xref: /freebsd/sys/netinet/sctputil.c (revision 80c79bbe7a0ae0b8c516ebe94176b9ad2b5878a5)
1f8829a4aSRandall Stewart /*-
2830d754dSRandall Stewart  * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved.
35d40cf5dSRandall Stewart  * Copyright (c) 2008-2011, by Randall Stewart. All rights reserved.
45d40cf5dSRandall Stewart  * Copyright (c) 2008-2011, by Michael Tuexen. All rights reserved.
5f8829a4aSRandall Stewart  *
6f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
7f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
8f8829a4aSRandall Stewart  *
9f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
10f8829a4aSRandall Stewart  *   this list of conditions and the following disclaimer.
11f8829a4aSRandall Stewart  *
12f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
13f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
14f8829a4aSRandall Stewart  *   the documentation and/or other materials provided with the distribution.
15f8829a4aSRandall Stewart  *
16f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
18f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
19f8829a4aSRandall Stewart  *
20f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
31f8829a4aSRandall Stewart  */
32f8829a4aSRandall Stewart 
33f8829a4aSRandall Stewart /* $KAME: sctputil.c,v 1.37 2005/03/07 23:26:09 itojun Exp $	 */
34f8829a4aSRandall Stewart 
35f8829a4aSRandall Stewart #include <sys/cdefs.h>
36f8829a4aSRandall Stewart __FBSDID("$FreeBSD$");
37f8829a4aSRandall Stewart 
38f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
40f8829a4aSRandall Stewart #include <netinet/sctputil.h>
41f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
4242551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
43f8829a4aSRandall Stewart #ifdef INET6
44f8829a4aSRandall Stewart #endif
45f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
46f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
47f8829a4aSRandall Stewart #include <netinet/sctp_uio.h>
48f8829a4aSRandall Stewart #include <netinet/sctp_timer.h>
49f8829a4aSRandall Stewart #include <netinet/sctp_indata.h>/* for sctp_deliver_data() */
50f8829a4aSRandall Stewart #include <netinet/sctp_auth.h>
51f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
52f7517433SRandall Stewart #include <netinet/sctp_bsd_addr.h>
53f8829a4aSRandall Stewart 
54f8829a4aSRandall Stewart 
55b9e7085aSRandall Stewart #ifndef KTR_SCTP
56b9e7085aSRandall Stewart #define KTR_SCTP KTR_SUBSYS
5780fefe0aSRandall Stewart #endif
58f8829a4aSRandall Stewart 
590e9a9c10SMichael Tuexen extern struct sctp_cc_functions sctp_cc_functions[];
60f7a77f6fSMichael Tuexen extern struct sctp_ss_functions sctp_ss_functions[];
610e9a9c10SMichael Tuexen 
62f8829a4aSRandall Stewart void
63f8829a4aSRandall Stewart sctp_sblog(struct sockbuf *sb,
64f8829a4aSRandall Stewart     struct sctp_tcb *stcb, int from, int incr)
65f8829a4aSRandall Stewart {
6680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
67f8829a4aSRandall Stewart 
6880fefe0aSRandall Stewart 	sctp_clog.x.sb.stcb = stcb;
6980fefe0aSRandall Stewart 	sctp_clog.x.sb.so_sbcc = sb->sb_cc;
70f8829a4aSRandall Stewart 	if (stcb)
7180fefe0aSRandall Stewart 		sctp_clog.x.sb.stcb_sbcc = stcb->asoc.sb_cc;
72f8829a4aSRandall Stewart 	else
7380fefe0aSRandall Stewart 		sctp_clog.x.sb.stcb_sbcc = 0;
7480fefe0aSRandall Stewart 	sctp_clog.x.sb.incr = incr;
75c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
7680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SB,
7780fefe0aSRandall Stewart 	    from,
7880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
7980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
8080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
8180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
82f8829a4aSRandall Stewart }
83f8829a4aSRandall Stewart 
84f8829a4aSRandall Stewart void
85f8829a4aSRandall Stewart sctp_log_closing(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int16_t loc)
86f8829a4aSRandall Stewart {
8780fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
88f8829a4aSRandall Stewart 
8980fefe0aSRandall Stewart 	sctp_clog.x.close.inp = (void *)inp;
9080fefe0aSRandall Stewart 	sctp_clog.x.close.sctp_flags = inp->sctp_flags;
91f8829a4aSRandall Stewart 	if (stcb) {
9280fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = (void *)stcb;
9380fefe0aSRandall Stewart 		sctp_clog.x.close.state = (uint16_t) stcb->asoc.state;
94f8829a4aSRandall Stewart 	} else {
9580fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = 0;
9680fefe0aSRandall Stewart 		sctp_clog.x.close.state = 0;
97f8829a4aSRandall Stewart 	}
9880fefe0aSRandall Stewart 	sctp_clog.x.close.loc = loc;
99c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
10080fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CLOSE,
10180fefe0aSRandall Stewart 	    0,
10280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
10380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
10480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
10580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
106f8829a4aSRandall Stewart }
107f8829a4aSRandall Stewart 
108f8829a4aSRandall Stewart 
109f8829a4aSRandall Stewart void
110f8829a4aSRandall Stewart rto_logging(struct sctp_nets *net, int from)
111f8829a4aSRandall Stewart {
11280fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
113f8829a4aSRandall Stewart 
114bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
11580fefe0aSRandall Stewart 	sctp_clog.x.rto.net = (void *)net;
116be1d9176SMichael Tuexen 	sctp_clog.x.rto.rtt = net->rtt / 1000;
117c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
11880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RTT,
11980fefe0aSRandall Stewart 	    from,
12080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
12180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
12280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
12380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
12480fefe0aSRandall Stewart 
125f8829a4aSRandall Stewart }
126f8829a4aSRandall Stewart 
127f8829a4aSRandall Stewart void
1286a91f103SRandall Stewart sctp_log_strm_del_alt(struct sctp_tcb *stcb, uint32_t tsn, uint16_t sseq, uint16_t stream, int from)
129f8829a4aSRandall Stewart {
13080fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
131f8829a4aSRandall Stewart 
13280fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = stcb;
13380fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = tsn;
13480fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_sseq = sseq;
13580fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_tsn = 0;
13680fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_sseq = 0;
13780fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = stream;
138c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
13980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
14080fefe0aSRandall Stewart 	    from,
14180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
14280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
14380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
14480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
14580fefe0aSRandall Stewart 
146f8829a4aSRandall Stewart }
147f8829a4aSRandall Stewart 
148f8829a4aSRandall Stewart void
149f8829a4aSRandall Stewart sctp_log_nagle_event(struct sctp_tcb *stcb, int action)
150f8829a4aSRandall Stewart {
15180fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
152f8829a4aSRandall Stewart 
15380fefe0aSRandall Stewart 	sctp_clog.x.nagle.stcb = (void *)stcb;
15480fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_flight = stcb->asoc.total_flight;
15580fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_in_queue = stcb->asoc.total_output_queue_size;
15680fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_queue = stcb->asoc.chunks_on_out_queue;
15780fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_flight = stcb->asoc.total_flight_count;
158c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
15980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_NAGLE,
16080fefe0aSRandall Stewart 	    action,
16180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
16280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
16380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
16480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
165f8829a4aSRandall Stewart }
166f8829a4aSRandall Stewart 
167f8829a4aSRandall Stewart 
168f8829a4aSRandall Stewart void
169f8829a4aSRandall Stewart sctp_log_sack(uint32_t old_cumack, uint32_t cumack, uint32_t tsn, uint16_t gaps, uint16_t dups, int from)
170f8829a4aSRandall Stewart {
17180fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
172f8829a4aSRandall Stewart 
17380fefe0aSRandall Stewart 	sctp_clog.x.sack.cumack = cumack;
17480fefe0aSRandall Stewart 	sctp_clog.x.sack.oldcumack = old_cumack;
17580fefe0aSRandall Stewart 	sctp_clog.x.sack.tsn = tsn;
17680fefe0aSRandall Stewart 	sctp_clog.x.sack.numGaps = gaps;
17780fefe0aSRandall Stewart 	sctp_clog.x.sack.numDups = dups;
178c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
17980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SACK,
18080fefe0aSRandall Stewart 	    from,
18180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
18280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
18380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
18480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
185f8829a4aSRandall Stewart }
186f8829a4aSRandall Stewart 
187f8829a4aSRandall Stewart void
188f8829a4aSRandall Stewart sctp_log_map(uint32_t map, uint32_t cum, uint32_t high, int from)
189f8829a4aSRandall Stewart {
19080fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
191f8829a4aSRandall Stewart 
192bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
19380fefe0aSRandall Stewart 	sctp_clog.x.map.base = map;
19480fefe0aSRandall Stewart 	sctp_clog.x.map.cum = cum;
19580fefe0aSRandall Stewart 	sctp_clog.x.map.high = high;
196c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
19780fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAP,
19880fefe0aSRandall Stewart 	    from,
19980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
20080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
20180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
20280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
203f8829a4aSRandall Stewart }
204f8829a4aSRandall Stewart 
205f8829a4aSRandall Stewart void
206f8829a4aSRandall Stewart sctp_log_fr(uint32_t biggest_tsn, uint32_t biggest_new_tsn, uint32_t tsn,
207f8829a4aSRandall Stewart     int from)
208f8829a4aSRandall Stewart {
20980fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
210f8829a4aSRandall Stewart 
211bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
21280fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_tsn = biggest_tsn;
21380fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_new_tsn = biggest_new_tsn;
21480fefe0aSRandall Stewart 	sctp_clog.x.fr.tsn = tsn;
215c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
21680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_FR,
21780fefe0aSRandall Stewart 	    from,
21880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
21980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
22080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
22180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
22280fefe0aSRandall Stewart 
223f8829a4aSRandall Stewart }
224f8829a4aSRandall Stewart 
225f8829a4aSRandall Stewart 
226f8829a4aSRandall Stewart void
227f8829a4aSRandall Stewart sctp_log_mb(struct mbuf *m, int from)
228f8829a4aSRandall Stewart {
22980fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
230f8829a4aSRandall Stewart 
23180fefe0aSRandall Stewart 	sctp_clog.x.mb.mp = m;
23280fefe0aSRandall Stewart 	sctp_clog.x.mb.mbuf_flags = (uint8_t) (SCTP_BUF_GET_FLAGS(m));
23380fefe0aSRandall Stewart 	sctp_clog.x.mb.size = (uint16_t) (SCTP_BUF_LEN(m));
23480fefe0aSRandall Stewart 	sctp_clog.x.mb.data = SCTP_BUF_AT(m, 0);
235139bc87fSRandall Stewart 	if (SCTP_BUF_IS_EXTENDED(m)) {
23680fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = SCTP_BUF_EXTEND_BASE(m);
23780fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = (uint8_t) (SCTP_BUF_EXTEND_REFCNT(m));
238f8829a4aSRandall Stewart 	} else {
23980fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = 0;
24080fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = 0;
241f8829a4aSRandall Stewart 	}
242c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
24380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBUF,
24480fefe0aSRandall Stewart 	    from,
24580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
24680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
24780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
24880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
249f8829a4aSRandall Stewart }
250f8829a4aSRandall Stewart 
251f8829a4aSRandall Stewart 
252f8829a4aSRandall Stewart void
253f8829a4aSRandall Stewart sctp_log_strm_del(struct sctp_queued_to_read *control, struct sctp_queued_to_read *poschk,
254f8829a4aSRandall Stewart     int from)
255f8829a4aSRandall Stewart {
25680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
257f8829a4aSRandall Stewart 
258f8829a4aSRandall Stewart 	if (control == NULL) {
259ad81507eSRandall Stewart 		SCTP_PRINTF("Gak log of NULL?\n");
260f8829a4aSRandall Stewart 		return;
261f8829a4aSRandall Stewart 	}
26280fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = control->stcb;
26380fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = control->sinfo_tsn;
26480fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_sseq = control->sinfo_ssn;
26580fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = control->sinfo_stream;
266f8829a4aSRandall Stewart 	if (poschk != NULL) {
26780fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = poschk->sinfo_tsn;
26880fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_sseq = poschk->sinfo_ssn;
269f8829a4aSRandall Stewart 	} else {
27080fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = 0;
27180fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_sseq = 0;
272f8829a4aSRandall Stewart 	}
273c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
27480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
27580fefe0aSRandall Stewart 	    from,
27680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
27780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
27880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
27980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
28080fefe0aSRandall Stewart 
281f8829a4aSRandall Stewart }
282f8829a4aSRandall Stewart 
283f8829a4aSRandall Stewart void
284f8829a4aSRandall Stewart sctp_log_cwnd(struct sctp_tcb *stcb, struct sctp_nets *net, int augment, uint8_t from)
285f8829a4aSRandall Stewart {
28680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
287f8829a4aSRandall Stewart 
28880fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
289f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
29080fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
291f8829a4aSRandall Stewart 	else
29280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
293f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
29480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
295f8829a4aSRandall Stewart 	else
29680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
297f8829a4aSRandall Stewart 
298f8829a4aSRandall Stewart 	if (net) {
29980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cwnd_new_value = net->cwnd;
30080fefe0aSRandall Stewart 		sctp_clog.x.cwnd.inflight = net->flight_size;
30180fefe0aSRandall Stewart 		sctp_clog.x.cwnd.pseudo_cumack = net->pseudo_cumack;
30280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = net->new_pseudo_cumack;
30380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.need_new_pseudo_cumack = net->find_pseudo_cumack;
304f8829a4aSRandall Stewart 	}
305f8829a4aSRandall Stewart 	if (SCTP_CWNDLOG_PRESEND == from) {
30680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = stcb->asoc.peers_rwnd;
307f8829a4aSRandall Stewart 	}
30880fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = augment;
309c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
31080fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CWND,
31180fefe0aSRandall Stewart 	    from,
31280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
31380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
31480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
31580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
31680fefe0aSRandall Stewart 
317f8829a4aSRandall Stewart }
318f8829a4aSRandall Stewart 
319f8829a4aSRandall Stewart void
320f8829a4aSRandall Stewart sctp_log_lock(struct sctp_inpcb *inp, struct sctp_tcb *stcb, uint8_t from)
321f8829a4aSRandall Stewart {
32280fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
323f8829a4aSRandall Stewart 
324bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
32503b0b021SRandall Stewart 	if (inp) {
32680fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)inp->sctp_socket;
32703b0b021SRandall Stewart 
32803b0b021SRandall Stewart 	} else {
32980fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)NULL;
33003b0b021SRandall Stewart 	}
33180fefe0aSRandall Stewart 	sctp_clog.x.lock.inp = (void *)inp;
332f8829a4aSRandall Stewart 	if (stcb) {
33380fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = mtx_owned(&stcb->tcb_mtx);
334f8829a4aSRandall Stewart 	} else {
33580fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = SCTP_LOCK_UNKNOWN;
336f8829a4aSRandall Stewart 	}
337f8829a4aSRandall Stewart 	if (inp) {
33880fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = mtx_owned(&inp->inp_mtx);
33980fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = mtx_owned(&inp->inp_create_mtx);
340f8829a4aSRandall Stewart 	} else {
34180fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = SCTP_LOCK_UNKNOWN;
34280fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = SCTP_LOCK_UNKNOWN;
343f8829a4aSRandall Stewart 	}
344b3f1ea41SRandall Stewart 	sctp_clog.x.lock.info_lock = rw_wowned(&SCTP_BASE_INFO(ipi_ep_mtx));
34552129fcdSRandall Stewart 	if (inp && (inp->sctp_socket)) {
34680fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
34780fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
34880fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = mtx_owned(&(inp->sctp_socket->so_snd.sb_mtx));
349f8829a4aSRandall Stewart 	} else {
35080fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = SCTP_LOCK_UNKNOWN;
35180fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = SCTP_LOCK_UNKNOWN;
35280fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = SCTP_LOCK_UNKNOWN;
353f8829a4aSRandall Stewart 	}
354c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
35580fefe0aSRandall Stewart 	    SCTP_LOG_LOCK_EVENT,
35680fefe0aSRandall Stewart 	    from,
35780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
35880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
35980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
36080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
36180fefe0aSRandall Stewart 
362f8829a4aSRandall Stewart }
363f8829a4aSRandall Stewart 
364f8829a4aSRandall Stewart void
365f8829a4aSRandall Stewart sctp_log_maxburst(struct sctp_tcb *stcb, struct sctp_nets *net, int error, int burst, uint8_t from)
366f8829a4aSRandall Stewart {
36780fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
368f8829a4aSRandall Stewart 
369bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
37080fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
37180fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_new_value = error;
37280fefe0aSRandall Stewart 	sctp_clog.x.cwnd.inflight = net->flight_size;
37380fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = burst;
374f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
37580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
376f8829a4aSRandall Stewart 	else
37780fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
378f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
37980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
380f8829a4aSRandall Stewart 	else
38180fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
382c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
38380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAXBURST,
38480fefe0aSRandall Stewart 	    from,
38580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
38680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
38780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
38880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
38980fefe0aSRandall Stewart 
390f8829a4aSRandall Stewart }
391f8829a4aSRandall Stewart 
392f8829a4aSRandall Stewart void
393f8829a4aSRandall Stewart sctp_log_rwnd(uint8_t from, uint32_t peers_rwnd, uint32_t snd_size, uint32_t overhead)
394f8829a4aSRandall Stewart {
39580fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
396f8829a4aSRandall Stewart 
39780fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
39880fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = snd_size;
