xref: /freebsd/sys/netinet/sctputil.c (revision 2c62ba737707294f6bc4b6b31a73967ec63df003)
1f8829a4aSRandall Stewart /*-
2830d754dSRandall Stewart  * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved.
3807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
4807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
5f8829a4aSRandall Stewart  *
6f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
7f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
8f8829a4aSRandall Stewart  *
9f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
10f8829a4aSRandall Stewart  *    this list of conditions and the following disclaimer.
11f8829a4aSRandall Stewart  *
12f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
13f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
14f8829a4aSRandall Stewart  *    the documentation and/or other materials provided with the distribution.
15f8829a4aSRandall Stewart  *
16f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
18f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
19f8829a4aSRandall Stewart  *
20f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
31f8829a4aSRandall Stewart  */
32f8829a4aSRandall Stewart 
33f8829a4aSRandall Stewart #include <sys/cdefs.h>
34f8829a4aSRandall Stewart __FBSDID("$FreeBSD$");
35f8829a4aSRandall Stewart 
36f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
37f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
38f8829a4aSRandall Stewart #include <netinet/sctputil.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
4042551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
41f8829a4aSRandall Stewart #ifdef INET6
423a51a264SMichael Tuexen #include <netinet6/sctp6_var.h>
43f8829a4aSRandall Stewart #endif
44f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
45f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
46f8829a4aSRandall Stewart #include <netinet/sctp_uio.h>
47f8829a4aSRandall Stewart #include <netinet/sctp_timer.h>
48f8829a4aSRandall Stewart #include <netinet/sctp_indata.h>/* for sctp_deliver_data() */
49f8829a4aSRandall Stewart #include <netinet/sctp_auth.h>
50f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
51f7517433SRandall Stewart #include <netinet/sctp_bsd_addr.h>
5210e0318aSMichael Tuexen #if defined(INET6) || defined(INET)
5310e0318aSMichael Tuexen #include <netinet/tcp_var.h>
5410e0318aSMichael Tuexen #endif
553a51a264SMichael Tuexen #include <netinet/udp.h>
563a51a264SMichael Tuexen #include <netinet/udp_var.h>
573a51a264SMichael Tuexen #include <sys/proc.h>
58fd7af143SMichael Tuexen #ifdef INET6
59fd7af143SMichael Tuexen #include <netinet/icmp6.h>
60fd7af143SMichael Tuexen #endif
61f8829a4aSRandall Stewart 
62f8829a4aSRandall Stewart 
63b9e7085aSRandall Stewart #ifndef KTR_SCTP
64b9e7085aSRandall Stewart #define KTR_SCTP KTR_SUBSYS
6580fefe0aSRandall Stewart #endif
66f8829a4aSRandall Stewart 
67ed654363SMichael Tuexen extern const struct sctp_cc_functions sctp_cc_functions[];
68ed654363SMichael Tuexen extern const struct sctp_ss_functions sctp_ss_functions[];
690e9a9c10SMichael Tuexen 
70f8829a4aSRandall Stewart void
71dcb68fbaSMichael Tuexen sctp_sblog(struct sockbuf *sb, struct sctp_tcb *stcb, int from, int incr)
72f8829a4aSRandall Stewart {
7380fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
74f8829a4aSRandall Stewart 
7580fefe0aSRandall Stewart 	sctp_clog.x.sb.stcb = stcb;
764e88d37aSMichael Tuexen 	sctp_clog.x.sb.so_sbcc = sb->sb_cc;
77f8829a4aSRandall Stewart 	if (stcb)
784e88d37aSMichael Tuexen 		sctp_clog.x.sb.stcb_sbcc = stcb->asoc.sb_cc;
79f8829a4aSRandall Stewart 	else
8080fefe0aSRandall Stewart 		sctp_clog.x.sb.stcb_sbcc = 0;
8180fefe0aSRandall Stewart 	sctp_clog.x.sb.incr = incr;
82c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
8380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SB,
8480fefe0aSRandall Stewart 	    from,
8580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
8680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
8780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
8880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
89f8829a4aSRandall Stewart }
90f8829a4aSRandall Stewart 
91f8829a4aSRandall Stewart void
92f8829a4aSRandall Stewart sctp_log_closing(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int16_t loc)
93f8829a4aSRandall Stewart {
9480fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
95f8829a4aSRandall Stewart 
9680fefe0aSRandall Stewart 	sctp_clog.x.close.inp = (void *)inp;
9780fefe0aSRandall Stewart 	sctp_clog.x.close.sctp_flags = inp->sctp_flags;
98f8829a4aSRandall Stewart 	if (stcb) {
9980fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = (void *)stcb;
10080fefe0aSRandall Stewart 		sctp_clog.x.close.state = (uint16_t)stcb->asoc.state;
101f8829a4aSRandall Stewart 	} else {
10280fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = 0;
10380fefe0aSRandall Stewart 		sctp_clog.x.close.state = 0;
104f8829a4aSRandall Stewart 	}
10580fefe0aSRandall Stewart 	sctp_clog.x.close.loc = loc;
106c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
10780fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CLOSE,
10880fefe0aSRandall Stewart 	    0,
10980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
11080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
11180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
11280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
113f8829a4aSRandall Stewart }
114f8829a4aSRandall Stewart 
115f8829a4aSRandall Stewart void
116f8829a4aSRandall Stewart rto_logging(struct sctp_nets *net, int from)
117f8829a4aSRandall Stewart {
11880fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
119f8829a4aSRandall Stewart 
120bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
12180fefe0aSRandall Stewart 	sctp_clog.x.rto.net = (void *)net;
122be1d9176SMichael Tuexen 	sctp_clog.x.rto.rtt = net->rtt / 1000;
123c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
12480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RTT,
12580fefe0aSRandall Stewart 	    from,
12680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
12780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
12880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
12980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
130f8829a4aSRandall Stewart }
131f8829a4aSRandall Stewart 
132f8829a4aSRandall Stewart void
1336a91f103SRandall Stewart sctp_log_strm_del_alt(struct sctp_tcb *stcb, uint32_t tsn, uint16_t sseq, uint16_t stream, int from)
134f8829a4aSRandall Stewart {
13580fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
136f8829a4aSRandall Stewart 
13780fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = stcb;
13880fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = tsn;
13980fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_sseq = sseq;
14080fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_tsn = 0;
14180fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_sseq = 0;
14280fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = stream;
143c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
14480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
14580fefe0aSRandall Stewart 	    from,
14680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
14780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
14880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
14980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
150f8829a4aSRandall Stewart }
151f8829a4aSRandall Stewart 
152f8829a4aSRandall Stewart void
153f8829a4aSRandall Stewart sctp_log_nagle_event(struct sctp_tcb *stcb, int action)
154f8829a4aSRandall Stewart {
15580fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
156f8829a4aSRandall Stewart 
15780fefe0aSRandall Stewart 	sctp_clog.x.nagle.stcb = (void *)stcb;
15880fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_flight = stcb->asoc.total_flight;
15980fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_in_queue = stcb->asoc.total_output_queue_size;
16080fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_queue = stcb->asoc.chunks_on_out_queue;
16180fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_flight = stcb->asoc.total_flight_count;
162c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
16380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_NAGLE,
16480fefe0aSRandall Stewart 	    action,
16580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
16680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
16780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
16880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
169f8829a4aSRandall Stewart }
170f8829a4aSRandall Stewart 
171f8829a4aSRandall Stewart void
172f8829a4aSRandall Stewart sctp_log_sack(uint32_t old_cumack, uint32_t cumack, uint32_t tsn, uint16_t gaps, uint16_t dups, int from)
173f8829a4aSRandall Stewart {
17480fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
175f8829a4aSRandall Stewart 
17680fefe0aSRandall Stewart 	sctp_clog.x.sack.cumack = cumack;
17780fefe0aSRandall Stewart 	sctp_clog.x.sack.oldcumack = old_cumack;
17880fefe0aSRandall Stewart 	sctp_clog.x.sack.tsn = tsn;
17980fefe0aSRandall Stewart 	sctp_clog.x.sack.numGaps = gaps;
18080fefe0aSRandall Stewart 	sctp_clog.x.sack.numDups = dups;
181c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
18280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SACK,
18380fefe0aSRandall Stewart 	    from,
18480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
18580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
18680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
18780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
188f8829a4aSRandall Stewart }
189f8829a4aSRandall Stewart 
190f8829a4aSRandall Stewart void
191f8829a4aSRandall Stewart sctp_log_map(uint32_t map, uint32_t cum, uint32_t high, int from)
192f8829a4aSRandall Stewart {
19380fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
194f8829a4aSRandall Stewart 
195bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
19680fefe0aSRandall Stewart 	sctp_clog.x.map.base = map;
19780fefe0aSRandall Stewart 	sctp_clog.x.map.cum = cum;
19880fefe0aSRandall Stewart 	sctp_clog.x.map.high = high;
199c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
20080fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAP,
20180fefe0aSRandall Stewart 	    from,
20280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
20380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
20480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
20580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
206f8829a4aSRandall Stewart }
207f8829a4aSRandall Stewart 
208f8829a4aSRandall Stewart void
209dcb68fbaSMichael Tuexen sctp_log_fr(uint32_t biggest_tsn, uint32_t biggest_new_tsn, uint32_t tsn, int from)
210f8829a4aSRandall Stewart {
21180fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
212f8829a4aSRandall Stewart 
213bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
21480fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_tsn = biggest_tsn;
21580fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_new_tsn = biggest_new_tsn;
21680fefe0aSRandall Stewart 	sctp_clog.x.fr.tsn = tsn;
217c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
21880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_FR,
21980fefe0aSRandall Stewart 	    from,
22080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
22180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
22280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
22380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
224f8829a4aSRandall Stewart }
225f8829a4aSRandall Stewart 
2264be807c4SMichael Tuexen #ifdef SCTP_MBUF_LOGGING
227f8829a4aSRandall Stewart void
228f8829a4aSRandall Stewart sctp_log_mb(struct mbuf *m, int from)
229f8829a4aSRandall Stewart {
23080fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
231f8829a4aSRandall Stewart 
23280fefe0aSRandall Stewart 	sctp_clog.x.mb.mp = m;
23380fefe0aSRandall Stewart 	sctp_clog.x.mb.mbuf_flags = (uint8_t)(SCTP_BUF_GET_FLAGS(m));
23480fefe0aSRandall Stewart 	sctp_clog.x.mb.size = (uint16_t)(SCTP_BUF_LEN(m));
23580fefe0aSRandall Stewart 	sctp_clog.x.mb.data = SCTP_BUF_AT(m, 0);
236139bc87fSRandall Stewart 	if (SCTP_BUF_IS_EXTENDED(m)) {
23780fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = SCTP_BUF_EXTEND_BASE(m);
23880fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = (uint8_t)(SCTP_BUF_EXTEND_REFCNT(m));
239f8829a4aSRandall Stewart 	} else {
24080fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = 0;
24180fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = 0;
242f8829a4aSRandall Stewart 	}
243c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
24480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBUF,
24580fefe0aSRandall Stewart 	    from,
24680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
24780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
24880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
24980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
250f8829a4aSRandall Stewart }
251f8829a4aSRandall Stewart 
252f8829a4aSRandall Stewart void
2534be807c4SMichael Tuexen sctp_log_mbc(struct mbuf *m, int from)
2544be807c4SMichael Tuexen {
2554be807c4SMichael Tuexen 	struct mbuf *mat;
2564be807c4SMichael Tuexen 
2574be807c4SMichael Tuexen 	for (mat = m; mat; mat = SCTP_BUF_NEXT(mat)) {
2584be807c4SMichael Tuexen 		sctp_log_mb(mat, from);
2594be807c4SMichael Tuexen 	}
2604be807c4SMichael Tuexen }
2614be807c4SMichael Tuexen #endif
2624be807c4SMichael Tuexen 
2634be807c4SMichael Tuexen void
264dcb68fbaSMichael Tuexen sctp_log_strm_del(struct sctp_queued_to_read *control, struct sctp_queued_to_read *poschk, int from)
265f8829a4aSRandall Stewart {
26680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
267f8829a4aSRandall Stewart 
268f8829a4aSRandall Stewart 	if (control == NULL) {
269ad81507eSRandall Stewart 		SCTP_PRINTF("Gak log of NULL?\n");
270f8829a4aSRandall Stewart 		return;
271f8829a4aSRandall Stewart 	}
27280fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = control->stcb;
27380fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = control->sinfo_tsn;
27449656eefSMichael Tuexen 	sctp_clog.x.strlog.n_sseq = (uint16_t)control->mid;
27580fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = control->sinfo_stream;
276f8829a4aSRandall Stewart 	if (poschk != NULL) {
27780fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = poschk->sinfo_tsn;
27849656eefSMichael Tuexen 		sctp_clog.x.strlog.e_sseq = (uint16_t)poschk->mid;
279f8829a4aSRandall Stewart 	} else {
28080fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = 0;
28180fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_sseq = 0;
282f8829a4aSRandall Stewart 	}
283c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
28480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
28580fefe0aSRandall Stewart 	    from,
28680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
28780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
28880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
28980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
290f8829a4aSRandall Stewart }
291f8829a4aSRandall Stewart 
292f8829a4aSRandall Stewart void
293f8829a4aSRandall Stewart sctp_log_cwnd(struct sctp_tcb *stcb, struct sctp_nets *net, int augment, uint8_t from)
294f8829a4aSRandall Stewart {
29580fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
296f8829a4aSRandall Stewart 
29780fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
298f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
29980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
300f8829a4aSRandall Stewart 	else
30180fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
302f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
30380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
304f8829a4aSRandall Stewart 	else
30580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
306f8829a4aSRandall Stewart 
307f8829a4aSRandall Stewart 	if (net) {
30880fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cwnd_new_value = net->cwnd;
30980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.inflight = net->flight_size;
31080fefe0aSRandall Stewart 		sctp_clog.x.cwnd.pseudo_cumack = net->pseudo_cumack;
31180fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = net->new_pseudo_cumack;
31280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.need_new_pseudo_cumack = net->find_pseudo_cumack;
313f8829a4aSRandall Stewart 	}
314f8829a4aSRandall Stewart 	if (SCTP_CWNDLOG_PRESEND == from) {
31580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = stcb->asoc.peers_rwnd;
316f8829a4aSRandall Stewart 	}
31780fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = augment;
318c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
31980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CWND,
32080fefe0aSRandall Stewart 	    from,
32180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
32280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
32380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
32480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
325f8829a4aSRandall Stewart }
326f8829a4aSRandall Stewart 
327f8829a4aSRandall Stewart void
328f8829a4aSRandall Stewart sctp_log_lock(struct sctp_inpcb *inp, struct sctp_tcb *stcb, uint8_t from)
329f8829a4aSRandall Stewart {
33080fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
331f8829a4aSRandall Stewart 
332bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
33303b0b021SRandall Stewart 	if (inp) {
33480fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)inp->sctp_socket;
33503b0b021SRandall Stewart 
33603b0b021SRandall Stewart 	} else {
33780fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)NULL;
33803b0b021SRandall Stewart 	}
33980fefe0aSRandall Stewart 	sctp_clog.x.lock.inp = (void *)inp;
340f8829a4aSRandall Stewart 	if (stcb) {
34180fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = mtx_owned(&stcb->tcb_mtx);
342f8829a4aSRandall Stewart 	} else {
34380fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = SCTP_LOCK_UNKNOWN;
344f8829a4aSRandall Stewart 	}
345f8829a4aSRandall Stewart 	if (inp) {
34680fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = mtx_owned(&inp->inp_mtx);
34780fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = mtx_owned(&inp->inp_create_mtx);
348f8829a4aSRandall Stewart 	} else {
34980fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = SCTP_LOCK_UNKNOWN;
35080fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = SCTP_LOCK_UNKNOWN;
351f8829a4aSRandall Stewart 	}
352b3f1ea41SRandall Stewart 	sctp_clog.x.lock.info_lock = rw_wowned(&SCTP_BASE_INFO(ipi_ep_mtx));
35352129fcdSRandall Stewart 	if (inp && (inp->sctp_socket)) {
35480fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
35580fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
35680fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = mtx_owned(&(inp->sctp_socket->so_snd.sb_mtx));
357f8829a4aSRandall Stewart 	} else {
35880fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = SCTP_LOCK_UNKNOWN;
35980fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = SCTP_LOCK_UNKNOWN;
36080fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = SCTP_LOCK_UNKNOWN;
361f8829a4aSRandall Stewart 	}
362c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
36380fefe0aSRandall Stewart 	    SCTP_LOG_LOCK_EVENT,
36480fefe0aSRandall Stewart 	    from,
36580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
36680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
36780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
36880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
369f8829a4aSRandall Stewart }
370f8829a4aSRandall Stewart 
371f8829a4aSRandall Stewart void
372f8829a4aSRandall Stewart sctp_log_maxburst(struct sctp_tcb *stcb, struct sctp_nets *net, int error, int burst, uint8_t from)
373f8829a4aSRandall Stewart {
37480fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
375f8829a4aSRandall Stewart 
376bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
37780fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
37880fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_new_value = error;
37980fefe0aSRandall Stewart 	sctp_clog.x.cwnd.inflight = net->flight_size;
38080fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = burst;
381f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
38280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
383f8829a4aSRandall Stewart 	else
38480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
385f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
38680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
387f8829a4aSRandall Stewart 	else
38880fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
389c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
39080fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAXBURST,
39180fefe0aSRandall Stewart 	    from,
39280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
39380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
39480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
39580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
396f8829a4aSRandall Stewart }
397f8829a4aSRandall Stewart 
398f8829a4aSRandall Stewart void
399f8829a4aSRandall Stewart sctp_log_rwnd(uint8_t from, uint32_t peers_rwnd, uint32_t snd_size, uint32_t overhead)
400f8829a4aSRandall Stewart {
40180fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
402f8829a4aSRandall Stewart 
40380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
40480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = snd_size;
40580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
40680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = 0;
407c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
40880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
40980fefe0aSRandall Stewart 	    from,
41080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
41180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
41280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
41380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
414f8829a4aSRandall Stewart }
415f8829a4aSRandall Stewart 
416f8829a4aSRandall Stewart void
417f8829a4aSRandall Stewart sctp_log_rwnd_set(uint8_t from, uint32_t peers_rwnd, uint32_t flight_size, uint32_t overhead, uint32_t a_rwndval)
418f8829a4aSRandall Stewart {
41980fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
420f8829a4aSRandall Stewart 
42180fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
42280fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = flight_size;
42380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
42480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = a_rwndval;
425c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
42680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
42780fefe0aSRandall Stewart 	    from,
42880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
42980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
43080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
43180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
432f8829a4aSRandall Stewart }
433f8829a4aSRandall Stewart 
4344be807c4SMichael Tuexen #ifdef SCTP_MBCNT_LOGGING
4354be807c4SMichael Tuexen static void
436f8829a4aSRandall Stewart sctp_log_mbcnt(uint8_t from, uint32_t total_oq, uint32_t book, uint32_t total_mbcnt_q, uint32_t mbcnt)
437f8829a4aSRandall Stewart {
43880fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
439f8829a4aSRandall Stewart 
44080fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_size = total_oq;
44180fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.size_change = book;
44280fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_mb_size = total_mbcnt_q;
44380fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.mbcnt_change = mbcnt;
444c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
44580fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBCNT,
44680fefe0aSRandall Stewart 	    from,
44780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
44880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
44980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
45080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
451f8829a4aSRandall Stewart }
4524be807c4SMichael Tuexen #endif
4534be807c4SMichael Tuexen 
454f8829a4aSRandall Stewart void
455f8829a4aSRandall Stewart sctp_misc_ints(uint8_t from, uint32_t a, uint32_t b, uint32_t c, uint32_t d)
456f8829a4aSRandall Stewart {
457c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
45880fefe0aSRandall Stewart 	    SCTP_LOG_MISC_EVENT,
45980fefe0aSRandall Stewart 	    from,
46080fefe0aSRandall Stewart 	    a, b, c, d);
461f8829a4aSRandall Stewart }
462f8829a4aSRandall Stewart 
463f8829a4aSRandall Stewart void
4647215cc1bSMichael Tuexen sctp_wakeup_log(struct sctp_tcb *stcb, uint32_t wake_cnt, int from)
465f8829a4aSRandall Stewart {
46680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
467f8829a4aSRandall Stewart 
46880fefe0aSRandall Stewart 	sctp_clog.x.wake.stcb = (void *)stcb;
46980fefe0aSRandall Stewart 	sctp_clog.x.wake.wake_cnt = wake_cnt;
47080fefe0aSRandall Stewart 	sctp_clog.x.wake.flight = stcb->asoc.total_flight_count;
47180fefe0aSRandall Stewart 	sctp_clog.x.wake.send_q = stcb->asoc.send_queue_cnt;
47280fefe0aSRandall Stewart 	sctp_clog.x.wake.sent_q = stcb->asoc.sent_queue_cnt;
473f8829a4aSRandall Stewart 
474f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt < 0xff)
47580fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = (uint8_t)stcb->asoc.stream_queue_cnt;
476f8829a4aSRandall Stewart 	else
47780fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = 0xff;
478f8829a4aSRandall Stewart 
479f8829a4aSRandall Stewart 	if (stcb->asoc.chunks_on_out_queue < 0xff)
48080fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = (uint8_t)stcb->asoc.chunks_on_out_queue;
481f8829a4aSRandall Stewart 	else
48280fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = 0xff;
483f8829a4aSRandall Stewart 
48480fefe0aSRandall Stewart 	sctp_clog.x.wake.sctpflags = 0;
485f8829a4aSRandall Stewart 	/* set in the defered mode stuff */
486f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_DONT_WAKE)
48780fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 1;
488f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEOUTPUT)
48980fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 2;
490f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEINPUT)
49180fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 4;
492f8829a4aSRandall Stewart 	/* what about the sb */
493f8829a4aSRandall Stewart 	if (stcb->sctp_socket) {
494f8829a4aSRandall Stewart 		struct socket *so = stcb->sctp_socket;
495f8829a4aSRandall Stewart 
49680fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = (uint8_t)((so->so_snd.sb_flags & 0x00ff));
497f8829a4aSRandall Stewart 	} else {
49880fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = 0xff;
499f8829a4aSRandall Stewart 	}
500c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
50180fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_WAKE,
50280fefe0aSRandall Stewart 	    from,
50380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
50480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
50580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
50680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
507f8829a4aSRandall Stewart }
508f8829a4aSRandall Stewart 
509f8829a4aSRandall Stewart void
5109a8e3088SMichael Tuexen sctp_log_block(uint8_t from, struct sctp_association *asoc, size_t sendlen)
511f8829a4aSRandall Stewart {
51280fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
513f8829a4aSRandall Stewart 
51480fefe0aSRandall Stewart 	sctp_clog.x.blk.onsb = asoc->total_output_queue_size;
51580fefe0aSRandall Stewart 	sctp_clog.x.blk.send_sent_qcnt = (uint16_t)(asoc->send_queue_cnt + asoc->sent_queue_cnt);
51680fefe0aSRandall Stewart 	sctp_clog.x.blk.peer_rwnd = asoc->peers_rwnd;
51780fefe0aSRandall Stewart 	sctp_clog.x.blk.stream_qcnt = (uint16_t)asoc->stream_queue_cnt;
51880fefe0aSRandall Stewart 	sctp_clog.x.blk.chunks_on_oque = (uint16_t)asoc->chunks_on_out_queue;
51980fefe0aSRandall Stewart 	sctp_clog.x.blk.flight_size = (uint16_t)(asoc->total_flight / 1024);
5209a8e3088SMichael Tuexen 	sctp_clog.x.blk.sndlen = (uint32_t)sendlen;
521c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
52280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_BLOCK,
52380fefe0aSRandall Stewart 	    from,
52480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
52580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
52680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
52780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
528f8829a4aSRandall Stewart }
529f8829a4aSRandall Stewart 
530f8829a4aSRandall Stewart int
5317215cc1bSMichael Tuexen sctp_fill_stat_log(void *optval SCTP_UNUSED, size_t *optsize SCTP_UNUSED)
532f8829a4aSRandall Stewart {
53380fefe0aSRandall Stewart 	/* May need to fix this if ktrdump does not work */
534f8829a4aSRandall Stewart 	return (0);
535f8829a4aSRandall Stewart }
536f8829a4aSRandall Stewart 
537f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
538f8829a4aSRandall Stewart uint8_t sctp_audit_data[SCTP_AUDIT_SIZE][2];
539f8829a4aSRandall Stewart static int sctp_audit_indx = 0;
540f8829a4aSRandall Stewart 
541f8829a4aSRandall Stewart static
542f8829a4aSRandall Stewart void
543f8829a4aSRandall Stewart sctp_print_audit_report(void)
544f8829a4aSRandall Stewart {
545f8829a4aSRandall Stewart 	int i;
546f8829a4aSRandall Stewart 	int cnt;
547f8829a4aSRandall Stewart 
548f8829a4aSRandall Stewart 	cnt = 0;
549f8829a4aSRandall Stewart 	for (i = sctp_audit_indx; i < SCTP_AUDIT_SIZE; i++) {
550f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
551f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
552f8829a4aSRandall Stewart 			cnt = 0;
553ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
554f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
555f8829a4aSRandall Stewart 			cnt = 0;
556ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
557f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
558f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
559ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
560f8829a4aSRandall Stewart 			cnt = 0;
561f8829a4aSRandall Stewart 		}
562ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
563f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
564f8829a4aSRandall Stewart 		cnt++;
565f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
566ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
567f8829a4aSRandall Stewart 	}
568f8829a4aSRandall Stewart 	for (i = 0; i < sctp_audit_indx; i++) {
569f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
570f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
571f8829a4aSRandall Stewart 			cnt = 0;
572ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
573f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
574f8829a4aSRandall Stewart 			cnt = 0;
575ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
576f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
577f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
578ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
579f8829a4aSRandall Stewart 			cnt = 0;
580f8829a4aSRandall Stewart 		}
581ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
582f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
583f8829a4aSRandall Stewart 		cnt++;
584f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
585ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
586f8829a4aSRandall Stewart 	}
587ad81507eSRandall Stewart 	SCTP_PRINTF("\n");
588f8829a4aSRandall Stewart }
589f8829a4aSRandall Stewart 
590f8829a4aSRandall Stewart void
591f8829a4aSRandall Stewart sctp_auditing(int from, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
592f8829a4aSRandall Stewart     struct sctp_nets *net)
593f8829a4aSRandall Stewart {
594f8829a4aSRandall Stewart 	int resend_cnt, tot_out, rep, tot_book_cnt;
595f8829a4aSRandall Stewart 	struct sctp_nets *lnet;
596f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
597f8829a4aSRandall Stewart 
598f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xAA;
599f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = 0x000000ff & from;
600f8829a4aSRandall Stewart 	sctp_audit_indx++;
601f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
602f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
603f8829a4aSRandall Stewart 	}
604f8829a4aSRandall Stewart 	if (inp == NULL) {
605f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
606f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x01;
607f8829a4aSRandall Stewart 		sctp_audit_indx++;
608f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
609f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
610f8829a4aSRandall Stewart 		}
611f8829a4aSRandall Stewart 		return;
612f8829a4aSRandall Stewart 	}
613f8829a4aSRandall Stewart 	if (stcb == NULL) {
614f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
615f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x02;
616f8829a4aSRandall Stewart 		sctp_audit_indx++;
617f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
618f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
619f8829a4aSRandall Stewart 		}
620f8829a4aSRandall Stewart 		return;
621f8829a4aSRandall Stewart 	}
622f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xA1;
623f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] =
624f8829a4aSRandall Stewart 	    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
625f8829a4aSRandall Stewart 	sctp_audit_indx++;
626f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
627f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
628f8829a4aSRandall Stewart 	}
629f8829a4aSRandall Stewart 	rep = 0;
630f8829a4aSRandall Stewart 	tot_book_cnt = 0;
631f8829a4aSRandall Stewart 	resend_cnt = tot_out = 0;
632f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
633f8829a4aSRandall Stewart 		if (chk->sent == SCTP_DATAGRAM_RESEND) {
634f8829a4aSRandall Stewart 			resend_cnt++;
635f8829a4aSRandall Stewart 		} else if (chk->sent < SCTP_DATAGRAM_RESEND) {
636f8829a4aSRandall Stewart 			tot_out += chk->book_size;
637f8829a4aSRandall Stewart 			tot_book_cnt++;
638f8829a4aSRandall Stewart 		}
639f8829a4aSRandall Stewart 	}
640f8829a4aSRandall Stewart 	if (resend_cnt != stcb->asoc.sent_queue_retran_cnt) {
641f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
642f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA1;
643f8829a4aSRandall Stewart 		sctp_audit_indx++;
644f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
645f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
646f8829a4aSRandall Stewart 		}
647ad81507eSRandall Stewart 		SCTP_PRINTF("resend_cnt:%d asoc-tot:%d\n",
648f8829a4aSRandall Stewart 		    resend_cnt, stcb->asoc.sent_queue_retran_cnt);
649f8829a4aSRandall Stewart 		rep = 1;
650f8829a4aSRandall Stewart 		stcb->asoc.sent_queue_retran_cnt = resend_cnt;
651f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xA2;
652f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] =
653f8829a4aSRandall Stewart 		    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
654f8829a4aSRandall Stewart 		sctp_audit_indx++;
655f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
656f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
657f8829a4aSRandall Stewart 		}
658f8829a4aSRandall Stewart 	}
659f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
660f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
661f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA2;
662f8829a4aSRandall Stewart 		sctp_audit_indx++;
663f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
664f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
665f8829a4aSRandall Stewart 		}
666f8829a4aSRandall Stewart 		rep = 1;
667ad81507eSRandall Stewart 		SCTP_PRINTF("tot_flt:%d asoc_tot:%d\n", tot_out,
668f8829a4aSRandall Stewart 		    (int)stcb->asoc.total_flight);
669f8829a4aSRandall Stewart 		stcb->asoc.total_flight = tot_out;
670f8829a4aSRandall Stewart 	}
671f8829a4aSRandall Stewart 	if (tot_book_cnt != stcb->asoc.total_flight_count) {
672f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
673f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA5;
674f8829a4aSRandall Stewart 		sctp_audit_indx++;
675f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
676f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
677f8829a4aSRandall Stewart 		}
678f8829a4aSRandall Stewart 		rep = 1;
679f31e6c7fSMichael Tuexen 		SCTP_PRINTF("tot_flt_book:%d\n", tot_book_cnt);
680f8829a4aSRandall Stewart 
681f8829a4aSRandall Stewart 		stcb->asoc.total_flight_count = tot_book_cnt;
682f8829a4aSRandall Stewart 	}
683f8829a4aSRandall Stewart 	tot_out = 0;
684f8829a4aSRandall Stewart 	TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
685f8829a4aSRandall Stewart 		tot_out += lnet->flight_size;
686f8829a4aSRandall Stewart 	}
687f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
688f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
689f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA3;
690f8829a4aSRandall Stewart 		sctp_audit_indx++;
691f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
692f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
693f8829a4aSRandall Stewart 		}
694f8829a4aSRandall Stewart 		rep = 1;
695ad81507eSRandall Stewart 		SCTP_PRINTF("real flight:%d net total was %d\n",
696f8829a4aSRandall Stewart 		    stcb->asoc.total_flight, tot_out);
697f8829a4aSRandall Stewart 		/* now corrective action */
698f8829a4aSRandall Stewart 		TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
699f8829a4aSRandall Stewart 
700f8829a4aSRandall Stewart 			tot_out = 0;
701f8829a4aSRandall Stewart 			TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
702f8829a4aSRandall Stewart 				if ((chk->whoTo == lnet) &&
703f8829a4aSRandall Stewart 				    (chk->sent < SCTP_DATAGRAM_RESEND)) {
704f8829a4aSRandall Stewart 					tot_out += chk->book_size;
705f8829a4aSRandall Stewart 				}
706f8829a4aSRandall Stewart 			}
707f8829a4aSRandall Stewart 			if (lnet->flight_size != tot_out) {
708f31e6c7fSMichael Tuexen 				SCTP_PRINTF("net:%p flight was %d corrected to %d\n",
709dd294dceSMichael Tuexen 				    (void *)lnet, lnet->flight_size,
710ad81507eSRandall Stewart 				    tot_out);
711f8829a4aSRandall Stewart 				lnet->flight_size = tot_out;
712f8829a4aSRandall Stewart 			}
713f8829a4aSRandall Stewart 		}
714f8829a4aSRandall Stewart 	}
715f8829a4aSRandall Stewart 	if (rep) {
716f8829a4aSRandall Stewart 		sctp_print_audit_report();
717f8829a4aSRandall Stewart 	}
718f8829a4aSRandall Stewart }
719f8829a4aSRandall Stewart 
720f8829a4aSRandall Stewart void
721f8829a4aSRandall Stewart sctp_audit_log(uint8_t ev, uint8_t fd)
722f8829a4aSRandall Stewart {
723f8829a4aSRandall Stewart 
724f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = ev;
725f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = fd;
726f8829a4aSRandall Stewart 	sctp_audit_indx++;
727f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
728f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
729f8829a4aSRandall Stewart 	}
730f8829a4aSRandall Stewart }
731f8829a4aSRandall Stewart 
732f8829a4aSRandall Stewart #endif
733f8829a4aSRandall Stewart 
734f8829a4aSRandall Stewart /*
73512af6654SMichael Tuexen  * sctp_stop_timers_for_shutdown() should be called
73612af6654SMichael Tuexen  * when entering the SHUTDOWN_SENT or SHUTDOWN_ACK_SENT
73712af6654SMichael Tuexen  * state to make sure that all timers are stopped.
73812af6654SMichael Tuexen  */
73912af6654SMichael Tuexen void
74012af6654SMichael Tuexen sctp_stop_timers_for_shutdown(struct sctp_tcb *stcb)
74112af6654SMichael Tuexen {
74212af6654SMichael Tuexen 	struct sctp_association *asoc;
74312af6654SMichael Tuexen 	struct sctp_nets *net;
74412af6654SMichael Tuexen 
74512af6654SMichael Tuexen 	asoc = &stcb->asoc;
74612af6654SMichael Tuexen 
74712af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
74812af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
74912af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
75012af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
75112af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
75212af6654SMichael Tuexen 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
75312af6654SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
754ca85e948SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->hb_timer.timer);
75512af6654SMichael Tuexen 	}
75612af6654SMichael Tuexen }
75712af6654SMichael Tuexen 
75812af6654SMichael Tuexen /*
759f8829a4aSRandall Stewart  * a list of sizes based on typical mtu's, used only if next hop size not
760f8829a4aSRandall Stewart  * returned.
761f8829a4aSRandall Stewart  */
762437fc91aSMichael Tuexen static uint32_t sctp_mtu_sizes[] = {
763f8829a4aSRandall Stewart 	68,
764f8829a4aSRandall Stewart 	296,
765f8829a4aSRandall Stewart 	508,
766f8829a4aSRandall Stewart 	512,
767f8829a4aSRandall Stewart 	544,
768f8829a4aSRandall Stewart 	576,
769f8829a4aSRandall Stewart 	1006,
770f8829a4aSRandall Stewart 	1492,
771f8829a4aSRandall Stewart 	1500,
772f8829a4aSRandall Stewart 	1536,
773f8829a4aSRandall Stewart 	2002,
774f8829a4aSRandall Stewart 	2048,
775f8829a4aSRandall Stewart 	4352,
776f8829a4aSRandall Stewart 	4464,
777f8829a4aSRandall Stewart 	8166,
778f8829a4aSRandall Stewart 	17914,
779f8829a4aSRandall Stewart 	32000,
780f8829a4aSRandall Stewart 	65535
781f8829a4aSRandall Stewart };
782f8829a4aSRandall Stewart 
783f8829a4aSRandall Stewart /*
784437fc91aSMichael Tuexen  * Return the largest MTU smaller than val. If there is no
785437fc91aSMichael Tuexen  * entry, just return val.
786f8829a4aSRandall Stewart  */
787437fc91aSMichael Tuexen uint32_t
788437fc91aSMichael Tuexen sctp_get_prev_mtu(uint32_t val)
789437fc91aSMichael Tuexen {
790437fc91aSMichael Tuexen 	uint32_t i;
791437fc91aSMichael Tuexen 
792437fc91aSMichael Tuexen 	if (val <= sctp_mtu_sizes[0]) {
793437fc91aSMichael Tuexen 		return (val);
794437fc91aSMichael Tuexen 	}
795437fc91aSMichael Tuexen 	for (i = 1; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
796437fc91aSMichael Tuexen 		if (val <= sctp_mtu_sizes[i]) {
797f8829a4aSRandall Stewart 			break;
798f8829a4aSRandall Stewart 		}
799f8829a4aSRandall Stewart 	}
800437fc91aSMichael Tuexen 	return (sctp_mtu_sizes[i - 1]);
801437fc91aSMichael Tuexen }
802437fc91aSMichael Tuexen 
803437fc91aSMichael Tuexen /*
804437fc91aSMichael Tuexen  * Return the smallest MTU larger than val. If there is no
805437fc91aSMichael Tuexen  * entry, just return val.
806437fc91aSMichael Tuexen  */
807437fc91aSMichael Tuexen uint32_t
8087215cc1bSMichael Tuexen sctp_get_next_mtu(uint32_t val)
809437fc91aSMichael Tuexen {
810437fc91aSMichael Tuexen 	/* select another MTU that is just bigger than this one */
811437fc91aSMichael Tuexen 	uint32_t i;
812437fc91aSMichael Tuexen 
813437fc91aSMichael Tuexen 	for (i = 0; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
814437fc91aSMichael Tuexen 		if (val < sctp_mtu_sizes[i]) {
815437fc91aSMichael Tuexen 			return (sctp_mtu_sizes[i]);
816437fc91aSMichael Tuexen 		}
817437fc91aSMichael Tuexen 	}
818437fc91aSMichael Tuexen 	return (val);
819f8829a4aSRandall Stewart }
820f8829a4aSRandall Stewart 
821f8829a4aSRandall Stewart void
822f8829a4aSRandall Stewart sctp_fill_random_store(struct sctp_pcb *m)
823f8829a4aSRandall Stewart {
824f8829a4aSRandall Stewart 	/*
825f8829a4aSRandall Stewart 	 * Here we use the MD5/SHA-1 to hash with our good randomNumbers and
826f8829a4aSRandall Stewart 	 * our counter. The result becomes our good random numbers and we
827f8829a4aSRandall Stewart 	 * then setup to give these out. Note that we do no locking to
828f8829a4aSRandall Stewart 	 * protect this. This is ok, since if competing folks call this we
82917205eccSRandall Stewart 	 * will get more gobbled gook in the random store which is what we
830f8829a4aSRandall Stewart 	 * want. There is a danger that two guys will use the same random
831f8829a4aSRandall Stewart 	 * numbers, but thats ok too since that is random as well :->
832f8829a4aSRandall Stewart 	 */
833f8829a4aSRandall Stewart 	m->store_at = 0;
834ad81507eSRandall Stewart 	(void)sctp_hmac(SCTP_HMAC, (uint8_t *)m->random_numbers,
835f8829a4aSRandall Stewart 	    sizeof(m->random_numbers), (uint8_t *)&m->random_counter,
836f8829a4aSRandall Stewart 	    sizeof(m->random_counter), (uint8_t *)m->random_store);
837f8829a4aSRandall Stewart 	m->random_counter++;
838f8829a4aSRandall Stewart }
839f8829a4aSRandall Stewart 
840f8829a4aSRandall Stewart uint32_t
841851b7298SRandall Stewart sctp_select_initial_TSN(struct sctp_pcb *inp)
842f8829a4aSRandall Stewart {
843f8829a4aSRandall Stewart 	/*
844f8829a4aSRandall Stewart 	 * A true implementation should use random selection process to get
845f8829a4aSRandall Stewart 	 * the initial stream sequence number, using RFC1750 as a good
846f8829a4aSRandall Stewart 	 * guideline
847f8829a4aSRandall Stewart 	 */
848139bc87fSRandall Stewart 	uint32_t x, *xp;
849f8829a4aSRandall Stewart 	uint8_t *p;
850851b7298SRandall Stewart 	int store_at, new_store;
851f8829a4aSRandall Stewart 
852851b7298SRandall Stewart 	if (inp->initial_sequence_debug != 0) {
853f8829a4aSRandall Stewart 		uint32_t ret;
854f8829a4aSRandall Stewart 
855851b7298SRandall Stewart 		ret = inp->initial_sequence_debug;
856851b7298SRandall Stewart 		inp->initial_sequence_debug++;
857f8829a4aSRandall Stewart 		return (ret);
858f8829a4aSRandall Stewart 	}
859851b7298SRandall Stewart retry:
860851b7298SRandall Stewart 	store_at = inp->store_at;
861851b7298SRandall Stewart 	new_store = store_at + sizeof(uint32_t);
862851b7298SRandall Stewart 	if (new_store >= (SCTP_SIGNATURE_SIZE - 3)) {
863851b7298SRandall Stewart 		new_store = 0;
864f8829a4aSRandall Stewart 	}
865851b7298SRandall Stewart 	if (!atomic_cmpset_int(&inp->store_at, store_at, new_store)) {
866851b7298SRandall Stewart 		goto retry;
867851b7298SRandall Stewart 	}
868851b7298SRandall Stewart 	if (new_store == 0) {
869851b7298SRandall Stewart 		/* Refill the random store */
870851b7298SRandall Stewart 		sctp_fill_random_store(inp);
871851b7298SRandall Stewart 	}
872851b7298SRandall Stewart 	p = &inp->random_store[store_at];
873139bc87fSRandall Stewart 	xp = (uint32_t *)p;
874f8829a4aSRandall Stewart 	x = *xp;
875f8829a4aSRandall Stewart 	return (x);
876f8829a4aSRandall Stewart }
877f8829a4aSRandall Stewart 
878f8829a4aSRandall Stewart uint32_t
8797215cc1bSMichael Tuexen sctp_select_a_tag(struct sctp_inpcb *inp, uint16_t lport, uint16_t rport, int check)
880f8829a4aSRandall Stewart {
8817215cc1bSMichael Tuexen 	uint32_t x;
882f8829a4aSRandall Stewart 	struct timeval now;
883f8829a4aSRandall Stewart 
8847215cc1bSMichael Tuexen 	if (check) {
8856e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
8867215cc1bSMichael Tuexen 	}
8877215cc1bSMichael Tuexen 	for (;;) {
888851b7298SRandall Stewart 		x = sctp_select_initial_TSN(&inp->sctp_ep);
889f8829a4aSRandall Stewart 		if (x == 0) {
890f8829a4aSRandall Stewart 			/* we never use 0 */
891f8829a4aSRandall Stewart 			continue;
892f8829a4aSRandall Stewart 		}
8937215cc1bSMichael Tuexen 		if (!check || sctp_is_vtag_good(x, lport, rport, &now)) {
8947215cc1bSMichael Tuexen 			break;
895f8829a4aSRandall Stewart 		}
896f8829a4aSRandall Stewart 	}
897f8829a4aSRandall Stewart 	return (x);
898f8829a4aSRandall Stewart }
899f8829a4aSRandall Stewart 
900e92c2a8dSMichael Tuexen int32_t
901e92c2a8dSMichael Tuexen sctp_map_assoc_state(int kernel_state)
902e92c2a8dSMichael Tuexen {
903e92c2a8dSMichael Tuexen 	int32_t user_state;
904e92c2a8dSMichael Tuexen 
905e92c2a8dSMichael Tuexen 	if (kernel_state & SCTP_STATE_WAS_ABORTED) {
906e92c2a8dSMichael Tuexen 		user_state = SCTP_CLOSED;
907e92c2a8dSMichael Tuexen 	} else if (kernel_state & SCTP_STATE_SHUTDOWN_PENDING) {
908e92c2a8dSMichael Tuexen 		user_state = SCTP_SHUTDOWN_PENDING;
909e92c2a8dSMichael Tuexen 	} else {
910e92c2a8dSMichael Tuexen 		switch (kernel_state & SCTP_STATE_MASK) {
911e92c2a8dSMichael Tuexen 		case SCTP_STATE_EMPTY:
912e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
913e92c2a8dSMichael Tuexen 			break;
914e92c2a8dSMichael Tuexen 		case SCTP_STATE_INUSE:
915e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
916e92c2a8dSMichael Tuexen 			break;
917e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_WAIT:
918e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_WAIT;
919e92c2a8dSMichael Tuexen 			break;
920e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_ECHOED:
921e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_ECHOED;
922e92c2a8dSMichael Tuexen 			break;
923e92c2a8dSMichael Tuexen 		case SCTP_STATE_OPEN:
924e92c2a8dSMichael Tuexen 			user_state = SCTP_ESTABLISHED;
925e92c2a8dSMichael Tuexen 			break;
926e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_SENT:
927e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_SENT;
928e92c2a8dSMichael Tuexen 			break;
929e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_RECEIVED:
930e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_RECEIVED;
931e92c2a8dSMichael Tuexen 			break;
932e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_ACK_SENT:
933e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_ACK_SENT;
934e92c2a8dSMichael Tuexen 			break;
935e92c2a8dSMichael Tuexen 		default:
936e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
937e92c2a8dSMichael Tuexen 			break;
938e92c2a8dSMichael Tuexen 		}
939e92c2a8dSMichael Tuexen 	}
940e92c2a8dSMichael Tuexen 	return (user_state);
941e92c2a8dSMichael Tuexen }
942e92c2a8dSMichael Tuexen 
943f8829a4aSRandall Stewart int
944a1cb341bSMichael Tuexen sctp_init_asoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
945c979034bSMichael Tuexen     uint32_t override_tag, uint32_t vrf_id, uint16_t o_strms)
946f8829a4aSRandall Stewart {
9470696e120SRandall Stewart 	struct sctp_association *asoc;
9480696e120SRandall Stewart 
949f8829a4aSRandall Stewart 	/*
950f8829a4aSRandall Stewart 	 * Anything set to zero is taken care of by the allocation routine's
951f8829a4aSRandall Stewart 	 * bzero
952f8829a4aSRandall Stewart 	 */
953f8829a4aSRandall Stewart 
954f8829a4aSRandall Stewart 	/*
955f8829a4aSRandall Stewart 	 * Up front select what scoping to apply on addresses I tell my peer
956f8829a4aSRandall Stewart 	 * Not sure what to do with these right now, we will need to come up
957f8829a4aSRandall Stewart 	 * with a way to set them. We may need to pass them through from the
958f8829a4aSRandall Stewart 	 * caller in the sctp_aloc_assoc() function.
