSRandall Stewart sin4.sin_port = sh->src_port; 2047e6194c2eSMichael Tuexen #endif 2048e6194c2eSMichael Tuexen #ifdef INET6 2049e6194c2eSMichael Tuexen memset(&sin6, 0, sizeof(sin6)); 2050f8829a4aSRandall Stewart sin6.sin6_len = sizeof(sin6); 2051f8829a4aSRandall Stewart sin6.sin6_family = AF_INET6; 2052f8829a4aSRandall Stewart sin6.sin6_port = sh->src_port; 2053e6194c2eSMichael Tuexen #endif 2054f8829a4aSRandall Stewart 2055f8829a4aSRandall Stewart offset += sizeof(struct sctp_init_chunk); 2056f8829a4aSRandall Stewart 2057f4358911SMichael Tuexen phdr = sctp_get_next_param(m, offset, ¶m_buf, sizeof(param_buf)); 2058f8829a4aSRandall Stewart while (phdr != NULL) { 2059f8829a4aSRandall Stewart /* now we must see if we want the parameter */ 2060b54ddf22SMichael Tuexen #if defined(INET) || defined(INET6) 2061f8829a4aSRandall Stewart ptype = ntohs(phdr->param_type); 2062b54ddf22SMichael Tuexen #endif 2063f8829a4aSRandall Stewart plen = ntohs(phdr->param_length); 2064f8829a4aSRandall Stewart if (plen == 0) { 2065f8829a4aSRandall Stewart break; 2066f8829a4aSRandall Stewart } 2067e6194c2eSMichael Tuexen #ifdef INET 2068f8829a4aSRandall Stewart if (ptype == SCTP_IPV4_ADDRESS && 2069f8829a4aSRandall Stewart plen == sizeof(struct sctp_ipv4addr_param)) { 2070f8829a4aSRandall Stewart /* Get the rest of the address */ 2071f4358911SMichael Tuexen struct sctp_ipv4addr_param ip4_param, *p4; 2072f8829a4aSRandall Stewart 2073f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 2074f4358911SMichael Tuexen (struct sctp_paramhdr *)&ip4_param, sizeof(ip4_param)); 2075f8829a4aSRandall Stewart if (phdr == NULL) { 2076f8829a4aSRandall Stewart return (NULL); 2077f8829a4aSRandall Stewart } 2078f8829a4aSRandall Stewart p4 = (struct sctp_ipv4addr_param *)phdr; 2079f8829a4aSRandall Stewart memcpy(&sin4.sin_addr, &p4->addr, sizeof(p4->addr)); 2080f8829a4aSRandall Stewart /* look it up */ 2081f0d44a49SMichael Tuexen stcb = sctp_findassociation_ep_addr(inp_p, 2082b1754ad1SMichael Tuexen (struct sockaddr *)&sin4, netp, dst, NULL); 2083f0d44a49SMichael Tuexen if (stcb != NULL) { 2084f0d44a49SMichael Tuexen return (stcb); 2085f8829a4aSRandall Stewart } 2086e6194c2eSMichael Tuexen } 2087e6194c2eSMichael Tuexen #endif 2088e6194c2eSMichael Tuexen #ifdef INET6 2089e6194c2eSMichael Tuexen if (ptype == SCTP_IPV6_ADDRESS && 2090f8829a4aSRandall Stewart plen == sizeof(struct sctp_ipv6addr_param)) { 2091f8829a4aSRandall Stewart /* Get the rest of the address */ 2092f4358911SMichael Tuexen struct sctp_ipv6addr_param ip6_param, *p6; 2093f8829a4aSRandall Stewart 2094f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 2095f4358911SMichael Tuexen (struct sctp_paramhdr *)&ip6_param, sizeof(ip6_param)); 2096f8829a4aSRandall Stewart if (phdr == NULL) { 2097f8829a4aSRandall Stewart return (NULL); 2098f8829a4aSRandall Stewart } 2099f8829a4aSRandall Stewart p6 = (struct sctp_ipv6addr_param *)phdr; 2100f8829a4aSRandall Stewart memcpy(&sin6.sin6_addr, &p6->addr, sizeof(p6->addr)); 2101f8829a4aSRandall Stewart /* look it up */ 2102f0d44a49SMichael Tuexen stcb = sctp_findassociation_ep_addr(inp_p, 2103b1754ad1SMichael Tuexen (struct sockaddr *)&sin6, netp, dst, NULL); 2104f0d44a49SMichael Tuexen if (stcb != NULL) { 2105f0d44a49SMichael Tuexen return (stcb); 2106f8829a4aSRandall Stewart } 2107f8829a4aSRandall Stewart } 2108e6194c2eSMichael Tuexen #endif 2109f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 2110f4358911SMichael Tuexen phdr = sctp_get_next_param(m, offset, ¶m_buf, 2111f4358911SMichael Tuexen sizeof(param_buf)); 2112f8829a4aSRandall Stewart } 2113f8829a4aSRandall Stewart return (NULL); 2114f8829a4aSRandall Stewart } 2115f8829a4aSRandall Stewart 2116f8829a4aSRandall Stewart static struct sctp_tcb * 2117830d754dSRandall Stewart sctp_findassoc_by_vtag(struct sockaddr *from, struct sockaddr *to, uint32_t vtag, 2118f8829a4aSRandall Stewart struct sctp_inpcb **inp_p, struct sctp_nets **netp, uint16_t rport, 2119830d754dSRandall Stewart uint16_t lport, int skip_src_check, uint32_t vrf_id, uint32_t remote_tag) 2120f8829a4aSRandall Stewart { 2121f8829a4aSRandall Stewart /* 2122f8829a4aSRandall Stewart * Use my vtag to hash. If we find it we then verify the source addr 2123f8829a4aSRandall Stewart * is in the assoc. If all goes well we save a bit on rec of a 2124f8829a4aSRandall Stewart * packet. 2125f8829a4aSRandall Stewart */ 2126f8829a4aSRandall Stewart struct sctpasochead *head; 2127f8829a4aSRandall Stewart struct sctp_nets *net; 2128f8829a4aSRandall Stewart struct sctp_tcb *stcb; 2129f8829a4aSRandall Stewart 2130f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 2131b3f1ea41SRandall Stewart head = &SCTP_BASE_INFO(sctp_asochash)[SCTP_PCBHASH_ASOC(vtag, 2132b3f1ea41SRandall Stewart SCTP_BASE_INFO(hashasocmark))]; 2133f8829a4aSRandall Stewart LIST_FOREACH(stcb, head, sctp_asocs) { 2134f8829a4aSRandall Stewart SCTP_INP_RLOCK(stcb->sctp_ep); 2135f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 2136f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(stcb->sctp_ep); 2137d06c82f1SRandall Stewart continue; 2138f8829a4aSRandall Stewart } 21397215cc1bSMichael Tuexen if (stcb->sctp_ep->def_vrf_id != vrf_id) { 21407215cc1bSMichael Tuexen SCTP_INP_RUNLOCK(stcb->sctp_ep); 21417215cc1bSMichael Tuexen continue; 21427215cc1bSMichael Tuexen } 2143f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 2144f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(stcb->sctp_ep); 2145f8829a4aSRandall Stewart if (stcb->asoc.my_vtag == vtag) { 2146f8829a4aSRandall Stewart /* candidate */ 2147f8829a4aSRandall Stewart if (stcb->rport != rport) { 2148f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 2149f8829a4aSRandall Stewart continue; 2150f8829a4aSRandall Stewart } 2151f8829a4aSRandall Stewart if (stcb->sctp_ep->sctp_lport != lport) { 2152f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 2153f8829a4aSRandall Stewart continue; 2154f8829a4aSRandall Stewart } 2155fb8fb8f8SRandall Stewart if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 2156fb8fb8f8SRandall Stewart SCTP_TCB_UNLOCK(stcb); 2157fb8fb8f8SRandall Stewart continue; 2158fb8fb8f8SRandall Stewart } 2159830d754dSRandall Stewart /* RRS:Need toaddr check here */ 2160830d754dSRandall Stewart if (sctp_does_stcb_own_this_addr(stcb, to) == 0) { 2161830d754dSRandall Stewart /* Endpoint does not own this address */ 2162830d754dSRandall Stewart SCTP_TCB_UNLOCK(stcb); 2163830d754dSRandall Stewart continue; 2164830d754dSRandall Stewart } 2165830d754dSRandall Stewart if (remote_tag) { 2166b7b84c0eSMichael Tuexen /* 2167b7b84c0eSMichael Tuexen * If we have both vtags that's all we match 2168b7b84c0eSMichael Tuexen * on 2169b7b84c0eSMichael Tuexen */ 2170830d754dSRandall Stewart if (stcb->asoc.peer_vtag == remote_tag) { 2171830d754dSRandall Stewart /* 2172830d754dSRandall Stewart * If both tags match we consider it 2173830d754dSRandall Stewart * conclusive and check NO 2174830d754dSRandall Stewart * source/destination addresses 2175830d754dSRandall Stewart */ 2176830d754dSRandall Stewart goto conclusive; 2177830d754dSRandall Stewart } 2178830d754dSRandall Stewart } 2179f8829a4aSRandall Stewart if (skip_src_check) { 2180830d754dSRandall Stewart conclusive: 2181830d754dSRandall Stewart if (from) { 218260990c0cSMichael Tuexen *netp = sctp_findnet(stcb, from); 2183830d754dSRandall Stewart } else { 2184f8829a4aSRandall Stewart *netp = NULL; /* unknown */ 2185830d754dSRandall Stewart } 2186ad81507eSRandall Stewart if (inp_p) 2187f8829a4aSRandall Stewart *inp_p = stcb->sctp_ep; 2188f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 2189f8829a4aSRandall Stewart return (stcb); 2190f8829a4aSRandall Stewart } 2191f8829a4aSRandall Stewart net = sctp_findnet(stcb, from); 2192f8829a4aSRandall Stewart if (net) { 2193f8829a4aSRandall Stewart /* yep its him. */ 2194f8829a4aSRandall Stewart *netp = net; 2195f8829a4aSRandall Stewart SCTP_STAT_INCR(sctps_vtagexpress); 2196f8829a4aSRandall Stewart *inp_p = stcb->sctp_ep; 2197f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 2198f8829a4aSRandall Stewart return (stcb); 2199f8829a4aSRandall Stewart } else { 2200f8829a4aSRandall Stewart /* 2201f8829a4aSRandall Stewart * not him, this should only happen in rare 2202f8829a4aSRandall Stewart * cases so I peg it. 2203f8829a4aSRandall Stewart */ 2204f8829a4aSRandall Stewart SCTP_STAT_INCR(sctps_vtagbogus); 2205f8829a4aSRandall Stewart } 2206f8829a4aSRandall Stewart } 2207f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 2208f8829a4aSRandall Stewart } 2209f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 2210f8829a4aSRandall Stewart return (NULL); 2211f8829a4aSRandall Stewart } 2212f8829a4aSRandall Stewart 2213f8829a4aSRandall Stewart /* 2214f8829a4aSRandall Stewart * Find an association with the pointer to the inbound IP packet. This can be 2215f8829a4aSRandall Stewart * a IPv4 or IPv6 packet. 2216f8829a4aSRandall Stewart */ 2217f8829a4aSRandall Stewart struct sctp_tcb * 22187215cc1bSMichael Tuexen sctp_findassociation_addr(struct mbuf *m, int offset, 2219b1754ad1SMichael Tuexen struct sockaddr *src, struct sockaddr *dst, 2220f8829a4aSRandall Stewart struct sctphdr *sh, struct sctp_chunkhdr *ch, 2221bff64a4dSRandall Stewart struct sctp_inpcb **inp_p, struct sctp_nets **netp, uint32_t vrf_id) 2222f8829a4aSRandall Stewart { 2223f0d44a49SMichael Tuexen struct sctp_tcb *stcb; 2224f8829a4aSRandall Stewart struct sctp_inpcb *inp; 2225f8829a4aSRandall Stewart 2226830d754dSRandall Stewart if (sh->v_tag) { 2227830d754dSRandall Stewart /* we only go down this path if vtag is non-zero */ 2228f0d44a49SMichael Tuexen stcb = sctp_findassoc_by_vtag(src, dst, ntohl(sh->v_tag), 2229830d754dSRandall Stewart inp_p, netp, sh->src_port, sh->dest_port, 0, vrf_id, 0); 2230f0d44a49SMichael Tuexen if (stcb) { 2231f0d44a49SMichael Tuexen return (stcb); 2232830d754dSRandall Stewart } 2233830d754dSRandall Stewart } 22340053ed28SMichael Tuexen 2235f8829a4aSRandall Stewart if (inp_p) { 2236f0d44a49SMichael Tuexen stcb = sctp_findassociation_addr_sa(src, dst, inp_p, netp, 223779b67faaSMichael Tuexen 1, vrf_id); 2238f8829a4aSRandall Stewart inp = *inp_p; 2239f8829a4aSRandall Stewart } else { 2240f0d44a49SMichael Tuexen stcb = sctp_findassociation_addr_sa(src, dst, &inp, netp, 224179b67faaSMichael Tuexen 1, vrf_id); 2242f8829a4aSRandall Stewart } 2243f0d44a49SMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "stcb:%p inp:%p\n", (void *)stcb, (void *)inp); 2244f0d44a49SMichael Tuexen if (stcb == NULL && inp) { 2245f8829a4aSRandall Stewart /* Found a EP but not this address */ 2246f8829a4aSRandall Stewart if ((ch->chunk_type == SCTP_INITIATION) || 2247f8829a4aSRandall Stewart (ch->chunk_type == SCTP_INITIATION_ACK)) { 2248d06c82f1SRandall Stewart /*- 2249f8829a4aSRandall Stewart * special hook, we do NOT return linp or an 2250f8829a4aSRandall Stewart * association that is linked to an existing 2251f8829a4aSRandall Stewart * association that is under the TCP pool (i.e. no 2252f8829a4aSRandall Stewart * listener exists). The endpoint finding routine 2253b1ce21c6SRebecca Cran * will always find a listener before examining the 2254f8829a4aSRandall Stewart * TCP pool. 2255f8829a4aSRandall Stewart */ 2256f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) { 2257f8829a4aSRandall Stewart if (inp_p) { 2258f8829a4aSRandall Stewart *inp_p = NULL; 2259f8829a4aSRandall Stewart } 2260f8829a4aSRandall Stewart return (NULL); 2261f8829a4aSRandall Stewart } 2262f0d44a49SMichael Tuexen stcb = sctp_findassociation_special_addr(m, 2263b1754ad1SMichael Tuexen offset, sh, &inp, netp, dst); 2264f8829a4aSRandall Stewart if (inp_p != NULL) { 2265f8829a4aSRandall Stewart *inp_p = inp; 2266f8829a4aSRandall Stewart } 2267f8829a4aSRandall Stewart } 2268f8829a4aSRandall Stewart } 2269f0d44a49SMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "stcb is %p\n", (void *)stcb); 2270f0d44a49SMichael Tuexen return (stcb); 2271f8829a4aSRandall Stewart } 2272f8829a4aSRandall Stewart 2273f8829a4aSRandall Stewart /* 2274f8829a4aSRandall Stewart * lookup an association by an ASCONF lookup address. 2275f8829a4aSRandall Stewart * if the lookup address is 0.0.0.0 or ::0, use the vtag to do the lookup 2276f8829a4aSRandall Stewart */ 2277f8829a4aSRandall Stewart struct sctp_tcb * 22787215cc1bSMichael Tuexen sctp_findassociation_ep_asconf(struct mbuf *m, int offset, 2279b1754ad1SMichael Tuexen struct sockaddr *dst, struct sctphdr *sh, 2280b1754ad1SMichael Tuexen struct sctp_inpcb **inp_p, struct sctp_nets **netp, uint32_t vrf_id) 2281f8829a4aSRandall Stewart { 2282f8829a4aSRandall Stewart struct sctp_tcb *stcb; 228324aaac8dSMichael Tuexen union sctp_sockstore remote_store; 2284f4358911SMichael Tuexen struct sctp_paramhdr param_buf, *phdr; 2285f8829a4aSRandall Stewart int ptype; 2286f8829a4aSRandall Stewart int zero_address = 0; 2287e6194c2eSMichael Tuexen #ifdef INET 2288e6194c2eSMichael Tuexen struct sockaddr_in *sin; 2289e6194c2eSMichael Tuexen #endif 2290e6194c2eSMichael Tuexen #ifdef INET6 2291e6194c2eSMichael Tuexen struct sockaddr_in6 *sin6; 2292e6194c2eSMichael Tuexen #endif 2293f8829a4aSRandall Stewart 2294f8829a4aSRandall Stewart memset(&remote_store, 0, sizeof(remote_store)); 2295f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset + sizeof(struct sctp_asconf_chunk), 2296f4358911SMichael Tuexen ¶m_buf, sizeof(struct sctp_paramhdr)); 2297f8829a4aSRandall Stewart if (phdr == NULL) { 2298ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf lookup addr\n", 22996e9c45e0SMichael Tuexen __func__); 2300f8829a4aSRandall Stewart return NULL; 2301f8829a4aSRandall Stewart } 2302f8829a4aSRandall Stewart ptype = (int)((uint32_t)ntohs(phdr->param_type)); 2303f8829a4aSRandall Stewart /* get the correlation address */ 23045e2c2d87SRandall Stewart switch (ptype) { 23055e2c2d87SRandall Stewart #ifdef INET6 23065e2c2d87SRandall Stewart case SCTP_IPV6_ADDRESS: 23075e2c2d87SRandall Stewart { 2308f8829a4aSRandall Stewart /* ipv6 address param */ 2309f8829a4aSRandall Stewart struct sctp_ipv6addr_param *p6, p6_buf; 2310f8829a4aSRandall Stewart 2311f8829a4aSRandall Stewart if (ntohs(phdr->param_length) != sizeof(struct sctp_ipv6addr_param)) { 2312f8829a4aSRandall Stewart return NULL; 2313f8829a4aSRandall Stewart } 2314f8829a4aSRandall Stewart p6 = (struct sctp_ipv6addr_param *)sctp_get_next_param(m, 2315f8829a4aSRandall Stewart offset + sizeof(struct sctp_asconf_chunk), 2316f4358911SMichael Tuexen &p6_buf.ph, sizeof(p6_buf)); 2317f8829a4aSRandall Stewart if (p6 == NULL) { 2318ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf v6 lookup addr\n", 23196e9c45e0SMichael Tuexen __func__); 2320f8829a4aSRandall Stewart return (NULL); 2321f8829a4aSRandall Stewart } 232224aaac8dSMichael Tuexen sin6 = &remote_store.sin6; 2323f8829a4aSRandall Stewart sin6->sin6_family = AF_INET6; 2324f8829a4aSRandall Stewart sin6->sin6_len = sizeof(*sin6); 2325f8829a4aSRandall Stewart sin6->sin6_port = sh->src_port; 2326f8829a4aSRandall Stewart memcpy(&sin6->sin6_addr, &p6->addr, sizeof(struct in6_addr)); 2327f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) 2328f8829a4aSRandall Stewart zero_address = 1; 23295e2c2d87SRandall Stewart break; 23305e2c2d87SRandall Stewart } 23315e2c2d87SRandall Stewart #endif 2332e6194c2eSMichael Tuexen #ifdef INET 23335e2c2d87SRandall Stewart case SCTP_IPV4_ADDRESS: 23345e2c2d87SRandall Stewart { 2335f8829a4aSRandall Stewart /* ipv4 address param */ 2336f8829a4aSRandall Stewart struct sctp_ipv4addr_param *p4, p4_buf; 2337f8829a4aSRandall Stewart 2338f8829a4aSRandall Stewart if (ntohs(phdr->param_length) != sizeof(struct sctp_ipv4addr_param)) { 2339f8829a4aSRandall Stewart return NULL; 2340f8829a4aSRandall Stewart } 2341f8829a4aSRandall Stewart p4 = (struct sctp_ipv4addr_param *)sctp_get_next_param(m, 2342f8829a4aSRandall Stewart offset + sizeof(struct sctp_asconf_chunk), 2343f4358911SMichael Tuexen &p4_buf.ph, sizeof(p4_buf)); 2344f8829a4aSRandall Stewart if (p4 == NULL) { 2345ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf v4 lookup addr\n", 23466e9c45e0SMichael Tuexen __func__); 2347f8829a4aSRandall Stewart return (NULL); 2348f8829a4aSRandall Stewart } 234924aaac8dSMichael Tuexen sin = &remote_store.sin; 2350f8829a4aSRandall Stewart sin->sin_family = AF_INET; 2351f8829a4aSRandall Stewart sin->sin_len = sizeof(*sin); 2352f8829a4aSRandall Stewart sin->sin_port = sh->src_port; 2353f8829a4aSRandall Stewart memcpy(&sin->sin_addr, &p4->addr, sizeof(struct in_addr)); 2354f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == INADDR_ANY) 2355f8829a4aSRandall Stewart zero_address = 1; 23565e2c2d87SRandall Stewart break; 23575e2c2d87SRandall Stewart } 2358e6194c2eSMichael Tuexen #endif 23595e2c2d87SRandall Stewart default: 2360f8829a4aSRandall Stewart /* invalid address param type */ 2361f8829a4aSRandall Stewart return NULL; 2362f8829a4aSRandall Stewart } 2363f8829a4aSRandall Stewart 2364f8829a4aSRandall Stewart if (zero_address) { 2365b1754ad1SMichael Tuexen stcb = sctp_findassoc_by_vtag(NULL, dst, ntohl(sh->v_tag), inp_p, 2366830d754dSRandall Stewart netp, sh->src_port, sh->dest_port, 1, vrf_id, 0); 236763c6726eSMichael Tuexen if (stcb != NULL) { 236863c6726eSMichael Tuexen SCTP_INP_DECR_REF(*inp_p); 236963c6726eSMichael Tuexen } 2370f8829a4aSRandall Stewart } else { 2371f8829a4aSRandall Stewart stcb = sctp_findassociation_ep_addr(inp_p, 237224aaac8dSMichael Tuexen &remote_store.sa, netp, 2373b1754ad1SMichael Tuexen dst, NULL); 2374f8829a4aSRandall Stewart } 2375f8829a4aSRandall Stewart return (stcb); 2376f8829a4aSRandall Stewart } 2377f8829a4aSRandall Stewart 2378f8829a4aSRandall Stewart /* 2379f8829a4aSRandall Stewart * allocate a sctp_inpcb and setup a temporary binding to a port/all 2380f8829a4aSRandall Stewart * addresses. This way if we don't get a bind we by default pick a ephemeral 2381f8829a4aSRandall Stewart * port with all addresses bound. 2382f8829a4aSRandall Stewart */ 2383f8829a4aSRandall Stewart int 2384f4c93d24SRandall Stewart sctp_inpcb_alloc(struct socket *so, uint32_t vrf_id) 2385f8829a4aSRandall Stewart { 2386f8829a4aSRandall Stewart /* 2387f8829a4aSRandall Stewart * we get called when a new endpoint starts up. We need to allocate 2388f8829a4aSRandall Stewart * the sctp_inpcb structure from the zone and init it. Mark it as 2389f8829a4aSRandall Stewart * unbound and find a port that we can use as an ephemeral with 2390f8829a4aSRandall Stewart * INADDR_ANY. If the user binds later no problem we can then add in 2391f8829a4aSRandall Stewart * the specific addresses. And setup the default parameters for the 2392f8829a4aSRandall Stewart * EP. 2393f8829a4aSRandall Stewart */ 2394f8829a4aSRandall Stewart int i, error; 2395f8829a4aSRandall Stewart struct sctp_inpcb *inp; 2396f8829a4aSRandall Stewart struct sctp_pcb *m; 2397f8829a4aSRandall Stewart struct timeval time; 2398f8829a4aSRandall Stewart sctp_sharedkey_t *null_key; 2399f8829a4aSRandall Stewart 2400f8829a4aSRandall Stewart error = 0; 2401f8829a4aSRandall Stewart 2402f8829a4aSRandall Stewart SCTP_INP_INFO_WLOCK(); 2403b3f1ea41SRandall Stewart inp = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_ep), struct sctp_inpcb); 2404f8829a4aSRandall Stewart if (inp == NULL) { 2405ad81507eSRandall Stewart SCTP_PRINTF("Out of SCTP-INPCB structures - no resources\n"); 2406f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2407c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS); 2408f8829a4aSRandall Stewart return (ENOBUFS); 2409f8829a4aSRandall Stewart } 2410f8829a4aSRandall Stewart /* zap it */ 24115ba7f91fSMichael Tuexen memset(inp, 0, sizeof(*inp)); 2412f8829a4aSRandall Stewart 2413f8829a4aSRandall Stewart /* bump generations */ 2414f8829a4aSRandall Stewart /* setup socket pointers */ 2415f8829a4aSRandall Stewart inp->sctp_socket = so; 2416f8829a4aSRandall Stewart inp->ip_inp.inp.inp_socket = so; 24176ba22f19SMichael Tuexen inp->ip_inp.inp.inp_cred = crhold(so->so_cred); 241858bdb691SMichael Tuexen #ifdef INET6 24193457ccdaSMichael Tuexen if (INP_SOCKAF(so) == AF_INET6) { 242058bdb691SMichael Tuexen if (MODULE_GLOBAL(ip6_auto_flowlabel)) { 242158bdb691SMichael Tuexen inp->ip_inp.inp.inp_flags |= IN6P_AUTOFLOWLABEL; 242258bdb691SMichael Tuexen } 24233457ccdaSMichael Tuexen if (MODULE_GLOBAL(ip6_v6only)) { 24243457ccdaSMichael Tuexen inp->ip_inp.inp.inp_flags |= IN6P_IPV6_V6ONLY; 24253457ccdaSMichael Tuexen } 24263457ccdaSMichael Tuexen } 242758bdb691SMichael Tuexen #endif 2428830d754dSRandall Stewart inp->sctp_associd_counter = 1; 242962c1ff9cSRandall Stewart inp->partial_delivery_point = SCTP_SB_LIMIT_RCV(so) >> SCTP_PARTIAL_DELIVERY_SHIFT; 2430f8829a4aSRandall Stewart inp->sctp_frag_point = SCTP_DEFAULT_MAXSEGMENT; 243159b6d5beSMichael Tuexen inp->max_cwnd = 0; 243220083c2eSMichael Tuexen inp->sctp_cmt_on_off = SCTP_BASE_SYSCTL(sctp_cmt_on_off); 2433f342355aSMichael Tuexen inp->ecn_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_ecn_enable); 2434dd973b0eSMichael Tuexen inp->prsctp_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_pr_enable); 243597a0ca5bSMichael Tuexen inp->auth_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_auth_enable); 2436c79bec9cSMichael Tuexen inp->asconf_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_asconf_enable); 2437317e00efSMichael Tuexen inp->reconfig_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_reconfig_enable); 2438caea9879SMichael Tuexen inp->nrsack_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_nrsack_enable); 2439cb9b8e6fSMichael Tuexen inp->pktdrop_supported = (uint8_t)SCTP_BASE_SYSCTL(sctp_pktdrop_enable); 244044249214SRandall Stewart inp->idata_supported = 0; 244144249214SRandall Stewart 2442d089f9b9SMichael Tuexen inp->fibnum = so->so_fibnum; 2443830d754dSRandall Stewart /* init the small hash table we use to track asocid <-> tcb */ 2444830d754dSRandall Stewart inp->sctp_asocidhash = SCTP_HASH_INIT(SCTP_STACK_VTAG_HASH_SIZE, &inp->hashasocidmark); 2445830d754dSRandall Stewart if (inp->sctp_asocidhash == NULL) { 24466ba22f19SMichael Tuexen crfree(inp->ip_inp.inp.inp_cred); 2447830d754dSRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_ep), inp); 2448830d754dSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 24492c6b25b4SRandall Stewart return (ENOBUFS); 2450830d754dSRandall Stewart } 2451f8829a4aSRandall Stewart SCTP_INCR_EP_COUNT(); 2452482444b4SRandall Stewart inp->ip_inp.inp.inp_ip_ttl = MODULE_GLOBAL(ip_defttl); 2453f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2454f8829a4aSRandall Stewart 2455f8829a4aSRandall Stewart so->so_pcb = (caddr_t)inp; 2456f8829a4aSRandall Stewart 24571a3b5ce2SMichael Tuexen if (SCTP_SO_TYPE(so) == SOCK_SEQPACKET) { 2458f8829a4aSRandall Stewart /* UDP style socket */ 2459f8829a4aSRandall Stewart inp->sctp_flags = (SCTP_PCB_FLAGS_UDPTYPE | 2460f8829a4aSRandall Stewart SCTP_PCB_FLAGS_UNBOUND); 2461f8829a4aSRandall Stewart /* Be sure it is NON-BLOCKING IO for UDP */ 246242551e99SRandall Stewart /* SCTP_SET_SO_NBIO(so); */ 246342551e99SRandall Stewart } else if (SCTP_SO_TYPE(so) == SOCK_STREAM) { 2464f8829a4aSRandall Stewart /* TCP style socket */ 2465f8829a4aSRandall Stewart inp->sctp_flags = (SCTP_PCB_FLAGS_TCPTYPE | 2466f8829a4aSRandall Stewart SCTP_PCB_FLAGS_UNBOUND); 2467f8829a4aSRandall Stewart /* Be sure we have blocking IO by default */ 2468afb908daSMichael Tuexen SOCK_LOCK(so); 246942551e99SRandall Stewart SCTP_CLEAR_SO_NBIO(so); 2470afb908daSMichael Tuexen SOCK_UNLOCK(so); 2471f8829a4aSRandall Stewart } else { 2472f8829a4aSRandall Stewart /* 2473f8829a4aSRandall Stewart * unsupported socket type (RAW, etc)- in case we missed it 2474f8829a4aSRandall Stewart * in protosw 2475f8829a4aSRandall Stewart */ 2476c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EOPNOTSUPP); 247741291ef0SRandall Stewart so->so_pcb = NULL; 24786ba22f19SMichael Tuexen crfree(inp->ip_inp.inp.inp_cred); 2479b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_ep), inp); 2480f8829a4aSRandall Stewart return (EOPNOTSUPP); 2481f8829a4aSRandall Stewart } 2482b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_default_frag_interleave) == SCTP_FRAG_LEVEL_1) { 2483d61a0ae0SRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE); 2484c4739e2fSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS); 2485b3f1ea41SRandall Stewart } else if (SCTP_BASE_SYSCTL(sctp_default_frag_interleave) == SCTP_FRAG_LEVEL_2) { 2486c4739e2fSRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE); 2487c4739e2fSRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS); 2488b3f1ea41SRandall Stewart } else if (SCTP_BASE_SYSCTL(sctp_default_frag_interleave) == SCTP_FRAG_LEVEL_0) { 2489c4739e2fSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE); 2490c4739e2fSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS); 2491c4739e2fSRandall Stewart } 2492b3f1ea41SRandall Stewart inp->sctp_tcbhash = SCTP_HASH_INIT(SCTP_BASE_SYSCTL(sctp_pcbtblsize), 2493f8829a4aSRandall Stewart &inp->sctp_hashmark); 2494f8829a4aSRandall Stewart if (inp->sctp_tcbhash == NULL) { 2495ad81507eSRandall Stewart SCTP_PRINTF("Out of SCTP-INPCB->hashinit - no resources\n"); 2496c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS); 249741291ef0SRandall Stewart so->so_pcb = NULL; 24986ba22f19SMichael Tuexen crfree(inp->ip_inp.inp.inp_cred); 2499b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_ep), inp); 2500f8829a4aSRandall Stewart return (ENOBUFS); 2501f8829a4aSRandall Stewart } 2502f4c93d24SRandall Stewart inp->def_vrf_id = vrf_id; 250342551e99SRandall Stewart 2504f8829a4aSRandall Stewart SCTP_INP_INFO_WLOCK(); 2505f8829a4aSRandall Stewart SCTP_INP_LOCK_INIT(inp); 2506e1461651SRandall Stewart INP_LOCK_INIT(&inp->ip_inp.inp, "inp", "sctpinp"); 2507f8829a4aSRandall Stewart SCTP_INP_READ_INIT(inp); 2508f8829a4aSRandall Stewart SCTP_ASOC_CREATE_LOCK_INIT(inp); 2509f8829a4aSRandall Stewart /* lock the new ep */ 2510f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 2511f8829a4aSRandall Stewart 2512f8829a4aSRandall Stewart /* add it to the info area */ 2513b3f1ea41SRandall Stewart LIST_INSERT_HEAD(&SCTP_BASE_INFO(listhead), inp, sctp_list); 2514f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2515f8829a4aSRandall Stewart 2516f8829a4aSRandall Stewart TAILQ_INIT(&inp->read_queue); 2517f8829a4aSRandall Stewart LIST_INIT(&inp->sctp_addr_list); 251842551e99SRandall Stewart 2519f8829a4aSRandall Stewart LIST_INIT(&inp->sctp_asoc_list); 2520f8829a4aSRandall Stewart 2521a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS 2522a5d547adSRandall Stewart /* TEMP CODE */ 2523a5d547adSRandall Stewart LIST_INIT(&inp->sctp_asoc_free_list); 2524a5d547adSRandall Stewart #endif 2525f8829a4aSRandall Stewart /* Init the timer structure for signature change */ 2526139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&inp->sctp_ep.signature_change.timer); 2527f8829a4aSRandall Stewart inp->sctp_ep.signature_change.type = SCTP_TIMER_TYPE_NEWCOOKIE; 2528f8829a4aSRandall Stewart 2529f8829a4aSRandall Stewart /* now init the actual endpoint default data */ 2530f8829a4aSRandall Stewart m = &inp->sctp_ep; 2531f8829a4aSRandall Stewart 2532f8829a4aSRandall Stewart /* setup the base timeout information */ 253325ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_SEND] = sctp_secs_to_ticks(SCTP_SEND_SEC); /* needed ? */ 253425ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_INIT] = sctp_secs_to_ticks(SCTP_INIT_SEC); /* needed ? */ 253525ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_RECV] = sctp_msecs_to_ticks(SCTP_BASE_SYSCTL(sctp_delayed_sack_time_default)); 253625ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = sctp_msecs_to_ticks(SCTP_BASE_SYSCTL(sctp_heartbeat_interval_default)); 253725ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_PMTU] = sctp_secs_to_ticks(SCTP_BASE_SYSCTL(sctp_pmtu_raise_time_default)); 253825ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN] = sctp_secs_to_ticks(SCTP_BASE_SYSCTL(sctp_shutdown_guard_time_default)); 253925ec3553SMichael Tuexen m->sctp_timeoutticks[SCTP_TIMER_SIGNATURE] = sctp_secs_to_ticks(SCTP_BASE_SYSCTL(sctp_secret_lifetime_default)); 2540f8829a4aSRandall Stewart /* all max/min max are in ms */ 2541b3f1ea41SRandall Stewart m->sctp_maxrto = SCTP_BASE_SYSCTL(sctp_rto_max_default); 2542b3f1ea41SRandall Stewart m->sctp_minrto = SCTP_BASE_SYSCTL(sctp_rto_min_default); 2543b3f1ea41SRandall Stewart m->initial_rto = SCTP_BASE_SYSCTL(sctp_rto_initial_default); 2544b3f1ea41SRandall Stewart m->initial_init_rto_max = SCTP_BASE_SYSCTL(sctp_init_rto_max_default); 2545b3f1ea41SRandall Stewart m->sctp_sack_freq = SCTP_BASE_SYSCTL(sctp_sack_freq_default); 2546b3f1ea41SRandall Stewart m->max_init_times = SCTP_BASE_SYSCTL(sctp_init_rtx_max_default); 2547b3f1ea41SRandall Stewart m->max_send_times = SCTP_BASE_SYSCTL(sctp_assoc_rtx_max_default); 2548b3f1ea41SRandall Stewart m->def_net_failure = SCTP_BASE_SYSCTL(sctp_path_rtx_max_default); 2549ca85e948SMichael Tuexen m->def_net_pf_threshold = SCTP_BASE_SYSCTL(sctp_path_pf_threshold); 2550f8829a4aSRandall Stewart m->sctp_sws_sender = SCTP_SWS_SENDER_DEF; 2551f8829a4aSRandall Stewart m->sctp_sws_receiver = SCTP_SWS_RECEIVER_DEF; 2552b3f1ea41SRandall Stewart m->max_burst = SCTP_BASE_SYSCTL(sctp_max_burst_default); 2553899288aeSRandall Stewart m->fr_max_burst = SCTP_BASE_SYSCTL(sctp_fr_max_burst_default); 2554899288aeSRandall Stewart 2555b3f1ea41SRandall Stewart m->sctp_default_cc_module = SCTP_BASE_SYSCTL(sctp_default_cc_module); 2556f7a77f6fSMichael Tuexen m->sctp_default_ss_module = SCTP_BASE_SYSCTL(sctp_default_ss_module); 2557ee1ccd92SMichael Tuexen m->max_open_streams_intome = SCTP_BASE_SYSCTL(sctp_nr_incoming_streams_default); 2558f8829a4aSRandall Stewart /* number of streams to pre-open on a association */ 2559b3f1ea41SRandall Stewart m->pre_open_stream_count = SCTP_BASE_SYSCTL(sctp_nr_outgoing_streams_default); 2560f8829a4aSRandall Stewart 256128a6addeSMichael Tuexen m->default_mtu = 0; 2562f8829a4aSRandall Stewart /* Add adaptation cookie */ 25632416af26SMichael Tuexen m->adaptation_layer_indicator = 0; 25642416af26SMichael Tuexen m->adaptation_layer_indicator_provided = 0; 2565f8829a4aSRandall Stewart 2566f8829a4aSRandall Stewart /* seed random number generator */ 2567f8829a4aSRandall Stewart m->random_counter = 1; 2568f8829a4aSRandall Stewart m->store_at = SCTP_SIGNATURE_SIZE; 2569139bc87fSRandall Stewart SCTP_READ_RANDOM(m->random_numbers, sizeof(m->random_numbers)); 2570f8829a4aSRandall Stewart sctp_fill_random_store(m); 2571f8829a4aSRandall Stewart 2572f8829a4aSRandall Stewart /* Minimum cookie size */ 2573f8829a4aSRandall Stewart m->size_of_a_cookie = (sizeof(struct sctp_init_msg) * 2) + 2574f8829a4aSRandall Stewart sizeof(struct sctp_state_cookie); 2575f8829a4aSRandall Stewart m->size_of_a_cookie += SCTP_SIGNATURE_SIZE; 2576f8829a4aSRandall Stewart 2577f8829a4aSRandall Stewart /* Setup the initial secret */ 25786e55db54SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&time); 2579f8829a4aSRandall Stewart m->time_of_secret_change = time.tv_sec; 2580f8829a4aSRandall Stewart 2581f8829a4aSRandall Stewart for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) { 2582f8829a4aSRandall Stewart m->secret_key[0][i] = sctp_select_initial_TSN(m); 2583f8829a4aSRandall Stewart } 2584f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, NULL, NULL); 2585f8829a4aSRandall Stewart 2586f8829a4aSRandall Stewart /* How long is a cookie good for ? */ 258725ec3553SMichael Tuexen m->def_cookie_life = sctp_msecs_to_ticks(SCTP_BASE_SYSCTL(sctp_valid_cookie_life_default)); 2588f8829a4aSRandall Stewart /* 2589f8829a4aSRandall Stewart * Initialize authentication parameters 2590f8829a4aSRandall Stewart */ 2591f8829a4aSRandall Stewart m->local_hmacs = sctp_default_supported_hmaclist(); 2592f8829a4aSRandall Stewart m->local_auth_chunks = sctp_alloc_chunklist(); 2593c79bec9cSMichael Tuexen if (inp->asconf_supported) { 2594c79bec9cSMichael Tuexen sctp_auth_add_chunk(SCTP_ASCONF, m->local_auth_chunks); 2595c79bec9cSMichael Tuexen sctp_auth_add_chunk(SCTP_ASCONF_ACK, m->local_auth_chunks); 2596c79bec9cSMichael Tuexen } 259758bdb691SMichael Tuexen m->default_dscp = 0; 259858bdb691SMichael Tuexen #ifdef INET6 259958bdb691SMichael Tuexen m->default_flowlabel = 0; 260058bdb691SMichael Tuexen #endif 2601c9c58059SMichael Tuexen m->port = 0; /* encapsulation disabled by default */ 2602f8829a4aSRandall Stewart LIST_INIT(&m->shared_keys); 2603f8829a4aSRandall Stewart /* add default NULL key as key id 0 */ 2604f8829a4aSRandall Stewart null_key = sctp_alloc_sharedkey(); 2605f8829a4aSRandall Stewart sctp_insert_sharedkey(&m->shared_keys, null_key); 2606f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 2607f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 2608f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 12); 2609f8829a4aSRandall Stewart #endif 2610f8829a4aSRandall Stewart return (error); 2611f8829a4aSRandall Stewart } 2612f8829a4aSRandall Stewart 2613f8829a4aSRandall Stewart void 2614f8829a4aSRandall Stewart sctp_move_pcb_and_assoc(struct sctp_inpcb *old_inp, struct sctp_inpcb *new_inp, 2615f8829a4aSRandall Stewart struct sctp_tcb *stcb) 2616f8829a4aSRandall Stewart { 2617f8829a4aSRandall Stewart struct sctp_nets *net; 2618f8829a4aSRandall Stewart uint16_t lport, rport; 2619f8829a4aSRandall Stewart struct sctppcbhead *head; 2620f8829a4aSRandall Stewart struct sctp_laddr *laddr, *oladdr; 2621f8829a4aSRandall Stewart 26222afb3e84SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, 1); 2623f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 2624f8829a4aSRandall Stewart SCTP_INP_INFO_WLOCK(); 2625f8829a4aSRandall Stewart SCTP_INP_WLOCK(old_inp); 2626f8829a4aSRandall Stewart SCTP_INP_WLOCK(new_inp); 2627f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 26282afb3e84SRandall Stewart atomic_subtract_int(&stcb->asoc.refcnt, 1); 2629f8829a4aSRandall Stewart 2630f8829a4aSRandall Stewart new_inp->sctp_ep.time_of_secret_change = 2631f8829a4aSRandall Stewart old_inp->sctp_ep.time_of_secret_change; 2632f8829a4aSRandall Stewart memcpy(new_inp->sctp_ep.secret_key, old_inp->sctp_ep.secret_key, 2633f8829a4aSRandall Stewart sizeof(old_inp->sctp_ep.secret_key)); 2634f8829a4aSRandall Stewart new_inp->sctp_ep.current_secret_number = 2635f8829a4aSRandall Stewart old_inp->sctp_ep.current_secret_number; 2636f8829a4aSRandall Stewart new_inp->sctp_ep.last_secret_number = 2637f8829a4aSRandall Stewart old_inp->sctp_ep.last_secret_number; 2638f8829a4aSRandall Stewart new_inp->sctp_ep.size_of_a_cookie = old_inp->sctp_ep.size_of_a_cookie; 2639f8829a4aSRandall Stewart 2640f8829a4aSRandall Stewart /* make it so new data pours into the new socket */ 2641f8829a4aSRandall Stewart stcb->sctp_socket = new_inp->sctp_socket; 2642f8829a4aSRandall Stewart stcb->sctp_ep = new_inp; 2643f8829a4aSRandall Stewart 2644f8829a4aSRandall Stewart /* Copy the port across */ 2645f8829a4aSRandall Stewart lport = new_inp->sctp_lport = old_inp->sctp_lport; 2646f8829a4aSRandall Stewart rport = stcb->rport; 2647f8829a4aSRandall Stewart /* Pull the tcb from the old association */ 2648f8829a4aSRandall Stewart LIST_REMOVE(stcb, sctp_tcbhash); 2649f8829a4aSRandall Stewart LIST_REMOVE(stcb, sctp_tcblist); 2650a99b6783SRandall Stewart if (stcb->asoc.in_asocid_hash) { 2651a99b6783SRandall Stewart LIST_REMOVE(stcb, sctp_tcbasocidhash); 2652a99b6783SRandall Stewart } 2653f8829a4aSRandall Stewart /* Now insert the new_inp into the TCP connected hash */ 2654034b88b0SMichael Tuexen head = &SCTP_BASE_INFO(sctp_tcpephash)[SCTP_PCBHASH_ALLADDR((lport | rport), SCTP_BASE_INFO(hashtcpmark))]; 