xref: /freebsd/sys/netinet/sctp_pcb.c (revision b27a6b7d735680e373a3889d3f4a2af3697a89a4)
1f8829a4aSRandall Stewart /*-
2b1006367SRandall Stewart  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3f8829a4aSRandall Stewart  *
4f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
5f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
6f8829a4aSRandall Stewart  *
7f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
8f8829a4aSRandall Stewart  *   this list of conditions and the following disclaimer.
9f8829a4aSRandall Stewart  *
10f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
11f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
12f8829a4aSRandall Stewart  *   the documentation and/or other materials provided with the distribution.
13f8829a4aSRandall Stewart  *
14f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
15f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
16f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
17f8829a4aSRandall Stewart  *
18f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
19f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
20f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
22f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
28f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
29f8829a4aSRandall Stewart  */
30f8829a4aSRandall Stewart 
31f8829a4aSRandall Stewart /* $KAME: sctp_pcb.c,v 1.38 2005/03/06 16:04:18 itojun Exp $	 */
32f8829a4aSRandall Stewart 
33f8829a4aSRandall Stewart #include <sys/cdefs.h>
34f8829a4aSRandall Stewart __FBSDID("$FreeBSD$");
35f8829a4aSRandall Stewart 
36f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
3793164cf9SRandall Stewart #include <sys/proc.h>
38f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
3942551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
40f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
41f8829a4aSRandall Stewart #include <netinet/sctputil.h>
42f8829a4aSRandall Stewart #include <netinet/sctp.h>
43f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
44f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
45f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
46f8829a4aSRandall Stewart #include <netinet/sctp_timer.h>
4742551e99SRandall Stewart #include <netinet/sctp_bsd_addr.h>
48f8829a4aSRandall Stewart 
49f8829a4aSRandall Stewart 
50f8829a4aSRandall Stewart struct sctp_epinfo sctppcbinfo;
51f8829a4aSRandall Stewart 
52f8829a4aSRandall Stewart /* FIX: we don't handle multiple link local scopes */
53f8829a4aSRandall Stewart /* "scopeless" replacement IN6_ARE_ADDR_EQUAL */
54f8829a4aSRandall Stewart int
55f8829a4aSRandall Stewart SCTP6_ARE_ADDR_EQUAL(struct in6_addr *a, struct in6_addr *b)
56f8829a4aSRandall Stewart {
57f8829a4aSRandall Stewart 	struct in6_addr tmp_a, tmp_b;
58f8829a4aSRandall Stewart 
59f8829a4aSRandall Stewart 	/* use a copy of a and b */
60f8829a4aSRandall Stewart 	tmp_a = *a;
61f8829a4aSRandall Stewart 	tmp_b = *b;
62f8829a4aSRandall Stewart 	in6_clearscope(&tmp_a);
63f8829a4aSRandall Stewart 	in6_clearscope(&tmp_b);
64f8829a4aSRandall Stewart 	return (IN6_ARE_ADDR_EQUAL(&tmp_a, &tmp_b));
65f8829a4aSRandall Stewart }
66f8829a4aSRandall Stewart 
67f8829a4aSRandall Stewart void
68f8829a4aSRandall Stewart sctp_fill_pcbinfo(struct sctp_pcbinfo *spcb)
69f8829a4aSRandall Stewart {
70f8829a4aSRandall Stewart 	/*
71f8829a4aSRandall Stewart 	 * We really don't need to lock this, but I will just because it
72f8829a4aSRandall Stewart 	 * does not hurt.
73f8829a4aSRandall Stewart 	 */
74f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
75f8829a4aSRandall Stewart 	spcb->ep_count = sctppcbinfo.ipi_count_ep;
76f8829a4aSRandall Stewart 	spcb->asoc_count = sctppcbinfo.ipi_count_asoc;
77f8829a4aSRandall Stewart 	spcb->laddr_count = sctppcbinfo.ipi_count_laddr;
78f8829a4aSRandall Stewart 	spcb->raddr_count = sctppcbinfo.ipi_count_raddr;
79f8829a4aSRandall Stewart 	spcb->chk_count = sctppcbinfo.ipi_count_chunk;
80f8829a4aSRandall Stewart 	spcb->readq_count = sctppcbinfo.ipi_count_readq;
81f8829a4aSRandall Stewart 	spcb->stream_oque = sctppcbinfo.ipi_count_strmoq;
82f8829a4aSRandall Stewart 	spcb->free_chunks = sctppcbinfo.ipi_free_chunks;
83f8829a4aSRandall Stewart 
84f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
85f8829a4aSRandall Stewart }
86f8829a4aSRandall Stewart 
8742551e99SRandall Stewart /*
8842551e99SRandall Stewart  * Addresses are added to VRF's (Virtual Router's). For BSD we
8942551e99SRandall Stewart  * have only the default VRF 0. We maintain a hash list of
9042551e99SRandall Stewart  * VRF's. Each VRF has its own list of sctp_ifn's. Each of
9142551e99SRandall Stewart  * these has a list of addresses. When we add a new address
9242551e99SRandall Stewart  * to a VRF we lookup the ifn/ifn_index, if the ifn does
9342551e99SRandall Stewart  * not exist we create it and add it to the list of IFN's
9442551e99SRandall Stewart  * within the VRF. Once we have the sctp_ifn, we add the
9542551e99SRandall Stewart  * address to the list. So we look something like:
9642551e99SRandall Stewart  *
9742551e99SRandall Stewart  * hash-vrf-table
9842551e99SRandall Stewart  *   vrf-> ifn-> ifn -> ifn
9942551e99SRandall Stewart  *   vrf    |
10042551e99SRandall Stewart  *    ...   +--ifa-> ifa -> ifa
10142551e99SRandall Stewart  *   vrf
10242551e99SRandall Stewart  *
10342551e99SRandall Stewart  * We keep these seperate lists since the SCTP subsystem will
10442551e99SRandall Stewart  * point to these from its source address selection nets structure.
10542551e99SRandall Stewart  * When an address is deleted it does not happen right away on
10642551e99SRandall Stewart  * the SCTP side, it gets scheduled. What we do when a
10742551e99SRandall Stewart  * delete happens is immediately remove the address from
10842551e99SRandall Stewart  * the master list and decrement the refcount. As our
10942551e99SRandall Stewart  * addip iterator works through and frees the src address
11042551e99SRandall Stewart  * selection pointing to the sctp_ifa, eventually the refcount
11142551e99SRandall Stewart  * will reach 0 and we will delete it. Note that it is assumed
11242551e99SRandall Stewart  * that any locking on system level ifn/ifa is done at the
11342551e99SRandall Stewart  * caller of these functions and these routines will only
11442551e99SRandall Stewart  * lock the SCTP structures as they add or delete things.
11542551e99SRandall Stewart  *
11642551e99SRandall Stewart  * Other notes on VRF concepts.
11742551e99SRandall Stewart  *  - An endpoint can be in multiple VRF's
11842551e99SRandall Stewart  *  - An association lives within a VRF and only one VRF.
11942551e99SRandall Stewart  *  - Any incoming packet we can deduce the VRF for by
12042551e99SRandall Stewart  *    looking at the mbuf/pak inbound (for BSD its VRF=0 :D)
12142551e99SRandall Stewart  *  - Any downward send call or connect call must supply the
12242551e99SRandall Stewart  *    VRF via ancillary data or via some sort of set default
12342551e99SRandall Stewart  *    VRF socket option call (again for BSD no brainer since
12442551e99SRandall Stewart  *    the VRF is always 0).
12542551e99SRandall Stewart  *  - An endpoint may add multiple VRF's to it.
12642551e99SRandall Stewart  *  - Listening sockets can accept associations in any
12742551e99SRandall Stewart  *    of the VRF's they are in but the assoc will end up
12842551e99SRandall Stewart  *    in only one VRF (gotten from the packet or connect/send).
12942551e99SRandall Stewart  *
13042551e99SRandall Stewart  */
13142551e99SRandall Stewart 
13242551e99SRandall Stewart struct sctp_vrf *
13317205eccSRandall Stewart sctp_allocate_vrf(int vrf_id)
13442551e99SRandall Stewart {
13542551e99SRandall Stewart 	struct sctp_vrf *vrf = NULL;
13642551e99SRandall Stewart 	struct sctp_vrflist *bucket;
13742551e99SRandall Stewart 
13842551e99SRandall Stewart 	/* First allocate the VRF structure */
13917205eccSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
14042551e99SRandall Stewart 	if (vrf) {
14142551e99SRandall Stewart 		/* Already allocated */
14242551e99SRandall Stewart 		return (vrf);
14342551e99SRandall Stewart 	}
14442551e99SRandall Stewart 	SCTP_MALLOC(vrf, struct sctp_vrf *, sizeof(struct sctp_vrf),
145207304d4SRandall Stewart 	    SCTP_M_VRF);
14642551e99SRandall Stewart 	if (vrf == NULL) {
14742551e99SRandall Stewart 		/* No memory */
14842551e99SRandall Stewart #ifdef INVARIANTS
14917205eccSRandall Stewart 		panic("No memory for VRF:%d", vrf_id);
15042551e99SRandall Stewart #endif
15142551e99SRandall Stewart 		return (NULL);
15242551e99SRandall Stewart 	}
15342551e99SRandall Stewart 	/* setup the VRF */
15442551e99SRandall Stewart 	memset(vrf, 0, sizeof(struct sctp_vrf));
15517205eccSRandall Stewart 	vrf->vrf_id = vrf_id;
15642551e99SRandall Stewart 	LIST_INIT(&vrf->ifnlist);
15742551e99SRandall Stewart 	vrf->total_ifa_count = 0;
15880fefe0aSRandall Stewart 	vrf->refcount = 0;
159f4c93d24SRandall Stewart 	/* now also setup table ids */
160f4c93d24SRandall Stewart 	SCTP_INIT_VRF_TABLEID(vrf);
1616a27c376SRandall Stewart 	/* Init the HASH of addresses */
16217205eccSRandall Stewart 	vrf->vrf_addr_hash = SCTP_HASH_INIT(SCTP_VRF_ADDR_HASH_SIZE,
16317205eccSRandall Stewart 	    &vrf->vrf_addr_hashmark);
1646a27c376SRandall Stewart 	if (vrf->vrf_addr_hash == NULL) {
1656a27c376SRandall Stewart 		/* No memory */
1666a27c376SRandall Stewart #ifdef INVARIANTS
16717205eccSRandall Stewart 		panic("No memory for VRF:%d", vrf_id);
16817205eccSRandall Stewart #endif
169207304d4SRandall Stewart 		SCTP_FREE(vrf, SCTP_M_VRF);
17017205eccSRandall Stewart 		return (NULL);
17117205eccSRandall Stewart 	}
17242551e99SRandall Stewart 	/* Add it to the hash table */
17317205eccSRandall Stewart 	bucket = &sctppcbinfo.sctp_vrfhash[(vrf_id & sctppcbinfo.hashvrfmark)];
17442551e99SRandall Stewart 	LIST_INSERT_HEAD(bucket, vrf, next_vrf);
17517205eccSRandall Stewart 	atomic_add_int(&sctppcbinfo.ipi_count_vrfs, 1);
17642551e99SRandall Stewart 	return (vrf);
17742551e99SRandall Stewart }
17842551e99SRandall Stewart 
17942551e99SRandall Stewart 
18042551e99SRandall Stewart struct sctp_ifn *
181f4c93d24SRandall Stewart sctp_find_ifn(void *ifn, uint32_t ifn_index)
18242551e99SRandall Stewart {
18342551e99SRandall Stewart 	struct sctp_ifn *sctp_ifnp;
18417205eccSRandall Stewart 	struct sctp_ifnlist *hash_ifn_head;
18542551e99SRandall Stewart 
18642551e99SRandall Stewart 	/*
18742551e99SRandall Stewart 	 * We assume the lock is held for the addresses if thats wrong
18842551e99SRandall Stewart 	 * problems could occur :-)
18942551e99SRandall Stewart 	 */
190f4c93d24SRandall Stewart 	hash_ifn_head = &sctppcbinfo.vrf_ifn_hash[(ifn_index & sctppcbinfo.vrf_ifn_hashmark)];
19117205eccSRandall Stewart 	LIST_FOREACH(sctp_ifnp, hash_ifn_head, next_bucket) {
19242551e99SRandall Stewart 		if (sctp_ifnp->ifn_index == ifn_index) {
19342551e99SRandall Stewart 			return (sctp_ifnp);
19442551e99SRandall Stewart 		}
19542551e99SRandall Stewart 		if (sctp_ifnp->ifn_p && ifn && (sctp_ifnp->ifn_p == ifn)) {
19642551e99SRandall Stewart 			return (sctp_ifnp);
19742551e99SRandall Stewart 		}
19842551e99SRandall Stewart 	}
19942551e99SRandall Stewart 	return (NULL);
20042551e99SRandall Stewart }
20142551e99SRandall Stewart 
20217205eccSRandall Stewart 
20317205eccSRandall Stewart 
20442551e99SRandall Stewart struct sctp_vrf *
20517205eccSRandall Stewart sctp_find_vrf(uint32_t vrf_id)
20642551e99SRandall Stewart {
20742551e99SRandall Stewart 	struct sctp_vrflist *bucket;
20842551e99SRandall Stewart 	struct sctp_vrf *liste;
20942551e99SRandall Stewart 
21017205eccSRandall Stewart 	bucket = &sctppcbinfo.sctp_vrfhash[(vrf_id & sctppcbinfo.hashvrfmark)];
21142551e99SRandall Stewart 	LIST_FOREACH(liste, bucket, next_vrf) {
21217205eccSRandall Stewart 		if (vrf_id == liste->vrf_id) {
21342551e99SRandall Stewart 			return (liste);
21442551e99SRandall Stewart 		}
21542551e99SRandall Stewart 	}
21642551e99SRandall Stewart 	return (NULL);
21742551e99SRandall Stewart }
21842551e99SRandall Stewart 
21980fefe0aSRandall Stewart void
22080fefe0aSRandall Stewart sctp_free_vrf(struct sctp_vrf *vrf)
22180fefe0aSRandall Stewart {
22280fefe0aSRandall Stewart 	int ret;
22380fefe0aSRandall Stewart 
22480fefe0aSRandall Stewart 	ret = atomic_fetchadd_int(&vrf->refcount, -1);
22580fefe0aSRandall Stewart 	if (ret == 1) {
22680fefe0aSRandall Stewart 		/* We zero'd the count */
22780fefe0aSRandall Stewart 		LIST_REMOVE(vrf, next_vrf);
22880fefe0aSRandall Stewart 		SCTP_FREE(vrf, SCTP_M_VRF);
22980fefe0aSRandall Stewart 		atomic_subtract_int(&sctppcbinfo.ipi_count_vrfs, 1);
23080fefe0aSRandall Stewart 	}
23180fefe0aSRandall Stewart }
232bff64a4dSRandall Stewart 
23342551e99SRandall Stewart void
23417205eccSRandall Stewart sctp_free_ifn(struct sctp_ifn *sctp_ifnp)
23517205eccSRandall Stewart {
23617205eccSRandall Stewart 	int ret;
23717205eccSRandall Stewart 
23817205eccSRandall Stewart 	ret = atomic_fetchadd_int(&sctp_ifnp->refcount, -1);
23917205eccSRandall Stewart 	if (ret == 1) {
24017205eccSRandall Stewart 		/* We zero'd the count */
24180fefe0aSRandall Stewart 		if (sctp_ifnp->vrf) {
24280fefe0aSRandall Stewart 			sctp_free_vrf(sctp_ifnp->vrf);
24380fefe0aSRandall Stewart 		}
244207304d4SRandall Stewart 		SCTP_FREE(sctp_ifnp, SCTP_M_IFN);
24517205eccSRandall Stewart 		atomic_subtract_int(&sctppcbinfo.ipi_count_ifns, 1);
24617205eccSRandall Stewart 	}
24717205eccSRandall Stewart }
24817205eccSRandall Stewart 
24917205eccSRandall Stewart void
250f4c93d24SRandall Stewart sctp_update_ifn_mtu(uint32_t ifn_index, uint32_t mtu)
25117205eccSRandall Stewart {
25217205eccSRandall Stewart 	struct sctp_ifn *sctp_ifnp;
25317205eccSRandall Stewart 
254f4c93d24SRandall Stewart 	sctp_ifnp = sctp_find_ifn((void *)NULL, ifn_index);
25517205eccSRandall Stewart 	if (sctp_ifnp != NULL) {
25617205eccSRandall Stewart 		sctp_ifnp->ifn_mtu = mtu;
25717205eccSRandall Stewart 	}
25817205eccSRandall Stewart }
25917205eccSRandall Stewart 
26017205eccSRandall Stewart 
26117205eccSRandall Stewart void
26242551e99SRandall Stewart sctp_free_ifa(struct sctp_ifa *sctp_ifap)
26342551e99SRandall Stewart {
26442551e99SRandall Stewart 	int ret;
26542551e99SRandall Stewart 
26642551e99SRandall Stewart 	ret = atomic_fetchadd_int(&sctp_ifap->refcount, -1);
26742551e99SRandall Stewart 	if (ret == 1) {
26842551e99SRandall Stewart 		/* We zero'd the count */
26980fefe0aSRandall Stewart 		if (sctp_ifap->ifn_p) {
27080fefe0aSRandall Stewart 			sctp_free_ifn(sctp_ifap->ifn_p);
27180fefe0aSRandall Stewart 		}
272207304d4SRandall Stewart 		SCTP_FREE(sctp_ifap, SCTP_M_IFA);
27317205eccSRandall Stewart 		atomic_subtract_int(&sctppcbinfo.ipi_count_ifas, 1);
27442551e99SRandall Stewart 	}
27542551e99SRandall Stewart }
27642551e99SRandall Stewart 
27717205eccSRandall Stewart static void
27817205eccSRandall Stewart sctp_delete_ifn(struct sctp_ifn *sctp_ifnp, int hold_addr_lock)
27917205eccSRandall Stewart {
28017205eccSRandall Stewart 	struct sctp_ifn *found;
28117205eccSRandall Stewart 
282f4c93d24SRandall Stewart 	found = sctp_find_ifn(sctp_ifnp->ifn_p, sctp_ifnp->ifn_index);
28317205eccSRandall Stewart 	if (found == NULL) {
28417205eccSRandall Stewart 		/* Not in the list.. sorry */
28517205eccSRandall Stewart 		return;
28617205eccSRandall Stewart 	}
28717205eccSRandall Stewart 	if (hold_addr_lock == 0)
28817205eccSRandall Stewart 		SCTP_IPI_ADDR_LOCK();
28917205eccSRandall Stewart 	LIST_REMOVE(sctp_ifnp, next_bucket);
29017205eccSRandall Stewart 	LIST_REMOVE(sctp_ifnp, next_ifn);
291ad21a364SRandall Stewart 	SCTP_DEREGISTER_INTERFACE(sctp_ifnp->ifn_index,
292ad21a364SRandall Stewart 	    sctp_ifnp->registered_af);
29317205eccSRandall Stewart 	if (hold_addr_lock == 0)
29417205eccSRandall Stewart 		SCTP_IPI_ADDR_UNLOCK();
29517205eccSRandall Stewart 	/* Take away the reference, and possibly free it */
29617205eccSRandall Stewart 	sctp_free_ifn(sctp_ifnp);
29717205eccSRandall Stewart }
29817205eccSRandall Stewart 
299851b7298SRandall Stewart void
300851b7298SRandall Stewart sctp_mark_ifa_addr_down(uint32_t vrf_id, struct sockaddr *addr, const char *if_name, uint32_t ifn_index)
301851b7298SRandall Stewart {
302851b7298SRandall Stewart 	struct sctp_vrf *vrf;
303851b7298SRandall Stewart 	struct sctp_ifa *sctp_ifap = NULL;
304851b7298SRandall Stewart 
305851b7298SRandall Stewart 	SCTP_IPI_ADDR_LOCK();
306851b7298SRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
307851b7298SRandall Stewart 	if (vrf == NULL) {
308851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Can't find vrf_id:%d\n", vrf_id);
309851b7298SRandall Stewart 		goto out;
310851b7298SRandall Stewart 
311851b7298SRandall Stewart 	}
312851b7298SRandall Stewart 	sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED);
313851b7298SRandall Stewart 	if (sctp_ifap == NULL) {
314851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Can't find sctp_ifap for address\n");
315851b7298SRandall Stewart 		goto out;
316851b7298SRandall Stewart 	}
317851b7298SRandall Stewart 	if (sctp_ifap->ifn_p == NULL) {
318851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "IFA has no IFN - can't mark unuseable\n");
319851b7298SRandall Stewart 		goto out;
320851b7298SRandall Stewart 	}
321851b7298SRandall Stewart 	if (if_name) {
322851b7298SRandall Stewart 		int len1, len2;
323851b7298SRandall Stewart 
324851b7298SRandall Stewart 		len1 = strlen(if_name);
325851b7298SRandall Stewart 		len2 = strlen(sctp_ifap->ifn_p->ifn_name);
326851b7298SRandall Stewart 		if (len1 != len2) {
327851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFN of ifa names different lenght %d vs %d - ignored\n",
328851b7298SRandall Stewart 			    len1, len2);
329851b7298SRandall Stewart 			goto out;
330851b7298SRandall Stewart 		}
331851b7298SRandall Stewart 		if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, len1) != 0) {
332851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFN %s of IFA not the same as %s\n",
333851b7298SRandall Stewart 			    sctp_ifap->ifn_p->ifn_name,
334851b7298SRandall Stewart 			    if_name);
335851b7298SRandall Stewart 			goto out;
336851b7298SRandall Stewart 		}
337851b7298SRandall Stewart 	} else {
338851b7298SRandall Stewart 		if (sctp_ifap->ifn_p->ifn_index != ifn_index) {
339851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFA owned by ifn_index:%d down command for ifn_index:%d - ignored\n",
340851b7298SRandall Stewart 			    sctp_ifap->ifn_p->ifn_index, ifn_index);
341851b7298SRandall Stewart 			goto out;
342851b7298SRandall Stewart 		}
343851b7298SRandall Stewart 	}
344851b7298SRandall Stewart 
345851b7298SRandall Stewart 	sctp_ifap->localifa_flags &= (~SCTP_ADDR_VALID);
346851b7298SRandall Stewart 	sctp_ifap->localifa_flags |= SCTP_ADDR_IFA_UNUSEABLE;
347851b7298SRandall Stewart out:
348851b7298SRandall Stewart 	SCTP_IPI_ADDR_UNLOCK();
349851b7298SRandall Stewart }
350851b7298SRandall Stewart 
351851b7298SRandall Stewart void
352851b7298SRandall Stewart sctp_mark_ifa_addr_up(uint32_t vrf_id, struct sockaddr *addr, const char *if_name, uint32_t ifn_index)
353851b7298SRandall Stewart {
354851b7298SRandall Stewart 	struct sctp_vrf *vrf;
355851b7298SRandall Stewart 	struct sctp_ifa *sctp_ifap = NULL;
356851b7298SRandall Stewart 
357851b7298SRandall Stewart 	SCTP_IPI_ADDR_LOCK();
358851b7298SRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
359851b7298SRandall Stewart 	if (vrf == NULL) {
360851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Can't find vrf_id:%d\n", vrf_id);
361851b7298SRandall Stewart 		goto out;
362851b7298SRandall Stewart 
363851b7298SRandall Stewart 	}
364851b7298SRandall Stewart 	sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED);
365851b7298SRandall Stewart 	if (sctp_ifap == NULL) {
366851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Can't find sctp_ifap for address\n");
367851b7298SRandall Stewart 		goto out;
368851b7298SRandall Stewart 	}
369851b7298SRandall Stewart 	if (sctp_ifap->ifn_p == NULL) {
370851b7298SRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "IFA has no IFN - can't mark unuseable\n");
371851b7298SRandall Stewart 		goto out;
372851b7298SRandall Stewart 	}
373851b7298SRandall Stewart 	if (if_name) {
374851b7298SRandall Stewart 		int len1, len2;
375851b7298SRandall Stewart 
376851b7298SRandall Stewart 		len1 = strlen(if_name);
377851b7298SRandall Stewart 		len2 = strlen(sctp_ifap->ifn_p->ifn_name);
378851b7298SRandall Stewart 		if (len1 != len2) {
379851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFN of ifa names different lenght %d vs %d - ignored\n",
380851b7298SRandall Stewart 			    len1, len2);
381851b7298SRandall Stewart 			goto out;
382851b7298SRandall Stewart 		}
383851b7298SRandall Stewart 		if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, len1) != 0) {
384851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFN %s of IFA not the same as %s\n",
385851b7298SRandall Stewart 			    sctp_ifap->ifn_p->ifn_name,
386851b7298SRandall Stewart 			    if_name);
387851b7298SRandall Stewart 			goto out;
388851b7298SRandall Stewart 		}
389851b7298SRandall Stewart 	} else {
390851b7298SRandall Stewart 		if (sctp_ifap->ifn_p->ifn_index != ifn_index) {
391851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "IFA owned by ifn_index:%d down command for ifn_index:%d - ignored\n",
392851b7298SRandall Stewart 			    sctp_ifap->ifn_p->ifn_index, ifn_index);
393851b7298SRandall Stewart 			goto out;
394851b7298SRandall Stewart 		}
395851b7298SRandall Stewart 	}
396851b7298SRandall Stewart 
397851b7298SRandall Stewart 	sctp_ifap->localifa_flags &= (~SCTP_ADDR_IFA_UNUSEABLE);
398851b7298SRandall Stewart 	sctp_ifap->localifa_flags |= SCTP_ADDR_VALID;
399851b7298SRandall Stewart out:
400851b7298SRandall Stewart 	SCTP_IPI_ADDR_UNLOCK();
401851b7298SRandall Stewart }
402851b7298SRandall Stewart 
40317205eccSRandall Stewart 
40442551e99SRandall Stewart struct sctp_ifa *
40517205eccSRandall Stewart sctp_add_addr_to_vrf(uint32_t vrf_id, void *ifn, uint32_t ifn_index,
40642551e99SRandall Stewart     uint32_t ifn_type, const char *if_name,
40717205eccSRandall Stewart     void *ifa, struct sockaddr *addr, uint32_t ifa_flags,
40817205eccSRandall Stewart     int dynamic_add)
40942551e99SRandall Stewart {
41042551e99SRandall Stewart 	struct sctp_vrf *vrf;
41142551e99SRandall Stewart 	struct sctp_ifn *sctp_ifnp = NULL;
41242551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap = NULL;
41317205eccSRandall Stewart 	struct sctp_ifalist *hash_addr_head;
41417205eccSRandall Stewart 	struct sctp_ifnlist *hash_ifn_head;
4156a27c376SRandall Stewart 	uint32_t hash_of_addr;
416ad21a364SRandall Stewart 	int new_ifn_af = 0;
41742551e99SRandall Stewart 
41842551e99SRandall Stewart 	/* How granular do we need the locks to be here? */
41942551e99SRandall Stewart 	SCTP_IPI_ADDR_LOCK();
42080fefe0aSRandall Stewart 	sctp_ifnp = sctp_find_ifn(ifn, ifn_index);
42180fefe0aSRandall Stewart 	if (sctp_ifnp) {
42280fefe0aSRandall Stewart 		vrf = sctp_ifnp->vrf;
42380fefe0aSRandall Stewart 	} else {
42417205eccSRandall Stewart 		vrf = sctp_find_vrf(vrf_id);
42542551e99SRandall Stewart 		if (vrf == NULL) {
42617205eccSRandall Stewart 			vrf = sctp_allocate_vrf(vrf_id);
42742551e99SRandall Stewart 			if (vrf == NULL) {
42842551e99SRandall Stewart 				SCTP_IPI_ADDR_UNLOCK();
42942551e99SRandall Stewart 				return (NULL);
43042551e99SRandall Stewart 			}
43142551e99SRandall Stewart 		}
43280fefe0aSRandall Stewart 	}
43342551e99SRandall Stewart 	if (sctp_ifnp == NULL) {
43442551e99SRandall Stewart 		/*
43542551e99SRandall Stewart 		 * build one and add it, can't hold lock until after malloc
43642551e99SRandall Stewart 		 * done though.
43742551e99SRandall Stewart 		 */
43842551e99SRandall Stewart 		SCTP_IPI_ADDR_UNLOCK();
439207304d4SRandall Stewart 		SCTP_MALLOC(sctp_ifnp, struct sctp_ifn *, sizeof(struct sctp_ifn), SCTP_M_IFN);
44042551e99SRandall Stewart 		if (sctp_ifnp == NULL) {
44142551e99SRandall Stewart #ifdef INVARIANTS
44242551e99SRandall Stewart 			panic("No memory for IFN:%u", sctp_ifnp->ifn_index);
44342551e99SRandall Stewart #endif
44442551e99SRandall Stewart 			return (NULL);
44542551e99SRandall Stewart 		}
446eacc51c5SRandall Stewart 		memset(sctp_ifnp, 0, sizeof(struct sctp_ifn));
44742551e99SRandall Stewart 		sctp_ifnp->ifn_index = ifn_index;
44842551e99SRandall Stewart 		sctp_ifnp->ifn_p = ifn;
44942551e99SRandall Stewart 		sctp_ifnp->ifn_type = ifn_type;
45017205eccSRandall Stewart 		sctp_ifnp->refcount = 1;
45142551e99SRandall Stewart 		sctp_ifnp->vrf = vrf;
452eacc51c5SRandall Stewart 
45380fefe0aSRandall Stewart 		atomic_add_int(&vrf->refcount, 1);
454ad21a364SRandall Stewart 		sctp_ifnp->ifn_mtu = SCTP_GATHER_MTU_FROM_IFN_INFO(ifn, ifn_index, addr->sa_family);
45517205eccSRandall Stewart 		if (if_name != NULL) {
45642551e99SRandall Stewart 			memcpy(sctp_ifnp->ifn_name, if_name, SCTP_IFNAMSIZ);
45717205eccSRandall Stewart 		} else {
45817205eccSRandall Stewart 			memcpy(sctp_ifnp->ifn_name, "unknown", min(7, SCTP_IFNAMSIZ));
45917205eccSRandall Stewart 		}
460f4c93d24SRandall Stewart 		hash_ifn_head = &sctppcbinfo.vrf_ifn_hash[(ifn_index & sctppcbinfo.vrf_ifn_hashmark)];
46142551e99SRandall Stewart 		LIST_INIT(&sctp_ifnp->ifalist);
46242551e99SRandall Stewart 		SCTP_IPI_ADDR_LOCK();
46317205eccSRandall Stewart 		LIST_INSERT_HEAD(hash_ifn_head, sctp_ifnp, next_bucket);
46442551e99SRandall Stewart 		LIST_INSERT_HEAD(&vrf->ifnlist, sctp_ifnp, next_ifn);
46517205eccSRandall Stewart 		atomic_add_int(&sctppcbinfo.ipi_count_ifns, 1);
466ad21a364SRandall Stewart 		new_ifn_af = 1;
46742551e99SRandall Stewart 	}
468851b7298SRandall Stewart 	sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED);
46942551e99SRandall Stewart 	if (sctp_ifap) {
47042551e99SRandall Stewart 		/* Hmm, it already exists? */
47142551e99SRandall Stewart 		if ((sctp_ifap->ifn_p) &&
47242551e99SRandall Stewart 		    (sctp_ifap->ifn_p->ifn_index == ifn_index)) {
47380fefe0aSRandall Stewart 			if (new_ifn_af) {
47480fefe0aSRandall Stewart 				/* Remove the created one that we don't want */
475c4739e2fSRandall Stewart 				sctp_delete_ifn(sctp_ifnp, 1);
47680fefe0aSRandall Stewart 			}
47742551e99SRandall Stewart 			if (sctp_ifap->localifa_flags & SCTP_BEING_DELETED) {
47842551e99SRandall Stewart 				/* easy to solve, just switch back to active */
47942551e99SRandall Stewart 				sctp_ifap->localifa_flags = SCTP_ADDR_VALID;
48042551e99SRandall Stewart 				sctp_ifap->ifn_p = sctp_ifnp;
48180fefe0aSRandall Stewart 				atomic_add_int(&sctp_ifap->ifn_p->refcount, 1);
48242551e99SRandall Stewart 		exit_stage_left:
48342551e99SRandall Stewart 				SCTP_IPI_ADDR_UNLOCK();
48442551e99SRandall Stewart 				return (sctp_ifap);
48542551e99SRandall Stewart 			} else {
48642551e99SRandall Stewart 				goto exit_stage_left;
48742551e99SRandall Stewart 			}
48842551e99SRandall Stewart 		} else {
48942551e99SRandall Stewart 			if (sctp_ifap->ifn_p) {
49042551e99SRandall Stewart 				/*
491851b7298SRandall Stewart 				 * The last IFN gets the address, old ones
492851b7298SRandall Stewart 				 * are deleted.
49342551e99SRandall Stewart 				 */
49480fefe0aSRandall Stewart 				if (new_ifn_af) {
49580fefe0aSRandall Stewart 					/*
49680fefe0aSRandall Stewart 					 * Remove the created one that we
49780fefe0aSRandall Stewart 					 * don't want
49880fefe0aSRandall Stewart 					 */
499851b7298SRandall Stewart 					sctp_free_ifn(sctp_ifap->ifn_p);
500851b7298SRandall Stewart 					if (sctp_ifap->ifn_p->refcount == 1)
501851b7298SRandall Stewart 						sctp_delete_ifn(sctp_ifap->ifn_p, 1);
502851b7298SRandall Stewart 					sctp_ifap->ifn_p = sctp_ifnp;
503851b7298SRandall Stewart 					atomic_add_int(&sctp_ifap->ifn_p->refcount, 1);
50480fefe0aSRandall Stewart 				}
50542551e99SRandall Stewart 				goto exit_stage_left;
50642551e99SRandall Stewart 			} else {
50742551e99SRandall Stewart 				/* repair ifnp which was NULL ? */
50842551e99SRandall Stewart 				sctp_ifap->localifa_flags = SCTP_ADDR_VALID;
50942551e99SRandall Stewart 				sctp_ifap->ifn_p = sctp_ifnp;
51017205eccSRandall Stewart 				atomic_add_int(&sctp_ifap->ifn_p->refcount, 1);
51142551e99SRandall Stewart 			}
51242551e99SRandall Stewart 			goto exit_stage_left;
51342551e99SRandall Stewart 		}
51442551e99SRandall Stewart 	}
51542551e99SRandall Stewart 	SCTP_IPI_ADDR_UNLOCK();
516207304d4SRandall Stewart 	SCTP_MALLOC(sctp_ifap, struct sctp_ifa *, sizeof(struct sctp_ifa), SCTP_M_IFA);
51742551e99SRandall Stewart 	if (sctp_ifap == NULL) {
51842551e99SRandall Stewart #ifdef INVARIANTS
51942551e99SRandall Stewart 		panic("No memory for IFA");
52042551e99SRandall Stewart #endif
52142551e99SRandall Stewart 		return (NULL);
52242551e99SRandall Stewart 	}
523132dea7dSRandall Stewart 	memset(sctp_ifap, 0, sizeof(struct sctp_ifa));
52442551e99SRandall Stewart 	sctp_ifap->ifn_p = sctp_ifnp;
52542551e99SRandall Stewart 	atomic_add_int(&sctp_ifnp->refcount, 1);
52622a67197SRandall Stewart 	sctp_ifap->vrf_id = vrf_id;
52742551e99SRandall Stewart 	sctp_ifap->ifa = ifa;
52842551e99SRandall Stewart 	memcpy(&sctp_ifap->address, addr, addr->sa_len);
52942551e99SRandall Stewart 	sctp_ifap->localifa_flags = SCTP_ADDR_VALID | SCTP_ADDR_DEFER_USE;
53042551e99SRandall Stewart 	sctp_ifap->flags = ifa_flags;
53142551e99SRandall Stewart 	/* Set scope */
53242551e99SRandall Stewart 	if (sctp_ifap->address.sa.sa_family == AF_INET) {
53342551e99SRandall Stewart 		struct sockaddr_in *sin;
53442551e99SRandall Stewart 
53542551e99SRandall Stewart 		sin = (struct sockaddr_in *)&sctp_ifap->address.sin;
53642551e99SRandall Stewart 		if (SCTP_IFN_IS_IFT_LOOP(sctp_ifap->ifn_p) ||
53742551e99SRandall Stewart 		    (IN4_ISLOOPBACK_ADDRESS(&sin->sin_addr))) {
53842551e99SRandall Stewart 			sctp_ifap->src_is_loop = 1;
53942551e99SRandall Stewart 		}
54042551e99SRandall Stewart 		if ((IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
54142551e99SRandall Stewart 			sctp_ifap->src_is_priv = 1;
54242551e99SRandall Stewart 		}
543ad21a364SRandall Stewart 		sctp_ifnp->num_v4++;
544ad21a364SRandall Stewart 		if (new_ifn_af)
545ad21a364SRandall Stewart 			new_ifn_af = AF_INET;
54642551e99SRandall Stewart 	} else if (sctp_ifap->address.sa.sa_family == AF_INET6) {
54742551e99SRandall Stewart 		/* ok to use deprecated addresses? */
54842551e99SRandall Stewart 		struct sockaddr_in6 *sin6;
54942551e99SRandall Stewart 
55042551e99SRandall Stewart 		sin6 = (struct sockaddr_in6 *)&sctp_ifap->address.sin6;
55142551e99SRandall Stewart 		if (SCTP_IFN_IS_IFT_LOOP(sctp_ifap->ifn_p) ||
55242551e99SRandall Stewart 		    (IN6_IS_ADDR_LOOPBACK(&sin6->sin6_addr))) {
55342551e99SRandall Stewart 			sctp_ifap->src_is_loop = 1;
55442551e99SRandall Stewart 		}
55542551e99SRandall Stewart 		if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
55642551e99SRandall Stewart 			sctp_ifap->src_is_priv = 1;
55742551e99SRandall Stewart 		}
558ad21a364SRandall Stewart 		sctp_ifnp->num_v6++;
559ad21a364SRandall Stewart 		if (new_ifn_af)
560ad21a364SRandall Stewart 			new_ifn_af = AF_INET6;
561ad21a364SRandall Stewart 	} else {
562ad21a364SRandall Stewart 		new_ifn_af = 0;
56342551e99SRandall Stewart 	}
5646a27c376SRandall Stewart 	hash_of_addr = sctp_get_ifa_hash_val(&sctp_ifap->address.sa);
5656a27c376SRandall Stewart 
56642551e99SRandall Stewart 	if ((sctp_ifap->src_is_priv == 0) &&
56742551e99SRandall Stewart 	    (sctp_ifap->src_is_loop == 0)) {
56842551e99SRandall Stewart 		sctp_ifap->src_is_glob = 1;
56942551e99SRandall Stewart 	}
57042551e99SRandall Stewart 	SCTP_IPI_ADDR_LOCK();
57117205eccSRandall Stewart 	hash_addr_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)];
57217205eccSRandall Stewart 	LIST_INSERT_HEAD(hash_addr_head, sctp_ifap, next_bucket);
57342551e99SRandall Stewart 	sctp_ifap->refcount = 1;
57442551e99SRandall Stewart 	LIST_INSERT_HEAD(&sctp_ifnp->ifalist, sctp_ifap, next_ifa);
57542551e99SRandall Stewart 	sctp_ifnp->ifa_count++;
57642551e99SRandall Stewart 	vrf->total_ifa_count++;
57717205eccSRandall Stewart 	atomic_add_int(&sctppcbinfo.ipi_count_ifas, 1);
578ad21a364SRandall Stewart 	if (new_ifn_af) {
579ad21a364SRandall Stewart 		SCTP_REGISTER_INTERFACE(ifn_index, new_ifn_af);
580ad21a364SRandall Stewart 		sctp_ifnp->registered_af = new_ifn_af;
581ad21a364SRandall Stewart 	}
58242551e99SRandall Stewart 	SCTP_IPI_ADDR_UNLOCK();
583d06c82f1SRandall Stewart 	if (dynamic_add) {
584d06c82f1SRandall Stewart 		/*
585d06c82f1SRandall Stewart 		 * Bump up the refcount so that when the timer completes it
586d06c82f1SRandall Stewart 		 * will drop back down.
587d06c82f1SRandall Stewart 		 */
588d06c82f1SRandall Stewart 		struct sctp_laddr *wi;
589d06c82f1SRandall Stewart 
590d06c82f1SRandall Stewart 		atomic_add_int(&sctp_ifap->refcount, 1);
591d06c82f1SRandall Stewart 		wi = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_laddr, struct sctp_laddr);
592d06c82f1SRandall Stewart 		if (wi == NULL) {
593d06c82f1SRandall Stewart 			/*
594d06c82f1SRandall Stewart 			 * Gak, what can we do? We have lost an address
595d06c82f1SRandall Stewart 			 * change can you say HOSED?
596d06c82f1SRandall Stewart 			 */
597ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "Lost and address change ???\n");
598d06c82f1SRandall Stewart 			/* Opps, must decrement the count */
599851b7298SRandall Stewart 			sctp_del_addr_from_vrf(vrf_id, addr, ifn_index, if_name);
600d06c82f1SRandall Stewart 			return (NULL);
601d06c82f1SRandall Stewart 		}
602d06c82f1SRandall Stewart 		SCTP_INCR_LADDR_COUNT();
603d06c82f1SRandall Stewart 		bzero(wi, sizeof(*wi));
604d61a0ae0SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
605d06c82f1SRandall Stewart 		wi->ifa = sctp_ifap;
606d06c82f1SRandall Stewart 		wi->action = SCTP_ADD_IP_ADDRESS;
607d06c82f1SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
608d06c82f1SRandall Stewart 		/*
609d06c82f1SRandall Stewart 		 * Should this really be a tailq? As it is we will process
610d06c82f1SRandall Stewart 		 * the newest first :-0
611d06c82f1SRandall Stewart 		 */
612d06c82f1SRandall Stewart 		LIST_INSERT_HEAD(&sctppcbinfo.addr_wq, wi, sctp_nxt_addr);
613207304d4SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
614d06c82f1SRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
615d06c82f1SRandall Stewart 		    (struct sctp_inpcb *)NULL,
616d06c82f1SRandall Stewart 		    (struct sctp_tcb *)NULL,
617d06c82f1SRandall Stewart 		    (struct sctp_nets *)NULL);
61817205eccSRandall Stewart 	} else {
61917205eccSRandall Stewart 		/* it's ready for use */
62017205eccSRandall Stewart 		sctp_ifap->localifa_flags &= ~SCTP_ADDR_DEFER_USE;
621d06c82f1SRandall Stewart 	}
62242551e99SRandall Stewart 	return (sctp_ifap);
62342551e99SRandall Stewart }
62442551e99SRandall Stewart 
625d06c82f1SRandall Stewart void
62617205eccSRandall Stewart sctp_del_addr_from_vrf(uint32_t vrf_id, struct sockaddr *addr,
627851b7298SRandall Stewart     uint32_t ifn_index, const char *if_name)
62842551e99SRandall Stewart {
62942551e99SRandall Stewart 	struct sctp_vrf *vrf;
63042551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap = NULL;
63142551e99SRandall Stewart 
63242551e99SRandall Stewart 	SCTP_IPI_ADDR_LOCK();
63342551e99SRandall Stewart 
63417205eccSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
63542551e99SRandall Stewart 	if (vrf == NULL) {
636ad81507eSRandall Stewart 		SCTP_PRINTF("Can't find vrf_id:%d\n", vrf_id);
63742551e99SRandall Stewart 		goto out_now;
63842551e99SRandall Stewart 	}
639851b7298SRandall Stewart 	sctp_ifap = sctp_find_ifa_by_addr(addr, vrf->vrf_id, SCTP_ADDR_LOCKED);
64042551e99SRandall Stewart 	if (sctp_ifap) {
641851b7298SRandall Stewart 		/* Validate the delete */
642851b7298SRandall Stewart 		if (sctp_ifap->ifn_p) {
643851b7298SRandall Stewart 			int valid = 0;
644851b7298SRandall Stewart 
645851b7298SRandall Stewart 			/*-
646851b7298SRandall Stewart 			 * The name has priority over the ifn_index
647851b7298SRandall Stewart 			 * if its given. We do this especially for
648851b7298SRandall Stewart 			 * panda who might recycle indexes fast.
649851b7298SRandall Stewart 			 */
650851b7298SRandall Stewart 			if (if_name) {
651851b7298SRandall Stewart 				int len1, len2;
652851b7298SRandall Stewart 
653851b7298SRandall Stewart 				len1 = min(SCTP_IFNAMSIZ, strlen(if_name));
654851b7298SRandall Stewart 				len2 = min(SCTP_IFNAMSIZ, strlen(sctp_ifap->ifn_p->ifn_name));
655851b7298SRandall Stewart 				if (len1 && len2 && (len1 == len2)) {
656851b7298SRandall Stewart 					/* we can compare them */
657851b7298SRandall Stewart 					if (strncmp(if_name, sctp_ifap->ifn_p->ifn_name, len1) == 0) {
658851b7298SRandall Stewart 						/*
659851b7298SRandall Stewart 						 * They match its a correct
660851b7298SRandall Stewart 						 * delete
661851b7298SRandall Stewart 						 */
662851b7298SRandall Stewart 						valid = 1;
663851b7298SRandall Stewart 					}
664851b7298SRandall Stewart 				}
665851b7298SRandall Stewart 			}
666851b7298SRandall Stewart 			if (!valid) {
667851b7298SRandall Stewart 				/* last ditch check ifn_index */
668851b7298SRandall Stewart 				if (ifn_index == sctp_ifap->ifn_p->ifn_index) {
669851b7298SRandall Stewart 					valid = 1;
670851b7298SRandall Stewart 				}
671851b7298SRandall Stewart 			}
672851b7298SRandall Stewart 			if (!valid) {
673851b7298SRandall Stewart #ifdef SCTP_DEBUG
674851b7298SRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "Deleting address:");
675851b7298SRandall Stewart 				SCTPDBG_ADDR(SCTP_DEBUG_PCB1, addr);
676851b7298SRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "ifn:%d ifname:%s does not match addresses\n",
677851b7298SRandall Stewart 				    ifn_index, ((if_name == NULL) ? "NULL" : if_name));
678851b7298SRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "ifn:%d ifname:%s - ignoring delete\n",
679851b7298SRandall Stewart 				    sctp_ifap->ifn_p->ifn_index, sctp_ifap->ifn_p->ifn_name);
680851b7298SRandall Stewart #endif
681851b7298SRandall Stewart 				return;
682851b7298SRandall Stewart 			}
683851b7298SRandall Stewart 		}
68442551e99SRandall Stewart 		sctp_ifap->localifa_flags &= SCTP_ADDR_VALID;
68542551e99SRandall Stewart 		sctp_ifap->localifa_flags |= SCTP_BEING_DELETED;
68642551e99SRandall Stewart 		vrf->total_ifa_count--;
6876a27c376SRandall Stewart 		LIST_REMOVE(sctp_ifap, next_bucket);
68842551e99SRandall Stewart 		LIST_REMOVE(sctp_ifap, next_ifa);
68917205eccSRandall Stewart 		if (sctp_ifap->ifn_p) {
6906e55db54SRandall Stewart 			sctp_ifap->ifn_p->ifa_count--;
691ad21a364SRandall Stewart 			if (sctp_ifap->address.sa.sa_family == AF_INET6)
692ad21a364SRandall Stewart 				sctp_ifap->ifn_p->num_v6--;
693ad21a364SRandall Stewart 			else if (sctp_ifap->address.sa.sa_family == AF_INET)
694ad21a364SRandall Stewart 				sctp_ifap->ifn_p->num_v4--;
69517205eccSRandall Stewart 			if (SCTP_LIST_EMPTY(&sctp_ifap->ifn_p->ifalist)) {
69617205eccSRandall Stewart 				sctp_delete_ifn(sctp_ifap->ifn_p, 1);
697ad21a364SRandall Stewart 			} else {
698ad21a364SRandall Stewart 				if ((sctp_ifap->ifn_p->num_v6 == 0) &&
699ad21a364SRandall Stewart 				    (sctp_ifap->ifn_p->registered_af == AF_INET6)) {
700ad21a364SRandall Stewart 					SCTP_DEREGISTER_INTERFACE(ifn_index,
701ad21a364SRandall Stewart 					    AF_INET6);
702ad21a364SRandall Stewart 					SCTP_REGISTER_INTERFACE(ifn_index,
703ad21a364SRandall Stewart 					    AF_INET);
704ad21a364SRandall Stewart 					sctp_ifap->ifn_p->registered_af = AF_INET;
705ad21a364SRandall Stewart 				} else if ((sctp_ifap->ifn_p->num_v4 == 0) &&
706ad21a364SRandall Stewart 				    (sctp_ifap->ifn_p->registered_af == AF_INET)) {
707ad21a364SRandall Stewart 					SCTP_DEREGISTER_INTERFACE(ifn_index,
708ad21a364SRandall Stewart 					    AF_INET);
709ad21a364SRandall Stewart 					SCTP_REGISTER_INTERFACE(ifn_index,
710ad21a364SRandall Stewart 					    AF_INET6);
711ad21a364SRandall Stewart 					sctp_ifap->ifn_p->registered_af = AF_INET6;
712ad21a364SRandall Stewart 				}
71317205eccSRandall Stewart 			}
71417205eccSRandall Stewart 			sctp_free_ifn(sctp_ifap->ifn_p);
71517205eccSRandall Stewart 			sctp_ifap->ifn_p = NULL;
71617205eccSRandall Stewart 		}
71717205eccSRandall Stewart 	}
71817205eccSRandall Stewart #ifdef SCTP_DEBUG
71917205eccSRandall Stewart 	else {
720ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Del Addr-ifn:%d Could not find address:",
72142551e99SRandall Stewart 		    ifn_index);
722ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_PCB1, addr);
72342551e99SRandall Stewart 	}
72417205eccSRandall Stewart #endif
725ad81507eSRandall Stewart 
72642551e99SRandall Stewart out_now:
72742551e99SRandall Stewart 	SCTP_IPI_ADDR_UNLOCK();
728d06c82f1SRandall Stewart 	if (sctp_ifap) {
729d06c82f1SRandall Stewart 		struct sctp_laddr *wi;
730d06c82f1SRandall Stewart 
731d06c82f1SRandall Stewart 		wi = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_laddr, struct sctp_laddr);
732d06c82f1SRandall Stewart 		if (wi == NULL) {
733d06c82f1SRandall Stewart 			/*
734d06c82f1SRandall Stewart 			 * Gak, what can we do? We have lost an address
735d06c82f1SRandall Stewart 			 * change can you say HOSED?
736d06c82f1SRandall Stewart 			 */
737ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "Lost and address change ???\n");
738d06c82f1SRandall Stewart 
739d06c82f1SRandall Stewart 			/* Opps, must decrement the count */
740d06c82f1SRandall Stewart 			sctp_free_ifa(sctp_ifap);
741d06c82f1SRandall Stewart 			return;
742d06c82f1SRandall Stewart 		}
743d06c82f1SRandall Stewart 		SCTP_INCR_LADDR_COUNT();
744d06c82f1SRandall Stewart 		bzero(wi, sizeof(*wi));
745d61a0ae0SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
746d06c82f1SRandall Stewart 		wi->ifa = sctp_ifap;
747d06c82f1SRandall Stewart 		wi->action = SCTP_DEL_IP_ADDRESS;
748d06c82f1SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
749d06c82f1SRandall Stewart 		/*
750d06c82f1SRandall Stewart 		 * Should this really be a tailq? As it is we will process
751d06c82f1SRandall Stewart 		 * the newest first :-0
752d06c82f1SRandall Stewart 		 */
753d06c82f1SRandall Stewart 		LIST_INSERT_HEAD(&sctppcbinfo.addr_wq, wi, sctp_nxt_addr);
754207304d4SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
755207304d4SRandall Stewart 
756d06c82f1SRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
757d06c82f1SRandall Stewart 		    (struct sctp_inpcb *)NULL,
758d06c82f1SRandall Stewart 		    (struct sctp_tcb *)NULL,
759d06c82f1SRandall Stewart 		    (struct sctp_nets *)NULL);
760d06c82f1SRandall Stewart 	}
761d06c82f1SRandall Stewart 	return;
76242551e99SRandall Stewart }
763f8829a4aSRandall Stewart 
764f8829a4aSRandall Stewart 
765f8829a4aSRandall Stewart static struct sctp_tcb *
766f8829a4aSRandall Stewart sctp_tcb_special_locate(struct sctp_inpcb **inp_p, struct sockaddr *from,
767bff64a4dSRandall Stewart     struct sockaddr *to, struct sctp_nets **netp, uint32_t vrf_id)
768f8829a4aSRandall Stewart {
769f8829a4aSRandall Stewart 	/**** ASSUMSES THE CALLER holds the INP_INFO_RLOCK */
770f8829a4aSRandall Stewart 	/*
771f8829a4aSRandall Stewart 	 * If we support the TCP model, then we must now dig through to see
772f8829a4aSRandall Stewart 	 * if we can find our endpoint in the list of tcp ep's.