959f8829a4aSRandall Stewart 	 */
960f8829a4aSRandall Stewart 	int i;
961f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
962f0396ad1SMichael Tuexen 	int j;
963f0396ad1SMichael Tuexen #endif
964f0396ad1SMichael Tuexen 
9650696e120SRandall Stewart 	asoc = &stcb->asoc;
966f8829a4aSRandall Stewart 	/* init all variables to a known value. */
967c4739e2fSRandall Stewart 	SCTP_SET_STATE(&stcb->asoc, SCTP_STATE_INUSE);
968a1cb341bSMichael Tuexen 	asoc->max_burst = inp->sctp_ep.max_burst;
969a1cb341bSMichael Tuexen 	asoc->fr_max_burst = inp->sctp_ep.fr_max_burst;
970a1cb341bSMichael Tuexen 	asoc->heart_beat_delay = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT]);
971a1cb341bSMichael Tuexen 	asoc->cookie_life = inp->sctp_ep.def_cookie_life;
972a1cb341bSMichael Tuexen 	asoc->sctp_cmt_on_off = inp->sctp_cmt_on_off;
973f342355aSMichael Tuexen 	asoc->ecn_supported = inp->ecn_supported;
974dd973b0eSMichael Tuexen 	asoc->prsctp_supported = inp->prsctp_supported;
97544249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
976c79bec9cSMichael Tuexen 	asoc->auth_supported = inp->auth_supported;
977c79bec9cSMichael Tuexen 	asoc->asconf_supported = inp->asconf_supported;
978317e00efSMichael Tuexen 	asoc->reconfig_supported = inp->reconfig_supported;
979caea9879SMichael Tuexen 	asoc->nrsack_supported = inp->nrsack_supported;
980cb9b8e6fSMichael Tuexen 	asoc->pktdrop_supported = inp->pktdrop_supported;
98144249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
982ca85e948SMichael Tuexen 	asoc->sctp_cmt_pf = (uint8_t)0;
983a1cb341bSMichael Tuexen 	asoc->sctp_frag_point = inp->sctp_frag_point;
984a1cb341bSMichael Tuexen 	asoc->sctp_features = inp->sctp_features;
985a1cb341bSMichael Tuexen 	asoc->default_dscp = inp->sctp_ep.default_dscp;
98659b6d5beSMichael Tuexen 	asoc->max_cwnd = inp->max_cwnd;
98742551e99SRandall Stewart #ifdef INET6
988a1cb341bSMichael Tuexen 	if (inp->sctp_ep.default_flowlabel) {
989a1cb341bSMichael Tuexen 		asoc->default_flowlabel = inp->sctp_ep.default_flowlabel;
99058bdb691SMichael Tuexen 	} else {
991a1cb341bSMichael Tuexen 		if (inp->ip_inp.inp.inp_flags & IN6P_AUTOFLOWLABEL) {
992a1cb341bSMichael Tuexen 			asoc->default_flowlabel = sctp_select_initial_TSN(&inp->sctp_ep);
99358bdb691SMichael Tuexen 			asoc->default_flowlabel &= 0x000fffff;
99458bdb691SMichael Tuexen 			asoc->default_flowlabel |= 0x80000000;
99558bdb691SMichael Tuexen 		} else {
996f8829a4aSRandall Stewart 			asoc->default_flowlabel = 0;
99758bdb691SMichael Tuexen 		}
99858bdb691SMichael Tuexen 	}
999f8829a4aSRandall Stewart #endif
10009f22f500SRandall Stewart 	asoc->sb_send_resv = 0;
1001f8829a4aSRandall Stewart 	if (override_tag) {
1002f8829a4aSRandall Stewart 		asoc->my_vtag = override_tag;
1003f8829a4aSRandall Stewart 	} else {
1004a1cb341bSMichael Tuexen 		asoc->my_vtag = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 1);
1005f8829a4aSRandall Stewart 	}
1006de0e935bSRandall Stewart 	/* Get the nonce tags */
1007a1cb341bSMichael Tuexen 	asoc->my_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
1008a1cb341bSMichael Tuexen 	asoc->peer_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
100942551e99SRandall Stewart 	asoc->vrf_id = vrf_id;
1010de0e935bSRandall Stewart 
101118e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
101218e198d3SRandall Stewart 	asoc->tsn_in_at = 0;
101318e198d3SRandall Stewart 	asoc->tsn_out_at = 0;
101418e198d3SRandall Stewart 	asoc->tsn_in_wrapped = 0;
101518e198d3SRandall Stewart 	asoc->tsn_out_wrapped = 0;
101618e198d3SRandall Stewart 	asoc->cumack_log_at = 0;
1017b201f536SRandall Stewart 	asoc->cumack_log_atsnt = 0;
101818e198d3SRandall Stewart #endif
101918e198d3SRandall Stewart #ifdef SCTP_FS_SPEC_LOG
102018e198d3SRandall Stewart 	asoc->fs_index = 0;
102118e198d3SRandall Stewart #endif
1022f8829a4aSRandall Stewart 	asoc->refcnt = 0;
1023f8829a4aSRandall Stewart 	asoc->assoc_up_sent = 0;
1024f8829a4aSRandall Stewart 	asoc->asconf_seq_out = asoc->str_reset_seq_out = asoc->init_seq_number = asoc->sending_seq =
1025a1cb341bSMichael Tuexen 	    sctp_select_initial_TSN(&inp->sctp_ep);
1026c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked = asoc->asconf_seq_out - 1;
1027f8829a4aSRandall Stewart 	/* we are optimisitic here */
1028830d754dSRandall Stewart 	asoc->peer_supports_nat = 0;
1029f8829a4aSRandall Stewart 	asoc->sent_queue_retran_cnt = 0;
1030f8829a4aSRandall Stewart 
1031f8829a4aSRandall Stewart 	/* for CMT */
10328933fa13SRandall Stewart 	asoc->last_net_cmt_send_started = NULL;
1033f8829a4aSRandall Stewart 
1034f8829a4aSRandall Stewart 	/* This will need to be adjusted */
1035f8829a4aSRandall Stewart 	asoc->last_acked_seq = asoc->init_seq_number - 1;
1036f8829a4aSRandall Stewart 	asoc->advanced_peer_ack_point = asoc->last_acked_seq;
1037f8829a4aSRandall Stewart 	asoc->asconf_seq_in = asoc->last_acked_seq;
1038f8829a4aSRandall Stewart 
1039f8829a4aSRandall Stewart 	/* here we are different, we hold the next one we expect */
1040f8829a4aSRandall Stewart 	asoc->str_reset_seq_in = asoc->last_acked_seq + 1;
1041f8829a4aSRandall Stewart 
1042a1cb341bSMichael Tuexen 	asoc->initial_init_rto_max = inp->sctp_ep.initial_init_rto_max;
1043a1cb341bSMichael Tuexen 	asoc->initial_rto = inp->sctp_ep.initial_rto;
1044f8829a4aSRandall Stewart 
1045a1cb341bSMichael Tuexen 	asoc->max_init_times = inp->sctp_ep.max_init_times;
1046a1cb341bSMichael Tuexen 	asoc->max_send_times = inp->sctp_ep.max_send_times;
1047a1cb341bSMichael Tuexen 	asoc->def_net_failure = inp->sctp_ep.def_net_failure;
1048a1cb341bSMichael Tuexen 	asoc->def_net_pf_threshold = inp->sctp_ep.def_net_pf_threshold;
1049f8829a4aSRandall Stewart 	asoc->free_chunk_cnt = 0;
1050f8829a4aSRandall Stewart 
1051f8829a4aSRandall Stewart 	asoc->iam_blocking = 0;
1052a1cb341bSMichael Tuexen 	asoc->context = inp->sctp_context;
1053a1cb341bSMichael Tuexen 	asoc->local_strreset_support = inp->local_strreset_support;
1054a1cb341bSMichael Tuexen 	asoc->def_send = inp->def_send;
1055a1cb341bSMichael Tuexen 	asoc->delayed_ack = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV]);
1056a1cb341bSMichael Tuexen 	asoc->sack_freq = inp->sctp_ep.sctp_sack_freq;
1057f8829a4aSRandall Stewart 	asoc->pr_sctp_cnt = 0;
1058f8829a4aSRandall Stewart 	asoc->total_output_queue_size = 0;
1059f8829a4aSRandall Stewart 
1060a1cb341bSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
1061a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 1;
1062a1cb341bSMichael Tuexen 		if (SCTP_IPV6_V6ONLY(inp) == 0) {
1063a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 1;
1064f8829a4aSRandall Stewart 		} else {
1065a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 0;
1066f8829a4aSRandall Stewart 		}
1067f8829a4aSRandall Stewart 	} else {
1068a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 0;
1069a1cb341bSMichael Tuexen 		asoc->scope.ipv4_addr_legal = 1;
1070f8829a4aSRandall Stewart 	}
1071f8829a4aSRandall Stewart 
1072a1cb341bSMichael Tuexen 	asoc->my_rwnd = max(SCTP_SB_LIMIT_RCV(inp->sctp_socket), SCTP_MINIMAL_RWND);
1073a1cb341bSMichael Tuexen 	asoc->peers_rwnd = SCTP_SB_LIMIT_RCV(inp->sctp_socket);
1074f8829a4aSRandall Stewart 
1075a1cb341bSMichael Tuexen 	asoc->smallest_mtu = inp->sctp_frag_point;
1076a1cb341bSMichael Tuexen 	asoc->minrto = inp->sctp_ep.sctp_minrto;
1077a1cb341bSMichael Tuexen 	asoc->maxrto = inp->sctp_ep.sctp_maxrto;
1078f8829a4aSRandall Stewart 
1079f8829a4aSRandall Stewart 	asoc->stream_locked_on = 0;
1080f8829a4aSRandall Stewart 	asoc->ecn_echo_cnt_onq = 0;
1081f8829a4aSRandall Stewart 	asoc->stream_locked = 0;
1082f8829a4aSRandall Stewart 
108342551e99SRandall Stewart 	asoc->send_sack = 1;
108442551e99SRandall Stewart 
108542551e99SRandall Stewart 	LIST_INIT(&asoc->sctp_restricted_addrs);
108642551e99SRandall Stewart 
1087f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->nets);
1088f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->pending_reply_queue);
10892afb3e84SRandall Stewart 	TAILQ_INIT(&asoc->asconf_ack_sent);
1090f8829a4aSRandall Stewart 	/* Setup to fill the hb random cache at first HB */
1091f8829a4aSRandall Stewart 	asoc->hb_random_idx = 4;
1092f8829a4aSRandall Stewart 
1093a1cb341bSMichael Tuexen 	asoc->sctp_autoclose_ticks = inp->sctp_ep.auto_close_time;
1094f8829a4aSRandall Stewart 
1095a1cb341bSMichael Tuexen 	stcb->asoc.congestion_control_module = inp->sctp_ep.sctp_default_cc_module;
1096a1cb341bSMichael Tuexen 	stcb->asoc.cc_functions = sctp_cc_functions[inp->sctp_ep.sctp_default_cc_module];
1097b54d3a6cSRandall Stewart 
1098a1cb341bSMichael Tuexen 	stcb->asoc.stream_scheduling_module = inp->sctp_ep.sctp_default_ss_module;
1099a1cb341bSMichael Tuexen 	stcb->asoc.ss_functions = sctp_ss_functions[inp->sctp_ep.sctp_default_ss_module];
1100f7a77f6fSMichael Tuexen 
1101b54d3a6cSRandall Stewart 	/*
1102f8829a4aSRandall Stewart 	 * Now the stream parameters, here we allocate space for all streams
1103f8829a4aSRandall Stewart 	 * that we request by default.
1104f8829a4aSRandall Stewart 	 */
1105ea44232bSRandall Stewart 	asoc->strm_realoutsize = asoc->streamoutcnt = asoc->pre_open_streams =
1106c979034bSMichael Tuexen 	    o_strms;
1107f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->strmout, struct sctp_stream_out *,
1108f8829a4aSRandall Stewart 	    asoc->streamoutcnt * sizeof(struct sctp_stream_out),
1109207304d4SRandall Stewart 	    SCTP_M_STRMO);
1110f8829a4aSRandall Stewart 	if (asoc->strmout == NULL) {
1111f8829a4aSRandall Stewart 		/* big trouble no memory */
1112c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1113f8829a4aSRandall Stewart 		return (ENOMEM);
1114f8829a4aSRandall Stewart 	}
1115f8829a4aSRandall Stewart 	for (i = 0; i < asoc->streamoutcnt; i++) {
1116f8829a4aSRandall Stewart 		/*
1117f8829a4aSRandall Stewart 		 * inbound side must be set to 0xffff, also NOTE when we get
1118f8829a4aSRandall Stewart 		 * the INIT-ACK back (for INIT sender) we MUST reduce the
1119f8829a4aSRandall Stewart 		 * count (streamoutcnt) but first check if we sent to any of
1120f8829a4aSRandall Stewart 		 * the upper streams that were dropped (if some were). Those
1121f8829a4aSRandall Stewart 		 * that were dropped must be notified to the upper layer as
1122f8829a4aSRandall Stewart 		 * failed to send.
1123f8829a4aSRandall Stewart 		 */
112463d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_ordered = 0;
112563d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_unordered = 0;
1126f8829a4aSRandall Stewart 		TAILQ_INIT(&asoc->strmout[i].outqueue);
1127325c8c46SMichael Tuexen 		asoc->strmout[i].chunks_on_queues = 0;
1128f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
1129f0396ad1SMichael Tuexen 		for (j = 0; j < SCTP_PR_SCTP_MAX + 1; j++) {
1130f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_sent[j] = 0;
1131f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_unsent[j] = 0;
1132f0396ad1SMichael Tuexen 		}
1133f0396ad1SMichael Tuexen #else
1134f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_sent[0] = 0;
1135f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_unsent[0] = 0;
1136f0396ad1SMichael Tuexen #endif
113749656eefSMichael Tuexen 		asoc->strmout[i].sid = i;
1138f8829a4aSRandall Stewart 		asoc->strmout[i].last_msg_incomplete = 0;
11397cca1775SRandall Stewart 		asoc->strmout[i].state = SCTP_STREAM_OPENING;
1140d1ea5fa9SMichael Tuexen 		asoc->ss_functions.sctp_ss_init_stream(stcb, &asoc->strmout[i], NULL);
1141f8829a4aSRandall Stewart 	}
1142f7a77f6fSMichael Tuexen 	asoc->ss_functions.sctp_ss_init(stcb, asoc, 0);
1143f7a77f6fSMichael Tuexen 
1144f8829a4aSRandall Stewart 	/* Now the mapping array */
1145f8829a4aSRandall Stewart 	asoc->mapping_array_size = SCTP_INITIAL_MAPPING_ARRAY;
1146f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->mapping_array, uint8_t *, asoc->mapping_array_size,
1147207304d4SRandall Stewart 	    SCTP_M_MAP);
1148f8829a4aSRandall Stewart 	if (asoc->mapping_array == NULL) {
1149207304d4SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1150c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1151f8829a4aSRandall Stewart 		return (ENOMEM);
1152f8829a4aSRandall Stewart 	}
1153f8829a4aSRandall Stewart 	memset(asoc->mapping_array, 0, asoc->mapping_array_size);
1154b5c16493SMichael Tuexen 	SCTP_MALLOC(asoc->nr_mapping_array, uint8_t *, asoc->mapping_array_size,
1155830d754dSRandall Stewart 	    SCTP_M_MAP);
1156bf1be571SRandall Stewart 	if (asoc->nr_mapping_array == NULL) {
1157bf1be571SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1158bf1be571SRandall Stewart 		SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1159bf1be571SRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1160bf1be571SRandall Stewart 		return (ENOMEM);
1161bf1be571SRandall Stewart 	}
1162b5c16493SMichael Tuexen 	memset(asoc->nr_mapping_array, 0, asoc->mapping_array_size);
1163830d754dSRandall Stewart 
1164f8829a4aSRandall Stewart 	/* Now the init of the other outqueues */
1165f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->free_chunks);
1166f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->control_send_queue);
1167c54a18d2SRandall Stewart 	TAILQ_INIT(&asoc->asconf_send_queue);
1168f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->send_queue);
1169f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->sent_queue);
1170f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->resetHead);
1171a1cb341bSMichael Tuexen 	asoc->max_inbound_streams = inp->sctp_ep.max_open_streams_intome;
1172f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->asconf_queue);
1173f8829a4aSRandall Stewart 	/* authentication fields */
1174f8829a4aSRandall Stewart 	asoc->authinfo.random = NULL;
1175830d754dSRandall Stewart 	asoc->authinfo.active_keyid = 0;
1176f8829a4aSRandall Stewart 	asoc->authinfo.assoc_key = NULL;
1177f8829a4aSRandall Stewart 	asoc->authinfo.assoc_keyid = 0;
1178f8829a4aSRandall Stewart 	asoc->authinfo.recv_key = NULL;
1179f8829a4aSRandall Stewart 	asoc->authinfo.recv_keyid = 0;
1180f8829a4aSRandall Stewart 	LIST_INIT(&asoc->shared_keys);
1181f42a358aSRandall Stewart 	asoc->marked_retrans = 0;
1182a1cb341bSMichael Tuexen 	asoc->port = inp->sctp_ep.port;
1183f42a358aSRandall Stewart 	asoc->timoinit = 0;
1184f42a358aSRandall Stewart 	asoc->timodata = 0;
1185f42a358aSRandall Stewart 	asoc->timosack = 0;
1186f42a358aSRandall Stewart 	asoc->timoshutdown = 0;
1187f42a358aSRandall Stewart 	asoc->timoheartbeat = 0;
1188f42a358aSRandall Stewart 	asoc->timocookie = 0;
1189f42a358aSRandall Stewart 	asoc->timoshutdownack = 0;
11906e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&asoc->start_time);
11916e55db54SRandall Stewart 	asoc->discontinuity_time = asoc->start_time;
1192f0396ad1SMichael Tuexen 	for (i = 0; i < SCTP_PR_SCTP_MAX + 1; i++) {
1193f0396ad1SMichael Tuexen 		asoc->abandoned_unsent[i] = 0;
1194f0396ad1SMichael Tuexen 		asoc->abandoned_sent[i] = 0;
1195f0396ad1SMichael Tuexen 	}
1196eacc51c5SRandall Stewart 	/*
1197eacc51c5SRandall Stewart 	 * sa_ignore MEMLEAK {memory is put in the assoc mapping array and
119877acdc25SRandall Stewart 	 * freed later when the association is freed.
1199eacc51c5SRandall Stewart 	 */
1200f8829a4aSRandall Stewart 	return (0);
1201f8829a4aSRandall Stewart }
1202f8829a4aSRandall Stewart 
12030e13104dSRandall Stewart void
12040e13104dSRandall Stewart sctp_print_mapping_array(struct sctp_association *asoc)
12050e13104dSRandall Stewart {
1206aed5947cSMichael Tuexen 	unsigned int i, limit;
12070e13104dSRandall Stewart 
1208cd3fd531SMichael Tuexen 	SCTP_PRINTF("Mapping array size: %d, baseTSN: %8.8x, cumAck: %8.8x, highestTSN: (%8.8x, %8.8x).\n",
12090e13104dSRandall Stewart 	    asoc->mapping_array_size,
12100e13104dSRandall Stewart 	    asoc->mapping_array_base_tsn,
12110e13104dSRandall Stewart 	    asoc->cumulative_tsn,
1212aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_map,
1213aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_nr_map);
1214aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
121560990c0cSMichael Tuexen 		if (asoc->mapping_array[limit - 1] != 0) {
121677acdc25SRandall Stewart 			break;
121777acdc25SRandall Stewart 		}
121877acdc25SRandall Stewart 	}
1219cd3fd531SMichael Tuexen 	SCTP_PRINTF("Renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
122077acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1221cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
122277acdc25SRandall Stewart 	}
1223aed5947cSMichael Tuexen 	if (limit % 16)
1224cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
1225aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
1226aed5947cSMichael Tuexen 		if (asoc->nr_mapping_array[limit - 1]) {
122777acdc25SRandall Stewart 			break;
122877acdc25SRandall Stewart 		}
122977acdc25SRandall Stewart 	}
1230cd3fd531SMichael Tuexen 	SCTP_PRINTF("Non renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
123177acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1232cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->nr_mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
12330e13104dSRandall Stewart 	}
1234aed5947cSMichael Tuexen 	if (limit % 16)
1235cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
12360e13104dSRandall Stewart }
12370e13104dSRandall Stewart 
1238f8829a4aSRandall Stewart int
12390696e120SRandall Stewart sctp_expand_mapping_array(struct sctp_association *asoc, uint32_t needed)
1240f8829a4aSRandall Stewart {
1241f8829a4aSRandall Stewart 	/* mapping array needs to grow */
1242b5c16493SMichael Tuexen 	uint8_t *new_array1, *new_array2;
12430696e120SRandall Stewart 	uint32_t new_size;
1244f8829a4aSRandall Stewart 
12450696e120SRandall Stewart 	new_size = asoc->mapping_array_size + ((needed + 7) / 8 + SCTP_MAPPING_ARRAY_INCR);
1246b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array1, uint8_t *, new_size, SCTP_M_MAP);
1247b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array2, uint8_t *, new_size, SCTP_M_MAP);
1248b5c16493SMichael Tuexen 	if ((new_array1 == NULL) || (new_array2 == NULL)) {
1249f8829a4aSRandall Stewart 		/* can't get more, forget it */
1250b5c16493SMichael Tuexen 		SCTP_PRINTF("No memory for expansion of SCTP mapping array %d\n", new_size);
1251b5c16493SMichael Tuexen 		if (new_array1) {
1252b5c16493SMichael Tuexen 			SCTP_FREE(new_array1, SCTP_M_MAP);
1253b5c16493SMichael Tuexen 		}
1254b5c16493SMichael Tuexen 		if (new_array2) {
1255b5c16493SMichael Tuexen 			SCTP_FREE(new_array2, SCTP_M_MAP);
1256b5c16493SMichael Tuexen 		}
1257f8829a4aSRandall Stewart 		return (-1);
1258f8829a4aSRandall Stewart 	}
1259b5c16493SMichael Tuexen 	memset(new_array1, 0, new_size);
1260b5c16493SMichael Tuexen 	memset(new_array2, 0, new_size);
1261b5c16493SMichael Tuexen 	memcpy(new_array1, asoc->mapping_array, asoc->mapping_array_size);
1262b5c16493SMichael Tuexen 	memcpy(new_array2, asoc->nr_mapping_array, asoc->mapping_array_size);
1263207304d4SRandall Stewart 	SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1264830d754dSRandall Stewart 	SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP);
1265b5c16493SMichael Tuexen 	asoc->mapping_array = new_array1;
1266b5c16493SMichael Tuexen 	asoc->nr_mapping_array = new_array2;
1267b5c16493SMichael Tuexen 	asoc->mapping_array_size = new_size;
1268830d754dSRandall Stewart 	return (0);
1269830d754dSRandall Stewart }
1270830d754dSRandall Stewart 
12718933fa13SRandall Stewart 
127242551e99SRandall Stewart static void
127342551e99SRandall Stewart sctp_iterator_work(struct sctp_iterator *it)
127442551e99SRandall Stewart {
127542551e99SRandall Stewart 	int iteration_count = 0;
127642551e99SRandall Stewart 	int inp_skip = 0;
1277ec4c19fcSRandall Stewart 	int first_in = 1;
1278ec4c19fcSRandall Stewart 	struct sctp_inpcb *tinp;
127942551e99SRandall Stewart 
1280ec4c19fcSRandall Stewart 	SCTP_INP_INFO_RLOCK();
128142551e99SRandall Stewart 	SCTP_ITERATOR_LOCK();
1282dcb436c9SMichael Tuexen 	sctp_it_ctl.cur_it = it;
1283ad81507eSRandall Stewart 	if (it->inp) {
1284ec4c19fcSRandall Stewart 		SCTP_INP_RLOCK(it->inp);
128542551e99SRandall Stewart 		SCTP_INP_DECR_REF(it->inp);
1286ad81507eSRandall Stewart 	}
128742551e99SRandall Stewart 	if (it->inp == NULL) {
128842551e99SRandall Stewart 		/* iterator is complete */
128942551e99SRandall Stewart done_with_iterator:
1290dcb436c9SMichael Tuexen 		sctp_it_ctl.cur_it = NULL;
129142551e99SRandall Stewart 		SCTP_ITERATOR_UNLOCK();
1292ec4c19fcSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
129342551e99SRandall Stewart 		if (it->function_atend != NULL) {
129442551e99SRandall Stewart 			(*it->function_atend) (it->pointer, it->val);
129542551e99SRandall Stewart 		}
1296207304d4SRandall Stewart 		SCTP_FREE(it, SCTP_M_ITER);
129742551e99SRandall Stewart 		return;
129842551e99SRandall Stewart 	}
129942551e99SRandall Stewart select_a_new_ep:
1300ec4c19fcSRandall Stewart 	if (first_in) {
1301ec4c19fcSRandall Stewart 		first_in = 0;
1302ec4c19fcSRandall Stewart 	} else {
1303f7517433SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1304ec4c19fcSRandall Stewart 	}
130542551e99SRandall Stewart 	while (((it->pcb_flags) &&
130642551e99SRandall Stewart 	    ((it->inp->sctp_flags & it->pcb_flags) != it->pcb_flags)) ||
130742551e99SRandall Stewart 	    ((it->pcb_features) &&
130842551e99SRandall Stewart 	    ((it->inp->sctp_features & it->pcb_features) != it->pcb_features))) {
130942551e99SRandall Stewart 		/* endpoint flags or features don't match, so keep looking */
131042551e99SRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
1311f7517433SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
131242551e99SRandall Stewart 			goto done_with_iterator;
131342551e99SRandall Stewart 		}
1314ec4c19fcSRandall Stewart 		tinp = it->inp;
131542551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
1316ec4c19fcSRandall Stewart 		SCTP_INP_RUNLOCK(tinp);
131742551e99SRandall Stewart 		if (it->inp == NULL) {
131842551e99SRandall Stewart 			goto done_with_iterator;
131942551e99SRandall Stewart 		}
132042551e99SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1321f7517433SRandall Stewart 	}
132242551e99SRandall Stewart 	/* now go through each assoc which is in the desired state */
132342551e99SRandall Stewart 	if (it->done_current_ep == 0) {
132442551e99SRandall Stewart 		if (it->function_inp != NULL)
132542551e99SRandall Stewart 			inp_skip = (*it->function_inp) (it->inp, it->pointer, it->val);
132642551e99SRandall Stewart 		it->done_current_ep = 1;
132742551e99SRandall Stewart 	}
132842551e99SRandall Stewart 	if (it->stcb == NULL) {
132942551e99SRandall Stewart 		/* run the per instance function */
133042551e99SRandall Stewart 		it->stcb = LIST_FIRST(&it->inp->sctp_asoc_list);
133142551e99SRandall Stewart 	}
133242551e99SRandall Stewart 	if ((inp_skip) || it->stcb == NULL) {
133342551e99SRandall Stewart 		if (it->function_inp_end != NULL) {
133442551e99SRandall Stewart 			inp_skip = (*it->function_inp_end) (it->inp,
133542551e99SRandall Stewart 			    it->pointer,
133642551e99SRandall Stewart 			    it->val);
133742551e99SRandall Stewart 		}
133842551e99SRandall Stewart 		SCTP_INP_RUNLOCK(it->inp);
133942551e99SRandall Stewart 		goto no_stcb;
134042551e99SRandall Stewart 	}
134142551e99SRandall Stewart 	while (it->stcb) {
134242551e99SRandall Stewart 		SCTP_TCB_LOCK(it->stcb);
134342551e99SRandall Stewart 		if (it->asoc_state && ((it->stcb->asoc.state & it->asoc_state) != it->asoc_state)) {
134442551e99SRandall Stewart 			/* not in the right state... keep looking */
134542551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
134642551e99SRandall Stewart 			goto next_assoc;
134742551e99SRandall Stewart 		}
134842551e99SRandall Stewart 		/* see if we have limited out the iterator loop */
134942551e99SRandall Stewart 		iteration_count++;
135042551e99SRandall Stewart 		if (iteration_count > SCTP_ITERATOR_MAX_AT_ONCE) {
135142551e99SRandall Stewart 			/* Pause to let others grab the lock */
135242551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, 1);
135342551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
1354c4739e2fSRandall Stewart 			SCTP_INP_INCR_REF(it->inp);
135542551e99SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
135642551e99SRandall Stewart 			SCTP_ITERATOR_UNLOCK();
1357ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1358ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RLOCK();
135942551e99SRandall Stewart 			SCTP_ITERATOR_LOCK();
1360f7517433SRandall Stewart 			if (sctp_it_ctl.iterator_flags) {
1361f7517433SRandall Stewart 				/* We won't be staying here */
1362f7517433SRandall Stewart 				SCTP_INP_DECR_REF(it->inp);
1363f7517433SRandall Stewart 				atomic_add_int(&it->stcb->asoc.refcnt, -1);
1364f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1365f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_IT) {
1366f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_IT;
1367f7517433SRandall Stewart 					goto done_with_iterator;
1368f7517433SRandall Stewart 				}
1369f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1370f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_INP) {
1371f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_INP;
1372f7517433SRandall Stewart 					goto no_stcb;
1373f7517433SRandall Stewart 				}
1374f7517433SRandall Stewart 				/* If we reach here huh? */
1375cd3fd531SMichael Tuexen 				SCTP_PRINTF("Unknown it ctl flag %x\n",
1376f7517433SRandall Stewart 				    sctp_it_ctl.iterator_flags);
1377f7517433SRandall Stewart 				sctp_it_ctl.iterator_flags = 0;
1378f7517433SRandall Stewart 			}
137942551e99SRandall Stewart 			SCTP_INP_RLOCK(it->inp);
1380c4739e2fSRandall Stewart 			SCTP_INP_DECR_REF(it->inp);
138142551e99SRandall Stewart 			SCTP_TCB_LOCK(it->stcb);
138242551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, -1);
138342551e99SRandall Stewart 			iteration_count = 0;
138442551e99SRandall Stewart 		}
138542551e99SRandall Stewart 		/* run function on this one */
138642551e99SRandall Stewart 		(*it->function_assoc) (it->inp, it->stcb, it->pointer, it->val);
138742551e99SRandall Stewart 
138842551e99SRandall Stewart 		/*
138942551e99SRandall Stewart 		 * we lie here, it really needs to have its own type but
139042551e99SRandall Stewart 		 * first I must verify that this won't effect things :-0
139142551e99SRandall Stewart 		 */
139242551e99SRandall Stewart 		if (it->no_chunk_output == 0)
1393ceaad40aSRandall Stewart 			sctp_chunk_output(it->inp, it->stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
139442551e99SRandall Stewart 
139542551e99SRandall Stewart 		SCTP_TCB_UNLOCK(it->stcb);
139642551e99SRandall Stewart next_assoc:
139742551e99SRandall Stewart 		it->stcb = LIST_NEXT(it->stcb, sctp_tcblist);
139842551e99SRandall Stewart 		if (it->stcb == NULL) {
139942551e99SRandall Stewart 			/* Run last function */
140042551e99SRandall Stewart 			if (it->function_inp_end != NULL) {
140142551e99SRandall Stewart 				inp_skip = (*it->function_inp_end) (it->inp,
140242551e99SRandall Stewart 				    it->pointer,
140342551e99SRandall Stewart 				    it->val);
140442551e99SRandall Stewart 			}
140542551e99SRandall Stewart 		}
140642551e99SRandall Stewart 	}
140742551e99SRandall Stewart 	SCTP_INP_RUNLOCK(it->inp);
140842551e99SRandall Stewart no_stcb:
140942551e99SRandall Stewart 	/* done with all assocs on this endpoint, move on to next endpoint */
141042551e99SRandall Stewart 	it->done_current_ep = 0;
141142551e99SRandall Stewart 	if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
141242551e99SRandall Stewart 		it->inp = NULL;
141342551e99SRandall Stewart 	} else {
141442551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
141542551e99SRandall Stewart 	}
141642551e99SRandall Stewart 	if (it->inp == NULL) {
141742551e99SRandall Stewart 		goto done_with_iterator;
141842551e99SRandall Stewart 	}
141942551e99SRandall Stewart 	goto select_a_new_ep;
142042551e99SRandall Stewart }
142142551e99SRandall Stewart 
142242551e99SRandall Stewart void
142342551e99SRandall Stewart sctp_iterator_worker(void)
142442551e99SRandall Stewart {
14254a9ef3f8SMichael Tuexen 	struct sctp_iterator *it, *nit;
142642551e99SRandall Stewart 
142742551e99SRandall Stewart 	/* This function is called with the WQ lock in place */
142842551e99SRandall Stewart 
1429f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 1;
14304a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) {
143142551e99SRandall Stewart 		/* now lets work on this one */
1432f7517433SRandall Stewart 		TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr);
143342551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
1434f7517433SRandall Stewart 		CURVNET_SET(it->vn);
143542551e99SRandall Stewart 		sctp_iterator_work(it);
1436f7517433SRandall Stewart 		CURVNET_RESTORE();
143742551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
14383c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
143942551e99SRandall Stewart 	}
1440f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 0;
144142551e99SRandall Stewart 	return;
144242551e99SRandall Stewart }
144342551e99SRandall Stewart 
1444f8829a4aSRandall Stewart 
1445f8829a4aSRandall Stewart static void
1446f8829a4aSRandall Stewart sctp_handle_addr_wq(void)
1447f8829a4aSRandall Stewart {
1448f8829a4aSRandall Stewart 	/* deal with the ADDR wq from the rtsock calls */
14494a9ef3f8SMichael Tuexen 	struct sctp_laddr *wi, *nwi;
145042551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
1451f8829a4aSRandall Stewart 
145242551e99SRandall Stewart 	SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
1453207304d4SRandall Stewart 	    sizeof(struct sctp_asconf_iterator), SCTP_M_ASC_IT);
145442551e99SRandall Stewart 	if (asc == NULL) {
145542551e99SRandall Stewart 		/* Try later, no memory */
1456f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
1457f8829a4aSRandall Stewart 		    (struct sctp_inpcb *)NULL,
1458f8829a4aSRandall Stewart 		    (struct sctp_tcb *)NULL,
1459f8829a4aSRandall Stewart 		    (struct sctp_nets *)NULL);
146042551e99SRandall Stewart 		return;
1461f8829a4aSRandall Stewart 	}
146242551e99SRandall Stewart 	LIST_INIT(&asc->list_of_work);
146342551e99SRandall Stewart 	asc->cnt = 0;
1464f7517433SRandall Stewart 
14654a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(wi, &SCTP_BASE_INFO(addr_wq), sctp_nxt_addr, nwi) {
146642551e99SRandall Stewart 		LIST_REMOVE(wi, sctp_nxt_addr);
146742551e99SRandall Stewart 		LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
146842551e99SRandall Stewart 		asc->cnt++;
1469f8829a4aSRandall Stewart 	}
1470f7517433SRandall Stewart 
147142551e99SRandall Stewart 	if (asc->cnt == 0) {
1472207304d4SRandall Stewart 		SCTP_FREE(asc, SCTP_M_ASC_IT);
147342551e99SRandall Stewart 	} else {
14742b1c7de4SMichael Tuexen 		int ret;
14752b1c7de4SMichael Tuexen 
14762b1c7de4SMichael Tuexen 		ret = sctp_initiate_iterator(sctp_asconf_iterator_ep,
14771b649582SRandall Stewart 		    sctp_asconf_iterator_stcb,
147842551e99SRandall Stewart 		    NULL,	/* No ep end for boundall */
147942551e99SRandall Stewart 		    SCTP_PCB_FLAGS_BOUNDALL,
148042551e99SRandall Stewart 		    SCTP_PCB_ANY_FEATURES,
14811b649582SRandall Stewart 		    SCTP_ASOC_ANY_STATE,
14821b649582SRandall Stewart 		    (void *)asc, 0,
14831b649582SRandall Stewart 		    sctp_asconf_iterator_end, NULL, 0);
14842b1c7de4SMichael Tuexen 		if (ret) {
14852b1c7de4SMichael Tuexen 			SCTP_PRINTF("Failed to initiate iterator for handle_addr_wq\n");
1486b7b84c0eSMichael Tuexen 			/*
1487b7b84c0eSMichael Tuexen 			 * Freeing if we are stopping or put back on the
1488b7b84c0eSMichael Tuexen 			 * addr_wq.
1489b7b84c0eSMichael Tuexen 			 */
14902b1c7de4SMichael Tuexen 			if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) {
14912b1c7de4SMichael Tuexen 				sctp_asconf_iterator_end(asc, 0);
14922b1c7de4SMichael Tuexen 			} else {
14932b1c7de4SMichael Tuexen 				LIST_FOREACH(wi, &asc->list_of_work, sctp_nxt_addr) {
14942b1c7de4SMichael Tuexen 					LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
14952b1c7de4SMichael Tuexen 				}
14962b1c7de4SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
14972b1c7de4SMichael Tuexen 			}
14982b1c7de4SMichael Tuexen 		}
149942551e99SRandall Stewart 	}
1500f8829a4aSRandall Stewart }
1501f8829a4aSRandall Stewart 
1502f8829a4aSRandall Stewart void
1503f8829a4aSRandall Stewart sctp_timeout_handler(void *t)
1504f8829a4aSRandall Stewart {
1505f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1506f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1507f8829a4aSRandall Stewart 	struct sctp_nets *net;
1508f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1509267dbe63SMichael Tuexen 	struct mbuf *op_err;
1510ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1511ceaad40aSRandall Stewart 	struct socket *so;
1512ceaad40aSRandall Stewart #endif
1513548f47a8SMichael Tuexen 	int did_output;
1514fa89f692SMichael Tuexen 	int type;
1515f8829a4aSRandall Stewart 
1516f8829a4aSRandall Stewart 	tmr = (struct sctp_timer *)t;
1517f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)tmr->ep;
1518f8829a4aSRandall Stewart 	stcb = (struct sctp_tcb *)tmr->tcb;
1519f8829a4aSRandall Stewart 	net = (struct sctp_nets *)tmr->net;
15208518270eSMichael Tuexen 	CURVNET_SET((struct vnet *)tmr->vnet);
1521f8829a4aSRandall Stewart 	did_output = 1;
1522f8829a4aSRandall Stewart 
1523f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1524f8829a4aSRandall Stewart 	sctp_audit_log(0xF0, (uint8_t)tmr->type);
1525f8829a4aSRandall Stewart 	sctp_auditing(3, inp, stcb, net);
1526f8829a4aSRandall Stewart #endif
1527f8829a4aSRandall Stewart 
1528f8829a4aSRandall Stewart 	/* sanity checks... */
1529f8829a4aSRandall Stewart 	if (tmr->self != (void *)tmr) {
1530f8829a4aSRandall Stewart 		/*
1531ad81507eSRandall Stewart 		 * SCTP_PRINTF("Stale SCTP timer fired (%p), ignoring...\n",
1532dd294dceSMichael Tuexen 		 * (void *)tmr);
1533f8829a4aSRandall Stewart 		 */
15348518270eSMichael Tuexen 		CURVNET_RESTORE();
1535f8829a4aSRandall Stewart 		return;
1536f8829a4aSRandall Stewart 	}
1537a5d547adSRandall Stewart 	tmr->stopped_from = 0xa001;
1538f8829a4aSRandall Stewart 	if (!SCTP_IS_TIMER_TYPE_VALID(tmr->type)) {
1539f8829a4aSRandall Stewart 		/*
1540ad81507eSRandall Stewart 		 * SCTP_PRINTF("SCTP timer fired with invalid type: 0x%x\n",
1541f8829a4aSRandall Stewart 		 * tmr->type);
1542f8829a4aSRandall Stewart 		 */
15438518270eSMichael Tuexen 		CURVNET_RESTORE();
1544f8829a4aSRandall Stewart 		return;
1545f8829a4aSRandall Stewart 	}
1546a5d547adSRandall Stewart 	tmr->stopped_from = 0xa002;
1547f8829a4aSRandall Stewart 	if ((tmr->type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL)) {
15488518270eSMichael Tuexen 		CURVNET_RESTORE();
1549f8829a4aSRandall Stewart 		return;
1550f8829a4aSRandall Stewart 	}
1551f8829a4aSRandall Stewart 	/* if this is an iterator timeout, get the struct and clear inp */
1552a5d547adSRandall Stewart 	tmr->stopped_from = 0xa003;
1553f8829a4aSRandall Stewart 	if (inp) {
1554f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
1555aa1808b7SMichael Tuexen 		if ((inp->sctp_socket == NULL) &&
1556f8829a4aSRandall Stewart 		    ((tmr->type != SCTP_TIMER_TYPE_INPKILL) &&
1557810ec536SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_INIT) &&
1558a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SEND) &&
1559a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_RECV) &&
1560a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_HEARTBEAT) &&
1561f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWN) &&
1562f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNACK) &&
1563f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNGUARD) &&
1564*2c62ba73SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_ASOCKILL))) {
1565f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
15668518270eSMichael Tuexen 			CURVNET_RESTORE();
1567f8829a4aSRandall Stewart 			return;
1568f8829a4aSRandall Stewart 		}
1569f8829a4aSRandall Stewart 	}
1570a5d547adSRandall Stewart 	tmr->stopped_from = 0xa004;
1571f8829a4aSRandall Stewart 	if (stcb) {
1572c105859eSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1573f8829a4aSRandall Stewart 		if (stcb->asoc.state == 0) {
1574c105859eSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1575f8829a4aSRandall Stewart 			if (inp) {
1576f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1577f8829a4aSRandall Stewart 			}
15788518270eSMichael Tuexen 			CURVNET_RESTORE();
1579f8829a4aSRandall Stewart 			return;
1580f8829a4aSRandall Stewart 		}
1581f8829a4aSRandall Stewart 	}
1582fa89f692SMichael Tuexen 	type = tmr->type;
1583a5d547adSRandall Stewart 	tmr->stopped_from = 0xa005;
1584fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer type %d goes off\n", type);
1585139bc87fSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
1586f8829a4aSRandall Stewart 		if (inp) {
1587f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
1588f8829a4aSRandall Stewart 		}
1589207304d4SRandall Stewart 		if (stcb) {
1590207304d4SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1591207304d4SRandall Stewart 		}
15928518270eSMichael Tuexen 		CURVNET_RESTORE();
1593f8829a4aSRandall Stewart 		return;
1594f8829a4aSRandall Stewart 	}
1595a5d547adSRandall Stewart 	tmr->stopped_from = 0xa006;
1596a5d547adSRandall Stewart 
1597f8829a4aSRandall Stewart 	if (stcb) {
1598f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
159950cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
1600fa89f692SMichael Tuexen 		if ((type != SCTP_TIMER_TYPE_ASOCKILL) &&
1601b54d3a6cSRandall Stewart 		    ((stcb->asoc.state == 0) ||
1602b54d3a6cSRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED))) {
1603b54d3a6cSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1604b54d3a6cSRandall Stewart 			if (inp) {
1605b54d3a6cSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1606b54d3a6cSRandall Stewart 			}
16078518270eSMichael Tuexen 			CURVNET_RESTORE();
1608b54d3a6cSRandall Stewart 			return;
1609b54d3a6cSRandall Stewart 		}
1610*2c62ba73SMichael Tuexen 	} else if (inp != NULL) {
1611*2c62ba73SMichael Tuexen 		if (type != SCTP_TIMER_TYPE_INPKILL) {
1612*2c62ba73SMichael Tuexen 			SCTP_INP_WLOCK(inp);
1613*2c62ba73SMichael Tuexen 		}
1614*2c62ba73SMichael Tuexen 	} else {
1615*2c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_LOCK();
1616f8829a4aSRandall Stewart 	}
1617cd0a4ff6SPedro F. Giffuni 	/* record in stopped what t-o occurred */
1618fa89f692SMichael Tuexen 	tmr->stopped_from = type;
161944b7479bSRandall Stewart 
1620f8829a4aSRandall Stewart 	/* mark as being serviced now */
162144b7479bSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
162244b7479bSRandall Stewart 		/*
162344b7479bSRandall Stewart 		 * Callout has been rescheduled.
162444b7479bSRandall Stewart 		 */
162544b7479bSRandall Stewart 		goto get_out;
162644b7479bSRandall Stewart 	}
162744b7479bSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
162844b7479bSRandall Stewart 		/*
162944b7479bSRandall Stewart 		 * Not active, so no action.
163044b7479bSRandall Stewart 		 */
163144b7479bSRandall Stewart 		goto get_out;
163244b7479bSRandall Stewart 	}
1633139bc87fSRandall Stewart 	SCTP_OS_TIMER_DEACTIVATE(&tmr->timer);
1634f8829a4aSRandall Stewart 
1635f8829a4aSRandall Stewart 	/* call the handler for the appropriate timer type */
1636fa89f692SMichael Tuexen 	switch (type) {
1637f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1638f8829a4aSRandall Stewart 		sctp_handle_addr_wq();
1639f8829a4aSRandall Stewart 		break;
1640f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1641ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1642ad81507eSRandall Stewart 			break;
1643ad81507eSRandall Stewart 		}
1644f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timodata);
1645f42a358aSRandall Stewart 		stcb->asoc.timodata++;
1646f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
1647f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1648f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1649f8829a4aSRandall Stewart 		}
1650b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
165160990c0cSMichael Tuexen 		if (sctp_t3rxt_timer(inp, stcb, net)) {
1652f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1653f8829a4aSRandall Stewart 
1654f8829a4aSRandall Stewart 			goto out_decr;
1655f8829a4aSRandall Stewart 		}
1656b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1657f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1658f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1659f8829a4aSRandall Stewart #endif
1660ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1661f8829a4aSRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
16624a9ef3f8SMichael Tuexen 		    (stcb->asoc.sent_queue_cnt > 0)) {
1663f8829a4aSRandall Stewart 			struct sctp_tmit_chunk *chk;
1664f8829a4aSRandall Stewart 
1665f8829a4aSRandall Stewart 			/*
1666f8829a4aSRandall Stewart 			 * safeguard. If there on some on the sent queue
1667f8829a4aSRandall Stewart 			 * somewhere but no timers running something is
1668f8829a4aSRandall Stewart 			 * wrong... so we start a timer on the first chunk
1669f8829a4aSRandall Stewart 			 * on the send queue on whatever net it is sent to.
1670f8829a4aSRandall Stewart 			 */
1671f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1672f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb,
1673f8829a4aSRandall Stewart 			    chk->whoTo);
1674f8829a4aSRandall Stewart 		}
1675f8829a4aSRandall Stewart 		break;
1676f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1677ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1678ad81507eSRandall Stewart 			break;
1679ad81507eSRandall Stewart 		}
1680f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinit);
1681f42a358aSRandall Stewart 		stcb->asoc.timoinit++;
1682f8829a4aSRandall Stewart 		if (sctp_t1init_timer(inp, stcb, net)) {
1683f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1684f8829a4aSRandall Stewart 			goto out_decr;
1685f8829a4aSRandall Stewart 		}
1686f8829a4aSRandall Stewart 		/* We do output but not here */
1687f8829a4aSRandall Stewart 		did_output = 0;
1688f8829a4aSRandall Stewart 		break;
1689f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1690ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1691ad81507eSRandall Stewart 			break;
1692ca85e948SMichael Tuexen 		}
1693f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timosack);
1694f42a358aSRandall Stewart 		stcb->asoc.timosack++;
1695689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_NOT_LOCKED);
1696f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1697f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1698f8829a4aSRandall Stewart #endif
1699ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SACK_TMR, SCTP_SO_NOT_LOCKED);
1700f8829a4aSRandall Stewart 		break;
1701f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
1702ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1703ad81507eSRandall Stewart 			break;
1704ad81507eSRandall Stewart 		}
1705f8829a4aSRandall Stewart 		if (sctp_shutdown_timer(inp, stcb, net)) {
1706f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1707f8829a4aSRandall Stewart 			goto out_decr;
1708f8829a4aSRandall Stewart 		}
1709f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdown);
1710f42a358aSRandall Stewart 		stcb->asoc.timoshutdown++;
1711f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1712f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1713f8829a4aSRandall Stewart #endif
1714ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_NOT_LOCKED);
1715f8829a4aSRandall Stewart 		break;
1716f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
1717ca85e948SMichael Tuexen 		if ((stcb == NULL) || (inp == NULL) || (net == NULL)) {
1718ad81507eSRandall Stewart 			break;
1719ad81507eSRandall Stewart 		}
1720f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoheartbeat);
1721f42a358aSRandall Stewart 		stcb->asoc.timoheartbeat++;
1722ca85e948SMichael Tuexen 		if (sctp_heartbeat_timer(inp, stcb, net)) {
1723f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1724f8829a4aSRandall Stewart 			goto out_decr;
1725f8829a4aSRandall Stewart 		}
1726f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1727ca85e948SMichael Tuexen 		sctp_auditing(4, inp, stcb, net);
1728f8829a4aSRandall Stewart #endif
1729ca85e948SMichael Tuexen 		if (!(net->dest_state & SCTP_ADDR_NOHB)) {
1730629749b6SMichael Tuexen 			sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
1731ceaad40aSRandall Stewart 			sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_HB_TMR, SCTP_SO_NOT_LOCKED);
1732f8829a4aSRandall Stewart 		}
1733f8829a4aSRandall Stewart 		break;
1734f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
1735ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1736ad81507eSRandall Stewart 			break;
1737ad81507eSRandall Stewart 		}
1738f8829a4aSRandall Stewart 		if (sctp_cookie_timer(inp, stcb, net)) {
1739f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1740f8829a4aSRandall Stewart 			goto out_decr;
1741f8829a4aSRandall Stewart 		}
1742f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timocookie);
1743f42a358aSRandall Stewart 		stcb->asoc.timocookie++;
1744f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1745f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1746f8829a4aSRandall Stewart #endif
1747f8829a4aSRandall Stewart 		/*
1748f8829a4aSRandall Stewart 		 * We consider T3 and Cookie timer pretty much the same with
1749f8829a4aSRandall Stewart 		 * respect to where from in chunk_output.
1750f8829a4aSRandall Stewart 		 */
1751ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1752f8829a4aSRandall Stewart 		break;
1753f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
1754f8829a4aSRandall Stewart 		{
1755f8829a4aSRandall Stewart 			struct timeval tv;
1756f8829a4aSRandall Stewart 			int i, secret;
1757f8829a4aSRandall Stewart 
1758ad81507eSRandall Stewart 			if (inp == NULL) {
1759ad81507eSRandall Stewart 				break;
1760ad81507eSRandall Stewart 			}
1761f8829a4aSRandall Stewart 			SCTP_STAT_INCR(sctps_timosecret);
17626e55db54SRandall Stewart 			(void)SCTP_GETTIME_TIMEVAL(&tv);
1763f8829a4aSRandall Stewart 			inp->sctp_ep.time_of_secret_change = tv.tv_sec;
1764f8829a4aSRandall Stewart 			inp->sctp_ep.last_secret_number =
1765f8829a4aSRandall Stewart 			    inp->sctp_ep.current_secret_number;
1766f8829a4aSRandall Stewart 			inp->sctp_ep.current_secret_number++;
1767f8829a4aSRandall Stewart 			if (inp->sctp_ep.current_secret_number >=
1768f8829a4aSRandall Stewart 			    SCTP_HOW_MANY_SECRETS) {
1769f8829a4aSRandall Stewart 				inp->sctp_ep.current_secret_number = 0;
1770f8829a4aSRandall Stewart 			}
1771f8829a4aSRandall Stewart 			secret = (int)inp->sctp_ep.current_secret_number;
1772f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) {
1773f8829a4aSRandall Stewart 				inp->sctp_ep.secret_key[secret][i] =
1774f8829a4aSRandall Stewart 				    sctp_select_initial_TSN(&inp->sctp_ep);
1775f8829a4aSRandall Stewart 			}
1776f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, stcb, net);
1777f8829a4aSRandall Stewart 		}
1778f8829a4aSRandall Stewart 		did_output = 0;
1779f8829a4aSRandall Stewart 		break;
1780f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
1781ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1782ad81507eSRandall Stewart 			break;
1783ad81507eSRandall Stewart 		}
1784f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timopathmtu);
1785f8829a4aSRandall Stewart 		sctp_pathmtu_timer(inp, stcb, net);
1786f8829a4aSRandall Stewart 		did_output = 0;
1787f8829a4aSRandall Stewart 		break;
1788f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
1789ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1790ad81507eSRandall Stewart 			break;
1791ad81507eSRandall Stewart 		}
1792f8829a4aSRandall Stewart 		if (sctp_shutdownack_timer(inp, stcb, net)) {
1793f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1794f8829a4aSRandall Stewart 			goto out_decr;
1795f8829a4aSRandall Stewart 		}
1796f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownack);
1797f42a358aSRandall Stewart 		stcb->asoc.timoshutdownack++;
1798f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1799f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1800f8829a4aSRandall Stewart #endif
1801ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_ACK_TMR, SCTP_SO_NOT_LOCKED);
1802f8829a4aSRandall Stewart 		break;
1803f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
1804ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1805ad81507eSRandall Stewart 			break;
1806ad81507eSRandall Stewart 		}
1807f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownguard);
1808267dbe63SMichael Tuexen 		op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1809267dbe63SMichael Tuexen 		    "Shutdown guard timer expired");
1810267dbe63SMichael Tuexen 		sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1811f8829a4aSRandall Stewart 		/* no need to unlock on tcb its gone */
1812f8829a4aSRandall Stewart 		goto out_decr;
1813f8829a4aSRandall Stewart 
1814f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
1815ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1816ad81507eSRandall Stewart 			break;
1817ad81507eSRandall Stewart 		}
1818f8829a4aSRandall Stewart 		if (sctp_strreset_timer(inp, stcb, net)) {
1819f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1820f8829a4aSRandall Stewart 			goto out_decr;
1821f8829a4aSRandall Stewart 		}
1822f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timostrmrst);
1823ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_TMR, SCTP_SO_NOT_LOCKED);
1824f8829a4aSRandall Stewart 		break;
1825f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
1826ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1827ad81507eSRandall Stewart 			break;
1828ad81507eSRandall Stewart 		}
1829f8829a4aSRandall Stewart 		if (sctp_asconf_timer(inp, stcb, net)) {
1830f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1831f8829a4aSRandall Stewart 			goto out_decr;
1832f8829a4aSRandall Stewart 		}
1833f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoasconf);
1834f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1835f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1836f8829a4aSRandall Stewart #endif
1837ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_ASCONF_TMR, SCTP_SO_NOT_LOCKED);
1838f8829a4aSRandall Stewart 		break;
1839851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
1840851b7298SRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1841851b7298SRandall Stewart 			break;
1842851b7298SRandall Stewart 		}
184304ee05e8SRandall Stewart 		sctp_delete_prim_timer(inp, stcb, net);
1844851b7298SRandall Stewart 		SCTP_STAT_INCR(sctps_timodelprim);
1845851b7298SRandall Stewart 		break;
1846f8829a4aSRandall Stewart 
1847f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
1848ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1849ad81507eSRandall Stewart 			break;
1850ad81507eSRandall Stewart 		}
1851f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoautoclose);
1852f8829a4aSRandall Stewart 		sctp_autoclose_timer(inp, stcb, net);
1853ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1854f8829a4aSRandall Stewart 		did_output = 0;
1855f8829a4aSRandall Stewart 		break;
1856f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
1857ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1858ad81507eSRandall Stewart 			break;
1859ad81507eSRandall Stewart 		}
1860f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoassockill);
1861f8829a4aSRandall Stewart 		/* Can we free it yet? */
1862f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1863ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL,
1864ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_1);
1865ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1866ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
1867ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1868ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1869ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
1870ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
1871ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
1872ceaad40aSRandall Stewart #endif
1873ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
1874ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_2);
1875ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1876ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
1877ceaad40aSRandall Stewart #endif
1878f8829a4aSRandall Stewart 		/*
1879f8829a4aSRandall Stewart 		 * free asoc, always unlocks (or destroy's) so prevent
1880f8829a4aSRandall Stewart 		 * duplicate unlock or unlock of a free mtx :-0
1881f8829a4aSRandall Stewart 		 */
1882f8829a4aSRandall Stewart 		stcb = NULL;
1883f8829a4aSRandall Stewart 		goto out_no_decr;
1884f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
1885f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinpkill);
1886ad81507eSRandall Stewart 		if (inp == NULL) {
1887ad81507eSRandall Stewart 			break;
1888ad81507eSRandall Stewart 		}
1889f8829a4aSRandall Stewart 		/*
1890f8829a4aSRandall Stewart 		 * special case, take away our increment since WE are the
1891f8829a4aSRandall Stewart 		 * killer
1892f8829a4aSRandall Stewart 		 */
1893f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1894ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL,
1895ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_3);
1896b0552ae2SRandall Stewart 		sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
18970c7dc840SRandall Stewart 		    SCTP_CALLED_FROM_INPKILL_TIMER);
1898d61374e1SRandall Stewart 		inp = NULL;
1899f8829a4aSRandall Stewart 		goto out_no_decr;
1900f8829a4aSRandall Stewart 	default:
1901ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "sctp_timeout_handler:unknown timer %d\n",
1902fa89f692SMichael Tuexen 		    type);
1903f8829a4aSRandall Stewart 		break;
190460990c0cSMichael Tuexen 	}
1905f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1906fa89f692SMichael Tuexen 	sctp_audit_log(0xF1, (uint8_t)type);
1907f8829a4aSRandall Stewart 	if (inp)
1908f8829a4aSRandall Stewart 		sctp_auditing(5, inp, stcb, net);
1909f8829a4aSRandall Stewart #endif
1910f8829a4aSRandall Stewart 	if ((did_output) && stcb) {
1911f8829a4aSRandall Stewart 		/*
1912f8829a4aSRandall Stewart 		 * Now we need to clean up the control chunk chain if an
1913f8829a4aSRandall Stewart 		 * ECNE is on it. It must be marked as UNSENT again so next
1914f8829a4aSRandall Stewart 		 * call will continue to send it until such time that we get
1915f8829a4aSRandall Stewart 		 * a CWR, to remove it. It is, however, less likely that we
1916f8829a4aSRandall Stewart 		 * will find a ecn echo on the chain though.
