1 /*- 2 * SPDX-License-Identifier: BSD-3-Clause 3 * 4 * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved. 5 * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved. 6 * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions are met: 10 * 11 * a) Redistributions of source code must retain the above copyright notice, 12 * this list of conditions and the following disclaimer. 13 * 14 * b) Redistributions in binary form must reproduce the above copyright 15 * notice, this list of conditions and the following disclaimer in 16 * the documentation and/or other materials provided with the distribution. 17 * 18 * c) Neither the name of Cisco Systems, Inc. nor the names of its 19 * contributors may be used to endorse or promote products derived 20 * from this software without specific prior written permission. 21 * 22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 23 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 24 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 26 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF 32 * THE POSSIBILITY OF SUCH DAMAGE. 33 */ 34 35 #include <sys/cdefs.h> 36 #define _IP_VHL 37 #include <netinet/sctp_os.h> 38 #include <netinet/sctp_pcb.h> 39 #ifdef INET6 40 #endif 41 #include <netinet/sctp_var.h> 42 #include <netinet/sctp_sysctl.h> 43 #include <netinet/sctp_timer.h> 44 #include <netinet/sctputil.h> 45 #include <netinet/sctp_output.h> 46 #include <netinet/sctp_header.h> 47 #include <netinet/sctp_indata.h> 48 #include <netinet/sctp_asconf.h> 49 #include <netinet/sctp_input.h> 50 #include <netinet/sctp.h> 51 #include <netinet/sctp_uio.h> 52 #if defined(INET) || defined(INET6) 53 #include <netinet/udp.h> 54 #endif 55 56 void 57 sctp_audit_retranmission_queue(struct sctp_association *asoc) 58 { 59 struct sctp_tmit_chunk *chk; 60 61 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n", 62 asoc->sent_queue_retran_cnt, 63 asoc->sent_queue_cnt); 64 asoc->sent_queue_retran_cnt = 0; 65 asoc->sent_queue_cnt = 0; 66 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) { 67 if (chk->sent == SCTP_DATAGRAM_RESEND) { 68 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 69 } 70 asoc->sent_queue_cnt++; 71 } 72 TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) { 73 if (chk->sent == SCTP_DATAGRAM_RESEND) { 74 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 75 } 76 } 77 TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) { 78 if (chk->sent == SCTP_DATAGRAM_RESEND) { 79 sctp_ucount_incr(asoc->sent_queue_retran_cnt); 80 } 81 } 82 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n", 83 asoc->sent_queue_retran_cnt, 84 asoc->sent_queue_cnt); 85 } 86 87 static int 88 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 89 struct sctp_nets *net, uint16_t threshold) 90 { 91 if (net) { 92 net->error_count++; 93 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n", 94 (void *)net, net->error_count, 95 net->failure_threshold); 96 if (net->error_count > net->failure_threshold) { 97 /* We had a threshold failure */ 98 if (net->dest_state & SCTP_ADDR_REACHABLE) { 99 net->dest_state &= ~SCTP_ADDR_REACHABLE; 100 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY; 101 net->dest_state &= ~SCTP_ADDR_PF; 102 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, 103 stcb, 0, 104 (void *)net, SCTP_SO_NOT_LOCKED); 105 } 106 } else if ((net->pf_threshold < net->failure_threshold) && 107 (net->error_count > net->pf_threshold)) { 108 if ((net->dest_state & SCTP_ADDR_PF) == 0) { 109 net->dest_state |= SCTP_ADDR_PF; 110 net->last_active = sctp_get_tick_count(); 111 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 112 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, 113 inp, stcb, net, 114 SCTP_FROM_SCTP_TIMER + SCTP_LOC_1); 115 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net); 116 } 117 } 118 } 119 if (stcb == NULL) 120 return (0); 121 122 if (net) { 123 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) { 124 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 125 sctp_misc_ints(SCTP_THRESHOLD_INCR, 126 stcb->asoc.overall_error_count, 127 (stcb->asoc.overall_error_count + 1), 128 SCTP_FROM_SCTP_TIMER, 129 __LINE__); 130 } 131 stcb->asoc.overall_error_count++; 132 } 133 } else { 134 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) { 135 sctp_misc_ints(SCTP_THRESHOLD_INCR, 136 stcb->asoc.overall_error_count, 137 (stcb->asoc.overall_error_count + 1), 138 SCTP_FROM_SCTP_TIMER, 139 __LINE__); 140 } 141 stcb->asoc.overall_error_count++; 142 } 143 SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n", 144 (void *)&stcb->asoc, stcb->asoc.overall_error_count, 145 (uint32_t)threshold, 146 ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state)); 147 /* 148 * We specifically do not do >= to give the assoc one more change 149 * before we fail it. 150 */ 151 if (stcb->asoc.overall_error_count > threshold) { 152 /* Abort notification sends a ULP notify */ 153 struct mbuf *op_err; 154 155 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 156 "Association error counter exceeded"); 157 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2; 158 sctp_abort_an_association(inp, stcb, op_err, true, SCTP_SO_NOT_LOCKED); 159 return (1); 160 } 161 return (0); 162 } 163 164 /* 165 * sctp_find_alternate_net() returns a non-NULL pointer as long as there 166 * exists nets, which are not being deleted. 167 */ 168 struct sctp_nets * 169 sctp_find_alternate_net(struct sctp_tcb *stcb, 170 struct sctp_nets *net, 171 int mode) 172 { 173 /* Find and return an alternate network if possible */ 174 struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL; 175 bool looped; 176 177 /* JRS 5/14/07 - Initialize min_errors to an impossible value. */ 178 int min_errors = -1; 179 uint32_t max_cwnd = 0; 180 181 if (stcb->asoc.numnets == 1) { 182 /* No selection can be made. */ 183 return (TAILQ_FIRST(&stcb->asoc.nets)); 184 } 185 /* 186 * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate 187 * net algorithm. This algorithm chooses the active destination (not 188 * in PF state) with the largest cwnd value. If all destinations are 189 * in PF state, unreachable, or unconfirmed, choose the destination 190 * that is in PF state with the lowest error count. In case of a 191 * tie, choose the destination that was most recently active. 