39980fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
40080fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = 0;
401c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
40280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
40380fefe0aSRandall Stewart 	    from,
40480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
40580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
40680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
40780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
408f8829a4aSRandall Stewart }
409f8829a4aSRandall Stewart 
410f8829a4aSRandall Stewart void
411f8829a4aSRandall Stewart sctp_log_rwnd_set(uint8_t from, uint32_t peers_rwnd, uint32_t flight_size, uint32_t overhead, uint32_t a_rwndval)
412f8829a4aSRandall Stewart {
41380fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
414f8829a4aSRandall Stewart 
41580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
41680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = flight_size;
41780fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
41880fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = a_rwndval;
419c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
42080fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
42180fefe0aSRandall Stewart 	    from,
42280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
42380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
42480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
42580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
426f8829a4aSRandall Stewart }
427f8829a4aSRandall Stewart 
428f8829a4aSRandall Stewart void
429f8829a4aSRandall Stewart sctp_log_mbcnt(uint8_t from, uint32_t total_oq, uint32_t book, uint32_t total_mbcnt_q, uint32_t mbcnt)
430f8829a4aSRandall Stewart {
43180fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
432f8829a4aSRandall Stewart 
43380fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_size = total_oq;
43480fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.size_change = book;
43580fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_mb_size = total_mbcnt_q;
43680fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.mbcnt_change = mbcnt;
437c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
43880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBCNT,
43980fefe0aSRandall Stewart 	    from,
44080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
44180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
44280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
44380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
44480fefe0aSRandall Stewart 
445f8829a4aSRandall Stewart }
446f8829a4aSRandall Stewart 
447f8829a4aSRandall Stewart void
448f8829a4aSRandall Stewart sctp_misc_ints(uint8_t from, uint32_t a, uint32_t b, uint32_t c, uint32_t d)
449f8829a4aSRandall Stewart {
450c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
45180fefe0aSRandall Stewart 	    SCTP_LOG_MISC_EVENT,
45280fefe0aSRandall Stewart 	    from,
45380fefe0aSRandall Stewart 	    a, b, c, d);
454f8829a4aSRandall Stewart }
455f8829a4aSRandall Stewart 
456f8829a4aSRandall Stewart void
457f8829a4aSRandall Stewart sctp_wakeup_log(struct sctp_tcb *stcb, uint32_t cumtsn, uint32_t wake_cnt, int from)
458f8829a4aSRandall Stewart {
45980fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
460f8829a4aSRandall Stewart 
46180fefe0aSRandall Stewart 	sctp_clog.x.wake.stcb = (void *)stcb;
46280fefe0aSRandall Stewart 	sctp_clog.x.wake.wake_cnt = wake_cnt;
46380fefe0aSRandall Stewart 	sctp_clog.x.wake.flight = stcb->asoc.total_flight_count;
46480fefe0aSRandall Stewart 	sctp_clog.x.wake.send_q = stcb->asoc.send_queue_cnt;
46580fefe0aSRandall Stewart 	sctp_clog.x.wake.sent_q = stcb->asoc.sent_queue_cnt;
466f8829a4aSRandall Stewart 
467f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt < 0xff)
46880fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = (uint8_t) stcb->asoc.stream_queue_cnt;
469f8829a4aSRandall Stewart 	else
47080fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = 0xff;
471f8829a4aSRandall Stewart 
472f8829a4aSRandall Stewart 	if (stcb->asoc.chunks_on_out_queue < 0xff)
47380fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = (uint8_t) stcb->asoc.chunks_on_out_queue;
474f8829a4aSRandall Stewart 	else
47580fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = 0xff;
476f8829a4aSRandall Stewart 
47780fefe0aSRandall Stewart 	sctp_clog.x.wake.sctpflags = 0;
478f8829a4aSRandall Stewart 	/* set in the defered mode stuff */
479f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_DONT_WAKE)
48080fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 1;
481f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEOUTPUT)
48280fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 2;
483f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEINPUT)
48480fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 4;
485f8829a4aSRandall Stewart 	/* what about the sb */
486f8829a4aSRandall Stewart 	if (stcb->sctp_socket) {
487f8829a4aSRandall Stewart 		struct socket *so = stcb->sctp_socket;
488f8829a4aSRandall Stewart 
48980fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = (uint8_t) ((so->so_snd.sb_flags & 0x00ff));
490f8829a4aSRandall Stewart 	} else {
49180fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = 0xff;
492f8829a4aSRandall Stewart 	}
493c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
49480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_WAKE,
49580fefe0aSRandall Stewart 	    from,
49680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
49780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
49880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
49980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
50080fefe0aSRandall Stewart 
501f8829a4aSRandall Stewart }
502f8829a4aSRandall Stewart 
503f8829a4aSRandall Stewart void
504f8829a4aSRandall Stewart sctp_log_block(uint8_t from, struct socket *so, struct sctp_association *asoc, int sendlen)
505f8829a4aSRandall Stewart {
50680fefe0aSRandall Stewart 	struct sctp_cwnd_log sctp_clog;
507f8829a4aSRandall Stewart 
50880fefe0aSRandall Stewart 	sctp_clog.x.blk.onsb = asoc->total_output_queue_size;
50980fefe0aSRandall Stewart 	sctp_clog.x.blk.send_sent_qcnt = (uint16_t) (asoc->send_queue_cnt + asoc->sent_queue_cnt);
51080fefe0aSRandall Stewart 	sctp_clog.x.blk.peer_rwnd = asoc->peers_rwnd;
51180fefe0aSRandall Stewart 	sctp_clog.x.blk.stream_qcnt = (uint16_t) asoc->stream_queue_cnt;
51280fefe0aSRandall Stewart 	sctp_clog.x.blk.chunks_on_oque = (uint16_t) asoc->chunks_on_out_queue;
51380fefe0aSRandall Stewart 	sctp_clog.x.blk.flight_size = (uint16_t) (asoc->total_flight / 1024);
51480fefe0aSRandall Stewart 	sctp_clog.x.blk.sndlen = sendlen;
515c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
51680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_BLOCK,
51780fefe0aSRandall Stewart 	    from,
51880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
51980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
52080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
52180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
52280fefe0aSRandall Stewart 
523f8829a4aSRandall Stewart }
524f8829a4aSRandall Stewart 
525f8829a4aSRandall Stewart int
52642551e99SRandall Stewart sctp_fill_stat_log(void *optval, size_t *optsize)
527f8829a4aSRandall Stewart {
52880fefe0aSRandall Stewart 	/* May need to fix this if ktrdump does not work */
529f8829a4aSRandall Stewart 	return (0);
530f8829a4aSRandall Stewart }
531f8829a4aSRandall Stewart 
532f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
533f8829a4aSRandall Stewart uint8_t sctp_audit_data[SCTP_AUDIT_SIZE][2];
534f8829a4aSRandall Stewart static int sctp_audit_indx = 0;
535f8829a4aSRandall Stewart 
536f8829a4aSRandall Stewart static
537f8829a4aSRandall Stewart void
538f8829a4aSRandall Stewart sctp_print_audit_report(void)
539f8829a4aSRandall Stewart {
540f8829a4aSRandall Stewart 	int i;
541f8829a4aSRandall Stewart 	int cnt;
542f8829a4aSRandall Stewart 
543f8829a4aSRandall Stewart 	cnt = 0;
544f8829a4aSRandall Stewart 	for (i = sctp_audit_indx; i < SCTP_AUDIT_SIZE; i++) {
545f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
546f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
547f8829a4aSRandall Stewart 			cnt = 0;
548ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
549f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
550f8829a4aSRandall Stewart 			cnt = 0;
551ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
552f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
553f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
554ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
555f8829a4aSRandall Stewart 			cnt = 0;
556f8829a4aSRandall Stewart 		}
557ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t) sctp_audit_data[i][0],
558f8829a4aSRandall Stewart 		    (uint32_t) sctp_audit_data[i][1]);
559f8829a4aSRandall Stewart 		cnt++;
560f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
561ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
562f8829a4aSRandall Stewart 	}
563f8829a4aSRandall Stewart 	for (i = 0; i < sctp_audit_indx; i++) {
564f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
565f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
566f8829a4aSRandall Stewart 			cnt = 0;
567ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
568f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
569f8829a4aSRandall Stewart 			cnt = 0;
570ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
571f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
572f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
573ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
574f8829a4aSRandall Stewart 			cnt = 0;
575f8829a4aSRandall Stewart 		}
576ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t) sctp_audit_data[i][0],
577f8829a4aSRandall Stewart 		    (uint32_t) sctp_audit_data[i][1]);
578f8829a4aSRandall Stewart 		cnt++;
579f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
580ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
581f8829a4aSRandall Stewart 	}
582ad81507eSRandall Stewart 	SCTP_PRINTF("\n");
583f8829a4aSRandall Stewart }
584f8829a4aSRandall Stewart 
585f8829a4aSRandall Stewart void
586f8829a4aSRandall Stewart sctp_auditing(int from, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
587f8829a4aSRandall Stewart     struct sctp_nets *net)
588f8829a4aSRandall Stewart {
589f8829a4aSRandall Stewart 	int resend_cnt, tot_out, rep, tot_book_cnt;
590f8829a4aSRandall Stewart 	struct sctp_nets *lnet;
591f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
592f8829a4aSRandall Stewart 
593f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xAA;
594f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = 0x000000ff & from;
595f8829a4aSRandall Stewart 	sctp_audit_indx++;
596f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
597f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
598f8829a4aSRandall Stewart 	}
599f8829a4aSRandall Stewart 	if (inp == NULL) {
600f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
601f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x01;
602f8829a4aSRandall Stewart 		sctp_audit_indx++;
603f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
604f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
605f8829a4aSRandall Stewart 		}
606f8829a4aSRandall Stewart 		return;
607f8829a4aSRandall Stewart 	}
608f8829a4aSRandall Stewart 	if (stcb == NULL) {
609f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
610f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x02;
611f8829a4aSRandall Stewart 		sctp_audit_indx++;
612f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
613f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
614f8829a4aSRandall Stewart 		}
615f8829a4aSRandall Stewart 		return;
616f8829a4aSRandall Stewart 	}
617f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xA1;
618f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] =
619f8829a4aSRandall Stewart 	    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
620f8829a4aSRandall Stewart 	sctp_audit_indx++;
621f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
622f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
623f8829a4aSRandall Stewart 	}
624f8829a4aSRandall Stewart 	rep = 0;
625f8829a4aSRandall Stewart 	tot_book_cnt = 0;
626f8829a4aSRandall Stewart 	resend_cnt = tot_out = 0;
627f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
628f8829a4aSRandall Stewart 		if (chk->sent == SCTP_DATAGRAM_RESEND) {
629f8829a4aSRandall Stewart 			resend_cnt++;
630f8829a4aSRandall Stewart 		} else if (chk->sent < SCTP_DATAGRAM_RESEND) {
631f8829a4aSRandall Stewart 			tot_out += chk->book_size;
632f8829a4aSRandall Stewart 			tot_book_cnt++;
633f8829a4aSRandall Stewart 		}
634f8829a4aSRandall Stewart 	}
635f8829a4aSRandall Stewart 	if (resend_cnt != stcb->asoc.sent_queue_retran_cnt) {
636f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
637f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA1;
638f8829a4aSRandall Stewart 		sctp_audit_indx++;
639f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
640f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
641f8829a4aSRandall Stewart 		}
642ad81507eSRandall Stewart 		SCTP_PRINTF("resend_cnt:%d asoc-tot:%d\n",
643f8829a4aSRandall Stewart 		    resend_cnt, stcb->asoc.sent_queue_retran_cnt);
644f8829a4aSRandall Stewart 		rep = 1;
645f8829a4aSRandall Stewart 		stcb->asoc.sent_queue_retran_cnt = resend_cnt;
646f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xA2;
647f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] =
648f8829a4aSRandall Stewart 		    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
649f8829a4aSRandall Stewart 		sctp_audit_indx++;
650f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
651f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
652f8829a4aSRandall Stewart 		}
653f8829a4aSRandall Stewart 	}
654f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
655f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
656f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA2;
657f8829a4aSRandall Stewart 		sctp_audit_indx++;
658f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
659f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
660f8829a4aSRandall Stewart 		}
661f8829a4aSRandall Stewart 		rep = 1;
662ad81507eSRandall Stewart 		SCTP_PRINTF("tot_flt:%d asoc_tot:%d\n", tot_out,
663f8829a4aSRandall Stewart 		    (int)stcb->asoc.total_flight);
664f8829a4aSRandall Stewart 		stcb->asoc.total_flight = tot_out;
665f8829a4aSRandall Stewart 	}
666f8829a4aSRandall Stewart 	if (tot_book_cnt != stcb->asoc.total_flight_count) {
667f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
668f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA5;
669f8829a4aSRandall Stewart 		sctp_audit_indx++;
670f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
671f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
672f8829a4aSRandall Stewart 		}
673f8829a4aSRandall Stewart 		rep = 1;
674f31e6c7fSMichael Tuexen 		SCTP_PRINTF("tot_flt_book:%d\n", tot_book_cnt);
675f8829a4aSRandall Stewart 
676f8829a4aSRandall Stewart 		stcb->asoc.total_flight_count = tot_book_cnt;
677f8829a4aSRandall Stewart 	}
678f8829a4aSRandall Stewart 	tot_out = 0;
679f8829a4aSRandall Stewart 	TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
680f8829a4aSRandall Stewart 		tot_out += lnet->flight_size;
681f8829a4aSRandall Stewart 	}
682f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
683f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
684f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA3;
685f8829a4aSRandall Stewart 		sctp_audit_indx++;
686f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
687f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
688f8829a4aSRandall Stewart 		}
689f8829a4aSRandall Stewart 		rep = 1;
690ad81507eSRandall Stewart 		SCTP_PRINTF("real flight:%d net total was %d\n",
691f8829a4aSRandall Stewart 		    stcb->asoc.total_flight, tot_out);
692f8829a4aSRandall Stewart 		/* now corrective action */
693f8829a4aSRandall Stewart 		TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
694f8829a4aSRandall Stewart 
695f8829a4aSRandall Stewart 			tot_out = 0;
696f8829a4aSRandall Stewart 			TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
697f8829a4aSRandall Stewart 				if ((chk->whoTo == lnet) &&
698f8829a4aSRandall Stewart 				    (chk->sent < SCTP_DATAGRAM_RESEND)) {
699f8829a4aSRandall Stewart 					tot_out += chk->book_size;
700f8829a4aSRandall Stewart 				}
701f8829a4aSRandall Stewart 			}
702f8829a4aSRandall Stewart 			if (lnet->flight_size != tot_out) {
703f31e6c7fSMichael Tuexen 				SCTP_PRINTF("net:%p flight was %d corrected to %d\n",
704f31e6c7fSMichael Tuexen 				    lnet, lnet->flight_size,
705ad81507eSRandall Stewart 				    tot_out);
706f8829a4aSRandall Stewart 				lnet->flight_size = tot_out;
707f8829a4aSRandall Stewart 			}
708f8829a4aSRandall Stewart 		}
709f8829a4aSRandall Stewart 	}
710f8829a4aSRandall Stewart 	if (rep) {
711f8829a4aSRandall Stewart 		sctp_print_audit_report();
712f8829a4aSRandall Stewart 	}
713f8829a4aSRandall Stewart }
714f8829a4aSRandall Stewart 
715f8829a4aSRandall Stewart void
716f8829a4aSRandall Stewart sctp_audit_log(uint8_t ev, uint8_t fd)
717f8829a4aSRandall Stewart {
718f8829a4aSRandall Stewart 
719f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = ev;
720f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = fd;
721f8829a4aSRandall Stewart 	sctp_audit_indx++;
722f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
723f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
724f8829a4aSRandall Stewart 	}
725f8829a4aSRandall Stewart }
726f8829a4aSRandall Stewart 
727f8829a4aSRandall Stewart #endif
728f8829a4aSRandall Stewart 
729f8829a4aSRandall Stewart /*
73012af6654SMichael Tuexen  * sctp_stop_timers_for_shutdown() should be called
73112af6654SMichael Tuexen  * when entering the SHUTDOWN_SENT or SHUTDOWN_ACK_SENT
73212af6654SMichael Tuexen  * state to make sure that all timers are stopped.
73312af6654SMichael Tuexen  */
73412af6654SMichael Tuexen void
73512af6654SMichael Tuexen sctp_stop_timers_for_shutdown(struct sctp_tcb *stcb)
73612af6654SMichael Tuexen {
73712af6654SMichael Tuexen 	struct sctp_association *asoc;
73812af6654SMichael Tuexen 	struct sctp_nets *net;
73912af6654SMichael Tuexen 
74012af6654SMichael Tuexen 	asoc = &stcb->asoc;
74112af6654SMichael Tuexen 
74212af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
74312af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
74412af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
74512af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
74612af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
74712af6654SMichael Tuexen 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
74812af6654SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
749ca85e948SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->hb_timer.timer);
75012af6654SMichael Tuexen 	}
75112af6654SMichael Tuexen }
75212af6654SMichael Tuexen 
75312af6654SMichael Tuexen /*
754f8829a4aSRandall Stewart  * a list of sizes based on typical mtu's, used only if next hop size not
755f8829a4aSRandall Stewart  * returned.
756f8829a4aSRandall Stewart  */
757437fc91aSMichael Tuexen static uint32_t sctp_mtu_sizes[] = {
758f8829a4aSRandall Stewart 	68,
759f8829a4aSRandall Stewart 	296,
760f8829a4aSRandall Stewart 	508,
761f8829a4aSRandall Stewart 	512,
762f8829a4aSRandall Stewart 	544,
763f8829a4aSRandall Stewart 	576,
764f8829a4aSRandall Stewart 	1006,
765f8829a4aSRandall Stewart 	1492,
766f8829a4aSRandall Stewart 	1500,
767f8829a4aSRandall Stewart 	1536,
768f8829a4aSRandall Stewart 	2002,
769f8829a4aSRandall Stewart 	2048,
770f8829a4aSRandall Stewart 	4352,
771f8829a4aSRandall Stewart 	4464,
772f8829a4aSRandall Stewart 	8166,
773f8829a4aSRandall Stewart 	17914,
774f8829a4aSRandall Stewart 	32000,
775f8829a4aSRandall Stewart 	65535
776f8829a4aSRandall Stewart };
777f8829a4aSRandall Stewart 
778f8829a4aSRandall Stewart /*
779437fc91aSMichael Tuexen  * Return the largest MTU smaller than val. If there is no
780437fc91aSMichael Tuexen  * entry, just return val.
781f8829a4aSRandall Stewart  */
782437fc91aSMichael Tuexen uint32_t
783437fc91aSMichael Tuexen sctp_get_prev_mtu(uint32_t val)
784437fc91aSMichael Tuexen {
785437fc91aSMichael Tuexen 	uint32_t i;
786437fc91aSMichael Tuexen 
787437fc91aSMichael Tuexen 	if (val <= sctp_mtu_sizes[0]) {
788437fc91aSMichael Tuexen 		return (val);
789437fc91aSMichael Tuexen 	}
790437fc91aSMichael Tuexen 	for (i = 1; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
791437fc91aSMichael Tuexen 		if (val <= sctp_mtu_sizes[i]) {
792f8829a4aSRandall Stewart 			break;
793f8829a4aSRandall Stewart 		}
794f8829a4aSRandall Stewart 	}
795437fc91aSMichael Tuexen 	return (sctp_mtu_sizes[i - 1]);
796437fc91aSMichael Tuexen }
797437fc91aSMichael Tuexen 
798437fc91aSMichael Tuexen /*
799437fc91aSMichael Tuexen  * Return the smallest MTU larger than val. If there is no
800437fc91aSMichael Tuexen  * entry, just return val.
