xref: /freebsd/sys/netinet/sctputil.c (revision 44f2a3272e65fb34c3d57edf5973ba95e079ac1a)
1f8829a4aSRandall Stewart /*-
251369649SPedro F. Giffuni  * SPDX-License-Identifier: BSD-3-Clause
351369649SPedro F. Giffuni  *
4830d754dSRandall Stewart  * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved.
5807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
6807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
7f8829a4aSRandall Stewart  *
8f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
9f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
10f8829a4aSRandall Stewart  *
11f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
12f8829a4aSRandall Stewart  *    this list of conditions and the following disclaimer.
13f8829a4aSRandall Stewart  *
14f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
15f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
16f8829a4aSRandall Stewart  *    the documentation and/or other materials provided with the distribution.
17f8829a4aSRandall Stewart  *
18f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
19f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
20f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
21f8829a4aSRandall Stewart  *
22f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
24f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
33f8829a4aSRandall Stewart  */
34f8829a4aSRandall Stewart 
35f8829a4aSRandall Stewart #include <sys/cdefs.h>
36f8829a4aSRandall Stewart __FBSDID("$FreeBSD$");
37f8829a4aSRandall Stewart 
38f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
40f8829a4aSRandall Stewart #include <netinet/sctputil.h>
41f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
4242551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
43f8829a4aSRandall Stewart #ifdef INET6
443a51a264SMichael Tuexen #include <netinet6/sctp6_var.h>
45f8829a4aSRandall Stewart #endif
46f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
47f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
48f8829a4aSRandall Stewart #include <netinet/sctp_uio.h>
49f8829a4aSRandall Stewart #include <netinet/sctp_timer.h>
5046bf534cSMichael Tuexen #include <netinet/sctp_indata.h>
51f8829a4aSRandall Stewart #include <netinet/sctp_auth.h>
52f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
53f7517433SRandall Stewart #include <netinet/sctp_bsd_addr.h>
5410e0318aSMichael Tuexen #if defined(INET6) || defined(INET)
5510e0318aSMichael Tuexen #include <netinet/tcp_var.h>
5610e0318aSMichael Tuexen #endif
573a51a264SMichael Tuexen #include <netinet/udp.h>
583a51a264SMichael Tuexen #include <netinet/udp_var.h>
591e88cc8bSMichael Tuexen #include <netinet/in_kdtrace.h>
603a51a264SMichael Tuexen #include <sys/proc.h>
61fd7af143SMichael Tuexen #ifdef INET6
62fd7af143SMichael Tuexen #include <netinet/icmp6.h>
63fd7af143SMichael Tuexen #endif
64f8829a4aSRandall Stewart 
65f8829a4aSRandall Stewart 
66b9e7085aSRandall Stewart #ifndef KTR_SCTP
67b9e7085aSRandall Stewart #define KTR_SCTP KTR_SUBSYS
6880fefe0aSRandall Stewart #endif
69f8829a4aSRandall Stewart 
70ed654363SMichael Tuexen extern const struct sctp_cc_functions sctp_cc_functions[];
71ed654363SMichael Tuexen extern const struct sctp_ss_functions sctp_ss_functions[];
720e9a9c10SMichael Tuexen 
73f8829a4aSRandall Stewart void
74dcb68fbaSMichael Tuexen sctp_sblog(struct sockbuf *sb, struct sctp_tcb *stcb, int from, int incr)
75f8829a4aSRandall Stewart {
76c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
77c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
78f8829a4aSRandall Stewart 
7980fefe0aSRandall Stewart 	sctp_clog.x.sb.stcb = stcb;
804e88d37aSMichael Tuexen 	sctp_clog.x.sb.so_sbcc = sb->sb_cc;
81f8829a4aSRandall Stewart 	if (stcb)
824e88d37aSMichael Tuexen 		sctp_clog.x.sb.stcb_sbcc = stcb->asoc.sb_cc;
83f8829a4aSRandall Stewart 	else
8480fefe0aSRandall Stewart 		sctp_clog.x.sb.stcb_sbcc = 0;
8580fefe0aSRandall Stewart 	sctp_clog.x.sb.incr = incr;
86c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
8780fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SB,
8880fefe0aSRandall Stewart 	    from,
8980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
9080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
9180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
9280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
93c692df45SMichael Tuexen #endif
94f8829a4aSRandall Stewart }
95f8829a4aSRandall Stewart 
96f8829a4aSRandall Stewart void
97f8829a4aSRandall Stewart sctp_log_closing(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int16_t loc)
98f8829a4aSRandall Stewart {
99c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
100c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
101f8829a4aSRandall Stewart 
10280fefe0aSRandall Stewart 	sctp_clog.x.close.inp = (void *)inp;
10380fefe0aSRandall Stewart 	sctp_clog.x.close.sctp_flags = inp->sctp_flags;
104f8829a4aSRandall Stewart 	if (stcb) {
10580fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = (void *)stcb;
10680fefe0aSRandall Stewart 		sctp_clog.x.close.state = (uint16_t)stcb->asoc.state;
107f8829a4aSRandall Stewart 	} else {
10880fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = 0;
10980fefe0aSRandall Stewart 		sctp_clog.x.close.state = 0;
110f8829a4aSRandall Stewart 	}
11180fefe0aSRandall Stewart 	sctp_clog.x.close.loc = loc;
112c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
11380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CLOSE,
11480fefe0aSRandall Stewart 	    0,
11580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
11680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
11780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
11880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
119c692df45SMichael Tuexen #endif
120f8829a4aSRandall Stewart }
121f8829a4aSRandall Stewart 
122f8829a4aSRandall Stewart void
123f8829a4aSRandall Stewart rto_logging(struct sctp_nets *net, int from)
124f8829a4aSRandall Stewart {
125c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
126c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
127f8829a4aSRandall Stewart 
128bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
12980fefe0aSRandall Stewart 	sctp_clog.x.rto.net = (void *)net;
130be1d9176SMichael Tuexen 	sctp_clog.x.rto.rtt = net->rtt / 1000;
131c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
13280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RTT,
13380fefe0aSRandall Stewart 	    from,
13480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
13580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
13680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
13780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
138c692df45SMichael Tuexen #endif
139f8829a4aSRandall Stewart }
140f8829a4aSRandall Stewart 
141f8829a4aSRandall Stewart void
1426a91f103SRandall Stewart sctp_log_strm_del_alt(struct sctp_tcb *stcb, uint32_t tsn, uint16_t sseq, uint16_t stream, int from)
143f8829a4aSRandall Stewart {
144c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
145c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
146f8829a4aSRandall Stewart 
14780fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = stcb;
14880fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = tsn;
14980fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_sseq = sseq;
15080fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_tsn = 0;
15180fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_sseq = 0;
15280fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = stream;
153c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
15480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
15580fefe0aSRandall Stewart 	    from,
15680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
15780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
15880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
15980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
160c692df45SMichael Tuexen #endif
161f8829a4aSRandall Stewart }
162f8829a4aSRandall Stewart 
163f8829a4aSRandall Stewart void
164f8829a4aSRandall Stewart sctp_log_nagle_event(struct sctp_tcb *stcb, int action)
165f8829a4aSRandall Stewart {
166c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
167c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
168f8829a4aSRandall Stewart 
16980fefe0aSRandall Stewart 	sctp_clog.x.nagle.stcb = (void *)stcb;
17080fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_flight = stcb->asoc.total_flight;
17180fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_in_queue = stcb->asoc.total_output_queue_size;
17280fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_queue = stcb->asoc.chunks_on_out_queue;
17380fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_flight = stcb->asoc.total_flight_count;
174c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
17580fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_NAGLE,
17680fefe0aSRandall Stewart 	    action,
17780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
17880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
17980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
18080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
181c692df45SMichael Tuexen #endif
182f8829a4aSRandall Stewart }
183f8829a4aSRandall Stewart 
184f8829a4aSRandall Stewart void
185f8829a4aSRandall Stewart sctp_log_sack(uint32_t old_cumack, uint32_t cumack, uint32_t tsn, uint16_t gaps, uint16_t dups, int from)
186f8829a4aSRandall Stewart {
187c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
188c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
189f8829a4aSRandall Stewart 
19080fefe0aSRandall Stewart 	sctp_clog.x.sack.cumack = cumack;
19180fefe0aSRandall Stewart 	sctp_clog.x.sack.oldcumack = old_cumack;
19280fefe0aSRandall Stewart 	sctp_clog.x.sack.tsn = tsn;
19380fefe0aSRandall Stewart 	sctp_clog.x.sack.numGaps = gaps;
19480fefe0aSRandall Stewart 	sctp_clog.x.sack.numDups = dups;
195c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
19680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SACK,
19780fefe0aSRandall Stewart 	    from,
19880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
19980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
20080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
20180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
202c692df45SMichael Tuexen #endif
203f8829a4aSRandall Stewart }
204f8829a4aSRandall Stewart 
205f8829a4aSRandall Stewart void
206f8829a4aSRandall Stewart sctp_log_map(uint32_t map, uint32_t cum, uint32_t high, int from)
207f8829a4aSRandall Stewart {
208c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
209c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
210f8829a4aSRandall Stewart 
211bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
21280fefe0aSRandall Stewart 	sctp_clog.x.map.base = map;
21380fefe0aSRandall Stewart 	sctp_clog.x.map.cum = cum;
21480fefe0aSRandall Stewart 	sctp_clog.x.map.high = high;
215c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
21680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAP,
21780fefe0aSRandall Stewart 	    from,
21880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
21980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
22080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
22180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
222c692df45SMichael Tuexen #endif
223f8829a4aSRandall Stewart }
224f8829a4aSRandall Stewart 
225f8829a4aSRandall Stewart void
226dcb68fbaSMichael Tuexen sctp_log_fr(uint32_t biggest_tsn, uint32_t biggest_new_tsn, uint32_t tsn, int from)
227f8829a4aSRandall Stewart {
228c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
229c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
230f8829a4aSRandall Stewart 
231bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
23280fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_tsn = biggest_tsn;
23380fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_new_tsn = biggest_new_tsn;
23480fefe0aSRandall Stewart 	sctp_clog.x.fr.tsn = tsn;
235c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
23680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_FR,
23780fefe0aSRandall Stewart 	    from,
23880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
23980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
24080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
24180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
242c692df45SMichael Tuexen #endif
243f8829a4aSRandall Stewart }
244f8829a4aSRandall Stewart 
2454be807c4SMichael Tuexen #ifdef SCTP_MBUF_LOGGING
246f8829a4aSRandall Stewart void
247f8829a4aSRandall Stewart sctp_log_mb(struct mbuf *m, int from)
248f8829a4aSRandall Stewart {
249c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
250c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
251f8829a4aSRandall Stewart 
25280fefe0aSRandall Stewart 	sctp_clog.x.mb.mp = m;
25380fefe0aSRandall Stewart 	sctp_clog.x.mb.mbuf_flags = (uint8_t)(SCTP_BUF_GET_FLAGS(m));
25480fefe0aSRandall Stewart 	sctp_clog.x.mb.size = (uint16_t)(SCTP_BUF_LEN(m));
25580fefe0aSRandall Stewart 	sctp_clog.x.mb.data = SCTP_BUF_AT(m, 0);
256139bc87fSRandall Stewart 	if (SCTP_BUF_IS_EXTENDED(m)) {
25780fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = SCTP_BUF_EXTEND_BASE(m);
25880fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = (uint8_t)(SCTP_BUF_EXTEND_REFCNT(m));
259f8829a4aSRandall Stewart 	} else {
26080fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = 0;
26180fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = 0;
262f8829a4aSRandall Stewart 	}
263c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
26480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBUF,
26580fefe0aSRandall Stewart 	    from,
26680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
26780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
26880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
26980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
270c692df45SMichael Tuexen #endif
271f8829a4aSRandall Stewart }
272f8829a4aSRandall Stewart 
273f8829a4aSRandall Stewart void
2744be807c4SMichael Tuexen sctp_log_mbc(struct mbuf *m, int from)
2754be807c4SMichael Tuexen {
2764be807c4SMichael Tuexen 	struct mbuf *mat;
2774be807c4SMichael Tuexen 
2784be807c4SMichael Tuexen 	for (mat = m; mat; mat = SCTP_BUF_NEXT(mat)) {
2794be807c4SMichael Tuexen 		sctp_log_mb(mat, from);
2804be807c4SMichael Tuexen 	}
2814be807c4SMichael Tuexen }
2824be807c4SMichael Tuexen #endif
2834be807c4SMichael Tuexen 
2844be807c4SMichael Tuexen void
285dcb68fbaSMichael Tuexen sctp_log_strm_del(struct sctp_queued_to_read *control, struct sctp_queued_to_read *poschk, int from)
286f8829a4aSRandall Stewart {
287c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
288c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
289f8829a4aSRandall Stewart 
290f8829a4aSRandall Stewart 	if (control == NULL) {
291ad81507eSRandall Stewart 		SCTP_PRINTF("Gak log of NULL?\n");
292f8829a4aSRandall Stewart 		return;
293f8829a4aSRandall Stewart 	}
29480fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = control->stcb;
29580fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = control->sinfo_tsn;
29649656eefSMichael Tuexen 	sctp_clog.x.strlog.n_sseq = (uint16_t)control->mid;
29780fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = control->sinfo_stream;
298f8829a4aSRandall Stewart 	if (poschk != NULL) {
29980fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = poschk->sinfo_tsn;
30049656eefSMichael Tuexen 		sctp_clog.x.strlog.e_sseq = (uint16_t)poschk->mid;
301f8829a4aSRandall Stewart 	} else {
30280fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = 0;
30380fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_sseq = 0;
304f8829a4aSRandall Stewart 	}
305c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
30680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
30780fefe0aSRandall Stewart 	    from,
30880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
30980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
31080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
31180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
312c692df45SMichael Tuexen #endif
313f8829a4aSRandall Stewart }
314f8829a4aSRandall Stewart 
315f8829a4aSRandall Stewart void
316f8829a4aSRandall Stewart sctp_log_cwnd(struct sctp_tcb *stcb, struct sctp_nets *net, int augment, uint8_t from)
317f8829a4aSRandall Stewart {
318c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
319c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
320f8829a4aSRandall Stewart 
32180fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
322f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
32380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
324f8829a4aSRandall Stewart 	else
32580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
326f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
32780fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
328f8829a4aSRandall Stewart 	else
32980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
330f8829a4aSRandall Stewart 
331f8829a4aSRandall Stewart 	if (net) {
33280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cwnd_new_value = net->cwnd;
33380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.inflight = net->flight_size;
33480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.pseudo_cumack = net->pseudo_cumack;
33580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = net->new_pseudo_cumack;
33680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.need_new_pseudo_cumack = net->find_pseudo_cumack;
337f8829a4aSRandall Stewart 	}
338f8829a4aSRandall Stewart 	if (SCTP_CWNDLOG_PRESEND == from) {
33980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = stcb->asoc.peers_rwnd;
340f8829a4aSRandall Stewart 	}
34180fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = augment;
342c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
34380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CWND,
34480fefe0aSRandall Stewart 	    from,
34580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
34680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
34780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
34880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
349c692df45SMichael Tuexen #endif
350f8829a4aSRandall Stewart }
351f8829a4aSRandall Stewart 
352f8829a4aSRandall Stewart void
353f8829a4aSRandall Stewart sctp_log_lock(struct sctp_inpcb *inp, struct sctp_tcb *stcb, uint8_t from)
354f8829a4aSRandall Stewart {
355c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
356c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
357f8829a4aSRandall Stewart 
358bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
35903b0b021SRandall Stewart 	if (inp) {
36080fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)inp->sctp_socket;
36103b0b021SRandall Stewart 
36203b0b021SRandall Stewart 	} else {
36380fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)NULL;
36403b0b021SRandall Stewart 	}
36580fefe0aSRandall Stewart 	sctp_clog.x.lock.inp = (void *)inp;
366f8829a4aSRandall Stewart 	if (stcb) {
36780fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = mtx_owned(&stcb->tcb_mtx);
368f8829a4aSRandall Stewart 	} else {
36980fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = SCTP_LOCK_UNKNOWN;
370f8829a4aSRandall Stewart 	}
371f8829a4aSRandall Stewart 	if (inp) {
37280fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = mtx_owned(&inp->inp_mtx);
37380fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = mtx_owned(&inp->inp_create_mtx);
374f8829a4aSRandall Stewart 	} else {
37580fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = SCTP_LOCK_UNKNOWN;
37680fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = SCTP_LOCK_UNKNOWN;
377f8829a4aSRandall Stewart 	}
378b3f1ea41SRandall Stewart 	sctp_clog.x.lock.info_lock = rw_wowned(&SCTP_BASE_INFO(ipi_ep_mtx));
37952129fcdSRandall Stewart 	if (inp && (inp->sctp_socket)) {
38080fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
38180fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
38280fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = mtx_owned(&(inp->sctp_socket->so_snd.sb_mtx));
383f8829a4aSRandall Stewart 	} else {
38480fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = SCTP_LOCK_UNKNOWN;
38580fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = SCTP_LOCK_UNKNOWN;
38680fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = SCTP_LOCK_UNKNOWN;
387f8829a4aSRandall Stewart 	}
388c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
38980fefe0aSRandall Stewart 	    SCTP_LOG_LOCK_EVENT,
39080fefe0aSRandall Stewart 	    from,
39180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
39280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
39380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
39480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
395c692df45SMichael Tuexen #endif
396f8829a4aSRandall Stewart }
397f8829a4aSRandall Stewart 
398f8829a4aSRandall Stewart void
399f8829a4aSRandall Stewart sctp_log_maxburst(struct sctp_tcb *stcb, struct sctp_nets *net, int error, int burst, uint8_t from)
400f8829a4aSRandall Stewart {
401c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
402c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
403f8829a4aSRandall Stewart 
404bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
40580fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
40680fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_new_value = error;
40780fefe0aSRandall Stewart 	sctp_clog.x.cwnd.inflight = net->flight_size;
40880fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = burst;
409f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
41080fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
411f8829a4aSRandall Stewart 	else
41280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
413f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
41480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
415f8829a4aSRandall Stewart 	else
41680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
417c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
41880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAXBURST,
41980fefe0aSRandall Stewart 	    from,
42080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
42180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
42280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
42380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
424c692df45SMichael Tuexen #endif
425f8829a4aSRandall Stewart }
426f8829a4aSRandall Stewart 
427f8829a4aSRandall Stewart void
428f8829a4aSRandall Stewart sctp_log_rwnd(uint8_t from, uint32_t peers_rwnd, uint32_t snd_size, uint32_t overhead)
429f8829a4aSRandall Stewart {
430c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
431c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
432f8829a4aSRandall Stewart 
43380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
43480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = snd_size;
43580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
43680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = 0;
437c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
43880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
43980fefe0aSRandall Stewart 	    from,
44080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
44180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
44280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
44380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
444c692df45SMichael Tuexen #endif
445f8829a4aSRandall Stewart }
446f8829a4aSRandall Stewart 
447f8829a4aSRandall Stewart void
448f8829a4aSRandall Stewart sctp_log_rwnd_set(uint8_t from, uint32_t peers_rwnd, uint32_t flight_size, uint32_t overhead, uint32_t a_rwndval)
449f8829a4aSRandall Stewart {
450c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
451c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
452f8829a4aSRandall Stewart 
45380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
45480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = flight_size;
45580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
45680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = a_rwndval;
457c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
45880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
45980fefe0aSRandall Stewart 	    from,
46080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
46180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
46280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
46380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
464c692df45SMichael Tuexen #endif
465f8829a4aSRandall Stewart }
466f8829a4aSRandall Stewart 
4674be807c4SMichael Tuexen #ifdef SCTP_MBCNT_LOGGING
4684be807c4SMichael Tuexen static void
469f8829a4aSRandall Stewart sctp_log_mbcnt(uint8_t from, uint32_t total_oq, uint32_t book, uint32_t total_mbcnt_q, uint32_t mbcnt)
470f8829a4aSRandall Stewart {
471c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
472c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
473f8829a4aSRandall Stewart 
47480fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_size = total_oq;
47580fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.size_change = book;
47680fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_mb_size = total_mbcnt_q;
47780fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.mbcnt_change = mbcnt;
478c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
47980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBCNT,
48080fefe0aSRandall Stewart 	    from,
48180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
48280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
48380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
48480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
485c692df45SMichael Tuexen #endif
486f8829a4aSRandall Stewart }
4874be807c4SMichael Tuexen #endif
4884be807c4SMichael Tuexen 
489f8829a4aSRandall Stewart void
490f8829a4aSRandall Stewart sctp_misc_ints(uint8_t from, uint32_t a, uint32_t b, uint32_t c, uint32_t d)
491f8829a4aSRandall Stewart {
492c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
493c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
49480fefe0aSRandall Stewart 	    SCTP_LOG_MISC_EVENT,
49580fefe0aSRandall Stewart 	    from,
49680fefe0aSRandall Stewart 	    a, b, c, d);
497c692df45SMichael Tuexen #endif
498f8829a4aSRandall Stewart }
499f8829a4aSRandall Stewart 
500f8829a4aSRandall Stewart void
5017215cc1bSMichael Tuexen sctp_wakeup_log(struct sctp_tcb *stcb, uint32_t wake_cnt, int from)
502f8829a4aSRandall Stewart {
503c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
504c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
505f8829a4aSRandall Stewart 
50680fefe0aSRandall Stewart 	sctp_clog.x.wake.stcb = (void *)stcb;
50780fefe0aSRandall Stewart 	sctp_clog.x.wake.wake_cnt = wake_cnt;
50880fefe0aSRandall Stewart 	sctp_clog.x.wake.flight = stcb->asoc.total_flight_count;
50980fefe0aSRandall Stewart 	sctp_clog.x.wake.send_q = stcb->asoc.send_queue_cnt;
51080fefe0aSRandall Stewart 	sctp_clog.x.wake.sent_q = stcb->asoc.sent_queue_cnt;
511f8829a4aSRandall Stewart 
512f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt < 0xff)
51380fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = (uint8_t)stcb->asoc.stream_queue_cnt;
514f8829a4aSRandall Stewart 	else
51580fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = 0xff;
516f8829a4aSRandall Stewart 
517f8829a4aSRandall Stewart 	if (stcb->asoc.chunks_on_out_queue < 0xff)
51880fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = (uint8_t)stcb->asoc.chunks_on_out_queue;
519f8829a4aSRandall Stewart 	else
52080fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = 0xff;
521f8829a4aSRandall Stewart 
52280fefe0aSRandall Stewart 	sctp_clog.x.wake.sctpflags = 0;
523f8829a4aSRandall Stewart 	/* set in the defered mode stuff */
524f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_DONT_WAKE)
52580fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 1;
526f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEOUTPUT)
52780fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 2;
528f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEINPUT)
52980fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 4;
530f8829a4aSRandall Stewart 	/* what about the sb */
531f8829a4aSRandall Stewart 	if (stcb->sctp_socket) {
532f8829a4aSRandall Stewart 		struct socket *so = stcb->sctp_socket;
533f8829a4aSRandall Stewart 
53480fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = (uint8_t)((so->so_snd.sb_flags & 0x00ff));
535f8829a4aSRandall Stewart 	} else {
53680fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = 0xff;
537f8829a4aSRandall Stewart 	}
538c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
53980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_WAKE,
54080fefe0aSRandall Stewart 	    from,
54180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
54280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
54380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
54480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
545c692df45SMichael Tuexen #endif
546f8829a4aSRandall Stewart }
547f8829a4aSRandall Stewart 
548f8829a4aSRandall Stewart void
54958e6eeefSMichael Tuexen sctp_log_block(uint8_t from, struct sctp_association *asoc, ssize_t sendlen)
550f8829a4aSRandall Stewart {
551c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
552c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
553f8829a4aSRandall Stewart 
55480fefe0aSRandall Stewart 	sctp_clog.x.blk.onsb = asoc->total_output_queue_size;
55580fefe0aSRandall Stewart 	sctp_clog.x.blk.send_sent_qcnt = (uint16_t)(asoc->send_queue_cnt + asoc->sent_queue_cnt);
55680fefe0aSRandall Stewart 	sctp_clog.x.blk.peer_rwnd = asoc->peers_rwnd;
55780fefe0aSRandall Stewart 	sctp_clog.x.blk.stream_qcnt = (uint16_t)asoc->stream_queue_cnt;
55880fefe0aSRandall Stewart 	sctp_clog.x.blk.chunks_on_oque = (uint16_t)asoc->chunks_on_out_queue;
55980fefe0aSRandall Stewart 	sctp_clog.x.blk.flight_size = (uint16_t)(asoc->total_flight / 1024);
5609a8e3088SMichael Tuexen 	sctp_clog.x.blk.sndlen = (uint32_t)sendlen;
561c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
56280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_BLOCK,
56380fefe0aSRandall Stewart 	    from,
56480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
56580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
56680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
56780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
568c692df45SMichael Tuexen #endif
569f8829a4aSRandall Stewart }
570f8829a4aSRandall Stewart 
571f8829a4aSRandall Stewart int
5727215cc1bSMichael Tuexen sctp_fill_stat_log(void *optval SCTP_UNUSED, size_t *optsize SCTP_UNUSED)
573f8829a4aSRandall Stewart {
57480fefe0aSRandall Stewart 	/* May need to fix this if ktrdump does not work */
575f8829a4aSRandall Stewart 	return (0);
576f8829a4aSRandall Stewart }
577f8829a4aSRandall Stewart 
578f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
579f8829a4aSRandall Stewart uint8_t sctp_audit_data[SCTP_AUDIT_SIZE][2];
580f8829a4aSRandall Stewart static int sctp_audit_indx = 0;
581f8829a4aSRandall Stewart 
582f8829a4aSRandall Stewart static
583f8829a4aSRandall Stewart void
584f8829a4aSRandall Stewart sctp_print_audit_report(void)
585f8829a4aSRandall Stewart {
586f8829a4aSRandall Stewart 	int i;
587f8829a4aSRandall Stewart 	int cnt;
588f8829a4aSRandall Stewart 
589f8829a4aSRandall Stewart 	cnt = 0;
590f8829a4aSRandall Stewart 	for (i = sctp_audit_indx; i < SCTP_AUDIT_SIZE; i++) {
591f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
592f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
593f8829a4aSRandall Stewart 			cnt = 0;
594ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
595f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
596f8829a4aSRandall Stewart 			cnt = 0;
597ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
598f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
599f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
600ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
601f8829a4aSRandall Stewart 			cnt = 0;
602f8829a4aSRandall Stewart 		}
603ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
604f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
605f8829a4aSRandall Stewart 		cnt++;
606f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
607ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
608f8829a4aSRandall Stewart 	}
609f8829a4aSRandall Stewart 	for (i = 0; i < sctp_audit_indx; i++) {
610f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
611f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
612f8829a4aSRandall Stewart 			cnt = 0;
613ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
614f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
615f8829a4aSRandall Stewart 			cnt = 0;
616ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
617f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
618f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
619ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
620f8829a4aSRandall Stewart 			cnt = 0;
621f8829a4aSRandall Stewart 		}
622ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
623f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
624f8829a4aSRandall Stewart 		cnt++;
625f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
626ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
627f8829a4aSRandall Stewart 	}
628ad81507eSRandall Stewart 	SCTP_PRINTF("\n");
629f8829a4aSRandall Stewart }
630f8829a4aSRandall Stewart 
631f8829a4aSRandall Stewart void
632f8829a4aSRandall Stewart sctp_auditing(int from, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
633f8829a4aSRandall Stewart     struct sctp_nets *net)
634f8829a4aSRandall Stewart {
635f8829a4aSRandall Stewart 	int resend_cnt, tot_out, rep, tot_book_cnt;
636f8829a4aSRandall Stewart 	struct sctp_nets *lnet;
637f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
638f8829a4aSRandall Stewart 
639f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xAA;
640f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = 0x000000ff & from;
641f8829a4aSRandall Stewart 	sctp_audit_indx++;
642f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
643f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
644f8829a4aSRandall Stewart 	}
645f8829a4aSRandall Stewart 	if (inp == NULL) {
646f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
647f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x01;
648f8829a4aSRandall Stewart 		sctp_audit_indx++;
649f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
650f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
651f8829a4aSRandall Stewart 		}
652f8829a4aSRandall Stewart 		return;
653f8829a4aSRandall Stewart 	}
654f8829a4aSRandall Stewart 	if (stcb == NULL) {
655f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
656f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x02;
657f8829a4aSRandall Stewart 		sctp_audit_indx++;
658f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
659f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
660f8829a4aSRandall Stewart 		}
661f8829a4aSRandall Stewart 		return;
662f8829a4aSRandall Stewart 	}
663f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xA1;
664f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] =
665f8829a4aSRandall Stewart 	    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
666f8829a4aSRandall Stewart 	sctp_audit_indx++;
667f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
668f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
669f8829a4aSRandall Stewart 	}
670f8829a4aSRandall Stewart 	rep = 0;
671f8829a4aSRandall Stewart 	tot_book_cnt = 0;
672f8829a4aSRandall Stewart 	resend_cnt = tot_out = 0;
673f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
674f8829a4aSRandall Stewart 		if (chk->sent == SCTP_DATAGRAM_RESEND) {
675f8829a4aSRandall Stewart 			resend_cnt++;
676f8829a4aSRandall Stewart 		} else if (chk->sent < SCTP_DATAGRAM_RESEND) {
677f8829a4aSRandall Stewart 			tot_out += chk->book_size;
678f8829a4aSRandall Stewart 			tot_book_cnt++;
679f8829a4aSRandall Stewart 		}
680f8829a4aSRandall Stewart 	}
681f8829a4aSRandall Stewart 	if (resend_cnt != stcb->asoc.sent_queue_retran_cnt) {
682f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
683f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA1;
684f8829a4aSRandall Stewart 		sctp_audit_indx++;
685f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
686f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
687f8829a4aSRandall Stewart 		}
688ad81507eSRandall Stewart 		SCTP_PRINTF("resend_cnt:%d asoc-tot:%d\n",
689f8829a4aSRandall Stewart 		    resend_cnt, stcb->asoc.sent_queue_retran_cnt);
690f8829a4aSRandall Stewart 		rep = 1;
691f8829a4aSRandall Stewart 		stcb->asoc.sent_queue_retran_cnt = resend_cnt;
692f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xA2;
693f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] =
694f8829a4aSRandall Stewart 		    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
695f8829a4aSRandall Stewart 		sctp_audit_indx++;
696f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
697f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
698f8829a4aSRandall Stewart 		}
699f8829a4aSRandall Stewart 	}
700f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
701f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
702f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA2;
703f8829a4aSRandall Stewart 		sctp_audit_indx++;
704f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
705f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
706f8829a4aSRandall Stewart 		}
707f8829a4aSRandall Stewart 		rep = 1;
708ad81507eSRandall Stewart 		SCTP_PRINTF("tot_flt:%d asoc_tot:%d\n", tot_out,
709f8829a4aSRandall Stewart 		    (int)stcb->asoc.total_flight);
710f8829a4aSRandall Stewart 		stcb->asoc.total_flight = tot_out;
711f8829a4aSRandall Stewart 	}
712f8829a4aSRandall Stewart 	if (tot_book_cnt != stcb->asoc.total_flight_count) {
713f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
714f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA5;
715f8829a4aSRandall Stewart 		sctp_audit_indx++;
716f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
717f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
718f8829a4aSRandall Stewart 		}
719f8829a4aSRandall Stewart 		rep = 1;
720f31e6c7fSMichael Tuexen 		SCTP_PRINTF("tot_flt_book:%d\n", tot_book_cnt);
721f8829a4aSRandall Stewart 
722f8829a4aSRandall Stewart 		stcb->asoc.total_flight_count = tot_book_cnt;
723f8829a4aSRandall Stewart 	}
724f8829a4aSRandall Stewart 	tot_out = 0;
725f8829a4aSRandall Stewart 	TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
726f8829a4aSRandall Stewart 		tot_out += lnet->flight_size;
727f8829a4aSRandall Stewart 	}
728f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
729f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
730f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA3;
731f8829a4aSRandall Stewart 		sctp_audit_indx++;
732f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
733f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
734f8829a4aSRandall Stewart 		}
735f8829a4aSRandall Stewart 		rep = 1;
736ad81507eSRandall Stewart 		SCTP_PRINTF("real flight:%d net total was %d\n",
737f8829a4aSRandall Stewart 		    stcb->asoc.total_flight, tot_out);
738f8829a4aSRandall Stewart 		/* now corrective action */
739f8829a4aSRandall Stewart 		TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
740f8829a4aSRandall Stewart 
741f8829a4aSRandall Stewart 			tot_out = 0;
742f8829a4aSRandall Stewart 			TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
743f8829a4aSRandall Stewart 				if ((chk->whoTo == lnet) &&
744f8829a4aSRandall Stewart 				    (chk->sent < SCTP_DATAGRAM_RESEND)) {
745f8829a4aSRandall Stewart 					tot_out += chk->book_size;
746f8829a4aSRandall Stewart 				}
747f8829a4aSRandall Stewart 			}
748f8829a4aSRandall Stewart 			if (lnet->flight_size != tot_out) {
749f31e6c7fSMichael Tuexen 				SCTP_PRINTF("net:%p flight was %d corrected to %d\n",
750dd294dceSMichael Tuexen 				    (void *)lnet, lnet->flight_size,
751ad81507eSRandall Stewart 				    tot_out);
752f8829a4aSRandall Stewart 				lnet->flight_size = tot_out;
753f8829a4aSRandall Stewart 			}
754f8829a4aSRandall Stewart 		}
755f8829a4aSRandall Stewart 	}
756f8829a4aSRandall Stewart 	if (rep) {
757f8829a4aSRandall Stewart 		sctp_print_audit_report();
758f8829a4aSRandall Stewart 	}
759f8829a4aSRandall Stewart }
760f8829a4aSRandall Stewart 
761f8829a4aSRandall Stewart void
762f8829a4aSRandall Stewart sctp_audit_log(uint8_t ev, uint8_t fd)
763f8829a4aSRandall Stewart {
764f8829a4aSRandall Stewart 
765f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = ev;
766f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = fd;
767f8829a4aSRandall Stewart 	sctp_audit_indx++;
768f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
769f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
770f8829a4aSRandall Stewart 	}
771f8829a4aSRandall Stewart }
772f8829a4aSRandall Stewart 
773f8829a4aSRandall Stewart #endif
774f8829a4aSRandall Stewart 
775f8829a4aSRandall Stewart /*
77612af6654SMichael Tuexen  * sctp_stop_timers_for_shutdown() should be called
77712af6654SMichael Tuexen  * when entering the SHUTDOWN_SENT or SHUTDOWN_ACK_SENT
77812af6654SMichael Tuexen  * state to make sure that all timers are stopped.
77912af6654SMichael Tuexen  */
78012af6654SMichael Tuexen void
78112af6654SMichael Tuexen sctp_stop_timers_for_shutdown(struct sctp_tcb *stcb)
78212af6654SMichael Tuexen {
78312af6654SMichael Tuexen 	struct sctp_association *asoc;
78412af6654SMichael Tuexen 	struct sctp_nets *net;
78512af6654SMichael Tuexen 
78612af6654SMichael Tuexen 	asoc = &stcb->asoc;
78712af6654SMichael Tuexen 
78812af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
78912af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
79012af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
79112af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
79212af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
79312af6654SMichael Tuexen 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
79412af6654SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
795ca85e948SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->hb_timer.timer);
79612af6654SMichael Tuexen 	}
79712af6654SMichael Tuexen }
79812af6654SMichael Tuexen 
79912af6654SMichael Tuexen /*
800589c42c2SMichael Tuexen  * A list of sizes based on typical mtu's, used only if next hop size not
801589c42c2SMichael Tuexen  * returned. These values MUST be multiples of 4 and MUST be ordered.
802f8829a4aSRandall Stewart  */
803437fc91aSMichael Tuexen static uint32_t sctp_mtu_sizes[] = {
804f8829a4aSRandall Stewart 	68,
805f8829a4aSRandall Stewart 	296,
806f8829a4aSRandall Stewart 	508,
807f8829a4aSRandall Stewart 	512,
808f8829a4aSRandall Stewart 	544,
809f8829a4aSRandall Stewart 	576,
810589c42c2SMichael Tuexen 	1004,
811f8829a4aSRandall Stewart 	1492,
812f8829a4aSRandall Stewart 	1500,
813f8829a4aSRandall Stewart 	1536,
814589c42c2SMichael Tuexen 	2000,
815f8829a4aSRandall Stewart 	2048,
816f8829a4aSRandall Stewart 	4352,
817f8829a4aSRandall Stewart 	4464,
818f8829a4aSRandall Stewart 	8166,
819589c42c2SMichael Tuexen 	17912,
820f8829a4aSRandall Stewart 	32000,
821589c42c2SMichael Tuexen 	65532
822f8829a4aSRandall Stewart };
823f8829a4aSRandall Stewart 
824f8829a4aSRandall Stewart /*
825589c42c2SMichael Tuexen  * Return the largest MTU in sctp_mtu_sizes smaller than val.
826589c42c2SMichael Tuexen  * If val is smaller than the minimum, just return the largest
827589c42c2SMichael Tuexen  * multiple of 4 smaller or equal to val.
828589c42c2SMichael Tuexen  * Ensure that the result is a multiple of 4.
829f8829a4aSRandall Stewart  */
830437fc91aSMichael Tuexen uint32_t
831b0471b4bSMichael Tuexen sctp_get_prev_mtu(uint32_t val)
832b0471b4bSMichael Tuexen {
833437fc91aSMichael Tuexen 	uint32_t i;
834437fc91aSMichael Tuexen 
835eef8d4a9SMichael Tuexen 	val &= 0xfffffffc;
836437fc91aSMichael Tuexen 	if (val <= sctp_mtu_sizes[0]) {
837437fc91aSMichael Tuexen 		return (val);
838437fc91aSMichael Tuexen 	}
839437fc91aSMichael Tuexen 	for (i = 1; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
840437fc91aSMichael Tuexen 		if (val <= sctp_mtu_sizes[i]) {
841f8829a4aSRandall Stewart 			break;
842f8829a4aSRandall Stewart 		}
843f8829a4aSRandall Stewart 	}
844589c42c2SMichael Tuexen 	KASSERT((sctp_mtu_sizes[i - 1] & 0x00000003) == 0,
845589c42c2SMichael Tuexen 	    ("sctp_mtu_sizes[%u] not a multiple of 4", i - 1));
846437fc91aSMichael Tuexen 	return (sctp_mtu_sizes[i - 1]);
847437fc91aSMichael Tuexen }
848437fc91aSMichael Tuexen 
849437fc91aSMichael Tuexen /*
850589c42c2SMichael Tuexen  * Return the smallest MTU in sctp_mtu_sizes larger than val.
851589c42c2SMichael Tuexen  * If val is larger than the maximum, just return the largest multiple of 4 smaller
852589c42c2SMichael Tuexen  * or equal to val.
853589c42c2SMichael Tuexen  * Ensure that the result is a multiple of 4.
854437fc91aSMichael Tuexen  */
855437fc91aSMichael Tuexen uint32_t
856b0471b4bSMichael Tuexen sctp_get_next_mtu(uint32_t val)
857b0471b4bSMichael Tuexen {
858437fc91aSMichael Tuexen 	/* select another MTU that is just bigger than this one */
859437fc91aSMichael Tuexen 	uint32_t i;
860437fc91aSMichael Tuexen 
861eef8d4a9SMichael Tuexen 	val &= 0xfffffffc;
862437fc91aSMichael Tuexen 	for (i = 0; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
863437fc91aSMichael Tuexen 		if (val < sctp_mtu_sizes[i]) {
864589c42c2SMichael Tuexen 			KASSERT((sctp_mtu_sizes[i] & 0x00000003) == 0,
865589c42c2SMichael Tuexen 			    ("sctp_mtu_sizes[%u] not a multiple of 4", i));
866437fc91aSMichael Tuexen 			return (sctp_mtu_sizes[i]);
867437fc91aSMichael Tuexen 		}
868437fc91aSMichael Tuexen 	}
869437fc91aSMichael Tuexen 	return (val);
870f8829a4aSRandall Stewart }
871f8829a4aSRandall Stewart 
872f8829a4aSRandall Stewart void
873f8829a4aSRandall Stewart sctp_fill_random_store(struct sctp_pcb *m)
874f8829a4aSRandall Stewart {
875f8829a4aSRandall Stewart 	/*
876f8829a4aSRandall Stewart 	 * Here we use the MD5/SHA-1 to hash with our good randomNumbers and
877f8829a4aSRandall Stewart 	 * our counter. The result becomes our good random numbers and we
878f8829a4aSRandall Stewart 	 * then setup to give these out. Note that we do no locking to
879f8829a4aSRandall Stewart 	 * protect this. This is ok, since if competing folks call this we
88017205eccSRandall Stewart 	 * will get more gobbled gook in the random store which is what we
881f8829a4aSRandall Stewart 	 * want. There is a danger that two guys will use the same random
882f8829a4aSRandall Stewart 	 * numbers, but thats ok too since that is random as well :->
883f8829a4aSRandall Stewart 	 */
884f8829a4aSRandall Stewart 	m->store_at = 0;
885ad81507eSRandall Stewart 	(void)sctp_hmac(SCTP_HMAC, (uint8_t *)m->random_numbers,
886f8829a4aSRandall Stewart 	    sizeof(m->random_numbers), (uint8_t *)&m->random_counter,
887f8829a4aSRandall Stewart 	    sizeof(m->random_counter), (uint8_t *)m->random_store);
888f8829a4aSRandall Stewart 	m->random_counter++;
889f8829a4aSRandall Stewart }
890f8829a4aSRandall Stewart 
891f8829a4aSRandall Stewart uint32_t
892b0471b4bSMichael Tuexen sctp_select_initial_TSN(struct sctp_pcb *inp)
893b0471b4bSMichael Tuexen {
894f8829a4aSRandall Stewart 	/*
895f8829a4aSRandall Stewart 	 * A true implementation should use random selection process to get
896f8829a4aSRandall Stewart 	 * the initial stream sequence number, using RFC1750 as a good
897f8829a4aSRandall Stewart 	 * guideline
898f8829a4aSRandall Stewart 	 */
899139bc87fSRandall Stewart 	uint32_t x, *xp;
900f8829a4aSRandall Stewart 	uint8_t *p;
901851b7298SRandall Stewart 	int store_at, new_store;
902f8829a4aSRandall Stewart 
903851b7298SRandall Stewart 	if (inp->initial_sequence_debug != 0) {
904f8829a4aSRandall Stewart 		uint32_t ret;
905f8829a4aSRandall Stewart 
906851b7298SRandall Stewart 		ret = inp->initial_sequence_debug;
907851b7298SRandall Stewart 		inp->initial_sequence_debug++;
908f8829a4aSRandall Stewart 		return (ret);
909f8829a4aSRandall Stewart 	}
910851b7298SRandall Stewart retry:
911851b7298SRandall Stewart 	store_at = inp->store_at;
912851b7298SRandall Stewart 	new_store = store_at + sizeof(uint32_t);
913851b7298SRandall Stewart 	if (new_store >= (SCTP_SIGNATURE_SIZE - 3)) {
914851b7298SRandall Stewart 		new_store = 0;
915f8829a4aSRandall Stewart 	}
916851b7298SRandall Stewart 	if (!atomic_cmpset_int(&inp->store_at, store_at, new_store)) {
917851b7298SRandall Stewart 		goto retry;
918851b7298SRandall Stewart 	}
919851b7298SRandall Stewart 	if (new_store == 0) {
920851b7298SRandall Stewart 		/* Refill the random store */
921851b7298SRandall Stewart 		sctp_fill_random_store(inp);
922851b7298SRandall Stewart 	}
923851b7298SRandall Stewart 	p = &inp->random_store[store_at];
924139bc87fSRandall Stewart 	xp = (uint32_t *)p;
925f8829a4aSRandall Stewart 	x = *xp;
926f8829a4aSRandall Stewart 	return (x);
927f8829a4aSRandall Stewart }
928f8829a4aSRandall Stewart 
929f8829a4aSRandall Stewart uint32_t
930b0471b4bSMichael Tuexen sctp_select_a_tag(struct sctp_inpcb *inp, uint16_t lport, uint16_t rport, int check)
931b0471b4bSMichael Tuexen {
9327215cc1bSMichael Tuexen 	uint32_t x;
933f8829a4aSRandall Stewart 	struct timeval now;
934f8829a4aSRandall Stewart 
9357215cc1bSMichael Tuexen 	if (check) {
9366e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
9377215cc1bSMichael Tuexen 	}
9387215cc1bSMichael Tuexen 	for (;;) {
939851b7298SRandall Stewart 		x = sctp_select_initial_TSN(&inp->sctp_ep);
940f8829a4aSRandall Stewart 		if (x == 0) {
941f8829a4aSRandall Stewart 			/* we never use 0 */
942f8829a4aSRandall Stewart 			continue;
943f8829a4aSRandall Stewart 		}
9447215cc1bSMichael Tuexen 		if (!check || sctp_is_vtag_good(x, lport, rport, &now)) {
9457215cc1bSMichael Tuexen 			break;
946f8829a4aSRandall Stewart 		}
947f8829a4aSRandall Stewart 	}
948f8829a4aSRandall Stewart 	return (x);
949f8829a4aSRandall Stewart }
950f8829a4aSRandall Stewart 
951e92c2a8dSMichael Tuexen int32_t
952b0471b4bSMichael Tuexen sctp_map_assoc_state(int kernel_state)
953b0471b4bSMichael Tuexen {
954e92c2a8dSMichael Tuexen 	int32_t user_state;
955e92c2a8dSMichael Tuexen 
956e92c2a8dSMichael Tuexen 	if (kernel_state & SCTP_STATE_WAS_ABORTED) {
957e92c2a8dSMichael Tuexen 		user_state = SCTP_CLOSED;
958e92c2a8dSMichael Tuexen 	} else if (kernel_state & SCTP_STATE_SHUTDOWN_PENDING) {
959e92c2a8dSMichael Tuexen 		user_state = SCTP_SHUTDOWN_PENDING;
960e92c2a8dSMichael Tuexen 	} else {
961e92c2a8dSMichael Tuexen 		switch (kernel_state & SCTP_STATE_MASK) {
962e92c2a8dSMichael Tuexen 		case SCTP_STATE_EMPTY:
963e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
964e92c2a8dSMichael Tuexen 			break;
965e92c2a8dSMichael Tuexen 		case SCTP_STATE_INUSE:
966e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
967e92c2a8dSMichael Tuexen 			break;
968e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_WAIT:
969e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_WAIT;
970e92c2a8dSMichael Tuexen 			break;
971e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_ECHOED:
972e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_ECHOED;
973e92c2a8dSMichael Tuexen 			break;
974e92c2a8dSMichael Tuexen 		case SCTP_STATE_OPEN:
975e92c2a8dSMichael Tuexen 			user_state = SCTP_ESTABLISHED;
976e92c2a8dSMichael Tuexen 			break;
977e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_SENT:
978e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_SENT;
979e92c2a8dSMichael Tuexen 			break;
980e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_RECEIVED:
981e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_RECEIVED;
982e92c2a8dSMichael Tuexen 			break;
983e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_ACK_SENT:
984e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_ACK_SENT;
985e92c2a8dSMichael Tuexen 			break;
986e92c2a8dSMichael Tuexen 		default:
987e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
988e92c2a8dSMichael Tuexen 			break;
989e92c2a8dSMichael Tuexen 		}
990e92c2a8dSMichael Tuexen 	}
991e92c2a8dSMichael Tuexen 	return (user_state);
992e92c2a8dSMichael Tuexen }
993e92c2a8dSMichael Tuexen 
994f8829a4aSRandall Stewart int
995a1cb341bSMichael Tuexen sctp_init_asoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
996c979034bSMichael Tuexen     uint32_t override_tag, uint32_t vrf_id, uint16_t o_strms)
997f8829a4aSRandall Stewart {
9980696e120SRandall Stewart 	struct sctp_association *asoc;
9990696e120SRandall Stewart 
1000f8829a4aSRandall Stewart 	/*
1001f8829a4aSRandall Stewart 	 * Anything set to zero is taken care of by the allocation routine's
1002f8829a4aSRandall Stewart 	 * bzero
1003f8829a4aSRandall Stewart 	 */
1004f8829a4aSRandall Stewart 
1005f8829a4aSRandall Stewart 	/*
1006f8829a4aSRandall Stewart 	 * Up front select what scoping to apply on addresses I tell my peer
1007f8829a4aSRandall Stewart 	 * Not sure what to do with these right now, we will need to come up
1008f8829a4aSRandall Stewart 	 * with a way to set them. We may need to pass them through from the
1009f8829a4aSRandall Stewart 	 * caller in the sctp_aloc_assoc() function.