1917f8829a4aSRandall Stewart 		 */
1918f8829a4aSRandall Stewart 		sctp_fix_ecn_echo(&stcb->asoc);
1919f8829a4aSRandall Stewart 	}
192044b7479bSRandall Stewart get_out:
1921f8829a4aSRandall Stewart 	if (stcb) {
1922f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1923*2c62ba73SMichael Tuexen 	} else if (inp != NULL) {
1924*2c62ba73SMichael Tuexen 		SCTP_INP_WUNLOCK(inp);
1925*2c62ba73SMichael Tuexen 	} else {
1926*2c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_UNLOCK();
1927f8829a4aSRandall Stewart 	}
1928*2c62ba73SMichael Tuexen 
1929f8829a4aSRandall Stewart out_decr:
1930f8829a4aSRandall Stewart 	if (inp) {
1931f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1932f8829a4aSRandall Stewart 	}
1933f8829a4aSRandall Stewart out_no_decr:
1934fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer now complete (type = %d)\n", type);
19358518270eSMichael Tuexen 	CURVNET_RESTORE();
1936f8829a4aSRandall Stewart }
1937f8829a4aSRandall Stewart 
1938ad81507eSRandall Stewart void
1939f8829a4aSRandall Stewart sctp_timer_start(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1940f8829a4aSRandall Stewart     struct sctp_nets *net)
1941f8829a4aSRandall Stewart {
1942ca85e948SMichael Tuexen 	uint32_t to_ticks;
1943f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1944f8829a4aSRandall Stewart 
1945139bc87fSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL))
1946ad81507eSRandall Stewart 		return;
1947f8829a4aSRandall Stewart 
1948f8829a4aSRandall Stewart 	tmr = NULL;
1949f8829a4aSRandall Stewart 	if (stcb) {
1950f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1951f8829a4aSRandall Stewart 	}
1952f8829a4aSRandall Stewart 	switch (t_type) {
1953f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1954f8829a4aSRandall Stewart 		/* Only 1 tick away :-) */
1955b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
195642551e99SRandall Stewart 		to_ticks = SCTP_ADDRESS_TICK_DELAY;
1957f8829a4aSRandall Stewart 		break;
1958f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1959f8829a4aSRandall Stewart 		/* Here we use the RTO timer */
1960f8829a4aSRandall Stewart 		{
1961f8829a4aSRandall Stewart 			int rto_val;
1962f8829a4aSRandall Stewart 
1963f8829a4aSRandall Stewart 			if ((stcb == NULL) || (net == NULL)) {
1964ad81507eSRandall Stewart 				return;
1965f8829a4aSRandall Stewart 			}
1966f8829a4aSRandall Stewart 			tmr = &net->rxt_timer;
1967f8829a4aSRandall Stewart 			if (net->RTO == 0) {
1968f8829a4aSRandall Stewart 				rto_val = stcb->asoc.initial_rto;
1969f8829a4aSRandall Stewart 			} else {
1970f8829a4aSRandall Stewart 				rto_val = net->RTO;
1971f8829a4aSRandall Stewart 			}
1972f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(rto_val);
1973f8829a4aSRandall Stewart 		}
1974f8829a4aSRandall Stewart 		break;
1975f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1976f8829a4aSRandall Stewart 		/*
1977f8829a4aSRandall Stewart 		 * Here we use the INIT timer default usually about 1
1978f8829a4aSRandall Stewart 		 * minute.
1979f8829a4aSRandall Stewart 		 */
1980f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
1981ad81507eSRandall Stewart 			return;
1982f8829a4aSRandall Stewart 		}
1983f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
1984f8829a4aSRandall Stewart 		if (net->RTO == 0) {
1985f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
1986f8829a4aSRandall Stewart 		} else {
1987f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
1988f8829a4aSRandall Stewart 		}
1989f8829a4aSRandall Stewart 		break;
1990f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1991f8829a4aSRandall Stewart 		/*
1992f8829a4aSRandall Stewart 		 * Here we use the Delayed-Ack timer value from the inp
1993f8829a4aSRandall Stewart 		 * ususually about 200ms.
1994f8829a4aSRandall Stewart 		 */
1995f8829a4aSRandall Stewart 		if (stcb == NULL) {
1996ad81507eSRandall Stewart 			return;
1997f8829a4aSRandall Stewart 		}
1998f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
1999f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.delayed_ack);
2000f8829a4aSRandall Stewart 		break;
2001f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2002f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination. */
2003f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2004ad81507eSRandall Stewart 			return;
2005f8829a4aSRandall Stewart 		}
2006f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2007f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2008f8829a4aSRandall Stewart 		} else {
2009f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2010f8829a4aSRandall Stewart 		}
2011f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2012f8829a4aSRandall Stewart 		break;
2013f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2014f8829a4aSRandall Stewart 		/*
2015f8829a4aSRandall Stewart 		 * the net is used here so that we can add in the RTO. Even
2016f8829a4aSRandall Stewart 		 * though we use a different timer. We also add the HB timer
2017f8829a4aSRandall Stewart 		 * PLUS a random jitter.
2018f8829a4aSRandall Stewart 		 */
2019f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2020ad81507eSRandall Stewart 			return;
2021ad81507eSRandall Stewart 		} else {
2022f8829a4aSRandall Stewart 			uint32_t rndval;
2023ca85e948SMichael Tuexen 			uint32_t jitter;
2024f8829a4aSRandall Stewart 
2025ca85e948SMichael Tuexen 			if ((net->dest_state & SCTP_ADDR_NOHB) &&
2026ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_UNCONFIRMED)) {
2027ad81507eSRandall Stewart 				return;
2028f8829a4aSRandall Stewart 			}
2029f8829a4aSRandall Stewart 			if (net->RTO == 0) {
2030ca85e948SMichael Tuexen 				to_ticks = stcb->asoc.initial_rto;
2031f8829a4aSRandall Stewart 			} else {
2032ca85e948SMichael Tuexen 				to_ticks = net->RTO;
2033f8829a4aSRandall Stewart 			}
2034ca85e948SMichael Tuexen 			rndval = sctp_select_initial_TSN(&inp->sctp_ep);
2035ca85e948SMichael Tuexen 			jitter = rndval % to_ticks;
2036ca85e948SMichael Tuexen 			if (jitter >= (to_ticks >> 1)) {
2037ca85e948SMichael Tuexen 				to_ticks = to_ticks + (jitter - (to_ticks >> 1));
2038f8829a4aSRandall Stewart 			} else {
2039ca85e948SMichael Tuexen 				to_ticks = to_ticks - jitter;
2040f8829a4aSRandall Stewart 			}
2041ca85e948SMichael Tuexen 			if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
2042ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_PF)) {
2043ca85e948SMichael Tuexen 				to_ticks += net->heart_beat_delay;
2044f8829a4aSRandall Stewart 			}
2045f8829a4aSRandall Stewart 			/*
2046f8829a4aSRandall Stewart 			 * Now we must convert the to_ticks that are now in
2047f8829a4aSRandall Stewart 			 * ms to ticks.
2048f8829a4aSRandall Stewart 			 */
2049f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(to_ticks);
2050ca85e948SMichael Tuexen 			tmr = &net->hb_timer;
2051f8829a4aSRandall Stewart 		}
2052f8829a4aSRandall Stewart 		break;
2053f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2054f8829a4aSRandall Stewart 		/*
2055f8829a4aSRandall Stewart 		 * Here we can use the RTO timer from the network since one
2056f8829a4aSRandall Stewart 		 * RTT was compelete. If a retran happened then we will be
2057f8829a4aSRandall Stewart 		 * using the RTO initial value.
2058f8829a4aSRandall Stewart 		 */
2059f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2060ad81507eSRandall Stewart 			return;
2061f8829a4aSRandall Stewart 		}
2062f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2063f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2064f8829a4aSRandall Stewart 		} else {
2065f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2066f8829a4aSRandall Stewart 		}
2067f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2068f8829a4aSRandall Stewart 		break;
2069f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2070f8829a4aSRandall Stewart 		/*
2071f8829a4aSRandall Stewart 		 * nothing needed but the endpoint here ususually about 60
2072f8829a4aSRandall Stewart 		 * minutes.
2073f8829a4aSRandall Stewart 		 */
2074f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2075f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_SIGNATURE];
2076f8829a4aSRandall Stewart 		break;
2077f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2078f8829a4aSRandall Stewart 		if (stcb == NULL) {
2079ad81507eSRandall Stewart 			return;
2080f8829a4aSRandall Stewart 		}
2081f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2082f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_ASOC_KILL_TIMEOUT);
2083f8829a4aSRandall Stewart 		break;
2084f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2085f8829a4aSRandall Stewart 		/*
2086f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2087f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2088f8829a4aSRandall Stewart 		 * state.
2089f8829a4aSRandall Stewart 		 */
2090f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2091f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_INP_KILL_TIMEOUT);
2092f8829a4aSRandall Stewart 		break;
2093f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2094f8829a4aSRandall Stewart 		/*
2095f8829a4aSRandall Stewart 		 * Here we use the value found in the EP for PMTU ususually
2096f8829a4aSRandall Stewart 		 * about 10 minutes.
2097f8829a4aSRandall Stewart 		 */
2098f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2099ad81507eSRandall Stewart 			return;
2100f8829a4aSRandall Stewart 		}
210180c79bbeSMichael Tuexen 		if (net->dest_state & SCTP_ADDR_NO_PMTUD) {
210280c79bbeSMichael Tuexen 			return;
210380c79bbeSMichael Tuexen 		}
2104f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_PMTU];
2105f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2106f8829a4aSRandall Stewart 		break;
2107f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2108f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination */
2109f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2110ad81507eSRandall Stewart 			return;
2111f8829a4aSRandall Stewart 		}
2112f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2113f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2114f8829a4aSRandall Stewart 		} else {
2115f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2116f8829a4aSRandall Stewart 		}
2117f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2118f8829a4aSRandall Stewart 		break;
2119f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2120f8829a4aSRandall Stewart 		/*
2121f8829a4aSRandall Stewart 		 * Here we use the endpoints shutdown guard timer usually
2122f8829a4aSRandall Stewart 		 * about 3 minutes.
2123f8829a4aSRandall Stewart 		 */
2124f3ba71beSMichael Tuexen 		if (stcb == NULL) {
2125ad81507eSRandall Stewart 			return;
2126f8829a4aSRandall Stewart 		}
21272e2d6794SMichael Tuexen 		if (inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN] == 0) {
21282e2d6794SMichael Tuexen 			to_ticks = 5 * MSEC_TO_TICKS(stcb->asoc.maxrto);
21292e2d6794SMichael Tuexen 		} else {
2130f8829a4aSRandall Stewart 			to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN];
21312e2d6794SMichael Tuexen 		}
2132f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2133f8829a4aSRandall Stewart 		break;
2134f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2135f8829a4aSRandall Stewart 		/*
21361b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
21371b649582SRandall Stewart 		 * the net's RTO.
2138f8829a4aSRandall Stewart 		 */
2139f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2140ad81507eSRandall Stewart 			return;
2141f8829a4aSRandall Stewart 		}
2142f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2143f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2144f8829a4aSRandall Stewart 		} else {
2145f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2146f8829a4aSRandall Stewart 		}
2147f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2148f8829a4aSRandall Stewart 		break;
2149f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2150f8829a4aSRandall Stewart 		/*
21511b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
21521b649582SRandall Stewart 		 * the net's RTO.
2153f8829a4aSRandall Stewart 		 */
2154f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2155ad81507eSRandall Stewart 			return;
2156f8829a4aSRandall Stewart 		}
2157f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2158f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2159f8829a4aSRandall Stewart 		} else {
2160f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2161f8829a4aSRandall Stewart 		}
2162f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2163f8829a4aSRandall Stewart 		break;
2164851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2165851b7298SRandall Stewart 		if ((stcb == NULL) || (net != NULL)) {
2166851b7298SRandall Stewart 			return;
2167851b7298SRandall Stewart 		}
2168851b7298SRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2169851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2170851b7298SRandall Stewart 		break;
2171f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2172f8829a4aSRandall Stewart 		if (stcb == NULL) {
2173ad81507eSRandall Stewart 			return;
2174f8829a4aSRandall Stewart 		}
2175f8829a4aSRandall Stewart 		if (stcb->asoc.sctp_autoclose_ticks == 0) {
2176f8829a4aSRandall Stewart 			/*
2177f8829a4aSRandall Stewart 			 * Really an error since stcb is NOT set to
2178f8829a4aSRandall Stewart 			 * autoclose
2179f8829a4aSRandall Stewart 			 */
2180ad81507eSRandall Stewart 			return;
2181f8829a4aSRandall Stewart 		}
2182f8829a4aSRandall Stewart 		to_ticks = stcb->asoc.sctp_autoclose_ticks;
2183f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2184f8829a4aSRandall Stewart 		break;
2185f8829a4aSRandall Stewart 	default:
2186ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
21876e9c45e0SMichael Tuexen 		    __func__, t_type);
2188ad81507eSRandall Stewart 		return;
2189f8829a4aSRandall Stewart 		break;
219060990c0cSMichael Tuexen 	}
2191f8829a4aSRandall Stewart 	if ((to_ticks <= 0) || (tmr == NULL)) {
2192ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: %d:software error to_ticks:%d tmr:%p not set ??\n",
21936e9c45e0SMichael Tuexen 		    __func__, t_type, to_ticks, (void *)tmr);
2194ad81507eSRandall Stewart 		return;
2195f8829a4aSRandall Stewart 	}
2196139bc87fSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
2197f8829a4aSRandall Stewart 		/*
2198f8829a4aSRandall Stewart 		 * we do NOT allow you to have it already running. if it is
2199f8829a4aSRandall Stewart 		 * we leave the current one up unchanged
2200f8829a4aSRandall Stewart 		 */
2201ad81507eSRandall Stewart 		return;
2202f8829a4aSRandall Stewart 	}
2203f8829a4aSRandall Stewart 	/* At this point we can proceed */
2204f8829a4aSRandall Stewart 	if (t_type == SCTP_TIMER_TYPE_SEND) {
2205f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up++;
2206f8829a4aSRandall Stewart 	}
2207a5d547adSRandall Stewart 	tmr->stopped_from = 0;
2208f8829a4aSRandall Stewart 	tmr->type = t_type;
2209f8829a4aSRandall Stewart 	tmr->ep = (void *)inp;
2210f8829a4aSRandall Stewart 	tmr->tcb = (void *)stcb;
2211f8829a4aSRandall Stewart 	tmr->net = (void *)net;
2212f8829a4aSRandall Stewart 	tmr->self = (void *)tmr;
22138518270eSMichael Tuexen 	tmr->vnet = (void *)curvnet;
2214c4739e2fSRandall Stewart 	tmr->ticks = sctp_get_tick_count();
2215ad81507eSRandall Stewart 	(void)SCTP_OS_TIMER_START(&tmr->timer, to_ticks, sctp_timeout_handler, tmr);
2216ad81507eSRandall Stewart 	return;
2217f8829a4aSRandall Stewart }
2218f8829a4aSRandall Stewart 
22196e55db54SRandall Stewart void
2220f8829a4aSRandall Stewart sctp_timer_stop(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
2221a5d547adSRandall Stewart     struct sctp_nets *net, uint32_t from)
2222f8829a4aSRandall Stewart {
2223f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
2224f8829a4aSRandall Stewart 
2225f8829a4aSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) &&
2226f8829a4aSRandall Stewart 	    (inp == NULL))
22276e55db54SRandall Stewart 		return;
2228f8829a4aSRandall Stewart 
2229f8829a4aSRandall Stewart 	tmr = NULL;
2230f8829a4aSRandall Stewart 	if (stcb) {
2231f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2232f8829a4aSRandall Stewart 	}
2233f8829a4aSRandall Stewart 	switch (t_type) {
2234f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2235b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
2236f8829a4aSRandall Stewart 		break;
2237f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2238f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22396e55db54SRandall Stewart 			return;
2240f8829a4aSRandall Stewart 		}
2241f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2242f8829a4aSRandall Stewart 		break;
2243f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2244f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22456e55db54SRandall Stewart 			return;
2246f8829a4aSRandall Stewart 		}
2247f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2248f8829a4aSRandall Stewart 		break;
2249f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2250f8829a4aSRandall Stewart 		if (stcb == NULL) {
22516e55db54SRandall Stewart 			return;
2252f8829a4aSRandall Stewart 		}
2253f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2254f8829a4aSRandall Stewart 		break;
2255f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2256f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22576e55db54SRandall Stewart 			return;
2258f8829a4aSRandall Stewart 		}
2259f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2260f8829a4aSRandall Stewart 		break;
2261f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2262ca85e948SMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
22636e55db54SRandall Stewart 			return;
2264f8829a4aSRandall Stewart 		}
2265ca85e948SMichael Tuexen 		tmr = &net->hb_timer;
2266f8829a4aSRandall Stewart 		break;
2267f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2268f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22696e55db54SRandall Stewart 			return;
2270f8829a4aSRandall Stewart 		}
2271f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2272f8829a4aSRandall Stewart 		break;
2273f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2274f8829a4aSRandall Stewart 		/* nothing needed but the endpoint here */
2275f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2276f8829a4aSRandall Stewart 		/*
2277f8829a4aSRandall Stewart 		 * We re-use the newcookie timer for the INP kill timer. We
2278f8829a4aSRandall Stewart 		 * must assure that we do not kill it by accident.
2279f8829a4aSRandall Stewart 		 */
2280f8829a4aSRandall Stewart 		break;
2281f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2282f8829a4aSRandall Stewart 		/*
2283f8829a4aSRandall Stewart 		 * Stop the asoc kill timer.
2284f8829a4aSRandall Stewart 		 */
2285f8829a4aSRandall Stewart 		if (stcb == NULL) {
22866e55db54SRandall Stewart 			return;
2287f8829a4aSRandall Stewart 		}
2288f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2289f8829a4aSRandall Stewart 		break;
2290f8829a4aSRandall Stewart 
2291f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2292f8829a4aSRandall Stewart 		/*
2293f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2294f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2295f8829a4aSRandall Stewart 		 * state.
2296f8829a4aSRandall Stewart 		 */
2297f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2298f8829a4aSRandall Stewart 		break;
2299f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2300f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23016e55db54SRandall Stewart 			return;
2302f8829a4aSRandall Stewart 		}
2303f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2304f8829a4aSRandall Stewart 		break;
2305f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2306f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23076e55db54SRandall Stewart 			return;
2308f8829a4aSRandall Stewart 		}
2309f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2310f8829a4aSRandall Stewart 		break;
2311f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2312f8829a4aSRandall Stewart 		if (stcb == NULL) {
23136e55db54SRandall Stewart 			return;
2314f8829a4aSRandall Stewart 		}
2315f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2316f8829a4aSRandall Stewart 		break;
2317f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2318f8829a4aSRandall Stewart 		if (stcb == NULL) {
23196e55db54SRandall Stewart 			return;
2320f8829a4aSRandall Stewart 		}
2321f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2322f8829a4aSRandall Stewart 		break;
2323f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2324f8829a4aSRandall Stewart 		if (stcb == NULL) {
23256e55db54SRandall Stewart 			return;
2326f8829a4aSRandall Stewart 		}
2327f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2328f8829a4aSRandall Stewart 		break;
2329851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2330851b7298SRandall Stewart 		if (stcb == NULL) {
2331851b7298SRandall Stewart 			return;
2332851b7298SRandall Stewart 		}
2333851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2334851b7298SRandall Stewart 		break;
2335f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2336f8829a4aSRandall Stewart 		if (stcb == NULL) {
23376e55db54SRandall Stewart 			return;
2338f8829a4aSRandall Stewart 		}
2339f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2340f8829a4aSRandall Stewart 		break;
2341f8829a4aSRandall Stewart 	default:
2342ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
23436e9c45e0SMichael Tuexen 		    __func__, t_type);
2344f8829a4aSRandall Stewart 		break;
234560990c0cSMichael Tuexen 	}
2346f8829a4aSRandall Stewart 	if (tmr == NULL) {
23476e55db54SRandall Stewart 		return;
2348f8829a4aSRandall Stewart 	}
2349f8829a4aSRandall Stewart 	if ((tmr->type != t_type) && tmr->type) {
2350f8829a4aSRandall Stewart 		/*
2351f8829a4aSRandall Stewart 		 * Ok we have a timer that is under joint use. Cookie timer
2352f8829a4aSRandall Stewart 		 * per chance with the SEND timer. We therefore are NOT
2353f8829a4aSRandall Stewart 		 * running the timer that the caller wants stopped.  So just
2354f8829a4aSRandall Stewart 		 * return.
2355f8829a4aSRandall Stewart 		 */
23566e55db54SRandall Stewart 		return;
2357f8829a4aSRandall Stewart 	}
2358ad81507eSRandall Stewart 	if ((t_type == SCTP_TIMER_TYPE_SEND) && (stcb != NULL)) {
2359f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
2360f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
2361f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
2362f8829a4aSRandall Stewart 		}
2363f8829a4aSRandall Stewart 	}
2364f8829a4aSRandall Stewart 	tmr->self = NULL;
2365a5d547adSRandall Stewart 	tmr->stopped_from = from;
23666e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&tmr->timer);
23676e55db54SRandall Stewart 	return;
2368f8829a4aSRandall Stewart }
2369f8829a4aSRandall Stewart 
2370f8829a4aSRandall Stewart uint32_t
2371f8829a4aSRandall Stewart sctp_calculate_len(struct mbuf *m)
2372f8829a4aSRandall Stewart {
2373f8829a4aSRandall Stewart 	uint32_t tlen = 0;
2374f8829a4aSRandall Stewart 	struct mbuf *at;
2375f8829a4aSRandall Stewart 
2376f8829a4aSRandall Stewart 	at = m;
2377f8829a4aSRandall Stewart 	while (at) {
2378139bc87fSRandall Stewart 		tlen += SCTP_BUF_LEN(at);
2379139bc87fSRandall Stewart 		at = SCTP_BUF_NEXT(at);
2380f8829a4aSRandall Stewart 	}
2381f8829a4aSRandall Stewart 	return (tlen);
2382f8829a4aSRandall Stewart }
2383f8829a4aSRandall Stewart 
2384f8829a4aSRandall Stewart void
2385f8829a4aSRandall Stewart sctp_mtu_size_reset(struct sctp_inpcb *inp,
238644b7479bSRandall Stewart     struct sctp_association *asoc, uint32_t mtu)
2387f8829a4aSRandall Stewart {
2388f8829a4aSRandall Stewart 	/*
2389f8829a4aSRandall Stewart 	 * Reset the P-MTU size on this association, this involves changing
2390f8829a4aSRandall Stewart 	 * the asoc MTU, going through ANY chunk+overhead larger than mtu to
2391f8829a4aSRandall Stewart 	 * allow the DF flag to be cleared.
2392f8829a4aSRandall Stewart 	 */
2393f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
2394f8829a4aSRandall Stewart 	unsigned int eff_mtu, ovh;
2395f8829a4aSRandall Stewart 
2396f8829a4aSRandall Stewart 	asoc->smallest_mtu = mtu;
2397f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2398f8829a4aSRandall Stewart 		ovh = SCTP_MIN_OVERHEAD;
2399f8829a4aSRandall Stewart 	} else {
2400f8829a4aSRandall Stewart 		ovh = SCTP_MIN_V4_OVERHEAD;
2401f8829a4aSRandall Stewart 	}
2402f8829a4aSRandall Stewart 	eff_mtu = mtu - ovh;
2403f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->send_queue, sctp_next) {
2404f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2405f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2406f8829a4aSRandall Stewart 		}
2407f8829a4aSRandall Stewart 	}
2408f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
2409f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2410f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2411f8829a4aSRandall Stewart 		}
2412f8829a4aSRandall Stewart 	}
2413f8829a4aSRandall Stewart }
2414f8829a4aSRandall Stewart 
2415f8829a4aSRandall Stewart 
2416f8829a4aSRandall Stewart /*
2417f8829a4aSRandall Stewart  * given an association and starting time of the current RTT period return
2418f42a358aSRandall Stewart  * RTO in number of msecs net should point to the current network
2419f8829a4aSRandall Stewart  */
2420899288aeSRandall Stewart 
2421f8829a4aSRandall Stewart uint32_t
2422f8829a4aSRandall Stewart sctp_calculate_rto(struct sctp_tcb *stcb,
2423f8829a4aSRandall Stewart     struct sctp_association *asoc,
2424f8829a4aSRandall Stewart     struct sctp_nets *net,
242518e198d3SRandall Stewart     struct timeval *told,
2426f79aab18SRandall Stewart     int safe, int rtt_from_sack)
2427f8829a4aSRandall Stewart {
242818e198d3SRandall Stewart 	/*-
2429f8829a4aSRandall Stewart 	 * given an association and the starting time of the current RTT
2430f42a358aSRandall Stewart 	 * period (in value1/value2) return RTO in number of msecs.
2431f8829a4aSRandall Stewart 	 */
2432be1d9176SMichael Tuexen 	int32_t rtt;		/* RTT in ms */
2433be1d9176SMichael Tuexen 	uint32_t new_rto;
2434f8829a4aSRandall Stewart 	int first_measure = 0;
243518e198d3SRandall Stewart 	struct timeval now, then, *old;
2436f8829a4aSRandall Stewart 
243718e198d3SRandall Stewart 	/* Copy it out for sparc64 */
243818e198d3SRandall Stewart 	if (safe == sctp_align_unsafe_makecopy) {
243918e198d3SRandall Stewart 		old = &then;
244018e198d3SRandall Stewart 		memcpy(&then, told, sizeof(struct timeval));
244118e198d3SRandall Stewart 	} else if (safe == sctp_align_safe_nocopy) {
244218e198d3SRandall Stewart 		old = told;
244318e198d3SRandall Stewart 	} else {
244418e198d3SRandall Stewart 		/* error */
244518e198d3SRandall Stewart 		SCTP_PRINTF("Huh, bad rto calc call\n");
244618e198d3SRandall Stewart 		return (0);
244718e198d3SRandall Stewart 	}
2448f8829a4aSRandall Stewart 	/************************/
2449f8829a4aSRandall Stewart 	/* 1. calculate new RTT */
2450f8829a4aSRandall Stewart 	/************************/
2451f8829a4aSRandall Stewart 	/* get the current time */
2452299108c5SRandall Stewart 	if (stcb->asoc.use_precise_time) {
2453299108c5SRandall Stewart 		(void)SCTP_GETPTIME_TIMEVAL(&now);
2454299108c5SRandall Stewart 	} else {
24556e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
2456299108c5SRandall Stewart 	}
2457be1d9176SMichael Tuexen 	timevalsub(&now, old);
2458be1d9176SMichael Tuexen 	/* store the current RTT in us */
245981eb4e63SMichael Tuexen 	net->rtt = (uint64_t)1000000 *(uint64_t)now.tv_sec +
2460be1d9176SMichael Tuexen 	        (uint64_t)now.tv_usec;
2461be1d9176SMichael Tuexen 
2462b60b0fe6SMichael Tuexen 	/* compute rtt in ms */
2463b60b0fe6SMichael Tuexen 	rtt = (int32_t)(net->rtt / 1000);
2464f79aab18SRandall Stewart 	if ((asoc->cc_functions.sctp_rtt_calculated) && (rtt_from_sack == SCTP_RTT_FROM_DATA)) {
2465b7b84c0eSMichael Tuexen 		/*
2466b7b84c0eSMichael Tuexen 		 * Tell the CC module that a new update has just occurred
2467b7b84c0eSMichael Tuexen 		 * from a sack
2468b7b84c0eSMichael Tuexen 		 */
2469f79aab18SRandall Stewart 		(*asoc->cc_functions.sctp_rtt_calculated) (stcb, net, &now);
2470f79aab18SRandall Stewart 	}
2471f79aab18SRandall Stewart 	/*
2472f79aab18SRandall Stewart 	 * Do we need to determine the lan? We do this only on sacks i.e.
2473f79aab18SRandall Stewart 	 * RTT being determined from data not non-data (HB/INIT->INITACK).
2474f79aab18SRandall Stewart 	 */
2475f79aab18SRandall Stewart 	if ((rtt_from_sack == SCTP_RTT_FROM_DATA) &&
2476be1d9176SMichael Tuexen 	    (net->lan_type == SCTP_LAN_UNKNOWN)) {
2477be1d9176SMichael Tuexen 		if (net->rtt > SCTP_LOCAL_LAN_RTT) {
2478899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_INTERNET;
2479899288aeSRandall Stewart 		} else {
2480899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_LOCAL;
2481899288aeSRandall Stewart 		}
2482899288aeSRandall Stewart 	}
2483f8829a4aSRandall Stewart 	/***************************/
2484f8829a4aSRandall Stewart 	/* 2. update RTTVAR & SRTT */
2485f8829a4aSRandall Stewart 	/***************************/
2486be1d9176SMichael Tuexen 	/*-
2487be1d9176SMichael Tuexen 	 * Compute the scaled average lastsa and the
2488be1d9176SMichael Tuexen 	 * scaled variance lastsv as described in van Jacobson
2489be1d9176SMichael Tuexen 	 * Paper "Congestion Avoidance and Control", Annex A.
2490be1d9176SMichael Tuexen 	 *
2491be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_SHIFT) is the srtt
2492be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_VAR_SHIFT) is the rttvar
2493be1d9176SMichael Tuexen 	 */
24949a972525SRandall Stewart 	if (net->RTO_measured) {
2495be1d9176SMichael Tuexen 		rtt -= (net->lastsa >> SCTP_RTT_SHIFT);
2496be1d9176SMichael Tuexen 		net->lastsa += rtt;
2497be1d9176SMichael Tuexen 		if (rtt < 0) {
2498be1d9176SMichael Tuexen 			rtt = -rtt;
2499be1d9176SMichael Tuexen 		}
2500be1d9176SMichael Tuexen 		rtt -= (net->lastsv >> SCTP_RTT_VAR_SHIFT);
2501be1d9176SMichael Tuexen 		net->lastsv += rtt;
2502b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2503f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_RTTVAR);
250480fefe0aSRandall Stewart 		}
2505f8829a4aSRandall Stewart 	} else {
2506f8829a4aSRandall Stewart 		/* First RTO measurment */
25079a972525SRandall Stewart 		net->RTO_measured = 1;
2508f8829a4aSRandall Stewart 		first_measure = 1;
2509be1d9176SMichael Tuexen 		net->lastsa = rtt << SCTP_RTT_SHIFT;
2510be1d9176SMichael Tuexen 		net->lastsv = (rtt / 2) << SCTP_RTT_VAR_SHIFT;
2511b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2512f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_INITIAL_RTT);
251380fefe0aSRandall Stewart 		}
2514f8829a4aSRandall Stewart 	}
2515be1d9176SMichael Tuexen 	if (net->lastsv == 0) {
2516be1d9176SMichael Tuexen 		net->lastsv = SCTP_CLOCK_GRANULARITY;
2517be1d9176SMichael Tuexen 	}
2518108df27cSRandall Stewart 	new_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
2519f8829a4aSRandall Stewart 	if ((new_rto > SCTP_SAT_NETWORK_MIN) &&
2520f8829a4aSRandall Stewart 	    (stcb->asoc.sat_network_lockout == 0)) {
2521f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 1;
2522f8829a4aSRandall Stewart 	} else if ((!first_measure) && stcb->asoc.sat_network) {
2523f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 0;
2524f8829a4aSRandall Stewart 		stcb->asoc.sat_network_lockout = 1;
2525f8829a4aSRandall Stewart 	}
2526f8829a4aSRandall Stewart 	/* bound it, per C6/C7 in Section 5.3.1 */
2527f8829a4aSRandall Stewart 	if (new_rto < stcb->asoc.minrto) {
2528f8829a4aSRandall Stewart 		new_rto = stcb->asoc.minrto;
2529f8829a4aSRandall Stewart 	}
2530f8829a4aSRandall Stewart 	if (new_rto > stcb->asoc.maxrto) {
2531f8829a4aSRandall Stewart 		new_rto = stcb->asoc.maxrto;
2532f8829a4aSRandall Stewart 	}
25335e54f665SRandall Stewart 	/* we are now returning the RTO */
25345e54f665SRandall Stewart 	return (new_rto);
2535f8829a4aSRandall Stewart }
2536f8829a4aSRandall Stewart 
2537f8829a4aSRandall Stewart /*
2538f8829a4aSRandall Stewart  * return a pointer to a contiguous piece of data from the given mbuf chain
2539f8829a4aSRandall Stewart  * starting at 'off' for 'len' bytes.  If the desired piece spans more than
2540f8829a4aSRandall Stewart  * one mbuf, a copy is made at 'ptr'. caller must ensure that the buffer size
2541f8829a4aSRandall Stewart  * is >= 'len' returns NULL if there there isn't 'len' bytes in the chain.
2542f8829a4aSRandall Stewart  */
254372fb6fdbSRandall Stewart caddr_t
2544f8829a4aSRandall Stewart sctp_m_getptr(struct mbuf *m, int off, int len, uint8_t *in_ptr)
2545f8829a4aSRandall Stewart {
2546f8829a4aSRandall Stewart 	uint32_t count;
2547f8829a4aSRandall Stewart 	uint8_t *ptr;
2548f8829a4aSRandall Stewart 
2549f8829a4aSRandall Stewart 	ptr = in_ptr;
2550f8829a4aSRandall Stewart 	if ((off < 0) || (len <= 0))
2551f8829a4aSRandall Stewart 		return (NULL);
2552f8829a4aSRandall Stewart 
2553f8829a4aSRandall Stewart 	/* find the desired start location */
2554f8829a4aSRandall Stewart 	while ((m != NULL) && (off > 0)) {
2555139bc87fSRandall Stewart 		if (off < SCTP_BUF_LEN(m))
2556f8829a4aSRandall Stewart 			break;
2557139bc87fSRandall Stewart 		off -= SCTP_BUF_LEN(m);
2558139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
2559f8829a4aSRandall Stewart 	}
2560f8829a4aSRandall Stewart 	if (m == NULL)
2561f8829a4aSRandall Stewart 		return (NULL);
2562f8829a4aSRandall Stewart 
2563f8829a4aSRandall Stewart 	/* is the current mbuf large enough (eg. contiguous)? */
2564139bc87fSRandall Stewart 	if ((SCTP_BUF_LEN(m) - off) >= len) {
2565f8829a4aSRandall Stewart 		return (mtod(m, caddr_t)+off);
2566f8829a4aSRandall Stewart 	} else {
2567f8829a4aSRandall Stewart 		/* else, it spans more than one mbuf, so save a temp copy... */
2568f8829a4aSRandall Stewart 		while ((m != NULL) && (len > 0)) {
2569139bc87fSRandall Stewart 			count = min(SCTP_BUF_LEN(m) - off, len);
25705ba7f91fSMichael Tuexen 			memcpy(ptr, mtod(m, caddr_t)+off, count);
2571f8829a4aSRandall Stewart 			len -= count;
2572f8829a4aSRandall Stewart 			ptr += count;
2573f8829a4aSRandall Stewart 			off = 0;
2574139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
2575f8829a4aSRandall Stewart 		}
2576f8829a4aSRandall Stewart 		if ((m == NULL) && (len > 0))
2577f8829a4aSRandall Stewart 			return (NULL);
2578f8829a4aSRandall Stewart 		else
2579f8829a4aSRandall Stewart 			return ((caddr_t)in_ptr);
2580f8829a4aSRandall Stewart 	}
2581f8829a4aSRandall Stewart }
2582f8829a4aSRandall Stewart 
2583f8829a4aSRandall Stewart 
258444b7479bSRandall Stewart 
2585f8829a4aSRandall Stewart struct sctp_paramhdr *
2586f8829a4aSRandall Stewart sctp_get_next_param(struct mbuf *m,
2587f8829a4aSRandall Stewart     int offset,
2588f8829a4aSRandall Stewart     struct sctp_paramhdr *pull,
2589f8829a4aSRandall Stewart     int pull_limit)
2590f8829a4aSRandall Stewart {
2591f8829a4aSRandall Stewart 	/* This just provides a typed signature to Peter's Pull routine */
2592f8829a4aSRandall Stewart 	return ((struct sctp_paramhdr *)sctp_m_getptr(m, offset, pull_limit,
2593f8829a4aSRandall Stewart 	    (uint8_t *)pull));
2594f8829a4aSRandall Stewart }
2595f8829a4aSRandall Stewart 
2596f8829a4aSRandall Stewart 
2597ce11b842SMichael Tuexen struct mbuf *
2598f8829a4aSRandall Stewart sctp_add_pad_tombuf(struct mbuf *m, int padlen)
2599f8829a4aSRandall Stewart {
2600ce11b842SMichael Tuexen 	struct mbuf *m_last;
2601ce11b842SMichael Tuexen 	caddr_t dp;
2602f8829a4aSRandall Stewart 
2603f8829a4aSRandall Stewart 	if (padlen > 3) {
2604ce11b842SMichael Tuexen 		return (NULL);
2605f8829a4aSRandall Stewart 	}
260641eee555SRandall Stewart 	if (padlen <= M_TRAILINGSPACE(m)) {
2607f8829a4aSRandall Stewart 		/*
2608f8829a4aSRandall Stewart 		 * The easy way. We hope the majority of the time we hit
2609f8829a4aSRandall Stewart 		 * here :)
2610f8829a4aSRandall Stewart 		 */
2611ce11b842SMichael Tuexen 		m_last = m;
2612f8829a4aSRandall Stewart 	} else {
2613ce11b842SMichael Tuexen 		/* Hard way we must grow the mbuf chain */
2614ce11b842SMichael Tuexen 		m_last = sctp_get_mbuf_for_msg(padlen, 0, M_NOWAIT, 1, MT_DATA);
2615ce11b842SMichael Tuexen 		if (m_last == NULL) {
2616ce11b842SMichael Tuexen 			return (NULL);
2617f8829a4aSRandall Stewart 		}
2618ce11b842SMichael Tuexen 		SCTP_BUF_LEN(m_last) = 0;
2619ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m_last) = NULL;
2620ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m) = m_last;
2621f8829a4aSRandall Stewart 	}
2622ce11b842SMichael Tuexen 	dp = mtod(m_last, caddr_t)+SCTP_BUF_LEN(m_last);
2623ce11b842SMichael Tuexen 	SCTP_BUF_LEN(m_last) += padlen;
2624ce11b842SMichael Tuexen 	memset(dp, 0, padlen);
2625ce11b842SMichael Tuexen 	return (m_last);
2626f8829a4aSRandall Stewart }
2627f8829a4aSRandall Stewart 
2628ce11b842SMichael Tuexen struct mbuf *
2629f8829a4aSRandall Stewart sctp_pad_lastmbuf(struct mbuf *m, int padval, struct mbuf *last_mbuf)
2630f8829a4aSRandall Stewart {
2631f8829a4aSRandall Stewart 	/* find the last mbuf in chain and pad it */
2632f8829a4aSRandall Stewart 	struct mbuf *m_at;
2633f8829a4aSRandall Stewart 
2634ce11b842SMichael Tuexen 	if (last_mbuf != NULL) {
2635f8829a4aSRandall Stewart 		return (sctp_add_pad_tombuf(last_mbuf, padval));
2636f8829a4aSRandall Stewart 	} else {
263717267b32SMichael Tuexen 		for (m_at = m; m_at; m_at = SCTP_BUF_NEXT(m_at)) {
2638139bc87fSRandall Stewart 			if (SCTP_BUF_NEXT(m_at) == NULL) {
2639f8829a4aSRandall Stewart 				return (sctp_add_pad_tombuf(m_at, padval));
2640f8829a4aSRandall Stewart 			}
2641f8829a4aSRandall Stewart 		}
2642f8829a4aSRandall Stewart 	}
2643ce11b842SMichael Tuexen 	return (NULL);
2644f8829a4aSRandall Stewart }
2645f8829a4aSRandall Stewart 
2646f8829a4aSRandall Stewart static void
2647c5b5675dSMichael Tuexen sctp_notify_assoc_change(uint16_t state, struct sctp_tcb *stcb,
2648410a3b1eSMichael Tuexen     uint16_t error, struct sctp_abort_chunk *abort, uint8_t from_peer, int so_locked
2649ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2650ceaad40aSRandall Stewart     SCTP_UNUSED
2651ceaad40aSRandall Stewart #endif
2652ceaad40aSRandall Stewart )
2653f8829a4aSRandall Stewart {
2654f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2655f8829a4aSRandall Stewart 	struct sctp_assoc_change *sac;
2656f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
26579a8e3088SMichael Tuexen 	unsigned int notif_len;
26589a8e3088SMichael Tuexen 	uint16_t abort_len;
2659e06b67c7SMichael Tuexen 	unsigned int i;
2660ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2661ceaad40aSRandall Stewart 	struct socket *so;
2662ceaad40aSRandall Stewart #endif
2663ceaad40aSRandall Stewart 
266459713bbfSMichael Tuexen 	if (stcb == NULL) {
266559713bbfSMichael Tuexen 		return;
266659713bbfSMichael Tuexen 	}
266758411b08SMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT)) {
26689a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2669a2b42326SMichael Tuexen 		if (abort != NULL) {
2670c9eb4473SMichael Tuexen 			abort_len = ntohs(abort->ch.chunk_length);
2671a2b42326SMichael Tuexen 		} else {
2672a2b42326SMichael Tuexen 			abort_len = 0;
2673c5b5675dSMichael Tuexen 		}
2674a2b42326SMichael Tuexen 		if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2675a2b42326SMichael Tuexen 			notif_len += SCTP_ASSOC_SUPPORTS_MAX;
2676a2b42326SMichael Tuexen 		} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2677a2b42326SMichael Tuexen 			notif_len += abort_len;
2678a2b42326SMichael Tuexen 		}
2679eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2680a2b42326SMichael Tuexen 		if (m_notify == NULL) {
2681a2b42326SMichael Tuexen 			/* Retry with smaller value. */
26829a8e3088SMichael Tuexen 			notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2683eb1b1807SGleb Smirnoff 			m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2684a2b42326SMichael Tuexen 			if (m_notify == NULL) {
268558411b08SMichael Tuexen 				goto set_error;
2686a2b42326SMichael Tuexen 			}
2687a2b42326SMichael Tuexen 		}
2688a2b42326SMichael Tuexen 		SCTP_BUF_NEXT(m_notify) = NULL;
2689f8829a4aSRandall Stewart 		sac = mtod(m_notify, struct sctp_assoc_change *);
2690e432298aSXin LI 		memset(sac, 0, notif_len);
2691f8829a4aSRandall Stewart 		sac->sac_type = SCTP_ASSOC_CHANGE;
2692f8829a4aSRandall Stewart 		sac->sac_flags = 0;
2693f8829a4aSRandall Stewart 		sac->sac_length = sizeof(struct sctp_assoc_change);
2694c5b5675dSMichael Tuexen 		sac->sac_state = state;
2695f8829a4aSRandall Stewart 		sac->sac_error = error;
2696f8829a4aSRandall Stewart 		/* XXX verify these stream counts */
2697f8829a4aSRandall Stewart 		sac->sac_outbound_streams = stcb->asoc.streamoutcnt;
2698f8829a4aSRandall Stewart 		sac->sac_inbound_streams = stcb->asoc.streamincnt;
2699f8829a4aSRandall Stewart 		sac->sac_assoc_id = sctp_get_associd(stcb);
2700a2b42326SMichael Tuexen 		if (notif_len > sizeof(struct sctp_assoc_change)) {
2701c5b5675dSMichael Tuexen 			if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2702e06b67c7SMichael Tuexen 				i = 0;
2703c79bec9cSMichael Tuexen 				if (stcb->asoc.prsctp_supported == 1) {
2704e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_PR;
2705e06b67c7SMichael Tuexen 				}
2706c79bec9cSMichael Tuexen 				if (stcb->asoc.auth_supported == 1) {
2707e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_AUTH;
2708e06b67c7SMichael Tuexen 				}
2709c79bec9cSMichael Tuexen 				if (stcb->asoc.asconf_supported == 1) {
2710e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_ASCONF;
2711e06b67c7SMichael Tuexen 				}
271244249214SRandall Stewart 				if (stcb->asoc.idata_supported == 1) {
271344249214SRandall Stewart 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_INTERLEAVING;
271444249214SRandall Stewart 				}
2715e06b67c7SMichael Tuexen 				sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_MULTIBUF;
2716c79bec9cSMichael Tuexen 				if (stcb->asoc.reconfig_supported == 1) {
2717e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_RE_CONFIG;
2718e06b67c7SMichael Tuexen 				}
2719e06b67c7SMichael Tuexen 				sac->sac_length += i;
2720a2b42326SMichael Tuexen 			} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2721a2b42326SMichael Tuexen 				memcpy(sac->sac_info, abort, abort_len);
2722a2b42326SMichael Tuexen 				sac->sac_length += abort_len;
2723a2b42326SMichael Tuexen 			}
2724c5b5675dSMichael Tuexen 		}
2725e06b67c7SMichael Tuexen 		SCTP_BUF_LEN(m_notify) = sac->sac_length;
2726f8829a4aSRandall Stewart 		control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
27277215cc1bSMichael Tuexen 		    0, 0, stcb->asoc.context, 0, 0, 0,
2728f8829a4aSRandall Stewart 		    m_notify);
272958411b08SMichael Tuexen 		if (control != NULL) {
2730139bc87fSRandall Stewart 			control->length = SCTP_BUF_LEN(m_notify);
273128cd0699SMichael Tuexen 			control->spec_flags = M_NOTIFICATION;
2732f8829a4aSRandall Stewart 			/* not that we need this */
2733f8829a4aSRandall Stewart 			control->tail_mbuf = m_notify;
2734f8829a4aSRandall Stewart 			sctp_add_to_readq(stcb->sctp_ep, stcb,
2735f8829a4aSRandall Stewart 			    control,
2736cfde3ff7SRandall Stewart 			    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD,
2737cfde3ff7SRandall Stewart 			    so_locked);
273858411b08SMichael Tuexen 		} else {
273958411b08SMichael Tuexen 			sctp_m_freem(m_notify);
274058411b08SMichael Tuexen 		}
274158411b08SMichael Tuexen 	}
274258411b08SMichael Tuexen 	/*
274358411b08SMichael Tuexen 	 * For 1-to-1 style sockets, we send up and error when an ABORT
274458411b08SMichael Tuexen 	 * comes in.