801437fc91aSMichael Tuexen  */
802437fc91aSMichael Tuexen uint32_t
803437fc91aSMichael Tuexen sctp_get_next_mtu(struct sctp_inpcb *inp, uint32_t val)
804437fc91aSMichael Tuexen {
805437fc91aSMichael Tuexen 	/* select another MTU that is just bigger than this one */
806437fc91aSMichael Tuexen 	uint32_t i;
807437fc91aSMichael Tuexen 
808437fc91aSMichael Tuexen 	for (i = 0; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
809437fc91aSMichael Tuexen 		if (val < sctp_mtu_sizes[i]) {
810437fc91aSMichael Tuexen 			return (sctp_mtu_sizes[i]);
811437fc91aSMichael Tuexen 		}
812437fc91aSMichael Tuexen 	}
813437fc91aSMichael Tuexen 	return (val);
814f8829a4aSRandall Stewart }
815f8829a4aSRandall Stewart 
816f8829a4aSRandall Stewart void
817f8829a4aSRandall Stewart sctp_fill_random_store(struct sctp_pcb *m)
818f8829a4aSRandall Stewart {
819f8829a4aSRandall Stewart 	/*
820f8829a4aSRandall Stewart 	 * Here we use the MD5/SHA-1 to hash with our good randomNumbers and
821f8829a4aSRandall Stewart 	 * our counter. The result becomes our good random numbers and we
822f8829a4aSRandall Stewart 	 * then setup to give these out. Note that we do no locking to
823f8829a4aSRandall Stewart 	 * protect this. This is ok, since if competing folks call this we
82417205eccSRandall Stewart 	 * will get more gobbled gook in the random store which is what we
825f8829a4aSRandall Stewart 	 * want. There is a danger that two guys will use the same random
826f8829a4aSRandall Stewart 	 * numbers, but thats ok too since that is random as well :->
827f8829a4aSRandall Stewart 	 */
828f8829a4aSRandall Stewart 	m->store_at = 0;
829ad81507eSRandall Stewart 	(void)sctp_hmac(SCTP_HMAC, (uint8_t *) m->random_numbers,
830f8829a4aSRandall Stewart 	    sizeof(m->random_numbers), (uint8_t *) & m->random_counter,
831f8829a4aSRandall Stewart 	    sizeof(m->random_counter), (uint8_t *) m->random_store);
832f8829a4aSRandall Stewart 	m->random_counter++;
833f8829a4aSRandall Stewart }
834f8829a4aSRandall Stewart 
835f8829a4aSRandall Stewart uint32_t
836851b7298SRandall Stewart sctp_select_initial_TSN(struct sctp_pcb *inp)
837f8829a4aSRandall Stewart {
838f8829a4aSRandall Stewart 	/*
839f8829a4aSRandall Stewart 	 * A true implementation should use random selection process to get
840f8829a4aSRandall Stewart 	 * the initial stream sequence number, using RFC1750 as a good
841f8829a4aSRandall Stewart 	 * guideline
842f8829a4aSRandall Stewart 	 */
843139bc87fSRandall Stewart 	uint32_t x, *xp;
844f8829a4aSRandall Stewart 	uint8_t *p;
845851b7298SRandall Stewart 	int store_at, new_store;
846f8829a4aSRandall Stewart 
847851b7298SRandall Stewart 	if (inp->initial_sequence_debug != 0) {
848f8829a4aSRandall Stewart 		uint32_t ret;
849f8829a4aSRandall Stewart 
850851b7298SRandall Stewart 		ret = inp->initial_sequence_debug;
851851b7298SRandall Stewart 		inp->initial_sequence_debug++;
852f8829a4aSRandall Stewart 		return (ret);
853f8829a4aSRandall Stewart 	}
854851b7298SRandall Stewart retry:
855851b7298SRandall Stewart 	store_at = inp->store_at;
856851b7298SRandall Stewart 	new_store = store_at + sizeof(uint32_t);
857851b7298SRandall Stewart 	if (new_store >= (SCTP_SIGNATURE_SIZE - 3)) {
858851b7298SRandall Stewart 		new_store = 0;
859f8829a4aSRandall Stewart 	}
860851b7298SRandall Stewart 	if (!atomic_cmpset_int(&inp->store_at, store_at, new_store)) {
861851b7298SRandall Stewart 		goto retry;
862851b7298SRandall Stewart 	}
863851b7298SRandall Stewart 	if (new_store == 0) {
864851b7298SRandall Stewart 		/* Refill the random store */
865851b7298SRandall Stewart 		sctp_fill_random_store(inp);
866851b7298SRandall Stewart 	}
867851b7298SRandall Stewart 	p = &inp->random_store[store_at];
868139bc87fSRandall Stewart 	xp = (uint32_t *) p;
869f8829a4aSRandall Stewart 	x = *xp;
870f8829a4aSRandall Stewart 	return (x);
871f8829a4aSRandall Stewart }
872f8829a4aSRandall Stewart 
873f8829a4aSRandall Stewart uint32_t
874830d754dSRandall Stewart sctp_select_a_tag(struct sctp_inpcb *inp, uint16_t lport, uint16_t rport, int save_in_twait)
875f8829a4aSRandall Stewart {
8767291848aSMichael Tuexen 	uint32_t x, not_done;
877f8829a4aSRandall Stewart 	struct timeval now;
878f8829a4aSRandall Stewart 
8796e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&now);
880f8829a4aSRandall Stewart 	not_done = 1;
881f8829a4aSRandall Stewart 	while (not_done) {
882851b7298SRandall Stewart 		x = sctp_select_initial_TSN(&inp->sctp_ep);
883f8829a4aSRandall Stewart 		if (x == 0) {
884f8829a4aSRandall Stewart 			/* we never use 0 */
885f8829a4aSRandall Stewart 			continue;
886f8829a4aSRandall Stewart 		}
887830d754dSRandall Stewart 		if (sctp_is_vtag_good(inp, x, lport, rport, &now, save_in_twait)) {
888f8829a4aSRandall Stewart 			not_done = 0;
889f8829a4aSRandall Stewart 		}
890f8829a4aSRandall Stewart 	}
891f8829a4aSRandall Stewart 	return (x);
892f8829a4aSRandall Stewart }
893f8829a4aSRandall Stewart 
894f8829a4aSRandall Stewart int
8950696e120SRandall Stewart sctp_init_asoc(struct sctp_inpcb *m, struct sctp_tcb *stcb,
896b5c16493SMichael Tuexen     uint32_t override_tag, uint32_t vrf_id)
897f8829a4aSRandall Stewart {
8980696e120SRandall Stewart 	struct sctp_association *asoc;
8990696e120SRandall Stewart 
900f8829a4aSRandall Stewart 	/*
901f8829a4aSRandall Stewart 	 * Anything set to zero is taken care of by the allocation routine's
902f8829a4aSRandall Stewart 	 * bzero
903f8829a4aSRandall Stewart 	 */
904f8829a4aSRandall Stewart 
905f8829a4aSRandall Stewart 	/*
906f8829a4aSRandall Stewart 	 * Up front select what scoping to apply on addresses I tell my peer
907f8829a4aSRandall Stewart 	 * Not sure what to do with these right now, we will need to come up
908f8829a4aSRandall Stewart 	 * with a way to set them. We may need to pass them through from the
909f8829a4aSRandall Stewart 	 * caller in the sctp_aloc_assoc() function.
910f8829a4aSRandall Stewart 	 */
911f8829a4aSRandall Stewart 	int i;
912f8829a4aSRandall Stewart 
9130696e120SRandall Stewart 	asoc = &stcb->asoc;
914f8829a4aSRandall Stewart 	/* init all variables to a known value. */
915c4739e2fSRandall Stewart 	SCTP_SET_STATE(&stcb->asoc, SCTP_STATE_INUSE);
916f8829a4aSRandall Stewart 	asoc->max_burst = m->sctp_ep.max_burst;
917899288aeSRandall Stewart 	asoc->fr_max_burst = m->sctp_ep.fr_max_burst;
918f8829a4aSRandall Stewart 	asoc->heart_beat_delay = TICKS_TO_MSEC(m->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT]);
919f8829a4aSRandall Stewart 	asoc->cookie_life = m->sctp_ep.def_cookie_life;
92020083c2eSMichael Tuexen 	asoc->sctp_cmt_on_off = m->sctp_cmt_on_off;
921c446091bSMichael Tuexen 	asoc->ecn_allowed = m->sctp_ecn_enable;
922830d754dSRandall Stewart 	asoc->sctp_nr_sack_on_off = (uint8_t) SCTP_BASE_SYSCTL(sctp_nr_sack_on_off);
923ca85e948SMichael Tuexen 	asoc->sctp_cmt_pf = (uint8_t) 0;
924d61a0ae0SRandall Stewart 	asoc->sctp_frag_point = m->sctp_frag_point;
925e2e7c62eSMichael Tuexen 	asoc->sctp_features = m->sctp_features;
92658bdb691SMichael Tuexen 	asoc->default_dscp = m->sctp_ep.default_dscp;
92742551e99SRandall Stewart #ifdef INET6
92858bdb691SMichael Tuexen 	if (m->sctp_ep.default_flowlabel) {
92958bdb691SMichael Tuexen 		asoc->default_flowlabel = m->sctp_ep.default_flowlabel;
93058bdb691SMichael Tuexen 	} else {
93158bdb691SMichael Tuexen 		if (m->ip_inp.inp.inp_flags & IN6P_AUTOFLOWLABEL) {
93258bdb691SMichael Tuexen 			asoc->default_flowlabel = sctp_select_initial_TSN(&m->sctp_ep);
93358bdb691SMichael Tuexen 			asoc->default_flowlabel &= 0x000fffff;
93458bdb691SMichael Tuexen 			asoc->default_flowlabel |= 0x80000000;
93558bdb691SMichael Tuexen 		} else {
936f8829a4aSRandall Stewart 			asoc->default_flowlabel = 0;
93758bdb691SMichael Tuexen 		}
93858bdb691SMichael Tuexen 	}
939f8829a4aSRandall Stewart #endif
9409f22f500SRandall Stewart 	asoc->sb_send_resv = 0;
941f8829a4aSRandall Stewart 	if (override_tag) {
942f8829a4aSRandall Stewart 		asoc->my_vtag = override_tag;
943f8829a4aSRandall Stewart 	} else {
944830d754dSRandall Stewart 		asoc->my_vtag = sctp_select_a_tag(m, stcb->sctp_ep->sctp_lport, stcb->rport, 1);
945f8829a4aSRandall Stewart 	}
946de0e935bSRandall Stewart 	/* Get the nonce tags */
947830d754dSRandall Stewart 	asoc->my_vtag_nonce = sctp_select_a_tag(m, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
948830d754dSRandall Stewart 	asoc->peer_vtag_nonce = sctp_select_a_tag(m, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
94942551e99SRandall Stewart 	asoc->vrf_id = vrf_id;
950de0e935bSRandall Stewart 
95118e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
95218e198d3SRandall Stewart 	asoc->tsn_in_at = 0;
95318e198d3SRandall Stewart 	asoc->tsn_out_at = 0;
95418e198d3SRandall Stewart 	asoc->tsn_in_wrapped = 0;
95518e198d3SRandall Stewart 	asoc->tsn_out_wrapped = 0;
95618e198d3SRandall Stewart 	asoc->cumack_log_at = 0;
957b201f536SRandall Stewart 	asoc->cumack_log_atsnt = 0;
95818e198d3SRandall Stewart #endif
95918e198d3SRandall Stewart #ifdef SCTP_FS_SPEC_LOG
96018e198d3SRandall Stewart 	asoc->fs_index = 0;
96118e198d3SRandall Stewart #endif
962f8829a4aSRandall Stewart 	asoc->refcnt = 0;
963f8829a4aSRandall Stewart 	asoc->assoc_up_sent = 0;
964f8829a4aSRandall Stewart 	asoc->asconf_seq_out = asoc->str_reset_seq_out = asoc->init_seq_number = asoc->sending_seq =
965f8829a4aSRandall Stewart 	    sctp_select_initial_TSN(&m->sctp_ep);
966c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked = asoc->asconf_seq_out - 1;
967f8829a4aSRandall Stewart 	/* we are optimisitic here */
968f8829a4aSRandall Stewart 	asoc->peer_supports_pktdrop = 1;
969830d754dSRandall Stewart 	asoc->peer_supports_nat = 0;
970f8829a4aSRandall Stewart 	asoc->sent_queue_retran_cnt = 0;
971f8829a4aSRandall Stewart 
972f8829a4aSRandall Stewart 	/* for CMT */
9738933fa13SRandall Stewart 	asoc->last_net_cmt_send_started = NULL;
974f8829a4aSRandall Stewart 
975f8829a4aSRandall Stewart 	/* This will need to be adjusted */
976f8829a4aSRandall Stewart 	asoc->last_acked_seq = asoc->init_seq_number - 1;
977f8829a4aSRandall Stewart 	asoc->advanced_peer_ack_point = asoc->last_acked_seq;
978f8829a4aSRandall Stewart 	asoc->asconf_seq_in = asoc->last_acked_seq;
979f8829a4aSRandall Stewart 
980f8829a4aSRandall Stewart 	/* here we are different, we hold the next one we expect */
981f8829a4aSRandall Stewart 	asoc->str_reset_seq_in = asoc->last_acked_seq + 1;
982f8829a4aSRandall Stewart 
983f8829a4aSRandall Stewart 	asoc->initial_init_rto_max = m->sctp_ep.initial_init_rto_max;
984f8829a4aSRandall Stewart 	asoc->initial_rto = m->sctp_ep.initial_rto;
985f8829a4aSRandall Stewart 
986f8829a4aSRandall Stewart 	asoc->max_init_times = m->sctp_ep.max_init_times;
987f8829a4aSRandall Stewart 	asoc->max_send_times = m->sctp_ep.max_send_times;
988f8829a4aSRandall Stewart 	asoc->def_net_failure = m->sctp_ep.def_net_failure;
989ca85e948SMichael Tuexen 	asoc->def_net_pf_threshold = m->sctp_ep.def_net_pf_threshold;
990f8829a4aSRandall Stewart 	asoc->free_chunk_cnt = 0;
991f8829a4aSRandall Stewart 
992f8829a4aSRandall Stewart 	asoc->iam_blocking = 0;
993493d8e5aSRandall Stewart 
994f8829a4aSRandall Stewart 	asoc->context = m->sctp_context;
995f8829a4aSRandall Stewart 	asoc->def_send = m->def_send;
996f8829a4aSRandall Stewart 	asoc->delayed_ack = TICKS_TO_MSEC(m->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV]);
99742551e99SRandall Stewart 	asoc->sack_freq = m->sctp_ep.sctp_sack_freq;
998f8829a4aSRandall Stewart 	asoc->pr_sctp_cnt = 0;
999f8829a4aSRandall Stewart 	asoc->total_output_queue_size = 0;
1000f8829a4aSRandall Stewart 
1001f8829a4aSRandall Stewart 	if (m->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
1002f8829a4aSRandall Stewart 		struct in6pcb *inp6;
1003f8829a4aSRandall Stewart 
1004f8829a4aSRandall Stewart 		/* Its a V6 socket */
1005f8829a4aSRandall Stewart 		inp6 = (struct in6pcb *)m;
1006f8829a4aSRandall Stewart 		asoc->ipv6_addr_legal = 1;
1007f8829a4aSRandall Stewart 		/* Now look at the binding flag to see if V4 will be legal */
100844b7479bSRandall Stewart 		if (SCTP_IPV6_V6ONLY(inp6) == 0) {
1009f8829a4aSRandall Stewart 			asoc->ipv4_addr_legal = 1;
1010f8829a4aSRandall Stewart 		} else {
1011f8829a4aSRandall Stewart 			/* V4 addresses are NOT legal on the association */
1012f8829a4aSRandall Stewart 			asoc->ipv4_addr_legal = 0;
1013f8829a4aSRandall Stewart 		}
1014f8829a4aSRandall Stewart 	} else {
1015f8829a4aSRandall Stewart 		/* Its a V4 socket, no - V6 */
1016f8829a4aSRandall Stewart 		asoc->ipv4_addr_legal = 1;
1017f8829a4aSRandall Stewart 		asoc->ipv6_addr_legal = 0;
1018f8829a4aSRandall Stewart 	}
1019f8829a4aSRandall Stewart 
102062c1ff9cSRandall Stewart 	asoc->my_rwnd = max(SCTP_SB_LIMIT_RCV(m->sctp_socket), SCTP_MINIMAL_RWND);
102162c1ff9cSRandall Stewart 	asoc->peers_rwnd = SCTP_SB_LIMIT_RCV(m->sctp_socket);
1022f8829a4aSRandall Stewart 
1023f8829a4aSRandall Stewart 	asoc->smallest_mtu = m->sctp_frag_point;
1024f8829a4aSRandall Stewart 	asoc->minrto = m->sctp_ep.sctp_minrto;
1025f8829a4aSRandall Stewart 	asoc->maxrto = m->sctp_ep.sctp_maxrto;
1026f8829a4aSRandall Stewart 
1027f8829a4aSRandall Stewart 	asoc->locked_on_sending = NULL;
1028f8829a4aSRandall Stewart 	asoc->stream_locked_on = 0;
1029f8829a4aSRandall Stewart 	asoc->ecn_echo_cnt_onq = 0;
1030f8829a4aSRandall Stewart 	asoc->stream_locked = 0;
1031f8829a4aSRandall Stewart 
103242551e99SRandall Stewart 	asoc->send_sack = 1;
103342551e99SRandall Stewart 
103442551e99SRandall Stewart 	LIST_INIT(&asoc->sctp_restricted_addrs);
103542551e99SRandall Stewart 
1036f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->nets);
1037f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->pending_reply_queue);
10382afb3e84SRandall Stewart 	TAILQ_INIT(&asoc->asconf_ack_sent);
1039f8829a4aSRandall Stewart 	/* Setup to fill the hb random cache at first HB */
1040f8829a4aSRandall Stewart 	asoc->hb_random_idx = 4;
1041f8829a4aSRandall Stewart 
1042f8829a4aSRandall Stewart 	asoc->sctp_autoclose_ticks = m->sctp_ep.auto_close_time;
1043f8829a4aSRandall Stewart 
10440e9a9c10SMichael Tuexen 	stcb->asoc.congestion_control_module = m->sctp_ep.sctp_default_cc_module;
10450e9a9c10SMichael Tuexen 	stcb->asoc.cc_functions = sctp_cc_functions[m->sctp_ep.sctp_default_cc_module];
1046b54d3a6cSRandall Stewart 
1047f7a77f6fSMichael Tuexen 	stcb->asoc.stream_scheduling_module = m->sctp_ep.sctp_default_ss_module;
1048f7a77f6fSMichael Tuexen 	stcb->asoc.ss_functions = sctp_ss_functions[m->sctp_ep.sctp_default_ss_module];
1049f7a77f6fSMichael Tuexen 
1050b54d3a6cSRandall Stewart 	/*
1051f8829a4aSRandall Stewart 	 * Now the stream parameters, here we allocate space for all streams
1052f8829a4aSRandall Stewart 	 * that we request by default.
1053f8829a4aSRandall Stewart 	 */
1054ea44232bSRandall Stewart 	asoc->strm_realoutsize = asoc->streamoutcnt = asoc->pre_open_streams =
1055f8829a4aSRandall Stewart 	    m->sctp_ep.pre_open_stream_count;
1056f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->strmout, struct sctp_stream_out *,
1057f8829a4aSRandall Stewart 	    asoc->streamoutcnt * sizeof(struct sctp_stream_out),
1058207304d4SRandall Stewart 	    SCTP_M_STRMO);
1059f8829a4aSRandall Stewart 	if (asoc->strmout == NULL) {
1060f8829a4aSRandall Stewart 		/* big trouble no memory */
1061c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1062f8829a4aSRandall Stewart 		return (ENOMEM);
1063f8829a4aSRandall Stewart 	}
1064f8829a4aSRandall Stewart 	for (i = 0; i < asoc->streamoutcnt; i++) {
1065f8829a4aSRandall Stewart 		/*
1066f8829a4aSRandall Stewart 		 * inbound side must be set to 0xffff, also NOTE when we get
1067f8829a4aSRandall Stewart 		 * the INIT-ACK back (for INIT sender) we MUST reduce the
1068f8829a4aSRandall Stewart 		 * count (streamoutcnt) but first check if we sent to any of
1069f8829a4aSRandall Stewart 		 * the upper streams that were dropped (if some were). Those
1070f8829a4aSRandall Stewart 		 * that were dropped must be notified to the upper layer as
1071f8829a4aSRandall Stewart 		 * failed to send.