192 */ 193 if (mode == 2) { 194 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) { 195 /* 196 * JRS 5/14/07 - If the destination is unreachable 197 * or unconfirmed, skip it. 198 */ 199 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) || 200 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) { 201 continue; 202 } 203 /* 204 * JRS 5/14/07 - If the destination is reachable 205 * but in PF state, compare the error count of the 206 * destination to the minimum error count seen thus 207 * far. Store the destination with the lower error 208 * count. If the error counts are equal, store the 209 * destination that was most recently active. 210 */ 211 if (mnet->dest_state & SCTP_ADDR_PF) { 212 /* 213 * JRS 5/14/07 - If the destination under 214 * consideration is the current destination, 215 * work as if the error count is one higher. 216 * The actual error count will not be 217 * incremented until later in the t3 218 * handler. 219 */ 220 if (mnet == net) { 221 if (min_errors == -1) { 222 min_errors = mnet->error_count + 1; 223 min_errors_net = mnet; 224 } else if (mnet->error_count + 1 < min_errors) { 225 min_errors = mnet->error_count + 1; 226 min_errors_net = mnet; 227 } else if (mnet->error_count + 1 == min_errors 228 && mnet->last_active > min_errors_net->last_active) { 229 min_errors_net = mnet; 230 min_errors = mnet->error_count + 1; 231 } 232 continue; 233 } else { 234 if (min_errors == -1) { 235 min_errors = mnet->error_count; 236 min_errors_net = mnet; 237 } else if (mnet->error_count < min_errors) { 238 min_errors = mnet->error_count; 239 min_errors_net = mnet; 240 } else if (mnet->error_count == min_errors 241 && mnet->last_active > min_errors_net->last_active) { 242 min_errors_net = mnet; 243 min_errors = mnet->error_count; 244 } 245 continue; 246 } 247 } 248 /* 249 * JRS 5/14/07 - If the destination is reachable and 250 * not in PF state, compare the cwnd of the 251 * destination to the highest cwnd seen thus far. 252 * Store the destination with the higher cwnd value. 253 * If the cwnd values are equal, randomly choose one 254 * of the two destinations. 255 */ 256 if (max_cwnd < mnet->cwnd) { 257 max_cwnd_net = mnet; 258 max_cwnd = mnet->cwnd; 259 } else if (max_cwnd == mnet->cwnd) { 260 uint32_t rndval; 261 uint8_t this_random; 262 263 if (stcb->asoc.hb_random_idx > 3) { 264 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep); 265 memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values)); 266 this_random = stcb->asoc.hb_random_values[0]; 267 stcb->asoc.hb_random_idx++; 268 stcb->asoc.hb_ect_randombit = 0; 269 } else { 270 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx]; 271 stcb->asoc.hb_random_idx++; 272 stcb->asoc.hb_ect_randombit = 0; 273 } 274 if (this_random % 2 == 1) { 275 max_cwnd_net = mnet; 276 max_cwnd = mnet->cwnd; /* Useless? */ 277 } 278 } 279 } 280 if (max_cwnd_net == NULL) { 281 if (min_errors_net == NULL) { 282 return (net); 283 } 284 return (min_errors_net); 285 } else { 286 return (max_cwnd_net); 287 } 288 } /* JRS 5/14/07 - If mode is set to 1, use the 289 * CMT policy for choosing an alternate net. */ 290 else if (mode == 1) { 291 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) { 292 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) || 293 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) { 294 /* 295 * will skip ones that are not-reachable or 296 * unconfirmed 297 */ 298 continue; 299 } 300 if (max_cwnd < mnet->cwnd) { 301 max_cwnd_net = mnet; 302 max_cwnd = mnet->cwnd; 303 } else if (max_cwnd == mnet->cwnd) { 304 uint32_t rndval; 305 uint8_t this_random; 306 307 if (stcb->asoc.hb_random_idx > 3) { 308 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep); 309 memcpy(stcb->asoc.hb_random_values, &rndval, 310 sizeof(stcb->asoc.hb_random_values)); 311 this_random = stcb->asoc.hb_random_values[0]; 312 stcb->asoc.hb_random_idx = 0; 313 stcb->asoc.hb_ect_randombit = 0; 314 } else { 315 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx]; 316 stcb->asoc.hb_random_idx++; 317 stcb->asoc.hb_ect_randombit = 0; 318 } 319 if (this_random % 2) { 320 max_cwnd_net = mnet; 321 max_cwnd = mnet->cwnd; 322 } 323 } 324 } 325 if (max_cwnd_net) { 326 return (max_cwnd_net); 327 } 328 } 329 /* Look for an alternate net, which is active. */ 330 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) { 331 alt = TAILQ_NEXT(net, sctp_next); 332 } else { 333 alt = TAILQ_FIRST(&stcb->asoc.nets); 334 } 335 looped = false; 336 for (;;) { 337 if (alt == NULL) { 338 if (!looped) { 339 alt = TAILQ_FIRST(&stcb->asoc.nets); 340 looped = true; 341 } 342 /* Definitely out of candidates. */ 343 if (alt == NULL) { 344 break; 345 } 346 } 347 if (alt->ro.ro_nh == NULL) { 348 if (alt->ro._s_addr) { 349 sctp_free_ifa(alt->ro._s_addr); 350 alt->ro._s_addr = NULL; 351 } 352 alt->src_addr_selected = 0; 353 } 354 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) && 355 (alt->ro.ro_nh != NULL) && 356 ((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) && 357 (alt != net)) { 358 /* Found an alternate net, which is reachable. */ 359 break; 360 } 361 alt = TAILQ_NEXT(alt, sctp_next); 362 } 363 364 if (alt == NULL) { 365 /* 366 * In case no active alternate net has been found, look for 367 * an alternate net, which is confirmed. 368 */ 369 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) { 370 alt = TAILQ_NEXT(net, sctp_next); 371 } else { 372 alt = TAILQ_FIRST(&stcb->asoc.nets); 373 } 374 looped = false; 375 for (;;) { 376 if (alt == NULL) { 377 if (!looped) { 378 alt = TAILQ_FIRST(&stcb->asoc.nets); 379 looped = true; 380 } 381 /* Definitely out of candidates. */ 382 if (alt == NULL) { 383 break; 384 } 385 } 386 if (((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) && 387 (alt != net)) { 388 /* 389 * Found an alternate net, which is 390 * confirmed. 