2655f8829a4aSRandall Stewart 2656f8829a4aSRandall Stewart LIST_INSERT_HEAD(head, new_inp, sctp_hash); 265793164cf9SRandall Stewart /* Its safe to access */ 265893164cf9SRandall Stewart new_inp->sctp_flags &= ~SCTP_PCB_FLAGS_UNBOUND; 2659f8829a4aSRandall Stewart 2660f8829a4aSRandall Stewart /* Now move the tcb into the endpoint list */ 2661f8829a4aSRandall Stewart LIST_INSERT_HEAD(&new_inp->sctp_asoc_list, stcb, sctp_tcblist); 2662f8829a4aSRandall Stewart /* 2663f8829a4aSRandall Stewart * Question, do we even need to worry about the ep-hash since we 2664f8829a4aSRandall Stewart * only have one connection? Probably not :> so lets get rid of it 2665f8829a4aSRandall Stewart * and not suck up any kernel memory in that. 2666f8829a4aSRandall Stewart */ 2667a99b6783SRandall Stewart if (stcb->asoc.in_asocid_hash) { 2668a99b6783SRandall Stewart struct sctpasochead *lhd; 2669f8829a4aSRandall Stewart 2670a99b6783SRandall Stewart lhd = &new_inp->sctp_asocidhash[SCTP_PCBHASH_ASOC(stcb->asoc.assoc_id, 2671a99b6783SRandall Stewart new_inp->hashasocidmark)]; 2672a99b6783SRandall Stewart LIST_INSERT_HEAD(lhd, stcb, sctp_tcbasocidhash); 2673a99b6783SRandall Stewart } 2674f8829a4aSRandall Stewart /* Ok. Let's restart timer. */ 2675f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 2676f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, new_inp, 2677f8829a4aSRandall Stewart stcb, net); 2678f8829a4aSRandall Stewart } 2679f8829a4aSRandall Stewart 2680f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2681f8829a4aSRandall Stewart if (new_inp->sctp_tcbhash != NULL) { 268244b7479bSRandall Stewart SCTP_HASH_FREE(new_inp->sctp_tcbhash, new_inp->sctp_hashmark); 2683f8829a4aSRandall Stewart new_inp->sctp_tcbhash = NULL; 2684f8829a4aSRandall Stewart } 2685f8829a4aSRandall Stewart if ((new_inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) { 2686f8829a4aSRandall Stewart /* Subset bound, so copy in the laddr list from the old_inp */ 2687f8829a4aSRandall Stewart LIST_FOREACH(oladdr, &old_inp->sctp_addr_list, sctp_nxt_addr) { 2688b3f1ea41SRandall Stewart laddr = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 2689f8829a4aSRandall Stewart if (laddr == NULL) { 2690f8829a4aSRandall Stewart /* 2691f8829a4aSRandall Stewart * Gak, what can we do? This assoc is really 2692f8829a4aSRandall Stewart * HOSED. We probably should send an abort 2693f8829a4aSRandall Stewart * here. 2694f8829a4aSRandall Stewart */ 2695ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Association hosed in TCP model, out of laddr memory\n"); 2696f8829a4aSRandall Stewart continue; 2697f8829a4aSRandall Stewart } 2698f8829a4aSRandall Stewart SCTP_INCR_LADDR_COUNT(); 26995ba7f91fSMichael Tuexen memset(laddr, 0, sizeof(*laddr)); 2700d61a0ae0SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&laddr->start_time); 2701f8829a4aSRandall Stewart laddr->ifa = oladdr->ifa; 2702bff64a4dSRandall Stewart atomic_add_int(&laddr->ifa->refcount, 1); 2703f8829a4aSRandall Stewart LIST_INSERT_HEAD(&new_inp->sctp_addr_list, laddr, 2704f8829a4aSRandall Stewart sctp_nxt_addr); 2705f8829a4aSRandall Stewart new_inp->laddr_count++; 27063d2443ccSMichael Tuexen if (oladdr == stcb->asoc.last_used_address) { 27073d2443ccSMichael Tuexen stcb->asoc.last_used_address = laddr; 27083d2443ccSMichael Tuexen } 2709f8829a4aSRandall Stewart } 2710f8829a4aSRandall Stewart } 27118745f898SMichael Tuexen /* Now any running timers need to be adjusted. */ 27128745f898SMichael Tuexen if (stcb->asoc.dack_timer.ep == old_inp) { 27138745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27148745f898SMichael Tuexen stcb->asoc.dack_timer.ep = new_inp; 27158745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27168745f898SMichael Tuexen } 27178745f898SMichael Tuexen if (stcb->asoc.asconf_timer.ep == old_inp) { 27188745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27198745f898SMichael Tuexen stcb->asoc.asconf_timer.ep = new_inp; 27208745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27218745f898SMichael Tuexen } 27228745f898SMichael Tuexen if (stcb->asoc.strreset_timer.ep == old_inp) { 27238745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27248745f898SMichael Tuexen stcb->asoc.strreset_timer.ep = new_inp; 27258745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27268745f898SMichael Tuexen } 27278745f898SMichael Tuexen if (stcb->asoc.shut_guard_timer.ep == old_inp) { 27288745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27298745f898SMichael Tuexen stcb->asoc.shut_guard_timer.ep = new_inp; 27308745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27318745f898SMichael Tuexen } 27328745f898SMichael Tuexen if (stcb->asoc.autoclose_timer.ep == old_inp) { 27338745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27348745f898SMichael Tuexen stcb->asoc.autoclose_timer.ep = new_inp; 27358745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27368745f898SMichael Tuexen } 27378745f898SMichael Tuexen if (stcb->asoc.delete_prim_timer.ep == old_inp) { 27388745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27398745f898SMichael Tuexen stcb->asoc.delete_prim_timer.ep = new_inp; 27408745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27418745f898SMichael Tuexen } 2742f8829a4aSRandall Stewart /* now what about the nets? */ 2743f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 27448745f898SMichael Tuexen if (net->pmtu_timer.ep == old_inp) { 27458745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27468745f898SMichael Tuexen net->pmtu_timer.ep = new_inp; 27478745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27488745f898SMichael Tuexen } 27498745f898SMichael Tuexen if (net->hb_timer.ep == old_inp) { 27508745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27518745f898SMichael Tuexen net->hb_timer.ep = new_inp; 27528745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27538745f898SMichael Tuexen } 27548745f898SMichael Tuexen if (net->rxt_timer.ep == old_inp) { 27558745f898SMichael Tuexen SCTP_INP_DECR_REF(old_inp); 27568745f898SMichael Tuexen net->rxt_timer.ep = new_inp; 27578745f898SMichael Tuexen SCTP_INP_INCR_REF(new_inp); 27588745f898SMichael Tuexen } 2759f8829a4aSRandall Stewart } 2760f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(new_inp); 2761f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(old_inp); 2762f8829a4aSRandall Stewart } 2763f8829a4aSRandall Stewart 27642b1c7de4SMichael Tuexen /* 27652b1c7de4SMichael Tuexen * insert an laddr entry with the given ifa for the desired list 27662b1c7de4SMichael Tuexen */ 27672b1c7de4SMichael Tuexen static int 27682b1c7de4SMichael Tuexen sctp_insert_laddr(struct sctpladdr *list, struct sctp_ifa *ifa, uint32_t act) 27692b1c7de4SMichael Tuexen { 27702b1c7de4SMichael Tuexen struct sctp_laddr *laddr; 2771f8829a4aSRandall Stewart 27722b1c7de4SMichael Tuexen laddr = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr); 27732b1c7de4SMichael Tuexen if (laddr == NULL) { 27742b1c7de4SMichael Tuexen /* out of memory? */ 27752b1c7de4SMichael Tuexen SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 27762b1c7de4SMichael Tuexen return (EINVAL); 27772b1c7de4SMichael Tuexen } 27782b1c7de4SMichael Tuexen SCTP_INCR_LADDR_COUNT(); 27795ba7f91fSMichael Tuexen memset(laddr, 0, sizeof(*laddr)); 27802b1c7de4SMichael Tuexen (void)SCTP_GETTIME_TIMEVAL(&laddr->start_time); 27812b1c7de4SMichael Tuexen laddr->ifa = ifa; 27822b1c7de4SMichael Tuexen laddr->action = act; 27832b1c7de4SMichael Tuexen atomic_add_int(&ifa->refcount, 1); 27842b1c7de4SMichael Tuexen /* insert it */ 27852b1c7de4SMichael Tuexen LIST_INSERT_HEAD(list, laddr, sctp_nxt_addr); 2786f8829a4aSRandall Stewart 27872b1c7de4SMichael Tuexen return (0); 27882b1c7de4SMichael Tuexen } 27892b1c7de4SMichael Tuexen 27902b1c7de4SMichael Tuexen /* 27912b1c7de4SMichael Tuexen * Remove an laddr entry from the local address list (on an assoc) 27922b1c7de4SMichael Tuexen */ 27932b1c7de4SMichael Tuexen static void 27942b1c7de4SMichael Tuexen sctp_remove_laddr(struct sctp_laddr *laddr) 27952b1c7de4SMichael Tuexen { 27962b1c7de4SMichael Tuexen 27972b1c7de4SMichael Tuexen /* remove from the list */ 27982b1c7de4SMichael Tuexen LIST_REMOVE(laddr, sctp_nxt_addr); 27992b1c7de4SMichael Tuexen sctp_free_ifa(laddr->ifa); 28002b1c7de4SMichael Tuexen SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), laddr); 28012b1c7de4SMichael Tuexen SCTP_DECR_LADDR_COUNT(); 28022b1c7de4SMichael Tuexen } 2803f8829a4aSRandall Stewart 28041b649582SRandall Stewart /* sctp_ifap is used to bypass normal local address validation checks */ 2805f8829a4aSRandall Stewart int 280680fefe0aSRandall Stewart sctp_inpcb_bind(struct socket *so, struct sockaddr *addr, 28071b649582SRandall Stewart struct sctp_ifa *sctp_ifap, struct thread *p) 2808f8829a4aSRandall Stewart { 2809f8829a4aSRandall Stewart /* bind a ep to a socket address */ 2810f8829a4aSRandall Stewart struct sctppcbhead *head; 2811f8829a4aSRandall Stewart struct sctp_inpcb *inp, *inp_tmp; 2812f8829a4aSRandall Stewart struct inpcb *ip_inp; 28136d9e8f2bSRandall Stewart int port_reuse_active = 0; 2814f8829a4aSRandall Stewart int bindall; 2815f8829a4aSRandall Stewart uint16_t lport; 2816f8829a4aSRandall Stewart int error; 281742551e99SRandall Stewart uint32_t vrf_id; 2818f8829a4aSRandall Stewart 2819f8829a4aSRandall Stewart lport = 0; 2820f8829a4aSRandall Stewart bindall = 1; 2821f8829a4aSRandall Stewart inp = (struct sctp_inpcb *)so->so_pcb; 2822f8829a4aSRandall Stewart ip_inp = (struct inpcb *)so->so_pcb; 2823f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 2824f8829a4aSRandall Stewart if (addr) { 2825ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Bind called port: %d\n", 2826f8829a4aSRandall Stewart ntohs(((struct sockaddr_in *)addr)->sin_port)); 2827ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Addr: "); 2828ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB1, addr); 2829f8829a4aSRandall Stewart } 2830ad81507eSRandall Stewart #endif 2831f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) == 0) { 2832f8829a4aSRandall Stewart /* already did a bind, subsequent binds NOT allowed ! */ 2833c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 2834f8829a4aSRandall Stewart return (EINVAL); 2835f8829a4aSRandall Stewart } 283652be287eSRandall Stewart #ifdef INVARIANTS 283752be287eSRandall Stewart if (p == NULL) 283852be287eSRandall Stewart panic("null proc/thread"); 283952be287eSRandall Stewart #endif 2840f8829a4aSRandall Stewart if (addr != NULL) { 28415e2c2d87SRandall Stewart switch (addr->sa_family) { 2842e6194c2eSMichael Tuexen #ifdef INET 28435e2c2d87SRandall Stewart case AF_INET: 28445e2c2d87SRandall Stewart { 2845f8829a4aSRandall Stewart struct sockaddr_in *sin; 2846f8829a4aSRandall Stewart 2847f8829a4aSRandall Stewart /* IPV6_V6ONLY socket? */ 284894962f6bSMichael Tuexen if (SCTP_IPV6_V6ONLY(inp)) { 2849c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 2850f8829a4aSRandall Stewart return (EINVAL); 2851f8829a4aSRandall Stewart } 2852c4739e2fSRandall Stewart if (addr->sa_len != sizeof(*sin)) { 2853c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 2854f8829a4aSRandall Stewart return (EINVAL); 2855c4739e2fSRandall Stewart } 28560053ed28SMichael Tuexen 2857f8829a4aSRandall Stewart sin = (struct sockaddr_in *)addr; 2858f8829a4aSRandall Stewart lport = sin->sin_port; 285918e198d3SRandall Stewart /* 2860830d754dSRandall Stewart * For LOOPBACK the prison_local_ip4() call 2861830d754dSRandall Stewart * will transmute the ip address to the 2862830d754dSRandall Stewart * proper value. 286318e198d3SRandall Stewart */ 2864c3b8c73cSRandall Stewart if (p && (error = prison_local_ip4(p->td_ucred, &sin->sin_addr)) != 0) { 2865c3b8c73cSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, error); 2866c3b8c73cSRandall Stewart return (error); 286718e198d3SRandall Stewart } 2868f8829a4aSRandall Stewart if (sin->sin_addr.s_addr != INADDR_ANY) { 2869f8829a4aSRandall Stewart bindall = 0; 2870f8829a4aSRandall Stewart } 28715e2c2d87SRandall Stewart break; 28725e2c2d87SRandall Stewart } 2873e6194c2eSMichael Tuexen #endif 28745e2c2d87SRandall Stewart #ifdef INET6 28755e2c2d87SRandall Stewart case AF_INET6: 28765e2c2d87SRandall Stewart { 2877b7b84c0eSMichael Tuexen /* 2878b7b84c0eSMichael Tuexen * Only for pure IPv6 Address. (No IPv4 2879b7b84c0eSMichael Tuexen * Mapped!) 2880b7b84c0eSMichael Tuexen */ 2881f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 2882f8829a4aSRandall Stewart 2883f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)addr; 2884f8829a4aSRandall Stewart 2885c4739e2fSRandall Stewart if (addr->sa_len != sizeof(*sin6)) { 2886c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 2887f8829a4aSRandall Stewart return (EINVAL); 2888c4739e2fSRandall Stewart } 2889f8829a4aSRandall Stewart lport = sin6->sin6_port; 289018e198d3SRandall Stewart /* 2891830d754dSRandall Stewart * For LOOPBACK the prison_local_ip6() call 2892830d754dSRandall Stewart * will transmute the ipv6 address to the 2893830d754dSRandall Stewart * proper value. 289418e198d3SRandall Stewart */ 2895c3b8c73cSRandall Stewart if (p && (error = prison_local_ip6(p->td_ucred, &sin6->sin6_addr, 2896c3b8c73cSRandall Stewart (SCTP_IPV6_V6ONLY(inp) != 0))) != 0) { 2897c3b8c73cSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, error); 2898c3b8c73cSRandall Stewart return (error); 2899413628a7SBjoern A. Zeeb } 2900f8829a4aSRandall Stewart if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 2901f8829a4aSRandall Stewart bindall = 0; 2902f8829a4aSRandall Stewart /* KAME hack: embed scopeid */ 2903482444b4SRandall Stewart if (sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone)) != 0) { 2904c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 2905f8829a4aSRandall Stewart return (EINVAL); 2906f8829a4aSRandall Stewart } 2907c4739e2fSRandall Stewart } 2908f8829a4aSRandall Stewart /* this must be cleared for ifa_ifwithaddr() */ 2909f8829a4aSRandall Stewart sin6->sin6_scope_id = 0; 29105e2c2d87SRandall Stewart break; 29115e2c2d87SRandall Stewart } 29125e2c2d87SRandall Stewart #endif 29135e2c2d87SRandall Stewart default: 2914c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EAFNOSUPPORT); 2915f8829a4aSRandall Stewart return (EAFNOSUPPORT); 2916f8829a4aSRandall Stewart } 2917f8829a4aSRandall Stewart } 29183ca1bceeSRandall Stewart SCTP_INP_INFO_WLOCK(); 29193ca1bceeSRandall Stewart SCTP_INP_WLOCK(inp); 29203c503c28SRandall Stewart /* Setup a vrf_id to be the default for the non-bind-all case. */ 292142551e99SRandall Stewart vrf_id = inp->def_vrf_id; 292242551e99SRandall Stewart 2923f8829a4aSRandall Stewart /* increase our count due to the unlock we do */ 2924f8829a4aSRandall Stewart SCTP_INP_INCR_REF(inp); 2925f8829a4aSRandall Stewart if (lport) { 2926f8829a4aSRandall Stewart /* 29278225a9bcSMichael Tuexen * Did the caller specify a port? if so we must see if an ep 2928f8829a4aSRandall Stewart * already has this one bound. 2929f8829a4aSRandall Stewart */ 2930f8829a4aSRandall Stewart /* got to be root to get at low ports */ 2931f8829a4aSRandall Stewart if (ntohs(lport) < IPPORT_RESERVED) { 29320c4622daSMichael Tuexen if ((p != NULL) && ((error = 293332f9753cSRobert Watson priv_check(p, PRIV_NETINET_RESERVEDPORT) 29340c4622daSMichael Tuexen ) != 0)) { 2935f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 2936f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 2937f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2938f8829a4aSRandall Stewart return (error); 2939f8829a4aSRandall Stewart } 2940f8829a4aSRandall Stewart } 2941f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 294242551e99SRandall Stewart if (bindall) { 294342551e99SRandall Stewart vrf_id = inp->def_vrf_id; 294442551e99SRandall Stewart inp_tmp = sctp_pcb_findep(addr, 0, 1, vrf_id); 2945f8829a4aSRandall Stewart if (inp_tmp != NULL) { 2946f8829a4aSRandall Stewart /* 294742551e99SRandall Stewart * lock guy returned and lower count note 294842551e99SRandall Stewart * that we are not bound so inp_tmp should 294942551e99SRandall Stewart * NEVER be inp. And it is this inp 295042551e99SRandall Stewart * (inp_tmp) that gets the reference bump, 295142551e99SRandall Stewart * so we must lower it. 2952f8829a4aSRandall Stewart */ 2953f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp_tmp); 2954f8829a4aSRandall Stewart /* unlock info */ 29556d9e8f2bSRandall Stewart if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE)) && 29566d9e8f2bSRandall Stewart (sctp_is_feature_on(inp_tmp, SCTP_PCB_FLAGS_PORTREUSE))) { 2957b7b84c0eSMichael Tuexen /* 2958b7b84c0eSMichael Tuexen * Ok, must be one-2-one and 2959b7b84c0eSMichael Tuexen * allowing port re-use 2960b7b84c0eSMichael Tuexen */ 29616d9e8f2bSRandall Stewart port_reuse_active = 1; 29626d9e8f2bSRandall Stewart goto continue_anyway; 29636d9e8f2bSRandall Stewart } 29646d9e8f2bSRandall Stewart SCTP_INP_DECR_REF(inp); 2965f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2966c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE); 2967207304d4SRandall Stewart return (EADDRINUSE); 2968f8829a4aSRandall Stewart } 296942551e99SRandall Stewart } else { 297042551e99SRandall Stewart inp_tmp = sctp_pcb_findep(addr, 0, 1, vrf_id); 297142551e99SRandall Stewart if (inp_tmp != NULL) { 297242551e99SRandall Stewart /* 297342551e99SRandall Stewart * lock guy returned and lower count note 297442551e99SRandall Stewart * that we are not bound so inp_tmp should 297542551e99SRandall Stewart * NEVER be inp. And it is this inp 297642551e99SRandall Stewart * (inp_tmp) that gets the reference bump, 297742551e99SRandall Stewart * so we must lower it. 297842551e99SRandall Stewart */ 297942551e99SRandall Stewart SCTP_INP_DECR_REF(inp_tmp); 298042551e99SRandall Stewart /* unlock info */ 29816d9e8f2bSRandall Stewart if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE)) && 29826d9e8f2bSRandall Stewart (sctp_is_feature_on(inp_tmp, SCTP_PCB_FLAGS_PORTREUSE))) { 2983b7b84c0eSMichael Tuexen /* 2984b7b84c0eSMichael Tuexen * Ok, must be one-2-one and 2985b7b84c0eSMichael Tuexen * allowing port re-use 2986b7b84c0eSMichael Tuexen */ 29876d9e8f2bSRandall Stewart port_reuse_active = 1; 29886d9e8f2bSRandall Stewart goto continue_anyway; 29896d9e8f2bSRandall Stewart } 29906d9e8f2bSRandall Stewart SCTP_INP_DECR_REF(inp); 299142551e99SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 2992c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE); 2993207304d4SRandall Stewart return (EADDRINUSE); 299442551e99SRandall Stewart } 299542551e99SRandall Stewart } 29966d9e8f2bSRandall Stewart continue_anyway: 2997f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 2998f8829a4aSRandall Stewart if (bindall) { 2999f8829a4aSRandall Stewart /* verify that no lport is not used by a singleton */ 30006d9e8f2bSRandall Stewart if ((port_reuse_active == 0) && 30018225a9bcSMichael Tuexen (inp_tmp = sctp_isport_inuse(inp, lport, vrf_id))) { 3002f8829a4aSRandall Stewart /* Sorry someone already has this one bound */ 30036d9e8f2bSRandall Stewart if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE)) && 30046d9e8f2bSRandall Stewart (sctp_is_feature_on(inp_tmp, SCTP_PCB_FLAGS_PORTREUSE))) { 30056d9e8f2bSRandall Stewart port_reuse_active = 1; 30066d9e8f2bSRandall Stewart } else { 3007f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 3008f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3009f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3010c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE); 3011207304d4SRandall Stewart return (EADDRINUSE); 3012f8829a4aSRandall Stewart } 3013f8829a4aSRandall Stewart } 30146d9e8f2bSRandall Stewart } 3015f8829a4aSRandall Stewart } else { 30169a972525SRandall Stewart uint16_t first, last, candidate; 3017d61a0ae0SRandall Stewart uint16_t count; 3018d61a0ae0SRandall Stewart int done; 3019f8829a4aSRandall Stewart 3020d61a0ae0SRandall Stewart if (ip_inp->inp_flags & INP_HIGHPORT) { 3021482444b4SRandall Stewart first = MODULE_GLOBAL(ipport_hifirstauto); 3022482444b4SRandall Stewart last = MODULE_GLOBAL(ipport_hilastauto); 3023d61a0ae0SRandall Stewart } else if (ip_inp->inp_flags & INP_LOWPORT) { 3024d61a0ae0SRandall Stewart if (p && (error = 302532f9753cSRobert Watson priv_check(p, PRIV_NETINET_RESERVEDPORT) 3026d61a0ae0SRandall Stewart )) { 3027d61a0ae0SRandall Stewart SCTP_INP_DECR_REF(inp); 3028d61a0ae0SRandall Stewart SCTP_INP_WUNLOCK(inp); 3029d61a0ae0SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3030c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, error); 3031d61a0ae0SRandall Stewart return (error); 3032d61a0ae0SRandall Stewart } 3033482444b4SRandall Stewart first = MODULE_GLOBAL(ipport_lowfirstauto); 3034482444b4SRandall Stewart last = MODULE_GLOBAL(ipport_lowlastauto); 3035d61a0ae0SRandall Stewart } else { 3036482444b4SRandall Stewart first = MODULE_GLOBAL(ipport_firstauto); 3037482444b4SRandall Stewart last = MODULE_GLOBAL(ipport_lastauto); 3038d61a0ae0SRandall Stewart } 3039d61a0ae0SRandall Stewart if (first > last) { 3040d61a0ae0SRandall Stewart uint16_t temp; 3041f8829a4aSRandall Stewart 3042d61a0ae0SRandall Stewart temp = first; 3043d61a0ae0SRandall Stewart first = last; 3044d61a0ae0SRandall Stewart last = temp; 3045f8829a4aSRandall Stewart } 3046d61a0ae0SRandall Stewart count = last - first + 1; /* number of candidates */ 30479a972525SRandall Stewart candidate = first + sctp_select_initial_TSN(&inp->sctp_ep) % (count); 30483c503c28SRandall Stewart 3049d61a0ae0SRandall Stewart done = 0; 3050d61a0ae0SRandall Stewart while (!done) { 30516d9e8f2bSRandall Stewart if (sctp_isport_inuse(inp, htons(candidate), inp->def_vrf_id) == NULL) { 3052d61a0ae0SRandall Stewart done = 1; 3053f8829a4aSRandall Stewart } 3054d61a0ae0SRandall Stewart if (!done) { 3055d61a0ae0SRandall Stewart if (--count == 0) { 3056d61a0ae0SRandall Stewart SCTP_INP_DECR_REF(inp); 3057d61a0ae0SRandall Stewart SCTP_INP_WUNLOCK(inp); 3058d61a0ae0SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3059c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE); 3060207304d4SRandall Stewart return (EADDRINUSE); 3061f8829a4aSRandall Stewart } 30629a972525SRandall Stewart if (candidate == last) 30639a972525SRandall Stewart candidate = first; 3064d61a0ae0SRandall Stewart else 30659a972525SRandall Stewart candidate = candidate + 1; 3066f8829a4aSRandall Stewart } 3067f8829a4aSRandall Stewart } 30689a972525SRandall Stewart lport = htons(candidate); 3069f8829a4aSRandall Stewart } 3070f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 3071f8829a4aSRandall Stewart if (inp->sctp_flags & (SCTP_PCB_FLAGS_SOCKET_GONE | 3072f8829a4aSRandall Stewart SCTP_PCB_FLAGS_SOCKET_ALLGONE)) { 3073f8829a4aSRandall Stewart /* 3074f8829a4aSRandall Stewart * this really should not happen. The guy did a non-blocking 3075f8829a4aSRandall Stewart * bind and then did a close at the same time. 3076f8829a4aSRandall Stewart */ 3077f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3078f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3079c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 3080f8829a4aSRandall Stewart return (EINVAL); 3081f8829a4aSRandall Stewart } 3082f8829a4aSRandall Stewart /* ok we look clear to give out this port, so lets setup the binding */ 3083f8829a4aSRandall Stewart if (bindall) { 3084f8829a4aSRandall Stewart /* binding to all addresses, so just set in the proper flags */ 3085f8829a4aSRandall Stewart inp->sctp_flags |= SCTP_PCB_FLAGS_BOUNDALL; 3086f8829a4aSRandall Stewart /* set the automatic addr changes from kernel flag */ 3087b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_auto_asconf) == 0) { 3088c4739e2fSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF); 3089f8829a4aSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_AUTO_ASCONF); 3090f8829a4aSRandall Stewart } else { 3091c4739e2fSRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF); 3092f8829a4aSRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_AUTO_ASCONF); 3093f8829a4aSRandall Stewart } 3094b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_multiple_asconfs) == 0) { 3095c54a18d2SRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_MULTIPLE_ASCONFS); 3096c54a18d2SRandall Stewart } else { 3097c54a18d2SRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_MULTIPLE_ASCONFS); 3098c54a18d2SRandall Stewart } 30992afb3e84SRandall Stewart /* 31002afb3e84SRandall Stewart * set the automatic mobility_base from kernel flag (by 31012afb3e84SRandall Stewart * micchie) 31022afb3e84SRandall Stewart */ 3103b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_mobility_base) == 0) { 31042afb3e84SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_BASE); 3105851b7298SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 31062afb3e84SRandall Stewart } else { 31072afb3e84SRandall Stewart sctp_mobility_feature_on(inp, SCTP_MOBILITY_BASE); 3108851b7298SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 31092afb3e84SRandall Stewart } 31102afb3e84SRandall Stewart /* 31112afb3e84SRandall Stewart * set the automatic mobility_fasthandoff from kernel flag 31122afb3e84SRandall Stewart * (by micchie) 31132afb3e84SRandall Stewart */ 3114b3f1ea41SRandall Stewart if (SCTP_BASE_SYSCTL(sctp_mobility_fasthandoff) == 0) { 31152afb3e84SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_FASTHANDOFF); 3116851b7298SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 31172afb3e84SRandall Stewart } else { 31182afb3e84SRandall Stewart sctp_mobility_feature_on(inp, SCTP_MOBILITY_FASTHANDOFF); 3119851b7298SRandall Stewart sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 31202afb3e84SRandall Stewart } 3121f8829a4aSRandall Stewart } else { 3122f8829a4aSRandall Stewart /* 3123f8829a4aSRandall Stewart * bind specific, make sure flags is off and add a new 3124f8829a4aSRandall Stewart * address structure to the sctp_addr_list inside the ep 3125f8829a4aSRandall Stewart * structure. 3126f8829a4aSRandall Stewart * 31274c7fb0cfSMichael Tuexen * We will need to allocate one and insert it at the head. 31284c7fb0cfSMichael Tuexen * The socketopt call can just insert new addresses in there 31294c7fb0cfSMichael Tuexen * as well. It will also have to do the embed scope kame 31304c7fb0cfSMichael Tuexen * hack too (before adding). 3131f8829a4aSRandall Stewart */ 313242551e99SRandall Stewart struct sctp_ifa *ifa; 313324aaac8dSMichael Tuexen union sctp_sockstore store; 3134f8829a4aSRandall Stewart 313524aaac8dSMichael Tuexen memset(&store, 0, sizeof(store)); 3136e6194c2eSMichael Tuexen switch (addr->sa_family) { 3137e0e00a4dSMichael Tuexen #ifdef INET 3138e6194c2eSMichael Tuexen case AF_INET: 313924aaac8dSMichael Tuexen memcpy(&store.sin, addr, sizeof(struct sockaddr_in)); 314024aaac8dSMichael Tuexen store.sin.sin_port = 0; 3141e6194c2eSMichael Tuexen break; 3142e0e00a4dSMichael Tuexen #endif 3143e0e00a4dSMichael Tuexen #ifdef INET6 3144e6194c2eSMichael Tuexen case AF_INET6: 314524aaac8dSMichael Tuexen memcpy(&store.sin6, addr, sizeof(struct sockaddr_in6)); 314624aaac8dSMichael Tuexen store.sin6.sin6_port = 0; 3147e6194c2eSMichael Tuexen break; 3148e0e00a4dSMichael Tuexen #endif 3149e6194c2eSMichael Tuexen default: 3150e6194c2eSMichael Tuexen break; 3151f8829a4aSRandall Stewart } 3152f8829a4aSRandall Stewart /* 3153f8829a4aSRandall Stewart * first find the interface with the bound address need to 3154f8829a4aSRandall Stewart * zero out the port to find the address! yuck! can't do 3155f8829a4aSRandall Stewart * this earlier since need port for sctp_pcb_findep() 3156f8829a4aSRandall Stewart */ 31578225a9bcSMichael Tuexen if (sctp_ifap != NULL) { 31581b649582SRandall Stewart ifa = sctp_ifap; 31598225a9bcSMichael Tuexen } else { 31601b649582SRandall Stewart /* 31611b649582SRandall Stewart * Note for BSD we hit here always other O/S's will 31622cf33471SMichael Tuexen * pass things in via the sctp_ifap argument. 31631b649582SRandall Stewart */ 316424aaac8dSMichael Tuexen ifa = sctp_find_ifa_by_addr(&store.sa, 3165851b7298SRandall Stewart vrf_id, SCTP_ADDR_NOT_LOCKED); 31661b649582SRandall Stewart } 3167f8829a4aSRandall Stewart if (ifa == NULL) { 3168f8829a4aSRandall Stewart /* Can't find an interface with that address */ 3169f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3170f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3171c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRNOTAVAIL); 3172f8829a4aSRandall Stewart return (EADDRNOTAVAIL); 3173f8829a4aSRandall Stewart } 3174e6194c2eSMichael Tuexen #ifdef INET6 3175f8829a4aSRandall Stewart if (addr->sa_family == AF_INET6) { 317642551e99SRandall Stewart /* GAK, more FIXME IFA lock? */ 317742551e99SRandall Stewart if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 3178f8829a4aSRandall Stewart /* Can't bind a non-existent addr. */ 3179f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3180f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3181c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 3182f8829a4aSRandall Stewart return (EINVAL); 3183f8829a4aSRandall Stewart } 3184f8829a4aSRandall Stewart } 3185e6194c2eSMichael Tuexen #endif 3186f8829a4aSRandall Stewart /* we're not bound all */ 3187f8829a4aSRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_BOUNDALL; 31883c503c28SRandall Stewart /* allow bindx() to send ASCONF's for binding changes */ 318942551e99SRandall Stewart sctp_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF); 319080fefe0aSRandall Stewart /* clear automatic addr changes from kernel flag */ 3191f8829a4aSRandall Stewart sctp_feature_off(inp, SCTP_PCB_FLAGS_AUTO_ASCONF); 319242551e99SRandall Stewart 3193f8829a4aSRandall Stewart /* add this address to the endpoint list */ 319442551e99SRandall Stewart error = sctp_insert_laddr(&inp->sctp_addr_list, ifa, 0); 3195f8829a4aSRandall Stewart if (error != 0) { 3196f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3197f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3198f8829a4aSRandall Stewart return (error); 3199f8829a4aSRandall Stewart } 3200f8829a4aSRandall Stewart inp->laddr_count++; 3201f8829a4aSRandall Stewart } 3202f8829a4aSRandall Stewart /* find the bucket */ 32036d9e8f2bSRandall Stewart if (port_reuse_active) { 32046d9e8f2bSRandall Stewart /* Put it into tcp 1-2-1 hash */ 3205034b88b0SMichael Tuexen head = &SCTP_BASE_INFO(sctp_tcpephash)[SCTP_PCBHASH_ALLADDR(lport, SCTP_BASE_INFO(hashtcpmark))]; 32066d9e8f2bSRandall Stewart inp->sctp_flags |= SCTP_PCB_FLAGS_IN_TCPPOOL; 32076d9e8f2bSRandall Stewart } else { 3208034b88b0SMichael Tuexen head = &SCTP_BASE_INFO(sctp_ephash)[SCTP_PCBHASH_ALLADDR(lport, SCTP_BASE_INFO(hashmark))]; 32096d9e8f2bSRandall Stewart } 3210f8829a4aSRandall Stewart /* put it in the bucket */ 3211f8829a4aSRandall Stewart LIST_INSERT_HEAD(head, inp, sctp_hash); 32126d9e8f2bSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Main hash to bind at head:%p, bound port:%d - in tcp_pool=%d\n", 3213dd294dceSMichael Tuexen (void *)head, ntohs(lport), port_reuse_active); 3214f8829a4aSRandall Stewart /* set in the port */ 3215f8829a4aSRandall Stewart inp->sctp_lport = lport; 3216f8829a4aSRandall Stewart 3217f8829a4aSRandall Stewart /* turn off just the unbound flag */ 3218f8829a4aSRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_UNBOUND; 3219f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3220f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3221f8829a4aSRandall Stewart return (0); 3222f8829a4aSRandall Stewart } 3223f8829a4aSRandall Stewart 3224f8829a4aSRandall Stewart static void 3225f7517433SRandall Stewart sctp_iterator_inp_being_freed(struct sctp_inpcb *inp) 3226f8829a4aSRandall Stewart { 3227f7517433SRandall Stewart struct sctp_iterator *it, *nit; 3228f8829a4aSRandall Stewart 3229f8829a4aSRandall Stewart /* 3230f8829a4aSRandall Stewart * We enter with the only the ITERATOR_LOCK in place and a write 3231f8829a4aSRandall Stewart * lock on the inp_info stuff. 3232f8829a4aSRandall Stewart */ 3233f7517433SRandall Stewart it = sctp_it_ctl.cur_it; 3234f7517433SRandall Stewart if (it && (it->vn != curvnet)) { 3235f7517433SRandall Stewart /* Its not looking at our VNET */ 3236f7517433SRandall Stewart return; 3237f7517433SRandall Stewart } 3238f7517433SRandall Stewart if (it && (it->inp == inp)) { 3239f8829a4aSRandall Stewart /* 3240f7517433SRandall Stewart * This is tricky and we hold the iterator lock, but when it 3241f7517433SRandall Stewart * returns and gets the lock (when we release it) the 3242f7517433SRandall Stewart * iterator will try to operate on inp. We need to stop that 3243f7517433SRandall Stewart * from happening. But of course the iterator has a 3244f7517433SRandall Stewart * reference on the stcb and inp. We can mark it and it will 3245f7517433SRandall Stewart * stop. 3246f7517433SRandall Stewart * 32474c7fb0cfSMichael Tuexen * If its a single iterator situation, we set the end 32484c7fb0cfSMichael Tuexen * iterator flag. Otherwise we set the iterator to go to the 32494c7fb0cfSMichael Tuexen * next inp. 3250f7517433SRandall Stewart * 3251f8829a4aSRandall Stewart */ 3252f7517433SRandall Stewart if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) { 3253f7517433SRandall Stewart sctp_it_ctl.iterator_flags |= SCTP_ITERATOR_STOP_CUR_IT; 3254f7517433SRandall Stewart } else { 3255f7517433SRandall Stewart sctp_it_ctl.iterator_flags |= SCTP_ITERATOR_STOP_CUR_INP; 3256f7517433SRandall Stewart } 3257f7517433SRandall Stewart } 3258f7517433SRandall Stewart /* 3259f7517433SRandall Stewart * Now go through and remove any single reference to our inp that 3260f7517433SRandall Stewart * may be still pending on the list 3261f7517433SRandall Stewart */ 3262f7517433SRandall Stewart SCTP_IPI_ITERATOR_WQ_LOCK(); 32634a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) { 3264f7517433SRandall Stewart if (it->vn != curvnet) { 3265f8829a4aSRandall Stewart continue; 3266f7517433SRandall Stewart } 3267f8829a4aSRandall Stewart if (it->inp == inp) { 3268f7517433SRandall Stewart /* This one points to me is it inp specific? */ 3269f8829a4aSRandall Stewart if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) { 3270f7517433SRandall Stewart /* Remove and free this one */ 3271f7517433SRandall Stewart TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, 3272f7517433SRandall Stewart it, sctp_nxt_itr); 3273f7517433SRandall Stewart if (it->function_atend != NULL) { 3274f7517433SRandall Stewart (*it->function_atend) (it->pointer, it->val); 3275f7517433SRandall Stewart } 3276f7517433SRandall Stewart SCTP_FREE(it, SCTP_M_ITER); 3277f8829a4aSRandall Stewart } else { 3278f7517433SRandall Stewart it->inp = LIST_NEXT(it->inp, sctp_list); 3279fc066a61SMichael Tuexen if (it->inp) { 3280fc066a61SMichael Tuexen SCTP_INP_INCR_REF(it->inp); 3281fc066a61SMichael Tuexen } 3282f8829a4aSRandall Stewart } 3283b7b84c0eSMichael Tuexen /* 3284b7b84c0eSMichael Tuexen * When its put in the refcnt is incremented so decr 3285b7b84c0eSMichael Tuexen * it 3286b7b84c0eSMichael Tuexen */ 3287ec4c19fcSRandall Stewart SCTP_INP_DECR_REF(inp); 3288f8829a4aSRandall Stewart } 3289f8829a4aSRandall Stewart } 3290f7517433SRandall Stewart SCTP_IPI_ITERATOR_WQ_UNLOCK(); 3291f8829a4aSRandall Stewart } 3292f8829a4aSRandall Stewart 3293f8829a4aSRandall Stewart /* release sctp_inpcb unbind the port */ 3294f8829a4aSRandall Stewart void 3295f8829a4aSRandall Stewart sctp_inpcb_free(struct sctp_inpcb *inp, int immediate, int from) 3296f8829a4aSRandall Stewart { 3297f8829a4aSRandall Stewart /* 3298f8829a4aSRandall Stewart * Here we free a endpoint. We must find it (if it is in the Hash 3299f8829a4aSRandall Stewart * table) and remove it from there. Then we must also find it in the 3300f8829a4aSRandall Stewart * overall list and remove it from there. After all removals are 3301f8829a4aSRandall Stewart * complete then any timer has to be stopped. Then start the actual 3302f8829a4aSRandall Stewart * freeing. a) Any local lists. b) Any associations. c) The hash of 3303f8829a4aSRandall Stewart * all associations. d) finally the ep itself. 