1072f8829a4aSRandall Stewart 		 */
1073f8829a4aSRandall Stewart 		asoc->strmout[i].next_sequence_sent = 0x0;
1074f8829a4aSRandall Stewart 		TAILQ_INIT(&asoc->strmout[i].outqueue);
1075f8829a4aSRandall Stewart 		asoc->strmout[i].stream_no = i;
1076f8829a4aSRandall Stewart 		asoc->strmout[i].last_msg_incomplete = 0;
1077252f7f93SMichael Tuexen 		asoc->ss_functions.sctp_ss_init_stream(&asoc->strmout[i], NULL);
1078f8829a4aSRandall Stewart 	}
1079f7a77f6fSMichael Tuexen 	asoc->ss_functions.sctp_ss_init(stcb, asoc, 0);
1080f7a77f6fSMichael Tuexen 
1081f8829a4aSRandall Stewart 	/* Now the mapping array */
1082f8829a4aSRandall Stewart 	asoc->mapping_array_size = SCTP_INITIAL_MAPPING_ARRAY;
1083f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->mapping_array, uint8_t *, asoc->mapping_array_size,
1084207304d4SRandall Stewart 	    SCTP_M_MAP);
1085f8829a4aSRandall Stewart 	if (asoc->mapping_array == NULL) {
1086207304d4SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1087c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1088f8829a4aSRandall Stewart 		return (ENOMEM);
1089f8829a4aSRandall Stewart 	}
1090f8829a4aSRandall Stewart 	memset(asoc->mapping_array, 0, asoc->mapping_array_size);
1091b5c16493SMichael Tuexen 	SCTP_MALLOC(asoc->nr_mapping_array, uint8_t *, asoc->mapping_array_size,
1092830d754dSRandall Stewart 	    SCTP_M_MAP);
1093bf1be571SRandall Stewart 	if (asoc->nr_mapping_array == NULL) {
1094bf1be571SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1095bf1be571SRandall Stewart 		SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1096bf1be571SRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1097bf1be571SRandall Stewart 		return (ENOMEM);
1098bf1be571SRandall Stewart 	}
1099b5c16493SMichael Tuexen 	memset(asoc->nr_mapping_array, 0, asoc->mapping_array_size);
1100830d754dSRandall Stewart 
1101f8829a4aSRandall Stewart 	/* Now the init of the other outqueues */
1102f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->free_chunks);
1103f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->control_send_queue);
1104c54a18d2SRandall Stewart 	TAILQ_INIT(&asoc->asconf_send_queue);
1105f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->send_queue);
1106f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->sent_queue);
1107f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->reasmqueue);
1108f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->resetHead);
1109f8829a4aSRandall Stewart 	asoc->max_inbound_streams = m->sctp_ep.max_open_streams_intome;
1110f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->asconf_queue);
1111f8829a4aSRandall Stewart 	/* authentication fields */
1112f8829a4aSRandall Stewart 	asoc->authinfo.random = NULL;
1113830d754dSRandall Stewart 	asoc->authinfo.active_keyid = 0;
1114f8829a4aSRandall Stewart 	asoc->authinfo.assoc_key = NULL;
1115f8829a4aSRandall Stewart 	asoc->authinfo.assoc_keyid = 0;
1116f8829a4aSRandall Stewart 	asoc->authinfo.recv_key = NULL;
1117f8829a4aSRandall Stewart 	asoc->authinfo.recv_keyid = 0;
1118f8829a4aSRandall Stewart 	LIST_INIT(&asoc->shared_keys);
1119f42a358aSRandall Stewart 	asoc->marked_retrans = 0;
1120f42a358aSRandall Stewart 	asoc->timoinit = 0;
1121f42a358aSRandall Stewart 	asoc->timodata = 0;
1122f42a358aSRandall Stewart 	asoc->timosack = 0;
1123f42a358aSRandall Stewart 	asoc->timoshutdown = 0;
1124f42a358aSRandall Stewart 	asoc->timoheartbeat = 0;
1125f42a358aSRandall Stewart 	asoc->timocookie = 0;
1126f42a358aSRandall Stewart 	asoc->timoshutdownack = 0;
11276e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&asoc->start_time);
11286e55db54SRandall Stewart 	asoc->discontinuity_time = asoc->start_time;
1129eacc51c5SRandall Stewart 	/*
1130eacc51c5SRandall Stewart 	 * sa_ignore MEMLEAK {memory is put in the assoc mapping array and
113177acdc25SRandall Stewart 	 * freed later when the association is freed.
1132eacc51c5SRandall Stewart 	 */
1133f8829a4aSRandall Stewart 	return (0);
1134f8829a4aSRandall Stewart }
1135f8829a4aSRandall Stewart 
11360e13104dSRandall Stewart void
11370e13104dSRandall Stewart sctp_print_mapping_array(struct sctp_association *asoc)
11380e13104dSRandall Stewart {
1139aed5947cSMichael Tuexen 	unsigned int i, limit;
11400e13104dSRandall Stewart 
1141aed5947cSMichael Tuexen 	printf("Mapping array size: %d, baseTSN: %8.8x, cumAck: %8.8x, highestTSN: (%8.8x, %8.8x).\n",
11420e13104dSRandall Stewart 	    asoc->mapping_array_size,
11430e13104dSRandall Stewart 	    asoc->mapping_array_base_tsn,
11440e13104dSRandall Stewart 	    asoc->cumulative_tsn,
1145aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_map,
1146aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_nr_map);
1147aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
1148aed5947cSMichael Tuexen 		if (asoc->mapping_array[limit - 1]) {
114977acdc25SRandall Stewart 			break;
115077acdc25SRandall Stewart 		}
115177acdc25SRandall Stewart 	}
1152aed5947cSMichael Tuexen 	printf("Renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
115377acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1154aed5947cSMichael Tuexen 		printf("%2.2x%c", asoc->mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
115577acdc25SRandall Stewart 	}
1156aed5947cSMichael Tuexen 	if (limit % 16)
115777acdc25SRandall Stewart 		printf("\n");
1158aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
1159aed5947cSMichael Tuexen 		if (asoc->nr_mapping_array[limit - 1]) {
116077acdc25SRandall Stewart 			break;
116177acdc25SRandall Stewart 		}
116277acdc25SRandall Stewart 	}
1163aed5947cSMichael Tuexen 	printf("Non renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
116477acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1165553aff12SMichael Tuexen 		printf("%2.2x%c", asoc->nr_mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
11660e13104dSRandall Stewart 	}
1167aed5947cSMichael Tuexen 	if (limit % 16)
11680e13104dSRandall Stewart 		printf("\n");
11690e13104dSRandall Stewart }
11700e13104dSRandall Stewart 
1171f8829a4aSRandall Stewart int
11720696e120SRandall Stewart sctp_expand_mapping_array(struct sctp_association *asoc, uint32_t needed)
1173f8829a4aSRandall Stewart {
1174f8829a4aSRandall Stewart 	/* mapping array needs to grow */
1175b5c16493SMichael Tuexen 	uint8_t *new_array1, *new_array2;
11760696e120SRandall Stewart 	uint32_t new_size;
1177f8829a4aSRandall Stewart 
11780696e120SRandall Stewart 	new_size = asoc->mapping_array_size + ((needed + 7) / 8 + SCTP_MAPPING_ARRAY_INCR);
1179b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array1, uint8_t *, new_size, SCTP_M_MAP);
1180b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array2, uint8_t *, new_size, SCTP_M_MAP);
1181b5c16493SMichael Tuexen 	if ((new_array1 == NULL) || (new_array2 == NULL)) {
1182f8829a4aSRandall Stewart 		/* can't get more, forget it */
1183b5c16493SMichael Tuexen 		SCTP_PRINTF("No memory for expansion of SCTP mapping array %d\n", new_size);
1184b5c16493SMichael Tuexen 		if (new_array1) {
1185b5c16493SMichael Tuexen 			SCTP_FREE(new_array1, SCTP_M_MAP);
1186b5c16493SMichael Tuexen 		}
1187b5c16493SMichael Tuexen 		if (new_array2) {
1188b5c16493SMichael Tuexen 			SCTP_FREE(new_array2, SCTP_M_MAP);
1189b5c16493SMichael Tuexen 		}
1190f8829a4aSRandall Stewart 		return (-1);
1191f8829a4aSRandall Stewart 	}
1192b5c16493SMichael Tuexen 	memset(new_array1, 0, new_size);
1193b5c16493SMichael Tuexen 	memset(new_array2, 0, new_size);
1194b5c16493SMichael Tuexen 	memcpy(new_array1, asoc->mapping_array, asoc->mapping_array_size);
1195b5c16493SMichael Tuexen 	memcpy(new_array2, asoc->nr_mapping_array, asoc->mapping_array_size);
1196207304d4SRandall Stewart 	SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1197830d754dSRandall Stewart 	SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP);
1198b5c16493SMichael Tuexen 	asoc->mapping_array = new_array1;
1199b5c16493SMichael Tuexen 	asoc->nr_mapping_array = new_array2;
1200b5c16493SMichael Tuexen 	asoc->mapping_array_size = new_size;
1201830d754dSRandall Stewart 	return (0);
1202830d754dSRandall Stewart }
1203830d754dSRandall Stewart 
12048933fa13SRandall Stewart 
120542551e99SRandall Stewart static void
120642551e99SRandall Stewart sctp_iterator_work(struct sctp_iterator *it)
120742551e99SRandall Stewart {
120842551e99SRandall Stewart 	int iteration_count = 0;
120942551e99SRandall Stewart 	int inp_skip = 0;
1210ec4c19fcSRandall Stewart 	int first_in = 1;
1211ec4c19fcSRandall Stewart 	struct sctp_inpcb *tinp;
121242551e99SRandall Stewart 
1213ec4c19fcSRandall Stewart 	SCTP_INP_INFO_RLOCK();
121442551e99SRandall Stewart 	SCTP_ITERATOR_LOCK();
1215ad81507eSRandall Stewart 	if (it->inp) {
1216ec4c19fcSRandall Stewart 		SCTP_INP_RLOCK(it->inp);
121742551e99SRandall Stewart 		SCTP_INP_DECR_REF(it->inp);
1218ad81507eSRandall Stewart 	}
121942551e99SRandall Stewart 	if (it->inp == NULL) {
122042551e99SRandall Stewart 		/* iterator is complete */
122142551e99SRandall Stewart done_with_iterator:
122242551e99SRandall Stewart 		SCTP_ITERATOR_UNLOCK();
1223ec4c19fcSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
122442551e99SRandall Stewart 		if (it->function_atend != NULL) {
122542551e99SRandall Stewart 			(*it->function_atend) (it->pointer, it->val);
122642551e99SRandall Stewart 		}
1227207304d4SRandall Stewart 		SCTP_FREE(it, SCTP_M_ITER);
122842551e99SRandall Stewart 		return;
122942551e99SRandall Stewart 	}
123042551e99SRandall Stewart select_a_new_ep:
1231ec4c19fcSRandall Stewart 	if (first_in) {
1232ec4c19fcSRandall Stewart 		first_in = 0;
1233ec4c19fcSRandall Stewart 	} else {
1234f7517433SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1235ec4c19fcSRandall Stewart 	}
123642551e99SRandall Stewart 	while (((it->pcb_flags) &&
123742551e99SRandall Stewart 	    ((it->inp->sctp_flags & it->pcb_flags) != it->pcb_flags)) ||
123842551e99SRandall Stewart 	    ((it->pcb_features) &&
123942551e99SRandall Stewart 	    ((it->inp->sctp_features & it->pcb_features) != it->pcb_features))) {
124042551e99SRandall Stewart 		/* endpoint flags or features don't match, so keep looking */
124142551e99SRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
1242f7517433SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
124342551e99SRandall Stewart 			goto done_with_iterator;
124442551e99SRandall Stewart 		}
1245ec4c19fcSRandall Stewart 		tinp = it->inp;
124642551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
1247ec4c19fcSRandall Stewart 		SCTP_INP_RUNLOCK(tinp);
124842551e99SRandall Stewart 		if (it->inp == NULL) {
124942551e99SRandall Stewart 			goto done_with_iterator;
125042551e99SRandall Stewart 		}
125142551e99SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1252f7517433SRandall Stewart 	}
125342551e99SRandall Stewart 	/* now go through each assoc which is in the desired state */
125442551e99SRandall Stewart 	if (it->done_current_ep == 0) {
125542551e99SRandall Stewart 		if (it->function_inp != NULL)
125642551e99SRandall Stewart 			inp_skip = (*it->function_inp) (it->inp, it->pointer, it->val);
125742551e99SRandall Stewart 		it->done_current_ep = 1;
125842551e99SRandall Stewart 	}
125942551e99SRandall Stewart 	if (it->stcb == NULL) {
126042551e99SRandall Stewart 		/* run the per instance function */
126142551e99SRandall Stewart 		it->stcb = LIST_FIRST(&it->inp->sctp_asoc_list);
126242551e99SRandall Stewart 	}
126342551e99SRandall Stewart 	if ((inp_skip) || it->stcb == NULL) {
126442551e99SRandall Stewart 		if (it->function_inp_end != NULL) {
126542551e99SRandall Stewart 			inp_skip = (*it->function_inp_end) (it->inp,
126642551e99SRandall Stewart 			    it->pointer,
126742551e99SRandall Stewart 			    it->val);
126842551e99SRandall Stewart 		}
126942551e99SRandall Stewart 		SCTP_INP_RUNLOCK(it->inp);
127042551e99SRandall Stewart 		goto no_stcb;
127142551e99SRandall Stewart 	}
127242551e99SRandall Stewart 	while (it->stcb) {
127342551e99SRandall Stewart 		SCTP_TCB_LOCK(it->stcb);
127442551e99SRandall Stewart 		if (it->asoc_state && ((it->stcb->asoc.state & it->asoc_state) != it->asoc_state)) {
127542551e99SRandall Stewart 			/* not in the right state... keep looking */
127642551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
127742551e99SRandall Stewart 			goto next_assoc;
127842551e99SRandall Stewart 		}
127942551e99SRandall Stewart 		/* see if we have limited out the iterator loop */
128042551e99SRandall Stewart 		iteration_count++;
128142551e99SRandall Stewart 		if (iteration_count > SCTP_ITERATOR_MAX_AT_ONCE) {
128242551e99SRandall Stewart 			/* Pause to let others grab the lock */
128342551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, 1);
128442551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
1285c4739e2fSRandall Stewart 			SCTP_INP_INCR_REF(it->inp);
128642551e99SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
128742551e99SRandall Stewart 			SCTP_ITERATOR_UNLOCK();
1288ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1289ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RLOCK();
129042551e99SRandall Stewart 			SCTP_ITERATOR_LOCK();
1291f7517433SRandall Stewart 			if (sctp_it_ctl.iterator_flags) {
1292f7517433SRandall Stewart 				/* We won't be staying here */
1293f7517433SRandall Stewart 				SCTP_INP_DECR_REF(it->inp);
1294f7517433SRandall Stewart 				atomic_add_int(&it->stcb->asoc.refcnt, -1);
1295f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1296f7517433SRandall Stewart 				    SCTP_ITERATOR_MUST_EXIT) {
1297f7517433SRandall Stewart 					goto done_with_iterator;
1298f7517433SRandall Stewart 				}
1299f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1300f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_IT) {
1301f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_IT;
1302f7517433SRandall Stewart 					goto done_with_iterator;
1303f7517433SRandall Stewart 				}
1304f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1305f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_INP) {
1306f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_INP;
1307f7517433SRandall Stewart 					goto no_stcb;
1308f7517433SRandall Stewart 				}
1309f7517433SRandall Stewart 				/* If we reach here huh? */
1310f7517433SRandall Stewart 				printf("Unknown it ctl flag %x\n",
1311f7517433SRandall Stewart 				    sctp_it_ctl.iterator_flags);
1312f7517433SRandall Stewart 				sctp_it_ctl.iterator_flags = 0;
1313f7517433SRandall Stewart 			}
131442551e99SRandall Stewart 			SCTP_INP_RLOCK(it->inp);
1315c4739e2fSRandall Stewart 			SCTP_INP_DECR_REF(it->inp);
131642551e99SRandall Stewart 			SCTP_TCB_LOCK(it->stcb);
131742551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, -1);
131842551e99SRandall Stewart 			iteration_count = 0;
131942551e99SRandall Stewart 		}
132042551e99SRandall Stewart 		/* run function on this one */
132142551e99SRandall Stewart 		(*it->function_assoc) (it->inp, it->stcb, it->pointer, it->val);
132242551e99SRandall Stewart 
132342551e99SRandall Stewart 		/*
132442551e99SRandall Stewart 		 * we lie here, it really needs to have its own type but
132542551e99SRandall Stewart 		 * first I must verify that this won't effect things :-0
132642551e99SRandall Stewart 		 */
132742551e99SRandall Stewart 		if (it->no_chunk_output == 0)
1328ceaad40aSRandall Stewart 			sctp_chunk_output(it->inp, it->stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
132942551e99SRandall Stewart 
133042551e99SRandall Stewart 		SCTP_TCB_UNLOCK(it->stcb);
133142551e99SRandall Stewart next_assoc:
133242551e99SRandall Stewart 		it->stcb = LIST_NEXT(it->stcb, sctp_tcblist);
133342551e99SRandall Stewart 		if (it->stcb == NULL) {
133442551e99SRandall Stewart 			/* Run last function */
133542551e99SRandall Stewart 			if (it->function_inp_end != NULL) {
133642551e99SRandall Stewart 				inp_skip = (*it->function_inp_end) (it->inp,
133742551e99SRandall Stewart 				    it->pointer,
133842551e99SRandall Stewart 				    it->val);
133942551e99SRandall Stewart 			}
134042551e99SRandall Stewart 		}
134142551e99SRandall Stewart 	}
134242551e99SRandall Stewart 	SCTP_INP_RUNLOCK(it->inp);
134342551e99SRandall Stewart no_stcb:
134442551e99SRandall Stewart 	/* done with all assocs on this endpoint, move on to next endpoint */
134542551e99SRandall Stewart 	it->done_current_ep = 0;
134642551e99SRandall Stewart 	if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
134742551e99SRandall Stewart 		it->inp = NULL;
134842551e99SRandall Stewart 	} else {
134942551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
135042551e99SRandall Stewart 	}
135142551e99SRandall Stewart 	if (it->inp == NULL) {
135242551e99SRandall Stewart 		goto done_with_iterator;
135342551e99SRandall Stewart 	}
135442551e99SRandall Stewart 	goto select_a_new_ep;
135542551e99SRandall Stewart }
135642551e99SRandall Stewart 
135742551e99SRandall Stewart void
135842551e99SRandall Stewart sctp_iterator_worker(void)
135942551e99SRandall Stewart {
13604a9ef3f8SMichael Tuexen 	struct sctp_iterator *it, *nit;
136142551e99SRandall Stewart 
136242551e99SRandall Stewart 	/* This function is called with the WQ lock in place */
136342551e99SRandall Stewart 
1364f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 1;
13654a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) {
13664a9ef3f8SMichael Tuexen 		sctp_it_ctl.cur_it = it;