1010f8829a4aSRandall Stewart 	 */
1011f8829a4aSRandall Stewart 	int i;
1012f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
1013f0396ad1SMichael Tuexen 	int j;
1014f0396ad1SMichael Tuexen #endif
1015f0396ad1SMichael Tuexen 
10160696e120SRandall Stewart 	asoc = &stcb->asoc;
1017f8829a4aSRandall Stewart 	/* init all variables to a known value. */
1018839d21d6SMichael Tuexen 	SCTP_SET_STATE(stcb, SCTP_STATE_INUSE);
1019a1cb341bSMichael Tuexen 	asoc->max_burst = inp->sctp_ep.max_burst;
1020a1cb341bSMichael Tuexen 	asoc->fr_max_burst = inp->sctp_ep.fr_max_burst;
1021a1cb341bSMichael Tuexen 	asoc->heart_beat_delay = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT]);
1022a1cb341bSMichael Tuexen 	asoc->cookie_life = inp->sctp_ep.def_cookie_life;
1023a1cb341bSMichael Tuexen 	asoc->sctp_cmt_on_off = inp->sctp_cmt_on_off;
1024f342355aSMichael Tuexen 	asoc->ecn_supported = inp->ecn_supported;
1025dd973b0eSMichael Tuexen 	asoc->prsctp_supported = inp->prsctp_supported;
102644249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
1027c79bec9cSMichael Tuexen 	asoc->auth_supported = inp->auth_supported;
1028c79bec9cSMichael Tuexen 	asoc->asconf_supported = inp->asconf_supported;
1029317e00efSMichael Tuexen 	asoc->reconfig_supported = inp->reconfig_supported;
1030caea9879SMichael Tuexen 	asoc->nrsack_supported = inp->nrsack_supported;
1031cb9b8e6fSMichael Tuexen 	asoc->pktdrop_supported = inp->pktdrop_supported;
103244249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
1033ca85e948SMichael Tuexen 	asoc->sctp_cmt_pf = (uint8_t)0;
1034a1cb341bSMichael Tuexen 	asoc->sctp_frag_point = inp->sctp_frag_point;
1035a1cb341bSMichael Tuexen 	asoc->sctp_features = inp->sctp_features;
1036a1cb341bSMichael Tuexen 	asoc->default_dscp = inp->sctp_ep.default_dscp;
103759b6d5beSMichael Tuexen 	asoc->max_cwnd = inp->max_cwnd;
103842551e99SRandall Stewart #ifdef INET6
1039a1cb341bSMichael Tuexen 	if (inp->sctp_ep.default_flowlabel) {
1040a1cb341bSMichael Tuexen 		asoc->default_flowlabel = inp->sctp_ep.default_flowlabel;
104158bdb691SMichael Tuexen 	} else {
1042a1cb341bSMichael Tuexen 		if (inp->ip_inp.inp.inp_flags & IN6P_AUTOFLOWLABEL) {
1043a1cb341bSMichael Tuexen 			asoc->default_flowlabel = sctp_select_initial_TSN(&inp->sctp_ep);
104458bdb691SMichael Tuexen 			asoc->default_flowlabel &= 0x000fffff;
104558bdb691SMichael Tuexen 			asoc->default_flowlabel |= 0x80000000;
104658bdb691SMichael Tuexen 		} else {
1047f8829a4aSRandall Stewart 			asoc->default_flowlabel = 0;
104858bdb691SMichael Tuexen 		}
104958bdb691SMichael Tuexen 	}
1050f8829a4aSRandall Stewart #endif
10519f22f500SRandall Stewart 	asoc->sb_send_resv = 0;
1052f8829a4aSRandall Stewart 	if (override_tag) {
1053f8829a4aSRandall Stewart 		asoc->my_vtag = override_tag;
1054f8829a4aSRandall Stewart 	} else {
1055a1cb341bSMichael Tuexen 		asoc->my_vtag = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 1);
1056f8829a4aSRandall Stewart 	}
1057de0e935bSRandall Stewart 	/* Get the nonce tags */
1058a1cb341bSMichael Tuexen 	asoc->my_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
1059a1cb341bSMichael Tuexen 	asoc->peer_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
106042551e99SRandall Stewart 	asoc->vrf_id = vrf_id;
1061de0e935bSRandall Stewart 
106218e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
106318e198d3SRandall Stewart 	asoc->tsn_in_at = 0;
106418e198d3SRandall Stewart 	asoc->tsn_out_at = 0;
106518e198d3SRandall Stewart 	asoc->tsn_in_wrapped = 0;
106618e198d3SRandall Stewart 	asoc->tsn_out_wrapped = 0;
106718e198d3SRandall Stewart 	asoc->cumack_log_at = 0;
1068b201f536SRandall Stewart 	asoc->cumack_log_atsnt = 0;
106918e198d3SRandall Stewart #endif
107018e198d3SRandall Stewart #ifdef SCTP_FS_SPEC_LOG
107118e198d3SRandall Stewart 	asoc->fs_index = 0;
107218e198d3SRandall Stewart #endif
1073f8829a4aSRandall Stewart 	asoc->refcnt = 0;
1074f8829a4aSRandall Stewart 	asoc->assoc_up_sent = 0;
1075f8829a4aSRandall Stewart 	asoc->asconf_seq_out = asoc->str_reset_seq_out = asoc->init_seq_number = asoc->sending_seq =
1076a1cb341bSMichael Tuexen 	    sctp_select_initial_TSN(&inp->sctp_ep);
1077c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked = asoc->asconf_seq_out - 1;
1078f8829a4aSRandall Stewart 	/* we are optimisitic here */
1079830d754dSRandall Stewart 	asoc->peer_supports_nat = 0;
1080f8829a4aSRandall Stewart 	asoc->sent_queue_retran_cnt = 0;
1081f8829a4aSRandall Stewart 
1082f8829a4aSRandall Stewart 	/* for CMT */
10838933fa13SRandall Stewart 	asoc->last_net_cmt_send_started = NULL;
1084f8829a4aSRandall Stewart 
1085f8829a4aSRandall Stewart 	/* This will need to be adjusted */
1086f8829a4aSRandall Stewart 	asoc->last_acked_seq = asoc->init_seq_number - 1;
1087f8829a4aSRandall Stewart 	asoc->advanced_peer_ack_point = asoc->last_acked_seq;
1088f8829a4aSRandall Stewart 	asoc->asconf_seq_in = asoc->last_acked_seq;
1089f8829a4aSRandall Stewart 
1090f8829a4aSRandall Stewart 	/* here we are different, we hold the next one we expect */
1091f8829a4aSRandall Stewart 	asoc->str_reset_seq_in = asoc->last_acked_seq + 1;
1092f8829a4aSRandall Stewart 
1093a1cb341bSMichael Tuexen 	asoc->initial_init_rto_max = inp->sctp_ep.initial_init_rto_max;
1094a1cb341bSMichael Tuexen 	asoc->initial_rto = inp->sctp_ep.initial_rto;
1095f8829a4aSRandall Stewart 
109628a6addeSMichael Tuexen 	asoc->default_mtu = inp->sctp_ep.default_mtu;
1097a1cb341bSMichael Tuexen 	asoc->max_init_times = inp->sctp_ep.max_init_times;
1098a1cb341bSMichael Tuexen 	asoc->max_send_times = inp->sctp_ep.max_send_times;
1099a1cb341bSMichael Tuexen 	asoc->def_net_failure = inp->sctp_ep.def_net_failure;
1100a1cb341bSMichael Tuexen 	asoc->def_net_pf_threshold = inp->sctp_ep.def_net_pf_threshold;
1101f8829a4aSRandall Stewart 	asoc->free_chunk_cnt = 0;
1102f8829a4aSRandall Stewart 
1103f8829a4aSRandall Stewart 	asoc->iam_blocking = 0;
1104a1cb341bSMichael Tuexen 	asoc->context = inp->sctp_context;
1105a1cb341bSMichael Tuexen 	asoc->local_strreset_support = inp->local_strreset_support;
1106a1cb341bSMichael Tuexen 	asoc->def_send = inp->def_send;
1107a1cb341bSMichael Tuexen 	asoc->delayed_ack = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV]);
1108a1cb341bSMichael Tuexen 	asoc->sack_freq = inp->sctp_ep.sctp_sack_freq;
1109f8829a4aSRandall Stewart 	asoc->pr_sctp_cnt = 0;
1110f8829a4aSRandall Stewart 	asoc->total_output_queue_size = 0;
1111f8829a4aSRandall Stewart 
1112a1cb341bSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
1113a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 1;
1114a1cb341bSMichael Tuexen 		if (SCTP_IPV6_V6ONLY(inp) == 0) {
1115a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 1;
1116f8829a4aSRandall Stewart 		} else {
1117a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 0;
1118f8829a4aSRandall Stewart 		}
1119f8829a4aSRandall Stewart 	} else {
1120a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 0;
1121a1cb341bSMichael Tuexen 		asoc->scope.ipv4_addr_legal = 1;
1122f8829a4aSRandall Stewart 	}
1123f8829a4aSRandall Stewart 
1124a1cb341bSMichael Tuexen 	asoc->my_rwnd = max(SCTP_SB_LIMIT_RCV(inp->sctp_socket), SCTP_MINIMAL_RWND);
1125a1cb341bSMichael Tuexen 	asoc->peers_rwnd = SCTP_SB_LIMIT_RCV(inp->sctp_socket);
1126f8829a4aSRandall Stewart 
1127a1cb341bSMichael Tuexen 	asoc->smallest_mtu = inp->sctp_frag_point;
1128a1cb341bSMichael Tuexen 	asoc->minrto = inp->sctp_ep.sctp_minrto;
1129a1cb341bSMichael Tuexen 	asoc->maxrto = inp->sctp_ep.sctp_maxrto;
1130f8829a4aSRandall Stewart 
1131f8829a4aSRandall Stewart 	asoc->stream_locked_on = 0;
1132f8829a4aSRandall Stewart 	asoc->ecn_echo_cnt_onq = 0;
1133f8829a4aSRandall Stewart 	asoc->stream_locked = 0;
1134f8829a4aSRandall Stewart 
113542551e99SRandall Stewart 	asoc->send_sack = 1;
113642551e99SRandall Stewart 
113742551e99SRandall Stewart 	LIST_INIT(&asoc->sctp_restricted_addrs);
113842551e99SRandall Stewart 
1139f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->nets);
1140f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->pending_reply_queue);
11412afb3e84SRandall Stewart 	TAILQ_INIT(&asoc->asconf_ack_sent);
1142f8829a4aSRandall Stewart 	/* Setup to fill the hb random cache at first HB */
1143f8829a4aSRandall Stewart 	asoc->hb_random_idx = 4;
1144f8829a4aSRandall Stewart 
1145a1cb341bSMichael Tuexen 	asoc->sctp_autoclose_ticks = inp->sctp_ep.auto_close_time;
1146f8829a4aSRandall Stewart 
1147a1cb341bSMichael Tuexen 	stcb->asoc.congestion_control_module = inp->sctp_ep.sctp_default_cc_module;
1148a1cb341bSMichael Tuexen 	stcb->asoc.cc_functions = sctp_cc_functions[inp->sctp_ep.sctp_default_cc_module];
1149b54d3a6cSRandall Stewart 
1150a1cb341bSMichael Tuexen 	stcb->asoc.stream_scheduling_module = inp->sctp_ep.sctp_default_ss_module;
1151a1cb341bSMichael Tuexen 	stcb->asoc.ss_functions = sctp_ss_functions[inp->sctp_ep.sctp_default_ss_module];
1152f7a77f6fSMichael Tuexen 
1153b54d3a6cSRandall Stewart 	/*
1154f8829a4aSRandall Stewart 	 * Now the stream parameters, here we allocate space for all streams
1155f8829a4aSRandall Stewart 	 * that we request by default.
1156f8829a4aSRandall Stewart 	 */
1157ea44232bSRandall Stewart 	asoc->strm_realoutsize = asoc->streamoutcnt = asoc->pre_open_streams =
1158c979034bSMichael Tuexen 	    o_strms;
1159f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->strmout, struct sctp_stream_out *,
1160f8829a4aSRandall Stewart 	    asoc->streamoutcnt * sizeof(struct sctp_stream_out),
1161207304d4SRandall Stewart 	    SCTP_M_STRMO);
1162f8829a4aSRandall Stewart 	if (asoc->strmout == NULL) {
1163f8829a4aSRandall Stewart 		/* big trouble no memory */
1164c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1165f8829a4aSRandall Stewart 		return (ENOMEM);
1166f8829a4aSRandall Stewart 	}
1167f8829a4aSRandall Stewart 	for (i = 0; i < asoc->streamoutcnt; i++) {
1168f8829a4aSRandall Stewart 		/*
1169f8829a4aSRandall Stewart 		 * inbound side must be set to 0xffff, also NOTE when we get
1170f8829a4aSRandall Stewart 		 * the INIT-ACK back (for INIT sender) we MUST reduce the
1171f8829a4aSRandall Stewart 		 * count (streamoutcnt) but first check if we sent to any of
1172f8829a4aSRandall Stewart 		 * the upper streams that were dropped (if some were). Those
1173f8829a4aSRandall Stewart 		 * that were dropped must be notified to the upper layer as
1174f8829a4aSRandall Stewart 		 * failed to send.
1175f8829a4aSRandall Stewart 		 */
117663d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_ordered = 0;
117763d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_unordered = 0;
1178f8829a4aSRandall Stewart 		TAILQ_INIT(&asoc->strmout[i].outqueue);
1179325c8c46SMichael Tuexen 		asoc->strmout[i].chunks_on_queues = 0;
1180f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
1181f0396ad1SMichael Tuexen 		for (j = 0; j < SCTP_PR_SCTP_MAX + 1; j++) {
1182f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_sent[j] = 0;
1183f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_unsent[j] = 0;
1184f0396ad1SMichael Tuexen 		}
1185f0396ad1SMichael Tuexen #else
1186f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_sent[0] = 0;
1187f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_unsent[0] = 0;
1188f0396ad1SMichael Tuexen #endif
118949656eefSMichael Tuexen 		asoc->strmout[i].sid = i;
1190f8829a4aSRandall Stewart 		asoc->strmout[i].last_msg_incomplete = 0;
11917cca1775SRandall Stewart 		asoc->strmout[i].state = SCTP_STREAM_OPENING;
1192d1ea5fa9SMichael Tuexen 		asoc->ss_functions.sctp_ss_init_stream(stcb, &asoc->strmout[i], NULL);
1193f8829a4aSRandall Stewart 	}
1194f7a77f6fSMichael Tuexen 	asoc->ss_functions.sctp_ss_init(stcb, asoc, 0);
1195f7a77f6fSMichael Tuexen 
1196f8829a4aSRandall Stewart 	/* Now the mapping array */
1197f8829a4aSRandall Stewart 	asoc->mapping_array_size = SCTP_INITIAL_MAPPING_ARRAY;
1198f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->mapping_array, uint8_t *, asoc->mapping_array_size,
1199207304d4SRandall Stewart 	    SCTP_M_MAP);
1200f8829a4aSRandall Stewart 	if (asoc->mapping_array == NULL) {
1201207304d4SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1202c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1203f8829a4aSRandall Stewart 		return (ENOMEM);
1204f8829a4aSRandall Stewart 	}
1205f8829a4aSRandall Stewart 	memset(asoc->mapping_array, 0, asoc->mapping_array_size);
1206b5c16493SMichael Tuexen 	SCTP_MALLOC(asoc->nr_mapping_array, uint8_t *, asoc->mapping_array_size,
1207830d754dSRandall Stewart 	    SCTP_M_MAP);
1208bf1be571SRandall Stewart 	if (asoc->nr_mapping_array == NULL) {
1209bf1be571SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1210bf1be571SRandall Stewart 		SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1211bf1be571SRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1212bf1be571SRandall Stewart 		return (ENOMEM);
1213bf1be571SRandall Stewart 	}
1214b5c16493SMichael Tuexen 	memset(asoc->nr_mapping_array, 0, asoc->mapping_array_size);
1215830d754dSRandall Stewart 
1216f8829a4aSRandall Stewart 	/* Now the init of the other outqueues */
1217f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->free_chunks);
1218f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->control_send_queue);
1219c54a18d2SRandall Stewart 	TAILQ_INIT(&asoc->asconf_send_queue);
1220f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->send_queue);
1221f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->sent_queue);
1222f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->resetHead);
1223a1cb341bSMichael Tuexen 	asoc->max_inbound_streams = inp->sctp_ep.max_open_streams_intome;
1224f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->asconf_queue);
1225f8829a4aSRandall Stewart 	/* authentication fields */
1226f8829a4aSRandall Stewart 	asoc->authinfo.random = NULL;
1227830d754dSRandall Stewart 	asoc->authinfo.active_keyid = 0;
1228f8829a4aSRandall Stewart 	asoc->authinfo.assoc_key = NULL;
1229f8829a4aSRandall Stewart 	asoc->authinfo.assoc_keyid = 0;
1230f8829a4aSRandall Stewart 	asoc->authinfo.recv_key = NULL;
1231f8829a4aSRandall Stewart 	asoc->authinfo.recv_keyid = 0;
1232f8829a4aSRandall Stewart 	LIST_INIT(&asoc->shared_keys);
1233f42a358aSRandall Stewart 	asoc->marked_retrans = 0;
1234a1cb341bSMichael Tuexen 	asoc->port = inp->sctp_ep.port;
1235f42a358aSRandall Stewart 	asoc->timoinit = 0;
1236f42a358aSRandall Stewart 	asoc->timodata = 0;
1237f42a358aSRandall Stewart 	asoc->timosack = 0;
1238f42a358aSRandall Stewart 	asoc->timoshutdown = 0;
1239f42a358aSRandall Stewart 	asoc->timoheartbeat = 0;
1240f42a358aSRandall Stewart 	asoc->timocookie = 0;
1241f42a358aSRandall Stewart 	asoc->timoshutdownack = 0;
12426e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&asoc->start_time);
12436e55db54SRandall Stewart 	asoc->discontinuity_time = asoc->start_time;
1244f0396ad1SMichael Tuexen 	for (i = 0; i < SCTP_PR_SCTP_MAX + 1; i++) {
1245f0396ad1SMichael Tuexen 		asoc->abandoned_unsent[i] = 0;
1246f0396ad1SMichael Tuexen 		asoc->abandoned_sent[i] = 0;
1247f0396ad1SMichael Tuexen 	}
1248eacc51c5SRandall Stewart 	/*
1249eacc51c5SRandall Stewart 	 * sa_ignore MEMLEAK {memory is put in the assoc mapping array and
125077acdc25SRandall Stewart 	 * freed later when the association is freed.
1251eacc51c5SRandall Stewart 	 */
1252f8829a4aSRandall Stewart 	return (0);
1253f8829a4aSRandall Stewart }
1254f8829a4aSRandall Stewart 
12550e13104dSRandall Stewart void
12560e13104dSRandall Stewart sctp_print_mapping_array(struct sctp_association *asoc)
12570e13104dSRandall Stewart {
1258aed5947cSMichael Tuexen 	unsigned int i, limit;
12590e13104dSRandall Stewart 
1260cd3fd531SMichael Tuexen 	SCTP_PRINTF("Mapping array size: %d, baseTSN: %8.8x, cumAck: %8.8x, highestTSN: (%8.8x, %8.8x).\n",
12610e13104dSRandall Stewart 	    asoc->mapping_array_size,
12620e13104dSRandall Stewart 	    asoc->mapping_array_base_tsn,
12630e13104dSRandall Stewart 	    asoc->cumulative_tsn,
1264aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_map,
1265aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_nr_map);
1266aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
126760990c0cSMichael Tuexen 		if (asoc->mapping_array[limit - 1] != 0) {
126877acdc25SRandall Stewart 			break;
126977acdc25SRandall Stewart 		}
127077acdc25SRandall Stewart 	}
1271cd3fd531SMichael Tuexen 	SCTP_PRINTF("Renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
127277acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1273cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
127477acdc25SRandall Stewart 	}
1275aed5947cSMichael Tuexen 	if (limit % 16)
1276cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
1277aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
1278aed5947cSMichael Tuexen 		if (asoc->nr_mapping_array[limit - 1]) {
127977acdc25SRandall Stewart 			break;
128077acdc25SRandall Stewart 		}
128177acdc25SRandall Stewart 	}
1282cd3fd531SMichael Tuexen 	SCTP_PRINTF("Non renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
128377acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1284cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->nr_mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
12850e13104dSRandall Stewart 	}
1286aed5947cSMichael Tuexen 	if (limit % 16)
1287cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
12880e13104dSRandall Stewart }
12890e13104dSRandall Stewart 
1290f8829a4aSRandall Stewart int
12910696e120SRandall Stewart sctp_expand_mapping_array(struct sctp_association *asoc, uint32_t needed)
1292f8829a4aSRandall Stewart {
1293f8829a4aSRandall Stewart 	/* mapping array needs to grow */
1294b5c16493SMichael Tuexen 	uint8_t *new_array1, *new_array2;
12950696e120SRandall Stewart 	uint32_t new_size;
1296f8829a4aSRandall Stewart 
12970696e120SRandall Stewart 	new_size = asoc->mapping_array_size + ((needed + 7) / 8 + SCTP_MAPPING_ARRAY_INCR);
1298b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array1, uint8_t *, new_size, SCTP_M_MAP);
1299b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array2, uint8_t *, new_size, SCTP_M_MAP);
1300b5c16493SMichael Tuexen 	if ((new_array1 == NULL) || (new_array2 == NULL)) {
1301f8829a4aSRandall Stewart 		/* can't get more, forget it */
1302b5c16493SMichael Tuexen 		SCTP_PRINTF("No memory for expansion of SCTP mapping array %d\n", new_size);
1303b5c16493SMichael Tuexen 		if (new_array1) {
1304b5c16493SMichael Tuexen 			SCTP_FREE(new_array1, SCTP_M_MAP);
1305b5c16493SMichael Tuexen 		}
1306b5c16493SMichael Tuexen 		if (new_array2) {
1307b5c16493SMichael Tuexen 			SCTP_FREE(new_array2, SCTP_M_MAP);
1308b5c16493SMichael Tuexen 		}
1309f8829a4aSRandall Stewart 		return (-1);
1310f8829a4aSRandall Stewart 	}
1311b5c16493SMichael Tuexen 	memset(new_array1, 0, new_size);
1312b5c16493SMichael Tuexen 	memset(new_array2, 0, new_size);
1313b5c16493SMichael Tuexen 	memcpy(new_array1, asoc->mapping_array, asoc->mapping_array_size);
1314b5c16493SMichael Tuexen 	memcpy(new_array2, asoc->nr_mapping_array, asoc->mapping_array_size);
1315207304d4SRandall Stewart 	SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1316830d754dSRandall Stewart 	SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP);
1317b5c16493SMichael Tuexen 	asoc->mapping_array = new_array1;
1318b5c16493SMichael Tuexen 	asoc->nr_mapping_array = new_array2;
1319b5c16493SMichael Tuexen 	asoc->mapping_array_size = new_size;
1320830d754dSRandall Stewart 	return (0);
1321830d754dSRandall Stewart }
1322830d754dSRandall Stewart 
13238933fa13SRandall Stewart 
132442551e99SRandall Stewart static void
132542551e99SRandall Stewart sctp_iterator_work(struct sctp_iterator *it)
132642551e99SRandall Stewart {
132742551e99SRandall Stewart 	int iteration_count = 0;
132842551e99SRandall Stewart 	int inp_skip = 0;
1329ec4c19fcSRandall Stewart 	int first_in = 1;
1330ec4c19fcSRandall Stewart 	struct sctp_inpcb *tinp;
133142551e99SRandall Stewart 
1332ec4c19fcSRandall Stewart 	SCTP_INP_INFO_RLOCK();
133342551e99SRandall Stewart 	SCTP_ITERATOR_LOCK();
1334dcb436c9SMichael Tuexen 	sctp_it_ctl.cur_it = it;
1335ad81507eSRandall Stewart 	if (it->inp) {
1336ec4c19fcSRandall Stewart 		SCTP_INP_RLOCK(it->inp);
133742551e99SRandall Stewart 		SCTP_INP_DECR_REF(it->inp);
1338ad81507eSRandall Stewart 	}
133942551e99SRandall Stewart 	if (it->inp == NULL) {
134042551e99SRandall Stewart 		/* iterator is complete */
134142551e99SRandall Stewart done_with_iterator:
1342dcb436c9SMichael Tuexen 		sctp_it_ctl.cur_it = NULL;
134342551e99SRandall Stewart 		SCTP_ITERATOR_UNLOCK();
1344ec4c19fcSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
134542551e99SRandall Stewart 		if (it->function_atend != NULL) {
134642551e99SRandall Stewart 			(*it->function_atend) (it->pointer, it->val);
134742551e99SRandall Stewart 		}
1348207304d4SRandall Stewart 		SCTP_FREE(it, SCTP_M_ITER);
134942551e99SRandall Stewart 		return;
135042551e99SRandall Stewart 	}
135142551e99SRandall Stewart select_a_new_ep:
1352ec4c19fcSRandall Stewart 	if (first_in) {
1353ec4c19fcSRandall Stewart 		first_in = 0;
1354ec4c19fcSRandall Stewart 	} else {
1355f7517433SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1356ec4c19fcSRandall Stewart 	}
135742551e99SRandall Stewart 	while (((it->pcb_flags) &&
135842551e99SRandall Stewart 	    ((it->inp->sctp_flags & it->pcb_flags) != it->pcb_flags)) ||
135942551e99SRandall Stewart 	    ((it->pcb_features) &&
136042551e99SRandall Stewart 	    ((it->inp->sctp_features & it->pcb_features) != it->pcb_features))) {
136142551e99SRandall Stewart 		/* endpoint flags or features don't match, so keep looking */
136242551e99SRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
1363f7517433SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
136442551e99SRandall Stewart 			goto done_with_iterator;
136542551e99SRandall Stewart 		}
1366ec4c19fcSRandall Stewart 		tinp = it->inp;
136742551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
1368ec4c19fcSRandall Stewart 		SCTP_INP_RUNLOCK(tinp);
136942551e99SRandall Stewart 		if (it->inp == NULL) {
137042551e99SRandall Stewart 			goto done_with_iterator;
137142551e99SRandall Stewart 		}
137242551e99SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1373f7517433SRandall Stewart 	}
137442551e99SRandall Stewart 	/* now go through each assoc which is in the desired state */
137542551e99SRandall Stewart 	if (it->done_current_ep == 0) {
137642551e99SRandall Stewart 		if (it->function_inp != NULL)
137742551e99SRandall Stewart 			inp_skip = (*it->function_inp) (it->inp, it->pointer, it->val);
137842551e99SRandall Stewart 		it->done_current_ep = 1;
137942551e99SRandall Stewart 	}
138042551e99SRandall Stewart 	if (it->stcb == NULL) {
138142551e99SRandall Stewart 		/* run the per instance function */
138242551e99SRandall Stewart 		it->stcb = LIST_FIRST(&it->inp->sctp_asoc_list);
138342551e99SRandall Stewart 	}
138442551e99SRandall Stewart 	if ((inp_skip) || it->stcb == NULL) {
138542551e99SRandall Stewart 		if (it->function_inp_end != NULL) {
138642551e99SRandall Stewart 			inp_skip = (*it->function_inp_end) (it->inp,
138742551e99SRandall Stewart 			    it->pointer,
138842551e99SRandall Stewart 			    it->val);
138942551e99SRandall Stewart 		}
139042551e99SRandall Stewart 		SCTP_INP_RUNLOCK(it->inp);
139142551e99SRandall Stewart 		goto no_stcb;
139242551e99SRandall Stewart 	}
139342551e99SRandall Stewart 	while (it->stcb) {
139442551e99SRandall Stewart 		SCTP_TCB_LOCK(it->stcb);
139542551e99SRandall Stewart 		if (it->asoc_state && ((it->stcb->asoc.state & it->asoc_state) != it->asoc_state)) {
139642551e99SRandall Stewart 			/* not in the right state... keep looking */
139742551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
139842551e99SRandall Stewart 			goto next_assoc;
139942551e99SRandall Stewart 		}
140042551e99SRandall Stewart 		/* see if we have limited out the iterator loop */
140142551e99SRandall Stewart 		iteration_count++;
140242551e99SRandall Stewart 		if (iteration_count > SCTP_ITERATOR_MAX_AT_ONCE) {
140342551e99SRandall Stewart 			/* Pause to let others grab the lock */
140442551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, 1);
140542551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
1406c4739e2fSRandall Stewart 			SCTP_INP_INCR_REF(it->inp);
140742551e99SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
140842551e99SRandall Stewart 			SCTP_ITERATOR_UNLOCK();
1409ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1410ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RLOCK();
141142551e99SRandall Stewart 			SCTP_ITERATOR_LOCK();
1412f7517433SRandall Stewart 			if (sctp_it_ctl.iterator_flags) {
1413f7517433SRandall Stewart 				/* We won't be staying here */
1414f7517433SRandall Stewart 				SCTP_INP_DECR_REF(it->inp);
1415f7517433SRandall Stewart 				atomic_add_int(&it->stcb->asoc.refcnt, -1);
1416f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1417f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_IT) {
1418f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_IT;
1419f7517433SRandall Stewart 					goto done_with_iterator;
1420f7517433SRandall Stewart 				}
1421f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1422f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_INP) {
1423f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_INP;
1424f7517433SRandall Stewart 					goto no_stcb;
1425f7517433SRandall Stewart 				}
1426f7517433SRandall Stewart 				/* If we reach here huh? */
1427cd3fd531SMichael Tuexen 				SCTP_PRINTF("Unknown it ctl flag %x\n",
1428f7517433SRandall Stewart 				    sctp_it_ctl.iterator_flags);
1429f7517433SRandall Stewart 				sctp_it_ctl.iterator_flags = 0;
1430f7517433SRandall Stewart 			}
143142551e99SRandall Stewart 			SCTP_INP_RLOCK(it->inp);
1432c4739e2fSRandall Stewart 			SCTP_INP_DECR_REF(it->inp);
143342551e99SRandall Stewart 			SCTP_TCB_LOCK(it->stcb);
143442551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, -1);
143542551e99SRandall Stewart 			iteration_count = 0;
143642551e99SRandall Stewart 		}
14370053ed28SMichael Tuexen 
143842551e99SRandall Stewart 		/* run function on this one */
143942551e99SRandall Stewart 		(*it->function_assoc) (it->inp, it->stcb, it->pointer, it->val);
144042551e99SRandall Stewart 
144142551e99SRandall Stewart 		/*
144242551e99SRandall Stewart 		 * we lie here, it really needs to have its own type but
144342551e99SRandall Stewart 		 * first I must verify that this won't effect things :-0
144442551e99SRandall Stewart 		 */
144542551e99SRandall Stewart 		if (it->no_chunk_output == 0)
1446ceaad40aSRandall Stewart 			sctp_chunk_output(it->inp, it->stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
144742551e99SRandall Stewart 
144842551e99SRandall Stewart 		SCTP_TCB_UNLOCK(it->stcb);
144942551e99SRandall Stewart next_assoc:
145042551e99SRandall Stewart 		it->stcb = LIST_NEXT(it->stcb, sctp_tcblist);
145142551e99SRandall Stewart 		if (it->stcb == NULL) {
145242551e99SRandall Stewart 			/* Run last function */
145342551e99SRandall Stewart 			if (it->function_inp_end != NULL) {
145442551e99SRandall Stewart 				inp_skip = (*it->function_inp_end) (it->inp,
145542551e99SRandall Stewart 				    it->pointer,
145642551e99SRandall Stewart 				    it->val);
145742551e99SRandall Stewart 			}
145842551e99SRandall Stewart 		}
145942551e99SRandall Stewart 	}
146042551e99SRandall Stewart 	SCTP_INP_RUNLOCK(it->inp);
146142551e99SRandall Stewart no_stcb:
146242551e99SRandall Stewart 	/* done with all assocs on this endpoint, move on to next endpoint */
146342551e99SRandall Stewart 	it->done_current_ep = 0;
146442551e99SRandall Stewart 	if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
146542551e99SRandall Stewart 		it->inp = NULL;
146642551e99SRandall Stewart 	} else {
146742551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
146842551e99SRandall Stewart 	}
146942551e99SRandall Stewart 	if (it->inp == NULL) {
147042551e99SRandall Stewart 		goto done_with_iterator;
147142551e99SRandall Stewart 	}
147242551e99SRandall Stewart 	goto select_a_new_ep;
147342551e99SRandall Stewart }
147442551e99SRandall Stewart 
147542551e99SRandall Stewart void
147642551e99SRandall Stewart sctp_iterator_worker(void)
147742551e99SRandall Stewart {
14784a9ef3f8SMichael Tuexen 	struct sctp_iterator *it, *nit;
147942551e99SRandall Stewart 
148042551e99SRandall Stewart 	/* This function is called with the WQ lock in place */
148142551e99SRandall Stewart 
1482f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 1;
14834a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) {
148442551e99SRandall Stewart 		/* now lets work on this one */
1485f7517433SRandall Stewart 		TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr);
148642551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
1487f7517433SRandall Stewart 		CURVNET_SET(it->vn);
148842551e99SRandall Stewart 		sctp_iterator_work(it);
1489f7517433SRandall Stewart 		CURVNET_RESTORE();
149042551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
14913c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
149242551e99SRandall Stewart 	}
1493f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 0;
149442551e99SRandall Stewart 	return;
149542551e99SRandall Stewart }
149642551e99SRandall Stewart 
1497f8829a4aSRandall Stewart 
1498f8829a4aSRandall Stewart static void
1499f8829a4aSRandall Stewart sctp_handle_addr_wq(void)
1500f8829a4aSRandall Stewart {
1501f8829a4aSRandall Stewart 	/* deal with the ADDR wq from the rtsock calls */
15024a9ef3f8SMichael Tuexen 	struct sctp_laddr *wi, *nwi;
150342551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
1504f8829a4aSRandall Stewart 
150542551e99SRandall Stewart 	SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
1506207304d4SRandall Stewart 	    sizeof(struct sctp_asconf_iterator), SCTP_M_ASC_IT);
150742551e99SRandall Stewart 	if (asc == NULL) {
150842551e99SRandall Stewart 		/* Try later, no memory */
1509f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
1510f8829a4aSRandall Stewart 		    (struct sctp_inpcb *)NULL,
1511f8829a4aSRandall Stewart 		    (struct sctp_tcb *)NULL,
1512f8829a4aSRandall Stewart 		    (struct sctp_nets *)NULL);
151342551e99SRandall Stewart 		return;
1514f8829a4aSRandall Stewart 	}
151542551e99SRandall Stewart 	LIST_INIT(&asc->list_of_work);
151642551e99SRandall Stewart 	asc->cnt = 0;
1517f7517433SRandall Stewart 
15184a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(wi, &SCTP_BASE_INFO(addr_wq), sctp_nxt_addr, nwi) {
151942551e99SRandall Stewart 		LIST_REMOVE(wi, sctp_nxt_addr);
152042551e99SRandall Stewart 		LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
152142551e99SRandall Stewart 		asc->cnt++;
1522f8829a4aSRandall Stewart 	}
1523f7517433SRandall Stewart 
152442551e99SRandall Stewart 	if (asc->cnt == 0) {
1525207304d4SRandall Stewart 		SCTP_FREE(asc, SCTP_M_ASC_IT);
152642551e99SRandall Stewart 	} else {
15272b1c7de4SMichael Tuexen 		int ret;
15282b1c7de4SMichael Tuexen 
15292b1c7de4SMichael Tuexen 		ret = sctp_initiate_iterator(sctp_asconf_iterator_ep,
15301b649582SRandall Stewart 		    sctp_asconf_iterator_stcb,
153142551e99SRandall Stewart 		    NULL,	/* No ep end for boundall */
153242551e99SRandall Stewart 		    SCTP_PCB_FLAGS_BOUNDALL,
153342551e99SRandall Stewart 		    SCTP_PCB_ANY_FEATURES,
15341b649582SRandall Stewart 		    SCTP_ASOC_ANY_STATE,
15351b649582SRandall Stewart 		    (void *)asc, 0,
15361b649582SRandall Stewart 		    sctp_asconf_iterator_end, NULL, 0);
15372b1c7de4SMichael Tuexen 		if (ret) {
15382b1c7de4SMichael Tuexen 			SCTP_PRINTF("Failed to initiate iterator for handle_addr_wq\n");
1539b7b84c0eSMichael Tuexen 			/*
1540b7b84c0eSMichael Tuexen 			 * Freeing if we are stopping or put back on the
1541b7b84c0eSMichael Tuexen 			 * addr_wq.
1542b7b84c0eSMichael Tuexen 			 */
15432b1c7de4SMichael Tuexen 			if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) {
15442b1c7de4SMichael Tuexen 				sctp_asconf_iterator_end(asc, 0);
15452b1c7de4SMichael Tuexen 			} else {
15462b1c7de4SMichael Tuexen 				LIST_FOREACH(wi, &asc->list_of_work, sctp_nxt_addr) {
15472b1c7de4SMichael Tuexen 					LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
15482b1c7de4SMichael Tuexen 				}
15492b1c7de4SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
15502b1c7de4SMichael Tuexen 			}
15512b1c7de4SMichael Tuexen 		}
155242551e99SRandall Stewart 	}
1553f8829a4aSRandall Stewart }
1554f8829a4aSRandall Stewart 
1555f8829a4aSRandall Stewart void
1556f8829a4aSRandall Stewart sctp_timeout_handler(void *t)
1557f8829a4aSRandall Stewart {
1558f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1559f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1560f8829a4aSRandall Stewart 	struct sctp_nets *net;
1561f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1562267dbe63SMichael Tuexen 	struct mbuf *op_err;
1563ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1564ceaad40aSRandall Stewart 	struct socket *so;
1565ceaad40aSRandall Stewart #endif
1566548f47a8SMichael Tuexen 	int did_output;
1567fa89f692SMichael Tuexen 	int type;
1568f8829a4aSRandall Stewart 
1569f8829a4aSRandall Stewart 	tmr = (struct sctp_timer *)t;
1570f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)tmr->ep;
1571f8829a4aSRandall Stewart 	stcb = (struct sctp_tcb *)tmr->tcb;
1572f8829a4aSRandall Stewart 	net = (struct sctp_nets *)tmr->net;
15738518270eSMichael Tuexen 	CURVNET_SET((struct vnet *)tmr->vnet);
1574f8829a4aSRandall Stewart 	did_output = 1;
1575f8829a4aSRandall Stewart 
1576f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1577f8829a4aSRandall Stewart 	sctp_audit_log(0xF0, (uint8_t)tmr->type);
1578f8829a4aSRandall Stewart 	sctp_auditing(3, inp, stcb, net);
1579f8829a4aSRandall Stewart #endif
1580f8829a4aSRandall Stewart 
1581f8829a4aSRandall Stewart 	/* sanity checks... */
1582f8829a4aSRandall Stewart 	if (tmr->self != (void *)tmr) {
1583f8829a4aSRandall Stewart 		/*
1584ad81507eSRandall Stewart 		 * SCTP_PRINTF("Stale SCTP timer fired (%p), ignoring...\n",
1585dd294dceSMichael Tuexen 		 * (void *)tmr);
1586f8829a4aSRandall Stewart 		 */
15878518270eSMichael Tuexen 		CURVNET_RESTORE();
1588f8829a4aSRandall Stewart 		return;
1589f8829a4aSRandall Stewart 	}
1590a5d547adSRandall Stewart 	tmr->stopped_from = 0xa001;
1591f8829a4aSRandall Stewart 	if (!SCTP_IS_TIMER_TYPE_VALID(tmr->type)) {
1592f8829a4aSRandall Stewart 		/*
1593ad81507eSRandall Stewart 		 * SCTP_PRINTF("SCTP timer fired with invalid type: 0x%x\n",
1594f8829a4aSRandall Stewart 		 * tmr->type);
1595f8829a4aSRandall Stewart 		 */
15968518270eSMichael Tuexen 		CURVNET_RESTORE();
1597f8829a4aSRandall Stewart 		return;
1598f8829a4aSRandall Stewart 	}
1599a5d547adSRandall Stewart 	tmr->stopped_from = 0xa002;
1600f8829a4aSRandall Stewart 	if ((tmr->type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL)) {
16018518270eSMichael Tuexen 		CURVNET_RESTORE();
1602f8829a4aSRandall Stewart 		return;
1603f8829a4aSRandall Stewart 	}
1604f8829a4aSRandall Stewart 	/* if this is an iterator timeout, get the struct and clear inp */
1605a5d547adSRandall Stewart 	tmr->stopped_from = 0xa003;
1606f8829a4aSRandall Stewart 	if (inp) {
1607f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
1608aa1808b7SMichael Tuexen 		if ((inp->sctp_socket == NULL) &&
1609f8829a4aSRandall Stewart 		    ((tmr->type != SCTP_TIMER_TYPE_INPKILL) &&
1610810ec536SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_INIT) &&
1611a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SEND) &&
1612a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_RECV) &&
1613a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_HEARTBEAT) &&
1614f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWN) &&
1615f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNACK) &&
1616f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNGUARD) &&
16172c62ba73SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_ASOCKILL))) {
1618f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
16198518270eSMichael Tuexen 			CURVNET_RESTORE();
1620f8829a4aSRandall Stewart 			return;
1621f8829a4aSRandall Stewart 		}
1622f8829a4aSRandall Stewart 	}
1623a5d547adSRandall Stewart 	tmr->stopped_from = 0xa004;
1624f8829a4aSRandall Stewart 	if (stcb) {
1625c105859eSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1626f8829a4aSRandall Stewart 		if (stcb->asoc.state == 0) {
1627c105859eSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1628f8829a4aSRandall Stewart 			if (inp) {
1629f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1630f8829a4aSRandall Stewart 			}
16318518270eSMichael Tuexen 			CURVNET_RESTORE();
1632f8829a4aSRandall Stewart 			return;
1633f8829a4aSRandall Stewart 		}
1634f8829a4aSRandall Stewart 	}
1635fa89f692SMichael Tuexen 	type = tmr->type;
1636a5d547adSRandall Stewart 	tmr->stopped_from = 0xa005;
1637fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer type %d goes off\n", type);
1638139bc87fSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
1639f8829a4aSRandall Stewart 		if (inp) {
1640f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
1641f8829a4aSRandall Stewart 		}
1642207304d4SRandall Stewart 		if (stcb) {
1643207304d4SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1644207304d4SRandall Stewart 		}
16458518270eSMichael Tuexen 		CURVNET_RESTORE();
1646f8829a4aSRandall Stewart 		return;
1647f8829a4aSRandall Stewart 	}
1648a5d547adSRandall Stewart 	tmr->stopped_from = 0xa006;
1649a5d547adSRandall Stewart 
1650f8829a4aSRandall Stewart 	if (stcb) {
1651f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
165250cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
1653fa89f692SMichael Tuexen 		if ((type != SCTP_TIMER_TYPE_ASOCKILL) &&
1654b54d3a6cSRandall Stewart 		    ((stcb->asoc.state == 0) ||
1655b54d3a6cSRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED))) {
1656b54d3a6cSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1657b54d3a6cSRandall Stewart 			if (inp) {
1658b54d3a6cSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1659b54d3a6cSRandall Stewart 			}
16608518270eSMichael Tuexen 			CURVNET_RESTORE();
1661b54d3a6cSRandall Stewart 			return;
1662b54d3a6cSRandall Stewart 		}
16632c62ba73SMichael Tuexen 	} else if (inp != NULL) {
16642c62ba73SMichael Tuexen 		if (type != SCTP_TIMER_TYPE_INPKILL) {
16652c62ba73SMichael Tuexen 			SCTP_INP_WLOCK(inp);
16662c62ba73SMichael Tuexen 		}
16672c62ba73SMichael Tuexen 	} else {
16682c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_LOCK();
1669f8829a4aSRandall Stewart 	}
1670cd0a4ff6SPedro F. Giffuni 	/* record in stopped what t-o occurred */
1671fa89f692SMichael Tuexen 	tmr->stopped_from = type;
167244b7479bSRandall Stewart 
1673f8829a4aSRandall Stewart 	/* mark as being serviced now */
167444b7479bSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
167544b7479bSRandall Stewart 		/*
167644b7479bSRandall Stewart 		 * Callout has been rescheduled.
167744b7479bSRandall Stewart 		 */
167844b7479bSRandall Stewart 		goto get_out;
167944b7479bSRandall Stewart 	}
168044b7479bSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
168144b7479bSRandall Stewart 		/*
168244b7479bSRandall Stewart 		 * Not active, so no action.
168344b7479bSRandall Stewart 		 */
168444b7479bSRandall Stewart 		goto get_out;
168544b7479bSRandall Stewart 	}
1686139bc87fSRandall Stewart 	SCTP_OS_TIMER_DEACTIVATE(&tmr->timer);
1687f8829a4aSRandall Stewart 
1688f8829a4aSRandall Stewart 	/* call the handler for the appropriate timer type */
1689fa89f692SMichael Tuexen 	switch (type) {
1690f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1691f8829a4aSRandall Stewart 		sctp_handle_addr_wq();
1692f8829a4aSRandall Stewart 		break;
1693f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1694ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1695ad81507eSRandall Stewart 			break;
1696ad81507eSRandall Stewart 		}
1697f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timodata);
1698f42a358aSRandall Stewart 		stcb->asoc.timodata++;
1699f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
1700f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1701f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1702f8829a4aSRandall Stewart 		}
1703b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
170460990c0cSMichael Tuexen 		if (sctp_t3rxt_timer(inp, stcb, net)) {
1705f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1706f8829a4aSRandall Stewart 
1707f8829a4aSRandall Stewart 			goto out_decr;
1708f8829a4aSRandall Stewart 		}
1709b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1710f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1711f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1712f8829a4aSRandall Stewart #endif
1713ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1714f8829a4aSRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
17154a9ef3f8SMichael Tuexen 		    (stcb->asoc.sent_queue_cnt > 0)) {
1716f8829a4aSRandall Stewart 			struct sctp_tmit_chunk *chk;
1717f8829a4aSRandall Stewart 
1718f8829a4aSRandall Stewart 			/*
1719f8829a4aSRandall Stewart 			 * safeguard. If there on some on the sent queue
1720f8829a4aSRandall Stewart 			 * somewhere but no timers running something is
1721f8829a4aSRandall Stewart 			 * wrong... so we start a timer on the first chunk
1722f8829a4aSRandall Stewart 			 * on the send queue on whatever net it is sent to.
1723f8829a4aSRandall Stewart 			 */
1724f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1725f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb,
1726f8829a4aSRandall Stewart 			    chk->whoTo);
1727f8829a4aSRandall Stewart 		}
1728f8829a4aSRandall Stewart 		break;
1729f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1730ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1731ad81507eSRandall Stewart 			break;
1732ad81507eSRandall Stewart 		}
1733f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinit);
1734f42a358aSRandall Stewart 		stcb->asoc.timoinit++;
1735f8829a4aSRandall Stewart 		if (sctp_t1init_timer(inp, stcb, net)) {
1736f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1737f8829a4aSRandall Stewart 			goto out_decr;
1738f8829a4aSRandall Stewart 		}
1739f8829a4aSRandall Stewart 		/* We do output but not here */
1740f8829a4aSRandall Stewart 		did_output = 0;
1741f8829a4aSRandall Stewart 		break;
1742f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1743ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1744ad81507eSRandall Stewart 			break;
1745ca85e948SMichael Tuexen 		}
1746f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timosack);
1747f42a358aSRandall Stewart 		stcb->asoc.timosack++;
1748689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_NOT_LOCKED);
1749f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1750f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1751f8829a4aSRandall Stewart #endif
1752ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SACK_TMR, SCTP_SO_NOT_LOCKED);
1753f8829a4aSRandall Stewart 		break;
1754f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
1755ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1756ad81507eSRandall Stewart 			break;
1757ad81507eSRandall Stewart 		}
1758f8829a4aSRandall Stewart 		if (sctp_shutdown_timer(inp, stcb, net)) {
1759f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1760f8829a4aSRandall Stewart 			goto out_decr;
1761f8829a4aSRandall Stewart 		}
1762f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdown);
1763f42a358aSRandall Stewart 		stcb->asoc.timoshutdown++;
1764f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1765f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1766f8829a4aSRandall Stewart #endif
1767ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_NOT_LOCKED);
1768f8829a4aSRandall Stewart 		break;
1769f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
1770ca85e948SMichael Tuexen 		if ((stcb == NULL) || (inp == NULL) || (net == NULL)) {
1771ad81507eSRandall Stewart 			break;
1772ad81507eSRandall Stewart 		}
1773f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoheartbeat);
1774f42a358aSRandall Stewart 		stcb->asoc.timoheartbeat++;
1775ca85e948SMichael Tuexen 		if (sctp_heartbeat_timer(inp, stcb, net)) {
1776f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1777f8829a4aSRandall Stewart 			goto out_decr;
1778f8829a4aSRandall Stewart 		}
1779f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1780ca85e948SMichael Tuexen 		sctp_auditing(4, inp, stcb, net);
1781f8829a4aSRandall Stewart #endif
1782ca85e948SMichael Tuexen 		if (!(net->dest_state & SCTP_ADDR_NOHB)) {
1783629749b6SMichael Tuexen 			sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
1784ceaad40aSRandall Stewart 			sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_HB_TMR, SCTP_SO_NOT_LOCKED);
1785f8829a4aSRandall Stewart 		}
1786f8829a4aSRandall Stewart 		break;
1787f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
1788ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1789ad81507eSRandall Stewart 			break;
1790ad81507eSRandall Stewart 		}
17910053ed28SMichael Tuexen 
1792f8829a4aSRandall Stewart 		if (sctp_cookie_timer(inp, stcb, net)) {
1793f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1794f8829a4aSRandall Stewart 			goto out_decr;
1795f8829a4aSRandall Stewart 		}
1796f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timocookie);
1797f42a358aSRandall Stewart 		stcb->asoc.timocookie++;
1798f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1799f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1800f8829a4aSRandall Stewart #endif
1801f8829a4aSRandall Stewart 		/*
1802f8829a4aSRandall Stewart 		 * We consider T3 and Cookie timer pretty much the same with
1803f8829a4aSRandall Stewart 		 * respect to where from in chunk_output.
1804f8829a4aSRandall Stewart 		 */
1805ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1806f8829a4aSRandall Stewart 		break;
1807f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
1808f8829a4aSRandall Stewart 		{
1809f8829a4aSRandall Stewart 			struct timeval tv;
1810f8829a4aSRandall Stewart 			int i, secret;
1811f8829a4aSRandall Stewart 
1812ad81507eSRandall Stewart 			if (inp == NULL) {
1813ad81507eSRandall Stewart 				break;
1814ad81507eSRandall Stewart 			}
1815f8829a4aSRandall Stewart 			SCTP_STAT_INCR(sctps_timosecret);
18166e55db54SRandall Stewart 			(void)SCTP_GETTIME_TIMEVAL(&tv);
1817f8829a4aSRandall Stewart 			inp->sctp_ep.time_of_secret_change = tv.tv_sec;
1818f8829a4aSRandall Stewart 			inp->sctp_ep.last_secret_number =
1819f8829a4aSRandall Stewart 			    inp->sctp_ep.current_secret_number;
1820f8829a4aSRandall Stewart 			inp->sctp_ep.current_secret_number++;
1821f8829a4aSRandall Stewart 			if (inp->sctp_ep.current_secret_number >=
1822f8829a4aSRandall Stewart 			    SCTP_HOW_MANY_SECRETS) {
1823f8829a4aSRandall Stewart 				inp->sctp_ep.current_secret_number = 0;
1824f8829a4aSRandall Stewart 			}
1825f8829a4aSRandall Stewart 			secret = (int)inp->sctp_ep.current_secret_number;
1826f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) {
1827f8829a4aSRandall Stewart 				inp->sctp_ep.secret_key[secret][i] =
1828f8829a4aSRandall Stewart 				    sctp_select_initial_TSN(&inp->sctp_ep);
1829f8829a4aSRandall Stewart 			}
1830f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, stcb, net);
1831f8829a4aSRandall Stewart 		}
1832f8829a4aSRandall Stewart 		did_output = 0;
1833f8829a4aSRandall Stewart 		break;
1834f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
1835ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1836ad81507eSRandall Stewart 			break;
1837ad81507eSRandall Stewart 		}
1838f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timopathmtu);
1839f8829a4aSRandall Stewart 		sctp_pathmtu_timer(inp, stcb, net);
1840f8829a4aSRandall Stewart 		did_output = 0;
1841f8829a4aSRandall Stewart 		break;
1842f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
1843ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1844ad81507eSRandall Stewart 			break;
1845ad81507eSRandall Stewart 		}
1846f8829a4aSRandall Stewart 		if (sctp_shutdownack_timer(inp, stcb, net)) {
1847f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1848f8829a4aSRandall Stewart 			goto out_decr;
1849f8829a4aSRandall Stewart 		}
1850f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownack);
1851f42a358aSRandall Stewart 		stcb->asoc.timoshutdownack++;
1852f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1853f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1854f8829a4aSRandall Stewart #endif
1855ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_ACK_TMR, SCTP_SO_NOT_LOCKED);
1856f8829a4aSRandall Stewart 		break;
1857f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
1858ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1859ad81507eSRandall Stewart 			break;
1860ad81507eSRandall Stewart 		}
1861f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownguard);
1862267dbe63SMichael Tuexen 		op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1863267dbe63SMichael Tuexen 		    "Shutdown guard timer expired");
1864267dbe63SMichael Tuexen 		sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1865f8829a4aSRandall Stewart 		/* no need to unlock on tcb its gone */
1866f8829a4aSRandall Stewart 		goto out_decr;
1867f8829a4aSRandall Stewart 
1868f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
1869ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1870ad81507eSRandall Stewart 			break;
1871ad81507eSRandall Stewart 		}
1872f8829a4aSRandall Stewart 		if (sctp_strreset_timer(inp, stcb, net)) {
1873f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1874f8829a4aSRandall Stewart 			goto out_decr;
1875f8829a4aSRandall Stewart 		}
1876f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timostrmrst);
1877ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_TMR, SCTP_SO_NOT_LOCKED);
1878f8829a4aSRandall Stewart 		break;
1879f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
1880ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1881ad81507eSRandall Stewart 			break;
1882ad81507eSRandall Stewart 		}
1883f8829a4aSRandall Stewart 		if (sctp_asconf_timer(inp, stcb, net)) {
1884f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1885f8829a4aSRandall Stewart 			goto out_decr;
1886f8829a4aSRandall Stewart 		}
1887f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoasconf);
1888f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1889f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1890f8829a4aSRandall Stewart #endif
1891ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_ASCONF_TMR, SCTP_SO_NOT_LOCKED);
1892f8829a4aSRandall Stewart 		break;
1893851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
1894851b7298SRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1895851b7298SRandall Stewart 			break;
1896851b7298SRandall Stewart 		}
189704ee05e8SRandall Stewart 		sctp_delete_prim_timer(inp, stcb, net);
1898851b7298SRandall Stewart 		SCTP_STAT_INCR(sctps_timodelprim);
1899851b7298SRandall Stewart 		break;
1900f8829a4aSRandall Stewart 
1901f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
1902ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1903ad81507eSRandall Stewart 			break;
1904ad81507eSRandall Stewart 		}
1905f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoautoclose);
1906f8829a4aSRandall Stewart 		sctp_autoclose_timer(inp, stcb, net);
1907ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1908f8829a4aSRandall Stewart 		did_output = 0;
1909f8829a4aSRandall Stewart 		break;
1910f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
1911ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1912ad81507eSRandall Stewart 			break;
1913ad81507eSRandall Stewart 		}
1914f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoassockill);
1915f8829a4aSRandall Stewart 		/* Can we free it yet? */
1916f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1917ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL,
1918ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_1);
1919ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1920ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
1921ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1922ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1923ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
1924ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
1925ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
1926ceaad40aSRandall Stewart #endif
1927ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
1928ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_2);
1929ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1930ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
1931ceaad40aSRandall Stewart #endif
1932f8829a4aSRandall Stewart 		/*
1933f8829a4aSRandall Stewart 		 * free asoc, always unlocks (or destroy's) so prevent
1934f8829a4aSRandall Stewart 		 * duplicate unlock or unlock of a free mtx :-0
1935f8829a4aSRandall Stewart 		 */
1936f8829a4aSRandall Stewart 		stcb = NULL;
1937f8829a4aSRandall Stewart 		goto out_no_decr;
1938f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
1939f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinpkill);
1940ad81507eSRandall Stewart 		if (inp == NULL) {
1941ad81507eSRandall Stewart 			break;
1942ad81507eSRandall Stewart 		}
1943f8829a4aSRandall Stewart 		/*
1944f8829a4aSRandall Stewart 		 * special case, take away our increment since WE are the
1945f8829a4aSRandall Stewart 		 * killer
1946f8829a4aSRandall Stewart 		 */
1947f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1948ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL,
1949ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_3);
1950b0552ae2SRandall Stewart 		sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
19510c7dc840SRandall Stewart 		    SCTP_CALLED_FROM_INPKILL_TIMER);
1952d61374e1SRandall Stewart 		inp = NULL;
1953f8829a4aSRandall Stewart 		goto out_no_decr;
1954f8829a4aSRandall Stewart 	default:
1955ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "sctp_timeout_handler:unknown timer %d\n",
1956fa89f692SMichael Tuexen 		    type);
1957f8829a4aSRandall Stewart 		break;
195860990c0cSMichael Tuexen 	}
1959f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1960fa89f692SMichael Tuexen 	sctp_audit_log(0xF1, (uint8_t)type);
1961f8829a4aSRandall Stewart 	if (inp)
1962f8829a4aSRandall Stewart 		sctp_auditing(5, inp, stcb, net);
1963f8829a4aSRandall Stewart #endif
1964f8829a4aSRandall Stewart 	if ((did_output) && stcb) {
1965f8829a4aSRandall Stewart 		/*
1966f8829a4aSRandall Stewart 		 * Now we need to clean up the control chunk chain if an
1967f8829a4aSRandall Stewart 		 * ECNE is on it. It must be marked as UNSENT again so next
1968f8829a4aSRandall Stewart 		 * call will continue to send it until such time that we get
1969f8829a4aSRandall Stewart 		 * a CWR, to remove it. It is, however, less likely that we
1970f8829a4aSRandall Stewart 		 * will find a ecn echo on the chain though.