3304f8829a4aSRandall Stewart */ 3305f8829a4aSRandall Stewart struct sctp_tcb *asoc, *nasoc; 3306f8829a4aSRandall Stewart struct sctp_laddr *laddr, *nladdr; 3307f8829a4aSRandall Stewart struct inpcb *ip_pcb; 3308f8829a4aSRandall Stewart struct socket *so; 33098ce4a9a2SRandall Stewart int being_refed = 0; 33104a9ef3f8SMichael Tuexen struct sctp_queued_to_read *sq, *nsq; 331193164cf9SRandall Stewart int cnt; 33124a9ef3f8SMichael Tuexen sctp_sharedkey_t *shared_key, *nshared_key; 3313f8829a4aSRandall Stewart 3314f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 3315f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 0); 3316f8829a4aSRandall Stewart #endif 3317f8829a4aSRandall Stewart SCTP_ITERATOR_LOCK(); 33182c6b25b4SRandall Stewart /* mark any iterators on the list or being processed */ 33192c6b25b4SRandall Stewart sctp_iterator_inp_being_freed(inp); 33202c6b25b4SRandall Stewart SCTP_ITERATOR_UNLOCK(); 3321f8829a4aSRandall Stewart so = inp->sctp_socket; 3322f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 3323f8829a4aSRandall Stewart /* been here before.. eeks.. get out of here */ 3324207304d4SRandall Stewart SCTP_PRINTF("This conflict in free SHOULD not be happening! from %d, imm %d\n", from, immediate); 3325f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 3326f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 1); 3327f8829a4aSRandall Stewart #endif 3328f8829a4aSRandall Stewart return; 3329f8829a4aSRandall Stewart } 3330f8829a4aSRandall Stewart SCTP_ASOC_CREATE_LOCK(inp); 3331f8829a4aSRandall Stewart SCTP_INP_INFO_WLOCK(); 3332f8829a4aSRandall Stewart 3333f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 3334b3a44e46SRandall Stewart if (from == SCTP_CALLED_AFTER_CMPSET_OFCLOSE) { 3335b3a44e46SRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_CLOSE_IP; 3336b3a44e46SRandall Stewart /* socket is gone, so no more wakeups allowed */ 3337b3a44e46SRandall Stewart inp->sctp_flags |= SCTP_PCB_FLAGS_DONT_WAKE; 3338b3a44e46SRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEINPUT; 3339b3a44e46SRandall Stewart inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEOUTPUT; 3340b3a44e46SRandall Stewart } 3341ad81507eSRandall Stewart /* First time through we have the socket lock, after that no more. */ 3342a5d547adSRandall Stewart sctp_timer_stop(SCTP_TIMER_TYPE_NEWCOOKIE, inp, NULL, NULL, 3343a5d547adSRandall Stewart SCTP_FROM_SCTP_PCB + SCTP_LOC_1); 3344f8829a4aSRandall Stewart 3345f8829a4aSRandall Stewart if (inp->control) { 3346f8829a4aSRandall Stewart sctp_m_freem(inp->control); 3347f8829a4aSRandall Stewart inp->control = NULL; 3348f8829a4aSRandall Stewart } 3349f8829a4aSRandall Stewart if (inp->pkt) { 3350f8829a4aSRandall Stewart sctp_m_freem(inp->pkt); 3351f8829a4aSRandall Stewart inp->pkt = NULL; 3352f8829a4aSRandall Stewart } 3353f8829a4aSRandall Stewart ip_pcb = &inp->ip_inp.inp; /* we could just cast the main pointer 3354f8829a4aSRandall Stewart * here but I will be nice :> (i.e. 3355f8829a4aSRandall Stewart * ip_pcb = ep;) */ 3356b0552ae2SRandall Stewart if (immediate == SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE) { 3357f8829a4aSRandall Stewart int cnt_in_sd; 3358f8829a4aSRandall Stewart 3359f8829a4aSRandall Stewart cnt_in_sd = 0; 33604a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(asoc, &inp->sctp_asoc_list, sctp_tcblist, nasoc) { 3361c4739e2fSRandall Stewart SCTP_TCB_LOCK(asoc); 3362f8829a4aSRandall Stewart if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 3363f8829a4aSRandall Stewart /* Skip guys being freed */ 3364f8829a4aSRandall Stewart cnt_in_sd++; 336562fb761fSRandall Stewart if (asoc->asoc.state & SCTP_STATE_IN_ACCEPT_QUEUE) { 336662fb761fSRandall Stewart /* 336762fb761fSRandall Stewart * Special case - we did not start a 336862fb761fSRandall Stewart * kill timer on the asoc due to it 336962fb761fSRandall Stewart * was not closed. So go ahead and 337062fb761fSRandall Stewart * start it now. 337162fb761fSRandall Stewart */ 3372839d21d6SMichael Tuexen SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_IN_ACCEPT_QUEUE); 337362fb761fSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, asoc, NULL); 337462fb761fSRandall Stewart } 3375c4739e2fSRandall Stewart SCTP_TCB_UNLOCK(asoc); 3376f8829a4aSRandall Stewart continue; 3377f8829a4aSRandall Stewart } 3378839d21d6SMichael Tuexen if (((SCTP_GET_STATE(asoc) == SCTP_STATE_COOKIE_WAIT) || 3379839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) == SCTP_STATE_COOKIE_ECHOED)) && 33808933fa13SRandall Stewart (asoc->asoc.total_output_queue_size == 0)) { 338175298de2SRandall Stewart /* 338275298de2SRandall Stewart * If we have data in queue, we don't want 338375298de2SRandall Stewart * to just free since the app may have done, 338475298de2SRandall Stewart * send()/close or connect/send/close. And 338575298de2SRandall Stewart * it wants the data to get across first. 338675298de2SRandall Stewart */ 33872afb3e84SRandall Stewart /* Just abandon things in the front states */ 3388c4739e2fSRandall Stewart if (sctp_free_assoc(inp, asoc, SCTP_PCBFREE_NOFORCE, 3389c4739e2fSRandall Stewart SCTP_FROM_SCTP_PCB + SCTP_LOC_2) == 0) { 3390c4739e2fSRandall Stewart cnt_in_sd++; 3391c4739e2fSRandall Stewart } 3392f8829a4aSRandall Stewart continue; 3393f8829a4aSRandall Stewart } 3394f8829a4aSRandall Stewart /* Disconnect the socket please */ 3395f8829a4aSRandall Stewart asoc->sctp_socket = NULL; 3396839d21d6SMichael Tuexen SCTP_ADD_SUBSTATE(asoc, SCTP_STATE_CLOSED_SOCKET); 3397f8829a4aSRandall Stewart if ((asoc->asoc.size_on_reasm_queue > 0) || 3398f8829a4aSRandall Stewart (asoc->asoc.control_pdapi) || 3399f8829a4aSRandall Stewart (asoc->asoc.size_on_all_streams > 0) || 34004e88d37aSMichael Tuexen (so && (so->so_rcv.sb_cc > 0))) { 3401f8829a4aSRandall Stewart /* Left with Data unread */ 3402f8829a4aSRandall Stewart struct mbuf *op_err; 3403f8829a4aSRandall Stewart 3404ff1ffd74SMichael Tuexen op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, ""); 3405a5d547adSRandall Stewart asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_3; 3406ceaad40aSRandall Stewart sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED); 3407f8829a4aSRandall Stewart SCTP_STAT_INCR_COUNTER32(sctps_aborted); 3408839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) || 3409839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 3410f8829a4aSRandall Stewart SCTP_STAT_DECR_GAUGE32(sctps_currestab); 3411f8829a4aSRandall Stewart } 3412c4739e2fSRandall Stewart if (sctp_free_assoc(inp, asoc, 3413c4739e2fSRandall Stewart SCTP_PCBFREE_NOFORCE, SCTP_FROM_SCTP_PCB + SCTP_LOC_4) == 0) { 3414c4739e2fSRandall Stewart cnt_in_sd++; 3415c4739e2fSRandall Stewart } 3416f8829a4aSRandall Stewart continue; 3417f8829a4aSRandall Stewart } else if (TAILQ_EMPTY(&asoc->asoc.send_queue) && 3418f8829a4aSRandall Stewart TAILQ_EMPTY(&asoc->asoc.sent_queue) && 3419e06f3469SMichael Tuexen (asoc->asoc.stream_queue_cnt == 0)) { 3420d1ea5fa9SMichael Tuexen if ((*asoc->asoc.ss_functions.sctp_ss_is_user_msgs_incomplete) (asoc, &asoc->asoc)) { 3421f8829a4aSRandall Stewart goto abort_anyway; 3422f8829a4aSRandall Stewart } 3423839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) && 3424839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_ACK_SENT)) { 3425ca85e948SMichael Tuexen struct sctp_nets *netp; 3426ca85e948SMichael Tuexen 3427f8829a4aSRandall Stewart /* 3428f8829a4aSRandall Stewart * there is nothing queued to send, 3429f8829a4aSRandall Stewart * so I send shutdown 3430f8829a4aSRandall Stewart */ 3431839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) || 3432839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 3433f8829a4aSRandall Stewart SCTP_STAT_DECR_GAUGE32(sctps_currestab); 3434f42a358aSRandall Stewart } 3435839d21d6SMichael Tuexen SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT); 3436c39cfa1fSMichael Tuexen sctp_stop_timers_for_shutdown(asoc); 3437c39cfa1fSMichael Tuexen if (asoc->asoc.alternate) { 3438c39cfa1fSMichael Tuexen netp = asoc->asoc.alternate; 3439c39cfa1fSMichael Tuexen } else { 3440c39cfa1fSMichael Tuexen netp = asoc->asoc.primary_destination; 3441c39cfa1fSMichael Tuexen } 3442c39cfa1fSMichael Tuexen sctp_send_shutdown(asoc, netp); 3443f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, asoc->sctp_ep, asoc, 3444ca85e948SMichael Tuexen netp); 34456fb7b4fbSMichael Tuexen sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, asoc->sctp_ep, asoc, NULL); 3446ceaad40aSRandall Stewart sctp_chunk_output(inp, asoc, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_LOCKED); 3447f8829a4aSRandall Stewart } 3448f8829a4aSRandall Stewart } else { 3449f8829a4aSRandall Stewart /* mark into shutdown pending */ 3450839d21d6SMichael Tuexen SCTP_ADD_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING); 34516fb7b4fbSMichael Tuexen sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, asoc->sctp_ep, asoc, NULL); 3452d1ea5fa9SMichael Tuexen if ((*asoc->asoc.ss_functions.sctp_ss_is_user_msgs_incomplete) (asoc, &asoc->asoc)) { 3453839d21d6SMichael Tuexen SCTP_ADD_SUBSTATE(asoc, SCTP_STATE_PARTIAL_MSG_LEFT); 3454f8829a4aSRandall Stewart } 3455f8829a4aSRandall Stewart if (TAILQ_EMPTY(&asoc->asoc.send_queue) && 3456f8829a4aSRandall Stewart TAILQ_EMPTY(&asoc->asoc.sent_queue) && 3457f8829a4aSRandall Stewart (asoc->asoc.state & SCTP_STATE_PARTIAL_MSG_LEFT)) { 3458f8829a4aSRandall Stewart struct mbuf *op_err; 3459f8829a4aSRandall Stewart 3460f8829a4aSRandall Stewart abort_anyway: 3461ff1ffd74SMichael Tuexen op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, ""); 3462a5d547adSRandall Stewart asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_5; 3463ceaad40aSRandall Stewart sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED); 3464f8829a4aSRandall Stewart SCTP_STAT_INCR_COUNTER32(sctps_aborted); 3465839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) || 3466839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 3467f8829a4aSRandall Stewart SCTP_STAT_DECR_GAUGE32(sctps_currestab); 3468f8829a4aSRandall Stewart } 3469c4739e2fSRandall Stewart if (sctp_free_assoc(inp, asoc, 3470c4739e2fSRandall Stewart SCTP_PCBFREE_NOFORCE, 3471c4739e2fSRandall Stewart SCTP_FROM_SCTP_PCB + SCTP_LOC_6) == 0) { 3472c4739e2fSRandall Stewart cnt_in_sd++; 3473c4739e2fSRandall Stewart } 3474f8829a4aSRandall Stewart continue; 34752afb3e84SRandall Stewart } else { 3476ceaad40aSRandall Stewart sctp_chunk_output(inp, asoc, SCTP_OUTPUT_FROM_CLOSING, SCTP_SO_LOCKED); 3477f8829a4aSRandall Stewart } 3478f8829a4aSRandall Stewart } 3479f8829a4aSRandall Stewart cnt_in_sd++; 3480f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(asoc); 3481f8829a4aSRandall Stewart } 3482f8829a4aSRandall Stewart /* now is there some left in our SHUTDOWN state? */ 3483f8829a4aSRandall Stewart if (cnt_in_sd) { 3484f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 3485f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 2); 3486f8829a4aSRandall Stewart #endif 34874a16c2c8SRandall Stewart inp->sctp_socket = NULL; 3488b3a44e46SRandall Stewart SCTP_INP_WUNLOCK(inp); 3489b3a44e46SRandall Stewart SCTP_ASOC_CREATE_UNLOCK(inp); 3490b3a44e46SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3491f8829a4aSRandall Stewart return; 3492f8829a4aSRandall Stewart } 3493f8829a4aSRandall Stewart } 3494f8829a4aSRandall Stewart inp->sctp_socket = NULL; 3495f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) != 3496f8829a4aSRandall Stewart SCTP_PCB_FLAGS_UNBOUND) { 3497f8829a4aSRandall Stewart /* 3498f8829a4aSRandall Stewart * ok, this guy has been bound. It's port is somewhere in 3499b3f1ea41SRandall Stewart * the SCTP_BASE_INFO(hash table). Remove it! 3500f8829a4aSRandall Stewart */ 3501f8829a4aSRandall Stewart LIST_REMOVE(inp, sctp_hash); 3502f8829a4aSRandall Stewart inp->sctp_flags |= SCTP_PCB_FLAGS_UNBOUND; 3503f8829a4aSRandall Stewart } 35040053ed28SMichael Tuexen 3505f8829a4aSRandall Stewart /* 3506f8829a4aSRandall Stewart * If there is a timer running to kill us, forget it, since it may 3507f8829a4aSRandall Stewart * have a contest on the INP lock.. which would cause us to die ... 3508f8829a4aSRandall Stewart */ 3509f8829a4aSRandall Stewart cnt = 0; 35104a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(asoc, &inp->sctp_asoc_list, sctp_tcblist, nasoc) { 351127387dacSMichael Tuexen SCTP_TCB_LOCK(asoc); 3512205f3e15SMichael Tuexen if (immediate != SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE) { 3513205f3e15SMichael Tuexen /* Disconnect the socket please */ 3514205f3e15SMichael Tuexen asoc->sctp_socket = NULL; 3515205f3e15SMichael Tuexen SCTP_ADD_SUBSTATE(asoc, SCTP_STATE_CLOSED_SOCKET); 3516205f3e15SMichael Tuexen } 3517f8829a4aSRandall Stewart if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 35187c82e9faSRandall Stewart if (asoc->asoc.state & SCTP_STATE_IN_ACCEPT_QUEUE) { 3519839d21d6SMichael Tuexen SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_IN_ACCEPT_QUEUE); 35207c82e9faSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, asoc, NULL); 35217c82e9faSRandall Stewart } 3522f8829a4aSRandall Stewart cnt++; 352327387dacSMichael Tuexen SCTP_TCB_UNLOCK(asoc); 3524f8829a4aSRandall Stewart continue; 3525f8829a4aSRandall Stewart } 3526f8829a4aSRandall Stewart /* Free associations that are NOT killing us */ 3527839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) != SCTP_STATE_COOKIE_WAIT) && 3528f8829a4aSRandall Stewart ((asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0)) { 3529f8829a4aSRandall Stewart struct mbuf *op_err; 3530f8829a4aSRandall Stewart 3531ff1ffd74SMichael Tuexen op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, ""); 3532a5d547adSRandall Stewart asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_7; 3533ceaad40aSRandall Stewart sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED); 3534f8829a4aSRandall Stewart SCTP_STAT_INCR_COUNTER32(sctps_aborted); 3535f8829a4aSRandall Stewart } else if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) { 3536f8829a4aSRandall Stewart cnt++; 3537f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(asoc); 3538f8829a4aSRandall Stewart continue; 3539f8829a4aSRandall Stewart } 3540839d21d6SMichael Tuexen if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) || 3541839d21d6SMichael Tuexen (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 3542f8829a4aSRandall Stewart SCTP_STAT_DECR_GAUGE32(sctps_currestab); 3543f8829a4aSRandall Stewart } 3544b7d130beSMichael Tuexen if (sctp_free_assoc(inp, asoc, SCTP_PCBFREE_FORCE, 3545b7d130beSMichael Tuexen SCTP_FROM_SCTP_PCB + SCTP_LOC_8) == 0) { 3546c4739e2fSRandall Stewart cnt++; 3547c4739e2fSRandall Stewart } 3548f8829a4aSRandall Stewart } 3549f8829a4aSRandall Stewart if (cnt) { 3550f8829a4aSRandall Stewart /* Ok we have someone out there that will kill us */ 3551f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 3552f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 3); 3553f8829a4aSRandall Stewart #endif 3554b3a44e46SRandall Stewart SCTP_INP_WUNLOCK(inp); 3555b3a44e46SRandall Stewart SCTP_ASOC_CREATE_UNLOCK(inp); 3556b3a44e46SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3557f8829a4aSRandall Stewart return; 3558f8829a4aSRandall Stewart } 35598ce4a9a2SRandall Stewart if (SCTP_INP_LOCK_CONTENDED(inp)) 35608ce4a9a2SRandall Stewart being_refed++; 35618ce4a9a2SRandall Stewart if (SCTP_INP_READ_CONTENDED(inp)) 35628ce4a9a2SRandall Stewart being_refed++; 35638ce4a9a2SRandall Stewart if (SCTP_ASOC_CREATE_LOCK_CONTENDED(inp)) 35648ce4a9a2SRandall Stewart being_refed++; 35658745f898SMichael Tuexen /* NOTE: 0 refcount also means no timers are referencing us. */ 35660c7dc840SRandall Stewart if ((inp->refcount) || 35678ce4a9a2SRandall Stewart (being_refed) || 35688ce4a9a2SRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_CLOSE_IP)) { 3569b3a44e46SRandall Stewart #ifdef SCTP_LOG_CLOSING 3570b3a44e46SRandall Stewart sctp_log_closing(inp, NULL, 4); 3571b3a44e46SRandall Stewart #endif 3572f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL); 3573f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 3574f8829a4aSRandall Stewart SCTP_ASOC_CREATE_UNLOCK(inp); 3575f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3576f8829a4aSRandall Stewart return; 3577f8829a4aSRandall Stewart } 3578f8829a4aSRandall Stewart inp->sctp_ep.signature_change.type = 0; 3579f8829a4aSRandall Stewart inp->sctp_flags |= SCTP_PCB_FLAGS_SOCKET_ALLGONE; 3580b3a44e46SRandall Stewart /* 3581b3a44e46SRandall Stewart * Remove it from the list .. last thing we need a lock for. 3582b3a44e46SRandall Stewart */ 3583b3a44e46SRandall Stewart LIST_REMOVE(inp, sctp_list); 3584b3a44e46SRandall Stewart SCTP_INP_WUNLOCK(inp); 3585b3a44e46SRandall Stewart SCTP_ASOC_CREATE_UNLOCK(inp); 3586b3a44e46SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 3587f8829a4aSRandall Stewart 3588f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 3589f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 5); 3590f8829a4aSRandall Stewart #endif 3591830d754dSRandall Stewart if ((inp->sctp_asocidhash) != NULL) { 3592830d754dSRandall Stewart SCTP_HASH_FREE(inp->sctp_asocidhash, inp->hashasocidmark); 3593830d754dSRandall Stewart inp->sctp_asocidhash = NULL; 3594830d754dSRandall Stewart } 35953c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 35964a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(sq, &inp->read_queue, next, nsq) { 3597f1f73e57SRandall Stewart /* Its only abandoned if it had data left */ 3598f1f73e57SRandall Stewart if (sq->length) 3599f1f73e57SRandall Stewart SCTP_STAT_INCR(sctps_left_abandon); 3600f1f73e57SRandall Stewart 3601f8829a4aSRandall Stewart TAILQ_REMOVE(&inp->read_queue, sq, next); 3602f8829a4aSRandall Stewart sctp_free_remote_addr(sq->whoFrom); 3603f8829a4aSRandall Stewart if (so) 36044e88d37aSMichael Tuexen so->so_rcv.sb_cc -= sq->length; 3605f8829a4aSRandall Stewart if (sq->data) { 3606f8829a4aSRandall Stewart sctp_m_freem(sq->data); 3607f8829a4aSRandall Stewart sq->data = NULL; 3608f8829a4aSRandall Stewart } 3609f8829a4aSRandall Stewart /* 3610f8829a4aSRandall Stewart * no need to free the net count, since at this point all 3611f8829a4aSRandall Stewart * assoc's are gone. 3612f8829a4aSRandall Stewart */ 361344249214SRandall Stewart sctp_free_a_readq(NULL, sq); 3614f8829a4aSRandall Stewart } 3615f8829a4aSRandall Stewart /* Now the sctp_pcb things */ 3616f8829a4aSRandall Stewart /* 3617f8829a4aSRandall Stewart * free each asoc if it is not already closed/free. we can't use the 3618f8829a4aSRandall Stewart * macro here since le_next will get freed as part of the 3619f8829a4aSRandall Stewart * sctp_free_assoc() call. 3620f8829a4aSRandall Stewart */ 3621f8829a4aSRandall Stewart if (ip_pcb->inp_options) { 3622f8829a4aSRandall Stewart (void)sctp_m_free(ip_pcb->inp_options); 3623f8829a4aSRandall Stewart ip_pcb->inp_options = 0; 3624f8829a4aSRandall Stewart } 3625f8829a4aSRandall Stewart #ifdef INET6 362694962f6bSMichael Tuexen if (ip_pcb->inp_vflag & INP_IPV6) { 362794962f6bSMichael Tuexen ip6_freepcbopts(ip_pcb->in6p_outputopts); 362894962f6bSMichael Tuexen } 3629f8829a4aSRandall Stewart #endif /* INET6 */ 3630f8829a4aSRandall Stewart ip_pcb->inp_vflag = 0; 3631f8829a4aSRandall Stewart /* free up authentication fields */ 3632f8829a4aSRandall Stewart if (inp->sctp_ep.local_auth_chunks != NULL) 3633f8829a4aSRandall Stewart sctp_free_chunklist(inp->sctp_ep.local_auth_chunks); 3634f8829a4aSRandall Stewart if (inp->sctp_ep.local_hmacs != NULL) 3635f8829a4aSRandall Stewart sctp_free_hmaclist(inp->sctp_ep.local_hmacs); 3636f8829a4aSRandall Stewart 36374a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(shared_key, &inp->sctp_ep.shared_keys, next, nshared_key) { 3638f8829a4aSRandall Stewart LIST_REMOVE(shared_key, next); 3639f8829a4aSRandall Stewart sctp_free_sharedkey(shared_key); 36403c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 3641f8829a4aSRandall Stewart } 3642f8829a4aSRandall Stewart 3643f8829a4aSRandall Stewart /* 3644f8829a4aSRandall Stewart * if we have an address list the following will free the list of 3645f8829a4aSRandall Stewart * ifaddr's that are set into this ep. Again macro limitations here, 3646f8829a4aSRandall Stewart * since the LIST_FOREACH could be a bad idea. 3647f8829a4aSRandall Stewart */ 36484a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(laddr, &inp->sctp_addr_list, sctp_nxt_addr, nladdr) { 364942551e99SRandall Stewart sctp_remove_laddr(laddr); 3650f8829a4aSRandall Stewart } 3651a5d547adSRandall Stewart 3652a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS 3653a5d547adSRandall Stewart /* TEMP CODE */ 36544a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(asoc, &inp->sctp_asoc_free_list, sctp_tcblist, nasoc) { 3655a5d547adSRandall Stewart LIST_REMOVE(asoc, sctp_tcblist); 3656b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), asoc); 3657a5d547adSRandall Stewart SCTP_DECR_ASOC_COUNT(); 3658a5d547adSRandall Stewart } 3659a5d547adSRandall Stewart /* *** END TEMP CODE *** */ 3660a5d547adSRandall Stewart #endif 3661f8829a4aSRandall Stewart /* Now lets see about freeing the EP hash table. */ 3662f8829a4aSRandall Stewart if (inp->sctp_tcbhash != NULL) { 366344b7479bSRandall Stewart SCTP_HASH_FREE(inp->sctp_tcbhash, inp->sctp_hashmark); 366444b7479bSRandall Stewart inp->sctp_tcbhash = NULL; 3665f8829a4aSRandall Stewart } 3666f8829a4aSRandall Stewart /* Now we must put the ep memory back into the zone pool */ 36676ba22f19SMichael Tuexen crfree(inp->ip_inp.inp.inp_cred); 3668e1461651SRandall Stewart INP_LOCK_DESTROY(&inp->ip_inp.inp); 3669f8829a4aSRandall Stewart SCTP_INP_LOCK_DESTROY(inp); 3670f8829a4aSRandall Stewart SCTP_INP_READ_DESTROY(inp); 3671f8829a4aSRandall Stewart SCTP_ASOC_CREATE_LOCK_DESTROY(inp); 3672b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_ep), inp); 3673f8829a4aSRandall Stewart SCTP_DECR_EP_COUNT(); 3674f8829a4aSRandall Stewart } 3675f8829a4aSRandall Stewart 3676f8829a4aSRandall Stewart struct sctp_nets * 3677f8829a4aSRandall Stewart sctp_findnet(struct sctp_tcb *stcb, struct sockaddr *addr) 3678f8829a4aSRandall Stewart { 3679f8829a4aSRandall Stewart struct sctp_nets *net; 3680f8829a4aSRandall Stewart 3681f8829a4aSRandall Stewart /* locate the address */ 3682f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 3683f8829a4aSRandall Stewart if (sctp_cmpaddr(addr, (struct sockaddr *)&net->ro._l_addr)) 3684f8829a4aSRandall Stewart return (net); 3685f8829a4aSRandall Stewart } 3686f8829a4aSRandall Stewart return (NULL); 3687f8829a4aSRandall Stewart } 3688f8829a4aSRandall Stewart 3689f8829a4aSRandall Stewart int 369042551e99SRandall Stewart sctp_is_address_on_local_host(struct sockaddr *addr, uint32_t vrf_id) 3691f8829a4aSRandall Stewart { 369242551e99SRandall Stewart struct sctp_ifa *sctp_ifa; 3693f8829a4aSRandall Stewart 3694851b7298SRandall Stewart sctp_ifa = sctp_find_ifa_by_addr(addr, vrf_id, SCTP_ADDR_NOT_LOCKED); 369542551e99SRandall Stewart if (sctp_ifa) { 3696f8829a4aSRandall Stewart return (1); 369742551e99SRandall Stewart } else { 3698f8829a4aSRandall Stewart return (0); 3699f8829a4aSRandall Stewart } 370042551e99SRandall Stewart } 370142551e99SRandall Stewart 3702ad81507eSRandall Stewart /* 3703ad81507eSRandall Stewart * add's a remote endpoint address, done with the INIT/INIT-ACK as well as 3704ad81507eSRandall Stewart * when a ASCONF arrives that adds it. It will also initialize all the cwnd 3705ad81507eSRandall Stewart * stats of stuff. 3706ad81507eSRandall Stewart */ 3707f8829a4aSRandall Stewart int 3708f8829a4aSRandall Stewart sctp_add_remote_addr(struct sctp_tcb *stcb, struct sockaddr *newaddr, 37097154bf4aSMichael Tuexen struct sctp_nets **netp, uint16_t port, int set_scope, int from) 3710f8829a4aSRandall Stewart { 3711f8829a4aSRandall Stewart /* 3712f8829a4aSRandall Stewart * The following is redundant to the same lines in the 3713034b88b0SMichael Tuexen * sctp_aloc_assoc() but is needed since others call the add address 3714034b88b0SMichael Tuexen * function 3715f8829a4aSRandall Stewart */ 3716f8829a4aSRandall Stewart struct sctp_nets *net, *netfirst; 3717f8829a4aSRandall Stewart int addr_inscope; 3718f8829a4aSRandall Stewart 3719ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Adding an address (from:%d) to the peer: ", 3720ad81507eSRandall Stewart from); 3721ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB1, newaddr); 3722f8829a4aSRandall Stewart 3723f8829a4aSRandall Stewart netfirst = sctp_findnet(stcb, newaddr); 3724f8829a4aSRandall Stewart if (netfirst) { 3725f8829a4aSRandall Stewart /* 3726f8829a4aSRandall Stewart * Lie and return ok, we don't want to make the association 3727f8829a4aSRandall Stewart * go away for this behavior. It will happen in the TCP 3728f8829a4aSRandall Stewart * model in a connected socket. It does not reach the hash 3729f8829a4aSRandall Stewart * table until after the association is built so it can't be 3730f8829a4aSRandall Stewart * found. Mark as reachable, since the initial creation will 3731f8829a4aSRandall Stewart * have been cleared and the NOT_IN_ASSOC flag will have 3732f8829a4aSRandall Stewart * been added... and we don't want to end up removing it 3733f8829a4aSRandall Stewart * back out. 3734f8829a4aSRandall Stewart */ 3735f8829a4aSRandall Stewart if (netfirst->dest_state & SCTP_ADDR_UNCONFIRMED) { 3736f8829a4aSRandall Stewart netfirst->dest_state = (SCTP_ADDR_REACHABLE | 3737f8829a4aSRandall Stewart SCTP_ADDR_UNCONFIRMED); 3738f8829a4aSRandall Stewart } else { 3739f8829a4aSRandall Stewart netfirst->dest_state = SCTP_ADDR_REACHABLE; 3740f8829a4aSRandall Stewart } 3741f8829a4aSRandall Stewart 3742f8829a4aSRandall Stewart return (0); 3743f8829a4aSRandall Stewart } 3744f8829a4aSRandall Stewart addr_inscope = 1; 3745e6194c2eSMichael Tuexen switch (newaddr->sa_family) { 3746e6194c2eSMichael Tuexen #ifdef INET 3747e6194c2eSMichael Tuexen case AF_INET: 3748e6194c2eSMichael Tuexen { 3749f8829a4aSRandall Stewart struct sockaddr_in *sin; 3750f8829a4aSRandall Stewart 3751f8829a4aSRandall Stewart sin = (struct sockaddr_in *)newaddr; 3752f8829a4aSRandall Stewart if (sin->sin_addr.s_addr == 0) { 3753f8829a4aSRandall Stewart /* Invalid address */ 3754f8829a4aSRandall Stewart return (-1); 3755f8829a4aSRandall Stewart } 37565ba7f91fSMichael Tuexen /* zero out the zero area */ 3757f8829a4aSRandall Stewart memset(&sin->sin_zero, 0, sizeof(sin->sin_zero)); 3758f8829a4aSRandall Stewart 3759f8829a4aSRandall Stewart /* assure len is set */ 3760f8829a4aSRandall Stewart sin->sin_len = sizeof(struct sockaddr_in); 3761f8829a4aSRandall Stewart if (set_scope) { 3762f8829a4aSRandall Stewart if (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) { 3763a1cb341bSMichael Tuexen stcb->asoc.scope.ipv4_local_scope = 1; 3764f8829a4aSRandall Stewart } 3765f8829a4aSRandall Stewart } else { 3766f8829a4aSRandall Stewart /* Validate the address is in scope */ 3767f8829a4aSRandall Stewart if ((IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) && 3768a1cb341bSMichael Tuexen (stcb->asoc.scope.ipv4_local_scope == 0)) { 3769f8829a4aSRandall Stewart addr_inscope = 0; 3770f8829a4aSRandall Stewart } 3771f8829a4aSRandall Stewart } 3772e6194c2eSMichael Tuexen break; 3773e6194c2eSMichael Tuexen } 3774e6194c2eSMichael Tuexen #endif 3775c54a18d2SRandall Stewart #ifdef INET6 3776e6194c2eSMichael Tuexen case AF_INET6: 3777e6194c2eSMichael Tuexen { 3778f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 3779f8829a4aSRandall Stewart 3780f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)newaddr; 3781f8829a4aSRandall Stewart if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) { 3782f8829a4aSRandall Stewart /* Invalid address */ 3783f8829a4aSRandall Stewart return (-1); 3784f8829a4aSRandall Stewart } 3785f8829a4aSRandall Stewart /* assure len is set */ 3786f8829a4aSRandall Stewart sin6->sin6_len = sizeof(struct sockaddr_in6); 3787f8829a4aSRandall Stewart if (set_scope) { 378842551e99SRandall Stewart if (sctp_is_address_on_local_host(newaddr, stcb->asoc.vrf_id)) { 3789a1cb341bSMichael Tuexen stcb->asoc.scope.loopback_scope = 1; 3790a1cb341bSMichael Tuexen stcb->asoc.scope.local_scope = 0; 3791a1cb341bSMichael Tuexen stcb->asoc.scope.ipv4_local_scope = 1; 3792a1cb341bSMichael Tuexen stcb->asoc.scope.site_scope = 1; 3793f8829a4aSRandall Stewart } else if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) { 3794f8829a4aSRandall Stewart /* 3795e6194c2eSMichael Tuexen * If the new destination is a 3796e6194c2eSMichael Tuexen * LINK_LOCAL we must have common 3797e6194c2eSMichael Tuexen * site scope. Don't set the local 3798e6194c2eSMichael Tuexen * scope since we may not share all 3799e6194c2eSMichael Tuexen * links, only loopback can do this. 3800e6194c2eSMichael Tuexen * Links on the local network would 3801e6194c2eSMichael Tuexen * also be on our private network 3802e6194c2eSMichael Tuexen * for v4 too. 3803f8829a4aSRandall Stewart */ 3804a1cb341bSMichael Tuexen stcb->asoc.scope.ipv4_local_scope = 1; 3805a1cb341bSMichael Tuexen stcb->asoc.scope.site_scope = 1; 3806f8829a4aSRandall Stewart } else if (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) { 3807f8829a4aSRandall Stewart /* 3808e6194c2eSMichael Tuexen * If the new destination is 3809e6194c2eSMichael Tuexen * SITE_LOCAL then we must have site 3810e6194c2eSMichael Tuexen * scope in common. 3811f8829a4aSRandall Stewart */ 3812a1cb341bSMichael Tuexen stcb->asoc.scope.site_scope = 1; 3813f8829a4aSRandall Stewart } 3814f8829a4aSRandall Stewart } else { 3815f8829a4aSRandall Stewart /* Validate the address is in scope */ 3816f8829a4aSRandall Stewart if (IN6_IS_ADDR_LOOPBACK(&sin6->sin6_addr) && 3817a1cb341bSMichael Tuexen (stcb->asoc.scope.loopback_scope == 0)) { 3818f8829a4aSRandall Stewart addr_inscope = 0; 3819f8829a4aSRandall Stewart } else if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) && 3820a1cb341bSMichael Tuexen (stcb->asoc.scope.local_scope == 0)) { 3821f8829a4aSRandall Stewart addr_inscope = 0; 3822f8829a4aSRandall Stewart } else if (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr) && 3823a1cb341bSMichael Tuexen (stcb->asoc.scope.site_scope == 0)) { 3824f8829a4aSRandall Stewart addr_inscope = 0; 3825f8829a4aSRandall Stewart } 3826f8829a4aSRandall Stewart } 3827e6194c2eSMichael Tuexen break; 3828e6194c2eSMichael Tuexen } 3829c54a18d2SRandall Stewart #endif 3830e6194c2eSMichael Tuexen default: 3831f8829a4aSRandall Stewart /* not supported family type */ 3832f8829a4aSRandall Stewart return (-1); 3833f8829a4aSRandall Stewart } 3834b3f1ea41SRandall Stewart net = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_net), struct sctp_nets); 3835f8829a4aSRandall Stewart if (net == NULL) { 3836f8829a4aSRandall Stewart return (-1); 3837f8829a4aSRandall Stewart } 3838f8829a4aSRandall Stewart SCTP_INCR_RADDR_COUNT(); 38395ba7f91fSMichael Tuexen memset(net, 0, sizeof(struct sctp_nets)); 38406e55db54SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&net->start_time); 3841f8829a4aSRandall Stewart memcpy(&net->ro._l_addr, newaddr, newaddr->sa_len); 3842e6194c2eSMichael Tuexen switch (newaddr->sa_family) { 3843e6194c2eSMichael Tuexen #ifdef INET 3844e6194c2eSMichael Tuexen case AF_INET: 3845f8829a4aSRandall Stewart ((struct sockaddr_in *)&net->ro._l_addr)->sin_port = stcb->rport; 3846e6194c2eSMichael Tuexen break; 3847e6194c2eSMichael Tuexen #endif 3848e6194c2eSMichael Tuexen #ifdef INET6 3849e6194c2eSMichael Tuexen case AF_INET6: 3850f8829a4aSRandall Stewart ((struct sockaddr_in6 *)&net->ro._l_addr)->sin6_port = stcb->rport; 3851e6194c2eSMichael Tuexen break; 3852e6194c2eSMichael Tuexen #endif 3853e6194c2eSMichael Tuexen default: 3854e6194c2eSMichael Tuexen break; 3855f8829a4aSRandall Stewart } 385642551e99SRandall Stewart net->addr_is_local = sctp_is_address_on_local_host(newaddr, stcb->asoc.vrf_id); 385742551e99SRandall Stewart if (net->addr_is_local && ((set_scope || (from == SCTP_ADDR_IS_CONFIRMED)))) { 3858a1cb341bSMichael Tuexen stcb->asoc.scope.loopback_scope = 1; 3859a1cb341bSMichael Tuexen stcb->asoc.scope.ipv4_local_scope = 1; 3860a1cb341bSMichael Tuexen stcb->asoc.scope.local_scope = 0; 3861a1cb341bSMichael Tuexen stcb->asoc.scope.site_scope = 1; 386242551e99SRandall Stewart addr_inscope = 1; 386342551e99SRandall Stewart } 3864f8829a4aSRandall Stewart net->failure_threshold = stcb->asoc.def_net_failure; 3865ca85e948SMichael Tuexen net->pf_threshold = stcb->asoc.def_net_pf_threshold; 3866f8829a4aSRandall Stewart if (addr_inscope == 0) { 3867f8829a4aSRandall Stewart net->dest_state = (SCTP_ADDR_REACHABLE | 3868f8829a4aSRandall Stewart SCTP_ADDR_OUT_OF_SCOPE); 3869f8829a4aSRandall Stewart } else { 3870a5d547adSRandall Stewart if (from == SCTP_ADDR_IS_CONFIRMED) 3871a5d547adSRandall Stewart /* SCTP_ADDR_IS_CONFIRMED is passed by connect_x */ 3872f8829a4aSRandall Stewart net->dest_state = SCTP_ADDR_REACHABLE; 3873f8829a4aSRandall Stewart else 3874f8829a4aSRandall Stewart net->dest_state = SCTP_ADDR_REACHABLE | 3875f8829a4aSRandall Stewart SCTP_ADDR_UNCONFIRMED; 3876f8829a4aSRandall Stewart } 3877108df27cSRandall Stewart /* 3878108df27cSRandall Stewart * We set this to 0, the timer code knows that this means its an 3879108df27cSRandall Stewart * initial value 3880108df27cSRandall Stewart */ 3881f79aab18SRandall Stewart net->rto_needed = 1; 3882108df27cSRandall Stewart net->RTO = 0; 38839a972525SRandall Stewart net->RTO_measured = 0; 3884f8829a4aSRandall Stewart stcb->asoc.numnets++; 3885c9c58059SMichael Tuexen net->ref_count = 1; 3886a21779f0SRandall Stewart net->cwr_window_tsn = net->last_cwr_tsn = stcb->asoc.sending_seq - 1; 38877154bf4aSMichael Tuexen net->port = port; 3888b10f2dc8SMichael Tuexen net->dscp = stcb->asoc.default_dscp; 388958bdb691SMichael Tuexen #ifdef INET6 3890b10f2dc8SMichael Tuexen net->flowlabel = stcb->asoc.default_flowlabel; 389158bdb691SMichael Tuexen #endif 389280c79bbeSMichael Tuexen if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DONOT_HEARTBEAT)) { 3893ca85e948SMichael Tuexen net->dest_state |= SCTP_ADDR_NOHB; 3894ca85e948SMichael Tuexen } else { 3895ca85e948SMichael Tuexen net->dest_state &= ~SCTP_ADDR_NOHB; 3896ca85e948SMichael Tuexen } 389780c79bbeSMichael Tuexen if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DO_NOT_PMTUD)) { 389880c79bbeSMichael Tuexen net->dest_state |= SCTP_ADDR_NO_PMTUD; 389980c79bbeSMichael Tuexen } else { 390080c79bbeSMichael Tuexen net->dest_state &= ~SCTP_ADDR_NO_PMTUD; 390180c79bbeSMichael Tuexen } 3902ca85e948SMichael Tuexen net->heart_beat_delay = stcb->asoc.heart_beat_delay; 3903f8829a4aSRandall Stewart /* Init the timer structure */ 3904139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&net->rxt_timer.timer); 3905139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&net->pmtu_timer.timer); 3906ca85e948SMichael Tuexen SCTP_OS_TIMER_INIT(&net->hb_timer.timer); 3907f8829a4aSRandall Stewart 3908f8829a4aSRandall Stewart /* Now generate a route for this guy */ 39095e2c2d87SRandall Stewart #ifdef INET6 3910f8829a4aSRandall Stewart /* KAME hack: embed scopeid */ 3911f8829a4aSRandall Stewart if (newaddr->sa_family == AF_INET6) { 3912f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 