136742551e99SRandall Stewart 		/* now lets work on this one */
1368f7517433SRandall Stewart 		TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr);
136942551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
1370f7517433SRandall Stewart 		CURVNET_SET(it->vn);
137142551e99SRandall Stewart 		sctp_iterator_work(it);
1372f79aab18SRandall Stewart 		sctp_it_ctl.cur_it = NULL;
1373f7517433SRandall Stewart 		CURVNET_RESTORE();
137442551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
1375f7517433SRandall Stewart 		if (sctp_it_ctl.iterator_flags & SCTP_ITERATOR_MUST_EXIT) {
1376f7517433SRandall Stewart 			break;
1377f7517433SRandall Stewart 		}
13783c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
137942551e99SRandall Stewart 	}
1380f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 0;
138142551e99SRandall Stewart 	return;
138242551e99SRandall Stewart }
138342551e99SRandall Stewart 
1384f8829a4aSRandall Stewart 
1385f8829a4aSRandall Stewart static void
1386f8829a4aSRandall Stewart sctp_handle_addr_wq(void)
1387f8829a4aSRandall Stewart {
1388f8829a4aSRandall Stewart 	/* deal with the ADDR wq from the rtsock calls */
13894a9ef3f8SMichael Tuexen 	struct sctp_laddr *wi, *nwi;
139042551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
1391f8829a4aSRandall Stewart 
139242551e99SRandall Stewart 	SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
1393207304d4SRandall Stewart 	    sizeof(struct sctp_asconf_iterator), SCTP_M_ASC_IT);
139442551e99SRandall Stewart 	if (asc == NULL) {
139542551e99SRandall Stewart 		/* Try later, no memory */
1396f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
1397f8829a4aSRandall Stewart 		    (struct sctp_inpcb *)NULL,
1398f8829a4aSRandall Stewart 		    (struct sctp_tcb *)NULL,
1399f8829a4aSRandall Stewart 		    (struct sctp_nets *)NULL);
140042551e99SRandall Stewart 		return;
1401f8829a4aSRandall Stewart 	}
140242551e99SRandall Stewart 	LIST_INIT(&asc->list_of_work);
140342551e99SRandall Stewart 	asc->cnt = 0;
1404f7517433SRandall Stewart 
1405f7517433SRandall Stewart 	SCTP_WQ_ADDR_LOCK();
14064a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(wi, &SCTP_BASE_INFO(addr_wq), sctp_nxt_addr, nwi) {
140742551e99SRandall Stewart 		LIST_REMOVE(wi, sctp_nxt_addr);
140842551e99SRandall Stewart 		LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
140942551e99SRandall Stewart 		asc->cnt++;
1410f8829a4aSRandall Stewart 	}
1411f7517433SRandall Stewart 	SCTP_WQ_ADDR_UNLOCK();
1412f7517433SRandall Stewart 
141342551e99SRandall Stewart 	if (asc->cnt == 0) {
1414207304d4SRandall Stewart 		SCTP_FREE(asc, SCTP_M_ASC_IT);
141542551e99SRandall Stewart 	} else {
14161b649582SRandall Stewart 		(void)sctp_initiate_iterator(sctp_asconf_iterator_ep,
14171b649582SRandall Stewart 		    sctp_asconf_iterator_stcb,
141842551e99SRandall Stewart 		    NULL,	/* No ep end for boundall */
141942551e99SRandall Stewart 		    SCTP_PCB_FLAGS_BOUNDALL,
142042551e99SRandall Stewart 		    SCTP_PCB_ANY_FEATURES,
14211b649582SRandall Stewart 		    SCTP_ASOC_ANY_STATE,
14221b649582SRandall Stewart 		    (void *)asc, 0,
14231b649582SRandall Stewart 		    sctp_asconf_iterator_end, NULL, 0);
142442551e99SRandall Stewart 	}
1425f8829a4aSRandall Stewart }
1426f8829a4aSRandall Stewart 
1427b54d3a6cSRandall Stewart int retcode = 0;
1428b54d3a6cSRandall Stewart int cur_oerr = 0;
1429b54d3a6cSRandall Stewart 
1430f8829a4aSRandall Stewart void
1431f8829a4aSRandall Stewart sctp_timeout_handler(void *t)
1432f8829a4aSRandall Stewart {
1433f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1434f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1435f8829a4aSRandall Stewart 	struct sctp_nets *net;
1436f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1437ceaad40aSRandall Stewart 
1438ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1439ceaad40aSRandall Stewart 	struct socket *so;
1440ceaad40aSRandall Stewart 
1441ceaad40aSRandall Stewart #endif
1442d61374e1SRandall Stewart 	int did_output, type;
1443f8829a4aSRandall Stewart 
1444f8829a4aSRandall Stewart 	tmr = (struct sctp_timer *)t;
1445f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)tmr->ep;
1446f8829a4aSRandall Stewart 	stcb = (struct sctp_tcb *)tmr->tcb;
1447f8829a4aSRandall Stewart 	net = (struct sctp_nets *)tmr->net;
14488518270eSMichael Tuexen 	CURVNET_SET((struct vnet *)tmr->vnet);
1449f8829a4aSRandall Stewart 	did_output = 1;
1450f8829a4aSRandall Stewart 
1451f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1452f8829a4aSRandall Stewart 	sctp_audit_log(0xF0, (uint8_t) tmr->type);
1453f8829a4aSRandall Stewart 	sctp_auditing(3, inp, stcb, net);
1454f8829a4aSRandall Stewart #endif
1455f8829a4aSRandall Stewart 
1456f8829a4aSRandall Stewart 	/* sanity checks... */
1457f8829a4aSRandall Stewart 	if (tmr->self != (void *)tmr) {
1458f8829a4aSRandall Stewart 		/*
1459ad81507eSRandall Stewart 		 * SCTP_PRINTF("Stale SCTP timer fired (%p), ignoring...\n",
1460f8829a4aSRandall Stewart 		 * tmr);
1461f8829a4aSRandall Stewart 		 */
14628518270eSMichael Tuexen 		CURVNET_RESTORE();
1463f8829a4aSRandall Stewart 		return;
1464f8829a4aSRandall Stewart 	}
1465a5d547adSRandall Stewart 	tmr->stopped_from = 0xa001;
1466f8829a4aSRandall Stewart 	if (!SCTP_IS_TIMER_TYPE_VALID(tmr->type)) {
1467f8829a4aSRandall Stewart 		/*
1468ad81507eSRandall Stewart 		 * SCTP_PRINTF("SCTP timer fired with invalid type: 0x%x\n",
1469f8829a4aSRandall Stewart 		 * tmr->type);
1470f8829a4aSRandall Stewart 		 */
14718518270eSMichael Tuexen 		CURVNET_RESTORE();
1472f8829a4aSRandall Stewart 		return;
1473f8829a4aSRandall Stewart 	}
1474a5d547adSRandall Stewart 	tmr->stopped_from = 0xa002;
1475f8829a4aSRandall Stewart 	if ((tmr->type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL)) {
14768518270eSMichael Tuexen 		CURVNET_RESTORE();
1477f8829a4aSRandall Stewart 		return;
1478f8829a4aSRandall Stewart 	}
1479f8829a4aSRandall Stewart 	/* if this is an iterator timeout, get the struct and clear inp */
1480a5d547adSRandall Stewart 	tmr->stopped_from = 0xa003;
1481d61374e1SRandall Stewart 	type = tmr->type;
1482f8829a4aSRandall Stewart 	if (inp) {
1483f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
1484f8829a4aSRandall Stewart 		if ((inp->sctp_socket == 0) &&
1485f8829a4aSRandall Stewart 		    ((tmr->type != SCTP_TIMER_TYPE_INPKILL) &&
1486810ec536SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_INIT) &&
1487a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SEND) &&
1488a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_RECV) &&
1489a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_HEARTBEAT) &&
1490f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWN) &&
1491f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNACK) &&
1492f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNGUARD) &&
1493f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_ASOCKILL))
1494f8829a4aSRandall Stewart 		    ) {
1495f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
14968518270eSMichael Tuexen 			CURVNET_RESTORE();
1497f8829a4aSRandall Stewart 			return;
1498f8829a4aSRandall Stewart 		}
1499f8829a4aSRandall Stewart 	}
1500a5d547adSRandall Stewart 	tmr->stopped_from = 0xa004;
1501f8829a4aSRandall Stewart 	if (stcb) {
1502c105859eSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1503f8829a4aSRandall Stewart 		if (stcb->asoc.state == 0) {
1504c105859eSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1505f8829a4aSRandall Stewart 			if (inp) {
1506f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1507f8829a4aSRandall Stewart 			}
15088518270eSMichael Tuexen 			CURVNET_RESTORE();
1509f8829a4aSRandall Stewart 			return;
1510f8829a4aSRandall Stewart 		}
1511f8829a4aSRandall Stewart 	}
1512a5d547adSRandall Stewart 	tmr->stopped_from = 0xa005;
1513ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer type %d goes off\n", tmr->type);
1514139bc87fSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
1515f8829a4aSRandall Stewart 		if (inp) {
1516f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
1517f8829a4aSRandall Stewart 		}
1518207304d4SRandall Stewart 		if (stcb) {
1519207304d4SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1520207304d4SRandall Stewart 		}
15218518270eSMichael Tuexen 		CURVNET_RESTORE();
1522f8829a4aSRandall Stewart 		return;
1523f8829a4aSRandall Stewart 	}
1524a5d547adSRandall Stewart 	tmr->stopped_from = 0xa006;
1525a5d547adSRandall Stewart 
1526f8829a4aSRandall Stewart 	if (stcb) {
1527f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
152850cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
1529b54d3a6cSRandall Stewart 		if ((tmr->type != SCTP_TIMER_TYPE_ASOCKILL) &&
1530b54d3a6cSRandall Stewart 		    ((stcb->asoc.state == 0) ||
1531b54d3a6cSRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED))) {
1532b54d3a6cSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1533b54d3a6cSRandall Stewart 			if (inp) {
1534b54d3a6cSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1535b54d3a6cSRandall Stewart 			}
15368518270eSMichael Tuexen 			CURVNET_RESTORE();
1537b54d3a6cSRandall Stewart 			return;
1538b54d3a6cSRandall Stewart 		}
1539f8829a4aSRandall Stewart 	}
154044b7479bSRandall Stewart 	/* record in stopped what t-o occured */
154144b7479bSRandall Stewart 	tmr->stopped_from = tmr->type;
154244b7479bSRandall Stewart 
1543f8829a4aSRandall Stewart 	/* mark as being serviced now */
154444b7479bSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
154544b7479bSRandall Stewart 		/*
154644b7479bSRandall Stewart 		 * Callout has been rescheduled.
154744b7479bSRandall Stewart 		 */
154844b7479bSRandall Stewart 		goto get_out;
154944b7479bSRandall Stewart 	}
155044b7479bSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
155144b7479bSRandall Stewart 		/*
155244b7479bSRandall Stewart 		 * Not active, so no action.
155344b7479bSRandall Stewart 		 */
155444b7479bSRandall Stewart 		goto get_out;
155544b7479bSRandall Stewart 	}
1556139bc87fSRandall Stewart 	SCTP_OS_TIMER_DEACTIVATE(&tmr->timer);
1557f8829a4aSRandall Stewart 
1558f8829a4aSRandall Stewart 	/* call the handler for the appropriate timer type */
1559f8829a4aSRandall Stewart 	switch (tmr->type) {
1560d61a0ae0SRandall Stewart 	case SCTP_TIMER_TYPE_ZERO_COPY:
1561eacc51c5SRandall Stewart 		if (inp == NULL) {
1562eacc51c5SRandall Stewart 			break;
1563eacc51c5SRandall Stewart 		}
1564d61a0ae0SRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_ZERO_COPY_ACTIVE)) {
1565d61a0ae0SRandall Stewart 			SCTP_ZERO_COPY_EVENT(inp, inp->sctp_socket);
1566d61a0ae0SRandall Stewart 		}
1567d61a0ae0SRandall Stewart 		break;
1568ad21a364SRandall Stewart 	case SCTP_TIMER_TYPE_ZCOPY_SENDQ:
1569eacc51c5SRandall Stewart 		if (inp == NULL) {
1570eacc51c5SRandall Stewart 			break;
1571eacc51c5SRandall Stewart 		}
1572ad21a364SRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_ZERO_COPY_ACTIVE)) {
1573ad21a364SRandall Stewart 			SCTP_ZERO_COPY_SENDQ_EVENT(inp, inp->sctp_socket);
1574ad21a364SRandall Stewart 		}
1575ad21a364SRandall Stewart 		break;
1576f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1577f8829a4aSRandall Stewart 		sctp_handle_addr_wq();
1578f8829a4aSRandall Stewart 		break;
1579f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1580ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1581ad81507eSRandall Stewart 			break;
1582ad81507eSRandall Stewart 		}
1583f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timodata);
1584f42a358aSRandall Stewart 		stcb->asoc.timodata++;
1585f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
1586f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1587f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1588f8829a4aSRandall Stewart 		}
1589b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1590b54d3a6cSRandall Stewart 		cur_oerr = stcb->asoc.overall_error_count;
1591b54d3a6cSRandall Stewart 		retcode = sctp_t3rxt_timer(inp, stcb, net);
1592b54d3a6cSRandall Stewart 		if (retcode) {
1593f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1594f8829a4aSRandall Stewart 
1595f8829a4aSRandall Stewart 			goto out_decr;
1596f8829a4aSRandall Stewart 		}
1597b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1598f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1599f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1600f8829a4aSRandall Stewart #endif
1601ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1602f8829a4aSRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
16034a9ef3f8SMichael Tuexen 		    (stcb->asoc.sent_queue_cnt > 0)) {
1604f8829a4aSRandall Stewart 			struct sctp_tmit_chunk *chk;
1605f8829a4aSRandall Stewart 
1606f8829a4aSRandall Stewart 			/*
1607f8829a4aSRandall Stewart 			 * safeguard. If there on some on the sent queue
1608f8829a4aSRandall Stewart 			 * somewhere but no timers running something is
1609f8829a4aSRandall Stewart 			 * wrong... so we start a timer on the first chunk
1610f8829a4aSRandall Stewart 			 * on the send queue on whatever net it is sent to.
1611f8829a4aSRandall Stewart 			 */
1612f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1613f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb,
1614f8829a4aSRandall Stewart 			    chk->whoTo);
1615f8829a4aSRandall Stewart 		}
1616f8829a4aSRandall Stewart 		break;
1617f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1618ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1619ad81507eSRandall Stewart 			break;
1620ad81507eSRandall Stewart 		}
1621f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinit);
1622f42a358aSRandall Stewart 		stcb->asoc.timoinit++;
1623f8829a4aSRandall Stewart 		if (sctp_t1init_timer(inp, stcb, net)) {
1624f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1625f8829a4aSRandall Stewart 			goto out_decr;
1626f8829a4aSRandall Stewart 		}
1627f8829a4aSRandall Stewart 		/* We do output but not here */
1628f8829a4aSRandall Stewart 		did_output = 0;
1629f8829a4aSRandall Stewart 		break;
1630f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1631ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1632ad81507eSRandall Stewart 			break;
1633ca85e948SMichael Tuexen 		}
1634f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timosack);
1635f42a358aSRandall Stewart 		stcb->asoc.timosack++;
1636689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_NOT_LOCKED);
1637f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1638f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1639f8829a4aSRandall Stewart #endif
1640ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SACK_TMR, SCTP_SO_NOT_LOCKED);
1641f8829a4aSRandall Stewart 		break;
1642f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
1643ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1644ad81507eSRandall Stewart 			break;
1645ad81507eSRandall Stewart 		}
1646f8829a4aSRandall Stewart 		if (sctp_shutdown_timer(inp, stcb, net)) {
1647f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1648f8829a4aSRandall Stewart 			goto out_decr;
1649f8829a4aSRandall Stewart 		}
1650f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdown);
1651f42a358aSRandall Stewart 		stcb->asoc.timoshutdown++;
1652f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1653f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1654f8829a4aSRandall Stewart #endif
1655ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_NOT_LOCKED);
1656f8829a4aSRandall Stewart 		break;
1657f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
1658ca85e948SMichael Tuexen 		if ((stcb == NULL) || (inp == NULL) || (net == NULL)) {
1659ad81507eSRandall Stewart 			break;
1660ad81507eSRandall Stewart 		}
1661f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoheartbeat);
1662f42a358aSRandall Stewart 		stcb->asoc.timoheartbeat++;
1663ca85e948SMichael Tuexen 		if (sctp_heartbeat_timer(inp, stcb, net)) {
1664f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1665f8829a4aSRandall Stewart 			goto out_decr;
1666f8829a4aSRandall Stewart 		}
1667f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1668ca85e948SMichael Tuexen 		sctp_auditing(4, inp, stcb, net);
1669f8829a4aSRandall Stewart #endif
1670ca85e948SMichael Tuexen 		if (!(net->dest_state & SCTP_ADDR_NOHB)) {
1671ca85e948SMichael Tuexen 			sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
1672ceaad40aSRandall Stewart 			sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_HB_TMR, SCTP_SO_NOT_LOCKED);
1673f8829a4aSRandall Stewart 		}
1674f8829a4aSRandall Stewart 		break;
1675f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
1676ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1677ad81507eSRandall Stewart 			break;
1678ad81507eSRandall Stewart 		}
1679f8829a4aSRandall Stewart 		if (sctp_cookie_timer(inp, stcb, net)) {
1680f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1681f8829a4aSRandall Stewart 			goto out_decr;
1682f8829a4aSRandall Stewart 		}
1683f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timocookie);
1684f42a358aSRandall Stewart 		stcb->asoc.timocookie++;
1685f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1686f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1687f8829a4aSRandall Stewart #endif
1688f8829a4aSRandall Stewart 		/*
1689f8829a4aSRandall Stewart 		 * We consider T3 and Cookie timer pretty much the same with
1690f8829a4aSRandall Stewart 		 * respect to where from in chunk_output.