1971f8829a4aSRandall Stewart 		 */
1972f8829a4aSRandall Stewart 		sctp_fix_ecn_echo(&stcb->asoc);
1973f8829a4aSRandall Stewart 	}
197444b7479bSRandall Stewart get_out:
1975f8829a4aSRandall Stewart 	if (stcb) {
1976f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
19772c62ba73SMichael Tuexen 	} else if (inp != NULL) {
19782c62ba73SMichael Tuexen 		SCTP_INP_WUNLOCK(inp);
19792c62ba73SMichael Tuexen 	} else {
19802c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_UNLOCK();
1981f8829a4aSRandall Stewart 	}
19822c62ba73SMichael Tuexen 
1983f8829a4aSRandall Stewart out_decr:
1984f8829a4aSRandall Stewart 	if (inp) {
1985f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1986f8829a4aSRandall Stewart 	}
19870053ed28SMichael Tuexen 
1988f8829a4aSRandall Stewart out_no_decr:
1989fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer now complete (type = %d)\n", type);
19908518270eSMichael Tuexen 	CURVNET_RESTORE();
1991f8829a4aSRandall Stewart }
1992f8829a4aSRandall Stewart 
1993ad81507eSRandall Stewart void
1994f8829a4aSRandall Stewart sctp_timer_start(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1995f8829a4aSRandall Stewart     struct sctp_nets *net)
1996f8829a4aSRandall Stewart {
1997ca85e948SMichael Tuexen 	uint32_t to_ticks;
1998f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1999f8829a4aSRandall Stewart 
2000139bc87fSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL))
2001ad81507eSRandall Stewart 		return;
2002f8829a4aSRandall Stewart 
2003f8829a4aSRandall Stewart 	tmr = NULL;
2004f8829a4aSRandall Stewart 	if (stcb) {
2005f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2006f8829a4aSRandall Stewart 	}
2007f8829a4aSRandall Stewart 	switch (t_type) {
2008f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2009f8829a4aSRandall Stewart 		/* Only 1 tick away :-) */
2010b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
201142551e99SRandall Stewart 		to_ticks = SCTP_ADDRESS_TICK_DELAY;
2012f8829a4aSRandall Stewart 		break;
2013f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2014f8829a4aSRandall Stewart 		/* Here we use the RTO timer */
2015f8829a4aSRandall Stewart 		{
2016f8829a4aSRandall Stewart 			int rto_val;
2017f8829a4aSRandall Stewart 
2018f8829a4aSRandall Stewart 			if ((stcb == NULL) || (net == NULL)) {
2019ad81507eSRandall Stewart 				return;
2020f8829a4aSRandall Stewart 			}
2021f8829a4aSRandall Stewart 			tmr = &net->rxt_timer;
2022f8829a4aSRandall Stewart 			if (net->RTO == 0) {
2023f8829a4aSRandall Stewart 				rto_val = stcb->asoc.initial_rto;
2024f8829a4aSRandall Stewart 			} else {
2025f8829a4aSRandall Stewart 				rto_val = net->RTO;
2026f8829a4aSRandall Stewart 			}
2027f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(rto_val);
2028f8829a4aSRandall Stewart 		}
2029f8829a4aSRandall Stewart 		break;
2030f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2031f8829a4aSRandall Stewart 		/*
2032f8829a4aSRandall Stewart 		 * Here we use the INIT timer default usually about 1
2033f8829a4aSRandall Stewart 		 * minute.
2034f8829a4aSRandall Stewart 		 */
2035f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2036ad81507eSRandall Stewart 			return;
2037f8829a4aSRandall Stewart 		}
2038f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2039f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2040f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2041f8829a4aSRandall Stewart 		} else {
2042f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2043f8829a4aSRandall Stewart 		}
2044f8829a4aSRandall Stewart 		break;
2045f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2046f8829a4aSRandall Stewart 		/*
2047f8829a4aSRandall Stewart 		 * Here we use the Delayed-Ack timer value from the inp
2048f8829a4aSRandall Stewart 		 * ususually about 200ms.
2049f8829a4aSRandall Stewart 		 */
2050f8829a4aSRandall Stewart 		if (stcb == NULL) {
2051ad81507eSRandall Stewart 			return;
2052f8829a4aSRandall Stewart 		}
2053f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2054f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.delayed_ack);
2055f8829a4aSRandall Stewart 		break;
2056f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2057f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination. */
2058f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2059ad81507eSRandall Stewart 			return;
2060f8829a4aSRandall Stewart 		}
2061f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2062f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2063f8829a4aSRandall Stewart 		} else {
2064f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2065f8829a4aSRandall Stewart 		}
2066f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2067f8829a4aSRandall Stewart 		break;
2068f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2069f8829a4aSRandall Stewart 		/*
2070f8829a4aSRandall Stewart 		 * the net is used here so that we can add in the RTO. Even
2071f8829a4aSRandall Stewart 		 * though we use a different timer. We also add the HB timer
2072f8829a4aSRandall Stewart 		 * PLUS a random jitter.
2073f8829a4aSRandall Stewart 		 */
2074f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2075ad81507eSRandall Stewart 			return;
2076ad81507eSRandall Stewart 		} else {
2077f8829a4aSRandall Stewart 			uint32_t rndval;
2078ca85e948SMichael Tuexen 			uint32_t jitter;
2079f8829a4aSRandall Stewart 
2080ca85e948SMichael Tuexen 			if ((net->dest_state & SCTP_ADDR_NOHB) &&
2081ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_UNCONFIRMED)) {
2082ad81507eSRandall Stewart 				return;
2083f8829a4aSRandall Stewart 			}
2084f8829a4aSRandall Stewart 			if (net->RTO == 0) {
2085ca85e948SMichael Tuexen 				to_ticks = stcb->asoc.initial_rto;
2086f8829a4aSRandall Stewart 			} else {
2087ca85e948SMichael Tuexen 				to_ticks = net->RTO;
2088f8829a4aSRandall Stewart 			}
2089ca85e948SMichael Tuexen 			rndval = sctp_select_initial_TSN(&inp->sctp_ep);
2090ca85e948SMichael Tuexen 			jitter = rndval % to_ticks;
2091ca85e948SMichael Tuexen 			if (jitter >= (to_ticks >> 1)) {
2092ca85e948SMichael Tuexen 				to_ticks = to_ticks + (jitter - (to_ticks >> 1));
2093f8829a4aSRandall Stewart 			} else {
2094ca85e948SMichael Tuexen 				to_ticks = to_ticks - jitter;
2095f8829a4aSRandall Stewart 			}
2096ca85e948SMichael Tuexen 			if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
2097ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_PF)) {
2098ca85e948SMichael Tuexen 				to_ticks += net->heart_beat_delay;
2099f8829a4aSRandall Stewart 			}
2100f8829a4aSRandall Stewart 			/*
2101f8829a4aSRandall Stewart 			 * Now we must convert the to_ticks that are now in
2102f8829a4aSRandall Stewart 			 * ms to ticks.
2103f8829a4aSRandall Stewart 			 */
2104f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(to_ticks);
2105ca85e948SMichael Tuexen 			tmr = &net->hb_timer;
2106f8829a4aSRandall Stewart 		}
2107f8829a4aSRandall Stewart 		break;
2108f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2109f8829a4aSRandall Stewart 		/*
2110f8829a4aSRandall Stewart 		 * Here we can use the RTO timer from the network since one
2111f8829a4aSRandall Stewart 		 * RTT was compelete. If a retran happened then we will be
2112f8829a4aSRandall Stewart 		 * using the RTO initial value.
2113f8829a4aSRandall Stewart 		 */
2114f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2115ad81507eSRandall Stewart 			return;
2116f8829a4aSRandall Stewart 		}
2117f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2118f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2119f8829a4aSRandall Stewart 		} else {
2120f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2121f8829a4aSRandall Stewart 		}
2122f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2123f8829a4aSRandall Stewart 		break;
2124f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2125f8829a4aSRandall Stewart 		/*
2126f8829a4aSRandall Stewart 		 * nothing needed but the endpoint here ususually about 60
2127f8829a4aSRandall Stewart 		 * minutes.
2128f8829a4aSRandall Stewart 		 */
2129f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2130f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_SIGNATURE];
2131f8829a4aSRandall Stewart 		break;
2132f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2133f8829a4aSRandall Stewart 		if (stcb == NULL) {
2134ad81507eSRandall Stewart 			return;
2135f8829a4aSRandall Stewart 		}
2136f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2137f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_ASOC_KILL_TIMEOUT);
2138f8829a4aSRandall Stewart 		break;
2139f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2140f8829a4aSRandall Stewart 		/*
2141f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2142f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2143f8829a4aSRandall Stewart 		 * state.
2144f8829a4aSRandall Stewart 		 */
2145f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2146f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_INP_KILL_TIMEOUT);
2147f8829a4aSRandall Stewart 		break;
2148f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2149f8829a4aSRandall Stewart 		/*
2150f8829a4aSRandall Stewart 		 * Here we use the value found in the EP for PMTU ususually
2151f8829a4aSRandall Stewart 		 * about 10 minutes.
2152f8829a4aSRandall Stewart 		 */
2153f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2154ad81507eSRandall Stewart 			return;
2155f8829a4aSRandall Stewart 		}
215680c79bbeSMichael Tuexen 		if (net->dest_state & SCTP_ADDR_NO_PMTUD) {
215780c79bbeSMichael Tuexen 			return;
215880c79bbeSMichael Tuexen 		}
2159f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_PMTU];
2160f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2161f8829a4aSRandall Stewart 		break;
2162f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2163f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination */
2164f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2165ad81507eSRandall Stewart 			return;
2166f8829a4aSRandall Stewart 		}
2167f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2168f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2169f8829a4aSRandall Stewart 		} else {
2170f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2171f8829a4aSRandall Stewart 		}
2172f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2173f8829a4aSRandall Stewart 		break;
2174f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2175f8829a4aSRandall Stewart 		/*
2176f8829a4aSRandall Stewart 		 * Here we use the endpoints shutdown guard timer usually
2177f8829a4aSRandall Stewart 		 * about 3 minutes.
2178f8829a4aSRandall Stewart 		 */
2179f3ba71beSMichael Tuexen 		if (stcb == NULL) {
2180ad81507eSRandall Stewart 			return;
2181f8829a4aSRandall Stewart 		}
21822e2d6794SMichael Tuexen 		if (inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN] == 0) {
21832e2d6794SMichael Tuexen 			to_ticks = 5 * MSEC_TO_TICKS(stcb->asoc.maxrto);
21842e2d6794SMichael Tuexen 		} else {
2185f8829a4aSRandall Stewart 			to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN];
21862e2d6794SMichael Tuexen 		}
2187f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2188f8829a4aSRandall Stewart 		break;
2189f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2190f8829a4aSRandall Stewart 		/*
21911b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
21921b649582SRandall Stewart 		 * the net's RTO.
2193f8829a4aSRandall Stewart 		 */
2194f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2195ad81507eSRandall Stewart 			return;
2196f8829a4aSRandall Stewart 		}
2197f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2198f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2199f8829a4aSRandall Stewart 		} else {
2200f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2201f8829a4aSRandall Stewart 		}
2202f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2203f8829a4aSRandall Stewart 		break;
2204f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2205f8829a4aSRandall Stewart 		/*
22061b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
22071b649582SRandall Stewart 		 * the net's RTO.
2208f8829a4aSRandall Stewart 		 */
2209f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2210ad81507eSRandall Stewart 			return;
2211f8829a4aSRandall Stewart 		}
2212f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2213f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2214f8829a4aSRandall Stewart 		} else {
2215f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2216f8829a4aSRandall Stewart 		}
2217f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2218f8829a4aSRandall Stewart 		break;
2219851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2220851b7298SRandall Stewart 		if ((stcb == NULL) || (net != NULL)) {
2221851b7298SRandall Stewart 			return;
2222851b7298SRandall Stewart 		}
2223851b7298SRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2224851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2225851b7298SRandall Stewart 		break;
2226f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2227f8829a4aSRandall Stewart 		if (stcb == NULL) {
2228ad81507eSRandall Stewart 			return;
2229f8829a4aSRandall Stewart 		}
2230f8829a4aSRandall Stewart 		if (stcb->asoc.sctp_autoclose_ticks == 0) {
2231f8829a4aSRandall Stewart 			/*
2232f8829a4aSRandall Stewart 			 * Really an error since stcb is NOT set to
2233f8829a4aSRandall Stewart 			 * autoclose
2234f8829a4aSRandall Stewart 			 */
2235ad81507eSRandall Stewart 			return;
2236f8829a4aSRandall Stewart 		}
2237f8829a4aSRandall Stewart 		to_ticks = stcb->asoc.sctp_autoclose_ticks;
2238f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2239f8829a4aSRandall Stewart 		break;
2240f8829a4aSRandall Stewart 	default:
2241ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
22426e9c45e0SMichael Tuexen 		    __func__, t_type);
2243ad81507eSRandall Stewart 		return;
2244f8829a4aSRandall Stewart 		break;
224560990c0cSMichael Tuexen 	}
2246f8829a4aSRandall Stewart 	if ((to_ticks <= 0) || (tmr == NULL)) {
2247ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: %d:software error to_ticks:%d tmr:%p not set ??\n",
22486e9c45e0SMichael Tuexen 		    __func__, t_type, to_ticks, (void *)tmr);
2249ad81507eSRandall Stewart 		return;
2250f8829a4aSRandall Stewart 	}
2251139bc87fSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
2252f8829a4aSRandall Stewart 		/*
2253f8829a4aSRandall Stewart 		 * we do NOT allow you to have it already running. if it is
2254f8829a4aSRandall Stewart 		 * we leave the current one up unchanged
2255f8829a4aSRandall Stewart 		 */
2256ad81507eSRandall Stewart 		return;
2257f8829a4aSRandall Stewart 	}
2258f8829a4aSRandall Stewart 	/* At this point we can proceed */
2259f8829a4aSRandall Stewart 	if (t_type == SCTP_TIMER_TYPE_SEND) {
2260f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up++;
2261f8829a4aSRandall Stewart 	}
2262a5d547adSRandall Stewart 	tmr->stopped_from = 0;
2263f8829a4aSRandall Stewart 	tmr->type = t_type;
2264f8829a4aSRandall Stewart 	tmr->ep = (void *)inp;
2265f8829a4aSRandall Stewart 	tmr->tcb = (void *)stcb;
2266f8829a4aSRandall Stewart 	tmr->net = (void *)net;
2267f8829a4aSRandall Stewart 	tmr->self = (void *)tmr;
22688518270eSMichael Tuexen 	tmr->vnet = (void *)curvnet;
2269c4739e2fSRandall Stewart 	tmr->ticks = sctp_get_tick_count();
2270ad81507eSRandall Stewart 	(void)SCTP_OS_TIMER_START(&tmr->timer, to_ticks, sctp_timeout_handler, tmr);
2271ad81507eSRandall Stewart 	return;
2272f8829a4aSRandall Stewart }
2273f8829a4aSRandall Stewart 
22746e55db54SRandall Stewart void
2275f8829a4aSRandall Stewart sctp_timer_stop(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
2276a5d547adSRandall Stewart     struct sctp_nets *net, uint32_t from)
2277f8829a4aSRandall Stewart {
2278f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
2279f8829a4aSRandall Stewart 
2280f8829a4aSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) &&
2281f8829a4aSRandall Stewart 	    (inp == NULL))
22826e55db54SRandall Stewart 		return;
2283f8829a4aSRandall Stewart 
2284f8829a4aSRandall Stewart 	tmr = NULL;
2285f8829a4aSRandall Stewart 	if (stcb) {
2286f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2287f8829a4aSRandall Stewart 	}
2288f8829a4aSRandall Stewart 	switch (t_type) {
2289f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2290b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
2291f8829a4aSRandall Stewart 		break;
2292f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2293f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22946e55db54SRandall Stewart 			return;
2295f8829a4aSRandall Stewart 		}
2296f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2297f8829a4aSRandall Stewart 		break;
2298f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2299f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23006e55db54SRandall Stewart 			return;
2301f8829a4aSRandall Stewart 		}
2302f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2303f8829a4aSRandall Stewart 		break;
2304f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2305f8829a4aSRandall Stewart 		if (stcb == NULL) {
23066e55db54SRandall Stewart 			return;
2307f8829a4aSRandall Stewart 		}
2308f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2309f8829a4aSRandall Stewart 		break;
2310f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2311f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23126e55db54SRandall Stewart 			return;
2313f8829a4aSRandall Stewart 		}
2314f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2315f8829a4aSRandall Stewart 		break;
2316f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2317ca85e948SMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
23186e55db54SRandall Stewart 			return;
2319f8829a4aSRandall Stewart 		}
2320ca85e948SMichael Tuexen 		tmr = &net->hb_timer;
2321f8829a4aSRandall Stewart 		break;
2322f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2323f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23246e55db54SRandall Stewart 			return;
2325f8829a4aSRandall Stewart 		}
2326f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2327f8829a4aSRandall Stewart 		break;
2328f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2329f8829a4aSRandall Stewart 		/* nothing needed but the endpoint here */
2330f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2331f8829a4aSRandall Stewart 		/*
2332f8829a4aSRandall Stewart 		 * We re-use the newcookie timer for the INP kill timer. We
2333f8829a4aSRandall Stewart 		 * must assure that we do not kill it by accident.
2334f8829a4aSRandall Stewart 		 */
2335f8829a4aSRandall Stewart 		break;
2336f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2337f8829a4aSRandall Stewart 		/*
2338f8829a4aSRandall Stewart 		 * Stop the asoc kill timer.
2339f8829a4aSRandall Stewart 		 */
2340f8829a4aSRandall Stewart 		if (stcb == NULL) {
23416e55db54SRandall Stewart 			return;
2342f8829a4aSRandall Stewart 		}
2343f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2344f8829a4aSRandall Stewart 		break;
2345f8829a4aSRandall Stewart 
2346f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2347f8829a4aSRandall Stewart 		/*
2348f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2349f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2350f8829a4aSRandall Stewart 		 * state.
2351f8829a4aSRandall Stewart 		 */
2352f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2353f8829a4aSRandall Stewart 		break;
2354f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2355f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23566e55db54SRandall Stewart 			return;
2357f8829a4aSRandall Stewart 		}
2358f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2359f8829a4aSRandall Stewart 		break;
2360f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2361f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23626e55db54SRandall Stewart 			return;
2363f8829a4aSRandall Stewart 		}
2364f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2365f8829a4aSRandall Stewart 		break;
2366f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2367f8829a4aSRandall Stewart 		if (stcb == NULL) {
23686e55db54SRandall Stewart 			return;
2369f8829a4aSRandall Stewart 		}
2370f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2371f8829a4aSRandall Stewart 		break;
2372f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2373f8829a4aSRandall Stewart 		if (stcb == NULL) {
23746e55db54SRandall Stewart 			return;
2375f8829a4aSRandall Stewart 		}
2376f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2377f8829a4aSRandall Stewart 		break;
2378f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2379f8829a4aSRandall Stewart 		if (stcb == NULL) {
23806e55db54SRandall Stewart 			return;
2381f8829a4aSRandall Stewart 		}
2382f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2383f8829a4aSRandall Stewart 		break;
2384851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2385851b7298SRandall Stewart 		if (stcb == NULL) {
2386851b7298SRandall Stewart 			return;
2387851b7298SRandall Stewart 		}
2388851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2389851b7298SRandall Stewart 		break;
2390f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2391f8829a4aSRandall Stewart 		if (stcb == NULL) {
23926e55db54SRandall Stewart 			return;
2393f8829a4aSRandall Stewart 		}
2394f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2395f8829a4aSRandall Stewart 		break;
2396f8829a4aSRandall Stewart 	default:
2397ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
23986e9c45e0SMichael Tuexen 		    __func__, t_type);
2399f8829a4aSRandall Stewart 		break;
240060990c0cSMichael Tuexen 	}
2401f8829a4aSRandall Stewart 	if (tmr == NULL) {
24026e55db54SRandall Stewart 		return;
2403f8829a4aSRandall Stewart 	}
2404f8829a4aSRandall Stewart 	if ((tmr->type != t_type) && tmr->type) {
2405f8829a4aSRandall Stewart 		/*
2406f8829a4aSRandall Stewart 		 * Ok we have a timer that is under joint use. Cookie timer
2407f8829a4aSRandall Stewart 		 * per chance with the SEND timer. We therefore are NOT
2408f8829a4aSRandall Stewart 		 * running the timer that the caller wants stopped.  So just
2409f8829a4aSRandall Stewart 		 * return.
2410f8829a4aSRandall Stewart 		 */
24116e55db54SRandall Stewart 		return;
2412f8829a4aSRandall Stewart 	}
2413ad81507eSRandall Stewart 	if ((t_type == SCTP_TIMER_TYPE_SEND) && (stcb != NULL)) {
2414f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
2415f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
2416f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
2417f8829a4aSRandall Stewart 		}
2418f8829a4aSRandall Stewart 	}
2419f8829a4aSRandall Stewart 	tmr->self = NULL;
2420a5d547adSRandall Stewart 	tmr->stopped_from = from;
24216e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&tmr->timer);
24226e55db54SRandall Stewart 	return;
2423f8829a4aSRandall Stewart }
2424f8829a4aSRandall Stewart 
2425f8829a4aSRandall Stewart uint32_t
2426b0471b4bSMichael Tuexen sctp_calculate_len(struct mbuf *m)
2427b0471b4bSMichael Tuexen {
2428f8829a4aSRandall Stewart 	uint32_t tlen = 0;
2429f8829a4aSRandall Stewart 	struct mbuf *at;
2430f8829a4aSRandall Stewart 
2431f8829a4aSRandall Stewart 	at = m;
2432f8829a4aSRandall Stewart 	while (at) {
2433139bc87fSRandall Stewart 		tlen += SCTP_BUF_LEN(at);
2434139bc87fSRandall Stewart 		at = SCTP_BUF_NEXT(at);
2435f8829a4aSRandall Stewart 	}
2436f8829a4aSRandall Stewart 	return (tlen);
2437f8829a4aSRandall Stewart }
2438f8829a4aSRandall Stewart 
2439f8829a4aSRandall Stewart void
2440f8829a4aSRandall Stewart sctp_mtu_size_reset(struct sctp_inpcb *inp,
244144b7479bSRandall Stewart     struct sctp_association *asoc, uint32_t mtu)
2442f8829a4aSRandall Stewart {
2443f8829a4aSRandall Stewart 	/*
2444f8829a4aSRandall Stewart 	 * Reset the P-MTU size on this association, this involves changing
2445f8829a4aSRandall Stewart 	 * the asoc MTU, going through ANY chunk+overhead larger than mtu to
2446f8829a4aSRandall Stewart 	 * allow the DF flag to be cleared.
2447f8829a4aSRandall Stewart 	 */
2448f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
2449f8829a4aSRandall Stewart 	unsigned int eff_mtu, ovh;
2450f8829a4aSRandall Stewart 
2451f8829a4aSRandall Stewart 	asoc->smallest_mtu = mtu;
2452f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2453f8829a4aSRandall Stewart 		ovh = SCTP_MIN_OVERHEAD;
2454f8829a4aSRandall Stewart 	} else {
2455f8829a4aSRandall Stewart 		ovh = SCTP_MIN_V4_OVERHEAD;
2456f8829a4aSRandall Stewart 	}
2457f8829a4aSRandall Stewart 	eff_mtu = mtu - ovh;
2458f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->send_queue, sctp_next) {
2459f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2460f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2461f8829a4aSRandall Stewart 		}
2462f8829a4aSRandall Stewart 	}
2463f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
2464f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2465f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2466f8829a4aSRandall Stewart 		}
2467f8829a4aSRandall Stewart 	}
2468f8829a4aSRandall Stewart }
2469f8829a4aSRandall Stewart 
2470f8829a4aSRandall Stewart 
2471f8829a4aSRandall Stewart /*
2472*44f2a327SMichael Tuexen  * Given an association and starting time of the current RTT period, update
2473*44f2a327SMichael Tuexen  * RTO in number of msecs. net should point to the current network.
2474*44f2a327SMichael Tuexen  * Return 1, if an RTO update was performed, return 0 if no update was
2475*44f2a327SMichael Tuexen  * performed due to invalid starting point.
2476f8829a4aSRandall Stewart  */
2477899288aeSRandall Stewart 
2478*44f2a327SMichael Tuexen int
2479f8829a4aSRandall Stewart sctp_calculate_rto(struct sctp_tcb *stcb,
2480f8829a4aSRandall Stewart     struct sctp_association *asoc,
2481f8829a4aSRandall Stewart     struct sctp_nets *net,
24828c8e10b7SMichael Tuexen     struct timeval *old,
2483b0471b4bSMichael Tuexen     int rtt_from_sack)
2484b0471b4bSMichael Tuexen {
2485*44f2a327SMichael Tuexen 	struct timeval now;
2486*44f2a327SMichael Tuexen 	uint64_t rtt_us;	/* RTT in us */
2487be1d9176SMichael Tuexen 	int32_t rtt;		/* RTT in ms */
2488be1d9176SMichael Tuexen 	uint32_t new_rto;
2489f8829a4aSRandall Stewart 	int first_measure = 0;
2490f8829a4aSRandall Stewart 
2491f8829a4aSRandall Stewart 	/************************/
2492f8829a4aSRandall Stewart 	/* 1. calculate new RTT */
2493f8829a4aSRandall Stewart 	/************************/
2494f8829a4aSRandall Stewart 	/* get the current time */
2495299108c5SRandall Stewart 	if (stcb->asoc.use_precise_time) {
2496299108c5SRandall Stewart 		(void)SCTP_GETPTIME_TIMEVAL(&now);
2497299108c5SRandall Stewart 	} else {
24986e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
2499299108c5SRandall Stewart 	}
2500*44f2a327SMichael Tuexen 	if ((old->tv_sec > now.tv_sec) ||
2501*44f2a327SMichael Tuexen 	    ((old->tv_sec == now.tv_sec) && (old->tv_sec > now.tv_sec))) {
2502*44f2a327SMichael Tuexen 		/* The starting point is in the future. */
2503*44f2a327SMichael Tuexen 		return (0);
2504*44f2a327SMichael Tuexen 	}
2505be1d9176SMichael Tuexen 	timevalsub(&now, old);
2506*44f2a327SMichael Tuexen 	rtt_us = (uint64_t)1000000 * (uint64_t)now.tv_sec + (uint64_t)now.tv_usec;
2507*44f2a327SMichael Tuexen 	if (rtt_us > SCTP_RTO_UPPER_BOUND * 1000) {
2508*44f2a327SMichael Tuexen 		/* The RTT is larger than a sane value. */
2509*44f2a327SMichael Tuexen 		return (0);
2510*44f2a327SMichael Tuexen 	}
2511be1d9176SMichael Tuexen 	/* store the current RTT in us */
2512*44f2a327SMichael Tuexen 	net->rtt = rtt_us;
2513b60b0fe6SMichael Tuexen 	/* compute rtt in ms */
2514b60b0fe6SMichael Tuexen 	rtt = (int32_t)(net->rtt / 1000);
2515f79aab18SRandall Stewart 	if ((asoc->cc_functions.sctp_rtt_calculated) && (rtt_from_sack == SCTP_RTT_FROM_DATA)) {
2516b7b84c0eSMichael Tuexen 		/*
2517b7b84c0eSMichael Tuexen 		 * Tell the CC module that a new update has just occurred
2518b7b84c0eSMichael Tuexen 		 * from a sack
2519b7b84c0eSMichael Tuexen 		 */
2520f79aab18SRandall Stewart 		(*asoc->cc_functions.sctp_rtt_calculated) (stcb, net, &now);
2521f79aab18SRandall Stewart 	}
2522f79aab18SRandall Stewart 	/*
2523f79aab18SRandall Stewart 	 * Do we need to determine the lan? We do this only on sacks i.e.
2524f79aab18SRandall Stewart 	 * RTT being determined from data not non-data (HB/INIT->INITACK).
2525f79aab18SRandall Stewart 	 */
2526f79aab18SRandall Stewart 	if ((rtt_from_sack == SCTP_RTT_FROM_DATA) &&
2527be1d9176SMichael Tuexen 	    (net->lan_type == SCTP_LAN_UNKNOWN)) {
2528be1d9176SMichael Tuexen 		if (net->rtt > SCTP_LOCAL_LAN_RTT) {
2529899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_INTERNET;
2530899288aeSRandall Stewart 		} else {
2531899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_LOCAL;
2532899288aeSRandall Stewart 		}
2533899288aeSRandall Stewart 	}
25340053ed28SMichael Tuexen 
2535f8829a4aSRandall Stewart 	/***************************/
2536f8829a4aSRandall Stewart 	/* 2. update RTTVAR & SRTT */
2537f8829a4aSRandall Stewart 	/***************************/
2538be1d9176SMichael Tuexen 	/*-
2539be1d9176SMichael Tuexen 	 * Compute the scaled average lastsa and the
2540be1d9176SMichael Tuexen 	 * scaled variance lastsv as described in van Jacobson
2541be1d9176SMichael Tuexen 	 * Paper "Congestion Avoidance and Control", Annex A.
2542be1d9176SMichael Tuexen 	 *
2543be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_SHIFT) is the srtt
2544*44f2a327SMichael Tuexen 	 * (net->lastsv >> SCTP_RTT_VAR_SHIFT) is the rttvar
2545be1d9176SMichael Tuexen 	 */
25469a972525SRandall Stewart 	if (net->RTO_measured) {
2547be1d9176SMichael Tuexen 		rtt -= (net->lastsa >> SCTP_RTT_SHIFT);
2548be1d9176SMichael Tuexen 		net->lastsa += rtt;
2549be1d9176SMichael Tuexen 		if (rtt < 0) {
2550be1d9176SMichael Tuexen 			rtt = -rtt;
2551be1d9176SMichael Tuexen 		}
2552be1d9176SMichael Tuexen 		rtt -= (net->lastsv >> SCTP_RTT_VAR_SHIFT);
2553be1d9176SMichael Tuexen 		net->lastsv += rtt;
2554b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2555f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_RTTVAR);
255680fefe0aSRandall Stewart 		}
2557f8829a4aSRandall Stewart 	} else {
2558f8829a4aSRandall Stewart 		/* First RTO measurment */
25599a972525SRandall Stewart 		net->RTO_measured = 1;
2560f8829a4aSRandall Stewart 		first_measure = 1;
2561be1d9176SMichael Tuexen 		net->lastsa = rtt << SCTP_RTT_SHIFT;
2562be1d9176SMichael Tuexen 		net->lastsv = (rtt / 2) << SCTP_RTT_VAR_SHIFT;
2563b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2564f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_INITIAL_RTT);
256580fefe0aSRandall Stewart 		}
2566f8829a4aSRandall Stewart 	}
2567be1d9176SMichael Tuexen 	if (net->lastsv == 0) {
2568be1d9176SMichael Tuexen 		net->lastsv = SCTP_CLOCK_GRANULARITY;
2569be1d9176SMichael Tuexen 	}
2570108df27cSRandall Stewart 	new_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
2571f8829a4aSRandall Stewart 	if ((new_rto > SCTP_SAT_NETWORK_MIN) &&
2572f8829a4aSRandall Stewart 	    (stcb->asoc.sat_network_lockout == 0)) {
2573f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 1;
2574f8829a4aSRandall Stewart 	} else if ((!first_measure) && stcb->asoc.sat_network) {
2575f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 0;
2576f8829a4aSRandall Stewart 		stcb->asoc.sat_network_lockout = 1;
2577f8829a4aSRandall Stewart 	}
2578f8829a4aSRandall Stewart 	/* bound it, per C6/C7 in Section 5.3.1 */
2579f8829a4aSRandall Stewart 	if (new_rto < stcb->asoc.minrto) {
2580f8829a4aSRandall Stewart 		new_rto = stcb->asoc.minrto;
2581f8829a4aSRandall Stewart 	}
2582f8829a4aSRandall Stewart 	if (new_rto > stcb->asoc.maxrto) {
2583f8829a4aSRandall Stewart 		new_rto = stcb->asoc.maxrto;
2584f8829a4aSRandall Stewart 	}
2585*44f2a327SMichael Tuexen 	net->RTO = new_rto;
2586*44f2a327SMichael Tuexen 	return (1);
2587f8829a4aSRandall Stewart }
2588f8829a4aSRandall Stewart 
2589f8829a4aSRandall Stewart /*
2590f8829a4aSRandall Stewart  * return a pointer to a contiguous piece of data from the given mbuf chain
2591f8829a4aSRandall Stewart  * starting at 'off' for 'len' bytes.  If the desired piece spans more than
2592f8829a4aSRandall Stewart  * one mbuf, a copy is made at 'ptr'. caller must ensure that the buffer size
2593f8829a4aSRandall Stewart  * is >= 'len' returns NULL if there there isn't 'len' bytes in the chain.
2594f8829a4aSRandall Stewart  */
259572fb6fdbSRandall Stewart caddr_t
2596f8829a4aSRandall Stewart sctp_m_getptr(struct mbuf *m, int off, int len, uint8_t *in_ptr)
2597f8829a4aSRandall Stewart {
2598f8829a4aSRandall Stewart 	uint32_t count;
2599f8829a4aSRandall Stewart 	uint8_t *ptr;
2600f8829a4aSRandall Stewart 
2601f8829a4aSRandall Stewart 	ptr = in_ptr;
2602f8829a4aSRandall Stewart 	if ((off < 0) || (len <= 0))
2603f8829a4aSRandall Stewart 		return (NULL);
2604f8829a4aSRandall Stewart 
2605f8829a4aSRandall Stewart 	/* find the desired start location */
2606f8829a4aSRandall Stewart 	while ((m != NULL) && (off > 0)) {
2607139bc87fSRandall Stewart 		if (off < SCTP_BUF_LEN(m))
2608f8829a4aSRandall Stewart 			break;
2609139bc87fSRandall Stewart 		off -= SCTP_BUF_LEN(m);
2610139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
2611f8829a4aSRandall Stewart 	}
2612f8829a4aSRandall Stewart 	if (m == NULL)
2613f8829a4aSRandall Stewart 		return (NULL);
2614f8829a4aSRandall Stewart 
2615f8829a4aSRandall Stewart 	/* is the current mbuf large enough (eg. contiguous)? */
2616139bc87fSRandall Stewart 	if ((SCTP_BUF_LEN(m) - off) >= len) {
2617f8829a4aSRandall Stewart 		return (mtod(m, caddr_t)+off);
2618f8829a4aSRandall Stewart 	} else {
2619f8829a4aSRandall Stewart 		/* else, it spans more than one mbuf, so save a temp copy... */
2620f8829a4aSRandall Stewart 		while ((m != NULL) && (len > 0)) {
2621139bc87fSRandall Stewart 			count = min(SCTP_BUF_LEN(m) - off, len);
26225ba7f91fSMichael Tuexen 			memcpy(ptr, mtod(m, caddr_t)+off, count);
2623f8829a4aSRandall Stewart 			len -= count;
2624f8829a4aSRandall Stewart 			ptr += count;
2625f8829a4aSRandall Stewart 			off = 0;
2626139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
2627f8829a4aSRandall Stewart 		}
2628f8829a4aSRandall Stewart 		if ((m == NULL) && (len > 0))
2629f8829a4aSRandall Stewart 			return (NULL);
2630f8829a4aSRandall Stewart 		else
2631f8829a4aSRandall Stewart 			return ((caddr_t)in_ptr);
2632f8829a4aSRandall Stewart 	}
2633f8829a4aSRandall Stewart }
2634f8829a4aSRandall Stewart 
2635f8829a4aSRandall Stewart 
263644b7479bSRandall Stewart 
2637f8829a4aSRandall Stewart struct sctp_paramhdr *
2638f8829a4aSRandall Stewart sctp_get_next_param(struct mbuf *m,
2639f8829a4aSRandall Stewart     int offset,
2640f8829a4aSRandall Stewart     struct sctp_paramhdr *pull,
2641f8829a4aSRandall Stewart     int pull_limit)
2642f8829a4aSRandall Stewart {
2643f8829a4aSRandall Stewart 	/* This just provides a typed signature to Peter's Pull routine */
2644f8829a4aSRandall Stewart 	return ((struct sctp_paramhdr *)sctp_m_getptr(m, offset, pull_limit,
2645f8829a4aSRandall Stewart 	    (uint8_t *)pull));
2646f8829a4aSRandall Stewart }
2647f8829a4aSRandall Stewart 
2648f8829a4aSRandall Stewart 
2649ce11b842SMichael Tuexen struct mbuf *
2650f8829a4aSRandall Stewart sctp_add_pad_tombuf(struct mbuf *m, int padlen)
2651f8829a4aSRandall Stewart {
2652ce11b842SMichael Tuexen 	struct mbuf *m_last;
2653ce11b842SMichael Tuexen 	caddr_t dp;
2654f8829a4aSRandall Stewart 
2655f8829a4aSRandall Stewart 	if (padlen > 3) {
2656ce11b842SMichael Tuexen 		return (NULL);
2657f8829a4aSRandall Stewart 	}
265841eee555SRandall Stewart 	if (padlen <= M_TRAILINGSPACE(m)) {
2659f8829a4aSRandall Stewart 		/*
2660f8829a4aSRandall Stewart 		 * The easy way. We hope the majority of the time we hit
2661f8829a4aSRandall Stewart 		 * here :)
2662f8829a4aSRandall Stewart 		 */
2663ce11b842SMichael Tuexen 		m_last = m;
2664f8829a4aSRandall Stewart 	} else {
2665ce11b842SMichael Tuexen 		/* Hard way we must grow the mbuf chain */
2666ce11b842SMichael Tuexen 		m_last = sctp_get_mbuf_for_msg(padlen, 0, M_NOWAIT, 1, MT_DATA);
2667ce11b842SMichael Tuexen 		if (m_last == NULL) {
2668ce11b842SMichael Tuexen 			return (NULL);
2669f8829a4aSRandall Stewart 		}
2670ce11b842SMichael Tuexen 		SCTP_BUF_LEN(m_last) = 0;
2671ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m_last) = NULL;
2672ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m) = m_last;
2673f8829a4aSRandall Stewart 	}
2674ce11b842SMichael Tuexen 	dp = mtod(m_last, caddr_t)+SCTP_BUF_LEN(m_last);
2675ce11b842SMichael Tuexen 	SCTP_BUF_LEN(m_last) += padlen;
2676ce11b842SMichael Tuexen 	memset(dp, 0, padlen);
2677ce11b842SMichael Tuexen 	return (m_last);
2678f8829a4aSRandall Stewart }
2679f8829a4aSRandall Stewart 
2680ce11b842SMichael Tuexen struct mbuf *
2681f8829a4aSRandall Stewart sctp_pad_lastmbuf(struct mbuf *m, int padval, struct mbuf *last_mbuf)
2682f8829a4aSRandall Stewart {
2683f8829a4aSRandall Stewart 	/* find the last mbuf in chain and pad it */
2684f8829a4aSRandall Stewart 	struct mbuf *m_at;
2685f8829a4aSRandall Stewart 
2686ce11b842SMichael Tuexen 	if (last_mbuf != NULL) {
2687f8829a4aSRandall Stewart 		return (sctp_add_pad_tombuf(last_mbuf, padval));
2688f8829a4aSRandall Stewart 	} else {
268917267b32SMichael Tuexen 		for (m_at = m; m_at; m_at = SCTP_BUF_NEXT(m_at)) {
2690139bc87fSRandall Stewart 			if (SCTP_BUF_NEXT(m_at) == NULL) {
2691f8829a4aSRandall Stewart 				return (sctp_add_pad_tombuf(m_at, padval));
2692f8829a4aSRandall Stewart 			}
2693f8829a4aSRandall Stewart 		}
2694f8829a4aSRandall Stewart 	}
2695ce11b842SMichael Tuexen 	return (NULL);
2696f8829a4aSRandall Stewart }
2697f8829a4aSRandall Stewart 
2698f8829a4aSRandall Stewart static void
2699c5b5675dSMichael Tuexen sctp_notify_assoc_change(uint16_t state, struct sctp_tcb *stcb,
2700410a3b1eSMichael Tuexen     uint16_t error, struct sctp_abort_chunk *abort, uint8_t from_peer, int so_locked
2701ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2702ceaad40aSRandall Stewart     SCTP_UNUSED
2703ceaad40aSRandall Stewart #endif
2704ceaad40aSRandall Stewart )
2705f8829a4aSRandall Stewart {
2706f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2707f8829a4aSRandall Stewart 	struct sctp_assoc_change *sac;
2708f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
27099a8e3088SMichael Tuexen 	unsigned int notif_len;
27109a8e3088SMichael Tuexen 	uint16_t abort_len;
2711e06b67c7SMichael Tuexen 	unsigned int i;
2712ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2713ceaad40aSRandall Stewart 	struct socket *so;
2714ceaad40aSRandall Stewart #endif
2715ceaad40aSRandall Stewart 
271659713bbfSMichael Tuexen 	if (stcb == NULL) {
271759713bbfSMichael Tuexen 		return;
271859713bbfSMichael Tuexen 	}
271958411b08SMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT)) {
27209a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2721a2b42326SMichael Tuexen 		if (abort != NULL) {
2722c9eb4473SMichael Tuexen 			abort_len = ntohs(abort->ch.chunk_length);
27239669e724SMichael Tuexen 			/*
27249669e724SMichael Tuexen 			 * Only SCTP_CHUNK_BUFFER_SIZE are guaranteed to be
272545d41de5SMichael Tuexen 			 * contiguous.
27269669e724SMichael Tuexen 			 */
27279669e724SMichael Tuexen 			if (abort_len > SCTP_CHUNK_BUFFER_SIZE) {
27289669e724SMichael Tuexen 				abort_len = SCTP_CHUNK_BUFFER_SIZE;
27299669e724SMichael Tuexen 			}
2730a2b42326SMichael Tuexen 		} else {
2731a2b42326SMichael Tuexen 			abort_len = 0;
2732c5b5675dSMichael Tuexen 		}
2733a2b42326SMichael Tuexen 		if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2734a2b42326SMichael Tuexen 			notif_len += SCTP_ASSOC_SUPPORTS_MAX;
2735a2b42326SMichael Tuexen 		} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2736a2b42326SMichael Tuexen 			notif_len += abort_len;
2737a2b42326SMichael Tuexen 		}
2738eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2739a2b42326SMichael Tuexen 		if (m_notify == NULL) {
2740a2b42326SMichael Tuexen 			/* Retry with smaller value. */
27419a8e3088SMichael Tuexen 			notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2742eb1b1807SGleb Smirnoff 			m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2743a2b42326SMichael Tuexen 			if (m_notify == NULL) {
274458411b08SMichael Tuexen 				goto set_error;
2745a2b42326SMichael Tuexen 			}
2746a2b42326SMichael Tuexen 		}
2747a2b42326SMichael Tuexen 		SCTP_BUF_NEXT(m_notify) = NULL;
2748f8829a4aSRandall Stewart 		sac = mtod(m_notify, struct sctp_assoc_change *);
2749e432298aSXin LI 		memset(sac, 0, notif_len);
2750f8829a4aSRandall Stewart 		sac->sac_type = SCTP_ASSOC_CHANGE;
2751f8829a4aSRandall Stewart 		sac->sac_flags = 0;
2752f8829a4aSRandall Stewart 		sac->sac_length = sizeof(struct sctp_assoc_change);
2753c5b5675dSMichael Tuexen 		sac->sac_state = state;
2754f8829a4aSRandall Stewart 		sac->sac_error = error;
2755f8829a4aSRandall Stewart 		/* XXX verify these stream counts */
2756f8829a4aSRandall Stewart 		sac->sac_outbound_streams = stcb->asoc.streamoutcnt;
2757f8829a4aSRandall Stewart 		sac->sac_inbound_streams = stcb->asoc.streamincnt;
2758f8829a4aSRandall Stewart 		sac->sac_assoc_id = sctp_get_associd(stcb);
2759a2b42326SMichael Tuexen 		if (notif_len > sizeof(struct sctp_assoc_change)) {
2760c5b5675dSMichael Tuexen 			if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2761e06b67c7SMichael Tuexen 				i = 0;
2762c79bec9cSMichael Tuexen 				if (stcb->asoc.prsctp_supported == 1) {
2763e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_PR;
2764e06b67c7SMichael Tuexen 				}
2765c79bec9cSMichael Tuexen 				if (stcb->asoc.auth_supported == 1) {
2766e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_AUTH;
2767e06b67c7SMichael Tuexen 				}
2768c79bec9cSMichael Tuexen 				if (stcb->asoc.asconf_supported == 1) {
2769e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_ASCONF;
2770e06b67c7SMichael Tuexen 				}
277144249214SRandall Stewart 				if (stcb->asoc.idata_supported == 1) {
277244249214SRandall Stewart 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_INTERLEAVING;
277344249214SRandall Stewart 				}
2774e06b67c7SMichael Tuexen 				sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_MULTIBUF;
2775c79bec9cSMichael Tuexen 				if (stcb->asoc.reconfig_supported == 1) {
2776e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_RE_CONFIG;
2777e06b67c7SMichael Tuexen 				}
2778e06b67c7SMichael Tuexen 				sac->sac_length += i;
2779a2b42326SMichael Tuexen 			} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2780a2b42326SMichael Tuexen 				memcpy(sac->sac_info, abort, abort_len);
2781a2b42326SMichael Tuexen 				sac->sac_length += abort_len;
2782a2b42326SMichael Tuexen 			}
2783c5b5675dSMichael Tuexen 		}
2784e06b67c7SMichael Tuexen 		SCTP_BUF_LEN(m_notify) = sac->sac_length;
2785f8829a4aSRandall Stewart 		control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
27867215cc1bSMichael Tuexen 		    0, 0, stcb->asoc.context, 0, 0, 0,
2787f8829a4aSRandall Stewart 		    m_notify);
278858411b08SMichael Tuexen 		if (control != NULL) {
2789139bc87fSRandall Stewart 			control->length = SCTP_BUF_LEN(m_notify);
279028cd0699SMichael Tuexen 			control->spec_flags = M_NOTIFICATION;
2791f8829a4aSRandall Stewart 			/* not that we need this */
2792f8829a4aSRandall Stewart 			control->tail_mbuf = m_notify;
2793f8829a4aSRandall Stewart 			sctp_add_to_readq(stcb->sctp_ep, stcb,
2794f8829a4aSRandall Stewart 			    control,
2795cfde3ff7SRandall Stewart 			    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD,
2796cfde3ff7SRandall Stewart 			    so_locked);
279758411b08SMichael Tuexen 		} else {
279858411b08SMichael Tuexen 			sctp_m_freem(m_notify);
279958411b08SMichael Tuexen 		}
280058411b08SMichael Tuexen 	}
280158411b08SMichael Tuexen 	/*
280258411b08SMichael Tuexen 	 * For 1-to-1 style sockets, we send up and error when an ABORT
280358411b08SMichael Tuexen 	 * comes in.