274558411b08SMichael Tuexen 	 */
274658411b08SMichael Tuexen set_error:
274758411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
274858411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
274958411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
2750e045904fSMichael Tuexen 		SOCK_LOCK(stcb->sctp_socket);
2751410a3b1eSMichael Tuexen 		if (from_peer) {
275258411b08SMichael Tuexen 			if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_WAIT) {
275358411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNREFUSED);
275458411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNREFUSED;
275558411b08SMichael Tuexen 			} else {
275658411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
275758411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNRESET;
275858411b08SMichael Tuexen 			}
2759410a3b1eSMichael Tuexen 		} else {
2760553bb068SMichael Tuexen 			if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_WAIT) ||
2761553bb068SMichael Tuexen 			    (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED)) {
2762553bb068SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ETIMEDOUT);
2763553bb068SMichael Tuexen 				stcb->sctp_socket->so_error = ETIMEDOUT;
2764553bb068SMichael Tuexen 			} else {
2765410a3b1eSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNABORTED);
2766410a3b1eSMichael Tuexen 				stcb->sctp_socket->so_error = ECONNABORTED;
2767410a3b1eSMichael Tuexen 			}
276858411b08SMichael Tuexen 		}
27693acfe1e1SGleb Smirnoff 		SOCK_UNLOCK(stcb->sctp_socket);
2770553bb068SMichael Tuexen 	}
277158411b08SMichael Tuexen 	/* Wake ANY sleepers */
2772ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2773ceaad40aSRandall Stewart 	so = SCTP_INP_SO(stcb->sctp_ep);
2774ceaad40aSRandall Stewart 	if (!so_locked) {
2775ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
2776ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
2777ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
2778ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
2779ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
2780ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
2781ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
2782ceaad40aSRandall Stewart 			return;
2783ceaad40aSRandall Stewart 		}
2784ceaad40aSRandall Stewart 	}
2785ceaad40aSRandall Stewart #endif
278658411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
278758411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
278858411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
27893acfe1e1SGleb Smirnoff 		socantrcvmore(stcb->sctp_socket);
279058411b08SMichael Tuexen 	}
279158411b08SMichael Tuexen 	sorwakeup(stcb->sctp_socket);
279258411b08SMichael Tuexen 	sowwakeup(stcb->sctp_socket);
2793ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2794ceaad40aSRandall Stewart 	if (!so_locked) {
2795ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
2796ceaad40aSRandall Stewart 	}
2797ceaad40aSRandall Stewart #endif
2798f8829a4aSRandall Stewart }
2799f8829a4aSRandall Stewart 
2800f8829a4aSRandall Stewart static void
2801f8829a4aSRandall Stewart sctp_notify_peer_addr_change(struct sctp_tcb *stcb, uint32_t state,
28023cb3567dSMichael Tuexen     struct sockaddr *sa, uint32_t error, int so_locked
28033cb3567dSMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
28043cb3567dSMichael Tuexen     SCTP_UNUSED
28053cb3567dSMichael Tuexen #endif
28063cb3567dSMichael Tuexen )
2807f8829a4aSRandall Stewart {
2808f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2809f8829a4aSRandall Stewart 	struct sctp_paddr_change *spc;
2810f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2811f8829a4aSRandall Stewart 
281260990c0cSMichael Tuexen 	if ((stcb == NULL) ||
281360990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT)) {
2814f8829a4aSRandall Stewart 		/* event not enabled */
2815f8829a4aSRandall Stewart 		return;
2816830d754dSRandall Stewart 	}
2817eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_paddr_change), 0, M_NOWAIT, 1, MT_DATA);
2818f8829a4aSRandall Stewart 	if (m_notify == NULL)
2819f8829a4aSRandall Stewart 		return;
2820139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2821f8829a4aSRandall Stewart 	spc = mtod(m_notify, struct sctp_paddr_change *);
282256711f94SMichael Tuexen 	memset(spc, 0, sizeof(struct sctp_paddr_change));
2823f8829a4aSRandall Stewart 	spc->spc_type = SCTP_PEER_ADDR_CHANGE;
2824f8829a4aSRandall Stewart 	spc->spc_flags = 0;
2825f8829a4aSRandall Stewart 	spc->spc_length = sizeof(struct sctp_paddr_change);
28265e2c2d87SRandall Stewart 	switch (sa->sa_family) {
2827ea5eba11SMichael Tuexen #ifdef INET
28285e2c2d87SRandall Stewart 	case AF_INET:
2829d59107f7SMichael Tuexen #ifdef INET6
2830d59107f7SMichael Tuexen 		if (sctp_is_feature_on(stcb->sctp_ep, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
2831d59107f7SMichael Tuexen 			in6_sin_2_v4mapsin6((struct sockaddr_in *)sa,
2832d59107f7SMichael Tuexen 			    (struct sockaddr_in6 *)&spc->spc_aaddr);
2833d59107f7SMichael Tuexen 		} else {
2834f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2835d59107f7SMichael Tuexen 		}
2836d59107f7SMichael Tuexen #else
2837d59107f7SMichael Tuexen 		memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2838d59107f7SMichael Tuexen #endif
28395e2c2d87SRandall Stewart 		break;
2840ea5eba11SMichael Tuexen #endif
28415e2c2d87SRandall Stewart #ifdef INET6
28425e2c2d87SRandall Stewart 	case AF_INET6:
28435e2c2d87SRandall Stewart 		{
2844f42a358aSRandall Stewart 			struct sockaddr_in6 *sin6;
2845f42a358aSRandall Stewart 
2846f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in6));
2847f42a358aSRandall Stewart 
2848f42a358aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)&spc->spc_aaddr;
2849f42a358aSRandall Stewart 			if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
285042551e99SRandall Stewart 				if (sin6->sin6_scope_id == 0) {
285142551e99SRandall Stewart 					/* recover scope_id for user */
2852f42a358aSRandall Stewart 					(void)sa6_recoverscope(sin6);
285342551e99SRandall Stewart 				} else {
285442551e99SRandall Stewart 					/* clear embedded scope_id for user */
285542551e99SRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
285642551e99SRandall Stewart 				}
2857f42a358aSRandall Stewart 			}
28585e2c2d87SRandall Stewart 			break;
28595e2c2d87SRandall Stewart 		}
28605e2c2d87SRandall Stewart #endif
28615e2c2d87SRandall Stewart 	default:
28625e2c2d87SRandall Stewart 		/* TSNH */
28635e2c2d87SRandall Stewart 		break;
2864f8829a4aSRandall Stewart 	}
2865f8829a4aSRandall Stewart 	spc->spc_state = state;
2866f8829a4aSRandall Stewart 	spc->spc_error = error;
2867f8829a4aSRandall Stewart 	spc->spc_assoc_id = sctp_get_associd(stcb);
2868f8829a4aSRandall Stewart 
2869139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_paddr_change);
2870139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2871f8829a4aSRandall Stewart 
2872f8829a4aSRandall Stewart 	/* append to socket */
2873f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
28747215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
2875f8829a4aSRandall Stewart 	    m_notify);
2876f8829a4aSRandall Stewart 	if (control == NULL) {
2877f8829a4aSRandall Stewart 		/* no memory */
2878f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2879f8829a4aSRandall Stewart 		return;
2880f8829a4aSRandall Stewart 	}
2881139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
2882139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2883f8829a4aSRandall Stewart 	/* not that we need this */
2884f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
2885f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2886f8829a4aSRandall Stewart 	    control,
2887cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
2888cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
28893cb3567dSMichael Tuexen 	    so_locked);
2890f8829a4aSRandall Stewart }
2891f8829a4aSRandall Stewart 
2892f8829a4aSRandall Stewart 
2893f8829a4aSRandall Stewart static void
28941edc9dbaSMichael Tuexen sctp_notify_send_failed(struct sctp_tcb *stcb, uint8_t sent, uint32_t error,
2895ceaad40aSRandall Stewart     struct sctp_tmit_chunk *chk, int so_locked
2896ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2897ceaad40aSRandall Stewart     SCTP_UNUSED
2898ceaad40aSRandall Stewart #endif
2899ceaad40aSRandall Stewart )
2900f8829a4aSRandall Stewart {
2901830d754dSRandall Stewart 	struct mbuf *m_notify;
2902f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
29039935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
2904f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2905ab337314SMichael Tuexen 	struct sctp_chunkhdr *chkhdr;
2906ab337314SMichael Tuexen 	int notifhdr_len, chk_len, chkhdr_len, padding_len, payload_len;
2907f8829a4aSRandall Stewart 
290860990c0cSMichael Tuexen 	if ((stcb == NULL) ||
29099935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
29109935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
2911f8829a4aSRandall Stewart 		/* event not enabled */
2912f8829a4aSRandall Stewart 		return;
2913830d754dSRandall Stewart 	}
29149935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
2915ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
29169935403aSMichael Tuexen 	} else {
2917ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
29189935403aSMichael Tuexen 	}
2919ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
2920f8829a4aSRandall Stewart 	if (m_notify == NULL)
2921f8829a4aSRandall Stewart 		/* no space left */
2922f8829a4aSRandall Stewart 		return;
2923ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
2924ab337314SMichael Tuexen 	if (stcb->asoc.idata_supported) {
2925ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_idata_chunk);
2926ab337314SMichael Tuexen 	} else {
2927ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_data_chunk);
2928ab337314SMichael Tuexen 	}
2929ab337314SMichael Tuexen 	/* Use some defaults in case we can't access the chunk header */
2930ab337314SMichael Tuexen 	if (chk->send_size >= chkhdr_len) {
2931ab337314SMichael Tuexen 		payload_len = chk->send_size - chkhdr_len;
2932ab337314SMichael Tuexen 	} else {
2933ab337314SMichael Tuexen 		payload_len = 0;
2934ab337314SMichael Tuexen 	}
2935ab337314SMichael Tuexen 	padding_len = 0;
2936ab337314SMichael Tuexen 	if (chk->data != NULL) {
2937ab337314SMichael Tuexen 		chkhdr = mtod(chk->data, struct sctp_chunkhdr *);
2938ab337314SMichael Tuexen 		if (chkhdr != NULL) {
2939ab337314SMichael Tuexen 			chk_len = ntohs(chkhdr->chunk_length);
2940ab337314SMichael Tuexen 			if ((chk_len >= chkhdr_len) &&
2941ab337314SMichael Tuexen 			    (chk->send_size >= chk_len) &&
2942ab337314SMichael Tuexen 			    (chk->send_size - chk_len < 4)) {
2943ab337314SMichael Tuexen 				padding_len = chk->send_size - chk_len;
2944ab337314SMichael Tuexen 				payload_len = chk->send_size - chkhdr_len - padding_len;
2945ab337314SMichael Tuexen 			}
2946ab337314SMichael Tuexen 		}
2947ab337314SMichael Tuexen 	}
29489935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
29499935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
2950ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
29519935403aSMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
29521edc9dbaSMichael Tuexen 		if (sent) {
29539935403aSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_SENT;
29541edc9dbaSMichael Tuexen 		} else {
29551edc9dbaSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_UNSENT;
29561edc9dbaSMichael Tuexen 		}
2957ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + payload_len);
29589935403aSMichael Tuexen 		ssfe->ssfe_error = error;
29599935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
296049656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = chk->rec.data.sid;
29619935403aSMichael Tuexen 		ssfe->ssfe_info.snd_flags = chk->rec.data.rcv_flags;
296249656eefSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = chk->rec.data.ppid;
29639935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = chk->rec.data.context;
29649935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
29659935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
29669935403aSMichael Tuexen 	} else {
2967f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
2968ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
2969f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
29701edc9dbaSMichael Tuexen 		if (sent) {
2971f8829a4aSRandall Stewart 			ssf->ssf_flags = SCTP_DATA_SENT;
29721edc9dbaSMichael Tuexen 		} else {
29731edc9dbaSMichael Tuexen 			ssf->ssf_flags = SCTP_DATA_UNSENT;
29741edc9dbaSMichael Tuexen 		}
2975ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + payload_len);
2976f8829a4aSRandall Stewart 		ssf->ssf_error = error;
2977f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
297849656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = chk->rec.data.sid;
297949656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ssn = (uint16_t)chk->rec.data.mid;
2980f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_flags = chk->rec.data.rcv_flags;
298149656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ppid = chk->rec.data.ppid;
2982f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = chk->rec.data.context;
2983f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
2984f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
29859935403aSMichael Tuexen 	}
2986ab337314SMichael Tuexen 	if (chk->data != NULL) {
2987ab337314SMichael Tuexen 		/* Trim off the sctp chunk header (it should be there) */
2988ab337314SMichael Tuexen 		if (chk->send_size == chkhdr_len + payload_len + padding_len) {
2989ab337314SMichael Tuexen 			m_adj(chk->data, chkhdr_len);
2990ab337314SMichael Tuexen 			m_adj(chk->data, -padding_len);
2991830d754dSRandall Stewart 			sctp_mbuf_crush(chk->data);
2992ab337314SMichael Tuexen 			chk->send_size -= (chkhdr_len + padding_len);
2993830d754dSRandall Stewart 		}
2994830d754dSRandall Stewart 	}
2995810ec536SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = chk->data;
2996f8829a4aSRandall Stewart 	/* Steal off the mbuf */
2997f8829a4aSRandall Stewart 	chk->data = NULL;
2998f8829a4aSRandall Stewart 	/*
2999f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3000f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3001f8829a4aSRandall Stewart 	 * non-reader
3002f8829a4aSRandall Stewart 	 */
3003139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3004f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3005f8829a4aSRandall Stewart 		return;
3006f8829a4aSRandall Stewart 	}
3007f8829a4aSRandall Stewart 	/* append to socket */
3008f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
30097215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3010f8829a4aSRandall Stewart 	    m_notify);
3011f8829a4aSRandall Stewart 	if (control == NULL) {
3012f8829a4aSRandall Stewart 		/* no memory */
3013f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3014f8829a4aSRandall Stewart 		return;
3015f8829a4aSRandall Stewart 	}
301628cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3017139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
301828cd0699SMichael Tuexen 	/* not that we need this */
301928cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3020f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3021f8829a4aSRandall Stewart 	    control,
3022cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
3023cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
3024cfde3ff7SRandall Stewart 	    so_locked);
3025f8829a4aSRandall Stewart }
3026f8829a4aSRandall Stewart 
3027f8829a4aSRandall Stewart 
3028f8829a4aSRandall Stewart static void
3029f8829a4aSRandall Stewart sctp_notify_send_failed2(struct sctp_tcb *stcb, uint32_t error,
3030ceaad40aSRandall Stewart     struct sctp_stream_queue_pending *sp, int so_locked
3031ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3032ceaad40aSRandall Stewart     SCTP_UNUSED
3033ceaad40aSRandall Stewart #endif
3034ceaad40aSRandall Stewart )
3035f8829a4aSRandall Stewart {
3036f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3037f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
30389935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
3039f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3040ab337314SMichael Tuexen 	int notifhdr_len;
3041f8829a4aSRandall Stewart 
304260990c0cSMichael Tuexen 	if ((stcb == NULL) ||
30439935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
30449935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
3045f8829a4aSRandall Stewart 		/* event not enabled */
3046f8829a4aSRandall Stewart 		return;
3047830d754dSRandall Stewart 	}
30489935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
3049ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
30509935403aSMichael Tuexen 	} else {
3051ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
30529935403aSMichael Tuexen 	}
3053ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
30549935403aSMichael Tuexen 	if (m_notify == NULL) {
3055f8829a4aSRandall Stewart 		/* no space left */
3056f8829a4aSRandall Stewart 		return;
30579935403aSMichael Tuexen 	}
3058ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
30599935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
30609935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
3061ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
3062ad83c8a5SMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
30639935403aSMichael Tuexen 		ssfe->ssfe_flags = SCTP_DATA_UNSENT;
3064ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + sp->length);
30659935403aSMichael Tuexen 		ssfe->ssfe_error = error;
30669935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
306749656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = sp->sid;
30689935403aSMichael Tuexen 		if (sp->some_taken) {
30699935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_LAST_FRAG;
30709935403aSMichael Tuexen 		} else {
30719935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_NOT_FRAG;
30729935403aSMichael Tuexen 		}
30739935403aSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = sp->ppid;
30749935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = sp->context;
30759935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
30769935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
30779935403aSMichael Tuexen 	} else {
3078f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
3079ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
3080f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
3081f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_UNSENT;
3082ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + sp->length);
3083f8829a4aSRandall Stewart 		ssf->ssf_error = error;
3084f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
308549656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = sp->sid;
3086f3b05218SMichael Tuexen 		ssf->ssf_info.sinfo_ssn = 0;
3087fc14de76SRandall Stewart 		if (sp->some_taken) {
3088fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_LAST_FRAG;
3089fc14de76SRandall Stewart 		} else {
3090fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_NOT_FRAG;
3091fc14de76SRandall Stewart 		}
3092f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_ppid = sp->ppid;
3093f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = sp->context;
3094f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
3095f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
30969935403aSMichael Tuexen 	}
30979935403aSMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = sp->data;
3098f8829a4aSRandall Stewart 
3099f8829a4aSRandall Stewart 	/* Steal off the mbuf */
3100f8829a4aSRandall Stewart 	sp->data = NULL;
3101f8829a4aSRandall Stewart 	/*
3102f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3103f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3104f8829a4aSRandall Stewart 	 * non-reader
3105f8829a4aSRandall Stewart 	 */
3106139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3107f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3108f8829a4aSRandall Stewart 		return;
3109f8829a4aSRandall Stewart 	}
3110f8829a4aSRandall Stewart 	/* append to socket */
3111f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
31127215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3113f8829a4aSRandall Stewart 	    m_notify);
3114f8829a4aSRandall Stewart 	if (control == NULL) {
3115f8829a4aSRandall Stewart 		/* no memory */
3116f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3117f8829a4aSRandall Stewart 		return;
3118f8829a4aSRandall Stewart 	}
311928cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3120139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
312128cd0699SMichael Tuexen 	/* not that we need this */
312228cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3123f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3124f8829a4aSRandall Stewart 	    control,
3125cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3126f8829a4aSRandall Stewart }
3127f8829a4aSRandall Stewart 
3128f8829a4aSRandall Stewart 
3129f8829a4aSRandall Stewart 
3130f8829a4aSRandall Stewart static void
31317215cc1bSMichael Tuexen sctp_notify_adaptation_layer(struct sctp_tcb *stcb)
3132f8829a4aSRandall Stewart {
3133f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3134f8829a4aSRandall Stewart 	struct sctp_adaptation_event *sai;
3135f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3136f8829a4aSRandall Stewart 
313760990c0cSMichael Tuexen 	if ((stcb == NULL) ||
313860990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT)) {
3139f8829a4aSRandall Stewart 		/* event not enabled */
3140f8829a4aSRandall Stewart 		return;
3141830d754dSRandall Stewart 	}
3142eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_adaption_event), 0, M_NOWAIT, 1, MT_DATA);
3143f8829a4aSRandall Stewart 	if (m_notify == NULL)
3144f8829a4aSRandall Stewart 		/* no space left */
3145f8829a4aSRandall Stewart 		return;
3146139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3147f8829a4aSRandall Stewart 	sai = mtod(m_notify, struct sctp_adaptation_event *);
3148e432298aSXin LI 	memset(sai, 0, sizeof(struct sctp_adaptation_event));
3149f8829a4aSRandall Stewart 	sai->sai_type = SCTP_ADAPTATION_INDICATION;
3150f8829a4aSRandall Stewart 	sai->sai_flags = 0;
3151f8829a4aSRandall Stewart 	sai->sai_length = sizeof(struct sctp_adaptation_event);
31522afb3e84SRandall Stewart 	sai->sai_adaptation_ind = stcb->asoc.peers_adaptation;
3153f8829a4aSRandall Stewart 	sai->sai_assoc_id = sctp_get_associd(stcb);
3154f8829a4aSRandall Stewart 
3155139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_adaptation_event);
3156139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3157f8829a4aSRandall Stewart 
3158f8829a4aSRandall Stewart 	/* append to socket */
3159f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
31607215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3161f8829a4aSRandall Stewart 	    m_notify);
3162f8829a4aSRandall Stewart 	if (control == NULL) {
3163f8829a4aSRandall Stewart 		/* no memory */
3164f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3165f8829a4aSRandall Stewart 		return;
3166f8829a4aSRandall Stewart 	}
3167139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3168139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3169f8829a4aSRandall Stewart 	/* not that we need this */
3170f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3171f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3172f8829a4aSRandall Stewart 	    control,
3173cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3174f8829a4aSRandall Stewart }
3175f8829a4aSRandall Stewart 
317603b0b021SRandall Stewart /* This always must be called with the read-queue LOCKED in the INP */
3177810ec536SMichael Tuexen static void
31782dad8a55SRandall Stewart sctp_notify_partial_delivery_indication(struct sctp_tcb *stcb, uint32_t error,
3179810ec536SMichael Tuexen     uint32_t val, int so_locked
3180810ec536SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3181810ec536SMichael Tuexen     SCTP_UNUSED
3182810ec536SMichael Tuexen #endif
3183810ec536SMichael Tuexen )
3184f8829a4aSRandall Stewart {
3185f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3186f8829a4aSRandall Stewart 	struct sctp_pdapi_event *pdapi;
3187f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
318803b0b021SRandall Stewart 	struct sockbuf *sb;
3189f8829a4aSRandall Stewart 
319060990c0cSMichael Tuexen 	if ((stcb == NULL) ||
319160990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_PDAPIEVNT)) {
3192f8829a4aSRandall Stewart 		/* event not enabled */
3193f8829a4aSRandall Stewart 		return;
3194830d754dSRandall Stewart 	}
3195cd1386abSMichael Tuexen 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
3196cd1386abSMichael Tuexen 		return;
3197cd1386abSMichael Tuexen 	}
3198eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_pdapi_event), 0, M_NOWAIT, 1, MT_DATA);
3199f8829a4aSRandall Stewart 	if (m_notify == NULL)
3200f8829a4aSRandall Stewart 		/* no space left */
3201f8829a4aSRandall Stewart 		return;
3202139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3203f8829a4aSRandall Stewart 	pdapi = mtod(m_notify, struct sctp_pdapi_event *);
3204e432298aSXin LI 	memset(pdapi, 0, sizeof(struct sctp_pdapi_event));
3205f8829a4aSRandall Stewart 	pdapi->pdapi_type = SCTP_PARTIAL_DELIVERY_EVENT;
3206f8829a4aSRandall Stewart 	pdapi->pdapi_flags = 0;
3207f8829a4aSRandall Stewart 	pdapi->pdapi_length = sizeof(struct sctp_pdapi_event);
3208f8829a4aSRandall Stewart 	pdapi->pdapi_indication = error;
32099a6142d8SRandall Stewart 	pdapi->pdapi_stream = (val >> 16);
32109a6142d8SRandall Stewart 	pdapi->pdapi_seq = (val & 0x0000ffff);
3211f8829a4aSRandall Stewart 	pdapi->pdapi_assoc_id = sctp_get_associd(stcb);
3212f8829a4aSRandall Stewart 
3213139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_pdapi_event);
3214139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3215f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
32167215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3217f8829a4aSRandall Stewart 	    m_notify);
3218f8829a4aSRandall Stewart 	if (control == NULL) {
3219f8829a4aSRandall Stewart 		/* no memory */
3220f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3221f8829a4aSRandall Stewart 		return;
3222f8829a4aSRandall Stewart 	}
3223139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
322428cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3225f8829a4aSRandall Stewart 	/* not that we need this */
3226f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
322703b0b021SRandall Stewart 	sb = &stcb->sctp_socket->so_rcv;
3228b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
3229139bc87fSRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m_notify));
323080fefe0aSRandall Stewart 	}
323103b0b021SRandall Stewart 	sctp_sballoc(stcb, sb, m_notify);
3232b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
323303b0b021SRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
323480fefe0aSRandall Stewart 	}
323503b0b021SRandall Stewart 	control->end_added = 1;
323603b0b021SRandall Stewart 	if (stcb->asoc.control_pdapi)
323703b0b021SRandall Stewart 		TAILQ_INSERT_AFTER(&stcb->sctp_ep->read_queue, stcb->asoc.control_pdapi, control, next);
323803b0b021SRandall Stewart 	else {
323903b0b021SRandall Stewart 		/* we really should not see this case */
324003b0b021SRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->sctp_ep->read_queue, control, next);
324103b0b021SRandall Stewart 	}
324203b0b021SRandall Stewart 	if (stcb->sctp_ep && stcb->sctp_socket) {
324303b0b021SRandall Stewart 		/* This should always be the case */
3244810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3245810ec536SMichael Tuexen 		struct socket *so;
3246810ec536SMichael Tuexen 
3247810ec536SMichael Tuexen 		so = SCTP_INP_SO(stcb->sctp_ep);
3248810ec536SMichael Tuexen 		if (!so_locked) {
3249810ec536SMichael Tuexen 			atomic_add_int(&stcb->asoc.refcnt, 1);
3250810ec536SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
3251810ec536SMichael Tuexen 			SCTP_SOCKET_LOCK(so, 1);
3252810ec536SMichael Tuexen 			SCTP_TCB_LOCK(stcb);
3253810ec536SMichael Tuexen 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
3254810ec536SMichael Tuexen 			if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
3255810ec536SMichael Tuexen 				SCTP_SOCKET_UNLOCK(so, 1);
3256810ec536SMichael Tuexen 				return;
3257810ec536SMichael Tuexen 			}
3258810ec536SMichael Tuexen 		}
3259810ec536SMichael Tuexen #endif
326003b0b021SRandall Stewart 		sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket);
3261810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3262810ec536SMichael Tuexen 		if (!so_locked) {
3263810ec536SMichael Tuexen 			SCTP_SOCKET_UNLOCK(so, 1);
3264810ec536SMichael Tuexen 		}
3265810ec536SMichael Tuexen #endif
3266f8829a4aSRandall Stewart 	}
3267f8829a4aSRandall Stewart }
3268f8829a4aSRandall Stewart 
3269f8829a4aSRandall Stewart static void
3270f8829a4aSRandall Stewart sctp_notify_shutdown_event(struct sctp_tcb *stcb)
3271f8829a4aSRandall Stewart {
3272f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3273f8829a4aSRandall Stewart 	struct sctp_shutdown_event *sse;
3274f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3275f8829a4aSRandall Stewart 
3276f8829a4aSRandall Stewart 	/*
3277f8829a4aSRandall Stewart 	 * For TCP model AND UDP connected sockets we will send an error up
3278f8829a4aSRandall Stewart 	 * when an SHUTDOWN completes
3279f8829a4aSRandall Stewart 	 */
3280f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3281f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
3282f8829a4aSRandall Stewart 		/* mark socket closed for read/write and wakeup! */
3283ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3284ceaad40aSRandall Stewart 		struct socket *so;
3285ceaad40aSRandall Stewart 
3286ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
3287ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3288ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3289ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3290ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3291ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3292ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
3293ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
3294ceaad40aSRandall Stewart 			return;
3295ceaad40aSRandall Stewart 		}
3296ceaad40aSRandall Stewart #endif
3297f8829a4aSRandall Stewart 		socantsendmore(stcb->sctp_socket);
3298ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3299ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3300ceaad40aSRandall Stewart #endif
3301f8829a4aSRandall Stewart 	}
3302e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT)) {
3303f8829a4aSRandall Stewart 		/* event not enabled */
3304f8829a4aSRandall Stewart 		return;
3305830d754dSRandall Stewart 	}
3306eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_shutdown_event), 0, M_NOWAIT, 1, MT_DATA);
3307f8829a4aSRandall Stewart 	if (m_notify == NULL)
3308f8829a4aSRandall Stewart 		/* no space left */
3309f8829a4aSRandall Stewart 		return;
3310f8829a4aSRandall Stewart 	sse = mtod(m_notify, struct sctp_shutdown_event *);
3311e432298aSXin LI 	memset(sse, 0, sizeof(struct sctp_shutdown_event));
3312f8829a4aSRandall Stewart 	sse->sse_type = SCTP_SHUTDOWN_EVENT;
3313f8829a4aSRandall Stewart 	sse->sse_flags = 0;
3314f8829a4aSRandall Stewart 	sse->sse_length = sizeof(struct sctp_shutdown_event);
3315f8829a4aSRandall Stewart 	sse->sse_assoc_id = sctp_get_associd(stcb);
3316f8829a4aSRandall Stewart 
3317139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_shutdown_event);
3318139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3319f8829a4aSRandall Stewart 
3320f8829a4aSRandall Stewart 	/* append to socket */
3321f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
33227215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3323f8829a4aSRandall Stewart 	    m_notify);
3324f8829a4aSRandall Stewart 	if (control == NULL) {
3325f8829a4aSRandall Stewart 		/* no memory */
3326f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3327f8829a4aSRandall Stewart 		return;
3328f8829a4aSRandall Stewart 	}
3329139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
333028cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3331f8829a4aSRandall Stewart 	/* not that we need this */
3332f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3333f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3334f8829a4aSRandall Stewart 	    control,
3335cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3336f8829a4aSRandall Stewart }
3337f8829a4aSRandall Stewart 
3338f8829a4aSRandall Stewart static void
3339830d754dSRandall Stewart sctp_notify_sender_dry_event(struct sctp_tcb *stcb,
3340830d754dSRandall Stewart     int so_locked
3341830d754dSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3342830d754dSRandall Stewart     SCTP_UNUSED
3343830d754dSRandall Stewart #endif
3344830d754dSRandall Stewart )
3345830d754dSRandall Stewart {
3346830d754dSRandall Stewart 	struct mbuf *m_notify;
3347830d754dSRandall Stewart 	struct sctp_sender_dry_event *event;
3348830d754dSRandall Stewart 	struct sctp_queued_to_read *control;
3349830d754dSRandall Stewart 
335060990c0cSMichael Tuexen 	if ((stcb == NULL) ||
335160990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DRYEVNT)) {
3352830d754dSRandall Stewart 		/* event not enabled */
3353830d754dSRandall Stewart 		return;
3354830d754dSRandall Stewart 	}
3355eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_sender_dry_event), 0, M_NOWAIT, 1, MT_DATA);
3356830d754dSRandall Stewart 	if (m_notify == NULL) {
3357830d754dSRandall Stewart 		/* no space left */
3358830d754dSRandall Stewart 		return;
3359830d754dSRandall Stewart 	}
3360830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3361830d754dSRandall Stewart 	event = mtod(m_notify, struct sctp_sender_dry_event *);
3362e432298aSXin LI 	memset(event, 0, sizeof(struct sctp_sender_dry_event));
3363830d754dSRandall Stewart 	event->sender_dry_type = SCTP_SENDER_DRY_EVENT;
3364830d754dSRandall Stewart 	event->sender_dry_flags = 0;
3365830d754dSRandall Stewart 	event->sender_dry_length = sizeof(struct sctp_sender_dry_event);
3366830d754dSRandall Stewart 	event->sender_dry_assoc_id = sctp_get_associd(stcb);
3367830d754dSRandall Stewart 
3368830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_sender_dry_event);
3369830d754dSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3370830d754dSRandall Stewart 
3371830d754dSRandall Stewart 	/* append to socket */
3372830d754dSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
33737215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
33747215cc1bSMichael Tuexen 	    m_notify);
3375830d754dSRandall Stewart 	if (control == NULL) {
3376830d754dSRandall Stewart 		/* no memory */
3377830d754dSRandall Stewart 		sctp_m_freem(m_notify);
3378830d754dSRandall Stewart 		return;
3379830d754dSRandall Stewart 	}
3380830d754dSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3381830d754dSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3382830d754dSRandall Stewart 	/* not that we need this */
3383830d754dSRandall Stewart 	control->tail_mbuf = m_notify;
3384830d754dSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb, control,
3385cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3386830d754dSRandall Stewart }
3387830d754dSRandall Stewart 
3388ea44232bSRandall Stewart 
3389c4e848b7SRandall Stewart void
3390c4e848b7SRandall Stewart sctp_notify_stream_reset_add(struct sctp_tcb *stcb, uint16_t numberin, uint16_t numberout, int flag)
3391ea44232bSRandall Stewart {
3392ea44232bSRandall Stewart 	struct mbuf *m_notify;
3393ea44232bSRandall Stewart 	struct sctp_queued_to_read *control;
3394c4e848b7SRandall Stewart 	struct sctp_stream_change_event *stradd;
3395ea44232bSRandall Stewart 
33968c501e51SMichael Tuexen 	if ((stcb == NULL) ||
33978c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_CHANGEEVNT))) {
3398ea44232bSRandall Stewart 		/* event not enabled */
3399ea44232bSRandall Stewart 		return;
3400ea44232bSRandall Stewart 	}
3401c4e848b7SRandall Stewart 	if ((stcb->asoc.peer_req_out) && flag) {
3402c4e848b7SRandall Stewart 		/* Peer made the request, don't tell the local user */
3403c4e848b7SRandall Stewart 		stcb->asoc.peer_req_out = 0;
3404c4e848b7SRandall Stewart 		return;
3405c4e848b7SRandall Stewart 	}
3406c4e848b7SRandall Stewart 	stcb->asoc.peer_req_out = 0;
3407e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_stream_change_event), 0, M_NOWAIT, 1, MT_DATA);
3408ea44232bSRandall Stewart 	if (m_notify == NULL)
3409ea44232bSRandall Stewart 		/* no space left */
3410ea44232bSRandall Stewart 		return;
3411ea44232bSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3412c4e848b7SRandall Stewart 	stradd = mtod(m_notify, struct sctp_stream_change_event *);
3413e432298aSXin LI 	memset(stradd, 0, sizeof(struct sctp_stream_change_event));
3414c4e848b7SRandall Stewart 	stradd->strchange_type = SCTP_STREAM_CHANGE_EVENT;
3415c4e848b7SRandall Stewart 	stradd->strchange_flags = flag;
3416e432298aSXin LI 	stradd->strchange_length = sizeof(struct sctp_stream_change_event);
3417c4e848b7SRandall Stewart 	stradd->strchange_assoc_id = sctp_get_associd(stcb);
3418c4e848b7SRandall Stewart 	stradd->strchange_instrms = numberin;
3419c4e848b7SRandall Stewart 	stradd->strchange_outstrms = numberout;
3420e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_stream_change_event);
3421ea44232bSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3422ea44232bSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3423ea44232bSRandall Stewart 		/* no space */
3424ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3425ea44232bSRandall Stewart 		return;
3426ea44232bSRandall Stewart 	}
3427ea44232bSRandall Stewart 	/* append to socket */
3428ea44232bSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
34297215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3430ea44232bSRandall Stewart 	    m_notify);
3431ea44232bSRandall Stewart 	if (control == NULL) {
3432ea44232bSRandall Stewart 		/* no memory */
3433ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3434ea44232bSRandall Stewart 		return;
3435ea44232bSRandall Stewart 	}
3436ea44232bSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
343728cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3438ea44232bSRandall Stewart 	/* not that we need this */
3439ea44232bSRandall Stewart 	control->tail_mbuf = m_notify;
3440ea44232bSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3441ea44232bSRandall Stewart 	    control,
3442cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3443ea44232bSRandall Stewart }
3444ea44232bSRandall Stewart 
3445c4e848b7SRandall Stewart void
3446c4e848b7SRandall Stewart sctp_notify_stream_reset_tsn(struct sctp_tcb *stcb, uint32_t sending_tsn, uint32_t recv_tsn, int flag)
3447c4e848b7SRandall Stewart {
3448c4e848b7SRandall Stewart 	struct mbuf *m_notify;
3449c4e848b7SRandall Stewart 	struct sctp_queued_to_read *control;
3450c4e848b7SRandall Stewart 	struct sctp_assoc_reset_event *strasoc;
3451c4e848b7SRandall Stewart 
34528c501e51SMichael Tuexen 	if ((stcb == NULL) ||
34538c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ASSOC_RESETEVNT))) {
3454c4e848b7SRandall Stewart 		/* event not enabled */
3455c4e848b7SRandall Stewart 		return;
3456c4e848b7SRandall Stewart 	}
3457e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_assoc_reset_event), 0, M_NOWAIT, 1, MT_DATA);
3458c4e848b7SRandall Stewart 	if (m_notify == NULL)
3459c4e848b7SRandall Stewart 		/* no space left */
3460c4e848b7SRandall Stewart 		return;
3461c4e848b7SRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3462c4e848b7SRandall Stewart 	strasoc = mtod(m_notify, struct sctp_assoc_reset_event *);
3463e432298aSXin LI 	memset(strasoc, 0, sizeof(struct sctp_assoc_reset_event));
3464c4e848b7SRandall Stewart 	strasoc->assocreset_type = SCTP_ASSOC_RESET_EVENT;
3465c4e848b7SRandall Stewart 	strasoc->assocreset_flags = flag;
3466e432298aSXin LI 	strasoc->assocreset_length = sizeof(struct sctp_assoc_reset_event);
3467c4e848b7SRandall Stewart 	strasoc->assocreset_assoc_id = sctp_get_associd(stcb);
3468c4e848b7SRandall Stewart 	strasoc->assocreset_local_tsn = sending_tsn;
3469c4e848b7SRandall Stewart 	strasoc->assocreset_remote_tsn = recv_tsn;
3470e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_assoc_reset_event);
3471c4e848b7SRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3472c4e848b7SRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3473c4e848b7SRandall Stewart 		/* no space */
3474c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3475c4e848b7SRandall Stewart 		return;
3476c4e848b7SRandall Stewart 	}
3477c4e848b7SRandall Stewart 	/* append to socket */
3478c4e848b7SRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3479c4e848b7SRandall Stewart 	    0, 0, stcb->asoc.context, 0, 0, 0,
3480c4e848b7SRandall Stewart 	    m_notify);
3481c4e848b7SRandall Stewart 	if (control == NULL) {
3482c4e848b7SRandall Stewart 		/* no memory */
3483c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3484c4e848b7SRandall Stewart 		return;
3485c4e848b7SRandall Stewart 	}
3486c4e848b7SRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
348728cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3488c4e848b7SRandall Stewart 	/* not that we need this */
3489c4e848b7SRandall Stewart 	control->tail_mbuf = m_notify;
3490c4e848b7SRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3491c4e848b7SRandall Stewart 	    control,
3492c4e848b7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3493c4e848b7SRandall Stewart }
3494c4e848b7SRandall Stewart 
3495c4e848b7SRandall Stewart 
3496ea44232bSRandall Stewart 
3497830d754dSRandall Stewart static void
3498f8829a4aSRandall Stewart sctp_notify_stream_reset(struct sctp_tcb *stcb,
3499f8829a4aSRandall Stewart     int number_entries, uint16_t *list, int flag)
3500f8829a4aSRandall Stewart {
3501f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3502f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3503f8829a4aSRandall Stewart 	struct sctp_stream_reset_event *strreset;
3504f8829a4aSRandall Stewart 	int len;
3505f8829a4aSRandall Stewart 
35068c501e51SMichael Tuexen 	if ((stcb == NULL) ||
35078c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_RESETEVNT))) {
3508f8829a4aSRandall Stewart 		/* event not enabled */
3509f8829a4aSRandall Stewart 		return;
3510830d754dSRandall Stewart 	}
3511eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_NOWAIT, 1, MT_DATA);
3512f8829a4aSRandall Stewart 	if (m_notify == NULL)
3513f8829a4aSRandall Stewart 		/* no space left */
3514f8829a4aSRandall Stewart 		return;
3515139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3516f8829a4aSRandall Stewart 	len = sizeof(struct sctp_stream_reset_event) + (number_entries * sizeof(uint16_t));
3517f8829a4aSRandall Stewart 	if (len > M_TRAILINGSPACE(m_notify)) {
3518f8829a4aSRandall Stewart 		/* never enough room */
3519f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3520f8829a4aSRandall Stewart 		return;
3521f8829a4aSRandall Stewart 	}
3522f8829a4aSRandall Stewart 	strreset = mtod(m_notify, struct sctp_stream_reset_event *);
3523e432298aSXin LI 	memset(strreset, 0, len);
3524f8829a4aSRandall Stewart 	strreset->strreset_type = SCTP_STREAM_RESET_EVENT;
3525c4e848b7SRandall Stewart 	strreset->strreset_flags = flag;
3526f8829a4aSRandall Stewart 	strreset->strreset_length = len;
3527f8829a4aSRandall Stewart 	strreset->strreset_assoc_id = sctp_get_associd(stcb);
3528f8829a4aSRandall Stewart 	if (number_entries) {
3529f8829a4aSRandall Stewart 		int i;
3530f8829a4aSRandall Stewart 
3531f8829a4aSRandall Stewart 		for (i = 0; i < number_entries; i++) {
3532c4e848b7SRandall Stewart 			strreset->strreset_stream_list[i] = ntohs(list[i]);
3533f8829a4aSRandall Stewart 		}
3534f8829a4aSRandall Stewart 	}
3535139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = len;
3536139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3537139bc87fSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3538f8829a4aSRandall Stewart 		/* no space */
3539f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3540f8829a4aSRandall Stewart 		return;
3541f8829a4aSRandall Stewart 	}
3542f8829a4aSRandall Stewart 	/* append to socket */
3543f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
35447215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3545f8829a4aSRandall Stewart 	    m_notify);
3546f8829a4aSRandall Stewart 	if (control == NULL) {
3547f8829a4aSRandall Stewart 		/* no memory */
3548f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3549f8829a4aSRandall Stewart 		return;
3550f8829a4aSRandall Stewart 	}
3551139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
355228cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3553f8829a4aSRandall Stewart 	/* not that we need this */
3554f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3555f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3556f8829a4aSRandall Stewart 	    control,
3557cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3558f8829a4aSRandall Stewart }
3559f8829a4aSRandall Stewart 
3560f8829a4aSRandall Stewart 
3561389b1b11SMichael Tuexen static void
3562389b1b11SMichael Tuexen sctp_notify_remote_error(struct sctp_tcb *stcb, uint16_t error, struct sctp_error_chunk *chunk)
3563389b1b11SMichael Tuexen {
3564389b1b11SMichael Tuexen 	struct mbuf *m_notify;
3565389b1b11SMichael Tuexen 	struct sctp_remote_error *sre;
3566389b1b11SMichael Tuexen 	struct sctp_queued_to_read *control;
35679a8e3088SMichael Tuexen 	unsigned int notif_len;
35689a8e3088SMichael Tuexen 	uint16_t chunk_len;
3569389b1b11SMichael Tuexen 
3570389b1b11SMichael Tuexen 	if ((stcb == NULL) ||
3571389b1b11SMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPEERERR)) {
3572389b1b11SMichael Tuexen 		return;
3573389b1b11SMichael Tuexen 	}
3574389b1b11SMichael Tuexen 	if (chunk != NULL) {
3575c9eb4473SMichael Tuexen 		chunk_len = ntohs(chunk->ch.chunk_length);
3576389b1b11SMichael Tuexen 	} else {
3577389b1b11SMichael Tuexen 		chunk_len = 0;
3578389b1b11SMichael Tuexen 	}
35799a8e3088SMichael Tuexen 	notif_len = (unsigned int)(sizeof(struct sctp_remote_error) + chunk_len);
3580eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3581389b1b11SMichael Tuexen 	if (m_notify == NULL) {
3582389b1b11SMichael Tuexen 		/* Retry with smaller value. */
35839a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_remote_error);
3584eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3585389b1b11SMichael Tuexen 		if (m_notify == NULL) {
3586389b1b11SMichael Tuexen 			return;
3587389b1b11SMichael Tuexen 		}
3588389b1b11SMichael Tuexen 	}
3589389b1b11SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = NULL;
3590389b1b11SMichael Tuexen 	sre = mtod(m_notify, struct sctp_remote_error *);
359156711f94SMichael Tuexen 	memset(sre, 0, notif_len);
3592389b1b11SMichael Tuexen 	sre->sre_type = SCTP_REMOTE_ERROR;
3593389b1b11SMichael Tuexen 	sre->sre_flags = 0;
3594389b1b11SMichael Tuexen 	sre->sre_length = sizeof(struct sctp_remote_error);
3595389b1b11SMichael Tuexen 	sre->sre_error = error;
3596389b1b11SMichael Tuexen 	sre->sre_assoc_id = sctp_get_associd(stcb);
3597389b1b11SMichael Tuexen 	if (notif_len > sizeof(struct sctp_remote_error)) {
3598389b1b11SMichael Tuexen 		memcpy(sre->sre_data, chunk, chunk_len);
3599389b1b11SMichael Tuexen 		sre->sre_length += chunk_len;
3600389b1b11SMichael Tuexen 	}
3601389b1b11SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = sre->sre_length;
3602389b1b11SMichael Tuexen 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3603389b1b11SMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3604389b1b11SMichael Tuexen 	    m_notify);
3605389b1b11SMichael Tuexen 	if (control != NULL) {
3606389b1b11SMichael Tuexen 		control->length = SCTP_BUF_LEN(m_notify);
360728cd0699SMichael Tuexen 		control->spec_flags = M_NOTIFICATION;
3608389b1b11SMichael Tuexen 		/* not that we need this */
3609389b1b11SMichael Tuexen 		control->tail_mbuf = m_notify;
3610389b1b11SMichael Tuexen 		sctp_add_to_readq(stcb->sctp_ep, stcb,
3611389b1b11SMichael Tuexen 		    control,
3612389b1b11SMichael Tuexen 		    &stcb->sctp_socket->so_rcv, 1,
3613389b1b11SMichael Tuexen 		    SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3614389b1b11SMichael Tuexen 	} else {
3615389b1b11SMichael Tuexen 		sctp_m_freem(m_notify);
3616389b1b11SMichael Tuexen 	}
3617389b1b11SMichael Tuexen }
3618389b1b11SMichael Tuexen 
3619389b1b11SMichael Tuexen 
3620f8829a4aSRandall Stewart void
3621f8829a4aSRandall Stewart sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb,
3622ceaad40aSRandall Stewart     uint32_t error, void *data, int so_locked
3623ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3624ceaad40aSRandall Stewart     SCTP_UNUSED
3625ceaad40aSRandall Stewart #endif
3626ceaad40aSRandall Stewart )
3627f8829a4aSRandall Stewart {
3628830d754dSRandall Stewart 	if ((stcb == NULL) ||
3629830d754dSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3630f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3631830d754dSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3632830d754dSRandall Stewart 		/* If the socket is gone we are out of here */
3633f8829a4aSRandall Stewart 		return;
3634f8829a4aSRandall Stewart 	}
3635a99b6783SRandall Stewart 	if (stcb->sctp_socket->so_rcv.sb_state & SBS_CANTRCVMORE) {
3636a99b6783SRandall Stewart 		return;
3637a99b6783SRandall Stewart 	}
3638fb4a67d2SMichael Tuexen 	if ((stcb->asoc.state & SCTP_STATE_COOKIE_WAIT) ||
3639fb4a67d2SMichael Tuexen 	    (stcb->asoc.state & SCTP_STATE_COOKIE_ECHOED)) {
364017205eccSRandall Stewart 		if ((notification == SCTP_NOTIFY_INTERFACE_DOWN) ||
364117205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_UP) ||
364217205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_CONFIRMED)) {
364317205eccSRandall Stewart 			/* Don't report these in front states */
364417205eccSRandall Stewart 			return;
364517205eccSRandall Stewart 		}
364617205eccSRandall Stewart 	}
3647f8829a4aSRandall Stewart 	switch (notification) {
3648f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_UP:
3649f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_up_sent == 0) {
3650410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_UP, stcb, error, NULL, 0, so_locked);
3651f8829a4aSRandall Stewart 			stcb->asoc.assoc_up_sent = 1;
3652f8829a4aSRandall Stewart 		}
36532afb3e84SRandall Stewart 		if (stcb->asoc.adaptation_needed && (stcb->asoc.adaptation_sent == 0)) {
36547215cc1bSMichael Tuexen 			sctp_notify_adaptation_layer(stcb);
36552afb3e84SRandall Stewart 		}
3656c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3657830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3658830d754dSRandall Stewart 			    NULL, so_locked);
3659830d754dSRandall Stewart 		}
3660f8829a4aSRandall Stewart 		break;
3661f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_DOWN:
3662410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_SHUTDOWN_COMP, stcb, error, NULL, 0, so_locked);
3663f8829a4aSRandall Stewart 		break;
3664f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_DOWN:
3665f8829a4aSRandall Stewart 		{
3666f8829a4aSRandall Stewart 			struct sctp_nets *net;
3667f8829a4aSRandall Stewart 
3668f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3669f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_UNREACHABLE,
36703cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3671f8829a4aSRandall Stewart 			break;
3672f8829a4aSRandall Stewart 		}
3673f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_UP:
3674f8829a4aSRandall Stewart 		{
3675f8829a4aSRandall Stewart 			struct sctp_nets *net;
3676f8829a4aSRandall Stewart 
3677f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3678f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_AVAILABLE,
36793cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3680f8829a4aSRandall Stewart 			break;
3681f8829a4aSRandall Stewart 		}
3682f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_CONFIRMED:
3683f8829a4aSRandall Stewart 		{
3684f8829a4aSRandall Stewart 			struct sctp_nets *net;
3685f8829a4aSRandall Stewart 
3686f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3687f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_CONFIRMED,
36883cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3689f8829a4aSRandall Stewart 			break;
3690f8829a4aSRandall Stewart 		}
3691f8829a4aSRandall Stewart 	case SCTP_NOTIFY_SPECIAL_SP_FAIL:
3692f8829a4aSRandall Stewart 		sctp_notify_send_failed2(stcb, error,
3693ceaad40aSRandall Stewart 		    (struct sctp_stream_queue_pending *)data, so_locked);
3694f8829a4aSRandall Stewart 		break;
36951edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_SENT_DG_FAIL:
36961edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 1, error,
36971edc9dbaSMichael Tuexen 		    (struct sctp_tmit_chunk *)data, so_locked);
36981edc9dbaSMichael Tuexen 		break;
36991edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_UNSENT_DG_FAIL:
37001edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 0, error,
3701ceaad40aSRandall Stewart 		    (struct sctp_tmit_chunk *)data, so_locked);
3702f8829a4aSRandall Stewart 		break;
3703f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION:
37049a6142d8SRandall Stewart 		{
37059a6142d8SRandall Stewart 			uint32_t val;
37069a6142d8SRandall Stewart 
37079a6142d8SRandall Stewart 			val = *((uint32_t *)data);
37089a6142d8SRandall Stewart 
3709810ec536SMichael Tuexen 			sctp_notify_partial_delivery_indication(stcb, error, val, so_locked);
3710f8829a4aSRandall Stewart 			break;
3711810ec536SMichael Tuexen 		}
3712410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_LOC_ABORTED:
3713fb4a67d2SMichael Tuexen 		if (((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_WAIT) ||
3714fb4a67d2SMichael Tuexen 		    ((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_ECHOED)) {
3715410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 0, so_locked);
3716c105859eSRandall Stewart 		} else {
3717410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 0, so_locked);
3718410a3b1eSMichael Tuexen 		}
3719410a3b1eSMichael Tuexen 		break;
3720410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_REM_ABORTED:
3721fb4a67d2SMichael Tuexen 		if (((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_WAIT) ||
3722fb4a67d2SMichael Tuexen 		    ((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_ECHOED)) {
3723410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 1, so_locked);
3724410a3b1eSMichael Tuexen 		} else {
3725410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 1, so_locked);
3726c105859eSRandall Stewart 		}
3727f8829a4aSRandall Stewart 		break;
3728f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_RESTART:
3729410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_RESTART, stcb, error, NULL, 0, so_locked);