773f8829a4aSRandall Stewart 	 */
774f8829a4aSRandall Stewart 	uint16_t lport, rport;
775f8829a4aSRandall Stewart 	struct sctppcbhead *ephead;
776f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
777f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
778f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
779f8829a4aSRandall Stewart 	struct sctp_nets *net;
780f8829a4aSRandall Stewart 
781f8829a4aSRandall Stewart 	if ((to == NULL) || (from == NULL)) {
782f8829a4aSRandall Stewart 		return (NULL);
783f8829a4aSRandall Stewart 	}
784f8829a4aSRandall Stewart 	if (to->sa_family == AF_INET && from->sa_family == AF_INET) {
785f8829a4aSRandall Stewart 		lport = ((struct sockaddr_in *)to)->sin_port;
786f8829a4aSRandall Stewart 		rport = ((struct sockaddr_in *)from)->sin_port;
787f8829a4aSRandall Stewart 	} else if (to->sa_family == AF_INET6 && from->sa_family == AF_INET6) {
788f8829a4aSRandall Stewart 		lport = ((struct sockaddr_in6 *)to)->sin6_port;
789f8829a4aSRandall Stewart 		rport = ((struct sockaddr_in6 *)from)->sin6_port;
790f8829a4aSRandall Stewart 	} else {
791f8829a4aSRandall Stewart 		return NULL;
792f8829a4aSRandall Stewart 	}
793f8829a4aSRandall Stewart 	ephead = &sctppcbinfo.sctp_tcpephash[SCTP_PCBHASH_ALLADDR(
794f8829a4aSRandall Stewart 	    (lport + rport), sctppcbinfo.hashtcpmark)];
795f8829a4aSRandall Stewart 	/*
796f8829a4aSRandall Stewart 	 * Ok now for each of the guys in this bucket we must look and see:
797f8829a4aSRandall Stewart 	 * - Does the remote port match. - Does there single association's
798f8829a4aSRandall Stewart 	 * addresses match this address (to). If so we update p_ep to point
799f8829a4aSRandall Stewart 	 * to this ep and return the tcb from it.
800f8829a4aSRandall Stewart 	 */
801f8829a4aSRandall Stewart 	LIST_FOREACH(inp, ephead, sctp_hash) {
802f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(inp);
803f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
804f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
805f8829a4aSRandall Stewart 			continue;
806f8829a4aSRandall Stewart 		}
807d06c82f1SRandall Stewart 		if (lport != inp->sctp_lport) {
8081bb552e8SRandall Stewart 			SCTP_INP_RUNLOCK(inp);
809d06c82f1SRandall Stewart 			continue;
810d06c82f1SRandall Stewart 		}
811c105859eSRandall Stewart 		if (inp->def_vrf_id != vrf_id) {
812bff64a4dSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
813bff64a4dSRandall Stewart 			continue;
814bff64a4dSRandall Stewart 		}
815f8829a4aSRandall Stewart 		/* check to see if the ep has one of the addresses */
816f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
817f8829a4aSRandall Stewart 			/* We are NOT bound all, so look further */
818f8829a4aSRandall Stewart 			int match = 0;
819f8829a4aSRandall Stewart 
820f8829a4aSRandall Stewart 			LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
821f8829a4aSRandall Stewart 
822f8829a4aSRandall Stewart 				if (laddr->ifa == NULL) {
823ad81507eSRandall Stewart 					SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n", __FUNCTION__);
824f8829a4aSRandall Stewart 					continue;
825f8829a4aSRandall Stewart 				}
82642551e99SRandall Stewart 				if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) {
827ad81507eSRandall Stewart 					SCTPDBG(SCTP_DEBUG_PCB1, "ifa being deleted\n");
828f8829a4aSRandall Stewart 					continue;
829f8829a4aSRandall Stewart 				}
83042551e99SRandall Stewart 				if (laddr->ifa->address.sa.sa_family ==
831f8829a4aSRandall Stewart 				    to->sa_family) {
832f8829a4aSRandall Stewart 					/* see if it matches */
833f8829a4aSRandall Stewart 					struct sockaddr_in *intf_addr, *sin;
834f8829a4aSRandall Stewart 
83542551e99SRandall Stewart 					intf_addr = &laddr->ifa->address.sin;
836f8829a4aSRandall Stewart 					sin = (struct sockaddr_in *)to;
837f8829a4aSRandall Stewart 					if (from->sa_family == AF_INET) {
838f8829a4aSRandall Stewart 						if (sin->sin_addr.s_addr ==
839f8829a4aSRandall Stewart 						    intf_addr->sin_addr.s_addr) {
840f8829a4aSRandall Stewart 							match = 1;
841f8829a4aSRandall Stewart 							break;
842f8829a4aSRandall Stewart 						}
843f8829a4aSRandall Stewart 					} else {
844f8829a4aSRandall Stewart 						struct sockaddr_in6 *intf_addr6;
845f8829a4aSRandall Stewart 						struct sockaddr_in6 *sin6;
846f8829a4aSRandall Stewart 
847f8829a4aSRandall Stewart 						sin6 = (struct sockaddr_in6 *)
848f8829a4aSRandall Stewart 						    to;
84942551e99SRandall Stewart 						intf_addr6 = &laddr->ifa->address.sin6;
850f8829a4aSRandall Stewart 
851f8829a4aSRandall Stewart 						if (SCTP6_ARE_ADDR_EQUAL(&sin6->sin6_addr,
852f8829a4aSRandall Stewart 						    &intf_addr6->sin6_addr)) {
853f8829a4aSRandall Stewart 							match = 1;
854f8829a4aSRandall Stewart 							break;
855f8829a4aSRandall Stewart 						}
856f8829a4aSRandall Stewart 					}
857f8829a4aSRandall Stewart 				}
858f8829a4aSRandall Stewart 			}
859f8829a4aSRandall Stewart 			if (match == 0) {
860f8829a4aSRandall Stewart 				/* This endpoint does not have this address */
861f8829a4aSRandall Stewart 				SCTP_INP_RUNLOCK(inp);
862f8829a4aSRandall Stewart 				continue;
863f8829a4aSRandall Stewart 			}
864f8829a4aSRandall Stewart 		}
865f8829a4aSRandall Stewart 		/*
866f8829a4aSRandall Stewart 		 * Ok if we hit here the ep has the address, does it hold
867f8829a4aSRandall Stewart 		 * the tcb?
868f8829a4aSRandall Stewart 		 */
869f8829a4aSRandall Stewart 
870f8829a4aSRandall Stewart 		stcb = LIST_FIRST(&inp->sctp_asoc_list);
871f8829a4aSRandall Stewart 		if (stcb == NULL) {
872f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
873f8829a4aSRandall Stewart 			continue;
874f8829a4aSRandall Stewart 		}
875f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
876f8829a4aSRandall Stewart 		if (stcb->rport != rport) {
877f8829a4aSRandall Stewart 			/* remote port does not match. */
878f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
879f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
880f8829a4aSRandall Stewart 			continue;
881f8829a4aSRandall Stewart 		}
882f8829a4aSRandall Stewart 		/* Does this TCB have a matching address? */
883f8829a4aSRandall Stewart 		TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
884f8829a4aSRandall Stewart 
885f8829a4aSRandall Stewart 			if (net->ro._l_addr.sa.sa_family != from->sa_family) {
886f8829a4aSRandall Stewart 				/* not the same family, can't be a match */
887f8829a4aSRandall Stewart 				continue;
888f8829a4aSRandall Stewart 			}
889f8829a4aSRandall Stewart 			if (from->sa_family == AF_INET) {
890f8829a4aSRandall Stewart 				struct sockaddr_in *sin, *rsin;
891f8829a4aSRandall Stewart 
892f8829a4aSRandall Stewart 				sin = (struct sockaddr_in *)&net->ro._l_addr;
893f8829a4aSRandall Stewart 				rsin = (struct sockaddr_in *)from;
894f8829a4aSRandall Stewart 				if (sin->sin_addr.s_addr ==
895f8829a4aSRandall Stewart 				    rsin->sin_addr.s_addr) {
896f8829a4aSRandall Stewart 					/* found it */
897f8829a4aSRandall Stewart 					if (netp != NULL) {
898f8829a4aSRandall Stewart 						*netp = net;
899f8829a4aSRandall Stewart 					}
900f8829a4aSRandall Stewart 					/* Update the endpoint pointer */
901f8829a4aSRandall Stewart 					*inp_p = inp;
902f8829a4aSRandall Stewart 					SCTP_INP_RUNLOCK(inp);
903f8829a4aSRandall Stewart 					return (stcb);
904f8829a4aSRandall Stewart 				}
905f8829a4aSRandall Stewart 			} else {
906f8829a4aSRandall Stewart 				struct sockaddr_in6 *sin6, *rsin6;
907f8829a4aSRandall Stewart 
908f8829a4aSRandall Stewart 				sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
909f8829a4aSRandall Stewart 				rsin6 = (struct sockaddr_in6 *)from;
910f8829a4aSRandall Stewart 				if (SCTP6_ARE_ADDR_EQUAL(&sin6->sin6_addr,
911f8829a4aSRandall Stewart 				    &rsin6->sin6_addr)) {
912f8829a4aSRandall Stewart 					/* found it */
913f8829a4aSRandall Stewart 					if (netp != NULL) {
914f8829a4aSRandall Stewart 						*netp = net;
915f8829a4aSRandall Stewart 					}
916f8829a4aSRandall Stewart 					/* Update the endpoint pointer */
917f8829a4aSRandall Stewart 					*inp_p = inp;
918f8829a4aSRandall Stewart 					SCTP_INP_RUNLOCK(inp);
919f8829a4aSRandall Stewart 					return (stcb);
920f8829a4aSRandall Stewart 				}
921f8829a4aSRandall Stewart 			}
922f8829a4aSRandall Stewart 		}
923f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
924f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
925f8829a4aSRandall Stewart 	}
926f8829a4aSRandall Stewart 	return (NULL);
927f8829a4aSRandall Stewart }
928f8829a4aSRandall Stewart 
929f8829a4aSRandall Stewart /*
930f8829a4aSRandall Stewart  * rules for use
931f8829a4aSRandall Stewart  *
932f8829a4aSRandall Stewart  * 1) If I return a NULL you must decrement any INP ref cnt. 2) If I find an
933f8829a4aSRandall Stewart  * stcb, both will be locked (locked_tcb and stcb) but decrement will be done
934f8829a4aSRandall Stewart  * (if locked == NULL). 3) Decrement happens on return ONLY if locked ==
935f8829a4aSRandall Stewart  * NULL.
936f8829a4aSRandall Stewart  */
937f8829a4aSRandall Stewart 
938f8829a4aSRandall Stewart struct sctp_tcb *
939f8829a4aSRandall Stewart sctp_findassociation_ep_addr(struct sctp_inpcb **inp_p, struct sockaddr *remote,
940f8829a4aSRandall Stewart     struct sctp_nets **netp, struct sockaddr *local, struct sctp_tcb *locked_tcb)
941f8829a4aSRandall Stewart {
942f8829a4aSRandall Stewart 	struct sctpasochead *head;
943f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
944bff64a4dSRandall Stewart 	struct sctp_tcb *stcb = NULL;
945f8829a4aSRandall Stewart 	struct sctp_nets *net;
946f8829a4aSRandall Stewart 	uint16_t rport;
947f8829a4aSRandall Stewart 
948f8829a4aSRandall Stewart 	inp = *inp_p;
949f8829a4aSRandall Stewart 	if (remote->sa_family == AF_INET) {
950f8829a4aSRandall Stewart 		rport = (((struct sockaddr_in *)remote)->sin_port);
951f8829a4aSRandall Stewart 	} else if (remote->sa_family == AF_INET6) {
952f8829a4aSRandall Stewart 		rport = (((struct sockaddr_in6 *)remote)->sin6_port);
953f8829a4aSRandall Stewart 	} else {
954f8829a4aSRandall Stewart 		return (NULL);
955f8829a4aSRandall Stewart 	}
956f8829a4aSRandall Stewart 	if (locked_tcb) {
957f8829a4aSRandall Stewart 		/*
958f8829a4aSRandall Stewart 		 * UN-lock so we can do proper locking here this occurs when
959f8829a4aSRandall Stewart 		 * called from load_addresses_from_init.
960f8829a4aSRandall Stewart 		 */
961c4739e2fSRandall Stewart 		atomic_add_int(&locked_tcb->asoc.refcnt, 1);
962f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(locked_tcb);
963f8829a4aSRandall Stewart 	}
964f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
965f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) {
966bff64a4dSRandall Stewart 		/*-
967f8829a4aSRandall Stewart 		 * Now either this guy is our listener or it's the
968f8829a4aSRandall Stewart 		 * connector. If it is the one that issued the connect, then
969f8829a4aSRandall Stewart 		 * it's only chance is to be the first TCB in the list. If
970f8829a4aSRandall Stewart 		 * it is the acceptor, then do the special_lookup to hash
971f8829a4aSRandall Stewart 		 * and find the real inp.
972f8829a4aSRandall Stewart 		 */
973f8829a4aSRandall Stewart 		if ((inp->sctp_socket) && (inp->sctp_socket->so_qlimit)) {
974f8829a4aSRandall Stewart 			/* to is peer addr, from is my addr */
975f8829a4aSRandall Stewart 			stcb = sctp_tcb_special_locate(inp_p, remote, local,
976bff64a4dSRandall Stewart 			    netp, inp->def_vrf_id);
977f8829a4aSRandall Stewart 			if ((stcb != NULL) && (locked_tcb == NULL)) {
978f8829a4aSRandall Stewart 				/* we have a locked tcb, lower refcount */
979f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
980f8829a4aSRandall Stewart 			}
981f8829a4aSRandall Stewart 			if ((locked_tcb != NULL) && (locked_tcb != stcb)) {
982f8829a4aSRandall Stewart 				SCTP_INP_RLOCK(locked_tcb->sctp_ep);
983f8829a4aSRandall Stewart 				SCTP_TCB_LOCK(locked_tcb);
984c4739e2fSRandall Stewart 				atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
985f8829a4aSRandall Stewart 				SCTP_INP_RUNLOCK(locked_tcb->sctp_ep);
986f8829a4aSRandall Stewart 			}
987f8829a4aSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
988f8829a4aSRandall Stewart 			return (stcb);
989f8829a4aSRandall Stewart 		} else {
990f8829a4aSRandall Stewart 			SCTP_INP_WLOCK(inp);
991f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
992f8829a4aSRandall Stewart 				goto null_return;
993f8829a4aSRandall Stewart 			}
994f8829a4aSRandall Stewart 			stcb = LIST_FIRST(&inp->sctp_asoc_list);
995f8829a4aSRandall Stewart 			if (stcb == NULL) {
996f8829a4aSRandall Stewart 				goto null_return;
997f8829a4aSRandall Stewart 			}
998f8829a4aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
999f8829a4aSRandall Stewart 			if (stcb->rport != rport) {
1000f8829a4aSRandall Stewart 				/* remote port does not match. */
1001f8829a4aSRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
1002f8829a4aSRandall Stewart 				goto null_return;
1003f8829a4aSRandall Stewart 			}
1004f8829a4aSRandall Stewart 			/* now look at the list of remote addresses */
1005f8829a4aSRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1006a5d547adSRandall Stewart #ifdef INVARIANTS
1007f8829a4aSRandall Stewart 				if (net == (TAILQ_NEXT(net, sctp_next))) {
1008f8829a4aSRandall Stewart 					panic("Corrupt net list");
1009f8829a4aSRandall Stewart 				}
1010f8829a4aSRandall Stewart #endif
1011f8829a4aSRandall Stewart 				if (net->ro._l_addr.sa.sa_family !=
1012f8829a4aSRandall Stewart 				    remote->sa_family) {
1013f8829a4aSRandall Stewart 					/* not the same family */
1014f8829a4aSRandall Stewart 					continue;
1015f8829a4aSRandall Stewart 				}
1016f8829a4aSRandall Stewart 				if (remote->sa_family == AF_INET) {
1017f8829a4aSRandall Stewart 					struct sockaddr_in *sin, *rsin;
1018f8829a4aSRandall Stewart 
1019f8829a4aSRandall Stewart 					sin = (struct sockaddr_in *)
1020f8829a4aSRandall Stewart 					    &net->ro._l_addr;
1021f8829a4aSRandall Stewart 					rsin = (struct sockaddr_in *)remote;
1022f8829a4aSRandall Stewart 					if (sin->sin_addr.s_addr ==
1023f8829a4aSRandall Stewart 					    rsin->sin_addr.s_addr) {
1024f8829a4aSRandall Stewart 						/* found it */
1025f8829a4aSRandall Stewart 						if (netp != NULL) {
1026f8829a4aSRandall Stewart 							*netp = net;
1027f8829a4aSRandall Stewart 						}
1028f8829a4aSRandall Stewart 						if (locked_tcb == NULL) {
1029f8829a4aSRandall Stewart 							SCTP_INP_DECR_REF(inp);
1030f8829a4aSRandall Stewart 						} else if (locked_tcb != stcb) {
1031f8829a4aSRandall Stewart 							SCTP_TCB_LOCK(locked_tcb);
1032f8829a4aSRandall Stewart 						}
1033c4739e2fSRandall Stewart 						if (locked_tcb) {
1034c4739e2fSRandall Stewart 							atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
1035c4739e2fSRandall Stewart 						}
1036f8829a4aSRandall Stewart 						SCTP_INP_WUNLOCK(inp);
1037f8829a4aSRandall Stewart 						SCTP_INP_INFO_RUNLOCK();
1038f8829a4aSRandall Stewart 						return (stcb);
1039f8829a4aSRandall Stewart 					}
1040f8829a4aSRandall Stewart 				} else if (remote->sa_family == AF_INET6) {
1041f8829a4aSRandall Stewart 					struct sockaddr_in6 *sin6, *rsin6;
1042f8829a4aSRandall Stewart 
1043f8829a4aSRandall Stewart 					sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1044f8829a4aSRandall Stewart 					rsin6 = (struct sockaddr_in6 *)remote;
1045f8829a4aSRandall Stewart 					if (SCTP6_ARE_ADDR_EQUAL(&sin6->sin6_addr,
1046f8829a4aSRandall Stewart 					    &rsin6->sin6_addr)) {
1047f8829a4aSRandall Stewart 						/* found it */
1048f8829a4aSRandall Stewart 						if (netp != NULL) {
1049f8829a4aSRandall Stewart 							*netp = net;
1050f8829a4aSRandall Stewart 						}
1051f8829a4aSRandall Stewart 						if (locked_tcb == NULL) {
1052f8829a4aSRandall Stewart 							SCTP_INP_DECR_REF(inp);
1053f8829a4aSRandall Stewart 						} else if (locked_tcb != stcb) {
1054f8829a4aSRandall Stewart 							SCTP_TCB_LOCK(locked_tcb);
1055f8829a4aSRandall Stewart 						}
1056c4739e2fSRandall Stewart 						if (locked_tcb) {
1057c4739e2fSRandall Stewart 							atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
1058c4739e2fSRandall Stewart 						}
1059f8829a4aSRandall Stewart 						SCTP_INP_WUNLOCK(inp);
1060f8829a4aSRandall Stewart 						SCTP_INP_INFO_RUNLOCK();
1061f8829a4aSRandall Stewart 						return (stcb);
1062f8829a4aSRandall Stewart 					}
1063f8829a4aSRandall Stewart 				}
1064f8829a4aSRandall Stewart 			}
1065f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1066f8829a4aSRandall Stewart 		}
1067f8829a4aSRandall Stewart 	} else {
1068f8829a4aSRandall Stewart 		SCTP_INP_WLOCK(inp);
1069f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1070f8829a4aSRandall Stewart 			goto null_return;
1071f8829a4aSRandall Stewart 		}
1072f8829a4aSRandall Stewart 		head = &inp->sctp_tcbhash[SCTP_PCBHASH_ALLADDR(rport,
1073f8829a4aSRandall Stewart 		    inp->sctp_hashmark)];
1074f8829a4aSRandall Stewart 		if (head == NULL) {
1075f8829a4aSRandall Stewart 			goto null_return;
1076f8829a4aSRandall Stewart 		}
1077f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, head, sctp_tcbhash) {
1078f8829a4aSRandall Stewart 			if (stcb->rport != rport) {
1079f8829a4aSRandall Stewart 				/* remote port does not match */
1080f8829a4aSRandall Stewart 				continue;
1081f8829a4aSRandall Stewart 			}
1082f8829a4aSRandall Stewart 			/* now look at the list of remote addresses */
1083f8829a4aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
1084f8829a4aSRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1085a5d547adSRandall Stewart #ifdef INVARIANTS
1086f8829a4aSRandall Stewart 				if (net == (TAILQ_NEXT(net, sctp_next))) {
1087f8829a4aSRandall Stewart 					panic("Corrupt net list");
1088f8829a4aSRandall Stewart 				}
1089f8829a4aSRandall Stewart #endif
1090f8829a4aSRandall Stewart 				if (net->ro._l_addr.sa.sa_family !=
1091f8829a4aSRandall Stewart 				    remote->sa_family) {
1092f8829a4aSRandall Stewart 					/* not the same family */
1093f8829a4aSRandall Stewart 					continue;
1094f8829a4aSRandall Stewart 				}
1095f8829a4aSRandall Stewart 				if (remote->sa_family == AF_INET) {
1096f8829a4aSRandall Stewart 					struct sockaddr_in *sin, *rsin;
1097f8829a4aSRandall Stewart 
1098f8829a4aSRandall Stewart 					sin = (struct sockaddr_in *)
1099f8829a4aSRandall Stewart 					    &net->ro._l_addr;
1100f8829a4aSRandall Stewart 					rsin = (struct sockaddr_in *)remote;
1101f8829a4aSRandall Stewart 					if (sin->sin_addr.s_addr ==
1102f8829a4aSRandall Stewart 					    rsin->sin_addr.s_addr) {
1103f8829a4aSRandall Stewart 						/* found it */
1104f8829a4aSRandall Stewart 						if (netp != NULL) {
1105f8829a4aSRandall Stewart 							*netp = net;
1106f8829a4aSRandall Stewart 						}
1107f8829a4aSRandall Stewart 						if (locked_tcb == NULL) {
1108f8829a4aSRandall Stewart 							SCTP_INP_DECR_REF(inp);
1109f8829a4aSRandall Stewart 						} else if (locked_tcb != stcb) {
1110f8829a4aSRandall Stewart 							SCTP_TCB_LOCK(locked_tcb);
1111f8829a4aSRandall Stewart 						}
1112c4739e2fSRandall Stewart 						if (locked_tcb) {
1113c4739e2fSRandall Stewart 							atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
1114c4739e2fSRandall Stewart 						}
1115f8829a4aSRandall Stewart 						SCTP_INP_WUNLOCK(inp);
1116f8829a4aSRandall Stewart 						SCTP_INP_INFO_RUNLOCK();
1117f8829a4aSRandall Stewart 						return (stcb);
1118f8829a4aSRandall Stewart 					}
1119f8829a4aSRandall Stewart 				} else if (remote->sa_family == AF_INET6) {
1120f8829a4aSRandall Stewart 					struct sockaddr_in6 *sin6, *rsin6;
1121f8829a4aSRandall Stewart 
1122f8829a4aSRandall Stewart 					sin6 = (struct sockaddr_in6 *)
1123f8829a4aSRandall Stewart 					    &net->ro._l_addr;
1124f8829a4aSRandall Stewart 					rsin6 = (struct sockaddr_in6 *)remote;
1125f8829a4aSRandall Stewart 					if (SCTP6_ARE_ADDR_EQUAL(&sin6->sin6_addr,
1126f8829a4aSRandall Stewart 					    &rsin6->sin6_addr)) {
1127f8829a4aSRandall Stewart 						/* found it */
1128f8829a4aSRandall Stewart 						if (netp != NULL) {
1129f8829a4aSRandall Stewart 							*netp = net;
1130f8829a4aSRandall Stewart 						}
1131f8829a4aSRandall Stewart 						if (locked_tcb == NULL) {
1132f8829a4aSRandall Stewart 							SCTP_INP_DECR_REF(inp);
1133f8829a4aSRandall Stewart 						} else if (locked_tcb != stcb) {
1134f8829a4aSRandall Stewart 							SCTP_TCB_LOCK(locked_tcb);
1135f8829a4aSRandall Stewart 						}
1136c4739e2fSRandall Stewart 						if (locked_tcb) {
1137c4739e2fSRandall Stewart 							atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
1138c4739e2fSRandall Stewart 						}
1139f8829a4aSRandall Stewart 						SCTP_INP_WUNLOCK(inp);
1140f8829a4aSRandall Stewart 						SCTP_INP_INFO_RUNLOCK();
1141f8829a4aSRandall Stewart 						return (stcb);
1142f8829a4aSRandall Stewart 					}
1143f8829a4aSRandall Stewart 				}
1144f8829a4aSRandall Stewart 			}
1145f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1146f8829a4aSRandall Stewart 		}
1147f8829a4aSRandall Stewart 	}
1148f8829a4aSRandall Stewart null_return:
1149f8829a4aSRandall Stewart 	/* clean up for returning null */
1150f8829a4aSRandall Stewart 	if (locked_tcb) {
1151f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(locked_tcb);
1152c4739e2fSRandall Stewart 		atomic_subtract_int(&locked_tcb->asoc.refcnt, 1);
1153f8829a4aSRandall Stewart 	}
1154f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(inp);
1155f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
1156f8829a4aSRandall Stewart 	/* not found */
1157f8829a4aSRandall Stewart 	return (NULL);
1158f8829a4aSRandall Stewart }
1159f8829a4aSRandall Stewart 
1160f8829a4aSRandall Stewart /*
1161f8829a4aSRandall Stewart  * Find an association for a specific endpoint using the association id given
1162f8829a4aSRandall Stewart  * out in the COMM_UP notification
1163f8829a4aSRandall Stewart  */
1164f8829a4aSRandall Stewart 
1165f8829a4aSRandall Stewart struct sctp_tcb *
1166f8829a4aSRandall Stewart sctp_findassociation_ep_asocid(struct sctp_inpcb *inp, sctp_assoc_t asoc_id, int want_lock)
1167f8829a4aSRandall Stewart {
1168f8829a4aSRandall Stewart 	/*
1169f8829a4aSRandall Stewart 	 * Use my the assoc_id to find a endpoint
1170f8829a4aSRandall Stewart 	 */
1171f8829a4aSRandall Stewart 	struct sctpasochead *head;
1172f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1173f8829a4aSRandall Stewart 	uint32_t id;
1174f8829a4aSRandall Stewart 
1175f8829a4aSRandall Stewart 	if (asoc_id == 0 || inp == NULL) {
1176f8829a4aSRandall Stewart 		return (NULL);
1177f8829a4aSRandall Stewart 	}
1178f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
1179f8829a4aSRandall Stewart 	id = (uint32_t) asoc_id;
1180f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_asochash[SCTP_PCBHASH_ASOC(id,
1181f8829a4aSRandall Stewart 	    sctppcbinfo.hashasocmark)];
1182f8829a4aSRandall Stewart 	if (head == NULL) {
1183f8829a4aSRandall Stewart 		/* invalid id TSNH */
1184f8829a4aSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
1185f8829a4aSRandall Stewart 		return (NULL);
1186f8829a4aSRandall Stewart 	}
1187f8829a4aSRandall Stewart 	LIST_FOREACH(stcb, head, sctp_asocs) {
1188f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(stcb->sctp_ep);
1189f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1190f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1191f8829a4aSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1192f8829a4aSRandall Stewart 			return (NULL);
1193f8829a4aSRandall Stewart 		}
1194f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_id == id) {
1195f8829a4aSRandall Stewart 			/* candidate */
1196f8829a4aSRandall Stewart 			if (inp != stcb->sctp_ep) {
1197f8829a4aSRandall Stewart 				/*
1198f8829a4aSRandall Stewart 				 * some other guy has the same id active (id
1199f8829a4aSRandall Stewart 				 * collision ??).
1200f8829a4aSRandall Stewart 				 */
1201f8829a4aSRandall Stewart 				SCTP_INP_RUNLOCK(stcb->sctp_ep);
1202f8829a4aSRandall Stewart 				continue;
1203f8829a4aSRandall Stewart 			}
1204f8829a4aSRandall Stewart 			if (want_lock) {
1205f8829a4aSRandall Stewart 				SCTP_TCB_LOCK(stcb);
1206f8829a4aSRandall Stewart 			}
1207f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1208f8829a4aSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1209f8829a4aSRandall Stewart 			return (stcb);
1210f8829a4aSRandall Stewart 		}
1211f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(stcb->sctp_ep);
1212f8829a4aSRandall Stewart 	}
1213f8829a4aSRandall Stewart 	/* Ok if we missed here, lets try the restart hash */
1214a5d547adSRandall Stewart 	head = &sctppcbinfo.sctp_restarthash[SCTP_PCBHASH_ASOC(id, sctppcbinfo.hashrestartmark)];
1215f8829a4aSRandall Stewart 	if (head == NULL) {
1216f8829a4aSRandall Stewart 		/* invalid id TSNH */
1217f8829a4aSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
1218f8829a4aSRandall Stewart 		return (NULL);
1219f8829a4aSRandall Stewart 	}
1220f8829a4aSRandall Stewart 	LIST_FOREACH(stcb, head, sctp_tcbrestarhash) {
1221f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(stcb->sctp_ep);
1222f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1223f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1224d61a0ae0SRandall Stewart 			continue;
1225f8829a4aSRandall Stewart 		}
1226d61a0ae0SRandall Stewart 		if (want_lock) {
1227f8829a4aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
1228d61a0ae0SRandall Stewart 		}
1229f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_id == id) {
1230f8829a4aSRandall Stewart 			/* candidate */
1231d61a0ae0SRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1232f8829a4aSRandall Stewart 			if (inp != stcb->sctp_ep) {
1233f8829a4aSRandall Stewart 				/*
1234f8829a4aSRandall Stewart 				 * some other guy has the same id active (id
1235f8829a4aSRandall Stewart 				 * collision ??).
1236f8829a4aSRandall Stewart 				 */
1237d61a0ae0SRandall Stewart 				if (want_lock) {
1238f8829a4aSRandall Stewart 					SCTP_TCB_UNLOCK(stcb);
1239d61a0ae0SRandall Stewart 				}
1240f8829a4aSRandall Stewart 				continue;
1241f8829a4aSRandall Stewart 			}
1242f8829a4aSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1243f8829a4aSRandall Stewart 			return (stcb);
1244d61a0ae0SRandall Stewart 		} else {
1245d61a0ae0SRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1246f8829a4aSRandall Stewart 		}
1247d61a0ae0SRandall Stewart 		if (want_lock) {
1248f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1249f8829a4aSRandall Stewart 		}
1250d61a0ae0SRandall Stewart 	}
1251f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
1252f8829a4aSRandall Stewart 	return (NULL);
1253f8829a4aSRandall Stewart }
1254f8829a4aSRandall Stewart 
1255f8829a4aSRandall Stewart 
1256f8829a4aSRandall Stewart static struct sctp_inpcb *
1257f8829a4aSRandall Stewart sctp_endpoint_probe(struct sockaddr *nam, struct sctppcbhead *head,
125842551e99SRandall Stewart     uint16_t lport, uint32_t vrf_id)
1259f8829a4aSRandall Stewart {
1260f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1261f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
1262f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
1263f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
126442551e99SRandall Stewart 	int fnd;
1265f8829a4aSRandall Stewart 
1266f8829a4aSRandall Stewart 	/*
1267f8829a4aSRandall Stewart 	 * Endpoing probe expects that the INP_INFO is locked.
1268f8829a4aSRandall Stewart 	 */
1269f8829a4aSRandall Stewart 	if (nam->sa_family == AF_INET) {
1270f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)nam;
1271f8829a4aSRandall Stewart 		sin6 = NULL;
1272f8829a4aSRandall Stewart 	} else if (nam->sa_family == AF_INET6) {
1273f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)nam;
1274f8829a4aSRandall Stewart 		sin = NULL;
1275f8829a4aSRandall Stewart 	} else {
1276f8829a4aSRandall Stewart 		/* unsupported family */
1277f8829a4aSRandall Stewart 		return (NULL);
1278f8829a4aSRandall Stewart 	}
1279f8829a4aSRandall Stewart 	if (head == NULL)
1280f8829a4aSRandall Stewart 		return (NULL);
1281f8829a4aSRandall Stewart 	LIST_FOREACH(inp, head, sctp_hash) {
1282f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(inp);
1283f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1284f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
1285f8829a4aSRandall Stewart 			continue;
1286f8829a4aSRandall Stewart 		}
1287f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) &&
1288f8829a4aSRandall Stewart 		    (inp->sctp_lport == lport)) {
1289f8829a4aSRandall Stewart 			/* got it */
1290f8829a4aSRandall Stewart 			if ((nam->sa_family == AF_INET) &&
1291f8829a4aSRandall Stewart 			    (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
129244b7479bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
1293f8829a4aSRandall Stewart 				/* IPv4 on a IPv6 socket with ONLY IPv6 set */
1294f8829a4aSRandall Stewart 				SCTP_INP_RUNLOCK(inp);
1295f8829a4aSRandall Stewart 				continue;
1296f8829a4aSRandall Stewart 			}
1297f8829a4aSRandall Stewart 			/* A V6 address and the endpoint is NOT bound V6 */
1298f8829a4aSRandall Stewart 			if (nam->sa_family == AF_INET6 &&
1299f8829a4aSRandall Stewart 			    (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
1300f8829a4aSRandall Stewart 				SCTP_INP_RUNLOCK(inp);
1301f8829a4aSRandall Stewart 				continue;
1302f8829a4aSRandall Stewart 			}
130342551e99SRandall Stewart 			/* does a VRF id match? */
130442551e99SRandall Stewart 			fnd = 0;
130542551e99SRandall Stewart 			if (inp->def_vrf_id == vrf_id)
130642551e99SRandall Stewart 				fnd = 1;
130742551e99SRandall Stewart 
1308f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
130942551e99SRandall Stewart 			if (!fnd)
131042551e99SRandall Stewart 				continue;
1311f8829a4aSRandall Stewart 			return (inp);
1312f8829a4aSRandall Stewart 		}
1313f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
1314f8829a4aSRandall Stewart 	}
1315f8829a4aSRandall Stewart 
1316f8829a4aSRandall Stewart 	if ((nam->sa_family == AF_INET) &&
1317f8829a4aSRandall Stewart 	    (sin->sin_addr.s_addr == INADDR_ANY)) {
1318f8829a4aSRandall Stewart 		/* Can't hunt for one that has no address specified */
1319f8829a4aSRandall Stewart 		return (NULL);
1320f8829a4aSRandall Stewart 	} else if ((nam->sa_family == AF_INET6) &&
1321f8829a4aSRandall Stewart 	    (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))) {
1322f8829a4aSRandall Stewart 		/* Can't hunt for one that has no address specified */
1323f8829a4aSRandall Stewart 		return (NULL);
1324f8829a4aSRandall Stewart 	}
1325f8829a4aSRandall Stewart 	/*
1326f8829a4aSRandall Stewart 	 * ok, not bound to all so see if we can find a EP bound to this
1327f8829a4aSRandall Stewart 	 * address.
1328f8829a4aSRandall Stewart 	 */
1329f8829a4aSRandall Stewart 	LIST_FOREACH(inp, head, sctp_hash) {
1330f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(inp);
1331f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1332f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
1333f8829a4aSRandall Stewart 			continue;
1334f8829a4aSRandall Stewart 		}
1335f8829a4aSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL)) {
1336f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
1337f8829a4aSRandall Stewart 			continue;
1338f8829a4aSRandall Stewart 		}
1339f8829a4aSRandall Stewart 		/*
1340f8829a4aSRandall Stewart 		 * Ok this could be a likely candidate, look at all of its
1341f8829a4aSRandall Stewart 		 * addresses
1342f8829a4aSRandall Stewart 		 */
1343f8829a4aSRandall Stewart 		if (inp->sctp_lport != lport) {
1344f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
1345f8829a4aSRandall Stewart 			continue;
1346f8829a4aSRandall Stewart 		}
134742551e99SRandall Stewart 		/* does a VRF id match? */
134842551e99SRandall Stewart 		fnd = 0;
134942551e99SRandall Stewart 		if (inp->def_vrf_id == vrf_id)
135042551e99SRandall Stewart 			fnd = 1;
135142551e99SRandall Stewart 
135242551e99SRandall Stewart 		if (!fnd) {
135342551e99SRandall Stewart 			SCTP_INP_RUNLOCK(inp);
135442551e99SRandall Stewart 			continue;
135542551e99SRandall Stewart 		}
1356f8829a4aSRandall Stewart 		LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
1357f8829a4aSRandall Stewart 			if (laddr->ifa == NULL) {
1358ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n",
1359ad81507eSRandall Stewart 				    __FUNCTION__);
1360f8829a4aSRandall Stewart 				continue;
1361f8829a4aSRandall Stewart 			}
1362ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "Ok laddr->ifa:%p is possible, ",
1363f8829a4aSRandall Stewart 			    laddr->ifa);
136442551e99SRandall Stewart 			if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) {
1365ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "Huh IFA being deleted\n");
1366f8829a4aSRandall Stewart 				continue;
1367f8829a4aSRandall Stewart 			}
136842551e99SRandall Stewart 			if (laddr->ifa->address.sa.sa_family == nam->sa_family) {
1369f8829a4aSRandall Stewart 				/* possible, see if it matches */
1370f8829a4aSRandall Stewart 				struct sockaddr_in *intf_addr;
1371f8829a4aSRandall Stewart 
137242551e99SRandall Stewart 				intf_addr = &laddr->ifa->address.sin;
1373f8829a4aSRandall Stewart 				if (nam->sa_family == AF_INET) {
1374f8829a4aSRandall Stewart 					if (sin->sin_addr.s_addr ==
1375f8829a4aSRandall Stewart 					    intf_addr->sin_addr.s_addr) {
1376f8829a4aSRandall Stewart 						SCTP_INP_RUNLOCK(inp);
1377f8829a4aSRandall Stewart 						return (inp);
1378f8829a4aSRandall Stewart 					}
1379f8829a4aSRandall Stewart 				} else if (nam->sa_family == AF_INET6) {
1380f8829a4aSRandall Stewart 					struct sockaddr_in6 *intf_addr6;
1381f8829a4aSRandall Stewart 
138242551e99SRandall Stewart 					intf_addr6 = &laddr->ifa->address.sin6;
1383f8829a4aSRandall Stewart 					if (SCTP6_ARE_ADDR_EQUAL(&sin6->sin6_addr,
1384f8829a4aSRandall Stewart 					    &intf_addr6->sin6_addr)) {
1385f8829a4aSRandall Stewart 						SCTP_INP_RUNLOCK(inp);
1386f8829a4aSRandall Stewart 						return (inp);
1387f8829a4aSRandall Stewart 					}
1388f8829a4aSRandall Stewart 				}
1389f8829a4aSRandall Stewart 			}
1390f8829a4aSRandall Stewart 		}
1391f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
1392f8829a4aSRandall Stewart 	}
1393f8829a4aSRandall Stewart 	return (NULL);
1394f8829a4aSRandall Stewart }
1395f8829a4aSRandall Stewart 
1396f8829a4aSRandall Stewart struct sctp_inpcb *
1397ad81507eSRandall Stewart sctp_pcb_findep(struct sockaddr *nam, int find_tcp_pool, int have_lock,
1398ad81507eSRandall Stewart     uint32_t vrf_id)
1399f8829a4aSRandall Stewart {
1400f8829a4aSRandall Stewart 	/*
1401f8829a4aSRandall Stewart 	 * First we check the hash table to see if someone has this port
1402f8829a4aSRandall Stewart 	 * bound with just the port.
1403f8829a4aSRandall Stewart 	 */
1404f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1405f8829a4aSRandall Stewart 	struct sctppcbhead *head;
1406f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
1407f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
1408f8829a4aSRandall Stewart 	int lport;
1409f8829a4aSRandall Stewart 
1410f8829a4aSRandall Stewart 	if (nam->sa_family == AF_INET) {
1411f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)nam;
1412f8829a4aSRandall Stewart 		lport = ((struct sockaddr_in *)nam)->sin_port;
1413f8829a4aSRandall Stewart 	} else if (nam->sa_family == AF_INET6) {
1414f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)nam;
1415f8829a4aSRandall Stewart 		lport = ((struct sockaddr_in6 *)nam)->sin6_port;
1416f8829a4aSRandall Stewart 	} else {
1417f8829a4aSRandall Stewart 		/* unsupported family */
1418f8829a4aSRandall Stewart 		return (NULL);
1419f8829a4aSRandall Stewart 	}
1420f8829a4aSRandall Stewart 	/*
1421f8829a4aSRandall Stewart 	 * I could cheat here and just cast to one of the types but we will
1422f8829a4aSRandall Stewart 	 * do it right. It also provides the check against an Unsupported
1423f8829a4aSRandall Stewart 	 * type too.
1424f8829a4aSRandall Stewart 	 */
1425f8829a4aSRandall Stewart 	/* Find the head of the ALLADDR chain */
1426f8829a4aSRandall Stewart 	if (have_lock == 0) {
1427f8829a4aSRandall Stewart 		SCTP_INP_INFO_RLOCK();
1428f8829a4aSRandall Stewart 	}
1429f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_ephash[SCTP_PCBHASH_ALLADDR(lport,
1430f8829a4aSRandall Stewart 	    sctppcbinfo.hashmark)];
143142551e99SRandall Stewart 	inp = sctp_endpoint_probe(nam, head, lport, vrf_id);
1432f8829a4aSRandall Stewart 
1433f8829a4aSRandall Stewart 	/*
1434f8829a4aSRandall Stewart 	 * If the TCP model exists it could be that the main listening
1435f8829a4aSRandall Stewart 	 * endpoint is gone but there exists a connected socket for this guy
1436f8829a4aSRandall Stewart 	 * yet. If so we can return the first one that we find. This may NOT
1437f8829a4aSRandall Stewart 	 * be the correct one but the sctp_findassociation_ep_addr has
1438f8829a4aSRandall Stewart 	 * further code to look at all TCP models.
1439f8829a4aSRandall Stewart 	 */
1440f8829a4aSRandall Stewart 	if (inp == NULL && find_tcp_pool) {
1441f8829a4aSRandall Stewart 		unsigned int i;
1442f8829a4aSRandall Stewart 
1443f8829a4aSRandall Stewart 		for (i = 0; i < sctppcbinfo.hashtblsize; i++) {
1444f8829a4aSRandall Stewart 			/*
1445f8829a4aSRandall Stewart 			 * This is real gross, but we do NOT have a remote
1446f8829a4aSRandall Stewart 			 * port at this point depending on who is calling.
1447f8829a4aSRandall Stewart 			 * We must therefore look for ANY one that matches
1448f8829a4aSRandall Stewart 			 * our local port :/
1449f8829a4aSRandall Stewart 			 */
1450f8829a4aSRandall Stewart 			head = &sctppcbinfo.sctp_tcpephash[i];
1451f8829a4aSRandall Stewart 			if (LIST_FIRST(head)) {
145242551e99SRandall Stewart 				inp = sctp_endpoint_probe(nam, head, lport, vrf_id);
1453f8829a4aSRandall Stewart 				if (inp) {
1454f8829a4aSRandall Stewart 					/* Found one */
1455f8829a4aSRandall Stewart 					break;
1456f8829a4aSRandall Stewart 				}
1457f8829a4aSRandall Stewart 			}
1458f8829a4aSRandall Stewart 		}
1459f8829a4aSRandall Stewart 	}
1460f8829a4aSRandall Stewart 	if (inp) {
1461f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
1462f8829a4aSRandall Stewart 	}
1463f8829a4aSRandall Stewart 	if (have_lock == 0) {
1464f8829a4aSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
1465f8829a4aSRandall Stewart 	}
1466f8829a4aSRandall Stewart 	return (inp);
1467f8829a4aSRandall Stewart }
1468f8829a4aSRandall Stewart 
1469f8829a4aSRandall Stewart /*
1470f8829a4aSRandall Stewart  * Find an association for an endpoint with the pointer to whom you want to
1471f8829a4aSRandall Stewart  * send to and the endpoint pointer. The address can be IPv4 or IPv6. We may
1472f8829a4aSRandall Stewart  * need to change the *to to some other struct like a mbuf...
1473f8829a4aSRandall Stewart  */
1474f8829a4aSRandall Stewart struct sctp_tcb *
1475f8829a4aSRandall Stewart sctp_findassociation_addr_sa(struct sockaddr *to, struct sockaddr *from,
14769a972525SRandall Stewart     struct sctp_inpcb **inp_p, struct sctp_nets **netp, int find_tcp_pool,
14779a972525SRandall Stewart     uint32_t vrf_id)
1478f8829a4aSRandall Stewart {
1479c105859eSRandall Stewart 	struct sctp_inpcb *inp = NULL;
1480f8829a4aSRandall Stewart 	struct sctp_tcb *retval;
1481f8829a4aSRandall Stewart 
1482f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
1483f8829a4aSRandall Stewart 	if (find_tcp_pool) {
1484f8829a4aSRandall Stewart 		if (inp_p != NULL) {
14859a972525SRandall Stewart 			retval = sctp_tcb_special_locate(inp_p, from, to, netp,
14869a972525SRandall Stewart 			    vrf_id);
1487f8829a4aSRandall Stewart 		} else {
14889a972525SRandall Stewart 			retval = sctp_tcb_special_locate(&inp, from, to, netp,
14899a972525SRandall Stewart 			    vrf_id);
1490f8829a4aSRandall Stewart 		}
1491f8829a4aSRandall Stewart 		if (retval != NULL) {
1492f8829a4aSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1493f8829a4aSRandall Stewart 			return (retval);
1494f8829a4aSRandall Stewart 		}
1495f8829a4aSRandall Stewart 	}
149642551e99SRandall Stewart 	inp = sctp_pcb_findep(to, 0, 1, vrf_id);
1497f8829a4aSRandall Stewart 	if (inp_p != NULL) {
1498f8829a4aSRandall Stewart 		*inp_p = inp;
1499f8829a4aSRandall Stewart 	}
1500f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
1501f8829a4aSRandall Stewart 
1502f8829a4aSRandall Stewart 	if (inp == NULL) {
1503f8829a4aSRandall Stewart 		return (NULL);
1504f8829a4aSRandall Stewart 	}
1505f8829a4aSRandall Stewart 	/*
1506f8829a4aSRandall Stewart 	 * ok, we have an endpoint, now lets find the assoc for it (if any)
1507f8829a4aSRandall Stewart 	 * we now place the source address or from in the to of the find
1508f8829a4aSRandall Stewart 	 * endpoint call. Since in reality this chain is used from the
1509f8829a4aSRandall Stewart 	 * inbound packet side.
1510f8829a4aSRandall Stewart 	 */
1511f8829a4aSRandall Stewart 	if (inp_p != NULL) {
15129a972525SRandall Stewart 		retval = sctp_findassociation_ep_addr(inp_p, from, netp, to,
15139a972525SRandall Stewart 		    NULL);
1514f8829a4aSRandall Stewart 	} else {
15159a972525SRandall Stewart 		retval = sctp_findassociation_ep_addr(&inp, from, netp, to,
15169a972525SRandall Stewart 		    NULL);
1517f8829a4aSRandall Stewart 	}
1518f8829a4aSRandall Stewart 	return retval;
1519f8829a4aSRandall Stewart }
1520f8829a4aSRandall Stewart 
1521f8829a4aSRandall Stewart 
1522f8829a4aSRandall Stewart /*
1523f8829a4aSRandall Stewart  * This routine will grub through the mbuf that is a INIT or INIT-ACK and
1524f8829a4aSRandall Stewart  * find all addresses that the sender has specified in any address list. Each
1525f8829a4aSRandall Stewart  * address will be used to lookup the TCB and see if one exits.
1526f8829a4aSRandall Stewart  */
1527f8829a4aSRandall Stewart static struct sctp_tcb *
1528f8829a4aSRandall Stewart sctp_findassociation_special_addr(struct mbuf *m, int iphlen, int offset,
1529f8829a4aSRandall Stewart     struct sctphdr *sh, struct sctp_inpcb **inp_p, struct sctp_nets **netp,
1530f8829a4aSRandall Stewart     struct sockaddr *dest)
1531f8829a4aSRandall Stewart {
1532f8829a4aSRandall Stewart 	struct sockaddr_in sin4;
1533f8829a4aSRandall Stewart 	struct sockaddr_in6 sin6;
1534f8829a4aSRandall Stewart 	struct sctp_paramhdr *phdr, parm_buf;
1535f8829a4aSRandall Stewart 	struct sctp_tcb *retval;
1536f8829a4aSRandall Stewart 	uint32_t ptype, plen;
1537f8829a4aSRandall Stewart 
1538f8829a4aSRandall Stewart 	memset(&sin4, 0, sizeof(sin4));
1539f8829a4aSRandall Stewart 	memset(&sin6, 0, sizeof(sin6));
1540f8829a4aSRandall Stewart 	sin4.sin_len = sizeof(sin4);
1541f8829a4aSRandall Stewart 	sin4.sin_family = AF_INET;
1542f8829a4aSRandall Stewart 	sin4.sin_port = sh->src_port;
1543f8829a4aSRandall Stewart 	sin6.sin6_len = sizeof(sin6);
1544f8829a4aSRandall Stewart 	sin6.sin6_family = AF_INET6;
1545f8829a4aSRandall Stewart 	sin6.sin6_port = sh->src_port;
1546f8829a4aSRandall Stewart 
1547f8829a4aSRandall Stewart 	retval = NULL;
1548f8829a4aSRandall Stewart 	offset += sizeof(struct sctp_init_chunk);
1549f8829a4aSRandall Stewart 
1550f8829a4aSRandall Stewart 	phdr = sctp_get_next_param(m, offset, &parm_buf, sizeof(parm_buf));
1551f8829a4aSRandall Stewart 	while (phdr != NULL) {
1552f8829a4aSRandall Stewart 		/* now we must see if we want the parameter */
1553f8829a4aSRandall Stewart 		ptype = ntohs(phdr->param_type);
1554f8829a4aSRandall Stewart 		plen = ntohs(phdr->param_length);
1555f8829a4aSRandall Stewart 		if (plen == 0) {
1556f8829a4aSRandall Stewart 			break;
1557f8829a4aSRandall Stewart 		}
1558f8829a4aSRandall Stewart 		if (ptype == SCTP_IPV4_ADDRESS &&
1559f8829a4aSRandall Stewart 		    plen == sizeof(struct sctp_ipv4addr_param)) {
1560f8829a4aSRandall Stewart 			/* Get the rest of the address */
1561f8829a4aSRandall Stewart 			struct sctp_ipv4addr_param ip4_parm, *p4;
1562f8829a4aSRandall Stewart 
1563f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
1564d06c82f1SRandall Stewart 			    (struct sctp_paramhdr *)&ip4_parm, min(plen, sizeof(ip4_parm)));
1565f8829a4aSRandall Stewart 			if (phdr == NULL) {
1566f8829a4aSRandall Stewart 				return (NULL);
1567f8829a4aSRandall Stewart 			}
1568f8829a4aSRandall Stewart 			p4 = (struct sctp_ipv4addr_param *)phdr;
1569f8829a4aSRandall Stewart 			memcpy(&sin4.sin_addr, &p4->addr, sizeof(p4->addr));
1570f8829a4aSRandall Stewart 			/* look it up */
1571f8829a4aSRandall Stewart 			retval = sctp_findassociation_ep_addr(inp_p,
1572f8829a4aSRandall Stewart 			    (struct sockaddr *)&sin4, netp, dest, NULL);
1573f8829a4aSRandall Stewart 			if (retval != NULL) {
1574f8829a4aSRandall Stewart 				return (retval);
1575f8829a4aSRandall Stewart 			}
1576f8829a4aSRandall Stewart 		} else if (ptype == SCTP_IPV6_ADDRESS &&
1577f8829a4aSRandall Stewart 		    plen == sizeof(struct sctp_ipv6addr_param)) {
1578f8829a4aSRandall Stewart 			/* Get the rest of the address */
1579f8829a4aSRandall Stewart 			struct sctp_ipv6addr_param ip6_parm, *p6;
1580f8829a4aSRandall Stewart 
1581f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
1582d06c82f1SRandall Stewart 			    (struct sctp_paramhdr *)&ip6_parm, min(plen, sizeof(ip6_parm)));
1583f8829a4aSRandall Stewart 			if (phdr == NULL) {
1584f8829a4aSRandall Stewart 				return (NULL);
1585f8829a4aSRandall Stewart 			}
1586f8829a4aSRandall Stewart 			p6 = (struct sctp_ipv6addr_param *)phdr;
1587f8829a4aSRandall Stewart 			memcpy(&sin6.sin6_addr, &p6->addr, sizeof(p6->addr));
1588f8829a4aSRandall Stewart 			/* look it up */
1589f8829a4aSRandall Stewart 			retval = sctp_findassociation_ep_addr(inp_p,
1590f8829a4aSRandall Stewart 			    (struct sockaddr *)&sin6, netp, dest, NULL);
1591f8829a4aSRandall Stewart 			if (retval != NULL) {
1592f8829a4aSRandall Stewart 				return (retval);
1593f8829a4aSRandall Stewart 			}
1594f8829a4aSRandall Stewart 		}
1595f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
1596f8829a4aSRandall Stewart 		phdr = sctp_get_next_param(m, offset, &parm_buf,
1597f8829a4aSRandall Stewart 		    sizeof(parm_buf));
1598f8829a4aSRandall Stewart 	}
1599f8829a4aSRandall Stewart 	return (NULL);
1600f8829a4aSRandall Stewart }
1601f8829a4aSRandall Stewart 
1602f8829a4aSRandall Stewart 
1603f8829a4aSRandall Stewart static struct sctp_tcb *
1604f8829a4aSRandall Stewart sctp_findassoc_by_vtag(struct sockaddr *from, uint32_t vtag,
1605f8829a4aSRandall Stewart     struct sctp_inpcb **inp_p, struct sctp_nets **netp, uint16_t rport,
1606f8829a4aSRandall Stewart     uint16_t lport, int skip_src_check)
1607f8829a4aSRandall Stewart {
1608f8829a4aSRandall Stewart 	/*
1609f8829a4aSRandall Stewart 	 * Use my vtag to hash. If we find it we then verify the source addr
1610f8829a4aSRandall Stewart 	 * is in the assoc. If all goes well we save a bit on rec of a
1611f8829a4aSRandall Stewart 	 * packet.