280458411b08SMichael Tuexen 	 */
280558411b08SMichael Tuexen set_error:
280658411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
280758411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
280858411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
2809e045904fSMichael Tuexen 		SOCK_LOCK(stcb->sctp_socket);
2810410a3b1eSMichael Tuexen 		if (from_peer) {
2811839d21d6SMichael Tuexen 			if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) {
281258411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNREFUSED);
281358411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNREFUSED;
281458411b08SMichael Tuexen 			} else {
281558411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
281658411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNRESET;
281758411b08SMichael Tuexen 			}
2818410a3b1eSMichael Tuexen 		} else {
2819839d21d6SMichael Tuexen 			if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
2820839d21d6SMichael Tuexen 			    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
2821553bb068SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ETIMEDOUT);
2822553bb068SMichael Tuexen 				stcb->sctp_socket->so_error = ETIMEDOUT;
2823553bb068SMichael Tuexen 			} else {
2824410a3b1eSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNABORTED);
2825410a3b1eSMichael Tuexen 				stcb->sctp_socket->so_error = ECONNABORTED;
2826410a3b1eSMichael Tuexen 			}
282758411b08SMichael Tuexen 		}
28283acfe1e1SGleb Smirnoff 		SOCK_UNLOCK(stcb->sctp_socket);
2829553bb068SMichael Tuexen 	}
283058411b08SMichael Tuexen 	/* Wake ANY sleepers */
2831ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2832ceaad40aSRandall Stewart 	so = SCTP_INP_SO(stcb->sctp_ep);
2833ceaad40aSRandall Stewart 	if (!so_locked) {
2834ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
2835ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
2836ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
2837ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
2838ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
2839ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
2840ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
2841ceaad40aSRandall Stewart 			return;
2842ceaad40aSRandall Stewart 		}
2843ceaad40aSRandall Stewart 	}
2844ceaad40aSRandall Stewart #endif
284558411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
284658411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
284758411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
28483acfe1e1SGleb Smirnoff 		socantrcvmore(stcb->sctp_socket);
284958411b08SMichael Tuexen 	}
285058411b08SMichael Tuexen 	sorwakeup(stcb->sctp_socket);
285158411b08SMichael Tuexen 	sowwakeup(stcb->sctp_socket);
2852ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2853ceaad40aSRandall Stewart 	if (!so_locked) {
2854ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
2855ceaad40aSRandall Stewart 	}
2856ceaad40aSRandall Stewart #endif
2857f8829a4aSRandall Stewart }
2858f8829a4aSRandall Stewart 
2859f8829a4aSRandall Stewart static void
2860f8829a4aSRandall Stewart sctp_notify_peer_addr_change(struct sctp_tcb *stcb, uint32_t state,
28613cb3567dSMichael Tuexen     struct sockaddr *sa, uint32_t error, int so_locked
28623cb3567dSMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
28633cb3567dSMichael Tuexen     SCTP_UNUSED
28643cb3567dSMichael Tuexen #endif
28653cb3567dSMichael Tuexen )
2866f8829a4aSRandall Stewart {
2867f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2868f8829a4aSRandall Stewart 	struct sctp_paddr_change *spc;
2869f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2870f8829a4aSRandall Stewart 
287160990c0cSMichael Tuexen 	if ((stcb == NULL) ||
287260990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT)) {
2873f8829a4aSRandall Stewart 		/* event not enabled */
2874f8829a4aSRandall Stewart 		return;
2875830d754dSRandall Stewart 	}
2876eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_paddr_change), 0, M_NOWAIT, 1, MT_DATA);
2877f8829a4aSRandall Stewart 	if (m_notify == NULL)
2878f8829a4aSRandall Stewart 		return;
2879139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2880f8829a4aSRandall Stewart 	spc = mtod(m_notify, struct sctp_paddr_change *);
288156711f94SMichael Tuexen 	memset(spc, 0, sizeof(struct sctp_paddr_change));
2882f8829a4aSRandall Stewart 	spc->spc_type = SCTP_PEER_ADDR_CHANGE;
2883f8829a4aSRandall Stewart 	spc->spc_flags = 0;
2884f8829a4aSRandall Stewart 	spc->spc_length = sizeof(struct sctp_paddr_change);
28855e2c2d87SRandall Stewart 	switch (sa->sa_family) {
2886ea5eba11SMichael Tuexen #ifdef INET
28875e2c2d87SRandall Stewart 	case AF_INET:
2888d59107f7SMichael Tuexen #ifdef INET6
2889d59107f7SMichael Tuexen 		if (sctp_is_feature_on(stcb->sctp_ep, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
2890d59107f7SMichael Tuexen 			in6_sin_2_v4mapsin6((struct sockaddr_in *)sa,
2891d59107f7SMichael Tuexen 			    (struct sockaddr_in6 *)&spc->spc_aaddr);
2892d59107f7SMichael Tuexen 		} else {
2893f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2894d59107f7SMichael Tuexen 		}
2895d59107f7SMichael Tuexen #else
2896d59107f7SMichael Tuexen 		memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2897d59107f7SMichael Tuexen #endif
28985e2c2d87SRandall Stewart 		break;
2899ea5eba11SMichael Tuexen #endif
29005e2c2d87SRandall Stewart #ifdef INET6
29015e2c2d87SRandall Stewart 	case AF_INET6:
29025e2c2d87SRandall Stewart 		{
2903f42a358aSRandall Stewart 			struct sockaddr_in6 *sin6;
2904f42a358aSRandall Stewart 
2905f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in6));
2906f42a358aSRandall Stewart 
2907f42a358aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)&spc->spc_aaddr;
2908f42a358aSRandall Stewart 			if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
290942551e99SRandall Stewart 				if (sin6->sin6_scope_id == 0) {
291042551e99SRandall Stewart 					/* recover scope_id for user */
2911f42a358aSRandall Stewart 					(void)sa6_recoverscope(sin6);
291242551e99SRandall Stewart 				} else {
291342551e99SRandall Stewart 					/* clear embedded scope_id for user */
291442551e99SRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
291542551e99SRandall Stewart 				}
2916f42a358aSRandall Stewart 			}
29175e2c2d87SRandall Stewart 			break;
29185e2c2d87SRandall Stewart 		}
29195e2c2d87SRandall Stewart #endif
29205e2c2d87SRandall Stewart 	default:
29215e2c2d87SRandall Stewart 		/* TSNH */
29225e2c2d87SRandall Stewart 		break;
2923f8829a4aSRandall Stewart 	}
2924f8829a4aSRandall Stewart 	spc->spc_state = state;
2925f8829a4aSRandall Stewart 	spc->spc_error = error;
2926f8829a4aSRandall Stewart 	spc->spc_assoc_id = sctp_get_associd(stcb);
2927f8829a4aSRandall Stewart 
2928139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_paddr_change);
2929139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2930f8829a4aSRandall Stewart 
2931f8829a4aSRandall Stewart 	/* append to socket */
2932f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
29337215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
2934f8829a4aSRandall Stewart 	    m_notify);
2935f8829a4aSRandall Stewart 	if (control == NULL) {
2936f8829a4aSRandall Stewart 		/* no memory */
2937f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2938f8829a4aSRandall Stewart 		return;
2939f8829a4aSRandall Stewart 	}
2940139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
2941139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2942f8829a4aSRandall Stewart 	/* not that we need this */
2943f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
2944f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2945f8829a4aSRandall Stewart 	    control,
2946cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
2947cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
29483cb3567dSMichael Tuexen 	    so_locked);
2949f8829a4aSRandall Stewart }
2950f8829a4aSRandall Stewart 
2951f8829a4aSRandall Stewart 
2952f8829a4aSRandall Stewart static void
29531edc9dbaSMichael Tuexen sctp_notify_send_failed(struct sctp_tcb *stcb, uint8_t sent, uint32_t error,
2954ceaad40aSRandall Stewart     struct sctp_tmit_chunk *chk, int so_locked
2955ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2956ceaad40aSRandall Stewart     SCTP_UNUSED
2957ceaad40aSRandall Stewart #endif
2958ceaad40aSRandall Stewart )
2959f8829a4aSRandall Stewart {
2960830d754dSRandall Stewart 	struct mbuf *m_notify;
2961f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
29629935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
2963f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2964ab337314SMichael Tuexen 	struct sctp_chunkhdr *chkhdr;
2965ab337314SMichael Tuexen 	int notifhdr_len, chk_len, chkhdr_len, padding_len, payload_len;
2966f8829a4aSRandall Stewart 
296760990c0cSMichael Tuexen 	if ((stcb == NULL) ||
29689935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
29699935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
2970f8829a4aSRandall Stewart 		/* event not enabled */
2971f8829a4aSRandall Stewart 		return;
2972830d754dSRandall Stewart 	}
29730053ed28SMichael Tuexen 
29749935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
2975ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
29769935403aSMichael Tuexen 	} else {
2977ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
29789935403aSMichael Tuexen 	}
2979ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
2980f8829a4aSRandall Stewart 	if (m_notify == NULL)
2981f8829a4aSRandall Stewart 		/* no space left */
2982f8829a4aSRandall Stewart 		return;
2983ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
2984ab337314SMichael Tuexen 	if (stcb->asoc.idata_supported) {
2985ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_idata_chunk);
2986ab337314SMichael Tuexen 	} else {
2987ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_data_chunk);
2988ab337314SMichael Tuexen 	}
2989ab337314SMichael Tuexen 	/* Use some defaults in case we can't access the chunk header */
2990ab337314SMichael Tuexen 	if (chk->send_size >= chkhdr_len) {
2991ab337314SMichael Tuexen 		payload_len = chk->send_size - chkhdr_len;
2992ab337314SMichael Tuexen 	} else {
2993ab337314SMichael Tuexen 		payload_len = 0;
2994ab337314SMichael Tuexen 	}
2995ab337314SMichael Tuexen 	padding_len = 0;
2996ab337314SMichael Tuexen 	if (chk->data != NULL) {
2997ab337314SMichael Tuexen 		chkhdr = mtod(chk->data, struct sctp_chunkhdr *);
2998ab337314SMichael Tuexen 		if (chkhdr != NULL) {
2999ab337314SMichael Tuexen 			chk_len = ntohs(chkhdr->chunk_length);
3000ab337314SMichael Tuexen 			if ((chk_len >= chkhdr_len) &&
3001ab337314SMichael Tuexen 			    (chk->send_size >= chk_len) &&
3002ab337314SMichael Tuexen 			    (chk->send_size - chk_len < 4)) {
3003ab337314SMichael Tuexen 				padding_len = chk->send_size - chk_len;
3004ab337314SMichael Tuexen 				payload_len = chk->send_size - chkhdr_len - padding_len;
3005ab337314SMichael Tuexen 			}
3006ab337314SMichael Tuexen 		}
3007ab337314SMichael Tuexen 	}
30089935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
30099935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
3010ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
30119935403aSMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
30121edc9dbaSMichael Tuexen 		if (sent) {
30139935403aSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_SENT;
30141edc9dbaSMichael Tuexen 		} else {
30151edc9dbaSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_UNSENT;
30161edc9dbaSMichael Tuexen 		}
3017ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + payload_len);
30189935403aSMichael Tuexen 		ssfe->ssfe_error = error;
30199935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
302049656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = chk->rec.data.sid;
30219935403aSMichael Tuexen 		ssfe->ssfe_info.snd_flags = chk->rec.data.rcv_flags;
302249656eefSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = chk->rec.data.ppid;
30239935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = chk->rec.data.context;
30249935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
30259935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
30269935403aSMichael Tuexen 	} else {
3027f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
3028ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
3029f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
30301edc9dbaSMichael Tuexen 		if (sent) {
3031f8829a4aSRandall Stewart 			ssf->ssf_flags = SCTP_DATA_SENT;
30321edc9dbaSMichael Tuexen 		} else {
30331edc9dbaSMichael Tuexen 			ssf->ssf_flags = SCTP_DATA_UNSENT;
30341edc9dbaSMichael Tuexen 		}
3035ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + payload_len);
3036f8829a4aSRandall Stewart 		ssf->ssf_error = error;
3037f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
303849656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = chk->rec.data.sid;
303949656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ssn = (uint16_t)chk->rec.data.mid;
3040f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_flags = chk->rec.data.rcv_flags;
304149656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ppid = chk->rec.data.ppid;
3042f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = chk->rec.data.context;
3043f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
3044f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
30459935403aSMichael Tuexen 	}
3046ab337314SMichael Tuexen 	if (chk->data != NULL) {
3047ab337314SMichael Tuexen 		/* Trim off the sctp chunk header (it should be there) */
3048ab337314SMichael Tuexen 		if (chk->send_size == chkhdr_len + payload_len + padding_len) {
3049ab337314SMichael Tuexen 			m_adj(chk->data, chkhdr_len);
3050ab337314SMichael Tuexen 			m_adj(chk->data, -padding_len);
3051830d754dSRandall Stewart 			sctp_mbuf_crush(chk->data);
3052ab337314SMichael Tuexen 			chk->send_size -= (chkhdr_len + padding_len);
3053830d754dSRandall Stewart 		}
3054830d754dSRandall Stewart 	}
3055810ec536SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = chk->data;
3056f8829a4aSRandall Stewart 	/* Steal off the mbuf */
3057f8829a4aSRandall Stewart 	chk->data = NULL;
3058f8829a4aSRandall Stewart 	/*
3059f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3060f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3061f8829a4aSRandall Stewart 	 * non-reader
3062f8829a4aSRandall Stewart 	 */
3063139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3064f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3065f8829a4aSRandall Stewart 		return;
3066f8829a4aSRandall Stewart 	}
3067f8829a4aSRandall Stewart 	/* append to socket */
3068f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
30697215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3070f8829a4aSRandall Stewart 	    m_notify);
3071f8829a4aSRandall Stewart 	if (control == NULL) {
3072f8829a4aSRandall Stewart 		/* no memory */
3073f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3074f8829a4aSRandall Stewart 		return;
3075f8829a4aSRandall Stewart 	}
307628cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3077139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
307828cd0699SMichael Tuexen 	/* not that we need this */
307928cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3080f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3081f8829a4aSRandall Stewart 	    control,
3082cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
3083cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
3084cfde3ff7SRandall Stewart 	    so_locked);
3085f8829a4aSRandall Stewart }
3086f8829a4aSRandall Stewart 
3087f8829a4aSRandall Stewart 
3088f8829a4aSRandall Stewart static void
3089f8829a4aSRandall Stewart sctp_notify_send_failed2(struct sctp_tcb *stcb, uint32_t error,
3090ceaad40aSRandall Stewart     struct sctp_stream_queue_pending *sp, int so_locked
3091ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3092ceaad40aSRandall Stewart     SCTP_UNUSED
3093ceaad40aSRandall Stewart #endif
3094ceaad40aSRandall Stewart )
3095f8829a4aSRandall Stewart {
3096f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3097f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
30989935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
3099f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3100ab337314SMichael Tuexen 	int notifhdr_len;
3101f8829a4aSRandall Stewart 
310260990c0cSMichael Tuexen 	if ((stcb == NULL) ||
31039935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
31049935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
3105f8829a4aSRandall Stewart 		/* event not enabled */
3106f8829a4aSRandall Stewart 		return;
3107830d754dSRandall Stewart 	}
31089935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
3109ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
31109935403aSMichael Tuexen 	} else {
3111ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
31129935403aSMichael Tuexen 	}
3113ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
31149935403aSMichael Tuexen 	if (m_notify == NULL) {
3115f8829a4aSRandall Stewart 		/* no space left */
3116f8829a4aSRandall Stewart 		return;
31179935403aSMichael Tuexen 	}
3118ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
31199935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
31209935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
3121ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
3122ad83c8a5SMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
31239935403aSMichael Tuexen 		ssfe->ssfe_flags = SCTP_DATA_UNSENT;
3124ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + sp->length);
31259935403aSMichael Tuexen 		ssfe->ssfe_error = error;
31269935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
312749656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = sp->sid;
31289935403aSMichael Tuexen 		if (sp->some_taken) {
31299935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_LAST_FRAG;
31309935403aSMichael Tuexen 		} else {
31319935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_NOT_FRAG;
31329935403aSMichael Tuexen 		}
31339935403aSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = sp->ppid;
31349935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = sp->context;
31359935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
31369935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
31379935403aSMichael Tuexen 	} else {
3138f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
3139ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
3140f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
3141f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_UNSENT;
3142ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + sp->length);
3143f8829a4aSRandall Stewart 		ssf->ssf_error = error;
3144f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
314549656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = sp->sid;
3146f3b05218SMichael Tuexen 		ssf->ssf_info.sinfo_ssn = 0;
3147fc14de76SRandall Stewart 		if (sp->some_taken) {
3148fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_LAST_FRAG;
3149fc14de76SRandall Stewart 		} else {
3150fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_NOT_FRAG;
3151fc14de76SRandall Stewart 		}
3152f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_ppid = sp->ppid;
3153f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = sp->context;
3154f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
3155f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
31569935403aSMichael Tuexen 	}
31579935403aSMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = sp->data;
3158f8829a4aSRandall Stewart 
3159f8829a4aSRandall Stewart 	/* Steal off the mbuf */
3160f8829a4aSRandall Stewart 	sp->data = NULL;
3161f8829a4aSRandall Stewart 	/*
3162f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3163f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3164f8829a4aSRandall Stewart 	 * non-reader
3165f8829a4aSRandall Stewart 	 */
3166139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3167f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3168f8829a4aSRandall Stewart 		return;
3169f8829a4aSRandall Stewart 	}
3170f8829a4aSRandall Stewart 	/* append to socket */
3171f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
31727215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3173f8829a4aSRandall Stewart 	    m_notify);
3174f8829a4aSRandall Stewart 	if (control == NULL) {
3175f8829a4aSRandall Stewart 		/* no memory */
3176f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3177f8829a4aSRandall Stewart 		return;
3178f8829a4aSRandall Stewart 	}
317928cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3180139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
318128cd0699SMichael Tuexen 	/* not that we need this */
318228cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3183f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3184f8829a4aSRandall Stewart 	    control,
3185cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3186f8829a4aSRandall Stewart }
3187f8829a4aSRandall Stewart 
3188f8829a4aSRandall Stewart 
3189f8829a4aSRandall Stewart 
3190f8829a4aSRandall Stewart static void
31917215cc1bSMichael Tuexen sctp_notify_adaptation_layer(struct sctp_tcb *stcb)
3192f8829a4aSRandall Stewart {
3193f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3194f8829a4aSRandall Stewart 	struct sctp_adaptation_event *sai;
3195f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3196f8829a4aSRandall Stewart 
319760990c0cSMichael Tuexen 	if ((stcb == NULL) ||
319860990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT)) {
3199f8829a4aSRandall Stewart 		/* event not enabled */
3200f8829a4aSRandall Stewart 		return;
3201830d754dSRandall Stewart 	}
32020053ed28SMichael Tuexen 
3203eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_adaption_event), 0, M_NOWAIT, 1, MT_DATA);
3204f8829a4aSRandall Stewart 	if (m_notify == NULL)
3205f8829a4aSRandall Stewart 		/* no space left */
3206f8829a4aSRandall Stewart 		return;
3207139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3208f8829a4aSRandall Stewart 	sai = mtod(m_notify, struct sctp_adaptation_event *);
3209e432298aSXin LI 	memset(sai, 0, sizeof(struct sctp_adaptation_event));
3210f8829a4aSRandall Stewart 	sai->sai_type = SCTP_ADAPTATION_INDICATION;
3211f8829a4aSRandall Stewart 	sai->sai_flags = 0;
3212f8829a4aSRandall Stewart 	sai->sai_length = sizeof(struct sctp_adaptation_event);
32132afb3e84SRandall Stewart 	sai->sai_adaptation_ind = stcb->asoc.peers_adaptation;
3214f8829a4aSRandall Stewart 	sai->sai_assoc_id = sctp_get_associd(stcb);
3215f8829a4aSRandall Stewart 
3216139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_adaptation_event);
3217139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3218f8829a4aSRandall Stewart 
3219f8829a4aSRandall Stewart 	/* append to socket */
3220f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
32217215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3222f8829a4aSRandall Stewart 	    m_notify);
3223f8829a4aSRandall Stewart 	if (control == NULL) {
3224f8829a4aSRandall Stewart 		/* no memory */
3225f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3226f8829a4aSRandall Stewart 		return;
3227f8829a4aSRandall Stewart 	}
3228139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3229139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3230f8829a4aSRandall Stewart 	/* not that we need this */
3231f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3232f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3233f8829a4aSRandall Stewart 	    control,
3234cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3235f8829a4aSRandall Stewart }
3236f8829a4aSRandall Stewart 
323703b0b021SRandall Stewart /* This always must be called with the read-queue LOCKED in the INP */
3238810ec536SMichael Tuexen static void
32392dad8a55SRandall Stewart sctp_notify_partial_delivery_indication(struct sctp_tcb *stcb, uint32_t error,
3240810ec536SMichael Tuexen     uint32_t val, int so_locked
3241810ec536SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3242810ec536SMichael Tuexen     SCTP_UNUSED
3243810ec536SMichael Tuexen #endif
3244810ec536SMichael Tuexen )
3245f8829a4aSRandall Stewart {
3246f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3247f8829a4aSRandall Stewart 	struct sctp_pdapi_event *pdapi;
3248f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
324903b0b021SRandall Stewart 	struct sockbuf *sb;
3250f8829a4aSRandall Stewart 
325160990c0cSMichael Tuexen 	if ((stcb == NULL) ||
325260990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_PDAPIEVNT)) {
3253f8829a4aSRandall Stewart 		/* event not enabled */
3254f8829a4aSRandall Stewart 		return;
3255830d754dSRandall Stewart 	}
3256cd1386abSMichael Tuexen 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
3257cd1386abSMichael Tuexen 		return;
3258cd1386abSMichael Tuexen 	}
32590053ed28SMichael Tuexen 
3260eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_pdapi_event), 0, M_NOWAIT, 1, MT_DATA);
3261f8829a4aSRandall Stewart 	if (m_notify == NULL)
3262f8829a4aSRandall Stewart 		/* no space left */
3263f8829a4aSRandall Stewart 		return;
3264139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3265f8829a4aSRandall Stewart 	pdapi = mtod(m_notify, struct sctp_pdapi_event *);
3266e432298aSXin LI 	memset(pdapi, 0, sizeof(struct sctp_pdapi_event));
3267f8829a4aSRandall Stewart 	pdapi->pdapi_type = SCTP_PARTIAL_DELIVERY_EVENT;
3268f8829a4aSRandall Stewart 	pdapi->pdapi_flags = 0;
3269f8829a4aSRandall Stewart 	pdapi->pdapi_length = sizeof(struct sctp_pdapi_event);
3270f8829a4aSRandall Stewart 	pdapi->pdapi_indication = error;
32719a6142d8SRandall Stewart 	pdapi->pdapi_stream = (val >> 16);
32729a6142d8SRandall Stewart 	pdapi->pdapi_seq = (val & 0x0000ffff);
3273f8829a4aSRandall Stewart 	pdapi->pdapi_assoc_id = sctp_get_associd(stcb);
3274f8829a4aSRandall Stewart 
3275139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_pdapi_event);
3276139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3277f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
32787215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3279f8829a4aSRandall Stewart 	    m_notify);
3280f8829a4aSRandall Stewart 	if (control == NULL) {
3281f8829a4aSRandall Stewart 		/* no memory */
3282f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3283f8829a4aSRandall Stewart 		return;
3284f8829a4aSRandall Stewart 	}
3285139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
328628cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3287f8829a4aSRandall Stewart 	/* not that we need this */
3288f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
328903b0b021SRandall Stewart 	sb = &stcb->sctp_socket->so_rcv;
3290b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
3291139bc87fSRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m_notify));
329280fefe0aSRandall Stewart 	}
329303b0b021SRandall Stewart 	sctp_sballoc(stcb, sb, m_notify);
3294b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
329503b0b021SRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
329680fefe0aSRandall Stewart 	}
329703b0b021SRandall Stewart 	control->end_added = 1;
329803b0b021SRandall Stewart 	if (stcb->asoc.control_pdapi)
329903b0b021SRandall Stewart 		TAILQ_INSERT_AFTER(&stcb->sctp_ep->read_queue, stcb->asoc.control_pdapi, control, next);
330003b0b021SRandall Stewart 	else {
330103b0b021SRandall Stewart 		/* we really should not see this case */
330203b0b021SRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->sctp_ep->read_queue, control, next);
330303b0b021SRandall Stewart 	}
330403b0b021SRandall Stewart 	if (stcb->sctp_ep && stcb->sctp_socket) {
330503b0b021SRandall Stewart 		/* This should always be the case */
3306810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3307810ec536SMichael Tuexen 		struct socket *so;
3308810ec536SMichael Tuexen 
3309810ec536SMichael Tuexen 		so = SCTP_INP_SO(stcb->sctp_ep);
3310810ec536SMichael Tuexen 		if (!so_locked) {
3311810ec536SMichael Tuexen 			atomic_add_int(&stcb->asoc.refcnt, 1);
3312810ec536SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
3313810ec536SMichael Tuexen 			SCTP_SOCKET_LOCK(so, 1);
3314810ec536SMichael Tuexen 			SCTP_TCB_LOCK(stcb);
3315810ec536SMichael Tuexen 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
3316810ec536SMichael Tuexen 			if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
3317810ec536SMichael Tuexen 				SCTP_SOCKET_UNLOCK(so, 1);
3318810ec536SMichael Tuexen 				return;
3319810ec536SMichael Tuexen 			}
3320810ec536SMichael Tuexen 		}
3321810ec536SMichael Tuexen #endif
332203b0b021SRandall Stewart 		sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket);
3323810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3324810ec536SMichael Tuexen 		if (!so_locked) {
3325810ec536SMichael Tuexen 			SCTP_SOCKET_UNLOCK(so, 1);
3326810ec536SMichael Tuexen 		}
3327810ec536SMichael Tuexen #endif
3328f8829a4aSRandall Stewart 	}
3329f8829a4aSRandall Stewart }
3330f8829a4aSRandall Stewart 
3331f8829a4aSRandall Stewart static void
3332f8829a4aSRandall Stewart sctp_notify_shutdown_event(struct sctp_tcb *stcb)
3333f8829a4aSRandall Stewart {
3334f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3335f8829a4aSRandall Stewart 	struct sctp_shutdown_event *sse;
3336f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3337f8829a4aSRandall Stewart 
3338f8829a4aSRandall Stewart 	/*
3339f8829a4aSRandall Stewart 	 * For TCP model AND UDP connected sockets we will send an error up
3340f8829a4aSRandall Stewart 	 * when an SHUTDOWN completes
3341f8829a4aSRandall Stewart 	 */
3342f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3343f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
3344f8829a4aSRandall Stewart 		/* mark socket closed for read/write and wakeup! */
3345ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3346ceaad40aSRandall Stewart 		struct socket *so;
3347ceaad40aSRandall Stewart 
3348ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
3349ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3350ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3351ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3352ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3353ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3354ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
3355ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
3356ceaad40aSRandall Stewart 			return;
3357ceaad40aSRandall Stewart 		}
3358ceaad40aSRandall Stewart #endif
3359f8829a4aSRandall Stewart 		socantsendmore(stcb->sctp_socket);
3360ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3361ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3362ceaad40aSRandall Stewart #endif
3363f8829a4aSRandall Stewart 	}
3364e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT)) {
3365f8829a4aSRandall Stewart 		/* event not enabled */
3366f8829a4aSRandall Stewart 		return;
3367830d754dSRandall Stewart 	}
33680053ed28SMichael Tuexen 
3369eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_shutdown_event), 0, M_NOWAIT, 1, MT_DATA);
3370f8829a4aSRandall Stewart 	if (m_notify == NULL)
3371f8829a4aSRandall Stewart 		/* no space left */
3372f8829a4aSRandall Stewart 		return;
3373f8829a4aSRandall Stewart 	sse = mtod(m_notify, struct sctp_shutdown_event *);
3374e432298aSXin LI 	memset(sse, 0, sizeof(struct sctp_shutdown_event));
3375f8829a4aSRandall Stewart 	sse->sse_type = SCTP_SHUTDOWN_EVENT;
3376f8829a4aSRandall Stewart 	sse->sse_flags = 0;
3377f8829a4aSRandall Stewart 	sse->sse_length = sizeof(struct sctp_shutdown_event);
3378f8829a4aSRandall Stewart 	sse->sse_assoc_id = sctp_get_associd(stcb);
3379f8829a4aSRandall Stewart 
3380139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_shutdown_event);
3381139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3382f8829a4aSRandall Stewart 
3383f8829a4aSRandall Stewart 	/* append to socket */
3384f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
33857215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3386f8829a4aSRandall Stewart 	    m_notify);
3387f8829a4aSRandall Stewart 	if (control == NULL) {
3388f8829a4aSRandall Stewart 		/* no memory */
3389f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3390f8829a4aSRandall Stewart 		return;
3391f8829a4aSRandall Stewart 	}
3392139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
339328cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3394f8829a4aSRandall Stewart 	/* not that we need this */
3395f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3396f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3397f8829a4aSRandall Stewart 	    control,
3398cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3399f8829a4aSRandall Stewart }
3400f8829a4aSRandall Stewart 
3401f8829a4aSRandall Stewart static void
3402830d754dSRandall Stewart sctp_notify_sender_dry_event(struct sctp_tcb *stcb,
3403830d754dSRandall Stewart     int so_locked
3404830d754dSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3405830d754dSRandall Stewart     SCTP_UNUSED
3406830d754dSRandall Stewart #endif
3407830d754dSRandall Stewart )
3408830d754dSRandall Stewart {
3409830d754dSRandall Stewart 	struct mbuf *m_notify;
3410830d754dSRandall Stewart 	struct sctp_sender_dry_event *event;
3411830d754dSRandall Stewart 	struct sctp_queued_to_read *control;
3412830d754dSRandall Stewart 
341360990c0cSMichael Tuexen 	if ((stcb == NULL) ||
341460990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DRYEVNT)) {
3415830d754dSRandall Stewart 		/* event not enabled */
3416830d754dSRandall Stewart 		return;
3417830d754dSRandall Stewart 	}
34180053ed28SMichael Tuexen 
3419eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_sender_dry_event), 0, M_NOWAIT, 1, MT_DATA);
3420830d754dSRandall Stewart 	if (m_notify == NULL) {
3421830d754dSRandall Stewart 		/* no space left */
3422830d754dSRandall Stewart 		return;
3423830d754dSRandall Stewart 	}
3424830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3425830d754dSRandall Stewart 	event = mtod(m_notify, struct sctp_sender_dry_event *);
3426e432298aSXin LI 	memset(event, 0, sizeof(struct sctp_sender_dry_event));
3427830d754dSRandall Stewart 	event->sender_dry_type = SCTP_SENDER_DRY_EVENT;
3428830d754dSRandall Stewart 	event->sender_dry_flags = 0;
3429830d754dSRandall Stewart 	event->sender_dry_length = sizeof(struct sctp_sender_dry_event);
3430830d754dSRandall Stewart 	event->sender_dry_assoc_id = sctp_get_associd(stcb);
3431830d754dSRandall Stewart 
3432830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_sender_dry_event);
3433830d754dSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3434830d754dSRandall Stewart 
3435830d754dSRandall Stewart 	/* append to socket */
3436830d754dSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
34377215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
34387215cc1bSMichael Tuexen 	    m_notify);
3439830d754dSRandall Stewart 	if (control == NULL) {
3440830d754dSRandall Stewart 		/* no memory */
3441830d754dSRandall Stewart 		sctp_m_freem(m_notify);
3442830d754dSRandall Stewart 		return;
3443830d754dSRandall Stewart 	}
3444830d754dSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3445830d754dSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3446830d754dSRandall Stewart 	/* not that we need this */
3447830d754dSRandall Stewart 	control->tail_mbuf = m_notify;
3448830d754dSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb, control,
3449cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3450830d754dSRandall Stewart }
3451830d754dSRandall Stewart 
3452ea44232bSRandall Stewart 
3453c4e848b7SRandall Stewart void
3454c4e848b7SRandall Stewart sctp_notify_stream_reset_add(struct sctp_tcb *stcb, uint16_t numberin, uint16_t numberout, int flag)
3455ea44232bSRandall Stewart {
3456ea44232bSRandall Stewart 	struct mbuf *m_notify;
3457ea44232bSRandall Stewart 	struct sctp_queued_to_read *control;
3458c4e848b7SRandall Stewart 	struct sctp_stream_change_event *stradd;
3459ea44232bSRandall Stewart 
34608c501e51SMichael Tuexen 	if ((stcb == NULL) ||
34618c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_CHANGEEVNT))) {
3462ea44232bSRandall Stewart 		/* event not enabled */
3463ea44232bSRandall Stewart 		return;
3464ea44232bSRandall Stewart 	}
3465c4e848b7SRandall Stewart 	if ((stcb->asoc.peer_req_out) && flag) {
3466c4e848b7SRandall Stewart 		/* Peer made the request, don't tell the local user */
3467c4e848b7SRandall Stewart 		stcb->asoc.peer_req_out = 0;
3468c4e848b7SRandall Stewart 		return;
3469c4e848b7SRandall Stewart 	}
3470c4e848b7SRandall Stewart 	stcb->asoc.peer_req_out = 0;
3471e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_stream_change_event), 0, M_NOWAIT, 1, MT_DATA);
3472ea44232bSRandall Stewart 	if (m_notify == NULL)
3473ea44232bSRandall Stewart 		/* no space left */
3474ea44232bSRandall Stewart 		return;
3475ea44232bSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3476c4e848b7SRandall Stewart 	stradd = mtod(m_notify, struct sctp_stream_change_event *);
3477e432298aSXin LI 	memset(stradd, 0, sizeof(struct sctp_stream_change_event));
3478c4e848b7SRandall Stewart 	stradd->strchange_type = SCTP_STREAM_CHANGE_EVENT;
3479c4e848b7SRandall Stewart 	stradd->strchange_flags = flag;
3480e432298aSXin LI 	stradd->strchange_length = sizeof(struct sctp_stream_change_event);
3481c4e848b7SRandall Stewart 	stradd->strchange_assoc_id = sctp_get_associd(stcb);
3482c4e848b7SRandall Stewart 	stradd->strchange_instrms = numberin;
3483c4e848b7SRandall Stewart 	stradd->strchange_outstrms = numberout;
3484e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_stream_change_event);
3485ea44232bSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3486ea44232bSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3487ea44232bSRandall Stewart 		/* no space */
3488ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3489ea44232bSRandall Stewart 		return;
3490ea44232bSRandall Stewart 	}
3491ea44232bSRandall Stewart 	/* append to socket */
3492ea44232bSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
34937215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3494ea44232bSRandall Stewart 	    m_notify);
3495ea44232bSRandall Stewart 	if (control == NULL) {
3496ea44232bSRandall Stewart 		/* no memory */
3497ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3498ea44232bSRandall Stewart 		return;
3499ea44232bSRandall Stewart 	}
3500ea44232bSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
350128cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3502ea44232bSRandall Stewart 	/* not that we need this */
3503ea44232bSRandall Stewart 	control->tail_mbuf = m_notify;
3504ea44232bSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3505ea44232bSRandall Stewart 	    control,
3506cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3507ea44232bSRandall Stewart }
3508ea44232bSRandall Stewart 
3509c4e848b7SRandall Stewart void
3510c4e848b7SRandall Stewart sctp_notify_stream_reset_tsn(struct sctp_tcb *stcb, uint32_t sending_tsn, uint32_t recv_tsn, int flag)
3511c4e848b7SRandall Stewart {
3512c4e848b7SRandall Stewart 	struct mbuf *m_notify;
3513c4e848b7SRandall Stewart 	struct sctp_queued_to_read *control;
3514c4e848b7SRandall Stewart 	struct sctp_assoc_reset_event *strasoc;
3515c4e848b7SRandall Stewart 
35168c501e51SMichael Tuexen 	if ((stcb == NULL) ||
35178c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ASSOC_RESETEVNT))) {
3518c4e848b7SRandall Stewart 		/* event not enabled */
3519c4e848b7SRandall Stewart 		return;
3520c4e848b7SRandall Stewart 	}
3521e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_assoc_reset_event), 0, M_NOWAIT, 1, MT_DATA);
3522c4e848b7SRandall Stewart 	if (m_notify == NULL)
3523c4e848b7SRandall Stewart 		/* no space left */
3524c4e848b7SRandall Stewart 		return;
3525c4e848b7SRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3526c4e848b7SRandall Stewart 	strasoc = mtod(m_notify, struct sctp_assoc_reset_event *);
3527e432298aSXin LI 	memset(strasoc, 0, sizeof(struct sctp_assoc_reset_event));
3528c4e848b7SRandall Stewart 	strasoc->assocreset_type = SCTP_ASSOC_RESET_EVENT;
3529c4e848b7SRandall Stewart 	strasoc->assocreset_flags = flag;
3530e432298aSXin LI 	strasoc->assocreset_length = sizeof(struct sctp_assoc_reset_event);
3531c4e848b7SRandall Stewart 	strasoc->assocreset_assoc_id = sctp_get_associd(stcb);
3532c4e848b7SRandall Stewart 	strasoc->assocreset_local_tsn = sending_tsn;
3533c4e848b7SRandall Stewart 	strasoc->assocreset_remote_tsn = recv_tsn;
3534e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_assoc_reset_event);
3535c4e848b7SRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3536c4e848b7SRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3537c4e848b7SRandall Stewart 		/* no space */
3538c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3539c4e848b7SRandall Stewart 		return;
3540c4e848b7SRandall Stewart 	}
3541c4e848b7SRandall Stewart 	/* append to socket */
3542c4e848b7SRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3543c4e848b7SRandall Stewart 	    0, 0, stcb->asoc.context, 0, 0, 0,
3544c4e848b7SRandall Stewart 	    m_notify);
3545c4e848b7SRandall Stewart 	if (control == NULL) {
3546c4e848b7SRandall Stewart 		/* no memory */
3547c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3548c4e848b7SRandall Stewart 		return;
3549c4e848b7SRandall Stewart 	}
3550c4e848b7SRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
355128cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3552c4e848b7SRandall Stewart 	/* not that we need this */
3553c4e848b7SRandall Stewart 	control->tail_mbuf = m_notify;
3554c4e848b7SRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3555c4e848b7SRandall Stewart 	    control,
3556c4e848b7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3557c4e848b7SRandall Stewart }
3558c4e848b7SRandall Stewart 
3559c4e848b7SRandall Stewart 
3560ea44232bSRandall Stewart 
3561830d754dSRandall Stewart static void
3562f8829a4aSRandall Stewart sctp_notify_stream_reset(struct sctp_tcb *stcb,
3563f8829a4aSRandall Stewart     int number_entries, uint16_t *list, int flag)
3564f8829a4aSRandall Stewart {
3565f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3566f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3567f8829a4aSRandall Stewart 	struct sctp_stream_reset_event *strreset;
3568f8829a4aSRandall Stewart 	int len;
3569f8829a4aSRandall Stewart 
35708c501e51SMichael Tuexen 	if ((stcb == NULL) ||
35718c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_RESETEVNT))) {
3572f8829a4aSRandall Stewart 		/* event not enabled */
3573f8829a4aSRandall Stewart 		return;
3574830d754dSRandall Stewart 	}
35750053ed28SMichael Tuexen 
3576eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_NOWAIT, 1, MT_DATA);
3577f8829a4aSRandall Stewart 	if (m_notify == NULL)
3578f8829a4aSRandall Stewart 		/* no space left */
3579f8829a4aSRandall Stewart 		return;
3580139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3581f8829a4aSRandall Stewart 	len = sizeof(struct sctp_stream_reset_event) + (number_entries * sizeof(uint16_t));
3582f8829a4aSRandall Stewart 	if (len > M_TRAILINGSPACE(m_notify)) {
3583f8829a4aSRandall Stewart 		/* never enough room */
3584f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3585f8829a4aSRandall Stewart 		return;
3586f8829a4aSRandall Stewart 	}
3587f8829a4aSRandall Stewart 	strreset = mtod(m_notify, struct sctp_stream_reset_event *);
3588e432298aSXin LI 	memset(strreset, 0, len);
3589f8829a4aSRandall Stewart 	strreset->strreset_type = SCTP_STREAM_RESET_EVENT;
3590c4e848b7SRandall Stewart 	strreset->strreset_flags = flag;
3591f8829a4aSRandall Stewart 	strreset->strreset_length = len;
3592f8829a4aSRandall Stewart 	strreset->strreset_assoc_id = sctp_get_associd(stcb);
3593f8829a4aSRandall Stewart 	if (number_entries) {
3594f8829a4aSRandall Stewart 		int i;
3595f8829a4aSRandall Stewart 
3596f8829a4aSRandall Stewart 		for (i = 0; i < number_entries; i++) {
3597c4e848b7SRandall Stewart 			strreset->strreset_stream_list[i] = ntohs(list[i]);
3598f8829a4aSRandall Stewart 		}
3599f8829a4aSRandall Stewart 	}
3600139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = len;
3601139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3602139bc87fSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3603f8829a4aSRandall Stewart 		/* no space */
3604f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3605f8829a4aSRandall Stewart 		return;
3606f8829a4aSRandall Stewart 	}
3607f8829a4aSRandall Stewart 	/* append to socket */
3608f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
36097215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3610f8829a4aSRandall Stewart 	    m_notify);
3611f8829a4aSRandall Stewart 	if (control == NULL) {
3612f8829a4aSRandall Stewart 		/* no memory */
3613f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3614f8829a4aSRandall Stewart 		return;
3615f8829a4aSRandall Stewart 	}
3616139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
361728cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3618f8829a4aSRandall Stewart 	/* not that we need this */
3619f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3620f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3621f8829a4aSRandall Stewart 	    control,
3622cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3623f8829a4aSRandall Stewart }
3624f8829a4aSRandall Stewart 
3625f8829a4aSRandall Stewart 
3626389b1b11SMichael Tuexen static void
3627389b1b11SMichael Tuexen sctp_notify_remote_error(struct sctp_tcb *stcb, uint16_t error, struct sctp_error_chunk *chunk)
3628389b1b11SMichael Tuexen {
3629389b1b11SMichael Tuexen 	struct mbuf *m_notify;
3630389b1b11SMichael Tuexen 	struct sctp_remote_error *sre;
3631389b1b11SMichael Tuexen 	struct sctp_queued_to_read *control;
36329a8e3088SMichael Tuexen 	unsigned int notif_len;
36339a8e3088SMichael Tuexen 	uint16_t chunk_len;
3634389b1b11SMichael Tuexen 
3635389b1b11SMichael Tuexen 	if ((stcb == NULL) ||
3636389b1b11SMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPEERERR)) {
3637389b1b11SMichael Tuexen 		return;
3638389b1b11SMichael Tuexen 	}
3639389b1b11SMichael Tuexen 	if (chunk != NULL) {
3640c9eb4473SMichael Tuexen 		chunk_len = ntohs(chunk->ch.chunk_length);
36419669e724SMichael Tuexen 		/*
36429669e724SMichael Tuexen 		 * Only SCTP_CHUNK_BUFFER_SIZE are guaranteed to be
364345d41de5SMichael Tuexen 		 * contiguous.