3730c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3731830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3732830d754dSRandall Stewart 			    NULL, so_locked);
3733830d754dSRandall Stewart 		}
3734f8829a4aSRandall Stewart 		break;
3735f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_SEND:
3736d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_OUTGOING_SSN);
3737f8829a4aSRandall Stewart 		break;
3738f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_RECV:
3739d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_INCOMING);
3740f8829a4aSRandall Stewart 		break;
3741f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_OUT:
3742c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3743d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_FAILED));
3744f8829a4aSRandall Stewart 		break;
3745d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_OUT:
3746d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3747d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_DENIED));
3748d4260646SMichael Tuexen 		break;
3749f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_IN:
3750c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3751d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_FAILED));
3752f8829a4aSRandall Stewart 		break;
3753d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_IN:
3754d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3755d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_DENIED));
3756d4260646SMichael Tuexen 		break;
3757f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_ADD_IP:
3758f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_ADDED, data,
37593cb3567dSMichael Tuexen 		    error, so_locked);
3760f8829a4aSRandall Stewart 		break;
3761f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_DELETE_IP:
3762f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_REMOVED, data,
37633cb3567dSMichael Tuexen 		    error, so_locked);
3764f8829a4aSRandall Stewart 		break;
3765f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_SET_PRIMARY:
3766f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_MADE_PRIM, data,
37673cb3567dSMichael Tuexen 		    error, so_locked);
3768f8829a4aSRandall Stewart 		break;
3769f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PEER_SHUTDOWN:
3770f8829a4aSRandall Stewart 		sctp_notify_shutdown_event(stcb);
3771f8829a4aSRandall Stewart 		break;
3772f8829a4aSRandall Stewart 	case SCTP_NOTIFY_AUTH_NEW_KEY:
377378f28045SMichael Tuexen 		sctp_notify_authentication(stcb, SCTP_AUTH_NEW_KEY, error,
3774830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3775830d754dSRandall Stewart 		    so_locked);
3776f8829a4aSRandall Stewart 		break;
3777830d754dSRandall Stewart 	case SCTP_NOTIFY_AUTH_FREE_KEY:
3778830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_FREE_KEY, error,
3779830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3780830d754dSRandall Stewart 		    so_locked);
3781f8829a4aSRandall Stewart 		break;
3782830d754dSRandall Stewart 	case SCTP_NOTIFY_NO_PEER_AUTH:
3783830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_NO_AUTH, error,
3784830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3785830d754dSRandall Stewart 		    so_locked);
3786830d754dSRandall Stewart 		break;
3787830d754dSRandall Stewart 	case SCTP_NOTIFY_SENDER_DRY:
3788830d754dSRandall Stewart 		sctp_notify_sender_dry_event(stcb, so_locked);
3789830d754dSRandall Stewart 		break;
3790389b1b11SMichael Tuexen 	case SCTP_NOTIFY_REMOTE_ERROR:
3791389b1b11SMichael Tuexen 		sctp_notify_remote_error(stcb, error, data);
3792389b1b11SMichael Tuexen 		break;
3793f8829a4aSRandall Stewart 	default:
3794ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_UTIL1, "%s: unknown notification %xh (%u)\n",
37956e9c45e0SMichael Tuexen 		    __func__, notification, notification);
3796f8829a4aSRandall Stewart 		break;
3797f8829a4aSRandall Stewart 	}			/* end switch */
3798f8829a4aSRandall Stewart }
3799f8829a4aSRandall Stewart 
3800f8829a4aSRandall Stewart void
38011edc9dbaSMichael Tuexen sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked
3802ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3803ceaad40aSRandall Stewart     SCTP_UNUSED
3804ceaad40aSRandall Stewart #endif
3805ceaad40aSRandall Stewart )
3806f8829a4aSRandall Stewart {
3807f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3808f8829a4aSRandall Stewart 	struct sctp_stream_out *outs;
38094a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk, *nchk;
38104a9ef3f8SMichael Tuexen 	struct sctp_stream_queue_pending *sp, *nsp;
38117f34832bSRandall Stewart 	int i;
3812f8829a4aSRandall Stewart 
3813ad81507eSRandall Stewart 	if (stcb == NULL) {
3814ad81507eSRandall Stewart 		return;
3815ad81507eSRandall Stewart 	}
38164a9ef3f8SMichael Tuexen 	asoc = &stcb->asoc;
38174a9ef3f8SMichael Tuexen 	if (asoc->state & SCTP_STATE_ABOUT_TO_BE_FREED) {
3818478fbccbSRandall Stewart 		/* already being freed */
3819478fbccbSRandall Stewart 		return;
3820478fbccbSRandall Stewart 	}
3821f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3822f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
38234a9ef3f8SMichael Tuexen 	    (asoc->state & SCTP_STATE_CLOSED_SOCKET)) {
3824f8829a4aSRandall Stewart 		return;
3825f8829a4aSRandall Stewart 	}
3826f8829a4aSRandall Stewart 	/* now through all the gunk freeing chunks */
3827ad81507eSRandall Stewart 	if (holds_lock == 0) {
38287f34832bSRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
3829ad81507eSRandall Stewart 	}
3830d00aff5dSRandall Stewart 	/* sent queue SHOULD be empty */
38314a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
3832d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
3833d00aff5dSRandall Stewart 		asoc->sent_queue_cnt--;
3834325c8c46SMichael Tuexen 		if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
383549656eefSMichael Tuexen 			if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
383649656eefSMichael Tuexen 				asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3837a7ad6026SMichael Tuexen #ifdef INVARIANTS
3838a7ad6026SMichael Tuexen 			} else {
383949656eefSMichael Tuexen 				panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3840a7ad6026SMichael Tuexen #endif
3841a7ad6026SMichael Tuexen 			}
3842a7ad6026SMichael Tuexen 		}
38430c0982b8SRandall Stewart 		if (chk->data != NULL) {
3844d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
38451edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb,
38461edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3847810ec536SMichael Tuexen 			if (chk->data) {
3848d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3849d00aff5dSRandall Stewart 				chk->data = NULL;
3850d00aff5dSRandall Stewart 			}
3851810ec536SMichael Tuexen 		}
3852689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3853d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3854d00aff5dSRandall Stewart 	}
3855d00aff5dSRandall Stewart 	/* pending send queue SHOULD be empty */
38564a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->send_queue, sctp_next, nchk) {
3857d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next);
3858d00aff5dSRandall Stewart 		asoc->send_queue_cnt--;
385949656eefSMichael Tuexen 		if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
386049656eefSMichael Tuexen 			asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3861a7ad6026SMichael Tuexen #ifdef INVARIANTS
3862a7ad6026SMichael Tuexen 		} else {
386349656eefSMichael Tuexen 			panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3864a7ad6026SMichael Tuexen #endif
3865a7ad6026SMichael Tuexen 		}
38660c0982b8SRandall Stewart 		if (chk->data != NULL) {
3867d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
38681edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb,
38691edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3870810ec536SMichael Tuexen 			if (chk->data) {
3871d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3872d00aff5dSRandall Stewart 				chk->data = NULL;
3873d00aff5dSRandall Stewart 			}
3874810ec536SMichael Tuexen 		}
3875689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3876d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3877d00aff5dSRandall Stewart 	}
38784a9ef3f8SMichael Tuexen 	for (i = 0; i < asoc->streamoutcnt; i++) {
38797f34832bSRandall Stewart 		/* For each stream */
38804a9ef3f8SMichael Tuexen 		outs = &asoc->strmout[i];
38817f34832bSRandall Stewart 		/* clean up any sends there */
38824a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(sp, &outs->outqueue, next, nsp) {
38834d58b0c3SMichael Tuexen 			atomic_subtract_int(&asoc->stream_queue_cnt, 1);
3884f8829a4aSRandall Stewart 			TAILQ_REMOVE(&outs->outqueue, sp, next);
38854d58b0c3SMichael Tuexen 			stcb->asoc.ss_functions.sctp_ss_remove_from_stream(stcb, asoc, outs, sp, holds_lock);
3886f8829a4aSRandall Stewart 			sctp_free_spbufspace(stcb, asoc, sp);
3887478fbccbSRandall Stewart 			if (sp->data) {
3888f8829a4aSRandall Stewart 				sctp_ulp_notify(SCTP_NOTIFY_SPECIAL_SP_FAIL, stcb,
38891edc9dbaSMichael Tuexen 				    error, (void *)sp, so_locked);
3890f8829a4aSRandall Stewart 				if (sp->data) {
3891f8829a4aSRandall Stewart 					sctp_m_freem(sp->data);
3892f8829a4aSRandall Stewart 					sp->data = NULL;
3893d07b2ac6SMichael Tuexen 					sp->tail_mbuf = NULL;
3894d07b2ac6SMichael Tuexen 					sp->length = 0;
3895f8829a4aSRandall Stewart 				}
3896478fbccbSRandall Stewart 			}
38979eea4a2dSMichael Tuexen 			if (sp->net) {
3898f8829a4aSRandall Stewart 				sctp_free_remote_addr(sp->net);
3899f8829a4aSRandall Stewart 				sp->net = NULL;
39009eea4a2dSMichael Tuexen 			}
3901f8829a4aSRandall Stewart 			/* Free the chunk */
3902689e6a5fSMichael Tuexen 			sctp_free_a_strmoq(stcb, sp, so_locked);
39033c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
3904f8829a4aSRandall Stewart 		}
3905f8829a4aSRandall Stewart 	}
3906f8829a4aSRandall Stewart 
3907ad81507eSRandall Stewart 	if (holds_lock == 0) {
39087f34832bSRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
3909f8829a4aSRandall Stewart 	}
3910ad81507eSRandall Stewart }
3911f8829a4aSRandall Stewart 
3912f8829a4aSRandall Stewart void
3913410a3b1eSMichael Tuexen sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error,
3914a2b42326SMichael Tuexen     struct sctp_abort_chunk *abort, int so_locked
3915ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3916ceaad40aSRandall Stewart     SCTP_UNUSED
3917ceaad40aSRandall Stewart #endif
3918ceaad40aSRandall Stewart )
3919f8829a4aSRandall Stewart {
3920ad81507eSRandall Stewart 	if (stcb == NULL) {
3921ad81507eSRandall Stewart 		return;
3922ad81507eSRandall Stewart 	}
3923c55b70ceSMichael Tuexen 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3924c55b70ceSMichael Tuexen 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
3925c55b70ceSMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_CONNECTED))) {
3926c55b70ceSMichael Tuexen 		stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_WAS_ABORTED;
3927c55b70ceSMichael Tuexen 	}
3928f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3929f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3930f8829a4aSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3931f8829a4aSRandall Stewart 		return;
3932f8829a4aSRandall Stewart 	}
3933f8829a4aSRandall Stewart 	/* Tell them we lost the asoc */
39341edc9dbaSMichael Tuexen 	sctp_report_all_outbound(stcb, error, 1, so_locked);
3935410a3b1eSMichael Tuexen 	if (from_peer) {
3936410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked);
3937410a3b1eSMichael Tuexen 	} else {
3938410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_LOC_ABORTED, stcb, error, abort, so_locked);
3939410a3b1eSMichael Tuexen 	}
3940f8829a4aSRandall Stewart }
3941f8829a4aSRandall Stewart 
3942f8829a4aSRandall Stewart void
3943f8829a4aSRandall Stewart sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
3944b1754ad1SMichael Tuexen     struct mbuf *m, int iphlen,
3945b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
3946b1754ad1SMichael Tuexen     struct sctphdr *sh, struct mbuf *op_err,
3947457b4b88SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid,
3948c54a18d2SRandall Stewart     uint32_t vrf_id, uint16_t port)
3949f8829a4aSRandall Stewart {
3950f8829a4aSRandall Stewart 	uint32_t vtag;
3951ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3952ceaad40aSRandall Stewart 	struct socket *so;
3953ceaad40aSRandall Stewart #endif
3954ceaad40aSRandall Stewart 
3955f8829a4aSRandall Stewart 	vtag = 0;
3956f8829a4aSRandall Stewart 	if (stcb != NULL) {
3957f8829a4aSRandall Stewart 		vtag = stcb->asoc.peer_vtag;
395817205eccSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
3959f8829a4aSRandall Stewart 	}
3960b1754ad1SMichael Tuexen 	sctp_send_abort(m, iphlen, src, dst, sh, vtag, op_err,
3961d089f9b9SMichael Tuexen 	    mflowtype, mflowid, inp->fibnum,
3962f30ac432SMichael Tuexen 	    vrf_id, port);
3963f8829a4aSRandall Stewart 	if (stcb != NULL) {
3964884d8c53SMichael Tuexen 		/* We have a TCB to abort, send notification too */
3965884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED);
3966884d8c53SMichael Tuexen 		stcb->asoc.state |= SCTP_STATE_WAS_ABORTED;
3967f8829a4aSRandall Stewart 		/* Ok, now lets free it */
3968ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3969ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
3970ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3971ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3972ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3973ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3974ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3975ceaad40aSRandall Stewart #endif
39760271d0cdSMichael Tuexen 		SCTP_STAT_INCR_COUNTER32(sctps_aborted);
39770271d0cdSMichael Tuexen 		if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
39780271d0cdSMichael Tuexen 		    (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
39790271d0cdSMichael Tuexen 			SCTP_STAT_DECR_GAUGE32(sctps_currestab);
39800271d0cdSMichael Tuexen 		}
3981ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
3982ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_4);
3983ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3984ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3985ceaad40aSRandall Stewart #endif
3986f8829a4aSRandall Stewart 	}
3987f8829a4aSRandall Stewart }
3988f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
3989f1f73e57SRandall Stewart void
3990f1f73e57SRandall Stewart sctp_print_out_track_log(struct sctp_tcb *stcb)
3991f1f73e57SRandall Stewart {
399218e198d3SRandall Stewart #ifdef NOSIY_PRINTS
3993f1f73e57SRandall Stewart 	int i;
3994f1f73e57SRandall Stewart 
3995ad81507eSRandall Stewart 	SCTP_PRINTF("Last ep reason:%x\n", stcb->sctp_ep->last_abort_code);
3996ad81507eSRandall Stewart 	SCTP_PRINTF("IN bound TSN log-aaa\n");
3997f1f73e57SRandall Stewart 	if ((stcb->asoc.tsn_in_at == 0) && (stcb->asoc.tsn_in_wrapped == 0)) {
3998ad81507eSRandall Stewart 		SCTP_PRINTF("None rcvd\n");
3999f1f73e57SRandall Stewart 		goto none_in;
4000f1f73e57SRandall Stewart 	}
4001f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_wrapped) {
4002f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_in_at; i < SCTP_TSN_LOG_SIZE; i++) {
4003ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4004f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4005f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4006f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4007f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4008f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4009f1f73e57SRandall Stewart 		}
4010f1f73e57SRandall Stewart 	}
4011f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_at) {
4012f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_in_at; i++) {
4013ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4014f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4015f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4016f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4017f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4018f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4019f1f73e57SRandall Stewart 		}
4020f1f73e57SRandall Stewart 	}
4021f1f73e57SRandall Stewart none_in:
4022ad81507eSRandall Stewart 	SCTP_PRINTF("OUT bound TSN log-aaa\n");
4023ad81507eSRandall Stewart 	if ((stcb->asoc.tsn_out_at == 0) &&
4024ad81507eSRandall Stewart 	    (stcb->asoc.tsn_out_wrapped == 0)) {
4025ad81507eSRandall Stewart 		SCTP_PRINTF("None sent\n");
4026f1f73e57SRandall Stewart 	}
4027f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_wrapped) {
4028f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_out_at; i < SCTP_TSN_LOG_SIZE; i++) {
4029ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4030f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4031f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4032f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4033f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4034f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4035f1f73e57SRandall Stewart 		}
4036f1f73e57SRandall Stewart 	}
4037f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_at) {
4038f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_out_at; i++) {
4039ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4040f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4041f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4042f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4043f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4044f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4045f1f73e57SRandall Stewart 		}
4046f1f73e57SRandall Stewart 	}
404718e198d3SRandall Stewart #endif
4048f1f73e57SRandall Stewart }
4049f1f73e57SRandall Stewart #endif
4050f1f73e57SRandall Stewart 
4051f8829a4aSRandall Stewart void
4052f8829a4aSRandall Stewart sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
4053a2b42326SMichael Tuexen     struct mbuf *op_err,
4054ceaad40aSRandall Stewart     int so_locked
4055ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4056ceaad40aSRandall Stewart     SCTP_UNUSED
4057ceaad40aSRandall Stewart #endif
4058ceaad40aSRandall Stewart )
4059f8829a4aSRandall Stewart {
4060ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4061ceaad40aSRandall Stewart 	struct socket *so;
4062ceaad40aSRandall Stewart #endif
4063ceaad40aSRandall Stewart 
4064ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4065ceaad40aSRandall Stewart 	so = SCTP_INP_SO(inp);
4066ceaad40aSRandall Stewart #endif
4067f8829a4aSRandall Stewart 	if (stcb == NULL) {
4068f8829a4aSRandall Stewart 		/* Got to have a TCB */
4069f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4070fe1831e0SMichael Tuexen 			if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4071b0552ae2SRandall Stewart 				sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4072b0552ae2SRandall Stewart 				    SCTP_CALLED_DIRECTLY_NOCMPSET);
4073f8829a4aSRandall Stewart 			}
4074f8829a4aSRandall Stewart 		}
4075f8829a4aSRandall Stewart 		return;
407663981c2bSRandall Stewart 	} else {
407763981c2bSRandall Stewart 		stcb->asoc.state |= SCTP_STATE_WAS_ABORTED;
4078f8829a4aSRandall Stewart 	}
4079f8829a4aSRandall Stewart 	/* notify the peer */
4080ceaad40aSRandall Stewart 	sctp_send_abort_tcb(stcb, op_err, so_locked);
4081f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_aborted);
4082f8829a4aSRandall Stewart 	if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
4083f8829a4aSRandall Stewart 	    (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
4084f8829a4aSRandall Stewart 		SCTP_STAT_DECR_GAUGE32(sctps_currestab);
4085f8829a4aSRandall Stewart 	}
4086884d8c53SMichael Tuexen 	/* notify the ulp */
4087884d8c53SMichael Tuexen 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
4088884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, so_locked);
4089884d8c53SMichael Tuexen 	}
4090f8829a4aSRandall Stewart 	/* now free the asoc */
4091f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
4092f1f73e57SRandall Stewart 	sctp_print_out_track_log(stcb);
4093f1f73e57SRandall Stewart #endif
4094ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4095ceaad40aSRandall Stewart 	if (!so_locked) {
4096ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4097ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4098ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
4099ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4100ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
4101ceaad40aSRandall Stewart 	}
4102ceaad40aSRandall Stewart #endif
4103ba785902SMichael Tuexen 	(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
4104ba785902SMichael Tuexen 	    SCTP_FROM_SCTPUTIL + SCTP_LOC_5);
4105ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4106ceaad40aSRandall Stewart 	if (!so_locked) {
4107ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
4108ceaad40aSRandall Stewart 	}
4109ceaad40aSRandall Stewart #endif
4110f8829a4aSRandall Stewart }
4111f8829a4aSRandall Stewart 
4112f8829a4aSRandall Stewart void
4113b1754ad1SMichael Tuexen sctp_handle_ootb(struct mbuf *m, int iphlen, int offset,
4114b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
4115b1754ad1SMichael Tuexen     struct sctphdr *sh, struct sctp_inpcb *inp,
4116ff1ffd74SMichael Tuexen     struct mbuf *cause,
4117d089f9b9SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid, uint16_t fibnum,
4118f30ac432SMichael Tuexen     uint32_t vrf_id, uint16_t port)
4119f8829a4aSRandall Stewart {
4120f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch, chunk_buf;
4121f8829a4aSRandall Stewart 	unsigned int chk_length;
4122c58e60beSMichael Tuexen 	int contains_init_chunk;
4123f8829a4aSRandall Stewart 
4124f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_outoftheblue);
4125f8829a4aSRandall Stewart 	/* Generate a TO address for future reference */
4126f8829a4aSRandall Stewart 	if (inp && (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
4127fe1831e0SMichael Tuexen 		if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4128b0552ae2SRandall Stewart 			sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4129b0552ae2SRandall Stewart 			    SCTP_CALLED_DIRECTLY_NOCMPSET);
4130f8829a4aSRandall Stewart 		}
4131f8829a4aSRandall Stewart 	}
4132c58e60beSMichael Tuexen 	contains_init_chunk = 0;
4133f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4134f8829a4aSRandall Stewart 	    sizeof(*ch), (uint8_t *)&chunk_buf);
4135f8829a4aSRandall Stewart 	while (ch != NULL) {
4136f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4137f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4138f8829a4aSRandall Stewart 			/* break to abort land */
4139f8829a4aSRandall Stewart 			break;
4140f8829a4aSRandall Stewart 		}
4141f8829a4aSRandall Stewart 		switch (ch->chunk_type) {
4142c58e60beSMichael Tuexen 		case SCTP_INIT:
4143c58e60beSMichael Tuexen 			contains_init_chunk = 1;
4144c58e60beSMichael Tuexen 			break;
4145f8829a4aSRandall Stewart 		case SCTP_PACKET_DROPPED:
4146f8829a4aSRandall Stewart 			/* we don't respond to pkt-dropped */
4147f8829a4aSRandall Stewart 			return;
4148f8829a4aSRandall Stewart 		case SCTP_ABORT_ASSOCIATION:
4149f8829a4aSRandall Stewart 			/* we don't respond with an ABORT to an ABORT */
4150f8829a4aSRandall Stewart 			return;
4151f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_COMPLETE:
4152f8829a4aSRandall Stewart 			/*
4153f8829a4aSRandall Stewart 			 * we ignore it since we are not waiting for it and
4154f8829a4aSRandall Stewart 			 * peer is gone
4155f8829a4aSRandall Stewart 			 */
4156f8829a4aSRandall Stewart 			return;
4157f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_ACK:
4158b1754ad1SMichael Tuexen 			sctp_send_shutdown_complete2(src, dst, sh,
4159d089f9b9SMichael Tuexen 			    mflowtype, mflowid, fibnum,
4160f30ac432SMichael Tuexen 			    vrf_id, port);
4161f8829a4aSRandall Stewart 			return;
4162f8829a4aSRandall Stewart 		default:
4163f8829a4aSRandall Stewart 			break;
4164f8829a4aSRandall Stewart 		}
4165f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4166f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4167f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4168f8829a4aSRandall Stewart 	}
4169c58e60beSMichael Tuexen 	if ((SCTP_BASE_SYSCTL(sctp_blackhole) == 0) ||
4170c58e60beSMichael Tuexen 	    ((SCTP_BASE_SYSCTL(sctp_blackhole) == 1) &&
4171c58e60beSMichael Tuexen 	    (contains_init_chunk == 0))) {
4172ff1ffd74SMichael Tuexen 		sctp_send_abort(m, iphlen, src, dst, sh, 0, cause,
4173d089f9b9SMichael Tuexen 		    mflowtype, mflowid, fibnum,
4174f30ac432SMichael Tuexen 		    vrf_id, port);
4175f8829a4aSRandall Stewart 	}
4176c58e60beSMichael Tuexen }
4177f8829a4aSRandall Stewart 
4178f8829a4aSRandall Stewart /*
4179f8829a4aSRandall Stewart  * check the inbound datagram to make sure there is not an abort inside it,
4180f8829a4aSRandall Stewart  * if there is return 1, else return 0.
4181f8829a4aSRandall Stewart  */
4182f8829a4aSRandall Stewart int
4183f8829a4aSRandall Stewart sctp_is_there_an_abort_here(struct mbuf *m, int iphlen, uint32_t *vtagfill)
4184f8829a4aSRandall Stewart {
4185f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch;
4186f8829a4aSRandall Stewart 	struct sctp_init_chunk *init_chk, chunk_buf;
4187f8829a4aSRandall Stewart 	int offset;
4188f8829a4aSRandall Stewart 	unsigned int chk_length;
4189f8829a4aSRandall Stewart 
4190f8829a4aSRandall Stewart 	offset = iphlen + sizeof(struct sctphdr);
4191f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset, sizeof(*ch),
4192f8829a4aSRandall Stewart 	    (uint8_t *)&chunk_buf);
4193f8829a4aSRandall Stewart 	while (ch != NULL) {
4194f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4195f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4196f8829a4aSRandall Stewart 			/* packet is probably corrupt */
4197f8829a4aSRandall Stewart 			break;
4198f8829a4aSRandall Stewart 		}
4199f8829a4aSRandall Stewart 		/* we seem to be ok, is it an abort? */
4200f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_ABORT_ASSOCIATION) {
4201f8829a4aSRandall Stewart 			/* yep, tell them */
4202f8829a4aSRandall Stewart 			return (1);
4203f8829a4aSRandall Stewart 		}
4204f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_INITIATION) {
4205f8829a4aSRandall Stewart 			/* need to update the Vtag */
4206f8829a4aSRandall Stewart 			init_chk = (struct sctp_init_chunk *)sctp_m_getptr(m,
4207f8829a4aSRandall Stewart 			    offset, sizeof(*init_chk), (uint8_t *)&chunk_buf);
4208f8829a4aSRandall Stewart 			if (init_chk != NULL) {
4209f8829a4aSRandall Stewart 				*vtagfill = ntohl(init_chk->init.initiate_tag);
4210f8829a4aSRandall Stewart 			}
4211f8829a4aSRandall Stewart 		}
4212f8829a4aSRandall Stewart 		/* Nope, move to the next chunk */
4213f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4214f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4215f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4216f8829a4aSRandall Stewart 	}
4217f8829a4aSRandall Stewart 	return (0);
4218f8829a4aSRandall Stewart }
4219f8829a4aSRandall Stewart 
4220f8829a4aSRandall Stewart /*
4221f8829a4aSRandall Stewart  * currently (2/02), ifa_addr embeds scope_id's and don't have sin6_scope_id
4222f8829a4aSRandall Stewart  * set (i.e. it's 0) so, create this function to compare link local scopes
4223f8829a4aSRandall Stewart  */
42245e2c2d87SRandall Stewart #ifdef INET6
4225f8829a4aSRandall Stewart uint32_t
4226f8829a4aSRandall Stewart sctp_is_same_scope(struct sockaddr_in6 *addr1, struct sockaddr_in6 *addr2)
4227f8829a4aSRandall Stewart {
4228f8829a4aSRandall Stewart 	struct sockaddr_in6 a, b;
4229f8829a4aSRandall Stewart 
4230f8829a4aSRandall Stewart 	/* save copies */
4231f8829a4aSRandall Stewart 	a = *addr1;
4232f8829a4aSRandall Stewart 	b = *addr2;
4233f8829a4aSRandall Stewart 
4234f8829a4aSRandall Stewart 	if (a.sin6_scope_id == 0)
4235f8829a4aSRandall Stewart 		if (sa6_recoverscope(&a)) {
4236f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4237f8829a4aSRandall Stewart 			return (0);
4238f8829a4aSRandall Stewart 		}
4239f8829a4aSRandall Stewart 	if (b.sin6_scope_id == 0)
4240f8829a4aSRandall Stewart 		if (sa6_recoverscope(&b)) {
4241f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4242f8829a4aSRandall Stewart 			return (0);
4243f8829a4aSRandall Stewart 		}
4244f8829a4aSRandall Stewart 	if (a.sin6_scope_id != b.sin6_scope_id)
4245f8829a4aSRandall Stewart 		return (0);
4246f8829a4aSRandall Stewart 
4247f8829a4aSRandall Stewart 	return (1);
4248f8829a4aSRandall Stewart }
4249f8829a4aSRandall Stewart 
4250f8829a4aSRandall Stewart /*
4251f8829a4aSRandall Stewart  * returns a sockaddr_in6 with embedded scope recovered and removed
4252f8829a4aSRandall Stewart  */
4253f8829a4aSRandall Stewart struct sockaddr_in6 *
4254f8829a4aSRandall Stewart sctp_recover_scope(struct sockaddr_in6 *addr, struct sockaddr_in6 *store)
4255f8829a4aSRandall Stewart {
4256f8829a4aSRandall Stewart 	/* check and strip embedded scope junk */
4257f8829a4aSRandall Stewart 	if (addr->sin6_family == AF_INET6) {
4258f8829a4aSRandall Stewart 		if (IN6_IS_SCOPE_LINKLOCAL(&addr->sin6_addr)) {
4259f8829a4aSRandall Stewart 			if (addr->sin6_scope_id == 0) {
4260f8829a4aSRandall Stewart 				*store = *addr;
4261f8829a4aSRandall Stewart 				if (!sa6_recoverscope(store)) {
4262f8829a4aSRandall Stewart 					/* use the recovered scope */
4263f8829a4aSRandall Stewart 					addr = store;
4264f8829a4aSRandall Stewart 				}
4265f42a358aSRandall Stewart 			} else {
4266f8829a4aSRandall Stewart 				/* else, return the original "to" addr */
4267f42a358aSRandall Stewart 				in6_clearscope(&addr->sin6_addr);
4268f8829a4aSRandall Stewart 			}
4269f8829a4aSRandall Stewart 		}
4270f8829a4aSRandall Stewart 	}
4271f8829a4aSRandall Stewart 	return (addr);
4272f8829a4aSRandall Stewart }
42735e2c2d87SRandall Stewart #endif
42745e2c2d87SRandall Stewart 
4275f8829a4aSRandall Stewart /*
4276f8829a4aSRandall Stewart  * are the two addresses the same?  currently a "scopeless" check returns: 1
4277f8829a4aSRandall Stewart  * if same, 0 if not
4278f8829a4aSRandall Stewart  */
427972fb6fdbSRandall Stewart int
4280f8829a4aSRandall Stewart sctp_cmpaddr(struct sockaddr *sa1, struct sockaddr *sa2)
4281f8829a4aSRandall Stewart {
4282f8829a4aSRandall Stewart 
4283f8829a4aSRandall Stewart 	/* must be valid */
4284f8829a4aSRandall Stewart 	if (sa1 == NULL || sa2 == NULL)
4285f8829a4aSRandall Stewart 		return (0);
4286f8829a4aSRandall Stewart 
4287f8829a4aSRandall Stewart 	/* must be the same family */
4288f8829a4aSRandall Stewart 	if (sa1->sa_family != sa2->sa_family)
4289f8829a4aSRandall Stewart 		return (0);
4290f8829a4aSRandall Stewart 
42915e2c2d87SRandall Stewart 	switch (sa1->sa_family) {
42925e2c2d87SRandall Stewart #ifdef INET6
42935e2c2d87SRandall Stewart 	case AF_INET6:
42945e2c2d87SRandall Stewart 		{
4295f8829a4aSRandall Stewart 			/* IPv6 addresses */
4296f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6_1, *sin6_2;
4297f8829a4aSRandall Stewart 
4298f8829a4aSRandall Stewart 			sin6_1 = (struct sockaddr_in6 *)sa1;
4299f8829a4aSRandall Stewart 			sin6_2 = (struct sockaddr_in6 *)sa2;
4300c54a18d2SRandall Stewart 			return (SCTP6_ARE_ADDR_EQUAL(sin6_1,
4301c54a18d2SRandall Stewart 			    sin6_2));
43025e2c2d87SRandall Stewart 		}
43035e2c2d87SRandall Stewart #endif
4304ea5eba11SMichael Tuexen #ifdef INET
43055e2c2d87SRandall Stewart 	case AF_INET:
43065e2c2d87SRandall Stewart 		{
4307f8829a4aSRandall Stewart 			/* IPv4 addresses */
4308f8829a4aSRandall Stewart 			struct sockaddr_in *sin_1, *sin_2;
4309f8829a4aSRandall Stewart 
4310f8829a4aSRandall Stewart 			sin_1 = (struct sockaddr_in *)sa1;
4311f8829a4aSRandall Stewart 			sin_2 = (struct sockaddr_in *)sa2;
4312f8829a4aSRandall Stewart 			return (sin_1->sin_addr.s_addr == sin_2->sin_addr.s_addr);
43135e2c2d87SRandall Stewart 		}
4314ea5eba11SMichael Tuexen #endif
43155e2c2d87SRandall Stewart 	default:
4316f8829a4aSRandall Stewart 		/* we don't do these... */
4317f8829a4aSRandall Stewart 		return (0);
4318f8829a4aSRandall Stewart 	}
4319f8829a4aSRandall Stewart }
4320f8829a4aSRandall Stewart 
4321f8829a4aSRandall Stewart void
4322f8829a4aSRandall Stewart sctp_print_address(struct sockaddr *sa)
4323f8829a4aSRandall Stewart {
43245e2c2d87SRandall Stewart #ifdef INET6
43257d32aa0cSBjoern A. Zeeb 	char ip6buf[INET6_ADDRSTRLEN];
43265e2c2d87SRandall Stewart #endif
43275e2c2d87SRandall Stewart 
43285e2c2d87SRandall Stewart 	switch (sa->sa_family) {
43295e2c2d87SRandall Stewart #ifdef INET6
43305e2c2d87SRandall Stewart 	case AF_INET6:
43315e2c2d87SRandall Stewart 		{
4332ad81507eSRandall Stewart 			struct sockaddr_in6 *sin6;
4333ad81507eSRandall Stewart 
4334f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
4335ad81507eSRandall Stewart 			SCTP_PRINTF("IPv6 address: %s:port:%d scope:%u\n",
43367d32aa0cSBjoern A. Zeeb 			    ip6_sprintf(ip6buf, &sin6->sin6_addr),
43377d32aa0cSBjoern A. Zeeb 			    ntohs(sin6->sin6_port),
4338f8829a4aSRandall Stewart 			    sin6->sin6_scope_id);
43395e2c2d87SRandall Stewart 			break;
43405e2c2d87SRandall Stewart 		}
43415e2c2d87SRandall Stewart #endif
4342ea5eba11SMichael Tuexen #ifdef INET
43435e2c2d87SRandall Stewart 	case AF_INET:
43445e2c2d87SRandall Stewart 		{
4345f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
4346f8829a4aSRandall Stewart 			unsigned char *p;
4347f8829a4aSRandall Stewart 
4348f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
4349f8829a4aSRandall Stewart 			p = (unsigned char *)&sin->sin_addr;
4350ad81507eSRandall Stewart 			SCTP_PRINTF("IPv4 address: %u.%u.%u.%u:%d\n",
4351f8829a4aSRandall Stewart 			    p[0], p[1], p[2], p[3], ntohs(sin->sin_port));
43525e2c2d87SRandall Stewart 			break;
43535e2c2d87SRandall Stewart 		}
4354ea5eba11SMichael Tuexen #endif
43555e2c2d87SRandall Stewart 	default:
4356ad81507eSRandall Stewart 		SCTP_PRINTF("?\n");
43575e2c2d87SRandall Stewart 		break;
4358f8829a4aSRandall Stewart 	}
4359f8829a4aSRandall Stewart }
4360f8829a4aSRandall Stewart 
4361f8829a4aSRandall Stewart void
4362f8829a4aSRandall Stewart sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp,
4363f8829a4aSRandall Stewart     struct sctp_inpcb *new_inp,
4364d06c82f1SRandall Stewart     struct sctp_tcb *stcb,
4365d06c82f1SRandall Stewart     int waitflags)
4366f8829a4aSRandall Stewart {
4367f8829a4aSRandall Stewart 	/*
4368f8829a4aSRandall Stewart 	 * go through our old INP and pull off any control structures that
4369f8829a4aSRandall Stewart 	 * belong to stcb and move then to the new inp.
4370f8829a4aSRandall Stewart 	 */
4371f8829a4aSRandall Stewart 	struct socket *old_so, *new_so;
4372f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control, *nctl;
4373f8829a4aSRandall Stewart 	struct sctp_readhead tmp_queue;
4374f8829a4aSRandall Stewart 	struct mbuf *m;
4375bff64a4dSRandall Stewart 	int error = 0;
4376f8829a4aSRandall Stewart 
4377f8829a4aSRandall Stewart 	old_so = old_inp->sctp_socket;
4378f8829a4aSRandall Stewart 	new_so = new_inp->sctp_socket;
4379f8829a4aSRandall Stewart 	TAILQ_INIT(&tmp_queue);
4380d06c82f1SRandall Stewart 	error = sblock(&old_so->so_rcv, waitflags);
4381f8829a4aSRandall Stewart 	if (error) {
4382f8829a4aSRandall Stewart 		/*
4383f8829a4aSRandall Stewart 		 * Gak, can't get sblock, we have a problem. data will be
4384f8829a4aSRandall Stewart 		 * left stranded.. and we don't dare look at it since the
4385f8829a4aSRandall Stewart 		 * other thread may be reading something. Oh well, its a
4386f8829a4aSRandall Stewart 		 * screwed up app that does a peeloff OR a accept while
4387f8829a4aSRandall Stewart 		 * reading from the main socket... actually its only the
4388f8829a4aSRandall Stewart 		 * peeloff() case, since I think read will fail on a
4389f8829a4aSRandall Stewart 		 * listening socket..
4390f8829a4aSRandall Stewart 		 */
4391f8829a4aSRandall Stewart 		return;
4392f8829a4aSRandall Stewart 	}
4393f8829a4aSRandall Stewart 	/* lock the socket buffers */
4394f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(old_inp);
43954a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &old_inp->read_queue, next, nctl) {
4396f8829a4aSRandall Stewart 		/* Pull off all for out target stcb */
4397f8829a4aSRandall Stewart 		if (control->stcb == stcb) {
4398f8829a4aSRandall Stewart 			/* remove it we want it */
4399f8829a4aSRandall Stewart 			TAILQ_REMOVE(&old_inp->read_queue, control, next);
4400f8829a4aSRandall Stewart 			TAILQ_INSERT_TAIL(&tmp_queue, control, next);
4401f8829a4aSRandall Stewart 			m = control->data;
4402f8829a4aSRandall Stewart 			while (m) {
4403b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4404139bc87fSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
440580fefe0aSRandall Stewart 				}
4406f8829a4aSRandall Stewart 				sctp_sbfree(control, stcb, &old_so->so_rcv, m);
4407b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4408f8829a4aSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
440980fefe0aSRandall Stewart 				}
4410139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(m);
4411f8829a4aSRandall Stewart 			}
4412f8829a4aSRandall Stewart 		}
4413f8829a4aSRandall Stewart 	}
4414f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(old_inp);
4415f8829a4aSRandall Stewart 	/* Remove the sb-lock on the old socket */
4416f8829a4aSRandall Stewart 
4417f8829a4aSRandall Stewart 	sbunlock(&old_so->so_rcv);
4418f8829a4aSRandall Stewart 	/* Now we move them over to the new socket buffer */
4419f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(new_inp);
44204a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &tmp_queue, next, nctl) {
4421f8829a4aSRandall Stewart 		TAILQ_INSERT_TAIL(&new_inp->read_queue, control, next);
4422f8829a4aSRandall Stewart 		m = control->data;
4423f8829a4aSRandall Stewart 		while (m) {
4424b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4425139bc87fSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
442680fefe0aSRandall Stewart 			}
4427f8829a4aSRandall Stewart 			sctp_sballoc(stcb, &new_so->so_rcv, m);
4428b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4429f8829a4aSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
443080fefe0aSRandall Stewart 			}
4431139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
4432f8829a4aSRandall Stewart 		}
4433f8829a4aSRandall Stewart 	}
4434f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(new_inp);
4435f8829a4aSRandall Stewart }
4436f8829a4aSRandall Stewart 
4437f8829a4aSRandall Stewart void
4438b1deed45SMichael Tuexen sctp_wakeup_the_read_socket(struct sctp_inpcb *inp,
4439b1deed45SMichael Tuexen     struct sctp_tcb *stcb,
4440b1deed45SMichael Tuexen     int so_locked
4441b1deed45SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4442b1deed45SMichael Tuexen     SCTP_UNUSED
4443b1deed45SMichael Tuexen #endif
4444b1deed45SMichael Tuexen )
444544249214SRandall Stewart {
4446b1deed45SMichael Tuexen 	if ((inp != NULL) && (inp->sctp_socket != NULL)) {
444744249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
444844249214SRandall Stewart 		struct socket *so;
444944249214SRandall Stewart 
445044249214SRandall Stewart 		so = SCTP_INP_SO(inp);
445144249214SRandall Stewart 		if (!so_locked) {
445244249214SRandall Stewart 			if (stcb) {
445344249214SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
445444249214SRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
445544249214SRandall Stewart 			}
445644249214SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
445744249214SRandall Stewart 			if (stcb) {
445844249214SRandall Stewart 				SCTP_TCB_LOCK(stcb);
445944249214SRandall Stewart 				atomic_subtract_int(&stcb->asoc.refcnt, 1);
446044249214SRandall Stewart 			}
446144249214SRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
446244249214SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
446344249214SRandall Stewart 				return;
446444249214SRandall Stewart 			}
446544249214SRandall Stewart 		}
446644249214SRandall Stewart #endif
446744249214SRandall Stewart 		sctp_sorwakeup(inp, inp->sctp_socket);
446844249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
446944249214SRandall Stewart 		if (!so_locked) {
447044249214SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
447144249214SRandall Stewart 		}
447244249214SRandall Stewart #endif
447344249214SRandall Stewart 	}
447444249214SRandall Stewart }
447544249214SRandall Stewart 
447644249214SRandall Stewart void
4477f8829a4aSRandall Stewart sctp_add_to_readq(struct sctp_inpcb *inp,
4478f8829a4aSRandall Stewart     struct sctp_tcb *stcb,
4479f8829a4aSRandall Stewart     struct sctp_queued_to_read *control,
4480f8829a4aSRandall Stewart     struct sockbuf *sb,
4481ceaad40aSRandall Stewart     int end,
4482cfde3ff7SRandall Stewart     int inp_read_lock_held,
4483ceaad40aSRandall Stewart     int so_locked
4484ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4485ceaad40aSRandall Stewart     SCTP_UNUSED
4486ceaad40aSRandall Stewart #endif
4487ceaad40aSRandall Stewart )
4488f8829a4aSRandall Stewart {
4489f8829a4aSRandall Stewart 	/*
4490f8829a4aSRandall Stewart 	 * Here we must place the control on the end of the socket read
44914e88d37aSMichael Tuexen 	 * queue AND increment sb_cc so that select will work properly on
4492f8829a4aSRandall Stewart 	 * read.
4493f8829a4aSRandall Stewart 	 */
4494f8829a4aSRandall Stewart 	struct mbuf *m, *prev = NULL;
4495f8829a4aSRandall Stewart 
449603b0b021SRandall Stewart 	if (inp == NULL) {
449703b0b021SRandall Stewart 		/* Gak, TSNH!! */
4498a5d547adSRandall Stewart #ifdef INVARIANTS
449903b0b021SRandall Stewart 		panic("Gak, inp NULL on add_to_readq");
450003b0b021SRandall Stewart #endif
450103b0b021SRandall Stewart 		return;
450203b0b021SRandall Stewart 	}
4503cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4504f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4505cd1386abSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
4506cd1386abSMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
4507cd1386abSMichael Tuexen 		if (control->data) {
4508cd1386abSMichael Tuexen 			sctp_m_freem(control->data);
4509cd1386abSMichael Tuexen 			control->data = NULL;
4510cd1386abSMichael Tuexen 		}
451144249214SRandall Stewart 		sctp_free_a_readq(stcb, control);
4512cd1386abSMichael Tuexen 		if (inp_read_lock_held == 0)
4513cd1386abSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4514cd1386abSMichael Tuexen 		return;
4515cd1386abSMichael Tuexen 	}
451642551e99SRandall Stewart 	if (!(control->spec_flags & M_NOTIFICATION)) {
4517a5d547adSRandall Stewart 		atomic_add_int(&inp->total_recvs, 1);
451842551e99SRandall Stewart 		if (!control->do_not_ref_stcb) {
4519a5d547adSRandall Stewart 			atomic_add_int(&stcb->total_recvs, 1);
452042551e99SRandall Stewart 		}
452142551e99SRandall Stewart 	}
4522f8829a4aSRandall Stewart 	m = control->data;
4523f8829a4aSRandall Stewart 	control->held_length = 0;
4524f8829a4aSRandall Stewart 	control->length = 0;
4525f8829a4aSRandall Stewart 	while (m) {
4526139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m) == 0) {
4527f8829a4aSRandall Stewart 			/* Skip mbufs with NO length */
4528f8829a4aSRandall Stewart 			if (prev == NULL) {
4529f8829a4aSRandall Stewart 				/* First one */
4530f8829a4aSRandall Stewart 				control->data = sctp_m_free(m);
4531f8829a4aSRandall Stewart 				m = control->data;
4532f8829a4aSRandall Stewart 			} else {
4533139bc87fSRandall Stewart 				SCTP_BUF_NEXT(prev) = sctp_m_free(m);
4534139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(prev);
4535f8829a4aSRandall Stewart 			}
4536f8829a4aSRandall Stewart 			if (m == NULL) {
4537c2ede4b3SMartin Blapp 				control->tail_mbuf = prev;
4538f8829a4aSRandall Stewart 			}
4539f8829a4aSRandall Stewart 			continue;
4540f8829a4aSRandall Stewart 		}
4541f8829a4aSRandall Stewart 		prev = m;
4542b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4543139bc87fSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
454480fefe0aSRandall Stewart 		}
4545f8829a4aSRandall Stewart 		sctp_sballoc(stcb, sb, m);
4546b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4547f8829a4aSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
454880fefe0aSRandall Stewart 		}
4549139bc87fSRandall Stewart 		atomic_add_int(&control->length, SCTP_BUF_LEN(m));
4550139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
4551f8829a4aSRandall Stewart 	}
4552f8829a4aSRandall Stewart 	if (prev != NULL) {
4553f8829a4aSRandall Stewart 		control->tail_mbuf = prev;
4554f8829a4aSRandall Stewart 	} else {
4555139bc87fSRandall Stewart 		/* Everything got collapsed out?? */
4556cd1386abSMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
455744249214SRandall Stewart 		sctp_free_a_readq(stcb, control);
4558cfde3ff7SRandall Stewart 		if (inp_read_lock_held == 0)
455947a490cbSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4560f8829a4aSRandall Stewart 		return;
4561f8829a4aSRandall Stewart 	}
4562f8829a4aSRandall Stewart 	if (end) {
4563f8829a4aSRandall Stewart 		control->end_added = 1;
4564f8829a4aSRandall Stewart 	}
4565f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&inp->read_queue, control, next);
456644249214SRandall Stewart 	control->on_read_q = 1;
4567cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4568f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4569f8829a4aSRandall Stewart 	if (inp && inp->sctp_socket) {
4570b1deed45SMichael Tuexen 		sctp_wakeup_the_read_socket(inp, stcb, so_locked);
4571f8829a4aSRandall Stewart 	}
4572f8829a4aSRandall Stewart }
4573f8829a4aSRandall Stewart 
4574f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR PATCH FILE OF
4575f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4576f8829a4aSRandall Stewart  */
4577f8829a4aSRandall Stewart 
4578f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR END OF PATCH FILE OF
4579f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4580f8829a4aSRandall Stewart  */
4581f8829a4aSRandall Stewart 
4582f8829a4aSRandall Stewart struct mbuf *
4583ff1ffd74SMichael Tuexen sctp_generate_cause(uint16_t code, char *info)
4584f8829a4aSRandall Stewart {
4585f8829a4aSRandall Stewart 	struct mbuf *m;
4586ff1ffd74SMichael Tuexen 	struct sctp_gen_error_cause *cause;
45879a8e3088SMichael Tuexen 	size_t info_len;
45889a8e3088SMichael Tuexen 	uint16_t len;
4589f8829a4aSRandall Stewart 
4590ff1ffd74SMichael Tuexen 	if ((code == 0) || (info == NULL)) {
4591ff1ffd74SMichael Tuexen 		return (NULL);
4592ff1ffd74SMichael Tuexen 	}
4593ff1ffd74SMichael Tuexen 	info_len = strlen(info);
45949a8e3088SMichael Tuexen 	if (info_len > (SCTP_MAX_CAUSE_LENGTH - sizeof(struct sctp_paramhdr))) {
45959a8e3088SMichael Tuexen 		return (NULL);
45969a8e3088SMichael Tuexen 	}
45979a8e3088SMichael Tuexen 	len = (uint16_t)(sizeof(struct sctp_paramhdr) + info_len);
4598ff1ffd74SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
4599ff1ffd74SMichael Tuexen 	if (m != NULL) {
4600ff1ffd74SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
4601ff1ffd74SMichael Tuexen 		cause = mtod(m, struct sctp_gen_error_cause *);
4602ff1ffd74SMichael Tuexen 		cause->code = htons(code);
46039a8e3088SMichael Tuexen 		cause->length = htons(len);
4604ff1ffd74SMichael Tuexen 		memcpy(cause->info, info, info_len);
4605f8829a4aSRandall Stewart 	}
4606f8829a4aSRandall Stewart 	return (m);
4607f8829a4aSRandall Stewart }
4608f8829a4aSRandall Stewart 
460932451da4SMichael Tuexen struct mbuf *
461032451da4SMichael Tuexen sctp_generate_no_user_data_cause(uint32_t tsn)
461132451da4SMichael Tuexen {
461232451da4SMichael Tuexen 	struct mbuf *m;
461332451da4SMichael Tuexen 	struct sctp_error_no_user_data *no_user_data_cause;
46149a8e3088SMichael Tuexen 	uint16_t len;
461532451da4SMichael Tuexen 
46169a8e3088SMichael Tuexen 	len = (uint16_t)sizeof(struct sctp_error_no_user_data);
461732451da4SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
461832451da4SMichael Tuexen 	if (m != NULL) {
461932451da4SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
462032451da4SMichael Tuexen 		no_user_data_cause = mtod(m, struct sctp_error_no_user_data *);
462132451da4SMichael Tuexen 		no_user_data_cause->cause.code = htons(SCTP_CAUSE_NO_USER_DATA);
46229a8e3088SMichael Tuexen 		no_user_data_cause->cause.length = htons(len);
46238b9c95f4SMichael Tuexen 		no_user_data_cause->tsn = htonl(tsn);
462432451da4SMichael Tuexen 	}
462532451da4SMichael Tuexen 	return (m);
462632451da4SMichael Tuexen }
462732451da4SMichael Tuexen 
4628f8829a4aSRandall Stewart #ifdef SCTP_MBCNT_LOGGING
4629f8829a4aSRandall Stewart void
4630f8829a4aSRandall Stewart sctp_free_bufspace(struct sctp_tcb *stcb, struct sctp_association *asoc,
4631f8829a4aSRandall Stewart     struct sctp_tmit_chunk *tp1, int chk_cnt)
4632f8829a4aSRandall Stewart {
4633f8829a4aSRandall Stewart 	if (tp1->data == NULL) {
4634f8829a4aSRandall Stewart 		return;
4635f8829a4aSRandall Stewart 	}
4636f8829a4aSRandall Stewart 	asoc->chunks_on_out_queue -= chk_cnt;
4637b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBCNT_LOGGING_ENABLE) {
4638f8829a4aSRandall Stewart 		sctp_log_mbcnt(SCTP_LOG_MBCNT_DECREASE,
4639f8829a4aSRandall Stewart 		    asoc->total_output_queue_size,
4640f8829a4aSRandall Stewart 		    tp1->book_size,
4641f8829a4aSRandall Stewart 		    0,
4642f8829a4aSRandall Stewart 		    tp1->mbcnt);
464380fefe0aSRandall Stewart 	}
4644f8829a4aSRandall Stewart 	if (asoc->total_output_queue_size >= tp1->book_size) {
464544b7479bSRandall Stewart 		atomic_add_int(&asoc->total_output_queue_size, -tp1->book_size);
4646f8829a4aSRandall Stewart 	} else {
4647f8829a4aSRandall Stewart 		asoc->total_output_queue_size = 0;
4648f8829a4aSRandall Stewart 	}
4649f8829a4aSRandall Stewart 
4650f8829a4aSRandall Stewart 	if (stcb->sctp_socket && (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) ||
4651f8829a4aSRandall Stewart 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE)))) {
46524e88d37aSMichael Tuexen 		if (stcb->sctp_socket->so_snd.sb_cc >= tp1->book_size) {
46534e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc -= tp1->book_size;
4654f8829a4aSRandall Stewart 		} else {
46554e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc = 0;
4656f8829a4aSRandall Stewart 
4657f8829a4aSRandall Stewart 		}
4658f8829a4aSRandall Stewart 	}
4659f8829a4aSRandall Stewart }
4660f8829a4aSRandall Stewart 
4661f8829a4aSRandall Stewart #endif
4662f8829a4aSRandall Stewart 
4663f8829a4aSRandall Stewart int
4664f8829a4aSRandall Stewart sctp_release_pr_sctp_chunk(struct sctp_tcb *stcb, struct sctp_tmit_chunk *tp1,
46651edc9dbaSMichael Tuexen     uint8_t sent, int so_locked
4666ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4667ceaad40aSRandall Stewart     SCTP_UNUSED
4668ceaad40aSRandall Stewart #endif
4669ceaad40aSRandall Stewart )
4670f8829a4aSRandall Stewart {
46710c0982b8SRandall Stewart 	struct sctp_stream_out *strq;
46724a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk = NULL, *tp2;
46730c0982b8SRandall Stewart 	struct sctp_stream_queue_pending *sp;
467449656eefSMichael Tuexen 	uint32_t mid;
467549656eefSMichael Tuexen 	uint16_t sid;
46760c0982b8SRandall Stewart 	uint8_t foundeom = 0;
4677f8829a4aSRandall Stewart 	int ret_sz = 0;
4678f8829a4aSRandall Stewart 	int notdone;
46790c0982b8SRandall Stewart 	int do_wakeup_routine = 0;
4680f8829a4aSRandall Stewart 
468149656eefSMichael Tuexen 	sid = tp1->rec.data.sid;
468249656eefSMichael Tuexen 	mid = tp1->rec.data.mid;
4683f0396ad1SMichael Tuexen 	if (sent || !(tp1->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG)) {
4684f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[0]++;
4685f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
468649656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_sent[0]++;
4687f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4688f0396ad1SMichael Tuexen 		stcb->asoc.strmout[stream].abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
4689f0396ad1SMichael Tuexen #endif
4690f0396ad1SMichael Tuexen 	} else {
4691f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[0]++;
4692f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
469349656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_unsent[0]++;
4694f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4695f0396ad1SMichael Tuexen 		stcb->asoc.strmout[stream].abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
4696f0396ad1SMichael Tuexen #endif
4697f0396ad1SMichael Tuexen 	}
4698f8829a4aSRandall Stewart 	do {
4699f8829a4aSRandall Stewart 		ret_sz += tp1->book_size;
47000c0982b8SRandall Stewart 		if (tp1->data != NULL) {
47018933fa13SRandall Stewart 			if (tp1->sent < SCTP_DATAGRAM_RESEND) {
4702830d754dSRandall Stewart 				sctp_flight_size_decrease(tp1);
4703830d754dSRandall Stewart 				sctp_total_flight_decrease(stcb, tp1);
47048933fa13SRandall Stewart 			}
47058933fa13SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
47060c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += tp1->send_size;
47070c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
47081edc9dbaSMichael Tuexen 			if (sent) {
47091edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
47101edc9dbaSMichael Tuexen 			} else {
47111edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
47121edc9dbaSMichael Tuexen 			}
47132f99457bSMichael Tuexen 			if (tp1->data) {
4714f8829a4aSRandall Stewart 				sctp_m_freem(tp1->data);
4715f8829a4aSRandall Stewart 				tp1->data = NULL;
47162f99457bSMichael Tuexen 			}
47170c0982b8SRandall Stewart 			do_wakeup_routine = 1;
4718f8829a4aSRandall Stewart 			if (PR_SCTP_BUF_ENABLED(tp1->flags)) {
4719f8829a4aSRandall Stewart 				stcb->asoc.sent_queue_cnt_removeable--;
4720f8829a4aSRandall Stewart 			}
4721f8829a4aSRandall Stewart 		}
47228933fa13SRandall Stewart 		tp1->sent = SCTP_FORWARD_TSN_SKIP;
4723f8829a4aSRandall Stewart 		if ((tp1->rec.data.rcv_flags & SCTP_DATA_NOT_FRAG) ==
4724f8829a4aSRandall Stewart 		    SCTP_DATA_NOT_FRAG) {
4725f8829a4aSRandall Stewart 			/* not frag'ed we ae done   */
4726f8829a4aSRandall Stewart 			notdone = 0;
4727f8829a4aSRandall Stewart 			foundeom = 1;
4728f8829a4aSRandall Stewart 		} else if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
4729f8829a4aSRandall Stewart 			/* end of frag, we are done */
4730f8829a4aSRandall Stewart 			notdone = 0;
4731f8829a4aSRandall Stewart 			foundeom = 1;
4732f8829a4aSRandall Stewart 		} else {
4733f8829a4aSRandall Stewart 			/*
4734f8829a4aSRandall Stewart 			 * Its a begin or middle piece, we must mark all of
4735f8829a4aSRandall Stewart 			 * it
4736f8829a4aSRandall Stewart 			 */
4737f8829a4aSRandall Stewart 			notdone = 1;
4738f8829a4aSRandall Stewart 			tp1 = TAILQ_NEXT(tp1, sctp_next);
4739f8829a4aSRandall Stewart 		}
4740f8829a4aSRandall Stewart 	} while (tp1 && notdone);
47410c0982b8SRandall Stewart 	if (foundeom == 0) {
4742f8829a4aSRandall Stewart 		/*
4743f8829a4aSRandall Stewart 		 * The multi-part message was scattered across the send and
4744f8829a4aSRandall Stewart 		 * sent queue.