1612f8829a4aSRandall Stewart 	 */
1613f8829a4aSRandall Stewart 	struct sctpasochead *head;
1614f8829a4aSRandall Stewart 	struct sctp_nets *net;
1615f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1616f8829a4aSRandall Stewart 
1617f8829a4aSRandall Stewart 	*netp = NULL;
1618f8829a4aSRandall Stewart 	*inp_p = NULL;
1619f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
1620f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_asochash[SCTP_PCBHASH_ASOC(vtag,
1621f8829a4aSRandall Stewart 	    sctppcbinfo.hashasocmark)];
1622f8829a4aSRandall Stewart 	if (head == NULL) {
1623f8829a4aSRandall Stewart 		/* invalid vtag */
1624f8829a4aSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
1625f8829a4aSRandall Stewart 		return (NULL);
1626f8829a4aSRandall Stewart 	}
1627f8829a4aSRandall Stewart 	LIST_FOREACH(stcb, head, sctp_asocs) {
1628f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(stcb->sctp_ep);
1629f8829a4aSRandall Stewart 		if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
1630f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(stcb->sctp_ep);
1631d06c82f1SRandall Stewart 			continue;
1632f8829a4aSRandall Stewart 		}
1633f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
1634f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(stcb->sctp_ep);
1635f8829a4aSRandall Stewart 		if (stcb->asoc.my_vtag == vtag) {
1636f8829a4aSRandall Stewart 			/* candidate */
1637f8829a4aSRandall Stewart 			if (stcb->rport != rport) {
1638f8829a4aSRandall Stewart 				/*
1639f8829a4aSRandall Stewart 				 * we could remove this if vtags are unique
1640f8829a4aSRandall Stewart 				 * across the system.
1641f8829a4aSRandall Stewart 				 */
1642f8829a4aSRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
1643f8829a4aSRandall Stewart 				continue;
1644f8829a4aSRandall Stewart 			}
1645f8829a4aSRandall Stewart 			if (stcb->sctp_ep->sctp_lport != lport) {
1646f8829a4aSRandall Stewart 				/*
1647f8829a4aSRandall Stewart 				 * we could remove this if vtags are unique
1648f8829a4aSRandall Stewart 				 * across the system.
1649f8829a4aSRandall Stewart 				 */
1650f8829a4aSRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
1651f8829a4aSRandall Stewart 				continue;
1652f8829a4aSRandall Stewart 			}
1653f8829a4aSRandall Stewart 			if (skip_src_check) {
1654f8829a4aSRandall Stewart 				*netp = NULL;	/* unknown */
1655ad81507eSRandall Stewart 				if (inp_p)
1656f8829a4aSRandall Stewart 					*inp_p = stcb->sctp_ep;
1657f8829a4aSRandall Stewart 				SCTP_INP_INFO_RUNLOCK();
1658f8829a4aSRandall Stewart 				return (stcb);
1659f8829a4aSRandall Stewart 			}
1660f8829a4aSRandall Stewart 			net = sctp_findnet(stcb, from);
1661f8829a4aSRandall Stewart 			if (net) {
1662f8829a4aSRandall Stewart 				/* yep its him. */
1663f8829a4aSRandall Stewart 				*netp = net;
1664f8829a4aSRandall Stewart 				SCTP_STAT_INCR(sctps_vtagexpress);
1665f8829a4aSRandall Stewart 				*inp_p = stcb->sctp_ep;
1666f8829a4aSRandall Stewart 				SCTP_INP_INFO_RUNLOCK();
1667f8829a4aSRandall Stewart 				return (stcb);
1668f8829a4aSRandall Stewart 			} else {
1669f8829a4aSRandall Stewart 				/*
1670f8829a4aSRandall Stewart 				 * not him, this should only happen in rare
1671f8829a4aSRandall Stewart 				 * cases so I peg it.
1672f8829a4aSRandall Stewart 				 */
1673f8829a4aSRandall Stewart 				SCTP_STAT_INCR(sctps_vtagbogus);
1674f8829a4aSRandall Stewart 			}
1675f8829a4aSRandall Stewart 		}
1676f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1677f8829a4aSRandall Stewart 	}
1678f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
1679f8829a4aSRandall Stewart 	return (NULL);
1680f8829a4aSRandall Stewart }
1681f8829a4aSRandall Stewart 
1682f8829a4aSRandall Stewart /*
1683f8829a4aSRandall Stewart  * Find an association with the pointer to the inbound IP packet. This can be
1684f8829a4aSRandall Stewart  * a IPv4 or IPv6 packet.
1685f8829a4aSRandall Stewart  */
1686f8829a4aSRandall Stewart struct sctp_tcb *
1687f8829a4aSRandall Stewart sctp_findassociation_addr(struct mbuf *m, int iphlen, int offset,
1688f8829a4aSRandall Stewart     struct sctphdr *sh, struct sctp_chunkhdr *ch,
1689bff64a4dSRandall Stewart     struct sctp_inpcb **inp_p, struct sctp_nets **netp, uint32_t vrf_id)
1690f8829a4aSRandall Stewart {
1691f8829a4aSRandall Stewart 	int find_tcp_pool;
1692f8829a4aSRandall Stewart 	struct ip *iph;
1693f8829a4aSRandall Stewart 	struct sctp_tcb *retval;
1694f8829a4aSRandall Stewart 	struct sockaddr_storage to_store, from_store;
1695f8829a4aSRandall Stewart 	struct sockaddr *to = (struct sockaddr *)&to_store;
1696f8829a4aSRandall Stewart 	struct sockaddr *from = (struct sockaddr *)&from_store;
1697f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1698f8829a4aSRandall Stewart 
1699f8829a4aSRandall Stewart 	iph = mtod(m, struct ip *);
1700f8829a4aSRandall Stewart 	if (iph->ip_v == IPVERSION) {
1701f8829a4aSRandall Stewart 		/* its IPv4 */
1702f8829a4aSRandall Stewart 		struct sockaddr_in *from4;
1703f8829a4aSRandall Stewart 
1704f8829a4aSRandall Stewart 		from4 = (struct sockaddr_in *)&from_store;
1705f8829a4aSRandall Stewart 		bzero(from4, sizeof(*from4));
1706f8829a4aSRandall Stewart 		from4->sin_family = AF_INET;
1707f8829a4aSRandall Stewart 		from4->sin_len = sizeof(struct sockaddr_in);
1708f8829a4aSRandall Stewart 		from4->sin_addr.s_addr = iph->ip_src.s_addr;
1709f8829a4aSRandall Stewart 		from4->sin_port = sh->src_port;
1710f8829a4aSRandall Stewart 	} else if (iph->ip_v == (IPV6_VERSION >> 4)) {
1711f8829a4aSRandall Stewart 		/* its IPv6 */
1712f8829a4aSRandall Stewart 		struct ip6_hdr *ip6;
1713f8829a4aSRandall Stewart 		struct sockaddr_in6 *from6;
1714f8829a4aSRandall Stewart 
1715f8829a4aSRandall Stewart 		ip6 = mtod(m, struct ip6_hdr *);
1716f8829a4aSRandall Stewart 		from6 = (struct sockaddr_in6 *)&from_store;
1717f8829a4aSRandall Stewart 		bzero(from6, sizeof(*from6));
1718f8829a4aSRandall Stewart 		from6->sin6_family = AF_INET6;
1719f8829a4aSRandall Stewart 		from6->sin6_len = sizeof(struct sockaddr_in6);
1720f8829a4aSRandall Stewart 		from6->sin6_addr = ip6->ip6_src;
1721f8829a4aSRandall Stewart 		from6->sin6_port = sh->src_port;
1722f8829a4aSRandall Stewart 		/* Get the scopes in properly to the sin6 addr's */
1723f8829a4aSRandall Stewart 		/* we probably don't need these operations */
1724f8829a4aSRandall Stewart 		(void)sa6_recoverscope(from6);
1725f8829a4aSRandall Stewart 		sa6_embedscope(from6, ip6_use_defzone);
1726f8829a4aSRandall Stewart 	} else {
1727f8829a4aSRandall Stewart 		/* Currently not supported. */
1728f8829a4aSRandall Stewart 		return (NULL);
1729f8829a4aSRandall Stewart 	}
1730f8829a4aSRandall Stewart 	if (sh->v_tag) {
1731f8829a4aSRandall Stewart 		/* we only go down this path if vtag is non-zero */
1732f8829a4aSRandall Stewart 		retval = sctp_findassoc_by_vtag(from, ntohl(sh->v_tag),
1733f8829a4aSRandall Stewart 		    inp_p, netp, sh->src_port, sh->dest_port, 0);
1734f8829a4aSRandall Stewart 		if (retval) {
1735f8829a4aSRandall Stewart 			return (retval);
1736f8829a4aSRandall Stewart 		}
1737f8829a4aSRandall Stewart 	}
1738f8829a4aSRandall Stewart 	if (iph->ip_v == IPVERSION) {
1739f8829a4aSRandall Stewart 		/* its IPv4 */
1740f8829a4aSRandall Stewart 		struct sockaddr_in *to4;
1741f8829a4aSRandall Stewart 
1742f8829a4aSRandall Stewart 		to4 = (struct sockaddr_in *)&to_store;
1743f8829a4aSRandall Stewart 		bzero(to4, sizeof(*to4));
1744f8829a4aSRandall Stewart 		to4->sin_family = AF_INET;
1745f8829a4aSRandall Stewart 		to4->sin_len = sizeof(struct sockaddr_in);
1746f8829a4aSRandall Stewart 		to4->sin_addr.s_addr = iph->ip_dst.s_addr;
1747f8829a4aSRandall Stewart 		to4->sin_port = sh->dest_port;
1748f8829a4aSRandall Stewart 	} else if (iph->ip_v == (IPV6_VERSION >> 4)) {
1749f8829a4aSRandall Stewart 		/* its IPv6 */
1750f8829a4aSRandall Stewart 		struct ip6_hdr *ip6;
1751f8829a4aSRandall Stewart 		struct sockaddr_in6 *to6;
1752f8829a4aSRandall Stewart 
1753f8829a4aSRandall Stewart 		ip6 = mtod(m, struct ip6_hdr *);
1754f8829a4aSRandall Stewart 		to6 = (struct sockaddr_in6 *)&to_store;
1755f8829a4aSRandall Stewart 		bzero(to6, sizeof(*to6));
1756f8829a4aSRandall Stewart 		to6->sin6_family = AF_INET6;
1757f8829a4aSRandall Stewart 		to6->sin6_len = sizeof(struct sockaddr_in6);
1758f8829a4aSRandall Stewart 		to6->sin6_addr = ip6->ip6_dst;
1759f8829a4aSRandall Stewart 		to6->sin6_port = sh->dest_port;
1760f8829a4aSRandall Stewart 		/* Get the scopes in properly to the sin6 addr's */
1761f8829a4aSRandall Stewart 		/* we probably don't need these operations */
1762f8829a4aSRandall Stewart 		(void)sa6_recoverscope(to6);
1763f8829a4aSRandall Stewart 		sa6_embedscope(to6, ip6_use_defzone);
1764f8829a4aSRandall Stewart 	}
1765f8829a4aSRandall Stewart 	find_tcp_pool = 0;
1766f8829a4aSRandall Stewart 	if ((ch->chunk_type != SCTP_INITIATION) &&
1767f8829a4aSRandall Stewart 	    (ch->chunk_type != SCTP_INITIATION_ACK) &&
1768f8829a4aSRandall Stewart 	    (ch->chunk_type != SCTP_COOKIE_ACK) &&
1769f8829a4aSRandall Stewart 	    (ch->chunk_type != SCTP_COOKIE_ECHO)) {
1770f8829a4aSRandall Stewart 		/* Other chunk types go to the tcp pool. */
1771f8829a4aSRandall Stewart 		find_tcp_pool = 1;
1772f8829a4aSRandall Stewart 	}
1773f8829a4aSRandall Stewart 	if (inp_p) {
1774f8829a4aSRandall Stewart 		retval = sctp_findassociation_addr_sa(to, from, inp_p, netp,
177542551e99SRandall Stewart 		    find_tcp_pool, vrf_id);
1776f8829a4aSRandall Stewart 		inp = *inp_p;
1777f8829a4aSRandall Stewart 	} else {
1778f8829a4aSRandall Stewart 		retval = sctp_findassociation_addr_sa(to, from, &inp, netp,
177942551e99SRandall Stewart 		    find_tcp_pool, vrf_id);
1780f8829a4aSRandall Stewart 	}
1781ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB1, "retval:%p inp:%p\n", retval, inp);
1782f8829a4aSRandall Stewart 	if (retval == NULL && inp) {
1783f8829a4aSRandall Stewart 		/* Found a EP but not this address */
1784f8829a4aSRandall Stewart 		if ((ch->chunk_type == SCTP_INITIATION) ||
1785f8829a4aSRandall Stewart 		    (ch->chunk_type == SCTP_INITIATION_ACK)) {
1786d06c82f1SRandall Stewart 			/*-
1787f8829a4aSRandall Stewart 			 * special hook, we do NOT return linp or an
1788f8829a4aSRandall Stewart 			 * association that is linked to an existing
1789f8829a4aSRandall Stewart 			 * association that is under the TCP pool (i.e. no
1790f8829a4aSRandall Stewart 			 * listener exists). The endpoint finding routine
1791f8829a4aSRandall Stewart 			 * will always find a listner before examining the
1792f8829a4aSRandall Stewart 			 * TCP pool.
1793f8829a4aSRandall Stewart 			 */
1794f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) {
1795f8829a4aSRandall Stewart 				if (inp_p) {
1796f8829a4aSRandall Stewart 					*inp_p = NULL;
1797f8829a4aSRandall Stewart 				}
1798f8829a4aSRandall Stewart 				return (NULL);
1799f8829a4aSRandall Stewart 			}
1800f8829a4aSRandall Stewart 			retval = sctp_findassociation_special_addr(m, iphlen,
1801f8829a4aSRandall Stewart 			    offset, sh, &inp, netp, to);
1802f8829a4aSRandall Stewart 			if (inp_p != NULL) {
1803f8829a4aSRandall Stewart 				*inp_p = inp;
1804f8829a4aSRandall Stewart 			}
1805f8829a4aSRandall Stewart 		}
1806f8829a4aSRandall Stewart 	}
1807ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB1, "retval is %p\n", retval);
1808f8829a4aSRandall Stewart 	return (retval);
1809f8829a4aSRandall Stewart }
1810f8829a4aSRandall Stewart 
1811f8829a4aSRandall Stewart /*
1812f8829a4aSRandall Stewart  * lookup an association by an ASCONF lookup address.
1813f8829a4aSRandall Stewart  * if the lookup address is 0.0.0.0 or ::0, use the vtag to do the lookup
1814f8829a4aSRandall Stewart  */
1815f8829a4aSRandall Stewart struct sctp_tcb *
1816f8829a4aSRandall Stewart sctp_findassociation_ep_asconf(struct mbuf *m, int iphlen, int offset,
1817f8829a4aSRandall Stewart     struct sctphdr *sh, struct sctp_inpcb **inp_p, struct sctp_nets **netp)
1818f8829a4aSRandall Stewart {
1819f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1820f8829a4aSRandall Stewart 	struct sockaddr_in *sin;
1821f8829a4aSRandall Stewart 	struct sockaddr_in6 *sin6;
1822f8829a4aSRandall Stewart 	struct sockaddr_storage local_store, remote_store;
1823f8829a4aSRandall Stewart 	struct ip *iph;
1824f8829a4aSRandall Stewart 	struct sctp_paramhdr parm_buf, *phdr;
1825f8829a4aSRandall Stewart 	int ptype;
1826f8829a4aSRandall Stewart 	int zero_address = 0;
1827f8829a4aSRandall Stewart 
1828f8829a4aSRandall Stewart 
1829f8829a4aSRandall Stewart 	memset(&local_store, 0, sizeof(local_store));
1830f8829a4aSRandall Stewart 	memset(&remote_store, 0, sizeof(remote_store));
1831f8829a4aSRandall Stewart 
1832f8829a4aSRandall Stewart 	/* First get the destination address setup too. */
1833f8829a4aSRandall Stewart 	iph = mtod(m, struct ip *);
1834f8829a4aSRandall Stewart 	if (iph->ip_v == IPVERSION) {
1835f8829a4aSRandall Stewart 		/* its IPv4 */
1836f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&local_store;
1837f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
1838f8829a4aSRandall Stewart 		sin->sin_len = sizeof(*sin);
1839f8829a4aSRandall Stewart 		sin->sin_port = sh->dest_port;
1840f8829a4aSRandall Stewart 		sin->sin_addr.s_addr = iph->ip_dst.s_addr;
1841f8829a4aSRandall Stewart 	} else if (iph->ip_v == (IPV6_VERSION >> 4)) {
1842f8829a4aSRandall Stewart 		/* its IPv6 */
1843f8829a4aSRandall Stewart 		struct ip6_hdr *ip6;
1844f8829a4aSRandall Stewart 
1845f8829a4aSRandall Stewart 		ip6 = mtod(m, struct ip6_hdr *);
1846f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&local_store;
1847f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
1848f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(*sin6);
1849f8829a4aSRandall Stewart 		sin6->sin6_port = sh->dest_port;
1850f8829a4aSRandall Stewart 		sin6->sin6_addr = ip6->ip6_dst;
1851f8829a4aSRandall Stewart 	} else {
1852f8829a4aSRandall Stewart 		return NULL;
1853f8829a4aSRandall Stewart 	}
1854f8829a4aSRandall Stewart 
1855f8829a4aSRandall Stewart 	phdr = sctp_get_next_param(m, offset + sizeof(struct sctp_asconf_chunk),
1856f8829a4aSRandall Stewart 	    &parm_buf, sizeof(struct sctp_paramhdr));
1857f8829a4aSRandall Stewart 	if (phdr == NULL) {
1858ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf lookup addr\n",
1859ad81507eSRandall Stewart 		    __FUNCTION__);
1860f8829a4aSRandall Stewart 		return NULL;
1861f8829a4aSRandall Stewart 	}
1862f8829a4aSRandall Stewart 	ptype = (int)((uint32_t) ntohs(phdr->param_type));
1863f8829a4aSRandall Stewart 	/* get the correlation address */
1864f8829a4aSRandall Stewart 	if (ptype == SCTP_IPV6_ADDRESS) {
1865f8829a4aSRandall Stewart 		/* ipv6 address param */
1866f8829a4aSRandall Stewart 		struct sctp_ipv6addr_param *p6, p6_buf;
1867f8829a4aSRandall Stewart 
1868f8829a4aSRandall Stewart 		if (ntohs(phdr->param_length) != sizeof(struct sctp_ipv6addr_param)) {
1869f8829a4aSRandall Stewart 			return NULL;
1870f8829a4aSRandall Stewart 		}
1871f8829a4aSRandall Stewart 		p6 = (struct sctp_ipv6addr_param *)sctp_get_next_param(m,
1872f8829a4aSRandall Stewart 		    offset + sizeof(struct sctp_asconf_chunk),
1873f8829a4aSRandall Stewart 		    &p6_buf.ph, sizeof(*p6));
1874f8829a4aSRandall Stewart 		if (p6 == NULL) {
1875ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf v6 lookup addr\n",
1876ad81507eSRandall Stewart 			    __FUNCTION__);
1877f8829a4aSRandall Stewart 			return (NULL);
1878f8829a4aSRandall Stewart 		}
1879f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&remote_store;
1880f8829a4aSRandall Stewart 		sin6->sin6_family = AF_INET6;
1881f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(*sin6);
1882f8829a4aSRandall Stewart 		sin6->sin6_port = sh->src_port;
1883f8829a4aSRandall Stewart 		memcpy(&sin6->sin6_addr, &p6->addr, sizeof(struct in6_addr));
1884f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))
1885f8829a4aSRandall Stewart 			zero_address = 1;
1886f8829a4aSRandall Stewart 	} else if (ptype == SCTP_IPV4_ADDRESS) {
1887f8829a4aSRandall Stewart 		/* ipv4 address param */
1888f8829a4aSRandall Stewart 		struct sctp_ipv4addr_param *p4, p4_buf;
1889f8829a4aSRandall Stewart 
1890f8829a4aSRandall Stewart 		if (ntohs(phdr->param_length) != sizeof(struct sctp_ipv4addr_param)) {
1891f8829a4aSRandall Stewart 			return NULL;
1892f8829a4aSRandall Stewart 		}
1893f8829a4aSRandall Stewart 		p4 = (struct sctp_ipv4addr_param *)sctp_get_next_param(m,
1894f8829a4aSRandall Stewart 		    offset + sizeof(struct sctp_asconf_chunk),
1895f8829a4aSRandall Stewart 		    &p4_buf.ph, sizeof(*p4));
1896f8829a4aSRandall Stewart 		if (p4 == NULL) {
1897ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_INPUT3, "%s: failed to get asconf v4 lookup addr\n",
1898ad81507eSRandall Stewart 			    __FUNCTION__);
1899f8829a4aSRandall Stewart 			return (NULL);
1900f8829a4aSRandall Stewart 		}
1901f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)&remote_store;
1902f8829a4aSRandall Stewart 		sin->sin_family = AF_INET;
1903f8829a4aSRandall Stewart 		sin->sin_len = sizeof(*sin);
1904f8829a4aSRandall Stewart 		sin->sin_port = sh->src_port;
1905f8829a4aSRandall Stewart 		memcpy(&sin->sin_addr, &p4->addr, sizeof(struct in_addr));
1906f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == INADDR_ANY)
1907f8829a4aSRandall Stewart 			zero_address = 1;
1908f8829a4aSRandall Stewart 	} else {
1909f8829a4aSRandall Stewart 		/* invalid address param type */
1910f8829a4aSRandall Stewart 		return NULL;
1911f8829a4aSRandall Stewart 	}
1912f8829a4aSRandall Stewart 
1913f8829a4aSRandall Stewart 	if (zero_address) {
1914f8829a4aSRandall Stewart 		stcb = sctp_findassoc_by_vtag(NULL, ntohl(sh->v_tag), inp_p,
1915f8829a4aSRandall Stewart 		    netp, sh->src_port, sh->dest_port, 1);
1916f8829a4aSRandall Stewart 		/*
1917f8829a4aSRandall Stewart 		 * printf("findassociation_ep_asconf: zero lookup address
1918f8829a4aSRandall Stewart 		 * finds stcb 0x%x\n", (uint32_t)stcb);
1919f8829a4aSRandall Stewart 		 */
1920f8829a4aSRandall Stewart 	} else {
1921f8829a4aSRandall Stewart 		stcb = sctp_findassociation_ep_addr(inp_p,
1922f8829a4aSRandall Stewart 		    (struct sockaddr *)&remote_store, netp,
1923f8829a4aSRandall Stewart 		    (struct sockaddr *)&local_store, NULL);
1924f8829a4aSRandall Stewart 	}
1925f8829a4aSRandall Stewart 	return (stcb);
1926f8829a4aSRandall Stewart }
1927f8829a4aSRandall Stewart 
1928f8829a4aSRandall Stewart 
1929f8829a4aSRandall Stewart /*
1930f8829a4aSRandall Stewart  * allocate a sctp_inpcb and setup a temporary binding to a port/all
1931f8829a4aSRandall Stewart  * addresses. This way if we don't get a bind we by default pick a ephemeral
1932f8829a4aSRandall Stewart  * port with all addresses bound.
1933f8829a4aSRandall Stewart  */
1934f8829a4aSRandall Stewart int
1935f4c93d24SRandall Stewart sctp_inpcb_alloc(struct socket *so, uint32_t vrf_id)
1936f8829a4aSRandall Stewart {
1937f8829a4aSRandall Stewart 	/*
1938f8829a4aSRandall Stewart 	 * we get called when a new endpoint starts up. We need to allocate
1939f8829a4aSRandall Stewart 	 * the sctp_inpcb structure from the zone and init it. Mark it as
1940f8829a4aSRandall Stewart 	 * unbound and find a port that we can use as an ephemeral with
1941f8829a4aSRandall Stewart 	 * INADDR_ANY. If the user binds later no problem we can then add in
1942f8829a4aSRandall Stewart 	 * the specific addresses. And setup the default parameters for the
1943f8829a4aSRandall Stewart 	 * EP.
1944f8829a4aSRandall Stewart 	 */
1945f8829a4aSRandall Stewart 	int i, error;
1946f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1947f8829a4aSRandall Stewart 	struct sctp_pcb *m;
1948f8829a4aSRandall Stewart 	struct timeval time;
1949f8829a4aSRandall Stewart 	sctp_sharedkey_t *null_key;
1950f8829a4aSRandall Stewart 
1951f8829a4aSRandall Stewart 	error = 0;
1952f8829a4aSRandall Stewart 
1953f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
1954f42a358aSRandall Stewart 	inp = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_ep, struct sctp_inpcb);
1955f8829a4aSRandall Stewart 	if (inp == NULL) {
1956ad81507eSRandall Stewart 		SCTP_PRINTF("Out of SCTP-INPCB structures - no resources\n");
1957f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
1958c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS);
1959f8829a4aSRandall Stewart 		return (ENOBUFS);
1960f8829a4aSRandall Stewart 	}
1961f8829a4aSRandall Stewart 	/* zap it */
1962f8829a4aSRandall Stewart 	bzero(inp, sizeof(*inp));
1963f8829a4aSRandall Stewart 
1964f8829a4aSRandall Stewart 	/* bump generations */
1965f8829a4aSRandall Stewart 	/* setup socket pointers */
1966f8829a4aSRandall Stewart 	inp->sctp_socket = so;
1967f8829a4aSRandall Stewart 	inp->ip_inp.inp.inp_socket = so;
1968f8829a4aSRandall Stewart 
196962c1ff9cSRandall Stewart 	inp->partial_delivery_point = SCTP_SB_LIMIT_RCV(so) >> SCTP_PARTIAL_DELIVERY_SHIFT;
1970f8829a4aSRandall Stewart 	inp->sctp_frag_point = SCTP_DEFAULT_MAXSEGMENT;
1971f8829a4aSRandall Stewart 
1972b2630c29SGeorge V. Neville-Neil #ifdef IPSEC
1973f8829a4aSRandall Stewart 	{
1974f8829a4aSRandall Stewart 		struct inpcbpolicy *pcb_sp = NULL;
1975f8829a4aSRandall Stewart 
19762cb64cb2SGeorge V. Neville-Neil 		error = ipsec_init_policy(so, &pcb_sp);
1977f8829a4aSRandall Stewart 		/* Arrange to share the policy */
1978f8829a4aSRandall Stewart 		inp->ip_inp.inp.inp_sp = pcb_sp;
1979f8829a4aSRandall Stewart 		((struct in6pcb *)(&inp->ip_inp.inp))->in6p_sp = pcb_sp;
1980f8829a4aSRandall Stewart 	}
1981f8829a4aSRandall Stewart 	if (error != 0) {
1982f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_ep, inp);
1983f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
1984f8829a4aSRandall Stewart 		return error;
1985f8829a4aSRandall Stewart 	}
1986b2630c29SGeorge V. Neville-Neil #endif				/* IPSEC */
1987f8829a4aSRandall Stewart 	SCTP_INCR_EP_COUNT();
1988f8829a4aSRandall Stewart 	inp->ip_inp.inp.inp_ip_ttl = ip_defttl;
1989f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
1990f8829a4aSRandall Stewart 
1991f8829a4aSRandall Stewart 	so->so_pcb = (caddr_t)inp;
1992f8829a4aSRandall Stewart 
199342551e99SRandall Stewart 	if ((SCTP_SO_TYPE(so) == SOCK_DGRAM) ||
199442551e99SRandall Stewart 	    (SCTP_SO_TYPE(so) == SOCK_SEQPACKET)) {
1995f8829a4aSRandall Stewart 		/* UDP style socket */
1996f8829a4aSRandall Stewart 		inp->sctp_flags = (SCTP_PCB_FLAGS_UDPTYPE |
1997f8829a4aSRandall Stewart 		    SCTP_PCB_FLAGS_UNBOUND);
1998f8829a4aSRandall Stewart 		/* Be sure it is NON-BLOCKING IO for UDP */
199942551e99SRandall Stewart 		/* SCTP_SET_SO_NBIO(so); */
200042551e99SRandall Stewart 	} else if (SCTP_SO_TYPE(so) == SOCK_STREAM) {
2001f8829a4aSRandall Stewart 		/* TCP style socket */
2002f8829a4aSRandall Stewart 		inp->sctp_flags = (SCTP_PCB_FLAGS_TCPTYPE |
2003f8829a4aSRandall Stewart 		    SCTP_PCB_FLAGS_UNBOUND);
2004f8829a4aSRandall Stewart 		/* Be sure we have blocking IO by default */
200542551e99SRandall Stewart 		SCTP_CLEAR_SO_NBIO(so);
2006f8829a4aSRandall Stewart 	} else {
2007f8829a4aSRandall Stewart 		/*
2008f8829a4aSRandall Stewart 		 * unsupported socket type (RAW, etc)- in case we missed it
2009f8829a4aSRandall Stewart 		 * in protosw
2010f8829a4aSRandall Stewart 		 */
2011c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EOPNOTSUPP);
2012851b7298SRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_ep, inp);
2013f8829a4aSRandall Stewart 		return (EOPNOTSUPP);
2014f8829a4aSRandall Stewart 	}
2015c4739e2fSRandall Stewart 	if (sctp_default_frag_interleave == SCTP_FRAG_LEVEL_1) {
2016d61a0ae0SRandall Stewart 		sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
2017c4739e2fSRandall Stewart 		sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
2018c4739e2fSRandall Stewart 	} else if (sctp_default_frag_interleave == SCTP_FRAG_LEVEL_2) {
2019c4739e2fSRandall Stewart 		sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
2020c4739e2fSRandall Stewart 		sctp_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
2021c4739e2fSRandall Stewart 	} else if (sctp_default_frag_interleave == SCTP_FRAG_LEVEL_0) {
2022c4739e2fSRandall Stewart 		sctp_feature_off(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
2023c4739e2fSRandall Stewart 		sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
2024c4739e2fSRandall Stewart 	}
202544b7479bSRandall Stewart 	inp->sctp_tcbhash = SCTP_HASH_INIT(sctp_pcbtblsize,
2026f8829a4aSRandall Stewart 	    &inp->sctp_hashmark);
2027f8829a4aSRandall Stewart 	if (inp->sctp_tcbhash == NULL) {
2028ad81507eSRandall Stewart 		SCTP_PRINTF("Out of SCTP-INPCB->hashinit - no resources\n");
2029c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS);
2030851b7298SRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_ep, inp);
2031f8829a4aSRandall Stewart 		return (ENOBUFS);
2032f8829a4aSRandall Stewart 	}
2033f4c93d24SRandall Stewart 	inp->def_vrf_id = vrf_id;
203442551e99SRandall Stewart 
2035f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
2036f8829a4aSRandall Stewart 	SCTP_INP_LOCK_INIT(inp);
2037e1461651SRandall Stewart 	INP_LOCK_INIT(&inp->ip_inp.inp, "inp", "sctpinp");
2038f8829a4aSRandall Stewart 	SCTP_INP_READ_INIT(inp);
2039f8829a4aSRandall Stewart 	SCTP_ASOC_CREATE_LOCK_INIT(inp);
2040f8829a4aSRandall Stewart 	/* lock the new ep */
2041f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(inp);
2042f8829a4aSRandall Stewart 
2043f8829a4aSRandall Stewart 	/* add it to the info area */
2044f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(&sctppcbinfo.listhead, inp, sctp_list);
2045f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
2046f8829a4aSRandall Stewart 
2047f8829a4aSRandall Stewart 	TAILQ_INIT(&inp->read_queue);
2048f8829a4aSRandall Stewart 	LIST_INIT(&inp->sctp_addr_list);
204942551e99SRandall Stewart 
2050f8829a4aSRandall Stewart 	LIST_INIT(&inp->sctp_asoc_list);
2051f8829a4aSRandall Stewart 
2052a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS
2053a5d547adSRandall Stewart 	/* TEMP CODE */
2054a5d547adSRandall Stewart 	LIST_INIT(&inp->sctp_asoc_free_list);
2055a5d547adSRandall Stewart #endif
2056f8829a4aSRandall Stewart 	/* Init the timer structure for signature change */
2057139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&inp->sctp_ep.signature_change.timer);
2058f8829a4aSRandall Stewart 	inp->sctp_ep.signature_change.type = SCTP_TIMER_TYPE_NEWCOOKIE;
2059f8829a4aSRandall Stewart 
2060f8829a4aSRandall Stewart 	/* now init the actual endpoint default data */
2061f8829a4aSRandall Stewart 	m = &inp->sctp_ep;
2062f8829a4aSRandall Stewart 
2063f8829a4aSRandall Stewart 	/* setup the base timeout information */
2064f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_SEND] = SEC_TO_TICKS(SCTP_SEND_SEC);	/* needed ? */
2065f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_INIT] = SEC_TO_TICKS(SCTP_INIT_SEC);	/* needed ? */
2066f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_RECV] = MSEC_TO_TICKS(sctp_delayed_sack_time_default);
2067f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = MSEC_TO_TICKS(sctp_heartbeat_interval_default);
2068f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_PMTU] = SEC_TO_TICKS(sctp_pmtu_raise_time_default);
2069f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN] = SEC_TO_TICKS(sctp_shutdown_guard_time_default);
2070f8829a4aSRandall Stewart 	m->sctp_timeoutticks[SCTP_TIMER_SIGNATURE] = SEC_TO_TICKS(sctp_secret_lifetime_default);
2071f8829a4aSRandall Stewart 	/* all max/min max are in ms */
2072f8829a4aSRandall Stewart 	m->sctp_maxrto = sctp_rto_max_default;
2073f8829a4aSRandall Stewart 	m->sctp_minrto = sctp_rto_min_default;
2074f8829a4aSRandall Stewart 	m->initial_rto = sctp_rto_initial_default;
2075f8829a4aSRandall Stewart 	m->initial_init_rto_max = sctp_init_rto_max_default;
207642551e99SRandall Stewart 	m->sctp_sack_freq = sctp_sack_freq_default;
2077f8829a4aSRandall Stewart 
2078f8829a4aSRandall Stewart 	m->max_open_streams_intome = MAX_SCTP_STREAMS;
2079f8829a4aSRandall Stewart 
2080f8829a4aSRandall Stewart 	m->max_init_times = sctp_init_rtx_max_default;
2081f8829a4aSRandall Stewart 	m->max_send_times = sctp_assoc_rtx_max_default;
2082f8829a4aSRandall Stewart 	m->def_net_failure = sctp_path_rtx_max_default;
2083f8829a4aSRandall Stewart 	m->sctp_sws_sender = SCTP_SWS_SENDER_DEF;
2084f8829a4aSRandall Stewart 	m->sctp_sws_receiver = SCTP_SWS_RECEIVER_DEF;
2085f8829a4aSRandall Stewart 	m->max_burst = sctp_max_burst_default;
2086b54d3a6cSRandall Stewart 	if ((sctp_default_cc_module >= SCTP_CC_RFC2581) &&
2087b54d3a6cSRandall Stewart 	    (sctp_default_cc_module <= SCTP_CC_HTCP)) {
2088b54d3a6cSRandall Stewart 		m->sctp_default_cc_module = sctp_default_cc_module;
2089b54d3a6cSRandall Stewart 	} else {
2090b54d3a6cSRandall Stewart 		/* sysctl done with invalid value, set to 2581 */
2091b54d3a6cSRandall Stewart 		m->sctp_default_cc_module = SCTP_CC_RFC2581;
2092b54d3a6cSRandall Stewart 	}
2093f8829a4aSRandall Stewart 	/* number of streams to pre-open on a association */
2094f8829a4aSRandall Stewart 	m->pre_open_stream_count = sctp_nr_outgoing_streams_default;
2095f8829a4aSRandall Stewart 
2096f8829a4aSRandall Stewart 	/* Add adaptation cookie */
2097f8829a4aSRandall Stewart 	m->adaptation_layer_indicator = 0x504C5253;
2098f8829a4aSRandall Stewart 
2099f8829a4aSRandall Stewart 	/* seed random number generator */
2100f8829a4aSRandall Stewart 	m->random_counter = 1;
2101f8829a4aSRandall Stewart 	m->store_at = SCTP_SIGNATURE_SIZE;
2102139bc87fSRandall Stewart 	SCTP_READ_RANDOM(m->random_numbers, sizeof(m->random_numbers));
2103f8829a4aSRandall Stewart 	sctp_fill_random_store(m);
2104f8829a4aSRandall Stewart 
2105f8829a4aSRandall Stewart 	/* Minimum cookie size */
2106f8829a4aSRandall Stewart 	m->size_of_a_cookie = (sizeof(struct sctp_init_msg) * 2) +
2107f8829a4aSRandall Stewart 	    sizeof(struct sctp_state_cookie);
2108f8829a4aSRandall Stewart 	m->size_of_a_cookie += SCTP_SIGNATURE_SIZE;
2109f8829a4aSRandall Stewart 
2110f8829a4aSRandall Stewart 	/* Setup the initial secret */
21116e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&time);
2112f8829a4aSRandall Stewart 	m->time_of_secret_change = time.tv_sec;
2113f8829a4aSRandall Stewart 
2114f8829a4aSRandall Stewart 	for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) {
2115f8829a4aSRandall Stewart 		m->secret_key[0][i] = sctp_select_initial_TSN(m);
2116f8829a4aSRandall Stewart 	}
2117f8829a4aSRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, NULL, NULL);
2118f8829a4aSRandall Stewart 
2119f8829a4aSRandall Stewart 	/* How long is a cookie good for ? */
21203c503c28SRandall Stewart 	m->def_cookie_life = MSEC_TO_TICKS(sctp_valid_cookie_life_default);
2121f8829a4aSRandall Stewart 	/*
2122f8829a4aSRandall Stewart 	 * Initialize authentication parameters
2123f8829a4aSRandall Stewart 	 */
2124f8829a4aSRandall Stewart 	m->local_hmacs = sctp_default_supported_hmaclist();
2125f8829a4aSRandall Stewart 	m->local_auth_chunks = sctp_alloc_chunklist();
2126f8829a4aSRandall Stewart 	sctp_auth_set_default_chunks(m->local_auth_chunks);
2127f8829a4aSRandall Stewart 	LIST_INIT(&m->shared_keys);
2128f8829a4aSRandall Stewart 	/* add default NULL key as key id 0 */
2129f8829a4aSRandall Stewart 	null_key = sctp_alloc_sharedkey();
2130f8829a4aSRandall Stewart 	sctp_insert_sharedkey(&m->shared_keys, null_key);
2131f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(inp);
2132f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
2133f8829a4aSRandall Stewart 	sctp_log_closing(inp, NULL, 12);
2134f8829a4aSRandall Stewart #endif
2135f8829a4aSRandall Stewart 	return (error);
2136f8829a4aSRandall Stewart }
2137f8829a4aSRandall Stewart 
2138f8829a4aSRandall Stewart 
2139f8829a4aSRandall Stewart void
2140f8829a4aSRandall Stewart sctp_move_pcb_and_assoc(struct sctp_inpcb *old_inp, struct sctp_inpcb *new_inp,
2141f8829a4aSRandall Stewart     struct sctp_tcb *stcb)
2142f8829a4aSRandall Stewart {
2143f8829a4aSRandall Stewart 	struct sctp_nets *net;
2144f8829a4aSRandall Stewart 	uint16_t lport, rport;
2145f8829a4aSRandall Stewart 	struct sctppcbhead *head;
2146f8829a4aSRandall Stewart 	struct sctp_laddr *laddr, *oladdr;
2147f8829a4aSRandall Stewart 
21482afb3e84SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
2149f8829a4aSRandall Stewart 	SCTP_TCB_UNLOCK(stcb);
2150f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
2151f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(old_inp);
2152f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(new_inp);
2153f8829a4aSRandall Stewart 	SCTP_TCB_LOCK(stcb);
21542afb3e84SRandall Stewart 	atomic_subtract_int(&stcb->asoc.refcnt, 1);
2155f8829a4aSRandall Stewart 
2156f8829a4aSRandall Stewart 	new_inp->sctp_ep.time_of_secret_change =
2157f8829a4aSRandall Stewart 	    old_inp->sctp_ep.time_of_secret_change;
2158f8829a4aSRandall Stewart 	memcpy(new_inp->sctp_ep.secret_key, old_inp->sctp_ep.secret_key,
2159f8829a4aSRandall Stewart 	    sizeof(old_inp->sctp_ep.secret_key));
2160f8829a4aSRandall Stewart 	new_inp->sctp_ep.current_secret_number =
2161f8829a4aSRandall Stewart 	    old_inp->sctp_ep.current_secret_number;
2162f8829a4aSRandall Stewart 	new_inp->sctp_ep.last_secret_number =
2163f8829a4aSRandall Stewart 	    old_inp->sctp_ep.last_secret_number;
2164f8829a4aSRandall Stewart 	new_inp->sctp_ep.size_of_a_cookie = old_inp->sctp_ep.size_of_a_cookie;
2165f8829a4aSRandall Stewart 
2166f8829a4aSRandall Stewart 	/* make it so new data pours into the new socket */
2167f8829a4aSRandall Stewart 	stcb->sctp_socket = new_inp->sctp_socket;
2168f8829a4aSRandall Stewart 	stcb->sctp_ep = new_inp;
2169f8829a4aSRandall Stewart 
2170f8829a4aSRandall Stewart 	/* Copy the port across */
2171f8829a4aSRandall Stewart 	lport = new_inp->sctp_lport = old_inp->sctp_lport;
2172f8829a4aSRandall Stewart 	rport = stcb->rport;
2173f8829a4aSRandall Stewart 	/* Pull the tcb from the old association */
2174f8829a4aSRandall Stewart 	LIST_REMOVE(stcb, sctp_tcbhash);
2175f8829a4aSRandall Stewart 	LIST_REMOVE(stcb, sctp_tcblist);
2176f8829a4aSRandall Stewart 
2177f8829a4aSRandall Stewart 	/* Now insert the new_inp into the TCP connected hash */
2178f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_tcpephash[SCTP_PCBHASH_ALLADDR((lport + rport),
2179f8829a4aSRandall Stewart 	    sctppcbinfo.hashtcpmark)];
2180f8829a4aSRandall Stewart 
2181f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(head, new_inp, sctp_hash);
218293164cf9SRandall Stewart 	/* Its safe to access */
218393164cf9SRandall Stewart 	new_inp->sctp_flags &= ~SCTP_PCB_FLAGS_UNBOUND;
2184f8829a4aSRandall Stewart 
2185f8829a4aSRandall Stewart 	/* Now move the tcb into the endpoint list */
2186f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(&new_inp->sctp_asoc_list, stcb, sctp_tcblist);
2187f8829a4aSRandall Stewart 	/*
2188f8829a4aSRandall Stewart 	 * Question, do we even need to worry about the ep-hash since we
2189f8829a4aSRandall Stewart 	 * only have one connection? Probably not :> so lets get rid of it
2190f8829a4aSRandall Stewart 	 * and not suck up any kernel memory in that.
2191f8829a4aSRandall Stewart 	 */
2192f8829a4aSRandall Stewart 
2193f8829a4aSRandall Stewart 	/* Ok. Let's restart timer. */
2194f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
2195f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, new_inp,
2196f8829a4aSRandall Stewart 		    stcb, net);
2197f8829a4aSRandall Stewart 	}
2198f8829a4aSRandall Stewart 
2199f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
2200f8829a4aSRandall Stewart 	if (new_inp->sctp_tcbhash != NULL) {
220144b7479bSRandall Stewart 		SCTP_HASH_FREE(new_inp->sctp_tcbhash, new_inp->sctp_hashmark);
2202f8829a4aSRandall Stewart 		new_inp->sctp_tcbhash = NULL;
2203f8829a4aSRandall Stewart 	}
2204f8829a4aSRandall Stewart 	if ((new_inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
2205f8829a4aSRandall Stewart 		/* Subset bound, so copy in the laddr list from the old_inp */
2206f8829a4aSRandall Stewart 		LIST_FOREACH(oladdr, &old_inp->sctp_addr_list, sctp_nxt_addr) {
2207f42a358aSRandall Stewart 			laddr = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_laddr, struct sctp_laddr);
2208f8829a4aSRandall Stewart 			if (laddr == NULL) {
2209f8829a4aSRandall Stewart 				/*
2210f8829a4aSRandall Stewart 				 * Gak, what can we do? This assoc is really
2211f8829a4aSRandall Stewart 				 * HOSED. We probably should send an abort
2212f8829a4aSRandall Stewart 				 * here.
2213f8829a4aSRandall Stewart 				 */
2214ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_PCB1, "Association hosed in TCP model, out of laddr memory\n");
2215f8829a4aSRandall Stewart 				continue;
2216f8829a4aSRandall Stewart 			}
2217f8829a4aSRandall Stewart 			SCTP_INCR_LADDR_COUNT();
2218f8829a4aSRandall Stewart 			bzero(laddr, sizeof(*laddr));
2219d61a0ae0SRandall Stewart 			(void)SCTP_GETTIME_TIMEVAL(&laddr->start_time);
2220f8829a4aSRandall Stewart 			laddr->ifa = oladdr->ifa;
2221bff64a4dSRandall Stewart 			atomic_add_int(&laddr->ifa->refcount, 1);
2222f8829a4aSRandall Stewart 			LIST_INSERT_HEAD(&new_inp->sctp_addr_list, laddr,
2223f8829a4aSRandall Stewart 			    sctp_nxt_addr);
2224f8829a4aSRandall Stewart 			new_inp->laddr_count++;
2225f8829a4aSRandall Stewart 		}
2226f8829a4aSRandall Stewart 	}
2227f8829a4aSRandall Stewart 	/*
2228f8829a4aSRandall Stewart 	 * Now any running timers need to be adjusted since we really don't
2229f8829a4aSRandall Stewart 	 * care if they are running or not just blast in the new_inp into
2230f8829a4aSRandall Stewart 	 * all of them.
2231f8829a4aSRandall Stewart 	 */
2232f8829a4aSRandall Stewart 
2233f8829a4aSRandall Stewart 	stcb->asoc.hb_timer.ep = (void *)new_inp;
2234f8829a4aSRandall Stewart 	stcb->asoc.dack_timer.ep = (void *)new_inp;
2235f8829a4aSRandall Stewart 	stcb->asoc.asconf_timer.ep = (void *)new_inp;
2236f8829a4aSRandall Stewart 	stcb->asoc.strreset_timer.ep = (void *)new_inp;
2237f8829a4aSRandall Stewart 	stcb->asoc.shut_guard_timer.ep = (void *)new_inp;
2238f8829a4aSRandall Stewart 	stcb->asoc.autoclose_timer.ep = (void *)new_inp;
2239f8829a4aSRandall Stewart 	stcb->asoc.delayed_event_timer.ep = (void *)new_inp;
2240851b7298SRandall Stewart 	stcb->asoc.delete_prim_timer.ep = (void *)new_inp;
2241f8829a4aSRandall Stewart 	/* now what about the nets? */
2242f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
2243f8829a4aSRandall Stewart 		net->pmtu_timer.ep = (void *)new_inp;
2244f8829a4aSRandall Stewart 		net->rxt_timer.ep = (void *)new_inp;
2245f8829a4aSRandall Stewart 		net->fr_timer.ep = (void *)new_inp;
2246f8829a4aSRandall Stewart 	}
2247f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(new_inp);
2248f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(old_inp);
2249f8829a4aSRandall Stewart }
2250f8829a4aSRandall Stewart 
2251f8829a4aSRandall Stewart static int
225242551e99SRandall Stewart sctp_isport_inuse(struct sctp_inpcb *inp, uint16_t lport, uint32_t vrf_id)
2253f8829a4aSRandall Stewart {
2254f8829a4aSRandall Stewart 	struct sctppcbhead *head;
2255f8829a4aSRandall Stewart 	struct sctp_inpcb *t_inp;
225642551e99SRandall Stewart 	int fnd;
2257f8829a4aSRandall Stewart 
2258f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_ephash[SCTP_PCBHASH_ALLADDR(lport,
2259f8829a4aSRandall Stewart 	    sctppcbinfo.hashmark)];
2260f8829a4aSRandall Stewart 	LIST_FOREACH(t_inp, head, sctp_hash) {
2261f8829a4aSRandall Stewart 		if (t_inp->sctp_lport != lport) {
2262f8829a4aSRandall Stewart 			continue;
2263f8829a4aSRandall Stewart 		}
226442551e99SRandall Stewart 		/* is it in the VRF in question */
226542551e99SRandall Stewart 		fnd = 0;
226642551e99SRandall Stewart 		if (t_inp->def_vrf_id == vrf_id)
226742551e99SRandall Stewart 			fnd = 1;
226842551e99SRandall Stewart 		if (!fnd)
226942551e99SRandall Stewart 			continue;
227042551e99SRandall Stewart 
2271f8829a4aSRandall Stewart 		/* This one is in use. */
2272f8829a4aSRandall Stewart 		/* check the v6/v4 binding issue */
2273f8829a4aSRandall Stewart 		if ((t_inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
227444b7479bSRandall Stewart 		    SCTP_IPV6_V6ONLY(t_inp)) {
2275f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2276f8829a4aSRandall Stewart 				/* collision in V6 space */
2277f8829a4aSRandall Stewart 				return (1);
2278f8829a4aSRandall Stewart 			} else {
2279f8829a4aSRandall Stewart 				/* inp is BOUND_V4 no conflict */
2280f8829a4aSRandall Stewart 				continue;
2281f8829a4aSRandall Stewart 			}
2282f8829a4aSRandall Stewart 		} else if (t_inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2283f8829a4aSRandall Stewart 			/* t_inp is bound v4 and v6, conflict always */
2284f8829a4aSRandall Stewart 			return (1);
2285f8829a4aSRandall Stewart 		} else {
2286f8829a4aSRandall Stewart 			/* t_inp is bound only V4 */
2287f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
2288c105859eSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
2289f8829a4aSRandall Stewart 				/* no conflict */
2290f8829a4aSRandall Stewart 				continue;
2291f8829a4aSRandall Stewart 			}
2292f8829a4aSRandall Stewart 			/* else fall through to conflict */
2293f8829a4aSRandall Stewart 		}
2294f8829a4aSRandall Stewart 		return (1);
2295f8829a4aSRandall Stewart 	}
2296f8829a4aSRandall Stewart 	return (0);
2297f8829a4aSRandall Stewart }
2298f8829a4aSRandall Stewart 
2299f8829a4aSRandall Stewart 
2300f8829a4aSRandall Stewart 
23011b649582SRandall Stewart /* sctp_ifap is used to bypass normal local address validation checks */
2302f8829a4aSRandall Stewart int
230380fefe0aSRandall Stewart sctp_inpcb_bind(struct socket *so, struct sockaddr *addr,
23041b649582SRandall Stewart     struct sctp_ifa *sctp_ifap, struct thread *p)
2305f8829a4aSRandall Stewart {
2306f8829a4aSRandall Stewart 	/* bind a ep to a socket address */
2307f8829a4aSRandall Stewart 	struct sctppcbhead *head;
2308f8829a4aSRandall Stewart 	struct sctp_inpcb *inp, *inp_tmp;
2309f8829a4aSRandall Stewart 	struct inpcb *ip_inp;
2310f8829a4aSRandall Stewart 	int bindall;
231118e198d3SRandall Stewart 	int prison = 0;
2312f8829a4aSRandall Stewart 	uint16_t lport;
2313f8829a4aSRandall Stewart 	int error;
231442551e99SRandall Stewart 	uint32_t vrf_id;
2315f8829a4aSRandall Stewart 
2316f8829a4aSRandall Stewart 	lport = 0;
2317f8829a4aSRandall Stewart 	error = 0;
2318f8829a4aSRandall Stewart 	bindall = 1;
2319f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
2320f8829a4aSRandall Stewart 	ip_inp = (struct inpcb *)so->so_pcb;
2321f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
2322f8829a4aSRandall Stewart 	if (addr) {
2323ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Bind called port:%d\n",
2324f8829a4aSRandall Stewart 		    ntohs(((struct sockaddr_in *)addr)->sin_port));
2325ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Addr :");
2326ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_PCB1, addr);
2327f8829a4aSRandall Stewart 	}
2328ad81507eSRandall Stewart #endif
2329f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) == 0) {
2330f8829a4aSRandall Stewart 		/* already did a bind, subsequent binds NOT allowed ! */
2331c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2332f8829a4aSRandall Stewart 		return (EINVAL);
2333f8829a4aSRandall Stewart 	}
233452be287eSRandall Stewart #ifdef INVARIANTS
233552be287eSRandall Stewart 	if (p == NULL)
233652be287eSRandall Stewart 		panic("null proc/thread");
233752be287eSRandall Stewart #endif
233852be287eSRandall Stewart 	if (p && jailed(p->td_ucred)) {
233918e198d3SRandall Stewart 		prison = 1;
234018e198d3SRandall Stewart 	}
2341f8829a4aSRandall Stewart 	if (addr != NULL) {
2342f8829a4aSRandall Stewart 		if (addr->sa_family == AF_INET) {
2343f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
2344f8829a4aSRandall Stewart 
2345f8829a4aSRandall Stewart 			/* IPV6_V6ONLY socket? */
234644b7479bSRandall Stewart 			if (SCTP_IPV6_V6ONLY(ip_inp)) {
2347c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2348f8829a4aSRandall Stewart 				return (EINVAL);
2349f8829a4aSRandall Stewart 			}
2350c4739e2fSRandall Stewart 			if (addr->sa_len != sizeof(*sin)) {
2351c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2352f8829a4aSRandall Stewart 				return (EINVAL);
2353c4739e2fSRandall Stewart 			}
2354f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)addr;
2355f8829a4aSRandall Stewart 			lport = sin->sin_port;
235618e198d3SRandall Stewart 			if (prison) {
235718e198d3SRandall Stewart 				/*
235818e198d3SRandall Stewart 				 * For INADDR_ANY and  LOOPBACK the
235918e198d3SRandall Stewart 				 * prison_ip() call will tranmute the ip
236018e198d3SRandall Stewart 				 * address to the proper valie.