3913f8829a4aSRandall Stewart 3914f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 3915482444b4SRandall Stewart (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone)); 3916f8829a4aSRandall Stewart sin6->sin6_scope_id = 0; 3917f8829a4aSRandall Stewart } 39185e2c2d87SRandall Stewart #endif 3919d089f9b9SMichael Tuexen SCTP_RTALLOC((sctp_route_t *)&net->ro, 3920d089f9b9SMichael Tuexen stcb->asoc.vrf_id, 3921d089f9b9SMichael Tuexen stcb->sctp_ep->fibnum); 3922bff64a4dSRandall Stewart 392310e0318aSMichael Tuexen net->src_addr_selected = 0; 392417205eccSRandall Stewart if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro)) { 392517205eccSRandall Stewart /* Get source address */ 392617205eccSRandall Stewart net->ro._s_addr = sctp_source_address_selection(stcb->sctp_ep, 392717205eccSRandall Stewart stcb, 392817205eccSRandall Stewart (sctp_route_t *)&net->ro, 392917205eccSRandall Stewart net, 393017205eccSRandall Stewart 0, 393117205eccSRandall Stewart stcb->asoc.vrf_id); 393228a6addeSMichael Tuexen if (stcb->asoc.default_mtu > 0) { 393328a6addeSMichael Tuexen net->mtu = stcb->asoc.default_mtu; 393428a6addeSMichael Tuexen switch (net->ro._l_addr.sa.sa_family) { 393528a6addeSMichael Tuexen #ifdef INET 393628a6addeSMichael Tuexen case AF_INET: 393728a6addeSMichael Tuexen net->mtu += SCTP_MIN_V4_OVERHEAD; 393828a6addeSMichael Tuexen break; 393928a6addeSMichael Tuexen #endif 394028a6addeSMichael Tuexen #ifdef INET6 394128a6addeSMichael Tuexen case AF_INET6: 394228a6addeSMichael Tuexen net->mtu += SCTP_MIN_OVERHEAD; 394328a6addeSMichael Tuexen break; 394428a6addeSMichael Tuexen #endif 394528a6addeSMichael Tuexen default: 394628a6addeSMichael Tuexen break; 394728a6addeSMichael Tuexen } 394828a6addeSMichael Tuexen #if defined(INET) || defined(INET6) 394928a6addeSMichael Tuexen if (net->port) { 395028a6addeSMichael Tuexen net->mtu += (uint32_t)sizeof(struct udphdr); 395128a6addeSMichael Tuexen } 395228a6addeSMichael Tuexen #endif 395328a6addeSMichael Tuexen } else if (net->ro._s_addr != NULL) { 395410e0318aSMichael Tuexen uint32_t imtu, rmtu, hcmtu; 395510e0318aSMichael Tuexen 3956f64a0b06SMichael Tuexen net->src_addr_selected = 1; 395717205eccSRandall Stewart /* Now get the interface MTU */ 3958f64a0b06SMichael Tuexen if (net->ro._s_addr->ifn_p != NULL) { 395910e0318aSMichael Tuexen imtu = SCTP_GATHER_MTU_FROM_INTFC(net->ro._s_addr->ifn_p); 3960f64a0b06SMichael Tuexen } else { 396110e0318aSMichael Tuexen imtu = 0; 3962f64a0b06SMichael Tuexen } 3963983066f0SAlexander V. Chernikov rmtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._l_addr.sa, net->ro.ro_nh); 396410e0318aSMichael Tuexen hcmtu = sctp_hc_get_mtu(&net->ro._l_addr, stcb->sctp_ep->fibnum); 396510e0318aSMichael Tuexen net->mtu = sctp_min_mtu(hcmtu, rmtu, imtu); 396617205eccSRandall Stewart } 3967a62e467aSMichael Tuexen } 3968a62e467aSMichael Tuexen if (net->mtu == 0) { 396928a6addeSMichael Tuexen if (stcb->asoc.default_mtu > 0) { 397028a6addeSMichael Tuexen net->mtu = stcb->asoc.default_mtu; 397128a6addeSMichael Tuexen switch (net->ro._l_addr.sa.sa_family) { 397228a6addeSMichael Tuexen #ifdef INET 397328a6addeSMichael Tuexen case AF_INET: 397428a6addeSMichael Tuexen net->mtu += SCTP_MIN_V4_OVERHEAD; 397528a6addeSMichael Tuexen break; 397628a6addeSMichael Tuexen #endif 397728a6addeSMichael Tuexen #ifdef INET6 397828a6addeSMichael Tuexen case AF_INET6: 397928a6addeSMichael Tuexen net->mtu += SCTP_MIN_OVERHEAD; 398028a6addeSMichael Tuexen break; 398128a6addeSMichael Tuexen #endif 398228a6addeSMichael Tuexen default: 398328a6addeSMichael Tuexen break; 398428a6addeSMichael Tuexen } 398528a6addeSMichael Tuexen #if defined(INET) || defined(INET6) 398628a6addeSMichael Tuexen if (net->port) { 398728a6addeSMichael Tuexen net->mtu += (uint32_t)sizeof(struct udphdr); 398828a6addeSMichael Tuexen } 398928a6addeSMichael Tuexen #endif 399028a6addeSMichael Tuexen } else { 3991a62e467aSMichael Tuexen switch (newaddr->sa_family) { 3992a62e467aSMichael Tuexen #ifdef INET 3993a62e467aSMichael Tuexen case AF_INET: 3994a62e467aSMichael Tuexen net->mtu = SCTP_DEFAULT_MTU; 3995a62e467aSMichael Tuexen break; 3996a62e467aSMichael Tuexen #endif 3997a62e467aSMichael Tuexen #ifdef INET6 3998a62e467aSMichael Tuexen case AF_INET6: 3999a62e467aSMichael Tuexen net->mtu = 1280; 4000a62e467aSMichael Tuexen break; 4001a62e467aSMichael Tuexen #endif 4002a62e467aSMichael Tuexen default: 4003a62e467aSMichael Tuexen break; 4004a62e467aSMichael Tuexen } 4005a62e467aSMichael Tuexen } 400628a6addeSMichael Tuexen } 40074474d71aSMichael Tuexen #if defined(INET) || defined(INET6) 4008a62e467aSMichael Tuexen if (net->port) { 4009a62e467aSMichael Tuexen net->mtu -= (uint32_t)sizeof(struct udphdr); 4010a62e467aSMichael Tuexen } 40114474d71aSMichael Tuexen #endif 4012a5d547adSRandall Stewart if (from == SCTP_ALLOC_ASOC) { 4013f8829a4aSRandall Stewart stcb->asoc.smallest_mtu = net->mtu; 4014f8829a4aSRandall Stewart } 4015a62e467aSMichael Tuexen if (stcb->asoc.smallest_mtu > net->mtu) { 4016ec70917fSMichael Tuexen sctp_pathmtu_adjustment(stcb, net->mtu); 4017f8829a4aSRandall Stewart } 4018c54a18d2SRandall Stewart #ifdef INET6 4019c54a18d2SRandall Stewart if (newaddr->sa_family == AF_INET6) { 4020c54a18d2SRandall Stewart struct sockaddr_in6 *sin6; 4021c54a18d2SRandall Stewart 4022c54a18d2SRandall Stewart sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 4023c54a18d2SRandall Stewart (void)sa6_recoverscope(sin6); 4024c54a18d2SRandall Stewart } 4025c54a18d2SRandall Stewart #endif 4026a62e467aSMichael Tuexen 4027b54d3a6cSRandall Stewart /* JRS - Use the congestion control given in the CC module */ 4028299108c5SRandall Stewart if (stcb->asoc.cc_functions.sctp_set_initial_cc_param != NULL) 4029299108c5SRandall Stewart (*stcb->asoc.cc_functions.sctp_set_initial_cc_param) (stcb, net); 4030f8829a4aSRandall Stewart 4031f8829a4aSRandall Stewart /* 4032f8829a4aSRandall Stewart * CMT: CUC algo - set find_pseudo_cumack to TRUE (1) at beginning 4033f8829a4aSRandall Stewart * of assoc (2005/06/27, iyengar@cis.udel.edu) 4034f8829a4aSRandall Stewart */ 4035f8829a4aSRandall Stewart net->find_pseudo_cumack = 1; 4036f8829a4aSRandall Stewart net->find_rtx_pseudo_cumack = 1; 40374c97400fSMichael Tuexen /* Choose an initial flowid. */ 40384c97400fSMichael Tuexen net->flowid = stcb->asoc.my_vtag ^ 40394c97400fSMichael Tuexen ntohs(stcb->rport) ^ 40404c97400fSMichael Tuexen ntohs(stcb->sctp_ep->sctp_lport); 404136ad8372SSepherosa Ziehau net->flowtype = M_HASHTYPE_OPAQUE_HASH; 40427ffa2290SMichael Tuexen if (netp) { 40437ffa2290SMichael Tuexen *netp = net; 40447ffa2290SMichael Tuexen } 4045f8829a4aSRandall Stewart netfirst = TAILQ_FIRST(&stcb->asoc.nets); 4046983066f0SAlexander V. Chernikov if (net->ro.ro_nh == NULL) { 4047f8829a4aSRandall Stewart /* Since we have no route put it at the back */ 4048f8829a4aSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.nets, net, sctp_next); 4049f8829a4aSRandall Stewart } else if (netfirst == NULL) { 4050f8829a4aSRandall Stewart /* We are the first one in the pool. */ 4051f8829a4aSRandall Stewart TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next); 4052983066f0SAlexander V. Chernikov } else if (netfirst->ro.ro_nh == NULL) { 4053f8829a4aSRandall Stewart /* 4054f8829a4aSRandall Stewart * First one has NO route. Place this one ahead of the first 4055f8829a4aSRandall Stewart * one. 4056f8829a4aSRandall Stewart */ 4057f8829a4aSRandall Stewart TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next); 4058983066f0SAlexander V. Chernikov } else if (net->ro.ro_nh->nh_ifp != netfirst->ro.ro_nh->nh_ifp) { 4059f8829a4aSRandall Stewart /* 4060f8829a4aSRandall Stewart * This one has a different interface than the one at the 4061f8829a4aSRandall Stewart * top of the list. Place it ahead. 4062f8829a4aSRandall Stewart */ 4063f8829a4aSRandall Stewart TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next); 4064f8829a4aSRandall Stewart } else { 4065f8829a4aSRandall Stewart /* 4066f8829a4aSRandall Stewart * Ok we have the same interface as the first one. Move 4067f8829a4aSRandall Stewart * forward until we find either a) one with a NULL route... 4068f8829a4aSRandall Stewart * insert ahead of that b) one with a different ifp.. insert 4069f8829a4aSRandall Stewart * after that. c) end of the list.. insert at the tail. 4070f8829a4aSRandall Stewart */ 4071f8829a4aSRandall Stewart struct sctp_nets *netlook; 4072f8829a4aSRandall Stewart 4073f8829a4aSRandall Stewart do { 4074f8829a4aSRandall Stewart netlook = TAILQ_NEXT(netfirst, sctp_next); 4075f8829a4aSRandall Stewart if (netlook == NULL) { 4076f8829a4aSRandall Stewart /* End of the list */ 4077bff64a4dSRandall Stewart TAILQ_INSERT_TAIL(&stcb->asoc.nets, net, sctp_next); 4078f8829a4aSRandall Stewart break; 4079983066f0SAlexander V. Chernikov } else if (netlook->ro.ro_nh == NULL) { 4080f8829a4aSRandall Stewart /* next one has NO route */ 4081f8829a4aSRandall Stewart TAILQ_INSERT_BEFORE(netfirst, net, sctp_next); 4082f8829a4aSRandall Stewart break; 4083983066f0SAlexander V. Chernikov } else if (netlook->ro.ro_nh->nh_ifp != net->ro.ro_nh->nh_ifp) { 4084f8829a4aSRandall Stewart TAILQ_INSERT_AFTER(&stcb->asoc.nets, netlook, 4085f8829a4aSRandall Stewart net, sctp_next); 4086f8829a4aSRandall Stewart break; 4087f8829a4aSRandall Stewart } 4088f8829a4aSRandall Stewart /* Shift forward */ 4089f8829a4aSRandall Stewart netfirst = netlook; 4090f8829a4aSRandall Stewart } while (netlook != NULL); 4091f8829a4aSRandall Stewart } 4092f8829a4aSRandall Stewart 4093f8829a4aSRandall Stewart /* got to have a primary set */ 4094f8829a4aSRandall Stewart if (stcb->asoc.primary_destination == 0) { 4095f8829a4aSRandall Stewart stcb->asoc.primary_destination = net; 4096983066f0SAlexander V. Chernikov } else if ((stcb->asoc.primary_destination->ro.ro_nh == NULL) && 4097983066f0SAlexander V. Chernikov (net->ro.ro_nh) && 4098f8829a4aSRandall Stewart ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0)) { 4099f8829a4aSRandall Stewart /* No route to current primary adopt new primary */ 4100f8829a4aSRandall Stewart stcb->asoc.primary_destination = net; 4101f8829a4aSRandall Stewart } 4102f8829a4aSRandall Stewart /* Validate primary is first */ 4103f8829a4aSRandall Stewart net = TAILQ_FIRST(&stcb->asoc.nets); 4104f8829a4aSRandall Stewart if ((net != stcb->asoc.primary_destination) && 4105f8829a4aSRandall Stewart (stcb->asoc.primary_destination)) { 4106f8829a4aSRandall Stewart /* 4107f8829a4aSRandall Stewart * first one on the list is NOT the primary sctp_cmpaddr() 4108b1ce21c6SRebecca Cran * is much more efficient if the primary is the first on the 4109f8829a4aSRandall Stewart * list, make it so. 4110f8829a4aSRandall Stewart */ 4111f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.nets, 4112f8829a4aSRandall Stewart stcb->asoc.primary_destination, sctp_next); 4113f8829a4aSRandall Stewart TAILQ_INSERT_HEAD(&stcb->asoc.nets, 4114f8829a4aSRandall Stewart stcb->asoc.primary_destination, sctp_next); 4115f8829a4aSRandall Stewart } 4116f8829a4aSRandall Stewart return (0); 4117f8829a4aSRandall Stewart } 4118f8829a4aSRandall Stewart 4119830d754dSRandall Stewart static uint32_t 4120b0471b4bSMichael Tuexen sctp_aloc_a_assoc_id(struct sctp_inpcb *inp, struct sctp_tcb *stcb) 4121b0471b4bSMichael Tuexen { 4122830d754dSRandall Stewart uint32_t id; 4123830d754dSRandall Stewart struct sctpasochead *head; 4124830d754dSRandall Stewart struct sctp_tcb *lstcb; 4125830d754dSRandall Stewart 4126830d754dSRandall Stewart try_again: 4127830d754dSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 4128830d754dSRandall Stewart /* TSNH */ 4129830d754dSRandall Stewart return (0); 4130830d754dSRandall Stewart } 4131f3d06a3cSRandall Stewart /* 4132e2e7c62eSMichael Tuexen * We don't allow assoc id to be one of SCTP_FUTURE_ASSOC, 4133e2e7c62eSMichael Tuexen * SCTP_CURRENT_ASSOC and SCTP_ALL_ASSOC. 4134f3d06a3cSRandall Stewart */ 4135e2e7c62eSMichael Tuexen if (inp->sctp_associd_counter <= SCTP_ALL_ASSOC) { 4136e2e7c62eSMichael Tuexen inp->sctp_associd_counter = SCTP_ALL_ASSOC + 1; 4137f3d06a3cSRandall Stewart } 4138830d754dSRandall Stewart id = inp->sctp_associd_counter; 4139830d754dSRandall Stewart inp->sctp_associd_counter++; 4140830d754dSRandall Stewart lstcb = sctp_findasoc_ep_asocid_locked(inp, (sctp_assoc_t)id, 0); 4141830d754dSRandall Stewart if (lstcb) { 4142830d754dSRandall Stewart goto try_again; 4143830d754dSRandall Stewart } 4144830d754dSRandall Stewart head = &inp->sctp_asocidhash[SCTP_PCBHASH_ASOC(id, inp->hashasocidmark)]; 4145830d754dSRandall Stewart LIST_INSERT_HEAD(head, stcb, sctp_tcbasocidhash); 4146830d754dSRandall Stewart stcb->asoc.in_asocid_hash = 1; 4147be62c88bSMichael Tuexen return (id); 4148830d754dSRandall Stewart } 4149830d754dSRandall Stewart 4150f8829a4aSRandall Stewart /* 4151f8829a4aSRandall Stewart * allocate an association and add it to the endpoint. The caller must be 4152f8829a4aSRandall Stewart * careful to add all additional addresses once they are know right away or 4153f8829a4aSRandall Stewart * else the assoc will be may experience a blackout scenario. 4154f8829a4aSRandall Stewart */ 4155f8829a4aSRandall Stewart struct sctp_tcb * 4156f8829a4aSRandall Stewart sctp_aloc_assoc(struct sctp_inpcb *inp, struct sockaddr *firstaddr, 4157c7f048abSMichael Tuexen int *error, uint32_t override_tag, uint32_t initial_tsn, 4158c7f048abSMichael Tuexen uint32_t vrf_id, uint16_t o_streams, uint16_t port, 41598a956abeSMichael Tuexen struct thread *p, 41608a956abeSMichael Tuexen int initialize_auth_params) 4161f8829a4aSRandall Stewart { 416252be287eSRandall Stewart /* note the p argument is only valid in unbound sockets */ 416352be287eSRandall Stewart 4164f8829a4aSRandall Stewart struct sctp_tcb *stcb; 4165f8829a4aSRandall Stewart struct sctp_association *asoc; 4166f8829a4aSRandall Stewart struct sctpasochead *head; 4167f8829a4aSRandall Stewart uint16_t rport; 4168f8829a4aSRandall Stewart int err; 4169f8829a4aSRandall Stewart 4170f8829a4aSRandall Stewart /* 4171f8829a4aSRandall Stewart * Assumption made here: Caller has done a 4172f8829a4aSRandall Stewart * sctp_findassociation_ep_addr(ep, addr's); to make sure the 4173f8829a4aSRandall Stewart * address does not exist already. 4174f8829a4aSRandall Stewart */ 4175b3f1ea41SRandall Stewart if (SCTP_BASE_INFO(ipi_count_asoc) >= SCTP_MAX_NUM_OF_ASOC) { 4176f8829a4aSRandall Stewart /* Hit max assoc, sorry no more */ 4177c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS); 4178f8829a4aSRandall Stewart *error = ENOBUFS; 4179f8829a4aSRandall Stewart return (NULL); 4180f8829a4aSRandall Stewart } 4181ad81507eSRandall Stewart if (firstaddr == NULL) { 4182c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4183ad81507eSRandall Stewart *error = EINVAL; 4184ad81507eSRandall Stewart return (NULL); 4185ad81507eSRandall Stewart } 4186f8829a4aSRandall Stewart SCTP_INP_RLOCK(inp); 41876d9e8f2bSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) && 41886d9e8f2bSRandall Stewart ((sctp_is_feature_off(inp, SCTP_PCB_FLAGS_PORTREUSE)) || 41896d9e8f2bSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED))) { 4190f8829a4aSRandall Stewart /* 4191f8829a4aSRandall Stewart * If its in the TCP pool, its NOT allowed to create an 4192f8829a4aSRandall Stewart * association. The parent listener needs to call 4193f8829a4aSRandall Stewart * sctp_aloc_assoc.. or the one-2-many socket. If a peeled 4194f8829a4aSRandall Stewart * off, or connected one does this.. its an error. 4195f8829a4aSRandall Stewart */ 4196f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 4197c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4198f8829a4aSRandall Stewart *error = EINVAL; 4199f8829a4aSRandall Stewart return (NULL); 4200f8829a4aSRandall Stewart } 4201c55b70ceSMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) || 4202c55b70ceSMichael Tuexen (inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE)) { 4203c55b70ceSMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) || 4204c55b70ceSMichael Tuexen (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED)) { 4205c55b70ceSMichael Tuexen SCTP_INP_RUNLOCK(inp); 4206c55b70ceSMichael Tuexen SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4207c55b70ceSMichael Tuexen *error = EINVAL; 4208c55b70ceSMichael Tuexen return (NULL); 4209c55b70ceSMichael Tuexen } 4210c55b70ceSMichael Tuexen } 4211ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB3, "Allocate an association for peer:"); 4212f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 42136e55db54SRandall Stewart if (firstaddr) { 4214ad81507eSRandall Stewart SCTPDBG_ADDR(SCTP_DEBUG_PCB3, firstaddr); 4215e6194c2eSMichael Tuexen switch (firstaddr->sa_family) { 4216e6194c2eSMichael Tuexen #ifdef INET 4217e6194c2eSMichael Tuexen case AF_INET: 4218ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB3, "Port:%d\n", 4219f8829a4aSRandall Stewart ntohs(((struct sockaddr_in *)firstaddr)->sin_port)); 4220e6194c2eSMichael Tuexen break; 4221e6194c2eSMichael Tuexen #endif 4222e6194c2eSMichael Tuexen #ifdef INET6 4223e6194c2eSMichael Tuexen case AF_INET6: 4224e6194c2eSMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB3, "Port:%d\n", 4225e6194c2eSMichael Tuexen ntohs(((struct sockaddr_in6 *)firstaddr)->sin6_port)); 4226e6194c2eSMichael Tuexen break; 4227e6194c2eSMichael Tuexen #endif 4228e6194c2eSMichael Tuexen default: 4229e6194c2eSMichael Tuexen break; 4230e6194c2eSMichael Tuexen } 4231ad81507eSRandall Stewart } else { 4232ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB3, "None\n"); 4233f8829a4aSRandall Stewart } 4234f8829a4aSRandall Stewart #endif /* SCTP_DEBUG */ 4235e6194c2eSMichael Tuexen switch (firstaddr->sa_family) { 4236e6194c2eSMichael Tuexen #ifdef INET 4237e6194c2eSMichael Tuexen case AF_INET: 4238e6194c2eSMichael Tuexen { 4239f8829a4aSRandall Stewart struct sockaddr_in *sin; 4240f8829a4aSRandall Stewart 4241f8829a4aSRandall Stewart sin = (struct sockaddr_in *)firstaddr; 424292776dfdSMichael Tuexen if ((ntohs(sin->sin_port) == 0) || 424392776dfdSMichael Tuexen (sin->sin_addr.s_addr == INADDR_ANY) || 424492776dfdSMichael Tuexen (sin->sin_addr.s_addr == INADDR_BROADCAST) || 4245b15f5411SMichael Tuexen IN_MULTICAST(ntohl(sin->sin_addr.s_addr)) || 4246b15f5411SMichael Tuexen (((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) != 0) && 4247b15f5411SMichael Tuexen (SCTP_IPV6_V6ONLY(inp) != 0))) { 4248f8829a4aSRandall Stewart /* Invalid address */ 4249f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 4250c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4251f8829a4aSRandall Stewart *error = EINVAL; 4252f8829a4aSRandall Stewart return (NULL); 4253f8829a4aSRandall Stewart } 4254f8829a4aSRandall Stewart rport = sin->sin_port; 4255e6194c2eSMichael Tuexen break; 4256e6194c2eSMichael Tuexen } 4257e6194c2eSMichael Tuexen #endif 4258e6194c2eSMichael Tuexen #ifdef INET6 4259e6194c2eSMichael Tuexen case AF_INET6: 4260e6194c2eSMichael Tuexen { 4261f8829a4aSRandall Stewart struct sockaddr_in6 *sin6; 4262f8829a4aSRandall Stewart 4263f8829a4aSRandall Stewart sin6 = (struct sockaddr_in6 *)firstaddr; 426492776dfdSMichael Tuexen if ((ntohs(sin6->sin6_port) == 0) || 426592776dfdSMichael Tuexen IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr) || 4266b15f5411SMichael Tuexen IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr) || 4267b15f5411SMichael Tuexen ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0)) { 4268f8829a4aSRandall Stewart /* Invalid address */ 4269f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 4270c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4271f8829a4aSRandall Stewart *error = EINVAL; 4272f8829a4aSRandall Stewart return (NULL); 4273f8829a4aSRandall Stewart } 4274f8829a4aSRandall Stewart rport = sin6->sin6_port; 4275e6194c2eSMichael Tuexen break; 4276e6194c2eSMichael Tuexen } 4277e6194c2eSMichael Tuexen #endif 4278e6194c2eSMichael Tuexen default: 4279f8829a4aSRandall Stewart /* not supported family type */ 4280f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 4281c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4282f8829a4aSRandall Stewart *error = EINVAL; 4283f8829a4aSRandall Stewart return (NULL); 4284f8829a4aSRandall Stewart } 4285f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 4286f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) { 4287f8829a4aSRandall Stewart /* 4288f8829a4aSRandall Stewart * If you have not performed a bind, then we need to do the 4289b1ce21c6SRebecca Cran * ephemeral bind for you. 4290f8829a4aSRandall Stewart */ 42912cf33471SMichael Tuexen if ((err = sctp_inpcb_bind(inp->sctp_socket, NULL, NULL, p))) { 4292f8829a4aSRandall Stewart /* bind error, probably perm */ 4293f8829a4aSRandall Stewart *error = err; 4294f8829a4aSRandall Stewart return (NULL); 4295f8829a4aSRandall Stewart } 4296f8829a4aSRandall Stewart } 4297b3f1ea41SRandall Stewart stcb = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_asoc), struct sctp_tcb); 4298f8829a4aSRandall Stewart if (stcb == NULL) { 4299f8829a4aSRandall Stewart /* out of memory? */ 4300c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOMEM); 4301f8829a4aSRandall Stewart *error = ENOMEM; 4302f8829a4aSRandall Stewart return (NULL); 4303f8829a4aSRandall Stewart } 4304f8829a4aSRandall Stewart SCTP_INCR_ASOC_COUNT(); 4305f8829a4aSRandall Stewart 43065ba7f91fSMichael Tuexen memset(stcb, 0, sizeof(*stcb)); 4307f8829a4aSRandall Stewart asoc = &stcb->asoc; 4308830d754dSRandall Stewart 4309f8829a4aSRandall Stewart SCTP_TCB_LOCK_INIT(stcb); 4310f8829a4aSRandall Stewart SCTP_TCB_SEND_LOCK_INIT(stcb); 4311830d754dSRandall Stewart stcb->rport = rport; 4312f8829a4aSRandall Stewart /* setup back pointer's */ 4313f8829a4aSRandall Stewart stcb->sctp_ep = inp; 4314f8829a4aSRandall Stewart stcb->sctp_socket = inp->sctp_socket; 4315c7f048abSMichael Tuexen if ((err = sctp_init_asoc(inp, stcb, override_tag, initial_tsn, vrf_id, o_streams))) { 4316f8829a4aSRandall Stewart /* failed */ 4317f8829a4aSRandall Stewart SCTP_TCB_LOCK_DESTROY(stcb); 4318f8829a4aSRandall Stewart SCTP_TCB_SEND_LOCK_DESTROY(stcb); 4319b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), stcb); 4320f8829a4aSRandall Stewart SCTP_DECR_ASOC_COUNT(); 4321f8829a4aSRandall Stewart *error = err; 4322f8829a4aSRandall Stewart return (NULL); 4323f8829a4aSRandall Stewart } 4324f8829a4aSRandall Stewart /* and the port */ 4325f8829a4aSRandall Stewart SCTP_INP_INFO_WLOCK(); 4326f8829a4aSRandall Stewart SCTP_INP_WLOCK(inp); 4327f8829a4aSRandall Stewart if (inp->sctp_flags & (SCTP_PCB_FLAGS_SOCKET_GONE | SCTP_PCB_FLAGS_SOCKET_ALLGONE)) { 4328f8829a4aSRandall Stewart /* inpcb freed while alloc going on */ 4329f8829a4aSRandall Stewart SCTP_TCB_LOCK_DESTROY(stcb); 4330f8829a4aSRandall Stewart SCTP_TCB_SEND_LOCK_DESTROY(stcb); 4331b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), stcb); 4332f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 4333f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 4334f8829a4aSRandall Stewart SCTP_DECR_ASOC_COUNT(); 4335c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL); 4336f8829a4aSRandall Stewart *error = EINVAL; 4337f8829a4aSRandall Stewart return (NULL); 4338f8829a4aSRandall Stewart } 4339f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 4340f8829a4aSRandall Stewart 4341be62c88bSMichael Tuexen asoc->assoc_id = sctp_aloc_a_assoc_id(inp, stcb); 4342f8829a4aSRandall Stewart /* now that my_vtag is set, add it to the hash */ 4343830d754dSRandall Stewart head = &SCTP_BASE_INFO(sctp_asochash)[SCTP_PCBHASH_ASOC(stcb->asoc.my_vtag, SCTP_BASE_INFO(hashasocmark))]; 4344f8829a4aSRandall Stewart /* put it in the bucket in the vtag hash of assoc's for the system */ 4345f8829a4aSRandall Stewart LIST_INSERT_HEAD(head, stcb, sctp_asocs); 4346f8829a4aSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 4347f8829a4aSRandall Stewart 43486176f9d6SMichael Tuexen if (sctp_add_remote_addr(stcb, firstaddr, NULL, port, SCTP_DO_SETSCOPE, SCTP_ALLOC_ASOC)) { 4349f8829a4aSRandall Stewart /* failure.. memory error? */ 4350207304d4SRandall Stewart if (asoc->strmout) { 4351207304d4SRandall Stewart SCTP_FREE(asoc->strmout, SCTP_M_STRMO); 4352207304d4SRandall Stewart asoc->strmout = NULL; 4353207304d4SRandall Stewart } 4354207304d4SRandall Stewart if (asoc->mapping_array) { 4355207304d4SRandall Stewart SCTP_FREE(asoc->mapping_array, SCTP_M_MAP); 4356207304d4SRandall Stewart asoc->mapping_array = NULL; 4357207304d4SRandall Stewart } 4358bf1be571SRandall Stewart if (asoc->nr_mapping_array) { 4359bf1be571SRandall Stewart SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP); 4360bf1be571SRandall Stewart asoc->nr_mapping_array = NULL; 4361bf1be571SRandall Stewart } 4362f8829a4aSRandall Stewart SCTP_DECR_ASOC_COUNT(); 43633b3d05d7SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 4364f8829a4aSRandall Stewart SCTP_TCB_LOCK_DESTROY(stcb); 4365f8829a4aSRandall Stewart SCTP_TCB_SEND_LOCK_DESTROY(stcb); 4366830d754dSRandall Stewart LIST_REMOVE(stcb, sctp_tcbasocidhash); 4367b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), stcb); 4368bff64a4dSRandall Stewart SCTP_INP_WUNLOCK(inp); 4369c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS); 4370f8829a4aSRandall Stewart *error = ENOBUFS; 4371f8829a4aSRandall Stewart return (NULL); 4372f8829a4aSRandall Stewart } 4373f8829a4aSRandall Stewart /* Init all the timers */ 4374139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&asoc->dack_timer.timer); 4375139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&asoc->strreset_timer.timer); 4376139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&asoc->asconf_timer.timer); 4377139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&asoc->shut_guard_timer.timer); 4378139bc87fSRandall Stewart SCTP_OS_TIMER_INIT(&asoc->autoclose_timer.timer); 4379851b7298SRandall Stewart SCTP_OS_TIMER_INIT(&asoc->delete_prim_timer.timer); 4380139bc87fSRandall Stewart 4381f8829a4aSRandall Stewart LIST_INSERT_HEAD(&inp->sctp_asoc_list, stcb, sctp_tcblist); 4382f8829a4aSRandall Stewart /* now file the port under the hash as well */ 4383f8829a4aSRandall Stewart if (inp->sctp_tcbhash != NULL) { 4384f8829a4aSRandall Stewart head = &inp->sctp_tcbhash[SCTP_PCBHASH_ALLADDR(stcb->rport, 4385f8829a4aSRandall Stewart inp->sctp_hashmark)]; 4386f8829a4aSRandall Stewart LIST_INSERT_HEAD(head, stcb, sctp_tcbhash); 4387f8829a4aSRandall Stewart } 43888a956abeSMichael Tuexen if (initialize_auth_params == SCTP_INITIALIZE_AUTH_PARAMS) { 43898a956abeSMichael Tuexen sctp_initialize_auth_params(inp, stcb); 43908a956abeSMichael Tuexen } 4391f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 4392dd294dceSMichael Tuexen SCTPDBG(SCTP_DEBUG_PCB1, "Association %p now allocated\n", (void *)stcb); 4393f8829a4aSRandall Stewart return (stcb); 4394f8829a4aSRandall Stewart } 4395f8829a4aSRandall Stewart 4396f8829a4aSRandall Stewart void 4397f8829a4aSRandall Stewart sctp_remove_net(struct sctp_tcb *stcb, struct sctp_nets *net) 4398f8829a4aSRandall Stewart { 43996a34ec63SMichael Tuexen struct sctp_inpcb *inp; 4400f8829a4aSRandall Stewart struct sctp_association *asoc; 4401f8829a4aSRandall Stewart 44026a34ec63SMichael Tuexen inp = stcb->sctp_ep; 4403f8829a4aSRandall Stewart asoc = &stcb->asoc; 4404f8829a4aSRandall Stewart asoc->numnets--; 4405f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->nets, net, sctp_next); 4406f8829a4aSRandall Stewart if (net == asoc->primary_destination) { 4407f8829a4aSRandall Stewart /* Reset primary */ 4408f8829a4aSRandall Stewart struct sctp_nets *lnet; 4409f8829a4aSRandall Stewart 4410f8829a4aSRandall Stewart lnet = TAILQ_FIRST(&asoc->nets); 4411851b7298SRandall Stewart /* 4412851b7298SRandall Stewart * Mobility adaptation Ideally, if deleted destination is 4413851b7298SRandall Stewart * the primary, it becomes a fast retransmission trigger by 4414851b7298SRandall Stewart * the subsequent SET PRIMARY. (by micchie) 4415851b7298SRandall Stewart */ 4416851b7298SRandall Stewart if (sctp_is_mobility_feature_on(stcb->sctp_ep, 4417b201f536SRandall Stewart SCTP_MOBILITY_BASE) || 4418b201f536SRandall Stewart sctp_is_mobility_feature_on(stcb->sctp_ep, 4419851b7298SRandall Stewart SCTP_MOBILITY_FASTHANDOFF)) { 4420851b7298SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "remove_net: primary dst is deleting\n"); 4421851b7298SRandall Stewart if (asoc->deleted_primary != NULL) { 4422851b7298SRandall Stewart SCTPDBG(SCTP_DEBUG_ASCONF1, "remove_net: deleted primary may be already stored\n"); 4423c54a18d2SRandall Stewart goto out; 4424851b7298SRandall Stewart } 4425851b7298SRandall Stewart asoc->deleted_primary = net; 4426851b7298SRandall Stewart atomic_add_int(&net->ref_count, 1); 4427d55b0b1bSRandall Stewart memset(&net->lastsa, 0, sizeof(net->lastsa)); 4428d55b0b1bSRandall Stewart memset(&net->lastsv, 0, sizeof(net->lastsv)); 4429851b7298SRandall Stewart sctp_mobility_feature_on(stcb->sctp_ep, 4430851b7298SRandall Stewart SCTP_MOBILITY_PRIM_DELETED); 4431851b7298SRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_PRIM_DELETED, 4432851b7298SRandall Stewart stcb->sctp_ep, stcb, NULL); 4433851b7298SRandall Stewart } 4434c54a18d2SRandall Stewart out: 4435f8829a4aSRandall Stewart /* Try to find a confirmed primary */ 443642551e99SRandall Stewart asoc->primary_destination = sctp_find_alternate_net(stcb, lnet, 0); 4437f8829a4aSRandall Stewart } 4438f8829a4aSRandall Stewart if (net == asoc->last_data_chunk_from) { 4439f8829a4aSRandall Stewart /* Reset primary */ 4440f8829a4aSRandall Stewart asoc->last_data_chunk_from = TAILQ_FIRST(&asoc->nets); 4441f8829a4aSRandall Stewart } 4442f8829a4aSRandall Stewart if (net == asoc->last_control_chunk_from) { 4443f8829a4aSRandall Stewart /* Clear net */ 4444f8829a4aSRandall Stewart asoc->last_control_chunk_from = NULL; 4445f8829a4aSRandall Stewart } 44465ac83902SMichael Tuexen if (net == asoc->last_net_cmt_send_started) { 44475ac83902SMichael Tuexen /* Clear net */ 44485ac83902SMichael Tuexen asoc->last_net_cmt_send_started = NULL; 44495ac83902SMichael Tuexen } 4450ca85e948SMichael Tuexen if (net == stcb->asoc.alternate) { 4451ca85e948SMichael Tuexen sctp_free_remote_addr(stcb->asoc.alternate); 4452ca85e948SMichael Tuexen stcb->asoc.alternate = NULL; 4453ca85e948SMichael Tuexen } 44546a34ec63SMichael Tuexen sctp_timer_stop(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net, 44556a34ec63SMichael Tuexen SCTP_FROM_SCTP_PCB + SCTP_LOC_9); 44566a34ec63SMichael Tuexen sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net, 44576a34ec63SMichael Tuexen SCTP_FROM_SCTP_PCB + SCTP_LOC_10); 44589803f01cSMichael Tuexen net->dest_state |= SCTP_ADDR_BEING_DELETED; 445942551e99SRandall Stewart sctp_free_remote_addr(net); 4460f8829a4aSRandall Stewart } 4461f8829a4aSRandall Stewart 4462f8829a4aSRandall Stewart /* 4463f8829a4aSRandall Stewart * remove a remote endpoint address from an association, it will fail if the 4464f8829a4aSRandall Stewart * address does not exist. 4465f8829a4aSRandall Stewart */ 4466f8829a4aSRandall Stewart int 4467f8829a4aSRandall Stewart sctp_del_remote_addr(struct sctp_tcb *stcb, struct sockaddr *remaddr) 4468f8829a4aSRandall Stewart { 4469f8829a4aSRandall Stewart /* 4470f8829a4aSRandall Stewart * Here we need to remove a remote address. This is quite simple, we 4471f8829a4aSRandall Stewart * first find it in the list of address for the association 4472f8829a4aSRandall Stewart * (tasoc->asoc.nets) and then if it is there, we do a LIST_REMOVE 4473f8829a4aSRandall Stewart * on that item. Note we do not allow it to be removed if there are 4474f8829a4aSRandall Stewart * no other addresses. 