4745f8829a4aSRandall Stewart 		 */
47464a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(tp1, &stcb->asoc.send_queue, sctp_next, tp2) {
474749656eefSMichael Tuexen 			if ((tp1->rec.data.sid != sid) ||
474849656eefSMichael Tuexen 			    (!SCTP_MID_EQ(stcb->asoc.idata_supported, tp1->rec.data.mid, mid))) {
47494a9ef3f8SMichael Tuexen 				break;
47504a9ef3f8SMichael Tuexen 			}
47510c0982b8SRandall Stewart 			/*
47520c0982b8SRandall Stewart 			 * save to chk in case we have some on stream out
47530c0982b8SRandall Stewart 			 * queue. If so and we have an un-transmitted one we
47540c0982b8SRandall Stewart 			 * don't have to fudge the TSN.
47550c0982b8SRandall Stewart 			 */
47560c0982b8SRandall Stewart 			chk = tp1;
47570c0982b8SRandall Stewart 			ret_sz += tp1->book_size;
47580c0982b8SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
47591edc9dbaSMichael Tuexen 			if (sent) {
47601edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
47611edc9dbaSMichael Tuexen 			} else {
47621edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
47631edc9dbaSMichael Tuexen 			}
47642f99457bSMichael Tuexen 			if (tp1->data) {
47650c0982b8SRandall Stewart 				sctp_m_freem(tp1->data);
47662f99457bSMichael Tuexen 				tp1->data = NULL;
47672f99457bSMichael Tuexen 			}
47688933fa13SRandall Stewart 			/* No flight involved here book the size to 0 */
47698933fa13SRandall Stewart 			tp1->book_size = 0;
47700c0982b8SRandall Stewart 			if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
47710c0982b8SRandall Stewart 				foundeom = 1;
4772f8829a4aSRandall Stewart 			}
47730c0982b8SRandall Stewart 			do_wakeup_routine = 1;
47740c0982b8SRandall Stewart 			tp1->sent = SCTP_FORWARD_TSN_SKIP;
47750c0982b8SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.send_queue, tp1, sctp_next);
4776b7b84c0eSMichael Tuexen 			/*
4777b7b84c0eSMichael Tuexen 			 * on to the sent queue so we can wait for it to be
4778b7b84c0eSMichael Tuexen 			 * passed by.
4779b7b84c0eSMichael Tuexen 			 */
47800c0982b8SRandall Stewart 			TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, tp1,
47810c0982b8SRandall Stewart 			    sctp_next);
47820c0982b8SRandall Stewart 			stcb->asoc.send_queue_cnt--;
47830c0982b8SRandall Stewart 			stcb->asoc.sent_queue_cnt++;
47840c0982b8SRandall Stewart 		}
47850c0982b8SRandall Stewart 	}
47860c0982b8SRandall Stewart 	if (foundeom == 0) {
47870c0982b8SRandall Stewart 		/*
47880c0982b8SRandall Stewart 		 * Still no eom found. That means there is stuff left on the
47890c0982b8SRandall Stewart 		 * stream out queue.. yuck.
47900c0982b8SRandall Stewart 		 */
47910c0982b8SRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
479249656eefSMichael Tuexen 		strq = &stcb->asoc.strmout[sid];
4793f3b05218SMichael Tuexen 		sp = TAILQ_FIRST(&strq->outqueue);
4794f3b05218SMichael Tuexen 		if (sp != NULL) {
47950c0982b8SRandall Stewart 			sp->discard_rest = 1;
47960c0982b8SRandall Stewart 			/*
4797f3b05218SMichael Tuexen 			 * We may need to put a chunk on the queue that
4798f3b05218SMichael Tuexen 			 * holds the TSN that would have been sent with the
4799f3b05218SMichael Tuexen 			 * LAST bit.
48000c0982b8SRandall Stewart 			 */
48010c0982b8SRandall Stewart 			if (chk == NULL) {
48020c0982b8SRandall Stewart 				/* Yep, we have to */
48030c0982b8SRandall Stewart 				sctp_alloc_a_chunk(stcb, chk);
48040c0982b8SRandall Stewart 				if (chk == NULL) {
48050c0982b8SRandall Stewart 					/*
4806f3b05218SMichael Tuexen 					 * we are hosed. All we can do is
4807f3b05218SMichael Tuexen 					 * nothing.. which will cause an
4808f3b05218SMichael Tuexen 					 * abort if the peer is paying
48090c0982b8SRandall Stewart 					 * attention.
48100c0982b8SRandall Stewart 					 */
48110c0982b8SRandall Stewart 					goto oh_well;
48120c0982b8SRandall Stewart 				}
48130c0982b8SRandall Stewart 				memset(chk, 0, sizeof(*chk));
481463d5b568SMichael Tuexen 				chk->rec.data.rcv_flags = 0;
48150c0982b8SRandall Stewart 				chk->sent = SCTP_FORWARD_TSN_SKIP;
48160c0982b8SRandall Stewart 				chk->asoc = &stcb->asoc;
481763d5b568SMichael Tuexen 				if (stcb->asoc.idata_supported == 0) {
481863d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
481949656eefSMichael Tuexen 						chk->rec.data.mid = 0;
482063d5b568SMichael Tuexen 					} else {
482149656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
482263d5b568SMichael Tuexen 					}
482363d5b568SMichael Tuexen 				} else {
482463d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
482549656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_unordered;
482663d5b568SMichael Tuexen 					} else {
482749656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
482863d5b568SMichael Tuexen 					}
482963d5b568SMichael Tuexen 				}
483049656eefSMichael Tuexen 				chk->rec.data.sid = sp->sid;
483149656eefSMichael Tuexen 				chk->rec.data.ppid = sp->ppid;
48320c0982b8SRandall Stewart 				chk->rec.data.context = sp->context;
48330c0982b8SRandall Stewart 				chk->flags = sp->act_flags;
48347fd5b436SMichael Tuexen 				chk->whoTo = NULL;
483549656eefSMichael Tuexen 				chk->rec.data.tsn = atomic_fetchadd_int(&stcb->asoc.sending_seq, 1);
48367fd5b436SMichael Tuexen 				strq->chunks_on_queues++;
48370c0982b8SRandall Stewart 				TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, chk, sctp_next);
48380c0982b8SRandall Stewart 				stcb->asoc.sent_queue_cnt++;
48398933fa13SRandall Stewart 				stcb->asoc.pr_sctp_cnt++;
48400c0982b8SRandall Stewart 			}
484163d5b568SMichael Tuexen 			chk->rec.data.rcv_flags |= SCTP_DATA_LAST_FRAG;
4842d1ea5fa9SMichael Tuexen 			if (sp->sinfo_flags & SCTP_UNORDERED) {
4843d1ea5fa9SMichael Tuexen 				chk->rec.data.rcv_flags |= SCTP_DATA_UNORDERED;
4844d1ea5fa9SMichael Tuexen 			}
484563d5b568SMichael Tuexen 			if (stcb->asoc.idata_supported == 0) {
484663d5b568SMichael Tuexen 				if ((sp->sinfo_flags & SCTP_UNORDERED) == 0) {
484763d5b568SMichael Tuexen 					strq->next_mid_ordered++;
484863d5b568SMichael Tuexen 				}
484963d5b568SMichael Tuexen 			} else {
485063d5b568SMichael Tuexen 				if (sp->sinfo_flags & SCTP_UNORDERED) {
485163d5b568SMichael Tuexen 					strq->next_mid_unordered++;
485263d5b568SMichael Tuexen 				} else {
485363d5b568SMichael Tuexen 					strq->next_mid_ordered++;
485463d5b568SMichael Tuexen 				}
485563d5b568SMichael Tuexen 			}
48560c0982b8SRandall Stewart 	oh_well:
48570c0982b8SRandall Stewart 			if (sp->data) {
48580c0982b8SRandall Stewart 				/*
4859f3b05218SMichael Tuexen 				 * Pull any data to free up the SB and allow
4860f3b05218SMichael Tuexen 				 * sender to "add more" while we will throw
4861f3b05218SMichael Tuexen 				 * away :-)
48620c0982b8SRandall Stewart 				 */
4863f3b05218SMichael Tuexen 				sctp_free_spbufspace(stcb, &stcb->asoc, sp);
48640c0982b8SRandall Stewart 				ret_sz += sp->length;
48650c0982b8SRandall Stewart 				do_wakeup_routine = 1;
48660c0982b8SRandall Stewart 				sp->some_taken = 1;
48670c0982b8SRandall Stewart 				sctp_m_freem(sp->data);
48680c0982b8SRandall Stewart 				sp->data = NULL;
48690c0982b8SRandall Stewart 				sp->tail_mbuf = NULL;
4870d07b2ac6SMichael Tuexen 				sp->length = 0;
48710c0982b8SRandall Stewart 			}
48720c0982b8SRandall Stewart 		}
48730c0982b8SRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
48740c0982b8SRandall Stewart 	}
48750c0982b8SRandall Stewart 	if (do_wakeup_routine) {
48760c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
48778933fa13SRandall Stewart 		struct socket *so;
48788933fa13SRandall Stewart 
48790c0982b8SRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
48800c0982b8SRandall Stewart 		if (!so_locked) {
48810c0982b8SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
48820c0982b8SRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
48830c0982b8SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
48840c0982b8SRandall Stewart 			SCTP_TCB_LOCK(stcb);
48850c0982b8SRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
48860c0982b8SRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
48870c0982b8SRandall Stewart 				/* assoc was freed while we were unlocked */
48880c0982b8SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
48890c0982b8SRandall Stewart 				return (ret_sz);
48900c0982b8SRandall Stewart 			}
48910c0982b8SRandall Stewart 		}
48920c0982b8SRandall Stewart #endif
48930c0982b8SRandall Stewart 		sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket);
48940c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
48950c0982b8SRandall Stewart 		if (!so_locked) {
48960c0982b8SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
48970c0982b8SRandall Stewart 		}
48980c0982b8SRandall Stewart #endif
4899f8829a4aSRandall Stewart 	}
4900f8829a4aSRandall Stewart 	return (ret_sz);
4901f8829a4aSRandall Stewart }
4902f8829a4aSRandall Stewart 
4903f8829a4aSRandall Stewart /*
4904f8829a4aSRandall Stewart  * checks to see if the given address, sa, is one that is currently known by
4905f8829a4aSRandall Stewart  * the kernel note: can't distinguish the same address on multiple interfaces
4906f8829a4aSRandall Stewart  * and doesn't handle multiple addresses with different zone/scope id's note:
4907f8829a4aSRandall Stewart  * ifa_ifwithaddr() compares the entire sockaddr struct
4908f8829a4aSRandall Stewart  */
490942551e99SRandall Stewart struct sctp_ifa *
491080fefe0aSRandall Stewart sctp_find_ifa_in_ep(struct sctp_inpcb *inp, struct sockaddr *addr,
491180fefe0aSRandall Stewart     int holds_lock)
4912f8829a4aSRandall Stewart {
491342551e99SRandall Stewart 	struct sctp_laddr *laddr;
4914f8829a4aSRandall Stewart 
4915ad81507eSRandall Stewart 	if (holds_lock == 0) {
491642551e99SRandall Stewart 		SCTP_INP_RLOCK(inp);
4917ad81507eSRandall Stewart 	}
491842551e99SRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
491942551e99SRandall Stewart 		if (laddr->ifa == NULL)
4920f8829a4aSRandall Stewart 			continue;
492142551e99SRandall Stewart 		if (addr->sa_family != laddr->ifa->address.sa.sa_family)
492242551e99SRandall Stewart 			continue;
4923e6194c2eSMichael Tuexen #ifdef INET
492442551e99SRandall Stewart 		if (addr->sa_family == AF_INET) {
492542551e99SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
492642551e99SRandall Stewart 			    laddr->ifa->address.sin.sin_addr.s_addr) {
492742551e99SRandall Stewart 				/* found him. */
4928ad81507eSRandall Stewart 				if (holds_lock == 0) {
492942551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
4930ad81507eSRandall Stewart 				}
493142551e99SRandall Stewart 				return (laddr->ifa);
493242551e99SRandall Stewart 				break;
493342551e99SRandall Stewart 			}
49345e2c2d87SRandall Stewart 		}
4935e6194c2eSMichael Tuexen #endif
49365e2c2d87SRandall Stewart #ifdef INET6
49375e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
4938c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
4939c54a18d2SRandall Stewart 			    &laddr->ifa->address.sin6)) {
494042551e99SRandall Stewart 				/* found him. */
4941ad81507eSRandall Stewart 				if (holds_lock == 0) {
494242551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
4943ad81507eSRandall Stewart 				}
494442551e99SRandall Stewart 				return (laddr->ifa);
494542551e99SRandall Stewart 				break;
494642551e99SRandall Stewart 			}
494742551e99SRandall Stewart 		}
49485e2c2d87SRandall Stewart #endif
494942551e99SRandall Stewart 	}
4950ad81507eSRandall Stewart 	if (holds_lock == 0) {
495142551e99SRandall Stewart 		SCTP_INP_RUNLOCK(inp);
4952ad81507eSRandall Stewart 	}
495342551e99SRandall Stewart 	return (NULL);
495442551e99SRandall Stewart }
4955f8829a4aSRandall Stewart 
49566a27c376SRandall Stewart uint32_t
49576a27c376SRandall Stewart sctp_get_ifa_hash_val(struct sockaddr *addr)
49586a27c376SRandall Stewart {
4959ea5eba11SMichael Tuexen 	switch (addr->sa_family) {
4960ea5eba11SMichael Tuexen #ifdef INET
4961ea5eba11SMichael Tuexen 	case AF_INET:
4962ea5eba11SMichael Tuexen 		{
49636a27c376SRandall Stewart 			struct sockaddr_in *sin;
49646a27c376SRandall Stewart 
49656a27c376SRandall Stewart 			sin = (struct sockaddr_in *)addr;
49666a27c376SRandall Stewart 			return (sin->sin_addr.s_addr ^ (sin->sin_addr.s_addr >> 16));
4967ea5eba11SMichael Tuexen 		}
4968ea5eba11SMichael Tuexen #endif
4969ea5eba11SMichael Tuexen #ifdef INET6
49702c2e3218SMichael Tuexen 	case AF_INET6:
4971ea5eba11SMichael Tuexen 		{
49726a27c376SRandall Stewart 			struct sockaddr_in6 *sin6;
49736a27c376SRandall Stewart 			uint32_t hash_of_addr;
49746a27c376SRandall Stewart 
49756a27c376SRandall Stewart 			sin6 = (struct sockaddr_in6 *)addr;
49766a27c376SRandall Stewart 			hash_of_addr = (sin6->sin6_addr.s6_addr32[0] +
49776a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[1] +
49786a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[2] +
49796a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[3]);
49806a27c376SRandall Stewart 			hash_of_addr = (hash_of_addr ^ (hash_of_addr >> 16));
49816a27c376SRandall Stewart 			return (hash_of_addr);
49826a27c376SRandall Stewart 		}
4983ea5eba11SMichael Tuexen #endif
4984ea5eba11SMichael Tuexen 	default:
4985ea5eba11SMichael Tuexen 		break;
4986ea5eba11SMichael Tuexen 	}
49876a27c376SRandall Stewart 	return (0);
49886a27c376SRandall Stewart }
49896a27c376SRandall Stewart 
499042551e99SRandall Stewart struct sctp_ifa *
499142551e99SRandall Stewart sctp_find_ifa_by_addr(struct sockaddr *addr, uint32_t vrf_id, int holds_lock)
499242551e99SRandall Stewart {
499342551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap;
499442551e99SRandall Stewart 	struct sctp_vrf *vrf;
49956a27c376SRandall Stewart 	struct sctp_ifalist *hash_head;
49966a27c376SRandall Stewart 	uint32_t hash_of_addr;
499742551e99SRandall Stewart 
499842551e99SRandall Stewart 	if (holds_lock == 0)
4999c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
500042551e99SRandall Stewart 
5001bff64a4dSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
5002bff64a4dSRandall Stewart 	if (vrf == NULL) {
5003bff64a4dSRandall Stewart 		if (holds_lock == 0)
5004c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5005bff64a4dSRandall Stewart 		return (NULL);
5006bff64a4dSRandall Stewart 	}
5007bff64a4dSRandall Stewart 	hash_of_addr = sctp_get_ifa_hash_val(addr);
5008bff64a4dSRandall Stewart 
500917205eccSRandall Stewart 	hash_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)];
5010bff64a4dSRandall Stewart 	if (hash_head == NULL) {
5011ad81507eSRandall Stewart 		SCTP_PRINTF("hash_of_addr:%x mask:%x table:%x - ",
5012c99efcf6SRandall Stewart 		    hash_of_addr, (uint32_t)vrf->vrf_addr_hashmark,
5013c99efcf6SRandall Stewart 		    (uint32_t)(hash_of_addr & vrf->vrf_addr_hashmark));
5014bff64a4dSRandall Stewart 		sctp_print_address(addr);
5015ad81507eSRandall Stewart 		SCTP_PRINTF("No such bucket for address\n");
5016bff64a4dSRandall Stewart 		if (holds_lock == 0)
5017c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5018bff64a4dSRandall Stewart 
5019bff64a4dSRandall Stewart 		return (NULL);
5020bff64a4dSRandall Stewart 	}
50216a27c376SRandall Stewart 	LIST_FOREACH(sctp_ifap, hash_head, next_bucket) {
50226a27c376SRandall Stewart 		if (addr->sa_family != sctp_ifap->address.sa.sa_family)
50236a27c376SRandall Stewart 			continue;
5024e6194c2eSMichael Tuexen #ifdef INET
50256a27c376SRandall Stewart 		if (addr->sa_family == AF_INET) {
50266a27c376SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
50276a27c376SRandall Stewart 			    sctp_ifap->address.sin.sin_addr.s_addr) {
50286a27c376SRandall Stewart 				/* found him. */
502942551e99SRandall Stewart 				if (holds_lock == 0)
5030c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
503142551e99SRandall Stewart 				return (sctp_ifap);
50326a27c376SRandall Stewart 				break;
50336a27c376SRandall Stewart 			}
50345e2c2d87SRandall Stewart 		}
5035e6194c2eSMichael Tuexen #endif
50365e2c2d87SRandall Stewart #ifdef INET6
50375e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
5038c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
5039c54a18d2SRandall Stewart 			    &sctp_ifap->address.sin6)) {
50406a27c376SRandall Stewart 				/* found him. */
50416a27c376SRandall Stewart 				if (holds_lock == 0)
5042c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
50436a27c376SRandall Stewart 				return (sctp_ifap);
50446a27c376SRandall Stewart 				break;
50456a27c376SRandall Stewart 			}
504642551e99SRandall Stewart 		}
50475e2c2d87SRandall Stewart #endif
504842551e99SRandall Stewart 	}
504942551e99SRandall Stewart 	if (holds_lock == 0)
5050c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
5051f8829a4aSRandall Stewart 	return (NULL);
5052f8829a4aSRandall Stewart }
5053f8829a4aSRandall Stewart 
5054f8829a4aSRandall Stewart static void
50554c9179adSRandall Stewart sctp_user_rcvd(struct sctp_tcb *stcb, uint32_t *freed_so_far, int hold_rlock,
5056f8829a4aSRandall Stewart     uint32_t rwnd_req)
5057f8829a4aSRandall Stewart {
5058f8829a4aSRandall Stewart 	/* User pulled some data, do we need a rwnd update? */
5059f8829a4aSRandall Stewart 	int r_unlocked = 0;
5060f8829a4aSRandall Stewart 	uint32_t dif, rwnd;
5061f8829a4aSRandall Stewart 	struct socket *so = NULL;
5062f8829a4aSRandall Stewart 
5063f8829a4aSRandall Stewart 	if (stcb == NULL)
5064f8829a4aSRandall Stewart 		return;
5065f8829a4aSRandall Stewart 
506650cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
5067f8829a4aSRandall Stewart 
506862c1ff9cSRandall Stewart 	if (stcb->asoc.state & (SCTP_STATE_ABOUT_TO_BE_FREED |
506962c1ff9cSRandall Stewart 	    SCTP_STATE_SHUTDOWN_RECEIVED |
50704c9179adSRandall Stewart 	    SCTP_STATE_SHUTDOWN_ACK_SENT)) {
5071f8829a4aSRandall Stewart 		/* Pre-check If we are freeing no update */
5072f8829a4aSRandall Stewart 		goto no_lock;
5073f8829a4aSRandall Stewart 	}
5074f8829a4aSRandall Stewart 	SCTP_INP_INCR_REF(stcb->sctp_ep);
5075f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5076f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5077f8829a4aSRandall Stewart 		goto out;
5078f8829a4aSRandall Stewart 	}
5079f8829a4aSRandall Stewart 	so = stcb->sctp_socket;
5080f8829a4aSRandall Stewart 	if (so == NULL) {
5081f8829a4aSRandall Stewart 		goto out;
5082f8829a4aSRandall Stewart 	}
5083f8829a4aSRandall Stewart 	atomic_add_int(&stcb->freed_by_sorcv_sincelast, *freed_so_far);
5084f8829a4aSRandall Stewart 	/* Have you have freed enough to look */
5085f8829a4aSRandall Stewart 	*freed_so_far = 0;
5086f8829a4aSRandall Stewart 	/* Yep, its worth a look and the lock overhead */
5087f8829a4aSRandall Stewart 
5088f8829a4aSRandall Stewart 	/* Figure out what the rwnd would be */
5089f8829a4aSRandall Stewart 	rwnd = sctp_calc_rwnd(stcb, &stcb->asoc);
5090f8829a4aSRandall Stewart 	if (rwnd >= stcb->asoc.my_last_reported_rwnd) {
5091f8829a4aSRandall Stewart 		dif = rwnd - stcb->asoc.my_last_reported_rwnd;
5092f8829a4aSRandall Stewart 	} else {
5093f8829a4aSRandall Stewart 		dif = 0;
5094f8829a4aSRandall Stewart 	}
5095f8829a4aSRandall Stewart 	if (dif >= rwnd_req) {
5096f8829a4aSRandall Stewart 		if (hold_rlock) {
5097f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(stcb->sctp_ep);
5098f8829a4aSRandall Stewart 			r_unlocked = 1;
5099f8829a4aSRandall Stewart 		}
5100f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5101f8829a4aSRandall Stewart 			/*
5102f8829a4aSRandall Stewart 			 * One last check before we allow the guy possibly
5103f8829a4aSRandall Stewart 			 * to get in. There is a race, where the guy has not
5104f8829a4aSRandall Stewart 			 * reached the gate. In that case
5105f8829a4aSRandall Stewart 			 */
5106f8829a4aSRandall Stewart 			goto out;
5107f8829a4aSRandall Stewart 		}
5108f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
5109f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5110f8829a4aSRandall Stewart 			/* No reports here */
5111f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
5112f8829a4aSRandall Stewart 			goto out;
5113f8829a4aSRandall Stewart 		}
5114f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_wu_sacks_sent);
5115689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_LOCKED);
5116830d754dSRandall Stewart 
5117f8829a4aSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb,
5118ceaad40aSRandall Stewart 		    SCTP_OUTPUT_FROM_USR_RCVD, SCTP_SO_LOCKED);
5119f8829a4aSRandall Stewart 		/* make sure no timer is running */
5120ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, NULL,
5121ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_6);
5122f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
5123f8829a4aSRandall Stewart 	} else {
5124f8829a4aSRandall Stewart 		/* Update how much we have pending */
5125f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = dif;
5126f8829a4aSRandall Stewart 	}
5127f8829a4aSRandall Stewart out:
5128f8829a4aSRandall Stewart 	if (so && r_unlocked && hold_rlock) {
5129f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(stcb->sctp_ep);
5130f8829a4aSRandall Stewart 	}
5131f8829a4aSRandall Stewart 	SCTP_INP_DECR_REF(stcb->sctp_ep);
5132f8829a4aSRandall Stewart no_lock:
513350cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, -1);
5134f8829a4aSRandall Stewart 	return;
5135f8829a4aSRandall Stewart }
5136f8829a4aSRandall Stewart 
5137f8829a4aSRandall Stewart int
5138f8829a4aSRandall Stewart sctp_sorecvmsg(struct socket *so,
5139f8829a4aSRandall Stewart     struct uio *uio,
5140f8829a4aSRandall Stewart     struct mbuf **mp,
5141f8829a4aSRandall Stewart     struct sockaddr *from,
5142f8829a4aSRandall Stewart     int fromlen,
5143f8829a4aSRandall Stewart     int *msg_flags,
5144f8829a4aSRandall Stewart     struct sctp_sndrcvinfo *sinfo,
5145f8829a4aSRandall Stewart     int filling_sinfo)
5146f8829a4aSRandall Stewart {
5147f8829a4aSRandall Stewart 	/*
5148f8829a4aSRandall Stewart 	 * MSG flags we will look at MSG_DONTWAIT - non-blocking IO.
5149f8829a4aSRandall Stewart 	 * MSG_PEEK - Look don't touch :-D (only valid with OUT mbuf copy
5150f8829a4aSRandall Stewart 	 * mp=NULL thus uio is the copy method to userland) MSG_WAITALL - ??
5151f8829a4aSRandall Stewart 	 * On the way out we may send out any combination of:
5152f8829a4aSRandall Stewart 	 * MSG_NOTIFICATION MSG_EOR
5153f8829a4aSRandall Stewart 	 *
5154f8829a4aSRandall Stewart 	 */
5155f8829a4aSRandall Stewart 	struct sctp_inpcb *inp = NULL;
5156f8829a4aSRandall Stewart 	int my_len = 0;
5157f8829a4aSRandall Stewart 	int cp_len = 0, error = 0;
5158f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control = NULL, *ctl = NULL, *nxt = NULL;
515994b0d969SMichael Tuexen 	struct mbuf *m = NULL;
5160f8829a4aSRandall Stewart 	struct sctp_tcb *stcb = NULL;
5161f8829a4aSRandall Stewart 	int wakeup_read_socket = 0;
5162f8829a4aSRandall Stewart 	int freecnt_applied = 0;
5163f8829a4aSRandall Stewart 	int out_flags = 0, in_flags = 0;
5164f8829a4aSRandall Stewart 	int block_allowed = 1;
51654c9179adSRandall Stewart 	uint32_t freed_so_far = 0;
516681aca91aSRandall Stewart 	uint32_t copied_so_far = 0;
516793164cf9SRandall Stewart 	int in_eeor_mode = 0;
5168f8829a4aSRandall Stewart 	int no_rcv_needed = 0;
5169f8829a4aSRandall Stewart 	uint32_t rwnd_req = 0;
5170f8829a4aSRandall Stewart 	int hold_sblock = 0;
5171f8829a4aSRandall Stewart 	int hold_rlock = 0;
51729a8e3088SMichael Tuexen 	ssize_t slen = 0;
51734c9179adSRandall Stewart 	uint32_t held_length = 0;
51747abab911SRobert Watson 	int sockbuf_lock = 0;
5175f8829a4aSRandall Stewart 
517617205eccSRandall Stewart 	if (uio == NULL) {
5177c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
517817205eccSRandall Stewart 		return (EINVAL);
517917205eccSRandall Stewart 	}
5180f8829a4aSRandall Stewart 	if (msg_flags) {
5181f8829a4aSRandall Stewart 		in_flags = *msg_flags;
5182c105859eSRandall Stewart 		if (in_flags & MSG_PEEK)
5183c105859eSRandall Stewart 			SCTP_STAT_INCR(sctps_read_peeks);
5184f8829a4aSRandall Stewart 	} else {
5185f8829a4aSRandall Stewart 		in_flags = 0;
5186f8829a4aSRandall Stewart 	}
5187f8829a4aSRandall Stewart 	slen = uio->uio_resid;
518817205eccSRandall Stewart 
5189f8829a4aSRandall Stewart 	/* Pull in and set up our int flags */
5190f8829a4aSRandall Stewart 	if (in_flags & MSG_OOB) {
5191f8829a4aSRandall Stewart 		/* Out of band's NOT supported */
5192f8829a4aSRandall Stewart 		return (EOPNOTSUPP);
5193f8829a4aSRandall Stewart 	}
5194f8829a4aSRandall Stewart 	if ((in_flags & MSG_PEEK) && (mp != NULL)) {
5195c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
5196f8829a4aSRandall Stewart 		return (EINVAL);
5197f8829a4aSRandall Stewart 	}
5198f8829a4aSRandall Stewart 	if ((in_flags & (MSG_DONTWAIT
5199f8829a4aSRandall Stewart 	    | MSG_NBIO
5200f8829a4aSRandall Stewart 	    )) ||
520142551e99SRandall Stewart 	    SCTP_SO_IS_NBIO(so)) {
5202f8829a4aSRandall Stewart 		block_allowed = 0;
5203f8829a4aSRandall Stewart 	}
5204f8829a4aSRandall Stewart 	/* setup the endpoint */
5205f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
5206f8829a4aSRandall Stewart 	if (inp == NULL) {
5207c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EFAULT);
5208f8829a4aSRandall Stewart 		return (EFAULT);
5209f8829a4aSRandall Stewart 	}
521062c1ff9cSRandall Stewart 	rwnd_req = (SCTP_SB_LIMIT_RCV(so) >> SCTP_RWND_HIWAT_SHIFT);
5211f8829a4aSRandall Stewart 	/* Must be at least a MTU's worth */
5212f8829a4aSRandall Stewart 	if (rwnd_req < SCTP_MIN_RWND)
5213f8829a4aSRandall Stewart 		rwnd_req = SCTP_MIN_RWND;
5214f8829a4aSRandall Stewart 	in_eeor_mode = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXPLICIT_EOR);
5215b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5216f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTER,
52179a8e3088SMichael Tuexen 		    rwnd_req, in_eeor_mode, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
521880fefe0aSRandall Stewart 	}
5219b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5220f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTERPL,
52219a8e3088SMichael Tuexen 		    rwnd_req, block_allowed, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
522280fefe0aSRandall Stewart 	}
5223265de5bbSRobert Watson 	error = sblock(&so->so_rcv, (block_allowed ? SBL_WAIT : 0));
5224f8829a4aSRandall Stewart 	if (error) {
5225f8829a4aSRandall Stewart 		goto release_unlocked;
5226f8829a4aSRandall Stewart 	}
52278e1e6e5fSMateusz Guzik 	sockbuf_lock = 1;
5228f8829a4aSRandall Stewart restart:
52297abab911SRobert Watson 
5230f8829a4aSRandall Stewart 
5231f8829a4aSRandall Stewart restart_nosblocks:
5232f8829a4aSRandall Stewart 	if (hold_sblock == 0) {
5233f8829a4aSRandall Stewart 		SOCKBUF_LOCK(&so->so_rcv);
5234f8829a4aSRandall Stewart 		hold_sblock = 1;
5235f8829a4aSRandall Stewart 	}
5236f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5237f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5238f8829a4aSRandall Stewart 		goto out;
5239f8829a4aSRandall Stewart 	}
52404e88d37aSMichael Tuexen 	if ((so->so_rcv.sb_state & SBS_CANTRCVMORE) && (so->so_rcv.sb_cc == 0)) {
5241f8829a4aSRandall Stewart 		if (so->so_error) {
5242f8829a4aSRandall Stewart 			error = so->so_error;
524344b7479bSRandall Stewart 			if ((in_flags & MSG_PEEK) == 0)
524444b7479bSRandall Stewart 				so->so_error = 0;
52459f22f500SRandall Stewart 			goto out;
5246f8829a4aSRandall Stewart 		} else {
52474e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc == 0) {
52487924093fSRandall Stewart 				/* indicate EOF */
52497924093fSRandall Stewart 				error = 0;
5250f8829a4aSRandall Stewart 				goto out;
5251f8829a4aSRandall Stewart 			}
52529f22f500SRandall Stewart 		}
52539f22f500SRandall Stewart 	}
52549de217ceSMichael Tuexen 	if (so->so_rcv.sb_cc <= held_length) {
52559de217ceSMichael Tuexen 		if (so->so_error) {
52569de217ceSMichael Tuexen 			error = so->so_error;
52579de217ceSMichael Tuexen 			if ((in_flags & MSG_PEEK) == 0) {
52589de217ceSMichael Tuexen 				so->so_error = 0;
52599de217ceSMichael Tuexen 			}
52609de217ceSMichael Tuexen 			goto out;
52619de217ceSMichael Tuexen 		}
52624e88d37aSMichael Tuexen 		if ((so->so_rcv.sb_cc == 0) &&
5263f8829a4aSRandall Stewart 		    ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5264f8829a4aSRandall Stewart 		    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL))) {
5265f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0) {
5266f8829a4aSRandall Stewart 				/*
5267f8829a4aSRandall Stewart 				 * For active open side clear flags for
5268f8829a4aSRandall Stewart 				 * re-use passive open is blocked by
5269f8829a4aSRandall Stewart 				 * connect.
5270f8829a4aSRandall Stewart 				 */
5271f8829a4aSRandall Stewart 				if (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED) {
5272b7b84c0eSMichael Tuexen 					/*
5273b7b84c0eSMichael Tuexen 					 * You were aborted, passive side
5274b7b84c0eSMichael Tuexen 					 * always hits here
5275b7b84c0eSMichael Tuexen 					 */
5276c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
5277f8829a4aSRandall Stewart 					error = ECONNRESET;
5278f8829a4aSRandall Stewart 				}
5279f8829a4aSRandall Stewart 				so->so_state &= ~(SS_ISCONNECTING |
5280f8829a4aSRandall Stewart 				    SS_ISDISCONNECTING |
5281f8829a4aSRandall Stewart 				    SS_ISCONFIRMING |
5282f8829a4aSRandall Stewart 				    SS_ISCONNECTED);
5283f8829a4aSRandall Stewart 				if (error == 0) {
5284f8829a4aSRandall Stewart 					if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) == 0) {
5285c4739e2fSRandall Stewart 						SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
5286f8829a4aSRandall Stewart 						error = ENOTCONN;
5287f8829a4aSRandall Stewart 					}
5288f8829a4aSRandall Stewart 				}
5289f8829a4aSRandall Stewart 				goto out;
5290f8829a4aSRandall Stewart 			}
5291f8829a4aSRandall Stewart 		}
52929de217ceSMichael Tuexen 		if (block_allowed) {
5293f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5294f8829a4aSRandall Stewart 			if (error) {
5295f8829a4aSRandall Stewart 				goto out;
5296f8829a4aSRandall Stewart 			}
5297f8829a4aSRandall Stewart 			held_length = 0;
5298f8829a4aSRandall Stewart 			goto restart_nosblocks;
529944b7479bSRandall Stewart 		} else {
5300c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EWOULDBLOCK);
5301f8829a4aSRandall Stewart 			error = EWOULDBLOCK;
5302f8829a4aSRandall Stewart 			goto out;
5303f8829a4aSRandall Stewart 		}
53049de217ceSMichael Tuexen 	}
5305d06c82f1SRandall Stewart 	if (hold_sblock == 1) {
5306d06c82f1SRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5307d06c82f1SRandall Stewart 		hold_sblock = 0;
5308d06c82f1SRandall Stewart 	}
5309f8829a4aSRandall Stewart 	/* we possibly have data we can read */
53103c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
5311f8829a4aSRandall Stewart 	control = TAILQ_FIRST(&inp->read_queue);
5312f8829a4aSRandall Stewart 	if (control == NULL) {
5313f8829a4aSRandall Stewart 		/*
5314f8829a4aSRandall Stewart 		 * This could be happening since the appender did the
5315f8829a4aSRandall Stewart 		 * increment but as not yet did the tailq insert onto the
5316f8829a4aSRandall Stewart 		 * read_queue
5317f8829a4aSRandall Stewart 		 */
5318f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5319f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5320f8829a4aSRandall Stewart 		}
5321f8829a4aSRandall Stewart 		control = TAILQ_FIRST(&inp->read_queue);
53224e88d37aSMichael Tuexen 		if ((control == NULL) && (so->so_rcv.sb_cc != 0)) {
5323a5d547adSRandall Stewart #ifdef INVARIANTS
5324f8829a4aSRandall Stewart 			panic("Huh, its non zero and nothing on control?");
5325f8829a4aSRandall Stewart #endif
53264e88d37aSMichael Tuexen 			so->so_rcv.sb_cc = 0;
5327f8829a4aSRandall Stewart 		}
5328f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5329f8829a4aSRandall Stewart 		hold_rlock = 0;
5330f8829a4aSRandall Stewart 		goto restart;
5331f8829a4aSRandall Stewart 	}
5332f8829a4aSRandall Stewart 	if ((control->length == 0) &&
5333f8829a4aSRandall Stewart 	    (control->do_not_ref_stcb)) {
5334f8829a4aSRandall Stewart 		/*
5335f8829a4aSRandall Stewart 		 * Clean up code for freeing assoc that left behind a
5336f8829a4aSRandall Stewart 		 * pdapi.. maybe a peer in EEOR that just closed after
5337f8829a4aSRandall Stewart 		 * sending and never indicated a EOR.
5338f8829a4aSRandall Stewart 		 */
5339f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5340f8829a4aSRandall Stewart 			hold_rlock = 1;
5341f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5342f8829a4aSRandall Stewart 		}
5343f8829a4aSRandall Stewart 		control->held_length = 0;
5344f8829a4aSRandall Stewart 		if (control->data) {
5345f8829a4aSRandall Stewart 			/* Hmm there is data here .. fix */
53464c9179adSRandall Stewart 			struct mbuf *m_tmp;
5347f8829a4aSRandall Stewart 			int cnt = 0;
5348f8829a4aSRandall Stewart 
53494c9179adSRandall Stewart 			m_tmp = control->data;
53504c9179adSRandall Stewart 			while (m_tmp) {
53514c9179adSRandall Stewart 				cnt += SCTP_BUF_LEN(m_tmp);
53524c9179adSRandall Stewart 				if (SCTP_BUF_NEXT(m_tmp) == NULL) {
53534c9179adSRandall Stewart 					control->tail_mbuf = m_tmp;
5354f8829a4aSRandall Stewart 					control->end_added = 1;
5355f8829a4aSRandall Stewart 				}
53564c9179adSRandall Stewart 				m_tmp = SCTP_BUF_NEXT(m_tmp);
5357f8829a4aSRandall Stewart 			}
5358f8829a4aSRandall Stewart 			control->length = cnt;
5359f8829a4aSRandall Stewart 		} else {
5360f8829a4aSRandall Stewart 			/* remove it */
5361f8829a4aSRandall Stewart 			TAILQ_REMOVE(&inp->read_queue, control, next);
5362f8829a4aSRandall Stewart 			/* Add back any hiddend data */
5363f8829a4aSRandall Stewart 			sctp_free_remote_addr(control->whoFrom);
5364f8829a4aSRandall Stewart 			sctp_free_a_readq(stcb, control);
5365f8829a4aSRandall Stewart 		}
5366f8829a4aSRandall Stewart 		if (hold_rlock) {
5367f8829a4aSRandall Stewart 			hold_rlock = 0;
5368f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5369f8829a4aSRandall Stewart 		}
5370f8829a4aSRandall Stewart 		goto restart;
5371f8829a4aSRandall Stewart 	}
5372810ec536SMichael Tuexen 	if ((control->length == 0) &&
5373810ec536SMichael Tuexen 	    (control->end_added == 1)) {
5374b7b84c0eSMichael Tuexen 		/*
5375b7b84c0eSMichael Tuexen 		 * Do we also need to check for (control->pdapi_aborted ==
5376b7b84c0eSMichael Tuexen 		 * 1)?
5377b7b84c0eSMichael Tuexen 		 */
5378810ec536SMichael Tuexen 		if (hold_rlock == 0) {
5379810ec536SMichael Tuexen 			hold_rlock = 1;
5380810ec536SMichael Tuexen 			SCTP_INP_READ_LOCK(inp);
5381810ec536SMichael Tuexen 		}
5382810ec536SMichael Tuexen 		TAILQ_REMOVE(&inp->read_queue, control, next);
5383810ec536SMichael Tuexen 		if (control->data) {
5384810ec536SMichael Tuexen #ifdef INVARIANTS
5385810ec536SMichael Tuexen 			panic("control->data not null but control->length == 0");
5386810ec536SMichael Tuexen #else
5387810ec536SMichael Tuexen 			SCTP_PRINTF("Strange, data left in the control buffer. Cleaning up.\n");
5388810ec536SMichael Tuexen 			sctp_m_freem(control->data);
5389810ec536SMichael Tuexen 			control->data = NULL;
5390810ec536SMichael Tuexen #endif
5391810ec536SMichael Tuexen 		}
5392810ec536SMichael Tuexen 		if (control->aux_data) {
5393810ec536SMichael Tuexen 			sctp_m_free(control->aux_data);
5394810ec536SMichael Tuexen 			control->aux_data = NULL;
5395810ec536SMichael Tuexen 		}
539698d5fd97SMichael Tuexen #ifdef INVARIANTS
539744249214SRandall Stewart 		if (control->on_strm_q) {
539844249214SRandall Stewart 			panic("About to free ctl:%p so:%p and its in %d",
539944249214SRandall Stewart 			    control, so, control->on_strm_q);
540044249214SRandall Stewart 		}
540198d5fd97SMichael Tuexen #endif
5402810ec536SMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
5403810ec536SMichael Tuexen 		sctp_free_a_readq(stcb, control);
5404810ec536SMichael Tuexen 		if (hold_rlock) {
5405810ec536SMichael Tuexen 			hold_rlock = 0;
5406810ec536SMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
5407810ec536SMichael Tuexen 		}
5408810ec536SMichael Tuexen 		goto restart;
5409810ec536SMichael Tuexen 	}
5410f8829a4aSRandall Stewart 	if (control->length == 0) {
5411f8829a4aSRandall Stewart 		if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE)) &&
5412f8829a4aSRandall Stewart 		    (filling_sinfo)) {
5413f8829a4aSRandall Stewart 			/* find a more suitable one then this */
5414f8829a4aSRandall Stewart 			ctl = TAILQ_NEXT(control, next);
5415f8829a4aSRandall Stewart 			while (ctl) {
54169a6142d8SRandall Stewart 				if ((ctl->stcb != control->stcb) && (ctl->length) &&
54179a6142d8SRandall Stewart 				    (ctl->some_taken ||
54186114cd96SRandall Stewart 				    (ctl->spec_flags & M_NOTIFICATION) ||
54199a6142d8SRandall Stewart 				    ((ctl->do_not_ref_stcb == 0) &&
54209a6142d8SRandall Stewart 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))
54219a6142d8SRandall Stewart 				    ) {
54229a6142d8SRandall Stewart 					/*-
54239a6142d8SRandall Stewart 					 * If we have a different TCB next, and there is data
54249a6142d8SRandall Stewart 					 * present. If we have already taken some (pdapi), OR we can
54259a6142d8SRandall Stewart 					 * ref the tcb and no delivery as started on this stream, we
542617205eccSRandall Stewart 					 * take it. Note we allow a notification on a different
542717205eccSRandall Stewart 					 * assoc to be delivered..
54289a6142d8SRandall Stewart 					 */
54299a6142d8SRandall Stewart 					control = ctl;
54309a6142d8SRandall Stewart 					goto found_one;
54319a6142d8SRandall Stewart 				} else if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS)) &&
54329a6142d8SRandall Stewart 					    (ctl->length) &&
54339a6142d8SRandall Stewart 					    ((ctl->some_taken) ||
54349a6142d8SRandall Stewart 					    ((ctl->do_not_ref_stcb == 0) &&
543517205eccSRandall Stewart 					    ((ctl->spec_flags & M_NOTIFICATION) == 0) &&
5436b5c16493SMichael Tuexen 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))) {
54379a6142d8SRandall Stewart 					/*-
54389a6142d8SRandall Stewart 					 * If we have the same tcb, and there is data present, and we
54399a6142d8SRandall Stewart 					 * have the strm interleave feature present. Then if we have
54409a6142d8SRandall Stewart 					 * taken some (pdapi) or we can refer to tht tcb AND we have
54419a6142d8SRandall Stewart 					 * not started a delivery for this stream, we can take it.
544217205eccSRandall Stewart 					 * Note we do NOT allow a notificaiton on the same assoc to
544317205eccSRandall Stewart 					 * be delivered.
54449a6142d8SRandall Stewart 					 */
5445f8829a4aSRandall Stewart 					control = ctl;
5446f8829a4aSRandall Stewart 					goto found_one;
5447f8829a4aSRandall Stewart 				}
5448f8829a4aSRandall Stewart 				ctl = TAILQ_NEXT(ctl, next);
5449f8829a4aSRandall Stewart 			}
5450f8829a4aSRandall Stewart 		}
5451f8829a4aSRandall Stewart 		/*
5452f8829a4aSRandall Stewart 		 * if we reach here, not suitable replacement is available
54534e88d37aSMichael Tuexen 		 * <or> fragment interleave is NOT on. So stuff the sb_cc
5454f8829a4aSRandall Stewart 		 * into the our held count, and its time to sleep again.
5455f8829a4aSRandall Stewart 		 */
54564e88d37aSMichael Tuexen 		held_length = so->so_rcv.sb_cc;
54574e88d37aSMichael Tuexen 		control->held_length = so->so_rcv.sb_cc;
5458f8829a4aSRandall Stewart 		goto restart;
5459f8829a4aSRandall Stewart 	}
5460f8829a4aSRandall Stewart 	/* Clear the held length since there is something to read */
5461f8829a4aSRandall Stewart 	control->held_length = 0;
5462f8829a4aSRandall Stewart found_one:
5463f8829a4aSRandall Stewart 	/*
5464f8829a4aSRandall Stewart 	 * If we reach here, control has a some data for us to read off.
5465f8829a4aSRandall Stewart 	 * Note that stcb COULD be NULL.
5466f8829a4aSRandall Stewart 	 */
54679c5ca6f2SMichael Tuexen 	if (hold_rlock == 0) {
54689c5ca6f2SMichael Tuexen 		hold_rlock = 1;
54699c5ca6f2SMichael Tuexen 		SCTP_INP_READ_LOCK(inp);
5470f8829a4aSRandall Stewart 	}
54719c5ca6f2SMichael Tuexen 	control->some_taken++;
5472f8829a4aSRandall Stewart 	stcb = control->stcb;
5473f8829a4aSRandall Stewart 	if (stcb) {
54740696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) &&
54750696e120SRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED)) {
547650cec919SRandall Stewart 			if (freecnt_applied == 0)
5477f8829a4aSRandall Stewart 				stcb = NULL;
5478f8829a4aSRandall Stewart 		} else if (control->do_not_ref_stcb == 0) {
5479f8829a4aSRandall Stewart 			/* you can't free it on me please */
5480f8829a4aSRandall Stewart 			/*
5481f8829a4aSRandall Stewart 			 * The lock on the socket buffer protects us so the
5482f8829a4aSRandall Stewart 			 * free code will stop. But since we used the
5483f8829a4aSRandall Stewart 			 * socketbuf lock and the sender uses the tcb_lock
5484f8829a4aSRandall Stewart 			 * to increment, we need to use the atomic add to
5485f8829a4aSRandall Stewart 			 * the refcnt
5486f8829a4aSRandall Stewart 			 */
5487d55b0b1bSRandall Stewart 			if (freecnt_applied) {
5488d55b0b1bSRandall Stewart #ifdef INVARIANTS
5489207304d4SRandall Stewart 				panic("refcnt already incremented");
5490d55b0b1bSRandall Stewart #else
5491cd3fd531SMichael Tuexen 				SCTP_PRINTF("refcnt already incremented?\n");
5492d55b0b1bSRandall Stewart #endif
5493d55b0b1bSRandall Stewart 			} else {
549450cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5495f8829a4aSRandall Stewart 				freecnt_applied = 1;
5496d55b0b1bSRandall Stewart 			}
5497f8829a4aSRandall Stewart 			/*
5498f8829a4aSRandall Stewart 			 * Setup to remember how much we have not yet told
5499f8829a4aSRandall Stewart 			 * the peer our rwnd has opened up. Note we grab the
5500f8829a4aSRandall Stewart 			 * value from the tcb from last time. Note too that
55010696e120SRandall Stewart 			 * sack sending clears this when a sack is sent,
5502f8829a4aSRandall Stewart 			 * which is fine. Once we hit the rwnd_req, we then
5503f8829a4aSRandall Stewart 			 * will go to the sctp_user_rcvd() that will not
5504f8829a4aSRandall Stewart 			 * lock until it KNOWs it MUST send a WUP-SACK.