391 */ 392 break; 393 } 394 alt = TAILQ_NEXT(alt, sctp_next); 395 } 396 } 397 if (alt == NULL) { 398 /* 399 * In case no confirmed alternate net has been found, just 400 * return net, if it is not being deleted. In the other case 401 * just return the first net. 402 */ 403 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) { 404 alt = net; 405 } 406 if (alt == NULL) { 407 alt = TAILQ_FIRST(&stcb->asoc.nets); 408 } 409 } 410 return (alt); 411 } 412 413 static void 414 sctp_backoff_on_timeout(struct sctp_tcb *stcb, 415 struct sctp_nets *net, 416 int win_probe, 417 int num_marked, int num_abandoned) 418 { 419 if (net->RTO == 0) { 420 if (net->RTO_measured) { 421 net->RTO = stcb->asoc.minrto; 422 } else { 423 net->RTO = stcb->asoc.initial_rto; 424 } 425 } 426 net->RTO <<= 1; 427 if (net->RTO > stcb->asoc.maxrto) { 428 net->RTO = stcb->asoc.maxrto; 429 } 430 if ((win_probe == 0) && (num_marked || num_abandoned)) { 431 /* We don't apply penalty to window probe scenarios */ 432 /* JRS - Use the congestion control given in the CC module */ 433 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net); 434 } 435 } 436 437 #ifndef INVARIANTS 438 static void 439 sctp_recover_sent_list(struct sctp_tcb *stcb) 440 { 441 struct sctp_tmit_chunk *chk, *nchk; 442 struct sctp_association *asoc; 443 444 asoc = &stcb->asoc; 445 TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) { 446 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) { 447 SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n", 448 (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq); 449 if (chk->sent != SCTP_DATAGRAM_NR_ACKED) { 450 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) { 451 asoc->strmout[chk->rec.data.sid].chunks_on_queues--; 452 } 453 } 454 if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) && 455 (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) && 456 TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) { 457 asoc->trigger_reset = 1; 458 } 459 TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next); 460 if (PR_SCTP_ENABLED(chk->flags)) { 461 if (asoc->pr_sctp_cnt != 0) 462 asoc->pr_sctp_cnt--; 463 } 464 if (chk->data) { 465 /* sa_ignore NO_NULL_CHK */ 466 sctp_free_bufspace(stcb, asoc, chk, 1); 467 sctp_m_freem(chk->data); 468 chk->data = NULL; 469 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) { 470 asoc->sent_queue_cnt_removeable--; 471 } 472 } 473 asoc->sent_queue_cnt--; 474 sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED); 475 } 476 } 477 SCTP_PRINTF("after recover order is as follows\n"); 478 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) { 479 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn); 480 } 481 } 482 #endif 483 484 static int 485 sctp_mark_all_for_resend(struct sctp_tcb *stcb, 486 struct sctp_nets *net, 487 struct sctp_nets *alt, 488 int window_probe, 489 int *num_marked, 490 int *num_abandoned) 491 { 492 493 /* 494 * Mark all chunks (well not all) that were sent to *net for 495 * retransmission. Move them to alt for there destination as well... 496 * We only mark chunks that have been outstanding long enough to 497 * have received feed-back. 498 */ 499 struct sctp_tmit_chunk *chk, *nchk; 500 struct sctp_nets *lnets; 501 struct timeval now, min_wait, tv; 502 int cur_rto; 503 int cnt_abandoned; 504 int audit_tf, num_mk, fir; 505 unsigned int cnt_mk; 506 uint32_t orig_flight, orig_tf; 507 uint32_t tsnlast, tsnfirst; 508 #ifndef INVARIANTS 509 int recovery_cnt = 0; 510 #endif 511 512 /* none in flight now */ 513 audit_tf = 0; 514 fir = 0; 515 /* 516 * figure out how long a data chunk must be pending before we can 517 * mark it .. 518 */ 519 (void)SCTP_GETTIME_TIMEVAL(&now); 520 /* get cur rto in micro-seconds */ 521 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv; 522 cur_rto *= 1000; 523 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 524 sctp_log_fr(cur_rto, 525 stcb->asoc.peers_rwnd, 526 window_probe, 527 SCTP_FR_T3_MARK_TIME); 528 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT); 529 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT); 530 } 531 tv.tv_sec = cur_rto / 1000000; 532 tv.tv_usec = cur_rto % 1000000; 533 min_wait = now; 534 timevalsub(&min_wait, &tv); 535 if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) { 536 /* 537 * if we hit here, we don't have enough seconds on the clock 538 * to account for the RTO. We just let the lower seconds be 539 * the bounds and don't worry about it. This may mean we 540 * will mark a lot more than we should. 541 */ 542 min_wait.tv_sec = min_wait.tv_usec = 0; 543 } 544 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 545 sctp_log_fr(cur_rto, (uint32_t)now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME); 546 sctp_log_fr(0, (uint32_t)min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME); 547 } 548 /* 549 * Our rwnd will be incorrect here since we are not adding back the 550 * cnt * mbuf but we will fix that down below. 551 */ 552 orig_flight = net->flight_size; 553 orig_tf = stcb->asoc.total_flight; 554 555 net->fast_retran_ip = 0; 556 /* Now on to each chunk */ 557 cnt_abandoned = 0; 558 num_mk = cnt_mk = 0; 559 tsnfirst = tsnlast = 0; 560 #ifndef INVARIANTS 561 start_again: 562 #endif 563 TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) { 564 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) { 565 /* Strange case our list got out of order? */ 566 SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n", 567 (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn); 568 #ifdef INVARIANTS 569 panic("last acked >= chk on sent-Q"); 570 #else 571 recovery_cnt++; 572 SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt); 573 sctp_recover_sent_list(stcb); 574 if (recovery_cnt < 10) { 575 goto start_again; 576 } else { 577 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt); 578 } 579 #endif 580 } 581 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) { 582 /* 583 * found one to mark: If it is less than 584 * DATAGRAM_ACKED it MUST not be a skipped or marked 585 * TSN but instead one that is either already set 586 * for retransmission OR one that needs 587 * retransmission. 