236118e198d3SRandall Stewart 				 */
2362c4739e2fSRandall Stewart 				if (prison_ip(p->td_ucred, 0, &sin->sin_addr.s_addr)) {
2363c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
236418e198d3SRandall Stewart 					return (EINVAL);
236518e198d3SRandall Stewart 				}
2366c4739e2fSRandall Stewart 			}
2367f8829a4aSRandall Stewart 			if (sin->sin_addr.s_addr != INADDR_ANY) {
2368f8829a4aSRandall Stewart 				bindall = 0;
2369f8829a4aSRandall Stewart 			}
2370f8829a4aSRandall Stewart 		} else if (addr->sa_family == AF_INET6) {
2371f8829a4aSRandall Stewart 			/* Only for pure IPv6 Address. (No IPv4 Mapped!) */
2372f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
2373f8829a4aSRandall Stewart 
2374f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)addr;
2375f8829a4aSRandall Stewart 
2376c4739e2fSRandall Stewart 			if (addr->sa_len != sizeof(*sin6)) {
2377c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2378f8829a4aSRandall Stewart 				return (EINVAL);
2379c4739e2fSRandall Stewart 			}
2380f8829a4aSRandall Stewart 			lport = sin6->sin6_port;
238118e198d3SRandall Stewart 			/*
238218e198d3SRandall Stewart 			 * Jail checks for IPv6 should go HERE! i.e. add the
238318e198d3SRandall Stewart 			 * prison_ip() equivilant in this postion to
238418e198d3SRandall Stewart 			 * transmute the addresses to the proper one jailed.
238518e198d3SRandall Stewart 			 */
2386f8829a4aSRandall Stewart 			if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2387f8829a4aSRandall Stewart 				bindall = 0;
2388f8829a4aSRandall Stewart 				/* KAME hack: embed scopeid */
2389c4739e2fSRandall Stewart 				if (sa6_embedscope(sin6, ip6_use_defzone) != 0) {
2390c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2391f8829a4aSRandall Stewart 					return (EINVAL);
2392f8829a4aSRandall Stewart 				}
2393c4739e2fSRandall Stewart 			}
2394f8829a4aSRandall Stewart 			/* this must be cleared for ifa_ifwithaddr() */
2395f8829a4aSRandall Stewart 			sin6->sin6_scope_id = 0;
2396f8829a4aSRandall Stewart 		} else {
2397c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EAFNOSUPPORT);
2398f8829a4aSRandall Stewart 			return (EAFNOSUPPORT);
2399f8829a4aSRandall Stewart 		}
2400f8829a4aSRandall Stewart 	}
24013c503c28SRandall Stewart 	/* Setup a vrf_id to be the default for the non-bind-all case. */
240242551e99SRandall Stewart 	vrf_id = inp->def_vrf_id;
240342551e99SRandall Stewart 
2404f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
2405f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(inp);
2406f8829a4aSRandall Stewart 	/* increase our count due to the unlock we do */
2407f8829a4aSRandall Stewart 	SCTP_INP_INCR_REF(inp);
2408f8829a4aSRandall Stewart 	if (lport) {
2409f8829a4aSRandall Stewart 		/*
2410f8829a4aSRandall Stewart 		 * Did the caller specify a port? if so we must see if a ep
2411f8829a4aSRandall Stewart 		 * already has this one bound.
2412f8829a4aSRandall Stewart 		 */
2413f8829a4aSRandall Stewart 		/* got to be root to get at low ports */
2414f8829a4aSRandall Stewart 		if (ntohs(lport) < IPPORT_RESERVED) {
241503b0b021SRandall Stewart 			if (p && (error =
241632f9753cSRobert Watson 			    priv_check(p, PRIV_NETINET_RESERVEDPORT)
241703b0b021SRandall Stewart 			    )) {
2418f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
2419f8829a4aSRandall Stewart 				SCTP_INP_WUNLOCK(inp);
2420f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2421f8829a4aSRandall Stewart 				return (error);
2422f8829a4aSRandall Stewart 			}
2423f8829a4aSRandall Stewart 		}
2424f8829a4aSRandall Stewart 		if (p == NULL) {
2425f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
2426f8829a4aSRandall Stewart 			SCTP_INP_WUNLOCK(inp);
2427f8829a4aSRandall Stewart 			SCTP_INP_INFO_WUNLOCK();
2428c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, error);
2429f8829a4aSRandall Stewart 			return (error);
2430f8829a4aSRandall Stewart 		}
2431f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
243242551e99SRandall Stewart 		if (bindall) {
243342551e99SRandall Stewart 			vrf_id = inp->def_vrf_id;
243442551e99SRandall Stewart 			inp_tmp = sctp_pcb_findep(addr, 0, 1, vrf_id);
2435f8829a4aSRandall Stewart 			if (inp_tmp != NULL) {
2436f8829a4aSRandall Stewart 				/*
243742551e99SRandall Stewart 				 * lock guy returned and lower count note
243842551e99SRandall Stewart 				 * that we are not bound so inp_tmp should
243942551e99SRandall Stewart 				 * NEVER be inp. And it is this inp
244042551e99SRandall Stewart 				 * (inp_tmp) that gets the reference bump,
244142551e99SRandall Stewart 				 * so we must lower it.
2442f8829a4aSRandall Stewart 				 */
2443f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp_tmp);
2444f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
2445f8829a4aSRandall Stewart 				/* unlock info */
2446f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2447c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE);
2448207304d4SRandall Stewart 				return (EADDRINUSE);
2449f8829a4aSRandall Stewart 			}
245042551e99SRandall Stewart 		} else {
245142551e99SRandall Stewart 			inp_tmp = sctp_pcb_findep(addr, 0, 1, vrf_id);
245242551e99SRandall Stewart 			if (inp_tmp != NULL) {
245342551e99SRandall Stewart 				/*
245442551e99SRandall Stewart 				 * lock guy returned and lower count note
245542551e99SRandall Stewart 				 * that we are not bound so inp_tmp should
245642551e99SRandall Stewart 				 * NEVER be inp. And it is this inp
245742551e99SRandall Stewart 				 * (inp_tmp) that gets the reference bump,
245842551e99SRandall Stewart 				 * so we must lower it.
245942551e99SRandall Stewart 				 */
246042551e99SRandall Stewart 				SCTP_INP_DECR_REF(inp_tmp);
246142551e99SRandall Stewart 				SCTP_INP_DECR_REF(inp);
246242551e99SRandall Stewart 				/* unlock info */
246342551e99SRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2464c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE);
2465207304d4SRandall Stewart 				return (EADDRINUSE);
246642551e99SRandall Stewart 			}
246742551e99SRandall Stewart 		}
2468f8829a4aSRandall Stewart 		SCTP_INP_WLOCK(inp);
2469f8829a4aSRandall Stewart 		if (bindall) {
2470f8829a4aSRandall Stewart 			/* verify that no lport is not used by a singleton */
247142551e99SRandall Stewart 			if (sctp_isport_inuse(inp, lport, vrf_id)) {
2472f8829a4aSRandall Stewart 				/* Sorry someone already has this one bound */
2473f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
2474f8829a4aSRandall Stewart 				SCTP_INP_WUNLOCK(inp);
2475f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2476c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE);
2477207304d4SRandall Stewart 				return (EADDRINUSE);
2478f8829a4aSRandall Stewart 			}
2479f8829a4aSRandall Stewart 		}
2480f8829a4aSRandall Stewart 	} else {
24819a972525SRandall Stewart 		uint16_t first, last, candidate;
2482d61a0ae0SRandall Stewart 		uint16_t count;
2483d61a0ae0SRandall Stewart 		int done;
2484f8829a4aSRandall Stewart 
2485d61a0ae0SRandall Stewart 		if (ip_inp->inp_flags & INP_HIGHPORT) {
2486d61a0ae0SRandall Stewart 			first = ipport_hifirstauto;
2487d61a0ae0SRandall Stewart 			last = ipport_hilastauto;
2488d61a0ae0SRandall Stewart 		} else if (ip_inp->inp_flags & INP_LOWPORT) {
2489d61a0ae0SRandall Stewart 			if (p && (error =
249032f9753cSRobert Watson 			    priv_check(p, PRIV_NETINET_RESERVEDPORT)
2491d61a0ae0SRandall Stewart 			    )) {
2492d61a0ae0SRandall Stewart 				SCTP_INP_DECR_REF(inp);
2493d61a0ae0SRandall Stewart 				SCTP_INP_WUNLOCK(inp);
2494d61a0ae0SRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2495c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, error);
2496d61a0ae0SRandall Stewart 				return (error);
2497d61a0ae0SRandall Stewart 			}
2498d61a0ae0SRandall Stewart 			first = ipport_lowfirstauto;
2499d61a0ae0SRandall Stewart 			last = ipport_lowlastauto;
2500d61a0ae0SRandall Stewart 		} else {
2501d61a0ae0SRandall Stewart 			first = ipport_firstauto;
2502d61a0ae0SRandall Stewart 			last = ipport_lastauto;
2503d61a0ae0SRandall Stewart 		}
2504d61a0ae0SRandall Stewart 		if (first > last) {
2505d61a0ae0SRandall Stewart 			uint16_t temp;
2506f8829a4aSRandall Stewart 
2507d61a0ae0SRandall Stewart 			temp = first;
2508d61a0ae0SRandall Stewart 			first = last;
2509d61a0ae0SRandall Stewart 			last = temp;
2510f8829a4aSRandall Stewart 		}
2511d61a0ae0SRandall Stewart 		count = last - first + 1;	/* number of candidates */
25129a972525SRandall Stewart 		candidate = first + sctp_select_initial_TSN(&inp->sctp_ep) % (count);
25133c503c28SRandall Stewart 
2514d61a0ae0SRandall Stewart 		done = 0;
2515d61a0ae0SRandall Stewart 		while (!done) {
25169a972525SRandall Stewart 			if (sctp_isport_inuse(inp, htons(candidate), inp->def_vrf_id) == 0) {
2517d61a0ae0SRandall Stewart 				done = 1;
2518f8829a4aSRandall Stewart 			}
2519d61a0ae0SRandall Stewart 			if (!done) {
2520d61a0ae0SRandall Stewart 				if (--count == 0) {
2521d61a0ae0SRandall Stewart 					SCTP_INP_DECR_REF(inp);
2522d61a0ae0SRandall Stewart 					SCTP_INP_WUNLOCK(inp);
2523d61a0ae0SRandall Stewart 					SCTP_INP_INFO_WUNLOCK();
2524c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRINUSE);
2525207304d4SRandall Stewart 					return (EADDRINUSE);
2526f8829a4aSRandall Stewart 				}
25279a972525SRandall Stewart 				if (candidate == last)
25289a972525SRandall Stewart 					candidate = first;
2529d61a0ae0SRandall Stewart 				else
25309a972525SRandall Stewart 					candidate = candidate + 1;
2531f8829a4aSRandall Stewart 			}
2532f8829a4aSRandall Stewart 		}
25339a972525SRandall Stewart 		lport = htons(candidate);
2534f8829a4aSRandall Stewart 	}
2535f8829a4aSRandall Stewart 	SCTP_INP_DECR_REF(inp);
2536f8829a4aSRandall Stewart 	if (inp->sctp_flags & (SCTP_PCB_FLAGS_SOCKET_GONE |
2537f8829a4aSRandall Stewart 	    SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
2538f8829a4aSRandall Stewart 		/*
2539f8829a4aSRandall Stewart 		 * this really should not happen. The guy did a non-blocking
2540f8829a4aSRandall Stewart 		 * bind and then did a close at the same time.
2541f8829a4aSRandall Stewart 		 */
2542f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
2543f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
2544c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2545f8829a4aSRandall Stewart 		return (EINVAL);
2546f8829a4aSRandall Stewart 	}
2547f8829a4aSRandall Stewart 	/* ok we look clear to give out this port, so lets setup the binding */
2548f8829a4aSRandall Stewart 	if (bindall) {
2549f8829a4aSRandall Stewart 		/* binding to all addresses, so just set in the proper flags */
2550f8829a4aSRandall Stewart 		inp->sctp_flags |= SCTP_PCB_FLAGS_BOUNDALL;
2551f8829a4aSRandall Stewart 		/* set the automatic addr changes from kernel flag */
2552f8829a4aSRandall Stewart 		if (sctp_auto_asconf == 0) {
2553c4739e2fSRandall Stewart 			sctp_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF);
2554f8829a4aSRandall Stewart 			sctp_feature_off(inp, SCTP_PCB_FLAGS_AUTO_ASCONF);
2555f8829a4aSRandall Stewart 		} else {
2556c4739e2fSRandall Stewart 			sctp_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF);
2557f8829a4aSRandall Stewart 			sctp_feature_on(inp, SCTP_PCB_FLAGS_AUTO_ASCONF);
2558f8829a4aSRandall Stewart 		}
25592afb3e84SRandall Stewart 		/*
25602afb3e84SRandall Stewart 		 * set the automatic mobility_base from kernel flag (by
25612afb3e84SRandall Stewart 		 * micchie)
25622afb3e84SRandall Stewart 		 */
25632afb3e84SRandall Stewart 		if (sctp_mobility_base == 0) {
25642afb3e84SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_BASE);
2565851b7298SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
25662afb3e84SRandall Stewart 		} else {
25672afb3e84SRandall Stewart 			sctp_mobility_feature_on(inp, SCTP_MOBILITY_BASE);
2568851b7298SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
25692afb3e84SRandall Stewart 		}
25702afb3e84SRandall Stewart 		/*
25712afb3e84SRandall Stewart 		 * set the automatic mobility_fasthandoff from kernel flag
25722afb3e84SRandall Stewart 		 * (by micchie)
25732afb3e84SRandall Stewart 		 */
25742afb3e84SRandall Stewart 		if (sctp_mobility_fasthandoff == 0) {
25752afb3e84SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_FASTHANDOFF);
2576851b7298SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
25772afb3e84SRandall Stewart 		} else {
25782afb3e84SRandall Stewart 			sctp_mobility_feature_on(inp, SCTP_MOBILITY_FASTHANDOFF);
2579851b7298SRandall Stewart 			sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
25802afb3e84SRandall Stewart 		}
2581f8829a4aSRandall Stewart 	} else {
2582f8829a4aSRandall Stewart 		/*
2583f8829a4aSRandall Stewart 		 * bind specific, make sure flags is off and add a new
2584f8829a4aSRandall Stewart 		 * address structure to the sctp_addr_list inside the ep
2585f8829a4aSRandall Stewart 		 * structure.
2586f8829a4aSRandall Stewart 		 *
2587f8829a4aSRandall Stewart 		 * We will need to allocate one and insert it at the head. The
2588f8829a4aSRandall Stewart 		 * socketopt call can just insert new addresses in there as
2589f8829a4aSRandall Stewart 		 * well. It will also have to do the embed scope kame hack
2590f8829a4aSRandall Stewart 		 * too (before adding).
2591f8829a4aSRandall Stewart 		 */
259242551e99SRandall Stewart 		struct sctp_ifa *ifa;
2593f8829a4aSRandall Stewart 		struct sockaddr_storage store_sa;
2594f8829a4aSRandall Stewart 
2595f8829a4aSRandall Stewart 		memset(&store_sa, 0, sizeof(store_sa));
2596f8829a4aSRandall Stewart 		if (addr->sa_family == AF_INET) {
2597f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
2598f8829a4aSRandall Stewart 
2599f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)&store_sa;
2600f8829a4aSRandall Stewart 			memcpy(sin, addr, sizeof(struct sockaddr_in));
2601f8829a4aSRandall Stewart 			sin->sin_port = 0;
2602f8829a4aSRandall Stewart 		} else if (addr->sa_family == AF_INET6) {
2603f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6;
2604f8829a4aSRandall Stewart 
2605f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)&store_sa;
2606f8829a4aSRandall Stewart 			memcpy(sin6, addr, sizeof(struct sockaddr_in6));
2607f8829a4aSRandall Stewart 			sin6->sin6_port = 0;
2608f8829a4aSRandall Stewart 		}
2609f8829a4aSRandall Stewart 		/*
2610f8829a4aSRandall Stewart 		 * first find the interface with the bound address need to
2611f8829a4aSRandall Stewart 		 * zero out the port to find the address! yuck! can't do
2612f8829a4aSRandall Stewart 		 * this earlier since need port for sctp_pcb_findep()
2613f8829a4aSRandall Stewart 		 */
26141b649582SRandall Stewart 		if (sctp_ifap != NULL)
26151b649582SRandall Stewart 			ifa = sctp_ifap;
26161b649582SRandall Stewart 		else {
26171b649582SRandall Stewart 			/*
26181b649582SRandall Stewart 			 * Note for BSD we hit here always other O/S's will
26191b649582SRandall Stewart 			 * pass things in via the sctp_ifap argument
26201b649582SRandall Stewart 			 * (Panda).
26211b649582SRandall Stewart 			 */
26223c503c28SRandall Stewart 			ifa = sctp_find_ifa_by_addr((struct sockaddr *)&store_sa,
2623851b7298SRandall Stewart 			    vrf_id, SCTP_ADDR_NOT_LOCKED);
26241b649582SRandall Stewart 		}
2625f8829a4aSRandall Stewart 		if (ifa == NULL) {
2626f8829a4aSRandall Stewart 			/* Can't find an interface with that address */
2627f8829a4aSRandall Stewart 			SCTP_INP_WUNLOCK(inp);
2628f8829a4aSRandall Stewart 			SCTP_INP_INFO_WUNLOCK();
2629c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EADDRNOTAVAIL);
2630f8829a4aSRandall Stewart 			return (EADDRNOTAVAIL);
2631f8829a4aSRandall Stewart 		}
2632f8829a4aSRandall Stewart 		if (addr->sa_family == AF_INET6) {
263342551e99SRandall Stewart 			/* GAK, more FIXME IFA lock? */
263442551e99SRandall Stewart 			if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
2635f8829a4aSRandall Stewart 				/* Can't bind a non-existent addr. */
2636f8829a4aSRandall Stewart 				SCTP_INP_WUNLOCK(inp);
2637f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
2638c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
2639f8829a4aSRandall Stewart 				return (EINVAL);
2640f8829a4aSRandall Stewart 			}
2641f8829a4aSRandall Stewart 		}
2642f8829a4aSRandall Stewart 		/* we're not bound all */
2643f8829a4aSRandall Stewart 		inp->sctp_flags &= ~SCTP_PCB_FLAGS_BOUNDALL;
26443c503c28SRandall Stewart 		/* allow bindx() to send ASCONF's for binding changes */
264542551e99SRandall Stewart 		sctp_feature_on(inp, SCTP_PCB_FLAGS_DO_ASCONF);
264680fefe0aSRandall Stewart 		/* clear automatic addr changes from kernel flag */
2647f8829a4aSRandall Stewart 		sctp_feature_off(inp, SCTP_PCB_FLAGS_AUTO_ASCONF);
264842551e99SRandall Stewart 
2649f8829a4aSRandall Stewart 		/* add this address to the endpoint list */
265042551e99SRandall Stewart 		error = sctp_insert_laddr(&inp->sctp_addr_list, ifa, 0);
2651f8829a4aSRandall Stewart 		if (error != 0) {
2652f8829a4aSRandall Stewart 			SCTP_INP_WUNLOCK(inp);
2653f8829a4aSRandall Stewart 			SCTP_INP_INFO_WUNLOCK();
2654f8829a4aSRandall Stewart 			return (error);
2655f8829a4aSRandall Stewart 		}
2656f8829a4aSRandall Stewart 		inp->laddr_count++;
2657f8829a4aSRandall Stewart 	}
2658f8829a4aSRandall Stewart 	/* find the bucket */
2659f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_ephash[SCTP_PCBHASH_ALLADDR(lport,
2660f8829a4aSRandall Stewart 	    sctppcbinfo.hashmark)];
2661f8829a4aSRandall Stewart 	/* put it in the bucket */
2662f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(head, inp, sctp_hash);
2663ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB1, "Main hash to bind at head:%p, bound port:%d\n",
2664ad81507eSRandall Stewart 	    head, ntohs(lport));
2665f8829a4aSRandall Stewart 	/* set in the port */
2666f8829a4aSRandall Stewart 	inp->sctp_lport = lport;
2667f8829a4aSRandall Stewart 
2668f8829a4aSRandall Stewart 	/* turn off just the unbound flag */
2669f8829a4aSRandall Stewart 	inp->sctp_flags &= ~SCTP_PCB_FLAGS_UNBOUND;
2670f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(inp);
2671f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
2672f8829a4aSRandall Stewart 	return (0);
2673f8829a4aSRandall Stewart }
2674f8829a4aSRandall Stewart 
2675f8829a4aSRandall Stewart 
2676f8829a4aSRandall Stewart static void
2677f8829a4aSRandall Stewart sctp_iterator_inp_being_freed(struct sctp_inpcb *inp, struct sctp_inpcb *inp_next)
2678f8829a4aSRandall Stewart {
2679f8829a4aSRandall Stewart 	struct sctp_iterator *it;
2680f8829a4aSRandall Stewart 
2681f8829a4aSRandall Stewart 	/*
2682f8829a4aSRandall Stewart 	 * We enter with the only the ITERATOR_LOCK in place and a write
2683f8829a4aSRandall Stewart 	 * lock on the inp_info stuff.
2684f8829a4aSRandall Stewart 	 */
2685f8829a4aSRandall Stewart 
2686f8829a4aSRandall Stewart 	/*
2687f8829a4aSRandall Stewart 	 * Go through all iterators, we must do this since it is possible
2688f8829a4aSRandall Stewart 	 * that some iterator does NOT have the lock, but is waiting for it.
2689f8829a4aSRandall Stewart 	 * And the one that had the lock has either moved in the last
2690f8829a4aSRandall Stewart 	 * iteration or we just cleared it above. We need to find all of
2691f8829a4aSRandall Stewart 	 * those guys. The list of iterators should never be very big
2692f8829a4aSRandall Stewart 	 * though.
2693f8829a4aSRandall Stewart 	 */
269442551e99SRandall Stewart 	TAILQ_FOREACH(it, &sctppcbinfo.iteratorhead, sctp_nxt_itr) {
2695f8829a4aSRandall Stewart 		if (it == inp->inp_starting_point_for_iterator)
2696f8829a4aSRandall Stewart 			/* skip this guy, he's special */
2697f8829a4aSRandall Stewart 			continue;
2698f8829a4aSRandall Stewart 		if (it->inp == inp) {
2699f8829a4aSRandall Stewart 			/*
2700f8829a4aSRandall Stewart 			 * This is tricky and we DON'T lock the iterator.
2701f8829a4aSRandall Stewart 			 * Reason is he's running but waiting for me since
2702f8829a4aSRandall Stewart 			 * inp->inp_starting_point_for_iterator has the lock
2703f8829a4aSRandall Stewart 			 * on me (the guy above we skipped). This tells us
2704f8829a4aSRandall Stewart 			 * its is not running but waiting for
2705f8829a4aSRandall Stewart 			 * inp->inp_starting_point_for_iterator to be
2706f8829a4aSRandall Stewart 			 * released by the guy that does have our INP in a
2707f8829a4aSRandall Stewart 			 * lock.
2708f8829a4aSRandall Stewart 			 */
2709f8829a4aSRandall Stewart 			if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
2710f8829a4aSRandall Stewart 				it->inp = NULL;
2711f8829a4aSRandall Stewart 				it->stcb = NULL;
2712f8829a4aSRandall Stewart 			} else {
2713f8829a4aSRandall Stewart 				/* set him up to do the next guy not me */
2714f8829a4aSRandall Stewart 				it->inp = inp_next;
2715f8829a4aSRandall Stewart 				it->stcb = NULL;
2716f8829a4aSRandall Stewart 			}
2717f8829a4aSRandall Stewart 		}
2718f8829a4aSRandall Stewart 	}
2719f8829a4aSRandall Stewart 	it = inp->inp_starting_point_for_iterator;
2720f8829a4aSRandall Stewart 	if (it) {
2721f8829a4aSRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
2722f8829a4aSRandall Stewart 			it->inp = NULL;
2723f8829a4aSRandall Stewart 		} else {
2724f8829a4aSRandall Stewart 			it->inp = inp_next;
2725f8829a4aSRandall Stewart 		}
2726f8829a4aSRandall Stewart 		it->stcb = NULL;
2727f8829a4aSRandall Stewart 	}
2728f8829a4aSRandall Stewart }
2729f8829a4aSRandall Stewart 
2730f8829a4aSRandall Stewart /* release sctp_inpcb unbind the port */
2731f8829a4aSRandall Stewart void
2732f8829a4aSRandall Stewart sctp_inpcb_free(struct sctp_inpcb *inp, int immediate, int from)
2733f8829a4aSRandall Stewart {
2734f8829a4aSRandall Stewart 	/*
2735f8829a4aSRandall Stewart 	 * Here we free a endpoint. We must find it (if it is in the Hash
2736f8829a4aSRandall Stewart 	 * table) and remove it from there. Then we must also find it in the
2737f8829a4aSRandall Stewart 	 * overall list and remove it from there. After all removals are
2738f8829a4aSRandall Stewart 	 * complete then any timer has to be stopped. Then start the actual
2739f8829a4aSRandall Stewart 	 * freeing. a) Any local lists. b) Any associations. c) The hash of
2740f8829a4aSRandall Stewart 	 * all associations. d) finally the ep itself.
2741f8829a4aSRandall Stewart 	 */
2742f8829a4aSRandall Stewart 	struct sctp_pcb *m;
2743f8829a4aSRandall Stewart 	struct sctp_inpcb *inp_save;
2744f8829a4aSRandall Stewart 	struct sctp_tcb *asoc, *nasoc;
2745f8829a4aSRandall Stewart 	struct sctp_laddr *laddr, *nladdr;
2746f8829a4aSRandall Stewart 	struct inpcb *ip_pcb;
2747f8829a4aSRandall Stewart 	struct socket *so;
2748f8829a4aSRandall Stewart 
2749f8829a4aSRandall Stewart 	struct sctp_queued_to_read *sq;
2750f8829a4aSRandall Stewart 
2751bff64a4dSRandall Stewart 
275293164cf9SRandall Stewart 	int cnt;
2753f8829a4aSRandall Stewart 	sctp_sharedkey_t *shared_key;
2754f8829a4aSRandall Stewart 
2755f8829a4aSRandall Stewart 
2756f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
2757f8829a4aSRandall Stewart 	sctp_log_closing(inp, NULL, 0);
2758f8829a4aSRandall Stewart #endif
2759f8829a4aSRandall Stewart 	SCTP_ITERATOR_LOCK();
2760f8829a4aSRandall Stewart 	so = inp->sctp_socket;
2761f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) {
2762f8829a4aSRandall Stewart 		/* been here before.. eeks.. get out of here */
2763207304d4SRandall Stewart 		SCTP_PRINTF("This conflict in free SHOULD not be happening! from %d, imm %d\n", from, immediate);
2764f8829a4aSRandall Stewart 		SCTP_ITERATOR_UNLOCK();
2765f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
2766f8829a4aSRandall Stewart 		sctp_log_closing(inp, NULL, 1);
2767f8829a4aSRandall Stewart #endif
2768f8829a4aSRandall Stewart 		return;
2769f8829a4aSRandall Stewart 	}
2770f8829a4aSRandall Stewart 	SCTP_ASOC_CREATE_LOCK(inp);
2771f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
2772f8829a4aSRandall Stewart 
2773f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(inp);
2774ad81507eSRandall Stewart 	/* First time through we have the socket lock, after that no more. */
2775b0552ae2SRandall Stewart 	if (from == SCTP_CALLED_AFTER_CMPSET_OFCLOSE) {
2776f8829a4aSRandall Stewart 		/*
2777f8829a4aSRandall Stewart 		 * Once we are in we can remove the flag from = 1 is only
2778f8829a4aSRandall Stewart 		 * passed from the actual closing routines that are called
2779f8829a4aSRandall Stewart 		 * via the sockets layer.
2780f8829a4aSRandall Stewart 		 */
2781f8829a4aSRandall Stewart 		inp->sctp_flags &= ~SCTP_PCB_FLAGS_CLOSE_IP;
2782851b7298SRandall Stewart 		/* socket is gone, so no more wakeups allowed */
2783851b7298SRandall Stewart 		inp->sctp_flags |= SCTP_PCB_FLAGS_DONT_WAKE;
2784851b7298SRandall Stewart 		inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEINPUT;
2785851b7298SRandall Stewart 		inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEOUTPUT;
2786f8829a4aSRandall Stewart 	}
2787a5d547adSRandall Stewart 	sctp_timer_stop(SCTP_TIMER_TYPE_NEWCOOKIE, inp, NULL, NULL,
2788a5d547adSRandall Stewart 	    SCTP_FROM_SCTP_PCB + SCTP_LOC_1);
2789f8829a4aSRandall Stewart 
2790f8829a4aSRandall Stewart 	if (inp->control) {
2791f8829a4aSRandall Stewart 		sctp_m_freem(inp->control);
2792f8829a4aSRandall Stewart 		inp->control = NULL;
2793f8829a4aSRandall Stewart 	}
2794f8829a4aSRandall Stewart 	if (inp->pkt) {
2795f8829a4aSRandall Stewart 		sctp_m_freem(inp->pkt);
2796f8829a4aSRandall Stewart 		inp->pkt = NULL;
2797f8829a4aSRandall Stewart 	}
2798f8829a4aSRandall Stewart 	m = &inp->sctp_ep;
2799f8829a4aSRandall Stewart 	ip_pcb = &inp->ip_inp.inp;	/* we could just cast the main pointer
2800f8829a4aSRandall Stewart 					 * here but I will be nice :> (i.e.
2801f8829a4aSRandall Stewart 					 * ip_pcb = ep;) */
2802b0552ae2SRandall Stewart 	if (immediate == SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE) {
2803f8829a4aSRandall Stewart 		int cnt_in_sd;
2804f8829a4aSRandall Stewart 
2805f8829a4aSRandall Stewart 		cnt_in_sd = 0;
2806f8829a4aSRandall Stewart 		for ((asoc = LIST_FIRST(&inp->sctp_asoc_list)); asoc != NULL;
2807f8829a4aSRandall Stewart 		    asoc = nasoc) {
2808c4739e2fSRandall Stewart 			SCTP_TCB_LOCK(asoc);
2809ceaad40aSRandall Stewart 			nasoc = LIST_NEXT(asoc, sctp_tcblist);
2810f8829a4aSRandall Stewart 			if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
2811f8829a4aSRandall Stewart 				/* Skip guys being freed */
2812ceaad40aSRandall Stewart 				/* asoc->sctp_socket = NULL; FIXME MT */
2813f8829a4aSRandall Stewart 				cnt_in_sd++;
2814c4739e2fSRandall Stewart 				SCTP_TCB_UNLOCK(asoc);
2815f8829a4aSRandall Stewart 				continue;
2816f8829a4aSRandall Stewart 			}
2817f8829a4aSRandall Stewart 			if ((SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_COOKIE_WAIT) ||
2818f8829a4aSRandall Stewart 			    (SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_COOKIE_ECHOED)) {
281975298de2SRandall Stewart 				/*
282075298de2SRandall Stewart 				 * If we have data in queue, we don't want
282175298de2SRandall Stewart 				 * to just free since the app may have done,
282275298de2SRandall Stewart 				 * send()/close or connect/send/close. And
282375298de2SRandall Stewart 				 * it wants the data to get across first.
282475298de2SRandall Stewart 				 */
28252afb3e84SRandall Stewart 				/* Just abandon things in the front states */
2826c4739e2fSRandall Stewart 				if (sctp_free_assoc(inp, asoc, SCTP_PCBFREE_NOFORCE,
2827c4739e2fSRandall Stewart 				    SCTP_FROM_SCTP_PCB + SCTP_LOC_2) == 0) {
2828c4739e2fSRandall Stewart 					cnt_in_sd++;
2829c4739e2fSRandall Stewart 				}
2830f8829a4aSRandall Stewart 				continue;
2831f8829a4aSRandall Stewart 			}
2832f8829a4aSRandall Stewart 			/* Disconnect the socket please */
2833f8829a4aSRandall Stewart 			asoc->sctp_socket = NULL;
2834f8829a4aSRandall Stewart 			asoc->asoc.state |= SCTP_STATE_CLOSED_SOCKET;
2835f8829a4aSRandall Stewart 			if ((asoc->asoc.size_on_reasm_queue > 0) ||
2836f8829a4aSRandall Stewart 			    (asoc->asoc.control_pdapi) ||
2837f8829a4aSRandall Stewart 			    (asoc->asoc.size_on_all_streams > 0) ||
2838f8829a4aSRandall Stewart 			    (so && (so->so_rcv.sb_cc > 0))
2839f8829a4aSRandall Stewart 			    ) {
2840f8829a4aSRandall Stewart 				/* Left with Data unread */
2841f8829a4aSRandall Stewart 				struct mbuf *op_err;
2842f8829a4aSRandall Stewart 
2843f8829a4aSRandall Stewart 				op_err = sctp_get_mbuf_for_msg((sizeof(struct sctp_paramhdr) + sizeof(uint32_t)),
2844f8829a4aSRandall Stewart 				    0, M_DONTWAIT, 1, MT_DATA);
2845f8829a4aSRandall Stewart 				if (op_err) {
2846f8829a4aSRandall Stewart 					/* Fill in the user initiated abort */
2847f8829a4aSRandall Stewart 					struct sctp_paramhdr *ph;
2848f8829a4aSRandall Stewart 					uint32_t *ippp;
2849f8829a4aSRandall Stewart 
2850139bc87fSRandall Stewart 					SCTP_BUF_LEN(op_err) =
2851f8829a4aSRandall Stewart 					    sizeof(struct sctp_paramhdr) + sizeof(uint32_t);
2852f8829a4aSRandall Stewart 					ph = mtod(op_err,
2853f8829a4aSRandall Stewart 					    struct sctp_paramhdr *);
2854f8829a4aSRandall Stewart 					ph->param_type = htons(
2855f8829a4aSRandall Stewart 					    SCTP_CAUSE_USER_INITIATED_ABT);
2856139bc87fSRandall Stewart 					ph->param_length = htons(SCTP_BUF_LEN(op_err));
2857f8829a4aSRandall Stewart 					ippp = (uint32_t *) (ph + 1);
2858a5d547adSRandall Stewart 					*ippp = htonl(SCTP_FROM_SCTP_PCB + SCTP_LOC_3);
2859f8829a4aSRandall Stewart 				}
2860a5d547adSRandall Stewart 				asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_3;
2861ceaad40aSRandall Stewart 				sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED);
2862f8829a4aSRandall Stewart 				SCTP_STAT_INCR_COUNTER32(sctps_aborted);
2863f8829a4aSRandall Stewart 				if ((SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_OPEN) ||
2864f8829a4aSRandall Stewart 				    (SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
2865f8829a4aSRandall Stewart 					SCTP_STAT_DECR_GAUGE32(sctps_currestab);
2866f8829a4aSRandall Stewart 				}
2867c4739e2fSRandall Stewart 				if (sctp_free_assoc(inp, asoc,
2868c4739e2fSRandall Stewart 				    SCTP_PCBFREE_NOFORCE, SCTP_FROM_SCTP_PCB + SCTP_LOC_4) == 0) {
2869c4739e2fSRandall Stewart 					cnt_in_sd++;
2870c4739e2fSRandall Stewart 				}
2871f8829a4aSRandall Stewart 				continue;
2872f8829a4aSRandall Stewart 			} else if (TAILQ_EMPTY(&asoc->asoc.send_queue) &&
2873f8829a4aSRandall Stewart 				    TAILQ_EMPTY(&asoc->asoc.sent_queue) &&
2874f8829a4aSRandall Stewart 				    (asoc->asoc.stream_queue_cnt == 0)
2875f8829a4aSRandall Stewart 			    ) {
2876f8829a4aSRandall Stewart 				if (asoc->asoc.locked_on_sending) {
2877f8829a4aSRandall Stewart 					goto abort_anyway;
2878f8829a4aSRandall Stewart 				}
2879f8829a4aSRandall Stewart 				if ((SCTP_GET_STATE(&asoc->asoc) != SCTP_STATE_SHUTDOWN_SENT) &&
2880f8829a4aSRandall Stewart 				    (SCTP_GET_STATE(&asoc->asoc) != SCTP_STATE_SHUTDOWN_ACK_SENT)) {
2881f8829a4aSRandall Stewart 					/*
2882f8829a4aSRandall Stewart 					 * there is nothing queued to send,
2883f8829a4aSRandall Stewart 					 * so I send shutdown
2884f8829a4aSRandall Stewart 					 */
2885f8829a4aSRandall Stewart 					sctp_send_shutdown(asoc, asoc->asoc.primary_destination);
2886f42a358aSRandall Stewart 					if ((SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_OPEN) ||
2887f42a358aSRandall Stewart 					    (SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
2888f8829a4aSRandall Stewart 						SCTP_STAT_DECR_GAUGE32(sctps_currestab);
2889f42a358aSRandall Stewart 					}
2890c4739e2fSRandall Stewart 					SCTP_SET_STATE(&asoc->asoc, SCTP_STATE_SHUTDOWN_SENT);
2891f8829a4aSRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, asoc->sctp_ep, asoc,
2892f8829a4aSRandall Stewart 					    asoc->asoc.primary_destination);
2893f8829a4aSRandall Stewart 					sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, asoc->sctp_ep, asoc,
2894f8829a4aSRandall Stewart 					    asoc->asoc.primary_destination);
2895ceaad40aSRandall Stewart 					sctp_chunk_output(inp, asoc, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_LOCKED);
2896f8829a4aSRandall Stewart 				}
2897f8829a4aSRandall Stewart 			} else {
2898f8829a4aSRandall Stewart 				/* mark into shutdown pending */
2899f8829a4aSRandall Stewart 				struct sctp_stream_queue_pending *sp;
2900f8829a4aSRandall Stewart 
2901f8829a4aSRandall Stewart 				asoc->asoc.state |= SCTP_STATE_SHUTDOWN_PENDING;
2902f8829a4aSRandall Stewart 				sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, asoc->sctp_ep, asoc,
2903f8829a4aSRandall Stewart 				    asoc->asoc.primary_destination);
2904f8829a4aSRandall Stewart 				if (asoc->asoc.locked_on_sending) {
2905f8829a4aSRandall Stewart 					sp = TAILQ_LAST(&((asoc->asoc.locked_on_sending)->outqueue),
2906f8829a4aSRandall Stewart 					    sctp_streamhead);
2907f8829a4aSRandall Stewart 					if (sp == NULL) {
2908ad81507eSRandall Stewart 						SCTP_PRINTF("Error, sp is NULL, locked on sending is %p strm:%d\n",
290950514179SJohn Birrell 						    asoc->asoc.locked_on_sending,
2910f8829a4aSRandall Stewart 						    asoc->asoc.locked_on_sending->stream_no);
2911f8829a4aSRandall Stewart 					} else {
2912f8829a4aSRandall Stewart 						if ((sp->length == 0) && (sp->msg_is_complete == 0))
2913f8829a4aSRandall Stewart 							asoc->asoc.state |= SCTP_STATE_PARTIAL_MSG_LEFT;
2914f8829a4aSRandall Stewart 					}
2915f8829a4aSRandall Stewart 				}
2916f8829a4aSRandall Stewart 				if (TAILQ_EMPTY(&asoc->asoc.send_queue) &&
2917f8829a4aSRandall Stewart 				    TAILQ_EMPTY(&asoc->asoc.sent_queue) &&
2918f8829a4aSRandall Stewart 				    (asoc->asoc.state & SCTP_STATE_PARTIAL_MSG_LEFT)) {
2919f8829a4aSRandall Stewart 					struct mbuf *op_err;
2920f8829a4aSRandall Stewart 
2921f8829a4aSRandall Stewart 			abort_anyway:
2922f8829a4aSRandall Stewart 					op_err = sctp_get_mbuf_for_msg((sizeof(struct sctp_paramhdr) + sizeof(uint32_t)),
2923f8829a4aSRandall Stewart 					    0, M_DONTWAIT, 1, MT_DATA);
2924f8829a4aSRandall Stewart 					if (op_err) {
2925f8829a4aSRandall Stewart 						/*
2926f8829a4aSRandall Stewart 						 * Fill in the user
2927f8829a4aSRandall Stewart 						 * initiated abort
2928f8829a4aSRandall Stewart 						 */
2929f8829a4aSRandall Stewart 						struct sctp_paramhdr *ph;
2930f8829a4aSRandall Stewart 						uint32_t *ippp;
2931f8829a4aSRandall Stewart 
2932139bc87fSRandall Stewart 						SCTP_BUF_LEN(op_err) =
2933f8829a4aSRandall Stewart 						    (sizeof(struct sctp_paramhdr) +
2934f8829a4aSRandall Stewart 						    sizeof(uint32_t));
2935f8829a4aSRandall Stewart 						ph = mtod(op_err,
2936f8829a4aSRandall Stewart 						    struct sctp_paramhdr *);
2937f8829a4aSRandall Stewart 						ph->param_type = htons(
2938f8829a4aSRandall Stewart 						    SCTP_CAUSE_USER_INITIATED_ABT);
2939139bc87fSRandall Stewart 						ph->param_length = htons(SCTP_BUF_LEN(op_err));
2940f8829a4aSRandall Stewart 						ippp = (uint32_t *) (ph + 1);
2941a5d547adSRandall Stewart 						*ippp = htonl(SCTP_FROM_SCTP_PCB + SCTP_LOC_5);
2942f8829a4aSRandall Stewart 					}
2943a5d547adSRandall Stewart 					asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_5;
2944ceaad40aSRandall Stewart 					sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED);
2945f8829a4aSRandall Stewart 					SCTP_STAT_INCR_COUNTER32(sctps_aborted);
2946f8829a4aSRandall Stewart 					if ((SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_OPEN) ||
2947f8829a4aSRandall Stewart 					    (SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
2948f8829a4aSRandall Stewart 						SCTP_STAT_DECR_GAUGE32(sctps_currestab);
2949f8829a4aSRandall Stewart 					}
2950c4739e2fSRandall Stewart 					if (sctp_free_assoc(inp, asoc,
2951c4739e2fSRandall Stewart 					    SCTP_PCBFREE_NOFORCE,
2952c4739e2fSRandall Stewart 					    SCTP_FROM_SCTP_PCB + SCTP_LOC_6) == 0) {
2953c4739e2fSRandall Stewart 						cnt_in_sd++;
2954c4739e2fSRandall Stewart 					}
2955f8829a4aSRandall Stewart 					continue;
29562afb3e84SRandall Stewart 				} else {
2957ceaad40aSRandall Stewart 					sctp_chunk_output(inp, asoc, SCTP_OUTPUT_FROM_CLOSING, SCTP_SO_LOCKED);
2958f8829a4aSRandall Stewart 				}
2959f8829a4aSRandall Stewart 			}
2960f8829a4aSRandall Stewart 			cnt_in_sd++;
2961f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(asoc);
2962f8829a4aSRandall Stewart 		}
2963f8829a4aSRandall Stewart 		/* now is there some left in our SHUTDOWN state? */
2964f8829a4aSRandall Stewart 		if (cnt_in_sd) {
2965f8829a4aSRandall Stewart 			SCTP_INP_WUNLOCK(inp);
2966f8829a4aSRandall Stewart 			SCTP_ASOC_CREATE_UNLOCK(inp);
2967f8829a4aSRandall Stewart 			SCTP_INP_INFO_WUNLOCK();
2968f8829a4aSRandall Stewart 			SCTP_ITERATOR_UNLOCK();
2969f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
2970f8829a4aSRandall Stewart 			sctp_log_closing(inp, NULL, 2);
2971f8829a4aSRandall Stewart #endif
2972f8829a4aSRandall Stewart 			return;
2973f8829a4aSRandall Stewart 		}
2974f8829a4aSRandall Stewart 	}
2975f8829a4aSRandall Stewart 	inp->sctp_socket = NULL;
2976f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) !=
2977f8829a4aSRandall Stewart 	    SCTP_PCB_FLAGS_UNBOUND) {
2978f8829a4aSRandall Stewart 		/*
2979f8829a4aSRandall Stewart 		 * ok, this guy has been bound. It's port is somewhere in
2980f8829a4aSRandall Stewart 		 * the sctppcbinfo hash table. Remove it!
2981f8829a4aSRandall Stewart 		 */
2982f8829a4aSRandall Stewart 		LIST_REMOVE(inp, sctp_hash);
2983f8829a4aSRandall Stewart 		inp->sctp_flags |= SCTP_PCB_FLAGS_UNBOUND;
2984f8829a4aSRandall Stewart 	}
2985f8829a4aSRandall Stewart 	/*
2986f8829a4aSRandall Stewart 	 * If there is a timer running to kill us, forget it, since it may
2987f8829a4aSRandall Stewart 	 * have a contest on the INP lock.. which would cause us to die ...
2988f8829a4aSRandall Stewart 	 */
2989f8829a4aSRandall Stewart 	cnt = 0;
2990f8829a4aSRandall Stewart 	for ((asoc = LIST_FIRST(&inp->sctp_asoc_list)); asoc != NULL;
2991f8829a4aSRandall Stewart 	    asoc = nasoc) {
2992f8829a4aSRandall Stewart 		nasoc = LIST_NEXT(asoc, sctp_tcblist);
2993f8829a4aSRandall Stewart 		if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
2994f8829a4aSRandall Stewart 			cnt++;
2995f8829a4aSRandall Stewart 			continue;
2996f8829a4aSRandall Stewart 		}
2997f8829a4aSRandall Stewart 		/* Free associations that are NOT killing us */
2998f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(asoc);
2999f8829a4aSRandall Stewart 		if ((SCTP_GET_STATE(&asoc->asoc) != SCTP_STATE_COOKIE_WAIT) &&
3000f8829a4aSRandall Stewart 		    ((asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0)) {
3001f8829a4aSRandall Stewart 			struct mbuf *op_err;
3002f8829a4aSRandall Stewart 			uint32_t *ippp;
3003f8829a4aSRandall Stewart 
3004f8829a4aSRandall Stewart 			op_err = sctp_get_mbuf_for_msg((sizeof(struct sctp_paramhdr) + sizeof(uint32_t)),
3005f8829a4aSRandall Stewart 			    0, M_DONTWAIT, 1, MT_DATA);
3006f8829a4aSRandall Stewart 			if (op_err) {
3007f8829a4aSRandall Stewart 				/* Fill in the user initiated abort */
3008f8829a4aSRandall Stewart 				struct sctp_paramhdr *ph;
3009f8829a4aSRandall Stewart 
3010139bc87fSRandall Stewart 				SCTP_BUF_LEN(op_err) = (sizeof(struct sctp_paramhdr) +
3011f8829a4aSRandall Stewart 				    sizeof(uint32_t));
3012f8829a4aSRandall Stewart 				ph = mtod(op_err, struct sctp_paramhdr *);
3013f8829a4aSRandall Stewart 				ph->param_type = htons(
3014f8829a4aSRandall Stewart 				    SCTP_CAUSE_USER_INITIATED_ABT);
3015139bc87fSRandall Stewart 				ph->param_length = htons(SCTP_BUF_LEN(op_err));
3016f8829a4aSRandall Stewart 				ippp = (uint32_t *) (ph + 1);
3017a5d547adSRandall Stewart 				*ippp = htonl(SCTP_FROM_SCTP_PCB + SCTP_LOC_7);
3018f8829a4aSRandall Stewart 
3019f8829a4aSRandall Stewart 			}
3020a5d547adSRandall Stewart 			asoc->sctp_ep->last_abort_code = SCTP_FROM_SCTP_PCB + SCTP_LOC_7;
3021ceaad40aSRandall Stewart 			sctp_send_abort_tcb(asoc, op_err, SCTP_SO_LOCKED);
3022f8829a4aSRandall Stewart 			SCTP_STAT_INCR_COUNTER32(sctps_aborted);
3023f8829a4aSRandall Stewart 		} else if (asoc->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
3024f8829a4aSRandall Stewart 			cnt++;
3025f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(asoc);
3026f8829a4aSRandall Stewart 			continue;
3027f8829a4aSRandall Stewart 		}
3028f8829a4aSRandall Stewart 		if ((SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_OPEN) ||
3029f8829a4aSRandall Stewart 		    (SCTP_GET_STATE(&asoc->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
3030f8829a4aSRandall Stewart 			SCTP_STAT_DECR_GAUGE32(sctps_currestab);
3031f8829a4aSRandall Stewart 		}
3032c4739e2fSRandall Stewart 		if (sctp_free_assoc(inp, asoc, SCTP_PCBFREE_FORCE, SCTP_FROM_SCTP_PCB + SCTP_LOC_8) == 0) {
3033c4739e2fSRandall Stewart 			cnt++;
3034c4739e2fSRandall Stewart 		}
3035f8829a4aSRandall Stewart 	}
3036f8829a4aSRandall Stewart 	if (cnt) {
3037f8829a4aSRandall Stewart 		/* Ok we have someone out there that will kill us */
30386e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&inp->sctp_ep.signature_change.timer);
3039f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
3040f8829a4aSRandall Stewart 		SCTP_ASOC_CREATE_UNLOCK(inp);
3041f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
3042f8829a4aSRandall Stewart 		SCTP_ITERATOR_UNLOCK();
3043f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
3044f8829a4aSRandall Stewart 		sctp_log_closing(inp, NULL, 3);
3045f8829a4aSRandall Stewart #endif
3046f8829a4aSRandall Stewart 		return;
3047f8829a4aSRandall Stewart 	}
3048f8829a4aSRandall Stewart 	if ((inp->refcount) || (inp->sctp_flags & SCTP_PCB_FLAGS_CLOSE_IP)) {
30496e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&inp->sctp_ep.signature_change.timer);
3050f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL);
3051f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
3052f8829a4aSRandall Stewart 		SCTP_ASOC_CREATE_UNLOCK(inp);
3053f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
3054f8829a4aSRandall Stewart 		SCTP_ITERATOR_UNLOCK();
3055f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
3056f8829a4aSRandall Stewart 		sctp_log_closing(inp, NULL, 4);
3057f8829a4aSRandall Stewart #endif
3058f8829a4aSRandall Stewart 		return;
3059f8829a4aSRandall Stewart 	}
30606e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&inp->sctp_ep.signature_change.timer);
3061f8829a4aSRandall Stewart 	inp->sctp_ep.signature_change.type = 0;
3062f8829a4aSRandall Stewart 	inp->sctp_flags |= SCTP_PCB_FLAGS_SOCKET_ALLGONE;
3063f8829a4aSRandall Stewart 
3064f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
3065f8829a4aSRandall Stewart 	sctp_log_closing(inp, NULL, 5);
3066f8829a4aSRandall Stewart #endif
3067f8829a4aSRandall Stewart 
30686e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&inp->sctp_ep.signature_change.timer);
3069f8829a4aSRandall Stewart 	inp->sctp_ep.signature_change.type = SCTP_TIMER_TYPE_NONE;
3070f8829a4aSRandall Stewart 	/* Clear the read queue */
30713c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
3072f8829a4aSRandall Stewart 	while ((sq = TAILQ_FIRST(&inp->read_queue)) != NULL) {
3073f1f73e57SRandall Stewart 		/* Its only abandoned if it had data left */
3074f1f73e57SRandall Stewart 		if (sq->length)
3075f1f73e57SRandall Stewart 			SCTP_STAT_INCR(sctps_left_abandon);
3076f1f73e57SRandall Stewart 
3077f8829a4aSRandall Stewart 		TAILQ_REMOVE(&inp->read_queue, sq, next);
3078f8829a4aSRandall Stewart 		sctp_free_remote_addr(sq->whoFrom);
3079f8829a4aSRandall Stewart 		if (so)
3080f8829a4aSRandall Stewart 			so->so_rcv.sb_cc -= sq->length;
3081f8829a4aSRandall Stewart 		if (sq->data) {
3082f8829a4aSRandall Stewart 			sctp_m_freem(sq->data);
3083f8829a4aSRandall Stewart 			sq->data = NULL;
3084f8829a4aSRandall Stewart 		}
3085f8829a4aSRandall Stewart 		/*
3086f8829a4aSRandall Stewart 		 * no need to free the net count, since at this point all
3087f8829a4aSRandall Stewart 		 * assoc's are gone.