1691f8829a4aSRandall Stewart 		 */
1692ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1693f8829a4aSRandall Stewart 		break;
1694f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
1695f8829a4aSRandall Stewart 		{
1696f8829a4aSRandall Stewart 			struct timeval tv;
1697f8829a4aSRandall Stewart 			int i, secret;
1698f8829a4aSRandall Stewart 
1699ad81507eSRandall Stewart 			if (inp == NULL) {
1700ad81507eSRandall Stewart 				break;
1701ad81507eSRandall Stewart 			}
1702f8829a4aSRandall Stewart 			SCTP_STAT_INCR(sctps_timosecret);
17036e55db54SRandall Stewart 			(void)SCTP_GETTIME_TIMEVAL(&tv);
1704f8829a4aSRandall Stewart 			SCTP_INP_WLOCK(inp);
1705f8829a4aSRandall Stewart 			inp->sctp_ep.time_of_secret_change = tv.tv_sec;
1706f8829a4aSRandall Stewart 			inp->sctp_ep.last_secret_number =
1707f8829a4aSRandall Stewart 			    inp->sctp_ep.current_secret_number;
1708f8829a4aSRandall Stewart 			inp->sctp_ep.current_secret_number++;
1709f8829a4aSRandall Stewart 			if (inp->sctp_ep.current_secret_number >=
1710f8829a4aSRandall Stewart 			    SCTP_HOW_MANY_SECRETS) {
1711f8829a4aSRandall Stewart 				inp->sctp_ep.current_secret_number = 0;
1712f8829a4aSRandall Stewart 			}
1713f8829a4aSRandall Stewart 			secret = (int)inp->sctp_ep.current_secret_number;
1714f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) {
1715f8829a4aSRandall Stewart 				inp->sctp_ep.secret_key[secret][i] =
1716f8829a4aSRandall Stewart 				    sctp_select_initial_TSN(&inp->sctp_ep);
1717f8829a4aSRandall Stewart 			}
1718f8829a4aSRandall Stewart 			SCTP_INP_WUNLOCK(inp);
1719f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, stcb, net);
1720f8829a4aSRandall Stewart 		}
1721f8829a4aSRandall Stewart 		did_output = 0;
1722f8829a4aSRandall Stewart 		break;
1723f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
1724ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1725ad81507eSRandall Stewart 			break;
1726ad81507eSRandall Stewart 		}
1727f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timopathmtu);
1728f8829a4aSRandall Stewart 		sctp_pathmtu_timer(inp, stcb, net);
1729f8829a4aSRandall Stewart 		did_output = 0;
1730f8829a4aSRandall Stewart 		break;
1731f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
1732ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1733ad81507eSRandall Stewart 			break;
1734ad81507eSRandall Stewart 		}
1735f8829a4aSRandall Stewart 		if (sctp_shutdownack_timer(inp, stcb, net)) {
1736f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1737f8829a4aSRandall Stewart 			goto out_decr;
1738f8829a4aSRandall Stewart 		}
1739f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownack);
1740f42a358aSRandall Stewart 		stcb->asoc.timoshutdownack++;
1741f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1742f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1743f8829a4aSRandall Stewart #endif
1744ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_ACK_TMR, SCTP_SO_NOT_LOCKED);
1745f8829a4aSRandall Stewart 		break;
1746f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
1747ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1748ad81507eSRandall Stewart 			break;
1749ad81507eSRandall Stewart 		}
1750f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownguard);
1751f8829a4aSRandall Stewart 		sctp_abort_an_association(inp, stcb,
1752ceaad40aSRandall Stewart 		    SCTP_SHUTDOWN_GUARD_EXPIRES, NULL, SCTP_SO_NOT_LOCKED);
1753f8829a4aSRandall Stewart 		/* no need to unlock on tcb its gone */
1754f8829a4aSRandall Stewart 		goto out_decr;
1755f8829a4aSRandall Stewart 
1756f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
1757ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1758ad81507eSRandall Stewart 			break;
1759ad81507eSRandall Stewart 		}
1760f8829a4aSRandall Stewart 		if (sctp_strreset_timer(inp, stcb, net)) {
1761f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1762f8829a4aSRandall Stewart 			goto out_decr;
1763f8829a4aSRandall Stewart 		}
1764f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timostrmrst);
1765ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_TMR, SCTP_SO_NOT_LOCKED);
1766f8829a4aSRandall Stewart 		break;
1767f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
1768ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1769ad81507eSRandall Stewart 			break;
1770ad81507eSRandall Stewart 		}
1771f8829a4aSRandall Stewart 		if (sctp_asconf_timer(inp, stcb, net)) {
1772f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1773f8829a4aSRandall Stewart 			goto out_decr;
1774f8829a4aSRandall Stewart 		}
1775f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoasconf);
1776f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1777f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1778f8829a4aSRandall Stewart #endif
1779ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_ASCONF_TMR, SCTP_SO_NOT_LOCKED);
1780f8829a4aSRandall Stewart 		break;
1781851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
1782851b7298SRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1783851b7298SRandall Stewart 			break;
1784851b7298SRandall Stewart 		}
178504ee05e8SRandall Stewart 		sctp_delete_prim_timer(inp, stcb, net);
1786851b7298SRandall Stewart 		SCTP_STAT_INCR(sctps_timodelprim);
1787851b7298SRandall Stewart 		break;
1788f8829a4aSRandall Stewart 
1789f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
1790ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1791ad81507eSRandall Stewart 			break;
1792ad81507eSRandall Stewart 		}
1793f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoautoclose);
1794f8829a4aSRandall Stewart 		sctp_autoclose_timer(inp, stcb, net);
1795ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1796f8829a4aSRandall Stewart 		did_output = 0;
1797f8829a4aSRandall Stewart 		break;
1798f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
1799ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1800ad81507eSRandall Stewart 			break;
1801ad81507eSRandall Stewart 		}
1802f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoassockill);
1803f8829a4aSRandall Stewart 		/* Can we free it yet? */
1804f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1805a5d547adSRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL, SCTP_FROM_SCTPUTIL + SCTP_LOC_1);
1806ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1807ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
1808ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1809ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1810ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
1811ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
1812ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
1813ceaad40aSRandall Stewart #endif
1814c4739e2fSRandall Stewart 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTPUTIL + SCTP_LOC_2);
1815ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1816ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
1817ceaad40aSRandall Stewart #endif
1818f8829a4aSRandall Stewart 		/*
1819f8829a4aSRandall Stewart 		 * free asoc, always unlocks (or destroy's) so prevent
1820f8829a4aSRandall Stewart 		 * duplicate unlock or unlock of a free mtx :-0
1821f8829a4aSRandall Stewart 		 */
1822f8829a4aSRandall Stewart 		stcb = NULL;
1823f8829a4aSRandall Stewart 		goto out_no_decr;
1824f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
1825f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinpkill);
1826ad81507eSRandall Stewart 		if (inp == NULL) {
1827ad81507eSRandall Stewart 			break;
1828ad81507eSRandall Stewart 		}
1829f8829a4aSRandall Stewart 		/*
1830f8829a4aSRandall Stewart 		 * special case, take away our increment since WE are the
1831f8829a4aSRandall Stewart 		 * killer
1832f8829a4aSRandall Stewart 		 */
1833f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1834a5d547adSRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL, SCTP_FROM_SCTPUTIL + SCTP_LOC_3);
1835b0552ae2SRandall Stewart 		sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
18360c7dc840SRandall Stewart 		    SCTP_CALLED_FROM_INPKILL_TIMER);
1837d61374e1SRandall Stewart 		inp = NULL;
1838f8829a4aSRandall Stewart 		goto out_no_decr;
1839f8829a4aSRandall Stewart 	default:
1840ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "sctp_timeout_handler:unknown timer %d\n",
1841f8829a4aSRandall Stewart 		    tmr->type);
1842f8829a4aSRandall Stewart 		break;
1843f8829a4aSRandall Stewart 	};
1844f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1845f8829a4aSRandall Stewart 	sctp_audit_log(0xF1, (uint8_t) tmr->type);
1846f8829a4aSRandall Stewart 	if (inp)
1847f8829a4aSRandall Stewart 		sctp_auditing(5, inp, stcb, net);
1848f8829a4aSRandall Stewart #endif
1849f8829a4aSRandall Stewart 	if ((did_output) && stcb) {
1850f8829a4aSRandall Stewart 		/*
1851f8829a4aSRandall Stewart 		 * Now we need to clean up the control chunk chain if an
1852f8829a4aSRandall Stewart 		 * ECNE is on it. It must be marked as UNSENT again so next
1853f8829a4aSRandall Stewart 		 * call will continue to send it until such time that we get
1854f8829a4aSRandall Stewart 		 * a CWR, to remove it. It is, however, less likely that we
1855f8829a4aSRandall Stewart 		 * will find a ecn echo on the chain though.
1856f8829a4aSRandall Stewart 		 */
1857f8829a4aSRandall Stewart 		sctp_fix_ecn_echo(&stcb->asoc);
1858f8829a4aSRandall Stewart 	}
185944b7479bSRandall Stewart get_out:
1860f8829a4aSRandall Stewart 	if (stcb) {
1861f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1862f8829a4aSRandall Stewart 	}
1863f8829a4aSRandall Stewart out_decr:
1864f8829a4aSRandall Stewart 	if (inp) {
1865f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1866f8829a4aSRandall Stewart 	}
1867f8829a4aSRandall Stewart out_no_decr:
1868ad81507eSRandall Stewart 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer now complete (type %d)\n",
1869d61374e1SRandall Stewart 	    type);
18708518270eSMichael Tuexen 	CURVNET_RESTORE();
1871f8829a4aSRandall Stewart }
1872f8829a4aSRandall Stewart 
1873ad81507eSRandall Stewart void
1874f8829a4aSRandall Stewart sctp_timer_start(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1875f8829a4aSRandall Stewart     struct sctp_nets *net)
1876f8829a4aSRandall Stewart {
1877ca85e948SMichael Tuexen 	uint32_t to_ticks;
1878f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1879f8829a4aSRandall Stewart 
1880139bc87fSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL))
1881ad81507eSRandall Stewart 		return;
1882f8829a4aSRandall Stewart 
1883f8829a4aSRandall Stewart 	to_ticks = 0;
1884f8829a4aSRandall Stewart 
1885f8829a4aSRandall Stewart 	tmr = NULL;
1886f8829a4aSRandall Stewart 	if (stcb) {
1887f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1888f8829a4aSRandall Stewart 	}
1889f8829a4aSRandall Stewart 	switch (t_type) {
1890d61a0ae0SRandall Stewart 	case SCTP_TIMER_TYPE_ZERO_COPY:
1891d61a0ae0SRandall Stewart 		tmr = &inp->sctp_ep.zero_copy_timer;
1892d61a0ae0SRandall Stewart 		to_ticks = SCTP_ZERO_COPY_TICK_DELAY;
1893d61a0ae0SRandall Stewart 		break;
1894ad21a364SRandall Stewart 	case SCTP_TIMER_TYPE_ZCOPY_SENDQ:
1895ad21a364SRandall Stewart 		tmr = &inp->sctp_ep.zero_copy_sendq_timer;
1896ad21a364SRandall Stewart 		to_ticks = SCTP_ZERO_COPY_SENDQ_TICK_DELAY;
1897ad21a364SRandall Stewart 		break;
1898f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1899f8829a4aSRandall Stewart 		/* Only 1 tick away :-) */
1900b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
190142551e99SRandall Stewart 		to_ticks = SCTP_ADDRESS_TICK_DELAY;
1902f8829a4aSRandall Stewart 		break;
1903f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1904f8829a4aSRandall Stewart 		/* Here we use the RTO timer */
1905f8829a4aSRandall Stewart 		{
1906f8829a4aSRandall Stewart 			int rto_val;
1907f8829a4aSRandall Stewart 
1908f8829a4aSRandall Stewart 			if ((stcb == NULL) || (net == NULL)) {
1909ad81507eSRandall Stewart 				return;
1910f8829a4aSRandall Stewart 			}
1911f8829a4aSRandall Stewart 			tmr = &net->rxt_timer;
1912f8829a4aSRandall Stewart 			if (net->RTO == 0) {
1913f8829a4aSRandall Stewart 				rto_val = stcb->asoc.initial_rto;
1914f8829a4aSRandall Stewart 			} else {
1915f8829a4aSRandall Stewart 				rto_val = net->RTO;
1916f8829a4aSRandall Stewart 			}
1917f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(rto_val);
1918f8829a4aSRandall Stewart 		}
1919f8829a4aSRandall Stewart 		break;
1920f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1921f8829a4aSRandall Stewart 		/*
1922f8829a4aSRandall Stewart 		 * Here we use the INIT timer default usually about 1
1923f8829a4aSRandall Stewart 		 * minute.
1924f8829a4aSRandall Stewart 		 */
1925f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
1926ad81507eSRandall Stewart 			return;
1927f8829a4aSRandall Stewart 		}
1928f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
1929f8829a4aSRandall Stewart 		if (net->RTO == 0) {
1930f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
1931f8829a4aSRandall Stewart 		} else {
1932f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
1933f8829a4aSRandall Stewart 		}
1934f8829a4aSRandall Stewart 		break;
1935f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1936f8829a4aSRandall Stewart 		/*
1937f8829a4aSRandall Stewart 		 * Here we use the Delayed-Ack timer value from the inp
1938f8829a4aSRandall Stewart 		 * ususually about 200ms.
1939f8829a4aSRandall Stewart 		 */
1940f8829a4aSRandall Stewart 		if (stcb == NULL) {
1941ad81507eSRandall Stewart 			return;
1942f8829a4aSRandall Stewart 		}
1943f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
1944f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.delayed_ack);
1945f8829a4aSRandall Stewart 		break;
1946f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
1947f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination. */
1948f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
1949ad81507eSRandall Stewart 			return;
1950f8829a4aSRandall Stewart 		}
1951f8829a4aSRandall Stewart 		if (net->RTO == 0) {
1952f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
1953f8829a4aSRandall Stewart 		} else {
1954f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
1955f8829a4aSRandall Stewart 		}
1956f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
1957f8829a4aSRandall Stewart 		break;
1958f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
1959f8829a4aSRandall Stewart 		/*
1960f8829a4aSRandall Stewart 		 * the net is used here so that we can add in the RTO. Even
1961f8829a4aSRandall Stewart 		 * though we use a different timer. We also add the HB timer
1962f8829a4aSRandall Stewart 		 * PLUS a random jitter.
1963f8829a4aSRandall Stewart 		 */
1964ca85e948SMichael Tuexen 		if ((inp == NULL) || (stcb == NULL) || (net == NULL)) {
1965ad81507eSRandall Stewart 			return;
1966ad81507eSRandall Stewart 		} else {
1967f8829a4aSRandall Stewart 			uint32_t rndval;
1968ca85e948SMichael Tuexen 			uint32_t jitter;
1969f8829a4aSRandall Stewart 
1970ca85e948SMichael Tuexen 			if ((net->dest_state & SCTP_ADDR_NOHB) &&
1971ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_UNCONFIRMED)) {
1972ad81507eSRandall Stewart 				return;
1973f8829a4aSRandall Stewart 			}
1974f8829a4aSRandall Stewart 			if (net->RTO == 0) {
1975ca85e948SMichael Tuexen 				to_ticks = stcb->asoc.initial_rto;
1976f8829a4aSRandall Stewart 			} else {
1977ca85e948SMichael Tuexen 				to_ticks = net->RTO;
1978f8829a4aSRandall Stewart 			}
1979ca85e948SMichael Tuexen 			rndval = sctp_select_initial_TSN(&inp->sctp_ep);
1980ca85e948SMichael Tuexen 			jitter = rndval % to_ticks;
1981ca85e948SMichael Tuexen 			if (jitter >= (to_ticks >> 1)) {
1982ca85e948SMichael Tuexen 				to_ticks = to_ticks + (jitter - (to_ticks >> 1));
1983f8829a4aSRandall Stewart 			} else {
1984ca85e948SMichael Tuexen 				to_ticks = to_ticks - jitter;
1985f8829a4aSRandall Stewart 			}
1986ca85e948SMichael Tuexen 			if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
1987ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_PF)) {
1988ca85e948SMichael Tuexen 				to_ticks += net->heart_beat_delay;
1989f8829a4aSRandall Stewart 			}
1990f8829a4aSRandall Stewart 			/*
1991f8829a4aSRandall Stewart 			 * Now we must convert the to_ticks that are now in
1992f8829a4aSRandall Stewart 			 * ms to ticks.
1993f8829a4aSRandall Stewart 			 */
1994f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(to_ticks);
1995ca85e948SMichael Tuexen 			tmr = &net->hb_timer;
1996f8829a4aSRandall Stewart 		}
1997f8829a4aSRandall Stewart 		break;
1998f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
1999f8829a4aSRandall Stewart 		/*
2000f8829a4aSRandall Stewart 		 * Here we can use the RTO timer from the network since one
2001f8829a4aSRandall Stewart 		 * RTT was compelete. If a retran happened then we will be
2002f8829a4aSRandall Stewart 		 * using the RTO initial value.
2003f8829a4aSRandall Stewart 		 */
2004f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2005ad81507eSRandall Stewart 			return;
2006f8829a4aSRandall Stewart 		}
2007f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2008f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2009f8829a4aSRandall Stewart 		} else {
2010f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2011f8829a4aSRandall Stewart 		}
2012f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2013f8829a4aSRandall Stewart 		break;
2014f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2015f8829a4aSRandall Stewart 		/*
2016f8829a4aSRandall Stewart 		 * nothing needed but the endpoint here ususually about 60
2017f8829a4aSRandall Stewart 		 * minutes.
2018f8829a4aSRandall Stewart 		 */
2019ad81507eSRandall Stewart 		if (inp == NULL) {
2020ad81507eSRandall Stewart 			return;
2021ad81507eSRandall Stewart 		}
2022f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2023f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_SIGNATURE];
2024f8829a4aSRandall Stewart 		break;
2025f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2026f8829a4aSRandall Stewart 		if (stcb == NULL) {
2027ad81507eSRandall Stewart 			return;
2028f8829a4aSRandall Stewart 		}
2029f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2030f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_ASOC_KILL_TIMEOUT);
2031f8829a4aSRandall Stewart 		break;
2032f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2033f8829a4aSRandall Stewart 		/*
2034f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2035f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2036f8829a4aSRandall Stewart 		 * state.
2037f8829a4aSRandall Stewart 		 */
2038ad81507eSRandall Stewart 		if (inp == NULL) {
2039ad81507eSRandall Stewart 			return;
2040ad81507eSRandall Stewart 		}
2041f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2042f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_INP_KILL_TIMEOUT);
2043f8829a4aSRandall Stewart 		break;
2044f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2045f8829a4aSRandall Stewart 		/*
2046f8829a4aSRandall Stewart 		 * Here we use the value found in the EP for PMTU ususually
2047f8829a4aSRandall Stewart 		 * about 10 minutes.
2048f8829a4aSRandall Stewart 		 */
2049ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
2050ad81507eSRandall Stewart 			return;
2051f8829a4aSRandall Stewart 		}
2052f8829a4aSRandall Stewart 		if (net == NULL) {
2053ad81507eSRandall Stewart 			return;
2054f8829a4aSRandall Stewart 		}
2055*80c79bbeSMichael Tuexen 		if (net->dest_state & SCTP_ADDR_NO_PMTUD) {
2056*80c79bbeSMichael Tuexen 			return;
2057*80c79bbeSMichael Tuexen 		}
2058f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_PMTU];
2059f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2060f8829a4aSRandall Stewart 		break;
2061f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2062f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination */
2063f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2064ad81507eSRandall Stewart 			return;
2065f8829a4aSRandall Stewart 		}
2066f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2067f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2068f8829a4aSRandall Stewart 		} else {
2069f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2070f8829a4aSRandall Stewart 		}
2071f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2072f8829a4aSRandall Stewart 		break;
2073f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2074f8829a4aSRandall Stewart 		/*
2075f8829a4aSRandall Stewart 		 * Here we use the endpoints shutdown guard timer usually
2076f8829a4aSRandall Stewart 		 * about 3 minutes.
2077f8829a4aSRandall Stewart 		 */
2078ad81507eSRandall Stewart 		if ((inp == NULL) || (stcb == NULL)) {
2079ad81507eSRandall Stewart 			return;
2080f8829a4aSRandall Stewart 		}
2081f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN];
2082f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2083f8829a4aSRandall Stewart 		break;
2084f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2085f8829a4aSRandall Stewart 		/*
20861b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
20871b649582SRandall Stewart 		 * the net's RTO.
2088f8829a4aSRandall Stewart 		 */
2089f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2090ad81507eSRandall Stewart 			return;
2091f8829a4aSRandall Stewart 		}
2092f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2093f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2094f8829a4aSRandall Stewart 		} else {
2095f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2096f8829a4aSRandall Stewart 		}
2097f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2098f8829a4aSRandall Stewart 		break;
2099f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2100f8829a4aSRandall Stewart 		/*
21011b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
21021b649582SRandall Stewart 		 * the net's RTO.