36449669e724SMichael Tuexen 		 */
36459669e724SMichael Tuexen 		if (chunk_len > SCTP_CHUNK_BUFFER_SIZE) {
36469669e724SMichael Tuexen 			chunk_len = SCTP_CHUNK_BUFFER_SIZE;
36479669e724SMichael Tuexen 		}
3648389b1b11SMichael Tuexen 	} else {
3649389b1b11SMichael Tuexen 		chunk_len = 0;
3650389b1b11SMichael Tuexen 	}
36519a8e3088SMichael Tuexen 	notif_len = (unsigned int)(sizeof(struct sctp_remote_error) + chunk_len);
3652eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3653389b1b11SMichael Tuexen 	if (m_notify == NULL) {
3654389b1b11SMichael Tuexen 		/* Retry with smaller value. */
36559a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_remote_error);
3656eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3657389b1b11SMichael Tuexen 		if (m_notify == NULL) {
3658389b1b11SMichael Tuexen 			return;
3659389b1b11SMichael Tuexen 		}
3660389b1b11SMichael Tuexen 	}
3661389b1b11SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = NULL;
3662389b1b11SMichael Tuexen 	sre = mtod(m_notify, struct sctp_remote_error *);
366356711f94SMichael Tuexen 	memset(sre, 0, notif_len);
3664389b1b11SMichael Tuexen 	sre->sre_type = SCTP_REMOTE_ERROR;
3665389b1b11SMichael Tuexen 	sre->sre_flags = 0;
3666389b1b11SMichael Tuexen 	sre->sre_length = sizeof(struct sctp_remote_error);
3667389b1b11SMichael Tuexen 	sre->sre_error = error;
3668389b1b11SMichael Tuexen 	sre->sre_assoc_id = sctp_get_associd(stcb);
3669389b1b11SMichael Tuexen 	if (notif_len > sizeof(struct sctp_remote_error)) {
3670389b1b11SMichael Tuexen 		memcpy(sre->sre_data, chunk, chunk_len);
3671389b1b11SMichael Tuexen 		sre->sre_length += chunk_len;
3672389b1b11SMichael Tuexen 	}
3673389b1b11SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = sre->sre_length;
3674389b1b11SMichael Tuexen 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3675389b1b11SMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3676389b1b11SMichael Tuexen 	    m_notify);
3677389b1b11SMichael Tuexen 	if (control != NULL) {
3678389b1b11SMichael Tuexen 		control->length = SCTP_BUF_LEN(m_notify);
367928cd0699SMichael Tuexen 		control->spec_flags = M_NOTIFICATION;
3680389b1b11SMichael Tuexen 		/* not that we need this */
3681389b1b11SMichael Tuexen 		control->tail_mbuf = m_notify;
3682389b1b11SMichael Tuexen 		sctp_add_to_readq(stcb->sctp_ep, stcb,
3683389b1b11SMichael Tuexen 		    control,
3684389b1b11SMichael Tuexen 		    &stcb->sctp_socket->so_rcv, 1,
3685389b1b11SMichael Tuexen 		    SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3686389b1b11SMichael Tuexen 	} else {
3687389b1b11SMichael Tuexen 		sctp_m_freem(m_notify);
3688389b1b11SMichael Tuexen 	}
3689389b1b11SMichael Tuexen }
3690389b1b11SMichael Tuexen 
3691389b1b11SMichael Tuexen 
3692f8829a4aSRandall Stewart void
3693f8829a4aSRandall Stewart sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb,
3694ceaad40aSRandall Stewart     uint32_t error, void *data, int so_locked
3695ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3696ceaad40aSRandall Stewart     SCTP_UNUSED
3697ceaad40aSRandall Stewart #endif
3698ceaad40aSRandall Stewart )
3699f8829a4aSRandall Stewart {
3700830d754dSRandall Stewart 	if ((stcb == NULL) ||
3701830d754dSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3702f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3703830d754dSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3704830d754dSRandall Stewart 		/* If the socket is gone we are out of here */
3705f8829a4aSRandall Stewart 		return;
3706f8829a4aSRandall Stewart 	}
3707a99b6783SRandall Stewart 	if (stcb->sctp_socket->so_rcv.sb_state & SBS_CANTRCVMORE) {
3708a99b6783SRandall Stewart 		return;
3709a99b6783SRandall Stewart 	}
3710839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3711839d21d6SMichael Tuexen 	    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
371217205eccSRandall Stewart 		if ((notification == SCTP_NOTIFY_INTERFACE_DOWN) ||
371317205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_UP) ||
371417205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_CONFIRMED)) {
371517205eccSRandall Stewart 			/* Don't report these in front states */
371617205eccSRandall Stewart 			return;
371717205eccSRandall Stewart 		}
371817205eccSRandall Stewart 	}
3719f8829a4aSRandall Stewart 	switch (notification) {
3720f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_UP:
3721f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_up_sent == 0) {
3722410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_UP, stcb, error, NULL, 0, so_locked);
3723f8829a4aSRandall Stewart 			stcb->asoc.assoc_up_sent = 1;
3724f8829a4aSRandall Stewart 		}
37252afb3e84SRandall Stewart 		if (stcb->asoc.adaptation_needed && (stcb->asoc.adaptation_sent == 0)) {
37267215cc1bSMichael Tuexen 			sctp_notify_adaptation_layer(stcb);
37272afb3e84SRandall Stewart 		}
3728c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3729830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3730830d754dSRandall Stewart 			    NULL, so_locked);
3731830d754dSRandall Stewart 		}
3732f8829a4aSRandall Stewart 		break;
3733f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_DOWN:
3734410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_SHUTDOWN_COMP, stcb, error, NULL, 0, so_locked);
3735f8829a4aSRandall Stewart 		break;
3736f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_DOWN:
3737f8829a4aSRandall Stewart 		{
3738f8829a4aSRandall Stewart 			struct sctp_nets *net;
3739f8829a4aSRandall Stewart 
3740f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3741f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_UNREACHABLE,
37423cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3743f8829a4aSRandall Stewart 			break;
3744f8829a4aSRandall Stewart 		}
3745f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_UP:
3746f8829a4aSRandall Stewart 		{
3747f8829a4aSRandall Stewart 			struct sctp_nets *net;
3748f8829a4aSRandall Stewart 
3749f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3750f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_AVAILABLE,
37513cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3752f8829a4aSRandall Stewart 			break;
3753f8829a4aSRandall Stewart 		}
3754f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_CONFIRMED:
3755f8829a4aSRandall Stewart 		{
3756f8829a4aSRandall Stewart 			struct sctp_nets *net;
3757f8829a4aSRandall Stewart 
3758f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3759f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_CONFIRMED,
37603cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3761f8829a4aSRandall Stewart 			break;
3762f8829a4aSRandall Stewart 		}
3763f8829a4aSRandall Stewart 	case SCTP_NOTIFY_SPECIAL_SP_FAIL:
3764f8829a4aSRandall Stewart 		sctp_notify_send_failed2(stcb, error,
3765ceaad40aSRandall Stewart 		    (struct sctp_stream_queue_pending *)data, so_locked);
3766f8829a4aSRandall Stewart 		break;
37671edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_SENT_DG_FAIL:
37681edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 1, error,
37691edc9dbaSMichael Tuexen 		    (struct sctp_tmit_chunk *)data, so_locked);
37701edc9dbaSMichael Tuexen 		break;
37711edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_UNSENT_DG_FAIL:
37721edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 0, error,
3773ceaad40aSRandall Stewart 		    (struct sctp_tmit_chunk *)data, so_locked);
3774f8829a4aSRandall Stewart 		break;
3775f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION:
37769a6142d8SRandall Stewart 		{
37779a6142d8SRandall Stewart 			uint32_t val;
37789a6142d8SRandall Stewart 
37799a6142d8SRandall Stewart 			val = *((uint32_t *)data);
37809a6142d8SRandall Stewart 
3781810ec536SMichael Tuexen 			sctp_notify_partial_delivery_indication(stcb, error, val, so_locked);
3782f8829a4aSRandall Stewart 			break;
3783810ec536SMichael Tuexen 		}
3784410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_LOC_ABORTED:
3785839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3786839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
3787410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 0, so_locked);
3788c105859eSRandall Stewart 		} else {
3789410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 0, so_locked);
3790410a3b1eSMichael Tuexen 		}
3791410a3b1eSMichael Tuexen 		break;
3792410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_REM_ABORTED:
3793839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3794839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
3795410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 1, so_locked);
3796410a3b1eSMichael Tuexen 		} else {
3797410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 1, so_locked);
3798c105859eSRandall Stewart 		}
3799f8829a4aSRandall Stewart 		break;
3800f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_RESTART:
3801410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_RESTART, stcb, error, NULL, 0, so_locked);
3802c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3803830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3804830d754dSRandall Stewart 			    NULL, so_locked);
3805830d754dSRandall Stewart 		}
3806f8829a4aSRandall Stewart 		break;
3807f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_SEND:
3808d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_OUTGOING_SSN);
3809f8829a4aSRandall Stewart 		break;
3810f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_RECV:
3811d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_INCOMING);
3812f8829a4aSRandall Stewart 		break;
3813f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_OUT:
3814c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3815d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_FAILED));
3816f8829a4aSRandall Stewart 		break;
3817d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_OUT:
3818d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3819d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_DENIED));
3820d4260646SMichael Tuexen 		break;
3821f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_IN:
3822c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3823d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_FAILED));
3824f8829a4aSRandall Stewart 		break;
3825d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_IN:
3826d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3827d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_DENIED));
3828d4260646SMichael Tuexen 		break;
3829f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_ADD_IP:
3830f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_ADDED, data,
38313cb3567dSMichael Tuexen 		    error, so_locked);
3832f8829a4aSRandall Stewart 		break;
3833f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_DELETE_IP:
3834f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_REMOVED, data,
38353cb3567dSMichael Tuexen 		    error, so_locked);
3836f8829a4aSRandall Stewart 		break;
3837f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_SET_PRIMARY:
3838f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_MADE_PRIM, data,
38393cb3567dSMichael Tuexen 		    error, so_locked);
3840f8829a4aSRandall Stewart 		break;
3841f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PEER_SHUTDOWN:
3842f8829a4aSRandall Stewart 		sctp_notify_shutdown_event(stcb);
3843f8829a4aSRandall Stewart 		break;
3844f8829a4aSRandall Stewart 	case SCTP_NOTIFY_AUTH_NEW_KEY:
384578f28045SMichael Tuexen 		sctp_notify_authentication(stcb, SCTP_AUTH_NEW_KEY, error,
3846830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3847830d754dSRandall Stewart 		    so_locked);
3848f8829a4aSRandall Stewart 		break;
3849830d754dSRandall Stewart 	case SCTP_NOTIFY_AUTH_FREE_KEY:
3850830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_FREE_KEY, error,
3851830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3852830d754dSRandall Stewart 		    so_locked);
3853f8829a4aSRandall Stewart 		break;
3854830d754dSRandall Stewart 	case SCTP_NOTIFY_NO_PEER_AUTH:
3855830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_NO_AUTH, error,
3856830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3857830d754dSRandall Stewart 		    so_locked);
3858830d754dSRandall Stewart 		break;
3859830d754dSRandall Stewart 	case SCTP_NOTIFY_SENDER_DRY:
3860830d754dSRandall Stewart 		sctp_notify_sender_dry_event(stcb, so_locked);
3861830d754dSRandall Stewart 		break;
3862389b1b11SMichael Tuexen 	case SCTP_NOTIFY_REMOTE_ERROR:
3863389b1b11SMichael Tuexen 		sctp_notify_remote_error(stcb, error, data);
3864389b1b11SMichael Tuexen 		break;
3865f8829a4aSRandall Stewart 	default:
3866ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_UTIL1, "%s: unknown notification %xh (%u)\n",
38676e9c45e0SMichael Tuexen 		    __func__, notification, notification);
3868f8829a4aSRandall Stewart 		break;
3869f8829a4aSRandall Stewart 	}			/* end switch */
3870f8829a4aSRandall Stewart }
3871f8829a4aSRandall Stewart 
3872f8829a4aSRandall Stewart void
38731edc9dbaSMichael Tuexen sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked
3874ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3875ceaad40aSRandall Stewart     SCTP_UNUSED
3876ceaad40aSRandall Stewart #endif
3877ceaad40aSRandall Stewart )
3878f8829a4aSRandall Stewart {
3879f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3880f8829a4aSRandall Stewart 	struct sctp_stream_out *outs;
38814a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk, *nchk;
38824a9ef3f8SMichael Tuexen 	struct sctp_stream_queue_pending *sp, *nsp;
38837f34832bSRandall Stewart 	int i;
3884f8829a4aSRandall Stewart 
3885ad81507eSRandall Stewart 	if (stcb == NULL) {
3886ad81507eSRandall Stewart 		return;
3887ad81507eSRandall Stewart 	}
38884a9ef3f8SMichael Tuexen 	asoc = &stcb->asoc;
38894a9ef3f8SMichael Tuexen 	if (asoc->state & SCTP_STATE_ABOUT_TO_BE_FREED) {
3890478fbccbSRandall Stewart 		/* already being freed */
3891478fbccbSRandall Stewart 		return;
3892478fbccbSRandall Stewart 	}
3893f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3894f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
38954a9ef3f8SMichael Tuexen 	    (asoc->state & SCTP_STATE_CLOSED_SOCKET)) {
3896f8829a4aSRandall Stewart 		return;
3897f8829a4aSRandall Stewart 	}
3898f8829a4aSRandall Stewart 	/* now through all the gunk freeing chunks */
3899ad81507eSRandall Stewart 	if (holds_lock == 0) {
39007f34832bSRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
3901ad81507eSRandall Stewart 	}
3902d00aff5dSRandall Stewart 	/* sent queue SHOULD be empty */
39034a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
3904d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
3905d00aff5dSRandall Stewart 		asoc->sent_queue_cnt--;
3906325c8c46SMichael Tuexen 		if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
390749656eefSMichael Tuexen 			if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
390849656eefSMichael Tuexen 				asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3909a7ad6026SMichael Tuexen #ifdef INVARIANTS
3910a7ad6026SMichael Tuexen 			} else {
391149656eefSMichael Tuexen 				panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3912a7ad6026SMichael Tuexen #endif
3913a7ad6026SMichael Tuexen 			}
3914a7ad6026SMichael Tuexen 		}
39150c0982b8SRandall Stewart 		if (chk->data != NULL) {
3916d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
39171edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb,
39181edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3919810ec536SMichael Tuexen 			if (chk->data) {
3920d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3921d00aff5dSRandall Stewart 				chk->data = NULL;
3922d00aff5dSRandall Stewart 			}
3923810ec536SMichael Tuexen 		}
3924689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3925d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3926d00aff5dSRandall Stewart 	}
3927d00aff5dSRandall Stewart 	/* pending send queue SHOULD be empty */
39284a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->send_queue, sctp_next, nchk) {
3929d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next);
3930d00aff5dSRandall Stewart 		asoc->send_queue_cnt--;
393149656eefSMichael Tuexen 		if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
393249656eefSMichael Tuexen 			asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3933a7ad6026SMichael Tuexen #ifdef INVARIANTS
3934a7ad6026SMichael Tuexen 		} else {
393549656eefSMichael Tuexen 			panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3936a7ad6026SMichael Tuexen #endif
3937a7ad6026SMichael Tuexen 		}
39380c0982b8SRandall Stewart 		if (chk->data != NULL) {
3939d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
39401edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb,
39411edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3942810ec536SMichael Tuexen 			if (chk->data) {
3943d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3944d00aff5dSRandall Stewart 				chk->data = NULL;
3945d00aff5dSRandall Stewart 			}
3946810ec536SMichael Tuexen 		}
3947689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3948d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3949d00aff5dSRandall Stewart 	}
39504a9ef3f8SMichael Tuexen 	for (i = 0; i < asoc->streamoutcnt; i++) {
39517f34832bSRandall Stewart 		/* For each stream */
39524a9ef3f8SMichael Tuexen 		outs = &asoc->strmout[i];
39537f34832bSRandall Stewart 		/* clean up any sends there */
39544a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(sp, &outs->outqueue, next, nsp) {
39554d58b0c3SMichael Tuexen 			atomic_subtract_int(&asoc->stream_queue_cnt, 1);
3956f8829a4aSRandall Stewart 			TAILQ_REMOVE(&outs->outqueue, sp, next);
3957d9707e43SMichael Tuexen 			stcb->asoc.ss_functions.sctp_ss_remove_from_stream(stcb, asoc, outs, sp, 1);
3958f8829a4aSRandall Stewart 			sctp_free_spbufspace(stcb, asoc, sp);
3959478fbccbSRandall Stewart 			if (sp->data) {
3960f8829a4aSRandall Stewart 				sctp_ulp_notify(SCTP_NOTIFY_SPECIAL_SP_FAIL, stcb,
39611edc9dbaSMichael Tuexen 				    error, (void *)sp, so_locked);
3962f8829a4aSRandall Stewart 				if (sp->data) {
3963f8829a4aSRandall Stewart 					sctp_m_freem(sp->data);
3964f8829a4aSRandall Stewart 					sp->data = NULL;
3965d07b2ac6SMichael Tuexen 					sp->tail_mbuf = NULL;
3966d07b2ac6SMichael Tuexen 					sp->length = 0;
3967f8829a4aSRandall Stewart 				}
3968478fbccbSRandall Stewart 			}
39699eea4a2dSMichael Tuexen 			if (sp->net) {
3970f8829a4aSRandall Stewart 				sctp_free_remote_addr(sp->net);
3971f8829a4aSRandall Stewart 				sp->net = NULL;
39729eea4a2dSMichael Tuexen 			}
3973f8829a4aSRandall Stewart 			/* Free the chunk */
3974689e6a5fSMichael Tuexen 			sctp_free_a_strmoq(stcb, sp, so_locked);
39753c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
3976f8829a4aSRandall Stewart 		}
3977f8829a4aSRandall Stewart 	}
3978f8829a4aSRandall Stewart 
3979ad81507eSRandall Stewart 	if (holds_lock == 0) {
39807f34832bSRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
3981f8829a4aSRandall Stewart 	}
3982ad81507eSRandall Stewart }
3983f8829a4aSRandall Stewart 
3984f8829a4aSRandall Stewart void
3985410a3b1eSMichael Tuexen sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error,
3986a2b42326SMichael Tuexen     struct sctp_abort_chunk *abort, int so_locked
3987ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3988ceaad40aSRandall Stewart     SCTP_UNUSED
3989ceaad40aSRandall Stewart #endif
3990ceaad40aSRandall Stewart )
3991f8829a4aSRandall Stewart {
3992ad81507eSRandall Stewart 	if (stcb == NULL) {
3993ad81507eSRandall Stewart 		return;
3994ad81507eSRandall Stewart 	}
3995c55b70ceSMichael Tuexen 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3996c55b70ceSMichael Tuexen 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
3997c55b70ceSMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_CONNECTED))) {
3998c55b70ceSMichael Tuexen 		stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_WAS_ABORTED;
3999c55b70ceSMichael Tuexen 	}
4000f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
4001f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
4002f8829a4aSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
4003f8829a4aSRandall Stewart 		return;
4004f8829a4aSRandall Stewart 	}
4005f8829a4aSRandall Stewart 	/* Tell them we lost the asoc */
40066982c0faSMichael Tuexen 	sctp_report_all_outbound(stcb, error, 0, so_locked);
4007410a3b1eSMichael Tuexen 	if (from_peer) {
4008410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked);
4009410a3b1eSMichael Tuexen 	} else {
4010410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_LOC_ABORTED, stcb, error, abort, so_locked);
4011410a3b1eSMichael Tuexen 	}
4012f8829a4aSRandall Stewart }
4013f8829a4aSRandall Stewart 
4014f8829a4aSRandall Stewart void
4015f8829a4aSRandall Stewart sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
4016b1754ad1SMichael Tuexen     struct mbuf *m, int iphlen,
4017b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
4018b1754ad1SMichael Tuexen     struct sctphdr *sh, struct mbuf *op_err,
4019457b4b88SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid,
4020c54a18d2SRandall Stewart     uint32_t vrf_id, uint16_t port)
4021f8829a4aSRandall Stewart {
4022f8829a4aSRandall Stewart 	uint32_t vtag;
4023ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4024ceaad40aSRandall Stewart 	struct socket *so;
4025ceaad40aSRandall Stewart #endif
4026ceaad40aSRandall Stewart 
4027f8829a4aSRandall Stewart 	vtag = 0;
4028f8829a4aSRandall Stewart 	if (stcb != NULL) {
4029f8829a4aSRandall Stewart 		vtag = stcb->asoc.peer_vtag;
403017205eccSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
4031f8829a4aSRandall Stewart 	}
4032b1754ad1SMichael Tuexen 	sctp_send_abort(m, iphlen, src, dst, sh, vtag, op_err,
4033d089f9b9SMichael Tuexen 	    mflowtype, mflowid, inp->fibnum,
4034f30ac432SMichael Tuexen 	    vrf_id, port);
4035f8829a4aSRandall Stewart 	if (stcb != NULL) {
4036884d8c53SMichael Tuexen 		/* We have a TCB to abort, send notification too */
4037884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED);
4038839d21d6SMichael Tuexen 		SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED);
4039f8829a4aSRandall Stewart 		/* Ok, now lets free it */
4040ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4041ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
4042ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4043ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4044ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
4045ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4046ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
4047ceaad40aSRandall Stewart #endif
40480271d0cdSMichael Tuexen 		SCTP_STAT_INCR_COUNTER32(sctps_aborted);
4049839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
4050839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
40510271d0cdSMichael Tuexen 			SCTP_STAT_DECR_GAUGE32(sctps_currestab);
40520271d0cdSMichael Tuexen 		}
4053ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
4054ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_4);
4055ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4056ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
4057ceaad40aSRandall Stewart #endif
4058f8829a4aSRandall Stewart 	}
4059f8829a4aSRandall Stewart }
4060f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
4061f1f73e57SRandall Stewart void
4062f1f73e57SRandall Stewart sctp_print_out_track_log(struct sctp_tcb *stcb)
4063f1f73e57SRandall Stewart {
406418e198d3SRandall Stewart #ifdef NOSIY_PRINTS
4065f1f73e57SRandall Stewart 	int i;
4066f1f73e57SRandall Stewart 
4067ad81507eSRandall Stewart 	SCTP_PRINTF("Last ep reason:%x\n", stcb->sctp_ep->last_abort_code);
4068ad81507eSRandall Stewart 	SCTP_PRINTF("IN bound TSN log-aaa\n");
4069f1f73e57SRandall Stewart 	if ((stcb->asoc.tsn_in_at == 0) && (stcb->asoc.tsn_in_wrapped == 0)) {
4070ad81507eSRandall Stewart 		SCTP_PRINTF("None rcvd\n");
4071f1f73e57SRandall Stewart 		goto none_in;
4072f1f73e57SRandall Stewart 	}
4073f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_wrapped) {
4074f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_in_at; i < SCTP_TSN_LOG_SIZE; i++) {
4075ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4076f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4077f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4078f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4079f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4080f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4081f1f73e57SRandall Stewart 		}
4082f1f73e57SRandall Stewart 	}
4083f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_at) {
4084f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_in_at; i++) {
4085ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4086f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4087f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4088f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4089f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4090f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4091f1f73e57SRandall Stewart 		}
4092f1f73e57SRandall Stewart 	}
4093f1f73e57SRandall Stewart none_in:
4094ad81507eSRandall Stewart 	SCTP_PRINTF("OUT bound TSN log-aaa\n");
4095ad81507eSRandall Stewart 	if ((stcb->asoc.tsn_out_at == 0) &&
4096ad81507eSRandall Stewart 	    (stcb->asoc.tsn_out_wrapped == 0)) {
4097ad81507eSRandall Stewart 		SCTP_PRINTF("None sent\n");
4098f1f73e57SRandall Stewart 	}
4099f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_wrapped) {
4100f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_out_at; i < SCTP_TSN_LOG_SIZE; i++) {
4101ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4102f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4103f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4104f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4105f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4106f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4107f1f73e57SRandall Stewart 		}
4108f1f73e57SRandall Stewart 	}
4109f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_at) {
4110f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_out_at; i++) {
4111ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4112f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4113f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4114f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4115f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4116f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4117f1f73e57SRandall Stewart 		}
4118f1f73e57SRandall Stewart 	}
411918e198d3SRandall Stewart #endif
4120f1f73e57SRandall Stewart }
4121f1f73e57SRandall Stewart #endif
4122f1f73e57SRandall Stewart 
4123f8829a4aSRandall Stewart void
4124f8829a4aSRandall Stewart sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
4125a2b42326SMichael Tuexen     struct mbuf *op_err,
4126ceaad40aSRandall Stewart     int so_locked
4127ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4128ceaad40aSRandall Stewart     SCTP_UNUSED
4129ceaad40aSRandall Stewart #endif
4130ceaad40aSRandall Stewart )
4131f8829a4aSRandall Stewart {
4132ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4133ceaad40aSRandall Stewart 	struct socket *so;
4134ceaad40aSRandall Stewart #endif
4135ceaad40aSRandall Stewart 
4136ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4137ceaad40aSRandall Stewart 	so = SCTP_INP_SO(inp);
4138ceaad40aSRandall Stewart #endif
4139f8829a4aSRandall Stewart 	if (stcb == NULL) {
4140f8829a4aSRandall Stewart 		/* Got to have a TCB */
4141f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4142fe1831e0SMichael Tuexen 			if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4143b0552ae2SRandall Stewart 				sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4144b0552ae2SRandall Stewart 				    SCTP_CALLED_DIRECTLY_NOCMPSET);
4145f8829a4aSRandall Stewart 			}
4146f8829a4aSRandall Stewart 		}
4147f8829a4aSRandall Stewart 		return;
414863981c2bSRandall Stewart 	} else {
4149839d21d6SMichael Tuexen 		SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED);
4150f8829a4aSRandall Stewart 	}
4151f8829a4aSRandall Stewart 	/* notify the peer */
4152ceaad40aSRandall Stewart 	sctp_send_abort_tcb(stcb, op_err, so_locked);
4153f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_aborted);
4154839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
4155839d21d6SMichael Tuexen 	    (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
4156f8829a4aSRandall Stewart 		SCTP_STAT_DECR_GAUGE32(sctps_currestab);
4157f8829a4aSRandall Stewart 	}
4158884d8c53SMichael Tuexen 	/* notify the ulp */
4159884d8c53SMichael Tuexen 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
4160884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, so_locked);
4161884d8c53SMichael Tuexen 	}
4162f8829a4aSRandall Stewart 	/* now free the asoc */
4163f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
4164f1f73e57SRandall Stewart 	sctp_print_out_track_log(stcb);
4165f1f73e57SRandall Stewart #endif
4166ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4167ceaad40aSRandall Stewart 	if (!so_locked) {
4168ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4169ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4170ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
4171ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4172ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
4173ceaad40aSRandall Stewart 	}
4174ceaad40aSRandall Stewart #endif
4175ba785902SMichael Tuexen 	(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
4176ba785902SMichael Tuexen 	    SCTP_FROM_SCTPUTIL + SCTP_LOC_5);
4177ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4178ceaad40aSRandall Stewart 	if (!so_locked) {
4179ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
4180ceaad40aSRandall Stewart 	}
4181ceaad40aSRandall Stewart #endif
4182f8829a4aSRandall Stewart }
4183f8829a4aSRandall Stewart 
4184f8829a4aSRandall Stewart void
4185b1754ad1SMichael Tuexen sctp_handle_ootb(struct mbuf *m, int iphlen, int offset,
4186b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
4187b1754ad1SMichael Tuexen     struct sctphdr *sh, struct sctp_inpcb *inp,
4188ff1ffd74SMichael Tuexen     struct mbuf *cause,
4189d089f9b9SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid, uint16_t fibnum,
4190f30ac432SMichael Tuexen     uint32_t vrf_id, uint16_t port)
4191f8829a4aSRandall Stewart {
4192f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch, chunk_buf;
4193f8829a4aSRandall Stewart 	unsigned int chk_length;
4194c58e60beSMichael Tuexen 	int contains_init_chunk;
4195f8829a4aSRandall Stewart 
4196f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_outoftheblue);
4197f8829a4aSRandall Stewart 	/* Generate a TO address for future reference */
4198f8829a4aSRandall Stewart 	if (inp && (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
4199fe1831e0SMichael Tuexen 		if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4200b0552ae2SRandall Stewart 			sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4201b0552ae2SRandall Stewart 			    SCTP_CALLED_DIRECTLY_NOCMPSET);
4202f8829a4aSRandall Stewart 		}
4203f8829a4aSRandall Stewart 	}
4204c58e60beSMichael Tuexen 	contains_init_chunk = 0;
4205f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4206f8829a4aSRandall Stewart 	    sizeof(*ch), (uint8_t *)&chunk_buf);
4207f8829a4aSRandall Stewart 	while (ch != NULL) {
4208f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4209f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4210f8829a4aSRandall Stewart 			/* break to abort land */
4211f8829a4aSRandall Stewart 			break;
4212f8829a4aSRandall Stewart 		}
4213f8829a4aSRandall Stewart 		switch (ch->chunk_type) {
4214c58e60beSMichael Tuexen 		case SCTP_INIT:
4215c58e60beSMichael Tuexen 			contains_init_chunk = 1;
4216c58e60beSMichael Tuexen 			break;
4217f8829a4aSRandall Stewart 		case SCTP_PACKET_DROPPED:
4218f8829a4aSRandall Stewart 			/* we don't respond to pkt-dropped */
4219f8829a4aSRandall Stewart 			return;
4220f8829a4aSRandall Stewart 		case SCTP_ABORT_ASSOCIATION:
4221f8829a4aSRandall Stewart 			/* we don't respond with an ABORT to an ABORT */
4222f8829a4aSRandall Stewart 			return;
4223f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_COMPLETE:
4224f8829a4aSRandall Stewart 			/*
4225f8829a4aSRandall Stewart 			 * we ignore it since we are not waiting for it and
4226f8829a4aSRandall Stewart 			 * peer is gone
4227f8829a4aSRandall Stewart 			 */
4228f8829a4aSRandall Stewart 			return;
4229f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_ACK:
4230b1754ad1SMichael Tuexen 			sctp_send_shutdown_complete2(src, dst, sh,
4231d089f9b9SMichael Tuexen 			    mflowtype, mflowid, fibnum,
4232f30ac432SMichael Tuexen 			    vrf_id, port);
4233f8829a4aSRandall Stewart 			return;
4234f8829a4aSRandall Stewart 		default:
4235f8829a4aSRandall Stewart 			break;
4236f8829a4aSRandall Stewart 		}
4237f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4238f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4239f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4240f8829a4aSRandall Stewart 	}
4241c58e60beSMichael Tuexen 	if ((SCTP_BASE_SYSCTL(sctp_blackhole) == 0) ||
4242c58e60beSMichael Tuexen 	    ((SCTP_BASE_SYSCTL(sctp_blackhole) == 1) &&
4243c58e60beSMichael Tuexen 	    (contains_init_chunk == 0))) {
4244ff1ffd74SMichael Tuexen 		sctp_send_abort(m, iphlen, src, dst, sh, 0, cause,
4245d089f9b9SMichael Tuexen 		    mflowtype, mflowid, fibnum,
4246f30ac432SMichael Tuexen 		    vrf_id, port);
4247f8829a4aSRandall Stewart 	}
4248c58e60beSMichael Tuexen }
4249f8829a4aSRandall Stewart 
4250f8829a4aSRandall Stewart /*
4251f8829a4aSRandall Stewart  * check the inbound datagram to make sure there is not an abort inside it,
4252f8829a4aSRandall Stewart  * if there is return 1, else return 0.
4253f8829a4aSRandall Stewart  */
4254f8829a4aSRandall Stewart int
4255f8829a4aSRandall Stewart sctp_is_there_an_abort_here(struct mbuf *m, int iphlen, uint32_t *vtagfill)
4256f8829a4aSRandall Stewart {
4257f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch;
4258f8829a4aSRandall Stewart 	struct sctp_init_chunk *init_chk, chunk_buf;
4259f8829a4aSRandall Stewart 	int offset;
4260f8829a4aSRandall Stewart 	unsigned int chk_length;
4261f8829a4aSRandall Stewart 
4262f8829a4aSRandall Stewart 	offset = iphlen + sizeof(struct sctphdr);
4263f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset, sizeof(*ch),
4264f8829a4aSRandall Stewart 	    (uint8_t *)&chunk_buf);
4265f8829a4aSRandall Stewart 	while (ch != NULL) {
4266f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4267f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4268f8829a4aSRandall Stewart 			/* packet is probably corrupt */
4269f8829a4aSRandall Stewart 			break;
4270f8829a4aSRandall Stewart 		}
4271f8829a4aSRandall Stewart 		/* we seem to be ok, is it an abort? */
4272f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_ABORT_ASSOCIATION) {
4273f8829a4aSRandall Stewart 			/* yep, tell them */
4274f8829a4aSRandall Stewart 			return (1);
4275f8829a4aSRandall Stewart 		}
4276f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_INITIATION) {
4277f8829a4aSRandall Stewart 			/* need to update the Vtag */
4278f8829a4aSRandall Stewart 			init_chk = (struct sctp_init_chunk *)sctp_m_getptr(m,
4279f8829a4aSRandall Stewart 			    offset, sizeof(*init_chk), (uint8_t *)&chunk_buf);
4280f8829a4aSRandall Stewart 			if (init_chk != NULL) {
4281f8829a4aSRandall Stewart 				*vtagfill = ntohl(init_chk->init.initiate_tag);
4282f8829a4aSRandall Stewart 			}
4283f8829a4aSRandall Stewart 		}
4284f8829a4aSRandall Stewart 		/* Nope, move to the next chunk */
4285f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4286f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4287f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4288f8829a4aSRandall Stewart 	}
4289f8829a4aSRandall Stewart 	return (0);
4290f8829a4aSRandall Stewart }
4291f8829a4aSRandall Stewart 
4292f8829a4aSRandall Stewart /*
4293f8829a4aSRandall Stewart  * currently (2/02), ifa_addr embeds scope_id's and don't have sin6_scope_id
4294f8829a4aSRandall Stewart  * set (i.e. it's 0) so, create this function to compare link local scopes
4295f8829a4aSRandall Stewart  */
42965e2c2d87SRandall Stewart #ifdef INET6
4297f8829a4aSRandall Stewart uint32_t
4298b0471b4bSMichael Tuexen sctp_is_same_scope(struct sockaddr_in6 *addr1, struct sockaddr_in6 *addr2)
4299b0471b4bSMichael Tuexen {
4300f8829a4aSRandall Stewart 	struct sockaddr_in6 a, b;
4301f8829a4aSRandall Stewart 
4302f8829a4aSRandall Stewart 	/* save copies */
4303f8829a4aSRandall Stewart 	a = *addr1;
4304f8829a4aSRandall Stewart 	b = *addr2;
4305f8829a4aSRandall Stewart 
4306f8829a4aSRandall Stewart 	if (a.sin6_scope_id == 0)
4307f8829a4aSRandall Stewart 		if (sa6_recoverscope(&a)) {
4308f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4309f8829a4aSRandall Stewart 			return (0);
4310f8829a4aSRandall Stewart 		}
4311f8829a4aSRandall Stewart 	if (b.sin6_scope_id == 0)
4312f8829a4aSRandall Stewart 		if (sa6_recoverscope(&b)) {
4313f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4314f8829a4aSRandall Stewart 			return (0);
4315f8829a4aSRandall Stewart 		}
4316f8829a4aSRandall Stewart 	if (a.sin6_scope_id != b.sin6_scope_id)
4317f8829a4aSRandall Stewart 		return (0);
4318f8829a4aSRandall Stewart 
4319f8829a4aSRandall Stewart 	return (1);
4320f8829a4aSRandall Stewart }
4321f8829a4aSRandall Stewart 
4322f8829a4aSRandall Stewart /*
4323f8829a4aSRandall Stewart  * returns a sockaddr_in6 with embedded scope recovered and removed
4324f8829a4aSRandall Stewart  */
4325f8829a4aSRandall Stewart struct sockaddr_in6 *
4326f8829a4aSRandall Stewart sctp_recover_scope(struct sockaddr_in6 *addr, struct sockaddr_in6 *store)
4327f8829a4aSRandall Stewart {
4328f8829a4aSRandall Stewart 	/* check and strip embedded scope junk */
4329f8829a4aSRandall Stewart 	if (addr->sin6_family == AF_INET6) {
4330f8829a4aSRandall Stewart 		if (IN6_IS_SCOPE_LINKLOCAL(&addr->sin6_addr)) {
4331f8829a4aSRandall Stewart 			if (addr->sin6_scope_id == 0) {
4332f8829a4aSRandall Stewart 				*store = *addr;
4333f8829a4aSRandall Stewart 				if (!sa6_recoverscope(store)) {
4334f8829a4aSRandall Stewart 					/* use the recovered scope */
4335f8829a4aSRandall Stewart 					addr = store;
4336f8829a4aSRandall Stewart 				}
4337f42a358aSRandall Stewart 			} else {
4338f8829a4aSRandall Stewart 				/* else, return the original "to" addr */
4339f42a358aSRandall Stewart 				in6_clearscope(&addr->sin6_addr);
4340f8829a4aSRandall Stewart 			}
4341f8829a4aSRandall Stewart 		}
4342f8829a4aSRandall Stewart 	}
4343f8829a4aSRandall Stewart 	return (addr);
4344f8829a4aSRandall Stewart }
43455e2c2d87SRandall Stewart #endif
43465e2c2d87SRandall Stewart 
4347f8829a4aSRandall Stewart /*
4348f8829a4aSRandall Stewart  * are the two addresses the same?  currently a "scopeless" check returns: 1
4349f8829a4aSRandall Stewart  * if same, 0 if not
4350f8829a4aSRandall Stewart  */
435172fb6fdbSRandall Stewart int
4352f8829a4aSRandall Stewart sctp_cmpaddr(struct sockaddr *sa1, struct sockaddr *sa2)
4353f8829a4aSRandall Stewart {
4354f8829a4aSRandall Stewart 
4355f8829a4aSRandall Stewart 	/* must be valid */
4356f8829a4aSRandall Stewart 	if (sa1 == NULL || sa2 == NULL)
4357f8829a4aSRandall Stewart 		return (0);
4358f8829a4aSRandall Stewart 
4359f8829a4aSRandall Stewart 	/* must be the same family */
4360f8829a4aSRandall Stewart 	if (sa1->sa_family != sa2->sa_family)
4361f8829a4aSRandall Stewart 		return (0);
4362f8829a4aSRandall Stewart 
43635e2c2d87SRandall Stewart 	switch (sa1->sa_family) {
43645e2c2d87SRandall Stewart #ifdef INET6
43655e2c2d87SRandall Stewart 	case AF_INET6:
43665e2c2d87SRandall Stewart 		{
4367f8829a4aSRandall Stewart 			/* IPv6 addresses */
4368f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6_1, *sin6_2;
4369f8829a4aSRandall Stewart 
4370f8829a4aSRandall Stewart 			sin6_1 = (struct sockaddr_in6 *)sa1;
4371f8829a4aSRandall Stewart 			sin6_2 = (struct sockaddr_in6 *)sa2;
4372c54a18d2SRandall Stewart 			return (SCTP6_ARE_ADDR_EQUAL(sin6_1,
4373c54a18d2SRandall Stewart 			    sin6_2));
43745e2c2d87SRandall Stewart 		}
43755e2c2d87SRandall Stewart #endif
4376ea5eba11SMichael Tuexen #ifdef INET
43775e2c2d87SRandall Stewart 	case AF_INET:
43785e2c2d87SRandall Stewart 		{
4379f8829a4aSRandall Stewart 			/* IPv4 addresses */
4380f8829a4aSRandall Stewart 			struct sockaddr_in *sin_1, *sin_2;
4381f8829a4aSRandall Stewart 
4382f8829a4aSRandall Stewart 			sin_1 = (struct sockaddr_in *)sa1;
4383f8829a4aSRandall Stewart 			sin_2 = (struct sockaddr_in *)sa2;
4384f8829a4aSRandall Stewart 			return (sin_1->sin_addr.s_addr == sin_2->sin_addr.s_addr);
43855e2c2d87SRandall Stewart 		}
4386ea5eba11SMichael Tuexen #endif
43875e2c2d87SRandall Stewart 	default:
4388f8829a4aSRandall Stewart 		/* we don't do these... */
4389f8829a4aSRandall Stewart 		return (0);
4390f8829a4aSRandall Stewart 	}
4391f8829a4aSRandall Stewart }
4392f8829a4aSRandall Stewart 
4393f8829a4aSRandall Stewart void
4394f8829a4aSRandall Stewart sctp_print_address(struct sockaddr *sa)
4395f8829a4aSRandall Stewart {
43965e2c2d87SRandall Stewart #ifdef INET6
43977d32aa0cSBjoern A. Zeeb 	char ip6buf[INET6_ADDRSTRLEN];
43985e2c2d87SRandall Stewart #endif
43995e2c2d87SRandall Stewart 
44005e2c2d87SRandall Stewart 	switch (sa->sa_family) {
44015e2c2d87SRandall Stewart #ifdef INET6
44025e2c2d87SRandall Stewart 	case AF_INET6:
44035e2c2d87SRandall Stewart 		{
4404ad81507eSRandall Stewart 			struct sockaddr_in6 *sin6;
4405ad81507eSRandall Stewart 
4406f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
4407ad81507eSRandall Stewart 			SCTP_PRINTF("IPv6 address: %s:port:%d scope:%u\n",
44087d32aa0cSBjoern A. Zeeb 			    ip6_sprintf(ip6buf, &sin6->sin6_addr),
44097d32aa0cSBjoern A. Zeeb 			    ntohs(sin6->sin6_port),
4410f8829a4aSRandall Stewart 			    sin6->sin6_scope_id);
44115e2c2d87SRandall Stewart 			break;
44125e2c2d87SRandall Stewart 		}
44135e2c2d87SRandall Stewart #endif
4414ea5eba11SMichael Tuexen #ifdef INET
44155e2c2d87SRandall Stewart 	case AF_INET:
44165e2c2d87SRandall Stewart 		{
4417f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
4418f8829a4aSRandall Stewart 			unsigned char *p;
4419f8829a4aSRandall Stewart 
4420f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
4421f8829a4aSRandall Stewart 			p = (unsigned char *)&sin->sin_addr;
4422ad81507eSRandall Stewart 			SCTP_PRINTF("IPv4 address: %u.%u.%u.%u:%d\n",
4423f8829a4aSRandall Stewart 			    p[0], p[1], p[2], p[3], ntohs(sin->sin_port));
44245e2c2d87SRandall Stewart 			break;
44255e2c2d87SRandall Stewart 		}
4426ea5eba11SMichael Tuexen #endif
44275e2c2d87SRandall Stewart 	default:
4428ad81507eSRandall Stewart 		SCTP_PRINTF("?\n");
44295e2c2d87SRandall Stewart 		break;
4430f8829a4aSRandall Stewart 	}
4431f8829a4aSRandall Stewart }
4432f8829a4aSRandall Stewart 
4433f8829a4aSRandall Stewart void
4434f8829a4aSRandall Stewart sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp,
4435f8829a4aSRandall Stewart     struct sctp_inpcb *new_inp,
4436d06c82f1SRandall Stewart     struct sctp_tcb *stcb,
4437d06c82f1SRandall Stewart     int waitflags)
4438f8829a4aSRandall Stewart {
4439f8829a4aSRandall Stewart 	/*
4440f8829a4aSRandall Stewart 	 * go through our old INP and pull off any control structures that
4441f8829a4aSRandall Stewart 	 * belong to stcb and move then to the new inp.
4442f8829a4aSRandall Stewart 	 */
4443f8829a4aSRandall Stewart 	struct socket *old_so, *new_so;
4444f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control, *nctl;
4445f8829a4aSRandall Stewart 	struct sctp_readhead tmp_queue;
4446f8829a4aSRandall Stewart 	struct mbuf *m;
4447bff64a4dSRandall Stewart 	int error = 0;
4448f8829a4aSRandall Stewart 
4449f8829a4aSRandall Stewart 	old_so = old_inp->sctp_socket;
4450f8829a4aSRandall Stewart 	new_so = new_inp->sctp_socket;
4451f8829a4aSRandall Stewart 	TAILQ_INIT(&tmp_queue);
4452d06c82f1SRandall Stewart 	error = sblock(&old_so->so_rcv, waitflags);
4453f8829a4aSRandall Stewart 	if (error) {
4454f8829a4aSRandall Stewart 		/*
4455f8829a4aSRandall Stewart 		 * Gak, can't get sblock, we have a problem. data will be
4456f8829a4aSRandall Stewart 		 * left stranded.. and we don't dare look at it since the
4457f8829a4aSRandall Stewart 		 * other thread may be reading something. Oh well, its a
4458f8829a4aSRandall Stewart 		 * screwed up app that does a peeloff OR a accept while
4459f8829a4aSRandall Stewart 		 * reading from the main socket... actually its only the
4460f8829a4aSRandall Stewart 		 * peeloff() case, since I think read will fail on a
4461f8829a4aSRandall Stewart 		 * listening socket..
4462f8829a4aSRandall Stewart 		 */
4463f8829a4aSRandall Stewart 		return;
4464f8829a4aSRandall Stewart 	}
4465f8829a4aSRandall Stewart 	/* lock the socket buffers */
4466f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(old_inp);
44674a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &old_inp->read_queue, next, nctl) {
4468f8829a4aSRandall Stewart 		/* Pull off all for out target stcb */
4469f8829a4aSRandall Stewart 		if (control->stcb == stcb) {
4470f8829a4aSRandall Stewart 			/* remove it we want it */
4471f8829a4aSRandall Stewart 			TAILQ_REMOVE(&old_inp->read_queue, control, next);
4472f8829a4aSRandall Stewart 			TAILQ_INSERT_TAIL(&tmp_queue, control, next);
4473f8829a4aSRandall Stewart 			m = control->data;
4474f8829a4aSRandall Stewart 			while (m) {
4475b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4476139bc87fSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
447780fefe0aSRandall Stewart 				}
4478f8829a4aSRandall Stewart 				sctp_sbfree(control, stcb, &old_so->so_rcv, m);
4479b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4480f8829a4aSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
448180fefe0aSRandall Stewart 				}
4482139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(m);
4483f8829a4aSRandall Stewart 			}
4484f8829a4aSRandall Stewart 		}
4485f8829a4aSRandall Stewart 	}
4486f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(old_inp);
4487f8829a4aSRandall Stewart 	/* Remove the sb-lock on the old socket */
4488f8829a4aSRandall Stewart 
4489f8829a4aSRandall Stewart 	sbunlock(&old_so->so_rcv);
4490f8829a4aSRandall Stewart 	/* Now we move them over to the new socket buffer */
4491f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(new_inp);
44924a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &tmp_queue, next, nctl) {
4493f8829a4aSRandall Stewart 		TAILQ_INSERT_TAIL(&new_inp->read_queue, control, next);
4494f8829a4aSRandall Stewart 		m = control->data;
4495f8829a4aSRandall Stewart 		while (m) {
4496b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4497139bc87fSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
449880fefe0aSRandall Stewart 			}
4499f8829a4aSRandall Stewart 			sctp_sballoc(stcb, &new_so->so_rcv, m);
4500b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4501f8829a4aSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
450280fefe0aSRandall Stewart 			}
4503139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
4504f8829a4aSRandall Stewart 		}
4505f8829a4aSRandall Stewart 	}
4506f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(new_inp);
4507f8829a4aSRandall Stewart }
4508f8829a4aSRandall Stewart 
4509f8829a4aSRandall Stewart void
4510b1deed45SMichael Tuexen sctp_wakeup_the_read_socket(struct sctp_inpcb *inp,
4511b1deed45SMichael Tuexen     struct sctp_tcb *stcb,
4512b1deed45SMichael Tuexen     int so_locked
4513b1deed45SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4514b1deed45SMichael Tuexen     SCTP_UNUSED
4515b1deed45SMichael Tuexen #endif
4516b1deed45SMichael Tuexen )
451744249214SRandall Stewart {
4518b1deed45SMichael Tuexen 	if ((inp != NULL) && (inp->sctp_socket != NULL)) {
451944249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
452044249214SRandall Stewart 		struct socket *so;
452144249214SRandall Stewart 
452244249214SRandall Stewart 		so = SCTP_INP_SO(inp);
452344249214SRandall Stewart 		if (!so_locked) {
452444249214SRandall Stewart 			if (stcb) {
452544249214SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
452644249214SRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
452744249214SRandall Stewart 			}
452844249214SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
452944249214SRandall Stewart 			if (stcb) {
453044249214SRandall Stewart 				SCTP_TCB_LOCK(stcb);
453144249214SRandall Stewart 				atomic_subtract_int(&stcb->asoc.refcnt, 1);
453244249214SRandall Stewart 			}
453344249214SRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
453444249214SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
453544249214SRandall Stewart 				return;
453644249214SRandall Stewart 			}
453744249214SRandall Stewart 		}
453844249214SRandall Stewart #endif
453944249214SRandall Stewart 		sctp_sorwakeup(inp, inp->sctp_socket);
454044249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
454144249214SRandall Stewart 		if (!so_locked) {
454244249214SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
454344249214SRandall Stewart 		}
454444249214SRandall Stewart #endif
454544249214SRandall Stewart 	}
454644249214SRandall Stewart }
454744249214SRandall Stewart 
454844249214SRandall Stewart void
4549f8829a4aSRandall Stewart sctp_add_to_readq(struct sctp_inpcb *inp,
4550f8829a4aSRandall Stewart     struct sctp_tcb *stcb,
4551f8829a4aSRandall Stewart     struct sctp_queued_to_read *control,
4552f8829a4aSRandall Stewart     struct sockbuf *sb,
4553ceaad40aSRandall Stewart     int end,
4554cfde3ff7SRandall Stewart     int inp_read_lock_held,
4555ceaad40aSRandall Stewart     int so_locked
4556ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4557ceaad40aSRandall Stewart     SCTP_UNUSED
4558ceaad40aSRandall Stewart #endif
4559ceaad40aSRandall Stewart )
4560f8829a4aSRandall Stewart {
4561f8829a4aSRandall Stewart 	/*
4562f8829a4aSRandall Stewart 	 * Here we must place the control on the end of the socket read
45634e88d37aSMichael Tuexen 	 * queue AND increment sb_cc so that select will work properly on
4564f8829a4aSRandall Stewart 	 * read.
4565f8829a4aSRandall Stewart 	 */
4566f8829a4aSRandall Stewart 	struct mbuf *m, *prev = NULL;
4567f8829a4aSRandall Stewart 
456803b0b021SRandall Stewart 	if (inp == NULL) {
456903b0b021SRandall Stewart 		/* Gak, TSNH!! */
4570a5d547adSRandall Stewart #ifdef INVARIANTS
457103b0b021SRandall Stewart 		panic("Gak, inp NULL on add_to_readq");
457203b0b021SRandall Stewart #endif
457303b0b021SRandall Stewart 		return;
457403b0b021SRandall Stewart 	}
4575cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4576f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4577cd1386abSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
45788a3cfbffSMichael Tuexen 		if (!control->on_strm_q) {
4579cd1386abSMichael Tuexen 			sctp_free_remote_addr(control->whoFrom);
4580cd1386abSMichael Tuexen 			if (control->data) {
4581cd1386abSMichael Tuexen 				sctp_m_freem(control->data);
4582cd1386abSMichael Tuexen 				control->data = NULL;
4583cd1386abSMichael Tuexen 			}
458444249214SRandall Stewart 			sctp_free_a_readq(stcb, control);
45858a3cfbffSMichael Tuexen 		}
4586cd1386abSMichael Tuexen 		if (inp_read_lock_held == 0)
4587cd1386abSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4588cd1386abSMichael Tuexen 		return;
4589cd1386abSMichael Tuexen 	}
459042551e99SRandall Stewart 	if (!(control->spec_flags & M_NOTIFICATION)) {
4591a5d547adSRandall Stewart 		atomic_add_int(&inp->total_recvs, 1);
459242551e99SRandall Stewart 		if (!control->do_not_ref_stcb) {
4593a5d547adSRandall Stewart 			atomic_add_int(&stcb->total_recvs, 1);
459442551e99SRandall Stewart 		}
459542551e99SRandall Stewart 	}
4596f8829a4aSRandall Stewart 	m = control->data;
4597f8829a4aSRandall Stewart 	control->held_length = 0;
4598f8829a4aSRandall Stewart 	control->length = 0;
4599f8829a4aSRandall Stewart 	while (m) {
4600139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m) == 0) {
4601f8829a4aSRandall Stewart 			/* Skip mbufs with NO length */
4602f8829a4aSRandall Stewart 			if (prev == NULL) {
4603f8829a4aSRandall Stewart 				/* First one */
4604f8829a4aSRandall Stewart 				control->data = sctp_m_free(m);
4605f8829a4aSRandall Stewart 				m = control->data;
4606f8829a4aSRandall Stewart 			} else {
4607139bc87fSRandall Stewart 				SCTP_BUF_NEXT(prev) = sctp_m_free(m);
4608139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(prev);
4609f8829a4aSRandall Stewart 			}
4610f8829a4aSRandall Stewart 			if (m == NULL) {
4611c2ede4b3SMartin Blapp 				control->tail_mbuf = prev;
4612f8829a4aSRandall Stewart 			}
4613f8829a4aSRandall Stewart 			continue;
4614f8829a4aSRandall Stewart 		}
4615f8829a4aSRandall Stewart 		prev = m;
4616b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4617139bc87fSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
461880fefe0aSRandall Stewart 		}
4619f8829a4aSRandall Stewart 		sctp_sballoc(stcb, sb, m);
4620b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4621f8829a4aSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
462280fefe0aSRandall Stewart 		}
4623139bc87fSRandall Stewart 		atomic_add_int(&control->length, SCTP_BUF_LEN(m));
4624139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
4625f8829a4aSRandall Stewart 	}
4626f8829a4aSRandall Stewart 	if (prev != NULL) {
4627f8829a4aSRandall Stewart 		control->tail_mbuf = prev;
4628f8829a4aSRandall Stewart 	} else {
4629139bc87fSRandall Stewart 		/* Everything got collapsed out?? */
46308a3cfbffSMichael Tuexen 		if (!control->on_strm_q) {
4631cd1386abSMichael Tuexen 			sctp_free_remote_addr(control->whoFrom);
463244249214SRandall Stewart 			sctp_free_a_readq(stcb, control);
46338a3cfbffSMichael Tuexen 		}
4634cfde3ff7SRandall Stewart 		if (inp_read_lock_held == 0)
463547a490cbSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4636f8829a4aSRandall Stewart 		return;
4637f8829a4aSRandall Stewart 	}
4638f8829a4aSRandall Stewart 	if (end) {
4639f8829a4aSRandall Stewart 		control->end_added = 1;
4640f8829a4aSRandall Stewart 	}
4641f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&inp->read_queue, control, next);
464244249214SRandall Stewart 	control->on_read_q = 1;
4643cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4644f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4645f8829a4aSRandall Stewart 	if (inp && inp->sctp_socket) {
4646b1deed45SMichael Tuexen 		sctp_wakeup_the_read_socket(inp, stcb, so_locked);
4647f8829a4aSRandall Stewart 	}
4648f8829a4aSRandall Stewart }
4649f8829a4aSRandall Stewart 
4650f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR PATCH FILE OF
4651f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4652f8829a4aSRandall Stewart  */
4653f8829a4aSRandall Stewart 
4654f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR END OF PATCH FILE OF
4655f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4656f8829a4aSRandall Stewart  */
4657f8829a4aSRandall Stewart 
4658f8829a4aSRandall Stewart struct mbuf *
4659ff1ffd74SMichael Tuexen sctp_generate_cause(uint16_t code, char *info)
4660f8829a4aSRandall Stewart {
4661f8829a4aSRandall Stewart 	struct mbuf *m;
4662ff1ffd74SMichael Tuexen 	struct sctp_gen_error_cause *cause;
46639a8e3088SMichael Tuexen 	size_t info_len;
46649a8e3088SMichael Tuexen 	uint16_t len;
4665f8829a4aSRandall Stewart 
4666ff1ffd74SMichael Tuexen 	if ((code == 0) || (info == NULL)) {
4667ff1ffd74SMichael Tuexen 		return (NULL);
4668ff1ffd74SMichael Tuexen 	}
4669ff1ffd74SMichael Tuexen 	info_len = strlen(info);
46709a8e3088SMichael Tuexen 	if (info_len > (SCTP_MAX_CAUSE_LENGTH - sizeof(struct sctp_paramhdr))) {
46719a8e3088SMichael Tuexen 		return (NULL);
46729a8e3088SMichael Tuexen 	}
46739a8e3088SMichael Tuexen 	len = (uint16_t)(sizeof(struct sctp_paramhdr) + info_len);
4674ff1ffd74SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
4675ff1ffd74SMichael Tuexen 	if (m != NULL) {
4676ff1ffd74SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
4677ff1ffd74SMichael Tuexen 		cause = mtod(m, struct sctp_gen_error_cause *);
4678ff1ffd74SMichael Tuexen 		cause->code = htons(code);
46799a8e3088SMichael Tuexen 		cause->length = htons(len);
4680ff1ffd74SMichael Tuexen 		memcpy(cause->info, info, info_len);
4681f8829a4aSRandall Stewart 	}
4682f8829a4aSRandall Stewart 	return (m);
4683f8829a4aSRandall Stewart }
4684f8829a4aSRandall Stewart 
468532451da4SMichael Tuexen struct mbuf *
468632451da4SMichael Tuexen sctp_generate_no_user_data_cause(uint32_t tsn)
468732451da4SMichael Tuexen {
468832451da4SMichael Tuexen 	struct mbuf *m;
468932451da4SMichael Tuexen 	struct sctp_error_no_user_data *no_user_data_cause;
46909a8e3088SMichael Tuexen 	uint16_t len;
469132451da4SMichael Tuexen 
46929a8e3088SMichael Tuexen 	len = (uint16_t)sizeof(struct sctp_error_no_user_data);
469332451da4SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
469432451da4SMichael Tuexen 	if (m != NULL) {
469532451da4SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
469632451da4SMichael Tuexen 		no_user_data_cause = mtod(m, struct sctp_error_no_user_data *);
469732451da4SMichael Tuexen 		no_user_data_cause->cause.code = htons(SCTP_CAUSE_NO_USER_DATA);
46989a8e3088SMichael Tuexen 		no_user_data_cause->cause.length = htons(len);
46998b9c95f4SMichael Tuexen 		no_user_data_cause->tsn = htonl(tsn);
470032451da4SMichael Tuexen 	}
470132451da4SMichael Tuexen 	return (m);
470232451da4SMichael Tuexen }
470332451da4SMichael Tuexen 
4704f8829a4aSRandall Stewart #ifdef SCTP_MBCNT_LOGGING
4705f8829a4aSRandall Stewart void
4706f8829a4aSRandall Stewart sctp_free_bufspace(struct sctp_tcb *stcb, struct sctp_association *asoc,
4707f8829a4aSRandall Stewart     struct sctp_tmit_chunk *tp1, int chk_cnt)
4708f8829a4aSRandall Stewart {
4709f8829a4aSRandall Stewart 	if (tp1->data == NULL) {
4710f8829a4aSRandall Stewart 		return;
4711f8829a4aSRandall Stewart 	}
4712f8829a4aSRandall Stewart 	asoc->chunks_on_out_queue -= chk_cnt;
4713b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBCNT_LOGGING_ENABLE) {
4714f8829a4aSRandall Stewart 		sctp_log_mbcnt(SCTP_LOG_MBCNT_DECREASE,
4715f8829a4aSRandall Stewart 		    asoc->total_output_queue_size,
4716f8829a4aSRandall Stewart 		    tp1->book_size,
4717f8829a4aSRandall Stewart 		    0,
4718f8829a4aSRandall Stewart 		    tp1->mbcnt);
471980fefe0aSRandall Stewart 	}
4720f8829a4aSRandall Stewart 	if (asoc->total_output_queue_size >= tp1->book_size) {
472144b7479bSRandall Stewart 		atomic_add_int(&asoc->total_output_queue_size, -tp1->book_size);
4722f8829a4aSRandall Stewart 	} else {
4723f8829a4aSRandall Stewart 		asoc->total_output_queue_size = 0;
4724f8829a4aSRandall Stewart 	}
4725f8829a4aSRandall Stewart 
4726f8829a4aSRandall Stewart 	if (stcb->sctp_socket && (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) ||
4727f8829a4aSRandall Stewart 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE)))) {
47284e88d37aSMichael Tuexen 		if (stcb->sctp_socket->so_snd.sb_cc >= tp1->book_size) {
47294e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc -= tp1->book_size;
4730f8829a4aSRandall Stewart 		} else {
47314e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc = 0;
4732f8829a4aSRandall Stewart 
4733f8829a4aSRandall Stewart 		}
4734f8829a4aSRandall Stewart 	}
4735f8829a4aSRandall Stewart }
4736f8829a4aSRandall Stewart 
4737f8829a4aSRandall Stewart #endif
4738f8829a4aSRandall Stewart 
4739f8829a4aSRandall Stewart int
4740f8829a4aSRandall Stewart sctp_release_pr_sctp_chunk(struct sctp_tcb *stcb, struct sctp_tmit_chunk *tp1,
47411edc9dbaSMichael Tuexen     uint8_t sent, int so_locked
4742ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4743ceaad40aSRandall Stewart     SCTP_UNUSED
4744ceaad40aSRandall Stewart #endif
4745ceaad40aSRandall Stewart )
4746f8829a4aSRandall Stewart {
47470c0982b8SRandall Stewart 	struct sctp_stream_out *strq;
47484a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk = NULL, *tp2;
47490c0982b8SRandall Stewart 	struct sctp_stream_queue_pending *sp;
475049656eefSMichael Tuexen 	uint32_t mid;
475149656eefSMichael Tuexen 	uint16_t sid;
47520c0982b8SRandall Stewart 	uint8_t foundeom = 0;
4753f8829a4aSRandall Stewart 	int ret_sz = 0;
4754f8829a4aSRandall Stewart 	int notdone;
47550c0982b8SRandall Stewart 	int do_wakeup_routine = 0;
4756f8829a4aSRandall Stewart 
475749656eefSMichael Tuexen 	sid = tp1->rec.data.sid;
475849656eefSMichael Tuexen 	mid = tp1->rec.data.mid;
4759f0396ad1SMichael Tuexen 	if (sent || !(tp1->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG)) {
4760f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[0]++;
4761f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
476249656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_sent[0]++;
4763f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4764ad15e154SMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
4765f0396ad1SMichael Tuexen #endif
4766f0396ad1SMichael Tuexen 	} else {
4767f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[0]++;
4768f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
476949656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_unsent[0]++;
4770f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4771ad15e154SMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
4772f0396ad1SMichael Tuexen #endif
4773f0396ad1SMichael Tuexen 	}
4774f8829a4aSRandall Stewart 	do {
4775f8829a4aSRandall Stewart 		ret_sz += tp1->book_size;
47760c0982b8SRandall Stewart 		if (tp1->data != NULL) {
47778933fa13SRandall Stewart 			if (tp1->sent < SCTP_DATAGRAM_RESEND) {
4778830d754dSRandall Stewart 				sctp_flight_size_decrease(tp1);
4779830d754dSRandall Stewart 				sctp_total_flight_decrease(stcb, tp1);
47808933fa13SRandall Stewart 			}
47818933fa13SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
47820c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += tp1->send_size;
47830c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
47841edc9dbaSMichael Tuexen 			if (sent) {
47851edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
47861edc9dbaSMichael Tuexen 			} else {
47871edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
47881edc9dbaSMichael Tuexen 			}
47892f99457bSMichael Tuexen 			if (tp1->data) {
4790f8829a4aSRandall Stewart 				sctp_m_freem(tp1->data);
4791f8829a4aSRandall Stewart 				tp1->data = NULL;
47922f99457bSMichael Tuexen 			}
47930c0982b8SRandall Stewart 			do_wakeup_routine = 1;
4794f8829a4aSRandall Stewart 			if (PR_SCTP_BUF_ENABLED(tp1->flags)) {
4795f8829a4aSRandall Stewart 				stcb->asoc.sent_queue_cnt_removeable--;
4796f8829a4aSRandall Stewart 			}
4797f8829a4aSRandall Stewart 		}
47988933fa13SRandall Stewart 		tp1->sent = SCTP_FORWARD_TSN_SKIP;
4799f8829a4aSRandall Stewart 		if ((tp1->rec.data.rcv_flags & SCTP_DATA_NOT_FRAG) ==
4800f8829a4aSRandall Stewart 		    SCTP_DATA_NOT_FRAG) {
4801f8829a4aSRandall Stewart 			/* not frag'ed we ae done   */
4802f8829a4aSRandall Stewart 			notdone = 0;
4803f8829a4aSRandall Stewart 			foundeom = 1;
4804f8829a4aSRandall Stewart 		} else if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
4805f8829a4aSRandall Stewart 			/* end of frag, we are done */
4806f8829a4aSRandall Stewart 			notdone = 0;
4807f8829a4aSRandall Stewart 			foundeom = 1;
4808f8829a4aSRandall Stewart 		} else {
4809f8829a4aSRandall Stewart 			/*
4810f8829a4aSRandall Stewart 			 * Its a begin or middle piece, we must mark all of
4811f8829a4aSRandall Stewart 			 * it
4812f8829a4aSRandall Stewart 			 */
4813f8829a4aSRandall Stewart 			notdone = 1;
4814f8829a4aSRandall Stewart 			tp1 = TAILQ_NEXT(tp1, sctp_next);
4815f8829a4aSRandall Stewart 		}
4816f8829a4aSRandall Stewart 	} while (tp1 && notdone);
48170c0982b8SRandall Stewart 	if (foundeom == 0) {
4818f8829a4aSRandall Stewart 		/*
4819f8829a4aSRandall Stewart 		 * The multi-part message was scattered across the send and
4820f8829a4aSRandall Stewart 		 * sent queue.