3088f8829a4aSRandall Stewart 		 */
3089f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_readq, sq);
3090f8829a4aSRandall Stewart 		SCTP_DECR_READQ_COUNT();
3091f8829a4aSRandall Stewart 	}
3092f8829a4aSRandall Stewart 	/* Now the sctp_pcb things */
3093f8829a4aSRandall Stewart 	/*
3094f8829a4aSRandall Stewart 	 * free each asoc if it is not already closed/free. we can't use the
3095f8829a4aSRandall Stewart 	 * macro here since le_next will get freed as part of the
3096f8829a4aSRandall Stewart 	 * sctp_free_assoc() call.
3097f8829a4aSRandall Stewart 	 */
3098f8829a4aSRandall Stewart 	cnt = 0;
3099f8829a4aSRandall Stewart 	if (so) {
3100b2630c29SGeorge V. Neville-Neil #ifdef IPSEC
3101f8829a4aSRandall Stewart 		ipsec4_delete_pcbpolicy(ip_pcb);
3102b2630c29SGeorge V. Neville-Neil #endif				/* IPSEC */
3103f8829a4aSRandall Stewart 
3104f8829a4aSRandall Stewart 		/* Unlocks not needed since the socket is gone now */
3105f8829a4aSRandall Stewart 	}
3106f8829a4aSRandall Stewart 	if (ip_pcb->inp_options) {
3107f8829a4aSRandall Stewart 		(void)sctp_m_free(ip_pcb->inp_options);
3108f8829a4aSRandall Stewart 		ip_pcb->inp_options = 0;
3109f8829a4aSRandall Stewart 	}
3110f8829a4aSRandall Stewart 	if (ip_pcb->inp_moptions) {
311171498f30SBruce M Simpson 		inp_freemoptions(ip_pcb->inp_moptions);
3112f8829a4aSRandall Stewart 		ip_pcb->inp_moptions = 0;
3113f8829a4aSRandall Stewart 	}
3114f8829a4aSRandall Stewart #ifdef INET6
3115f8829a4aSRandall Stewart 	if (ip_pcb->inp_vflag & INP_IPV6) {
3116f8829a4aSRandall Stewart 		struct in6pcb *in6p;
3117f8829a4aSRandall Stewart 
3118f8829a4aSRandall Stewart 		in6p = (struct in6pcb *)inp;
3119f8829a4aSRandall Stewart 		ip6_freepcbopts(in6p->in6p_outputopts);
3120f8829a4aSRandall Stewart 	}
3121f8829a4aSRandall Stewart #endif				/* INET6 */
3122f8829a4aSRandall Stewart 	ip_pcb->inp_vflag = 0;
3123f8829a4aSRandall Stewart 	/* free up authentication fields */
3124f8829a4aSRandall Stewart 	if (inp->sctp_ep.local_auth_chunks != NULL)
3125f8829a4aSRandall Stewart 		sctp_free_chunklist(inp->sctp_ep.local_auth_chunks);
3126f8829a4aSRandall Stewart 	if (inp->sctp_ep.local_hmacs != NULL)
3127f8829a4aSRandall Stewart 		sctp_free_hmaclist(inp->sctp_ep.local_hmacs);
3128f8829a4aSRandall Stewart 
3129f8829a4aSRandall Stewart 	shared_key = LIST_FIRST(&inp->sctp_ep.shared_keys);
3130f8829a4aSRandall Stewart 	while (shared_key) {
3131f8829a4aSRandall Stewart 		LIST_REMOVE(shared_key, next);
3132f8829a4aSRandall Stewart 		sctp_free_sharedkey(shared_key);
31333c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
3134f8829a4aSRandall Stewart 		shared_key = LIST_FIRST(&inp->sctp_ep.shared_keys);
3135f8829a4aSRandall Stewart 	}
3136f8829a4aSRandall Stewart 
3137f8829a4aSRandall Stewart 	inp_save = LIST_NEXT(inp, sctp_list);
3138f8829a4aSRandall Stewart 	LIST_REMOVE(inp, sctp_list);
3139f8829a4aSRandall Stewart 
3140f8829a4aSRandall Stewart 	/* fix any iterators only after out of the list */
3141f8829a4aSRandall Stewart 	sctp_iterator_inp_being_freed(inp, inp_save);
3142f8829a4aSRandall Stewart 	/*
3143f8829a4aSRandall Stewart 	 * if we have an address list the following will free the list of
3144f8829a4aSRandall Stewart 	 * ifaddr's that are set into this ep. Again macro limitations here,
3145f8829a4aSRandall Stewart 	 * since the LIST_FOREACH could be a bad idea.
3146f8829a4aSRandall Stewart 	 */
3147f8829a4aSRandall Stewart 	for ((laddr = LIST_FIRST(&inp->sctp_addr_list)); laddr != NULL;
3148f8829a4aSRandall Stewart 	    laddr = nladdr) {
3149f8829a4aSRandall Stewart 		nladdr = LIST_NEXT(laddr, sctp_nxt_addr);
315042551e99SRandall Stewart 		sctp_remove_laddr(laddr);
3151f8829a4aSRandall Stewart 	}
3152a5d547adSRandall Stewart 
3153a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS
3154a5d547adSRandall Stewart 	/* TEMP CODE */
3155a5d547adSRandall Stewart 	for ((asoc = LIST_FIRST(&inp->sctp_asoc_free_list)); asoc != NULL;
3156a5d547adSRandall Stewart 	    asoc = nasoc) {
3157a5d547adSRandall Stewart 		nasoc = LIST_NEXT(asoc, sctp_tcblist);
3158a5d547adSRandall Stewart 		LIST_REMOVE(asoc, sctp_tcblist);
3159a5d547adSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, asoc);
3160a5d547adSRandall Stewart 		SCTP_DECR_ASOC_COUNT();
3161a5d547adSRandall Stewart 	}
3162a5d547adSRandall Stewart 	/* *** END TEMP CODE *** */
3163a5d547adSRandall Stewart #endif
3164f8829a4aSRandall Stewart 	/* Now lets see about freeing the EP hash table. */
3165f8829a4aSRandall Stewart 	if (inp->sctp_tcbhash != NULL) {
316644b7479bSRandall Stewart 		SCTP_HASH_FREE(inp->sctp_tcbhash, inp->sctp_hashmark);
316744b7479bSRandall Stewart 		inp->sctp_tcbhash = NULL;
3168f8829a4aSRandall Stewart 	}
3169f8829a4aSRandall Stewart 	/* Now we must put the ep memory back into the zone pool */
3170e1461651SRandall Stewart 	INP_LOCK_DESTROY(&inp->ip_inp.inp);
3171f8829a4aSRandall Stewart 	SCTP_INP_LOCK_DESTROY(inp);
3172f8829a4aSRandall Stewart 	SCTP_INP_READ_DESTROY(inp);
3173f8829a4aSRandall Stewart 	SCTP_ASOC_CREATE_LOCK_DESTROY(inp);
3174f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
3175f8829a4aSRandall Stewart 	SCTP_ITERATOR_UNLOCK();
3176f8829a4aSRandall Stewart 	SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_ep, inp);
3177f8829a4aSRandall Stewart 	SCTP_DECR_EP_COUNT();
3178f8829a4aSRandall Stewart }
3179f8829a4aSRandall Stewart 
3180f8829a4aSRandall Stewart 
3181f8829a4aSRandall Stewart struct sctp_nets *
3182f8829a4aSRandall Stewart sctp_findnet(struct sctp_tcb *stcb, struct sockaddr *addr)
3183f8829a4aSRandall Stewart {
3184f8829a4aSRandall Stewart 	struct sctp_nets *net;
3185f8829a4aSRandall Stewart 
3186f8829a4aSRandall Stewart 	/* locate the address */
3187f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
3188f8829a4aSRandall Stewart 		if (sctp_cmpaddr(addr, (struct sockaddr *)&net->ro._l_addr))
3189f8829a4aSRandall Stewart 			return (net);
3190f8829a4aSRandall Stewart 	}
3191f8829a4aSRandall Stewart 	return (NULL);
3192f8829a4aSRandall Stewart }
3193f8829a4aSRandall Stewart 
3194f8829a4aSRandall Stewart 
3195f8829a4aSRandall Stewart int
319642551e99SRandall Stewart sctp_is_address_on_local_host(struct sockaddr *addr, uint32_t vrf_id)
3197f8829a4aSRandall Stewart {
319842551e99SRandall Stewart 	struct sctp_ifa *sctp_ifa;
3199f8829a4aSRandall Stewart 
3200851b7298SRandall Stewart 	sctp_ifa = sctp_find_ifa_by_addr(addr, vrf_id, SCTP_ADDR_NOT_LOCKED);
320142551e99SRandall Stewart 	if (sctp_ifa) {
3202f8829a4aSRandall Stewart 		return (1);
320342551e99SRandall Stewart 	} else {
3204f8829a4aSRandall Stewart 		return (0);
3205f8829a4aSRandall Stewart 	}
320642551e99SRandall Stewart }
320742551e99SRandall Stewart 
3208ad81507eSRandall Stewart /*
3209ad81507eSRandall Stewart  * add's a remote endpoint address, done with the INIT/INIT-ACK as well as
3210ad81507eSRandall Stewart  * when a ASCONF arrives that adds it. It will also initialize all the cwnd
3211ad81507eSRandall Stewart  * stats of stuff.
3212ad81507eSRandall Stewart  */
3213f8829a4aSRandall Stewart int
3214f8829a4aSRandall Stewart sctp_add_remote_addr(struct sctp_tcb *stcb, struct sockaddr *newaddr,
3215f8829a4aSRandall Stewart     int set_scope, int from)
3216f8829a4aSRandall Stewart {
3217f8829a4aSRandall Stewart 	/*
3218f8829a4aSRandall Stewart 	 * The following is redundant to the same lines in the
3219f8829a4aSRandall Stewart 	 * sctp_aloc_assoc() but is needed since other's call the add
3220f8829a4aSRandall Stewart 	 * address function
3221f8829a4aSRandall Stewart 	 */
3222f8829a4aSRandall Stewart 	struct sctp_nets *net, *netfirst;
3223f8829a4aSRandall Stewart 	int addr_inscope;
3224f8829a4aSRandall Stewart 
3225ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB1, "Adding an address (from:%d) to the peer: ",
3226ad81507eSRandall Stewart 	    from);
3227ad81507eSRandall Stewart 	SCTPDBG_ADDR(SCTP_DEBUG_PCB1, newaddr);
3228f8829a4aSRandall Stewart 
3229f8829a4aSRandall Stewart 	netfirst = sctp_findnet(stcb, newaddr);
3230f8829a4aSRandall Stewart 	if (netfirst) {
3231f8829a4aSRandall Stewart 		/*
3232f8829a4aSRandall Stewart 		 * Lie and return ok, we don't want to make the association
3233f8829a4aSRandall Stewart 		 * go away for this behavior. It will happen in the TCP
3234f8829a4aSRandall Stewart 		 * model in a connected socket. It does not reach the hash
3235f8829a4aSRandall Stewart 		 * table until after the association is built so it can't be
3236f8829a4aSRandall Stewart 		 * found. Mark as reachable, since the initial creation will
3237f8829a4aSRandall Stewart 		 * have been cleared and the NOT_IN_ASSOC flag will have
3238f8829a4aSRandall Stewart 		 * been added... and we don't want to end up removing it
3239f8829a4aSRandall Stewart 		 * back out.
3240f8829a4aSRandall Stewart 		 */
3241f8829a4aSRandall Stewart 		if (netfirst->dest_state & SCTP_ADDR_UNCONFIRMED) {
3242f8829a4aSRandall Stewart 			netfirst->dest_state = (SCTP_ADDR_REACHABLE |
3243f8829a4aSRandall Stewart 			    SCTP_ADDR_UNCONFIRMED);
3244f8829a4aSRandall Stewart 		} else {
3245f8829a4aSRandall Stewart 			netfirst->dest_state = SCTP_ADDR_REACHABLE;
3246f8829a4aSRandall Stewart 		}
3247f8829a4aSRandall Stewart 
3248f8829a4aSRandall Stewart 		return (0);
3249f8829a4aSRandall Stewart 	}
3250f8829a4aSRandall Stewart 	addr_inscope = 1;
3251f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET) {
3252f8829a4aSRandall Stewart 		struct sockaddr_in *sin;
3253f8829a4aSRandall Stewart 
3254f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)newaddr;
3255f8829a4aSRandall Stewart 		if (sin->sin_addr.s_addr == 0) {
3256f8829a4aSRandall Stewart 			/* Invalid address */
3257f8829a4aSRandall Stewart 			return (-1);
3258f8829a4aSRandall Stewart 		}
3259f8829a4aSRandall Stewart 		/* zero out the bzero area */
3260f8829a4aSRandall Stewart 		memset(&sin->sin_zero, 0, sizeof(sin->sin_zero));
3261f8829a4aSRandall Stewart 
3262f8829a4aSRandall Stewart 		/* assure len is set */
3263f8829a4aSRandall Stewart 		sin->sin_len = sizeof(struct sockaddr_in);
3264f8829a4aSRandall Stewart 		if (set_scope) {
3265f8829a4aSRandall Stewart #ifdef SCTP_DONT_DO_PRIVADDR_SCOPE
3266f8829a4aSRandall Stewart 			stcb->ipv4_local_scope = 1;
3267f8829a4aSRandall Stewart #else
3268f8829a4aSRandall Stewart 			if (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) {
3269f8829a4aSRandall Stewart 				stcb->asoc.ipv4_local_scope = 1;
3270f8829a4aSRandall Stewart 			}
3271f8829a4aSRandall Stewart #endif				/* SCTP_DONT_DO_PRIVADDR_SCOPE */
3272f8829a4aSRandall Stewart 		} else {
3273f8829a4aSRandall Stewart 			/* Validate the address is in scope */
3274f8829a4aSRandall Stewart 			if ((IN4_ISPRIVATE_ADDRESS(&sin->sin_addr)) &&
3275f8829a4aSRandall Stewart 			    (stcb->asoc.ipv4_local_scope == 0)) {
3276f8829a4aSRandall Stewart 				addr_inscope = 0;
3277f8829a4aSRandall Stewart 			}
3278f8829a4aSRandall Stewart 		}
3279f8829a4aSRandall Stewart 	} else if (newaddr->sa_family == AF_INET6) {
3280f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
3281f8829a4aSRandall Stewart 
3282f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)newaddr;
3283f8829a4aSRandall Stewart 		if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
3284f8829a4aSRandall Stewart 			/* Invalid address */
3285f8829a4aSRandall Stewart 			return (-1);
3286f8829a4aSRandall Stewart 		}
3287f8829a4aSRandall Stewart 		/* assure len is set */
3288f8829a4aSRandall Stewart 		sin6->sin6_len = sizeof(struct sockaddr_in6);
3289f8829a4aSRandall Stewart 		if (set_scope) {
329042551e99SRandall Stewart 			if (sctp_is_address_on_local_host(newaddr, stcb->asoc.vrf_id)) {
3291f8829a4aSRandall Stewart 				stcb->asoc.loopback_scope = 1;
329242551e99SRandall Stewart 				stcb->asoc.local_scope = 0;
3293f8829a4aSRandall Stewart 				stcb->asoc.ipv4_local_scope = 1;
3294f8829a4aSRandall Stewart 				stcb->asoc.site_scope = 1;
3295f8829a4aSRandall Stewart 			} else if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
3296f8829a4aSRandall Stewart 				/*
3297f8829a4aSRandall Stewart 				 * If the new destination is a LINK_LOCAL we
3298f8829a4aSRandall Stewart 				 * must have common site scope. Don't set
3299f8829a4aSRandall Stewart 				 * the local scope since we may not share
3300f8829a4aSRandall Stewart 				 * all links, only loopback can do this.
3301f8829a4aSRandall Stewart 				 * Links on the local network would also be
3302f8829a4aSRandall Stewart 				 * on our private network for v4 too.
3303f8829a4aSRandall Stewart 				 */
3304f8829a4aSRandall Stewart 				stcb->asoc.ipv4_local_scope = 1;
3305f8829a4aSRandall Stewart 				stcb->asoc.site_scope = 1;
3306f8829a4aSRandall Stewart 			} else if (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr)) {
3307f8829a4aSRandall Stewart 				/*
3308f8829a4aSRandall Stewart 				 * If the new destination is SITE_LOCAL then
3309f8829a4aSRandall Stewart 				 * we must have site scope in common.
3310f8829a4aSRandall Stewart 				 */
3311f8829a4aSRandall Stewart 				stcb->asoc.site_scope = 1;
3312f8829a4aSRandall Stewart 			}
3313f8829a4aSRandall Stewart 		} else {
3314f8829a4aSRandall Stewart 			/* Validate the address is in scope */
3315f8829a4aSRandall Stewart 			if (IN6_IS_ADDR_LOOPBACK(&sin6->sin6_addr) &&
3316f8829a4aSRandall Stewart 			    (stcb->asoc.loopback_scope == 0)) {
3317f8829a4aSRandall Stewart 				addr_inscope = 0;
3318f8829a4aSRandall Stewart 			} else if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr) &&
3319f8829a4aSRandall Stewart 			    (stcb->asoc.local_scope == 0)) {
3320f8829a4aSRandall Stewart 				addr_inscope = 0;
3321f8829a4aSRandall Stewart 			} else if (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr) &&
3322f8829a4aSRandall Stewart 			    (stcb->asoc.site_scope == 0)) {
3323f8829a4aSRandall Stewart 				addr_inscope = 0;
3324f8829a4aSRandall Stewart 			}
3325f8829a4aSRandall Stewart 		}
3326f8829a4aSRandall Stewart 	} else {
3327f8829a4aSRandall Stewart 		/* not supported family type */
3328f8829a4aSRandall Stewart 		return (-1);
3329f8829a4aSRandall Stewart 	}
3330f42a358aSRandall Stewart 	net = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_net, struct sctp_nets);
3331f8829a4aSRandall Stewart 	if (net == NULL) {
3332f8829a4aSRandall Stewart 		return (-1);
3333f8829a4aSRandall Stewart 	}
3334f8829a4aSRandall Stewart 	SCTP_INCR_RADDR_COUNT();
3335f8829a4aSRandall Stewart 	bzero(net, sizeof(*net));
33366e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&net->start_time);
3337f8829a4aSRandall Stewart 	memcpy(&net->ro._l_addr, newaddr, newaddr->sa_len);
3338f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET) {
3339f8829a4aSRandall Stewart 		((struct sockaddr_in *)&net->ro._l_addr)->sin_port = stcb->rport;
3340f8829a4aSRandall Stewart 	} else if (newaddr->sa_family == AF_INET6) {
3341f8829a4aSRandall Stewart 		((struct sockaddr_in6 *)&net->ro._l_addr)->sin6_port = stcb->rport;
3342f8829a4aSRandall Stewart 	}
334342551e99SRandall Stewart 	net->addr_is_local = sctp_is_address_on_local_host(newaddr, stcb->asoc.vrf_id);
334442551e99SRandall Stewart 	if (net->addr_is_local && ((set_scope || (from == SCTP_ADDR_IS_CONFIRMED)))) {
334542551e99SRandall Stewart 		stcb->asoc.loopback_scope = 1;
334642551e99SRandall Stewart 		stcb->asoc.ipv4_local_scope = 1;
334742551e99SRandall Stewart 		stcb->asoc.local_scope = 0;
334842551e99SRandall Stewart 		stcb->asoc.site_scope = 1;
334942551e99SRandall Stewart 		addr_inscope = 1;
335042551e99SRandall Stewart 	}
3351f8829a4aSRandall Stewart 	net->failure_threshold = stcb->asoc.def_net_failure;
3352f8829a4aSRandall Stewart 	if (addr_inscope == 0) {
3353f8829a4aSRandall Stewart 		net->dest_state = (SCTP_ADDR_REACHABLE |
3354f8829a4aSRandall Stewart 		    SCTP_ADDR_OUT_OF_SCOPE);
3355f8829a4aSRandall Stewart 	} else {
3356a5d547adSRandall Stewart 		if (from == SCTP_ADDR_IS_CONFIRMED)
3357a5d547adSRandall Stewart 			/* SCTP_ADDR_IS_CONFIRMED is passed by connect_x */
3358f8829a4aSRandall Stewart 			net->dest_state = SCTP_ADDR_REACHABLE;
3359f8829a4aSRandall Stewart 		else
3360f8829a4aSRandall Stewart 			net->dest_state = SCTP_ADDR_REACHABLE |
3361f8829a4aSRandall Stewart 			    SCTP_ADDR_UNCONFIRMED;
3362f8829a4aSRandall Stewart 	}
3363108df27cSRandall Stewart 	/*
3364108df27cSRandall Stewart 	 * We set this to 0, the timer code knows that this means its an
3365108df27cSRandall Stewart 	 * initial value
3366108df27cSRandall Stewart 	 */
3367108df27cSRandall Stewart 	net->RTO = 0;
33689a972525SRandall Stewart 	net->RTO_measured = 0;
3369f8829a4aSRandall Stewart 	stcb->asoc.numnets++;
3370f8829a4aSRandall Stewart 	*(&net->ref_count) = 1;
3371f8829a4aSRandall Stewart 	net->tos_flowlabel = 0;
337242551e99SRandall Stewart #ifdef INET
3373f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET)
3374f8829a4aSRandall Stewart 		net->tos_flowlabel = stcb->asoc.default_tos;
3375f8829a4aSRandall Stewart #endif
337642551e99SRandall Stewart #ifdef INET6
3377f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET6)
3378f8829a4aSRandall Stewart 		net->tos_flowlabel = stcb->asoc.default_flowlabel;
3379f8829a4aSRandall Stewart #endif
3380f8829a4aSRandall Stewart 	/* Init the timer structure */
3381139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&net->rxt_timer.timer);
3382139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&net->fr_timer.timer);
3383139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&net->pmtu_timer.timer);
3384f8829a4aSRandall Stewart 
3385f8829a4aSRandall Stewart 	/* Now generate a route for this guy */
3386f8829a4aSRandall Stewart 	/* KAME hack: embed scopeid */
3387f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET6) {
3388f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
3389f8829a4aSRandall Stewart 
3390f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
3391f8829a4aSRandall Stewart 		(void)sa6_embedscope(sin6, ip6_use_defzone);
3392f8829a4aSRandall Stewart 		sin6->sin6_scope_id = 0;
3393f8829a4aSRandall Stewart 	}
3394ad21a364SRandall Stewart 	SCTP_RTALLOC((sctp_route_t *) & net->ro, stcb->asoc.vrf_id);
3395bff64a4dSRandall Stewart 
3396f8829a4aSRandall Stewart 	if (newaddr->sa_family == AF_INET6) {
3397f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
3398f8829a4aSRandall Stewart 
3399f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
3400f8829a4aSRandall Stewart 		(void)sa6_recoverscope(sin6);
3401f8829a4aSRandall Stewart 	}
340217205eccSRandall Stewart 	if (SCTP_ROUTE_HAS_VALID_IFN(&net->ro)) {
340317205eccSRandall Stewart 		/* Get source address */
340417205eccSRandall Stewart 		net->ro._s_addr = sctp_source_address_selection(stcb->sctp_ep,
340517205eccSRandall Stewart 		    stcb,
340617205eccSRandall Stewart 		    (sctp_route_t *) & net->ro,
340717205eccSRandall Stewart 		    net,
340817205eccSRandall Stewart 		    0,
340917205eccSRandall Stewart 		    stcb->asoc.vrf_id);
341017205eccSRandall Stewart 		/* Now get the interface MTU */
341117205eccSRandall Stewart 		if (net->ro._s_addr && net->ro._s_addr->ifn_p) {
341217205eccSRandall Stewart 			net->mtu = SCTP_GATHER_MTU_FROM_INTFC(net->ro._s_addr->ifn_p);
341317205eccSRandall Stewart 		} else {
341417205eccSRandall Stewart 			net->mtu = 0;
341517205eccSRandall Stewart 		}
341617205eccSRandall Stewart #ifdef SCTP_PRINT_FOR_B_AND_M
3417ad81507eSRandall Stewart 		SCTP_PRINTF("We have found an interface mtu of %d\n", net->mtu);
341817205eccSRandall Stewart #endif
341917205eccSRandall Stewart 		if (net->mtu == 0) {
342017205eccSRandall Stewart 			/* Huh ?? */
342117205eccSRandall Stewart 			net->mtu = SCTP_DEFAULT_MTU;
342217205eccSRandall Stewart 		} else {
342317205eccSRandall Stewart 			uint32_t rmtu;
342417205eccSRandall Stewart 
342517205eccSRandall Stewart 			rmtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._l_addr.sa, net->ro.ro_rt);
342617205eccSRandall Stewart #ifdef SCTP_PRINT_FOR_B_AND_M
3427ad81507eSRandall Stewart 			SCTP_PRINTF("The route mtu is %d\n", rmtu);
342817205eccSRandall Stewart #endif
342917205eccSRandall Stewart 			if (rmtu == 0) {
343017205eccSRandall Stewart 				/*
343117205eccSRandall Stewart 				 * Start things off to match mtu of
343217205eccSRandall Stewart 				 * interface please.
343317205eccSRandall Stewart 				 */
343417205eccSRandall Stewart 				SCTP_SET_MTU_OF_ROUTE(&net->ro._l_addr.sa,
343517205eccSRandall Stewart 				    net->ro.ro_rt, net->mtu);
343617205eccSRandall Stewart 			} else {
343717205eccSRandall Stewart 				/*
343817205eccSRandall Stewart 				 * we take the route mtu over the interface,
343917205eccSRandall Stewart 				 * since the route may be leading out the
344017205eccSRandall Stewart 				 * loopback, or a different interface.
344117205eccSRandall Stewart 				 */
344217205eccSRandall Stewart 				net->mtu = rmtu;
344317205eccSRandall Stewart 			}
344417205eccSRandall Stewart 		}
3445a5d547adSRandall Stewart 		if (from == SCTP_ALLOC_ASOC) {
344617205eccSRandall Stewart #ifdef SCTP_PRINT_FOR_B_AND_M
3447ad81507eSRandall Stewart 			SCTP_PRINTF("New assoc sets mtu to :%d\n", net->mtu);
344817205eccSRandall Stewart #endif
3449f8829a4aSRandall Stewart 			stcb->asoc.smallest_mtu = net->mtu;
3450f8829a4aSRandall Stewart 		}
3451f8829a4aSRandall Stewart 	} else {
3452f8829a4aSRandall Stewart 		net->mtu = stcb->asoc.smallest_mtu;
3453f8829a4aSRandall Stewart 	}
3454f8829a4aSRandall Stewart 	if (stcb->asoc.smallest_mtu > net->mtu) {
345517205eccSRandall Stewart #ifdef SCTP_PRINT_FOR_B_AND_M
3456ad81507eSRandall Stewart 		SCTP_PRINTF("new address mtu:%d smaller than smallest:%d\n",
345717205eccSRandall Stewart 		    net->mtu, stcb->asoc.smallest_mtu);
345817205eccSRandall Stewart #endif
3459f8829a4aSRandall Stewart 		stcb->asoc.smallest_mtu = net->mtu;
3460f8829a4aSRandall Stewart 	}
3461b54d3a6cSRandall Stewart 	/* JRS - Use the congestion control given in the CC module */
3462b54d3a6cSRandall Stewart 	stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
3463f8829a4aSRandall Stewart 
3464f8829a4aSRandall Stewart 	/*
3465f8829a4aSRandall Stewart 	 * CMT: CUC algo - set find_pseudo_cumack to TRUE (1) at beginning
3466f8829a4aSRandall Stewart 	 * of assoc (2005/06/27, iyengar@cis.udel.edu)
3467f8829a4aSRandall Stewart 	 */
3468f8829a4aSRandall Stewart 	net->find_pseudo_cumack = 1;
3469f8829a4aSRandall Stewart 	net->find_rtx_pseudo_cumack = 1;
3470f8829a4aSRandall Stewart 	net->src_addr_selected = 0;
3471f8829a4aSRandall Stewart 	netfirst = TAILQ_FIRST(&stcb->asoc.nets);
3472f8829a4aSRandall Stewart 	if (net->ro.ro_rt == NULL) {
3473f8829a4aSRandall Stewart 		/* Since we have no route put it at the back */
3474f8829a4aSRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->asoc.nets, net, sctp_next);
3475f8829a4aSRandall Stewart 	} else if (netfirst == NULL) {
3476f8829a4aSRandall Stewart 		/* We are the first one in the pool. */
3477f8829a4aSRandall Stewart 		TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next);
3478f8829a4aSRandall Stewart 	} else if (netfirst->ro.ro_rt == NULL) {
3479f8829a4aSRandall Stewart 		/*
3480f8829a4aSRandall Stewart 		 * First one has NO route. Place this one ahead of the first
3481f8829a4aSRandall Stewart 		 * one.
3482f8829a4aSRandall Stewart 		 */
3483f8829a4aSRandall Stewart 		TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next);
3484f8829a4aSRandall Stewart 	} else if (net->ro.ro_rt->rt_ifp != netfirst->ro.ro_rt->rt_ifp) {
3485f8829a4aSRandall Stewart 		/*
3486f8829a4aSRandall Stewart 		 * This one has a different interface than the one at the
3487f8829a4aSRandall Stewart 		 * top of the list. Place it ahead.
3488f8829a4aSRandall Stewart 		 */
3489f8829a4aSRandall Stewart 		TAILQ_INSERT_HEAD(&stcb->asoc.nets, net, sctp_next);
3490f8829a4aSRandall Stewart 	} else {
3491f8829a4aSRandall Stewart 		/*
3492f8829a4aSRandall Stewart 		 * Ok we have the same interface as the first one. Move
3493f8829a4aSRandall Stewart 		 * forward until we find either a) one with a NULL route...
3494f8829a4aSRandall Stewart 		 * insert ahead of that b) one with a different ifp.. insert
3495f8829a4aSRandall Stewart 		 * after that. c) end of the list.. insert at the tail.
3496f8829a4aSRandall Stewart 		 */
3497f8829a4aSRandall Stewart 		struct sctp_nets *netlook;
3498f8829a4aSRandall Stewart 
3499f8829a4aSRandall Stewart 		do {
3500f8829a4aSRandall Stewart 			netlook = TAILQ_NEXT(netfirst, sctp_next);
3501f8829a4aSRandall Stewart 			if (netlook == NULL) {
3502f8829a4aSRandall Stewart 				/* End of the list */
3503bff64a4dSRandall Stewart 				TAILQ_INSERT_TAIL(&stcb->asoc.nets, net, sctp_next);
3504f8829a4aSRandall Stewart 				break;
3505f8829a4aSRandall Stewart 			} else if (netlook->ro.ro_rt == NULL) {
3506f8829a4aSRandall Stewart 				/* next one has NO route */
3507f8829a4aSRandall Stewart 				TAILQ_INSERT_BEFORE(netfirst, net, sctp_next);
3508f8829a4aSRandall Stewart 				break;
3509bff64a4dSRandall Stewart 			} else if (netlook->ro.ro_rt->rt_ifp != net->ro.ro_rt->rt_ifp) {
3510f8829a4aSRandall Stewart 				TAILQ_INSERT_AFTER(&stcb->asoc.nets, netlook,
3511f8829a4aSRandall Stewart 				    net, sctp_next);
3512f8829a4aSRandall Stewart 				break;
3513f8829a4aSRandall Stewart 			}
3514f8829a4aSRandall Stewart 			/* Shift forward */
3515f8829a4aSRandall Stewart 			netfirst = netlook;
3516f8829a4aSRandall Stewart 		} while (netlook != NULL);
3517f8829a4aSRandall Stewart 	}
3518f8829a4aSRandall Stewart 
3519f8829a4aSRandall Stewart 	/* got to have a primary set */
3520f8829a4aSRandall Stewart 	if (stcb->asoc.primary_destination == 0) {
3521f8829a4aSRandall Stewart 		stcb->asoc.primary_destination = net;
3522f8829a4aSRandall Stewart 	} else if ((stcb->asoc.primary_destination->ro.ro_rt == NULL) &&
3523f8829a4aSRandall Stewart 		    (net->ro.ro_rt) &&
3524f8829a4aSRandall Stewart 	    ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0)) {
3525f8829a4aSRandall Stewart 		/* No route to current primary adopt new primary */
3526f8829a4aSRandall Stewart 		stcb->asoc.primary_destination = net;
3527f8829a4aSRandall Stewart 	}
3528f8829a4aSRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, stcb->sctp_ep, stcb,
3529f8829a4aSRandall Stewart 	    net);
3530f8829a4aSRandall Stewart 	/* Validate primary is first */
3531f8829a4aSRandall Stewart 	net = TAILQ_FIRST(&stcb->asoc.nets);
3532f8829a4aSRandall Stewart 	if ((net != stcb->asoc.primary_destination) &&
3533f8829a4aSRandall Stewart 	    (stcb->asoc.primary_destination)) {
3534f8829a4aSRandall Stewart 		/*
3535f8829a4aSRandall Stewart 		 * first one on the list is NOT the primary sctp_cmpaddr()
3536f8829a4aSRandall Stewart 		 * is much more efficent if the primary is the first on the
3537f8829a4aSRandall Stewart 		 * list, make it so.
3538f8829a4aSRandall Stewart 		 */
3539f8829a4aSRandall Stewart 		TAILQ_REMOVE(&stcb->asoc.nets,
3540f8829a4aSRandall Stewart 		    stcb->asoc.primary_destination, sctp_next);
3541f8829a4aSRandall Stewart 		TAILQ_INSERT_HEAD(&stcb->asoc.nets,
3542f8829a4aSRandall Stewart 		    stcb->asoc.primary_destination, sctp_next);
3543f8829a4aSRandall Stewart 	}
3544f8829a4aSRandall Stewart 	return (0);
3545f8829a4aSRandall Stewart }
3546f8829a4aSRandall Stewart 
3547f8829a4aSRandall Stewart 
3548f8829a4aSRandall Stewart /*
3549f8829a4aSRandall Stewart  * allocate an association and add it to the endpoint. The caller must be
3550f8829a4aSRandall Stewart  * careful to add all additional addresses once they are know right away or
3551f8829a4aSRandall Stewart  * else the assoc will be may experience a blackout scenario.
3552f8829a4aSRandall Stewart  */
3553f8829a4aSRandall Stewart struct sctp_tcb *
3554f8829a4aSRandall Stewart sctp_aloc_assoc(struct sctp_inpcb *inp, struct sockaddr *firstaddr,
355552be287eSRandall Stewart     int for_a_init, int *error, uint32_t override_tag, uint32_t vrf_id,
355652be287eSRandall Stewart     struct thread *p
355752be287eSRandall Stewart )
3558f8829a4aSRandall Stewart {
355952be287eSRandall Stewart 	/* note the p argument is only valid in unbound sockets */
356052be287eSRandall Stewart 
3561f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
3562f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3563f8829a4aSRandall Stewart 	struct sctpasochead *head;
3564f8829a4aSRandall Stewart 	uint16_t rport;
3565f8829a4aSRandall Stewart 	int err;
3566f8829a4aSRandall Stewart 
3567f8829a4aSRandall Stewart 	/*
3568f8829a4aSRandall Stewart 	 * Assumption made here: Caller has done a
3569f8829a4aSRandall Stewart 	 * sctp_findassociation_ep_addr(ep, addr's); to make sure the
3570f8829a4aSRandall Stewart 	 * address does not exist already.
3571f8829a4aSRandall Stewart 	 */
3572f8829a4aSRandall Stewart 	if (sctppcbinfo.ipi_count_asoc >= SCTP_MAX_NUM_OF_ASOC) {
3573f8829a4aSRandall Stewart 		/* Hit max assoc, sorry no more */
3574c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS);
3575f8829a4aSRandall Stewart 		*error = ENOBUFS;
3576f8829a4aSRandall Stewart 		return (NULL);
3577f8829a4aSRandall Stewart 	}
3578ad81507eSRandall Stewart 	if (firstaddr == NULL) {
3579c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3580ad81507eSRandall Stewart 		*error = EINVAL;
3581ad81507eSRandall Stewart 		return (NULL);
3582ad81507eSRandall Stewart 	}
3583f8829a4aSRandall Stewart 	SCTP_INP_RLOCK(inp);
3584f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) {
3585f8829a4aSRandall Stewart 		/*
3586f8829a4aSRandall Stewart 		 * If its in the TCP pool, its NOT allowed to create an
3587f8829a4aSRandall Stewart 		 * association. The parent listener needs to call
3588f8829a4aSRandall Stewart 		 * sctp_aloc_assoc.. or the one-2-many socket. If a peeled
3589f8829a4aSRandall Stewart 		 * off, or connected one does this.. its an error.
3590f8829a4aSRandall Stewart 		 */
3591f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
3592c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3593f8829a4aSRandall Stewart 		*error = EINVAL;
3594f8829a4aSRandall Stewart 		return (NULL);
3595f8829a4aSRandall Stewart 	}
3596ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB3, "Allocate an association for peer:");
3597f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
35986e55db54SRandall Stewart 	if (firstaddr) {
3599ad81507eSRandall Stewart 		SCTPDBG_ADDR(SCTP_DEBUG_PCB3, firstaddr);
3600ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB3, "Port:%d\n",
3601f8829a4aSRandall Stewart 		    ntohs(((struct sockaddr_in *)firstaddr)->sin_port));
3602ad81507eSRandall Stewart 	} else {
3603ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB3, "None\n");
3604f8829a4aSRandall Stewart 	}
3605f8829a4aSRandall Stewart #endif				/* SCTP_DEBUG */
3606f8829a4aSRandall Stewart 	if (firstaddr->sa_family == AF_INET) {
3607f8829a4aSRandall Stewart 		struct sockaddr_in *sin;
3608f8829a4aSRandall Stewart 
3609f8829a4aSRandall Stewart 		sin = (struct sockaddr_in *)firstaddr;
3610f8829a4aSRandall Stewart 		if ((sin->sin_port == 0) || (sin->sin_addr.s_addr == 0)) {
3611f8829a4aSRandall Stewart 			/* Invalid address */
3612f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
3613c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3614f8829a4aSRandall Stewart 			*error = EINVAL;
3615f8829a4aSRandall Stewart 			return (NULL);
3616f8829a4aSRandall Stewart 		}
3617f8829a4aSRandall Stewart 		rport = sin->sin_port;
3618f8829a4aSRandall Stewart 	} else if (firstaddr->sa_family == AF_INET6) {
3619f8829a4aSRandall Stewart 		struct sockaddr_in6 *sin6;
3620f8829a4aSRandall Stewart 
3621f8829a4aSRandall Stewart 		sin6 = (struct sockaddr_in6 *)firstaddr;
3622f8829a4aSRandall Stewart 		if ((sin6->sin6_port == 0) ||
3623f8829a4aSRandall Stewart 		    (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr))) {
3624f8829a4aSRandall Stewart 			/* Invalid address */
3625f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
3626c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3627f8829a4aSRandall Stewart 			*error = EINVAL;
3628f8829a4aSRandall Stewart 			return (NULL);
3629f8829a4aSRandall Stewart 		}
3630f8829a4aSRandall Stewart 		rport = sin6->sin6_port;
3631f8829a4aSRandall Stewart 	} else {
3632f8829a4aSRandall Stewart 		/* not supported family type */
3633f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
3634c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3635f8829a4aSRandall Stewart 		*error = EINVAL;
3636f8829a4aSRandall Stewart 		return (NULL);
3637f8829a4aSRandall Stewart 	}
3638f8829a4aSRandall Stewart 	SCTP_INP_RUNLOCK(inp);
3639f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
3640f8829a4aSRandall Stewart 		/*
3641f8829a4aSRandall Stewart 		 * If you have not performed a bind, then we need to do the
3642f8829a4aSRandall Stewart 		 * ephemerial bind for you.
3643f8829a4aSRandall Stewart 		 */
3644f8829a4aSRandall Stewart 		if ((err = sctp_inpcb_bind(inp->sctp_socket,
364518e198d3SRandall Stewart 		    (struct sockaddr *)NULL,
36461b649582SRandall Stewart 		    (struct sctp_ifa *)NULL,
364752be287eSRandall Stewart 		    p
3648f8829a4aSRandall Stewart 		    ))) {
3649f8829a4aSRandall Stewart 			/* bind error, probably perm */
3650f8829a4aSRandall Stewart 			*error = err;
3651f8829a4aSRandall Stewart 			return (NULL);
3652f8829a4aSRandall Stewart 		}
3653f8829a4aSRandall Stewart 	}
3654f42a358aSRandall Stewart 	stcb = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_asoc, struct sctp_tcb);
3655f8829a4aSRandall Stewart 	if (stcb == NULL) {
3656f8829a4aSRandall Stewart 		/* out of memory? */
3657c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOMEM);
3658f8829a4aSRandall Stewart 		*error = ENOMEM;
3659f8829a4aSRandall Stewart 		return (NULL);
3660f8829a4aSRandall Stewart 	}
3661f8829a4aSRandall Stewart 	SCTP_INCR_ASOC_COUNT();
3662f8829a4aSRandall Stewart 
3663f8829a4aSRandall Stewart 	bzero(stcb, sizeof(*stcb));
3664f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
3665f8829a4aSRandall Stewart 	SCTP_TCB_LOCK_INIT(stcb);
3666f8829a4aSRandall Stewart 	SCTP_TCB_SEND_LOCK_INIT(stcb);
3667f8829a4aSRandall Stewart 	/* setup back pointer's */
3668f8829a4aSRandall Stewart 	stcb->sctp_ep = inp;
3669f8829a4aSRandall Stewart 	stcb->sctp_socket = inp->sctp_socket;
36700696e120SRandall Stewart 	if ((err = sctp_init_asoc(inp, stcb, for_a_init, override_tag, vrf_id))) {
3671f8829a4aSRandall Stewart 		/* failed */
3672f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_DESTROY(stcb);
3673f8829a4aSRandall Stewart 		SCTP_TCB_SEND_LOCK_DESTROY(stcb);
3674f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, stcb);
3675f8829a4aSRandall Stewart 		SCTP_DECR_ASOC_COUNT();
3676f8829a4aSRandall Stewart 		*error = err;
3677f8829a4aSRandall Stewart 		return (NULL);
3678f8829a4aSRandall Stewart 	}
3679f8829a4aSRandall Stewart 	/* and the port */
3680f8829a4aSRandall Stewart 	stcb->rport = rport;
3681f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
3682f8829a4aSRandall Stewart 	SCTP_INP_WLOCK(inp);
3683f8829a4aSRandall Stewart 	if (inp->sctp_flags & (SCTP_PCB_FLAGS_SOCKET_GONE | SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
3684f8829a4aSRandall Stewart 		/* inpcb freed while alloc going on */
3685f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_DESTROY(stcb);
3686f8829a4aSRandall Stewart 		SCTP_TCB_SEND_LOCK_DESTROY(stcb);
3687f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, stcb);
3688f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
3689f8829a4aSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
3690f8829a4aSRandall Stewart 		SCTP_DECR_ASOC_COUNT();
3691c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
3692f8829a4aSRandall Stewart 		*error = EINVAL;
3693f8829a4aSRandall Stewart 		return (NULL);
3694f8829a4aSRandall Stewart 	}
3695f8829a4aSRandall Stewart 	SCTP_TCB_LOCK(stcb);
3696f8829a4aSRandall Stewart 
3697f8829a4aSRandall Stewart 	/* now that my_vtag is set, add it to the hash */
3698f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_asochash[SCTP_PCBHASH_ASOC(stcb->asoc.my_vtag,
3699f8829a4aSRandall Stewart 	    sctppcbinfo.hashasocmark)];
3700f8829a4aSRandall Stewart 	/* put it in the bucket in the vtag hash of assoc's for the system */
3701f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(head, stcb, sctp_asocs);
3702851b7298SRandall Stewart 	sctp_delete_from_timewait(stcb->asoc.my_vtag);
3703851b7298SRandall Stewart 
3704f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
3705f8829a4aSRandall Stewart 
3706a5d547adSRandall Stewart 	if ((err = sctp_add_remote_addr(stcb, firstaddr, SCTP_DO_SETSCOPE, SCTP_ALLOC_ASOC))) {
3707f8829a4aSRandall Stewart 		/* failure.. memory error? */
3708207304d4SRandall Stewart 		if (asoc->strmout) {
3709207304d4SRandall Stewart 			SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
3710207304d4SRandall Stewart 			asoc->strmout = NULL;
3711207304d4SRandall Stewart 		}
3712207304d4SRandall Stewart 		if (asoc->mapping_array) {
3713207304d4SRandall Stewart 			SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
3714207304d4SRandall Stewart 			asoc->mapping_array = NULL;
3715207304d4SRandall Stewart 		}
3716f8829a4aSRandall Stewart 		SCTP_DECR_ASOC_COUNT();
3717f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_DESTROY(stcb);
3718f8829a4aSRandall Stewart 		SCTP_TCB_SEND_LOCK_DESTROY(stcb);
3719eacc51c5SRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, stcb);
3720bff64a4dSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
3721c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOBUFS);
3722f8829a4aSRandall Stewart 		*error = ENOBUFS;
3723f8829a4aSRandall Stewart 		return (NULL);
3724f8829a4aSRandall Stewart 	}
3725f8829a4aSRandall Stewart 	/* Init all the timers */
3726139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->hb_timer.timer);
3727139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->dack_timer.timer);
3728139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->strreset_timer.timer);
3729139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->asconf_timer.timer);
3730139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->shut_guard_timer.timer);
3731139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->autoclose_timer.timer);
3732139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->delayed_event_timer.timer);
3733851b7298SRandall Stewart 	SCTP_OS_TIMER_INIT(&asoc->delete_prim_timer.timer);
3734139bc87fSRandall Stewart 
3735f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(&inp->sctp_asoc_list, stcb, sctp_tcblist);
3736f8829a4aSRandall Stewart 	/* now file the port under the hash as well */
3737f8829a4aSRandall Stewart 	if (inp->sctp_tcbhash != NULL) {
3738f8829a4aSRandall Stewart 		head = &inp->sctp_tcbhash[SCTP_PCBHASH_ALLADDR(stcb->rport,
3739f8829a4aSRandall Stewart 		    inp->sctp_hashmark)];
3740f8829a4aSRandall Stewart 		LIST_INSERT_HEAD(head, stcb, sctp_tcbhash);
3741f8829a4aSRandall Stewart 	}
3742f8829a4aSRandall Stewart 	SCTP_INP_WUNLOCK(inp);
3743ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_PCB1, "Association %p now allocated\n", stcb);
3744f8829a4aSRandall Stewart 	return (stcb);
3745f8829a4aSRandall Stewart }
3746f8829a4aSRandall Stewart 
3747f8829a4aSRandall Stewart 
3748f8829a4aSRandall Stewart void
3749f8829a4aSRandall Stewart sctp_remove_net(struct sctp_tcb *stcb, struct sctp_nets *net)
3750f8829a4aSRandall Stewart {
3751f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3752f8829a4aSRandall Stewart 
3753f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
3754f8829a4aSRandall Stewart 	asoc->numnets--;
3755f8829a4aSRandall Stewart 	TAILQ_REMOVE(&asoc->nets, net, sctp_next);
3756f8829a4aSRandall Stewart 	if (net == asoc->primary_destination) {
3757f8829a4aSRandall Stewart 		/* Reset primary */
3758f8829a4aSRandall Stewart 		struct sctp_nets *lnet;
3759f8829a4aSRandall Stewart 
3760f8829a4aSRandall Stewart 		lnet = TAILQ_FIRST(&asoc->nets);
3761851b7298SRandall Stewart 		/*
3762851b7298SRandall Stewart 		 * Mobility adaptation Ideally, if deleted destination is
3763851b7298SRandall Stewart 		 * the primary, it becomes a fast retransmission trigger by
3764851b7298SRandall Stewart 		 * the subsequent SET PRIMARY. (by micchie)
3765851b7298SRandall Stewart 		 */
3766851b7298SRandall Stewart 		if (sctp_is_mobility_feature_on(stcb->sctp_ep,
3767851b7298SRandall Stewart 		    SCTP_MOBILITY_FASTHANDOFF)) {
3768851b7298SRandall Stewart 			SCTPDBG(SCTP_DEBUG_ASCONF1, "remove_net: primary dst is deleting\n");
3769851b7298SRandall Stewart 			if (asoc->deleted_primary != NULL) {
3770851b7298SRandall Stewart 				SCTPDBG(SCTP_DEBUG_ASCONF1, "remove_net: deleted primary may be already stored\n");
3771851b7298SRandall Stewart 				goto leave;
3772851b7298SRandall Stewart 			}
3773851b7298SRandall Stewart 			asoc->deleted_primary = net;
3774851b7298SRandall Stewart 			atomic_add_int(&net->ref_count, 1);
3775851b7298SRandall Stewart 			sctp_mobility_feature_on(stcb->sctp_ep,
3776851b7298SRandall Stewart 			    SCTP_MOBILITY_PRIM_DELETED);
3777851b7298SRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_PRIM_DELETED,
3778851b7298SRandall Stewart 			    stcb->sctp_ep, stcb, NULL);
3779851b7298SRandall Stewart 		}
3780851b7298SRandall Stewart leave:
3781f8829a4aSRandall Stewart 		/* Try to find a confirmed primary */
378242551e99SRandall Stewart 		asoc->primary_destination = sctp_find_alternate_net(stcb, lnet, 0);
3783f8829a4aSRandall Stewart 	}
3784f8829a4aSRandall Stewart 	if (net == asoc->last_data_chunk_from) {
3785f8829a4aSRandall Stewart 		/* Reset primary */
3786f8829a4aSRandall Stewart 		asoc->last_data_chunk_from = TAILQ_FIRST(&asoc->nets);
3787f8829a4aSRandall Stewart 	}
3788f8829a4aSRandall Stewart 	if (net == asoc->last_control_chunk_from) {
3789f8829a4aSRandall Stewart 		/* Clear net */
3790f8829a4aSRandall Stewart 		asoc->last_control_chunk_from = NULL;
3791f8829a4aSRandall Stewart 	}
379242551e99SRandall Stewart 	sctp_free_remote_addr(net);
3793f8829a4aSRandall Stewart }
3794f8829a4aSRandall Stewart 
3795f8829a4aSRandall Stewart /*
3796f8829a4aSRandall Stewart  * remove a remote endpoint address from an association, it will fail if the
3797f8829a4aSRandall Stewart  * address does not exist.
3798f8829a4aSRandall Stewart  */
3799f8829a4aSRandall Stewart int
3800f8829a4aSRandall Stewart sctp_del_remote_addr(struct sctp_tcb *stcb, struct sockaddr *remaddr)
3801f8829a4aSRandall Stewart {
3802f8829a4aSRandall Stewart 	/*
3803f8829a4aSRandall Stewart 	 * Here we need to remove a remote address. This is quite simple, we
3804f8829a4aSRandall Stewart 	 * first find it in the list of address for the association
3805f8829a4aSRandall Stewart 	 * (tasoc->asoc.nets) and then if it is there, we do a LIST_REMOVE
3806f8829a4aSRandall Stewart 	 * on that item. Note we do not allow it to be removed if there are
3807f8829a4aSRandall Stewart 	 * no other addresses.