4475f8829a4aSRandall Stewart */ 4476f8829a4aSRandall Stewart struct sctp_association *asoc; 44774a9ef3f8SMichael Tuexen struct sctp_nets *net, *nnet; 4478f8829a4aSRandall Stewart 4479f8829a4aSRandall Stewart asoc = &stcb->asoc; 4480f8829a4aSRandall Stewart 4481f8829a4aSRandall Stewart /* locate the address */ 44824a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(net, &asoc->nets, sctp_next, nnet) { 4483f8829a4aSRandall Stewart if (net->ro._l_addr.sa.sa_family != remaddr->sa_family) { 4484f8829a4aSRandall Stewart continue; 4485f8829a4aSRandall Stewart } 4486f8829a4aSRandall Stewart if (sctp_cmpaddr((struct sockaddr *)&net->ro._l_addr, 4487f8829a4aSRandall Stewart remaddr)) { 4488f8829a4aSRandall Stewart /* we found the guy */ 4489f8829a4aSRandall Stewart if (asoc->numnets < 2) { 4490f8829a4aSRandall Stewart /* Must have at LEAST two remote addresses */ 4491f8829a4aSRandall Stewart return (-1); 4492f8829a4aSRandall Stewart } else { 4493f8829a4aSRandall Stewart sctp_remove_net(stcb, net); 4494f8829a4aSRandall Stewart return (0); 4495f8829a4aSRandall Stewart } 4496f8829a4aSRandall Stewart } 4497f8829a4aSRandall Stewart } 4498f8829a4aSRandall Stewart /* not found. */ 4499f8829a4aSRandall Stewart return (-2); 4500f8829a4aSRandall Stewart } 4501f8829a4aSRandall Stewart 4502851b7298SRandall Stewart void 4503830d754dSRandall Stewart sctp_delete_from_timewait(uint32_t tag, uint16_t lport, uint16_t rport) 4504851b7298SRandall Stewart { 4505851b7298SRandall Stewart struct sctpvtaghead *chain; 4506851b7298SRandall Stewart struct sctp_tagblock *twait_block; 4507851b7298SRandall Stewart int found = 0; 4508851b7298SRandall Stewart int i; 4509851b7298SRandall Stewart 4510b3f1ea41SRandall Stewart chain = &SCTP_BASE_INFO(vtag_timewait)[(tag % SCTP_STACK_VTAG_HASH_SIZE)]; 4511851b7298SRandall Stewart LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) { 4512851b7298SRandall Stewart for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) { 4513830d754dSRandall Stewart if ((twait_block->vtag_block[i].v_tag == tag) && 4514830d754dSRandall Stewart (twait_block->vtag_block[i].lport == lport) && 4515830d754dSRandall Stewart (twait_block->vtag_block[i].rport == rport)) { 4516851b7298SRandall Stewart twait_block->vtag_block[i].tv_sec_at_expire = 0; 4517851b7298SRandall Stewart twait_block->vtag_block[i].v_tag = 0; 4518830d754dSRandall Stewart twait_block->vtag_block[i].lport = 0; 4519830d754dSRandall Stewart twait_block->vtag_block[i].rport = 0; 4520851b7298SRandall Stewart found = 1; 4521851b7298SRandall Stewart break; 4522851b7298SRandall Stewart } 4523851b7298SRandall Stewart } 4524851b7298SRandall Stewart if (found) 4525851b7298SRandall Stewart break; 4526851b7298SRandall Stewart } 4527851b7298SRandall Stewart } 4528f8829a4aSRandall Stewart 4529fb8fb8f8SRandall Stewart int 4530830d754dSRandall Stewart sctp_is_in_timewait(uint32_t tag, uint16_t lport, uint16_t rport) 4531fb8fb8f8SRandall Stewart { 4532fb8fb8f8SRandall Stewart struct sctpvtaghead *chain; 4533fb8fb8f8SRandall Stewart struct sctp_tagblock *twait_block; 4534fb8fb8f8SRandall Stewart int found = 0; 4535fb8fb8f8SRandall Stewart int i; 4536fb8fb8f8SRandall Stewart 4537a1e13272SRandall Stewart SCTP_INP_INFO_WLOCK(); 4538b3f1ea41SRandall Stewart chain = &SCTP_BASE_INFO(vtag_timewait)[(tag % SCTP_STACK_VTAG_HASH_SIZE)]; 4539fb8fb8f8SRandall Stewart LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) { 4540fb8fb8f8SRandall Stewart for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) { 4541830d754dSRandall Stewart if ((twait_block->vtag_block[i].v_tag == tag) && 4542830d754dSRandall Stewart (twait_block->vtag_block[i].lport == lport) && 4543830d754dSRandall Stewart (twait_block->vtag_block[i].rport == rport)) { 4544fb8fb8f8SRandall Stewart found = 1; 4545fb8fb8f8SRandall Stewart break; 4546fb8fb8f8SRandall Stewart } 4547fb8fb8f8SRandall Stewart } 4548fb8fb8f8SRandall Stewart if (found) 4549fb8fb8f8SRandall Stewart break; 4550fb8fb8f8SRandall Stewart } 4551a1e13272SRandall Stewart SCTP_INP_INFO_WUNLOCK(); 4552fb8fb8f8SRandall Stewart return (found); 4553fb8fb8f8SRandall Stewart } 4554fb8fb8f8SRandall Stewart 455544b7479bSRandall Stewart void 4556830d754dSRandall Stewart sctp_add_vtag_to_timewait(uint32_t tag, uint32_t time, uint16_t lport, uint16_t rport) 4557f8829a4aSRandall Stewart { 4558f8829a4aSRandall Stewart struct sctpvtaghead *chain; 4559f8829a4aSRandall Stewart struct sctp_tagblock *twait_block; 4560f8829a4aSRandall Stewart struct timeval now; 4561f8829a4aSRandall Stewart int set, i; 4562f8829a4aSRandall Stewart 4563a16ccdceSRandall Stewart if (time == 0) { 4564a16ccdceSRandall Stewart /* Its disabled */ 4565a16ccdceSRandall Stewart return; 4566a16ccdceSRandall Stewart } 45676e55db54SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&now); 4568b3f1ea41SRandall Stewart chain = &SCTP_BASE_INFO(vtag_timewait)[(tag % SCTP_STACK_VTAG_HASH_SIZE)]; 4569f8829a4aSRandall Stewart set = 0; 4570f8829a4aSRandall Stewart LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) { 457156f778aaSMichael Tuexen /* Block(s) present, lets find space, and expire on the fly */ 4572f8829a4aSRandall Stewart for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) { 4573f8829a4aSRandall Stewart if ((twait_block->vtag_block[i].v_tag == 0) && 4574f8829a4aSRandall Stewart !set) { 4575f8829a4aSRandall Stewart twait_block->vtag_block[i].tv_sec_at_expire = 457644b7479bSRandall Stewart now.tv_sec + time; 4577f8829a4aSRandall Stewart twait_block->vtag_block[i].v_tag = tag; 4578830d754dSRandall Stewart twait_block->vtag_block[i].lport = lport; 4579830d754dSRandall Stewart twait_block->vtag_block[i].rport = rport; 4580f8829a4aSRandall Stewart set = 1; 4581f8829a4aSRandall Stewart } else if ((twait_block->vtag_block[i].v_tag) && 4582fb8fb8f8SRandall Stewart ((long)twait_block->vtag_block[i].tv_sec_at_expire < now.tv_sec)) { 4583f8829a4aSRandall Stewart /* Audit expires this guy */ 4584f8829a4aSRandall Stewart twait_block->vtag_block[i].tv_sec_at_expire = 0; 4585f8829a4aSRandall Stewart twait_block->vtag_block[i].v_tag = 0; 4586830d754dSRandall Stewart twait_block->vtag_block[i].lport = 0; 4587830d754dSRandall Stewart twait_block->vtag_block[i].rport = 0; 4588f8829a4aSRandall Stewart if (set == 0) { 4589f8829a4aSRandall Stewart /* Reuse it for my new tag */ 4590a1e13272SRandall Stewart twait_block->vtag_block[i].tv_sec_at_expire = now.tv_sec + time; 4591a1e13272SRandall Stewart twait_block->vtag_block[i].v_tag = tag; 4592830d754dSRandall Stewart twait_block->vtag_block[i].lport = lport; 4593830d754dSRandall Stewart twait_block->vtag_block[i].rport = rport; 4594f8829a4aSRandall Stewart set = 1; 4595f8829a4aSRandall Stewart } 4596f8829a4aSRandall Stewart } 4597f8829a4aSRandall Stewart } 4598f8829a4aSRandall Stewart if (set) { 4599f8829a4aSRandall Stewart /* 460056f778aaSMichael Tuexen * We only do up to the block where we can place our 460156f778aaSMichael Tuexen * tag for audits 4602f8829a4aSRandall Stewart */ 4603f8829a4aSRandall Stewart break; 4604f8829a4aSRandall Stewart } 4605f8829a4aSRandall Stewart } 4606f8829a4aSRandall Stewart /* Need to add a new block to chain */ 4607f8829a4aSRandall Stewart if (!set) { 4608f8829a4aSRandall Stewart SCTP_MALLOC(twait_block, struct sctp_tagblock *, 4609207304d4SRandall Stewart sizeof(struct sctp_tagblock), SCTP_M_TIMW); 4610f8829a4aSRandall Stewart if (twait_block == NULL) { 4611f8829a4aSRandall Stewart return; 4612f8829a4aSRandall Stewart } 461344b7479bSRandall Stewart memset(twait_block, 0, sizeof(struct sctp_tagblock)); 4614f8829a4aSRandall Stewart LIST_INSERT_HEAD(chain, twait_block, sctp_nxt_tagblock); 4615fb8fb8f8SRandall Stewart twait_block->vtag_block[0].tv_sec_at_expire = now.tv_sec + time; 4616f8829a4aSRandall Stewart twait_block->vtag_block[0].v_tag = tag; 4617830d754dSRandall Stewart twait_block->vtag_block[0].lport = lport; 4618830d754dSRandall Stewart twait_block->vtag_block[0].rport = rport; 4619f8829a4aSRandall Stewart } 4620f8829a4aSRandall Stewart } 4621f8829a4aSRandall Stewart 462244249214SRandall Stewart void 462344249214SRandall Stewart sctp_clean_up_stream(struct sctp_tcb *stcb, struct sctp_readhead *rh) 462444249214SRandall Stewart { 462544249214SRandall Stewart struct sctp_tmit_chunk *chk, *nchk; 462628cd0699SMichael Tuexen struct sctp_queued_to_read *control, *ncontrol; 462744249214SRandall Stewart 462828cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(control, rh, next_instrm, ncontrol) { 462928cd0699SMichael Tuexen TAILQ_REMOVE(rh, control, next_instrm); 463028cd0699SMichael Tuexen control->on_strm_q = 0; 463128cd0699SMichael Tuexen if (control->on_read_q == 0) { 463228cd0699SMichael Tuexen sctp_free_remote_addr(control->whoFrom); 463328cd0699SMichael Tuexen if (control->data) { 463428cd0699SMichael Tuexen sctp_m_freem(control->data); 463528cd0699SMichael Tuexen control->data = NULL; 463644249214SRandall Stewart } 463744249214SRandall Stewart } 463844249214SRandall Stewart /* Reassembly free? */ 463928cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &control->reasm, sctp_next, nchk) { 464028cd0699SMichael Tuexen TAILQ_REMOVE(&control->reasm, chk, sctp_next); 464144249214SRandall Stewart if (chk->data) { 464244249214SRandall Stewart sctp_m_freem(chk->data); 464344249214SRandall Stewart chk->data = NULL; 464444249214SRandall Stewart } 464544249214SRandall Stewart if (chk->holds_key_ref) 464644249214SRandall Stewart sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 464744249214SRandall Stewart sctp_free_remote_addr(chk->whoTo); 464844249214SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 464944249214SRandall Stewart SCTP_DECR_CHK_COUNT(); 465044249214SRandall Stewart /* sa_ignore FREED_MEMORY */ 465144249214SRandall Stewart } 465244249214SRandall Stewart /* 465344249214SRandall Stewart * We don't free the address here since all the net's were 465444249214SRandall Stewart * freed above. 465544249214SRandall Stewart */ 465628cd0699SMichael Tuexen if (control->on_read_q == 0) { 465728cd0699SMichael Tuexen sctp_free_a_readq(stcb, control); 465844249214SRandall Stewart } 465944249214SRandall Stewart } 466044249214SRandall Stewart } 4661f8829a4aSRandall Stewart 4662c4739e2fSRandall Stewart /*- 4663c4739e2fSRandall Stewart * Free the association after un-hashing the remote port. This 4664c4739e2fSRandall Stewart * function ALWAYS returns holding NO LOCK on the stcb. It DOES 4665c4739e2fSRandall Stewart * expect that the input to this function IS a locked TCB. 4666c4739e2fSRandall Stewart * It will return 0, if it did NOT destroy the association (instead 4667c4739e2fSRandall Stewart * it unlocks it. It will return NON-zero if it either destroyed the 4668c4739e2fSRandall Stewart * association OR the association is already destroyed. 4669f8829a4aSRandall Stewart */ 4670f8829a4aSRandall Stewart int 4671a5d547adSRandall Stewart sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfree, int from_location) 4672f8829a4aSRandall Stewart { 4673f8829a4aSRandall Stewart int i; 4674f8829a4aSRandall Stewart struct sctp_association *asoc; 46754a9ef3f8SMichael Tuexen struct sctp_nets *net, *nnet; 46764a9ef3f8SMichael Tuexen struct sctp_laddr *laddr, *naddr; 46774a9ef3f8SMichael Tuexen struct sctp_tmit_chunk *chk, *nchk; 46784a9ef3f8SMichael Tuexen struct sctp_asconf_addr *aparam, *naparam; 46794a9ef3f8SMichael Tuexen struct sctp_asconf_ack *aack, *naack; 46804a9ef3f8SMichael Tuexen struct sctp_stream_reset_list *strrst, *nstrrst; 46814a9ef3f8SMichael Tuexen struct sctp_queued_to_read *sq, *nsq; 46824a9ef3f8SMichael Tuexen struct sctp_stream_queue_pending *sp, *nsp; 46834a9ef3f8SMichael Tuexen sctp_sharedkey_t *shared_key, *nshared_key; 4684f8829a4aSRandall Stewart struct socket *so; 4685f8829a4aSRandall Stewart 4686f8829a4aSRandall Stewart /* first, lets purge the entry from the hash table. */ 4687f8829a4aSRandall Stewart 4688f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 4689f8829a4aSRandall Stewart sctp_log_closing(inp, stcb, 6); 4690f8829a4aSRandall Stewart #endif 4691f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 4692f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 4693f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 7); 4694f8829a4aSRandall Stewart #endif 4695f8829a4aSRandall Stewart /* there is no asoc, really TSNH :-0 */ 4696f8829a4aSRandall Stewart return (1); 4697f8829a4aSRandall Stewart } 4698f5d30f7fSMichael Tuexen SCTP_TCB_SEND_LOCK(stcb); 4699ca85e948SMichael Tuexen if (stcb->asoc.alternate) { 4700ca85e948SMichael Tuexen sctp_free_remote_addr(stcb->asoc.alternate); 4701ca85e948SMichael Tuexen stcb->asoc.alternate = NULL; 4702ca85e948SMichael Tuexen } 4703a5d547adSRandall Stewart /* TEMP CODE */ 4704a5d547adSRandall Stewart if (stcb->freed_from_where == 0) { 4705a5d547adSRandall Stewart /* Only record the first place free happened from */ 4706a5d547adSRandall Stewart stcb->freed_from_where = from_location; 4707a5d547adSRandall Stewart } 4708a5d547adSRandall Stewart /* TEMP CODE */ 4709a5d547adSRandall Stewart 4710f8829a4aSRandall Stewart asoc = &stcb->asoc; 4711f8829a4aSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || 4712f8829a4aSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) 4713f8829a4aSRandall Stewart /* nothing around */ 4714f8829a4aSRandall Stewart so = NULL; 4715f8829a4aSRandall Stewart else 4716f8829a4aSRandall Stewart so = inp->sctp_socket; 4717f8829a4aSRandall Stewart 4718f8829a4aSRandall Stewart /* 4719f8829a4aSRandall Stewart * We used timer based freeing if a reader or writer is in the way. 4720f8829a4aSRandall Stewart * So we first check if we are actually being called from a timer, 4721f8829a4aSRandall Stewart * if so we abort early if a reader or writer is still in the way. 4722f8829a4aSRandall Stewart */ 4723f8829a4aSRandall Stewart if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) && 4724a5d547adSRandall Stewart (from_inpcbfree == SCTP_NORMAL_PROC)) { 4725f8829a4aSRandall Stewart /* 4726f8829a4aSRandall Stewart * is it the timer driving us? if so are the reader/writers 4727f8829a4aSRandall Stewart * gone? 4728f8829a4aSRandall Stewart */ 4729f8829a4aSRandall Stewart if (stcb->asoc.refcnt) { 4730f8829a4aSRandall Stewart /* nope, reader or writer in the way */ 4731f8829a4aSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); 4732f8829a4aSRandall Stewart /* no asoc destroyed */ 4733f5d30f7fSMichael Tuexen SCTP_TCB_SEND_UNLOCK(stcb); 4734f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 4735f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 4736f8829a4aSRandall Stewart sctp_log_closing(inp, stcb, 8); 4737f8829a4aSRandall Stewart #endif 4738f8829a4aSRandall Stewart return (0); 4739f8829a4aSRandall Stewart } 4740f8829a4aSRandall Stewart } 47415555400aSMichael Tuexen /* Now clean up any other timers */ 47428803350dSMichael Tuexen sctp_stop_association_timers(stcb, false); 4743f4ad963cSRandall Stewart /* Now the read queue needs to be cleaned up (only once) */ 4744f4ad963cSRandall Stewart if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0) { 4745839d21d6SMichael Tuexen SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_ABOUT_TO_BE_FREED); 4746f8829a4aSRandall Stewart SCTP_INP_READ_LOCK(inp); 4747f8829a4aSRandall Stewart TAILQ_FOREACH(sq, &inp->read_queue, next) { 4748f8829a4aSRandall Stewart if (sq->stcb == stcb) { 4749f8829a4aSRandall Stewart sq->do_not_ref_stcb = 1; 4750f8829a4aSRandall Stewart sq->sinfo_cumtsn = stcb->asoc.cumulative_tsn; 4751f8829a4aSRandall Stewart /* 475203b0b021SRandall Stewart * If there is no end, there never will be 475303b0b021SRandall Stewart * now. 4754f8829a4aSRandall Stewart */ 475503b0b021SRandall Stewart if (sq->end_added == 0) { 475603b0b021SRandall Stewart /* Held for PD-API clear that. */ 475703b0b021SRandall Stewart sq->pdapi_aborted = 1; 4758f8829a4aSRandall Stewart sq->held_length = 0; 4759e2e7c62eSMichael Tuexen if (sctp_stcb_is_feature_on(inp, stcb, SCTP_PCB_FLAGS_PDAPIEVNT) && (so != NULL)) { 4760f8829a4aSRandall Stewart /* 476103b0b021SRandall Stewart * Need to add a PD-API 476203b0b021SRandall Stewart * aborted indication. 476303b0b021SRandall Stewart * Setting the control_pdapi 476403b0b021SRandall Stewart * assures that it will be 476503b0b021SRandall Stewart * added right after this 476603b0b021SRandall Stewart * msg. 4767f8829a4aSRandall Stewart */ 47689a6142d8SRandall Stewart uint32_t strseq; 47699a6142d8SRandall Stewart 4770f8829a4aSRandall Stewart stcb->asoc.control_pdapi = sq; 477149656eefSMichael Tuexen strseq = (sq->sinfo_stream << 16) | (sq->mid & 0x0000ffff); 4772810ec536SMichael Tuexen sctp_ulp_notify(SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION, 4773810ec536SMichael Tuexen stcb, 4774810ec536SMichael Tuexen SCTP_PARTIAL_DELIVERY_ABORTED, 4775810ec536SMichael Tuexen (void *)&strseq, 4776810ec536SMichael Tuexen SCTP_SO_LOCKED); 4777f8829a4aSRandall Stewart stcb->asoc.control_pdapi = NULL; 4778f8829a4aSRandall Stewart } 4779f8829a4aSRandall Stewart } 478003b0b021SRandall Stewart /* Add an end to wake them */ 4781f8829a4aSRandall Stewart sq->end_added = 1; 4782f8829a4aSRandall Stewart } 4783f8829a4aSRandall Stewart } 4784f8829a4aSRandall Stewart SCTP_INP_READ_UNLOCK(inp); 4785f8829a4aSRandall Stewart if (stcb->block_entry) { 4786c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_PCB, ECONNRESET); 4787f8829a4aSRandall Stewart stcb->block_entry->error = ECONNRESET; 4788f8829a4aSRandall Stewart stcb->block_entry = NULL; 4789f8829a4aSRandall Stewart } 4790f4ad963cSRandall Stewart } 479188a7eb29SRandall Stewart if ((stcb->asoc.refcnt) || (stcb->asoc.state & SCTP_STATE_IN_ACCEPT_QUEUE)) { 4792f4ad963cSRandall Stewart /* 479388a7eb29SRandall Stewart * Someone holds a reference OR the socket is unaccepted 479488a7eb29SRandall Stewart * yet. 4795f4ad963cSRandall Stewart */ 479662fb761fSRandall Stewart if ((stcb->asoc.refcnt) || 479762fb761fSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || 479862fb761fSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) { 4799839d21d6SMichael Tuexen SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_IN_ACCEPT_QUEUE); 4800a5d547adSRandall Stewart sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); 480162fb761fSRandall Stewart } 4802f5d30f7fSMichael Tuexen SCTP_TCB_SEND_UNLOCK(stcb); 4803a5d547adSRandall Stewart SCTP_TCB_UNLOCK(stcb); 4804a5d547adSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || 4805a5d547adSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) 4806a5d547adSRandall Stewart /* nothing around */ 4807a5d547adSRandall Stewart so = NULL; 4808f4ad963cSRandall Stewart if (so) { 4809f4ad963cSRandall Stewart /* Wake any reader/writers */ 4810f4ad963cSRandall Stewart sctp_sorwakeup(inp, so); 4811f4ad963cSRandall Stewart sctp_sowwakeup(inp, so); 4812f4ad963cSRandall Stewart } 48130053ed28SMichael Tuexen 4814f4ad963cSRandall Stewart #ifdef SCTP_LOG_CLOSING 4815f4ad963cSRandall Stewart sctp_log_closing(inp, stcb, 9); 4816f4ad963cSRandall Stewart #endif 4817f4ad963cSRandall Stewart /* no asoc destroyed */ 4818f4ad963cSRandall Stewart return (0); 4819f4ad963cSRandall Stewart } 4820f4ad963cSRandall Stewart #ifdef SCTP_LOG_CLOSING 4821f4ad963cSRandall Stewart sctp_log_closing(inp, stcb, 10); 4822f4ad963cSRandall Stewart #endif 4823a5d547adSRandall Stewart /* 4824a5d547adSRandall Stewart * When I reach here, no others want to kill the assoc yet.. and I 4825a5d547adSRandall Stewart * own the lock. Now its possible an abort comes in when I do the 4826a5d547adSRandall Stewart * lock exchange below to grab all the locks to do the final take 4827a5d547adSRandall Stewart * out. to prevent this we increment the count, which will start a 4828a5d547adSRandall Stewart * timer and blow out above thus assuring us that we hold exclusive 4829a5d547adSRandall Stewart * killing of the asoc. Note that after getting back the TCB lock we 4830a5d547adSRandall Stewart * will go ahead and increment the counter back up and stop any 4831a5d547adSRandall Stewart * timer a passing stranger may have started :-S 4832a5d547adSRandall Stewart */ 4833a5d547adSRandall Stewart if (from_inpcbfree == SCTP_NORMAL_PROC) { 4834a5d547adSRandall Stewart atomic_add_int(&stcb->asoc.refcnt, 1); 4835a5d547adSRandall Stewart 4836f5d30f7fSMichael Tuexen SCTP_TCB_SEND_UNLOCK(stcb); 4837a5d547adSRandall Stewart SCTP_TCB_UNLOCK(stcb); 4838a5d547adSRandall Stewart SCTP_INP_INFO_WLOCK(); 4839a5d547adSRandall Stewart SCTP_INP_WLOCK(inp); 4840a5d547adSRandall Stewart SCTP_TCB_LOCK(stcb); 4841f5d30f7fSMichael Tuexen SCTP_TCB_SEND_LOCK(stcb); 4842f8829a4aSRandall Stewart } 4843a5d547adSRandall Stewart /* Double check the GONE flag */ 4844a5d547adSRandall Stewart if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) || 4845a5d547adSRandall Stewart (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) 4846a5d547adSRandall Stewart /* nothing around */ 4847a5d547adSRandall Stewart so = NULL; 4848a5d547adSRandall Stewart 484924187cfeSMichael Tuexen if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) || 485024187cfeSMichael Tuexen (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) { 485124187cfeSMichael Tuexen /* 485224187cfeSMichael Tuexen * For TCP type we need special handling when we are 485324187cfeSMichael Tuexen * connected. We also include the peel'ed off ones to. 485424187cfeSMichael Tuexen */ 485524187cfeSMichael Tuexen if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) { 485624187cfeSMichael Tuexen inp->sctp_flags &= ~SCTP_PCB_FLAGS_CONNECTED; 485724187cfeSMichael Tuexen inp->sctp_flags |= SCTP_PCB_FLAGS_WAS_CONNECTED; 485824187cfeSMichael Tuexen if (so) { 485924187cfeSMichael Tuexen SOCKBUF_LOCK(&so->so_rcv); 486024187cfeSMichael Tuexen so->so_state &= ~(SS_ISCONNECTING | 486124187cfeSMichael Tuexen SS_ISDISCONNECTING | 486224187cfeSMichael Tuexen SS_ISCONFIRMING | 486324187cfeSMichael Tuexen SS_ISCONNECTED); 486424187cfeSMichael Tuexen so->so_state |= SS_ISDISCONNECTED; 486524187cfeSMichael Tuexen socantrcvmore_locked(so); 486624187cfeSMichael Tuexen socantsendmore(so); 486724187cfeSMichael Tuexen sctp_sowwakeup(inp, so); 486824187cfeSMichael Tuexen sctp_sorwakeup(inp, so); 486924187cfeSMichael Tuexen SCTP_SOWAKEUP(so); 487024187cfeSMichael Tuexen } 487124187cfeSMichael Tuexen } 487224187cfeSMichael Tuexen } 487324187cfeSMichael Tuexen 4874f8829a4aSRandall Stewart /* 4875f8829a4aSRandall Stewart * Make it invalid too, that way if its about to run it will abort 4876f8829a4aSRandall Stewart * and return. 4877f8829a4aSRandall Stewart */ 4878f8829a4aSRandall Stewart /* re-increment the lock */ 4879a5d547adSRandall Stewart if (from_inpcbfree == SCTP_NORMAL_PROC) { 488050cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, -1); 4881f8829a4aSRandall Stewart } 4882fc066a61SMichael Tuexen if (stcb->asoc.refcnt) { 4883839d21d6SMichael Tuexen SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_IN_ACCEPT_QUEUE); 4884fc066a61SMichael Tuexen sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL); 4885fc066a61SMichael Tuexen if (from_inpcbfree == SCTP_NORMAL_PROC) { 4886fc066a61SMichael Tuexen SCTP_INP_INFO_WUNLOCK(); 4887fc066a61SMichael Tuexen SCTP_INP_WUNLOCK(inp); 4888fc066a61SMichael Tuexen } 4889f5d30f7fSMichael Tuexen SCTP_TCB_SEND_UNLOCK(stcb); 4890fc066a61SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 4891fc066a61SMichael Tuexen return (0); 4892fc066a61SMichael Tuexen } 4893f8829a4aSRandall Stewart asoc->state = 0; 4894f8829a4aSRandall Stewart if (inp->sctp_tcbhash) { 4895f8829a4aSRandall Stewart LIST_REMOVE(stcb, sctp_tcbhash); 4896f8829a4aSRandall Stewart } 4897830d754dSRandall Stewart if (stcb->asoc.in_asocid_hash) { 4898830d754dSRandall Stewart LIST_REMOVE(stcb, sctp_tcbasocidhash); 4899f8829a4aSRandall Stewart } 4900f8829a4aSRandall Stewart /* Now lets remove it from the list of ALL associations in the EP */ 4901f8829a4aSRandall Stewart LIST_REMOVE(stcb, sctp_tcblist); 4902a5d547adSRandall Stewart if (from_inpcbfree == SCTP_NORMAL_PROC) { 4903f8829a4aSRandall Stewart SCTP_INP_INCR_REF(inp); 4904f8829a4aSRandall Stewart SCTP_INP_WUNLOCK(inp); 4905f8829a4aSRandall Stewart } 4906f8829a4aSRandall Stewart /* pull from vtag hash */ 4907f8829a4aSRandall Stewart LIST_REMOVE(stcb, sctp_asocs); 4908a16ccdceSRandall Stewart sctp_add_vtag_to_timewait(asoc->my_vtag, SCTP_BASE_SYSCTL(sctp_vtag_time_wait), 4909a16ccdceSRandall Stewart inp->sctp_lport, stcb->rport); 4910f8829a4aSRandall Stewart 491144b7479bSRandall Stewart /* 4912b5c16493SMichael Tuexen * Now restop the timers to be sure this is paranoia at is finest! 491344b7479bSRandall Stewart */ 49148803350dSMichael Tuexen sctp_stop_association_timers(stcb, true); 491544b7479bSRandall Stewart 4916f8829a4aSRandall Stewart /* 4917f8829a4aSRandall Stewart * The chunk lists and such SHOULD be empty but we check them just 4918f8829a4aSRandall Stewart * in case. 4919f8829a4aSRandall Stewart */ 4920f8829a4aSRandall Stewart /* anything on the wheel needs to be removed */ 4921f8829a4aSRandall Stewart for (i = 0; i < asoc->streamoutcnt; i++) { 4922f8829a4aSRandall Stewart struct sctp_stream_out *outs; 4923f8829a4aSRandall Stewart 4924f8829a4aSRandall Stewart outs = &asoc->strmout[i]; 4925f8829a4aSRandall Stewart /* now clean up any chunks here */ 49264a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(sp, &outs->outqueue, next, nsp) { 49274d58b0c3SMichael Tuexen atomic_subtract_int(&asoc->stream_queue_cnt, 1); 4928f8829a4aSRandall Stewart TAILQ_REMOVE(&outs->outqueue, sp, next); 4929689ed089SMichael Tuexen stcb->asoc.ss_functions.sctp_ss_remove_from_stream(stcb, asoc, outs, sp, 1); 4930d07b2ac6SMichael Tuexen sctp_free_spbufspace(stcb, asoc, sp); 4931f8829a4aSRandall Stewart if (sp->data) { 49328db924deSRandall Stewart if (so) { 49338db924deSRandall Stewart /* Still an open socket - report */ 49348db924deSRandall Stewart sctp_ulp_notify(SCTP_NOTIFY_SPECIAL_SP_FAIL, stcb, 49351edc9dbaSMichael Tuexen 0, (void *)sp, SCTP_SO_LOCKED); 49368db924deSRandall Stewart } 49378db924deSRandall Stewart if (sp->data) { 4938f8829a4aSRandall Stewart sctp_m_freem(sp->data); 4939f8829a4aSRandall Stewart sp->data = NULL; 4940f8829a4aSRandall Stewart sp->tail_mbuf = NULL; 4941d07b2ac6SMichael Tuexen sp->length = 0; 4942f8829a4aSRandall Stewart } 49438db924deSRandall Stewart } 49449eea4a2dSMichael Tuexen if (sp->net) { 4945f8829a4aSRandall Stewart sctp_free_remote_addr(sp->net); 49469eea4a2dSMichael Tuexen sp->net = NULL; 49479eea4a2dSMichael Tuexen } 4948d07b2ac6SMichael Tuexen sctp_free_a_strmoq(stcb, sp, SCTP_SO_LOCKED); 4949f8829a4aSRandall Stewart } 4950f8829a4aSRandall Stewart } 49513c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 49524a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(strrst, &asoc->resetHead, next_resp, nstrrst) { 49534a9ef3f8SMichael Tuexen TAILQ_REMOVE(&asoc->resetHead, strrst, next_resp); 49544a9ef3f8SMichael Tuexen SCTP_FREE(strrst, SCTP_M_STRESET); 4955f8829a4aSRandall Stewart } 49564a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(sq, &asoc->pending_reply_queue, next, nsq) { 4957f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->pending_reply_queue, sq, next); 4958f8829a4aSRandall Stewart if (sq->data) { 4959f8829a4aSRandall Stewart sctp_m_freem(sq->data); 4960f8829a4aSRandall Stewart sq->data = NULL; 4961f8829a4aSRandall Stewart } 4962f8829a4aSRandall Stewart sctp_free_remote_addr(sq->whoFrom); 4963f8829a4aSRandall Stewart sq->whoFrom = NULL; 4964f8829a4aSRandall Stewart sq->stcb = NULL; 4965f8829a4aSRandall Stewart /* Free the ctl entry */ 496644249214SRandall Stewart sctp_free_a_readq(stcb, sq); 49673c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 4968f8829a4aSRandall Stewart } 49694a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &asoc->free_chunks, sctp_next, nchk) { 4970f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->free_chunks, chk, sctp_next); 4971f8829a4aSRandall Stewart if (chk->data) { 4972f8829a4aSRandall Stewart sctp_m_freem(chk->data); 4973f8829a4aSRandall Stewart chk->data = NULL; 4974f8829a4aSRandall Stewart } 4975830d754dSRandall Stewart if (chk->holds_key_ref) 4976689e6a5fSMichael Tuexen sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 4977b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 4978f8829a4aSRandall Stewart SCTP_DECR_CHK_COUNT(); 4979b3f1ea41SRandall Stewart atomic_subtract_int(&SCTP_BASE_INFO(ipi_free_chunks), 1); 4980f8829a4aSRandall Stewart asoc->free_chunk_cnt--; 49813c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 4982f8829a4aSRandall Stewart } 4983f8829a4aSRandall Stewart /* pending send queue SHOULD be empty */ 49844a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &asoc->send_queue, sctp_next, nchk) { 498549656eefSMichael Tuexen if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) { 498649656eefSMichael Tuexen asoc->strmout[chk->rec.data.sid].chunks_on_queues--; 4987325c8c46SMichael Tuexen #ifdef INVARIANTS 4988325c8c46SMichael Tuexen } else { 498949656eefSMichael Tuexen panic("No chunks on the queues for sid %u.", chk->rec.data.sid); 4990325c8c46SMichael Tuexen #endif 4991325c8c46SMichael Tuexen } 4992f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next); 4993f8829a4aSRandall Stewart if (chk->data) { 49948db924deSRandall Stewart if (so) { 49958db924deSRandall Stewart /* Still a socket? */ 49961edc9dbaSMichael Tuexen sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 49971edc9dbaSMichael Tuexen 0, chk, SCTP_SO_LOCKED); 49988db924deSRandall Stewart } 49998db924deSRandall Stewart if (chk->data) { 5000f8829a4aSRandall Stewart sctp_m_freem(chk->data); 5001f8829a4aSRandall Stewart chk->data = NULL; 5002f8829a4aSRandall Stewart } 50038db924deSRandall Stewart } 5004830d754dSRandall Stewart if (chk->holds_key_ref) 5005689e6a5fSMichael Tuexen sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 50069eea4a2dSMichael Tuexen if (chk->whoTo) { 5007f8829a4aSRandall Stewart sctp_free_remote_addr(chk->whoTo); 50089eea4a2dSMichael Tuexen chk->whoTo = NULL; 50099eea4a2dSMichael Tuexen } 5010b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 5011f8829a4aSRandall Stewart SCTP_DECR_CHK_COUNT(); 50123c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 5013f8829a4aSRandall Stewart } 5014f8829a4aSRandall Stewart /* sent queue SHOULD be empty */ 50154a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { 5016325c8c46SMichael Tuexen if (chk->sent != SCTP_DATAGRAM_NR_ACKED) { 501749656eefSMichael Tuexen if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) { 501849656eefSMichael Tuexen asoc->strmout[chk->rec.data.sid].chunks_on_queues--; 5019a7ad6026SMichael Tuexen #ifdef INVARIANTS 5020a7ad6026SMichael Tuexen } else { 502149656eefSMichael Tuexen panic("No chunks on the queues for sid %u.", chk->rec.data.sid); 5022a7ad6026SMichael Tuexen #endif 5023a7ad6026SMichael Tuexen } 5024a7ad6026SMichael Tuexen } 5025f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); 5026f8829a4aSRandall Stewart if (chk->data) { 50278db924deSRandall Stewart if (so) { 50288db924deSRandall Stewart /* Still a socket? */ 50291edc9dbaSMichael Tuexen sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 50301edc9dbaSMichael Tuexen 0, chk, SCTP_SO_LOCKED); 50318db924deSRandall Stewart } 50328db924deSRandall Stewart if (chk->data) { 5033f8829a4aSRandall Stewart sctp_m_freem(chk->data); 5034f8829a4aSRandall Stewart chk->data = NULL; 5035f8829a4aSRandall Stewart } 50368db924deSRandall Stewart } 5037830d754dSRandall Stewart if (chk->holds_key_ref) 5038689e6a5fSMichael Tuexen sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 5039f8829a4aSRandall Stewart sctp_free_remote_addr(chk->whoTo); 5040b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 5041f8829a4aSRandall Stewart SCTP_DECR_CHK_COUNT(); 50423c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 5043f8829a4aSRandall Stewart } 5044325c8c46SMichael Tuexen #ifdef INVARIANTS 5045325c8c46SMichael Tuexen for (i = 0; i < stcb->asoc.streamoutcnt; i++) { 5046325c8c46SMichael Tuexen if (stcb->asoc.strmout[i].chunks_on_queues > 0) { 5047325c8c46SMichael Tuexen panic("%u chunks left for stream %u.", stcb->asoc.strmout[i].chunks_on_queues, i); 5048325c8c46SMichael Tuexen } 5049325c8c46SMichael Tuexen } 5050325c8c46SMichael Tuexen #endif 5051f8829a4aSRandall Stewart /* control queue MAY not be empty */ 50524a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &asoc->control_send_queue, sctp_next, nchk) { 5053f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->control_send_queue, chk, sctp_next); 5054f8829a4aSRandall Stewart if (chk->data) { 5055f8829a4aSRandall Stewart sctp_m_freem(chk->data); 5056f8829a4aSRandall Stewart chk->data = NULL; 5057f8829a4aSRandall Stewart } 5058830d754dSRandall Stewart if (chk->holds_key_ref) 5059689e6a5fSMichael Tuexen sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 5060f8829a4aSRandall Stewart sctp_free_remote_addr(chk->whoTo); 5061b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 5062f8829a4aSRandall Stewart SCTP_DECR_CHK_COUNT(); 50633c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 5064f8829a4aSRandall Stewart } 5065c54a18d2SRandall Stewart /* ASCONF queue MAY not be empty */ 50664a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &asoc->asconf_send_queue, sctp_next, nchk) { 5067c54a18d2SRandall Stewart TAILQ_REMOVE(&asoc->asconf_send_queue, chk, sctp_next); 5068c54a18d2SRandall Stewart if (chk->data) { 5069c54a18d2SRandall Stewart sctp_m_freem(chk->data); 5070c54a18d2SRandall Stewart chk->data = NULL; 5071c54a18d2SRandall Stewart } 5072830d754dSRandall Stewart if (chk->holds_key_ref) 5073689e6a5fSMichael Tuexen sctp_auth_key_release(stcb, chk->auth_keyid, SCTP_SO_LOCKED); 5074c54a18d2SRandall Stewart sctp_free_remote_addr(chk->whoTo); 5075b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_chunk), chk); 5076c54a18d2SRandall Stewart SCTP_DECR_CHK_COUNT(); 5077c54a18d2SRandall Stewart /* sa_ignore FREED_MEMORY */ 5078c54a18d2SRandall Stewart } 5079f8829a4aSRandall Stewart if (asoc->mapping_array) { 5080207304d4SRandall Stewart SCTP_FREE(asoc->mapping_array, SCTP_M_MAP); 5081f8829a4aSRandall Stewart asoc->mapping_array = NULL; 5082f8829a4aSRandall Stewart } 5083bf1be571SRandall Stewart if (asoc->nr_mapping_array) { 5084bf1be571SRandall Stewart SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP); 5085bf1be571SRandall Stewart asoc->nr_mapping_array = NULL; 5086bf1be571SRandall Stewart } 5087f8829a4aSRandall Stewart /* the stream outs */ 5088f8829a4aSRandall Stewart if (asoc->strmout) { 5089207304d4SRandall Stewart SCTP_FREE(asoc->strmout, SCTP_M_STRMO); 5090f8829a4aSRandall Stewart asoc->strmout = NULL; 5091f8829a4aSRandall Stewart } 5092ea44232bSRandall Stewart asoc->strm_realoutsize = asoc->streamoutcnt = 0; 5093f8829a4aSRandall Stewart if (asoc->strmin) { 5094f8829a4aSRandall Stewart for (i = 0; i < asoc->streamincnt; i++) { 509544249214SRandall Stewart sctp_clean_up_stream(stcb, &asoc->strmin[i].inqueue); 509644249214SRandall Stewart sctp_clean_up_stream(stcb, &asoc->strmin[i].uno_inqueue); 5097f8829a4aSRandall Stewart } 5098207304d4SRandall Stewart SCTP_FREE(asoc->strmin, SCTP_M_STRMI); 5099f8829a4aSRandall Stewart asoc->strmin = NULL; 5100f8829a4aSRandall Stewart } 5101f8829a4aSRandall Stewart asoc->streamincnt = 0; 51024a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(net, &asoc->nets, sctp_next, nnet) { 5103a5d547adSRandall Stewart #ifdef INVARIANTS 51044a9ef3f8SMichael Tuexen if (SCTP_BASE_INFO(ipi_count_raddr) == 0) { 5105f8829a4aSRandall Stewart panic("no net's left alloc'ed, or list points to itself"); 5106f8829a4aSRandall Stewart } 51074a9ef3f8SMichael Tuexen #endif 5108f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->nets, net, sctp_next); 5109f8829a4aSRandall Stewart sctp_free_remote_addr(net); 5110f8829a4aSRandall Stewart } 51114a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(laddr, &asoc->sctp_restricted_addrs, sctp_nxt_addr, naddr) { 51123c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 511342551e99SRandall Stewart sctp_remove_laddr(laddr); 5114f8829a4aSRandall Stewart } 511542551e99SRandall Stewart 5116f8829a4aSRandall Stewart /* pending asconf (address) parameters */ 51174a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aparam, &asoc->asconf_queue, next, naparam) { 51183c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 5119f8829a4aSRandall Stewart TAILQ_REMOVE(&asoc->asconf_queue, aparam, next); 5120207304d4SRandall Stewart SCTP_FREE(aparam, SCTP_M_ASC_ADDR); 5121f8829a4aSRandall Stewart } 51224a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(aack, &asoc->asconf_ack_sent, next, naack) { 5123851b7298SRandall Stewart /* sa_ignore FREED_MEMORY */ 51242afb3e84SRandall Stewart TAILQ_REMOVE(&asoc->asconf_ack_sent, aack, next); 51252afb3e84SRandall Stewart if (aack->data != NULL) { 51262afb3e84SRandall Stewart sctp_m_freem(aack->data); 51272afb3e84SRandall Stewart } 5128b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asconf_ack), aack); 5129f8829a4aSRandall Stewart } 5130f8829a4aSRandall Stewart /* clean up auth stuff */ 5131f8829a4aSRandall Stewart if (asoc->local_hmacs) 5132f8829a4aSRandall Stewart sctp_free_hmaclist(asoc->local_hmacs); 5133f8829a4aSRandall Stewart if (asoc->peer_hmacs) 5134f8829a4aSRandall Stewart sctp_free_hmaclist(asoc->peer_hmacs); 5135f8829a4aSRandall Stewart 5136f8829a4aSRandall Stewart if (asoc->local_auth_chunks) 5137f8829a4aSRandall Stewart sctp_free_chunklist(asoc->local_auth_chunks); 5138f8829a4aSRandall Stewart if (asoc->peer_auth_chunks) 5139f8829a4aSRandall Stewart sctp_free_chunklist(asoc->peer_auth_chunks); 5140f8829a4aSRandall Stewart 5141f8829a4aSRandall Stewart sctp_free_authinfo(&asoc->authinfo); 5142f8829a4aSRandall Stewart 51434a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(shared_key, &asoc->shared_keys, next, nshared_key) { 5144f8829a4aSRandall Stewart LIST_REMOVE(shared_key, next); 5145f8829a4aSRandall Stewart sctp_free_sharedkey(shared_key); 51463c503c28SRandall Stewart /* sa_ignore FREED_MEMORY */ 5147f8829a4aSRandall Stewart } 5148f8829a4aSRandall Stewart 5149f8829a4aSRandall Stewart /* Insert new items here :> */ 5150f8829a4aSRandall Stewart 5151f8829a4aSRandall Stewart /* Get rid of LOCK */ 5152f5d30f7fSMichael Tuexen SCTP_TCB_SEND_UNLOCK(stcb); 51533b3d05d7SMichael Tuexen SCTP_TCB_UNLOCK(stcb); 5154f8829a4aSRandall Stewart SCTP_TCB_LOCK_DESTROY(stcb); 5155f8829a4aSRandall Stewart SCTP_TCB_SEND_LOCK_DESTROY(stcb); 5156a5d547adSRandall Stewart if (from_inpcbfree == SCTP_NORMAL_PROC) { 5157a5d547adSRandall Stewart SCTP_INP_INFO_WUNLOCK(); 5158a5d547adSRandall Stewart SCTP_INP_RLOCK(inp); 5159a5d547adSRandall Stewart } 5160a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS 5161a5d547adSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) { 5162f8829a4aSRandall Stewart /* now clean up the tasoc itself */ 5163b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), stcb); 5164f8829a4aSRandall Stewart SCTP_DECR_ASOC_COUNT(); 5165a5d547adSRandall Stewart } else { 5166a5d547adSRandall Stewart LIST_INSERT_HEAD(&inp->sctp_asoc_free_list, stcb, sctp_tcblist); 5167a5d547adSRandall Stewart } 5168a5d547adSRandall Stewart #else 5169b3f1ea41SRandall Stewart SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_asoc), stcb); 5170a5d547adSRandall Stewart SCTP_DECR_ASOC_COUNT(); 5171a5d547adSRandall Stewart #endif 5172a5d547adSRandall Stewart if (from_inpcbfree == SCTP_NORMAL_PROC) { 5173f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) { 5174f8829a4aSRandall Stewart /* 5175f8829a4aSRandall Stewart * If its NOT the inp_free calling us AND sctp_close 5176f8829a4aSRandall Stewart * as been called, we call back... 5177f8829a4aSRandall Stewart */ 5178f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 5179f8829a4aSRandall Stewart /* 5180f8829a4aSRandall Stewart * This will start the kill timer (if we are the 5181034b88b0SMichael Tuexen * last one) since we hold an increment yet. But 5182034b88b0SMichael Tuexen * this is the only safe way to do this since 5183034b88b0SMichael Tuexen * otherwise if the socket closes at the same time 5184034b88b0SMichael Tuexen * we are here we might collide in the cleanup. 