2103f8829a4aSRandall Stewart 		 */
2104f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2105ad81507eSRandall Stewart 			return;
2106f8829a4aSRandall Stewart 		}
2107f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2108f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2109f8829a4aSRandall Stewart 		} else {
2110f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2111f8829a4aSRandall Stewart 		}
2112f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2113f8829a4aSRandall Stewart 		break;
2114851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2115851b7298SRandall Stewart 		if ((stcb == NULL) || (net != NULL)) {
2116851b7298SRandall Stewart 			return;
2117851b7298SRandall Stewart 		}
2118851b7298SRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2119851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2120851b7298SRandall Stewart 		break;
2121f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2122f8829a4aSRandall Stewart 		if (stcb == NULL) {
2123ad81507eSRandall Stewart 			return;
2124f8829a4aSRandall Stewart 		}
2125f8829a4aSRandall Stewart 		if (stcb->asoc.sctp_autoclose_ticks == 0) {
2126f8829a4aSRandall Stewart 			/*
2127f8829a4aSRandall Stewart 			 * Really an error since stcb is NOT set to
2128f8829a4aSRandall Stewart 			 * autoclose
2129f8829a4aSRandall Stewart 			 */
2130ad81507eSRandall Stewart 			return;
2131f8829a4aSRandall Stewart 		}
2132f8829a4aSRandall Stewart 		to_ticks = stcb->asoc.sctp_autoclose_ticks;
2133f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2134f8829a4aSRandall Stewart 		break;
2135f8829a4aSRandall Stewart 	default:
2136ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
2137ad81507eSRandall Stewart 		    __FUNCTION__, t_type);
2138ad81507eSRandall Stewart 		return;
2139f8829a4aSRandall Stewart 		break;
2140f8829a4aSRandall Stewart 	};
2141f8829a4aSRandall Stewart 	if ((to_ticks <= 0) || (tmr == NULL)) {
2142ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: %d:software error to_ticks:%d tmr:%p not set ??\n",
2143ad81507eSRandall Stewart 		    __FUNCTION__, t_type, to_ticks, tmr);
2144ad81507eSRandall Stewart 		return;
2145f8829a4aSRandall Stewart 	}
2146139bc87fSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
2147f8829a4aSRandall Stewart 		/*
2148f8829a4aSRandall Stewart 		 * we do NOT allow you to have it already running. if it is
2149f8829a4aSRandall Stewart 		 * we leave the current one up unchanged
2150f8829a4aSRandall Stewart 		 */
2151ad81507eSRandall Stewart 		return;
2152f8829a4aSRandall Stewart 	}
2153f8829a4aSRandall Stewart 	/* At this point we can proceed */
2154f8829a4aSRandall Stewart 	if (t_type == SCTP_TIMER_TYPE_SEND) {
2155f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up++;
2156f8829a4aSRandall Stewart 	}
2157a5d547adSRandall Stewart 	tmr->stopped_from = 0;
2158f8829a4aSRandall Stewart 	tmr->type = t_type;
2159f8829a4aSRandall Stewart 	tmr->ep = (void *)inp;
2160f8829a4aSRandall Stewart 	tmr->tcb = (void *)stcb;
2161f8829a4aSRandall Stewart 	tmr->net = (void *)net;
2162f8829a4aSRandall Stewart 	tmr->self = (void *)tmr;
21638518270eSMichael Tuexen 	tmr->vnet = (void *)curvnet;
2164c4739e2fSRandall Stewart 	tmr->ticks = sctp_get_tick_count();
2165ad81507eSRandall Stewart 	(void)SCTP_OS_TIMER_START(&tmr->timer, to_ticks, sctp_timeout_handler, tmr);
2166ad81507eSRandall Stewart 	return;
2167f8829a4aSRandall Stewart }
2168f8829a4aSRandall Stewart 
21696e55db54SRandall Stewart void
2170f8829a4aSRandall Stewart sctp_timer_stop(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
2171a5d547adSRandall Stewart     struct sctp_nets *net, uint32_t from)
2172f8829a4aSRandall Stewart {
2173f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
2174f8829a4aSRandall Stewart 
2175f8829a4aSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) &&
2176f8829a4aSRandall Stewart 	    (inp == NULL))
21776e55db54SRandall Stewart 		return;
2178f8829a4aSRandall Stewart 
2179f8829a4aSRandall Stewart 	tmr = NULL;
2180f8829a4aSRandall Stewart 	if (stcb) {
2181f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2182f8829a4aSRandall Stewart 	}
2183f8829a4aSRandall Stewart 	switch (t_type) {
2184d61a0ae0SRandall Stewart 	case SCTP_TIMER_TYPE_ZERO_COPY:
2185d61a0ae0SRandall Stewart 		tmr = &inp->sctp_ep.zero_copy_timer;
2186d61a0ae0SRandall Stewart 		break;
2187ad21a364SRandall Stewart 	case SCTP_TIMER_TYPE_ZCOPY_SENDQ:
2188ad21a364SRandall Stewart 		tmr = &inp->sctp_ep.zero_copy_sendq_timer;
2189ad21a364SRandall Stewart 		break;
2190f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2191b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
2192f8829a4aSRandall Stewart 		break;
2193f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2194f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
21956e55db54SRandall Stewart 			return;
2196f8829a4aSRandall Stewart 		}
2197f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2198f8829a4aSRandall Stewart 		break;
2199f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2200f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22016e55db54SRandall Stewart 			return;
2202f8829a4aSRandall Stewart 		}
2203f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2204f8829a4aSRandall Stewart 		break;
2205f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2206f8829a4aSRandall Stewart 		if (stcb == NULL) {
22076e55db54SRandall Stewart 			return;
2208f8829a4aSRandall Stewart 		}
2209f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2210f8829a4aSRandall Stewart 		break;
2211f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2212f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22136e55db54SRandall Stewart 			return;
2214f8829a4aSRandall Stewart 		}
2215f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2216f8829a4aSRandall Stewart 		break;
2217f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2218ca85e948SMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
22196e55db54SRandall Stewart 			return;
2220f8829a4aSRandall Stewart 		}
2221ca85e948SMichael Tuexen 		tmr = &net->hb_timer;
2222f8829a4aSRandall Stewart 		break;
2223f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2224f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22256e55db54SRandall Stewart 			return;
2226f8829a4aSRandall Stewart 		}
2227f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2228f8829a4aSRandall Stewart 		break;
2229f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2230f8829a4aSRandall Stewart 		/* nothing needed but the endpoint here */
2231f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2232f8829a4aSRandall Stewart 		/*
2233f8829a4aSRandall Stewart 		 * We re-use the newcookie timer for the INP kill timer. We
2234f8829a4aSRandall Stewart 		 * must assure that we do not kill it by accident.
2235f8829a4aSRandall Stewart 		 */
2236f8829a4aSRandall Stewart 		break;
2237f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2238f8829a4aSRandall Stewart 		/*
2239f8829a4aSRandall Stewart 		 * Stop the asoc kill timer.
2240f8829a4aSRandall Stewart 		 */
2241f8829a4aSRandall Stewart 		if (stcb == NULL) {
22426e55db54SRandall Stewart 			return;
2243f8829a4aSRandall Stewart 		}
2244f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2245f8829a4aSRandall Stewart 		break;
2246f8829a4aSRandall Stewart 
2247f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2248f8829a4aSRandall Stewart 		/*
2249f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2250f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2251f8829a4aSRandall Stewart 		 * state.
2252f8829a4aSRandall Stewart 		 */
2253f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2254f8829a4aSRandall Stewart 		break;
2255f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2256f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22576e55db54SRandall Stewart 			return;
2258f8829a4aSRandall Stewart 		}
2259f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2260f8829a4aSRandall Stewart 		break;
2261f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2262f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22636e55db54SRandall Stewart 			return;
2264f8829a4aSRandall Stewart 		}
2265f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2266f8829a4aSRandall Stewart 		break;
2267f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2268f8829a4aSRandall Stewart 		if (stcb == NULL) {
22696e55db54SRandall Stewart 			return;
2270f8829a4aSRandall Stewart 		}
2271f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2272f8829a4aSRandall Stewart 		break;
2273f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2274f8829a4aSRandall Stewart 		if (stcb == NULL) {
22756e55db54SRandall Stewart 			return;
2276f8829a4aSRandall Stewart 		}
2277f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2278f8829a4aSRandall Stewart 		break;
2279f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2280f8829a4aSRandall Stewart 		if (stcb == NULL) {
22816e55db54SRandall Stewart 			return;
2282f8829a4aSRandall Stewart 		}
2283f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2284f8829a4aSRandall Stewart 		break;
2285851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2286851b7298SRandall Stewart 		if (stcb == NULL) {
2287851b7298SRandall Stewart 			return;
2288851b7298SRandall Stewart 		}
2289851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2290851b7298SRandall Stewart 		break;
2291f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2292f8829a4aSRandall Stewart 		if (stcb == NULL) {
22936e55db54SRandall Stewart 			return;
2294f8829a4aSRandall Stewart 		}
2295f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2296f8829a4aSRandall Stewart 		break;
2297f8829a4aSRandall Stewart 	default:
2298ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
2299ad81507eSRandall Stewart 		    __FUNCTION__, t_type);
2300f8829a4aSRandall Stewart 		break;
2301f8829a4aSRandall Stewart 	};
2302f8829a4aSRandall Stewart 	if (tmr == NULL) {
23036e55db54SRandall Stewart 		return;
2304f8829a4aSRandall Stewart 	}
2305f8829a4aSRandall Stewart 	if ((tmr->type != t_type) && tmr->type) {
2306f8829a4aSRandall Stewart 		/*
2307f8829a4aSRandall Stewart 		 * Ok we have a timer that is under joint use. Cookie timer
2308f8829a4aSRandall Stewart 		 * per chance with the SEND timer. We therefore are NOT
2309f8829a4aSRandall Stewart 		 * running the timer that the caller wants stopped.  So just
2310f8829a4aSRandall Stewart 		 * return.
2311f8829a4aSRandall Stewart 		 */
23126e55db54SRandall Stewart 		return;
2313f8829a4aSRandall Stewart 	}
2314ad81507eSRandall Stewart 	if ((t_type == SCTP_TIMER_TYPE_SEND) && (stcb != NULL)) {
2315f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
2316f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
2317f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
2318f8829a4aSRandall Stewart 		}
2319f8829a4aSRandall Stewart 	}
2320f8829a4aSRandall Stewart 	tmr->self = NULL;
2321a5d547adSRandall Stewart 	tmr->stopped_from = from;
23226e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&tmr->timer);
23236e55db54SRandall Stewart 	return;
2324f8829a4aSRandall Stewart }
2325f8829a4aSRandall Stewart 
2326f8829a4aSRandall Stewart uint32_t
2327f8829a4aSRandall Stewart sctp_calculate_len(struct mbuf *m)
2328f8829a4aSRandall Stewart {
2329f8829a4aSRandall Stewart 	uint32_t tlen = 0;
2330f8829a4aSRandall Stewart 	struct mbuf *at;
2331f8829a4aSRandall Stewart 
2332f8829a4aSRandall Stewart 	at = m;
2333f8829a4aSRandall Stewart 	while (at) {
2334139bc87fSRandall Stewart 		tlen += SCTP_BUF_LEN(at);
2335139bc87fSRandall Stewart 		at = SCTP_BUF_NEXT(at);
2336f8829a4aSRandall Stewart 	}
2337f8829a4aSRandall Stewart 	return (tlen);
2338f8829a4aSRandall Stewart }
2339f8829a4aSRandall Stewart 
2340f8829a4aSRandall Stewart void
2341f8829a4aSRandall Stewart sctp_mtu_size_reset(struct sctp_inpcb *inp,
234244b7479bSRandall Stewart     struct sctp_association *asoc, uint32_t mtu)
2343f8829a4aSRandall Stewart {
2344f8829a4aSRandall Stewart 	/*
2345f8829a4aSRandall Stewart 	 * Reset the P-MTU size on this association, this involves changing
2346f8829a4aSRandall Stewart 	 * the asoc MTU, going through ANY chunk+overhead larger than mtu to
2347f8829a4aSRandall Stewart 	 * allow the DF flag to be cleared.
2348f8829a4aSRandall Stewart 	 */
2349f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
2350f8829a4aSRandall Stewart 	unsigned int eff_mtu, ovh;
2351f8829a4aSRandall Stewart 
2352f8829a4aSRandall Stewart 	asoc->smallest_mtu = mtu;
2353f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2354f8829a4aSRandall Stewart 		ovh = SCTP_MIN_OVERHEAD;
2355f8829a4aSRandall Stewart 	} else {
2356f8829a4aSRandall Stewart 		ovh = SCTP_MIN_V4_OVERHEAD;
2357f8829a4aSRandall Stewart 	}
2358f8829a4aSRandall Stewart 	eff_mtu = mtu - ovh;
2359f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->send_queue, sctp_next) {
2360f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2361f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2362f8829a4aSRandall Stewart 		}
2363f8829a4aSRandall Stewart 	}
2364f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
2365f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2366f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2367f8829a4aSRandall Stewart 		}
2368f8829a4aSRandall Stewart 	}
2369f8829a4aSRandall Stewart }
2370f8829a4aSRandall Stewart 
2371f8829a4aSRandall Stewart 
2372f8829a4aSRandall Stewart /*
2373f8829a4aSRandall Stewart  * given an association and starting time of the current RTT period return
2374f42a358aSRandall Stewart  * RTO in number of msecs net should point to the current network
2375f8829a4aSRandall Stewart  */
2376899288aeSRandall Stewart 
2377f8829a4aSRandall Stewart uint32_t
2378f8829a4aSRandall Stewart sctp_calculate_rto(struct sctp_tcb *stcb,
2379f8829a4aSRandall Stewart     struct sctp_association *asoc,
2380f8829a4aSRandall Stewart     struct sctp_nets *net,
238118e198d3SRandall Stewart     struct timeval *told,
2382f79aab18SRandall Stewart     int safe, int rtt_from_sack)
2383f8829a4aSRandall Stewart {
238418e198d3SRandall Stewart 	/*-
2385f8829a4aSRandall Stewart 	 * given an association and the starting time of the current RTT
2386f42a358aSRandall Stewart 	 * period (in value1/value2) return RTO in number of msecs.
2387f8829a4aSRandall Stewart 	 */
2388be1d9176SMichael Tuexen 	int32_t rtt;		/* RTT in ms */
2389be1d9176SMichael Tuexen 	uint32_t new_rto;
2390f8829a4aSRandall Stewart 	int first_measure = 0;
239118e198d3SRandall Stewart 	struct timeval now, then, *old;
2392f8829a4aSRandall Stewart 
239318e198d3SRandall Stewart 	/* Copy it out for sparc64 */
239418e198d3SRandall Stewart 	if (safe == sctp_align_unsafe_makecopy) {
239518e198d3SRandall Stewart 		old = &then;
239618e198d3SRandall Stewart 		memcpy(&then, told, sizeof(struct timeval));
239718e198d3SRandall Stewart 	} else if (safe == sctp_align_safe_nocopy) {
239818e198d3SRandall Stewart 		old = told;
239918e198d3SRandall Stewart 	} else {
240018e198d3SRandall Stewart 		/* error */
240118e198d3SRandall Stewart 		SCTP_PRINTF("Huh, bad rto calc call\n");
240218e198d3SRandall Stewart 		return (0);
240318e198d3SRandall Stewart 	}
2404f8829a4aSRandall Stewart 	/************************/
2405f8829a4aSRandall Stewart 	/* 1. calculate new RTT */
2406f8829a4aSRandall Stewart 	/************************/
2407f8829a4aSRandall Stewart 	/* get the current time */
2408299108c5SRandall Stewart 	if (stcb->asoc.use_precise_time) {
2409299108c5SRandall Stewart 		(void)SCTP_GETPTIME_TIMEVAL(&now);
2410299108c5SRandall Stewart 	} else {
24116e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
2412299108c5SRandall Stewart 	}
2413be1d9176SMichael Tuexen 	timevalsub(&now, old);
2414be1d9176SMichael Tuexen 	/* store the current RTT in us */
2415be1d9176SMichael Tuexen 	net->rtt = (uint64_t) 10000000 *(uint64_t) now.tv_sec +
2416be1d9176SMichael Tuexen 	         (uint64_t) now.tv_usec;
2417be1d9176SMichael Tuexen 
2418be1d9176SMichael Tuexen 	/* computer rtt in ms */
2419be1d9176SMichael Tuexen 	rtt = net->rtt / 1000;
2420f79aab18SRandall Stewart 	if ((asoc->cc_functions.sctp_rtt_calculated) && (rtt_from_sack == SCTP_RTT_FROM_DATA)) {
2421f79aab18SRandall Stewart 		/*
2422f79aab18SRandall Stewart 		 * Tell the CC module that a new update has just occurred
2423f79aab18SRandall Stewart 		 * from a sack
2424f79aab18SRandall Stewart 		 */
2425f79aab18SRandall Stewart 		(*asoc->cc_functions.sctp_rtt_calculated) (stcb, net, &now);
2426f79aab18SRandall Stewart 	}
2427f79aab18SRandall Stewart 	/*
2428f79aab18SRandall Stewart 	 * Do we need to determine the lan? We do this only on sacks i.e.
2429f79aab18SRandall Stewart 	 * RTT being determined from data not non-data (HB/INIT->INITACK).
2430f79aab18SRandall Stewart 	 */
2431f79aab18SRandall Stewart 	if ((rtt_from_sack == SCTP_RTT_FROM_DATA) &&
2432be1d9176SMichael Tuexen 	    (net->lan_type == SCTP_LAN_UNKNOWN)) {
2433be1d9176SMichael Tuexen 		if (net->rtt > SCTP_LOCAL_LAN_RTT) {
2434899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_INTERNET;
2435899288aeSRandall Stewart 		} else {
2436899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_LOCAL;
2437899288aeSRandall Stewart 		}
2438899288aeSRandall Stewart 	}
2439f8829a4aSRandall Stewart 	/***************************/
2440f8829a4aSRandall Stewart 	/* 2. update RTTVAR & SRTT */
2441f8829a4aSRandall Stewart 	/***************************/
2442be1d9176SMichael Tuexen 	/*-
2443be1d9176SMichael Tuexen 	 * Compute the scaled average lastsa and the
2444be1d9176SMichael Tuexen 	 * scaled variance lastsv as described in van Jacobson
2445be1d9176SMichael Tuexen 	 * Paper "Congestion Avoidance and Control", Annex A.
2446be1d9176SMichael Tuexen 	 *
2447be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_SHIFT) is the srtt
2448be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_VAR_SHIFT) is the rttvar
2449be1d9176SMichael Tuexen 	 */
24509a972525SRandall Stewart 	if (net->RTO_measured) {
2451be1d9176SMichael Tuexen 		rtt -= (net->lastsa >> SCTP_RTT_SHIFT);
2452be1d9176SMichael Tuexen 		net->lastsa += rtt;
2453be1d9176SMichael Tuexen 		if (rtt < 0) {
2454be1d9176SMichael Tuexen 			rtt = -rtt;
2455be1d9176SMichael Tuexen 		}
2456be1d9176SMichael Tuexen 		rtt -= (net->lastsv >> SCTP_RTT_VAR_SHIFT);
2457be1d9176SMichael Tuexen 		net->lastsv += rtt;
2458b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2459f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_RTTVAR);
246080fefe0aSRandall Stewart 		}
2461f8829a4aSRandall Stewart 	} else {
2462f8829a4aSRandall Stewart 		/* First RTO measurment */
24639a972525SRandall Stewart 		net->RTO_measured = 1;
2464f8829a4aSRandall Stewart 		first_measure = 1;
2465be1d9176SMichael Tuexen 		net->lastsa = rtt << SCTP_RTT_SHIFT;
2466be1d9176SMichael Tuexen 		net->lastsv = (rtt / 2) << SCTP_RTT_VAR_SHIFT;
2467b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2468f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_INITIAL_RTT);
246980fefe0aSRandall Stewart 		}
2470f8829a4aSRandall Stewart 	}
2471be1d9176SMichael Tuexen 	if (net->lastsv == 0) {
2472be1d9176SMichael Tuexen 		net->lastsv = SCTP_CLOCK_GRANULARITY;
2473be1d9176SMichael Tuexen 	}
2474108df27cSRandall Stewart 	new_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
2475f8829a4aSRandall Stewart 	if ((new_rto > SCTP_SAT_NETWORK_MIN) &&
2476f8829a4aSRandall Stewart 	    (stcb->asoc.sat_network_lockout == 0)) {
2477f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 1;
2478f8829a4aSRandall Stewart 	} else if ((!first_measure) && stcb->asoc.sat_network) {
2479f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 0;
2480f8829a4aSRandall Stewart 		stcb->asoc.sat_network_lockout = 1;
2481f8829a4aSRandall Stewart 	}
2482f8829a4aSRandall Stewart 	/* bound it, per C6/C7 in Section 5.3.1 */
2483f8829a4aSRandall Stewart 	if (new_rto < stcb->asoc.minrto) {
2484f8829a4aSRandall Stewart 		new_rto = stcb->asoc.minrto;
2485f8829a4aSRandall Stewart 	}
2486f8829a4aSRandall Stewart 	if (new_rto > stcb->asoc.maxrto) {
2487f8829a4aSRandall Stewart 		new_rto = stcb->asoc.maxrto;
2488f8829a4aSRandall Stewart 	}
24895e54f665SRandall Stewart 	/* we are now returning the RTO */
24905e54f665SRandall Stewart 	return (new_rto);
2491f8829a4aSRandall Stewart }
2492f8829a4aSRandall Stewart 
2493f8829a4aSRandall Stewart /*
2494f8829a4aSRandall Stewart  * return a pointer to a contiguous piece of data from the given mbuf chain
2495f8829a4aSRandall Stewart  * starting at 'off' for 'len' bytes.  If the desired piece spans more than
2496f8829a4aSRandall Stewart  * one mbuf, a copy is made at 'ptr'. caller must ensure that the buffer size
2497f8829a4aSRandall Stewart  * is >= 'len' returns NULL if there there isn't 'len' bytes in the chain.