3808f8829a4aSRandall Stewart 	 */
3809f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3810f8829a4aSRandall Stewart 	struct sctp_nets *net, *net_tmp;
3811f8829a4aSRandall Stewart 
3812f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
3813f8829a4aSRandall Stewart 
3814f8829a4aSRandall Stewart 	/* locate the address */
3815f8829a4aSRandall Stewart 	for (net = TAILQ_FIRST(&asoc->nets); net != NULL; net = net_tmp) {
3816f8829a4aSRandall Stewart 		net_tmp = TAILQ_NEXT(net, sctp_next);
3817f8829a4aSRandall Stewart 		if (net->ro._l_addr.sa.sa_family != remaddr->sa_family) {
3818f8829a4aSRandall Stewart 			continue;
3819f8829a4aSRandall Stewart 		}
3820f8829a4aSRandall Stewart 		if (sctp_cmpaddr((struct sockaddr *)&net->ro._l_addr,
3821f8829a4aSRandall Stewart 		    remaddr)) {
3822f8829a4aSRandall Stewart 			/* we found the guy */
3823f8829a4aSRandall Stewart 			if (asoc->numnets < 2) {
3824f8829a4aSRandall Stewart 				/* Must have at LEAST two remote addresses */
3825f8829a4aSRandall Stewart 				return (-1);
3826f8829a4aSRandall Stewart 			} else {
3827f8829a4aSRandall Stewart 				sctp_remove_net(stcb, net);
3828f8829a4aSRandall Stewart 				return (0);
3829f8829a4aSRandall Stewart 			}
3830f8829a4aSRandall Stewart 		}
3831f8829a4aSRandall Stewart 	}
3832f8829a4aSRandall Stewart 	/* not found. */
3833f8829a4aSRandall Stewart 	return (-2);
3834f8829a4aSRandall Stewart }
3835f8829a4aSRandall Stewart 
3836851b7298SRandall Stewart void
3837851b7298SRandall Stewart sctp_delete_from_timewait(uint32_t tag)
3838851b7298SRandall Stewart {
3839851b7298SRandall Stewart 	struct sctpvtaghead *chain;
3840851b7298SRandall Stewart 	struct sctp_tagblock *twait_block;
3841851b7298SRandall Stewart 	int found = 0;
3842851b7298SRandall Stewart 	int i;
3843851b7298SRandall Stewart 
3844851b7298SRandall Stewart 	chain = &sctppcbinfo.vtag_timewait[(tag % SCTP_STACK_VTAG_HASH_SIZE)];
3845851b7298SRandall Stewart 	if (!SCTP_LIST_EMPTY(chain)) {
3846851b7298SRandall Stewart 		LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) {
3847851b7298SRandall Stewart 			for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) {
3848851b7298SRandall Stewart 				if (twait_block->vtag_block[i].v_tag == tag) {
3849851b7298SRandall Stewart 					twait_block->vtag_block[i].tv_sec_at_expire = 0;
3850851b7298SRandall Stewart 					twait_block->vtag_block[i].v_tag = 0;
3851851b7298SRandall Stewart 					found = 1;
3852851b7298SRandall Stewart 					break;
3853851b7298SRandall Stewart 				}
3854851b7298SRandall Stewart 			}
3855851b7298SRandall Stewart 			if (found)
3856851b7298SRandall Stewart 				break;
3857851b7298SRandall Stewart 		}
3858851b7298SRandall Stewart 	}
3859851b7298SRandall Stewart }
3860f8829a4aSRandall Stewart 
386144b7479bSRandall Stewart void
3862851b7298SRandall Stewart sctp_add_vtag_to_timewait(uint32_t tag, uint32_t time)
3863f8829a4aSRandall Stewart {
3864f8829a4aSRandall Stewart 	struct sctpvtaghead *chain;
3865f8829a4aSRandall Stewart 	struct sctp_tagblock *twait_block;
3866f8829a4aSRandall Stewart 	struct timeval now;
3867f8829a4aSRandall Stewart 	int set, i;
3868f8829a4aSRandall Stewart 
38696e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&now);
3870f8829a4aSRandall Stewart 	chain = &sctppcbinfo.vtag_timewait[(tag % SCTP_STACK_VTAG_HASH_SIZE)];
3871f8829a4aSRandall Stewart 	set = 0;
3872f42a358aSRandall Stewart 	if (!SCTP_LIST_EMPTY(chain)) {
3873f8829a4aSRandall Stewart 		/* Block(s) present, lets find space, and expire on the fly */
3874f8829a4aSRandall Stewart 		LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) {
3875f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) {
3876f8829a4aSRandall Stewart 				if ((twait_block->vtag_block[i].v_tag == 0) &&
3877f8829a4aSRandall Stewart 				    !set) {
3878f8829a4aSRandall Stewart 					twait_block->vtag_block[i].tv_sec_at_expire =
387944b7479bSRandall Stewart 					    now.tv_sec + time;
3880f8829a4aSRandall Stewart 					twait_block->vtag_block[i].v_tag = tag;
3881f8829a4aSRandall Stewart 					set = 1;
3882f8829a4aSRandall Stewart 				} else if ((twait_block->vtag_block[i].v_tag) &&
3883f8829a4aSRandall Stewart 					    ((long)twait_block->vtag_block[i].tv_sec_at_expire >
3884f8829a4aSRandall Stewart 				    now.tv_sec)) {
3885f8829a4aSRandall Stewart 					/* Audit expires this guy */
3886f8829a4aSRandall Stewart 					twait_block->vtag_block[i].tv_sec_at_expire = 0;
3887f8829a4aSRandall Stewart 					twait_block->vtag_block[i].v_tag = 0;
3888f8829a4aSRandall Stewart 					if (set == 0) {
3889f8829a4aSRandall Stewart 						/* Reuse it for my new tag */
3890f8829a4aSRandall Stewart 						twait_block->vtag_block[0].tv_sec_at_expire = now.tv_sec + SCTP_TIME_WAIT;
3891f8829a4aSRandall Stewart 						twait_block->vtag_block[0].v_tag = tag;
3892f8829a4aSRandall Stewart 						set = 1;
3893f8829a4aSRandall Stewart 					}
3894f8829a4aSRandall Stewart 				}
3895f8829a4aSRandall Stewart 			}
3896f8829a4aSRandall Stewart 			if (set) {
3897f8829a4aSRandall Stewart 				/*
3898f8829a4aSRandall Stewart 				 * We only do up to the block where we can
3899f8829a4aSRandall Stewart 				 * place our tag for audits
3900f8829a4aSRandall Stewart 				 */
3901f8829a4aSRandall Stewart 				break;
3902f8829a4aSRandall Stewart 			}
3903f8829a4aSRandall Stewart 		}
3904f8829a4aSRandall Stewart 	}
3905f8829a4aSRandall Stewart 	/* Need to add a new block to chain */
3906f8829a4aSRandall Stewart 	if (!set) {
3907f8829a4aSRandall Stewart 		SCTP_MALLOC(twait_block, struct sctp_tagblock *,
3908207304d4SRandall Stewart 		    sizeof(struct sctp_tagblock), SCTP_M_TIMW);
3909f8829a4aSRandall Stewart 		if (twait_block == NULL) {
3910f8829a4aSRandall Stewart 			return;
3911f8829a4aSRandall Stewart 		}
391244b7479bSRandall Stewart 		memset(twait_block, 0, sizeof(struct sctp_tagblock));
3913f8829a4aSRandall Stewart 		LIST_INSERT_HEAD(chain, twait_block, sctp_nxt_tagblock);
3914f8829a4aSRandall Stewart 		twait_block->vtag_block[0].tv_sec_at_expire = now.tv_sec +
3915f8829a4aSRandall Stewart 		    SCTP_TIME_WAIT;
3916f8829a4aSRandall Stewart 		twait_block->vtag_block[0].v_tag = tag;
3917f8829a4aSRandall Stewart 	}
3918f8829a4aSRandall Stewart }
3919f8829a4aSRandall Stewart 
3920f8829a4aSRandall Stewart 
3921f8829a4aSRandall Stewart static void
3922f8829a4aSRandall Stewart sctp_iterator_asoc_being_freed(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
3923f8829a4aSRandall Stewart {
3924f8829a4aSRandall Stewart 	struct sctp_iterator *it;
3925f8829a4aSRandall Stewart 
3926f8829a4aSRandall Stewart 	/*
3927f8829a4aSRandall Stewart 	 * Unlock the tcb lock we do this so we avoid a dead lock scenario
3928f8829a4aSRandall Stewart 	 * where the iterator is waiting on the TCB lock and the TCB lock is
3929f8829a4aSRandall Stewart 	 * waiting on the iterator lock.
3930f8829a4aSRandall Stewart 	 */
3931f8829a4aSRandall Stewart 	it = stcb->asoc.stcb_starting_point_for_iterator;
3932f8829a4aSRandall Stewart 	if (it == NULL) {
3933f8829a4aSRandall Stewart 		return;
3934f8829a4aSRandall Stewart 	}
3935f8829a4aSRandall Stewart 	if (it->inp != stcb->sctp_ep) {
3936f8829a4aSRandall Stewart 		/* hmm, focused on the wrong one? */
3937f8829a4aSRandall Stewart 		return;
3938f8829a4aSRandall Stewart 	}
3939f8829a4aSRandall Stewart 	if (it->stcb != stcb) {
3940f8829a4aSRandall Stewart 		return;
3941f8829a4aSRandall Stewart 	}
3942f8829a4aSRandall Stewart 	it->stcb = LIST_NEXT(stcb, sctp_tcblist);
3943f8829a4aSRandall Stewart 	if (it->stcb == NULL) {
3944f8829a4aSRandall Stewart 		/* done with all asoc's in this assoc */
3945f8829a4aSRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
3946f8829a4aSRandall Stewart 			it->inp = NULL;
3947f8829a4aSRandall Stewart 		} else {
3948f8829a4aSRandall Stewart 			it->inp = LIST_NEXT(inp, sctp_list);
3949f8829a4aSRandall Stewart 		}
3950f8829a4aSRandall Stewart 	}
3951f8829a4aSRandall Stewart }
3952f8829a4aSRandall Stewart 
3953bff64a4dSRandall Stewart 
3954c4739e2fSRandall Stewart /*-
3955c4739e2fSRandall Stewart  * Free the association after un-hashing the remote port. This
3956c4739e2fSRandall Stewart  * function ALWAYS returns holding NO LOCK on the stcb. It DOES
3957c4739e2fSRandall Stewart  * expect that the input to this function IS a locked TCB.
3958c4739e2fSRandall Stewart  * It will return 0, if it did NOT destroy the association (instead
3959c4739e2fSRandall Stewart  * it unlocks it. It will return NON-zero if it either destroyed the
3960c4739e2fSRandall Stewart  * association OR the association is already destroyed.
3961f8829a4aSRandall Stewart  */
3962f8829a4aSRandall Stewart int
3963a5d547adSRandall Stewart sctp_free_assoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int from_inpcbfree, int from_location)
3964f8829a4aSRandall Stewart {
3965f8829a4aSRandall Stewart 	int i;
3966f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3967f8829a4aSRandall Stewart 	struct sctp_nets *net, *prev;
3968f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
3969f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
3970f8829a4aSRandall Stewart 	struct sctp_asconf_addr *aparam;
39712afb3e84SRandall Stewart 	struct sctp_asconf_ack *aack;
3972f8829a4aSRandall Stewart 	struct sctp_stream_reset_list *liste;
3973f8829a4aSRandall Stewart 	struct sctp_queued_to_read *sq;
3974f8829a4aSRandall Stewart 	struct sctp_stream_queue_pending *sp;
3975f8829a4aSRandall Stewart 	sctp_sharedkey_t *shared_key;
3976f8829a4aSRandall Stewart 	struct socket *so;
3977f8829a4aSRandall Stewart 	int ccnt = 0;
397893164cf9SRandall Stewart 	int cnt = 0;
3979f8829a4aSRandall Stewart 
3980f8829a4aSRandall Stewart 	/* first, lets purge the entry from the hash table. */
3981f8829a4aSRandall Stewart 
3982f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
3983f8829a4aSRandall Stewart 	sctp_log_closing(inp, stcb, 6);
3984f8829a4aSRandall Stewart #endif
3985f8829a4aSRandall Stewart 	if (stcb->asoc.state == 0) {
3986f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
3987f8829a4aSRandall Stewart 		sctp_log_closing(inp, NULL, 7);
3988f8829a4aSRandall Stewart #endif
3989f8829a4aSRandall Stewart 		/* there is no asoc, really TSNH :-0 */
3990f8829a4aSRandall Stewart 		return (1);
3991f8829a4aSRandall Stewart 	}
3992a5d547adSRandall Stewart 	/* TEMP CODE */
3993a5d547adSRandall Stewart 	if (stcb->freed_from_where == 0) {
3994a5d547adSRandall Stewart 		/* Only record the first place free happened from */
3995a5d547adSRandall Stewart 		stcb->freed_from_where = from_location;
3996a5d547adSRandall Stewart 	}
3997a5d547adSRandall Stewart 	/* TEMP CODE */
3998a5d547adSRandall Stewart 
3999f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
4000f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
4001f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE))
4002f8829a4aSRandall Stewart 		/* nothing around */
4003f8829a4aSRandall Stewart 		so = NULL;
4004f8829a4aSRandall Stewart 	else
4005f8829a4aSRandall Stewart 		so = inp->sctp_socket;
4006f8829a4aSRandall Stewart 
4007f8829a4aSRandall Stewart 	/*
4008f8829a4aSRandall Stewart 	 * We used timer based freeing if a reader or writer is in the way.
4009f8829a4aSRandall Stewart 	 * So we first check if we are actually being called from a timer,
4010f8829a4aSRandall Stewart 	 * if so we abort early if a reader or writer is still in the way.
4011f8829a4aSRandall Stewart 	 */
4012f8829a4aSRandall Stewart 	if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) &&
4013a5d547adSRandall Stewart 	    (from_inpcbfree == SCTP_NORMAL_PROC)) {
4014f8829a4aSRandall Stewart 		/*
4015f8829a4aSRandall Stewart 		 * is it the timer driving us? if so are the reader/writers
4016f8829a4aSRandall Stewart 		 * gone?
4017f8829a4aSRandall Stewart 		 */
4018f8829a4aSRandall Stewart 		if (stcb->asoc.refcnt) {
4019f8829a4aSRandall Stewart 			/* nope, reader or writer in the way */
4020f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL);
4021f8829a4aSRandall Stewart 			/* no asoc destroyed */
4022f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
4023f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
4024f8829a4aSRandall Stewart 			sctp_log_closing(inp, stcb, 8);
4025f8829a4aSRandall Stewart #endif
4026f8829a4aSRandall Stewart 			return (0);
4027f8829a4aSRandall Stewart 		}
4028f8829a4aSRandall Stewart 	}
4029f8829a4aSRandall Stewart 	/* now clean up any other timers */
40306e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->hb_timer.timer);
4031c105859eSRandall Stewart 	asoc->hb_timer.self = NULL;
40326e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
4033c105859eSRandall Stewart 	asoc->dack_timer.self = NULL;
40346e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
4035c105859eSRandall Stewart 	/*-
4036c105859eSRandall Stewart 	 * For stream reset we don't blast this unless
4037c105859eSRandall Stewart 	 * it is a str-reset timer, it might be the
4038c105859eSRandall Stewart 	 * free-asoc timer which we DON'T want to
4039c105859eSRandall Stewart 	 * disturb.
4040c105859eSRandall Stewart 	 */
4041c105859eSRandall Stewart 	if (asoc->strreset_timer.type == SCTP_TIMER_TYPE_STRRESET)
4042c105859eSRandall Stewart 		asoc->strreset_timer.self = NULL;
40436e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
4044c105859eSRandall Stewart 	asoc->asconf_timer.self = NULL;
40456e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
4046c105859eSRandall Stewart 	asoc->autoclose_timer.self = NULL;
40476e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->shut_guard_timer.timer);
4048c105859eSRandall Stewart 	asoc->shut_guard_timer.self = NULL;
40496e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
4050c105859eSRandall Stewart 	asoc->delayed_event_timer.self = NULL;
4051851b7298SRandall Stewart 	/* Mobility adaptation */
4052851b7298SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->delete_prim_timer.timer);
4053851b7298SRandall Stewart 	asoc->delete_prim_timer.self = NULL;
4054f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
40556e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->fr_timer.timer);
4056c105859eSRandall Stewart 		net->fr_timer.self = NULL;
40576e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->rxt_timer.timer);
4058c105859eSRandall Stewart 		net->rxt_timer.self = NULL;
40596e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
4060c105859eSRandall Stewart 		net->pmtu_timer.self = NULL;
4061f8829a4aSRandall Stewart 	}
4062f4ad963cSRandall Stewart 	/* Now the read queue needs to be cleaned up (only once) */
4063a5d547adSRandall Stewart 	cnt = 0;
4064f4ad963cSRandall Stewart 	if ((stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0) {
4065d06c82f1SRandall Stewart 		stcb->asoc.state |= SCTP_STATE_ABOUT_TO_BE_FREED;
4066f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4067f8829a4aSRandall Stewart 		TAILQ_FOREACH(sq, &inp->read_queue, next) {
4068f8829a4aSRandall Stewart 			if (sq->stcb == stcb) {
4069f8829a4aSRandall Stewart 				sq->do_not_ref_stcb = 1;
4070f8829a4aSRandall Stewart 				sq->sinfo_cumtsn = stcb->asoc.cumulative_tsn;
4071f8829a4aSRandall Stewart 				/*
407203b0b021SRandall Stewart 				 * If there is no end, there never will be
407303b0b021SRandall Stewart 				 * now.
4074f8829a4aSRandall Stewart 				 */
407503b0b021SRandall Stewart 				if (sq->end_added == 0) {
407603b0b021SRandall Stewart 					/* Held for PD-API clear that. */
407703b0b021SRandall Stewart 					sq->pdapi_aborted = 1;
4078f8829a4aSRandall Stewart 					sq->held_length = 0;
40792dad8a55SRandall Stewart 					if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PDAPIEVNT) && (so != NULL)) {
4080f8829a4aSRandall Stewart 						/*
408103b0b021SRandall Stewart 						 * Need to add a PD-API
408203b0b021SRandall Stewart 						 * aborted indication.
408303b0b021SRandall Stewart 						 * Setting the control_pdapi
408403b0b021SRandall Stewart 						 * assures that it will be
408503b0b021SRandall Stewart 						 * added right after this
408603b0b021SRandall Stewart 						 * msg.
4087f8829a4aSRandall Stewart 						 */
40889a6142d8SRandall Stewart 						uint32_t strseq;
40899a6142d8SRandall Stewart 
4090f8829a4aSRandall Stewart 						stcb->asoc.control_pdapi = sq;
40919a6142d8SRandall Stewart 						strseq = (sq->sinfo_stream << 16) | sq->sinfo_ssn;
4092f8829a4aSRandall Stewart 						sctp_notify_partial_delivery_indication(stcb,
40939a6142d8SRandall Stewart 						    SCTP_PARTIAL_DELIVERY_ABORTED, 1, strseq);
4094f8829a4aSRandall Stewart 						stcb->asoc.control_pdapi = NULL;
4095f8829a4aSRandall Stewart 					}
4096f8829a4aSRandall Stewart 				}
409703b0b021SRandall Stewart 				/* Add an end to wake them */
4098f8829a4aSRandall Stewart 				sq->end_added = 1;
4099f8829a4aSRandall Stewart 				cnt++;
4100f8829a4aSRandall Stewart 			}
4101f8829a4aSRandall Stewart 		}
4102f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4103f8829a4aSRandall Stewart 		if (stcb->block_entry) {
4104a5d547adSRandall Stewart 			cnt++;
4105c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_PCB, ECONNRESET);
4106f8829a4aSRandall Stewart 			stcb->block_entry->error = ECONNRESET;
4107f8829a4aSRandall Stewart 			stcb->block_entry = NULL;
4108f8829a4aSRandall Stewart 		}
4109f4ad963cSRandall Stewart 	}
4110c4739e2fSRandall Stewart 	if (stcb->asoc.refcnt) {
4111f4ad963cSRandall Stewart 		/*
4112f4ad963cSRandall Stewart 		 * reader or writer in the way, we have hopefully given him
4113f4ad963cSRandall Stewart 		 * something to chew on above.
4114f4ad963cSRandall Stewart 		 */
4115a5d547adSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL);
4116a5d547adSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4117a5d547adSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
4118a5d547adSRandall Stewart 		    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE))
4119a5d547adSRandall Stewart 			/* nothing around */
4120a5d547adSRandall Stewart 			so = NULL;
4121f4ad963cSRandall Stewart 		if (so) {
4122f4ad963cSRandall Stewart 			/* Wake any reader/writers */
4123f4ad963cSRandall Stewart 			sctp_sorwakeup(inp, so);
4124f4ad963cSRandall Stewart 			sctp_sowwakeup(inp, so);
4125f4ad963cSRandall Stewart 		}
4126f4ad963cSRandall Stewart #ifdef SCTP_LOG_CLOSING
4127f4ad963cSRandall Stewart 		sctp_log_closing(inp, stcb, 9);
4128f4ad963cSRandall Stewart #endif
4129f4ad963cSRandall Stewart 		/* no asoc destroyed */
4130f4ad963cSRandall Stewart 		return (0);
4131f4ad963cSRandall Stewart 	}
4132f4ad963cSRandall Stewart #ifdef SCTP_LOG_CLOSING
4133f4ad963cSRandall Stewart 	sctp_log_closing(inp, stcb, 10);
4134f4ad963cSRandall Stewart #endif
4135a5d547adSRandall Stewart 	/*
4136a5d547adSRandall Stewart 	 * When I reach here, no others want to kill the assoc yet.. and I
4137a5d547adSRandall Stewart 	 * own the lock. Now its possible an abort comes in when I do the
4138a5d547adSRandall Stewart 	 * lock exchange below to grab all the locks to do the final take
4139a5d547adSRandall Stewart 	 * out. to prevent this we increment the count, which will start a
4140a5d547adSRandall Stewart 	 * timer and blow out above thus assuring us that we hold exclusive
4141a5d547adSRandall Stewart 	 * killing of the asoc. Note that after getting back the TCB lock we
4142a5d547adSRandall Stewart 	 * will go ahead and increment the counter back up and stop any
4143a5d547adSRandall Stewart 	 * timer a passing stranger may have started :-S
4144a5d547adSRandall Stewart 	 */
4145a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
4146a5d547adSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4147a5d547adSRandall Stewart 
4148a5d547adSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4149a5d547adSRandall Stewart 
4150a5d547adSRandall Stewart 		SCTP_ITERATOR_LOCK();
4151a5d547adSRandall Stewart 		SCTP_INP_INFO_WLOCK();
4152a5d547adSRandall Stewart 		SCTP_INP_WLOCK(inp);
4153a5d547adSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4154f8829a4aSRandall Stewart 	}
4155a5d547adSRandall Stewart 	/* Double check the GONE flag */
4156a5d547adSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
4157a5d547adSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE))
4158a5d547adSRandall Stewart 		/* nothing around */
4159a5d547adSRandall Stewart 		so = NULL;
4160a5d547adSRandall Stewart 
4161f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4162f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
4163f8829a4aSRandall Stewart 		/*
4164f8829a4aSRandall Stewart 		 * For TCP type we need special handling when we are
4165f8829a4aSRandall Stewart 		 * connected. We also include the peel'ed off ones to.
4166f8829a4aSRandall Stewart 		 */
4167f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) {
4168f8829a4aSRandall Stewart 			inp->sctp_flags &= ~SCTP_PCB_FLAGS_CONNECTED;
4169f8829a4aSRandall Stewart 			inp->sctp_flags |= SCTP_PCB_FLAGS_WAS_CONNECTED;
4170f8829a4aSRandall Stewart 			if (so) {
4171f8829a4aSRandall Stewart 				SOCK_LOCK(so);
4172f8829a4aSRandall Stewart 				if (so->so_rcv.sb_cc == 0) {
4173f8829a4aSRandall Stewart 					so->so_state &= ~(SS_ISCONNECTING |
4174f8829a4aSRandall Stewart 					    SS_ISDISCONNECTING |
4175f8829a4aSRandall Stewart 					    SS_ISCONFIRMING |
4176f8829a4aSRandall Stewart 					    SS_ISCONNECTED);
4177f8829a4aSRandall Stewart 				}
4178f8829a4aSRandall Stewart 				SOCK_UNLOCK(so);
4179f8829a4aSRandall Stewart 				sctp_sowwakeup(inp, so);
4180f8829a4aSRandall Stewart 				sctp_sorwakeup(inp, so);
418117205eccSRandall Stewart 				SCTP_SOWAKEUP(so);
4182f8829a4aSRandall Stewart 			}
4183f8829a4aSRandall Stewart 		}
4184f8829a4aSRandall Stewart 	}
4185f8829a4aSRandall Stewart 	/*
4186f8829a4aSRandall Stewart 	 * Make it invalid too, that way if its about to run it will abort
4187f8829a4aSRandall Stewart 	 * and return.
4188f8829a4aSRandall Stewart 	 */
4189f8829a4aSRandall Stewart 	sctp_iterator_asoc_being_freed(inp, stcb);
4190f8829a4aSRandall Stewart 	/* re-increment the lock */
4191a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
419250cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
4193f8829a4aSRandall Stewart 	}
4194f8829a4aSRandall Stewart 	asoc->state = 0;
4195f8829a4aSRandall Stewart 	if (inp->sctp_tcbhash) {
4196f8829a4aSRandall Stewart 		LIST_REMOVE(stcb, sctp_tcbhash);
4197f8829a4aSRandall Stewart 	}
4198f8829a4aSRandall Stewart 	if (stcb->asoc.in_restart_hash) {
4199f8829a4aSRandall Stewart 		LIST_REMOVE(stcb, sctp_tcbrestarhash);
4200f8829a4aSRandall Stewart 	}
4201f8829a4aSRandall Stewart 	/* Now lets remove it from the list of ALL associations in the EP */
4202f8829a4aSRandall Stewart 	LIST_REMOVE(stcb, sctp_tcblist);
4203a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
4204f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
4205f8829a4aSRandall Stewart 		SCTP_INP_WUNLOCK(inp);
4206f8829a4aSRandall Stewart 		SCTP_ITERATOR_UNLOCK();
4207f8829a4aSRandall Stewart 	}
4208f8829a4aSRandall Stewart 	/* pull from vtag hash */
4209f8829a4aSRandall Stewart 	LIST_REMOVE(stcb, sctp_asocs);
4210851b7298SRandall Stewart 	sctp_add_vtag_to_timewait(asoc->my_vtag, SCTP_TIME_WAIT);
4211f8829a4aSRandall Stewart 
421244b7479bSRandall Stewart 	/*
421344b7479bSRandall Stewart 	 * Now restop the timers to be sure - this is paranoia at is finest!
421444b7479bSRandall Stewart 	 */
42156e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
42166e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->hb_timer.timer);
42176e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
42186e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
42196e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
42206e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->shut_guard_timer.timer);
42216e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
42226e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
422344b7479bSRandall Stewart 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
42246e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->fr_timer.timer);
42256e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->rxt_timer.timer);
42266e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
422744b7479bSRandall Stewart 	}
422844b7479bSRandall Stewart 
422944b7479bSRandall Stewart 	asoc->strreset_timer.type = SCTP_TIMER_TYPE_NONE;
4230f8829a4aSRandall Stewart 	prev = NULL;
4231f8829a4aSRandall Stewart 	/*
4232f8829a4aSRandall Stewart 	 * The chunk lists and such SHOULD be empty but we check them just
4233f8829a4aSRandall Stewart 	 * in case.
4234f8829a4aSRandall Stewart 	 */
4235f8829a4aSRandall Stewart 	/* anything on the wheel needs to be removed */
4236f8829a4aSRandall Stewart 	for (i = 0; i < asoc->streamoutcnt; i++) {
4237f8829a4aSRandall Stewart 		struct sctp_stream_out *outs;
4238f8829a4aSRandall Stewart 
4239f8829a4aSRandall Stewart 		outs = &asoc->strmout[i];
4240f8829a4aSRandall Stewart 		/* now clean up any chunks here */
4241f8829a4aSRandall Stewart 		sp = TAILQ_FIRST(&outs->outqueue);
4242f8829a4aSRandall Stewart 		while (sp) {
4243f8829a4aSRandall Stewart 			TAILQ_REMOVE(&outs->outqueue, sp, next);
4244f8829a4aSRandall Stewart 			if (sp->data) {
4245f8829a4aSRandall Stewart 				sctp_m_freem(sp->data);
4246f8829a4aSRandall Stewart 				sp->data = NULL;
4247f8829a4aSRandall Stewart 				sp->tail_mbuf = NULL;
4248f8829a4aSRandall Stewart 			}
4249f8829a4aSRandall Stewart 			sctp_free_remote_addr(sp->net);
4250f8829a4aSRandall Stewart 			sctp_free_spbufspace(stcb, asoc, sp);
4251f8829a4aSRandall Stewart 			/* Free the zone stuff  */
4252f8829a4aSRandall Stewart 			SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_strmoq, sp);
4253f8829a4aSRandall Stewart 			SCTP_DECR_STRMOQ_COUNT();
42543c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
4255f8829a4aSRandall Stewart 			sp = TAILQ_FIRST(&outs->outqueue);
4256f8829a4aSRandall Stewart 		}
4257f8829a4aSRandall Stewart 	}
4258f8829a4aSRandall Stewart 
42593c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
4260f8829a4aSRandall Stewart 	while ((liste = TAILQ_FIRST(&asoc->resetHead)) != NULL) {
4261f8829a4aSRandall Stewart 		TAILQ_REMOVE(&asoc->resetHead, liste, next_resp);
4262207304d4SRandall Stewart 		SCTP_FREE(liste, SCTP_M_STRESET);
4263f8829a4aSRandall Stewart 	}
4264f8829a4aSRandall Stewart 
4265f8829a4aSRandall Stewart 	sq = TAILQ_FIRST(&asoc->pending_reply_queue);
4266f8829a4aSRandall Stewart 	while (sq) {
4267f8829a4aSRandall Stewart 		TAILQ_REMOVE(&asoc->pending_reply_queue, sq, next);
4268f8829a4aSRandall Stewart 		if (sq->data) {
4269f8829a4aSRandall Stewart 			sctp_m_freem(sq->data);
4270f8829a4aSRandall Stewart 			sq->data = NULL;
4271f8829a4aSRandall Stewart 		}
4272f8829a4aSRandall Stewart 		sctp_free_remote_addr(sq->whoFrom);
4273f8829a4aSRandall Stewart 		sq->whoFrom = NULL;
4274f8829a4aSRandall Stewart 		sq->stcb = NULL;
4275f8829a4aSRandall Stewart 		/* Free the ctl entry */
4276f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_readq, sq);
4277f8829a4aSRandall Stewart 		SCTP_DECR_READQ_COUNT();
42783c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
4279f8829a4aSRandall Stewart 		sq = TAILQ_FIRST(&asoc->pending_reply_queue);
4280f8829a4aSRandall Stewart 	}
4281f8829a4aSRandall Stewart 
4282f8829a4aSRandall Stewart 	chk = TAILQ_FIRST(&asoc->free_chunks);
4283f8829a4aSRandall Stewart 	while (chk) {
4284f8829a4aSRandall Stewart 		TAILQ_REMOVE(&asoc->free_chunks, chk, sctp_next);
4285f8829a4aSRandall Stewart 		if (chk->data) {
4286f8829a4aSRandall Stewart 			sctp_m_freem(chk->data);
4287f8829a4aSRandall Stewart 			chk->data = NULL;
4288f8829a4aSRandall Stewart 		}
4289f8829a4aSRandall Stewart 		ccnt++;
4290f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk);
4291f8829a4aSRandall Stewart 		SCTP_DECR_CHK_COUNT();
4292f8829a4aSRandall Stewart 		atomic_subtract_int(&sctppcbinfo.ipi_free_chunks, 1);
4293f8829a4aSRandall Stewart 		asoc->free_chunk_cnt--;
42943c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
4295f8829a4aSRandall Stewart 		chk = TAILQ_FIRST(&asoc->free_chunks);
4296f8829a4aSRandall Stewart 	}
4297f8829a4aSRandall Stewart 	/* pending send queue SHOULD be empty */
4298f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&asoc->send_queue)) {
4299f8829a4aSRandall Stewart 		chk = TAILQ_FIRST(&asoc->send_queue);
4300f8829a4aSRandall Stewart 		while (chk) {
4301f8829a4aSRandall Stewart 			TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next);
4302f8829a4aSRandall Stewart 			if (chk->data) {
4303f8829a4aSRandall Stewart 				sctp_m_freem(chk->data);
4304f8829a4aSRandall Stewart 				chk->data = NULL;
4305f8829a4aSRandall Stewart 			}
4306f8829a4aSRandall Stewart 			ccnt++;
4307f8829a4aSRandall Stewart 			sctp_free_remote_addr(chk->whoTo);
4308f8829a4aSRandall Stewart 			SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk);
4309f8829a4aSRandall Stewart 			SCTP_DECR_CHK_COUNT();
43103c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
4311f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&asoc->send_queue);
4312f8829a4aSRandall Stewart 		}
4313f8829a4aSRandall Stewart 	}
4314f8829a4aSRandall Stewart /*
4315f8829a4aSRandall Stewart   if(ccnt) {
4316f8829a4aSRandall Stewart   printf("Freed %d from send_queue\n", ccnt);
4317f8829a4aSRandall Stewart   ccnt = 0;
4318f8829a4aSRandall Stewart   }
4319f8829a4aSRandall Stewart */
4320f8829a4aSRandall Stewart 	/* sent queue SHOULD be empty */
4321f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&asoc->sent_queue)) {
4322f8829a4aSRandall Stewart 		chk = TAILQ_FIRST(&asoc->sent_queue);
4323f8829a4aSRandall Stewart 		while (chk) {
4324f8829a4aSRandall Stewart 			TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
4325f8829a4aSRandall Stewart 			if (chk->data) {
4326f8829a4aSRandall Stewart 				sctp_m_freem(chk->data);
4327f8829a4aSRandall Stewart 				chk->data = NULL;
4328f8829a4aSRandall Stewart 			}
4329f8829a4aSRandall Stewart 			ccnt++;
4330f8829a4aSRandall Stewart 			sctp_free_remote_addr(chk->whoTo);
4331f8829a4aSRandall Stewart 			SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk);
4332f8829a4aSRandall Stewart 			SCTP_DECR_CHK_COUNT();
43333c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
4334f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&asoc->sent_queue);
4335f8829a4aSRandall Stewart 		}
4336f8829a4aSRandall Stewart 	}
4337f8829a4aSRandall Stewart /*
4338f8829a4aSRandall Stewart   if(ccnt) {
4339f8829a4aSRandall Stewart   printf("Freed %d from sent_queue\n", ccnt);
4340f8829a4aSRandall Stewart   ccnt = 0;
4341f8829a4aSRandall Stewart   }
4342f8829a4aSRandall Stewart */
4343f8829a4aSRandall Stewart 	/* control queue MAY not be empty */
4344f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&asoc->control_send_queue)) {
4345f8829a4aSRandall Stewart 		chk = TAILQ_FIRST(&asoc->control_send_queue);
4346f8829a4aSRandall Stewart 		while (chk) {
4347f8829a4aSRandall Stewart 			TAILQ_REMOVE(&asoc->control_send_queue, chk, sctp_next);
4348f8829a4aSRandall Stewart 			if (chk->data) {
4349f8829a4aSRandall Stewart 				sctp_m_freem(chk->data);
4350f8829a4aSRandall Stewart 				chk->data = NULL;
4351f8829a4aSRandall Stewart 			}
4352f8829a4aSRandall Stewart 			ccnt++;
4353f8829a4aSRandall Stewart 			sctp_free_remote_addr(chk->whoTo);
4354f8829a4aSRandall Stewart 			SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk);
4355f8829a4aSRandall Stewart 			SCTP_DECR_CHK_COUNT();
43563c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
4357f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&asoc->control_send_queue);
4358f8829a4aSRandall Stewart 		}
4359f8829a4aSRandall Stewart 	}
4360f8829a4aSRandall Stewart /*
4361f8829a4aSRandall Stewart   if(ccnt) {
4362f8829a4aSRandall Stewart   printf("Freed %d from ctrl_queue\n", ccnt);
4363f8829a4aSRandall Stewart   ccnt = 0;
4364f8829a4aSRandall Stewart   }
4365f8829a4aSRandall Stewart */
4366f8829a4aSRandall Stewart 	if (!TAILQ_EMPTY(&asoc->reasmqueue)) {
4367f8829a4aSRandall Stewart 		chk = TAILQ_FIRST(&asoc->reasmqueue);
4368f8829a4aSRandall Stewart 		while (chk) {
4369f8829a4aSRandall Stewart 			TAILQ_REMOVE(&asoc->reasmqueue, chk, sctp_next);
4370f8829a4aSRandall Stewart 			if (chk->data) {
4371f8829a4aSRandall Stewart 				sctp_m_freem(chk->data);
4372f8829a4aSRandall Stewart 				chk->data = NULL;
4373f8829a4aSRandall Stewart 			}
4374f8829a4aSRandall Stewart 			sctp_free_remote_addr(chk->whoTo);
4375f8829a4aSRandall Stewart 			ccnt++;
4376f8829a4aSRandall Stewart 			SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk);
4377f8829a4aSRandall Stewart 			SCTP_DECR_CHK_COUNT();
43783c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
4379f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&asoc->reasmqueue);
4380f8829a4aSRandall Stewart 		}
4381f8829a4aSRandall Stewart 	}
4382f8829a4aSRandall Stewart /*
4383f8829a4aSRandall Stewart   if(ccnt) {
4384f8829a4aSRandall Stewart   printf("Freed %d from reasm_queue\n", ccnt);
4385f8829a4aSRandall Stewart   ccnt = 0;
4386f8829a4aSRandall Stewart   }
4387f8829a4aSRandall Stewart */
4388f8829a4aSRandall Stewart 	if (asoc->mapping_array) {
4389207304d4SRandall Stewart 		SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
4390f8829a4aSRandall Stewart 		asoc->mapping_array = NULL;
4391f8829a4aSRandall Stewart 	}
4392f8829a4aSRandall Stewart 	/* the stream outs */
4393f8829a4aSRandall Stewart 	if (asoc->strmout) {
4394207304d4SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
4395f8829a4aSRandall Stewart 		asoc->strmout = NULL;
4396f8829a4aSRandall Stewart 	}
4397f8829a4aSRandall Stewart 	asoc->streamoutcnt = 0;
4398f8829a4aSRandall Stewart 	if (asoc->strmin) {
4399f8829a4aSRandall Stewart 		struct sctp_queued_to_read *ctl;
4400f8829a4aSRandall Stewart 
4401f8829a4aSRandall Stewart 		for (i = 0; i < asoc->streamincnt; i++) {
4402f8829a4aSRandall Stewart 			if (!TAILQ_EMPTY(&asoc->strmin[i].inqueue)) {
4403f8829a4aSRandall Stewart 				/* We have somethings on the streamin queue */
4404f8829a4aSRandall Stewart 				ctl = TAILQ_FIRST(&asoc->strmin[i].inqueue);
4405f8829a4aSRandall Stewart 				while (ctl) {
4406f8829a4aSRandall Stewart 					TAILQ_REMOVE(&asoc->strmin[i].inqueue,
4407f8829a4aSRandall Stewart 					    ctl, next);
4408f8829a4aSRandall Stewart 					sctp_free_remote_addr(ctl->whoFrom);
4409f8829a4aSRandall Stewart 					if (ctl->data) {
4410f8829a4aSRandall Stewart 						sctp_m_freem(ctl->data);
4411f8829a4aSRandall Stewart 						ctl->data = NULL;
4412f8829a4aSRandall Stewart 					}
4413f8829a4aSRandall Stewart 					/*
4414f8829a4aSRandall Stewart 					 * We don't free the address here
4415f8829a4aSRandall Stewart 					 * since all the net's were freed
4416f8829a4aSRandall Stewart 					 * above.
4417f8829a4aSRandall Stewart 					 */
4418f8829a4aSRandall Stewart 					SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_readq, ctl);
4419f8829a4aSRandall Stewart 					SCTP_DECR_READQ_COUNT();
4420f8829a4aSRandall Stewart 					ctl = TAILQ_FIRST(&asoc->strmin[i].inqueue);
4421f8829a4aSRandall Stewart 				}
4422f8829a4aSRandall Stewart 			}
4423f8829a4aSRandall Stewart 		}
4424207304d4SRandall Stewart 		SCTP_FREE(asoc->strmin, SCTP_M_STRMI);
4425f8829a4aSRandall Stewart 		asoc->strmin = NULL;
4426f8829a4aSRandall Stewart 	}
4427f8829a4aSRandall Stewart 	asoc->streamincnt = 0;
4428f8829a4aSRandall Stewart 	while (!TAILQ_EMPTY(&asoc->nets)) {
44293c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
4430f8829a4aSRandall Stewart 		net = TAILQ_FIRST(&asoc->nets);
4431f8829a4aSRandall Stewart 		/* pull from list */
4432f8829a4aSRandall Stewart 		if ((sctppcbinfo.ipi_count_raddr == 0) || (prev == net)) {
4433a5d547adSRandall Stewart #ifdef INVARIANTS
4434f8829a4aSRandall Stewart 			panic("no net's left alloc'ed, or list points to itself");
4435f8829a4aSRandall Stewart #endif
4436f8829a4aSRandall Stewart 			break;
4437f8829a4aSRandall Stewart 		}
4438f8829a4aSRandall Stewart 		prev = net;
4439f8829a4aSRandall Stewart 		TAILQ_REMOVE(&asoc->nets, net, sctp_next);
4440f8829a4aSRandall Stewart 		sctp_free_remote_addr(net);
4441f8829a4aSRandall Stewart 	}
4442f8829a4aSRandall Stewart 
444342551e99SRandall Stewart 	while (!SCTP_LIST_EMPTY(&asoc->sctp_restricted_addrs)) {
44443c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
444542551e99SRandall Stewart 		laddr = LIST_FIRST(&asoc->sctp_restricted_addrs);
444642551e99SRandall Stewart 		sctp_remove_laddr(laddr);
4447f8829a4aSRandall Stewart 	}
444842551e99SRandall Stewart 
4449f8829a4aSRandall Stewart 	/* pending asconf (address) parameters */
4450f8829a4aSRandall Stewart 	while (!TAILQ_EMPTY(&asoc->asconf_queue)) {
44513c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
4452f8829a4aSRandall Stewart 		aparam = TAILQ_FIRST(&asoc->asconf_queue);
4453f8829a4aSRandall Stewart 		TAILQ_REMOVE(&asoc->asconf_queue, aparam, next);
4454207304d4SRandall Stewart 		SCTP_FREE(aparam, SCTP_M_ASC_ADDR);
4455f8829a4aSRandall Stewart 	}
44562afb3e84SRandall Stewart 	while (!TAILQ_EMPTY(&asoc->asconf_ack_sent)) {
4457851b7298SRandall Stewart 		/* sa_ignore FREED_MEMORY */
44582afb3e84SRandall Stewart 		aack = TAILQ_FIRST(&asoc->asconf_ack_sent);
44592afb3e84SRandall Stewart 		TAILQ_REMOVE(&asoc->asconf_ack_sent, aack, next);
44602afb3e84SRandall Stewart 		if (aack->data != NULL) {
44612afb3e84SRandall Stewart 			sctp_m_freem(aack->data);
44622afb3e84SRandall Stewart 		}
44632afb3e84SRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asconf_ack, aack);
4464f8829a4aSRandall Stewart 	}
4465f8829a4aSRandall Stewart 	/* clean up auth stuff */
4466f8829a4aSRandall Stewart 	if (asoc->local_hmacs)
4467f8829a4aSRandall Stewart 		sctp_free_hmaclist(asoc->local_hmacs);
4468f8829a4aSRandall Stewart 	if (asoc->peer_hmacs)
4469f8829a4aSRandall Stewart 		sctp_free_hmaclist(asoc->peer_hmacs);
4470f8829a4aSRandall Stewart 
4471f8829a4aSRandall Stewart 	if (asoc->local_auth_chunks)
4472f8829a4aSRandall Stewart 		sctp_free_chunklist(asoc->local_auth_chunks);
4473f8829a4aSRandall Stewart 	if (asoc->peer_auth_chunks)
4474f8829a4aSRandall Stewart 		sctp_free_chunklist(asoc->peer_auth_chunks);
4475f8829a4aSRandall Stewart 
4476f8829a4aSRandall Stewart 	sctp_free_authinfo(&asoc->authinfo);
4477f8829a4aSRandall Stewart 
4478f8829a4aSRandall Stewart 	shared_key = LIST_FIRST(&asoc->shared_keys);
4479f8829a4aSRandall Stewart 	while (shared_key) {
4480f8829a4aSRandall Stewart 		LIST_REMOVE(shared_key, next);
4481f8829a4aSRandall Stewart 		sctp_free_sharedkey(shared_key);
44823c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
4483f8829a4aSRandall Stewart 		shared_key = LIST_FIRST(&asoc->shared_keys);
4484f8829a4aSRandall Stewart 	}
4485f8829a4aSRandall Stewart 
4486f8829a4aSRandall Stewart 	/* Insert new items here :> */
4487f8829a4aSRandall Stewart 
4488f8829a4aSRandall Stewart 	/* Get rid of LOCK */
4489f8829a4aSRandall Stewart 	SCTP_TCB_LOCK_DESTROY(stcb);
4490f8829a4aSRandall Stewart 	SCTP_TCB_SEND_LOCK_DESTROY(stcb);
4491a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
4492a5d547adSRandall Stewart 		SCTP_INP_INFO_WUNLOCK();
4493a5d547adSRandall Stewart 		SCTP_INP_RLOCK(inp);
4494a5d547adSRandall Stewart 	}
4495a5d547adSRandall Stewart #ifdef SCTP_TRACK_FREED_ASOCS
4496a5d547adSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4497f8829a4aSRandall Stewart 		/* now clean up the tasoc itself */
4498f8829a4aSRandall Stewart 		SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, stcb);
4499f8829a4aSRandall Stewart 		SCTP_DECR_ASOC_COUNT();
4500a5d547adSRandall Stewart 	} else {
4501a5d547adSRandall Stewart 		LIST_INSERT_HEAD(&inp->sctp_asoc_free_list, stcb, sctp_tcblist);
4502a5d547adSRandall Stewart 	}
4503a5d547adSRandall Stewart #else
4504a5d547adSRandall Stewart 	SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_asoc, stcb);
4505a5d547adSRandall Stewart 	SCTP_DECR_ASOC_COUNT();
4506a5d547adSRandall Stewart #endif
4507a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
4508f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4509f8829a4aSRandall Stewart 			/*
4510f8829a4aSRandall Stewart 			 * If its NOT the inp_free calling us AND sctp_close
4511f8829a4aSRandall Stewart 			 * as been called, we call back...
4512f8829a4aSRandall Stewart 			 */
4513f8829a4aSRandall Stewart 			SCTP_INP_RUNLOCK(inp);
4514f8829a4aSRandall Stewart 			/*
4515f8829a4aSRandall Stewart 			 * This will start the kill timer (if we are the
4516f8829a4aSRandall Stewart 			 * lastone) since we hold an increment yet. But this
4517f8829a4aSRandall Stewart 			 * is the only safe way to do this since otherwise
4518f8829a4aSRandall Stewart 			 * if the socket closes at the same time we are here
4519f8829a4aSRandall Stewart 			 * we might collide in the cleanup.
4520f8829a4aSRandall Stewart 			 */
4521b0552ae2SRandall Stewart 			sctp_inpcb_free(inp,
4522b0552ae2SRandall Stewart 			    SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE,
4523b0552ae2SRandall Stewart 			    SCTP_CALLED_DIRECTLY_NOCMPSET);
4524f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
4525a5d547adSRandall Stewart 			goto out_of;
4526f8829a4aSRandall Stewart 		} else {
4527f8829a4aSRandall Stewart 			/* The socket is still open. */
4528f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
4529a5d547adSRandall Stewart 		}
4530a5d547adSRandall Stewart 	}
4531a5d547adSRandall Stewart 	if (from_inpcbfree == SCTP_NORMAL_PROC) {
4532f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
4533f8829a4aSRandall Stewart 	}
4534a5d547adSRandall Stewart out_of:
4535f8829a4aSRandall Stewart 	/* destroyed the asoc */
4536f8829a4aSRandall Stewart #ifdef SCTP_LOG_CLOSING
4537f8829a4aSRandall Stewart 	sctp_log_closing(inp, NULL, 11);
4538f8829a4aSRandall Stewart #endif
4539f8829a4aSRandall Stewart 	return (1);
4540f8829a4aSRandall Stewart }
4541f8829a4aSRandall Stewart 
4542f8829a4aSRandall Stewart 
4543f8829a4aSRandall Stewart 
4544f8829a4aSRandall Stewart /*
4545f8829a4aSRandall Stewart  * determine if a destination is "reachable" based upon the addresses bound
4546f8829a4aSRandall Stewart  * to the current endpoint (e.g. only v4 or v6 currently bound)
4547f8829a4aSRandall Stewart  */
4548f8829a4aSRandall Stewart /*
4549f8829a4aSRandall Stewart  * FIX: if we allow assoc-level bindx(), then this needs to be fixed to use
4550f8829a4aSRandall Stewart  * assoc level v4/v6 flags, as the assoc *may* not have the same address
4551f8829a4aSRandall Stewart  * types bound as its endpoint
4552f8829a4aSRandall Stewart  */
4553f8829a4aSRandall Stewart int
4554f8829a4aSRandall Stewart sctp_destination_is_reachable(struct sctp_tcb *stcb, struct sockaddr *destaddr)
4555f8829a4aSRandall Stewart {
4556f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
4557f8829a4aSRandall Stewart 	int answer;
4558f8829a4aSRandall Stewart 
4559f8829a4aSRandall Stewart 	/*
4560f8829a4aSRandall Stewart 	 * No locks here, the TCB, in all cases is already locked and an
4561f8829a4aSRandall Stewart 	 * assoc is up. There is either a INP lock by the caller applied (in
4562f8829a4aSRandall Stewart 	 * asconf case when deleting an address) or NOT in the HB case,
4563f8829a4aSRandall Stewart 	 * however if HB then the INP increment is up and the INP will not
4564f8829a4aSRandall Stewart 	 * be removed (on top of the fact that we have a TCB lock). So we
4565f8829a4aSRandall Stewart 	 * only want to read the sctp_flags, which is either bound-all or
4566f8829a4aSRandall Stewart 	 * not.. no protection needed since once an assoc is up you can't be
4567f8829a4aSRandall Stewart 	 * changing your binding.
4568f8829a4aSRandall Stewart 	 */
4569f8829a4aSRandall Stewart 	inp = stcb->sctp_ep;
4570f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
4571f8829a4aSRandall Stewart 		/* if bound all, destination is not restricted */
4572f8829a4aSRandall Stewart 		/*
4573f8829a4aSRandall Stewart 		 * RRS: Question during lock work: Is this correct? If you
4574f8829a4aSRandall Stewart 		 * are bound-all you still might need to obey the V4--V6
4575f8829a4aSRandall Stewart 		 * flags??? IMO this bound-all stuff needs to be removed!