5185f8829a4aSRandall Stewart */ 5186b0552ae2SRandall Stewart sctp_inpcb_free(inp, 5187b0552ae2SRandall Stewart SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE, 5188b0552ae2SRandall Stewart SCTP_CALLED_DIRECTLY_NOCMPSET); 5189f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 5190f8829a4aSRandall Stewart } else { 5191f8829a4aSRandall Stewart /* The socket is still open. */ 5192f8829a4aSRandall Stewart SCTP_INP_DECR_REF(inp); 5193f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 5194f8829a4aSRandall Stewart } 5195bca18028SMichael Tuexen } 5196f8829a4aSRandall Stewart /* destroyed the asoc */ 5197f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING 5198f8829a4aSRandall Stewart sctp_log_closing(inp, NULL, 11); 5199f8829a4aSRandall Stewart #endif 5200f8829a4aSRandall Stewart return (1); 5201f8829a4aSRandall Stewart } 5202f8829a4aSRandall Stewart 5203f8829a4aSRandall Stewart /* 5204f8829a4aSRandall Stewart * determine if a destination is "reachable" based upon the addresses bound 5205f8829a4aSRandall Stewart * to the current endpoint (e.g. only v4 or v6 currently bound) 5206f8829a4aSRandall Stewart */ 5207f8829a4aSRandall Stewart /* 5208f8829a4aSRandall Stewart * FIX: if we allow assoc-level bindx(), then this needs to be fixed to use 5209f8829a4aSRandall Stewart * assoc level v4/v6 flags, as the assoc *may* not have the same address 5210f8829a4aSRandall Stewart * types bound as its endpoint 5211f8829a4aSRandall Stewart */ 5212f8829a4aSRandall Stewart int 5213f8829a4aSRandall Stewart sctp_destination_is_reachable(struct sctp_tcb *stcb, struct sockaddr *destaddr) 5214f8829a4aSRandall Stewart { 5215f8829a4aSRandall Stewart struct sctp_inpcb *inp; 5216f8829a4aSRandall Stewart int answer; 5217f8829a4aSRandall Stewart 5218f8829a4aSRandall Stewart /* 5219f8829a4aSRandall Stewart * No locks here, the TCB, in all cases is already locked and an 5220f8829a4aSRandall Stewart * assoc is up. There is either a INP lock by the caller applied (in 5221f8829a4aSRandall Stewart * asconf case when deleting an address) or NOT in the HB case, 5222f8829a4aSRandall Stewart * however if HB then the INP increment is up and the INP will not 5223f8829a4aSRandall Stewart * be removed (on top of the fact that we have a TCB lock). So we 5224f8829a4aSRandall Stewart * only want to read the sctp_flags, which is either bound-all or 5225f8829a4aSRandall Stewart * not.. no protection needed since once an assoc is up you can't be 5226f8829a4aSRandall Stewart * changing your binding. 5227f8829a4aSRandall Stewart */ 5228f8829a4aSRandall Stewart inp = stcb->sctp_ep; 5229f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 5230f8829a4aSRandall Stewart /* if bound all, destination is not restricted */ 5231f8829a4aSRandall Stewart /* 5232f8829a4aSRandall Stewart * RRS: Question during lock work: Is this correct? If you 5233f8829a4aSRandall Stewart * are bound-all you still might need to obey the V4--V6 5234f8829a4aSRandall Stewart * flags??? IMO this bound-all stuff needs to be removed! 5235f8829a4aSRandall Stewart */ 5236f8829a4aSRandall Stewart return (1); 5237f8829a4aSRandall Stewart } 5238f8829a4aSRandall Stewart /* NOTE: all "scope" checks are done when local addresses are added */ 5239e6194c2eSMichael Tuexen switch (destaddr->sa_family) { 5240e0e00a4dSMichael Tuexen #ifdef INET6 5241e6194c2eSMichael Tuexen case AF_INET6: 5242f8829a4aSRandall Stewart answer = inp->ip_inp.inp.inp_vflag & INP_IPV6; 5243e6194c2eSMichael Tuexen break; 5244e0e00a4dSMichael Tuexen #endif 5245e0e00a4dSMichael Tuexen #ifdef INET 5246e6194c2eSMichael Tuexen case AF_INET: 5247f8829a4aSRandall Stewart answer = inp->ip_inp.inp.inp_vflag & INP_IPV4; 5248e6194c2eSMichael Tuexen break; 5249e0e00a4dSMichael Tuexen #endif 5250e6194c2eSMichael Tuexen default: 5251f8829a4aSRandall Stewart /* invalid family, so it's unreachable */ 5252f8829a4aSRandall Stewart answer = 0; 5253e6194c2eSMichael Tuexen break; 5254f8829a4aSRandall Stewart } 5255f8829a4aSRandall Stewart return (answer); 5256f8829a4aSRandall Stewart } 5257f8829a4aSRandall Stewart 5258f8829a4aSRandall Stewart /* 5259f8829a4aSRandall Stewart * update the inp_vflags on an endpoint 5260f8829a4aSRandall Stewart */ 5261f8829a4aSRandall Stewart static void 5262f8829a4aSRandall Stewart sctp_update_ep_vflag(struct sctp_inpcb *inp) 5263f8829a4aSRandall Stewart { 5264f8829a4aSRandall Stewart struct sctp_laddr *laddr; 5265f8829a4aSRandall Stewart 5266f8829a4aSRandall Stewart /* first clear the flag */ 5267f8829a4aSRandall Stewart inp->ip_inp.inp.inp_vflag = 0; 5268f8829a4aSRandall Stewart /* set the flag based on addresses on the ep list */ 5269f8829a4aSRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) { 5270f8829a4aSRandall Stewart if (laddr->ifa == NULL) { 5271ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n", 52726e9c45e0SMichael Tuexen __func__); 5273f8829a4aSRandall Stewart continue; 5274f8829a4aSRandall Stewart } 52750053ed28SMichael Tuexen 527642551e99SRandall Stewart if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) { 5277f8829a4aSRandall Stewart continue; 5278f8829a4aSRandall Stewart } 5279e6194c2eSMichael Tuexen switch (laddr->ifa->address.sa.sa_family) { 5280e6194c2eSMichael Tuexen #ifdef INET6 5281e6194c2eSMichael Tuexen case AF_INET6: 5282f8829a4aSRandall Stewart inp->ip_inp.inp.inp_vflag |= INP_IPV6; 5283e6194c2eSMichael Tuexen break; 5284e6194c2eSMichael Tuexen #endif 5285e6194c2eSMichael Tuexen #ifdef INET 5286e6194c2eSMichael Tuexen case AF_INET: 5287f8829a4aSRandall Stewart inp->ip_inp.inp.inp_vflag |= INP_IPV4; 5288e6194c2eSMichael Tuexen break; 5289e6194c2eSMichael Tuexen #endif 5290e6194c2eSMichael Tuexen default: 5291e6194c2eSMichael Tuexen break; 5292f8829a4aSRandall Stewart } 5293f8829a4aSRandall Stewart } 5294f8829a4aSRandall Stewart } 5295f8829a4aSRandall Stewart 5296f8829a4aSRandall Stewart /* 5297f8829a4aSRandall Stewart * Add the address to the endpoint local address list There is nothing to be 5298f8829a4aSRandall Stewart * done if we are bound to all addresses 5299f8829a4aSRandall Stewart */ 5300ad81507eSRandall Stewart void 530142551e99SRandall Stewart sctp_add_local_addr_ep(struct sctp_inpcb *inp, struct sctp_ifa *ifa, uint32_t action) 5302f8829a4aSRandall Stewart { 5303f8829a4aSRandall Stewart struct sctp_laddr *laddr; 530476f8482aSMichael Tuexen struct sctp_tcb *stcb; 5305ad81507eSRandall Stewart int fnd, error = 0; 5306f8829a4aSRandall Stewart 5307f8829a4aSRandall Stewart fnd = 0; 5308f8829a4aSRandall Stewart 5309f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 5310f8829a4aSRandall Stewart /* You are already bound to all. You have it already */ 5311ad81507eSRandall Stewart return; 5312f8829a4aSRandall Stewart } 5313e6194c2eSMichael Tuexen #ifdef INET6 531442551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 531542551e99SRandall Stewart if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 531642551e99SRandall Stewart /* Can't bind a non-useable addr. */ 5317ad81507eSRandall Stewart return; 5318f8829a4aSRandall Stewart } 531942551e99SRandall Stewart } 5320e6194c2eSMichael Tuexen #endif 5321f8829a4aSRandall Stewart /* first, is it already present? */ 5322f8829a4aSRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) { 5323f8829a4aSRandall Stewart if (laddr->ifa == ifa) { 5324f8829a4aSRandall Stewart fnd = 1; 5325f8829a4aSRandall Stewart break; 5326f8829a4aSRandall Stewart } 5327f8829a4aSRandall Stewart } 5328f8829a4aSRandall Stewart 532942551e99SRandall Stewart if (fnd == 0) { 533042551e99SRandall Stewart /* Not in the ep list */ 533142551e99SRandall Stewart error = sctp_insert_laddr(&inp->sctp_addr_list, ifa, action); 5332f8829a4aSRandall Stewart if (error != 0) 5333ad81507eSRandall Stewart return; 5334f8829a4aSRandall Stewart inp->laddr_count++; 5335f8829a4aSRandall Stewart /* update inp_vflag flags */ 5336e6194c2eSMichael Tuexen switch (ifa->address.sa.sa_family) { 5337e6194c2eSMichael Tuexen #ifdef INET6 5338e6194c2eSMichael Tuexen case AF_INET6: 5339f8829a4aSRandall Stewart inp->ip_inp.inp.inp_vflag |= INP_IPV6; 5340e6194c2eSMichael Tuexen break; 5341e6194c2eSMichael Tuexen #endif 5342e0e00a4dSMichael Tuexen #ifdef INET 5343e6194c2eSMichael Tuexen case AF_INET: 5344f8829a4aSRandall Stewart inp->ip_inp.inp.inp_vflag |= INP_IPV4; 5345e6194c2eSMichael Tuexen break; 5346e6194c2eSMichael Tuexen #endif 5347e6194c2eSMichael Tuexen default: 5348e6194c2eSMichael Tuexen break; 5349f8829a4aSRandall Stewart } 535076f8482aSMichael Tuexen LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) { 535176f8482aSMichael Tuexen sctp_add_local_addr_restricted(stcb, ifa); 535276f8482aSMichael Tuexen } 5353f8829a4aSRandall Stewart } 5354ad81507eSRandall Stewart return; 5355f8829a4aSRandall Stewart } 5356f8829a4aSRandall Stewart 5357f8829a4aSRandall Stewart /* 5358f8829a4aSRandall Stewart * select a new (hopefully reachable) destination net (should only be used 5359f8829a4aSRandall Stewart * when we deleted an ep addr that is the only usable source address to reach 5360f8829a4aSRandall Stewart * the destination net) 5361f8829a4aSRandall Stewart */ 5362f8829a4aSRandall Stewart static void 5363f8829a4aSRandall Stewart sctp_select_primary_destination(struct sctp_tcb *stcb) 5364f8829a4aSRandall Stewart { 5365f8829a4aSRandall Stewart struct sctp_nets *net; 5366f8829a4aSRandall Stewart 5367f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 5368f8829a4aSRandall Stewart /* for now, we'll just pick the first reachable one we find */ 5369f8829a4aSRandall Stewart if (net->dest_state & SCTP_ADDR_UNCONFIRMED) 5370f8829a4aSRandall Stewart continue; 5371f8829a4aSRandall Stewart if (sctp_destination_is_reachable(stcb, 5372f8829a4aSRandall Stewart (struct sockaddr *)&net->ro._l_addr)) { 5373f8829a4aSRandall Stewart /* found a reachable destination */ 5374f8829a4aSRandall Stewart stcb->asoc.primary_destination = net; 5375f8829a4aSRandall Stewart } 5376f8829a4aSRandall Stewart } 5377f8829a4aSRandall Stewart /* I can't there from here! ...we're gonna die shortly... */ 5378f8829a4aSRandall Stewart } 5379f8829a4aSRandall Stewart 5380f8829a4aSRandall Stewart /* 538164a3a630SMichael Tuexen * Delete the address from the endpoint local address list. There is nothing 5382f8829a4aSRandall Stewart * to be done if we are bound to all addresses 5383f8829a4aSRandall Stewart */ 5384ad81507eSRandall Stewart void 538542551e99SRandall Stewart sctp_del_local_addr_ep(struct sctp_inpcb *inp, struct sctp_ifa *ifa) 5386f8829a4aSRandall Stewart { 5387f8829a4aSRandall Stewart struct sctp_laddr *laddr; 5388f8829a4aSRandall Stewart int fnd; 5389f8829a4aSRandall Stewart 5390f8829a4aSRandall Stewart fnd = 0; 5391f8829a4aSRandall Stewart if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) { 5392f8829a4aSRandall Stewart /* You are already bound to all. You have it already */ 5393ad81507eSRandall Stewart return; 5394f8829a4aSRandall Stewart } 5395f8829a4aSRandall Stewart LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) { 5396f8829a4aSRandall Stewart if (laddr->ifa == ifa) { 5397f8829a4aSRandall Stewart fnd = 1; 5398f8829a4aSRandall Stewart break; 5399f8829a4aSRandall Stewart } 5400f8829a4aSRandall Stewart } 5401f8829a4aSRandall Stewart if (fnd && (inp->laddr_count < 2)) { 5402f8829a4aSRandall Stewart /* can't delete unless there are at LEAST 2 addresses */ 5403ad81507eSRandall Stewart return; 5404f8829a4aSRandall Stewart } 540542551e99SRandall Stewart if (fnd) { 5406f8829a4aSRandall Stewart /* 5407f8829a4aSRandall Stewart * clean up any use of this address go through our 5408f8829a4aSRandall Stewart * associations and clear any last_used_address that match 5409f8829a4aSRandall Stewart * this one for each assoc, see if a new primary_destination 5410f8829a4aSRandall Stewart * is needed 5411f8829a4aSRandall Stewart */ 5412f8829a4aSRandall Stewart struct sctp_tcb *stcb; 5413f8829a4aSRandall Stewart 5414f8829a4aSRandall Stewart /* clean up "next_addr_touse" */ 5415f8829a4aSRandall Stewart if (inp->next_addr_touse == laddr) 5416f8829a4aSRandall Stewart /* delete this address */ 5417f8829a4aSRandall Stewart inp->next_addr_touse = NULL; 5418f8829a4aSRandall Stewart 5419f8829a4aSRandall Stewart /* clean up "last_used_address" */ 5420f8829a4aSRandall Stewart LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) { 542142551e99SRandall Stewart struct sctp_nets *net; 542242551e99SRandall Stewart 542342551e99SRandall Stewart SCTP_TCB_LOCK(stcb); 5424f8829a4aSRandall Stewart if (stcb->asoc.last_used_address == laddr) 5425f8829a4aSRandall Stewart /* delete this address */ 5426f8829a4aSRandall Stewart stcb->asoc.last_used_address = NULL; 5427b7b84c0eSMichael Tuexen /* 5428b7b84c0eSMichael Tuexen * Now spin through all the nets and purge any ref 5429b7b84c0eSMichael Tuexen * to laddr 5430b7b84c0eSMichael Tuexen */ 543142551e99SRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 543264a3a630SMichael Tuexen if (net->ro._s_addr == laddr->ifa) { 543342551e99SRandall Stewart /* Yep, purge src address selected */ 5434983066f0SAlexander V. Chernikov RO_NHFREE(&net->ro); 543542551e99SRandall Stewart sctp_free_ifa(net->ro._s_addr); 543642551e99SRandall Stewart net->ro._s_addr = NULL; 543742551e99SRandall Stewart net->src_addr_selected = 0; 543842551e99SRandall Stewart } 543942551e99SRandall Stewart } 544042551e99SRandall Stewart SCTP_TCB_UNLOCK(stcb); 544142551e99SRandall Stewart } /* for each tcb */ 5442f8829a4aSRandall Stewart /* remove it from the ep list */ 5443f8829a4aSRandall Stewart sctp_remove_laddr(laddr); 5444f8829a4aSRandall Stewart inp->laddr_count--; 5445f8829a4aSRandall Stewart /* update inp_vflag flags */ 5446f8829a4aSRandall Stewart sctp_update_ep_vflag(inp); 5447f8829a4aSRandall Stewart } 5448ad81507eSRandall Stewart return; 5449f8829a4aSRandall Stewart } 5450f8829a4aSRandall Stewart 5451f8829a4aSRandall Stewart /* 54521b649582SRandall Stewart * Add the address to the TCB local address restricted list. 54531b649582SRandall Stewart * This is a "pending" address list (eg. addresses waiting for an 54541b649582SRandall Stewart * ASCONF-ACK response) and cannot be used as a valid source address. 5455f8829a4aSRandall Stewart */ 5456ad81507eSRandall Stewart void 54571b649582SRandall Stewart sctp_add_local_addr_restricted(struct sctp_tcb *stcb, struct sctp_ifa *ifa) 5458f8829a4aSRandall Stewart { 5459f8829a4aSRandall Stewart struct sctp_laddr *laddr; 546042551e99SRandall Stewart struct sctpladdr *list; 5461f8829a4aSRandall Stewart 5462f8829a4aSRandall Stewart /* 546342551e99SRandall Stewart * Assumes TCB is locked.. and possibly the INP. May need to 5464f8829a4aSRandall Stewart * confirm/fix that if we need it and is not the case. 5465f8829a4aSRandall Stewart */ 546642551e99SRandall Stewart list = &stcb->asoc.sctp_restricted_addrs; 5467f8829a4aSRandall Stewart 5468e6194c2eSMichael Tuexen #ifdef INET6 546942551e99SRandall Stewart if (ifa->address.sa.sa_family == AF_INET6) { 547042551e99SRandall Stewart if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) { 5471f8829a4aSRandall Stewart /* Can't bind a non-existent addr. */ 5472ad81507eSRandall Stewart return; 5473f8829a4aSRandall Stewart } 547442551e99SRandall Stewart } 5475e6194c2eSMichael Tuexen #endif 5476f8829a4aSRandall Stewart /* does the address already exist? */ 547742551e99SRandall Stewart LIST_FOREACH(laddr, list, sctp_nxt_addr) { 5478f8829a4aSRandall Stewart if (laddr->ifa == ifa) { 5479ad81507eSRandall Stewart return; 5480f8829a4aSRandall Stewart } 5481f8829a4aSRandall Stewart } 5482f8829a4aSRandall Stewart 5483f8829a4aSRandall Stewart /* add to the list */ 5484ad81507eSRandall Stewart (void)sctp_insert_laddr(list, ifa, 0); 5485ad81507eSRandall Stewart return; 5486f8829a4aSRandall Stewart } 5487f8829a4aSRandall Stewart 5488f8829a4aSRandall Stewart /* 54891b649582SRandall Stewart * Remove a local address from the TCB local address restricted list 5490f8829a4aSRandall Stewart */ 5491ad81507eSRandall Stewart void 54921b649582SRandall Stewart sctp_del_local_addr_restricted(struct sctp_tcb *stcb, struct sctp_ifa *ifa) 5493f8829a4aSRandall Stewart { 5494f8829a4aSRandall Stewart struct sctp_inpcb *inp; 5495f8829a4aSRandall Stewart struct sctp_laddr *laddr; 5496f8829a4aSRandall Stewart 5497f8829a4aSRandall Stewart /* 5498f8829a4aSRandall Stewart * This is called by asconf work. It is assumed that a) The TCB is 5499f8829a4aSRandall Stewart * locked and b) The INP is locked. This is true in as much as I can 5500f8829a4aSRandall Stewart * trace through the entry asconf code where I did these locks. 5501f8829a4aSRandall Stewart * Again, the ASCONF code is a bit different in that it does lock 5502f8829a4aSRandall Stewart * the INP during its work often times. This must be since we don't 5503f8829a4aSRandall Stewart * want other proc's looking up things while what they are looking 5504f8829a4aSRandall Stewart * up is changing :-D 5505f8829a4aSRandall Stewart */ 5506f8829a4aSRandall Stewart 5507f8829a4aSRandall Stewart inp = stcb->sctp_ep; 5508f8829a4aSRandall Stewart /* if subset bound and don't allow ASCONF's, can't delete last */ 5509f8829a4aSRandall Stewart if (((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) && 551018e198d3SRandall Stewart sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) { 551118e198d3SRandall Stewart if (stcb->sctp_ep->laddr_count < 2) { 5512f8829a4aSRandall Stewart /* can't delete last address */ 5513ad81507eSRandall Stewart return; 5514f8829a4aSRandall Stewart } 5515f8829a4aSRandall Stewart } 551642551e99SRandall Stewart LIST_FOREACH(laddr, &stcb->asoc.sctp_restricted_addrs, sctp_nxt_addr) { 5517f8829a4aSRandall Stewart /* remove the address if it exists */ 5518f8829a4aSRandall Stewart if (laddr->ifa == NULL) 5519f8829a4aSRandall Stewart continue; 5520f8829a4aSRandall Stewart if (laddr->ifa == ifa) { 5521f8829a4aSRandall Stewart sctp_remove_laddr(laddr); 5522ad81507eSRandall Stewart return; 5523f8829a4aSRandall Stewart } 5524f8829a4aSRandall Stewart } 5525f8829a4aSRandall Stewart 5526f8829a4aSRandall Stewart /* address not found! */ 5527ad81507eSRandall Stewart return; 5528f8829a4aSRandall Stewart } 5529f8829a4aSRandall Stewart 5530f8829a4aSRandall Stewart /* sysctl */ 5531f8829a4aSRandall Stewart static int sctp_max_number_of_assoc = SCTP_MAX_NUM_OF_ASOC; 5532f8829a4aSRandall Stewart static int sctp_scale_up_for_address = SCTP_SCALE_FOR_ADDR; 5533f8829a4aSRandall Stewart 55342f9e6db0SMichael Tuexen #if defined(SCTP_MCORE_INPUT) && defined(SMP) 5535bfc46083SRandall Stewart struct sctp_mcore_ctrl *sctp_mcore_workers = NULL; 55360071ee5eSRandall Stewart int *sctp_cpuarry = NULL; 55372f9e6db0SMichael Tuexen 5538bfc46083SRandall Stewart void 5539bfc46083SRandall Stewart sctp_queue_to_mcore(struct mbuf *m, int off, int cpu_to_use) 5540bfc46083SRandall Stewart { 5541bfc46083SRandall Stewart /* Queue a packet to a processor for the specified core */ 5542bfc46083SRandall Stewart struct sctp_mcore_queue *qent; 5543bfc46083SRandall Stewart struct sctp_mcore_ctrl *wkq; 5544bfc46083SRandall Stewart int need_wake = 0; 5545bfc46083SRandall Stewart 5546bfc46083SRandall Stewart if (sctp_mcore_workers == NULL) { 5547bfc46083SRandall Stewart /* Something went way bad during setup */ 5548bfc46083SRandall Stewart sctp_input_with_port(m, off, 0); 5549bfc46083SRandall Stewart return; 5550bfc46083SRandall Stewart } 5551bfc46083SRandall Stewart SCTP_MALLOC(qent, struct sctp_mcore_queue *, 5552bfc46083SRandall Stewart (sizeof(struct sctp_mcore_queue)), 5553bfc46083SRandall Stewart SCTP_M_MCORE); 5554bfc46083SRandall Stewart if (qent == NULL) { 5555bfc46083SRandall Stewart /* This is trouble */ 5556bfc46083SRandall Stewart sctp_input_with_port(m, off, 0); 5557bfc46083SRandall Stewart return; 5558bfc46083SRandall Stewart } 5559bfc46083SRandall Stewart qent->vn = curvnet; 5560bfc46083SRandall Stewart qent->m = m; 5561bfc46083SRandall Stewart qent->off = off; 5562bfc46083SRandall Stewart qent->v6 = 0; 5563bfc46083SRandall Stewart wkq = &sctp_mcore_workers[cpu_to_use]; 5564bfc46083SRandall Stewart SCTP_MCORE_QLOCK(wkq); 5565bfc46083SRandall Stewart 5566bfc46083SRandall Stewart TAILQ_INSERT_TAIL(&wkq->que, qent, next); 5567bfc46083SRandall Stewart if (wkq->running == 0) { 5568bfc46083SRandall Stewart need_wake = 1; 5569bfc46083SRandall Stewart } 5570bfc46083SRandall Stewart SCTP_MCORE_QUNLOCK(wkq); 5571bfc46083SRandall Stewart if (need_wake) { 5572bfc46083SRandall Stewart wakeup(&wkq->running); 5573bfc46083SRandall Stewart } 5574bfc46083SRandall Stewart } 5575bfc46083SRandall Stewart 5576bfc46083SRandall Stewart static void 5577bfc46083SRandall Stewart sctp_mcore_thread(void *arg) 5578bfc46083SRandall Stewart { 5579bfc46083SRandall Stewart 5580bfc46083SRandall Stewart struct sctp_mcore_ctrl *wkq; 5581bfc46083SRandall Stewart struct sctp_mcore_queue *qent; 5582bfc46083SRandall Stewart 5583bfc46083SRandall Stewart wkq = (struct sctp_mcore_ctrl *)arg; 5584bfc46083SRandall Stewart struct mbuf *m; 5585bfc46083SRandall Stewart int off, v6; 5586bfc46083SRandall Stewart 5587bfc46083SRandall Stewart /* Wait for first tickle */ 5588bfc46083SRandall Stewart SCTP_MCORE_LOCK(wkq); 5589bfc46083SRandall Stewart wkq->running = 0; 5590bfc46083SRandall Stewart msleep(&wkq->running, 5591bfc46083SRandall Stewart &wkq->core_mtx, 5592bfc46083SRandall Stewart 0, "wait for pkt", 0); 5593bfc46083SRandall Stewart SCTP_MCORE_UNLOCK(wkq); 5594bfc46083SRandall Stewart 5595bfc46083SRandall Stewart /* Bind to our cpu */ 5596bfc46083SRandall Stewart thread_lock(curthread); 5597bfc46083SRandall Stewart sched_bind(curthread, wkq->cpuid); 5598bfc46083SRandall Stewart thread_unlock(curthread); 5599bfc46083SRandall Stewart 5600bfc46083SRandall Stewart /* Now lets start working */ 5601bfc46083SRandall Stewart SCTP_MCORE_LOCK(wkq); 5602bfc46083SRandall Stewart /* Now grab lock and go */ 56037215cc1bSMichael Tuexen for (;;) { 5604bfc46083SRandall Stewart SCTP_MCORE_QLOCK(wkq); 5605bfc46083SRandall Stewart skip_sleep: 5606bfc46083SRandall Stewart wkq->running = 1; 5607bfc46083SRandall Stewart qent = TAILQ_FIRST(&wkq->que); 5608bfc46083SRandall Stewart if (qent) { 5609bfc46083SRandall Stewart TAILQ_REMOVE(&wkq->que, qent, next); 5610bfc46083SRandall Stewart SCTP_MCORE_QUNLOCK(wkq); 5611bfc46083SRandall Stewart CURVNET_SET(qent->vn); 5612bfc46083SRandall Stewart m = qent->m; 5613bfc46083SRandall Stewart off = qent->off; 5614bfc46083SRandall Stewart v6 = qent->v6; 5615bfc46083SRandall Stewart SCTP_FREE(qent, SCTP_M_MCORE); 5616bfc46083SRandall Stewart if (v6 == 0) { 5617bfc46083SRandall Stewart sctp_input_with_port(m, off, 0); 5618bfc46083SRandall Stewart } else { 5619cd3fd531SMichael Tuexen SCTP_PRINTF("V6 not yet supported\n"); 5620bfc46083SRandall Stewart sctp_m_freem(m); 5621bfc46083SRandall Stewart } 5622bfc46083SRandall Stewart CURVNET_RESTORE(); 5623bfc46083SRandall Stewart SCTP_MCORE_QLOCK(wkq); 5624bfc46083SRandall Stewart } 5625bfc46083SRandall Stewart wkq->running = 0; 5626bfc46083SRandall Stewart if (!TAILQ_EMPTY(&wkq->que)) { 5627bfc46083SRandall Stewart goto skip_sleep; 5628bfc46083SRandall Stewart } 5629bfc46083SRandall Stewart SCTP_MCORE_QUNLOCK(wkq); 5630bfc46083SRandall Stewart msleep(&wkq->running, 5631bfc46083SRandall Stewart &wkq->core_mtx, 5632bfc46083SRandall Stewart 0, "wait for pkt", 0); 563360990c0cSMichael Tuexen } 5634bfc46083SRandall Stewart } 5635bfc46083SRandall Stewart 5636bfc46083SRandall Stewart static void 5637bfc46083SRandall Stewart sctp_startup_mcore_threads(void) 5638bfc46083SRandall Stewart { 56390071ee5eSRandall Stewart int i, cpu; 5640bfc46083SRandall Stewart 56410071ee5eSRandall Stewart if (mp_ncpus == 1) 5642bfc46083SRandall Stewart return; 5643bfc46083SRandall Stewart 56440071ee5eSRandall Stewart if (sctp_mcore_workers != NULL) { 56450071ee5eSRandall Stewart /* 56460071ee5eSRandall Stewart * Already been here in some previous vnet? 56470071ee5eSRandall Stewart */ 56480071ee5eSRandall Stewart return; 56490071ee5eSRandall Stewart } 5650bfc46083SRandall Stewart SCTP_MALLOC(sctp_mcore_workers, struct sctp_mcore_ctrl *, 56510071ee5eSRandall Stewart ((mp_maxid + 1) * sizeof(struct sctp_mcore_ctrl)), 5652bfc46083SRandall Stewart SCTP_M_MCORE); 5653bfc46083SRandall Stewart if (sctp_mcore_workers == NULL) { 5654bfc46083SRandall Stewart /* TSNH I hope */ 5655bfc46083SRandall Stewart return; 5656bfc46083SRandall Stewart } 56570071ee5eSRandall Stewart memset(sctp_mcore_workers, 0, ((mp_maxid + 1) * 5658bfc46083SRandall Stewart sizeof(struct sctp_mcore_ctrl))); 5659bfc46083SRandall Stewart /* Init the structures */ 56600071ee5eSRandall Stewart for (i = 0; i <= mp_maxid; i++) { 5661bfc46083SRandall Stewart TAILQ_INIT(&sctp_mcore_workers[i].que); 5662bfc46083SRandall Stewart SCTP_MCORE_LOCK_INIT(&sctp_mcore_workers[i]); 5663bfc46083SRandall Stewart SCTP_MCORE_QLOCK_INIT(&sctp_mcore_workers[i]); 5664bfc46083SRandall Stewart sctp_mcore_workers[i].cpuid = i; 5665bfc46083SRandall Stewart } 56660071ee5eSRandall Stewart if (sctp_cpuarry == NULL) { 56670071ee5eSRandall Stewart SCTP_MALLOC(sctp_cpuarry, int *, 56680071ee5eSRandall Stewart (mp_ncpus * sizeof(int)), 56690071ee5eSRandall Stewart SCTP_M_MCORE); 56700071ee5eSRandall Stewart i = 0; 56710071ee5eSRandall Stewart CPU_FOREACH(cpu) { 56720071ee5eSRandall Stewart sctp_cpuarry[i] = cpu; 56730071ee5eSRandall Stewart i++; 56740071ee5eSRandall Stewart } 56750071ee5eSRandall Stewart } 5676bfc46083SRandall Stewart /* Now start them all */ 56770071ee5eSRandall Stewart CPU_FOREACH(cpu) { 5678bfc46083SRandall Stewart (void)kproc_create(sctp_mcore_thread, 56790071ee5eSRandall Stewart (void *)&sctp_mcore_workers[cpu], 56800071ee5eSRandall Stewart &sctp_mcore_workers[cpu].thread_proc, 56815a50eb65SJohn Baldwin 0, 5682bfc46083SRandall Stewart SCTP_KTHREAD_PAGES, 5683bfc46083SRandall Stewart SCTP_MCORE_NAME); 5684bfc46083SRandall Stewart } 5685bfc46083SRandall Stewart } 5686bfc46083SRandall Stewart #endif 5687bfc46083SRandall Stewart 5688f8829a4aSRandall Stewart void 5689e30a1788SMichael Tuexen sctp_pcb_init(void) 5690f8829a4aSRandall Stewart { 5691f8829a4aSRandall Stewart /* 5692f8829a4aSRandall Stewart * SCTP initialization for the PCB structures should be called by 5693cd0a4ff6SPedro F. Giffuni * the sctp_init() function. 5694f8829a4aSRandall Stewart */ 5695f8829a4aSRandall Stewart int i; 5696851b7298SRandall Stewart struct timeval tv; 5697f8829a4aSRandall Stewart 5698b3f1ea41SRandall Stewart if (SCTP_BASE_VAR(sctp_pcb_initialized) != 0) { 5699f8829a4aSRandall Stewart /* error I was called twice */ 5700f8829a4aSRandall Stewart return; 5701f8829a4aSRandall Stewart } 5702b3f1ea41SRandall Stewart SCTP_BASE_VAR(sctp_pcb_initialized) = 1; 5703f8829a4aSRandall Stewart 5704b27a6b7dSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF) 57055ba7f91fSMichael Tuexen memset(&SCTP_BASE_SYSCTL(sctp_log), 0, sizeof(struct sctp_log)); 5706b27a6b7dSRandall Stewart #endif 57072f9e6db0SMichael Tuexen #if defined(SMP) && defined(SCTP_USE_PERCPU_STAT) 5708ae26e0a4SRandall Stewart SCTP_MALLOC(SCTP_BASE_STATS, struct sctpstat *, 57090071ee5eSRandall Stewart ((mp_maxid + 1) * sizeof(struct sctpstat)), 5710ae26e0a4SRandall Stewart SCTP_M_MCORE); 5711ae26e0a4SRandall Stewart #endif 5712851b7298SRandall Stewart (void)SCTP_GETTIME_TIMEVAL(&tv); 57132f9e6db0SMichael Tuexen #if defined(SMP) && defined(SCTP_USE_PERCPU_STAT) 57145ba7f91fSMichael Tuexen memset(SCTP_BASE_STATS, 0, sizeof(struct sctpstat) * (mp_maxid + 1)); 5715ff014514SRandall Stewart SCTP_BASE_STATS[PCPU_GET(cpuid)].sctps_discontinuitytime.tv_sec = (uint32_t)tv.tv_sec; 5716ff014514SRandall Stewart SCTP_BASE_STATS[PCPU_GET(cpuid)].sctps_discontinuitytime.tv_usec = (uint32_t)tv.tv_usec; 5717ff014514SRandall Stewart #else 57185ba7f91fSMichael Tuexen memset(&SCTP_BASE_STATS, 0, sizeof(struct sctpstat)); 5719b3f1ea41SRandall Stewart SCTP_BASE_STAT(sctps_discontinuitytime).tv_sec = (uint32_t)tv.tv_sec; 5720b3f1ea41SRandall Stewart SCTP_BASE_STAT(sctps_discontinuitytime).tv_usec = (uint32_t)tv.tv_usec; 5721ff014514SRandall Stewart #endif 5722f8829a4aSRandall Stewart /* init the empty list of (All) Endpoints */ 5723b3f1ea41SRandall Stewart LIST_INIT(&SCTP_BASE_INFO(listhead)); 5724f8829a4aSRandall Stewart 5725f8829a4aSRandall Stewart /* init the hash table of endpoints */ 5726b3f1ea41SRandall Stewart TUNABLE_INT_FETCH("net.inet.sctp.tcbhashsize", &SCTP_BASE_SYSCTL(sctp_hashtblsize)); 5727b3f1ea41SRandall Stewart TUNABLE_INT_FETCH("net.inet.sctp.pcbhashsize", &SCTP_BASE_SYSCTL(sctp_pcbtblsize)); 5728b3f1ea41SRandall Stewart TUNABLE_INT_FETCH("net.inet.sctp.chunkscale", &SCTP_BASE_SYSCTL(sctp_chunkscale)); 5729b3f1ea41SRandall Stewart SCTP_BASE_INFO(sctp_asochash) = SCTP_HASH_INIT((SCTP_BASE_SYSCTL(sctp_hashtblsize) * 31), 5730b3f1ea41SRandall Stewart &SCTP_BASE_INFO(hashasocmark)); 5731b3f1ea41SRandall Stewart SCTP_BASE_INFO(sctp_ephash) = SCTP_HASH_INIT(SCTP_BASE_SYSCTL(sctp_hashtblsize), 5732b3f1ea41SRandall Stewart &SCTP_BASE_INFO(hashmark)); 5733b3f1ea41SRandall Stewart SCTP_BASE_INFO(sctp_tcpephash) = SCTP_HASH_INIT(SCTP_BASE_SYSCTL(sctp_hashtblsize), 5734b3f1ea41SRandall Stewart &SCTP_BASE_INFO(hashtcpmark)); 5735b3f1ea41SRandall Stewart SCTP_BASE_INFO(hashtblsize) = SCTP_BASE_SYSCTL(sctp_hashtblsize); 5736b3f1ea41SRandall Stewart SCTP_BASE_INFO(sctp_vrfhash) = SCTP_HASH_INIT(SCTP_SIZE_OF_VRF_HASH, 5737b3f1ea41SRandall Stewart &SCTP_BASE_INFO(hashvrfmark)); 573842551e99SRandall Stewart 5739b3f1ea41SRandall Stewart SCTP_BASE_INFO(vrf_ifn_hash) = SCTP_HASH_INIT(SCTP_VRF_IFN_HASH_SIZE, 5740b3f1ea41SRandall Stewart &SCTP_BASE_INFO(vrf_ifn_hashmark)); 5741f8829a4aSRandall Stewart /* init the zones */ 5742f8829a4aSRandall Stewart /* 5743f8829a4aSRandall Stewart * FIX ME: Should check for NULL returns, but if it does fail we are 5744f8829a4aSRandall Stewart * doomed to panic anyways... add later maybe. 5745f8829a4aSRandall Stewart */ 5746b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_ep), "sctp_ep", 5747f8829a4aSRandall Stewart sizeof(struct sctp_inpcb), maxsockets); 5748f8829a4aSRandall Stewart 5749b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_asoc), "sctp_asoc", 5750f8829a4aSRandall Stewart sizeof(struct sctp_tcb), sctp_max_number_of_assoc); 5751f8829a4aSRandall Stewart 5752b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_laddr), "sctp_laddr", 5753f8829a4aSRandall Stewart sizeof(struct sctp_laddr), 5754f8829a4aSRandall Stewart (sctp_max_number_of_assoc * sctp_scale_up_for_address)); 5755f8829a4aSRandall Stewart 5756b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_net), "sctp_raddr", 5757f8829a4aSRandall Stewart sizeof(struct sctp_nets), 5758f8829a4aSRandall Stewart (sctp_max_number_of_assoc * sctp_scale_up_for_address)); 5759f8829a4aSRandall Stewart 5760b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_chunk), "sctp_chunk", 5761f8829a4aSRandall Stewart sizeof(struct sctp_tmit_chunk), 5762b3f1ea41SRandall Stewart (sctp_max_number_of_assoc * SCTP_BASE_SYSCTL(sctp_chunkscale))); 5763f8829a4aSRandall Stewart 5764b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_readq), "sctp_readq", 5765f8829a4aSRandall Stewart sizeof(struct sctp_queued_to_read), 5766b3f1ea41SRandall Stewart (sctp_max_number_of_assoc * SCTP_BASE_SYSCTL(sctp_chunkscale))); 5767f8829a4aSRandall Stewart 5768b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_strmoq), "sctp_stream_msg_out", 5769f8829a4aSRandall Stewart sizeof(struct sctp_stream_queue_pending), 5770b3f1ea41SRandall Stewart (sctp_max_number_of_assoc * SCTP_BASE_SYSCTL(sctp_chunkscale))); 5771f8829a4aSRandall Stewart 5772b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_asconf), "sctp_asconf", 5773c54a18d2SRandall Stewart sizeof(struct sctp_asconf), 5774b3f1ea41SRandall Stewart (sctp_max_number_of_assoc * SCTP_BASE_SYSCTL(sctp_chunkscale))); 5775c54a18d2SRandall Stewart 5776b3f1ea41SRandall Stewart SCTP_ZONE_INIT(SCTP_BASE_INFO(ipi_zone_asconf_ack), "sctp_asconf_ack", 57772afb3e84SRandall Stewart sizeof(struct sctp_asconf_ack), 5778b3f1ea41SRandall Stewart (sctp_max_number_of_assoc * SCTP_BASE_SYSCTL(sctp_chunkscale))); 57792afb3e84SRandall Stewart 5780f8829a4aSRandall Stewart /* Master Lock INIT for info structure */ 5781f8829a4aSRandall Stewart SCTP_INP_INFO_LOCK_INIT(); 5782f8829a4aSRandall Stewart SCTP_STATLOG_INIT_LOCK(); 5783a5d547adSRandall Stewart 5784f8829a4aSRandall Stewart SCTP_IPI_COUNT_INIT(); 5785f8829a4aSRandall Stewart SCTP_IPI_ADDR_INIT(); 5786207304d4SRandall Stewart #ifdef SCTP_PACKET_LOGGING 5787207304d4SRandall Stewart SCTP_IP_PKTLOG_INIT(); 5788207304d4SRandall Stewart #endif 5789b3f1ea41SRandall Stewart LIST_INIT(&SCTP_BASE_INFO(addr_wq)); 5790f8829a4aSRandall Stewart 5791f7517433SRandall Stewart SCTP_WQ_ADDR_INIT(); 5792f8829a4aSRandall Stewart /* not sure if we need all the counts */ 5793b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_ep) = 0; 5794f8829a4aSRandall Stewart /* assoc/tcb zone info */ 5795b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_asoc) = 0; 5796f8829a4aSRandall Stewart /* local addrlist zone info */ 5797b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_laddr) = 0; 5798f8829a4aSRandall Stewart /* remote addrlist zone info */ 5799b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_raddr) = 0; 5800f8829a4aSRandall Stewart /* chunk info */ 5801b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_chunk) = 0; 5802f8829a4aSRandall Stewart 5803f8829a4aSRandall Stewart /* socket queue zone info */ 5804b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_readq) = 0; 5805f8829a4aSRandall Stewart 5806f8829a4aSRandall Stewart /* stream out queue cont */ 5807b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_count_strmoq) = 0; 5808f8829a4aSRandall Stewart 5809b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_free_strmoq) = 0; 5810b3f1ea41SRandall Stewart SCTP_BASE_INFO(ipi_free_chunks) = 0; 5811f8829a4aSRandall Stewart 5812b3f1ea41SRandall Stewart SCTP_OS_TIMER_INIT(&SCTP_BASE_INFO(addr_wq_timer.timer)); 5813f8829a4aSRandall Stewart 5814f8829a4aSRandall Stewart /* Init the TIMEWAIT list */ 5815a1e13272SRandall Stewart for (i = 0; i < SCTP_STACK_VTAG_HASH_SIZE; i++) { 5816f5366806SMichael Tuexen LIST_INIT(&SCTP_BASE_INFO(vtag_timewait)[i]); 5817f8829a4aSRandall Stewart } 581842551e99SRandall Stewart sctp_startup_iterator(); 581942551e99SRandall Stewart 58202f9e6db0SMichael Tuexen #if defined(SCTP_MCORE_INPUT) && defined(SMP) 5821bfc46083SRandall Stewart sctp_startup_mcore_threads(); 5822bfc46083SRandall Stewart #endif 5823bfc46083SRandall Stewart 582442551e99SRandall Stewart /* 582542551e99SRandall Stewart * INIT the default VRF which for BSD is the only one, other O/S's 582642551e99SRandall Stewart * may have more. But initially they must start with one and then 582742551e99SRandall Stewart * add the VRF's as addresses are added. 