4821f8829a4aSRandall Stewart 		 */
48224a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(tp1, &stcb->asoc.send_queue, sctp_next, tp2) {
482349656eefSMichael Tuexen 			if ((tp1->rec.data.sid != sid) ||
482449656eefSMichael Tuexen 			    (!SCTP_MID_EQ(stcb->asoc.idata_supported, tp1->rec.data.mid, mid))) {
48254a9ef3f8SMichael Tuexen 				break;
48264a9ef3f8SMichael Tuexen 			}
48270c0982b8SRandall Stewart 			/*
48280c0982b8SRandall Stewart 			 * save to chk in case we have some on stream out
48290c0982b8SRandall Stewart 			 * queue. If so and we have an un-transmitted one we
48300c0982b8SRandall Stewart 			 * don't have to fudge the TSN.
48310c0982b8SRandall Stewart 			 */
48320c0982b8SRandall Stewart 			chk = tp1;
48330c0982b8SRandall Stewart 			ret_sz += tp1->book_size;
48340c0982b8SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
48351edc9dbaSMichael Tuexen 			if (sent) {
48361edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
48371edc9dbaSMichael Tuexen 			} else {
48381edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
48391edc9dbaSMichael Tuexen 			}
48402f99457bSMichael Tuexen 			if (tp1->data) {
48410c0982b8SRandall Stewart 				sctp_m_freem(tp1->data);
48422f99457bSMichael Tuexen 				tp1->data = NULL;
48432f99457bSMichael Tuexen 			}
48448933fa13SRandall Stewart 			/* No flight involved here book the size to 0 */
48458933fa13SRandall Stewart 			tp1->book_size = 0;
48460c0982b8SRandall Stewart 			if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
48470c0982b8SRandall Stewart 				foundeom = 1;
4848f8829a4aSRandall Stewart 			}
48490c0982b8SRandall Stewart 			do_wakeup_routine = 1;
48500c0982b8SRandall Stewart 			tp1->sent = SCTP_FORWARD_TSN_SKIP;
48510c0982b8SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.send_queue, tp1, sctp_next);
4852b7b84c0eSMichael Tuexen 			/*
4853b7b84c0eSMichael Tuexen 			 * on to the sent queue so we can wait for it to be
4854b7b84c0eSMichael Tuexen 			 * passed by.
4855b7b84c0eSMichael Tuexen 			 */
48560c0982b8SRandall Stewart 			TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, tp1,
48570c0982b8SRandall Stewart 			    sctp_next);
48580c0982b8SRandall Stewart 			stcb->asoc.send_queue_cnt--;
48590c0982b8SRandall Stewart 			stcb->asoc.sent_queue_cnt++;
48600c0982b8SRandall Stewart 		}
48610c0982b8SRandall Stewart 	}
48620c0982b8SRandall Stewart 	if (foundeom == 0) {
48630c0982b8SRandall Stewart 		/*
48640c0982b8SRandall Stewart 		 * Still no eom found. That means there is stuff left on the
48650c0982b8SRandall Stewart 		 * stream out queue.. yuck.
48660c0982b8SRandall Stewart 		 */
48670c0982b8SRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
486849656eefSMichael Tuexen 		strq = &stcb->asoc.strmout[sid];
4869f3b05218SMichael Tuexen 		sp = TAILQ_FIRST(&strq->outqueue);
4870f3b05218SMichael Tuexen 		if (sp != NULL) {
48710c0982b8SRandall Stewart 			sp->discard_rest = 1;
48720c0982b8SRandall Stewart 			/*
4873f3b05218SMichael Tuexen 			 * We may need to put a chunk on the queue that
4874f3b05218SMichael Tuexen 			 * holds the TSN that would have been sent with the
4875f3b05218SMichael Tuexen 			 * LAST bit.
48760c0982b8SRandall Stewart 			 */
48770c0982b8SRandall Stewart 			if (chk == NULL) {
48780c0982b8SRandall Stewart 				/* Yep, we have to */
48790c0982b8SRandall Stewart 				sctp_alloc_a_chunk(stcb, chk);
48800c0982b8SRandall Stewart 				if (chk == NULL) {
48810c0982b8SRandall Stewart 					/*
4882f3b05218SMichael Tuexen 					 * we are hosed. All we can do is
4883f3b05218SMichael Tuexen 					 * nothing.. which will cause an
4884f3b05218SMichael Tuexen 					 * abort if the peer is paying
48850c0982b8SRandall Stewart 					 * attention.
48860c0982b8SRandall Stewart 					 */
48870c0982b8SRandall Stewart 					goto oh_well;
48880c0982b8SRandall Stewart 				}
48890c0982b8SRandall Stewart 				memset(chk, 0, sizeof(*chk));
489063d5b568SMichael Tuexen 				chk->rec.data.rcv_flags = 0;
48910c0982b8SRandall Stewart 				chk->sent = SCTP_FORWARD_TSN_SKIP;
48920c0982b8SRandall Stewart 				chk->asoc = &stcb->asoc;
489363d5b568SMichael Tuexen 				if (stcb->asoc.idata_supported == 0) {
489463d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
489549656eefSMichael Tuexen 						chk->rec.data.mid = 0;
489663d5b568SMichael Tuexen 					} else {
489749656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
489863d5b568SMichael Tuexen 					}
489963d5b568SMichael Tuexen 				} else {
490063d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
490149656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_unordered;
490263d5b568SMichael Tuexen 					} else {
490349656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
490463d5b568SMichael Tuexen 					}
490563d5b568SMichael Tuexen 				}
490649656eefSMichael Tuexen 				chk->rec.data.sid = sp->sid;
490749656eefSMichael Tuexen 				chk->rec.data.ppid = sp->ppid;
49080c0982b8SRandall Stewart 				chk->rec.data.context = sp->context;
49090c0982b8SRandall Stewart 				chk->flags = sp->act_flags;
49107fd5b436SMichael Tuexen 				chk->whoTo = NULL;
491149656eefSMichael Tuexen 				chk->rec.data.tsn = atomic_fetchadd_int(&stcb->asoc.sending_seq, 1);
49127fd5b436SMichael Tuexen 				strq->chunks_on_queues++;
49130c0982b8SRandall Stewart 				TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, chk, sctp_next);
49140c0982b8SRandall Stewart 				stcb->asoc.sent_queue_cnt++;
49158933fa13SRandall Stewart 				stcb->asoc.pr_sctp_cnt++;
49160c0982b8SRandall Stewart 			}
491763d5b568SMichael Tuexen 			chk->rec.data.rcv_flags |= SCTP_DATA_LAST_FRAG;
4918d1ea5fa9SMichael Tuexen 			if (sp->sinfo_flags & SCTP_UNORDERED) {
4919d1ea5fa9SMichael Tuexen 				chk->rec.data.rcv_flags |= SCTP_DATA_UNORDERED;
4920d1ea5fa9SMichael Tuexen 			}
492163d5b568SMichael Tuexen 			if (stcb->asoc.idata_supported == 0) {
492263d5b568SMichael Tuexen 				if ((sp->sinfo_flags & SCTP_UNORDERED) == 0) {
492363d5b568SMichael Tuexen 					strq->next_mid_ordered++;
492463d5b568SMichael Tuexen 				}
492563d5b568SMichael Tuexen 			} else {
492663d5b568SMichael Tuexen 				if (sp->sinfo_flags & SCTP_UNORDERED) {
492763d5b568SMichael Tuexen 					strq->next_mid_unordered++;
492863d5b568SMichael Tuexen 				} else {
492963d5b568SMichael Tuexen 					strq->next_mid_ordered++;
493063d5b568SMichael Tuexen 				}
493163d5b568SMichael Tuexen 			}
49320c0982b8SRandall Stewart 	oh_well:
49330c0982b8SRandall Stewart 			if (sp->data) {
49340c0982b8SRandall Stewart 				/*
4935f3b05218SMichael Tuexen 				 * Pull any data to free up the SB and allow
4936f3b05218SMichael Tuexen 				 * sender to "add more" while we will throw
4937f3b05218SMichael Tuexen 				 * away :-)
49380c0982b8SRandall Stewart 				 */
4939f3b05218SMichael Tuexen 				sctp_free_spbufspace(stcb, &stcb->asoc, sp);
49400c0982b8SRandall Stewart 				ret_sz += sp->length;
49410c0982b8SRandall Stewart 				do_wakeup_routine = 1;
49420c0982b8SRandall Stewart 				sp->some_taken = 1;
49430c0982b8SRandall Stewart 				sctp_m_freem(sp->data);
49440c0982b8SRandall Stewart 				sp->data = NULL;
49450c0982b8SRandall Stewart 				sp->tail_mbuf = NULL;
4946d07b2ac6SMichael Tuexen 				sp->length = 0;
49470c0982b8SRandall Stewart 			}
49480c0982b8SRandall Stewart 		}
49490c0982b8SRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
49500c0982b8SRandall Stewart 	}
49510c0982b8SRandall Stewart 	if (do_wakeup_routine) {
49520c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
49538933fa13SRandall Stewart 		struct socket *so;
49548933fa13SRandall Stewart 
49550c0982b8SRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
49560c0982b8SRandall Stewart 		if (!so_locked) {
49570c0982b8SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
49580c0982b8SRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
49590c0982b8SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
49600c0982b8SRandall Stewart 			SCTP_TCB_LOCK(stcb);
49610c0982b8SRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
49620c0982b8SRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
49630c0982b8SRandall Stewart 				/* assoc was freed while we were unlocked */
49640c0982b8SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
49650c0982b8SRandall Stewart 				return (ret_sz);
49660c0982b8SRandall Stewart 			}
49670c0982b8SRandall Stewart 		}
49680c0982b8SRandall Stewart #endif
49690c0982b8SRandall Stewart 		sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket);
49700c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
49710c0982b8SRandall Stewart 		if (!so_locked) {
49720c0982b8SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
49730c0982b8SRandall Stewart 		}
49740c0982b8SRandall Stewart #endif
4975f8829a4aSRandall Stewart 	}
4976f8829a4aSRandall Stewart 	return (ret_sz);
4977f8829a4aSRandall Stewart }
4978f8829a4aSRandall Stewart 
4979f8829a4aSRandall Stewart /*
4980f8829a4aSRandall Stewart  * checks to see if the given address, sa, is one that is currently known by
4981f8829a4aSRandall Stewart  * the kernel note: can't distinguish the same address on multiple interfaces
4982f8829a4aSRandall Stewart  * and doesn't handle multiple addresses with different zone/scope id's note:
4983f8829a4aSRandall Stewart  * ifa_ifwithaddr() compares the entire sockaddr struct
4984f8829a4aSRandall Stewart  */
498542551e99SRandall Stewart struct sctp_ifa *
498680fefe0aSRandall Stewart sctp_find_ifa_in_ep(struct sctp_inpcb *inp, struct sockaddr *addr,
498780fefe0aSRandall Stewart     int holds_lock)
4988f8829a4aSRandall Stewart {
498942551e99SRandall Stewart 	struct sctp_laddr *laddr;
4990f8829a4aSRandall Stewart 
4991ad81507eSRandall Stewart 	if (holds_lock == 0) {
499242551e99SRandall Stewart 		SCTP_INP_RLOCK(inp);
4993ad81507eSRandall Stewart 	}
49940053ed28SMichael Tuexen 
499542551e99SRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
499642551e99SRandall Stewart 		if (laddr->ifa == NULL)
4997f8829a4aSRandall Stewart 			continue;
499842551e99SRandall Stewart 		if (addr->sa_family != laddr->ifa->address.sa.sa_family)
499942551e99SRandall Stewart 			continue;
5000e6194c2eSMichael Tuexen #ifdef INET
500142551e99SRandall Stewart 		if (addr->sa_family == AF_INET) {
500242551e99SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
500342551e99SRandall Stewart 			    laddr->ifa->address.sin.sin_addr.s_addr) {
500442551e99SRandall Stewart 				/* found him. */
5005ad81507eSRandall Stewart 				if (holds_lock == 0) {
500642551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
5007ad81507eSRandall Stewart 				}
500842551e99SRandall Stewart 				return (laddr->ifa);
500942551e99SRandall Stewart 				break;
501042551e99SRandall Stewart 			}
50115e2c2d87SRandall Stewart 		}
5012e6194c2eSMichael Tuexen #endif
50135e2c2d87SRandall Stewart #ifdef INET6
50145e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
5015c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
5016c54a18d2SRandall Stewart 			    &laddr->ifa->address.sin6)) {
501742551e99SRandall Stewart 				/* found him. */
5018ad81507eSRandall Stewart 				if (holds_lock == 0) {
501942551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
5020ad81507eSRandall Stewart 				}
502142551e99SRandall Stewart 				return (laddr->ifa);
502242551e99SRandall Stewart 				break;
502342551e99SRandall Stewart 			}
502442551e99SRandall Stewart 		}
50255e2c2d87SRandall Stewart #endif
502642551e99SRandall Stewart 	}
5027ad81507eSRandall Stewart 	if (holds_lock == 0) {
502842551e99SRandall Stewart 		SCTP_INP_RUNLOCK(inp);
5029ad81507eSRandall Stewart 	}
503042551e99SRandall Stewart 	return (NULL);
503142551e99SRandall Stewart }
5032f8829a4aSRandall Stewart 
50336a27c376SRandall Stewart uint32_t
5034b0471b4bSMichael Tuexen sctp_get_ifa_hash_val(struct sockaddr *addr)
5035b0471b4bSMichael Tuexen {
5036ea5eba11SMichael Tuexen 	switch (addr->sa_family) {
5037ea5eba11SMichael Tuexen #ifdef INET
5038ea5eba11SMichael Tuexen 	case AF_INET:
5039ea5eba11SMichael Tuexen 		{
50406a27c376SRandall Stewart 			struct sockaddr_in *sin;
50416a27c376SRandall Stewart 
50426a27c376SRandall Stewart 			sin = (struct sockaddr_in *)addr;
50436a27c376SRandall Stewart 			return (sin->sin_addr.s_addr ^ (sin->sin_addr.s_addr >> 16));
5044ea5eba11SMichael Tuexen 		}
5045ea5eba11SMichael Tuexen #endif
5046ea5eba11SMichael Tuexen #ifdef INET6
50472c2e3218SMichael Tuexen 	case AF_INET6:
5048ea5eba11SMichael Tuexen 		{
50496a27c376SRandall Stewart 			struct sockaddr_in6 *sin6;
50506a27c376SRandall Stewart 			uint32_t hash_of_addr;
50516a27c376SRandall Stewart 
50526a27c376SRandall Stewart 			sin6 = (struct sockaddr_in6 *)addr;
50536a27c376SRandall Stewart 			hash_of_addr = (sin6->sin6_addr.s6_addr32[0] +
50546a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[1] +
50556a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[2] +
50566a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[3]);
50576a27c376SRandall Stewart 			hash_of_addr = (hash_of_addr ^ (hash_of_addr >> 16));
50586a27c376SRandall Stewart 			return (hash_of_addr);
50596a27c376SRandall Stewart 		}
5060ea5eba11SMichael Tuexen #endif
5061ea5eba11SMichael Tuexen 	default:
5062ea5eba11SMichael Tuexen 		break;
5063ea5eba11SMichael Tuexen 	}
50646a27c376SRandall Stewart 	return (0);
50656a27c376SRandall Stewart }
50666a27c376SRandall Stewart 
506742551e99SRandall Stewart struct sctp_ifa *
506842551e99SRandall Stewart sctp_find_ifa_by_addr(struct sockaddr *addr, uint32_t vrf_id, int holds_lock)
506942551e99SRandall Stewart {
507042551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap;
507142551e99SRandall Stewart 	struct sctp_vrf *vrf;
50726a27c376SRandall Stewart 	struct sctp_ifalist *hash_head;
50736a27c376SRandall Stewart 	uint32_t hash_of_addr;
507442551e99SRandall Stewart 
507542551e99SRandall Stewart 	if (holds_lock == 0)
5076c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
507742551e99SRandall Stewart 
5078bff64a4dSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
5079bff64a4dSRandall Stewart 	if (vrf == NULL) {
5080bff64a4dSRandall Stewart 		if (holds_lock == 0)
5081c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5082bff64a4dSRandall Stewart 		return (NULL);
5083bff64a4dSRandall Stewart 	}
50840053ed28SMichael Tuexen 
5085bff64a4dSRandall Stewart 	hash_of_addr = sctp_get_ifa_hash_val(addr);
5086bff64a4dSRandall Stewart 
508717205eccSRandall Stewart 	hash_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)];
5088bff64a4dSRandall Stewart 	if (hash_head == NULL) {
5089ad81507eSRandall Stewart 		SCTP_PRINTF("hash_of_addr:%x mask:%x table:%x - ",
5090c99efcf6SRandall Stewart 		    hash_of_addr, (uint32_t)vrf->vrf_addr_hashmark,
5091c99efcf6SRandall Stewart 		    (uint32_t)(hash_of_addr & vrf->vrf_addr_hashmark));
5092bff64a4dSRandall Stewart 		sctp_print_address(addr);
5093ad81507eSRandall Stewart 		SCTP_PRINTF("No such bucket for address\n");
5094bff64a4dSRandall Stewart 		if (holds_lock == 0)
5095c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5096bff64a4dSRandall Stewart 
5097bff64a4dSRandall Stewart 		return (NULL);
5098bff64a4dSRandall Stewart 	}
50996a27c376SRandall Stewart 	LIST_FOREACH(sctp_ifap, hash_head, next_bucket) {
51006a27c376SRandall Stewart 		if (addr->sa_family != sctp_ifap->address.sa.sa_family)
51016a27c376SRandall Stewart 			continue;
5102e6194c2eSMichael Tuexen #ifdef INET
51036a27c376SRandall Stewart 		if (addr->sa_family == AF_INET) {
51046a27c376SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
51056a27c376SRandall Stewart 			    sctp_ifap->address.sin.sin_addr.s_addr) {
51066a27c376SRandall Stewart 				/* found him. */
510742551e99SRandall Stewart 				if (holds_lock == 0)
5108c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
510942551e99SRandall Stewart 				return (sctp_ifap);
51106a27c376SRandall Stewart 				break;
51116a27c376SRandall Stewart 			}
51125e2c2d87SRandall Stewart 		}
5113e6194c2eSMichael Tuexen #endif
51145e2c2d87SRandall Stewart #ifdef INET6
51155e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
5116c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
5117c54a18d2SRandall Stewart 			    &sctp_ifap->address.sin6)) {
51186a27c376SRandall Stewart 				/* found him. */
51196a27c376SRandall Stewart 				if (holds_lock == 0)
5120c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
51216a27c376SRandall Stewart 				return (sctp_ifap);
51226a27c376SRandall Stewart 				break;
51236a27c376SRandall Stewart 			}
512442551e99SRandall Stewart 		}
51255e2c2d87SRandall Stewart #endif
512642551e99SRandall Stewart 	}
512742551e99SRandall Stewart 	if (holds_lock == 0)
5128c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
5129f8829a4aSRandall Stewart 	return (NULL);
5130f8829a4aSRandall Stewart }
5131f8829a4aSRandall Stewart 
5132f8829a4aSRandall Stewart static void
51334c9179adSRandall Stewart sctp_user_rcvd(struct sctp_tcb *stcb, uint32_t *freed_so_far, int hold_rlock,
5134f8829a4aSRandall Stewart     uint32_t rwnd_req)
5135f8829a4aSRandall Stewart {
5136f8829a4aSRandall Stewart 	/* User pulled some data, do we need a rwnd update? */
5137f8829a4aSRandall Stewart 	int r_unlocked = 0;
5138f8829a4aSRandall Stewart 	uint32_t dif, rwnd;
5139f8829a4aSRandall Stewart 	struct socket *so = NULL;
5140f8829a4aSRandall Stewart 
5141f8829a4aSRandall Stewart 	if (stcb == NULL)
5142f8829a4aSRandall Stewart 		return;
5143f8829a4aSRandall Stewart 
514450cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
5145f8829a4aSRandall Stewart 
5146839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_ACK_SENT) ||
514761a21880SMichael Tuexen 	    (stcb->asoc.state & (SCTP_STATE_ABOUT_TO_BE_FREED | SCTP_STATE_SHUTDOWN_RECEIVED))) {
5148f8829a4aSRandall Stewart 		/* Pre-check If we are freeing no update */
5149f8829a4aSRandall Stewart 		goto no_lock;
5150f8829a4aSRandall Stewart 	}
5151f8829a4aSRandall Stewart 	SCTP_INP_INCR_REF(stcb->sctp_ep);
5152f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5153f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5154f8829a4aSRandall Stewart 		goto out;
5155f8829a4aSRandall Stewart 	}
5156f8829a4aSRandall Stewart 	so = stcb->sctp_socket;
5157f8829a4aSRandall Stewart 	if (so == NULL) {
5158f8829a4aSRandall Stewart 		goto out;
5159f8829a4aSRandall Stewart 	}
5160f8829a4aSRandall Stewart 	atomic_add_int(&stcb->freed_by_sorcv_sincelast, *freed_so_far);
5161f8829a4aSRandall Stewart 	/* Have you have freed enough to look */
5162f8829a4aSRandall Stewart 	*freed_so_far = 0;
5163f8829a4aSRandall Stewart 	/* Yep, its worth a look and the lock overhead */
5164f8829a4aSRandall Stewart 
5165f8829a4aSRandall Stewart 	/* Figure out what the rwnd would be */
5166f8829a4aSRandall Stewart 	rwnd = sctp_calc_rwnd(stcb, &stcb->asoc);
5167f8829a4aSRandall Stewart 	if (rwnd >= stcb->asoc.my_last_reported_rwnd) {
5168f8829a4aSRandall Stewart 		dif = rwnd - stcb->asoc.my_last_reported_rwnd;
5169f8829a4aSRandall Stewart 	} else {
5170f8829a4aSRandall Stewart 		dif = 0;
5171f8829a4aSRandall Stewart 	}
5172f8829a4aSRandall Stewart 	if (dif >= rwnd_req) {
5173f8829a4aSRandall Stewart 		if (hold_rlock) {
5174f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(stcb->sctp_ep);
5175f8829a4aSRandall Stewart 			r_unlocked = 1;
5176f8829a4aSRandall Stewart 		}
5177f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5178f8829a4aSRandall Stewart 			/*
5179f8829a4aSRandall Stewart 			 * One last check before we allow the guy possibly
5180f8829a4aSRandall Stewart 			 * to get in. There is a race, where the guy has not
5181f8829a4aSRandall Stewart 			 * reached the gate. In that case
5182f8829a4aSRandall Stewart 			 */
5183f8829a4aSRandall Stewart 			goto out;
5184f8829a4aSRandall Stewart 		}
5185f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
5186f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5187f8829a4aSRandall Stewart 			/* No reports here */
5188f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
5189f8829a4aSRandall Stewart 			goto out;
5190f8829a4aSRandall Stewart 		}
5191f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_wu_sacks_sent);
5192689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_LOCKED);
5193830d754dSRandall Stewart 
5194f8829a4aSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb,
5195ceaad40aSRandall Stewart 		    SCTP_OUTPUT_FROM_USR_RCVD, SCTP_SO_LOCKED);
5196f8829a4aSRandall Stewart 		/* make sure no timer is running */
5197ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, NULL,
5198ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_6);
5199f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
5200f8829a4aSRandall Stewart 	} else {
5201f8829a4aSRandall Stewart 		/* Update how much we have pending */
5202f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = dif;
5203f8829a4aSRandall Stewart 	}
5204f8829a4aSRandall Stewart out:
5205f8829a4aSRandall Stewart 	if (so && r_unlocked && hold_rlock) {
5206f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(stcb->sctp_ep);
5207f8829a4aSRandall Stewart 	}
52080053ed28SMichael Tuexen 
5209f8829a4aSRandall Stewart 	SCTP_INP_DECR_REF(stcb->sctp_ep);
5210f8829a4aSRandall Stewart no_lock:
521150cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, -1);
5212f8829a4aSRandall Stewart 	return;
5213f8829a4aSRandall Stewart }
5214f8829a4aSRandall Stewart 
5215f8829a4aSRandall Stewart int
5216f8829a4aSRandall Stewart sctp_sorecvmsg(struct socket *so,
5217f8829a4aSRandall Stewart     struct uio *uio,
5218f8829a4aSRandall Stewart     struct mbuf **mp,
5219f8829a4aSRandall Stewart     struct sockaddr *from,
5220f8829a4aSRandall Stewart     int fromlen,
5221f8829a4aSRandall Stewart     int *msg_flags,
5222f8829a4aSRandall Stewart     struct sctp_sndrcvinfo *sinfo,
5223f8829a4aSRandall Stewart     int filling_sinfo)
5224f8829a4aSRandall Stewart {
5225f8829a4aSRandall Stewart 	/*
5226f8829a4aSRandall Stewart 	 * MSG flags we will look at MSG_DONTWAIT - non-blocking IO.
5227f8829a4aSRandall Stewart 	 * MSG_PEEK - Look don't touch :-D (only valid with OUT mbuf copy
5228f8829a4aSRandall Stewart 	 * mp=NULL thus uio is the copy method to userland) MSG_WAITALL - ??
5229f8829a4aSRandall Stewart 	 * On the way out we may send out any combination of:
5230f8829a4aSRandall Stewart 	 * MSG_NOTIFICATION MSG_EOR
5231f8829a4aSRandall Stewart 	 *
5232f8829a4aSRandall Stewart 	 */
5233f8829a4aSRandall Stewart 	struct sctp_inpcb *inp = NULL;
523458e6eeefSMichael Tuexen 	ssize_t my_len = 0;
523558e6eeefSMichael Tuexen 	ssize_t cp_len = 0;
52360d3cf13dSMichael Tuexen 	int error = 0;
5237f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control = NULL, *ctl = NULL, *nxt = NULL;
523894b0d969SMichael Tuexen 	struct mbuf *m = NULL;
5239f8829a4aSRandall Stewart 	struct sctp_tcb *stcb = NULL;
5240f8829a4aSRandall Stewart 	int wakeup_read_socket = 0;
5241f8829a4aSRandall Stewart 	int freecnt_applied = 0;
5242f8829a4aSRandall Stewart 	int out_flags = 0, in_flags = 0;
5243f8829a4aSRandall Stewart 	int block_allowed = 1;
52444c9179adSRandall Stewart 	uint32_t freed_so_far = 0;
524558e6eeefSMichael Tuexen 	ssize_t copied_so_far = 0;
524693164cf9SRandall Stewart 	int in_eeor_mode = 0;
5247f8829a4aSRandall Stewart 	int no_rcv_needed = 0;
5248f8829a4aSRandall Stewart 	uint32_t rwnd_req = 0;
5249f8829a4aSRandall Stewart 	int hold_sblock = 0;
5250f8829a4aSRandall Stewart 	int hold_rlock = 0;
52519a8e3088SMichael Tuexen 	ssize_t slen = 0;
52524c9179adSRandall Stewart 	uint32_t held_length = 0;
52537abab911SRobert Watson 	int sockbuf_lock = 0;
5254f8829a4aSRandall Stewart 
525517205eccSRandall Stewart 	if (uio == NULL) {
5256c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
525717205eccSRandall Stewart 		return (EINVAL);
525817205eccSRandall Stewart 	}
52590053ed28SMichael Tuexen 
5260f8829a4aSRandall Stewart 	if (msg_flags) {
5261f8829a4aSRandall Stewart 		in_flags = *msg_flags;
5262c105859eSRandall Stewart 		if (in_flags & MSG_PEEK)
5263c105859eSRandall Stewart 			SCTP_STAT_INCR(sctps_read_peeks);
5264f8829a4aSRandall Stewart 	} else {
5265f8829a4aSRandall Stewart 		in_flags = 0;
5266f8829a4aSRandall Stewart 	}
5267f8829a4aSRandall Stewart 	slen = uio->uio_resid;
526817205eccSRandall Stewart 
5269f8829a4aSRandall Stewart 	/* Pull in and set up our int flags */
5270f8829a4aSRandall Stewart 	if (in_flags & MSG_OOB) {
5271f8829a4aSRandall Stewart 		/* Out of band's NOT supported */
5272f8829a4aSRandall Stewart 		return (EOPNOTSUPP);
5273f8829a4aSRandall Stewart 	}
5274f8829a4aSRandall Stewart 	if ((in_flags & MSG_PEEK) && (mp != NULL)) {
5275c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
5276f8829a4aSRandall Stewart 		return (EINVAL);
5277f8829a4aSRandall Stewart 	}
5278f8829a4aSRandall Stewart 	if ((in_flags & (MSG_DONTWAIT
5279f8829a4aSRandall Stewart 	    | MSG_NBIO
5280f8829a4aSRandall Stewart 	    )) ||
528142551e99SRandall Stewart 	    SCTP_SO_IS_NBIO(so)) {
5282f8829a4aSRandall Stewart 		block_allowed = 0;
5283f8829a4aSRandall Stewart 	}
5284f8829a4aSRandall Stewart 	/* setup the endpoint */
5285f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
5286f8829a4aSRandall Stewart 	if (inp == NULL) {
5287c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EFAULT);
5288f8829a4aSRandall Stewart 		return (EFAULT);
5289f8829a4aSRandall Stewart 	}
529062c1ff9cSRandall Stewart 	rwnd_req = (SCTP_SB_LIMIT_RCV(so) >> SCTP_RWND_HIWAT_SHIFT);
5291f8829a4aSRandall Stewart 	/* Must be at least a MTU's worth */
5292f8829a4aSRandall Stewart 	if (rwnd_req < SCTP_MIN_RWND)
5293f8829a4aSRandall Stewart 		rwnd_req = SCTP_MIN_RWND;
5294f8829a4aSRandall Stewart 	in_eeor_mode = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXPLICIT_EOR);
5295b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5296f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTER,
52979a8e3088SMichael Tuexen 		    rwnd_req, in_eeor_mode, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
529880fefe0aSRandall Stewart 	}
5299b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5300f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTERPL,
53019a8e3088SMichael Tuexen 		    rwnd_req, block_allowed, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
530280fefe0aSRandall Stewart 	}
53030053ed28SMichael Tuexen 
53040053ed28SMichael Tuexen 
5305265de5bbSRobert Watson 	error = sblock(&so->so_rcv, (block_allowed ? SBL_WAIT : 0));
5306f8829a4aSRandall Stewart 	if (error) {
5307f8829a4aSRandall Stewart 		goto release_unlocked;
5308f8829a4aSRandall Stewart 	}
53098e1e6e5fSMateusz Guzik 	sockbuf_lock = 1;
5310f8829a4aSRandall Stewart restart:
53117abab911SRobert Watson 
5312f8829a4aSRandall Stewart 
5313f8829a4aSRandall Stewart restart_nosblocks:
5314f8829a4aSRandall Stewart 	if (hold_sblock == 0) {
5315f8829a4aSRandall Stewart 		SOCKBUF_LOCK(&so->so_rcv);
5316f8829a4aSRandall Stewart 		hold_sblock = 1;
5317f8829a4aSRandall Stewart 	}
5318f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5319f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5320f8829a4aSRandall Stewart 		goto out;
5321f8829a4aSRandall Stewart 	}
53224e88d37aSMichael Tuexen 	if ((so->so_rcv.sb_state & SBS_CANTRCVMORE) && (so->so_rcv.sb_cc == 0)) {
5323f8829a4aSRandall Stewart 		if (so->so_error) {
5324f8829a4aSRandall Stewart 			error = so->so_error;
532544b7479bSRandall Stewart 			if ((in_flags & MSG_PEEK) == 0)
532644b7479bSRandall Stewart 				so->so_error = 0;
53279f22f500SRandall Stewart 			goto out;
5328f8829a4aSRandall Stewart 		} else {
53294e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc == 0) {
53307924093fSRandall Stewart 				/* indicate EOF */
53317924093fSRandall Stewart 				error = 0;
5332f8829a4aSRandall Stewart 				goto out;
5333f8829a4aSRandall Stewart 			}
53349f22f500SRandall Stewart 		}
53359f22f500SRandall Stewart 	}
53369de217ceSMichael Tuexen 	if (so->so_rcv.sb_cc <= held_length) {
53379de217ceSMichael Tuexen 		if (so->so_error) {
53389de217ceSMichael Tuexen 			error = so->so_error;
53399de217ceSMichael Tuexen 			if ((in_flags & MSG_PEEK) == 0) {
53409de217ceSMichael Tuexen 				so->so_error = 0;
53419de217ceSMichael Tuexen 			}
53429de217ceSMichael Tuexen 			goto out;
53439de217ceSMichael Tuexen 		}
53444e88d37aSMichael Tuexen 		if ((so->so_rcv.sb_cc == 0) &&
5345f8829a4aSRandall Stewart 		    ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5346f8829a4aSRandall Stewart 		    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL))) {
5347f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0) {
5348f8829a4aSRandall Stewart 				/*
5349f8829a4aSRandall Stewart 				 * For active open side clear flags for
5350f8829a4aSRandall Stewart 				 * re-use passive open is blocked by
5351f8829a4aSRandall Stewart 				 * connect.
5352f8829a4aSRandall Stewart 				 */
5353f8829a4aSRandall Stewart 				if (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED) {
5354b7b84c0eSMichael Tuexen 					/*
5355b7b84c0eSMichael Tuexen 					 * You were aborted, passive side
5356b7b84c0eSMichael Tuexen 					 * always hits here
5357b7b84c0eSMichael Tuexen 					 */
5358c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
5359f8829a4aSRandall Stewart 					error = ECONNRESET;
5360f8829a4aSRandall Stewart 				}
5361f8829a4aSRandall Stewart 				so->so_state &= ~(SS_ISCONNECTING |
5362f8829a4aSRandall Stewart 				    SS_ISDISCONNECTING |
5363f8829a4aSRandall Stewart 				    SS_ISCONFIRMING |
5364f8829a4aSRandall Stewart 				    SS_ISCONNECTED);
5365f8829a4aSRandall Stewart 				if (error == 0) {
5366f8829a4aSRandall Stewart 					if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) == 0) {
5367c4739e2fSRandall Stewart 						SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
5368f8829a4aSRandall Stewart 						error = ENOTCONN;
5369f8829a4aSRandall Stewart 					}
5370f8829a4aSRandall Stewart 				}
5371f8829a4aSRandall Stewart 				goto out;
5372f8829a4aSRandall Stewart 			}
5373f8829a4aSRandall Stewart 		}
53749de217ceSMichael Tuexen 		if (block_allowed) {
5375f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5376f8829a4aSRandall Stewart 			if (error) {
5377f8829a4aSRandall Stewart 				goto out;
5378f8829a4aSRandall Stewart 			}
5379f8829a4aSRandall Stewart 			held_length = 0;
5380f8829a4aSRandall Stewart 			goto restart_nosblocks;
538144b7479bSRandall Stewart 		} else {
5382c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EWOULDBLOCK);
5383f8829a4aSRandall Stewart 			error = EWOULDBLOCK;
5384f8829a4aSRandall Stewart 			goto out;
5385f8829a4aSRandall Stewart 		}
53869de217ceSMichael Tuexen 	}
5387d06c82f1SRandall Stewart 	if (hold_sblock == 1) {
5388d06c82f1SRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5389d06c82f1SRandall Stewart 		hold_sblock = 0;
5390d06c82f1SRandall Stewart 	}
5391f8829a4aSRandall Stewart 	/* we possibly have data we can read */
53923c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
5393f8829a4aSRandall Stewart 	control = TAILQ_FIRST(&inp->read_queue);
5394f8829a4aSRandall Stewart 	if (control == NULL) {
5395f8829a4aSRandall Stewart 		/*
5396f8829a4aSRandall Stewart 		 * This could be happening since the appender did the
5397f8829a4aSRandall Stewart 		 * increment but as not yet did the tailq insert onto the
5398f8829a4aSRandall Stewart 		 * read_queue
5399f8829a4aSRandall Stewart 		 */
5400f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5401f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5402f8829a4aSRandall Stewart 		}
5403f8829a4aSRandall Stewart 		control = TAILQ_FIRST(&inp->read_queue);
54044e88d37aSMichael Tuexen 		if ((control == NULL) && (so->so_rcv.sb_cc != 0)) {
5405a5d547adSRandall Stewart #ifdef INVARIANTS
5406f8829a4aSRandall Stewart 			panic("Huh, its non zero and nothing on control?");
5407f8829a4aSRandall Stewart #endif
54084e88d37aSMichael Tuexen 			so->so_rcv.sb_cc = 0;
5409f8829a4aSRandall Stewart 		}
5410f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5411f8829a4aSRandall Stewart 		hold_rlock = 0;
5412f8829a4aSRandall Stewart 		goto restart;
5413f8829a4aSRandall Stewart 	}
54140053ed28SMichael Tuexen 
5415f8829a4aSRandall Stewart 	if ((control->length == 0) &&
5416f8829a4aSRandall Stewart 	    (control->do_not_ref_stcb)) {
5417f8829a4aSRandall Stewart 		/*
5418f8829a4aSRandall Stewart 		 * Clean up code for freeing assoc that left behind a
5419f8829a4aSRandall Stewart 		 * pdapi.. maybe a peer in EEOR that just closed after
5420f8829a4aSRandall Stewart 		 * sending and never indicated a EOR.
5421f8829a4aSRandall Stewart 		 */
5422f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5423f8829a4aSRandall Stewart 			hold_rlock = 1;
5424f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5425f8829a4aSRandall Stewart 		}
5426f8829a4aSRandall Stewart 		control->held_length = 0;
5427f8829a4aSRandall Stewart 		if (control->data) {
5428f8829a4aSRandall Stewart 			/* Hmm there is data here .. fix */
54294c9179adSRandall Stewart 			struct mbuf *m_tmp;
5430f8829a4aSRandall Stewart 			int cnt = 0;
5431f8829a4aSRandall Stewart 
54324c9179adSRandall Stewart 			m_tmp = control->data;
54334c9179adSRandall Stewart 			while (m_tmp) {
54344c9179adSRandall Stewart 				cnt += SCTP_BUF_LEN(m_tmp);
54354c9179adSRandall Stewart 				if (SCTP_BUF_NEXT(m_tmp) == NULL) {
54364c9179adSRandall Stewart 					control->tail_mbuf = m_tmp;
5437f8829a4aSRandall Stewart 					control->end_added = 1;
5438f8829a4aSRandall Stewart 				}
54394c9179adSRandall Stewart 				m_tmp = SCTP_BUF_NEXT(m_tmp);
5440f8829a4aSRandall Stewart 			}
5441f8829a4aSRandall Stewart 			control->length = cnt;
5442f8829a4aSRandall Stewart 		} else {
5443f8829a4aSRandall Stewart 			/* remove it */
5444f8829a4aSRandall Stewart 			TAILQ_REMOVE(&inp->read_queue, control, next);
5445f8829a4aSRandall Stewart 			/* Add back any hiddend data */
5446f8829a4aSRandall Stewart 			sctp_free_remote_addr(control->whoFrom);
5447f8829a4aSRandall Stewart 			sctp_free_a_readq(stcb, control);
5448f8829a4aSRandall Stewart 		}
5449f8829a4aSRandall Stewart 		if (hold_rlock) {
5450f8829a4aSRandall Stewart 			hold_rlock = 0;
5451f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5452f8829a4aSRandall Stewart 		}
5453f8829a4aSRandall Stewart 		goto restart;
5454f8829a4aSRandall Stewart 	}
5455810ec536SMichael Tuexen 	if ((control->length == 0) &&
5456810ec536SMichael Tuexen 	    (control->end_added == 1)) {
5457b7b84c0eSMichael Tuexen 		/*
5458b7b84c0eSMichael Tuexen 		 * Do we also need to check for (control->pdapi_aborted ==
5459b7b84c0eSMichael Tuexen 		 * 1)?
5460b7b84c0eSMichael Tuexen 		 */
5461810ec536SMichael Tuexen 		if (hold_rlock == 0) {
5462810ec536SMichael Tuexen 			hold_rlock = 1;
5463810ec536SMichael Tuexen 			SCTP_INP_READ_LOCK(inp);
5464810ec536SMichael Tuexen 		}
5465810ec536SMichael Tuexen 		TAILQ_REMOVE(&inp->read_queue, control, next);
5466810ec536SMichael Tuexen 		if (control->data) {
5467810ec536SMichael Tuexen #ifdef INVARIANTS
5468810ec536SMichael Tuexen 			panic("control->data not null but control->length == 0");
5469810ec536SMichael Tuexen #else
5470810ec536SMichael Tuexen 			SCTP_PRINTF("Strange, data left in the control buffer. Cleaning up.\n");
5471810ec536SMichael Tuexen 			sctp_m_freem(control->data);
5472810ec536SMichael Tuexen 			control->data = NULL;
5473810ec536SMichael Tuexen #endif
5474810ec536SMichael Tuexen 		}
5475810ec536SMichael Tuexen 		if (control->aux_data) {
5476810ec536SMichael Tuexen 			sctp_m_free(control->aux_data);
5477810ec536SMichael Tuexen 			control->aux_data = NULL;
5478810ec536SMichael Tuexen 		}
547998d5fd97SMichael Tuexen #ifdef INVARIANTS
548044249214SRandall Stewart 		if (control->on_strm_q) {
548144249214SRandall Stewart 			panic("About to free ctl:%p so:%p and its in %d",
548244249214SRandall Stewart 			    control, so, control->on_strm_q);
548344249214SRandall Stewart 		}
548498d5fd97SMichael Tuexen #endif
5485810ec536SMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
5486810ec536SMichael Tuexen 		sctp_free_a_readq(stcb, control);
5487810ec536SMichael Tuexen 		if (hold_rlock) {
5488810ec536SMichael Tuexen 			hold_rlock = 0;
5489810ec536SMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
5490810ec536SMichael Tuexen 		}
5491810ec536SMichael Tuexen 		goto restart;
5492810ec536SMichael Tuexen 	}
5493f8829a4aSRandall Stewart 	if (control->length == 0) {
5494f8829a4aSRandall Stewart 		if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE)) &&
5495f8829a4aSRandall Stewart 		    (filling_sinfo)) {
5496f8829a4aSRandall Stewart 			/* find a more suitable one then this */
5497f8829a4aSRandall Stewart 			ctl = TAILQ_NEXT(control, next);
5498f8829a4aSRandall Stewart 			while (ctl) {
54999a6142d8SRandall Stewart 				if ((ctl->stcb != control->stcb) && (ctl->length) &&
55009a6142d8SRandall Stewart 				    (ctl->some_taken ||
55016114cd96SRandall Stewart 				    (ctl->spec_flags & M_NOTIFICATION) ||
55029a6142d8SRandall Stewart 				    ((ctl->do_not_ref_stcb == 0) &&
55039a6142d8SRandall Stewart 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))
55049a6142d8SRandall Stewart 				    ) {
55059a6142d8SRandall Stewart 					/*-
55069a6142d8SRandall Stewart 					 * If we have a different TCB next, and there is data
55079a6142d8SRandall Stewart 					 * present. If we have already taken some (pdapi), OR we can
55089a6142d8SRandall Stewart 					 * ref the tcb and no delivery as started on this stream, we
550917205eccSRandall Stewart 					 * take it. Note we allow a notification on a different
551017205eccSRandall Stewart 					 * assoc to be delivered..
55119a6142d8SRandall Stewart 					 */
55129a6142d8SRandall Stewart 					control = ctl;
55139a6142d8SRandall Stewart 					goto found_one;
55149a6142d8SRandall Stewart 				} else if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS)) &&
55159a6142d8SRandall Stewart 					    (ctl->length) &&
55169a6142d8SRandall Stewart 					    ((ctl->some_taken) ||
55179a6142d8SRandall Stewart 					    ((ctl->do_not_ref_stcb == 0) &&
551817205eccSRandall Stewart 					    ((ctl->spec_flags & M_NOTIFICATION) == 0) &&
5519b5c16493SMichael Tuexen 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))) {
55209a6142d8SRandall Stewart 					/*-
55219a6142d8SRandall Stewart 					 * If we have the same tcb, and there is data present, and we
55229a6142d8SRandall Stewart 					 * have the strm interleave feature present. Then if we have
55239a6142d8SRandall Stewart 					 * taken some (pdapi) or we can refer to tht tcb AND we have
55249a6142d8SRandall Stewart 					 * not started a delivery for this stream, we can take it.
552517205eccSRandall Stewart 					 * Note we do NOT allow a notificaiton on the same assoc to
552617205eccSRandall Stewart 					 * be delivered.
55279a6142d8SRandall Stewart 					 */
5528f8829a4aSRandall Stewart 					control = ctl;
5529f8829a4aSRandall Stewart 					goto found_one;
5530f8829a4aSRandall Stewart 				}
5531f8829a4aSRandall Stewart 				ctl = TAILQ_NEXT(ctl, next);
5532f8829a4aSRandall Stewart 			}
5533f8829a4aSRandall Stewart 		}
5534f8829a4aSRandall Stewart 		/*
5535f8829a4aSRandall Stewart 		 * if we reach here, not suitable replacement is available
55364e88d37aSMichael Tuexen 		 * <or> fragment interleave is NOT on. So stuff the sb_cc
5537f8829a4aSRandall Stewart 		 * into the our held count, and its time to sleep again.
5538f8829a4aSRandall Stewart 		 */
55394e88d37aSMichael Tuexen 		held_length = so->so_rcv.sb_cc;
55404e88d37aSMichael Tuexen 		control->held_length = so->so_rcv.sb_cc;
5541f8829a4aSRandall Stewart 		goto restart;
5542f8829a4aSRandall Stewart 	}
5543f8829a4aSRandall Stewart 	/* Clear the held length since there is something to read */
5544f8829a4aSRandall Stewart 	control->held_length = 0;
5545f8829a4aSRandall Stewart found_one:
5546f8829a4aSRandall Stewart 	/*
5547f8829a4aSRandall Stewart 	 * If we reach here, control has a some data for us to read off.
5548f8829a4aSRandall Stewart 	 * Note that stcb COULD be NULL.
5549f8829a4aSRandall Stewart 	 */
55509c5ca6f2SMichael Tuexen 	if (hold_rlock == 0) {
55519c5ca6f2SMichael Tuexen 		hold_rlock = 1;
55529c5ca6f2SMichael Tuexen 		SCTP_INP_READ_LOCK(inp);
5553f8829a4aSRandall Stewart 	}
55549c5ca6f2SMichael Tuexen 	control->some_taken++;
5555f8829a4aSRandall Stewart 	stcb = control->stcb;
5556f8829a4aSRandall Stewart 	if (stcb) {
55570696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) &&
55580696e120SRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED)) {
555950cec919SRandall Stewart 			if (freecnt_applied == 0)
5560f8829a4aSRandall Stewart 				stcb = NULL;
5561f8829a4aSRandall Stewart 		} else if (control->do_not_ref_stcb == 0) {
5562f8829a4aSRandall Stewart 			/* you can't free it on me please */
5563f8829a4aSRandall Stewart 			/*
5564f8829a4aSRandall Stewart 			 * The lock on the socket buffer protects us so the
5565f8829a4aSRandall Stewart 			 * free code will stop. But since we used the
5566f8829a4aSRandall Stewart 			 * socketbuf lock and the sender uses the tcb_lock
5567f8829a4aSRandall Stewart 			 * to increment, we need to use the atomic add to
5568f8829a4aSRandall Stewart 			 * the refcnt
5569f8829a4aSRandall Stewart 			 */
5570d55b0b1bSRandall Stewart 			if (freecnt_applied) {
5571d55b0b1bSRandall Stewart #ifdef INVARIANTS
5572207304d4SRandall Stewart 				panic("refcnt already incremented");
5573d55b0b1bSRandall Stewart #else
5574cd3fd531SMichael Tuexen 				SCTP_PRINTF("refcnt already incremented?\n");
5575d55b0b1bSRandall Stewart #endif
5576d55b0b1bSRandall Stewart 			} else {
557750cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5578f8829a4aSRandall Stewart 				freecnt_applied = 1;
5579d55b0b1bSRandall Stewart 			}
5580f8829a4aSRandall Stewart 			/*
5581f8829a4aSRandall Stewart 			 * Setup to remember how much we have not yet told
5582f8829a4aSRandall Stewart 			 * the peer our rwnd has opened up. Note we grab the
5583f8829a4aSRandall Stewart 			 * value from the tcb from last time. Note too that
55840696e120SRandall Stewart 			 * sack sending clears this when a sack is sent,
5585f8829a4aSRandall Stewart 			 * which is fine. Once we hit the rwnd_req, we then
5586f8829a4aSRandall Stewart 			 * will go to the sctp_user_rcvd() that will not
5587f8829a4aSRandall Stewart 			 * lock until it KNOWs it MUST send a WUP-SACK.
5588f8829a4aSRandall Stewart 			 */
558958e6eeefSMichael Tuexen 			freed_so_far = (uint32_t)stcb->freed_by_sorcv_sincelast;
5590f8829a4aSRandall Stewart 			stcb->freed_by_sorcv_sincelast = 0;
5591f8829a4aSRandall Stewart 		}
5592f8829a4aSRandall Stewart 	}
55936114cd96SRandall Stewart 	if (stcb &&
55946114cd96SRandall Stewart 	    ((control->spec_flags & M_NOTIFICATION) == 0) &&
55956114cd96SRandall Stewart 	    control->do_not_ref_stcb == 0) {
5596d06c82f1SRandall Stewart 		stcb->asoc.strmin[control->sinfo_stream].delivery_started = 1;
5597d06c82f1SRandall Stewart 	}
55980053ed28SMichael Tuexen 
5599f8829a4aSRandall Stewart 	/* First lets get off the sinfo and sockaddr info */
56005f05199cSMichael Tuexen 	if ((sinfo != NULL) && (filling_sinfo != 0)) {
56015f05199cSMichael Tuexen 		sinfo->sinfo_stream = control->sinfo_stream;
560249656eefSMichael Tuexen 		sinfo->sinfo_ssn = (uint16_t)control->mid;
56035f05199cSMichael Tuexen 		sinfo->sinfo_flags = control->sinfo_flags;
56045f05199cSMichael Tuexen 		sinfo->sinfo_ppid = control->sinfo_ppid;
56055f05199cSMichael Tuexen 		sinfo->sinfo_context = control->sinfo_context;
56065f05199cSMichael Tuexen 		sinfo->sinfo_timetolive = control->sinfo_timetolive;
56075f05199cSMichael Tuexen 		sinfo->sinfo_tsn = control->sinfo_tsn;
56085f05199cSMichael Tuexen 		sinfo->sinfo_cumtsn = control->sinfo_cumtsn;
56095f05199cSMichael Tuexen 		sinfo->sinfo_assoc_id = control->sinfo_assoc_id;
5610f8829a4aSRandall Stewart 		nxt = TAILQ_NEXT(control, next);
5611e2e7c62eSMichael Tuexen 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
5612e2e7c62eSMichael Tuexen 		    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) {
5613f8829a4aSRandall Stewart 			struct sctp_extrcvinfo *s_extra;
5614f8829a4aSRandall Stewart 
5615f8829a4aSRandall Stewart 			s_extra = (struct sctp_extrcvinfo *)sinfo;
56169a6142d8SRandall Stewart 			if ((nxt) &&
56179a6142d8SRandall Stewart 			    (nxt->length)) {
5618b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NEXT_MSG_AVAIL;
5619f8829a4aSRandall Stewart 				if (nxt->sinfo_flags & SCTP_UNORDERED) {
5620b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_UNORDERED;
5621f8829a4aSRandall Stewart 				}
5622f42a358aSRandall Stewart 				if (nxt->spec_flags & M_NOTIFICATION) {
5623b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_NOTIFICATION;
5624f42a358aSRandall Stewart 				}
5625b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = nxt->sinfo_assoc_id;
5626b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = nxt->length;
5627b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = nxt->sinfo_ppid;
5628b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = nxt->sinfo_stream;
5629f8829a4aSRandall Stewart 				if (nxt->tail_mbuf != NULL) {
5630139bc87fSRandall Stewart 					if (nxt->end_added) {
5631b70b526dSMichael Tuexen 						s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_ISCOMPLETE;
5632f8829a4aSRandall Stewart 					}
5633f8829a4aSRandall Stewart 				}
5634f8829a4aSRandall Stewart 			} else {
5635f8829a4aSRandall Stewart 				/*
5636f8829a4aSRandall Stewart 				 * we explicitly 0 this, since the memcpy
5637f8829a4aSRandall Stewart 				 * got some other things beyond the older
5638f8829a4aSRandall Stewart 				 * sinfo_ that is on the control's structure
5639f8829a4aSRandall Stewart 				 * :-D
5640f8829a4aSRandall Stewart 				 */
56419a6142d8SRandall Stewart 				nxt = NULL;
5642b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
5643b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = 0;
5644b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = 0;
5645b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = 0;
5646b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = 0;
5647f8829a4aSRandall Stewart 			}
5648f8829a4aSRandall Stewart 		}
5649f8829a4aSRandall Stewart 		/*
5650f8829a4aSRandall Stewart 		 * update off the real current cum-ack, if we have an stcb.