4576f8829a4aSRandall Stewart 		 */
4577f8829a4aSRandall Stewart 		return (1);
4578f8829a4aSRandall Stewart 	}
4579f8829a4aSRandall Stewart 	/* NOTE: all "scope" checks are done when local addresses are added */
4580f8829a4aSRandall Stewart 	if (destaddr->sa_family == AF_INET6) {
4581f8829a4aSRandall Stewart 		answer = inp->ip_inp.inp.inp_vflag & INP_IPV6;
4582f8829a4aSRandall Stewart 	} else if (destaddr->sa_family == AF_INET) {
4583f8829a4aSRandall Stewart 		answer = inp->ip_inp.inp.inp_vflag & INP_IPV4;
4584f8829a4aSRandall Stewart 	} else {
4585f8829a4aSRandall Stewart 		/* invalid family, so it's unreachable */
4586f8829a4aSRandall Stewart 		answer = 0;
4587f8829a4aSRandall Stewart 	}
4588f8829a4aSRandall Stewart 	return (answer);
4589f8829a4aSRandall Stewart }
4590f8829a4aSRandall Stewart 
4591f8829a4aSRandall Stewart /*
4592f8829a4aSRandall Stewart  * update the inp_vflags on an endpoint
4593f8829a4aSRandall Stewart  */
4594f8829a4aSRandall Stewart static void
4595f8829a4aSRandall Stewart sctp_update_ep_vflag(struct sctp_inpcb *inp)
4596f8829a4aSRandall Stewart {
4597f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
4598f8829a4aSRandall Stewart 
4599f8829a4aSRandall Stewart 	/* first clear the flag */
4600f8829a4aSRandall Stewart 	inp->ip_inp.inp.inp_vflag = 0;
4601f8829a4aSRandall Stewart 	/* set the flag based on addresses on the ep list */
4602f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
4603f8829a4aSRandall Stewart 		if (laddr->ifa == NULL) {
4604ad81507eSRandall Stewart 			SCTPDBG(SCTP_DEBUG_PCB1, "%s: NULL ifa\n",
4605ad81507eSRandall Stewart 			    __FUNCTION__);
4606f8829a4aSRandall Stewart 			continue;
4607f8829a4aSRandall Stewart 		}
460842551e99SRandall Stewart 		if (laddr->ifa->localifa_flags & SCTP_BEING_DELETED) {
4609f8829a4aSRandall Stewart 			continue;
4610f8829a4aSRandall Stewart 		}
461142551e99SRandall Stewart 		if (laddr->ifa->address.sa.sa_family == AF_INET6) {
4612f8829a4aSRandall Stewart 			inp->ip_inp.inp.inp_vflag |= INP_IPV6;
461342551e99SRandall Stewart 		} else if (laddr->ifa->address.sa.sa_family == AF_INET) {
4614f8829a4aSRandall Stewart 			inp->ip_inp.inp.inp_vflag |= INP_IPV4;
4615f8829a4aSRandall Stewart 		}
4616f8829a4aSRandall Stewart 	}
4617f8829a4aSRandall Stewart }
4618f8829a4aSRandall Stewart 
4619f8829a4aSRandall Stewart /*
4620f8829a4aSRandall Stewart  * Add the address to the endpoint local address list There is nothing to be
4621f8829a4aSRandall Stewart  * done if we are bound to all addresses
4622f8829a4aSRandall Stewart  */
4623ad81507eSRandall Stewart void
462442551e99SRandall Stewart sctp_add_local_addr_ep(struct sctp_inpcb *inp, struct sctp_ifa *ifa, uint32_t action)
4625f8829a4aSRandall Stewart {
4626f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
4627ad81507eSRandall Stewart 	int fnd, error = 0;
4628f8829a4aSRandall Stewart 
4629f8829a4aSRandall Stewart 	fnd = 0;
4630f8829a4aSRandall Stewart 
4631f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
4632f8829a4aSRandall Stewart 		/* You are already bound to all. You have it already */
4633ad81507eSRandall Stewart 		return;
4634f8829a4aSRandall Stewart 	}
463542551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
463642551e99SRandall Stewart 		if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
463742551e99SRandall Stewart 			/* Can't bind a non-useable addr. */
4638ad81507eSRandall Stewart 			return;
4639f8829a4aSRandall Stewart 		}
464042551e99SRandall Stewart 	}
4641f8829a4aSRandall Stewart 	/* first, is it already present? */
4642f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
4643f8829a4aSRandall Stewart 		if (laddr->ifa == ifa) {
4644f8829a4aSRandall Stewart 			fnd = 1;
4645f8829a4aSRandall Stewart 			break;
4646f8829a4aSRandall Stewart 		}
4647f8829a4aSRandall Stewart 	}
4648f8829a4aSRandall Stewart 
464942551e99SRandall Stewart 	if (fnd == 0) {
465042551e99SRandall Stewart 		/* Not in the ep list */
465142551e99SRandall Stewart 		error = sctp_insert_laddr(&inp->sctp_addr_list, ifa, action);
4652f8829a4aSRandall Stewart 		if (error != 0)
4653ad81507eSRandall Stewart 			return;
4654f8829a4aSRandall Stewart 		inp->laddr_count++;
4655f8829a4aSRandall Stewart 		/* update inp_vflag flags */
465642551e99SRandall Stewart 		if (ifa->address.sa.sa_family == AF_INET6) {
4657f8829a4aSRandall Stewart 			inp->ip_inp.inp.inp_vflag |= INP_IPV6;
465842551e99SRandall Stewart 		} else if (ifa->address.sa.sa_family == AF_INET) {
4659f8829a4aSRandall Stewart 			inp->ip_inp.inp.inp_vflag |= INP_IPV4;
4660f8829a4aSRandall Stewart 		}
4661f8829a4aSRandall Stewart 	}
4662ad81507eSRandall Stewart 	return;
4663f8829a4aSRandall Stewart }
4664f8829a4aSRandall Stewart 
4665f8829a4aSRandall Stewart 
4666f8829a4aSRandall Stewart /*
4667f8829a4aSRandall Stewart  * select a new (hopefully reachable) destination net (should only be used
4668f8829a4aSRandall Stewart  * when we deleted an ep addr that is the only usable source address to reach
4669f8829a4aSRandall Stewart  * the destination net)
4670f8829a4aSRandall Stewart  */
4671f8829a4aSRandall Stewart static void
4672f8829a4aSRandall Stewart sctp_select_primary_destination(struct sctp_tcb *stcb)
4673f8829a4aSRandall Stewart {
4674f8829a4aSRandall Stewart 	struct sctp_nets *net;
4675f8829a4aSRandall Stewart 
4676f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
4677f8829a4aSRandall Stewart 		/* for now, we'll just pick the first reachable one we find */
4678f8829a4aSRandall Stewart 		if (net->dest_state & SCTP_ADDR_UNCONFIRMED)
4679f8829a4aSRandall Stewart 			continue;
4680f8829a4aSRandall Stewart 		if (sctp_destination_is_reachable(stcb,
4681f8829a4aSRandall Stewart 		    (struct sockaddr *)&net->ro._l_addr)) {
4682f8829a4aSRandall Stewart 			/* found a reachable destination */
4683f8829a4aSRandall Stewart 			stcb->asoc.primary_destination = net;
4684f8829a4aSRandall Stewart 		}
4685f8829a4aSRandall Stewart 	}
4686f8829a4aSRandall Stewart 	/* I can't there from here! ...we're gonna die shortly... */
4687f8829a4aSRandall Stewart }
4688f8829a4aSRandall Stewart 
4689f8829a4aSRandall Stewart 
4690f8829a4aSRandall Stewart /*
4691f8829a4aSRandall Stewart  * Delete the address from the endpoint local address list There is nothing
4692f8829a4aSRandall Stewart  * to be done if we are bound to all addresses
4693f8829a4aSRandall Stewart  */
4694ad81507eSRandall Stewart void
469542551e99SRandall Stewart sctp_del_local_addr_ep(struct sctp_inpcb *inp, struct sctp_ifa *ifa)
4696f8829a4aSRandall Stewart {
4697f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
4698f8829a4aSRandall Stewart 	int fnd;
4699f8829a4aSRandall Stewart 
4700f8829a4aSRandall Stewart 	fnd = 0;
4701f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
4702f8829a4aSRandall Stewart 		/* You are already bound to all. You have it already */
4703ad81507eSRandall Stewart 		return;
4704f8829a4aSRandall Stewart 	}
4705f8829a4aSRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
4706f8829a4aSRandall Stewart 		if (laddr->ifa == ifa) {
4707f8829a4aSRandall Stewart 			fnd = 1;
4708f8829a4aSRandall Stewart 			break;
4709f8829a4aSRandall Stewart 		}
4710f8829a4aSRandall Stewart 	}
4711f8829a4aSRandall Stewart 	if (fnd && (inp->laddr_count < 2)) {
4712f8829a4aSRandall Stewart 		/* can't delete unless there are at LEAST 2 addresses */
4713ad81507eSRandall Stewart 		return;
4714f8829a4aSRandall Stewart 	}
471542551e99SRandall Stewart 	if (fnd) {
4716f8829a4aSRandall Stewart 		/*
4717f8829a4aSRandall Stewart 		 * clean up any use of this address go through our
4718f8829a4aSRandall Stewart 		 * associations and clear any last_used_address that match
4719f8829a4aSRandall Stewart 		 * this one for each assoc, see if a new primary_destination
4720f8829a4aSRandall Stewart 		 * is needed
4721f8829a4aSRandall Stewart 		 */
4722f8829a4aSRandall Stewart 		struct sctp_tcb *stcb;
4723f8829a4aSRandall Stewart 
4724f8829a4aSRandall Stewart 		/* clean up "next_addr_touse" */
4725f8829a4aSRandall Stewart 		if (inp->next_addr_touse == laddr)
4726f8829a4aSRandall Stewart 			/* delete this address */
4727f8829a4aSRandall Stewart 			inp->next_addr_touse = NULL;
4728f8829a4aSRandall Stewart 
4729f8829a4aSRandall Stewart 		/* clean up "last_used_address" */
4730f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
473142551e99SRandall Stewart 			struct sctp_nets *net;
473242551e99SRandall Stewart 
473342551e99SRandall Stewart 			SCTP_TCB_LOCK(stcb);
4734f8829a4aSRandall Stewart 			if (stcb->asoc.last_used_address == laddr)
4735f8829a4aSRandall Stewart 				/* delete this address */
4736f8829a4aSRandall Stewart 				stcb->asoc.last_used_address = NULL;
473742551e99SRandall Stewart 			/*
473842551e99SRandall Stewart 			 * Now spin through all the nets and purge any ref
473942551e99SRandall Stewart 			 * to laddr
474042551e99SRandall Stewart 			 */
474142551e99SRandall Stewart 			TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
474242551e99SRandall Stewart 				if (net->ro._s_addr &&
474342551e99SRandall Stewart 				    (net->ro._s_addr->ifa == laddr->ifa)) {
474442551e99SRandall Stewart 					/* Yep, purge src address selected */
474517205eccSRandall Stewart 					sctp_rtentry_t *rt;
4746f8829a4aSRandall Stewart 
474742551e99SRandall Stewart 					/* delete this address if cached */
474842551e99SRandall Stewart 					rt = net->ro.ro_rt;
474942551e99SRandall Stewart 					if (rt != NULL) {
475042551e99SRandall Stewart 						RTFREE(rt);
475142551e99SRandall Stewart 						net->ro.ro_rt = NULL;
475242551e99SRandall Stewart 					}
475342551e99SRandall Stewart 					sctp_free_ifa(net->ro._s_addr);
475442551e99SRandall Stewart 					net->ro._s_addr = NULL;
475542551e99SRandall Stewart 					net->src_addr_selected = 0;
475642551e99SRandall Stewart 				}
475742551e99SRandall Stewart 			}
475842551e99SRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
475942551e99SRandall Stewart 		}		/* for each tcb */
4760f8829a4aSRandall Stewart 		/* remove it from the ep list */
4761f8829a4aSRandall Stewart 		sctp_remove_laddr(laddr);
4762f8829a4aSRandall Stewart 		inp->laddr_count--;
4763f8829a4aSRandall Stewart 		/* update inp_vflag flags */
4764f8829a4aSRandall Stewart 		sctp_update_ep_vflag(inp);
4765f8829a4aSRandall Stewart 	}
4766ad81507eSRandall Stewart 	return;
4767f8829a4aSRandall Stewart }
4768f8829a4aSRandall Stewart 
4769f8829a4aSRandall Stewart /*
47701b649582SRandall Stewart  * Add the address to the TCB local address restricted list.
47711b649582SRandall Stewart  * This is a "pending" address list (eg. addresses waiting for an
47721b649582SRandall Stewart  * ASCONF-ACK response) and cannot be used as a valid source address.
4773f8829a4aSRandall Stewart  */
4774ad81507eSRandall Stewart void
47751b649582SRandall Stewart sctp_add_local_addr_restricted(struct sctp_tcb *stcb, struct sctp_ifa *ifa)
4776f8829a4aSRandall Stewart {
4777f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
4778f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
477942551e99SRandall Stewart 	struct sctpladdr *list;
4780f8829a4aSRandall Stewart 
4781f8829a4aSRandall Stewart 	/*
478242551e99SRandall Stewart 	 * Assumes TCB is locked.. and possibly the INP. May need to
4783f8829a4aSRandall Stewart 	 * confirm/fix that if we need it and is not the case.
4784f8829a4aSRandall Stewart 	 */
478542551e99SRandall Stewart 	list = &stcb->asoc.sctp_restricted_addrs;
4786f8829a4aSRandall Stewart 
478742551e99SRandall Stewart 	inp = stcb->sctp_ep;
478842551e99SRandall Stewart 	if (ifa->address.sa.sa_family == AF_INET6) {
478942551e99SRandall Stewart 		if (ifa->localifa_flags & SCTP_ADDR_IFA_UNUSEABLE) {
4790f8829a4aSRandall Stewart 			/* Can't bind a non-existent addr. */
4791ad81507eSRandall Stewart 			return;
4792f8829a4aSRandall Stewart 		}
479342551e99SRandall Stewart 	}
4794f8829a4aSRandall Stewart 	/* does the address already exist? */
479542551e99SRandall Stewart 	LIST_FOREACH(laddr, list, sctp_nxt_addr) {
4796f8829a4aSRandall Stewart 		if (laddr->ifa == ifa) {
4797ad81507eSRandall Stewart 			return;
4798f8829a4aSRandall Stewart 		}
4799f8829a4aSRandall Stewart 	}
4800f8829a4aSRandall Stewart 
4801f8829a4aSRandall Stewart 	/* add to the list */
4802ad81507eSRandall Stewart 	(void)sctp_insert_laddr(list, ifa, 0);
4803ad81507eSRandall Stewart 	return;
4804f8829a4aSRandall Stewart }
4805f8829a4aSRandall Stewart 
4806f8829a4aSRandall Stewart /*
4807f8829a4aSRandall Stewart  * insert an laddr entry with the given ifa for the desired list
4808f8829a4aSRandall Stewart  */
4809f8829a4aSRandall Stewart int
481042551e99SRandall Stewart sctp_insert_laddr(struct sctpladdr *list, struct sctp_ifa *ifa, uint32_t act)
4811f8829a4aSRandall Stewart {
4812f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
4813f8829a4aSRandall Stewart 
4814f42a358aSRandall Stewart 	laddr = SCTP_ZONE_GET(sctppcbinfo.ipi_zone_laddr, struct sctp_laddr);
4815f8829a4aSRandall Stewart 	if (laddr == NULL) {
4816f8829a4aSRandall Stewart 		/* out of memory? */
4817c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_PCB, EINVAL);
4818f8829a4aSRandall Stewart 		return (EINVAL);
4819f8829a4aSRandall Stewart 	}
4820f8829a4aSRandall Stewart 	SCTP_INCR_LADDR_COUNT();
4821f8829a4aSRandall Stewart 	bzero(laddr, sizeof(*laddr));
4822d61a0ae0SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&laddr->start_time);
4823f8829a4aSRandall Stewart 	laddr->ifa = ifa;
482442551e99SRandall Stewart 	laddr->action = act;
482542551e99SRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
4826f8829a4aSRandall Stewart 	/* insert it */
4827f8829a4aSRandall Stewart 	LIST_INSERT_HEAD(list, laddr, sctp_nxt_addr);
4828f8829a4aSRandall Stewart 
4829f8829a4aSRandall Stewart 	return (0);
4830f8829a4aSRandall Stewart }
4831f8829a4aSRandall Stewart 
4832f8829a4aSRandall Stewart /*
4833f8829a4aSRandall Stewart  * Remove an laddr entry from the local address list (on an assoc)
4834f8829a4aSRandall Stewart  */
4835f8829a4aSRandall Stewart void
4836f8829a4aSRandall Stewart sctp_remove_laddr(struct sctp_laddr *laddr)
4837f8829a4aSRandall Stewart {
4838f8829a4aSRandall Stewart 
4839f8829a4aSRandall Stewart 	/* remove from the list */
4840f8829a4aSRandall Stewart 	LIST_REMOVE(laddr, sctp_nxt_addr);
484142551e99SRandall Stewart 	sctp_free_ifa(laddr->ifa);
4842f8829a4aSRandall Stewart 	SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_laddr, laddr);
4843f8829a4aSRandall Stewart 	SCTP_DECR_LADDR_COUNT();
4844f8829a4aSRandall Stewart }
4845f8829a4aSRandall Stewart 
4846f8829a4aSRandall Stewart /*
48471b649582SRandall Stewart  * Remove a local address from the TCB local address restricted list
4848f8829a4aSRandall Stewart  */
4849ad81507eSRandall Stewart void
48501b649582SRandall Stewart sctp_del_local_addr_restricted(struct sctp_tcb *stcb, struct sctp_ifa *ifa)
4851f8829a4aSRandall Stewart {
4852f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
4853f8829a4aSRandall Stewart 	struct sctp_laddr *laddr;
4854f8829a4aSRandall Stewart 
4855f8829a4aSRandall Stewart 	/*
4856f8829a4aSRandall Stewart 	 * This is called by asconf work. It is assumed that a) The TCB is
4857f8829a4aSRandall Stewart 	 * locked and b) The INP is locked. This is true in as much as I can
4858f8829a4aSRandall Stewart 	 * trace through the entry asconf code where I did these locks.
4859f8829a4aSRandall Stewart 	 * Again, the ASCONF code is a bit different in that it does lock
4860f8829a4aSRandall Stewart 	 * the INP during its work often times. This must be since we don't
4861f8829a4aSRandall Stewart 	 * want other proc's looking up things while what they are looking
4862f8829a4aSRandall Stewart 	 * up is changing :-D
4863f8829a4aSRandall Stewart 	 */
4864f8829a4aSRandall Stewart 
4865f8829a4aSRandall Stewart 	inp = stcb->sctp_ep;
4866f8829a4aSRandall Stewart 	/* if subset bound and don't allow ASCONF's, can't delete last */
4867f8829a4aSRandall Stewart 	if (((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) &&
486818e198d3SRandall Stewart 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_ASCONF)) {
486918e198d3SRandall Stewart 		if (stcb->sctp_ep->laddr_count < 2) {
4870f8829a4aSRandall Stewart 			/* can't delete last address */
4871ad81507eSRandall Stewart 			return;
4872f8829a4aSRandall Stewart 		}
4873f8829a4aSRandall Stewart 	}
487442551e99SRandall Stewart 	LIST_FOREACH(laddr, &stcb->asoc.sctp_restricted_addrs, sctp_nxt_addr) {
4875f8829a4aSRandall Stewart 		/* remove the address if it exists */
4876f8829a4aSRandall Stewart 		if (laddr->ifa == NULL)
4877f8829a4aSRandall Stewart 			continue;
4878f8829a4aSRandall Stewart 		if (laddr->ifa == ifa) {
4879f8829a4aSRandall Stewart 			sctp_remove_laddr(laddr);
4880ad81507eSRandall Stewart 			return;
4881f8829a4aSRandall Stewart 		}
4882f8829a4aSRandall Stewart 	}
4883f8829a4aSRandall Stewart 
4884f8829a4aSRandall Stewart 	/* address not found! */
4885ad81507eSRandall Stewart 	return;
4886f8829a4aSRandall Stewart }
4887f8829a4aSRandall Stewart 
4888f8829a4aSRandall Stewart static char sctp_pcb_initialized = 0;
4889f8829a4aSRandall Stewart 
4890f8829a4aSRandall Stewart /*
4891f8829a4aSRandall Stewart  * Temporarily remove for __APPLE__ until we use the Tiger equivalents
4892f8829a4aSRandall Stewart  */
4893f8829a4aSRandall Stewart /* sysctl */
4894f8829a4aSRandall Stewart static int sctp_max_number_of_assoc = SCTP_MAX_NUM_OF_ASOC;
4895f8829a4aSRandall Stewart static int sctp_scale_up_for_address = SCTP_SCALE_FOR_ADDR;
4896f8829a4aSRandall Stewart 
4897f8829a4aSRandall Stewart void
4898f8829a4aSRandall Stewart sctp_pcb_init()
4899f8829a4aSRandall Stewart {
4900f8829a4aSRandall Stewart 	/*
4901f8829a4aSRandall Stewart 	 * SCTP initialization for the PCB structures should be called by
4902f8829a4aSRandall Stewart 	 * the sctp_init() funciton.
4903f8829a4aSRandall Stewart 	 */
4904f8829a4aSRandall Stewart 	int i;
4905851b7298SRandall Stewart 	struct timeval tv;
4906f8829a4aSRandall Stewart 
4907f8829a4aSRandall Stewart 	if (sctp_pcb_initialized != 0) {
4908f8829a4aSRandall Stewart 		/* error I was called twice */
4909f8829a4aSRandall Stewart 		return;
4910f8829a4aSRandall Stewart 	}
4911f8829a4aSRandall Stewart 	sctp_pcb_initialized = 1;
4912f8829a4aSRandall Stewart 
4913f8829a4aSRandall Stewart 	bzero(&sctpstat, sizeof(struct sctpstat));
4914b27a6b7dSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF)
4915b27a6b7dSRandall Stewart 	bzero(&sctp_log, sizeof(struct sctp_log));
4916b27a6b7dSRandall Stewart #endif
4917851b7298SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&tv);
4918851b7298SRandall Stewart 	sctpstat.sctps_discontinuitytime.tv_sec = (uint32_t) tv.tv_sec;
4919851b7298SRandall Stewart 	sctpstat.sctps_discontinuitytime.tv_usec = (uint32_t) tv.tv_usec;
4920f8829a4aSRandall Stewart 	/* init the empty list of (All) Endpoints */
4921f8829a4aSRandall Stewart 	LIST_INIT(&sctppcbinfo.listhead);
4922f8829a4aSRandall Stewart 
4923f8829a4aSRandall Stewart 	/* init the iterator head */
492442551e99SRandall Stewart 	TAILQ_INIT(&sctppcbinfo.iteratorhead);
4925f8829a4aSRandall Stewart 
4926f8829a4aSRandall Stewart 	/* init the hash table of endpoints */
4927f8829a4aSRandall Stewart 	TUNABLE_INT_FETCH("net.inet.sctp.tcbhashsize", &sctp_hashtblsize);
4928f8829a4aSRandall Stewart 	TUNABLE_INT_FETCH("net.inet.sctp.pcbhashsize", &sctp_pcbtblsize);
4929f8829a4aSRandall Stewart 	TUNABLE_INT_FETCH("net.inet.sctp.chunkscale", &sctp_chunkscale);
493044b7479bSRandall Stewart 	sctppcbinfo.sctp_asochash = SCTP_HASH_INIT((sctp_hashtblsize * 31),
4931f8829a4aSRandall Stewart 	    &sctppcbinfo.hashasocmark);
493244b7479bSRandall Stewart 	sctppcbinfo.sctp_ephash = SCTP_HASH_INIT(sctp_hashtblsize,
4933f8829a4aSRandall Stewart 	    &sctppcbinfo.hashmark);
493444b7479bSRandall Stewart 	sctppcbinfo.sctp_tcpephash = SCTP_HASH_INIT(sctp_hashtblsize,
4935f8829a4aSRandall Stewart 	    &sctppcbinfo.hashtcpmark);
4936f8829a4aSRandall Stewart 	sctppcbinfo.hashtblsize = sctp_hashtblsize;
4937f8829a4aSRandall Stewart 
493844b7479bSRandall Stewart 	/* init the small hash table we use to track restarted asoc's */
493944b7479bSRandall Stewart 	sctppcbinfo.sctp_restarthash = SCTP_HASH_INIT(SCTP_STACK_VTAG_HASH_SIZE,
4940f8829a4aSRandall Stewart 	    &sctppcbinfo.hashrestartmark);
4941f8829a4aSRandall Stewart 
494242551e99SRandall Stewart 
494342551e99SRandall Stewart 	sctppcbinfo.sctp_vrfhash = SCTP_HASH_INIT(SCTP_SIZE_OF_VRF_HASH,
494442551e99SRandall Stewart 	    &sctppcbinfo.hashvrfmark);
494542551e99SRandall Stewart 
4946f4c93d24SRandall Stewart 	sctppcbinfo.vrf_ifn_hash = SCTP_HASH_INIT(SCTP_VRF_IFN_HASH_SIZE,
4947f4c93d24SRandall Stewart 	    &sctppcbinfo.vrf_ifn_hashmark);
4948f4c93d24SRandall Stewart 
4949f8829a4aSRandall Stewart 	/* init the zones */
4950f8829a4aSRandall Stewart 	/*
4951f8829a4aSRandall Stewart 	 * FIX ME: Should check for NULL returns, but if it does fail we are
4952f8829a4aSRandall Stewart 	 * doomed to panic anyways... add later maybe.
4953f8829a4aSRandall Stewart 	 */
4954f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_ep, "sctp_ep",
4955f8829a4aSRandall Stewart 	    sizeof(struct sctp_inpcb), maxsockets);
4956f8829a4aSRandall Stewart 
4957f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_asoc, "sctp_asoc",
4958f8829a4aSRandall Stewart 	    sizeof(struct sctp_tcb), sctp_max_number_of_assoc);
4959f8829a4aSRandall Stewart 
4960f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_laddr, "sctp_laddr",
4961f8829a4aSRandall Stewart 	    sizeof(struct sctp_laddr),
4962f8829a4aSRandall Stewart 	    (sctp_max_number_of_assoc * sctp_scale_up_for_address));
4963f8829a4aSRandall Stewart 
4964f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_net, "sctp_raddr",
4965f8829a4aSRandall Stewart 	    sizeof(struct sctp_nets),
4966f8829a4aSRandall Stewart 	    (sctp_max_number_of_assoc * sctp_scale_up_for_address));
4967f8829a4aSRandall Stewart 
4968f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_chunk, "sctp_chunk",
4969f8829a4aSRandall Stewart 	    sizeof(struct sctp_tmit_chunk),
4970f8829a4aSRandall Stewart 	    (sctp_max_number_of_assoc * sctp_chunkscale));
4971f8829a4aSRandall Stewart 
4972f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_readq, "sctp_readq",
4973f8829a4aSRandall Stewart 	    sizeof(struct sctp_queued_to_read),
4974f8829a4aSRandall Stewart 	    (sctp_max_number_of_assoc * sctp_chunkscale));
4975f8829a4aSRandall Stewart 
4976f8829a4aSRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_strmoq, "sctp_stream_msg_out",
4977f8829a4aSRandall Stewart 	    sizeof(struct sctp_stream_queue_pending),
4978f8829a4aSRandall Stewart 	    (sctp_max_number_of_assoc * sctp_chunkscale));
4979f8829a4aSRandall Stewart 
49802afb3e84SRandall Stewart 	SCTP_ZONE_INIT(sctppcbinfo.ipi_zone_asconf_ack, "sctp_asconf_ack",
49812afb3e84SRandall Stewart 	    sizeof(struct sctp_asconf_ack),
49822afb3e84SRandall Stewart 	    (sctp_max_number_of_assoc * sctp_chunkscale));
49832afb3e84SRandall Stewart 
49842afb3e84SRandall Stewart 
4985f8829a4aSRandall Stewart 	/* Master Lock INIT for info structure */
4986f8829a4aSRandall Stewart 	SCTP_INP_INFO_LOCK_INIT();
4987f8829a4aSRandall Stewart 	SCTP_STATLOG_INIT_LOCK();
4988f8829a4aSRandall Stewart 	SCTP_ITERATOR_LOCK_INIT();
4989a5d547adSRandall Stewart 
4990f8829a4aSRandall Stewart 	SCTP_IPI_COUNT_INIT();
4991f8829a4aSRandall Stewart 	SCTP_IPI_ADDR_INIT();
499242551e99SRandall Stewart 	SCTP_IPI_ITERATOR_WQ_INIT();
4993207304d4SRandall Stewart #ifdef SCTP_PACKET_LOGGING
4994207304d4SRandall Stewart 	SCTP_IP_PKTLOG_INIT();
4995207304d4SRandall Stewart #endif
4996f8829a4aSRandall Stewart 	LIST_INIT(&sctppcbinfo.addr_wq);
4997f8829a4aSRandall Stewart 
4998f8829a4aSRandall Stewart 	/* not sure if we need all the counts */
4999f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_ep = 0;
5000f8829a4aSRandall Stewart 	/* assoc/tcb zone info */
5001f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_asoc = 0;
5002f8829a4aSRandall Stewart 	/* local addrlist zone info */
5003f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_laddr = 0;
5004f8829a4aSRandall Stewart 	/* remote addrlist zone info */
5005f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_raddr = 0;
5006f8829a4aSRandall Stewart 	/* chunk info */
5007f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_chunk = 0;
5008f8829a4aSRandall Stewart 
5009f8829a4aSRandall Stewart 	/* socket queue zone info */
5010f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_readq = 0;
5011f8829a4aSRandall Stewart 
5012f8829a4aSRandall Stewart 	/* stream out queue cont */
5013f8829a4aSRandall Stewart 	sctppcbinfo.ipi_count_strmoq = 0;
5014f8829a4aSRandall Stewart 
5015f8829a4aSRandall Stewart 	sctppcbinfo.ipi_free_strmoq = 0;
5016f8829a4aSRandall Stewart 	sctppcbinfo.ipi_free_chunks = 0;
5017f8829a4aSRandall Stewart 
5018139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&sctppcbinfo.addr_wq_timer.timer);
5019f8829a4aSRandall Stewart 
5020f8829a4aSRandall Stewart 	/* Init the TIMEWAIT list */
50210696e120SRandall Stewart 	for (i = 0; i < SCTP_STACK_VTAG_HASH_SIZE_A; i++) {
5022f8829a4aSRandall Stewart 		LIST_INIT(&sctppcbinfo.vtag_timewait[i]);
5023f8829a4aSRandall Stewart 	}
5024f8829a4aSRandall Stewart 
502542551e99SRandall Stewart #if defined(SCTP_USE_THREAD_BASED_ITERATOR)
502642551e99SRandall Stewart 	sctppcbinfo.iterator_running = 0;
502742551e99SRandall Stewart 	sctp_startup_iterator();
502842551e99SRandall Stewart #endif
502942551e99SRandall Stewart 
503042551e99SRandall Stewart 	/*
503142551e99SRandall Stewart 	 * INIT the default VRF which for BSD is the only one, other O/S's
503242551e99SRandall Stewart 	 * may have more. But initially they must start with one and then
503342551e99SRandall Stewart 	 * add the VRF's as addresses are added.
503442551e99SRandall Stewart 	 */
503542551e99SRandall Stewart 	sctp_init_vrf_list(SCTP_DEFAULT_VRF);
503642551e99SRandall Stewart 
5037f8829a4aSRandall Stewart }
5038f8829a4aSRandall Stewart 
5039f8829a4aSRandall Stewart 
5040f8829a4aSRandall Stewart int
5041f8829a4aSRandall Stewart sctp_load_addresses_from_init(struct sctp_tcb *stcb, struct mbuf *m,
5042f8829a4aSRandall Stewart     int iphlen, int offset, int limit, struct sctphdr *sh,
5043f8829a4aSRandall Stewart     struct sockaddr *altsa)
5044f8829a4aSRandall Stewart {
5045f8829a4aSRandall Stewart 	/*
5046f8829a4aSRandall Stewart 	 * grub through the INIT pulling addresses and loading them to the
5047f8829a4aSRandall Stewart 	 * nets structure in the asoc. The from address in the mbuf should
5048f8829a4aSRandall Stewart 	 * also be loaded (if it is not already). This routine can be called
5049f8829a4aSRandall Stewart 	 * with either INIT or INIT-ACK's as long as the m points to the IP
5050f8829a4aSRandall Stewart 	 * packet and the offset points to the beginning of the parameters.
5051f8829a4aSRandall Stewart 	 */
5052f8829a4aSRandall Stewart 	struct sctp_inpcb *inp, *l_inp;
5053f8829a4aSRandall Stewart 	struct sctp_nets *net, *net_tmp;
5054f8829a4aSRandall Stewart 	struct ip *iph;
5055f8829a4aSRandall Stewart 	struct sctp_paramhdr *phdr, parm_buf;
5056f8829a4aSRandall Stewart 	struct sctp_tcb *stcb_tmp;
5057f8829a4aSRandall Stewart 	uint16_t ptype, plen;
5058f8829a4aSRandall Stewart 	struct sockaddr *sa;
5059f8829a4aSRandall Stewart 	struct sockaddr_storage dest_store;
5060f8829a4aSRandall Stewart 	struct sockaddr *local_sa = (struct sockaddr *)&dest_store;
5061f8829a4aSRandall Stewart 	struct sockaddr_in sin;
5062f8829a4aSRandall Stewart 	struct sockaddr_in6 sin6;
5063f42a358aSRandall Stewart 	uint8_t random_store[SCTP_PARAM_BUFFER_SIZE];
50645e54f665SRandall Stewart 	struct sctp_auth_random *p_random = NULL;
5065f8829a4aSRandall Stewart 	uint16_t random_len = 0;
5066f42a358aSRandall Stewart 	uint8_t hmacs_store[SCTP_PARAM_BUFFER_SIZE];
5067f8829a4aSRandall Stewart 	struct sctp_auth_hmac_algo *hmacs = NULL;
5068f8829a4aSRandall Stewart 	uint16_t hmacs_len = 0;
50692afb3e84SRandall Stewart 	uint8_t saw_asconf = 0;
50702afb3e84SRandall Stewart 	uint8_t saw_asconf_ack = 0;
5071f42a358aSRandall Stewart 	uint8_t chunks_store[SCTP_PARAM_BUFFER_SIZE];
5072f8829a4aSRandall Stewart 	struct sctp_auth_chunk_list *chunks = NULL;
5073f8829a4aSRandall Stewart 	uint16_t num_chunks = 0;
5074f8829a4aSRandall Stewart 	sctp_key_t *new_key;
5075f8829a4aSRandall Stewart 	uint32_t keylen;
5076f8829a4aSRandall Stewart 	int got_random = 0, got_hmacs = 0, got_chklist = 0;
5077f8829a4aSRandall Stewart 
5078f8829a4aSRandall Stewart 	/* First get the destination address setup too. */
5079f8829a4aSRandall Stewart 	memset(&sin, 0, sizeof(sin));
5080f8829a4aSRandall Stewart 	memset(&sin6, 0, sizeof(sin6));
5081f8829a4aSRandall Stewart 
5082f8829a4aSRandall Stewart 	sin.sin_family = AF_INET;
5083f8829a4aSRandall Stewart 	sin.sin_len = sizeof(sin);
5084f8829a4aSRandall Stewart 	sin.sin_port = stcb->rport;
5085f8829a4aSRandall Stewart 
5086f8829a4aSRandall Stewart 	sin6.sin6_family = AF_INET6;
5087f8829a4aSRandall Stewart 	sin6.sin6_len = sizeof(struct sockaddr_in6);
5088f8829a4aSRandall Stewart 	sin6.sin6_port = stcb->rport;
5089f8829a4aSRandall Stewart 	if (altsa == NULL) {
5090f8829a4aSRandall Stewart 		iph = mtod(m, struct ip *);
5091f8829a4aSRandall Stewart 		if (iph->ip_v == IPVERSION) {
5092f8829a4aSRandall Stewart 			/* its IPv4 */
5093f8829a4aSRandall Stewart 			struct sockaddr_in *sin_2;
5094f8829a4aSRandall Stewart 
5095f8829a4aSRandall Stewart 			sin_2 = (struct sockaddr_in *)(local_sa);
5096f8829a4aSRandall Stewart 			memset(sin_2, 0, sizeof(sin));
5097f8829a4aSRandall Stewart 			sin_2->sin_family = AF_INET;
5098f8829a4aSRandall Stewart 			sin_2->sin_len = sizeof(sin);
5099f8829a4aSRandall Stewart 			sin_2->sin_port = sh->dest_port;
5100f8829a4aSRandall Stewart 			sin_2->sin_addr.s_addr = iph->ip_dst.s_addr;
5101f8829a4aSRandall Stewart 			sin.sin_addr = iph->ip_src;
5102f8829a4aSRandall Stewart 			sa = (struct sockaddr *)&sin;
5103f8829a4aSRandall Stewart 		} else if (iph->ip_v == (IPV6_VERSION >> 4)) {
5104f8829a4aSRandall Stewart 			/* its IPv6 */
5105f8829a4aSRandall Stewart 			struct ip6_hdr *ip6;
5106f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6_2;
5107f8829a4aSRandall Stewart 
5108f8829a4aSRandall Stewart 			ip6 = mtod(m, struct ip6_hdr *);
5109f8829a4aSRandall Stewart 			sin6_2 = (struct sockaddr_in6 *)(local_sa);
5110f8829a4aSRandall Stewart 			memset(sin6_2, 0, sizeof(sin6));
5111f8829a4aSRandall Stewart 			sin6_2->sin6_family = AF_INET6;
5112f8829a4aSRandall Stewart 			sin6_2->sin6_len = sizeof(struct sockaddr_in6);
5113f8829a4aSRandall Stewart 			sin6_2->sin6_port = sh->dest_port;
5114f8829a4aSRandall Stewart 			sin6.sin6_addr = ip6->ip6_src;
5115f8829a4aSRandall Stewart 			sa = (struct sockaddr *)&sin6;
5116f8829a4aSRandall Stewart 		} else {
5117f8829a4aSRandall Stewart 			sa = NULL;
5118f8829a4aSRandall Stewart 		}
5119f8829a4aSRandall Stewart 	} else {
5120f8829a4aSRandall Stewart 		/*
5121f8829a4aSRandall Stewart 		 * For cookies we use the src address NOT from the packet
5122f8829a4aSRandall Stewart 		 * but from the original INIT
5123f8829a4aSRandall Stewart 		 */
5124f8829a4aSRandall Stewart 		sa = altsa;
5125f8829a4aSRandall Stewart 	}
5126f8829a4aSRandall Stewart 	/* Turn off ECN until we get through all params */
5127f8829a4aSRandall Stewart 	stcb->asoc.ecn_allowed = 0;
5128f8829a4aSRandall Stewart 	TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5129f8829a4aSRandall Stewart 		/* mark all addresses that we have currently on the list */
5130f8829a4aSRandall Stewart 		net->dest_state |= SCTP_ADDR_NOT_IN_ASSOC;
5131f8829a4aSRandall Stewart 	}
5132f8829a4aSRandall Stewart 	/* does the source address already exist? if so skip it */
5133f8829a4aSRandall Stewart 	l_inp = inp = stcb->sctp_ep;
5134f8829a4aSRandall Stewart 
513550cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
5136f8829a4aSRandall Stewart 	stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net_tmp, local_sa, stcb);
513750cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, -1);
5138f8829a4aSRandall Stewart 
5139f8829a4aSRandall Stewart 	if ((stcb_tmp == NULL && inp == stcb->sctp_ep) || inp == NULL) {
5140f8829a4aSRandall Stewart 		/* we must add the source address */
5141f8829a4aSRandall Stewart 		/* no scope set here since we have a tcb already. */
5142f8829a4aSRandall Stewart 		if ((sa->sa_family == AF_INET) &&
5143f8829a4aSRandall Stewart 		    (stcb->asoc.ipv4_addr_legal)) {
5144a5d547adSRandall Stewart 			if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_2)) {
5145f8829a4aSRandall Stewart 				return (-1);
5146f8829a4aSRandall Stewart 			}
5147f8829a4aSRandall Stewart 		} else if ((sa->sa_family == AF_INET6) &&
5148f8829a4aSRandall Stewart 		    (stcb->asoc.ipv6_addr_legal)) {
5149a5d547adSRandall Stewart 			if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_3)) {
5150f8829a4aSRandall Stewart 				return (-2);
5151f8829a4aSRandall Stewart 			}
5152f8829a4aSRandall Stewart 		}
5153f8829a4aSRandall Stewart 	} else {
5154f8829a4aSRandall Stewart 		if (net_tmp != NULL && stcb_tmp == stcb) {
5155f8829a4aSRandall Stewart 			net_tmp->dest_state &= ~SCTP_ADDR_NOT_IN_ASSOC;
5156f8829a4aSRandall Stewart 		} else if (stcb_tmp != stcb) {
5157f8829a4aSRandall Stewart 			/* It belongs to another association? */
5158eacc51c5SRandall Stewart 			if (stcb_tmp)
5159f8829a4aSRandall Stewart 				SCTP_TCB_UNLOCK(stcb_tmp);
5160f8829a4aSRandall Stewart 			return (-3);
5161f8829a4aSRandall Stewart 		}
5162f8829a4aSRandall Stewart 	}
5163f8829a4aSRandall Stewart 	if (stcb->asoc.state == 0) {
5164f8829a4aSRandall Stewart 		/* the assoc was freed? */
5165f8829a4aSRandall Stewart 		return (-4);
5166f8829a4aSRandall Stewart 	}
516718e198d3SRandall Stewart 	/*
516818e198d3SRandall Stewart 	 * peer must explicitly turn this on. This may have been initialized
516918e198d3SRandall Stewart 	 * to be "on" in order to allow local addr changes while INIT's are
517018e198d3SRandall Stewart 	 * in flight.
517118e198d3SRandall Stewart 	 */
517218e198d3SRandall Stewart 	stcb->asoc.peer_supports_asconf = 0;
5173f8829a4aSRandall Stewart 	/* now we must go through each of the params. */
5174f8829a4aSRandall Stewart 	phdr = sctp_get_next_param(m, offset, &parm_buf, sizeof(parm_buf));
5175f8829a4aSRandall Stewart 	while (phdr) {
5176f8829a4aSRandall Stewart 		ptype = ntohs(phdr->param_type);
5177f8829a4aSRandall Stewart 		plen = ntohs(phdr->param_length);
5178f8829a4aSRandall Stewart 		/*
5179f8829a4aSRandall Stewart 		 * printf("ptype => %0x, plen => %d\n", (uint32_t)ptype,
5180f8829a4aSRandall Stewart 		 * (int)plen);
5181f8829a4aSRandall Stewart 		 */
5182f8829a4aSRandall Stewart 		if (offset + plen > limit) {
5183f8829a4aSRandall Stewart 			break;
5184f8829a4aSRandall Stewart 		}
5185f8829a4aSRandall Stewart 		if (plen == 0) {
5186f8829a4aSRandall Stewart 			break;
5187f8829a4aSRandall Stewart 		}
5188f8829a4aSRandall Stewart 		if (ptype == SCTP_IPV4_ADDRESS) {
5189f8829a4aSRandall Stewart 			if (stcb->asoc.ipv4_addr_legal) {
5190f8829a4aSRandall Stewart 				struct sctp_ipv4addr_param *p4, p4_buf;
5191f8829a4aSRandall Stewart 
5192f8829a4aSRandall Stewart 				/* ok get the v4 address and check/add */
5193f8829a4aSRandall Stewart 				phdr = sctp_get_next_param(m, offset,
5194f8829a4aSRandall Stewart 				    (struct sctp_paramhdr *)&p4_buf, sizeof(p4_buf));
5195f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv4addr_param) ||
5196f8829a4aSRandall Stewart 				    phdr == NULL) {
5197f8829a4aSRandall Stewart 					return (-5);
5198f8829a4aSRandall Stewart 				}
5199f8829a4aSRandall Stewart 				p4 = (struct sctp_ipv4addr_param *)phdr;
5200f8829a4aSRandall Stewart 				sin.sin_addr.s_addr = p4->addr;
5201d06c82f1SRandall Stewart 				if (IN_MULTICAST(sin.sin_addr.s_addr)) {
5202d06c82f1SRandall Stewart 					/* Skip multi-cast addresses */
5203d06c82f1SRandall Stewart 					goto next_param;
5204d06c82f1SRandall Stewart 				}
520517205eccSRandall Stewart 				if ((sin.sin_addr.s_addr == INADDR_BROADCAST) ||
520617205eccSRandall Stewart 				    (sin.sin_addr.s_addr == INADDR_ANY)) {
520717205eccSRandall Stewart 					goto next_param;
520817205eccSRandall Stewart 				}
5209f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin;
5210f8829a4aSRandall Stewart 				inp = stcb->sctp_ep;
521150cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5212f8829a4aSRandall Stewart 				stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net,
5213f8829a4aSRandall Stewart 				    local_sa, stcb);
521450cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, -1);
5215f8829a4aSRandall Stewart 
5216f8829a4aSRandall Stewart 				if ((stcb_tmp == NULL && inp == stcb->sctp_ep) ||
5217f8829a4aSRandall Stewart 				    inp == NULL) {
5218f8829a4aSRandall Stewart 					/* we must add the source address */
5219f8829a4aSRandall Stewart 					/*
5220f8829a4aSRandall Stewart 					 * no scope set since we have a tcb
5221f8829a4aSRandall Stewart 					 * already
5222f8829a4aSRandall Stewart 					 */
5223f8829a4aSRandall Stewart 
5224f8829a4aSRandall Stewart 					/*
5225f8829a4aSRandall Stewart 					 * we must validate the state again
5226f8829a4aSRandall Stewart 					 * here
5227f8829a4aSRandall Stewart 					 */
5228f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5229f8829a4aSRandall Stewart 						/* the assoc was freed? */
5230f8829a4aSRandall Stewart 						return (-7);
5231f8829a4aSRandall Stewart 					}
5232a5d547adSRandall Stewart 					if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_4)) {
5233f8829a4aSRandall Stewart 						return (-8);
5234f8829a4aSRandall Stewart 					}
5235f8829a4aSRandall Stewart 				} else if (stcb_tmp == stcb) {
5236f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5237f8829a4aSRandall Stewart 						/* the assoc was freed? */
5238f8829a4aSRandall Stewart 						return (-10);
5239f8829a4aSRandall Stewart 					}
5240f8829a4aSRandall Stewart 					if (net != NULL) {
5241f8829a4aSRandall Stewart 						/* clear flag */
5242f8829a4aSRandall Stewart 						net->dest_state &=
5243f8829a4aSRandall Stewart 						    ~SCTP_ADDR_NOT_IN_ASSOC;
5244f8829a4aSRandall Stewart 					}
5245f8829a4aSRandall Stewart 				} else {
5246f8829a4aSRandall Stewart 					/*
5247f8829a4aSRandall Stewart 					 * strange, address is in another
5248f8829a4aSRandall Stewart 					 * assoc? straighten out locks.
5249f8829a4aSRandall Stewart 					 */
525052be287eSRandall Stewart 					if (stcb_tmp)
5251b54d3a6cSRandall Stewart 						SCTP_TCB_UNLOCK(stcb_tmp);
525252be287eSRandall Stewart 
5253f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5254f8829a4aSRandall Stewart 						/* the assoc was freed? */
5255f8829a4aSRandall Stewart 						return (-12);
5256f8829a4aSRandall Stewart 					}
5257f8829a4aSRandall Stewart 					return (-13);
5258f8829a4aSRandall Stewart 				}
5259f8829a4aSRandall Stewart 			}
5260f8829a4aSRandall Stewart 		} else if (ptype == SCTP_IPV6_ADDRESS) {
5261f8829a4aSRandall Stewart 			if (stcb->asoc.ipv6_addr_legal) {
5262f8829a4aSRandall Stewart 				/* ok get the v6 address and check/add */
5263f8829a4aSRandall Stewart 				struct sctp_ipv6addr_param *p6, p6_buf;
5264f8829a4aSRandall Stewart 
5265f8829a4aSRandall Stewart 				phdr = sctp_get_next_param(m, offset,
5266f8829a4aSRandall Stewart 				    (struct sctp_paramhdr *)&p6_buf, sizeof(p6_buf));
5267f8829a4aSRandall Stewart 				if (plen != sizeof(struct sctp_ipv6addr_param) ||
5268f8829a4aSRandall Stewart 				    phdr == NULL) {
5269f8829a4aSRandall Stewart 					return (-14);
5270f8829a4aSRandall Stewart 				}
5271f8829a4aSRandall Stewart 				p6 = (struct sctp_ipv6addr_param *)phdr;
5272f8829a4aSRandall Stewart 				memcpy((caddr_t)&sin6.sin6_addr, p6->addr,
5273f8829a4aSRandall Stewart 				    sizeof(p6->addr));
5274d06c82f1SRandall Stewart 				if (IN6_IS_ADDR_MULTICAST(&sin6.sin6_addr)) {
5275d06c82f1SRandall Stewart 					/* Skip multi-cast addresses */
5276d06c82f1SRandall Stewart 					goto next_param;
5277d06c82f1SRandall Stewart 				}
5278d06c82f1SRandall Stewart 				if (IN6_IS_ADDR_LINKLOCAL(&sin6.sin6_addr)) {
5279d06c82f1SRandall Stewart 					/*
5280d06c82f1SRandall Stewart 					 * Link local make no sense without
5281d06c82f1SRandall Stewart 					 * scope
5282d06c82f1SRandall Stewart 					 */
5283d06c82f1SRandall Stewart 					goto next_param;
5284d06c82f1SRandall Stewart 				}
5285f8829a4aSRandall Stewart 				sa = (struct sockaddr *)&sin6;
5286f8829a4aSRandall Stewart 				inp = stcb->sctp_ep;
528750cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5288f8829a4aSRandall Stewart 				stcb_tmp = sctp_findassociation_ep_addr(&inp, sa, &net,
5289f8829a4aSRandall Stewart 				    local_sa, stcb);
529050cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, -1);
5291f8829a4aSRandall Stewart 				if (stcb_tmp == NULL && (inp == stcb->sctp_ep ||
5292f8829a4aSRandall Stewart 				    inp == NULL)) {
5293f8829a4aSRandall Stewart 					/*
5294f8829a4aSRandall Stewart 					 * we must validate the state again
5295f8829a4aSRandall Stewart 					 * here
5296f8829a4aSRandall Stewart 					 */
5297f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5298f8829a4aSRandall Stewart 						/* the assoc was freed? */
5299f8829a4aSRandall Stewart 						return (-16);
5300f8829a4aSRandall Stewart 					}
5301f8829a4aSRandall Stewart 					/*
5302f8829a4aSRandall Stewart 					 * we must add the address, no scope
5303f8829a4aSRandall Stewart 					 * set
5304f8829a4aSRandall Stewart 					 */
5305a5d547adSRandall Stewart 					if (sctp_add_remote_addr(stcb, sa, SCTP_DONOT_SETSCOPE, SCTP_LOAD_ADDR_5)) {
5306f8829a4aSRandall Stewart 						return (-17);
5307f8829a4aSRandall Stewart 					}
5308f8829a4aSRandall Stewart 				} else if (stcb_tmp == stcb) {
5309f8829a4aSRandall Stewart 					/*
5310f8829a4aSRandall Stewart 					 * we must validate the state again
5311f8829a4aSRandall Stewart 					 * here
5312f8829a4aSRandall Stewart 					 */
5313f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5314f8829a4aSRandall Stewart 						/* the assoc was freed? */
5315f8829a4aSRandall Stewart 						return (-19);
5316f8829a4aSRandall Stewart 					}
5317f8829a4aSRandall Stewart 					if (net != NULL) {
5318f8829a4aSRandall Stewart 						/* clear flag */
5319f8829a4aSRandall Stewart 						net->dest_state &=
5320f8829a4aSRandall Stewart 						    ~SCTP_ADDR_NOT_IN_ASSOC;
5321f8829a4aSRandall Stewart 					}
5322f8829a4aSRandall Stewart 				} else {
5323f8829a4aSRandall Stewart 					/*
5324f8829a4aSRandall Stewart 					 * strange, address is in another
5325f8829a4aSRandall Stewart 					 * assoc? straighten out locks.