5505f8829a4aSRandall Stewart 			 */
5506f8829a4aSRandall Stewart 			freed_so_far = stcb->freed_by_sorcv_sincelast;
5507f8829a4aSRandall Stewart 			stcb->freed_by_sorcv_sincelast = 0;
5508f8829a4aSRandall Stewart 		}
5509f8829a4aSRandall Stewart 	}
55106114cd96SRandall Stewart 	if (stcb &&
55116114cd96SRandall Stewart 	    ((control->spec_flags & M_NOTIFICATION) == 0) &&
55126114cd96SRandall Stewart 	    control->do_not_ref_stcb == 0) {
5513d06c82f1SRandall Stewart 		stcb->asoc.strmin[control->sinfo_stream].delivery_started = 1;
5514d06c82f1SRandall Stewart 	}
5515f8829a4aSRandall Stewart 	/* First lets get off the sinfo and sockaddr info */
55165f05199cSMichael Tuexen 	if ((sinfo != NULL) && (filling_sinfo != 0)) {
55175f05199cSMichael Tuexen 		sinfo->sinfo_stream = control->sinfo_stream;
551849656eefSMichael Tuexen 		sinfo->sinfo_ssn = (uint16_t)control->mid;
55195f05199cSMichael Tuexen 		sinfo->sinfo_flags = control->sinfo_flags;
55205f05199cSMichael Tuexen 		sinfo->sinfo_ppid = control->sinfo_ppid;
55215f05199cSMichael Tuexen 		sinfo->sinfo_context = control->sinfo_context;
55225f05199cSMichael Tuexen 		sinfo->sinfo_timetolive = control->sinfo_timetolive;
55235f05199cSMichael Tuexen 		sinfo->sinfo_tsn = control->sinfo_tsn;
55245f05199cSMichael Tuexen 		sinfo->sinfo_cumtsn = control->sinfo_cumtsn;
55255f05199cSMichael Tuexen 		sinfo->sinfo_assoc_id = control->sinfo_assoc_id;
5526f8829a4aSRandall Stewart 		nxt = TAILQ_NEXT(control, next);
5527e2e7c62eSMichael Tuexen 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
5528e2e7c62eSMichael Tuexen 		    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) {
5529f8829a4aSRandall Stewart 			struct sctp_extrcvinfo *s_extra;
5530f8829a4aSRandall Stewart 
5531f8829a4aSRandall Stewart 			s_extra = (struct sctp_extrcvinfo *)sinfo;
55329a6142d8SRandall Stewart 			if ((nxt) &&
55339a6142d8SRandall Stewart 			    (nxt->length)) {
5534b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NEXT_MSG_AVAIL;
5535f8829a4aSRandall Stewart 				if (nxt->sinfo_flags & SCTP_UNORDERED) {
5536b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_UNORDERED;
5537f8829a4aSRandall Stewart 				}
5538f42a358aSRandall Stewart 				if (nxt->spec_flags & M_NOTIFICATION) {
5539b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_NOTIFICATION;
5540f42a358aSRandall Stewart 				}
5541b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = nxt->sinfo_assoc_id;
5542b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = nxt->length;
5543b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = nxt->sinfo_ppid;
5544b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = nxt->sinfo_stream;
5545f8829a4aSRandall Stewart 				if (nxt->tail_mbuf != NULL) {
5546139bc87fSRandall Stewart 					if (nxt->end_added) {
5547b70b526dSMichael Tuexen 						s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_ISCOMPLETE;
5548f8829a4aSRandall Stewart 					}
5549f8829a4aSRandall Stewart 				}
5550f8829a4aSRandall Stewart 			} else {
5551f8829a4aSRandall Stewart 				/*
5552f8829a4aSRandall Stewart 				 * we explicitly 0 this, since the memcpy
5553f8829a4aSRandall Stewart 				 * got some other things beyond the older
5554f8829a4aSRandall Stewart 				 * sinfo_ that is on the control's structure
5555f8829a4aSRandall Stewart 				 * :-D
5556f8829a4aSRandall Stewart 				 */
55579a6142d8SRandall Stewart 				nxt = NULL;
5558b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
5559b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = 0;
5560b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = 0;
5561b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = 0;
5562b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = 0;
5563f8829a4aSRandall Stewart 			}
5564f8829a4aSRandall Stewart 		}
5565f8829a4aSRandall Stewart 		/*
5566f8829a4aSRandall Stewart 		 * update off the real current cum-ack, if we have an stcb.
5567f8829a4aSRandall Stewart 		 */
55680696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) && stcb)
5569f8829a4aSRandall Stewart 			sinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn;
5570f8829a4aSRandall Stewart 		/*
5571f8829a4aSRandall Stewart 		 * mask off the high bits, we keep the actual chunk bits in
5572f8829a4aSRandall Stewart 		 * there.
5573f8829a4aSRandall Stewart 		 */
5574f8829a4aSRandall Stewart 		sinfo->sinfo_flags &= 0x00ff;
55755f26a41dSRandall Stewart 		if ((control->sinfo_flags >> 8) & SCTP_DATA_UNORDERED) {
55765f26a41dSRandall Stewart 			sinfo->sinfo_flags |= SCTP_UNORDERED;
55775f26a41dSRandall Stewart 		}
5578f8829a4aSRandall Stewart 	}
557918e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
558018e198d3SRandall Stewart 	{
558118e198d3SRandall Stewart 		int index, newindex;
558218e198d3SRandall Stewart 		struct sctp_pcbtsn_rlog *entry;
558318e198d3SRandall Stewart 
558418e198d3SRandall Stewart 		do {
558518e198d3SRandall Stewart 			index = inp->readlog_index;
558618e198d3SRandall Stewart 			newindex = index + 1;
558718e198d3SRandall Stewart 			if (newindex >= SCTP_READ_LOG_SIZE) {
558818e198d3SRandall Stewart 				newindex = 0;
558918e198d3SRandall Stewart 			}
559018e198d3SRandall Stewart 		} while (atomic_cmpset_int(&inp->readlog_index, index, newindex) == 0);
559118e198d3SRandall Stewart 		entry = &inp->readlog[index];
559218e198d3SRandall Stewart 		entry->vtag = control->sinfo_assoc_id;
559318e198d3SRandall Stewart 		entry->strm = control->sinfo_stream;
559449656eefSMichael Tuexen 		entry->seq = (uint16_t)control->mid;
559518e198d3SRandall Stewart 		entry->sz = control->length;
559618e198d3SRandall Stewart 		entry->flgs = control->sinfo_flags;
559718e198d3SRandall Stewart 	}
559818e198d3SRandall Stewart #endif
5599d59107f7SMichael Tuexen 	if ((fromlen > 0) && (from != NULL)) {
5600d59107f7SMichael Tuexen 		union sctp_sockstore store;
5601d59107f7SMichael Tuexen 		size_t len;
5602d59107f7SMichael Tuexen 
5603b5b6e5c2SMichael Tuexen 		switch (control->whoFrom->ro._l_addr.sa.sa_family) {
5604b5b6e5c2SMichael Tuexen #ifdef INET6
5605b5b6e5c2SMichael Tuexen 		case AF_INET6:
5606d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in6);
5607d59107f7SMichael Tuexen 			store.sin6 = control->whoFrom->ro._l_addr.sin6;
5608d59107f7SMichael Tuexen 			store.sin6.sin6_port = control->port_from;
5609b5b6e5c2SMichael Tuexen 			break;
5610f8829a4aSRandall Stewart #endif
5611b5b6e5c2SMichael Tuexen #ifdef INET
5612b5b6e5c2SMichael Tuexen 		case AF_INET:
5613d59107f7SMichael Tuexen #ifdef INET6
5614d59107f7SMichael Tuexen 			if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
5615d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in6);
5616d59107f7SMichael Tuexen 				in6_sin_2_v4mapsin6(&control->whoFrom->ro._l_addr.sin,
5617d59107f7SMichael Tuexen 				    &store.sin6);
5618d59107f7SMichael Tuexen 				store.sin6.sin6_port = control->port_from;
5619d59107f7SMichael Tuexen 			} else {
5620d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in);
5621d59107f7SMichael Tuexen 				store.sin = control->whoFrom->ro._l_addr.sin;
5622d59107f7SMichael Tuexen 				store.sin.sin_port = control->port_from;
5623d59107f7SMichael Tuexen 			}
5624d59107f7SMichael Tuexen #else
5625d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in);
5626d59107f7SMichael Tuexen 			store.sin = control->whoFrom->ro._l_addr.sin;
5627d59107f7SMichael Tuexen 			store.sin.sin_port = control->port_from;
5628d59107f7SMichael Tuexen #endif
5629b5b6e5c2SMichael Tuexen 			break;
5630b5b6e5c2SMichael Tuexen #endif
5631b5b6e5c2SMichael Tuexen 		default:
5632d59107f7SMichael Tuexen 			len = 0;
5633b5b6e5c2SMichael Tuexen 			break;
5634b5b6e5c2SMichael Tuexen 		}
5635d59107f7SMichael Tuexen 		memcpy(from, &store, min((size_t)fromlen, len));
5636e0e00a4dSMichael Tuexen #ifdef INET6
5637f8829a4aSRandall Stewart 		{
5638b5b6e5c2SMichael Tuexen 			struct sockaddr_in6 lsa6, *from6;
5639f8829a4aSRandall Stewart 
5640b5b6e5c2SMichael Tuexen 			from6 = (struct sockaddr_in6 *)from;
5641b5b6e5c2SMichael Tuexen 			sctp_recover_scope_mac(from6, (&lsa6));
5642f8829a4aSRandall Stewart 		}
5643f8829a4aSRandall Stewart #endif
5644f8829a4aSRandall Stewart 	}
56459c5ca6f2SMichael Tuexen 	if (hold_rlock) {
56469c5ca6f2SMichael Tuexen 		SCTP_INP_READ_UNLOCK(inp);
56479c5ca6f2SMichael Tuexen 		hold_rlock = 0;
56489c5ca6f2SMichael Tuexen 	}
56499c5ca6f2SMichael Tuexen 	if (hold_sblock) {
56509c5ca6f2SMichael Tuexen 		SOCKBUF_UNLOCK(&so->so_rcv);
56519c5ca6f2SMichael Tuexen 		hold_sblock = 0;
56529c5ca6f2SMichael Tuexen 	}
5653f8829a4aSRandall Stewart 	/* now copy out what data we can */
5654f8829a4aSRandall Stewart 	if (mp == NULL) {
5655f8829a4aSRandall Stewart 		/* copy out each mbuf in the chain up to length */
5656f8829a4aSRandall Stewart get_more_data:
5657f8829a4aSRandall Stewart 		m = control->data;
5658f8829a4aSRandall Stewart 		while (m) {
5659f8829a4aSRandall Stewart 			/* Move out all we can */
5660f8829a4aSRandall Stewart 			cp_len = (int)uio->uio_resid;
5661139bc87fSRandall Stewart 			my_len = (int)SCTP_BUF_LEN(m);
5662f8829a4aSRandall Stewart 			if (cp_len > my_len) {
5663f8829a4aSRandall Stewart 				/* not enough in this buf */
5664f8829a4aSRandall Stewart 				cp_len = my_len;
5665f8829a4aSRandall Stewart 			}
5666f8829a4aSRandall Stewart 			if (hold_rlock) {
5667f8829a4aSRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
5668f8829a4aSRandall Stewart 				hold_rlock = 0;
5669f8829a4aSRandall Stewart 			}
5670f8829a4aSRandall Stewart 			if (cp_len > 0)
5671f8829a4aSRandall Stewart 				error = uiomove(mtod(m, char *), cp_len, uio);
5672f8829a4aSRandall Stewart 			/* re-read */
5673f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
5674f8829a4aSRandall Stewart 				goto release;
5675f8829a4aSRandall Stewart 			}
56760696e120SRandall Stewart 			if ((control->do_not_ref_stcb == 0) && stcb &&
5677f8829a4aSRandall Stewart 			    stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5678f8829a4aSRandall Stewart 				no_rcv_needed = 1;
5679f8829a4aSRandall Stewart 			}
5680f8829a4aSRandall Stewart 			if (error) {
5681f8829a4aSRandall Stewart 				/* error we are out of here */
5682f8829a4aSRandall Stewart 				goto release;
5683f8829a4aSRandall Stewart 			}
5684f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5685f8829a4aSRandall Stewart 			hold_rlock = 1;
5686139bc87fSRandall Stewart 			if (cp_len == SCTP_BUF_LEN(m)) {
5687139bc87fSRandall Stewart 				if ((SCTP_BUF_NEXT(m) == NULL) &&
5688139bc87fSRandall Stewart 				    (control->end_added)) {
5689f8829a4aSRandall Stewart 					out_flags |= MSG_EOR;
569052129fcdSRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
569152129fcdSRandall Stewart 					    (control->stcb != NULL) &&
569252129fcdSRandall Stewart 					    ((control->spec_flags & M_NOTIFICATION) == 0))
5693ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5694f8829a4aSRandall Stewart 				}
5695139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5696f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5697f8829a4aSRandall Stewart 				}
5698f8829a4aSRandall Stewart 				/* we ate up the mbuf */
5699f8829a4aSRandall Stewart 				if (in_flags & MSG_PEEK) {
5700f8829a4aSRandall Stewart 					/* just looking */
5701139bc87fSRandall Stewart 					m = SCTP_BUF_NEXT(m);
5702f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5703f8829a4aSRandall Stewart 				} else {
5704f8829a4aSRandall Stewart 					/* dispose of the mbuf */
5705b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5706f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5707139bc87fSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
570880fefe0aSRandall Stewart 					}
5709f8829a4aSRandall Stewart 					sctp_sbfree(control, stcb, &so->so_rcv, m);
5710b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5711f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5712f8829a4aSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
571380fefe0aSRandall Stewart 					}
5714f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5715f8829a4aSRandall Stewart 					freed_so_far += cp_len;
5716c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
571718e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5718f8829a4aSRandall Stewart 					control->data = sctp_m_free(m);
5719f8829a4aSRandall Stewart 					m = control->data;
5720b7b84c0eSMichael Tuexen 					/*
5721b7b84c0eSMichael Tuexen 					 * been through it all, must hold sb
5722b7b84c0eSMichael Tuexen 					 * lock ok to null tail
5723b7b84c0eSMichael Tuexen 					 */
5724f8829a4aSRandall Stewart 					if (control->data == NULL) {
5725a5d547adSRandall Stewart #ifdef INVARIANTS
5726f8829a4aSRandall Stewart 						if ((control->end_added == 0) ||
5727f8829a4aSRandall Stewart 						    (TAILQ_NEXT(control, next) == NULL)) {
5728f8829a4aSRandall Stewart 							/*
5729f8829a4aSRandall Stewart 							 * If the end is not
5730f8829a4aSRandall Stewart 							 * added, OR the
5731f8829a4aSRandall Stewart 							 * next is NOT null
5732f8829a4aSRandall Stewart 							 * we MUST have the
5733f8829a4aSRandall Stewart 							 * lock.
5734f8829a4aSRandall Stewart 							 */
5735f8829a4aSRandall Stewart 							if (mtx_owned(&inp->inp_rdata_mtx) == 0) {
5736f8829a4aSRandall Stewart 								panic("Hmm we don't own the lock?");
5737f8829a4aSRandall Stewart 							}
5738f8829a4aSRandall Stewart 						}
5739f8829a4aSRandall Stewart #endif
5740f8829a4aSRandall Stewart 						control->tail_mbuf = NULL;
5741a5d547adSRandall Stewart #ifdef INVARIANTS
5742f8829a4aSRandall Stewart 						if ((control->end_added) && ((out_flags & MSG_EOR) == 0)) {
5743f8829a4aSRandall Stewart 							panic("end_added, nothing left and no MSG_EOR");
5744f8829a4aSRandall Stewart 						}
5745f8829a4aSRandall Stewart #endif
5746f8829a4aSRandall Stewart 					}
5747f8829a4aSRandall Stewart 				}
5748f8829a4aSRandall Stewart 			} else {
5749f8829a4aSRandall Stewart 				/* Do we need to trim the mbuf? */
5750139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5751f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5752f8829a4aSRandall Stewart 				}
5753f8829a4aSRandall Stewart 				if ((in_flags & MSG_PEEK) == 0) {
5754139bc87fSRandall Stewart 					SCTP_BUF_RESV_UF(m, cp_len);
5755139bc87fSRandall Stewart 					SCTP_BUF_LEN(m) -= cp_len;
5756b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5757f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, cp_len);
575880fefe0aSRandall Stewart 					}
57594e88d37aSMichael Tuexen 					atomic_subtract_int(&so->so_rcv.sb_cc, cp_len);
57600696e120SRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
57610696e120SRandall Stewart 					    stcb) {
57624e88d37aSMichael Tuexen 						atomic_subtract_int(&stcb->asoc.sb_cc, cp_len);
5763f8829a4aSRandall Stewart 					}
5764f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5765f8829a4aSRandall Stewart 					freed_so_far += cp_len;
5766c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
5767b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5768f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb,
5769f8829a4aSRandall Stewart 						    SCTP_LOG_SBRESULT, 0);
577080fefe0aSRandall Stewart 					}
577118e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5772f8829a4aSRandall Stewart 				} else {
5773f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5774f8829a4aSRandall Stewart 				}
5775f8829a4aSRandall Stewart 			}
5776d61a0ae0SRandall Stewart 			if ((out_flags & MSG_EOR) || (uio->uio_resid == 0)) {
5777f8829a4aSRandall Stewart 				break;
5778f8829a4aSRandall Stewart 			}
5779f8829a4aSRandall Stewart 			if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5780f8829a4aSRandall Stewart 			    (control->do_not_ref_stcb == 0) &&
5781f8829a4aSRandall Stewart 			    (freed_so_far >= rwnd_req)) {
5782f8829a4aSRandall Stewart 				sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5783f8829a4aSRandall Stewart 			}
5784f8829a4aSRandall Stewart 		}		/* end while(m) */
5785f8829a4aSRandall Stewart 		/*
5786f8829a4aSRandall Stewart 		 * At this point we have looked at it all and we either have
5787f8829a4aSRandall Stewart 		 * a MSG_EOR/or read all the user wants... <OR>
5788f8829a4aSRandall Stewart 		 * control->length == 0.
5789f8829a4aSRandall Stewart 		 */
5790d61a0ae0SRandall Stewart 		if ((out_flags & MSG_EOR) && ((in_flags & MSG_PEEK) == 0)) {
5791f8829a4aSRandall Stewart 			/* we are done with this control */
5792f8829a4aSRandall Stewart 			if (control->length == 0) {
5793f8829a4aSRandall Stewart 				if (control->data) {
5794a5d547adSRandall Stewart #ifdef INVARIANTS
5795f8829a4aSRandall Stewart 					panic("control->data not null at read eor?");
5796f8829a4aSRandall Stewart #else
5797ad81507eSRandall Stewart 					SCTP_PRINTF("Strange, data left in the control buffer .. invarients would panic?\n");
5798f8829a4aSRandall Stewart 					sctp_m_freem(control->data);
5799f8829a4aSRandall Stewart 					control->data = NULL;
5800f8829a4aSRandall Stewart #endif
5801f8829a4aSRandall Stewart 				}
5802f8829a4aSRandall Stewart 		done_with_control:
5803f8829a4aSRandall Stewart 				if (hold_rlock == 0) {
5804f8829a4aSRandall Stewart 					SCTP_INP_READ_LOCK(inp);
5805f8829a4aSRandall Stewart 					hold_rlock = 1;
5806f8829a4aSRandall Stewart 				}
5807f8829a4aSRandall Stewart 				TAILQ_REMOVE(&inp->read_queue, control, next);
5808f8829a4aSRandall Stewart 				/* Add back any hiddend data */
5809f8829a4aSRandall Stewart 				if (control->held_length) {
5810f8829a4aSRandall Stewart 					held_length = 0;
5811f8829a4aSRandall Stewart 					control->held_length = 0;
5812f8829a4aSRandall Stewart 					wakeup_read_socket = 1;
5813f8829a4aSRandall Stewart 				}
581417205eccSRandall Stewart 				if (control->aux_data) {
581517205eccSRandall Stewart 					sctp_m_free(control->aux_data);
581617205eccSRandall Stewart 					control->aux_data = NULL;
581717205eccSRandall Stewart 				}
5818f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5819f8829a4aSRandall Stewart 				sctp_free_remote_addr(control->whoFrom);
5820f8829a4aSRandall Stewart 				control->data = NULL;
582198d5fd97SMichael Tuexen #ifdef INVARIANTS
582244249214SRandall Stewart 				if (control->on_strm_q) {
582344249214SRandall Stewart 					panic("About to free ctl:%p so:%p and its in %d",
582444249214SRandall Stewart 					    control, so, control->on_strm_q);
582544249214SRandall Stewart 				}
582698d5fd97SMichael Tuexen #endif
5827f8829a4aSRandall Stewart 				sctp_free_a_readq(stcb, control);
5828f8829a4aSRandall Stewart 				control = NULL;
58290696e120SRandall Stewart 				if ((freed_so_far >= rwnd_req) &&
58300696e120SRandall Stewart 				    (no_rcv_needed == 0))
5831f8829a4aSRandall Stewart 					sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5832f8829a4aSRandall Stewart 
5833f8829a4aSRandall Stewart 			} else {
5834f8829a4aSRandall Stewart 				/*
5835f8829a4aSRandall Stewart 				 * The user did not read all of this
5836f8829a4aSRandall Stewart 				 * message, turn off the returned MSG_EOR
5837f8829a4aSRandall Stewart 				 * since we are leaving more behind on the
5838f8829a4aSRandall Stewart 				 * control to read.
5839f8829a4aSRandall Stewart 				 */
5840a5d547adSRandall Stewart #ifdef INVARIANTS
58410696e120SRandall Stewart 				if (control->end_added &&
58420696e120SRandall Stewart 				    (control->data == NULL) &&
5843f8829a4aSRandall Stewart 				    (control->tail_mbuf == NULL)) {
5844f8829a4aSRandall Stewart 					panic("Gak, control->length is corrupt?");
5845f8829a4aSRandall Stewart 				}
5846f8829a4aSRandall Stewart #endif
5847f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5848f8829a4aSRandall Stewart 				out_flags &= ~MSG_EOR;
5849f8829a4aSRandall Stewart 			}
5850f8829a4aSRandall Stewart 		}
5851f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
5852f8829a4aSRandall Stewart 			goto release;
5853f8829a4aSRandall Stewart 		}
5854f8829a4aSRandall Stewart 		if ((uio->uio_resid == 0) ||
585504aab884SMichael Tuexen 		    ((in_eeor_mode) &&
585604aab884SMichael Tuexen 		    (copied_so_far >= (uint32_t)max(so->so_rcv.sb_lowat, 1)))) {
5857f8829a4aSRandall Stewart 			goto release;
5858f8829a4aSRandall Stewart 		}
5859f8829a4aSRandall Stewart 		/*
5860f8829a4aSRandall Stewart 		 * If I hit here the receiver wants more and this message is
5861f8829a4aSRandall Stewart 		 * NOT done (pd-api). So two questions. Can we block? if not
5862f8829a4aSRandall Stewart 		 * we are done. Did the user NOT set MSG_WAITALL?
5863f8829a4aSRandall Stewart 		 */
5864f8829a4aSRandall Stewart 		if (block_allowed == 0) {
5865f8829a4aSRandall Stewart 			goto release;
5866f8829a4aSRandall Stewart 		}
5867f8829a4aSRandall Stewart 		/*
5868f8829a4aSRandall Stewart 		 * We need to wait for more data a few things: - We don't
5869f8829a4aSRandall Stewart 		 * sbunlock() so we don't get someone else reading. - We
5870f8829a4aSRandall Stewart 		 * must be sure to account for the case where what is added
5871f8829a4aSRandall Stewart 		 * is NOT to our control when we wakeup.
5872f8829a4aSRandall Stewart 		 */
5873f8829a4aSRandall Stewart 
5874f8829a4aSRandall Stewart 		/*
5875f8829a4aSRandall Stewart 		 * Do we need to tell the transport a rwnd update might be
5876f8829a4aSRandall Stewart 		 * needed before we go to sleep?
5877f8829a4aSRandall Stewart 		 */
5878f8829a4aSRandall Stewart 		if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5879f8829a4aSRandall Stewart 		    ((freed_so_far >= rwnd_req) &&
5880f8829a4aSRandall Stewart 		    (control->do_not_ref_stcb == 0) &&
5881f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))) {
5882f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5883f8829a4aSRandall Stewart 		}
5884f8829a4aSRandall Stewart wait_some_more:
588544b7479bSRandall Stewart 		if (so->so_rcv.sb_state & SBS_CANTRCVMORE) {
5886f8829a4aSRandall Stewart 			goto release;
5887f8829a4aSRandall Stewart 		}
5888f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)
5889f8829a4aSRandall Stewart 			goto release;
5890f8829a4aSRandall Stewart 
5891f8829a4aSRandall Stewart 		if (hold_rlock == 1) {
5892f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5893f8829a4aSRandall Stewart 			hold_rlock = 0;
5894f8829a4aSRandall Stewart 		}
5895f8829a4aSRandall Stewart 		if (hold_sblock == 0) {
5896f8829a4aSRandall Stewart 			SOCKBUF_LOCK(&so->so_rcv);
5897f8829a4aSRandall Stewart 			hold_sblock = 1;
5898f8829a4aSRandall Stewart 		}
5899851b7298SRandall Stewart 		if ((copied_so_far) && (control->length == 0) &&
5900b5c16493SMichael Tuexen 		    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE))) {
5901851b7298SRandall Stewart 			goto release;
5902851b7298SRandall Stewart 		}
59034e88d37aSMichael Tuexen 		if (so->so_rcv.sb_cc <= control->held_length) {
5904f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5905f8829a4aSRandall Stewart 			if (error) {
5906f8829a4aSRandall Stewart 				goto release;
5907f8829a4aSRandall Stewart 			}
5908f8829a4aSRandall Stewart 			control->held_length = 0;
5909f8829a4aSRandall Stewart 		}
5910f8829a4aSRandall Stewart 		if (hold_sblock) {
5911f8829a4aSRandall Stewart 			SOCKBUF_UNLOCK(&so->so_rcv);
5912f8829a4aSRandall Stewart 			hold_sblock = 0;
5913f8829a4aSRandall Stewart 		}
5914f8829a4aSRandall Stewart 		if (control->length == 0) {
5915f8829a4aSRandall Stewart 			/* still nothing here */
5916f8829a4aSRandall Stewart 			if (control->end_added == 1) {
5917f8829a4aSRandall Stewart 				/* he aborted, or is done i.e.did a shutdown */
5918f8829a4aSRandall Stewart 				out_flags |= MSG_EOR;
59199a6142d8SRandall Stewart 				if (control->pdapi_aborted) {
59206114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5921ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
59229a6142d8SRandall Stewart 
592303b0b021SRandall Stewart 					out_flags |= MSG_TRUNC;
59249a6142d8SRandall Stewart 				} else {
59256114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5926ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
59279a6142d8SRandall Stewart 				}
5928f8829a4aSRandall Stewart 				goto done_with_control;
5929f8829a4aSRandall Stewart 			}
59304e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc > held_length) {
59314e88d37aSMichael Tuexen 				control->held_length = so->so_rcv.sb_cc;
5932f8829a4aSRandall Stewart 				held_length = 0;
5933f8829a4aSRandall Stewart 			}
5934f8829a4aSRandall Stewart 			goto wait_some_more;
5935f8829a4aSRandall Stewart 		} else if (control->data == NULL) {
593650cec919SRandall Stewart 			/*
593750cec919SRandall Stewart 			 * we must re-sync since data is probably being
593850cec919SRandall Stewart 			 * added
593950cec919SRandall Stewart 			 */
594050cec919SRandall Stewart 			SCTP_INP_READ_LOCK(inp);
594150cec919SRandall Stewart 			if ((control->length > 0) && (control->data == NULL)) {
5942b7b84c0eSMichael Tuexen 				/*
5943b7b84c0eSMichael Tuexen 				 * big trouble.. we have the lock and its
5944b7b84c0eSMichael Tuexen 				 * corrupt?
5945b7b84c0eSMichael Tuexen 				 */
59469c04b296SRandall Stewart #ifdef INVARIANTS
59479d18771fSRandall Stewart 				panic("Impossible data==NULL length !=0");
59489c04b296SRandall Stewart #endif
59499c04b296SRandall Stewart 				out_flags |= MSG_EOR;
59509c04b296SRandall Stewart 				out_flags |= MSG_TRUNC;
59519c04b296SRandall Stewart 				control->length = 0;
59529c04b296SRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
59539c04b296SRandall Stewart 				goto done_with_control;
5954f8829a4aSRandall Stewart 			}
595550cec919SRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
595650cec919SRandall Stewart 			/* We will fall around to get more data */
595750cec919SRandall Stewart 		}
5958f8829a4aSRandall Stewart 		goto get_more_data;
5959f8829a4aSRandall Stewart 	} else {
596017205eccSRandall Stewart 		/*-
596117205eccSRandall Stewart 		 * Give caller back the mbuf chain,
596217205eccSRandall Stewart 		 * store in uio_resid the length
5963f8829a4aSRandall Stewart 		 */
596417205eccSRandall Stewart 		wakeup_read_socket = 0;
5965f8829a4aSRandall Stewart 		if ((control->end_added == 0) ||
5966f8829a4aSRandall Stewart 		    (TAILQ_NEXT(control, next) == NULL)) {
5967f8829a4aSRandall Stewart 			/* Need to get rlock */
5968f8829a4aSRandall Stewart 			if (hold_rlock == 0) {
5969f8829a4aSRandall Stewart 				SCTP_INP_READ_LOCK(inp);
5970f8829a4aSRandall Stewart 				hold_rlock = 1;
5971f8829a4aSRandall Stewart 			}
5972f8829a4aSRandall Stewart 		}
5973139bc87fSRandall Stewart 		if (control->end_added) {
5974f8829a4aSRandall Stewart 			out_flags |= MSG_EOR;
597560990c0cSMichael Tuexen 			if ((control->do_not_ref_stcb == 0) &&
597660990c0cSMichael Tuexen 			    (control->stcb != NULL) &&
597760990c0cSMichael Tuexen 			    ((control->spec_flags & M_NOTIFICATION) == 0))
5978ee7f9857SRandall Stewart 				control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5979f8829a4aSRandall Stewart 		}
5980139bc87fSRandall Stewart 		if (control->spec_flags & M_NOTIFICATION) {
5981f8829a4aSRandall Stewart 			out_flags |= MSG_NOTIFICATION;
5982f8829a4aSRandall Stewart 		}
598317205eccSRandall Stewart 		uio->uio_resid = control->length;
5984f8829a4aSRandall Stewart 		*mp = control->data;
5985f8829a4aSRandall Stewart 		m = control->data;
5986f8829a4aSRandall Stewart 		while (m) {
5987b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5988f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
5989139bc87fSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
599080fefe0aSRandall Stewart 			}
5991f8829a4aSRandall Stewart 			sctp_sbfree(control, stcb, &so->so_rcv, m);
5992139bc87fSRandall Stewart 			freed_so_far += SCTP_BUF_LEN(m);
5993c4739e2fSRandall Stewart 			freed_so_far += MSIZE;
5994b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5995f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
5996f8829a4aSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
599780fefe0aSRandall Stewart 			}
5998139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
5999f8829a4aSRandall Stewart 		}
6000f8829a4aSRandall Stewart 		control->data = control->tail_mbuf = NULL;
6001f8829a4aSRandall Stewart 		control->length = 0;
6002f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
6003f8829a4aSRandall Stewart 			/* Done with this control */
6004f8829a4aSRandall Stewart 			goto done_with_control;
6005f8829a4aSRandall Stewart 		}
6006f8829a4aSRandall Stewart 	}
6007f8829a4aSRandall Stewart release:
6008f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6009f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6010f8829a4aSRandall Stewart 		hold_rlock = 0;
6011f8829a4aSRandall Stewart 	}
60127abab911SRobert Watson 	if (hold_sblock == 1) {
60137abab911SRobert Watson 		SOCKBUF_UNLOCK(&so->so_rcv);
60147abab911SRobert Watson 		hold_sblock = 0;
6015f8829a4aSRandall Stewart 	}
6016f8829a4aSRandall Stewart 	sbunlock(&so->so_rcv);
60177abab911SRobert Watson 	sockbuf_lock = 0;
6018f8829a4aSRandall Stewart 
6019f8829a4aSRandall Stewart release_unlocked:
6020f8829a4aSRandall Stewart 	if (hold_sblock) {
6021f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6022f8829a4aSRandall Stewart 		hold_sblock = 0;
6023f8829a4aSRandall Stewart 	}
6024f8829a4aSRandall Stewart 	if ((stcb) && (in_flags & MSG_PEEK) == 0) {
6025f8829a4aSRandall Stewart 		if ((freed_so_far >= rwnd_req) &&
6026f8829a4aSRandall Stewart 		    (control && (control->do_not_ref_stcb == 0)) &&
6027f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))
6028f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
6029f8829a4aSRandall Stewart 	}
6030f8829a4aSRandall Stewart out:
60311b9f62a0SRandall Stewart 	if (msg_flags) {
60321b9f62a0SRandall Stewart 		*msg_flags = out_flags;
60331b9f62a0SRandall Stewart 	}
60349a6142d8SRandall Stewart 	if (((out_flags & MSG_EOR) == 0) &&
60359a6142d8SRandall Stewart 	    ((in_flags & MSG_PEEK) == 0) &&
60369a6142d8SRandall Stewart 	    (sinfo) &&
6037e2e7c62eSMichael Tuexen 	    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
6038e2e7c62eSMichael Tuexen 	    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO))) {
60399a6142d8SRandall Stewart 		struct sctp_extrcvinfo *s_extra;
60409a6142d8SRandall Stewart 
60419a6142d8SRandall Stewart 		s_extra = (struct sctp_extrcvinfo *)sinfo;
6042b70b526dSMichael Tuexen 		s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
60439a6142d8SRandall Stewart 	}
6044f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6045f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6046f8829a4aSRandall Stewart 	}
6047f8829a4aSRandall Stewart 	if (hold_sblock) {
6048f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6049f8829a4aSRandall Stewart 	}
60507abab911SRobert Watson 	if (sockbuf_lock) {
60517abab911SRobert Watson 		sbunlock(&so->so_rcv);
60527abab911SRobert Watson 	}
605350cec919SRandall Stewart 	if (freecnt_applied) {
6054f8829a4aSRandall Stewart 		/*
6055f8829a4aSRandall Stewart 		 * The lock on the socket buffer protects us so the free
6056f8829a4aSRandall Stewart 		 * code will stop. But since we used the socketbuf lock and
6057f8829a4aSRandall Stewart 		 * the sender uses the tcb_lock to increment, we need to use
6058f8829a4aSRandall Stewart 		 * the atomic add to the refcnt.
6059f8829a4aSRandall Stewart 		 */
606050cec919SRandall Stewart 		if (stcb == NULL) {
6061df6e0cc3SRandall Stewart #ifdef INVARIANTS
606250cec919SRandall Stewart 			panic("stcb for refcnt has gone NULL?");
6063df6e0cc3SRandall Stewart 			goto stage_left;
6064df6e0cc3SRandall Stewart #else
6065df6e0cc3SRandall Stewart 			goto stage_left;
6066df6e0cc3SRandall Stewart #endif
606750cec919SRandall Stewart 		}
6068f8829a4aSRandall Stewart 		/* Save the value back for next time */
6069f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = freed_so_far;
6070cf46caceSMichael Tuexen 		atomic_add_int(&stcb->asoc.refcnt, -1);
6071f8829a4aSRandall Stewart 	}
6072b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
6073f8829a4aSRandall Stewart 		if (stcb) {
6074f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6075f8829a4aSRandall Stewart 			    freed_so_far,
60769a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6077f8829a4aSRandall Stewart 			    stcb->asoc.my_rwnd,
60784e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6079f8829a4aSRandall Stewart 		} else {
6080f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6081f8829a4aSRandall Stewart 			    freed_so_far,
60829a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6083f8829a4aSRandall Stewart 			    0,
60844e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6085f8829a4aSRandall Stewart 		}
608680fefe0aSRandall Stewart 	}
6087df6e0cc3SRandall Stewart stage_left:
6088f8829a4aSRandall Stewart 	if (wakeup_read_socket) {
6089f8829a4aSRandall Stewart 		sctp_sorwakeup(inp, so);
6090f8829a4aSRandall Stewart 	}
6091f8829a4aSRandall Stewart 	return (error);
6092f8829a4aSRandall Stewart }
6093f8829a4aSRandall Stewart 
6094f8829a4aSRandall Stewart 
6095f8829a4aSRandall Stewart #ifdef SCTP_MBUF_LOGGING
6096f8829a4aSRandall Stewart struct mbuf *
6097f8829a4aSRandall Stewart sctp_m_free(struct mbuf *m)
6098f8829a4aSRandall Stewart {
6099b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBUF_LOGGING_ENABLE) {
6100f8829a4aSRandall Stewart 		sctp_log_mb(m, SCTP_MBUF_IFREE);
6101f8829a4aSRandall Stewart 	}
6102f8829a4aSRandall Stewart 	return (m_free(m));
6103f8829a4aSRandall Stewart }
6104f8829a4aSRandall Stewart 
6105f8829a4aSRandall Stewart void
6106f8829a4aSRandall Stewart sctp_m_freem(struct mbuf *mb)
6107f8829a4aSRandall Stewart {
6108f8829a4aSRandall Stewart 	while (mb != NULL)
6109f8829a4aSRandall Stewart 		mb = sctp_m_free(mb);
6110f8829a4aSRandall Stewart }
6111f8829a4aSRandall Stewart 
6112f8829a4aSRandall Stewart #endif
6113f8829a4aSRandall Stewart 
611442551e99SRandall Stewart int
611542551e99SRandall Stewart sctp_dynamic_set_primary(struct sockaddr *sa, uint32_t vrf_id)
611642551e99SRandall Stewart {
611742551e99SRandall Stewart 	/*
611842551e99SRandall Stewart 	 * Given a local address. For all associations that holds the
611942551e99SRandall Stewart 	 * address, request a peer-set-primary.
612042551e99SRandall Stewart 	 */
612142551e99SRandall Stewart 	struct sctp_ifa *ifa;
612242551e99SRandall Stewart 	struct sctp_laddr *wi;
612342551e99SRandall Stewart 
612442551e99SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, 0);
612542551e99SRandall Stewart 	if (ifa == NULL) {
6126c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EADDRNOTAVAIL);
612742551e99SRandall Stewart 		return (EADDRNOTAVAIL);
612842551e99SRandall Stewart 	}
612942551e99SRandall Stewart 	/*
613042551e99SRandall Stewart 	 * Now that we have the ifa we must awaken the iterator with this
613142551e99SRandall Stewart 	 * message.
613242551e99SRandall Stewart 	 */
6133b3f1ea41SRandall Stewart 	wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
613442551e99SRandall Stewart 	if (wi == NULL) {
6135c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
613642551e99SRandall Stewart 		return (ENOMEM);
613742551e99SRandall Stewart 	}
613842551e99SRandall Stewart 	/* Now incr the count and int wi structure */
613942551e99SRandall Stewart 	SCTP_INCR_LADDR_COUNT();
61405ba7f91fSMichael Tuexen 	memset(wi, 0, sizeof(*wi));
6141d61a0ae0SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
614242551e99SRandall Stewart 	wi->ifa = ifa;
614342551e99SRandall Stewart 	wi->action = SCTP_SET_PRIM_ADDR;
614442551e99SRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
614542551e99SRandall Stewart 
614642551e99SRandall Stewart 	/* Now add it to the work queue */
6147f7517433SRandall Stewart 	SCTP_WQ_ADDR_LOCK();
614842551e99SRandall Stewart 	/*
614942551e99SRandall Stewart 	 * Should this really be a tailq? As it is we will process the
615042551e99SRandall Stewart 	 * newest first :-0
615142551e99SRandall Stewart 	 */
6152b3f1ea41SRandall Stewart 	LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
615342551e99SRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
615442551e99SRandall Stewart 	    (struct sctp_inpcb *)NULL,
615542551e99SRandall Stewart 	    (struct sctp_tcb *)NULL,
615642551e99SRandall Stewart 	    (struct sctp_nets *)NULL);
6157*2c62ba73SMichael Tuexen 	SCTP_WQ_ADDR_UNLOCK();
615842551e99SRandall Stewart 	return (0);
615942551e99SRandall Stewart }
616042551e99SRandall Stewart 
616142551e99SRandall Stewart 
6162f8829a4aSRandall Stewart int
616317205eccSRandall Stewart sctp_soreceive(struct socket *so,
616417205eccSRandall Stewart     struct sockaddr **psa,
616517205eccSRandall Stewart     struct uio *uio,
616617205eccSRandall Stewart     struct mbuf **mp0,
616717205eccSRandall Stewart     struct mbuf **controlp,
616817205eccSRandall Stewart     int *flagsp)
6169f8829a4aSRandall Stewart {
6170f8829a4aSRandall Stewart 	int error, fromlen;
6171f8829a4aSRandall Stewart 	uint8_t sockbuf[256];
6172f8829a4aSRandall Stewart 	struct sockaddr *from;
6173f8829a4aSRandall Stewart 	struct sctp_extrcvinfo sinfo;
6174f8829a4aSRandall Stewart 	int filling_sinfo = 1;
6175f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
6176f8829a4aSRandall Stewart 
6177f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
6178f8829a4aSRandall Stewart 	/* pickup the assoc we are reading from */
6179f8829a4aSRandall Stewart 	if (inp == NULL) {
6180c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6181f8829a4aSRandall Stewart 		return (EINVAL);
6182f8829a4aSRandall Stewart 	}
6183e2e7c62eSMichael Tuexen 	if ((sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT) &&
6184e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVRCVINFO) &&
6185e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) ||
6186f8829a4aSRandall Stewart 	    (controlp == NULL)) {
6187f8829a4aSRandall Stewart 		/* user does not want the sndrcv ctl */
6188f8829a4aSRandall Stewart 		filling_sinfo = 0;
6189f8829a4aSRandall Stewart 	}
6190f8829a4aSRandall Stewart 	if (psa) {
6191f8829a4aSRandall Stewart 		from = (struct sockaddr *)sockbuf;
6192f8829a4aSRandall Stewart 		fromlen = sizeof(sockbuf);
6193f8829a4aSRandall Stewart 		from->sa_len = 0;
6194f8829a4aSRandall Stewart 	} else {
6195f8829a4aSRandall Stewart 		from = NULL;
6196f8829a4aSRandall Stewart 		fromlen = 0;
6197f8829a4aSRandall Stewart 	}
6198f8829a4aSRandall Stewart 
6199e432298aSXin LI 	if (filling_sinfo) {
6200e432298aSXin LI 		memset(&sinfo, 0, sizeof(struct sctp_extrcvinfo));
6201e432298aSXin LI 	}
6202f8829a4aSRandall Stewart 	error = sctp_sorecvmsg(so, uio, mp0, from, fromlen, flagsp,
6203f8829a4aSRandall Stewart 	    (struct sctp_sndrcvinfo *)&sinfo, filling_sinfo);
6204e432298aSXin LI 	if (controlp != NULL) {
6205f8829a4aSRandall Stewart 		/* copy back the sinfo in a CMSG format */
6206f8829a4aSRandall Stewart 		if (filling_sinfo)
6207f8829a4aSRandall Stewart 			*controlp = sctp_build_ctl_nchunk(inp,
6208f8829a4aSRandall Stewart 			    (struct sctp_sndrcvinfo *)&sinfo);
6209f8829a4aSRandall Stewart 		else
6210f8829a4aSRandall Stewart 			*controlp = NULL;
6211f8829a4aSRandall Stewart 	}
6212f8829a4aSRandall Stewart 	if (psa) {
6213f8829a4aSRandall Stewart 		/* copy back the address info */
6214f8829a4aSRandall Stewart 		if (from && from->sa_len) {
6215f8829a4aSRandall Stewart 			*psa = sodupsockaddr(from, M_NOWAIT);
6216f8829a4aSRandall Stewart 		} else {
6217f8829a4aSRandall Stewart 			*psa = NULL;
6218f8829a4aSRandall Stewart 		}
6219f8829a4aSRandall Stewart 	}
6220f8829a4aSRandall Stewart 	return (error);
6221f8829a4aSRandall Stewart }
622217205eccSRandall Stewart 
622317205eccSRandall Stewart 
622417205eccSRandall Stewart 
622517205eccSRandall Stewart 
622617205eccSRandall Stewart 
622717205eccSRandall Stewart int
6228d61a0ae0SRandall Stewart sctp_connectx_helper_add(struct sctp_tcb *stcb, struct sockaddr *addr,
6229d61a0ae0SRandall Stewart     int totaddr, int *error)
623017205eccSRandall Stewart {
623117205eccSRandall Stewart 	int added = 0;
623217205eccSRandall Stewart 	int i;
623317205eccSRandall Stewart 	struct sctp_inpcb *inp;
623417205eccSRandall Stewart 	struct sockaddr *sa;
623517205eccSRandall Stewart 	size_t incr = 0;
623692776dfdSMichael Tuexen #ifdef INET
623792776dfdSMichael Tuexen 	struct sockaddr_in *sin;
623892776dfdSMichael Tuexen #endif
623992776dfdSMichael Tuexen #ifdef INET6
624092776dfdSMichael Tuexen 	struct sockaddr_in6 *sin6;
624192776dfdSMichael Tuexen #endif
624292776dfdSMichael Tuexen 
624317205eccSRandall Stewart 	sa = addr;
624417205eccSRandall Stewart 	inp = stcb->sctp_ep;
624517205eccSRandall Stewart 	*error = 0;
624617205eccSRandall Stewart 	for (i = 0; i < totaddr; i++) {
6247ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6248ea5eba11SMichael Tuexen #ifdef INET
6249ea5eba11SMichael Tuexen 		case AF_INET:
625017205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in);
625192776dfdSMichael Tuexen 			sin = (struct sockaddr_in *)sa;
625292776dfdSMichael Tuexen 			if ((sin->sin_addr.s_addr == INADDR_ANY) ||
625392776dfdSMichael Tuexen 			    (sin->sin_addr.s_addr == INADDR_BROADCAST) ||
625492776dfdSMichael Tuexen 			    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
625592776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6256ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6257ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_7);
625892776dfdSMichael Tuexen 				*error = EINVAL;
625992776dfdSMichael Tuexen 				goto out_now;
626092776dfdSMichael Tuexen 			}
62617154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
62627154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
62637154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
626417205eccSRandall Stewart 				/* assoc gone no un-lock */
6265c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6266ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6267ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_8);
626817205eccSRandall Stewart 				*error = ENOBUFS;
626917205eccSRandall Stewart 				goto out_now;
627017205eccSRandall Stewart 			}
627117205eccSRandall Stewart 			added++;
6272ea5eba11SMichael Tuexen 			break;
6273ea5eba11SMichael Tuexen #endif
6274ea5eba11SMichael Tuexen #ifdef INET6
6275ea5eba11SMichael Tuexen 		case AF_INET6:
627617205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in6);
627792776dfdSMichael Tuexen 			sin6 = (struct sockaddr_in6 *)sa;
627892776dfdSMichael Tuexen 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr) ||
627992776dfdSMichael Tuexen 			    IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
628092776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6281ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6282ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_9);
628392776dfdSMichael Tuexen 				*error = EINVAL;
628492776dfdSMichael Tuexen 				goto out_now;
628592776dfdSMichael Tuexen 			}
62867154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
62877154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
62887154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
628917205eccSRandall Stewart 				/* assoc gone no un-lock */
6290c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6291ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6292ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_10);
629317205eccSRandall Stewart 				*error = ENOBUFS;
629417205eccSRandall Stewart 				goto out_now;
629517205eccSRandall Stewart 			}
629617205eccSRandall Stewart 			added++;
6297ea5eba11SMichael Tuexen 			break;
6298ea5eba11SMichael Tuexen #endif
6299ea5eba11SMichael Tuexen 		default:
6300ea5eba11SMichael Tuexen 			break;
630117205eccSRandall Stewart 		}
630217205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
630317205eccSRandall Stewart 	}
630417205eccSRandall Stewart out_now:
630517205eccSRandall Stewart 	return (added);
630617205eccSRandall Stewart }
630717205eccSRandall Stewart 
630817205eccSRandall Stewart struct sctp_tcb *
6309d61a0ae0SRandall Stewart sctp_connectx_helper_find(struct sctp_inpcb *inp, struct sockaddr *addr,
63109a8e3088SMichael Tuexen     unsigned int *totaddr,
63119a8e3088SMichael Tuexen     unsigned int *num_v4, unsigned int *num_v6, int *error,
63129a8e3088SMichael Tuexen     unsigned int limit, int *bad_addr)
631317205eccSRandall Stewart {
631417205eccSRandall Stewart 	struct sockaddr *sa;
631517205eccSRandall Stewart 	struct sctp_tcb *stcb = NULL;
63169a8e3088SMichael Tuexen 	unsigned int incr, at, i;
631717205eccSRandall Stewart 
6318e1949767SMichael Tuexen 	at = 0;
631917205eccSRandall Stewart 	sa = addr;
632017205eccSRandall Stewart 	*error = *num_v6 = *num_v4 = 0;
632117205eccSRandall Stewart 	/* account and validate addresses */
63229a8e3088SMichael Tuexen 	for (i = 0; i < *totaddr; i++) {
6323ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6324ea5eba11SMichael Tuexen #ifdef INET
6325ea5eba11SMichael Tuexen 		case AF_INET:
6326e1949767SMichael Tuexen 			incr = (unsigned int)sizeof(struct sockaddr_in);
6327d61a0ae0SRandall Stewart 			if (sa->sa_len != incr) {
6328c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6329d61a0ae0SRandall Stewart 				*error = EINVAL;
6330d61a0ae0SRandall Stewart 				*bad_addr = 1;
6331d61a0ae0SRandall Stewart 				return (NULL);
6332d61a0ae0SRandall Stewart 			}
63339a8e3088SMichael Tuexen 			(*num_v4) += 1;
6334ea5eba11SMichael Tuexen 			break;
6335ea5eba11SMichael Tuexen #endif
6336ea5eba11SMichael Tuexen #ifdef INET6
6337ea5eba11SMichael Tuexen 		case AF_INET6:
6338ea5eba11SMichael Tuexen 			{
633917205eccSRandall Stewart 				struct sockaddr_in6 *sin6;
634017205eccSRandall Stewart 
634117205eccSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
634217205eccSRandall Stewart 				if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
634317205eccSRandall Stewart 					/* Must be non-mapped for connectx */
6344c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
634517205eccSRandall Stewart 					*error = EINVAL;
6346d61a0ae0SRandall Stewart 					*bad_addr = 1;
634717205eccSRandall Stewart 					return (NULL);
634817205eccSRandall Stewart 				}
6349e1949767SMichael Tuexen 				incr = (unsigned int)sizeof(struct sockaddr_in6);
6350d61a0ae0SRandall Stewart 				if (sa->sa_len != incr) {
6351c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6352d61a0ae0SRandall Stewart 					*error = EINVAL;
6353d61a0ae0SRandall Stewart 					*bad_addr = 1;
6354d61a0ae0SRandall Stewart 					return (NULL);
6355d61a0ae0SRandall Stewart 				}
63569a8e3088SMichael Tuexen 				(*num_v6) += 1;
6357ea5eba11SMichael Tuexen 				break;
6358ea5eba11SMichael Tuexen 			}
6359ea5eba11SMichael Tuexen #endif
6360ea5eba11SMichael Tuexen 		default:
636117205eccSRandall Stewart 			*totaddr = i;
6362884d8c53SMichael Tuexen 			incr = 0;
636317205eccSRandall Stewart 			/* we are done */
636417205eccSRandall Stewart 			break;
636517205eccSRandall Stewart 		}
63669a8e3088SMichael Tuexen 		if (i == *totaddr) {
6367ea5eba11SMichael Tuexen 			break;
6368ea5eba11SMichael Tuexen 		}
6369d61a0ae0SRandall Stewart 		SCTP_INP_INCR_REF(inp);
637017205eccSRandall Stewart 		stcb = sctp_findassociation_ep_addr(&inp, sa, NULL, NULL, NULL);
637117205eccSRandall Stewart 		if (stcb != NULL) {
637217205eccSRandall Stewart 			/* Already have or am bring up an association */
637317205eccSRandall Stewart 			return (stcb);
6374d61a0ae0SRandall Stewart 		} else {
6375d61a0ae0SRandall Stewart 			SCTP_INP_DECR_REF(inp);
637617205eccSRandall Stewart 		}
63779a8e3088SMichael Tuexen 		if ((at + incr) > limit) {
637817205eccSRandall Stewart 			*totaddr = i;
637917205eccSRandall Stewart 			break;
638017205eccSRandall Stewart 		}
638117205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
638217205eccSRandall Stewart 	}
638317205eccSRandall Stewart 	return ((struct sctp_tcb *)NULL);
638417205eccSRandall Stewart }
638535918f85SRandall Stewart 
638635918f85SRandall Stewart /*
638735918f85SRandall Stewart  * sctp_bindx(ADD) for one address.