582842551e99SRandall Stewart */ 582942551e99SRandall Stewart sctp_init_vrf_list(SCTP_DEFAULT_VRF); 5830f8829a4aSRandall Stewart } 5831f8829a4aSRandall Stewart 5832c54a18d2SRandall Stewart /* 5833b3f1ea41SRandall Stewart * Assumes that the SCTP_BASE_INFO() lock is NOT held. 5834c54a18d2SRandall Stewart */ 5835c54a18d2SRandall Stewart void 5836c54a18d2SRandall Stewart sctp_pcb_finish(void) 5837c54a18d2SRandall Stewart { 5838c54a18d2SRandall Stewart struct sctp_vrflist *vrf_bucket; 58394a9ef3f8SMichael Tuexen struct sctp_vrf *vrf, *nvrf; 58404a9ef3f8SMichael Tuexen struct sctp_ifn *ifn, *nifn; 58414a9ef3f8SMichael Tuexen struct sctp_ifa *ifa, *nifa; 5842b3f1ea41SRandall Stewart struct sctpvtaghead *chain; 5843b3f1ea41SRandall Stewart struct sctp_tagblock *twait_block, *prev_twait_block; 58444a9ef3f8SMichael Tuexen struct sctp_laddr *wi, *nwi; 5845b3f1ea41SRandall Stewart int i; 5846f7517433SRandall Stewart struct sctp_iterator *it, *nit; 5847b6c57802SMichael Tuexen 58482b1c7de4SMichael Tuexen if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) { 58492b1c7de4SMichael Tuexen SCTP_PRINTF("%s: race condition on teardown.\n", __func__); 58502b1c7de4SMichael Tuexen return; 58512b1c7de4SMichael Tuexen } 58522b1c7de4SMichael Tuexen SCTP_BASE_VAR(sctp_pcb_initialized) = 0; 5853f4f34bdeSMichael Tuexen /* 5854f4f34bdeSMichael Tuexen * In FreeBSD the iterator thread never exits but we do clean up. 5855f4f34bdeSMichael Tuexen * The only way FreeBSD reaches here is if we have VRF's but we 5856f4f34bdeSMichael Tuexen * still add the ifdef to make it compile on old versions. 5857f4f34bdeSMichael Tuexen */ 58582b1c7de4SMichael Tuexen retry: 5859b6c57802SMichael Tuexen SCTP_IPI_ITERATOR_WQ_LOCK(); 58602b1c7de4SMichael Tuexen /* 58612b1c7de4SMichael Tuexen * sctp_iterator_worker() might be working on an it entry without 58622b1c7de4SMichael Tuexen * holding the lock. We won't find it on the list either and 58632b1c7de4SMichael Tuexen * continue and free/destroy it. While holding the lock, spin, to 58642b1c7de4SMichael Tuexen * avoid the race condition as sctp_iterator_worker() will have to 58653f53d622SMichael Tuexen * wait to re-acquire the lock. 58662b1c7de4SMichael Tuexen */ 58672b1c7de4SMichael Tuexen if (sctp_it_ctl.iterator_running != 0 || sctp_it_ctl.cur_it != NULL) { 58682b1c7de4SMichael Tuexen SCTP_IPI_ITERATOR_WQ_UNLOCK(); 58692b1c7de4SMichael Tuexen SCTP_PRINTF("%s: Iterator running while we held the lock. Retry. " 58702b1c7de4SMichael Tuexen "cur_it=%p\n", __func__, sctp_it_ctl.cur_it); 58712b1c7de4SMichael Tuexen DELAY(10); 58722b1c7de4SMichael Tuexen goto retry; 58732b1c7de4SMichael Tuexen } 58744a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) { 5875f7517433SRandall Stewart if (it->vn != curvnet) { 5876f7517433SRandall Stewart continue; 5877f7517433SRandall Stewart } 58784a9ef3f8SMichael Tuexen TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr); 5879f7517433SRandall Stewart if (it->function_atend != NULL) { 5880f7517433SRandall Stewart (*it->function_atend) (it->pointer, it->val); 5881f7517433SRandall Stewart } 5882f7517433SRandall Stewart SCTP_FREE(it, SCTP_M_ITER); 5883f7517433SRandall Stewart } 5884f7517433SRandall Stewart SCTP_IPI_ITERATOR_WQ_UNLOCK(); 5885f7517433SRandall Stewart SCTP_ITERATOR_LOCK(); 5886f7517433SRandall Stewart if ((sctp_it_ctl.cur_it) && 5887f7517433SRandall Stewart (sctp_it_ctl.cur_it->vn == curvnet)) { 5888f7517433SRandall Stewart sctp_it_ctl.iterator_flags |= SCTP_ITERATOR_STOP_CUR_IT; 5889f7517433SRandall Stewart } 5890f7517433SRandall Stewart SCTP_ITERATOR_UNLOCK(); 58912b1c7de4SMichael Tuexen SCTP_OS_TIMER_STOP_DRAIN(&SCTP_BASE_INFO(addr_wq_timer.timer)); 5892f7517433SRandall Stewart SCTP_WQ_ADDR_LOCK(); 58934a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(wi, &SCTP_BASE_INFO(addr_wq), sctp_nxt_addr, nwi) { 5894b6c57802SMichael Tuexen LIST_REMOVE(wi, sctp_nxt_addr); 5895b6c57802SMichael Tuexen SCTP_DECR_LADDR_COUNT(); 589624110da0SMichael Tuexen if (wi->action == SCTP_DEL_IP_ADDRESS) { 589724110da0SMichael Tuexen SCTP_FREE(wi->ifa, SCTP_M_IFA); 589824110da0SMichael Tuexen } 5899b6c57802SMichael Tuexen SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_laddr), wi); 5900b6c57802SMichael Tuexen } 5901f7517433SRandall Stewart SCTP_WQ_ADDR_UNLOCK(); 5902b6c57802SMichael Tuexen 5903c54a18d2SRandall Stewart /* 5904c54a18d2SRandall Stewart * free the vrf/ifn/ifa lists and hashes (be sure address monitor is 5905c54a18d2SRandall Stewart * destroyed first). 5906c54a18d2SRandall Stewart */ 59077f0ad227SMichael Tuexen SCTP_IPI_ADDR_WLOCK(); 5908b3f1ea41SRandall Stewart vrf_bucket = &SCTP_BASE_INFO(sctp_vrfhash)[(SCTP_DEFAULT_VRFID & SCTP_BASE_INFO(hashvrfmark))]; 59094a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(vrf, vrf_bucket, next_vrf, nvrf) { 59104a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(ifn, &vrf->ifnlist, next_ifn, nifn) { 59114a9ef3f8SMichael Tuexen LIST_FOREACH_SAFE(ifa, &ifn->ifalist, next_ifa, nifa) { 5912c54a18d2SRandall Stewart /* free the ifa */ 5913c54a18d2SRandall Stewart LIST_REMOVE(ifa, next_bucket); 5914c54a18d2SRandall Stewart LIST_REMOVE(ifa, next_ifa); 5915c54a18d2SRandall Stewart SCTP_FREE(ifa, SCTP_M_IFA); 5916c54a18d2SRandall Stewart } 5917c54a18d2SRandall Stewart /* free the ifn */ 5918c54a18d2SRandall Stewart LIST_REMOVE(ifn, next_bucket); 5919c54a18d2SRandall Stewart LIST_REMOVE(ifn, next_ifn); 5920c54a18d2SRandall Stewart SCTP_FREE(ifn, SCTP_M_IFN); 5921c54a18d2SRandall Stewart } 5922c54a18d2SRandall Stewart SCTP_HASH_FREE(vrf->vrf_addr_hash, vrf->vrf_addr_hashmark); 5923c54a18d2SRandall Stewart /* free the vrf */ 5924c54a18d2SRandall Stewart LIST_REMOVE(vrf, next_vrf); 5925c54a18d2SRandall Stewart SCTP_FREE(vrf, SCTP_M_VRF); 5926c54a18d2SRandall Stewart } 59277f0ad227SMichael Tuexen SCTP_IPI_ADDR_WUNLOCK(); 5928c54a18d2SRandall Stewart /* free the vrf hashes */ 5929b3f1ea41SRandall Stewart SCTP_HASH_FREE(SCTP_BASE_INFO(sctp_vrfhash), SCTP_BASE_INFO(hashvrfmark)); 5930b3f1ea41SRandall Stewart SCTP_HASH_FREE(SCTP_BASE_INFO(vrf_ifn_hash), SCTP_BASE_INFO(vrf_ifn_hashmark)); 5931b3f1ea41SRandall Stewart 5932b3f1ea41SRandall Stewart /* 5933b3f1ea41SRandall Stewart * free the TIMEWAIT list elements malloc'd in the function 5934b3f1ea41SRandall Stewart * sctp_add_vtag_to_timewait()... 5935b3f1ea41SRandall Stewart */ 5936a1e13272SRandall Stewart for (i = 0; i < SCTP_STACK_VTAG_HASH_SIZE; i++) { 5937b3f1ea41SRandall Stewart chain = &SCTP_BASE_INFO(vtag_timewait)[i]; 593883fc1165SMichael Tuexen if (!LIST_EMPTY(chain)) { 5939b3f1ea41SRandall Stewart prev_twait_block = NULL; 5940b3f1ea41SRandall Stewart LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) { 5941b3f1ea41SRandall Stewart if (prev_twait_block) { 5942b3f1ea41SRandall Stewart SCTP_FREE(prev_twait_block, SCTP_M_TIMW); 5943b3f1ea41SRandall Stewart } 5944b3f1ea41SRandall Stewart prev_twait_block = twait_block; 5945b3f1ea41SRandall Stewart } 5946b3f1ea41SRandall Stewart SCTP_FREE(prev_twait_block, SCTP_M_TIMW); 5947b3f1ea41SRandall Stewart } 5948b3f1ea41SRandall Stewart } 5949c54a18d2SRandall Stewart 5950c54a18d2SRandall Stewart /* free the locks and mutexes */ 5951c54a18d2SRandall Stewart #ifdef SCTP_PACKET_LOGGING 5952c54a18d2SRandall Stewart SCTP_IP_PKTLOG_DESTROY(); 5953c54a18d2SRandall Stewart #endif 5954c54a18d2SRandall Stewart SCTP_IPI_ADDR_DESTROY(); 5955c54a18d2SRandall Stewart SCTP_STATLOG_DESTROY(); 5956c54a18d2SRandall Stewart SCTP_INP_INFO_LOCK_DESTROY(); 5957c54a18d2SRandall Stewart 5958f7517433SRandall Stewart SCTP_WQ_ADDR_DESTROY(); 5959f7517433SRandall Stewart 59602b1c7de4SMichael Tuexen /* Get rid of other stuff too. */ 59612b1c7de4SMichael Tuexen if (SCTP_BASE_INFO(sctp_asochash) != NULL) 59622b1c7de4SMichael Tuexen SCTP_HASH_FREE(SCTP_BASE_INFO(sctp_asochash), SCTP_BASE_INFO(hashasocmark)); 59632b1c7de4SMichael Tuexen if (SCTP_BASE_INFO(sctp_ephash) != NULL) 59642b1c7de4SMichael Tuexen SCTP_HASH_FREE(SCTP_BASE_INFO(sctp_ephash), SCTP_BASE_INFO(hashmark)); 59652b1c7de4SMichael Tuexen if (SCTP_BASE_INFO(sctp_tcpephash) != NULL) 59662b1c7de4SMichael Tuexen SCTP_HASH_FREE(SCTP_BASE_INFO(sctp_tcpephash), SCTP_BASE_INFO(hashtcpmark)); 59672b1c7de4SMichael Tuexen 5968b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_ep)); 5969b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_asoc)); 5970b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_laddr)); 5971b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_net)); 5972b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_chunk)); 5973b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_readq)); 5974b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_strmoq)); 5975b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_asconf)); 5976b3f1ea41SRandall Stewart SCTP_ZONE_DESTROY(SCTP_BASE_INFO(ipi_zone_asconf_ack)); 59772f9e6db0SMichael Tuexen #if defined(SMP) && defined(SCTP_USE_PERCPU_STAT) 5978ae26e0a4SRandall Stewart SCTP_FREE(SCTP_BASE_STATS, SCTP_M_MCORE); 5979ae26e0a4SRandall Stewart #endif 5980c54a18d2SRandall Stewart } 5981c54a18d2SRandall Stewart 5982f8829a4aSRandall Stewart int 5983f8829a4aSRandall Stewart sctp_load_addresses_from_init(struct sctp_tcb *stcb, struct mbuf *m, 5984b1754ad1SMichael Tuexen int offset, int limit, 5985b1754ad1SMichael Tuexen struct sockaddr *src, struct sockaddr *dst, 5986ec70917fSMichael Tuexen struct sockaddr *altsa, uint16_t port) 5987f8829a4aSRandall Stewart { 5988f8829a4aSRandall Stewart /* 5989f8829a4aSRandall Stewart * grub through the INIT pulling addresses and loading them to the 5990f8829a4aSRandall Stewart * nets structure in the asoc. The from address in the mbuf should 5991f8829a4aSRandall Stewart * also be loaded (if it is not already). This routine can be called 5992f8829a4aSRandall Stewart * with either INIT or INIT-ACK's as long as the m points to the IP 5993f8829a4aSRandall Stewart * packet and the offset points to the beginning of the parameters. 5994f8829a4aSRandall Stewart */ 599560990c0cSMichael Tuexen struct sctp_inpcb *inp; 59964a9ef3f8SMichael Tuexen struct sctp_nets *net, *nnet, *net_tmp; 5997f4358911SMichael Tuexen struct sctp_paramhdr *phdr, param_buf; 5998f8829a4aSRandall Stewart struct sctp_tcb *stcb_tmp; 5999f8829a4aSRandall Stewart uint16_t ptype, plen; 6000f8829a4aSRandall Stewart struct sockaddr *sa; 6001f42a358aSRandall Stewart uint8_t random_store[SCTP_PARAM_BUFFER_SIZE]; 60025e54f665SRandall Stewart struct sctp_auth_random *p_random = NULL; 6003f8829a4aSRandall Stewart uint16_t random_len = 0; 6004f42a358aSRandall Stewart uint8_t hmacs_store[SCTP_PARAM_BUFFER_SIZE]; 6005f8829a4aSRandall Stewart struct sctp_auth_hmac_algo *hmacs = NULL; 6006f8829a4aSRandall Stewart uint16_t hmacs_len = 0; 60072afb3e84SRandall Stewart uint8_t saw_asconf = 0; 60082afb3e84SRandall Stewart uint8_t saw_asconf_ack = 0; 6009f42a358aSRandall Stewart uint8_t chunks_store[SCTP_PARAM_BUFFER_SIZE]; 6010f8829a4aSRandall Stewart struct sctp_auth_chunk_list *chunks = NULL; 6011f8829a4aSRandall Stewart uint16_t num_chunks = 0; 6012f8829a4aSRandall Stewart sctp_key_t *new_key; 6013f8829a4aSRandall Stewart uint32_t keylen; 6014f8829a4aSRandall Stewart int got_random = 0, got_hmacs = 0, got_chklist = 0; 6015c79bec9cSMichael Tuexen uint8_t peer_supports_ecn; 6016c79bec9cSMichael Tuexen uint8_t peer_supports_prsctp; 6017c79bec9cSMichael Tuexen uint8_t peer_supports_auth; 6018c79bec9cSMichael Tuexen uint8_t peer_supports_asconf; 6019c79bec9cSMichael Tuexen uint8_t peer_supports_asconf_ack; 6020c79bec9cSMichael Tuexen uint8_t peer_supports_reconfig; 6021c79bec9cSMichael Tuexen uint8_t peer_supports_nrsack; 6022c79bec9cSMichael Tuexen uint8_t peer_supports_pktdrop; 602344249214SRandall Stewart uint8_t peer_supports_idata; 6024e6194c2eSMichael Tuexen #ifdef INET 6025e6194c2eSMichael Tuexen struct sockaddr_in sin; 6026e6194c2eSMichael Tuexen #endif 6027e6194c2eSMichael Tuexen #ifdef INET6 6028e6194c2eSMichael Tuexen struct sockaddr_in6 sin6; 6029e6194c2eSMichael Tuexen #endif 6030e6194c2eSMichael Tuexen 6031e6194c2eSMichael Tuexen /* First get the destination address setup too. */ 6032e6194c2eSMichael Tuexen #ifdef INET 6033e6194c2eSMichael Tuexen memset(&sin, 0, sizeof(sin)); 6034f8829a4aSRandall Stewart sin.sin_family = AF_INET; 6035f8829a4aSRandall Stewart sin.sin_len = sizeof(sin); 6036f8829a4aSRandall Stewart sin.sin_port = stcb->rport; 6037e6194c2eSMichael Tuexen #endif 6038e6194c2eSMichael Tuexen #ifdef INET6 6039e6194c2eSMichael Tuexen memset(&sin6, 0, sizeof(sin6)); 6040f8829a4aSRandall Stewart sin6.sin6_family = AF_INET6; 6041f8829a4aSRandall Stewart sin6.sin6_len = sizeof(struct sockaddr_in6); 6042f8829a4aSRandall Stewart sin6.sin6_port = stcb->rport; 6043e6194c2eSMichael Tuexen #endif 6044dc81ec89SMichael Tuexen if (altsa) { 6045dc81ec89SMichael Tuexen sa = altsa; 6046dc81ec89SMichael Tuexen } else { 6047b1754ad1SMichael Tuexen sa = src; 6048f8829a4aSRandall Stewart } 604944249214SRandall Stewart peer_supports_idata = 0; 6050c79bec9cSMichael Tuexen peer_supports_ecn = 0; 6051c79bec9cSMichael Tuexen peer_supports_prsctp = 0; 6052c79bec9cSMichael Tuexen peer_supports_auth = 0; 6053c79bec9cSMichael Tuexen peer_supports_asconf = 0; 6054b954d816SMichael Tuexen peer_supports_asconf_ack = 0; 6055c79bec9cSMichael Tuexen peer_supports_reconfig = 0; 6056c79bec9cSMichael Tuexen peer_supports_nrsack = 0; 6057c79bec9cSMichael Tuexen peer_supports_pktdrop = 0; 6058f8829a4aSRandall Stewart TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) { 6059f8829a4aSRandall Stewart /* mark all addresses that we have currently on the list */ 6060f8829a4aSRandall Stewart net->dest_state |= SCTP_ADDR_NOT_IN_ASSOC; 6061f8829a4aSRandall Stewart } 6062f8829a4aSRandall Stewart /* does the source address already exist? if so skip it */ 606360990c0cSMichael Tuexen inp = stcb->sctp_ep; 606450cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, 1); 6065b1754ad1SMichael Tuexen stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net_tmp, dst, stcb); 606650cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, -1); 6067f8829a4aSRandall Stewart 6068f8829a4aSRandall Stewart if ((stcb_tmp == NULL && inp == stcb->sctp_ep) || inp == NULL) { 6069f8829a4aSRandall Stewart /* we must add the source address */ 6070f8829a4aSRandall Stewart /* no scope set here since we have a tcb already. */ 6071e6194c2eSMichael Tuexen switch (sa->sa_family) { 6072e6194c2eSMichael Tuexen #ifdef INET 6073e6194c2eSMichael Tuexen case AF_INET: 6074a1cb341bSMichael Tuexen if (stcb->asoc.scope.ipv4_addr_legal) { 6075ec70917fSMichael Tuexen if (sctp_add_remote_addr(stcb, sa, NULL, port, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_2)) { 6076f8829a4aSRandall Stewart return (-1); 6077f8829a4aSRandall Stewart } 6078e6194c2eSMichael Tuexen } 6079e6194c2eSMichael Tuexen break; 6080e6194c2eSMichael Tuexen #endif 6081e6194c2eSMichael Tuexen #ifdef INET6 6082e6194c2eSMichael Tuexen case AF_INET6: 6083a1cb341bSMichael Tuexen if (stcb->asoc.scope.ipv6_addr_legal) { 6084ec70917fSMichael Tuexen if (sctp_add_remote_addr(stcb, sa, NULL, port, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_3)) { 6085f8829a4aSRandall Stewart return (-2); 6086f8829a4aSRandall Stewart } 6087f8829a4aSRandall Stewart } 6088e6194c2eSMichael Tuexen break; 6089e6194c2eSMichael Tuexen #endif 6090e6194c2eSMichael Tuexen default: 6091e6194c2eSMichael Tuexen break; 6092e6194c2eSMichael Tuexen } 6093f8829a4aSRandall Stewart } else { 6094f8829a4aSRandall Stewart if (net_tmp != NULL && stcb_tmp == stcb) { 6095f8829a4aSRandall Stewart net_tmp->dest_state &= ~SCTP_ADDR_NOT_IN_ASSOC; 6096f8829a4aSRandall Stewart } else if (stcb_tmp != stcb) { 6097f8829a4aSRandall Stewart /* It belongs to another association? */ 6098eacc51c5SRandall Stewart if (stcb_tmp) 6099f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb_tmp); 6100f8829a4aSRandall Stewart return (-3); 6101f8829a4aSRandall Stewart } 6102f8829a4aSRandall Stewart } 6103f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6104f8829a4aSRandall Stewart /* the assoc was freed? */ 6105f8829a4aSRandall Stewart return (-4); 6106f8829a4aSRandall Stewart } 6107f8829a4aSRandall Stewart /* now we must go through each of the params. */ 6108f4358911SMichael Tuexen phdr = sctp_get_next_param(m, offset, ¶m_buf, sizeof(param_buf)); 6109f8829a4aSRandall Stewart while (phdr) { 6110f8829a4aSRandall Stewart ptype = ntohs(phdr->param_type); 6111f8829a4aSRandall Stewart plen = ntohs(phdr->param_length); 6112f8829a4aSRandall Stewart /* 6113cd3fd531SMichael Tuexen * SCTP_PRINTF("ptype => %0x, plen => %d\n", 6114cd3fd531SMichael Tuexen * (uint32_t)ptype, (int)plen); 6115f8829a4aSRandall Stewart */ 6116f8829a4aSRandall Stewart if (offset + plen > limit) { 6117f8829a4aSRandall Stewart break; 6118f8829a4aSRandall Stewart } 61196088175aSMichael Tuexen if (plen < sizeof(struct sctp_paramhdr)) { 6120f8829a4aSRandall Stewart break; 6121f8829a4aSRandall Stewart } 6122e6194c2eSMichael Tuexen #ifdef INET 6123f8829a4aSRandall Stewart if (ptype == SCTP_IPV4_ADDRESS) { 6124a1cb341bSMichael Tuexen if (stcb->asoc.scope.ipv4_addr_legal) { 6125f8829a4aSRandall Stewart struct sctp_ipv4addr_param *p4, p4_buf; 6126f8829a4aSRandall Stewart 6127f8829a4aSRandall Stewart /* ok get the v4 address and check/add */ 6128f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6129a99b6783SRandall Stewart (struct sctp_paramhdr *)&p4_buf, 6130a99b6783SRandall Stewart sizeof(p4_buf)); 6131f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv4addr_param) || 6132f8829a4aSRandall Stewart phdr == NULL) { 6133f8829a4aSRandall Stewart return (-5); 6134f8829a4aSRandall Stewart } 6135f8829a4aSRandall Stewart p4 = (struct sctp_ipv4addr_param *)phdr; 6136f8829a4aSRandall Stewart sin.sin_addr.s_addr = p4->addr; 6137fc048708SMichael Tuexen if (IN_MULTICAST(ntohl(sin.sin_addr.s_addr))) { 6138d06c82f1SRandall Stewart /* Skip multi-cast addresses */ 6139d06c82f1SRandall Stewart goto next_param; 6140d06c82f1SRandall Stewart } 614117205eccSRandall Stewart if ((sin.sin_addr.s_addr == INADDR_BROADCAST) || 614217205eccSRandall Stewart (sin.sin_addr.s_addr == INADDR_ANY)) { 614317205eccSRandall Stewart goto next_param; 614417205eccSRandall Stewart } 6145f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin; 6146f8829a4aSRandall Stewart inp = stcb->sctp_ep; 614750cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, 1); 6148f8829a4aSRandall Stewart stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net, 6149b1754ad1SMichael Tuexen dst, stcb); 615050cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, -1); 6151f8829a4aSRandall Stewart 6152f8829a4aSRandall Stewart if ((stcb_tmp == NULL && inp == stcb->sctp_ep) || 6153f8829a4aSRandall Stewart inp == NULL) { 6154f8829a4aSRandall Stewart /* we must add the source address */ 6155f8829a4aSRandall Stewart /* 6156f8829a4aSRandall Stewart * no scope set since we have a tcb 6157f8829a4aSRandall Stewart * already 6158f8829a4aSRandall Stewart */ 6159f8829a4aSRandall Stewart 6160f8829a4aSRandall Stewart /* 6161f8829a4aSRandall Stewart * we must validate the state again 6162f8829a4aSRandall Stewart * here 6163f8829a4aSRandall Stewart */ 61646d9e8f2bSRandall Stewart add_it_now: 6165f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6166f8829a4aSRandall Stewart /* the assoc was freed? */ 6167f8829a4aSRandall Stewart return (-7); 6168f8829a4aSRandall Stewart } 6169ec70917fSMichael Tuexen if (sctp_add_remote_addr(stcb, sa, NULL, port, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_4)) { 6170f8829a4aSRandall Stewart return (-8); 6171f8829a4aSRandall Stewart } 6172f8829a4aSRandall Stewart } else if (stcb_tmp == stcb) { 6173f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6174f8829a4aSRandall Stewart /* the assoc was freed? */ 6175f8829a4aSRandall Stewart return (-10); 6176f8829a4aSRandall Stewart } 6177f8829a4aSRandall Stewart if (net != NULL) { 6178f8829a4aSRandall Stewart /* clear flag */ 6179f8829a4aSRandall Stewart net->dest_state &= 6180f8829a4aSRandall Stewart ~SCTP_ADDR_NOT_IN_ASSOC; 6181f8829a4aSRandall Stewart } 6182f8829a4aSRandall Stewart } else { 6183f8829a4aSRandall Stewart /* 6184f8829a4aSRandall Stewart * strange, address is in another 6185f8829a4aSRandall Stewart * assoc? straighten out locks. 6186f8829a4aSRandall Stewart */ 61876d9e8f2bSRandall Stewart if (stcb_tmp) { 6188839d21d6SMichael Tuexen if (SCTP_GET_STATE(stcb_tmp) == SCTP_STATE_COOKIE_WAIT) { 6189267dbe63SMichael Tuexen struct mbuf *op_err; 6190267dbe63SMichael Tuexen char msg[SCTP_DIAG_INFO_LEN]; 6191267dbe63SMichael Tuexen 6192b7b84c0eSMichael Tuexen /* 6193b7b84c0eSMichael Tuexen * in setup state we 6194b7b84c0eSMichael Tuexen * abort this guy 6195b7b84c0eSMichael Tuexen */ 6196999f86d6SMichael Tuexen SCTP_SNPRINTF(msg, sizeof(msg), 6197821bae7cSMichael Tuexen "%s:%d at %s", __FILE__, __LINE__, __func__); 6198267dbe63SMichael Tuexen op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 6199267dbe63SMichael Tuexen msg); 62006d9e8f2bSRandall Stewart sctp_abort_an_association(stcb_tmp->sctp_ep, 6201*105b68b4SMichael Tuexen stcb_tmp, op_err, false, 6202267dbe63SMichael Tuexen SCTP_SO_NOT_LOCKED); 62036d9e8f2bSRandall Stewart goto add_it_now; 62046d9e8f2bSRandall Stewart } 6205b54d3a6cSRandall Stewart SCTP_TCB_UNLOCK(stcb_tmp); 62066d9e8f2bSRandall Stewart } 62070053ed28SMichael Tuexen 6208f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6209f8829a4aSRandall Stewart /* the assoc was freed? */ 6210f8829a4aSRandall Stewart return (-12); 6211f8829a4aSRandall Stewart } 6212f8829a4aSRandall Stewart return (-13); 6213f8829a4aSRandall Stewart } 6214f8829a4aSRandall Stewart } 6215e6194c2eSMichael Tuexen } else 6216e6194c2eSMichael Tuexen #endif 6217e6194c2eSMichael Tuexen #ifdef INET6 6218e6194c2eSMichael Tuexen if (ptype == SCTP_IPV6_ADDRESS) { 6219a1cb341bSMichael Tuexen if (stcb->asoc.scope.ipv6_addr_legal) { 6220f8829a4aSRandall Stewart /* ok get the v6 address and check/add */ 6221f8829a4aSRandall Stewart struct sctp_ipv6addr_param *p6, p6_buf; 6222f8829a4aSRandall Stewart 6223f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6224a99b6783SRandall Stewart (struct sctp_paramhdr *)&p6_buf, 6225a99b6783SRandall Stewart sizeof(p6_buf)); 6226f8829a4aSRandall Stewart if (plen != sizeof(struct sctp_ipv6addr_param) || 6227f8829a4aSRandall Stewart phdr == NULL) { 6228f8829a4aSRandall Stewart return (-14); 6229f8829a4aSRandall Stewart } 6230f8829a4aSRandall Stewart p6 = (struct sctp_ipv6addr_param *)phdr; 6231f8829a4aSRandall Stewart memcpy((caddr_t)&sin6.sin6_addr, p6->addr, 6232f8829a4aSRandall Stewart sizeof(p6->addr)); 6233d06c82f1SRandall Stewart if (IN6_IS_ADDR_MULTICAST(&sin6.sin6_addr)) { 6234d06c82f1SRandall Stewart /* Skip multi-cast addresses */ 6235d06c82f1SRandall Stewart goto next_param; 6236d06c82f1SRandall Stewart } 6237d06c82f1SRandall Stewart if (IN6_IS_ADDR_LINKLOCAL(&sin6.sin6_addr)) { 6238b7b84c0eSMichael Tuexen /* 6239b7b84c0eSMichael Tuexen * Link local make no sense without 6240b7b84c0eSMichael Tuexen * scope 6241b7b84c0eSMichael Tuexen */ 6242d06c82f1SRandall Stewart goto next_param; 6243d06c82f1SRandall Stewart } 6244f8829a4aSRandall Stewart sa = (struct sockaddr *)&sin6; 6245f8829a4aSRandall Stewart inp = stcb->sctp_ep; 624650cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, 1); 6247f8829a4aSRandall Stewart stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net, 6248b1754ad1SMichael Tuexen dst, stcb); 624950cec919SRandall Stewart atomic_add_int(&stcb->asoc.refcnt, -1); 6250a99b6783SRandall Stewart if (stcb_tmp == NULL && 6251a99b6783SRandall Stewart (inp == stcb->sctp_ep || inp == NULL)) { 6252f8829a4aSRandall Stewart /* 6253f8829a4aSRandall Stewart * we must validate the state again 6254f8829a4aSRandall Stewart * here 6255f8829a4aSRandall Stewart */ 62566d9e8f2bSRandall Stewart add_it_now6: 6257f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6258f8829a4aSRandall Stewart /* the assoc was freed? */ 6259f8829a4aSRandall Stewart return (-16); 6260f8829a4aSRandall Stewart } 6261f8829a4aSRandall Stewart /* 6262f8829a4aSRandall Stewart * we must add the address, no scope 6263f8829a4aSRandall Stewart * set 6264f8829a4aSRandall Stewart */ 6265ec70917fSMichael Tuexen if (sctp_add_remote_addr(stcb, sa, NULL, port, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_5)) { 6266f8829a4aSRandall Stewart return (-17); 6267f8829a4aSRandall Stewart } 6268f8829a4aSRandall Stewart } else if (stcb_tmp == stcb) { 6269f8829a4aSRandall Stewart /* 6270f8829a4aSRandall Stewart * we must validate the state again 6271f8829a4aSRandall Stewart * here 6272f8829a4aSRandall Stewart */ 6273f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6274f8829a4aSRandall Stewart /* the assoc was freed? */ 6275f8829a4aSRandall Stewart return (-19); 6276f8829a4aSRandall Stewart } 6277f8829a4aSRandall Stewart if (net != NULL) { 6278f8829a4aSRandall Stewart /* clear flag */ 6279f8829a4aSRandall Stewart net->dest_state &= 6280f8829a4aSRandall Stewart ~SCTP_ADDR_NOT_IN_ASSOC; 6281f8829a4aSRandall Stewart } 6282f8829a4aSRandall Stewart } else { 6283f8829a4aSRandall Stewart /* 6284f8829a4aSRandall Stewart * strange, address is in another 6285f8829a4aSRandall Stewart * assoc? straighten out locks. 6286f8829a4aSRandall Stewart */ 6287267dbe63SMichael Tuexen if (stcb_tmp) { 6288839d21d6SMichael Tuexen if (SCTP_GET_STATE(stcb_tmp) == SCTP_STATE_COOKIE_WAIT) { 6289267dbe63SMichael Tuexen struct mbuf *op_err; 6290267dbe63SMichael Tuexen char msg[SCTP_DIAG_INFO_LEN]; 6291267dbe63SMichael Tuexen 6292b7b84c0eSMichael Tuexen /* 6293b7b84c0eSMichael Tuexen * in setup state we 6294b7b84c0eSMichael Tuexen * abort this guy 6295b7b84c0eSMichael Tuexen */ 6296999f86d6SMichael Tuexen SCTP_SNPRINTF(msg, sizeof(msg), 6297821bae7cSMichael Tuexen "%s:%d at %s", __FILE__, __LINE__, __func__); 6298267dbe63SMichael Tuexen op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 6299267dbe63SMichael Tuexen msg); 63006d9e8f2bSRandall Stewart sctp_abort_an_association(stcb_tmp->sctp_ep, 6301*105b68b4SMichael Tuexen stcb_tmp, op_err, false, 6302267dbe63SMichael Tuexen SCTP_SO_NOT_LOCKED); 63036d9e8f2bSRandall Stewart goto add_it_now6; 63046d9e8f2bSRandall Stewart } 6305b54d3a6cSRandall Stewart SCTP_TCB_UNLOCK(stcb_tmp); 6306267dbe63SMichael Tuexen } 6307f8829a4aSRandall Stewart if (stcb->asoc.state == 0) { 6308f8829a4aSRandall Stewart /* the assoc was freed? */ 6309f8829a4aSRandall Stewart return (-21); 6310f8829a4aSRandall Stewart } 6311f8829a4aSRandall Stewart return (-22); 6312f8829a4aSRandall Stewart } 6313f8829a4aSRandall Stewart } 6314e6194c2eSMichael Tuexen } else 6315e6194c2eSMichael Tuexen #endif 6316e6194c2eSMichael Tuexen if (ptype == SCTP_ECN_CAPABLE) { 6317c79bec9cSMichael Tuexen peer_supports_ecn = 1; 6318f8829a4aSRandall Stewart } else if (ptype == SCTP_ULP_ADAPTATION) { 6319f8829a4aSRandall Stewart if (stcb->asoc.state != SCTP_STATE_OPEN) { 6320f8829a4aSRandall Stewart struct sctp_adaptation_layer_indication ai, 6321f8829a4aSRandall Stewart *aip; 6322f8829a4aSRandall Stewart 6323f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6324f8829a4aSRandall Stewart (struct sctp_paramhdr *)&ai, sizeof(ai)); 6325f8829a4aSRandall Stewart aip = (struct sctp_adaptation_layer_indication *)phdr; 63266e55db54SRandall Stewart if (aip) { 63272afb3e84SRandall Stewart stcb->asoc.peers_adaptation = ntohl(aip->indication); 63282afb3e84SRandall Stewart stcb->asoc.adaptation_needed = 1; 6329f8829a4aSRandall Stewart } 63306e55db54SRandall Stewart } 6331f8829a4aSRandall Stewart } else if (ptype == SCTP_SET_PRIM_ADDR) { 6332f8829a4aSRandall Stewart struct sctp_asconf_addr_param lstore, *fee; 6333f8829a4aSRandall Stewart int lptype; 6334f8829a4aSRandall Stewart struct sockaddr *lsa = NULL; 6335e6194c2eSMichael Tuexen #ifdef INET 6336e6194c2eSMichael Tuexen struct sctp_asconf_addrv4_param *fii; 6337e6194c2eSMichael Tuexen #endif 6338e6194c2eSMichael Tuexen 6339c79bec9cSMichael Tuexen if (stcb->asoc.asconf_supported == 0) { 6340c79bec9cSMichael Tuexen return (-100); 6341c79bec9cSMichael Tuexen } 6342f8829a4aSRandall Stewart if (plen > sizeof(lstore)) { 6343f8829a4aSRandall Stewart return (-23); 6344f8829a4aSRandall Stewart } 63456088175aSMichael Tuexen if (plen < sizeof(struct sctp_asconf_addrv4_param)) { 63466088175aSMichael Tuexen return (-101); 63476088175aSMichael Tuexen } 6348f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6349a99b6783SRandall Stewart (struct sctp_paramhdr *)&lstore, 6350f4358911SMichael Tuexen plen); 6351f8829a4aSRandall Stewart if (phdr == NULL) { 6352f8829a4aSRandall Stewart return (-24); 6353f8829a4aSRandall Stewart } 6354f8829a4aSRandall Stewart fee = (struct sctp_asconf_addr_param *)phdr; 6355f8829a4aSRandall Stewart lptype = ntohs(fee->addrp.ph.param_type); 6356e6194c2eSMichael Tuexen switch (lptype) { 6357e6194c2eSMichael Tuexen #ifdef INET 6358e6194c2eSMichael Tuexen case SCTP_IPV4_ADDRESS: 6359f8829a4aSRandall Stewart if (plen != 6360f8829a4aSRandall Stewart sizeof(struct sctp_asconf_addrv4_param)) { 6361ad81507eSRandall Stewart SCTP_PRINTF("Sizeof setprim in init/init ack not %d but %d - ignored\n", 6362f8829a4aSRandall Stewart (int)sizeof(struct sctp_asconf_addrv4_param), 6363f8829a4aSRandall Stewart plen); 6364f8829a4aSRandall Stewart } else { 6365f8829a4aSRandall Stewart fii = (struct sctp_asconf_addrv4_param *)fee; 6366f8829a4aSRandall Stewart sin.sin_addr.s_addr = fii->addrp.addr; 6367f8829a4aSRandall Stewart lsa = (struct sockaddr *)&sin; 6368f8829a4aSRandall Stewart } 6369e6194c2eSMichael Tuexen break; 6370e6194c2eSMichael Tuexen #endif 6371e6194c2eSMichael Tuexen #ifdef INET6 6372e6194c2eSMichael Tuexen case SCTP_IPV6_ADDRESS: 6373f8829a4aSRandall Stewart if (plen != 6374f8829a4aSRandall Stewart sizeof(struct sctp_asconf_addr_param)) { 6375ad81507eSRandall Stewart SCTP_PRINTF("Sizeof setprim (v6) in init/init ack not %d but %d - ignored\n", 6376f8829a4aSRandall Stewart (int)sizeof(struct sctp_asconf_addr_param), 6377f8829a4aSRandall Stewart plen); 6378f8829a4aSRandall Stewart } else { 6379f8829a4aSRandall Stewart memcpy(sin6.sin6_addr.s6_addr, 6380f8829a4aSRandall Stewart fee->addrp.addr, 6381f8829a4aSRandall Stewart sizeof(fee->addrp.addr)); 6382f8829a4aSRandall Stewart lsa = (struct sockaddr *)&sin6; 6383f8829a4aSRandall Stewart } 6384e6194c2eSMichael Tuexen break; 6385e6194c2eSMichael Tuexen #endif 6386e6194c2eSMichael Tuexen default: 6387e6194c2eSMichael Tuexen break; 6388f8829a4aSRandall Stewart } 6389f8829a4aSRandall Stewart if (lsa) { 6390ad81507eSRandall Stewart (void)sctp_set_primary_addr(stcb, sa, NULL); 6391f8829a4aSRandall Stewart } 6392830d754dSRandall Stewart } else if (ptype == SCTP_HAS_NAT_SUPPORT) { 6393830d754dSRandall Stewart stcb->asoc.peer_supports_nat = 1; 6394f8829a4aSRandall Stewart } else if (ptype == SCTP_PRSCTP_SUPPORTED) { 6395f8829a4aSRandall Stewart /* Peer supports pr-sctp */ 6396c79bec9cSMichael Tuexen peer_supports_prsctp = 1; 6397f8829a4aSRandall Stewart } else if (ptype == SCTP_SUPPORTED_CHUNK_EXT) { 6398f8829a4aSRandall Stewart /* A supported extension chunk */ 6399f8829a4aSRandall Stewart struct sctp_supported_chunk_types_param *pr_supported; 6400f42a358aSRandall Stewart uint8_t local_store[SCTP_PARAM_BUFFER_SIZE]; 6401f8829a4aSRandall Stewart int num_ent, i; 6402f8829a4aSRandall Stewart 6403f4358911SMichael Tuexen if (plen > sizeof(local_store)) { 6404f4358911SMichael Tuexen return (-35); 6405f4358911SMichael Tuexen } 6406f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6407f4358911SMichael Tuexen (struct sctp_paramhdr *)&local_store, plen); 6408f8829a4aSRandall Stewart if (phdr == NULL) { 6409f8829a4aSRandall Stewart return (-25); 6410f8829a4aSRandall Stewart } 6411f8829a4aSRandall Stewart pr_supported = (struct sctp_supported_chunk_types_param *)phdr; 6412f8829a4aSRandall Stewart num_ent = plen - sizeof(struct sctp_paramhdr); 6413f8829a4aSRandall Stewart for (i = 0; i < num_ent; i++) { 6414f8829a4aSRandall Stewart switch (pr_supported->chunk_types[i]) { 6415f8829a4aSRandall Stewart case SCTP_ASCONF: 6416c79bec9cSMichael Tuexen peer_supports_asconf = 1; 6417142a4d9eSMichael Tuexen break; 6418f8829a4aSRandall Stewart case SCTP_ASCONF_ACK: 6419c79bec9cSMichael Tuexen peer_supports_asconf_ack = 1; 6420f8829a4aSRandall Stewart break; 6421f8829a4aSRandall Stewart case SCTP_FORWARD_CUM_TSN: 6422c79bec9cSMichael Tuexen peer_supports_prsctp = 1; 6423f8829a4aSRandall Stewart break; 6424f8829a4aSRandall Stewart case SCTP_PACKET_DROPPED: 6425c79bec9cSMichael Tuexen peer_supports_pktdrop = 1; 6426f8829a4aSRandall Stewart break; 64278933fa13SRandall Stewart case SCTP_NR_SELECTIVE_ACK: 6428c79bec9cSMichael Tuexen peer_supports_nrsack = 1; 64298933fa13SRandall Stewart break; 6430f8829a4aSRandall Stewart case SCTP_STREAM_RESET: 6431c79bec9cSMichael Tuexen peer_supports_reconfig = 1; 6432f8829a4aSRandall Stewart break; 6433f8829a4aSRandall Stewart case SCTP_AUTHENTICATION: 6434c79bec9cSMichael Tuexen peer_supports_auth = 1; 6435f8829a4aSRandall Stewart break; 643644249214SRandall Stewart case SCTP_IDATA: 643744249214SRandall Stewart peer_supports_idata = 1; 643844249214SRandall Stewart break; 6439f8829a4aSRandall Stewart default: 6440f8829a4aSRandall Stewart /* one I have not learned yet */ 6441f8829a4aSRandall Stewart break; 6442f8829a4aSRandall Stewart } 6443f8829a4aSRandall Stewart } 6444f8829a4aSRandall Stewart } else if (ptype == SCTP_RANDOM) { 6445f42a358aSRandall Stewart if (plen > sizeof(random_store)) 6446f8829a4aSRandall Stewart break; 6447f8829a4aSRandall Stewart if (got_random) { 6448f8829a4aSRandall Stewart /* already processed a RANDOM */ 6449f8829a4aSRandall Stewart goto next_param; 6450f8829a4aSRandall Stewart } 6451f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6452f42a358aSRandall Stewart (struct sctp_paramhdr *)random_store, 6453f4358911SMichael Tuexen plen); 6454f8829a4aSRandall Stewart if (phdr == NULL) 6455f8829a4aSRandall Stewart return (-26); 64565e54f665SRandall Stewart p_random = (struct sctp_auth_random *)phdr; 64575e54f665SRandall Stewart random_len = plen - sizeof(*p_random); 6458f8829a4aSRandall Stewart /* enforce the random length */ 6459f8829a4aSRandall Stewart if (random_len != SCTP_AUTH_RANDOM_SIZE_REQUIRED) { 6460ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_AUTH1, "SCTP: invalid RANDOM len\n"); 6461f8829a4aSRandall Stewart return (-27); 6462f8829a4aSRandall Stewart } 6463f8829a4aSRandall Stewart got_random = 1; 6464f8829a4aSRandall Stewart } else if (ptype == SCTP_HMAC_LIST) { 646547b80412SMichael Tuexen uint16_t num_hmacs; 646647b80412SMichael Tuexen uint16_t i; 6467f8829a4aSRandall Stewart 6468f42a358aSRandall Stewart if (plen > sizeof(hmacs_store)) 6469f8829a4aSRandall Stewart break; 6470f8829a4aSRandall Stewart if (got_hmacs) { 6471f8829a4aSRandall Stewart /* already processed a HMAC list */ 6472f8829a4aSRandall Stewart goto next_param; 6473f8829a4aSRandall Stewart } 6474f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6475f42a358aSRandall Stewart (struct sctp_paramhdr *)hmacs_store, 6476f4358911SMichael Tuexen plen); 6477f8829a4aSRandall Stewart if (phdr == NULL) 6478f8829a4aSRandall Stewart return (-28); 6479f8829a4aSRandall Stewart hmacs = (struct sctp_auth_hmac_algo *)phdr; 6480f8829a4aSRandall Stewart hmacs_len = plen - sizeof(*hmacs); 6481f8829a4aSRandall Stewart num_hmacs = hmacs_len / sizeof(hmacs->hmac_ids[0]); 6482f8829a4aSRandall Stewart /* validate the hmac list */ 6483f8829a4aSRandall Stewart if (sctp_verify_hmac_param(hmacs, num_hmacs)) { 6484f8829a4aSRandall Stewart return (-29); 6485f8829a4aSRandall Stewart } 6486f8829a4aSRandall Stewart if (stcb->asoc.peer_hmacs != NULL) 6487f8829a4aSRandall Stewart