588 */ 589 590 /* validate its been outstanding long enough */ 591 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 592 sctp_log_fr(chk->rec.data.tsn, 593 (uint32_t)chk->sent_rcv_time.tv_sec, 594 chk->sent_rcv_time.tv_usec, 595 SCTP_FR_T3_MARK_TIME); 596 } 597 if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) { 598 /* 599 * we have reached a chunk that was sent 600 * some seconds past our min.. forget it we 601 * will find no more to send. 602 */ 603 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 604 sctp_log_fr(0, 605 (uint32_t)chk->sent_rcv_time.tv_sec, 606 chk->sent_rcv_time.tv_usec, 607 SCTP_FR_T3_STOPPED); 608 } 609 continue; 610 } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) && 611 (window_probe == 0)) { 612 /* 613 * we must look at the micro seconds to 614 * know. 615 */ 616 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) { 617 /* 618 * ok it was sent after our boundary 619 * time. 620 */ 621 continue; 622 } 623 } 624 if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) { 625 /* Is it expired? */ 626 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) { 627 /* Yes so drop it */ 628 if (chk->data) { 629 (void)sctp_release_pr_sctp_chunk(stcb, 630 chk, 631 1, 632 SCTP_SO_NOT_LOCKED); 633 cnt_abandoned++; 634 } 635 continue; 636 } 637 } 638 if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) { 639 /* Has it been retransmitted tv_sec times? */ 640 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) { 641 if (chk->data) { 642 (void)sctp_release_pr_sctp_chunk(stcb, 643 chk, 644 1, 645 SCTP_SO_NOT_LOCKED); 646 cnt_abandoned++; 647 } 648 continue; 649 } 650 } 651 if (chk->sent < SCTP_DATAGRAM_RESEND) { 652 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 653 num_mk++; 654 if (fir == 0) { 655 fir = 1; 656 tsnfirst = chk->rec.data.tsn; 657 } 658 tsnlast = chk->rec.data.tsn; 659 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 660 sctp_log_fr(chk->rec.data.tsn, chk->snd_count, 661 0, SCTP_FR_T3_MARKED); 662 } 663 664 if (chk->rec.data.chunk_was_revoked) { 665 /* deflate the cwnd */ 666 chk->whoTo->cwnd -= chk->book_size; 667 chk->rec.data.chunk_was_revoked = 0; 668 } 669 net->marked_retrans++; 670 stcb->asoc.marked_retrans++; 671 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) { 672 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO, 673 chk->whoTo->flight_size, 674 chk->book_size, 675 (uint32_t)(uintptr_t)chk->whoTo, 676 chk->rec.data.tsn); 677 } 678 sctp_flight_size_decrease(chk); 679 sctp_total_flight_decrease(stcb, chk); 680 stcb->asoc.peers_rwnd += chk->send_size; 681 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh); 682 } 683 chk->sent = SCTP_DATAGRAM_RESEND; 684 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK; 685 SCTP_STAT_INCR(sctps_markedretrans); 686 687 /* reset the TSN for striking and other FR stuff */ 688 chk->rec.data.doing_fast_retransmit = 0; 689 /* Clear any time so NO RTT is being done */ 690 691 if (chk->do_rtt) { 692 if (chk->whoTo->rto_needed == 0) { 693 chk->whoTo->rto_needed = 1; 694 } 695 } 696 chk->do_rtt = 0; 697 if (alt != net) { 698 sctp_free_remote_addr(chk->whoTo); 699 chk->no_fr_allowed = 1; 700 chk->whoTo = alt; 701 atomic_add_int(&alt->ref_count, 1); 702 } else { 703 chk->no_fr_allowed = 0; 704 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) { 705 chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq; 706 } else { 707 chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn; 708 } 709 } 710 /* 711 * CMT: Do not allow FRs on retransmitted TSNs. 712 */ 713 if (stcb->asoc.sctp_cmt_on_off > 0) { 714 chk->no_fr_allowed = 1; 715 } 716 #ifdef THIS_SHOULD_NOT_BE_DONE 717 } else if (chk->sent == SCTP_DATAGRAM_ACKED) { 718 /* remember highest acked one */ 719 could_be_sent = chk; 720 #endif 721 } 722 if (chk->sent == SCTP_DATAGRAM_RESEND) { 723 cnt_mk++; 724 } 725 } 726 if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) { 727 /* we did not subtract the same things? */ 728 audit_tf = 1; 729 } 730 731 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 732 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT); 733 } 734 #ifdef SCTP_DEBUG 735 if (num_mk) { 736 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n", 737 tsnlast); 738 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n", 739 num_mk, 740 stcb->asoc.peers_rwnd); 741 } 742 #endif 743 *num_marked = num_mk; 744 *num_abandoned = cnt_abandoned; 745 /* 746 * Now check for a ECN Echo that may be stranded And include the 747 * cnt_mk'd to have all resends in the control queue. 748 */ 749 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 750 if (chk->sent == SCTP_DATAGRAM_RESEND) { 751 cnt_mk++; 752 } 753 if ((chk->whoTo == net) && 754 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 755 sctp_free_remote_addr(chk->whoTo); 756 chk->whoTo = alt; 757 if (chk->sent != SCTP_DATAGRAM_RESEND) { 758 chk->sent = SCTP_DATAGRAM_RESEND; 759 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK; 760 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 761 cnt_mk++; 762 } 763 atomic_add_int(&alt->ref_count, 1); 764 } 765 } 766 #ifdef THIS_SHOULD_NOT_BE_DONE 767 if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) { 768 /* fix it so we retransmit the highest acked anyway */ 769 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 770 cnt_mk++; 771 could_be_sent->sent = SCTP_DATAGRAM_RESEND; 772 } 773 #endif 774 if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) { 775 #ifdef INVARIANTS 776 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n", 777 cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk); 778 #endif 779 #ifndef SCTP_AUDITING_ENABLED 780 stcb->asoc.sent_queue_retran_cnt = cnt_mk; 781 #endif 782 } 783 if (audit_tf) { 784 SCTPDBG(SCTP_DEBUG_TIMER4, 785 "Audit total flight due to negative value net:%p\n", 786 (void *)net); 787 stcb->asoc.total_flight = 0; 788 stcb->asoc.total_flight_count = 0; 789 /* Clear all networks flight size */ 790 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) { 791 lnets->flight_size = 0; 792 SCTPDBG(SCTP_DEBUG_TIMER4, 793 "Net:%p c-f cwnd:%d ssthresh:%d\n", 794 (void *)lnets, lnets->cwnd, lnets->ssthresh); 795 } 796 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) { 797 if (chk->sent < SCTP_DATAGRAM_RESEND) { 798 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) { 799 sctp_misc_ints(SCTP_FLIGHT_LOG_UP, 800 chk->whoTo->flight_size, 801 chk->book_size, 802 (uint32_t)(uintptr_t)chk->whoTo, 803 chk->rec.data.tsn); 804 } 805 806 sctp_flight_size_increase(chk); 807 sctp_total_flight_increase(stcb, chk); 808 } 809 } 810 } 811 /* We return 1 if we only have a window probe outstanding */ 812 return (0); 813 } 814 815 int 816 sctp_t3rxt_timer(struct sctp_inpcb *inp, 817 struct sctp_tcb *stcb, 818 struct sctp_nets *net) 819 { 820 struct sctp_nets *alt; 821 int win_probe, num_mk, num_abandoned; 822 823 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) { 824 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT); 825 } 826 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) { 827 struct sctp_nets *lnet; 828 829 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) { 830 if (net == lnet) { 831 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3); 832 } else { 833 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3); 834 } 835 } 836 } 837 /* Find an alternate and mark those for retransmission */ 838 if ((stcb->asoc.peers_rwnd == 0) && 839 (stcb->asoc.total_flight < net->mtu)) { 840 SCTP_STAT_INCR(sctps_timowindowprobe); 841 win_probe = 1; 842 } else { 843 win_probe = 0; 844 } 845 846 if (win_probe == 0) { 847 /* We don't do normal threshold management on window probes */ 848 if (sctp_threshold_management(inp, stcb, net, 849 stcb->asoc.max_send_times)) { 850 /* Association was destroyed */ 851 return (1); 852 } else { 853 if (net != stcb->asoc.primary_destination) { 854 /* send a immediate HB if our RTO is stale */ 855 struct timeval now; 856 uint32_t ms_goneby; 857 858 (void)SCTP_GETTIME_TIMEVAL(&now); 859 if (net->last_sent_time.tv_sec) { 860 ms_goneby = (uint32_t)(now.tv_sec - net->last_sent_time.tv_sec) * 1000; 861 } else { 862 ms_goneby = 0; 863 } 864 if ((net->dest_state & SCTP_ADDR_PF) == 0) { 865 if ((ms_goneby > net->RTO) || (net->RTO == 0)) { 866 /* 867 * no recent feed back in an 868 * RTO or more, request a 869 * RTT update 870 */ 871 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 872 } 873 } 874 } 875 } 876 } else { 877 /* 878 * For a window probe we don't penalize the net's but only 879 * the association. This may fail it if SACKs are not coming 880 * back. If sack's are coming with rwnd locked at 0, we will 881 * continue to hold things waiting for rwnd to raise 882 */ 883 if (sctp_threshold_management(inp, stcb, NULL, 884 stcb->asoc.max_send_times)) { 885 /* Association was destroyed */ 886 return (1); 887 } 888 } 889 if (stcb->asoc.sctp_cmt_on_off > 0) { 890 if (net->pf_threshold < net->failure_threshold) { 891 alt = sctp_find_alternate_net(stcb, net, 2); 892 } else { 893 /* 894 * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is 895 * being used, then pick dest with largest ssthresh 896 * for any retransmission. 897 */ 898 alt = sctp_find_alternate_net(stcb, net, 1); 899 /* 900 * CUCv2: If a different dest is picked for the 901 * retransmission, then new (rtx-)pseudo_cumack 902 * needs to be tracked for orig dest. Let CUCv2 903 * track new (rtx-) pseudo-cumack always. 904 */ 905 net->find_pseudo_cumack = 1; 906 net->find_rtx_pseudo_cumack = 1; 907 } 908 } else { 909 alt = sctp_find_alternate_net(stcb, net, 0); 910 } 911 912 num_mk = 0; 913 num_abandoned = 0; 914 (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe, 915 &num_mk, &num_abandoned); 916 /* FR Loss recovery just ended with the T3. */ 917 stcb->asoc.fast_retran_loss_recovery = 0; 918 919 /* CMT FR loss recovery ended with the T3 */ 920 net->fast_retran_loss_recovery = 0; 921 if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) && 922 (net->flight_size == 0)) { 923 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net); 924 } 925 926 /* 927 * setup the sat loss recovery that prevents satellite cwnd advance. 928 */ 929 stcb->asoc.sat_t3_loss_recovery = 1; 930 stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq; 931 932 /* Backoff the timer and cwnd */ 933 sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned); 934 if (((net->dest_state & SCTP_ADDR_REACHABLE) == 0) || 935 (net->dest_state & SCTP_ADDR_PF)) { 936 /* Move all pending over too */ 937 sctp_move_chunks_from_net(stcb, net); 938 939 /* 940 * Get the address that failed, to force a new src address 941 * selection and a route allocation. 942 */ 943 if (net->ro._s_addr != NULL) { 944 sctp_free_ifa(net->ro._s_addr); 945 net->ro._s_addr = NULL; 946 } 947 net->src_addr_selected = 0; 948 949 /* Force a route allocation too */ 950 RO_NHFREE(&net->ro); 951 952 /* Was it our primary? */ 953 if ((stcb->asoc.primary_destination == net) && (alt != net)) { 954 /* 955 * Yes, note it as such and find an alternate note: 956 * this means HB code must use this to resent the 957 * primary if it goes active AND if someone does a 958 * change-primary then this flag must be cleared 959 * from any net structures. 960 */ 961 if (stcb->asoc.alternate != NULL) { 962 sctp_free_remote_addr(stcb->asoc.alternate); 963 } 964 stcb->asoc.alternate = alt; 965 atomic_add_int(&stcb->asoc.alternate->ref_count, 1); 966 } 967 } 968 /* 969 * Special case for cookie-echo'ed case, we don't do output but must 970 * await the COOKIE-ACK before retransmission 971 */ 972 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) { 973 /* 974 * Here we just reset the timer and start again since we 975 * have not established the asoc 976 */ 977 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net); 978 return (0); 979 } 980 if (stcb->asoc.prsctp_supported) { 981 struct sctp_tmit_chunk *lchk; 982 983 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc); 984 /* C3. See if we need to send a Fwd-TSN */ 985 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) { 986 send_forward_tsn(stcb, &stcb->asoc); 987 for (; lchk != NULL; lchk = TAILQ_NEXT(lchk, sctp_next)) { 988 if (lchk->whoTo != NULL) { 989 break; 990 } 991 } 992 if (lchk != NULL) { 993 /* Assure a timer is up */ 994 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo); 995 } 996 } 997 } 998 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) { 999 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX); 1000 } 1001 return (0); 1002 } 1003 1004 int 1005 sctp_t1init_timer(struct sctp_inpcb *inp, 1006 struct sctp_tcb *stcb, 1007 struct sctp_nets *net) 1008 { 1009 /* bump the thresholds */ 1010 if (stcb->asoc.delayed_connection) { 1011 /* 1012 * special hook for delayed connection. The library did NOT 1013 * complete the rest of its sends. 