5326f8829a4aSRandall Stewart 					 */
532752be287eSRandall Stewart 					if (stcb_tmp)
5328b54d3a6cSRandall Stewart 						SCTP_TCB_UNLOCK(stcb_tmp);
532952be287eSRandall Stewart 
5330f8829a4aSRandall Stewart 					if (stcb->asoc.state == 0) {
5331f8829a4aSRandall Stewart 						/* the assoc was freed? */
5332f8829a4aSRandall Stewart 						return (-21);
5333f8829a4aSRandall Stewart 					}
5334f8829a4aSRandall Stewart 					return (-22);
5335f8829a4aSRandall Stewart 				}
5336f8829a4aSRandall Stewart 			}
5337f8829a4aSRandall Stewart 		} else if (ptype == SCTP_ECN_CAPABLE) {
5338f8829a4aSRandall Stewart 			stcb->asoc.ecn_allowed = 1;
5339f8829a4aSRandall Stewart 		} else if (ptype == SCTP_ULP_ADAPTATION) {
5340f8829a4aSRandall Stewart 			if (stcb->asoc.state != SCTP_STATE_OPEN) {
5341f8829a4aSRandall Stewart 				struct sctp_adaptation_layer_indication ai,
5342f8829a4aSRandall Stewart 				                                *aip;
5343f8829a4aSRandall Stewart 
5344f8829a4aSRandall Stewart 				phdr = sctp_get_next_param(m, offset,
5345f8829a4aSRandall Stewart 				    (struct sctp_paramhdr *)&ai, sizeof(ai));
5346f8829a4aSRandall Stewart 				aip = (struct sctp_adaptation_layer_indication *)phdr;
53476e55db54SRandall Stewart 				if (aip) {
53482afb3e84SRandall Stewart 					stcb->asoc.peers_adaptation = ntohl(aip->indication);
53492afb3e84SRandall Stewart 					stcb->asoc.adaptation_needed = 1;
5350f8829a4aSRandall Stewart 				}
53516e55db54SRandall Stewart 			}
5352f8829a4aSRandall Stewart 		} else if (ptype == SCTP_SET_PRIM_ADDR) {
5353f8829a4aSRandall Stewart 			struct sctp_asconf_addr_param lstore, *fee;
5354f8829a4aSRandall Stewart 			struct sctp_asconf_addrv4_param *fii;
5355f8829a4aSRandall Stewart 			int lptype;
5356f8829a4aSRandall Stewart 			struct sockaddr *lsa = NULL;
5357f8829a4aSRandall Stewart 
5358f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 1;
5359f8829a4aSRandall Stewart 			if (plen > sizeof(lstore)) {
5360f8829a4aSRandall Stewart 				return (-23);
5361f8829a4aSRandall Stewart 			}
5362f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
5363d06c82f1SRandall Stewart 			    (struct sctp_paramhdr *)&lstore, min(plen, sizeof(lstore)));
5364f8829a4aSRandall Stewart 			if (phdr == NULL) {
5365f8829a4aSRandall Stewart 				return (-24);
5366f8829a4aSRandall Stewart 			}
5367f8829a4aSRandall Stewart 			fee = (struct sctp_asconf_addr_param *)phdr;
5368f8829a4aSRandall Stewart 			lptype = ntohs(fee->addrp.ph.param_type);
5369f8829a4aSRandall Stewart 			if (lptype == SCTP_IPV4_ADDRESS) {
5370f8829a4aSRandall Stewart 				if (plen !=
5371f8829a4aSRandall Stewart 				    sizeof(struct sctp_asconf_addrv4_param)) {
5372ad81507eSRandall Stewart 					SCTP_PRINTF("Sizeof setprim in init/init ack not %d but %d - ignored\n",
5373f8829a4aSRandall Stewart 					    (int)sizeof(struct sctp_asconf_addrv4_param),
5374f8829a4aSRandall Stewart 					    plen);
5375f8829a4aSRandall Stewart 				} else {
5376f8829a4aSRandall Stewart 					fii = (struct sctp_asconf_addrv4_param *)fee;
5377f8829a4aSRandall Stewart 					sin.sin_addr.s_addr = fii->addrp.addr;
5378f8829a4aSRandall Stewart 					lsa = (struct sockaddr *)&sin;
5379f8829a4aSRandall Stewart 				}
5380f8829a4aSRandall Stewart 			} else if (lptype == SCTP_IPV6_ADDRESS) {
5381f8829a4aSRandall Stewart 				if (plen !=
5382f8829a4aSRandall Stewart 				    sizeof(struct sctp_asconf_addr_param)) {
5383ad81507eSRandall Stewart 					SCTP_PRINTF("Sizeof setprim (v6) in init/init ack not %d but %d - ignored\n",
5384f8829a4aSRandall Stewart 					    (int)sizeof(struct sctp_asconf_addr_param),
5385f8829a4aSRandall Stewart 					    plen);
5386f8829a4aSRandall Stewart 				} else {
5387f8829a4aSRandall Stewart 					memcpy(sin6.sin6_addr.s6_addr,
5388f8829a4aSRandall Stewart 					    fee->addrp.addr,
5389f8829a4aSRandall Stewart 					    sizeof(fee->addrp.addr));
5390f8829a4aSRandall Stewart 					lsa = (struct sockaddr *)&sin6;
5391f8829a4aSRandall Stewart 				}
5392f8829a4aSRandall Stewart 			}
5393f8829a4aSRandall Stewart 			if (lsa) {
5394ad81507eSRandall Stewart 				(void)sctp_set_primary_addr(stcb, sa, NULL);
5395f8829a4aSRandall Stewart 			}
5396f8829a4aSRandall Stewart 		} else if (ptype == SCTP_PRSCTP_SUPPORTED) {
5397f8829a4aSRandall Stewart 			/* Peer supports pr-sctp */
5398f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_prsctp = 1;
5399f8829a4aSRandall Stewart 		} else if (ptype == SCTP_SUPPORTED_CHUNK_EXT) {
5400f8829a4aSRandall Stewart 			/* A supported extension chunk */
5401f8829a4aSRandall Stewart 			struct sctp_supported_chunk_types_param *pr_supported;
5402f42a358aSRandall Stewart 			uint8_t local_store[SCTP_PARAM_BUFFER_SIZE];
5403f8829a4aSRandall Stewart 			int num_ent, i;
5404f8829a4aSRandall Stewart 
5405f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
5406d06c82f1SRandall Stewart 			    (struct sctp_paramhdr *)&local_store, min(sizeof(local_store), plen));
5407f8829a4aSRandall Stewart 			if (phdr == NULL) {
5408f8829a4aSRandall Stewart 				return (-25);
5409f8829a4aSRandall Stewart 			}
5410f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_asconf = 0;
5411f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_prsctp = 0;
5412f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_pktdrop = 0;
5413f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_strreset = 0;
5414f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_auth = 0;
5415f8829a4aSRandall Stewart 			pr_supported = (struct sctp_supported_chunk_types_param *)phdr;
5416f8829a4aSRandall Stewart 			num_ent = plen - sizeof(struct sctp_paramhdr);
5417f8829a4aSRandall Stewart 			for (i = 0; i < num_ent; i++) {
5418f8829a4aSRandall Stewart 				switch (pr_supported->chunk_types[i]) {
5419f8829a4aSRandall Stewart 				case SCTP_ASCONF:
5420f8829a4aSRandall Stewart 				case SCTP_ASCONF_ACK:
5421f8829a4aSRandall Stewart 					stcb->asoc.peer_supports_asconf = 1;
5422f8829a4aSRandall Stewart 					break;
5423f8829a4aSRandall Stewart 				case SCTP_FORWARD_CUM_TSN:
5424f8829a4aSRandall Stewart 					stcb->asoc.peer_supports_prsctp = 1;
5425f8829a4aSRandall Stewart 					break;
5426f8829a4aSRandall Stewart 				case SCTP_PACKET_DROPPED:
5427f8829a4aSRandall Stewart 					stcb->asoc.peer_supports_pktdrop = 1;
5428f8829a4aSRandall Stewart 					break;
5429f8829a4aSRandall Stewart 				case SCTP_STREAM_RESET:
5430f8829a4aSRandall Stewart 					stcb->asoc.peer_supports_strreset = 1;
5431f8829a4aSRandall Stewart 					break;
5432f8829a4aSRandall Stewart 				case SCTP_AUTHENTICATION:
5433f8829a4aSRandall Stewart 					stcb->asoc.peer_supports_auth = 1;
5434f8829a4aSRandall Stewart 					break;
5435f8829a4aSRandall Stewart 				default:
5436f8829a4aSRandall Stewart 					/* one I have not learned yet */
5437f8829a4aSRandall Stewart 					break;
5438f8829a4aSRandall Stewart 
5439f8829a4aSRandall Stewart 				}
5440f8829a4aSRandall Stewart 			}
5441f8829a4aSRandall Stewart 		} else if (ptype == SCTP_ECN_NONCE_SUPPORTED) {
5442f8829a4aSRandall Stewart 			/* Peer supports ECN-nonce */
5443f8829a4aSRandall Stewart 			stcb->asoc.peer_supports_ecn_nonce = 1;
5444f8829a4aSRandall Stewart 			stcb->asoc.ecn_nonce_allowed = 1;
5445f8829a4aSRandall Stewart 		} else if (ptype == SCTP_RANDOM) {
5446f42a358aSRandall Stewart 			if (plen > sizeof(random_store))
5447f8829a4aSRandall Stewart 				break;
5448f8829a4aSRandall Stewart 			if (got_random) {
5449f8829a4aSRandall Stewart 				/* already processed a RANDOM */
5450f8829a4aSRandall Stewart 				goto next_param;
5451f8829a4aSRandall Stewart 			}
5452f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
5453f42a358aSRandall Stewart 			    (struct sctp_paramhdr *)random_store,
5454d06c82f1SRandall Stewart 			    min(sizeof(random_store), plen));
5455f8829a4aSRandall Stewart 			if (phdr == NULL)
5456f8829a4aSRandall Stewart 				return (-26);
54575e54f665SRandall Stewart 			p_random = (struct sctp_auth_random *)phdr;
54585e54f665SRandall Stewart 			random_len = plen - sizeof(*p_random);
5459f8829a4aSRandall Stewart 			/* enforce the random length */
5460f8829a4aSRandall Stewart 			if (random_len != SCTP_AUTH_RANDOM_SIZE_REQUIRED) {
5461ad81507eSRandall Stewart 				SCTPDBG(SCTP_DEBUG_AUTH1, "SCTP: invalid RANDOM len\n");
5462f8829a4aSRandall Stewart 				return (-27);
5463f8829a4aSRandall Stewart 			}
5464f8829a4aSRandall Stewart 			got_random = 1;
5465f8829a4aSRandall Stewart 		} else if (ptype == SCTP_HMAC_LIST) {
5466f8829a4aSRandall Stewart 			int num_hmacs;
5467f8829a4aSRandall Stewart 			int i;
5468f8829a4aSRandall Stewart 
5469f42a358aSRandall Stewart 			if (plen > sizeof(hmacs_store))
5470f8829a4aSRandall Stewart 				break;
5471f8829a4aSRandall Stewart 			if (got_hmacs) {
5472f8829a4aSRandall Stewart 				/* already processed a HMAC list */
5473f8829a4aSRandall Stewart 				goto next_param;
5474f8829a4aSRandall Stewart 			}
5475f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
5476f42a358aSRandall Stewart 			    (struct sctp_paramhdr *)hmacs_store,
5477d06c82f1SRandall Stewart 			    min(plen, sizeof(hmacs_store)));
5478f8829a4aSRandall Stewart 			if (phdr == NULL)
5479f8829a4aSRandall Stewart 				return (-28);
5480f8829a4aSRandall Stewart 			hmacs = (struct sctp_auth_hmac_algo *)phdr;
5481f8829a4aSRandall Stewart 			hmacs_len = plen - sizeof(*hmacs);
5482f8829a4aSRandall Stewart 			num_hmacs = hmacs_len / sizeof(hmacs->hmac_ids[0]);
5483f8829a4aSRandall Stewart 			/* validate the hmac list */
5484f8829a4aSRandall Stewart 			if (sctp_verify_hmac_param(hmacs, num_hmacs)) {
5485f8829a4aSRandall Stewart 				return (-29);
5486f8829a4aSRandall Stewart 			}
5487f8829a4aSRandall Stewart 			if (stcb->asoc.peer_hmacs != NULL)
5488f8829a4aSRandall Stewart 				sctp_free_hmaclist(stcb->asoc.peer_hmacs);
5489f8829a4aSRandall Stewart 			stcb->asoc.peer_hmacs = sctp_alloc_hmaclist(num_hmacs);
5490f8829a4aSRandall Stewart 			if (stcb->asoc.peer_hmacs != NULL) {
5491f8829a4aSRandall Stewart 				for (i = 0; i < num_hmacs; i++) {
54926e55db54SRandall Stewart 					(void)sctp_auth_add_hmacid(stcb->asoc.peer_hmacs,
5493f8829a4aSRandall Stewart 					    ntohs(hmacs->hmac_ids[i]));
5494f8829a4aSRandall Stewart 				}
5495f8829a4aSRandall Stewart 			}
5496f8829a4aSRandall Stewart 			got_hmacs = 1;
5497f8829a4aSRandall Stewart 		} else if (ptype == SCTP_CHUNK_LIST) {
5498f8829a4aSRandall Stewart 			int i;
5499f8829a4aSRandall Stewart 
5500f42a358aSRandall Stewart 			if (plen > sizeof(chunks_store))
5501f8829a4aSRandall Stewart 				break;
5502f8829a4aSRandall Stewart 			if (got_chklist) {
5503f8829a4aSRandall Stewart 				/* already processed a Chunks list */
5504f8829a4aSRandall Stewart 				goto next_param;
5505f8829a4aSRandall Stewart 			}
5506f8829a4aSRandall Stewart 			phdr = sctp_get_next_param(m, offset,
5507f42a358aSRandall Stewart 			    (struct sctp_paramhdr *)chunks_store,
5508d06c82f1SRandall Stewart 			    min(plen, sizeof(chunks_store)));
5509f8829a4aSRandall Stewart 			if (phdr == NULL)
5510f8829a4aSRandall Stewart 				return (-30);
5511f8829a4aSRandall Stewart 			chunks = (struct sctp_auth_chunk_list *)phdr;
5512f8829a4aSRandall Stewart 			num_chunks = plen - sizeof(*chunks);
5513f8829a4aSRandall Stewart 			if (stcb->asoc.peer_auth_chunks != NULL)
5514f8829a4aSRandall Stewart 				sctp_clear_chunklist(stcb->asoc.peer_auth_chunks);
5515f8829a4aSRandall Stewart 			else
5516f8829a4aSRandall Stewart 				stcb->asoc.peer_auth_chunks = sctp_alloc_chunklist();
5517f8829a4aSRandall Stewart 			for (i = 0; i < num_chunks; i++) {
55186e55db54SRandall Stewart 				(void)sctp_auth_add_chunk(chunks->chunk_types[i],
5519f8829a4aSRandall Stewart 				    stcb->asoc.peer_auth_chunks);
55202afb3e84SRandall Stewart 				/* record asconf/asconf-ack if listed */
55212afb3e84SRandall Stewart 				if (chunks->chunk_types[i] == SCTP_ASCONF)
55222afb3e84SRandall Stewart 					saw_asconf = 1;
55232afb3e84SRandall Stewart 				if (chunks->chunk_types[i] == SCTP_ASCONF_ACK)
55242afb3e84SRandall Stewart 					saw_asconf_ack = 1;
55252afb3e84SRandall Stewart 
5526f8829a4aSRandall Stewart 			}
5527f8829a4aSRandall Stewart 			got_chklist = 1;
5528f8829a4aSRandall Stewart 		} else if ((ptype == SCTP_HEARTBEAT_INFO) ||
5529f8829a4aSRandall Stewart 			    (ptype == SCTP_STATE_COOKIE) ||
5530f8829a4aSRandall Stewart 			    (ptype == SCTP_UNRECOG_PARAM) ||
5531f8829a4aSRandall Stewart 			    (ptype == SCTP_COOKIE_PRESERVE) ||
5532f8829a4aSRandall Stewart 			    (ptype == SCTP_SUPPORTED_ADDRTYPE) ||
5533f8829a4aSRandall Stewart 			    (ptype == SCTP_ADD_IP_ADDRESS) ||
5534f8829a4aSRandall Stewart 			    (ptype == SCTP_DEL_IP_ADDRESS) ||
5535f8829a4aSRandall Stewart 			    (ptype == SCTP_ERROR_CAUSE_IND) ||
5536f8829a4aSRandall Stewart 		    (ptype == SCTP_SUCCESS_REPORT)) {
5537f8829a4aSRandall Stewart 			 /* don't care */ ;
5538f8829a4aSRandall Stewart 		} else {
5539f8829a4aSRandall Stewart 			if ((ptype & 0x8000) == 0x0000) {
5540f8829a4aSRandall Stewart 				/*
5541f8829a4aSRandall Stewart 				 * must stop processing the rest of the
5542f8829a4aSRandall Stewart 				 * param's. Any report bits were handled
5543f8829a4aSRandall Stewart 				 * with the call to
5544f8829a4aSRandall Stewart 				 * sctp_arethere_unrecognized_parameters()
5545f8829a4aSRandall Stewart 				 * when the INIT or INIT-ACK was first seen.
5546f8829a4aSRandall Stewart 				 */
5547f8829a4aSRandall Stewart 				break;
5548f8829a4aSRandall Stewart 			}
5549f8829a4aSRandall Stewart 		}
5550f8829a4aSRandall Stewart next_param:
5551f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(plen);
5552f8829a4aSRandall Stewart 		if (offset >= limit) {
5553f8829a4aSRandall Stewart 			break;
5554f8829a4aSRandall Stewart 		}
5555f8829a4aSRandall Stewart 		phdr = sctp_get_next_param(m, offset, &parm_buf,
5556f8829a4aSRandall Stewart 		    sizeof(parm_buf));
5557f8829a4aSRandall Stewart 	}
5558f8829a4aSRandall Stewart 	/* Now check to see if we need to purge any addresses */
5559f8829a4aSRandall Stewart 	for (net = TAILQ_FIRST(&stcb->asoc.nets); net != NULL; net = net_tmp) {
5560f8829a4aSRandall Stewart 		net_tmp = TAILQ_NEXT(net, sctp_next);
5561f8829a4aSRandall Stewart 		if ((net->dest_state & SCTP_ADDR_NOT_IN_ASSOC) ==
5562f8829a4aSRandall Stewart 		    SCTP_ADDR_NOT_IN_ASSOC) {
5563f8829a4aSRandall Stewart 			/* This address has been removed from the asoc */
5564f8829a4aSRandall Stewart 			/* remove and free it */
5565f8829a4aSRandall Stewart 			stcb->asoc.numnets--;
5566f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.nets, net, sctp_next);
5567f8829a4aSRandall Stewart 			sctp_free_remote_addr(net);
5568f8829a4aSRandall Stewart 			if (net == stcb->asoc.primary_destination) {
5569f8829a4aSRandall Stewart 				stcb->asoc.primary_destination = NULL;
5570f8829a4aSRandall Stewart 				sctp_select_primary_destination(stcb);
5571f8829a4aSRandall Stewart 			}
5572f8829a4aSRandall Stewart 		}
5573f8829a4aSRandall Stewart 	}
5574f8829a4aSRandall Stewart 	/* validate authentication required parameters */
5575f8829a4aSRandall Stewart 	if (got_random && got_hmacs) {
5576f8829a4aSRandall Stewart 		stcb->asoc.peer_supports_auth = 1;
5577f8829a4aSRandall Stewart 	} else {
5578f8829a4aSRandall Stewart 		stcb->asoc.peer_supports_auth = 0;
5579f8829a4aSRandall Stewart 	}
55805e54f665SRandall Stewart 	if (!stcb->asoc.peer_supports_auth && got_chklist) {
55815e54f665SRandall Stewart 		/* peer does not support auth but sent a chunks list? */
55825e54f665SRandall Stewart 		return (-31);
55835e54f665SRandall Stewart 	}
5584f8829a4aSRandall Stewart 	if (!sctp_asconf_auth_nochk && stcb->asoc.peer_supports_asconf &&
5585f8829a4aSRandall Stewart 	    !stcb->asoc.peer_supports_auth) {
55865e54f665SRandall Stewart 		/* peer supports asconf but not auth? */
55875e54f665SRandall Stewart 		return (-32);
55882afb3e84SRandall Stewart 	} else if ((stcb->asoc.peer_supports_asconf) && (stcb->asoc.peer_supports_auth) &&
55892afb3e84SRandall Stewart 	    ((saw_asconf == 0) || (saw_asconf_ack == 0))) {
55902afb3e84SRandall Stewart 		return (-33);
5591f8829a4aSRandall Stewart 	}
5592f8829a4aSRandall Stewart 	/* concatenate the full random key */
5593f42a358aSRandall Stewart #ifdef SCTP_AUTH_DRAFT_04
5594f42a358aSRandall Stewart 	keylen = random_len;
5595f8829a4aSRandall Stewart 	new_key = sctp_alloc_key(keylen);
5596f8829a4aSRandall Stewart 	if (new_key != NULL) {
5597f8829a4aSRandall Stewart 		/* copy in the RANDOM */
55985e54f665SRandall Stewart 		if (p_random != NULL)
55995e54f665SRandall Stewart 			bcopy(p_random->random_data, new_key->key, random_len);
5600f42a358aSRandall Stewart 	}
5601f42a358aSRandall Stewart #else
56025e54f665SRandall Stewart 	keylen = sizeof(*p_random) + random_len + sizeof(*chunks) + num_chunks +
5603f42a358aSRandall Stewart 	    sizeof(*hmacs) + hmacs_len;
5604f42a358aSRandall Stewart 	new_key = sctp_alloc_key(keylen);
5605f42a358aSRandall Stewart 	if (new_key != NULL) {
5606f42a358aSRandall Stewart 		/* copy in the RANDOM */
56075e54f665SRandall Stewart 		if (p_random != NULL) {
56085e54f665SRandall Stewart 			keylen = sizeof(*p_random) + random_len;
56095e54f665SRandall Stewart 			bcopy(p_random, new_key->key, keylen);
5610f42a358aSRandall Stewart 		}
5611f8829a4aSRandall Stewart 		/* append in the AUTH chunks */
5612f42a358aSRandall Stewart 		if (chunks != NULL) {
5613f42a358aSRandall Stewart 			bcopy(chunks, new_key->key + keylen,
5614f42a358aSRandall Stewart 			    sizeof(*chunks) + num_chunks);
5615f42a358aSRandall Stewart 			keylen += sizeof(*chunks) + num_chunks;
5616f42a358aSRandall Stewart 		}
5617f8829a4aSRandall Stewart 		/* append in the HMACs */
5618f42a358aSRandall Stewart 		if (hmacs != NULL) {
5619f42a358aSRandall Stewart 			bcopy(hmacs, new_key->key + keylen,
5620f42a358aSRandall Stewart 			    sizeof(*hmacs) + hmacs_len);
5621f42a358aSRandall Stewart 		}
5622f42a358aSRandall Stewart 	}
5623f42a358aSRandall Stewart #endif
5624f42a358aSRandall Stewart 	else {
56255e54f665SRandall Stewart 		/* failed to get memory for the key */
56262afb3e84SRandall Stewart 		return (-34);
5627f8829a4aSRandall Stewart 	}
5628f8829a4aSRandall Stewart 	if (stcb->asoc.authinfo.peer_random != NULL)
5629f8829a4aSRandall Stewart 		sctp_free_key(stcb->asoc.authinfo.peer_random);
5630f8829a4aSRandall Stewart 	stcb->asoc.authinfo.peer_random = new_key;
5631f8829a4aSRandall Stewart #ifdef SCTP_AUTH_DRAFT_04
5632f8829a4aSRandall Stewart 	/* don't include the chunks and hmacs for draft -04 */
5633f8829a4aSRandall Stewart 	stcb->asoc.authinfo.peer_random->keylen = random_len;
5634f8829a4aSRandall Stewart #endif
5635f8829a4aSRandall Stewart 	sctp_clear_cachedkeys(stcb, stcb->asoc.authinfo.assoc_keyid);
5636f8829a4aSRandall Stewart 	sctp_clear_cachedkeys(stcb, stcb->asoc.authinfo.recv_keyid);
5637f8829a4aSRandall Stewart 
5638f8829a4aSRandall Stewart 	return (0);
5639f8829a4aSRandall Stewart }
5640f8829a4aSRandall Stewart 
5641f8829a4aSRandall Stewart int
5642f8829a4aSRandall Stewart sctp_set_primary_addr(struct sctp_tcb *stcb, struct sockaddr *sa,
5643f8829a4aSRandall Stewart     struct sctp_nets *net)
5644f8829a4aSRandall Stewart {
5645f8829a4aSRandall Stewart 	/* make sure the requested primary address exists in the assoc */
5646f8829a4aSRandall Stewart 	if (net == NULL && sa)
5647f8829a4aSRandall Stewart 		net = sctp_findnet(stcb, sa);
5648f8829a4aSRandall Stewart 
5649f8829a4aSRandall Stewart 	if (net == NULL) {
5650f8829a4aSRandall Stewart 		/* didn't find the requested primary address! */
5651f8829a4aSRandall Stewart 		return (-1);
5652f8829a4aSRandall Stewart 	} else {
5653f8829a4aSRandall Stewart 		/* set the primary address */
5654f8829a4aSRandall Stewart 		if (net->dest_state & SCTP_ADDR_UNCONFIRMED) {
565542551e99SRandall Stewart 			/* Must be confirmed, so queue to set */
565642551e99SRandall Stewart 			net->dest_state |= SCTP_ADDR_REQ_PRIMARY;
565742551e99SRandall Stewart 			return (0);
5658f8829a4aSRandall Stewart 		}
5659f8829a4aSRandall Stewart 		stcb->asoc.primary_destination = net;
5660f8829a4aSRandall Stewart 		net->dest_state &= ~SCTP_ADDR_WAS_PRIMARY;
5661f8829a4aSRandall Stewart 		net = TAILQ_FIRST(&stcb->asoc.nets);
5662f8829a4aSRandall Stewart 		if (net != stcb->asoc.primary_destination) {
5663f8829a4aSRandall Stewart 			/*
5664f8829a4aSRandall Stewart 			 * first one on the list is NOT the primary
5665f8829a4aSRandall Stewart 			 * sctp_cmpaddr() is much more efficent if the
5666f8829a4aSRandall Stewart 			 * primary is the first on the list, make it so.
5667f8829a4aSRandall Stewart 			 */
5668f8829a4aSRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.nets, stcb->asoc.primary_destination, sctp_next);
5669f8829a4aSRandall Stewart 			TAILQ_INSERT_HEAD(&stcb->asoc.nets, stcb->asoc.primary_destination, sctp_next);
5670f8829a4aSRandall Stewart 		}
5671f8829a4aSRandall Stewart 		return (0);
5672f8829a4aSRandall Stewart 	}
5673f8829a4aSRandall Stewart }
5674f8829a4aSRandall Stewart 
5675f8829a4aSRandall Stewart int
5676f8829a4aSRandall Stewart sctp_is_vtag_good(struct sctp_inpcb *inp, uint32_t tag, struct timeval *now)
5677f8829a4aSRandall Stewart {
5678f8829a4aSRandall Stewart 	/*
5679f8829a4aSRandall Stewart 	 * This function serves two purposes. It will see if a TAG can be
5680f8829a4aSRandall Stewart 	 * re-used and return 1 for yes it is ok and 0 for don't use that
5681f8829a4aSRandall Stewart 	 * tag. A secondary function it will do is purge out old tags that
5682f8829a4aSRandall Stewart 	 * can be removed.
5683f8829a4aSRandall Stewart 	 */
5684f8829a4aSRandall Stewart 	struct sctpasochead *head;
5685f8829a4aSRandall Stewart 	struct sctpvtaghead *chain;
5686f8829a4aSRandall Stewart 	struct sctp_tagblock *twait_block;
5687f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
5688f8829a4aSRandall Stewart 	int i;
5689f8829a4aSRandall Stewart 
5690f8829a4aSRandall Stewart 	SCTP_INP_INFO_WLOCK();
5691f8829a4aSRandall Stewart 	chain = &sctppcbinfo.vtag_timewait[(tag % SCTP_STACK_VTAG_HASH_SIZE)];
5692f8829a4aSRandall Stewart 	/* First is the vtag in use ? */
5693f8829a4aSRandall Stewart 
5694f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_asochash[SCTP_PCBHASH_ASOC(tag,
5695f8829a4aSRandall Stewart 	    sctppcbinfo.hashasocmark)];
5696f8829a4aSRandall Stewart 	if (head == NULL) {
5697f8829a4aSRandall Stewart 		goto check_restart;
5698f8829a4aSRandall Stewart 	}
5699f8829a4aSRandall Stewart 	LIST_FOREACH(stcb, head, sctp_asocs) {
5700f8829a4aSRandall Stewart 
5701f8829a4aSRandall Stewart 		if (stcb->asoc.my_vtag == tag) {
5702f8829a4aSRandall Stewart 			/*
5703f8829a4aSRandall Stewart 			 * We should remove this if and return 0 always if
5704f8829a4aSRandall Stewart 			 * we want vtags unique across all endpoints. For
5705f8829a4aSRandall Stewart 			 * now within a endpoint is ok.
5706f8829a4aSRandall Stewart 			 */
5707f8829a4aSRandall Stewart 			if (inp == stcb->sctp_ep) {
5708f8829a4aSRandall Stewart 				/* bad tag, in use */
5709f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
5710f8829a4aSRandall Stewart 				return (0);
5711f8829a4aSRandall Stewart 			}
5712f8829a4aSRandall Stewart 		}
5713f8829a4aSRandall Stewart 	}
5714f8829a4aSRandall Stewart check_restart:
5715f8829a4aSRandall Stewart 	/* Now lets check the restart hash */
5716f8829a4aSRandall Stewart 	head = &sctppcbinfo.sctp_restarthash[SCTP_PCBHASH_ASOC(tag,
5717f8829a4aSRandall Stewart 	    sctppcbinfo.hashrestartmark)];
5718f8829a4aSRandall Stewart 	if (head == NULL) {
5719f8829a4aSRandall Stewart 		goto check_time_wait;
5720f8829a4aSRandall Stewart 	}
5721f8829a4aSRandall Stewart 	LIST_FOREACH(stcb, head, sctp_tcbrestarhash) {
5722f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_id == tag) {
5723f8829a4aSRandall Stewart 			/* candidate */
5724f8829a4aSRandall Stewart 			if (inp == stcb->sctp_ep) {
5725f8829a4aSRandall Stewart 				/* bad tag, in use */
5726f8829a4aSRandall Stewart 				SCTP_INP_INFO_WUNLOCK();
5727f8829a4aSRandall Stewart 				return (0);
5728f8829a4aSRandall Stewart 			}
5729f8829a4aSRandall Stewart 		}
5730f8829a4aSRandall Stewart 	}
5731f8829a4aSRandall Stewart check_time_wait:
5732f8829a4aSRandall Stewart 	/* Now what about timed wait ? */
5733f42a358aSRandall Stewart 	if (!SCTP_LIST_EMPTY(chain)) {
5734f8829a4aSRandall Stewart 		/*
5735f8829a4aSRandall Stewart 		 * Block(s) are present, lets see if we have this tag in the
5736f8829a4aSRandall Stewart 		 * list
5737f8829a4aSRandall Stewart 		 */
5738f8829a4aSRandall Stewart 		LIST_FOREACH(twait_block, chain, sctp_nxt_tagblock) {
5739f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_IN_VTAG_BLOCK; i++) {
5740f8829a4aSRandall Stewart 				if (twait_block->vtag_block[i].v_tag == 0) {
5741f8829a4aSRandall Stewart 					/* not used */
5742f8829a4aSRandall Stewart 					continue;
5743f8829a4aSRandall Stewart 				} else if ((long)twait_block->vtag_block[i].tv_sec_at_expire >
5744f8829a4aSRandall Stewart 				    now->tv_sec) {
5745f8829a4aSRandall Stewart 					/* Audit expires this guy */
5746f8829a4aSRandall Stewart 					twait_block->vtag_block[i].tv_sec_at_expire = 0;
5747f8829a4aSRandall Stewart 					twait_block->vtag_block[i].v_tag = 0;
5748f8829a4aSRandall Stewart 				} else if (twait_block->vtag_block[i].v_tag ==
5749f8829a4aSRandall Stewart 				    tag) {
5750f8829a4aSRandall Stewart 					/* Bad tag, sorry :< */
5751f8829a4aSRandall Stewart 					SCTP_INP_INFO_WUNLOCK();
5752f8829a4aSRandall Stewart 					return (0);
5753f8829a4aSRandall Stewart 				}
5754f8829a4aSRandall Stewart 			}
5755f8829a4aSRandall Stewart 		}
5756f8829a4aSRandall Stewart 	}
5757851b7298SRandall Stewart 	/*-
5758851b7298SRandall Stewart 	 * Not found, ok to use the tag, add it to the time wait hash
5759851b7298SRandall Stewart 	 * as well this will prevent two sucessive cookies from getting
5760851b7298SRandall Stewart 	 * the same tag or two inits sent quickly on multi-processors.
5761851b7298SRandall Stewart 	 * We only keep the tag for the life of a cookie and when we
5762851b7298SRandall Stewart 	 * add this tag to the assoc hash we need to purge it from
5763851b7298SRandall Stewart 	 * the t-wait hash.
5764851b7298SRandall Stewart 	 */
5765851b7298SRandall Stewart 	sctp_add_vtag_to_timewait(tag, TICKS_TO_SEC(inp->sctp_ep.def_cookie_life));
5766f8829a4aSRandall Stewart 	SCTP_INP_INFO_WUNLOCK();
5767f8829a4aSRandall Stewart 	return (1);
5768f8829a4aSRandall Stewart }
5769f8829a4aSRandall Stewart 
5770f8829a4aSRandall Stewart 
5771f8829a4aSRandall Stewart static sctp_assoc_t reneged_asoc_ids[256];
5772f8829a4aSRandall Stewart static uint8_t reneged_at = 0;
5773f8829a4aSRandall Stewart 
5774f8829a4aSRandall Stewart 
5775f8829a4aSRandall Stewart static void
5776f8829a4aSRandall Stewart sctp_drain_mbufs(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
5777f8829a4aSRandall Stewart {
5778f8829a4aSRandall Stewart 	/*
5779f8829a4aSRandall Stewart 	 * We must hunt this association for MBUF's past the cumack (i.e.
5780f8829a4aSRandall Stewart 	 * out of order data that we can renege on).
5781f8829a4aSRandall Stewart 	 */
5782f8829a4aSRandall Stewart 	struct sctp_association *asoc;
5783f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk, *nchk;
5784f8829a4aSRandall Stewart 	uint32_t cumulative_tsn_p1, tsn;
5785f8829a4aSRandall Stewart 	struct sctp_queued_to_read *ctl, *nctl;
5786f8829a4aSRandall Stewart 	int cnt, strmat, gap;
5787f8829a4aSRandall Stewart 
5788f8829a4aSRandall Stewart 	/* We look for anything larger than the cum-ack + 1 */
5789f8829a4aSRandall Stewart 
5790a5d547adSRandall Stewart 	SCTP_STAT_INCR(sctps_protocol_drain_calls);
5791f8829a4aSRandall Stewart 	if (sctp_do_drain == 0) {
5792f8829a4aSRandall Stewart 		return;
5793f8829a4aSRandall Stewart 	}
5794f8829a4aSRandall Stewart 	asoc = &stcb->asoc;
5795f8829a4aSRandall Stewart 	if (asoc->cumulative_tsn == asoc->highest_tsn_inside_map) {
5796f8829a4aSRandall Stewart 		/* none we can reneg on. */
5797f8829a4aSRandall Stewart 		return;
5798f8829a4aSRandall Stewart 	}
5799a5d547adSRandall Stewart 	SCTP_STAT_INCR(sctps_protocol_drains_done);
5800f8829a4aSRandall Stewart 	cumulative_tsn_p1 = asoc->cumulative_tsn + 1;
5801f8829a4aSRandall Stewart 	cnt = 0;
5802f8829a4aSRandall Stewart 	/* First look in the re-assembly queue */
5803f8829a4aSRandall Stewart 	chk = TAILQ_FIRST(&asoc->reasmqueue);
5804f8829a4aSRandall Stewart 	while (chk) {
5805f8829a4aSRandall Stewart 		/* Get the next one */
5806f8829a4aSRandall Stewart 		nchk = TAILQ_NEXT(chk, sctp_next);
5807f8829a4aSRandall Stewart 		if (compare_with_wrap(chk->rec.data.TSN_seq,
5808f8829a4aSRandall Stewart 		    cumulative_tsn_p1, MAX_TSN)) {
5809f8829a4aSRandall Stewart 			/* Yep it is above cum-ack */
5810f8829a4aSRandall Stewart 			cnt++;
5811f8829a4aSRandall Stewart 			tsn = chk->rec.data.TSN_seq;
5812f8829a4aSRandall Stewart 			if (tsn >= asoc->mapping_array_base_tsn) {
5813f8829a4aSRandall Stewart 				gap = tsn - asoc->mapping_array_base_tsn;
5814f8829a4aSRandall Stewart 			} else {
5815f8829a4aSRandall Stewart 				gap = (MAX_TSN - asoc->mapping_array_base_tsn) +
5816f8829a4aSRandall Stewart 				    tsn + 1;
5817f8829a4aSRandall Stewart 			}
5818f8829a4aSRandall Stewart 			asoc->size_on_reasm_queue = sctp_sbspace_sub(asoc->size_on_reasm_queue, chk->send_size);
5819f8829a4aSRandall Stewart 			sctp_ucount_decr(asoc->cnt_on_reasm_queue);
5820f8829a4aSRandall Stewart 			SCTP_UNSET_TSN_PRESENT(asoc->mapping_array, gap);
5821f8829a4aSRandall Stewart 			TAILQ_REMOVE(&asoc->reasmqueue, chk, sctp_next);
5822f8829a4aSRandall Stewart 			if (chk->data) {
5823f8829a4aSRandall Stewart 				sctp_m_freem(chk->data);
5824f8829a4aSRandall Stewart 				chk->data = NULL;
5825f8829a4aSRandall Stewart 			}
5826f8829a4aSRandall Stewart 			sctp_free_a_chunk(stcb, chk);
5827f8829a4aSRandall Stewart 		}
5828f8829a4aSRandall Stewart 		chk = nchk;
5829f8829a4aSRandall Stewart 	}
5830f8829a4aSRandall Stewart 	/* Ok that was fun, now we will drain all the inbound streams? */
5831f8829a4aSRandall Stewart 	for (strmat = 0; strmat < asoc->streamincnt; strmat++) {
5832f8829a4aSRandall Stewart 		ctl = TAILQ_FIRST(&asoc->strmin[strmat].inqueue);
5833f8829a4aSRandall Stewart 		while (ctl) {
5834f8829a4aSRandall Stewart 			nctl = TAILQ_NEXT(ctl, next);
5835f8829a4aSRandall Stewart 			if (compare_with_wrap(ctl->sinfo_tsn,
5836f8829a4aSRandall Stewart 			    cumulative_tsn_p1, MAX_TSN)) {
5837f8829a4aSRandall Stewart 				/* Yep it is above cum-ack */
5838f8829a4aSRandall Stewart 				cnt++;
5839f8829a4aSRandall Stewart 				tsn = ctl->sinfo_tsn;
5840f8829a4aSRandall Stewart 				if (tsn >= asoc->mapping_array_base_tsn) {
5841f8829a4aSRandall Stewart 					gap = tsn -
5842f8829a4aSRandall Stewart 					    asoc->mapping_array_base_tsn;
5843f8829a4aSRandall Stewart 				} else {
5844f8829a4aSRandall Stewart 					gap = (MAX_TSN -
5845f8829a4aSRandall Stewart 					    asoc->mapping_array_base_tsn) +
5846f8829a4aSRandall Stewart 					    tsn + 1;
5847f8829a4aSRandall Stewart 				}
5848f8829a4aSRandall Stewart 				asoc->size_on_all_streams = sctp_sbspace_sub(asoc->size_on_all_streams, ctl->length);
5849f8829a4aSRandall Stewart 				sctp_ucount_decr(asoc->cnt_on_all_streams);
5850f8829a4aSRandall Stewart 
5851f8829a4aSRandall Stewart 				SCTP_UNSET_TSN_PRESENT(asoc->mapping_array,
5852f8829a4aSRandall Stewart 				    gap);
5853f8829a4aSRandall Stewart 				TAILQ_REMOVE(&asoc->strmin[strmat].inqueue,
5854f8829a4aSRandall Stewart 				    ctl, next);
5855f8829a4aSRandall Stewart 				if (ctl->data) {
5856f8829a4aSRandall Stewart 					sctp_m_freem(ctl->data);
5857f8829a4aSRandall Stewart 					ctl->data = NULL;
5858f8829a4aSRandall Stewart 				}
5859f8829a4aSRandall Stewart 				sctp_free_remote_addr(ctl->whoFrom);
5860f8829a4aSRandall Stewart 				SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_readq, ctl);
5861f8829a4aSRandall Stewart 				SCTP_DECR_READQ_COUNT();
5862f8829a4aSRandall Stewart 			}
5863f8829a4aSRandall Stewart 			ctl = nctl;
5864f8829a4aSRandall Stewart 		}
5865f8829a4aSRandall Stewart 	}
5866f8829a4aSRandall Stewart 	/*
5867f8829a4aSRandall Stewart 	 * Question, should we go through the delivery queue? The only
5868f8829a4aSRandall Stewart 	 * reason things are on here is the app not reading OR a p-d-api up.
5869f8829a4aSRandall Stewart 	 * An attacker COULD send enough in to initiate the PD-API and then
5870f8829a4aSRandall Stewart 	 * send a bunch of stuff to other streams... these would wind up on
5871f8829a4aSRandall Stewart 	 * the delivery queue.. and then we would not get to them. But in
5872f8829a4aSRandall Stewart 	 * order to do this I then have to back-track and un-deliver
5873f8829a4aSRandall Stewart 	 * sequence numbers in streams.. el-yucko. I think for now we will
5874f8829a4aSRandall Stewart 	 * NOT look at the delivery queue and leave it to be something to
5875f8829a4aSRandall Stewart 	 * consider later. An alternative would be to abort the P-D-API with
5876f8829a4aSRandall Stewart 	 * a notification and then deliver the data.... Or another method
5877f8829a4aSRandall Stewart 	 * might be to keep track of how many times the situation occurs and
5878f8829a4aSRandall Stewart 	 * if we see a possible attack underway just abort the association.
5879f8829a4aSRandall Stewart 	 */
5880f8829a4aSRandall Stewart #ifdef SCTP_DEBUG
5881f8829a4aSRandall Stewart 	if (cnt) {
5882ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_PCB1, "Freed %d chunks from reneg harvest\n", cnt);
5883f8829a4aSRandall Stewart 	}
5884ad81507eSRandall Stewart #endif
5885f8829a4aSRandall Stewart 	if (cnt) {
5886f8829a4aSRandall Stewart 		/*
5887f8829a4aSRandall Stewart 		 * Now do we need to find a new
5888f8829a4aSRandall Stewart 		 * asoc->highest_tsn_inside_map?
5889f8829a4aSRandall Stewart 		 */
5890f8829a4aSRandall Stewart 		if (asoc->highest_tsn_inside_map >= asoc->mapping_array_base_tsn) {
5891f8829a4aSRandall Stewart 			gap = asoc->highest_tsn_inside_map - asoc->mapping_array_base_tsn;
5892f8829a4aSRandall Stewart 		} else {
5893f8829a4aSRandall Stewart 			gap = (MAX_TSN - asoc->mapping_array_base_tsn) +
5894f8829a4aSRandall Stewart 			    asoc->highest_tsn_inside_map + 1;
5895f8829a4aSRandall Stewart 		}
5896f8829a4aSRandall Stewart 		if (gap >= (asoc->mapping_array_size << 3)) {
5897f8829a4aSRandall Stewart 			/*
5898f8829a4aSRandall Stewart 			 * Something bad happened or cum-ack and high were
5899f8829a4aSRandall Stewart 			 * behind the base, but if so earlier checks should
5900f8829a4aSRandall Stewart 			 * have found NO data... wierd... we will start at
5901f8829a4aSRandall Stewart 			 * end of mapping array.
5902f8829a4aSRandall Stewart 			 */
5903ad81507eSRandall Stewart 			SCTP_PRINTF("Gap was larger than array?? %d set to max:%d maparraymax:%x\n",
5904f8829a4aSRandall Stewart 			    (int)gap,
5905f8829a4aSRandall Stewart 			    (int)(asoc->mapping_array_size << 3),
5906f8829a4aSRandall Stewart 			    (int)asoc->highest_tsn_inside_map);
5907f8829a4aSRandall Stewart 			gap = asoc->mapping_array_size << 3;
5908f8829a4aSRandall Stewart 		}
5909f8829a4aSRandall Stewart 		while (gap > 0) {
5910f8829a4aSRandall Stewart 			if (SCTP_IS_TSN_PRESENT(asoc->mapping_array, gap)) {
5911f8829a4aSRandall Stewart 				/* found the new highest */
5912f8829a4aSRandall Stewart 				asoc->highest_tsn_inside_map = asoc->mapping_array_base_tsn + gap;
5913f8829a4aSRandall Stewart 				break;
5914f8829a4aSRandall Stewart 			}
5915f8829a4aSRandall Stewart 			gap--;
5916f8829a4aSRandall Stewart 		}
5917f8829a4aSRandall Stewart 		if (gap == 0) {
5918f8829a4aSRandall Stewart 			/* Nothing left in map */
5919f8829a4aSRandall Stewart 			memset(asoc->mapping_array, 0, asoc->mapping_array_size);
5920f8829a4aSRandall Stewart 			asoc->mapping_array_base_tsn = asoc->cumulative_tsn + 1;
5921f8829a4aSRandall Stewart 			asoc->highest_tsn_inside_map = asoc->cumulative_tsn;
5922f8829a4aSRandall Stewart 		}
5923f8829a4aSRandall Stewart 		asoc->last_revoke_count = cnt;
59246e55db54SRandall Stewart 		(void)SCTP_OS_TIMER_STOP(&stcb->asoc.dack_timer.timer);
592504ee05e8SRandall Stewart 		/* sa_ignore NO_NULL_CHK */
5926f8829a4aSRandall Stewart 		sctp_send_sack(stcb);
5927ceaad40aSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_DRAIN, SCTP_SO_NOT_LOCKED);
5928f8829a4aSRandall Stewart 		reneged_asoc_ids[reneged_at] = sctp_get_associd(stcb);
5929f8829a4aSRandall Stewart 		reneged_at++;
5930f8829a4aSRandall Stewart 	}
5931f8829a4aSRandall Stewart 	/*
5932f8829a4aSRandall Stewart 	 * Another issue, in un-setting the TSN's in the mapping array we
5933f8829a4aSRandall Stewart 	 * DID NOT adjust the higest_tsn marker.  This will cause one of two
5934f8829a4aSRandall Stewart 	 * things to occur. It may cause us to do extra work in checking for
5935f8829a4aSRandall Stewart 	 * our mapping array movement. More importantly it may cause us to
5936f8829a4aSRandall Stewart 	 * SACK every datagram. This may not be a bad thing though since we
5937f8829a4aSRandall Stewart 	 * will recover once we get our cum-ack above and all this stuff we
5938f8829a4aSRandall Stewart 	 * dumped recovered.
5939f8829a4aSRandall Stewart 	 */
5940f8829a4aSRandall Stewart }
5941f8829a4aSRandall Stewart 
5942f8829a4aSRandall Stewart void
5943f8829a4aSRandall Stewart sctp_drain()
5944f8829a4aSRandall Stewart {
5945f8829a4aSRandall Stewart 	/*
5946f8829a4aSRandall Stewart 	 * We must walk the PCB lists for ALL associations here. The system
5947f8829a4aSRandall Stewart 	 * is LOW on MBUF's and needs help. This is where reneging will
5948f8829a4aSRandall Stewart 	 * occur. We really hope this does NOT happen!
5949f8829a4aSRandall Stewart 	 */
5950f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
5951f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
5952f8829a4aSRandall Stewart 
5953f8829a4aSRandall Stewart 	SCTP_INP_INFO_RLOCK();
5954f8829a4aSRandall Stewart 	LIST_FOREACH(inp, &sctppcbinfo.listhead, sctp_list) {
5955f8829a4aSRandall Stewart 		/* For each endpoint */
5956f8829a4aSRandall Stewart 		SCTP_INP_RLOCK(inp);
5957f8829a4aSRandall Stewart 		LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
5958f8829a4aSRandall Stewart 			/* For each association */
5959f8829a4aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
5960f8829a4aSRandall Stewart 			sctp_drain_mbufs(inp, stcb);
5961f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
5962f8829a4aSRandall Stewart 		}
5963f8829a4aSRandall Stewart 		SCTP_INP_RUNLOCK(inp);
5964f8829a4aSRandall Stewart 	}
5965f8829a4aSRandall Stewart 	SCTP_INP_INFO_RUNLOCK();
5966f8829a4aSRandall Stewart }
5967f8829a4aSRandall Stewart 
5968f8829a4aSRandall Stewart /*
5969f8829a4aSRandall Stewart  * start a new iterator
5970f8829a4aSRandall Stewart  * iterates through all endpoints and associations based on the pcb_state
5971f8829a4aSRandall Stewart  * flags and asoc_state.  "af" (mandatory) is executed for all matching
5972f8829a4aSRandall Stewart  * assocs and "ef" (optional) is executed when the iterator completes.
5973f8829a4aSRandall Stewart  * "inpf" (optional) is executed for each new endpoint as it is being
5974bff64a4dSRandall Stewart  * iterated through. inpe (optional) is called when the inp completes
5975bff64a4dSRandall Stewart  * its way through all the stcbs.
5976f8829a4aSRandall Stewart  */
5977f8829a4aSRandall Stewart int
597842551e99SRandall Stewart sctp_initiate_iterator(inp_func inpf,
597942551e99SRandall Stewart     asoc_func af,
598042551e99SRandall Stewart     inp_func inpe,
598142551e99SRandall Stewart     uint32_t pcb_state,
598242551e99SRandall Stewart     uint32_t pcb_features,
598342551e99SRandall Stewart     uint32_t asoc_state,
598442551e99SRandall Stewart     void *argp,
598542551e99SRandall Stewart     uint32_t argi,
598642551e99SRandall Stewart     end_func ef,
598742551e99SRandall Stewart     struct sctp_inpcb *s_inp,
598842551e99SRandall Stewart     uint8_t chunk_output_off)
5989f8829a4aSRandall Stewart {
5990f8829a4aSRandall Stewart 	struct sctp_iterator *it = NULL;
5991f8829a4aSRandall Stewart 
5992f8829a4aSRandall Stewart 	if (af == NULL) {
5993f8829a4aSRandall Stewart 		return (-1);
5994f8829a4aSRandall Stewart 	}
5995f8829a4aSRandall Stewart 	SCTP_MALLOC(it, struct sctp_iterator *, sizeof(struct sctp_iterator),
5996207304d4SRandall Stewart 	    SCTP_M_ITER);
5997f8829a4aSRandall Stewart 	if (it == NULL) {
5998c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTP_PCB, ENOMEM);
5999f8829a4aSRandall Stewart 		return (ENOMEM);
6000f8829a4aSRandall Stewart 	}
6001f8829a4aSRandall Stewart 	memset(it, 0, sizeof(*it));
6002f8829a4aSRandall Stewart 	it->function_assoc = af;
6003f8829a4aSRandall Stewart 	it->function_inp = inpf;
600442551e99SRandall Stewart 	if (inpf)
600542551e99SRandall Stewart 		it->done_current_ep = 0;
600642551e99SRandall Stewart 	else
600742551e99SRandall Stewart 		it->done_current_ep = 1;
6008f8829a4aSRandall Stewart 	it->function_atend = ef;
6009f8829a4aSRandall Stewart 	it->pointer = argp;
6010f8829a4aSRandall Stewart 	it->val = argi;
6011f8829a4aSRandall Stewart 	it->pcb_flags = pcb_state;
6012f8829a4aSRandall Stewart 	it->pcb_features = pcb_features;
6013f8829a4aSRandall Stewart 	it->asoc_state = asoc_state;
601442551e99SRandall Stewart 	it->function_inp_end = inpe;
6015f8829a4aSRandall Stewart 	it->no_chunk_output = chunk_output_off;
6016f8829a4aSRandall Stewart 	if (s_inp) {
6017f8829a4aSRandall Stewart 		it->inp = s_inp;
6018f8829a4aSRandall Stewart 		it->iterator_flags = SCTP_ITERATOR_DO_SINGLE_INP;
6019f8829a4aSRandall Stewart 	} else {
6020f8829a4aSRandall Stewart 		SCTP_INP_INFO_RLOCK();
6021f8829a4aSRandall Stewart 		it->inp = LIST_FIRST(&sctppcbinfo.listhead);
602242551e99SRandall Stewart 
6023f8829a4aSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
6024f8829a4aSRandall Stewart 		it->iterator_flags = SCTP_ITERATOR_DO_ALL_INP;
6025f8829a4aSRandall Stewart 
6026f8829a4aSRandall Stewart 	}
602742551e99SRandall Stewart 	SCTP_IPI_ITERATOR_WQ_LOCK();
6028ad81507eSRandall Stewart 	if (it->inp) {
602942551e99SRandall Stewart 		SCTP_INP_INCR_REF(it->inp);
6030ad81507eSRandall Stewart 	}
603142551e99SRandall Stewart 	TAILQ_INSERT_TAIL(&sctppcbinfo.iteratorhead, it, sctp_nxt_itr);
603242551e99SRandall Stewart #if defined(SCTP_USE_THREAD_BASED_ITERATOR)
603342551e99SRandall Stewart 	if (sctppcbinfo.iterator_running == 0) {
603442551e99SRandall Stewart 		sctp_wakeup_iterator();
603542551e99SRandall Stewart 	}
603642551e99SRandall Stewart 	SCTP_IPI_ITERATOR_WQ_UNLOCK();
603742551e99SRandall Stewart #else
603842551e99SRandall Stewart 	if (it->inp)
603942551e99SRandall Stewart 		SCTP_INP_DECR_REF(it->inp);
604042551e99SRandall Stewart 	SCTP_IPI_ITERATOR_WQ_UNLOCK();
6041f8829a4aSRandall Stewart 	/* Init the timer */
6042139bc87fSRandall Stewart 	SCTP_OS_TIMER_INIT(&it->tmr.timer);
6043f8829a4aSRandall Stewart 	/* add to the list of all iterators */
6044f8829a4aSRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_ITERATOR, (struct sctp_inpcb *)it,
6045f8829a4aSRandall Stewart 	    NULL, NULL);
604642551e99SRandall Stewart #endif
60473c503c28SRandall Stewart 	/* sa_ignore MEMLEAK {memory is put on the tailq for the iterator} */
6048f8829a4aSRandall Stewart 	return (0);
6049f8829a4aSRandall Stewart }
6050