638835918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
638935918f85SRandall Stewart  */
639035918f85SRandall Stewart void
639135918f85SRandall Stewart sctp_bindx_add_address(struct socket *so, struct sctp_inpcb *inp,
639235918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
639335918f85SRandall Stewart     uint32_t vrf_id, int *error, void *p)
639435918f85SRandall Stewart {
639535918f85SRandall Stewart 	struct sockaddr *addr_touse;
6396d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
639735918f85SRandall Stewart 	struct sockaddr_in sin;
63985e2c2d87SRandall Stewart #endif
63995e2c2d87SRandall Stewart 
640035918f85SRandall Stewart 	/* see if we're bound all already! */
640135918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6402c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
640335918f85SRandall Stewart 		*error = EINVAL;
640435918f85SRandall Stewart 		return;
640535918f85SRandall Stewart 	}
640635918f85SRandall Stewart 	addr_touse = sa;
6407ea5eba11SMichael Tuexen #ifdef INET6
640835918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6409d59107f7SMichael Tuexen #ifdef INET
641035918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
641135918f85SRandall Stewart 
6412d59107f7SMichael Tuexen #endif
641335918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6414c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
641535918f85SRandall Stewart 			*error = EINVAL;
641635918f85SRandall Stewart 			return;
641735918f85SRandall Stewart 		}
6418db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6419db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6420c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6421db4fd95bSRandall Stewart 			*error = EINVAL;
6422db4fd95bSRandall Stewart 			return;
6423db4fd95bSRandall Stewart 		}
6424d59107f7SMichael Tuexen #ifdef INET
642535918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
642635918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6427db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6428db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6429db4fd95bSRandall Stewart 				/* can't bind v4-mapped on PF_INET sockets */
6430c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6431db4fd95bSRandall Stewart 				*error = EINVAL;
6432db4fd95bSRandall Stewart 				return;
6433db4fd95bSRandall Stewart 			}
643435918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
643535918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
643635918f85SRandall Stewart 		}
6437d59107f7SMichael Tuexen #endif
643835918f85SRandall Stewart 	}
643935918f85SRandall Stewart #endif
6440ea5eba11SMichael Tuexen #ifdef INET
644135918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
644235918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6443c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
644435918f85SRandall Stewart 			*error = EINVAL;
644535918f85SRandall Stewart 			return;
644635918f85SRandall Stewart 		}
6447db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6448db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6449db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6450c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6451db4fd95bSRandall Stewart 			*error = EINVAL;
6452db4fd95bSRandall Stewart 			return;
6453db4fd95bSRandall Stewart 		}
645435918f85SRandall Stewart 	}
6455ea5eba11SMichael Tuexen #endif
645635918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
645735918f85SRandall Stewart 		if (p == NULL) {
645835918f85SRandall Stewart 			/* Can't get proc for Net/Open BSD */
6459c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
646035918f85SRandall Stewart 			*error = EINVAL;
646135918f85SRandall Stewart 			return;
646235918f85SRandall Stewart 		}
64631b649582SRandall Stewart 		*error = sctp_inpcb_bind(so, addr_touse, NULL, p);
646435918f85SRandall Stewart 		return;
646535918f85SRandall Stewart 	}
646635918f85SRandall Stewart 	/*
646735918f85SRandall Stewart 	 * No locks required here since bind and mgmt_ep_sa all do their own
646835918f85SRandall Stewart 	 * locking. If we do something for the FIX: below we may need to
646935918f85SRandall Stewart 	 * lock in that case.
647035918f85SRandall Stewart 	 */
647135918f85SRandall Stewart 	if (assoc_id == 0) {
647235918f85SRandall Stewart 		/* add the address */
647335918f85SRandall Stewart 		struct sctp_inpcb *lep;
647497c76f10SRandall Stewart 		struct sockaddr_in *lsin = (struct sockaddr_in *)addr_touse;
647535918f85SRandall Stewart 
647697c76f10SRandall Stewart 		/* validate the incoming port */
647797c76f10SRandall Stewart 		if ((lsin->sin_port != 0) &&
647897c76f10SRandall Stewart 		    (lsin->sin_port != inp->sctp_lport)) {
6479c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
648097c76f10SRandall Stewart 			*error = EINVAL;
648197c76f10SRandall Stewart 			return;
648297c76f10SRandall Stewart 		} else {
648397c76f10SRandall Stewart 			/* user specified 0 port, set it to existing port */
648497c76f10SRandall Stewart 			lsin->sin_port = inp->sctp_lport;
648597c76f10SRandall Stewart 		}
648697c76f10SRandall Stewart 
648735918f85SRandall Stewart 		lep = sctp_pcb_findep(addr_touse, 1, 0, vrf_id);
648835918f85SRandall Stewart 		if (lep != NULL) {
648935918f85SRandall Stewart 			/*
649035918f85SRandall Stewart 			 * We must decrement the refcount since we have the
649135918f85SRandall Stewart 			 * ep already and are binding. No remove going on
649235918f85SRandall Stewart 			 * here.
649335918f85SRandall Stewart 			 */
64946d9e8f2bSRandall Stewart 			SCTP_INP_DECR_REF(lep);
649535918f85SRandall Stewart 		}
649635918f85SRandall Stewart 		if (lep == inp) {
649735918f85SRandall Stewart 			/* already bound to it.. ok */
649835918f85SRandall Stewart 			return;
649935918f85SRandall Stewart 		} else if (lep == NULL) {
650035918f85SRandall Stewart 			((struct sockaddr_in *)addr_touse)->sin_port = 0;
650135918f85SRandall Stewart 			*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
650235918f85SRandall Stewart 			    SCTP_ADD_IP_ADDRESS,
650380fefe0aSRandall Stewart 			    vrf_id, NULL);
650435918f85SRandall Stewart 		} else {
650535918f85SRandall Stewart 			*error = EADDRINUSE;
650635918f85SRandall Stewart 		}
650735918f85SRandall Stewart 		if (*error)
650835918f85SRandall Stewart 			return;
650935918f85SRandall Stewart 	} else {
651035918f85SRandall Stewart 		/*
651135918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
651235918f85SRandall Stewart 		 */
651335918f85SRandall Stewart 	}
651435918f85SRandall Stewart }
651535918f85SRandall Stewart 
651635918f85SRandall Stewart /*
651735918f85SRandall Stewart  * sctp_bindx(DELETE) for one address.
651835918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
651935918f85SRandall Stewart  */
652035918f85SRandall Stewart void
65217215cc1bSMichael Tuexen sctp_bindx_delete_address(struct sctp_inpcb *inp,
652235918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
652335918f85SRandall Stewart     uint32_t vrf_id, int *error)
652435918f85SRandall Stewart {
652535918f85SRandall Stewart 	struct sockaddr *addr_touse;
6526d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
652735918f85SRandall Stewart 	struct sockaddr_in sin;
65285e2c2d87SRandall Stewart #endif
65295e2c2d87SRandall Stewart 
653035918f85SRandall Stewart 	/* see if we're bound all already! */
653135918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6532c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
653335918f85SRandall Stewart 		*error = EINVAL;
653435918f85SRandall Stewart 		return;
653535918f85SRandall Stewart 	}
653635918f85SRandall Stewart 	addr_touse = sa;
6537e0e00a4dSMichael Tuexen #ifdef INET6
653835918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6539d59107f7SMichael Tuexen #ifdef INET
654035918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
6541d59107f7SMichael Tuexen #endif
6542d59107f7SMichael Tuexen 
654335918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6544c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
654535918f85SRandall Stewart 			*error = EINVAL;
654635918f85SRandall Stewart 			return;
654735918f85SRandall Stewart 		}
6548db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6549db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6550c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6551db4fd95bSRandall Stewart 			*error = EINVAL;
6552db4fd95bSRandall Stewart 			return;
6553db4fd95bSRandall Stewart 		}
6554d59107f7SMichael Tuexen #ifdef INET
655535918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
655635918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6557db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6558db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6559db4fd95bSRandall Stewart 				/* can't bind mapped-v4 on PF_INET sockets */
6560c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6561db4fd95bSRandall Stewart 				*error = EINVAL;
6562db4fd95bSRandall Stewart 				return;
6563db4fd95bSRandall Stewart 			}
656435918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
656535918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
656635918f85SRandall Stewart 		}
6567d59107f7SMichael Tuexen #endif
656835918f85SRandall Stewart 	}
656935918f85SRandall Stewart #endif
6570ea5eba11SMichael Tuexen #ifdef INET
657135918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
657235918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6573c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
657435918f85SRandall Stewart 			*error = EINVAL;
657535918f85SRandall Stewart 			return;
657635918f85SRandall Stewart 		}
6577db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6578db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6579db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6580c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6581db4fd95bSRandall Stewart 			*error = EINVAL;
6582db4fd95bSRandall Stewart 			return;
6583db4fd95bSRandall Stewart 		}
658435918f85SRandall Stewart 	}
6585ea5eba11SMichael Tuexen #endif
658635918f85SRandall Stewart 	/*
658735918f85SRandall Stewart 	 * No lock required mgmt_ep_sa does its own locking. If the FIX:
658835918f85SRandall Stewart 	 * below is ever changed we may need to lock before calling
658935918f85SRandall Stewart 	 * association level binding.
659035918f85SRandall Stewart 	 */
659135918f85SRandall Stewart 	if (assoc_id == 0) {
659235918f85SRandall Stewart 		/* delete the address */
659335918f85SRandall Stewart 		*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
659435918f85SRandall Stewart 		    SCTP_DEL_IP_ADDRESS,
659580fefe0aSRandall Stewart 		    vrf_id, NULL);
659635918f85SRandall Stewart 	} else {
659735918f85SRandall Stewart 		/*
659835918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
659935918f85SRandall Stewart 		 */
660035918f85SRandall Stewart 	}
660135918f85SRandall Stewart }
66021b649582SRandall Stewart 
66031b649582SRandall Stewart /*
66041b649582SRandall Stewart  * returns the valid local address count for an assoc, taking into account
66051b649582SRandall Stewart  * all scoping rules
66061b649582SRandall Stewart  */
66071b649582SRandall Stewart int
66081b649582SRandall Stewart sctp_local_addr_count(struct sctp_tcb *stcb)
66091b649582SRandall Stewart {
6610b54ddf22SMichael Tuexen 	int loopback_scope;
6611b54ddf22SMichael Tuexen #if defined(INET)
6612b54ddf22SMichael Tuexen 	int ipv4_local_scope, ipv4_addr_legal;
6613b54ddf22SMichael Tuexen #endif
6614b54ddf22SMichael Tuexen #if defined (INET6)
6615b54ddf22SMichael Tuexen 	int local_scope, site_scope, ipv6_addr_legal;
6616b54ddf22SMichael Tuexen #endif
66171b649582SRandall Stewart 	struct sctp_vrf *vrf;
66181b649582SRandall Stewart 	struct sctp_ifn *sctp_ifn;
66191b649582SRandall Stewart 	struct sctp_ifa *sctp_ifa;
66201b649582SRandall Stewart 	int count = 0;
66211b649582SRandall Stewart 
66221b649582SRandall Stewart 	/* Turn on all the appropriate scopes */
6623a1cb341bSMichael Tuexen 	loopback_scope = stcb->asoc.scope.loopback_scope;
6624b54ddf22SMichael Tuexen #if defined(INET)
6625a1cb341bSMichael Tuexen 	ipv4_local_scope = stcb->asoc.scope.ipv4_local_scope;
6626b54ddf22SMichael Tuexen 	ipv4_addr_legal = stcb->asoc.scope.ipv4_addr_legal;
6627b54ddf22SMichael Tuexen #endif
6628b54ddf22SMichael Tuexen #if defined(INET6)
6629a1cb341bSMichael Tuexen 	local_scope = stcb->asoc.scope.local_scope;
6630a1cb341bSMichael Tuexen 	site_scope = stcb->asoc.scope.site_scope;
6631a1cb341bSMichael Tuexen 	ipv6_addr_legal = stcb->asoc.scope.ipv6_addr_legal;
6632b54ddf22SMichael Tuexen #endif
6633c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
66341b649582SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
66351b649582SRandall Stewart 	if (vrf == NULL) {
66361b649582SRandall Stewart 		/* no vrf, no addresses */
6637c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
66381b649582SRandall Stewart 		return (0);
66391b649582SRandall Stewart 	}
66401b649582SRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
66411b649582SRandall Stewart 		/*
66421b649582SRandall Stewart 		 * bound all case: go through all ifns on the vrf
66431b649582SRandall Stewart 		 */
66441b649582SRandall Stewart 		LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
66451b649582SRandall Stewart 			if ((loopback_scope == 0) &&
66461b649582SRandall Stewart 			    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
66471b649582SRandall Stewart 				continue;
66481b649582SRandall Stewart 			}
66491b649582SRandall Stewart 			LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
66501b649582SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa))
66511b649582SRandall Stewart 					continue;
66525e2c2d87SRandall Stewart 				switch (sctp_ifa->address.sa.sa_family) {
6653ea5eba11SMichael Tuexen #ifdef INET
66545e2c2d87SRandall Stewart 				case AF_INET:
66555e2c2d87SRandall Stewart 					if (ipv4_addr_legal) {
66561b649582SRandall Stewart 						struct sockaddr_in *sin;
66571b649582SRandall Stewart 
665824aaac8dSMichael Tuexen 						sin = &sctp_ifa->address.sin;
66591b649582SRandall Stewart 						if (sin->sin_addr.s_addr == 0) {
6660b7b84c0eSMichael Tuexen 							/*
6661b7b84c0eSMichael Tuexen 							 * skip unspecified
6662b7b84c0eSMichael Tuexen 							 * addrs
6663b7b84c0eSMichael Tuexen 							 */
66641b649582SRandall Stewart 							continue;
66651b649582SRandall Stewart 						}
66666ba22f19SMichael Tuexen 						if (prison_check_ip4(stcb->sctp_ep->ip_inp.inp.inp_cred,
66676ba22f19SMichael Tuexen 						    &sin->sin_addr) != 0) {
66686ba22f19SMichael Tuexen 							continue;
66696ba22f19SMichael Tuexen 						}
66701b649582SRandall Stewart 						if ((ipv4_local_scope == 0) &&
66711b649582SRandall Stewart 						    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
66721b649582SRandall Stewart 							continue;
66731b649582SRandall Stewart 						}
66741b649582SRandall Stewart 						/* count this one */
66751b649582SRandall Stewart 						count++;
66765e2c2d87SRandall Stewart 					} else {
66775e2c2d87SRandall Stewart 						continue;
66785e2c2d87SRandall Stewart 					}
66795e2c2d87SRandall Stewart 					break;
6680ea5eba11SMichael Tuexen #endif
66815e2c2d87SRandall Stewart #ifdef INET6
66825e2c2d87SRandall Stewart 				case AF_INET6:
66835e2c2d87SRandall Stewart 					if (ipv6_addr_legal) {
66841b649582SRandall Stewart 						struct sockaddr_in6 *sin6;
66851b649582SRandall Stewart 
668624aaac8dSMichael Tuexen 						sin6 = &sctp_ifa->address.sin6;
66871b649582SRandall Stewart 						if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
66881b649582SRandall Stewart 							continue;
66891b649582SRandall Stewart 						}
66906ba22f19SMichael Tuexen 						if (prison_check_ip6(stcb->sctp_ep->ip_inp.inp.inp_cred,
66916ba22f19SMichael Tuexen 						    &sin6->sin6_addr) != 0) {
66926ba22f19SMichael Tuexen 							continue;
66936ba22f19SMichael Tuexen 						}
66941b649582SRandall Stewart 						if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
66951b649582SRandall Stewart 							if (local_scope == 0)
66961b649582SRandall Stewart 								continue;
66971b649582SRandall Stewart 							if (sin6->sin6_scope_id == 0) {
66981b649582SRandall Stewart 								if (sa6_recoverscope(sin6) != 0)
66991b649582SRandall Stewart 									/*
67005e2c2d87SRandall Stewart 									 *
67015e2c2d87SRandall Stewart 									 * bad
67025b495f17SMichael Tuexen 									 * link
67035e2c2d87SRandall Stewart 									 *
67045b495f17SMichael Tuexen 									 * local
67055e2c2d87SRandall Stewart 									 *
67065b495f17SMichael Tuexen 									 * address
67075b495f17SMichael Tuexen 									 */
67081b649582SRandall Stewart 									continue;
67091b649582SRandall Stewart 							}
67101b649582SRandall Stewart 						}
67111b649582SRandall Stewart 						if ((site_scope == 0) &&
67121b649582SRandall Stewart 						    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
67131b649582SRandall Stewart 							continue;
67141b649582SRandall Stewart 						}
67151b649582SRandall Stewart 						/* count this one */
67161b649582SRandall Stewart 						count++;
67171b649582SRandall Stewart 					}
67185e2c2d87SRandall Stewart 					break;
67195e2c2d87SRandall Stewart #endif
67205e2c2d87SRandall Stewart 				default:
67215e2c2d87SRandall Stewart 					/* TSNH */
67225e2c2d87SRandall Stewart 					break;
67235e2c2d87SRandall Stewart 				}
67241b649582SRandall Stewart 			}
67251b649582SRandall Stewart 		}
67261b649582SRandall Stewart 	} else {
67271b649582SRandall Stewart 		/*
67281b649582SRandall Stewart 		 * subset bound case
67291b649582SRandall Stewart 		 */
67301b649582SRandall Stewart 		struct sctp_laddr *laddr;
67311b649582SRandall Stewart 
67321b649582SRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list,
67331b649582SRandall Stewart 		    sctp_nxt_addr) {
67341b649582SRandall Stewart 			if (sctp_is_addr_restricted(stcb, laddr->ifa)) {
67351b649582SRandall Stewart 				continue;
67361b649582SRandall Stewart 			}
67371b649582SRandall Stewart 			/* count this one */
67381b649582SRandall Stewart 			count++;
67391b649582SRandall Stewart 		}
67401b649582SRandall Stewart 	}
6741c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
67421b649582SRandall Stewart 	return (count);
67431b649582SRandall Stewart }
6744c4739e2fSRandall Stewart 
6745c4739e2fSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF)
6746c4739e2fSRandall Stewart 
6747c4739e2fSRandall Stewart void
6748b27a6b7dSRandall Stewart sctp_log_trace(uint32_t subsys, const char *str SCTP_UNUSED, uint32_t a, uint32_t b, uint32_t c, uint32_t d, uint32_t e, uint32_t f)
6749c4739e2fSRandall Stewart {
6750b27a6b7dSRandall Stewart 	uint32_t saveindex, newindex;
6751c4739e2fSRandall Stewart 
6752c4739e2fSRandall Stewart 	do {
6753b3f1ea41SRandall Stewart 		saveindex = SCTP_BASE_SYSCTL(sctp_log).index;
6754c4739e2fSRandall Stewart 		if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6755c4739e2fSRandall Stewart 			newindex = 1;
6756c4739e2fSRandall Stewart 		} else {
6757c4739e2fSRandall Stewart 			newindex = saveindex + 1;
6758c4739e2fSRandall Stewart 		}
6759b3f1ea41SRandall Stewart 	} while (atomic_cmpset_int(&SCTP_BASE_SYSCTL(sctp_log).index, saveindex, newindex) == 0);
6760c4739e2fSRandall Stewart 	if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6761c4739e2fSRandall Stewart 		saveindex = 0;
6762c4739e2fSRandall Stewart 	}
6763b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].timestamp = SCTP_GET_CYCLECOUNT;
6764b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].subsys = subsys;
6765b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[0] = a;
6766b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[1] = b;
6767b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[2] = c;
6768b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[3] = d;
6769b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[4] = e;
6770b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[5] = f;
6771c4739e2fSRandall Stewart }
6772c4739e2fSRandall Stewart 
6773c4739e2fSRandall Stewart #endif
6774a99b6783SRandall Stewart static void
67757cca1775SRandall Stewart sctp_recv_udp_tunneled_packet(struct mbuf *m, int off, struct inpcb *inp,
677681d3ec17SBryan Venteicher     const struct sockaddr *sa SCTP_UNUSED, void *ctx SCTP_UNUSED)
6777a99b6783SRandall Stewart {
6778a99b6783SRandall Stewart 	struct ip *iph;
67793a51a264SMichael Tuexen #ifdef INET6
67803a51a264SMichael Tuexen 	struct ip6_hdr *ip6;
67813a51a264SMichael Tuexen #endif
6782a99b6783SRandall Stewart 	struct mbuf *sp, *last;
6783a99b6783SRandall Stewart 	struct udphdr *uhdr;
6784285052f0SMichael Tuexen 	uint16_t port;
6785a99b6783SRandall Stewart 
6786a99b6783SRandall Stewart 	if ((m->m_flags & M_PKTHDR) == 0) {
6787a99b6783SRandall Stewart 		/* Can't handle one that is not a pkt hdr */
6788a99b6783SRandall Stewart 		goto out;
6789a99b6783SRandall Stewart 	}
6790285052f0SMichael Tuexen 	/* Pull the src port */
6791a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6792a99b6783SRandall Stewart 	uhdr = (struct udphdr *)((caddr_t)iph + off);
6793a99b6783SRandall Stewart 	port = uhdr->uh_sport;
6794285052f0SMichael Tuexen 	/*
6795285052f0SMichael Tuexen 	 * Split out the mbuf chain. Leave the IP header in m, place the
6796285052f0SMichael Tuexen 	 * rest in the sp.
6797285052f0SMichael Tuexen 	 */
6798eb1b1807SGleb Smirnoff 	sp = m_split(m, off, M_NOWAIT);
6799a99b6783SRandall Stewart 	if (sp == NULL) {
6800a99b6783SRandall Stewart 		/* Gak, drop packet, we can't do a split */
6801a99b6783SRandall Stewart 		goto out;
6802a99b6783SRandall Stewart 	}
6803285052f0SMichael Tuexen 	if (sp->m_pkthdr.len < sizeof(struct udphdr) + sizeof(struct sctphdr)) {
6804285052f0SMichael Tuexen 		/* Gak, packet can't have an SCTP header in it - too small */
6805a99b6783SRandall Stewart 		m_freem(sp);
6806a99b6783SRandall Stewart 		goto out;
6807a99b6783SRandall Stewart 	}
6808285052f0SMichael Tuexen 	/* Now pull up the UDP header and SCTP header together */
6809285052f0SMichael Tuexen 	sp = m_pullup(sp, sizeof(struct udphdr) + sizeof(struct sctphdr));
6810a99b6783SRandall Stewart 	if (sp == NULL) {
6811a99b6783SRandall Stewart 		/* Gak pullup failed */
6812a99b6783SRandall Stewart 		goto out;
6813a99b6783SRandall Stewart 	}
6814285052f0SMichael Tuexen 	/* Trim out the UDP header */
6815a99b6783SRandall Stewart 	m_adj(sp, sizeof(struct udphdr));
6816a99b6783SRandall Stewart 
6817a99b6783SRandall Stewart 	/* Now reconstruct the mbuf chain */
6818285052f0SMichael Tuexen 	for (last = m; last->m_next; last = last->m_next);
6819a99b6783SRandall Stewart 	last->m_next = sp;
6820a99b6783SRandall Stewart 	m->m_pkthdr.len += sp->m_pkthdr.len;
682152f175beSMichael Tuexen 	/*
682252f175beSMichael Tuexen 	 * The CSUM_DATA_VALID flags indicates that the HW checked the UDP
682352f175beSMichael Tuexen 	 * checksum and it was valid. Since CSUM_DATA_VALID ==
682452f175beSMichael Tuexen 	 * CSUM_SCTP_VALID this would imply that the HW also verified the
682552f175beSMichael Tuexen 	 * SCTP checksum. Therefore, clear the bit.
682652f175beSMichael Tuexen 	 */
682752f175beSMichael Tuexen 	SCTPDBG(SCTP_DEBUG_CRCOFFLOAD,
682852f175beSMichael Tuexen 	    "sctp_recv_udp_tunneled_packet(): Packet of length %d received on %s with csum_flags 0x%b.\n",
682952f175beSMichael Tuexen 	    m->m_pkthdr.len,
683052f175beSMichael Tuexen 	    if_name(m->m_pkthdr.rcvif),
683152f175beSMichael Tuexen 	    (int)m->m_pkthdr.csum_flags, CSUM_BITS);
683252f175beSMichael Tuexen 	m->m_pkthdr.csum_flags &= ~CSUM_DATA_VALID;
6833a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6834a99b6783SRandall Stewart 	switch (iph->ip_v) {
6835e6194c2eSMichael Tuexen #ifdef INET
6836a99b6783SRandall Stewart 	case IPVERSION:
683709c1c856SMichael Tuexen 		iph->ip_len = htons(ntohs(iph->ip_len) - sizeof(struct udphdr));
6838a99b6783SRandall Stewart 		sctp_input_with_port(m, off, port);
6839a99b6783SRandall Stewart 		break;
6840e6194c2eSMichael Tuexen #endif
6841a99b6783SRandall Stewart #ifdef INET6
6842a99b6783SRandall Stewart 	case IPV6_VERSION >> 4:
68433a51a264SMichael Tuexen 		ip6 = mtod(m, struct ip6_hdr *);
68443a51a264SMichael Tuexen 		ip6->ip6_plen = htons(ntohs(ip6->ip6_plen) - sizeof(struct udphdr));
68453a51a264SMichael Tuexen 		sctp6_input_with_port(&m, &off, port);
6846a99b6783SRandall Stewart 		break;
6847a99b6783SRandall Stewart #endif
6848a99b6783SRandall Stewart 	default:
6849285052f0SMichael Tuexen 		goto out;
6850a99b6783SRandall Stewart 		break;
6851a99b6783SRandall Stewart 	}
6852a99b6783SRandall Stewart 	return;
6853a99b6783SRandall Stewart out:
6854a99b6783SRandall Stewart 	m_freem(m);
6855a99b6783SRandall Stewart }
6856c54a18d2SRandall Stewart 
6857fd7af143SMichael Tuexen #ifdef INET
6858fd7af143SMichael Tuexen static void
6859fd7af143SMichael Tuexen sctp_recv_icmp_tunneled_packet(int cmd, struct sockaddr *sa, void *vip, void *ctx SCTP_UNUSED)
6860fd7af143SMichael Tuexen {
6861fd7af143SMichael Tuexen 	struct ip *outer_ip, *inner_ip;
6862fd7af143SMichael Tuexen 	struct sctphdr *sh;
6863fd7af143SMichael Tuexen 	struct icmp *icmp;
6864fd7af143SMichael Tuexen 	struct udphdr *udp;
6865fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
6866fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
6867fd7af143SMichael Tuexen 	struct sctp_nets *net;
6868fd7af143SMichael Tuexen 	struct sctp_init_chunk *ch;
6869fd7af143SMichael Tuexen 	struct sockaddr_in src, dst;
6870fd7af143SMichael Tuexen 	uint8_t type, code;
6871fd7af143SMichael Tuexen 
6872fd7af143SMichael Tuexen 	inner_ip = (struct ip *)vip;
6873fd7af143SMichael Tuexen 	icmp = (struct icmp *)((caddr_t)inner_ip -
6874fd7af143SMichael Tuexen 	    (sizeof(struct icmp) - sizeof(struct ip)));
6875fd7af143SMichael Tuexen 	outer_ip = (struct ip *)((caddr_t)icmp - sizeof(struct ip));
6876fd7af143SMichael Tuexen 	if (ntohs(outer_ip->ip_len) <
6877fd7af143SMichael Tuexen 	    sizeof(struct ip) + 8 + (inner_ip->ip_hl << 2) + sizeof(struct udphdr) + 8) {
6878fd7af143SMichael Tuexen 		return;
6879fd7af143SMichael Tuexen 	}
6880fd7af143SMichael Tuexen 	udp = (struct udphdr *)((caddr_t)inner_ip + (inner_ip->ip_hl << 2));
6881fd7af143SMichael Tuexen 	sh = (struct sctphdr *)(udp + 1);
6882fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in));
6883fd7af143SMichael Tuexen 	src.sin_family = AF_INET;
6884fd7af143SMichael Tuexen 	src.sin_len = sizeof(struct sockaddr_in);
6885fd7af143SMichael Tuexen 	src.sin_port = sh->src_port;
6886fd7af143SMichael Tuexen 	src.sin_addr = inner_ip->ip_src;
6887fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in));
6888fd7af143SMichael Tuexen 	dst.sin_family = AF_INET;
6889fd7af143SMichael Tuexen 	dst.sin_len = sizeof(struct sockaddr_in);
6890fd7af143SMichael Tuexen 	dst.sin_port = sh->dest_port;
6891fd7af143SMichael Tuexen 	dst.sin_addr = inner_ip->ip_dst;
6892fd7af143SMichael Tuexen 	/*
6893fd7af143SMichael Tuexen 	 * 'dst' holds the dest of the packet that failed to be sent. 'src'
6894fd7af143SMichael Tuexen 	 * holds our local endpoint address. Thus we reverse the dst and the
6895fd7af143SMichael Tuexen 	 * src in the lookup.
6896fd7af143SMichael Tuexen 	 */
6897fd7af143SMichael Tuexen 	inp = NULL;
6898fd7af143SMichael Tuexen 	net = NULL;
6899fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
6900fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
6901fd7af143SMichael Tuexen 	    &inp, &net, 1,
6902fd7af143SMichael Tuexen 	    SCTP_DEFAULT_VRFID);
6903fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
6904fd7af143SMichael Tuexen 	    (net != NULL) &&
690555b8cd93SMichael Tuexen 	    (inp != NULL)) {
6906fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
6907fd7af143SMichael Tuexen 		if ((udp->uh_dport != net->port) ||
6908fd7af143SMichael Tuexen 		    (udp->uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
6909fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
6910fd7af143SMichael Tuexen 			return;
6911fd7af143SMichael Tuexen 		}
6912fd7af143SMichael Tuexen 		/* Check the verification tag */
6913fd7af143SMichael Tuexen 		if (ntohl(sh->v_tag) != 0) {
6914fd7af143SMichael Tuexen 			/*
6915fd7af143SMichael Tuexen 			 * This must be the verification tag used for
6916fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
6917fd7af143SMichael Tuexen 			 * reflecting the verification tag.
6918fd7af143SMichael Tuexen 			 */
6919fd7af143SMichael Tuexen 			if (ntohl(sh->v_tag) != stcb->asoc.peer_vtag) {
6920fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
6921fd7af143SMichael Tuexen 				return;
6922fd7af143SMichael Tuexen 			}
6923fd7af143SMichael Tuexen 		} else {
6924fd7af143SMichael Tuexen 			if (ntohs(outer_ip->ip_len) >=
6925fd7af143SMichael Tuexen 			    sizeof(struct ip) +
6926fd7af143SMichael Tuexen 			    8 + (inner_ip->ip_hl << 2) + 8 + 20) {
6927fd7af143SMichael Tuexen 				/*
6928fd7af143SMichael Tuexen 				 * In this case we can check if we got an
6929fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
6930fd7af143SMichael Tuexen 				 * matches.
6931fd7af143SMichael Tuexen 				 */
6932fd7af143SMichael Tuexen 				ch = (struct sctp_init_chunk *)(sh + 1);
6933fd7af143SMichael Tuexen 				if ((ch->ch.chunk_type != SCTP_INITIATION) ||
6934fd7af143SMichael Tuexen 				    (ntohl(ch->init.initiate_tag) != stcb->asoc.my_vtag)) {
6935fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
6936fd7af143SMichael Tuexen 					return;
6937fd7af143SMichael Tuexen 				}
6938fd7af143SMichael Tuexen 			} else {
6939fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
6940fd7af143SMichael Tuexen 				return;
6941fd7af143SMichael Tuexen 			}
6942fd7af143SMichael Tuexen 		}
6943fd7af143SMichael Tuexen 		type = icmp->icmp_type;
6944fd7af143SMichael Tuexen 		code = icmp->icmp_code;
69453c3f9e2aSMichael Tuexen 		if ((type == ICMP_UNREACH) &&
69463c3f9e2aSMichael Tuexen 		    (code == ICMP_UNREACH_PORT)) {
6947fd7af143SMichael Tuexen 			code = ICMP_UNREACH_PROTOCOL;
6948fd7af143SMichael Tuexen 		}
6949fd7af143SMichael Tuexen 		sctp_notify(inp, stcb, net, type, code,
6950fd7af143SMichael Tuexen 		    ntohs(inner_ip->ip_len),
69516ebfa5eeSMichael Tuexen 		    (uint32_t)ntohs(icmp->icmp_nextmtu));
6952fd7af143SMichael Tuexen 	} else {
6953fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
6954fd7af143SMichael Tuexen 			/* reduce ref-count */
6955fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
6956fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
6957fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
6958fd7af143SMichael Tuexen 		}
6959fd7af143SMichael Tuexen 		if (stcb) {
6960fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
6961fd7af143SMichael Tuexen 		}
6962fd7af143SMichael Tuexen 	}
6963fd7af143SMichael Tuexen 	return;
6964fd7af143SMichael Tuexen }
6965fd7af143SMichael Tuexen #endif
6966fd7af143SMichael Tuexen 
6967fd7af143SMichael Tuexen #ifdef INET6
6968fd7af143SMichael Tuexen static void
6969fd7af143SMichael Tuexen sctp_recv_icmp6_tunneled_packet(int cmd, struct sockaddr *sa, void *d, void *ctx SCTP_UNUSED)
6970fd7af143SMichael Tuexen {
6971fd7af143SMichael Tuexen 	struct ip6ctlparam *ip6cp;
6972fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
6973fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
6974fd7af143SMichael Tuexen 	struct sctp_nets *net;
6975fd7af143SMichael Tuexen 	struct sctphdr sh;
6976fd7af143SMichael Tuexen 	struct udphdr udp;
6977fd7af143SMichael Tuexen 	struct sockaddr_in6 src, dst;
6978fd7af143SMichael Tuexen 	uint8_t type, code;
6979fd7af143SMichael Tuexen 
6980fd7af143SMichael Tuexen 	ip6cp = (struct ip6ctlparam *)d;
6981fd7af143SMichael Tuexen 	/*
6982fd7af143SMichael Tuexen 	 * XXX: We assume that when IPV6 is non NULL, M and OFF are valid.
6983fd7af143SMichael Tuexen 	 */
6984fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m == NULL) {
6985fd7af143SMichael Tuexen 		return;
6986fd7af143SMichael Tuexen 	}
6987fd7af143SMichael Tuexen 	/*
6988fd7af143SMichael Tuexen 	 * Check if we can safely examine the ports and the verification tag
6989fd7af143SMichael Tuexen 	 * of the SCTP common header.
6990fd7af143SMichael Tuexen 	 */
6991fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m->m_pkthdr.len <
6992fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr) + offsetof(struct sctphdr, checksum)) {
6993fd7af143SMichael Tuexen 		return;
6994fd7af143SMichael Tuexen 	}
6995fd7af143SMichael Tuexen 	/* Copy out the UDP header. */
6996fd7af143SMichael Tuexen 	memset(&udp, 0, sizeof(struct udphdr));
6997fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
6998fd7af143SMichael Tuexen 	    ip6cp->ip6c_off,
6999fd7af143SMichael Tuexen 	    sizeof(struct udphdr),
7000fd7af143SMichael Tuexen 	    (caddr_t)&udp);
7001fd7af143SMichael Tuexen 	/* Copy out the port numbers and the verification tag. */
7002fd7af143SMichael Tuexen 	memset(&sh, 0, sizeof(struct sctphdr));
7003fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
7004fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr),
7005fd7af143SMichael Tuexen 	    sizeof(uint16_t) + sizeof(uint16_t) + sizeof(uint32_t),
7006fd7af143SMichael Tuexen 	    (caddr_t)&sh);
7007fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in6));
7008fd7af143SMichael Tuexen 	src.sin6_family = AF_INET6;
7009fd7af143SMichael Tuexen 	src.sin6_len = sizeof(struct sockaddr_in6);
7010fd7af143SMichael Tuexen 	src.sin6_port = sh.src_port;
7011fd7af143SMichael Tuexen 	src.sin6_addr = ip6cp->ip6c_ip6->ip6_src;
7012fd7af143SMichael Tuexen 	if (in6_setscope(&src.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7013fd7af143SMichael Tuexen 		return;
7014fd7af143SMichael Tuexen 	}
7015fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in6));
7016fd7af143SMichael Tuexen 	dst.sin6_family = AF_INET6;
7017fd7af143SMichael Tuexen 	dst.sin6_len = sizeof(struct sockaddr_in6);
7018fd7af143SMichael Tuexen 	dst.sin6_port = sh.dest_port;
7019fd7af143SMichael Tuexen 	dst.sin6_addr = ip6cp->ip6c_ip6->ip6_dst;
7020fd7af143SMichael Tuexen 	if (in6_setscope(&dst.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7021fd7af143SMichael Tuexen 		return;
7022fd7af143SMichael Tuexen 	}
7023fd7af143SMichael Tuexen 	inp = NULL;
7024fd7af143SMichael Tuexen 	net = NULL;
7025fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
7026fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
7027fd7af143SMichael Tuexen 	    &inp, &net, 1, SCTP_DEFAULT_VRFID);
7028fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
7029fd7af143SMichael Tuexen 	    (net != NULL) &&
703055b8cd93SMichael Tuexen 	    (inp != NULL)) {
7031fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
7032fd7af143SMichael Tuexen 		if ((udp.uh_dport != net->port) ||
7033fd7af143SMichael Tuexen 		    (udp.uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
7034fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7035fd7af143SMichael Tuexen 			return;
7036fd7af143SMichael Tuexen 		}
7037fd7af143SMichael Tuexen 		/* Check the verification tag */
7038fd7af143SMichael Tuexen 		if (ntohl(sh.v_tag) != 0) {
7039fd7af143SMichael Tuexen 			/*
7040fd7af143SMichael Tuexen 			 * This must be the verification tag used for
7041fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
7042fd7af143SMichael Tuexen 			 * reflecting the verification tag.
7043fd7af143SMichael Tuexen 			 */
7044fd7af143SMichael Tuexen 			if (ntohl(sh.v_tag) != stcb->asoc.peer_vtag) {
7045fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7046fd7af143SMichael Tuexen 				return;
7047fd7af143SMichael Tuexen 			}
7048fd7af143SMichael Tuexen 		} else {
7049fd7af143SMichael Tuexen 			if (ip6cp->ip6c_m->m_pkthdr.len >=
7050fd7af143SMichael Tuexen 			    ip6cp->ip6c_off + sizeof(struct udphdr) +
7051fd7af143SMichael Tuexen 			    sizeof(struct sctphdr) +
7052fd7af143SMichael Tuexen 			    sizeof(struct sctp_chunkhdr) +
7053fd7af143SMichael Tuexen 			    offsetof(struct sctp_init, a_rwnd)) {
7054fd7af143SMichael Tuexen 				/*
7055fd7af143SMichael Tuexen 				 * In this case we can check if we got an
7056fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
7057fd7af143SMichael Tuexen 				 * matches.
7058fd7af143SMichael Tuexen 				 */
7059fd7af143SMichael Tuexen 				uint32_t initiate_tag;
7060fd7af143SMichael Tuexen 				uint8_t chunk_type;
7061fd7af143SMichael Tuexen 
7062fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7063fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7064fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7065fd7af143SMichael Tuexen 				    sizeof(struct sctphdr),
7066fd7af143SMichael Tuexen 				    sizeof(uint8_t),
7067fd7af143SMichael Tuexen 				    (caddr_t)&chunk_type);
7068fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7069fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7070fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7071fd7af143SMichael Tuexen 				    sizeof(struct sctphdr) +
7072fd7af143SMichael Tuexen 				    sizeof(struct sctp_chunkhdr),
7073fd7af143SMichael Tuexen 				    sizeof(uint32_t),
7074fd7af143SMichael Tuexen 				    (caddr_t)&initiate_tag);
7075fd7af143SMichael Tuexen 				if ((chunk_type != SCTP_INITIATION) ||
7076fd7af143SMichael Tuexen 				    (ntohl(initiate_tag) != stcb->asoc.my_vtag)) {
7077fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
7078fd7af143SMichael Tuexen 					return;
7079fd7af143SMichael Tuexen 				}
7080fd7af143SMichael Tuexen 			} else {
7081fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7082fd7af143SMichael Tuexen 				return;
7083fd7af143SMichael Tuexen 			}
7084fd7af143SMichael Tuexen 		}
7085fd7af143SMichael Tuexen 		type = ip6cp->ip6c_icmp6->icmp6_type;
7086fd7af143SMichael Tuexen 		code = ip6cp->ip6c_icmp6->icmp6_code;
7087fd7af143SMichael Tuexen 		if ((type == ICMP6_DST_UNREACH) &&
7088fd7af143SMichael Tuexen 		    (code == ICMP6_DST_UNREACH_NOPORT)) {
7089fd7af143SMichael Tuexen 			type = ICMP6_PARAM_PROB;
7090fd7af143SMichael Tuexen 			code = ICMP6_PARAMPROB_NEXTHEADER;
7091fd7af143SMichael Tuexen 		}
7092fd7af143SMichael Tuexen 		sctp6_notify(inp, stcb, net, type, code,
70936ebfa5eeSMichael Tuexen 		    ntohl(ip6cp->ip6c_icmp6->icmp6_mtu));
7094fd7af143SMichael Tuexen 	} else {
7095fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
7096fd7af143SMichael Tuexen 			/* reduce inp's ref-count */
7097fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
7098fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
7099fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
7100fd7af143SMichael Tuexen 		}
7101fd7af143SMichael Tuexen 		if (stcb) {
7102fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7103fd7af143SMichael Tuexen 		}
7104fd7af143SMichael Tuexen 	}
7105fd7af143SMichael Tuexen }
7106fd7af143SMichael Tuexen #endif
7107fd7af143SMichael Tuexen 
7108c54a18d2SRandall Stewart void
7109c54a18d2SRandall Stewart sctp_over_udp_stop(void)
7110c54a18d2SRandall Stewart {
7111a99b6783SRandall Stewart 	/*
7112a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7113a99b6783SRandall Stewart 	 * for writting!
7114a99b6783SRandall Stewart 	 */
71153a51a264SMichael Tuexen #ifdef INET
71163a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
71173a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp4_tun_socket));
71183a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp4_tun_socket) = NULL;
7119c54a18d2SRandall Stewart 	}
71203a51a264SMichael Tuexen #endif
71213a51a264SMichael Tuexen #ifdef INET6
71223a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
71233a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp6_tun_socket));
71243a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp6_tun_socket) = NULL;
71253a51a264SMichael Tuexen 	}
71263a51a264SMichael Tuexen #endif
7127a99b6783SRandall Stewart }
7128ea5eba11SMichael Tuexen 
7129c54a18d2SRandall Stewart int
7130c54a18d2SRandall Stewart sctp_over_udp_start(void)
7131c54a18d2SRandall Stewart {
7132a99b6783SRandall Stewart 	uint16_t port;
7133a99b6783SRandall Stewart 	int ret;
71343a51a264SMichael Tuexen #ifdef INET
71353a51a264SMichael Tuexen 	struct sockaddr_in sin;
71363a51a264SMichael Tuexen #endif
71373a51a264SMichael Tuexen #ifdef INET6
71383a51a264SMichael Tuexen 	struct sockaddr_in6 sin6;
71393a51a264SMichael Tuexen #endif
7140a99b6783SRandall Stewart 	/*
7141a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7142a99b6783SRandall Stewart 	 * for writting!
7143a99b6783SRandall Stewart 	 */
7144a99b6783SRandall Stewart 	port = SCTP_BASE_SYSCTL(sctp_udp_tunneling_port);
71453a51a264SMichael Tuexen 	if (ntohs(port) == 0) {
7146a99b6783SRandall Stewart 		/* Must have a port set */
7147a99b6783SRandall Stewart 		return (EINVAL);
7148a99b6783SRandall Stewart 	}
71493a51a264SMichael Tuexen #ifdef INET
71503a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
7151a99b6783SRandall Stewart 		/* Already running -- must stop first */
7152a99b6783SRandall Stewart 		return (EALREADY);
7153a99b6783SRandall Stewart 	}
71543a51a264SMichael Tuexen #endif
71553a51a264SMichael Tuexen #ifdef INET6
71563a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
71573a51a264SMichael Tuexen 		/* Already running -- must stop first */
71583a51a264SMichael Tuexen 		return (EALREADY);
7159a99b6783SRandall Stewart 	}
71603a51a264SMichael Tuexen #endif
71613a51a264SMichael Tuexen #ifdef INET
71623a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET, &SCTP_BASE_INFO(udp4_tun_socket),
71633a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
71643a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
7165a99b6783SRandall Stewart 		sctp_over_udp_stop();
7166a99b6783SRandall Stewart 		return (ret);
7167a99b6783SRandall Stewart 	}
71683a51a264SMichael Tuexen 	/* Call the special UDP hook. */
71693a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp4_tun_socket),
7170fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7171fd7af143SMichael Tuexen 	    sctp_recv_icmp_tunneled_packet,
7172fd7af143SMichael Tuexen 	    NULL))) {
71733a51a264SMichael Tuexen 		sctp_over_udp_stop();
71743a51a264SMichael Tuexen 		return (ret);
71753a51a264SMichael Tuexen 	}
71763a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
71773a51a264SMichael Tuexen 	memset(&sin, 0, sizeof(struct sockaddr_in));
71783a51a264SMichael Tuexen 	sin.sin_len = sizeof(struct sockaddr_in);
71793a51a264SMichael Tuexen 	sin.sin_family = AF_INET;
71803a51a264SMichael Tuexen 	sin.sin_port = htons(port);
71813a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp4_tun_socket),
71823a51a264SMichael Tuexen 	    (struct sockaddr *)&sin, curthread))) {
71833a51a264SMichael Tuexen 		sctp_over_udp_stop();
71843a51a264SMichael Tuexen 		return (ret);
71853a51a264SMichael Tuexen 	}
71863a51a264SMichael Tuexen #endif
71873a51a264SMichael Tuexen #ifdef INET6
71883a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET6, &SCTP_BASE_INFO(udp6_tun_socket),
71893a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
71903a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
71913a51a264SMichael Tuexen 		sctp_over_udp_stop();
71923a51a264SMichael Tuexen 		return (ret);
71933a51a264SMichael Tuexen 	}
71943a51a264SMichael Tuexen 	/* Call the special UDP hook. */
71953a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp6_tun_socket),
7196fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7197fd7af143SMichael Tuexen 	    sctp_recv_icmp6_tunneled_packet,
7198fd7af143SMichael Tuexen 	    NULL))) {
71993a51a264SMichael Tuexen 		sctp_over_udp_stop();
72003a51a264SMichael Tuexen 		return (ret);
72013a51a264SMichael Tuexen 	}
72023a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
72033a51a264SMichael Tuexen 	memset(&sin6, 0, sizeof(struct sockaddr_in6));
72043a51a264SMichael Tuexen 	sin6.sin6_len = sizeof(struct sockaddr_in6);
72053a51a264SMichael Tuexen 	sin6.sin6_family = AF_INET6;
72063a51a264SMichael Tuexen 	sin6.sin6_port = htons(port);
72073a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp6_tun_socket),
72083a51a264SMichael Tuexen 	    (struct sockaddr *)&sin6, curthread))) {
72093a51a264SMichael Tuexen 		sctp_over_udp_stop();
72103a51a264SMichael Tuexen 		return (ret);
72113a51a264SMichael Tuexen 	}
72123a51a264SMichael Tuexen #endif
7213a99b6783SRandall Stewart 	return (0);
7214c54a18d2SRandall Stewart }
721510e0318aSMichael Tuexen 
721610e0318aSMichael Tuexen /*
721710e0318aSMichael Tuexen  * sctp_min_mtu ()returns the minimum of all non-zero arguments.
721810e0318aSMichael Tuexen  * If all arguments are zero, zero is returned.
721910e0318aSMichael Tuexen  */
722010e0318aSMichael Tuexen uint32_t
722110e0318aSMichael Tuexen sctp_min_mtu(uint32_t mtu1, uint32_t mtu2, uint32_t mtu3)
722210e0318aSMichael Tuexen {
722310e0318aSMichael Tuexen 	if (mtu1 > 0) {
722410e0318aSMichael Tuexen 		if (mtu2 > 0) {
722510e0318aSMichael Tuexen 			if (mtu3 > 0) {
722610e0318aSMichael Tuexen 				return (min(mtu1, min(mtu2, mtu3)));
722710e0318aSMichael Tuexen 			} else {
722810e0318aSMichael Tuexen 				return (min(mtu1, mtu2));
722910e0318aSMichael Tuexen 			}
723010e0318aSMichael Tuexen 		} else {
723110e0318aSMichael Tuexen 			if (mtu3 > 0) {
723210e0318aSMichael Tuexen 				return (min(mtu1, mtu3));
723310e0318aSMichael Tuexen 			} else {
723410e0318aSMichael Tuexen 				return (mtu1);
723510e0318aSMichael Tuexen 			}
723610e0318aSMichael Tuexen 		}
723710e0318aSMichael Tuexen 	} else {
723810e0318aSMichael Tuexen 		if (mtu2 > 0) {
723910e0318aSMichael Tuexen 			if (mtu3 > 0) {
724010e0318aSMichael Tuexen 				return (min(mtu2, mtu3));
724110e0318aSMichael Tuexen 			} else {
724210e0318aSMichael Tuexen 				return (mtu2);
724310e0318aSMichael Tuexen 			}
724410e0318aSMichael Tuexen 		} else {
724510e0318aSMichael Tuexen 			return (mtu3);
724610e0318aSMichael Tuexen 		}
724710e0318aSMichael Tuexen 	}
724810e0318aSMichael Tuexen }
724910e0318aSMichael Tuexen 
725010e0318aSMichael Tuexen void
725110e0318aSMichael Tuexen sctp_hc_set_mtu(union sctp_sockstore *addr, uint16_t fibnum, uint32_t mtu)
725210e0318aSMichael Tuexen {
725310e0318aSMichael Tuexen 	struct in_conninfo inc;
725410e0318aSMichael Tuexen 
725510e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
725610e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
725710e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
725810e0318aSMichael Tuexen #ifdef INET
725910e0318aSMichael Tuexen 	case AF_INET:
726010e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
726110e0318aSMichael Tuexen 		break;
726210e0318aSMichael Tuexen #endif
726310e0318aSMichael Tuexen #ifdef INET6
726410e0318aSMichael Tuexen 	case AF_INET6:
726510e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
726610e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
726710e0318aSMichael Tuexen 		break;
726810e0318aSMichael Tuexen #endif
726910e0318aSMichael Tuexen 	default:
727010e0318aSMichael Tuexen 		return;
727110e0318aSMichael Tuexen 	}
727210e0318aSMichael Tuexen 	tcp_hc_updatemtu(&inc, (u_long)mtu);
727310e0318aSMichael Tuexen }
727410e0318aSMichael Tuexen 
727510e0318aSMichael Tuexen uint32_t
727610e0318aSMichael Tuexen sctp_hc_get_mtu(union sctp_sockstore *addr, uint16_t fibnum)
727710e0318aSMichael Tuexen {
727810e0318aSMichael Tuexen 	struct in_conninfo inc;
727910e0318aSMichael Tuexen 
728010e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
728110e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
728210e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
728310e0318aSMichael Tuexen #ifdef INET
728410e0318aSMichael Tuexen 	case AF_INET:
728510e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
728610e0318aSMichael Tuexen 		break;
728710e0318aSMichael Tuexen #endif
728810e0318aSMichael Tuexen #ifdef INET6
728910e0318aSMichael Tuexen 	case AF_INET6:
729010e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
729110e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
729210e0318aSMichael Tuexen 		break;
729310e0318aSMichael Tuexen #endif
729410e0318aSMichael Tuexen 	default:
729510e0318aSMichael Tuexen 		return (0);
729610e0318aSMichael Tuexen 	}
729710e0318aSMichael Tuexen 	return ((uint32_t)tcp_hc_getmtu(&inc));
729810e0318aSMichael Tuexen }
7299