1014 */ 1015 stcb->asoc.delayed_connection = 0; 1016 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED); 1017 return (0); 1018 } 1019 if (SCTP_GET_STATE(stcb) != SCTP_STATE_COOKIE_WAIT) { 1020 return (0); 1021 } 1022 if (sctp_threshold_management(inp, stcb, net, 1023 stcb->asoc.max_init_times)) { 1024 /* Association was destroyed */ 1025 return (1); 1026 } 1027 stcb->asoc.dropped_special_cnt = 0; 1028 sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0); 1029 if (stcb->asoc.initial_init_rto_max < net->RTO) { 1030 net->RTO = stcb->asoc.initial_init_rto_max; 1031 } 1032 if (stcb->asoc.numnets > 1) { 1033 /* If we have more than one addr use it */ 1034 struct sctp_nets *alt; 1035 1036 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0); 1037 if (alt != stcb->asoc.primary_destination) { 1038 sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination); 1039 stcb->asoc.primary_destination = alt; 1040 } 1041 } 1042 /* Send out a new init */ 1043 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED); 1044 return (0); 1045 } 1046 1047 /* 1048 * For cookie and asconf we actually need to find and mark for resend, then 1049 * increment the resend counter (after all the threshold management stuff of 1050 * course). 1051 */ 1052 int 1053 sctp_cookie_timer(struct sctp_inpcb *inp, 1054 struct sctp_tcb *stcb, 1055 struct sctp_nets *net SCTP_UNUSED) 1056 { 1057 struct sctp_nets *alt; 1058 struct sctp_tmit_chunk *cookie; 1059 1060 /* first before all else we must find the cookie */ 1061 TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) { 1062 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) { 1063 break; 1064 } 1065 } 1066 if (cookie == NULL) { 1067 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) { 1068 /* FOOBAR! */ 1069 struct mbuf *op_err; 1070 1071 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code), 1072 "Cookie timer expired, but no cookie"); 1073 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3; 1074 sctp_abort_an_association(inp, stcb, op_err, false, SCTP_SO_NOT_LOCKED); 1075 } else { 1076 #ifdef INVARIANTS 1077 panic("Cookie timer expires in wrong state?"); 1078 #else 1079 SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(stcb)); 1080 return (0); 1081 #endif 1082 } 1083 return (0); 1084 } 1085 /* Ok we found the cookie, threshold management next */ 1086 if (sctp_threshold_management(inp, stcb, cookie->whoTo, 1087 stcb->asoc.max_init_times)) { 1088 /* Assoc is over */ 1089 return (1); 1090 } 1091 /* 1092 * Cleared threshold management, now lets backoff the address and 1093 * select an alternate 1094 */ 1095 stcb->asoc.dropped_special_cnt = 0; 1096 sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0); 1097 alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0); 1098 if (alt != cookie->whoTo) { 1099 sctp_free_remote_addr(cookie->whoTo); 1100 cookie->whoTo = alt; 1101 atomic_add_int(&alt->ref_count, 1); 1102 } 1103 /* Now mark the retran info */ 1104 if (cookie->sent != SCTP_DATAGRAM_RESEND) { 1105 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1106 } 1107 cookie->sent = SCTP_DATAGRAM_RESEND; 1108 cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1109 /* 1110 * Now call the output routine to kick out the cookie again, Note we 1111 * don't mark any chunks for retran so that FR will need to kick in 1112 * to move these (or a send timer). 1113 */ 1114 return (0); 1115 } 1116 1117 int 1118 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb) 1119 { 1120 struct sctp_nets *alt, *net; 1121 struct sctp_tmit_chunk *strrst = NULL, *chk = NULL; 1122 1123 if (stcb->asoc.stream_reset_outstanding == 0) { 1124 return (0); 1125 } 1126 /* find the existing STRRESET, we use the seq number we sent out on */ 1127 (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst); 1128 if (strrst == NULL) { 1129 return (0); 1130 } 1131 net = strrst->whoTo; 1132 /* do threshold management */ 1133 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1134 /* Assoc is over */ 1135 return (1); 1136 } 1137 /* 1138 * Cleared threshold management, now lets backoff the address and 1139 * select an alternate 1140 */ 1141 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1142 alt = sctp_find_alternate_net(stcb, net, 0); 1143 strrst->whoTo = alt; 1144 atomic_add_int(&alt->ref_count, 1); 1145 1146 /* See if a ECN Echo is also stranded */ 1147 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 1148 if ((chk->whoTo == net) && 1149 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 1150 sctp_free_remote_addr(chk->whoTo); 1151 if (chk->sent != SCTP_DATAGRAM_RESEND) { 1152 chk->sent = SCTP_DATAGRAM_RESEND; 1153 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1154 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1155 } 1156 chk->whoTo = alt; 1157 atomic_add_int(&alt->ref_count, 1); 1158 } 1159 } 1160 if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) { 1161 /* 1162 * If the address went un-reachable, we need to move to 1163 * alternates for ALL chk's in queue 1164 */ 1165 sctp_move_chunks_from_net(stcb, net); 1166 } 1167 sctp_free_remote_addr(net); 1168 1169 /* mark the retran info */ 1170 if (strrst->sent != SCTP_DATAGRAM_RESEND) 1171 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1172 strrst->sent = SCTP_DATAGRAM_RESEND; 1173 strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1174 1175 /* restart the timer */ 1176 sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, alt); 1177 return (0); 1178 } 1179 1180 int 1181 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1182 struct sctp_nets *net) 1183 { 1184 struct sctp_nets *alt; 1185 struct sctp_tmit_chunk *asconf, *chk; 1186 1187 /* is this a first send, or a retransmission? */ 1188 if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) { 1189 /* compose a new ASCONF chunk and send it */ 1190 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED); 1191 } else { 1192 /* 1193 * Retransmission of the existing ASCONF is needed 1194 */ 1195 1196 /* find the existing ASCONF */ 1197 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue); 1198 if (asconf == NULL) { 1199 return (0); 1200 } 1201 net = asconf->whoTo; 1202 /* do threshold management */ 1203 if (sctp_threshold_management(inp, stcb, net, 1204 stcb->asoc.max_send_times)) { 1205 /* Assoc is over */ 1206 return (1); 1207 } 1208 if (asconf->snd_count > stcb->asoc.max_send_times) { 1209 /* 1210 * Something is rotten: our peer is not responding 1211 * to ASCONFs but apparently is to other chunks. 1212 * i.e. it is not properly handling the chunk type 1213 * upper bits. Mark this peer as ASCONF incapable 1214 * and cleanup. 