5651f8829a4aSRandall Stewart 		 */
56520696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) && stcb)
5653f8829a4aSRandall Stewart 			sinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn;
5654f8829a4aSRandall Stewart 		/*
5655f8829a4aSRandall Stewart 		 * mask off the high bits, we keep the actual chunk bits in
5656f8829a4aSRandall Stewart 		 * there.
5657f8829a4aSRandall Stewart 		 */
5658f8829a4aSRandall Stewart 		sinfo->sinfo_flags &= 0x00ff;
56595f26a41dSRandall Stewart 		if ((control->sinfo_flags >> 8) & SCTP_DATA_UNORDERED) {
56605f26a41dSRandall Stewart 			sinfo->sinfo_flags |= SCTP_UNORDERED;
56615f26a41dSRandall Stewart 		}
5662f8829a4aSRandall Stewart 	}
566318e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
566418e198d3SRandall Stewart 	{
566518e198d3SRandall Stewart 		int index, newindex;
566618e198d3SRandall Stewart 		struct sctp_pcbtsn_rlog *entry;
566718e198d3SRandall Stewart 
566818e198d3SRandall Stewart 		do {
566918e198d3SRandall Stewart 			index = inp->readlog_index;
567018e198d3SRandall Stewart 			newindex = index + 1;
567118e198d3SRandall Stewart 			if (newindex >= SCTP_READ_LOG_SIZE) {
567218e198d3SRandall Stewart 				newindex = 0;
567318e198d3SRandall Stewart 			}
567418e198d3SRandall Stewart 		} while (atomic_cmpset_int(&inp->readlog_index, index, newindex) == 0);
567518e198d3SRandall Stewart 		entry = &inp->readlog[index];
567618e198d3SRandall Stewart 		entry->vtag = control->sinfo_assoc_id;
567718e198d3SRandall Stewart 		entry->strm = control->sinfo_stream;
567849656eefSMichael Tuexen 		entry->seq = (uint16_t)control->mid;
567918e198d3SRandall Stewart 		entry->sz = control->length;
568018e198d3SRandall Stewart 		entry->flgs = control->sinfo_flags;
568118e198d3SRandall Stewart 	}
568218e198d3SRandall Stewart #endif
5683d59107f7SMichael Tuexen 	if ((fromlen > 0) && (from != NULL)) {
5684d59107f7SMichael Tuexen 		union sctp_sockstore store;
5685d59107f7SMichael Tuexen 		size_t len;
5686d59107f7SMichael Tuexen 
5687b5b6e5c2SMichael Tuexen 		switch (control->whoFrom->ro._l_addr.sa.sa_family) {
5688b5b6e5c2SMichael Tuexen #ifdef INET6
5689b5b6e5c2SMichael Tuexen 		case AF_INET6:
5690d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in6);
5691d59107f7SMichael Tuexen 			store.sin6 = control->whoFrom->ro._l_addr.sin6;
5692d59107f7SMichael Tuexen 			store.sin6.sin6_port = control->port_from;
5693b5b6e5c2SMichael Tuexen 			break;
5694f8829a4aSRandall Stewart #endif
5695b5b6e5c2SMichael Tuexen #ifdef INET
5696b5b6e5c2SMichael Tuexen 		case AF_INET:
5697d59107f7SMichael Tuexen #ifdef INET6
5698d59107f7SMichael Tuexen 			if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
5699d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in6);
5700d59107f7SMichael Tuexen 				in6_sin_2_v4mapsin6(&control->whoFrom->ro._l_addr.sin,
5701d59107f7SMichael Tuexen 				    &store.sin6);
5702d59107f7SMichael Tuexen 				store.sin6.sin6_port = control->port_from;
5703d59107f7SMichael Tuexen 			} else {
5704d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in);
5705d59107f7SMichael Tuexen 				store.sin = control->whoFrom->ro._l_addr.sin;
5706d59107f7SMichael Tuexen 				store.sin.sin_port = control->port_from;
5707d59107f7SMichael Tuexen 			}
5708d59107f7SMichael Tuexen #else
5709d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in);
5710d59107f7SMichael Tuexen 			store.sin = control->whoFrom->ro._l_addr.sin;
5711d59107f7SMichael Tuexen 			store.sin.sin_port = control->port_from;
5712d59107f7SMichael Tuexen #endif
5713b5b6e5c2SMichael Tuexen 			break;
5714b5b6e5c2SMichael Tuexen #endif
5715b5b6e5c2SMichael Tuexen 		default:
5716d59107f7SMichael Tuexen 			len = 0;
5717b5b6e5c2SMichael Tuexen 			break;
5718b5b6e5c2SMichael Tuexen 		}
5719d59107f7SMichael Tuexen 		memcpy(from, &store, min((size_t)fromlen, len));
5720e0e00a4dSMichael Tuexen #ifdef INET6
5721f8829a4aSRandall Stewart 		{
5722b5b6e5c2SMichael Tuexen 			struct sockaddr_in6 lsa6, *from6;
5723f8829a4aSRandall Stewart 
5724b5b6e5c2SMichael Tuexen 			from6 = (struct sockaddr_in6 *)from;
5725b5b6e5c2SMichael Tuexen 			sctp_recover_scope_mac(from6, (&lsa6));
5726f8829a4aSRandall Stewart 		}
5727f8829a4aSRandall Stewart #endif
5728f8829a4aSRandall Stewart 	}
57299c5ca6f2SMichael Tuexen 	if (hold_rlock) {
57309c5ca6f2SMichael Tuexen 		SCTP_INP_READ_UNLOCK(inp);
57319c5ca6f2SMichael Tuexen 		hold_rlock = 0;
57329c5ca6f2SMichael Tuexen 	}
57339c5ca6f2SMichael Tuexen 	if (hold_sblock) {
57349c5ca6f2SMichael Tuexen 		SOCKBUF_UNLOCK(&so->so_rcv);
57359c5ca6f2SMichael Tuexen 		hold_sblock = 0;
57369c5ca6f2SMichael Tuexen 	}
5737f8829a4aSRandall Stewart 	/* now copy out what data we can */
5738f8829a4aSRandall Stewart 	if (mp == NULL) {
5739f8829a4aSRandall Stewart 		/* copy out each mbuf in the chain up to length */
5740f8829a4aSRandall Stewart get_more_data:
5741f8829a4aSRandall Stewart 		m = control->data;
5742f8829a4aSRandall Stewart 		while (m) {
5743f8829a4aSRandall Stewart 			/* Move out all we can */
57440d3cf13dSMichael Tuexen 			cp_len = uio->uio_resid;
57450d3cf13dSMichael Tuexen 			my_len = SCTP_BUF_LEN(m);
5746f8829a4aSRandall Stewart 			if (cp_len > my_len) {
5747f8829a4aSRandall Stewart 				/* not enough in this buf */
5748f8829a4aSRandall Stewart 				cp_len = my_len;
5749f8829a4aSRandall Stewart 			}
5750f8829a4aSRandall Stewart 			if (hold_rlock) {
5751f8829a4aSRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
5752f8829a4aSRandall Stewart 				hold_rlock = 0;
5753f8829a4aSRandall Stewart 			}
5754f8829a4aSRandall Stewart 			if (cp_len > 0)
575558e6eeefSMichael Tuexen 				error = uiomove(mtod(m, char *), (int)cp_len, uio);
5756f8829a4aSRandall Stewart 			/* re-read */
5757f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
5758f8829a4aSRandall Stewart 				goto release;
5759f8829a4aSRandall Stewart 			}
57600053ed28SMichael Tuexen 
57610696e120SRandall Stewart 			if ((control->do_not_ref_stcb == 0) && stcb &&
5762f8829a4aSRandall Stewart 			    stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5763f8829a4aSRandall Stewart 				no_rcv_needed = 1;
5764f8829a4aSRandall Stewart 			}
5765f8829a4aSRandall Stewart 			if (error) {
5766f8829a4aSRandall Stewart 				/* error we are out of here */
5767f8829a4aSRandall Stewart 				goto release;
5768f8829a4aSRandall Stewart 			}
5769f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5770f8829a4aSRandall Stewart 			hold_rlock = 1;
5771139bc87fSRandall Stewart 			if (cp_len == SCTP_BUF_LEN(m)) {
5772139bc87fSRandall Stewart 				if ((SCTP_BUF_NEXT(m) == NULL) &&
5773139bc87fSRandall Stewart 				    (control->end_added)) {
5774f8829a4aSRandall Stewart 					out_flags |= MSG_EOR;
577552129fcdSRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
577652129fcdSRandall Stewart 					    (control->stcb != NULL) &&
577752129fcdSRandall Stewart 					    ((control->spec_flags & M_NOTIFICATION) == 0))
5778ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5779f8829a4aSRandall Stewart 				}
5780139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5781f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5782f8829a4aSRandall Stewart 				}
5783f8829a4aSRandall Stewart 				/* we ate up the mbuf */
5784f8829a4aSRandall Stewart 				if (in_flags & MSG_PEEK) {
5785f8829a4aSRandall Stewart 					/* just looking */
5786139bc87fSRandall Stewart 					m = SCTP_BUF_NEXT(m);
5787f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5788f8829a4aSRandall Stewart 				} else {
5789f8829a4aSRandall Stewart 					/* dispose of the mbuf */
5790b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5791f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5792139bc87fSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
579380fefe0aSRandall Stewart 					}
5794f8829a4aSRandall Stewart 					sctp_sbfree(control, stcb, &so->so_rcv, m);
5795b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5796f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5797f8829a4aSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
579880fefe0aSRandall Stewart 					}
5799f8829a4aSRandall Stewart 					copied_so_far += cp_len;
580058e6eeefSMichael Tuexen 					freed_so_far += (uint32_t)cp_len;
5801c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
580218e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5803f8829a4aSRandall Stewart 					control->data = sctp_m_free(m);
5804f8829a4aSRandall Stewart 					m = control->data;
5805b7b84c0eSMichael Tuexen 					/*
5806b7b84c0eSMichael Tuexen 					 * been through it all, must hold sb
5807b7b84c0eSMichael Tuexen 					 * lock ok to null tail
5808b7b84c0eSMichael Tuexen 					 */
5809f8829a4aSRandall Stewart 					if (control->data == NULL) {
5810a5d547adSRandall Stewart #ifdef INVARIANTS
5811f8829a4aSRandall Stewart 						if ((control->end_added == 0) ||
5812f8829a4aSRandall Stewart 						    (TAILQ_NEXT(control, next) == NULL)) {
5813f8829a4aSRandall Stewart 							/*
5814f8829a4aSRandall Stewart 							 * If the end is not
5815f8829a4aSRandall Stewart 							 * added, OR the
5816f8829a4aSRandall Stewart 							 * next is NOT null
5817f8829a4aSRandall Stewart 							 * we MUST have the
5818f8829a4aSRandall Stewart 							 * lock.
5819f8829a4aSRandall Stewart 							 */
5820f8829a4aSRandall Stewart 							if (mtx_owned(&inp->inp_rdata_mtx) == 0) {
5821f8829a4aSRandall Stewart 								panic("Hmm we don't own the lock?");
5822f8829a4aSRandall Stewart 							}
5823f8829a4aSRandall Stewart 						}
5824f8829a4aSRandall Stewart #endif
5825f8829a4aSRandall Stewart 						control->tail_mbuf = NULL;
5826a5d547adSRandall Stewart #ifdef INVARIANTS
5827f8829a4aSRandall Stewart 						if ((control->end_added) && ((out_flags & MSG_EOR) == 0)) {
5828f8829a4aSRandall Stewart 							panic("end_added, nothing left and no MSG_EOR");
5829f8829a4aSRandall Stewart 						}
5830f8829a4aSRandall Stewart #endif
5831f8829a4aSRandall Stewart 					}
5832f8829a4aSRandall Stewart 				}
5833f8829a4aSRandall Stewart 			} else {
5834f8829a4aSRandall Stewart 				/* Do we need to trim the mbuf? */
5835139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5836f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5837f8829a4aSRandall Stewart 				}
5838f8829a4aSRandall Stewart 				if ((in_flags & MSG_PEEK) == 0) {
5839139bc87fSRandall Stewart 					SCTP_BUF_RESV_UF(m, cp_len);
584058e6eeefSMichael Tuexen 					SCTP_BUF_LEN(m) -= (int)cp_len;
5841b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
584258e6eeefSMichael Tuexen 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, (int)cp_len);
584380fefe0aSRandall Stewart 					}
58444e88d37aSMichael Tuexen 					atomic_subtract_int(&so->so_rcv.sb_cc, cp_len);
58450696e120SRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
58460696e120SRandall Stewart 					    stcb) {
58474e88d37aSMichael Tuexen 						atomic_subtract_int(&stcb->asoc.sb_cc, cp_len);
5848f8829a4aSRandall Stewart 					}
5849f8829a4aSRandall Stewart 					copied_so_far += cp_len;
585058e6eeefSMichael Tuexen 					freed_so_far += (uint32_t)cp_len;
5851c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
5852b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5853f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb,
5854f8829a4aSRandall Stewart 						    SCTP_LOG_SBRESULT, 0);
585580fefe0aSRandall Stewart 					}
585618e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5857f8829a4aSRandall Stewart 				} else {
5858f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5859f8829a4aSRandall Stewart 				}
5860f8829a4aSRandall Stewart 			}
5861d61a0ae0SRandall Stewart 			if ((out_flags & MSG_EOR) || (uio->uio_resid == 0)) {
5862f8829a4aSRandall Stewart 				break;
5863f8829a4aSRandall Stewart 			}
5864f8829a4aSRandall Stewart 			if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5865f8829a4aSRandall Stewart 			    (control->do_not_ref_stcb == 0) &&
5866f8829a4aSRandall Stewart 			    (freed_so_far >= rwnd_req)) {
5867f8829a4aSRandall Stewart 				sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5868f8829a4aSRandall Stewart 			}
5869f8829a4aSRandall Stewart 		}		/* end while(m) */
5870f8829a4aSRandall Stewart 		/*
5871f8829a4aSRandall Stewart 		 * At this point we have looked at it all and we either have
5872f8829a4aSRandall Stewart 		 * a MSG_EOR/or read all the user wants... <OR>
5873f8829a4aSRandall Stewart 		 * control->length == 0.
5874f8829a4aSRandall Stewart 		 */
5875d61a0ae0SRandall Stewart 		if ((out_flags & MSG_EOR) && ((in_flags & MSG_PEEK) == 0)) {
5876f8829a4aSRandall Stewart 			/* we are done with this control */
5877f8829a4aSRandall Stewart 			if (control->length == 0) {
5878f8829a4aSRandall Stewart 				if (control->data) {
5879a5d547adSRandall Stewart #ifdef INVARIANTS
5880f8829a4aSRandall Stewart 					panic("control->data not null at read eor?");
5881f8829a4aSRandall Stewart #else
5882ad81507eSRandall Stewart 					SCTP_PRINTF("Strange, data left in the control buffer .. invarients would panic?\n");
5883f8829a4aSRandall Stewart 					sctp_m_freem(control->data);
5884f8829a4aSRandall Stewart 					control->data = NULL;
5885f8829a4aSRandall Stewart #endif
5886f8829a4aSRandall Stewart 				}
5887f8829a4aSRandall Stewart 		done_with_control:
5888f8829a4aSRandall Stewart 				if (hold_rlock == 0) {
5889f8829a4aSRandall Stewart 					SCTP_INP_READ_LOCK(inp);
5890f8829a4aSRandall Stewart 					hold_rlock = 1;
5891f8829a4aSRandall Stewart 				}
5892f8829a4aSRandall Stewart 				TAILQ_REMOVE(&inp->read_queue, control, next);
5893f8829a4aSRandall Stewart 				/* Add back any hiddend data */
5894f8829a4aSRandall Stewart 				if (control->held_length) {
5895f8829a4aSRandall Stewart 					held_length = 0;
5896f8829a4aSRandall Stewart 					control->held_length = 0;
5897f8829a4aSRandall Stewart 					wakeup_read_socket = 1;
5898f8829a4aSRandall Stewart 				}
589917205eccSRandall Stewart 				if (control->aux_data) {
590017205eccSRandall Stewart 					sctp_m_free(control->aux_data);
590117205eccSRandall Stewart 					control->aux_data = NULL;
590217205eccSRandall Stewart 				}
5903f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5904f8829a4aSRandall Stewart 				sctp_free_remote_addr(control->whoFrom);
5905f8829a4aSRandall Stewart 				control->data = NULL;
590698d5fd97SMichael Tuexen #ifdef INVARIANTS
590744249214SRandall Stewart 				if (control->on_strm_q) {
590844249214SRandall Stewart 					panic("About to free ctl:%p so:%p and its in %d",
590944249214SRandall Stewart 					    control, so, control->on_strm_q);
591044249214SRandall Stewart 				}
591198d5fd97SMichael Tuexen #endif
5912f8829a4aSRandall Stewart 				sctp_free_a_readq(stcb, control);
5913f8829a4aSRandall Stewart 				control = NULL;
59140696e120SRandall Stewart 				if ((freed_so_far >= rwnd_req) &&
59150696e120SRandall Stewart 				    (no_rcv_needed == 0))
5916f8829a4aSRandall Stewart 					sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5917f8829a4aSRandall Stewart 
5918f8829a4aSRandall Stewart 			} else {
5919f8829a4aSRandall Stewart 				/*
5920f8829a4aSRandall Stewart 				 * The user did not read all of this
5921f8829a4aSRandall Stewart 				 * message, turn off the returned MSG_EOR
5922f8829a4aSRandall Stewart 				 * since we are leaving more behind on the
5923f8829a4aSRandall Stewart 				 * control to read.
5924f8829a4aSRandall Stewart 				 */
5925a5d547adSRandall Stewart #ifdef INVARIANTS
59260696e120SRandall Stewart 				if (control->end_added &&
59270696e120SRandall Stewart 				    (control->data == NULL) &&
5928f8829a4aSRandall Stewart 				    (control->tail_mbuf == NULL)) {
5929f8829a4aSRandall Stewart 					panic("Gak, control->length is corrupt?");
5930f8829a4aSRandall Stewart 				}
5931f8829a4aSRandall Stewart #endif
5932f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5933f8829a4aSRandall Stewart 				out_flags &= ~MSG_EOR;
5934f8829a4aSRandall Stewart 			}
5935f8829a4aSRandall Stewart 		}
5936f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
5937f8829a4aSRandall Stewart 			goto release;
5938f8829a4aSRandall Stewart 		}
5939f8829a4aSRandall Stewart 		if ((uio->uio_resid == 0) ||
594004aab884SMichael Tuexen 		    ((in_eeor_mode) &&
594143ecbff2SMichael Tuexen 		    (copied_so_far >= max(so->so_rcv.sb_lowat, 1)))) {
5942f8829a4aSRandall Stewart 			goto release;
5943f8829a4aSRandall Stewart 		}
5944f8829a4aSRandall Stewart 		/*
5945f8829a4aSRandall Stewart 		 * If I hit here the receiver wants more and this message is
5946f8829a4aSRandall Stewart 		 * NOT done (pd-api). So two questions. Can we block? if not
5947f8829a4aSRandall Stewart 		 * we are done. Did the user NOT set MSG_WAITALL?
5948f8829a4aSRandall Stewart 		 */
5949f8829a4aSRandall Stewart 		if (block_allowed == 0) {
5950f8829a4aSRandall Stewart 			goto release;
5951f8829a4aSRandall Stewart 		}
5952f8829a4aSRandall Stewart 		/*
5953f8829a4aSRandall Stewart 		 * We need to wait for more data a few things: - We don't
5954f8829a4aSRandall Stewart 		 * sbunlock() so we don't get someone else reading. - We
5955f8829a4aSRandall Stewart 		 * must be sure to account for the case where what is added
5956f8829a4aSRandall Stewart 		 * is NOT to our control when we wakeup.
5957f8829a4aSRandall Stewart 		 */
5958f8829a4aSRandall Stewart 
5959f8829a4aSRandall Stewart 		/*
5960f8829a4aSRandall Stewart 		 * Do we need to tell the transport a rwnd update might be
5961f8829a4aSRandall Stewart 		 * needed before we go to sleep?
5962f8829a4aSRandall Stewart 		 */
5963f8829a4aSRandall Stewart 		if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5964f8829a4aSRandall Stewart 		    ((freed_so_far >= rwnd_req) &&
5965f8829a4aSRandall Stewart 		    (control->do_not_ref_stcb == 0) &&
5966f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))) {
5967f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5968f8829a4aSRandall Stewart 		}
5969f8829a4aSRandall Stewart wait_some_more:
597044b7479bSRandall Stewart 		if (so->so_rcv.sb_state & SBS_CANTRCVMORE) {
5971f8829a4aSRandall Stewart 			goto release;
5972f8829a4aSRandall Stewart 		}
59730053ed28SMichael Tuexen 
5974f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)
5975f8829a4aSRandall Stewart 			goto release;
5976f8829a4aSRandall Stewart 
5977f8829a4aSRandall Stewart 		if (hold_rlock == 1) {
5978f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5979f8829a4aSRandall Stewart 			hold_rlock = 0;
5980f8829a4aSRandall Stewart 		}
5981f8829a4aSRandall Stewart 		if (hold_sblock == 0) {
5982f8829a4aSRandall Stewart 			SOCKBUF_LOCK(&so->so_rcv);
5983f8829a4aSRandall Stewart 			hold_sblock = 1;
5984f8829a4aSRandall Stewart 		}
5985851b7298SRandall Stewart 		if ((copied_so_far) && (control->length == 0) &&
5986b5c16493SMichael Tuexen 		    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE))) {
5987851b7298SRandall Stewart 			goto release;
5988851b7298SRandall Stewart 		}
59894e88d37aSMichael Tuexen 		if (so->so_rcv.sb_cc <= control->held_length) {
5990f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5991f8829a4aSRandall Stewart 			if (error) {
5992f8829a4aSRandall Stewart 				goto release;
5993f8829a4aSRandall Stewart 			}
5994f8829a4aSRandall Stewart 			control->held_length = 0;
5995f8829a4aSRandall Stewart 		}
5996f8829a4aSRandall Stewart 		if (hold_sblock) {
5997f8829a4aSRandall Stewart 			SOCKBUF_UNLOCK(&so->so_rcv);
5998f8829a4aSRandall Stewart 			hold_sblock = 0;
5999f8829a4aSRandall Stewart 		}
6000f8829a4aSRandall Stewart 		if (control->length == 0) {
6001f8829a4aSRandall Stewart 			/* still nothing here */
6002f8829a4aSRandall Stewart 			if (control->end_added == 1) {
6003f8829a4aSRandall Stewart 				/* he aborted, or is done i.e.did a shutdown */
6004f8829a4aSRandall Stewart 				out_flags |= MSG_EOR;
60059a6142d8SRandall Stewart 				if (control->pdapi_aborted) {
60066114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
6007ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
60089a6142d8SRandall Stewart 
600903b0b021SRandall Stewart 					out_flags |= MSG_TRUNC;
60109a6142d8SRandall Stewart 				} else {
60116114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
6012ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
60139a6142d8SRandall Stewart 				}
6014f8829a4aSRandall Stewart 				goto done_with_control;
6015f8829a4aSRandall Stewart 			}
60164e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc > held_length) {
60174e88d37aSMichael Tuexen 				control->held_length = so->so_rcv.sb_cc;
6018f8829a4aSRandall Stewart 				held_length = 0;
6019f8829a4aSRandall Stewart 			}
6020f8829a4aSRandall Stewart 			goto wait_some_more;
6021f8829a4aSRandall Stewart 		} else if (control->data == NULL) {
602250cec919SRandall Stewart 			/*
602350cec919SRandall Stewart 			 * we must re-sync since data is probably being
602450cec919SRandall Stewart 			 * added
602550cec919SRandall Stewart 			 */
602650cec919SRandall Stewart 			SCTP_INP_READ_LOCK(inp);
602750cec919SRandall Stewart 			if ((control->length > 0) && (control->data == NULL)) {
6028b7b84c0eSMichael Tuexen 				/*
6029b7b84c0eSMichael Tuexen 				 * big trouble.. we have the lock and its
6030b7b84c0eSMichael Tuexen 				 * corrupt?
6031b7b84c0eSMichael Tuexen 				 */
60329c04b296SRandall Stewart #ifdef INVARIANTS
60339d18771fSRandall Stewart 				panic("Impossible data==NULL length !=0");
60349c04b296SRandall Stewart #endif
60359c04b296SRandall Stewart 				out_flags |= MSG_EOR;
60369c04b296SRandall Stewart 				out_flags |= MSG_TRUNC;
60379c04b296SRandall Stewart 				control->length = 0;
60389c04b296SRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
60399c04b296SRandall Stewart 				goto done_with_control;
6040f8829a4aSRandall Stewart 			}
604150cec919SRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
604250cec919SRandall Stewart 			/* We will fall around to get more data */
604350cec919SRandall Stewart 		}
6044f8829a4aSRandall Stewart 		goto get_more_data;
6045f8829a4aSRandall Stewart 	} else {
604617205eccSRandall Stewart 		/*-
604717205eccSRandall Stewart 		 * Give caller back the mbuf chain,
604817205eccSRandall Stewart 		 * store in uio_resid the length
6049f8829a4aSRandall Stewart 		 */
605017205eccSRandall Stewart 		wakeup_read_socket = 0;
6051f8829a4aSRandall Stewart 		if ((control->end_added == 0) ||
6052f8829a4aSRandall Stewart 		    (TAILQ_NEXT(control, next) == NULL)) {
6053f8829a4aSRandall Stewart 			/* Need to get rlock */
6054f8829a4aSRandall Stewart 			if (hold_rlock == 0) {
6055f8829a4aSRandall Stewart 				SCTP_INP_READ_LOCK(inp);
6056f8829a4aSRandall Stewart 				hold_rlock = 1;
6057f8829a4aSRandall Stewart 			}
6058f8829a4aSRandall Stewart 		}
6059139bc87fSRandall Stewart 		if (control->end_added) {
6060f8829a4aSRandall Stewart 			out_flags |= MSG_EOR;
606160990c0cSMichael Tuexen 			if ((control->do_not_ref_stcb == 0) &&
606260990c0cSMichael Tuexen 			    (control->stcb != NULL) &&
606360990c0cSMichael Tuexen 			    ((control->spec_flags & M_NOTIFICATION) == 0))
6064ee7f9857SRandall Stewart 				control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
6065f8829a4aSRandall Stewart 		}
6066139bc87fSRandall Stewart 		if (control->spec_flags & M_NOTIFICATION) {
6067f8829a4aSRandall Stewart 			out_flags |= MSG_NOTIFICATION;
6068f8829a4aSRandall Stewart 		}
606917205eccSRandall Stewart 		uio->uio_resid = control->length;
6070f8829a4aSRandall Stewart 		*mp = control->data;
6071f8829a4aSRandall Stewart 		m = control->data;
6072f8829a4aSRandall Stewart 		while (m) {
6073b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
6074f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
6075139bc87fSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
607680fefe0aSRandall Stewart 			}
6077f8829a4aSRandall Stewart 			sctp_sbfree(control, stcb, &so->so_rcv, m);
607858e6eeefSMichael Tuexen 			freed_so_far += (uint32_t)SCTP_BUF_LEN(m);
6079c4739e2fSRandall Stewart 			freed_so_far += MSIZE;
6080b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
6081f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
6082f8829a4aSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
608380fefe0aSRandall Stewart 			}
6084139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
6085f8829a4aSRandall Stewart 		}
6086f8829a4aSRandall Stewart 		control->data = control->tail_mbuf = NULL;
6087f8829a4aSRandall Stewart 		control->length = 0;
6088f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
6089f8829a4aSRandall Stewart 			/* Done with this control */
6090f8829a4aSRandall Stewart 			goto done_with_control;
6091f8829a4aSRandall Stewart 		}
6092f8829a4aSRandall Stewart 	}
6093f8829a4aSRandall Stewart release:
6094f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6095f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6096f8829a4aSRandall Stewart 		hold_rlock = 0;
6097f8829a4aSRandall Stewart 	}
60987abab911SRobert Watson 	if (hold_sblock == 1) {
60997abab911SRobert Watson 		SOCKBUF_UNLOCK(&so->so_rcv);
61007abab911SRobert Watson 		hold_sblock = 0;
6101f8829a4aSRandall Stewart 	}
61020053ed28SMichael Tuexen 
6103f8829a4aSRandall Stewart 	sbunlock(&so->so_rcv);
61047abab911SRobert Watson 	sockbuf_lock = 0;
6105f8829a4aSRandall Stewart 
6106f8829a4aSRandall Stewart release_unlocked:
6107f8829a4aSRandall Stewart 	if (hold_sblock) {
6108f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6109f8829a4aSRandall Stewart 		hold_sblock = 0;
6110f8829a4aSRandall Stewart 	}
6111f8829a4aSRandall Stewart 	if ((stcb) && (in_flags & MSG_PEEK) == 0) {
6112f8829a4aSRandall Stewart 		if ((freed_so_far >= rwnd_req) &&
6113f8829a4aSRandall Stewart 		    (control && (control->do_not_ref_stcb == 0)) &&
6114f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))
6115f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
6116f8829a4aSRandall Stewart 	}
6117f8829a4aSRandall Stewart out:
61181b9f62a0SRandall Stewart 	if (msg_flags) {
61191b9f62a0SRandall Stewart 		*msg_flags = out_flags;
61201b9f62a0SRandall Stewart 	}
61219a6142d8SRandall Stewart 	if (((out_flags & MSG_EOR) == 0) &&
61229a6142d8SRandall Stewart 	    ((in_flags & MSG_PEEK) == 0) &&
61239a6142d8SRandall Stewart 	    (sinfo) &&
6124e2e7c62eSMichael Tuexen 	    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
6125e2e7c62eSMichael Tuexen 	    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO))) {
61269a6142d8SRandall Stewart 		struct sctp_extrcvinfo *s_extra;
61279a6142d8SRandall Stewart 
61289a6142d8SRandall Stewart 		s_extra = (struct sctp_extrcvinfo *)sinfo;
6129b70b526dSMichael Tuexen 		s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
61309a6142d8SRandall Stewart 	}
6131f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6132f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6133f8829a4aSRandall Stewart 	}
6134f8829a4aSRandall Stewart 	if (hold_sblock) {
6135f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6136f8829a4aSRandall Stewart 	}
61377abab911SRobert Watson 	if (sockbuf_lock) {
61387abab911SRobert Watson 		sbunlock(&so->so_rcv);
61397abab911SRobert Watson 	}
61400053ed28SMichael Tuexen 
614150cec919SRandall Stewart 	if (freecnt_applied) {
6142f8829a4aSRandall Stewart 		/*
6143f8829a4aSRandall Stewart 		 * The lock on the socket buffer protects us so the free
6144f8829a4aSRandall Stewart 		 * code will stop. But since we used the socketbuf lock and
6145f8829a4aSRandall Stewart 		 * the sender uses the tcb_lock to increment, we need to use
6146f8829a4aSRandall Stewart 		 * the atomic add to the refcnt.
6147f8829a4aSRandall Stewart 		 */
614850cec919SRandall Stewart 		if (stcb == NULL) {
6149df6e0cc3SRandall Stewart #ifdef INVARIANTS
615050cec919SRandall Stewart 			panic("stcb for refcnt has gone NULL?");
6151df6e0cc3SRandall Stewart 			goto stage_left;
6152df6e0cc3SRandall Stewart #else
6153df6e0cc3SRandall Stewart 			goto stage_left;
6154df6e0cc3SRandall Stewart #endif
615550cec919SRandall Stewart 		}
6156f8829a4aSRandall Stewart 		/* Save the value back for next time */
6157f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = freed_so_far;
6158cf46caceSMichael Tuexen 		atomic_add_int(&stcb->asoc.refcnt, -1);
6159f8829a4aSRandall Stewart 	}
6160b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
6161f8829a4aSRandall Stewart 		if (stcb) {
6162f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6163f8829a4aSRandall Stewart 			    freed_so_far,
61649a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6165f8829a4aSRandall Stewart 			    stcb->asoc.my_rwnd,
61664e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6167f8829a4aSRandall Stewart 		} else {
6168f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6169f8829a4aSRandall Stewart 			    freed_so_far,
61709a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6171f8829a4aSRandall Stewart 			    0,
61724e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6173f8829a4aSRandall Stewart 		}
617480fefe0aSRandall Stewart 	}
6175df6e0cc3SRandall Stewart stage_left:
6176f8829a4aSRandall Stewart 	if (wakeup_read_socket) {
6177f8829a4aSRandall Stewart 		sctp_sorwakeup(inp, so);
6178f8829a4aSRandall Stewart 	}
6179f8829a4aSRandall Stewart 	return (error);
6180f8829a4aSRandall Stewart }
6181f8829a4aSRandall Stewart 
6182f8829a4aSRandall Stewart 
6183f8829a4aSRandall Stewart #ifdef SCTP_MBUF_LOGGING
6184f8829a4aSRandall Stewart struct mbuf *
6185f8829a4aSRandall Stewart sctp_m_free(struct mbuf *m)
6186f8829a4aSRandall Stewart {
6187b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBUF_LOGGING_ENABLE) {
6188f8829a4aSRandall Stewart 		sctp_log_mb(m, SCTP_MBUF_IFREE);
6189f8829a4aSRandall Stewart 	}
6190f8829a4aSRandall Stewart 	return (m_free(m));
6191f8829a4aSRandall Stewart }
6192f8829a4aSRandall Stewart 
6193f8829a4aSRandall Stewart void
6194f8829a4aSRandall Stewart sctp_m_freem(struct mbuf *mb)
6195f8829a4aSRandall Stewart {
6196f8829a4aSRandall Stewart 	while (mb != NULL)
6197f8829a4aSRandall Stewart 		mb = sctp_m_free(mb);
6198f8829a4aSRandall Stewart }
6199f8829a4aSRandall Stewart 
6200f8829a4aSRandall Stewart #endif
6201f8829a4aSRandall Stewart 
620242551e99SRandall Stewart int
620342551e99SRandall Stewart sctp_dynamic_set_primary(struct sockaddr *sa, uint32_t vrf_id)
620442551e99SRandall Stewart {
620542551e99SRandall Stewart 	/*
620642551e99SRandall Stewart 	 * Given a local address. For all associations that holds the
620742551e99SRandall Stewart 	 * address, request a peer-set-primary.
620842551e99SRandall Stewart 	 */
620942551e99SRandall Stewart 	struct sctp_ifa *ifa;
621042551e99SRandall Stewart 	struct sctp_laddr *wi;
621142551e99SRandall Stewart 
621242551e99SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, 0);
621342551e99SRandall Stewart 	if (ifa == NULL) {
6214c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EADDRNOTAVAIL);
621542551e99SRandall Stewart 		return (EADDRNOTAVAIL);
621642551e99SRandall Stewart 	}
621742551e99SRandall Stewart 	/*
621842551e99SRandall Stewart 	 * Now that we have the ifa we must awaken the iterator with this
621942551e99SRandall Stewart 	 * message.
622042551e99SRandall Stewart 	 */
6221b3f1ea41SRandall Stewart 	wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
622242551e99SRandall Stewart 	if (wi == NULL) {
6223c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
622442551e99SRandall Stewart 		return (ENOMEM);
622542551e99SRandall Stewart 	}
622642551e99SRandall Stewart 	/* Now incr the count and int wi structure */
622742551e99SRandall Stewart 	SCTP_INCR_LADDR_COUNT();
62285ba7f91fSMichael Tuexen 	memset(wi, 0, sizeof(*wi));
6229d61a0ae0SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
623042551e99SRandall Stewart 	wi->ifa = ifa;
623142551e99SRandall Stewart 	wi->action = SCTP_SET_PRIM_ADDR;
623242551e99SRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
623342551e99SRandall Stewart 
623442551e99SRandall Stewart 	/* Now add it to the work queue */
6235f7517433SRandall Stewart 	SCTP_WQ_ADDR_LOCK();
623642551e99SRandall Stewart 	/*
623742551e99SRandall Stewart 	 * Should this really be a tailq? As it is we will process the
623842551e99SRandall Stewart 	 * newest first :-0
623942551e99SRandall Stewart 	 */
6240b3f1ea41SRandall Stewart 	LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
624142551e99SRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
624242551e99SRandall Stewart 	    (struct sctp_inpcb *)NULL,
624342551e99SRandall Stewart 	    (struct sctp_tcb *)NULL,
624442551e99SRandall Stewart 	    (struct sctp_nets *)NULL);
62452c62ba73SMichael Tuexen 	SCTP_WQ_ADDR_UNLOCK();
624642551e99SRandall Stewart 	return (0);
624742551e99SRandall Stewart }
624842551e99SRandall Stewart 
624942551e99SRandall Stewart 
6250f8829a4aSRandall Stewart int
625117205eccSRandall Stewart sctp_soreceive(struct socket *so,
625217205eccSRandall Stewart     struct sockaddr **psa,
625317205eccSRandall Stewart     struct uio *uio,
625417205eccSRandall Stewart     struct mbuf **mp0,
625517205eccSRandall Stewart     struct mbuf **controlp,
625617205eccSRandall Stewart     int *flagsp)
6257f8829a4aSRandall Stewart {
6258f8829a4aSRandall Stewart 	int error, fromlen;
6259f8829a4aSRandall Stewart 	uint8_t sockbuf[256];
6260f8829a4aSRandall Stewart 	struct sockaddr *from;
6261f8829a4aSRandall Stewart 	struct sctp_extrcvinfo sinfo;
6262f8829a4aSRandall Stewart 	int filling_sinfo = 1;
626346bf534cSMichael Tuexen 	int flags;
6264f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
6265f8829a4aSRandall Stewart 
6266f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
6267f8829a4aSRandall Stewart 	/* pickup the assoc we are reading from */
6268f8829a4aSRandall Stewart 	if (inp == NULL) {
6269c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6270f8829a4aSRandall Stewart 		return (EINVAL);
6271f8829a4aSRandall Stewart 	}
6272e2e7c62eSMichael Tuexen 	if ((sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT) &&
6273e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVRCVINFO) &&
6274e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) ||
6275f8829a4aSRandall Stewart 	    (controlp == NULL)) {
6276f8829a4aSRandall Stewart 		/* user does not want the sndrcv ctl */
6277f8829a4aSRandall Stewart 		filling_sinfo = 0;
6278f8829a4aSRandall Stewart 	}
6279f8829a4aSRandall Stewart 	if (psa) {
6280f8829a4aSRandall Stewart 		from = (struct sockaddr *)sockbuf;
6281f8829a4aSRandall Stewart 		fromlen = sizeof(sockbuf);
6282f8829a4aSRandall Stewart 		from->sa_len = 0;
6283f8829a4aSRandall Stewart 	} else {
6284f8829a4aSRandall Stewart 		from = NULL;
6285f8829a4aSRandall Stewart 		fromlen = 0;
6286f8829a4aSRandall Stewart 	}
6287f8829a4aSRandall Stewart 
6288e432298aSXin LI 	if (filling_sinfo) {
6289e432298aSXin LI 		memset(&sinfo, 0, sizeof(struct sctp_extrcvinfo));
6290e432298aSXin LI 	}
629146bf534cSMichael Tuexen 	if (flagsp != NULL) {
629246bf534cSMichael Tuexen 		flags = *flagsp;
629346bf534cSMichael Tuexen 	} else {
629446bf534cSMichael Tuexen 		flags = 0;
629546bf534cSMichael Tuexen 	}
629646bf534cSMichael Tuexen 	error = sctp_sorecvmsg(so, uio, mp0, from, fromlen, &flags,
6297f8829a4aSRandall Stewart 	    (struct sctp_sndrcvinfo *)&sinfo, filling_sinfo);
629846bf534cSMichael Tuexen 	if (flagsp != NULL) {
629946bf534cSMichael Tuexen 		*flagsp = flags;
630046bf534cSMichael Tuexen 	}
6301e432298aSXin LI 	if (controlp != NULL) {
6302f8829a4aSRandall Stewart 		/* copy back the sinfo in a CMSG format */
630346bf534cSMichael Tuexen 		if (filling_sinfo && ((flags & MSG_NOTIFICATION) == 0)) {
6304f8829a4aSRandall Stewart 			*controlp = sctp_build_ctl_nchunk(inp,
6305f8829a4aSRandall Stewart 			    (struct sctp_sndrcvinfo *)&sinfo);
630646bf534cSMichael Tuexen 		} else {
6307f8829a4aSRandall Stewart 			*controlp = NULL;
6308f8829a4aSRandall Stewart 		}
630946bf534cSMichael Tuexen 	}
6310f8829a4aSRandall Stewart 	if (psa) {
6311f8829a4aSRandall Stewart 		/* copy back the address info */
6312f8829a4aSRandall Stewart 		if (from && from->sa_len) {
6313f8829a4aSRandall Stewart 			*psa = sodupsockaddr(from, M_NOWAIT);
6314f8829a4aSRandall Stewart 		} else {
6315f8829a4aSRandall Stewart 			*psa = NULL;
6316f8829a4aSRandall Stewart 		}
6317f8829a4aSRandall Stewart 	}
6318f8829a4aSRandall Stewart 	return (error);
6319f8829a4aSRandall Stewart }
632017205eccSRandall Stewart 
632117205eccSRandall Stewart 
632217205eccSRandall Stewart 
632317205eccSRandall Stewart 
632417205eccSRandall Stewart 
632517205eccSRandall Stewart int
6326d61a0ae0SRandall Stewart sctp_connectx_helper_add(struct sctp_tcb *stcb, struct sockaddr *addr,
6327d61a0ae0SRandall Stewart     int totaddr, int *error)
632817205eccSRandall Stewart {
632917205eccSRandall Stewart 	int added = 0;
633017205eccSRandall Stewart 	int i;
633117205eccSRandall Stewart 	struct sctp_inpcb *inp;
633217205eccSRandall Stewart 	struct sockaddr *sa;
633317205eccSRandall Stewart 	size_t incr = 0;
633492776dfdSMichael Tuexen #ifdef INET
633592776dfdSMichael Tuexen 	struct sockaddr_in *sin;
633692776dfdSMichael Tuexen #endif
633792776dfdSMichael Tuexen #ifdef INET6
633892776dfdSMichael Tuexen 	struct sockaddr_in6 *sin6;
633992776dfdSMichael Tuexen #endif
634092776dfdSMichael Tuexen 
634117205eccSRandall Stewart 	sa = addr;
634217205eccSRandall Stewart 	inp = stcb->sctp_ep;
634317205eccSRandall Stewart 	*error = 0;
634417205eccSRandall Stewart 	for (i = 0; i < totaddr; i++) {
6345ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6346ea5eba11SMichael Tuexen #ifdef INET
6347ea5eba11SMichael Tuexen 		case AF_INET:
634817205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in);
634992776dfdSMichael Tuexen 			sin = (struct sockaddr_in *)sa;
635092776dfdSMichael Tuexen 			if ((sin->sin_addr.s_addr == INADDR_ANY) ||
635192776dfdSMichael Tuexen 			    (sin->sin_addr.s_addr == INADDR_BROADCAST) ||
635292776dfdSMichael Tuexen 			    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
635392776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6354ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6355ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_7);
635692776dfdSMichael Tuexen 				*error = EINVAL;
635792776dfdSMichael Tuexen 				goto out_now;
635892776dfdSMichael Tuexen 			}
63597154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
63607154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
63617154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
636217205eccSRandall Stewart 				/* assoc gone no un-lock */
6363c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6364ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6365ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_8);
636617205eccSRandall Stewart 				*error = ENOBUFS;
636717205eccSRandall Stewart 				goto out_now;
636817205eccSRandall Stewart 			}
636917205eccSRandall Stewart 			added++;
6370ea5eba11SMichael Tuexen 			break;
6371ea5eba11SMichael Tuexen #endif
6372ea5eba11SMichael Tuexen #ifdef INET6
6373ea5eba11SMichael Tuexen 		case AF_INET6:
637417205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in6);
637592776dfdSMichael Tuexen 			sin6 = (struct sockaddr_in6 *)sa;
637692776dfdSMichael Tuexen 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr) ||
637792776dfdSMichael Tuexen 			    IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
637892776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6379ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6380ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_9);
638192776dfdSMichael Tuexen 				*error = EINVAL;
638292776dfdSMichael Tuexen 				goto out_now;
638392776dfdSMichael Tuexen 			}
63847154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
63857154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
63867154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
638717205eccSRandall Stewart 				/* assoc gone no un-lock */
6388c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6389ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6390ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_10);
639117205eccSRandall Stewart 				*error = ENOBUFS;
639217205eccSRandall Stewart 				goto out_now;
639317205eccSRandall Stewart 			}
639417205eccSRandall Stewart 			added++;
6395ea5eba11SMichael Tuexen 			break;
6396ea5eba11SMichael Tuexen #endif
6397ea5eba11SMichael Tuexen 		default:
6398ea5eba11SMichael Tuexen 			break;
639917205eccSRandall Stewart 		}
640017205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
640117205eccSRandall Stewart 	}
640217205eccSRandall Stewart out_now:
640317205eccSRandall Stewart 	return (added);
640417205eccSRandall Stewart }
640517205eccSRandall Stewart 
6406fc26bf71SMichael Tuexen int
6407d61a0ae0SRandall Stewart sctp_connectx_helper_find(struct sctp_inpcb *inp, struct sockaddr *addr,
6408fc26bf71SMichael Tuexen     unsigned int totaddr,
6409fc26bf71SMichael Tuexen     unsigned int *num_v4, unsigned int *num_v6,
6410fc26bf71SMichael Tuexen     unsigned int limit)
641117205eccSRandall Stewart {
641217205eccSRandall Stewart 	struct sockaddr *sa;
6413fc26bf71SMichael Tuexen 	struct sctp_tcb *stcb;
64149a8e3088SMichael Tuexen 	unsigned int incr, at, i;
641517205eccSRandall Stewart 
6416e1949767SMichael Tuexen 	at = 0;
641717205eccSRandall Stewart 	sa = addr;
6418fc26bf71SMichael Tuexen 	*num_v6 = *num_v4 = 0;
641917205eccSRandall Stewart 	/* account and validate addresses */
6420fc26bf71SMichael Tuexen 	if (totaddr == 0) {
6421fc26bf71SMichael Tuexen 		return (EINVAL);
6422fc26bf71SMichael Tuexen 	}
6423fc26bf71SMichael Tuexen 	for (i = 0; i < totaddr; i++) {
6424fc26bf71SMichael Tuexen 		if (at + sizeof(struct sockaddr) > limit) {
6425fc26bf71SMichael Tuexen 			return (EINVAL);
6426fc26bf71SMichael Tuexen 		}
6427ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6428ea5eba11SMichael Tuexen #ifdef INET
6429ea5eba11SMichael Tuexen 		case AF_INET:
6430e1949767SMichael Tuexen 			incr = (unsigned int)sizeof(struct sockaddr_in);
6431d61a0ae0SRandall Stewart 			if (sa->sa_len != incr) {
6432fc26bf71SMichael Tuexen 				return (EINVAL);
6433d61a0ae0SRandall Stewart 			}
64349a8e3088SMichael Tuexen 			(*num_v4) += 1;
6435ea5eba11SMichael Tuexen 			break;
6436ea5eba11SMichael Tuexen #endif
6437ea5eba11SMichael Tuexen #ifdef INET6
6438ea5eba11SMichael Tuexen 		case AF_INET6:
6439ea5eba11SMichael Tuexen 			{
644017205eccSRandall Stewart 				struct sockaddr_in6 *sin6;
644117205eccSRandall Stewart 
644217205eccSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
644317205eccSRandall Stewart 				if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
644417205eccSRandall Stewart 					/* Must be non-mapped for connectx */
6445fc26bf71SMichael Tuexen 					return (EINVAL);
644617205eccSRandall Stewart 				}
6447e1949767SMichael Tuexen 				incr = (unsigned int)sizeof(struct sockaddr_in6);
6448d61a0ae0SRandall Stewart 				if (sa->sa_len != incr) {
6449fc26bf71SMichael Tuexen 					return (EINVAL);
6450d61a0ae0SRandall Stewart 				}
64519a8e3088SMichael Tuexen 				(*num_v6) += 1;
6452ea5eba11SMichael Tuexen 				break;
6453ea5eba11SMichael Tuexen 			}
6454ea5eba11SMichael Tuexen #endif
6455ea5eba11SMichael Tuexen 		default:
6456fc26bf71SMichael Tuexen 			return (EINVAL);
645717205eccSRandall Stewart 		}
6458fc26bf71SMichael Tuexen 		if ((at + incr) > limit) {
6459fc26bf71SMichael Tuexen 			return (EINVAL);
6460ea5eba11SMichael Tuexen 		}
6461d61a0ae0SRandall Stewart 		SCTP_INP_INCR_REF(inp);
646217205eccSRandall Stewart 		stcb = sctp_findassociation_ep_addr(&inp, sa, NULL, NULL, NULL);
646317205eccSRandall Stewart 		if (stcb != NULL) {
6464fc26bf71SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
6465fc26bf71SMichael Tuexen 			return (EALREADY);
6466d61a0ae0SRandall Stewart 		} else {
6467d61a0ae0SRandall Stewart 			SCTP_INP_DECR_REF(inp);
646817205eccSRandall Stewart 		}
6469fc26bf71SMichael Tuexen 		at += incr;
647017205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
647117205eccSRandall Stewart 	}
6472fc26bf71SMichael Tuexen 	return (0);
647317205eccSRandall Stewart }
647435918f85SRandall Stewart 
647535918f85SRandall Stewart /*
647635918f85SRandall Stewart  * sctp_bindx(ADD) for one address.
647735918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
647835918f85SRandall Stewart  */
647935918f85SRandall Stewart void
648035918f85SRandall Stewart sctp_bindx_add_address(struct socket *so, struct sctp_inpcb *inp,
648135918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
648235918f85SRandall Stewart     uint32_t vrf_id, int *error, void *p)
648335918f85SRandall Stewart {
648435918f85SRandall Stewart 	struct sockaddr *addr_touse;
6485d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
648635918f85SRandall Stewart 	struct sockaddr_in sin;
64875e2c2d87SRandall Stewart #endif
64885e2c2d87SRandall Stewart 
648935918f85SRandall Stewart 	/* see if we're bound all already! */
649035918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6491c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
649235918f85SRandall Stewart 		*error = EINVAL;
649335918f85SRandall Stewart 		return;
649435918f85SRandall Stewart 	}
649535918f85SRandall Stewart 	addr_touse = sa;
6496ea5eba11SMichael Tuexen #ifdef INET6
649735918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6498d59107f7SMichael Tuexen #ifdef INET
649935918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
650035918f85SRandall Stewart 
6501d59107f7SMichael Tuexen #endif
650235918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6503c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
650435918f85SRandall Stewart 			*error = EINVAL;
650535918f85SRandall Stewart 			return;
650635918f85SRandall Stewart 		}
6507db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6508db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6509c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6510db4fd95bSRandall Stewart 			*error = EINVAL;
6511db4fd95bSRandall Stewart 			return;
6512db4fd95bSRandall Stewart 		}
6513d59107f7SMichael Tuexen #ifdef INET
651435918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
651535918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6516db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6517db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6518db4fd95bSRandall Stewart 				/* can't bind v4-mapped on PF_INET sockets */
6519c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6520db4fd95bSRandall Stewart 				*error = EINVAL;
6521db4fd95bSRandall Stewart 				return;
6522db4fd95bSRandall Stewart 			}
652335918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
652435918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
652535918f85SRandall Stewart 		}
6526d59107f7SMichael Tuexen #endif
652735918f85SRandall Stewart 	}
652835918f85SRandall Stewart #endif
6529ea5eba11SMichael Tuexen #ifdef INET
653035918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
653135918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6532c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
653335918f85SRandall Stewart 			*error = EINVAL;
653435918f85SRandall Stewart 			return;
653535918f85SRandall Stewart 		}
6536db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6537db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6538db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6539c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6540db4fd95bSRandall Stewart 			*error = EINVAL;
6541db4fd95bSRandall Stewart 			return;
6542db4fd95bSRandall Stewart 		}
654335918f85SRandall Stewart 	}
6544ea5eba11SMichael Tuexen #endif
654535918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
654635918f85SRandall Stewart 		if (p == NULL) {
654735918f85SRandall Stewart 			/* Can't get proc for Net/Open BSD */
6548c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
654935918f85SRandall Stewart 			*error = EINVAL;
655035918f85SRandall Stewart 			return;
655135918f85SRandall Stewart 		}
65521b649582SRandall Stewart 		*error = sctp_inpcb_bind(so, addr_touse, NULL, p);
655335918f85SRandall Stewart 		return;
655435918f85SRandall Stewart 	}
655535918f85SRandall Stewart 	/*
655635918f85SRandall Stewart 	 * No locks required here since bind and mgmt_ep_sa all do their own
655735918f85SRandall Stewart 	 * locking. If we do something for the FIX: below we may need to
655835918f85SRandall Stewart 	 * lock in that case.