sctp_free_hmaclist(stcb->asoc.peer_hmacs); 6488f8829a4aSRandall Stewart stcb->asoc.peer_hmacs = sctp_alloc_hmaclist(num_hmacs); 6489f8829a4aSRandall Stewart if (stcb->asoc.peer_hmacs != NULL) { 6490f8829a4aSRandall Stewart for (i = 0; i < num_hmacs; i++) { 64916e55db54SRandall Stewart (void)sctp_auth_add_hmacid(stcb->asoc.peer_hmacs, 6492f8829a4aSRandall Stewart ntohs(hmacs->hmac_ids[i])); 6493f8829a4aSRandall Stewart } 6494f8829a4aSRandall Stewart } 6495f8829a4aSRandall Stewart got_hmacs = 1; 6496f8829a4aSRandall Stewart } else if (ptype == SCTP_CHUNK_LIST) { 6497f8829a4aSRandall Stewart int i; 6498f8829a4aSRandall Stewart 6499f42a358aSRandall Stewart if (plen > sizeof(chunks_store)) 6500f8829a4aSRandall Stewart break; 6501f8829a4aSRandall Stewart if (got_chklist) { 6502f8829a4aSRandall Stewart /* already processed a Chunks list */ 6503f8829a4aSRandall Stewart goto next_param; 6504f8829a4aSRandall Stewart } 6505f8829a4aSRandall Stewart phdr = sctp_get_next_param(m, offset, 6506f42a358aSRandall Stewart (struct sctp_paramhdr *)chunks_store, 6507f4358911SMichael Tuexen plen); 6508f8829a4aSRandall Stewart if (phdr == NULL) 6509f8829a4aSRandall Stewart return (-30); 6510f8829a4aSRandall Stewart chunks = (struct sctp_auth_chunk_list *)phdr; 6511f8829a4aSRandall Stewart num_chunks = plen - sizeof(*chunks); 6512f8829a4aSRandall Stewart if (stcb->asoc.peer_auth_chunks != NULL) 6513f8829a4aSRandall Stewart sctp_clear_chunklist(stcb->asoc.peer_auth_chunks); 6514f8829a4aSRandall Stewart else 6515f8829a4aSRandall Stewart stcb->asoc.peer_auth_chunks = sctp_alloc_chunklist(); 6516f8829a4aSRandall Stewart for (i = 0; i < num_chunks; i++) { 65176e55db54SRandall Stewart (void)sctp_auth_add_chunk(chunks->chunk_types[i], 6518f8829a4aSRandall Stewart stcb->asoc.peer_auth_chunks); 65192afb3e84SRandall Stewart /* record asconf/asconf-ack if listed */ 65202afb3e84SRandall Stewart if (chunks->chunk_types[i] == SCTP_ASCONF) 65212afb3e84SRandall Stewart saw_asconf = 1; 65222afb3e84SRandall Stewart if (chunks->chunk_types[i] == SCTP_ASCONF_ACK) 65232afb3e84SRandall Stewart saw_asconf_ack = 1; 6524f8829a4aSRandall Stewart } 6525f8829a4aSRandall Stewart got_chklist = 1; 6526f8829a4aSRandall Stewart } else if ((ptype == SCTP_HEARTBEAT_INFO) || 6527f8829a4aSRandall Stewart (ptype == SCTP_STATE_COOKIE) || 6528f8829a4aSRandall Stewart (ptype == SCTP_UNRECOG_PARAM) || 6529f8829a4aSRandall Stewart (ptype == SCTP_COOKIE_PRESERVE) || 6530f8829a4aSRandall Stewart (ptype == SCTP_SUPPORTED_ADDRTYPE) || 6531f8829a4aSRandall Stewart (ptype == SCTP_ADD_IP_ADDRESS) || 6532f8829a4aSRandall Stewart (ptype == SCTP_DEL_IP_ADDRESS) || 6533f8829a4aSRandall Stewart (ptype == SCTP_ERROR_CAUSE_IND) || 6534f8829a4aSRandall Stewart (ptype == SCTP_SUCCESS_REPORT)) { 6535fbc6840bSMichael Tuexen /* don't care */ 6536f8829a4aSRandall Stewart } else { 6537f8829a4aSRandall Stewart if ((ptype & 0x8000) == 0x0000) { 6538f8829a4aSRandall Stewart /* 6539f8829a4aSRandall Stewart * must stop processing the rest of the 6540f8829a4aSRandall Stewart * param's. Any report bits were handled 6541f8829a4aSRandall Stewart * with the call to 6542f8829a4aSRandall Stewart * sctp_arethere_unrecognized_parameters() 6543f8829a4aSRandall Stewart * when the INIT or INIT-ACK was first seen. 6544f8829a4aSRandall Stewart */ 6545f8829a4aSRandall Stewart break; 6546f8829a4aSRandall Stewart } 6547f8829a4aSRandall Stewart } 6548a99b6783SRandall Stewart 6549f8829a4aSRandall Stewart next_param: 6550f8829a4aSRandall Stewart offset += SCTP_SIZE32(plen); 6551f8829a4aSRandall Stewart if (offset >= limit) { 6552f8829a4aSRandall Stewart break; 6553f8829a4aSRandall Stewart } 6554f4358911SMichael Tuexen phdr = sctp_get_next_param(m, offset, ¶m_buf, 6555f4358911SMichael Tuexen sizeof(param_buf)); 6556f8829a4aSRandall Stewart } 6557f8829a4aSRandall Stewart /* Now check to see if we need to purge any addresses */ 65584a9ef3f8SMichael Tuexen TAILQ_FOREACH_SAFE(net, &stcb->asoc.nets, sctp_next, nnet) { 6559f8829a4aSRandall Stewart if ((net->dest_state & SCTP_ADDR_NOT_IN_ASSOC) == 6560f8829a4aSRandall Stewart SCTP_ADDR_NOT_IN_ASSOC) { 6561f8829a4aSRandall Stewart /* This address has been removed from the asoc */ 6562f8829a4aSRandall Stewart /* remove and free it */ 6563f8829a4aSRandall Stewart stcb->asoc.numnets--; 6564f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.nets, net, sctp_next); 65658b3d0f64SMichael Tuexen if (net == stcb->asoc.alternate) { 65668b3d0f64SMichael Tuexen sctp_free_remote_addr(stcb->asoc.alternate); 65678b3d0f64SMichael Tuexen stcb->asoc.alternate = NULL; 65688b3d0f64SMichael Tuexen } 6569f8829a4aSRandall Stewart if (net == stcb->asoc.primary_destination) { 6570f8829a4aSRandall Stewart stcb->asoc.primary_destination = NULL; 6571f8829a4aSRandall Stewart sctp_select_primary_destination(stcb); 6572f8829a4aSRandall Stewart } 65738b3d0f64SMichael Tuexen sctp_free_remote_addr(net); 6574f8829a4aSRandall Stewart } 6575f8829a4aSRandall Stewart } 6576c79bec9cSMichael Tuexen if ((stcb->asoc.ecn_supported == 1) && 6577c79bec9cSMichael Tuexen (peer_supports_ecn == 0)) { 6578c79bec9cSMichael Tuexen stcb->asoc.ecn_supported = 0; 6579f8829a4aSRandall Stewart } 6580c79bec9cSMichael Tuexen if ((stcb->asoc.prsctp_supported == 1) && 6581c79bec9cSMichael Tuexen (peer_supports_prsctp == 0)) { 6582c79bec9cSMichael Tuexen stcb->asoc.prsctp_supported = 0; 6583c79bec9cSMichael Tuexen } 6584c79bec9cSMichael Tuexen if ((stcb->asoc.auth_supported == 1) && 6585c79bec9cSMichael Tuexen ((peer_supports_auth == 0) || 6586c79bec9cSMichael Tuexen (got_random == 0) || (got_hmacs == 0))) { 6587c79bec9cSMichael Tuexen stcb->asoc.auth_supported = 0; 6588c79bec9cSMichael Tuexen } 6589c79bec9cSMichael Tuexen if ((stcb->asoc.asconf_supported == 1) && 6590c79bec9cSMichael Tuexen ((peer_supports_asconf == 0) || (peer_supports_asconf_ack == 0) || 6591c79bec9cSMichael Tuexen (stcb->asoc.auth_supported == 0) || 6592c79bec9cSMichael Tuexen (saw_asconf == 0) || (saw_asconf_ack == 0))) { 6593c79bec9cSMichael Tuexen stcb->asoc.asconf_supported = 0; 6594c79bec9cSMichael Tuexen } 6595c79bec9cSMichael Tuexen if ((stcb->asoc.reconfig_supported == 1) && 6596c79bec9cSMichael Tuexen (peer_supports_reconfig == 0)) { 6597c79bec9cSMichael Tuexen stcb->asoc.reconfig_supported = 0; 6598c79bec9cSMichael Tuexen } 659944249214SRandall Stewart if ((stcb->asoc.idata_supported == 1) && 660044249214SRandall Stewart (peer_supports_idata == 0)) { 660144249214SRandall Stewart stcb->asoc.idata_supported = 0; 660244249214SRandall Stewart } 6603c79bec9cSMichael Tuexen if ((stcb->asoc.nrsack_supported == 1) && 6604c79bec9cSMichael Tuexen (peer_supports_nrsack == 0)) { 6605c79bec9cSMichael Tuexen stcb->asoc.nrsack_supported = 0; 6606c79bec9cSMichael Tuexen } 6607c79bec9cSMichael Tuexen if ((stcb->asoc.pktdrop_supported == 1) && 6608c79bec9cSMichael Tuexen (peer_supports_pktdrop == 0)) { 6609c79bec9cSMichael Tuexen stcb->asoc.pktdrop_supported = 0; 6610c79bec9cSMichael Tuexen } 6611c79bec9cSMichael Tuexen /* validate authentication required parameters */ 6612c79bec9cSMichael Tuexen if ((peer_supports_auth == 0) && (got_chklist == 1)) { 66135e54f665SRandall Stewart /* peer does not support auth but sent a chunks list? */ 66145e54f665SRandall Stewart return (-31); 66155e54f665SRandall Stewart } 6616c79bec9cSMichael Tuexen if ((peer_supports_asconf == 1) && (peer_supports_auth == 0)) { 66175e54f665SRandall Stewart /* peer supports asconf but not auth? */ 66185e54f665SRandall Stewart return (-32); 6619c79bec9cSMichael Tuexen } else if ((peer_supports_asconf == 1) && 6620c79bec9cSMichael Tuexen (peer_supports_auth == 1) && 66212afb3e84SRandall Stewart ((saw_asconf == 0) || (saw_asconf_ack == 0))) { 66222afb3e84SRandall Stewart return (-33); 6623f8829a4aSRandall Stewart } 6624f8829a4aSRandall Stewart /* concatenate the full random key */ 6625a99b6783SRandall Stewart keylen = sizeof(*p_random) + random_len + sizeof(*hmacs) + hmacs_len; 6626a99b6783SRandall Stewart if (chunks != NULL) { 6627a99b6783SRandall Stewart keylen += sizeof(*chunks) + num_chunks; 6628a99b6783SRandall Stewart } 6629f42a358aSRandall Stewart new_key = sctp_alloc_key(keylen); 6630f42a358aSRandall Stewart if (new_key != NULL) { 6631f42a358aSRandall Stewart /* copy in the RANDOM */ 66325e54f665SRandall Stewart if (p_random != NULL) { 66335e54f665SRandall Stewart keylen = sizeof(*p_random) + random_len; 66345ba7f91fSMichael Tuexen memcpy(new_key->key, p_random, keylen); 663513500cbbSMichael Tuexen } else { 663613500cbbSMichael Tuexen keylen = 0; 6637f42a358aSRandall Stewart } 6638f8829a4aSRandall Stewart /* append in the AUTH chunks */ 6639f42a358aSRandall Stewart if (chunks != NULL) { 66405ba7f91fSMichael Tuexen memcpy(new_key->key + keylen, chunks, 6641f42a358aSRandall Stewart sizeof(*chunks) + num_chunks); 6642f42a358aSRandall Stewart keylen += sizeof(*chunks) + num_chunks; 6643f42a358aSRandall Stewart } 6644f8829a4aSRandall Stewart /* append in the HMACs */ 6645f42a358aSRandall Stewart if (hmacs != NULL) { 66465ba7f91fSMichael Tuexen memcpy(new_key->key + keylen, hmacs, 6647f42a358aSRandall Stewart sizeof(*hmacs) + hmacs_len); 6648f42a358aSRandall Stewart } 66495661a9edSMichael Tuexen } else { 66505e54f665SRandall Stewart /* failed to get memory for the key */ 66512afb3e84SRandall Stewart return (-34); 6652f8829a4aSRandall Stewart } 6653f8829a4aSRandall Stewart if (stcb->asoc.authinfo.peer_random != NULL) 6654f8829a4aSRandall Stewart sctp_free_key(stcb->asoc.authinfo.peer_random); 6655f8829a4aSRandall Stewart stcb->asoc.authinfo.peer_random = new_key; 6656f8829a4aSRandall Stewart sctp_clear_cachedkeys(stcb, stcb->asoc.authinfo.assoc_keyid); 6657f8829a4aSRandall Stewart sctp_clear_cachedkeys(stcb, stcb->asoc.authinfo.recv_keyid); 6658f8829a4aSRandall Stewart 6659f8829a4aSRandall Stewart return (0); 6660f8829a4aSRandall Stewart } 6661f8829a4aSRandall Stewart 6662f8829a4aSRandall Stewart int 6663f8829a4aSRandall Stewart sctp_set_primary_addr(struct sctp_tcb *stcb, struct sockaddr *sa, 6664f8829a4aSRandall Stewart struct sctp_nets *net) 6665f8829a4aSRandall Stewart { 6666f8829a4aSRandall Stewart /* make sure the requested primary address exists in the assoc */ 6667f8829a4aSRandall Stewart if (net == NULL && sa) 6668f8829a4aSRandall Stewart net = sctp_findnet(stcb, sa); 6669f8829a4aSRandall Stewart 6670f8829a4aSRandall Stewart if (net == NULL) { 6671f8829a4aSRandall Stewart /* didn't find the requested primary address! */ 6672f8829a4aSRandall Stewart return (-1); 6673f8829a4aSRandall Stewart } else { 6674f8829a4aSRandall Stewart /* set the primary address */ 6675f8829a4aSRandall Stewart if (net->dest_state & SCTP_ADDR_UNCONFIRMED) { 667642551e99SRandall Stewart /* Must be confirmed, so queue to set */ 667742551e99SRandall Stewart net->dest_state |= SCTP_ADDR_REQ_PRIMARY; 667842551e99SRandall Stewart return (0); 6679f8829a4aSRandall Stewart } 6680f8829a4aSRandall Stewart stcb->asoc.primary_destination = net; 6681ca85e948SMichael Tuexen if (!(net->dest_state & SCTP_ADDR_PF) && (stcb->asoc.alternate)) { 6682ca85e948SMichael Tuexen sctp_free_remote_addr(stcb->asoc.alternate); 6683ca85e948SMichael Tuexen stcb->asoc.alternate = NULL; 6684ca85e948SMichael Tuexen } 6685f8829a4aSRandall Stewart net = TAILQ_FIRST(&stcb->asoc.nets); 6686f8829a4aSRandall Stewart if (net != stcb->asoc.primary_destination) { 6687f8829a4aSRandall Stewart /* 6688f8829a4aSRandall Stewart * first one on the list is NOT the primary 6689b1ce21c6SRebecca Cran * sctp_cmpaddr() is much more efficient if the 6690f8829a4aSRandall Stewart * primary is the first on the list, make it so. 6691f8829a4aSRandall Stewart */ 6692f8829a4aSRandall Stewart TAILQ_REMOVE(&stcb->asoc.nets, stcb->asoc.primary_destination, sctp_next); 6693f8829a4aSRandall Stewart TAILQ_INSERT_HEAD(&stcb->asoc.nets, stcb->asoc.primary_destination, sctp_next); 6694f8829a4aSRandall Stewart } 6695f8829a4aSRandall Stewart return (0); 6696f8829a4aSRandall Stewart } 6697f8829a4aSRandall Stewart } 6698f8829a4aSRandall Stewart 6699f8829a4aSRandall Stewart int 67007215cc1bSMichael Tuexen sctp_is_vtag_good(uint32_t tag, uint16_t lport, uint16_t rport, struct timeval *now) 6701f8829a4aSRandall Stewart { 6702f8829a4aSRandall Stewart /* 6703f8829a4aSRandall Stewart * This function serves two purposes. It will see if a TAG can be 6704f8829a4aSRandall Stewart * re-used and return 1 for yes it is ok and 0 for don't use that 6705f8829a4aSRandall Stewart * tag. A secondary function it will do is purge out old tags that 6706f8829a4aSRandall Stewart * can be removed. 6707f8829a4aSRandall Stewart */ 6708f8829a4aSRandall Stewart struct sctpvtaghead *chain; 6709f8829a4aSRandall Stewart struct sctp_tagblock *twait_block; 6710830d754dSRandall Stewart struct sctpasochead *head; 6711f8829a4aSRandall Stewart struct sctp_tcb *stcb; 6712f8829a4aSRandall Stewart int i; 6713f8829a4aSRandall Stewart 6714830d754dSRandall Stewart SCTP_INP_INFO_RLOCK(); 6715b3f1ea41SRandall Stewart head = &SCTP_BASE_INFO(sctp_asochash)[SCTP_PCBHASH_ASOC(tag, 6716b3f1ea41SRandall Stewart SCTP_BASE_INFO(hashasocmark))]; 6717f8829a4aSRandall Stewart LIST_FOREACH(stcb, head, sctp_asocs) { 6718f8829a4aSRandall Stewart /* 6719830d754dSRandall Stewart * We choose not to lock anything here. TCB's can't be 6720830d754dSRandall Stewart * removed since we have the read lock, so they can't be 6721830d754dSRandall Stewart * freed on us, same thing for the INP. I may be wrong with 6722830d754dSRandall Stewart * this assumption, but we will go with it for now :-) 6723f8829a4aSRandall Stewart */ 6724830d754dSRandall Stewart if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) { 6725830d754dSRandall Stewart continue; 6726f8829a4aSRandall Stewart } 6727830d754dSRandall Stewart if (stcb->asoc.my_vtag == tag) { 6728f8829a4aSRandall Stewart /* candidate */ 6729830d754dSRandall Stewart if (stcb->rport != rport) { 6730830d754dSRandall Stewart continue; 6731830d754dSRandall Stewart } 6732830d754dSRandall Stewart if (stcb->sctp_ep->sctp_lport != lport) { 6733830d754dSRandall Stewart continue; 6734830d754dSRandall Stewart } 6735830d754dSRandall Stewart /* Its a used tag set */ 6736606c58dbSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 6737f8829a4aSRandall Stewart return (0); 6738f8829a4aSRandall Stewart } 6739f8829a4aSRandall Stewart } 6740f5366806SMichael Tuexen chain = &SCTP_BASE_INFO(vtag_timewait)[(tag % SCTP_STACK_VTAG_HASH_SIZE)]; 6741f8829a4aSRandall Stewart /* Now what about timed wait ? */ 674256f778aaSMichael Tuexen LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) { 6743f8829a4aSRandall Stewart /* 6744f8829a4aSRandall Stewart * Block(s) are present, lets see if we have this tag in the 6745f8829a4aSRandall Stewart * list 6746f8829a4aSRandall Stewart */ 6747f8829a4aSRandall Stewart for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) { 6748f8829a4aSRandall Stewart if (twait_block->vtag_block[i].v_tag == 0) { 6749f8829a4aSRandall Stewart /* not used */ 6750f8829a4aSRandall Stewart continue; 6751fb8fb8f8SRandall Stewart } else if ((long)twait_block->vtag_block[i].tv_sec_at_expire < 6752f8829a4aSRandall Stewart now->tv_sec) { 6753f8829a4aSRandall Stewart /* Audit expires this guy */ 6754f8829a4aSRandall Stewart twait_block->vtag_block[i].tv_sec_at_expire = 0; 6755f8829a4aSRandall Stewart twait_block->vtag_block[i].v_tag = 0; 6756a99b6783SRandall Stewart twait_block->vtag_block[i].lport = 0; 6757a99b6783SRandall Stewart twait_block->vtag_block[i].rport = 0; 6758830d754dSRandall Stewart } else if ((twait_block->vtag_block[i].v_tag == tag) && 6759830d754dSRandall Stewart (twait_block->vtag_block[i].lport == lport) && 6760830d754dSRandall Stewart (twait_block->vtag_block[i].rport == rport)) { 6761f8829a4aSRandall Stewart /* Bad tag, sorry :< */ 6762606c58dbSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 6763f8829a4aSRandall Stewart return (0); 6764f8829a4aSRandall Stewart } 6765f8829a4aSRandall Stewart } 6766f8829a4aSRandall Stewart } 6767830d754dSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 6768f8829a4aSRandall Stewart return (1); 6769f8829a4aSRandall Stewart } 6770f8829a4aSRandall Stewart 6771f8829a4aSRandall Stewart static void 67727215cc1bSMichael Tuexen sctp_drain_mbufs(struct sctp_tcb *stcb) 6773f8829a4aSRandall Stewart { 6774f8829a4aSRandall Stewart /* 6775f8829a4aSRandall Stewart * We must hunt this association for MBUF's past the cumack (i.e. 6776f8829a4aSRandall Stewart * out of order data that we can renege on). 6777f8829a4aSRandall Stewart */ 6778f8829a4aSRandall Stewart struct sctp_association *asoc; 6779f8829a4aSRandall Stewart struct sctp_tmit_chunk *chk, *nchk; 6780b5c16493SMichael Tuexen uint32_t cumulative_tsn_p1; 678128cd0699SMichael Tuexen struct sctp_queued_to_read *control, *ncontrol; 6782b5c16493SMichael Tuexen int cnt, strmat; 6783b5c16493SMichael Tuexen uint32_t gap, i; 6784b5c16493SMichael Tuexen int fnd = 0; 6785f8829a4aSRandall Stewart 6786f8829a4aSRandall Stewart /* We look for anything larger than the cum-ack + 1 */ 6787f8829a4aSRandall Stewart 6788f8829a4aSRandall Stewart asoc = &stcb->asoc; 6789f8829a4aSRandall Stewart if (asoc->cumulative_tsn == asoc->highest_tsn_inside_map) { 6790f8829a4aSRandall Stewart /* none we can reneg on. */ 6791f8829a4aSRandall Stewart return; 6792f8829a4aSRandall Stewart } 6793a5d547adSRandall Stewart SCTP_STAT_INCR(sctps_protocol_drains_done); 6794f8829a4aSRandall Stewart cumulative_tsn_p1 = asoc->cumulative_tsn + 1; 6795f8829a4aSRandall Stewart cnt = 0; 6796f8829a4aSRandall Stewart /* Ok that was fun, now we will drain all the inbound streams? */ 6797f8829a4aSRandall Stewart for (strmat = 0; strmat < asoc->streamincnt; strmat++) { 679828cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(control, &asoc->strmin[strmat].inqueue, next_instrm, ncontrol) { 6799d1ea5fa9SMichael Tuexen #ifdef INVARIANTS 680028cd0699SMichael Tuexen if (control->on_strm_q != SCTP_ON_ORDERED) { 6801d1ea5fa9SMichael Tuexen panic("Huh control: %p on_q: %d -- not ordered?", 680228cd0699SMichael Tuexen control, control->on_strm_q); 6803d1ea5fa9SMichael Tuexen } 6804d1ea5fa9SMichael Tuexen #endif 680528cd0699SMichael Tuexen if (SCTP_TSN_GT(control->sinfo_tsn, cumulative_tsn_p1)) { 6806f8829a4aSRandall Stewart /* Yep it is above cum-ack */ 6807f8829a4aSRandall Stewart cnt++; 680828cd0699SMichael Tuexen SCTP_CALC_TSN_TO_GAP(gap, control->sinfo_tsn, asoc->mapping_array_base_tsn); 680928cd0699SMichael Tuexen KASSERT(control->length > 0, ("control has zero length")); 681028cd0699SMichael Tuexen if (asoc->size_on_all_streams >= control->length) { 681128cd0699SMichael Tuexen asoc->size_on_all_streams -= control->length; 681228cd0699SMichael Tuexen } else { 6813d1ea5fa9SMichael Tuexen #ifdef INVARIANTS 681428cd0699SMichael Tuexen panic("size_on_all_streams = %u smaller than control length %u", asoc->size_on_all_streams, control->length); 681528cd0699SMichael Tuexen #else 681628cd0699SMichael Tuexen asoc->size_on_all_streams = 0; 6817d1ea5fa9SMichael Tuexen #endif 681828cd0699SMichael Tuexen } 681944249214SRandall Stewart sctp_ucount_decr(asoc->cnt_on_all_streams); 682044249214SRandall Stewart SCTP_UNSET_TSN_PRESENT(asoc->mapping_array, gap); 682128cd0699SMichael Tuexen if (control->on_read_q) { 682228cd0699SMichael Tuexen TAILQ_REMOVE(&stcb->sctp_ep->read_queue, control, next); 682328cd0699SMichael Tuexen control->on_read_q = 0; 6824d1ea5fa9SMichael Tuexen } 682528cd0699SMichael Tuexen TAILQ_REMOVE(&asoc->strmin[strmat].inqueue, control, next_instrm); 682628cd0699SMichael Tuexen control->on_strm_q = 0; 682728cd0699SMichael Tuexen if (control->data) { 682828cd0699SMichael Tuexen sctp_m_freem(control->data); 682928cd0699SMichael Tuexen control->data = NULL; 683044249214SRandall Stewart } 683128cd0699SMichael Tuexen sctp_free_remote_addr(control->whoFrom); 683244249214SRandall Stewart /* Now its reasm? */ 683328cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &control->reasm, sctp_next, nchk) { 683444249214SRandall Stewart cnt++; 683549656eefSMichael Tuexen SCTP_CALC_TSN_TO_GAP(gap, chk->rec.data.tsn, asoc->mapping_array_base_tsn); 683628cd0699SMichael Tuexen KASSERT(chk->send_size > 0, ("chunk has zero length")); 683728cd0699SMichael Tuexen if (asoc->size_on_reasm_queue >= chk->send_size) { 683828cd0699SMichael Tuexen asoc->size_on_reasm_queue -= chk->send_size; 683928cd0699SMichael Tuexen } else { 684028cd0699SMichael Tuexen #ifdef INVARIANTS 684128cd0699SMichael Tuexen panic("size_on_reasm_queue = %u smaller than chunk length %u", asoc->size_on_reasm_queue, chk->send_size); 684228cd0699SMichael Tuexen #else 684328cd0699SMichael Tuexen asoc->size_on_reasm_queue = 0; 684428cd0699SMichael Tuexen #endif 684528cd0699SMichael Tuexen } 684644249214SRandall Stewart sctp_ucount_decr(asoc->cnt_on_reasm_queue); 684744249214SRandall Stewart SCTP_UNSET_TSN_PRESENT(asoc->mapping_array, gap); 684828cd0699SMichael Tuexen TAILQ_REMOVE(&control->reasm, chk, sctp_next); 684944249214SRandall Stewart if (chk->data) { 685044249214SRandall Stewart sctp_m_freem(chk->data); 685144249214SRandall Stewart chk->data = NULL; 685244249214SRandall Stewart } 685344249214SRandall Stewart sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED); 685444249214SRandall Stewart } 685528cd0699SMichael Tuexen sctp_free_a_readq(stcb, control); 685628cd0699SMichael Tuexen } 685728cd0699SMichael Tuexen } 685828cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(control, &asoc->strmin[strmat].uno_inqueue, next_instrm, ncontrol) { 685928cd0699SMichael Tuexen #ifdef INVARIANTS 686028cd0699SMichael Tuexen if (control->on_strm_q != SCTP_ON_UNORDERED) { 686128cd0699SMichael Tuexen panic("Huh control: %p on_q: %d -- not unordered?", 686228cd0699SMichael Tuexen control, control->on_strm_q); 686328cd0699SMichael Tuexen } 686428cd0699SMichael Tuexen #endif 686528cd0699SMichael Tuexen if (SCTP_TSN_GT(control->sinfo_tsn, cumulative_tsn_p1)) { 686628cd0699SMichael Tuexen /* Yep it is above cum-ack */ 686728cd0699SMichael Tuexen cnt++; 686828cd0699SMichael Tuexen SCTP_CALC_TSN_TO_GAP(gap, control->sinfo_tsn, asoc->mapping_array_base_tsn); 686928cd0699SMichael Tuexen KASSERT(control->length > 0, ("control has zero length")); 687028cd0699SMichael Tuexen if (asoc->size_on_all_streams >= control->length) { 687128cd0699SMichael Tuexen asoc->size_on_all_streams -= control->length; 687228cd0699SMichael Tuexen } else { 687328cd0699SMichael Tuexen #ifdef INVARIANTS 687428cd0699SMichael Tuexen panic("size_on_all_streams = %u smaller than control length %u", asoc->size_on_all_streams, control->length); 687528cd0699SMichael Tuexen #else 687628cd0699SMichael Tuexen asoc->size_on_all_streams = 0; 687728cd0699SMichael Tuexen #endif 687828cd0699SMichael Tuexen } 687928cd0699SMichael Tuexen sctp_ucount_decr(asoc->cnt_on_all_streams); 688028cd0699SMichael Tuexen SCTP_UNSET_TSN_PRESENT(asoc->mapping_array, gap); 688128cd0699SMichael Tuexen if (control->on_read_q) { 688228cd0699SMichael Tuexen TAILQ_REMOVE(&stcb->sctp_ep->read_queue, control, next); 688328cd0699SMichael Tuexen control->on_read_q = 0; 688428cd0699SMichael Tuexen } 688528cd0699SMichael Tuexen TAILQ_REMOVE(&asoc->strmin[strmat].uno_inqueue, control, next_instrm); 688628cd0699SMichael Tuexen control->on_strm_q = 0; 688728cd0699SMichael Tuexen if (control->data) { 688828cd0699SMichael Tuexen sctp_m_freem(control->data); 688928cd0699SMichael Tuexen control->data = NULL; 689028cd0699SMichael Tuexen } 689128cd0699SMichael Tuexen sctp_free_remote_addr(control->whoFrom); 689228cd0699SMichael Tuexen /* Now its reasm? */ 689328cd0699SMichael Tuexen TAILQ_FOREACH_SAFE(chk, &control->reasm, sctp_next, nchk) { 689428cd0699SMichael Tuexen cnt++; 689528cd0699SMichael Tuexen SCTP_CALC_TSN_TO_GAP(gap, chk->rec.data.tsn, asoc->mapping_array_base_tsn); 689628cd0699SMichael Tuexen KASSERT(chk->send_size > 0, ("chunk has zero length")); 689728cd0699SMichael Tuexen if (asoc->size_on_reasm_queue >= chk->send_size) { 689828cd0699SMichael Tuexen asoc->size_on_reasm_queue -= chk->send_size; 689928cd0699SMichael Tuexen } else { 690028cd0699SMichael Tuexen #ifdef INVARIANTS 690128cd0699SMichael Tuexen panic("size_on_reasm_queue = %u smaller than chunk length %u", asoc->size_on_reasm_queue, chk->send_size); 690228cd0699SMichael Tuexen #else 690328cd0699SMichael Tuexen asoc->size_on_reasm_queue = 0; 690428cd0699SMichael Tuexen #endif 690528cd0699SMichael Tuexen } 690628cd0699SMichael Tuexen sctp_ucount_decr(asoc->cnt_on_reasm_queue); 690728cd0699SMichael Tuexen SCTP_UNSET_TSN_PRESENT(asoc->mapping_array, gap); 690828cd0699SMichael Tuexen TAILQ_REMOVE(&control->reasm, chk, sctp_next); 690928cd0699SMichael Tuexen if (chk->data) { 691028cd0699SMichael Tuexen sctp_m_freem(chk->data); 691128cd0699SMichael Tuexen chk->data = NULL; 691228cd0699SMichael Tuexen } 691328cd0699SMichael Tuexen sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED); 691428cd0699SMichael Tuexen } 691528cd0699SMichael Tuexen sctp_free_a_readq(stcb, control); 6916f8829a4aSRandall Stewart } 6917f8829a4aSRandall Stewart } 6918f8829a4aSRandall Stewart } 6919b5c16493SMichael Tuexen if (cnt) { 6920b5c16493SMichael Tuexen /* We must back down to see what the new highest is */ 692120b07a4dSMichael Tuexen for (i = asoc->highest_tsn_inside_map; SCTP_TSN_GE(i, asoc->mapping_array_base_tsn); i--) { 6922b5c16493SMichael Tuexen SCTP_CALC_TSN_TO_GAP(gap, i, asoc->mapping_array_base_tsn); 6923b5c16493SMichael Tuexen if (SCTP_IS_TSN_PRESENT(asoc->mapping_array, gap)) { 6924b5c16493SMichael Tuexen asoc->highest_tsn_inside_map = i; 6925b5c16493SMichael Tuexen fnd = 1; 6926b5c16493SMichael Tuexen break; 6927b5c16493SMichael Tuexen } 6928b5c16493SMichael Tuexen } 6929b5c16493SMichael Tuexen if (!fnd) { 6930b5c16493SMichael Tuexen asoc->highest_tsn_inside_map = asoc->mapping_array_base_tsn - 1; 6931b5c16493SMichael Tuexen } 69320053ed28SMichael Tuexen 6933f8829a4aSRandall Stewart /* 6934b5c16493SMichael Tuexen * Question, should we go through the delivery queue? The 6935b5c16493SMichael Tuexen * only reason things are on here is the app not reading OR 6936b5c16493SMichael Tuexen * a p-d-api up. An attacker COULD send enough in to 6937b5c16493SMichael Tuexen * initiate the PD-API and then send a bunch of stuff to 6938b5c16493SMichael Tuexen * other streams... these would wind up on the delivery 6939b5c16493SMichael Tuexen * queue.. and then we would not get to them. But in order 6940b5c16493SMichael Tuexen * to do this I then have to back-track and un-deliver 6941b5c16493SMichael Tuexen * sequence numbers in streams.. el-yucko. I think for now 6942b5c16493SMichael Tuexen * we will NOT look at the delivery queue and leave it to be 6943b5c16493SMichael Tuexen * something to consider later. An alternative would be to 6944b5c16493SMichael Tuexen * abort the P-D-API with a notification and then deliver 6945b5c16493SMichael Tuexen * the data.... Or another method might be to keep track of 6946b5c16493SMichael Tuexen * how many times the situation occurs and if we see a 6947b5c16493SMichael Tuexen * possible attack underway just abort the association. 6948f8829a4aSRandall Stewart */ 6949f8829a4aSRandall Stewart #ifdef SCTP_DEBUG 6950ad81507eSRandall Stewart SCTPDBG(SCTP_DEBUG_PCB1, "Freed %d chunks from reneg harvest\n", cnt); 6951ad81507eSRandall Stewart #endif 6952f8829a4aSRandall Stewart /* 6953f8829a4aSRandall Stewart * Now do we need to find a new 6954f8829a4aSRandall Stewart * asoc->highest_tsn_inside_map? 6955f8829a4aSRandall Stewart */ 6956f8829a4aSRandall Stewart asoc->last_revoke_count = cnt; 69575555400aSMichael Tuexen sctp_timer_stop(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, NULL, 69586a34ec63SMichael Tuexen SCTP_FROM_SCTP_PCB + SCTP_LOC_11); 695904ee05e8SRandall Stewart /* sa_ignore NO_NULL_CHK */ 6960689e6a5fSMichael Tuexen sctp_send_sack(stcb, SCTP_SO_NOT_LOCKED); 6961ceaad40aSRandall Stewart sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_DRAIN, SCTP_SO_NOT_LOCKED); 6962f8829a4aSRandall Stewart } 6963f8829a4aSRandall Stewart /* 6964f8829a4aSRandall Stewart * Another issue, in un-setting the TSN's in the mapping array we 6965034b88b0SMichael Tuexen * DID NOT adjust the highest_tsn marker. This will cause one of 6966034b88b0SMichael Tuexen * two things to occur. It may cause us to do extra work in checking 6967034b88b0SMichael Tuexen * for our mapping array movement. More importantly it may cause us 6968034b88b0SMichael Tuexen * to SACK every datagram. This may not be a bad thing though since 6969034b88b0SMichael Tuexen * we will recover once we get our cum-ack above and all this stuff 6970034b88b0SMichael Tuexen * we dumped recovered. 6971f8829a4aSRandall Stewart */ 6972f8829a4aSRandall Stewart } 6973f8829a4aSRandall Stewart 6974f8829a4aSRandall Stewart void 6975f8829a4aSRandall Stewart sctp_drain() 6976f8829a4aSRandall Stewart { 6977f8829a4aSRandall Stewart /* 6978f8829a4aSRandall Stewart * We must walk the PCB lists for ALL associations here. The system 6979f8829a4aSRandall Stewart * is LOW on MBUF's and needs help. This is where reneging will 6980f8829a4aSRandall Stewart * occur. We really hope this does NOT happen! 6981f8829a4aSRandall Stewart */ 69828518270eSMichael Tuexen VNET_ITERATOR_DECL(vnet_iter); 69838518270eSMichael Tuexen VNET_LIST_RLOCK_NOSLEEP(); 69848518270eSMichael Tuexen VNET_FOREACH(vnet_iter) { 69858518270eSMichael Tuexen CURVNET_SET(vnet_iter); 6986f8829a4aSRandall Stewart struct sctp_inpcb *inp; 6987f8829a4aSRandall Stewart struct sctp_tcb *stcb; 6988f8829a4aSRandall Stewart 69894b6492f5SMichael Tuexen SCTP_STAT_INCR(sctps_protocol_drain_calls); 69904b6492f5SMichael Tuexen if (SCTP_BASE_SYSCTL(sctp_do_drain) == 0) { 69914b6492f5SMichael Tuexen #ifdef VIMAGE 69924b6492f5SMichael Tuexen continue; 69934b6492f5SMichael Tuexen #else 69944b6492f5SMichael Tuexen return; 69954b6492f5SMichael Tuexen #endif 69964b6492f5SMichael Tuexen } 6997f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 6998b3f1ea41SRandall Stewart LIST_FOREACH(inp, &SCTP_BASE_INFO(listhead), sctp_list) { 6999f8829a4aSRandall Stewart /* For each endpoint */ 7000f8829a4aSRandall Stewart SCTP_INP_RLOCK(inp); 7001f8829a4aSRandall Stewart LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) { 7002f8829a4aSRandall Stewart /* For each association */ 7003f8829a4aSRandall Stewart SCTP_TCB_LOCK(stcb); 70047215cc1bSMichael Tuexen sctp_drain_mbufs(stcb); 7005f8829a4aSRandall Stewart SCTP_TCB_UNLOCK(stcb); 7006f8829a4aSRandall Stewart } 7007f8829a4aSRandall Stewart SCTP_INP_RUNLOCK(inp); 7008f8829a4aSRandall Stewart } 7009f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 70108518270eSMichael Tuexen CURVNET_RESTORE(); 70118518270eSMichael Tuexen } 70128518270eSMichael Tuexen VNET_LIST_RUNLOCK_NOSLEEP(); 7013f8829a4aSRandall Stewart } 7014f8829a4aSRandall Stewart 7015f8829a4aSRandall Stewart /* 7016f8829a4aSRandall Stewart * start a new iterator 7017f8829a4aSRandall Stewart * iterates through all endpoints and associations based on the pcb_state 7018f8829a4aSRandall Stewart * flags and asoc_state. "af" (mandatory) is executed for all matching 7019f8829a4aSRandall Stewart * assocs and "ef" (optional) is executed when the iterator completes. 7020f8829a4aSRandall Stewart * "inpf" (optional) is executed for each new endpoint as it is being 7021bff64a4dSRandall Stewart * iterated through. inpe (optional) is called when the inp completes 7022bff64a4dSRandall Stewart * its way through all the stcbs. 7023f8829a4aSRandall Stewart */ 7024f8829a4aSRandall Stewart int 702542551e99SRandall Stewart sctp_initiate_iterator(inp_func inpf, 702642551e99SRandall Stewart asoc_func af, 702742551e99SRandall Stewart inp_func inpe, 702842551e99SRandall Stewart uint32_t pcb_state, 702942551e99SRandall Stewart uint32_t pcb_features, 703042551e99SRandall Stewart uint32_t asoc_state, 703142551e99SRandall Stewart void *argp, 703242551e99SRandall Stewart uint32_t argi, 703342551e99SRandall Stewart end_func ef, 703442551e99SRandall Stewart struct sctp_inpcb *s_inp, 703542551e99SRandall Stewart uint8_t chunk_output_off) 7036f8829a4aSRandall Stewart { 7037f8829a4aSRandall Stewart struct sctp_iterator *it = NULL; 7038f8829a4aSRandall Stewart 7039f8829a4aSRandall Stewart if (af == NULL) { 7040f8829a4aSRandall Stewart return (-1); 7041f8829a4aSRandall Stewart } 70422b1c7de4SMichael Tuexen if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) { 70432b1c7de4SMichael Tuexen SCTP_PRINTF("%s: abort on initialize being %d\n", __func__, 70442b1c7de4SMichael Tuexen SCTP_BASE_VAR(sctp_pcb_initialized)); 70452b1c7de4SMichael Tuexen return (-1); 70462b1c7de4SMichael Tuexen } 7047f8829a4aSRandall Stewart SCTP_MALLOC(it, struct sctp_iterator *, sizeof(struct sctp_iterator), 7048207304d4SRandall Stewart SCTP_M_ITER); 7049f8829a4aSRandall Stewart if (it == NULL) { 7050c4739e2fSRandall Stewart SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOMEM); 70514b66d476SMichael Tuexen return (-1); 7052f8829a4aSRandall Stewart } 7053f8829a4aSRandall Stewart memset(it, 0, sizeof(*it)); 7054f8829a4aSRandall Stewart it->function_assoc = af; 7055f8829a4aSRandall Stewart it->function_inp = inpf; 705642551e99SRandall Stewart if (inpf) 705742551e99SRandall Stewart it->done_current_ep = 0; 705842551e99SRandall Stewart else 705942551e99SRandall Stewart it->done_current_ep = 1; 7060f8829a4aSRandall Stewart it->function_atend = ef; 7061f8829a4aSRandall Stewart it->pointer = argp; 7062f8829a4aSRandall Stewart it->val = argi; 7063f8829a4aSRandall Stewart it->pcb_flags = pcb_state; 7064f8829a4aSRandall Stewart it->pcb_features = pcb_features; 7065f8829a4aSRandall Stewart it->asoc_state = asoc_state; 706642551e99SRandall Stewart it->function_inp_end = inpe; 7067f8829a4aSRandall Stewart it->no_chunk_output = chunk_output_off; 7068f7517433SRandall Stewart it->vn = curvnet; 7069f8829a4aSRandall Stewart if (s_inp) { 7070ec4c19fcSRandall Stewart /* Assume lock is held here */ 7071f8829a4aSRandall Stewart it->inp = s_inp; 7072ec4c19fcSRandall Stewart SCTP_INP_INCR_REF(it->inp); 7073f8829a4aSRandall Stewart it->iterator_flags = SCTP_ITERATOR_DO_SINGLE_INP; 7074f8829a4aSRandall Stewart } else { 7075f8829a4aSRandall Stewart SCTP_INP_INFO_RLOCK(); 7076b3f1ea41SRandall Stewart it->inp = LIST_FIRST(&SCTP_BASE_INFO(listhead)); 7077ec4c19fcSRandall Stewart if (it->inp) { 7078ec4c19fcSRandall Stewart SCTP_INP_INCR_REF(it->inp); 7079ec4c19fcSRandall Stewart } 7080f8829a4aSRandall Stewart SCTP_INP_INFO_RUNLOCK(); 7081f8829a4aSRandall Stewart it->iterator_flags = SCTP_ITERATOR_DO_ALL_INP; 7082f8829a4aSRandall Stewart } 708342551e99SRandall Stewart SCTP_IPI_ITERATOR_WQ_LOCK(); 70842b1c7de4SMichael Tuexen if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) { 70852b1c7de4SMichael Tuexen SCTP_IPI_ITERATOR_WQ_UNLOCK(); 70862b1c7de4SMichael Tuexen SCTP_PRINTF("%s: rollback on initialize being %d it=%p\n", __func__, 70872b1c7de4SMichael Tuexen SCTP_BASE_VAR(sctp_pcb_initialized), it); 70882b1c7de4SMichael Tuexen SCTP_FREE(it, SCTP_M_ITER); 70892b1c7de4SMichael Tuexen return (-1); 70902b1c7de4SMichael Tuexen } 7091f7517433SRandall Stewart TAILQ_INSERT_TAIL(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr); 7092f7517433SRandall Stewart if (sctp_it_ctl.iterator_running == 0) { 709342551e99SRandall Stewart sctp_wakeup_iterator(); 709442551e99SRandall Stewart } 709542551e99SRandall Stewart SCTP_IPI_ITERATOR_WQ_UNLOCK(); 70963c503c28SRandall Stewart /* sa_ignore MEMLEAK {memory is put on the tailq for the iterator} */ 7097f8829a4aSRandall Stewart return (0); 7098f8829a4aSRandall Stewart } 7099