1215 */ 1216 SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n"); 1217 sctp_asconf_cleanup(stcb); 1218 return (0); 1219 } 1220 /* 1221 * cleared threshold management, so now backoff the net and 1222 * select an alternate 1223 */ 1224 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1225 alt = sctp_find_alternate_net(stcb, net, 0); 1226 if (asconf->whoTo != alt) { 1227 asconf->whoTo = alt; 1228 atomic_add_int(&alt->ref_count, 1); 1229 } 1230 1231 /* See if an ECN Echo is also stranded */ 1232 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) { 1233 if ((chk->whoTo == net) && 1234 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) { 1235 sctp_free_remote_addr(chk->whoTo); 1236 chk->whoTo = alt; 1237 if (chk->sent != SCTP_DATAGRAM_RESEND) { 1238 chk->sent = SCTP_DATAGRAM_RESEND; 1239 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1240 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1241 } 1242 atomic_add_int(&alt->ref_count, 1); 1243 } 1244 } 1245 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) { 1246 if (chk->whoTo != alt) { 1247 sctp_free_remote_addr(chk->whoTo); 1248 chk->whoTo = alt; 1249 atomic_add_int(&alt->ref_count, 1); 1250 } 1251 if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT) 1252 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1253 chk->sent = SCTP_DATAGRAM_RESEND; 1254 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1255 } 1256 if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) { 1257 /* 1258 * If the address went un-reachable, we need to move 1259 * to the alternate for ALL chunks in queue 1260 */ 1261 sctp_move_chunks_from_net(stcb, net); 1262 } 1263 sctp_free_remote_addr(net); 1264 1265 /* mark the retran info */ 1266 if (asconf->sent != SCTP_DATAGRAM_RESEND) 1267 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt); 1268 asconf->sent = SCTP_DATAGRAM_RESEND; 1269 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK; 1270 1271 /* send another ASCONF if any and we can do */ 1272 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED); 1273 } 1274 return (0); 1275 } 1276 1277 /* Mobility adaptation */ 1278 void 1279 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb) 1280 { 1281 if (stcb->asoc.deleted_primary == NULL) { 1282 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n"); 1283 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 1284 return; 1285 } 1286 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary "); 1287 SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa); 1288 sctp_free_remote_addr(stcb->asoc.deleted_primary); 1289 stcb->asoc.deleted_primary = NULL; 1290 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED); 1291 return; 1292 } 1293 1294 /* 1295 * For the shutdown and shutdown-ack, we do not keep one around on the 1296 * control queue. This means we must generate a new one and call the general 1297 * chunk output routine, AFTER having done threshold management. 1298 * It is assumed that net is non-NULL. 1299 */ 1300 int 1301 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1302 struct sctp_nets *net) 1303 { 1304 struct sctp_nets *alt; 1305 1306 /* first threshold management */ 1307 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1308 /* Assoc is over */ 1309 return (1); 1310 } 1311 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1312 /* second select an alternative */ 1313 alt = sctp_find_alternate_net(stcb, net, 0); 1314 1315 /* third generate a shutdown into the queue for out net */ 1316 sctp_send_shutdown(stcb, alt); 1317 1318 /* fourth restart timer */ 1319 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt); 1320 return (0); 1321 } 1322 1323 int 1324 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1325 struct sctp_nets *net) 1326 { 1327 struct sctp_nets *alt; 1328 1329 /* first threshold management */ 1330 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1331 /* Assoc is over */ 1332 return (1); 1333 } 1334 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1335 /* second select an alternative */ 1336 alt = sctp_find_alternate_net(stcb, net, 0); 1337 1338 /* third generate a shutdown into the queue for out net */ 1339 sctp_send_shutdown_ack(stcb, alt); 1340 1341 /* fourth restart timer */ 1342 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt); 1343 return (0); 1344 } 1345 1346 static void 1347 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp, struct sctp_tcb *stcb) 1348 { 1349 struct sctp_stream_queue_pending *sp; 1350 unsigned int i, chks_in_queue = 0; 1351 int being_filled = 0; 1352 1353 KASSERT(inp != NULL, ("inp is NULL")); 1354 KASSERT(stcb != NULL, ("stcb is NULL")); 1355 SCTP_TCB_LOCK_ASSERT(stcb); 1356 KASSERT(TAILQ_EMPTY(&stcb->asoc.send_queue), ("send_queue not empty")); 1357 KASSERT(TAILQ_EMPTY(&stcb->asoc.sent_queue), ("sent_queue not empty")); 1358 1359 if (stcb->asoc.sent_queue_retran_cnt) { 1360 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n", 1361 stcb->asoc.sent_queue_retran_cnt); 1362 stcb->asoc.sent_queue_retran_cnt = 0; 1363 } 1364 if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) { 1365 /* No stream scheduler information, initialize scheduler */ 1366 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc); 1367 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) { 1368 /* yep, we lost a stream or two */ 1369 SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n"); 1370 } else { 1371 /* no streams lost */ 1372 stcb->asoc.total_output_queue_size = 0; 1373 } 1374 } 1375 /* Check to see if some data queued, if so report it */ 1376 for (i = 0; i < stcb->asoc.streamoutcnt; i++) { 1377 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) { 1378 TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) { 1379 if (sp->msg_is_complete) 1380 being_filled++; 1381 chks_in_queue++; 1382 } 1383 } 1384 } 1385 if (chks_in_queue != stcb->asoc.stream_queue_cnt) { 1386 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n", 1387 stcb->asoc.stream_queue_cnt, chks_in_queue); 1388 } 1389 if (chks_in_queue) { 1390 /* call the output queue function */ 1391 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED); 1392 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) && 1393 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) { 1394 /* 1395 * Probably should go in and make it go back through 1396 * and add fragments allowed 1397 */ 1398 if (being_filled == 0) { 1399 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n", 1400 chks_in_queue); 1401 } 1402 } 1403 } else { 1404 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n", 