655935918f85SRandall Stewart 	 */
656035918f85SRandall Stewart 	if (assoc_id == 0) {
656135918f85SRandall Stewart 		/* add the address */
656235918f85SRandall Stewart 		struct sctp_inpcb *lep;
656397c76f10SRandall Stewart 		struct sockaddr_in *lsin = (struct sockaddr_in *)addr_touse;
656435918f85SRandall Stewart 
656597c76f10SRandall Stewart 		/* validate the incoming port */
656697c76f10SRandall Stewart 		if ((lsin->sin_port != 0) &&
656797c76f10SRandall Stewart 		    (lsin->sin_port != inp->sctp_lport)) {
6568c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
656997c76f10SRandall Stewart 			*error = EINVAL;
657097c76f10SRandall Stewart 			return;
657197c76f10SRandall Stewart 		} else {
657297c76f10SRandall Stewart 			/* user specified 0 port, set it to existing port */
657397c76f10SRandall Stewart 			lsin->sin_port = inp->sctp_lport;
657497c76f10SRandall Stewart 		}
657597c76f10SRandall Stewart 
657635918f85SRandall Stewart 		lep = sctp_pcb_findep(addr_touse, 1, 0, vrf_id);
657735918f85SRandall Stewart 		if (lep != NULL) {
657835918f85SRandall Stewart 			/*
657935918f85SRandall Stewart 			 * We must decrement the refcount since we have the
658035918f85SRandall Stewart 			 * ep already and are binding. No remove going on
658135918f85SRandall Stewart 			 * here.
658235918f85SRandall Stewart 			 */
65836d9e8f2bSRandall Stewart 			SCTP_INP_DECR_REF(lep);
658435918f85SRandall Stewart 		}
658535918f85SRandall Stewart 		if (lep == inp) {
658635918f85SRandall Stewart 			/* already bound to it.. ok */
658735918f85SRandall Stewart 			return;
658835918f85SRandall Stewart 		} else if (lep == NULL) {
658935918f85SRandall Stewart 			((struct sockaddr_in *)addr_touse)->sin_port = 0;
659035918f85SRandall Stewart 			*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
659135918f85SRandall Stewart 			    SCTP_ADD_IP_ADDRESS,
659280fefe0aSRandall Stewart 			    vrf_id, NULL);
659335918f85SRandall Stewart 		} else {
659435918f85SRandall Stewart 			*error = EADDRINUSE;
659535918f85SRandall Stewart 		}
659635918f85SRandall Stewart 		if (*error)
659735918f85SRandall Stewart 			return;
659835918f85SRandall Stewart 	} else {
659935918f85SRandall Stewart 		/*
660035918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
660135918f85SRandall Stewart 		 */
660235918f85SRandall Stewart 	}
660335918f85SRandall Stewart }
660435918f85SRandall Stewart 
660535918f85SRandall Stewart /*
660635918f85SRandall Stewart  * sctp_bindx(DELETE) for one address.
660735918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
660835918f85SRandall Stewart  */
660935918f85SRandall Stewart void
66107215cc1bSMichael Tuexen sctp_bindx_delete_address(struct sctp_inpcb *inp,
661135918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
661235918f85SRandall Stewart     uint32_t vrf_id, int *error)
661335918f85SRandall Stewart {
661435918f85SRandall Stewart 	struct sockaddr *addr_touse;
6615d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
661635918f85SRandall Stewart 	struct sockaddr_in sin;
66175e2c2d87SRandall Stewart #endif
66185e2c2d87SRandall Stewart 
661935918f85SRandall Stewart 	/* see if we're bound all already! */
662035918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6621c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
662235918f85SRandall Stewart 		*error = EINVAL;
662335918f85SRandall Stewart 		return;
662435918f85SRandall Stewart 	}
662535918f85SRandall Stewart 	addr_touse = sa;
6626e0e00a4dSMichael Tuexen #ifdef INET6
662735918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6628d59107f7SMichael Tuexen #ifdef INET
662935918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
6630d59107f7SMichael Tuexen #endif
6631d59107f7SMichael Tuexen 
663235918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6633c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
663435918f85SRandall Stewart 			*error = EINVAL;
663535918f85SRandall Stewart 			return;
663635918f85SRandall Stewart 		}
6637db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6638db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6639c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6640db4fd95bSRandall Stewart 			*error = EINVAL;
6641db4fd95bSRandall Stewart 			return;
6642db4fd95bSRandall Stewart 		}
6643d59107f7SMichael Tuexen #ifdef INET
664435918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
664535918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6646db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6647db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6648db4fd95bSRandall Stewart 				/* can't bind mapped-v4 on PF_INET sockets */
6649c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6650db4fd95bSRandall Stewart 				*error = EINVAL;
6651db4fd95bSRandall Stewart 				return;
6652db4fd95bSRandall Stewart 			}
665335918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
665435918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
665535918f85SRandall Stewart 		}
6656d59107f7SMichael Tuexen #endif
665735918f85SRandall Stewart 	}
665835918f85SRandall Stewart #endif
6659ea5eba11SMichael Tuexen #ifdef INET
666035918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
666135918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6662c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
666335918f85SRandall Stewart 			*error = EINVAL;
666435918f85SRandall Stewart 			return;
666535918f85SRandall Stewart 		}
6666db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6667db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6668db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6669c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6670db4fd95bSRandall Stewart 			*error = EINVAL;
6671db4fd95bSRandall Stewart 			return;
6672db4fd95bSRandall Stewart 		}
667335918f85SRandall Stewart 	}
6674ea5eba11SMichael Tuexen #endif
667535918f85SRandall Stewart 	/*
667635918f85SRandall Stewart 	 * No lock required mgmt_ep_sa does its own locking. If the FIX:
667735918f85SRandall Stewart 	 * below is ever changed we may need to lock before calling
667835918f85SRandall Stewart 	 * association level binding.
667935918f85SRandall Stewart 	 */
668035918f85SRandall Stewart 	if (assoc_id == 0) {
668135918f85SRandall Stewart 		/* delete the address */
668235918f85SRandall Stewart 		*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
668335918f85SRandall Stewart 		    SCTP_DEL_IP_ADDRESS,
668480fefe0aSRandall Stewart 		    vrf_id, NULL);
668535918f85SRandall Stewart 	} else {
668635918f85SRandall Stewart 		/*
668735918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
668835918f85SRandall Stewart 		 */
668935918f85SRandall Stewart 	}
669035918f85SRandall Stewart }
66911b649582SRandall Stewart 
66921b649582SRandall Stewart /*
66931b649582SRandall Stewart  * returns the valid local address count for an assoc, taking into account
66941b649582SRandall Stewart  * all scoping rules
66951b649582SRandall Stewart  */
66961b649582SRandall Stewart int
66971b649582SRandall Stewart sctp_local_addr_count(struct sctp_tcb *stcb)
66981b649582SRandall Stewart {
6699b54ddf22SMichael Tuexen 	int loopback_scope;
6700b54ddf22SMichael Tuexen #if defined(INET)
6701b54ddf22SMichael Tuexen 	int ipv4_local_scope, ipv4_addr_legal;
6702b54ddf22SMichael Tuexen #endif
6703b54ddf22SMichael Tuexen #if defined (INET6)
6704b54ddf22SMichael Tuexen 	int local_scope, site_scope, ipv6_addr_legal;
6705b54ddf22SMichael Tuexen #endif
67061b649582SRandall Stewart 	struct sctp_vrf *vrf;
67071b649582SRandall Stewart 	struct sctp_ifn *sctp_ifn;
67081b649582SRandall Stewart 	struct sctp_ifa *sctp_ifa;
67091b649582SRandall Stewart 	int count = 0;
67101b649582SRandall Stewart 
67111b649582SRandall Stewart 	/* Turn on all the appropriate scopes */
6712a1cb341bSMichael Tuexen 	loopback_scope = stcb->asoc.scope.loopback_scope;
6713b54ddf22SMichael Tuexen #if defined(INET)
6714a1cb341bSMichael Tuexen 	ipv4_local_scope = stcb->asoc.scope.ipv4_local_scope;
6715b54ddf22SMichael Tuexen 	ipv4_addr_legal = stcb->asoc.scope.ipv4_addr_legal;
6716b54ddf22SMichael Tuexen #endif
6717b54ddf22SMichael Tuexen #if defined(INET6)
6718a1cb341bSMichael Tuexen 	local_scope = stcb->asoc.scope.local_scope;
6719a1cb341bSMichael Tuexen 	site_scope = stcb->asoc.scope.site_scope;
6720a1cb341bSMichael Tuexen 	ipv6_addr_legal = stcb->asoc.scope.ipv6_addr_legal;
6721b54ddf22SMichael Tuexen #endif
6722c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
67231b649582SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
67241b649582SRandall Stewart 	if (vrf == NULL) {
67251b649582SRandall Stewart 		/* no vrf, no addresses */
6726c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
67271b649582SRandall Stewart 		return (0);
67281b649582SRandall Stewart 	}
67290053ed28SMichael Tuexen 
67301b649582SRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
67311b649582SRandall Stewart 		/*
67321b649582SRandall Stewart 		 * bound all case: go through all ifns on the vrf
67331b649582SRandall Stewart 		 */
67341b649582SRandall Stewart 		LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
67351b649582SRandall Stewart 			if ((loopback_scope == 0) &&
67361b649582SRandall Stewart 			    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
67371b649582SRandall Stewart 				continue;
67381b649582SRandall Stewart 			}
67391b649582SRandall Stewart 			LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
67401b649582SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa))
67411b649582SRandall Stewart 					continue;
67425e2c2d87SRandall Stewart 				switch (sctp_ifa->address.sa.sa_family) {
6743ea5eba11SMichael Tuexen #ifdef INET
67445e2c2d87SRandall Stewart 				case AF_INET:
67455e2c2d87SRandall Stewart 					if (ipv4_addr_legal) {
67461b649582SRandall Stewart 						struct sockaddr_in *sin;
67471b649582SRandall Stewart 
674824aaac8dSMichael Tuexen 						sin = &sctp_ifa->address.sin;
67491b649582SRandall Stewart 						if (sin->sin_addr.s_addr == 0) {
6750b7b84c0eSMichael Tuexen 							/*
6751b7b84c0eSMichael Tuexen 							 * skip unspecified
6752b7b84c0eSMichael Tuexen 							 * addrs
6753b7b84c0eSMichael Tuexen 							 */
67541b649582SRandall Stewart 							continue;
67551b649582SRandall Stewart 						}
67566ba22f19SMichael Tuexen 						if (prison_check_ip4(stcb->sctp_ep->ip_inp.inp.inp_cred,
67576ba22f19SMichael Tuexen 						    &sin->sin_addr) != 0) {
67586ba22f19SMichael Tuexen 							continue;
67596ba22f19SMichael Tuexen 						}
67601b649582SRandall Stewart 						if ((ipv4_local_scope == 0) &&
67611b649582SRandall Stewart 						    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
67621b649582SRandall Stewart 							continue;
67631b649582SRandall Stewart 						}
67641b649582SRandall Stewart 						/* count this one */
67651b649582SRandall Stewart 						count++;
67665e2c2d87SRandall Stewart 					} else {
67675e2c2d87SRandall Stewart 						continue;
67685e2c2d87SRandall Stewart 					}
67695e2c2d87SRandall Stewart 					break;
6770ea5eba11SMichael Tuexen #endif
67715e2c2d87SRandall Stewart #ifdef INET6
67725e2c2d87SRandall Stewart 				case AF_INET6:
67735e2c2d87SRandall Stewart 					if (ipv6_addr_legal) {
67741b649582SRandall Stewart 						struct sockaddr_in6 *sin6;
67751b649582SRandall Stewart 
677624aaac8dSMichael Tuexen 						sin6 = &sctp_ifa->address.sin6;
67771b649582SRandall Stewart 						if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
67781b649582SRandall Stewart 							continue;
67791b649582SRandall Stewart 						}
67806ba22f19SMichael Tuexen 						if (prison_check_ip6(stcb->sctp_ep->ip_inp.inp.inp_cred,
67816ba22f19SMichael Tuexen 						    &sin6->sin6_addr) != 0) {
67826ba22f19SMichael Tuexen 							continue;
67836ba22f19SMichael Tuexen 						}
67841b649582SRandall Stewart 						if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
67851b649582SRandall Stewart 							if (local_scope == 0)
67861b649582SRandall Stewart 								continue;
67871b649582SRandall Stewart 							if (sin6->sin6_scope_id == 0) {
67881b649582SRandall Stewart 								if (sa6_recoverscope(sin6) != 0)
67891b649582SRandall Stewart 									/*
67905e2c2d87SRandall Stewart 									 *
67915e2c2d87SRandall Stewart 									 * bad
67925b495f17SMichael Tuexen 									 * link
67935e2c2d87SRandall Stewart 									 *
67945b495f17SMichael Tuexen 									 * local
67955e2c2d87SRandall Stewart 									 *
67965b495f17SMichael Tuexen 									 * address
67975b495f17SMichael Tuexen 									 */
67981b649582SRandall Stewart 									continue;
67991b649582SRandall Stewart 							}
68001b649582SRandall Stewart 						}
68011b649582SRandall Stewart 						if ((site_scope == 0) &&
68021b649582SRandall Stewart 						    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
68031b649582SRandall Stewart 							continue;
68041b649582SRandall Stewart 						}
68051b649582SRandall Stewart 						/* count this one */
68061b649582SRandall Stewart 						count++;
68071b649582SRandall Stewart 					}
68085e2c2d87SRandall Stewart 					break;
68095e2c2d87SRandall Stewart #endif
68105e2c2d87SRandall Stewart 				default:
68115e2c2d87SRandall Stewart 					/* TSNH */
68125e2c2d87SRandall Stewart 					break;
68135e2c2d87SRandall Stewart 				}
68141b649582SRandall Stewart 			}
68151b649582SRandall Stewart 		}
68161b649582SRandall Stewart 	} else {
68171b649582SRandall Stewart 		/*
68181b649582SRandall Stewart 		 * subset bound case
68191b649582SRandall Stewart 		 */
68201b649582SRandall Stewart 		struct sctp_laddr *laddr;
68211b649582SRandall Stewart 
68221b649582SRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list,
68231b649582SRandall Stewart 		    sctp_nxt_addr) {
68241b649582SRandall Stewart 			if (sctp_is_addr_restricted(stcb, laddr->ifa)) {
68251b649582SRandall Stewart 				continue;
68261b649582SRandall Stewart 			}
68271b649582SRandall Stewart 			/* count this one */
68281b649582SRandall Stewart 			count++;
68291b649582SRandall Stewart 		}
68301b649582SRandall Stewart 	}
6831c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
68321b649582SRandall Stewart 	return (count);
68331b649582SRandall Stewart }
6834c4739e2fSRandall Stewart 
6835c4739e2fSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF)
6836c4739e2fSRandall Stewart 
6837c4739e2fSRandall Stewart void
6838b27a6b7dSRandall Stewart sctp_log_trace(uint32_t subsys, const char *str SCTP_UNUSED, uint32_t a, uint32_t b, uint32_t c, uint32_t d, uint32_t e, uint32_t f)
6839c4739e2fSRandall Stewart {
6840b27a6b7dSRandall Stewart 	uint32_t saveindex, newindex;
6841c4739e2fSRandall Stewart 
6842c4739e2fSRandall Stewart 	do {
6843b3f1ea41SRandall Stewart 		saveindex = SCTP_BASE_SYSCTL(sctp_log).index;
6844c4739e2fSRandall Stewart 		if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6845c4739e2fSRandall Stewart 			newindex = 1;
6846c4739e2fSRandall Stewart 		} else {
6847c4739e2fSRandall Stewart 			newindex = saveindex + 1;
6848c4739e2fSRandall Stewart 		}
6849b3f1ea41SRandall Stewart 	} while (atomic_cmpset_int(&SCTP_BASE_SYSCTL(sctp_log).index, saveindex, newindex) == 0);
6850c4739e2fSRandall Stewart 	if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6851c4739e2fSRandall Stewart 		saveindex = 0;
6852c4739e2fSRandall Stewart 	}
6853b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].timestamp = SCTP_GET_CYCLECOUNT;
6854b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].subsys = subsys;
6855b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[0] = a;
6856b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[1] = b;
6857b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[2] = c;
6858b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[3] = d;
6859b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[4] = e;
6860b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[5] = f;
6861c4739e2fSRandall Stewart }
6862c4739e2fSRandall Stewart 
6863c4739e2fSRandall Stewart #endif
6864a99b6783SRandall Stewart static void
68657cca1775SRandall Stewart sctp_recv_udp_tunneled_packet(struct mbuf *m, int off, struct inpcb *inp,
686681d3ec17SBryan Venteicher     const struct sockaddr *sa SCTP_UNUSED, void *ctx SCTP_UNUSED)
6867a99b6783SRandall Stewart {
6868a99b6783SRandall Stewart 	struct ip *iph;
68693a51a264SMichael Tuexen #ifdef INET6
68703a51a264SMichael Tuexen 	struct ip6_hdr *ip6;
68713a51a264SMichael Tuexen #endif
6872a99b6783SRandall Stewart 	struct mbuf *sp, *last;
6873a99b6783SRandall Stewart 	struct udphdr *uhdr;
6874285052f0SMichael Tuexen 	uint16_t port;
6875a99b6783SRandall Stewart 
6876a99b6783SRandall Stewart 	if ((m->m_flags & M_PKTHDR) == 0) {
6877a99b6783SRandall Stewart 		/* Can't handle one that is not a pkt hdr */
6878a99b6783SRandall Stewart 		goto out;
6879a99b6783SRandall Stewart 	}
6880285052f0SMichael Tuexen 	/* Pull the src port */
6881a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6882a99b6783SRandall Stewart 	uhdr = (struct udphdr *)((caddr_t)iph + off);
6883a99b6783SRandall Stewart 	port = uhdr->uh_sport;
6884285052f0SMichael Tuexen 	/*
6885285052f0SMichael Tuexen 	 * Split out the mbuf chain. Leave the IP header in m, place the
6886285052f0SMichael Tuexen 	 * rest in the sp.
6887285052f0SMichael Tuexen 	 */
6888eb1b1807SGleb Smirnoff 	sp = m_split(m, off, M_NOWAIT);
6889a99b6783SRandall Stewart 	if (sp == NULL) {
6890a99b6783SRandall Stewart 		/* Gak, drop packet, we can't do a split */
6891a99b6783SRandall Stewart 		goto out;
6892a99b6783SRandall Stewart 	}
6893285052f0SMichael Tuexen 	if (sp->m_pkthdr.len < sizeof(struct udphdr) + sizeof(struct sctphdr)) {
6894285052f0SMichael Tuexen 		/* Gak, packet can't have an SCTP header in it - too small */
6895a99b6783SRandall Stewart 		m_freem(sp);
6896a99b6783SRandall Stewart 		goto out;
6897a99b6783SRandall Stewart 	}
6898285052f0SMichael Tuexen 	/* Now pull up the UDP header and SCTP header together */
6899285052f0SMichael Tuexen 	sp = m_pullup(sp, sizeof(struct udphdr) + sizeof(struct sctphdr));
6900a99b6783SRandall Stewart 	if (sp == NULL) {
6901a99b6783SRandall Stewart 		/* Gak pullup failed */
6902a99b6783SRandall Stewart 		goto out;
6903a99b6783SRandall Stewart 	}
6904285052f0SMichael Tuexen 	/* Trim out the UDP header */
6905a99b6783SRandall Stewart 	m_adj(sp, sizeof(struct udphdr));
6906a99b6783SRandall Stewart 
6907a99b6783SRandall Stewart 	/* Now reconstruct the mbuf chain */
6908285052f0SMichael Tuexen 	for (last = m; last->m_next; last = last->m_next);
6909a99b6783SRandall Stewart 	last->m_next = sp;
6910a99b6783SRandall Stewart 	m->m_pkthdr.len += sp->m_pkthdr.len;
691152f175beSMichael Tuexen 	/*
691252f175beSMichael Tuexen 	 * The CSUM_DATA_VALID flags indicates that the HW checked the UDP
691352f175beSMichael Tuexen 	 * checksum and it was valid. Since CSUM_DATA_VALID ==
691452f175beSMichael Tuexen 	 * CSUM_SCTP_VALID this would imply that the HW also verified the
691552f175beSMichael Tuexen 	 * SCTP checksum. Therefore, clear the bit.
691652f175beSMichael Tuexen 	 */
691752f175beSMichael Tuexen 	SCTPDBG(SCTP_DEBUG_CRCOFFLOAD,
691852f175beSMichael Tuexen 	    "sctp_recv_udp_tunneled_packet(): Packet of length %d received on %s with csum_flags 0x%b.\n",
691952f175beSMichael Tuexen 	    m->m_pkthdr.len,
692052f175beSMichael Tuexen 	    if_name(m->m_pkthdr.rcvif),
692152f175beSMichael Tuexen 	    (int)m->m_pkthdr.csum_flags, CSUM_BITS);
692252f175beSMichael Tuexen 	m->m_pkthdr.csum_flags &= ~CSUM_DATA_VALID;
6923a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6924a99b6783SRandall Stewart 	switch (iph->ip_v) {
6925e6194c2eSMichael Tuexen #ifdef INET
6926a99b6783SRandall Stewart 	case IPVERSION:
692709c1c856SMichael Tuexen 		iph->ip_len = htons(ntohs(iph->ip_len) - sizeof(struct udphdr));
6928a99b6783SRandall Stewart 		sctp_input_with_port(m, off, port);
6929a99b6783SRandall Stewart 		break;
6930e6194c2eSMichael Tuexen #endif
6931a99b6783SRandall Stewart #ifdef INET6
6932a99b6783SRandall Stewart 	case IPV6_VERSION >> 4:
69333a51a264SMichael Tuexen 		ip6 = mtod(m, struct ip6_hdr *);
69343a51a264SMichael Tuexen 		ip6->ip6_plen = htons(ntohs(ip6->ip6_plen) - sizeof(struct udphdr));
69353a51a264SMichael Tuexen 		sctp6_input_with_port(&m, &off, port);
6936a99b6783SRandall Stewart 		break;
6937a99b6783SRandall Stewart #endif
6938a99b6783SRandall Stewart 	default:
6939285052f0SMichael Tuexen 		goto out;
6940a99b6783SRandall Stewart 		break;
6941a99b6783SRandall Stewart 	}
6942a99b6783SRandall Stewart 	return;
6943a99b6783SRandall Stewart out:
6944a99b6783SRandall Stewart 	m_freem(m);
6945a99b6783SRandall Stewart }
6946c54a18d2SRandall Stewart 
6947fd7af143SMichael Tuexen #ifdef INET
6948fd7af143SMichael Tuexen static void
6949fd7af143SMichael Tuexen sctp_recv_icmp_tunneled_packet(int cmd, struct sockaddr *sa, void *vip, void *ctx SCTP_UNUSED)
6950fd7af143SMichael Tuexen {
6951fd7af143SMichael Tuexen 	struct ip *outer_ip, *inner_ip;
6952fd7af143SMichael Tuexen 	struct sctphdr *sh;
6953fd7af143SMichael Tuexen 	struct icmp *icmp;
6954fd7af143SMichael Tuexen 	struct udphdr *udp;
6955fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
6956fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
6957fd7af143SMichael Tuexen 	struct sctp_nets *net;
6958fd7af143SMichael Tuexen 	struct sctp_init_chunk *ch;
6959fd7af143SMichael Tuexen 	struct sockaddr_in src, dst;
6960fd7af143SMichael Tuexen 	uint8_t type, code;
6961fd7af143SMichael Tuexen 
6962fd7af143SMichael Tuexen 	inner_ip = (struct ip *)vip;
6963fd7af143SMichael Tuexen 	icmp = (struct icmp *)((caddr_t)inner_ip -
6964fd7af143SMichael Tuexen 	    (sizeof(struct icmp) - sizeof(struct ip)));
6965fd7af143SMichael Tuexen 	outer_ip = (struct ip *)((caddr_t)icmp - sizeof(struct ip));
6966fd7af143SMichael Tuexen 	if (ntohs(outer_ip->ip_len) <
6967fd7af143SMichael Tuexen 	    sizeof(struct ip) + 8 + (inner_ip->ip_hl << 2) + sizeof(struct udphdr) + 8) {
6968fd7af143SMichael Tuexen 		return;
6969fd7af143SMichael Tuexen 	}
6970fd7af143SMichael Tuexen 	udp = (struct udphdr *)((caddr_t)inner_ip + (inner_ip->ip_hl << 2));
6971fd7af143SMichael Tuexen 	sh = (struct sctphdr *)(udp + 1);
6972fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in));
6973fd7af143SMichael Tuexen 	src.sin_family = AF_INET;
6974fd7af143SMichael Tuexen 	src.sin_len = sizeof(struct sockaddr_in);
6975fd7af143SMichael Tuexen 	src.sin_port = sh->src_port;
6976fd7af143SMichael Tuexen 	src.sin_addr = inner_ip->ip_src;
6977fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in));
6978fd7af143SMichael Tuexen 	dst.sin_family = AF_INET;
6979fd7af143SMichael Tuexen 	dst.sin_len = sizeof(struct sockaddr_in);
6980fd7af143SMichael Tuexen 	dst.sin_port = sh->dest_port;
6981fd7af143SMichael Tuexen 	dst.sin_addr = inner_ip->ip_dst;
6982fd7af143SMichael Tuexen 	/*
6983fd7af143SMichael Tuexen 	 * 'dst' holds the dest of the packet that failed to be sent. 'src'
6984fd7af143SMichael Tuexen 	 * holds our local endpoint address. Thus we reverse the dst and the
6985fd7af143SMichael Tuexen 	 * src in the lookup.
6986fd7af143SMichael Tuexen 	 */
6987fd7af143SMichael Tuexen 	inp = NULL;
6988fd7af143SMichael Tuexen 	net = NULL;
6989fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
6990fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
6991fd7af143SMichael Tuexen 	    &inp, &net, 1,
6992fd7af143SMichael Tuexen 	    SCTP_DEFAULT_VRFID);
6993fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
6994fd7af143SMichael Tuexen 	    (net != NULL) &&
699555b8cd93SMichael Tuexen 	    (inp != NULL)) {
6996fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
6997fd7af143SMichael Tuexen 		if ((udp->uh_dport != net->port) ||
6998fd7af143SMichael Tuexen 		    (udp->uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
6999fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7000fd7af143SMichael Tuexen 			return;
7001fd7af143SMichael Tuexen 		}
7002fd7af143SMichael Tuexen 		/* Check the verification tag */
7003fd7af143SMichael Tuexen 		if (ntohl(sh->v_tag) != 0) {
7004fd7af143SMichael Tuexen 			/*
7005fd7af143SMichael Tuexen 			 * This must be the verification tag used for
7006fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
7007fd7af143SMichael Tuexen 			 * reflecting the verification tag.
7008fd7af143SMichael Tuexen 			 */
7009fd7af143SMichael Tuexen 			if (ntohl(sh->v_tag) != stcb->asoc.peer_vtag) {
7010fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7011fd7af143SMichael Tuexen 				return;
7012fd7af143SMichael Tuexen 			}
7013fd7af143SMichael Tuexen 		} else {
7014fd7af143SMichael Tuexen 			if (ntohs(outer_ip->ip_len) >=
7015fd7af143SMichael Tuexen 			    sizeof(struct ip) +
7016fd7af143SMichael Tuexen 			    8 + (inner_ip->ip_hl << 2) + 8 + 20) {
7017fd7af143SMichael Tuexen 				/*
7018fd7af143SMichael Tuexen 				 * In this case we can check if we got an
7019fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
7020fd7af143SMichael Tuexen 				 * matches.
7021fd7af143SMichael Tuexen 				 */
7022fd7af143SMichael Tuexen 				ch = (struct sctp_init_chunk *)(sh + 1);
7023fd7af143SMichael Tuexen 				if ((ch->ch.chunk_type != SCTP_INITIATION) ||
7024fd7af143SMichael Tuexen 				    (ntohl(ch->init.initiate_tag) != stcb->asoc.my_vtag)) {
7025fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
7026fd7af143SMichael Tuexen 					return;
7027fd7af143SMichael Tuexen 				}
7028fd7af143SMichael Tuexen 			} else {
7029fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7030fd7af143SMichael Tuexen 				return;
7031fd7af143SMichael Tuexen 			}
7032fd7af143SMichael Tuexen 		}
7033fd7af143SMichael Tuexen 		type = icmp->icmp_type;
7034fd7af143SMichael Tuexen 		code = icmp->icmp_code;
70353c3f9e2aSMichael Tuexen 		if ((type == ICMP_UNREACH) &&
70363c3f9e2aSMichael Tuexen 		    (code == ICMP_UNREACH_PORT)) {
7037fd7af143SMichael Tuexen 			code = ICMP_UNREACH_PROTOCOL;
7038fd7af143SMichael Tuexen 		}
7039fd7af143SMichael Tuexen 		sctp_notify(inp, stcb, net, type, code,
7040fd7af143SMichael Tuexen 		    ntohs(inner_ip->ip_len),
70416ebfa5eeSMichael Tuexen 		    (uint32_t)ntohs(icmp->icmp_nextmtu));
7042fd7af143SMichael Tuexen 	} else {
7043fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
7044fd7af143SMichael Tuexen 			/* reduce ref-count */
7045fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
7046fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
7047fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
7048fd7af143SMichael Tuexen 		}
7049fd7af143SMichael Tuexen 		if (stcb) {
7050fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7051fd7af143SMichael Tuexen 		}
7052fd7af143SMichael Tuexen 	}
7053fd7af143SMichael Tuexen 	return;
7054fd7af143SMichael Tuexen }
7055fd7af143SMichael Tuexen #endif
7056fd7af143SMichael Tuexen 
7057fd7af143SMichael Tuexen #ifdef INET6
7058fd7af143SMichael Tuexen static void
7059fd7af143SMichael Tuexen sctp_recv_icmp6_tunneled_packet(int cmd, struct sockaddr *sa, void *d, void *ctx SCTP_UNUSED)
7060fd7af143SMichael Tuexen {
7061fd7af143SMichael Tuexen 	struct ip6ctlparam *ip6cp;
7062fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
7063fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
7064fd7af143SMichael Tuexen 	struct sctp_nets *net;
7065fd7af143SMichael Tuexen 	struct sctphdr sh;
7066fd7af143SMichael Tuexen 	struct udphdr udp;
7067fd7af143SMichael Tuexen 	struct sockaddr_in6 src, dst;
7068fd7af143SMichael Tuexen 	uint8_t type, code;
7069fd7af143SMichael Tuexen 
7070fd7af143SMichael Tuexen 	ip6cp = (struct ip6ctlparam *)d;
7071fd7af143SMichael Tuexen 	/*
7072fd7af143SMichael Tuexen 	 * XXX: We assume that when IPV6 is non NULL, M and OFF are valid.
7073fd7af143SMichael Tuexen 	 */
7074fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m == NULL) {
7075fd7af143SMichael Tuexen 		return;
7076fd7af143SMichael Tuexen 	}
7077fd7af143SMichael Tuexen 	/*
7078fd7af143SMichael Tuexen 	 * Check if we can safely examine the ports and the verification tag
7079fd7af143SMichael Tuexen 	 * of the SCTP common header.
7080fd7af143SMichael Tuexen 	 */
7081fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m->m_pkthdr.len <
7082fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr) + offsetof(struct sctphdr, checksum)) {
7083fd7af143SMichael Tuexen 		return;
7084fd7af143SMichael Tuexen 	}
7085fd7af143SMichael Tuexen 	/* Copy out the UDP header. */
7086fd7af143SMichael Tuexen 	memset(&udp, 0, sizeof(struct udphdr));
7087fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
7088fd7af143SMichael Tuexen 	    ip6cp->ip6c_off,
7089fd7af143SMichael Tuexen 	    sizeof(struct udphdr),
7090fd7af143SMichael Tuexen 	    (caddr_t)&udp);
7091fd7af143SMichael Tuexen 	/* Copy out the port numbers and the verification tag. */
7092fd7af143SMichael Tuexen 	memset(&sh, 0, sizeof(struct sctphdr));
7093fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
7094fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr),
7095fd7af143SMichael Tuexen 	    sizeof(uint16_t) + sizeof(uint16_t) + sizeof(uint32_t),
7096fd7af143SMichael Tuexen 	    (caddr_t)&sh);
7097fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in6));
7098fd7af143SMichael Tuexen 	src.sin6_family = AF_INET6;
7099fd7af143SMichael Tuexen 	src.sin6_len = sizeof(struct sockaddr_in6);
7100fd7af143SMichael Tuexen 	src.sin6_port = sh.src_port;
7101fd7af143SMichael Tuexen 	src.sin6_addr = ip6cp->ip6c_ip6->ip6_src;
7102fd7af143SMichael Tuexen 	if (in6_setscope(&src.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7103fd7af143SMichael Tuexen 		return;
7104fd7af143SMichael Tuexen 	}
7105fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in6));
7106fd7af143SMichael Tuexen 	dst.sin6_family = AF_INET6;
7107fd7af143SMichael Tuexen 	dst.sin6_len = sizeof(struct sockaddr_in6);
7108fd7af143SMichael Tuexen 	dst.sin6_port = sh.dest_port;
7109fd7af143SMichael Tuexen 	dst.sin6_addr = ip6cp->ip6c_ip6->ip6_dst;
7110fd7af143SMichael Tuexen 	if (in6_setscope(&dst.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7111fd7af143SMichael Tuexen 		return;
7112fd7af143SMichael Tuexen 	}
7113fd7af143SMichael Tuexen 	inp = NULL;
7114fd7af143SMichael Tuexen 	net = NULL;
7115fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
7116fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
7117fd7af143SMichael Tuexen 	    &inp, &net, 1, SCTP_DEFAULT_VRFID);
7118fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
7119fd7af143SMichael Tuexen 	    (net != NULL) &&
712055b8cd93SMichael Tuexen 	    (inp != NULL)) {
7121fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
7122fd7af143SMichael Tuexen 		if ((udp.uh_dport != net->port) ||
7123fd7af143SMichael Tuexen 		    (udp.uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
7124fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7125fd7af143SMichael Tuexen 			return;
7126fd7af143SMichael Tuexen 		}
7127fd7af143SMichael Tuexen 		/* Check the verification tag */
7128fd7af143SMichael Tuexen 		if (ntohl(sh.v_tag) != 0) {
7129fd7af143SMichael Tuexen 			/*
7130fd7af143SMichael Tuexen 			 * This must be the verification tag used for
7131fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
7132fd7af143SMichael Tuexen 			 * reflecting the verification tag.
7133fd7af143SMichael Tuexen 			 */
7134fd7af143SMichael Tuexen 			if (ntohl(sh.v_tag) != stcb->asoc.peer_vtag) {
7135fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7136fd7af143SMichael Tuexen 				return;
7137fd7af143SMichael Tuexen 			}
7138fd7af143SMichael Tuexen 		} else {
7139fd7af143SMichael Tuexen 			if (ip6cp->ip6c_m->m_pkthdr.len >=
7140fd7af143SMichael Tuexen 			    ip6cp->ip6c_off + sizeof(struct udphdr) +
7141fd7af143SMichael Tuexen 			    sizeof(struct sctphdr) +
7142fd7af143SMichael Tuexen 			    sizeof(struct sctp_chunkhdr) +
7143fd7af143SMichael Tuexen 			    offsetof(struct sctp_init, a_rwnd)) {
7144fd7af143SMichael Tuexen 				/*
7145fd7af143SMichael Tuexen 				 * In this case we can check if we got an
7146fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
7147fd7af143SMichael Tuexen 				 * matches.
7148fd7af143SMichael Tuexen 				 */
7149fd7af143SMichael Tuexen 				uint32_t initiate_tag;
7150fd7af143SMichael Tuexen 				uint8_t chunk_type;
7151fd7af143SMichael Tuexen 
7152fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7153fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7154fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7155fd7af143SMichael Tuexen 				    sizeof(struct sctphdr),
7156fd7af143SMichael Tuexen 				    sizeof(uint8_t),
7157fd7af143SMichael Tuexen 				    (caddr_t)&chunk_type);
7158fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7159fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7160fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7161fd7af143SMichael Tuexen 				    sizeof(struct sctphdr) +
7162fd7af143SMichael Tuexen 				    sizeof(struct sctp_chunkhdr),
7163fd7af143SMichael Tuexen 				    sizeof(uint32_t),
7164fd7af143SMichael Tuexen 				    (caddr_t)&initiate_tag);
7165fd7af143SMichael Tuexen 				if ((chunk_type != SCTP_INITIATION) ||
7166fd7af143SMichael Tuexen 				    (ntohl(initiate_tag) != stcb->asoc.my_vtag)) {
7167fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
7168fd7af143SMichael Tuexen 					return;
7169fd7af143SMichael Tuexen 				}
7170fd7af143SMichael Tuexen 			} else {
7171fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7172fd7af143SMichael Tuexen 				return;
7173fd7af143SMichael Tuexen 			}
7174fd7af143SMichael Tuexen 		}
7175fd7af143SMichael Tuexen 		type = ip6cp->ip6c_icmp6->icmp6_type;
7176fd7af143SMichael Tuexen 		code = ip6cp->ip6c_icmp6->icmp6_code;
7177fd7af143SMichael Tuexen 		if ((type == ICMP6_DST_UNREACH) &&
7178fd7af143SMichael Tuexen 		    (code == ICMP6_DST_UNREACH_NOPORT)) {
7179fd7af143SMichael Tuexen 			type = ICMP6_PARAM_PROB;
7180fd7af143SMichael Tuexen 			code = ICMP6_PARAMPROB_NEXTHEADER;
7181fd7af143SMichael Tuexen 		}
7182fd7af143SMichael Tuexen 		sctp6_notify(inp, stcb, net, type, code,
71836ebfa5eeSMichael Tuexen 		    ntohl(ip6cp->ip6c_icmp6->icmp6_mtu));
7184fd7af143SMichael Tuexen 	} else {
7185fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
7186fd7af143SMichael Tuexen 			/* reduce inp's ref-count */
7187fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
7188fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
7189fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
7190fd7af143SMichael Tuexen 		}
7191fd7af143SMichael Tuexen 		if (stcb) {
7192fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7193fd7af143SMichael Tuexen 		}
7194fd7af143SMichael Tuexen 	}
7195fd7af143SMichael Tuexen }
7196fd7af143SMichael Tuexen #endif
7197fd7af143SMichael Tuexen 
7198c54a18d2SRandall Stewart void
7199c54a18d2SRandall Stewart sctp_over_udp_stop(void)
7200c54a18d2SRandall Stewart {
7201a99b6783SRandall Stewart 	/*
7202a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7203a99b6783SRandall Stewart 	 * for writting!
7204a99b6783SRandall Stewart 	 */
72053a51a264SMichael Tuexen #ifdef INET
72063a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
72073a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp4_tun_socket));
72083a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp4_tun_socket) = NULL;
7209c54a18d2SRandall Stewart 	}
72103a51a264SMichael Tuexen #endif
72113a51a264SMichael Tuexen #ifdef INET6
72123a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
72133a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp6_tun_socket));
72143a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp6_tun_socket) = NULL;
72153a51a264SMichael Tuexen 	}
72163a51a264SMichael Tuexen #endif
7217a99b6783SRandall Stewart }
7218ea5eba11SMichael Tuexen 
7219c54a18d2SRandall Stewart int
7220c54a18d2SRandall Stewart sctp_over_udp_start(void)
7221c54a18d2SRandall Stewart {
7222a99b6783SRandall Stewart 	uint16_t port;
7223a99b6783SRandall Stewart 	int ret;
72243a51a264SMichael Tuexen #ifdef INET
72253a51a264SMichael Tuexen 	struct sockaddr_in sin;
72263a51a264SMichael Tuexen #endif
72273a51a264SMichael Tuexen #ifdef INET6
72283a51a264SMichael Tuexen 	struct sockaddr_in6 sin6;
72293a51a264SMichael Tuexen #endif
7230a99b6783SRandall Stewart 	/*
7231a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7232a99b6783SRandall Stewart 	 * for writting!
7233a99b6783SRandall Stewart 	 */
7234a99b6783SRandall Stewart 	port = SCTP_BASE_SYSCTL(sctp_udp_tunneling_port);
72353a51a264SMichael Tuexen 	if (ntohs(port) == 0) {
7236a99b6783SRandall Stewart 		/* Must have a port set */
7237a99b6783SRandall Stewart 		return (EINVAL);
7238a99b6783SRandall Stewart 	}
72393a51a264SMichael Tuexen #ifdef INET
72403a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
7241a99b6783SRandall Stewart 		/* Already running -- must stop first */
7242a99b6783SRandall Stewart 		return (EALREADY);
7243a99b6783SRandall Stewart 	}
72443a51a264SMichael Tuexen #endif
72453a51a264SMichael Tuexen #ifdef INET6
72463a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
72473a51a264SMichael Tuexen 		/* Already running -- must stop first */
72483a51a264SMichael Tuexen 		return (EALREADY);
7249a99b6783SRandall Stewart 	}
72503a51a264SMichael Tuexen #endif
72513a51a264SMichael Tuexen #ifdef INET
72523a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET, &SCTP_BASE_INFO(udp4_tun_socket),
72533a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
72543a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
7255a99b6783SRandall Stewart 		sctp_over_udp_stop();
7256a99b6783SRandall Stewart 		return (ret);
7257a99b6783SRandall Stewart 	}
72583a51a264SMichael Tuexen 	/* Call the special UDP hook. */
72593a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp4_tun_socket),
7260fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7261fd7af143SMichael Tuexen 	    sctp_recv_icmp_tunneled_packet,
7262fd7af143SMichael Tuexen 	    NULL))) {
72633a51a264SMichael Tuexen 		sctp_over_udp_stop();
72643a51a264SMichael Tuexen 		return (ret);
72653a51a264SMichael Tuexen 	}
72663a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
72673a51a264SMichael Tuexen 	memset(&sin, 0, sizeof(struct sockaddr_in));
72683a51a264SMichael Tuexen 	sin.sin_len = sizeof(struct sockaddr_in);
72693a51a264SMichael Tuexen 	sin.sin_family = AF_INET;
72703a51a264SMichael Tuexen 	sin.sin_port = htons(port);
72713a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp4_tun_socket),
72723a51a264SMichael Tuexen 	    (struct sockaddr *)&sin, curthread))) {
72733a51a264SMichael Tuexen 		sctp_over_udp_stop();
72743a51a264SMichael Tuexen 		return (ret);
72753a51a264SMichael Tuexen 	}
72763a51a264SMichael Tuexen #endif
72773a51a264SMichael Tuexen #ifdef INET6
72783a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET6, &SCTP_BASE_INFO(udp6_tun_socket),
72793a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
72803a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
72813a51a264SMichael Tuexen 		sctp_over_udp_stop();
72823a51a264SMichael Tuexen 		return (ret);
72833a51a264SMichael Tuexen 	}
72843a51a264SMichael Tuexen 	/* Call the special UDP hook. */
72853a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp6_tun_socket),
7286fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7287fd7af143SMichael Tuexen 	    sctp_recv_icmp6_tunneled_packet,
7288fd7af143SMichael Tuexen 	    NULL))) {
72893a51a264SMichael Tuexen 		sctp_over_udp_stop();
72903a51a264SMichael Tuexen 		return (ret);
72913a51a264SMichael Tuexen 	}
72923a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
72933a51a264SMichael Tuexen 	memset(&sin6, 0, sizeof(struct sockaddr_in6));
72943a51a264SMichael Tuexen 	sin6.sin6_len = sizeof(struct sockaddr_in6);
72953a51a264SMichael Tuexen 	sin6.sin6_family = AF_INET6;
72963a51a264SMichael Tuexen 	sin6.sin6_port = htons(port);
72973a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp6_tun_socket),
72983a51a264SMichael Tuexen 	    (struct sockaddr *)&sin6, curthread))) {
72993a51a264SMichael Tuexen 		sctp_over_udp_stop();
73003a51a264SMichael Tuexen 		return (ret);
73013a51a264SMichael Tuexen 	}
73023a51a264SMichael Tuexen #endif
7303a99b6783SRandall Stewart 	return (0);
7304c54a18d2SRandall Stewart }
730510e0318aSMichael Tuexen 
730610e0318aSMichael Tuexen /*
730710e0318aSMichael Tuexen  * sctp_min_mtu ()returns the minimum of all non-zero arguments.
730810e0318aSMichael Tuexen  * If all arguments are zero, zero is returned.
730910e0318aSMichael Tuexen  */
731010e0318aSMichael Tuexen uint32_t
7311b0471b4bSMichael Tuexen sctp_min_mtu(uint32_t mtu1, uint32_t mtu2, uint32_t mtu3)
7312b0471b4bSMichael Tuexen {
731310e0318aSMichael Tuexen 	if (mtu1 > 0) {
731410e0318aSMichael Tuexen 		if (mtu2 > 0) {
731510e0318aSMichael Tuexen 			if (mtu3 > 0) {
731610e0318aSMichael Tuexen 				return (min(mtu1, min(mtu2, mtu3)));
731710e0318aSMichael Tuexen 			} else {
731810e0318aSMichael Tuexen 				return (min(mtu1, mtu2));
731910e0318aSMichael Tuexen 			}
732010e0318aSMichael Tuexen 		} else {
732110e0318aSMichael Tuexen 			if (mtu3 > 0) {
732210e0318aSMichael Tuexen 				return (min(mtu1, mtu3));
732310e0318aSMichael Tuexen 			} else {
732410e0318aSMichael Tuexen 				return (mtu1);
732510e0318aSMichael Tuexen 			}
732610e0318aSMichael Tuexen 		}
732710e0318aSMichael Tuexen 	} else {
732810e0318aSMichael Tuexen 		if (mtu2 > 0) {
732910e0318aSMichael Tuexen 			if (mtu3 > 0) {
733010e0318aSMichael Tuexen 				return (min(mtu2, mtu3));
733110e0318aSMichael Tuexen 			} else {
733210e0318aSMichael Tuexen 				return (mtu2);
733310e0318aSMichael Tuexen 			}
733410e0318aSMichael Tuexen 		} else {
733510e0318aSMichael Tuexen 			return (mtu3);
733610e0318aSMichael Tuexen 		}
733710e0318aSMichael Tuexen 	}
733810e0318aSMichael Tuexen }
733910e0318aSMichael Tuexen 
734010e0318aSMichael Tuexen void
734110e0318aSMichael Tuexen sctp_hc_set_mtu(union sctp_sockstore *addr, uint16_t fibnum, uint32_t mtu)
734210e0318aSMichael Tuexen {
734310e0318aSMichael Tuexen 	struct in_conninfo inc;
734410e0318aSMichael Tuexen 
734510e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
734610e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
734710e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
734810e0318aSMichael Tuexen #ifdef INET
734910e0318aSMichael Tuexen 	case AF_INET:
735010e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
735110e0318aSMichael Tuexen 		break;
735210e0318aSMichael Tuexen #endif
735310e0318aSMichael Tuexen #ifdef INET6
735410e0318aSMichael Tuexen 	case AF_INET6:
735510e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
735610e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
735710e0318aSMichael Tuexen 		break;
735810e0318aSMichael Tuexen #endif
735910e0318aSMichael Tuexen 	default:
736010e0318aSMichael Tuexen 		return;
736110e0318aSMichael Tuexen 	}
736210e0318aSMichael Tuexen 	tcp_hc_updatemtu(&inc, (u_long)mtu);
736310e0318aSMichael Tuexen }
736410e0318aSMichael Tuexen 
736510e0318aSMichael Tuexen uint32_t
7366b0471b4bSMichael Tuexen sctp_hc_get_mtu(union sctp_sockstore *addr, uint16_t fibnum)
7367b0471b4bSMichael Tuexen {
736810e0318aSMichael Tuexen 	struct in_conninfo inc;
736910e0318aSMichael Tuexen 
737010e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
737110e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
737210e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
737310e0318aSMichael Tuexen #ifdef INET
737410e0318aSMichael Tuexen 	case AF_INET:
737510e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
737610e0318aSMichael Tuexen 		break;
737710e0318aSMichael Tuexen #endif
737810e0318aSMichael Tuexen #ifdef INET6
737910e0318aSMichael Tuexen 	case AF_INET6:
738010e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
738110e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
738210e0318aSMichael Tuexen 		break;
738310e0318aSMichael Tuexen #endif
738410e0318aSMichael Tuexen 	default:
738510e0318aSMichael Tuexen 		return (0);
738610e0318aSMichael Tuexen 	}
738710e0318aSMichael Tuexen 	return ((uint32_t)tcp_hc_getmtu(&inc));
738810e0318aSMichael Tuexen }
73896ef849e6SMichael Tuexen 
73901a0b0216SMichael Tuexen void
73911a0b0216SMichael Tuexen sctp_set_state(struct sctp_tcb *stcb, int new_state)
73921a0b0216SMichael Tuexen {
73931e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
73941e88cc8bSMichael Tuexen 	int old_state = stcb->asoc.state;
73951e88cc8bSMichael Tuexen #endif
73961e88cc8bSMichael Tuexen 
73971a0b0216SMichael Tuexen 	KASSERT((new_state & ~SCTP_STATE_MASK) == 0,
73981a0b0216SMichael Tuexen 	    ("sctp_set_state: Can't set substate (new_state = %x)",
73991a0b0216SMichael Tuexen 	    new_state));
74001a0b0216SMichael Tuexen 	stcb->asoc.state = (stcb->asoc.state & ~SCTP_STATE_MASK) | new_state;
74011a0b0216SMichael Tuexen 	if ((new_state == SCTP_STATE_SHUTDOWN_RECEIVED) ||
74021a0b0216SMichael Tuexen 	    (new_state == SCTP_STATE_SHUTDOWN_SENT) ||
74031a0b0216SMichael Tuexen 	    (new_state == SCTP_STATE_SHUTDOWN_ACK_SENT)) {
74041a0b0216SMichael Tuexen 		SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_SHUTDOWN_PENDING);
74051a0b0216SMichael Tuexen 	}
74061e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
74071e88cc8bSMichael Tuexen 	if (((old_state & SCTP_STATE_MASK) != new_state) &&
74081e88cc8bSMichael Tuexen 	    !(((old_state & SCTP_STATE_MASK) == SCTP_STATE_EMPTY) &&
74091e88cc8bSMichael Tuexen 	    (new_state == SCTP_STATE_INUSE))) {
74101e88cc8bSMichael Tuexen 		SCTP_PROBE6(state__change, NULL, stcb, NULL, stcb, NULL, old_state);
74111e88cc8bSMichael Tuexen 	}
74121e88cc8bSMichael Tuexen #endif
74131a0b0216SMichael Tuexen }
74141a0b0216SMichael Tuexen 
74151a0b0216SMichael Tuexen void
74161a0b0216SMichael Tuexen sctp_add_substate(struct sctp_tcb *stcb, int substate)
74171a0b0216SMichael Tuexen {
74181e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
74191e88cc8bSMichael Tuexen 	int old_state = stcb->asoc.state;
74201e88cc8bSMichael Tuexen #endif
74211e88cc8bSMichael Tuexen 
74221a0b0216SMichael Tuexen 	KASSERT((substate & SCTP_STATE_MASK) == 0,
74231a0b0216SMichael Tuexen 	    ("sctp_add_substate: Can't set state (substate = %x)",
74241a0b0216SMichael Tuexen 	    substate));
74251a0b0216SMichael Tuexen 	stcb->asoc.state |= substate;
74261e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
74271e88cc8bSMichael Tuexen 	if (((substate & SCTP_STATE_ABOUT_TO_BE_FREED) &&
74281e88cc8bSMichael Tuexen 	    ((old_state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0)) ||
74291e88cc8bSMichael Tuexen 	    ((substate & SCTP_STATE_SHUTDOWN_PENDING) &&
74301e88cc8bSMichael Tuexen 	    ((old_state & SCTP_STATE_SHUTDOWN_PENDING) == 0))) {
74311e88cc8bSMichael Tuexen 		SCTP_PROBE6(state__change, NULL, stcb, NULL, stcb, NULL, old_state);
74321e88cc8bSMichael Tuexen 	}
74331e88cc8bSMichael Tuexen #endif
74341a0b0216SMichael Tuexen }
7435