1405 (u_long)stcb->asoc.total_output_queue_size); 1406 stcb->asoc.total_output_queue_size = 0; 1407 } 1408 } 1409 1410 int 1411 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb, 1412 struct sctp_nets *net) 1413 { 1414 bool net_was_pf; 1415 1416 net_was_pf = (net->dest_state & SCTP_ADDR_PF) != 0; 1417 if (net->hb_responded == 0) { 1418 if (net->ro._s_addr != NULL) { 1419 /* 1420 * Invalidate the src address if we did not get a 1421 * response last time. 1422 */ 1423 sctp_free_ifa(net->ro._s_addr); 1424 net->ro._s_addr = NULL; 1425 net->src_addr_selected = 0; 1426 } 1427 sctp_backoff_on_timeout(stcb, net, 1, 0, 0); 1428 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) { 1429 /* Assoc is over */ 1430 return (1); 1431 } 1432 } 1433 /* Zero PBA, if it needs it */ 1434 if (net->partial_bytes_acked > 0) { 1435 net->partial_bytes_acked = 0; 1436 } 1437 if ((stcb->asoc.total_output_queue_size > 0) && 1438 (TAILQ_EMPTY(&stcb->asoc.send_queue)) && 1439 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) { 1440 sctp_audit_stream_queues_for_size(inp, stcb); 1441 } 1442 if ((((net->dest_state & SCTP_ADDR_NOHB) == 0) || 1443 (net->dest_state & SCTP_ADDR_UNCONFIRMED)) && 1444 (net_was_pf || ((net->dest_state & SCTP_ADDR_PF) == 0))) { 1445 /* 1446 * When moving to PF during threshold management, a HB has 1447 * been queued in that routine. 1448 */ 1449 uint32_t ms_gone_by; 1450 1451 if ((net->last_sent_time.tv_sec > 0) || 1452 (net->last_sent_time.tv_usec > 0)) { 1453 struct timeval diff; 1454 1455 SCTP_GETTIME_TIMEVAL(&diff); 1456 timevalsub(&diff, &net->last_sent_time); 1457 ms_gone_by = (uint32_t)(diff.tv_sec * 1000) + 1458 (uint32_t)(diff.tv_usec / 1000); 1459 } else { 1460 ms_gone_by = 0xffffffff; 1461 } 1462 if ((ms_gone_by >= net->heart_beat_delay) || 1463 (net->dest_state & SCTP_ADDR_UNCONFIRMED) || 1464 (net->dest_state & SCTP_ADDR_PF)) { 1465 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED); 1466 } 1467 } 1468 return (0); 1469 } 1470 1471 void 1472 sctp_pathmtu_timer(struct sctp_inpcb *inp, 1473 struct sctp_tcb *stcb, 1474 struct sctp_nets *net) 1475 { 1476 uint32_t next_mtu, mtu; 1477 1478 next_mtu = sctp_get_next_mtu(net->mtu); 1479 1480 if ((next_mtu > net->mtu) && (net->port == 0)) { 1481 if ((net->src_addr_selected == 0) || 1482 (net->ro._s_addr == NULL) || 1483 (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) { 1484 if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) { 1485 sctp_free_ifa(net->ro._s_addr); 1486 net->ro._s_addr = NULL; 1487 net->src_addr_selected = 0; 1488 } else if (net->ro._s_addr == NULL) { 1489 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE) 1490 if (net->ro._l_addr.sa.sa_family == AF_INET6) { 1491 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1492 1493 /* KAME hack: embed scopeid */ 1494 (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone)); 1495 } 1496 #endif 1497 1498 net->ro._s_addr = sctp_source_address_selection(inp, 1499 stcb, 1500 (sctp_route_t *)&net->ro, 1501 net, 0, stcb->asoc.vrf_id); 1502 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE) 1503 if (net->ro._l_addr.sa.sa_family == AF_INET6) { 1504 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr; 1505 1506 (void)sa6_recoverscope(sin6); 1507 } 1508 #endif /* INET6 */ 1509 } 1510 if (net->ro._s_addr) 1511 net->src_addr_selected = 1; 1512 } 1513 if (net->ro._s_addr) { 1514 mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_nh); 1515 #if defined(INET) || defined(INET6) 1516 if (net->port) { 1517 mtu -= sizeof(struct udphdr); 1518 } 1519 #endif 1520 if (mtu > next_mtu) { 1521 net->mtu = next_mtu; 1522 } else { 1523 net->mtu = mtu; 1524 } 1525 } 1526 } 1527 /* restart the timer */ 1528 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net); 1529 } 1530 1531 void 1532 sctp_autoclose_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb) 1533 { 1534 struct timeval tn, *tim_touse; 1535 struct sctp_association *asoc; 1536 uint32_t ticks_gone_by; 1537 1538 (void)SCTP_GETTIME_TIMEVAL(&tn); 1539 if (stcb->asoc.sctp_autoclose_ticks > 0 && 1540 sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) { 1541 /* Auto close is on */ 1542 asoc = &stcb->asoc; 1543 /* pick the time to use */ 1544 if (asoc->time_last_rcvd.tv_sec > 1545 asoc->time_last_sent.tv_sec) { 1546 tim_touse = &asoc->time_last_rcvd; 1547 } else { 1548 tim_touse = &asoc->time_last_sent; 1549 } 1550 /* Now has long enough transpired to autoclose? */ 1551 ticks_gone_by = sctp_secs_to_ticks((uint32_t)(tn.tv_sec - tim_touse->tv_sec)); 1552 if (ticks_gone_by >= asoc->sctp_autoclose_ticks) { 1553 /* 1554 * autoclose time has hit, call the output routine, 1555 * which should do nothing just to be SURE we don't 1556 * have hanging data. We can then safely check the 1557 * queues and know that we are clear to send 1558 * shutdown 1559 */ 1560 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED); 1561 /* Are we clean? */ 1562 if (TAILQ_EMPTY(&asoc->send_queue) && 1563 TAILQ_EMPTY(&asoc->sent_queue)) { 1564 /* 1565 * there is nothing queued to send, so I'm 1566 * done... 1567 */ 1568 if (SCTP_GET_STATE(stcb) != SCTP_STATE_SHUTDOWN_SENT) { 1569 /* only send SHUTDOWN 1st time thru */ 1570 struct sctp_nets *net; 1571 1572 if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) || 1573 (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) { 1574 SCTP_STAT_DECR_GAUGE32(sctps_currestab); 1575 } 1576 SCTP_SET_STATE(stcb, SCTP_STATE_SHUTDOWN_SENT); 1577 sctp_stop_timers_for_shutdown(stcb); 1578 if (stcb->asoc.alternate) { 1579 net = stcb->asoc.alternate; 1580 } else { 1581 net = stcb->asoc.primary_destination; 1582 } 1583 sctp_send_shutdown(stcb, net); 1584 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, 1585 stcb->sctp_ep, stcb, net); 1586 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, 1587 stcb->sctp_ep, stcb, NULL); 1588 } 1589 } 1590 } else { 1591 /* 1592 * No auto close at this time, reset t-o to check 1593 * later 1594 */ 1595 uint32_t tmp; 1596 1597 /* fool the timer startup to use the time left */ 1598 tmp = asoc->sctp_autoclose_ticks; 1599 asoc->sctp_autoclose_ticks -= ticks_gone_by; 1600 sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb, NULL); 1601 /* restore the real tick value */ 1602 asoc->sctp_autoclose_ticks = tmp; 1603 } 1604 } 1605 } 1606