2498f8829a4aSRandall Stewart  */
249972fb6fdbSRandall Stewart caddr_t
2500f8829a4aSRandall Stewart sctp_m_getptr(struct mbuf *m, int off, int len, uint8_t * in_ptr)
2501f8829a4aSRandall Stewart {
2502f8829a4aSRandall Stewart 	uint32_t count;
2503f8829a4aSRandall Stewart 	uint8_t *ptr;
2504f8829a4aSRandall Stewart 
2505f8829a4aSRandall Stewart 	ptr = in_ptr;
2506f8829a4aSRandall Stewart 	if ((off < 0) || (len <= 0))
2507f8829a4aSRandall Stewart 		return (NULL);
2508f8829a4aSRandall Stewart 
2509f8829a4aSRandall Stewart 	/* find the desired start location */
2510f8829a4aSRandall Stewart 	while ((m != NULL) && (off > 0)) {
2511139bc87fSRandall Stewart 		if (off < SCTP_BUF_LEN(m))
2512f8829a4aSRandall Stewart 			break;
2513139bc87fSRandall Stewart 		off -= SCTP_BUF_LEN(m);
2514139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
2515f8829a4aSRandall Stewart 	}
2516f8829a4aSRandall Stewart 	if (m == NULL)
2517f8829a4aSRandall Stewart 		return (NULL);
2518f8829a4aSRandall Stewart 
2519f8829a4aSRandall Stewart 	/* is the current mbuf large enough (eg. contiguous)? */
2520139bc87fSRandall Stewart 	if ((SCTP_BUF_LEN(m) - off) >= len) {
2521f8829a4aSRandall Stewart 		return (mtod(m, caddr_t)+off);
2522f8829a4aSRandall Stewart 	} else {
2523f8829a4aSRandall Stewart 		/* else, it spans more than one mbuf, so save a temp copy... */
2524f8829a4aSRandall Stewart 		while ((m != NULL) && (len > 0)) {
2525139bc87fSRandall Stewart 			count = min(SCTP_BUF_LEN(m) - off, len);
2526f8829a4aSRandall Stewart 			bcopy(mtod(m, caddr_t)+off, ptr, count);
2527f8829a4aSRandall Stewart 			len -= count;
2528f8829a4aSRandall Stewart 			ptr += count;
2529f8829a4aSRandall Stewart 			off = 0;
2530139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
2531f8829a4aSRandall Stewart 		}
2532f8829a4aSRandall Stewart 		if ((m == NULL) && (len > 0))
2533f8829a4aSRandall Stewart 			return (NULL);
2534f8829a4aSRandall Stewart 		else
2535f8829a4aSRandall Stewart 			return ((caddr_t)in_ptr);
2536f8829a4aSRandall Stewart 	}
2537f8829a4aSRandall Stewart }
2538f8829a4aSRandall Stewart 
2539f8829a4aSRandall Stewart 
254044b7479bSRandall Stewart 
2541f8829a4aSRandall Stewart struct sctp_paramhdr *
2542f8829a4aSRandall Stewart sctp_get_next_param(struct mbuf *m,
2543f8829a4aSRandall Stewart     int offset,
2544f8829a4aSRandall Stewart     struct sctp_paramhdr *pull,
2545f8829a4aSRandall Stewart     int pull_limit)
2546f8829a4aSRandall Stewart {
2547f8829a4aSRandall Stewart 	/* This just provides a typed signature to Peter's Pull routine */
2548f8829a4aSRandall Stewart 	return ((struct sctp_paramhdr *)sctp_m_getptr(m, offset, pull_limit,
2549f8829a4aSRandall Stewart 	    (uint8_t *) pull));
2550f8829a4aSRandall Stewart }
2551f8829a4aSRandall Stewart 
2552f8829a4aSRandall Stewart 
2553f8829a4aSRandall Stewart int
2554f8829a4aSRandall Stewart sctp_add_pad_tombuf(struct mbuf *m, int padlen)
2555f8829a4aSRandall Stewart {
2556f8829a4aSRandall Stewart 	/*
2557f8829a4aSRandall Stewart 	 * add padlen bytes of 0 filled padding to the end of the mbuf. If
2558f8829a4aSRandall Stewart 	 * padlen is > 3 this routine will fail.
2559f8829a4aSRandall Stewart 	 */
2560f8829a4aSRandall Stewart 	uint8_t *dp;
2561f8829a4aSRandall Stewart 	int i;
2562f8829a4aSRandall Stewart 
2563f8829a4aSRandall Stewart 	if (padlen > 3) {
2564c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET_PKT(m, NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
2565f8829a4aSRandall Stewart 		return (ENOBUFS);
2566f8829a4aSRandall Stewart 	}
256741eee555SRandall Stewart 	if (padlen <= M_TRAILINGSPACE(m)) {
2568f8829a4aSRandall Stewart 		/*
2569f8829a4aSRandall Stewart 		 * The easy way. We hope the majority of the time we hit
2570f8829a4aSRandall Stewart 		 * here :)
2571f8829a4aSRandall Stewart 		 */
2572139bc87fSRandall Stewart 		dp = (uint8_t *) (mtod(m, caddr_t)+SCTP_BUF_LEN(m));
2573139bc87fSRandall Stewart 		SCTP_BUF_LEN(m) += padlen;
2574f8829a4aSRandall Stewart 	} else {
2575f8829a4aSRandall Stewart 		/* Hard way we must grow the mbuf */
2576f8829a4aSRandall Stewart 		struct mbuf *tmp;
2577f8829a4aSRandall Stewart 
2578f8829a4aSRandall Stewart 		tmp = sctp_get_mbuf_for_msg(padlen, 0, M_DONTWAIT, 1, MT_DATA);
2579f8829a4aSRandall Stewart 		if (tmp == NULL) {
2580f8829a4aSRandall Stewart 			/* Out of space GAK! we are in big trouble. */
2581c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET_PKT(m, NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
2582f8829a4aSRandall Stewart 			return (ENOSPC);
2583f8829a4aSRandall Stewart 		}
2584f8829a4aSRandall Stewart 		/* setup and insert in middle */
2585139bc87fSRandall Stewart 		SCTP_BUF_LEN(tmp) = padlen;
258641eee555SRandall Stewart 		SCTP_BUF_NEXT(tmp) = NULL;
2587139bc87fSRandall Stewart 		SCTP_BUF_NEXT(m) = tmp;
2588f8829a4aSRandall Stewart 		dp = mtod(tmp, uint8_t *);
2589f8829a4aSRandall Stewart 	}
2590f8829a4aSRandall Stewart 	/* zero out the pad */
2591f8829a4aSRandall Stewart 	for (i = 0; i < padlen; i++) {
2592f8829a4aSRandall Stewart 		*dp = 0;
2593f8829a4aSRandall Stewart 		dp++;
2594f8829a4aSRandall Stewart 	}
2595f8829a4aSRandall Stewart 	return (0);
2596f8829a4aSRandall Stewart }
2597f8829a4aSRandall Stewart 
2598f8829a4aSRandall Stewart int
2599f8829a4aSRandall Stewart sctp_pad_lastmbuf(struct mbuf *m, int padval, struct mbuf *last_mbuf)
2600f8829a4aSRandall Stewart {
2601f8829a4aSRandall Stewart 	/* find the last mbuf in chain and pad it */
2602f8829a4aSRandall Stewart 	struct mbuf *m_at;
2603f8829a4aSRandall Stewart 
2604f8829a4aSRandall Stewart 	m_at = m;
2605f8829a4aSRandall Stewart 	if (last_mbuf) {
2606f8829a4aSRandall Stewart 		return (sctp_add_pad_tombuf(last_mbuf, padval));
2607f8829a4aSRandall Stewart 	} else {
2608f8829a4aSRandall Stewart 		while (m_at) {
2609139bc87fSRandall Stewart 			if (SCTP_BUF_NEXT(m_at) == NULL) {
2610f8829a4aSRandall Stewart 				return (sctp_add_pad_tombuf(m_at, padval));
2611f8829a4aSRandall Stewart 			}
2612139bc87fSRandall Stewart 			m_at = SCTP_BUF_NEXT(m_at);
2613f8829a4aSRandall Stewart 		}
2614f8829a4aSRandall Stewart 	}
2615c4739e2fSRandall Stewart 	SCTP_LTRACE_ERR_RET_PKT(m, NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EFAULT);
2616f8829a4aSRandall Stewart 	return (EFAULT);
2617f8829a4aSRandall Stewart }
2618f8829a4aSRandall Stewart 
2619f8829a4aSRandall Stewart static void
2620f8829a4aSRandall Stewart sctp_notify_assoc_change(uint32_t event, struct sctp_tcb *stcb,
2621ceaad40aSRandall Stewart     uint32_t error, void *data, int so_locked
2622ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2623ceaad40aSRandall Stewart     SCTP_UNUSED
2624ceaad40aSRandall Stewart #endif
2625ceaad40aSRandall Stewart )
2626f8829a4aSRandall Stewart {
2627f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2628f8829a4aSRandall Stewart 	struct sctp_assoc_change *sac;
2629f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2630f8829a4aSRandall Stewart 
2631ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2632ceaad40aSRandall Stewart 	struct socket *so;
2633ceaad40aSRandall Stewart 
2634ceaad40aSRandall Stewart #endif
2635ceaad40aSRandall Stewart 
2636f8829a4aSRandall Stewart 	/*
2637f8829a4aSRandall Stewart 	 * For TCP model AND UDP connected sockets we will send an error up
2638f8829a4aSRandall Stewart 	 * when an ABORT comes in.
2639f8829a4aSRandall Stewart 	 */
2640f8829a4aSRandall Stewart 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2641f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
26423c503c28SRandall Stewart 	    ((event == SCTP_COMM_LOST) || (event == SCTP_CANT_STR_ASSOC))) {
2643c4739e2fSRandall Stewart 		if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_WAIT) {
2644c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNREFUSED);
264544b7479bSRandall Stewart 			stcb->sctp_socket->so_error = ECONNREFUSED;
2646c4739e2fSRandall Stewart 		} else {
2647c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
2648f8829a4aSRandall Stewart 			stcb->sctp_socket->so_error = ECONNRESET;
2649c4739e2fSRandall Stewart 		}
2650f8829a4aSRandall Stewart 		/* Wake ANY sleepers */
2651ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2652ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
2653ceaad40aSRandall Stewart 		if (!so_locked) {
2654ceaad40aSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
2655ceaad40aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
2656ceaad40aSRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
2657ceaad40aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
2658ceaad40aSRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
2659ceaad40aSRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
2660ceaad40aSRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
2661ceaad40aSRandall Stewart 				return;
2662ceaad40aSRandall Stewart 			}
2663ceaad40aSRandall Stewart 		}
2664ceaad40aSRandall Stewart #endif
26658b4da1c3SMichael Tuexen 		socantrcvmore(stcb->sctp_socket);
2666f8829a4aSRandall Stewart 		sorwakeup(stcb->sctp_socket);
2667f8829a4aSRandall Stewart 		sowwakeup(stcb->sctp_socket);
2668ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2669ceaad40aSRandall Stewart 		if (!so_locked) {
2670ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
2671ceaad40aSRandall Stewart 		}
2672ceaad40aSRandall Stewart #endif
2673f8829a4aSRandall Stewart 	}
2674e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT)) {
2675f8829a4aSRandall Stewart 		/* event not enabled */
2676f8829a4aSRandall Stewart 		return;
2677f8829a4aSRandall Stewart 	}
2678139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_assoc_change), 0, M_DONTWAIT, 1, MT_DATA);
2679f8829a4aSRandall Stewart 	if (m_notify == NULL)
2680f8829a4aSRandall Stewart 		/* no space left */
2681f8829a4aSRandall Stewart 		return;
2682139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2683f8829a4aSRandall Stewart 
2684f8829a4aSRandall Stewart 	sac = mtod(m_notify, struct sctp_assoc_change *);
2685f8829a4aSRandall Stewart 	sac->sac_type = SCTP_ASSOC_CHANGE;
2686f8829a4aSRandall Stewart 	sac->sac_flags = 0;
2687f8829a4aSRandall Stewart 	sac->sac_length = sizeof(struct sctp_assoc_change);
2688f8829a4aSRandall Stewart 	sac->sac_state = event;
2689f8829a4aSRandall Stewart 	sac->sac_error = error;
2690f8829a4aSRandall Stewart 	/* XXX verify these stream counts */
2691f8829a4aSRandall Stewart 	sac->sac_outbound_streams = stcb->asoc.streamoutcnt;
2692f8829a4aSRandall Stewart 	sac->sac_inbound_streams = stcb->asoc.streamincnt;
2693f8829a4aSRandall Stewart 	sac->sac_assoc_id = sctp_get_associd(stcb);
2694139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_assoc_change);
2695139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2696f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
2697f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
2698f8829a4aSRandall Stewart 	    m_notify);
2699f8829a4aSRandall Stewart 	if (control == NULL) {
2700f8829a4aSRandall Stewart 		/* no memory */
2701f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2702f8829a4aSRandall Stewart 		return;
2703f8829a4aSRandall Stewart 	}
2704139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
2705f8829a4aSRandall Stewart 	/* not that we need this */
2706f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
2707139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2708f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2709f8829a4aSRandall Stewart 	    control,
2710cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD,
2711cfde3ff7SRandall Stewart 	    so_locked);
2712f8829a4aSRandall Stewart 	if (event == SCTP_COMM_LOST) {
2713f8829a4aSRandall Stewart 		/* Wake up any sleeper */
2714ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2715ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
2716ceaad40aSRandall Stewart 		if (!so_locked) {
2717ceaad40aSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
2718ceaad40aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
2719ceaad40aSRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
2720ceaad40aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
2721ceaad40aSRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
2722ceaad40aSRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
2723ceaad40aSRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
2724ceaad40aSRandall Stewart 				return;
2725ceaad40aSRandall Stewart 			}
2726ceaad40aSRandall Stewart 		}
2727ceaad40aSRandall Stewart #endif
2728f8829a4aSRandall Stewart 		sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket);
2729ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2730ceaad40aSRandall Stewart 		if (!so_locked) {
2731ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
2732ceaad40aSRandall Stewart 		}
2733ceaad40aSRandall Stewart #endif
2734f8829a4aSRandall Stewart 	}
2735f8829a4aSRandall Stewart }
2736f8829a4aSRandall Stewart 
2737f8829a4aSRandall Stewart static void
2738f8829a4aSRandall Stewart sctp_notify_peer_addr_change(struct sctp_tcb *stcb, uint32_t state,
2739f8829a4aSRandall Stewart     struct sockaddr *sa, uint32_t error)
2740f8829a4aSRandall Stewart {
2741f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2742f8829a4aSRandall Stewart 	struct sctp_paddr_change *spc;
2743f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2744f8829a4aSRandall Stewart 
2745e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT)) {
2746f8829a4aSRandall Stewart 		/* event not enabled */
2747f8829a4aSRandall Stewart 		return;
2748830d754dSRandall Stewart 	}
2749139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_paddr_change), 0, M_DONTWAIT, 1, MT_DATA);
2750f8829a4aSRandall Stewart 	if (m_notify == NULL)
2751f8829a4aSRandall Stewart 		return;
2752139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2753f8829a4aSRandall Stewart 	spc = mtod(m_notify, struct sctp_paddr_change *);
2754f8829a4aSRandall Stewart 	spc->spc_type = SCTP_PEER_ADDR_CHANGE;
2755f8829a4aSRandall Stewart 	spc->spc_flags = 0;
2756f8829a4aSRandall Stewart 	spc->spc_length = sizeof(struct sctp_paddr_change);
27575e2c2d87SRandall Stewart 	switch (sa->sa_family) {
2758ea5eba11SMichael Tuexen #ifdef INET
27595e2c2d87SRandall Stewart 	case AF_INET:
2760f8829a4aSRandall Stewart 		memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
27615e2c2d87SRandall Stewart 		break;
2762ea5eba11SMichael Tuexen #endif
27635e2c2d87SRandall Stewart #ifdef INET6
27645e2c2d87SRandall Stewart 	case AF_INET6:
27655e2c2d87SRandall Stewart 		{
2766f42a358aSRandall Stewart 			struct sockaddr_in6 *sin6;
2767f42a358aSRandall Stewart 
2768f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in6));
2769f42a358aSRandall Stewart 
2770f42a358aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)&spc->spc_aaddr;
2771f42a358aSRandall Stewart 			if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
277242551e99SRandall Stewart 				if (sin6->sin6_scope_id == 0) {
277342551e99SRandall Stewart 					/* recover scope_id for user */
2774f42a358aSRandall Stewart 					(void)sa6_recoverscope(sin6);
277542551e99SRandall Stewart 				} else {
277642551e99SRandall Stewart 					/* clear embedded scope_id for user */
277742551e99SRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
277842551e99SRandall Stewart 				}
2779f42a358aSRandall Stewart 			}
27805e2c2d87SRandall Stewart 			break;
27815e2c2d87SRandall Stewart 		}
27825e2c2d87SRandall Stewart #endif
27835e2c2d87SRandall Stewart 	default:
27845e2c2d87SRandall Stewart 		/* TSNH */
27855e2c2d87SRandall Stewart 		break;
2786f8829a4aSRandall Stewart 	}
2787f8829a4aSRandall Stewart 	spc->spc_state = state;
2788f8829a4aSRandall Stewart 	spc->spc_error = error;
2789f8829a4aSRandall Stewart 	spc->spc_assoc_id = sctp_get_associd(stcb);
2790f8829a4aSRandall Stewart 
2791139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_paddr_change);
2792139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2793f8829a4aSRandall Stewart 
2794f8829a4aSRandall Stewart 	/* append to socket */
2795f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
2796f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
2797f8829a4aSRandall Stewart 	    m_notify);
2798f8829a4aSRandall Stewart 	if (control == NULL) {
2799f8829a4aSRandall Stewart 		/* no memory */
2800f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2801f8829a4aSRandall Stewart 		return;
2802f8829a4aSRandall Stewart 	}
2803139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
2804139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2805f8829a4aSRandall Stewart 	/* not that we need this */
2806f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
2807f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2808f8829a4aSRandall Stewart 	    control,
2809cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
2810cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
2811cfde3ff7SRandall Stewart 	    SCTP_SO_NOT_LOCKED);
2812f8829a4aSRandall Stewart }
2813f8829a4aSRandall Stewart 
2814f8829a4aSRandall Stewart 
2815f8829a4aSRandall Stewart static void
2816f8829a4aSRandall Stewart sctp_notify_send_failed(struct sctp_tcb *stcb, uint32_t error,
2817ceaad40aSRandall Stewart     struct sctp_tmit_chunk *chk, int so_locked
2818ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2819ceaad40aSRandall Stewart     SCTP_UNUSED
2820ceaad40aSRandall Stewart #endif
2821ceaad40aSRandall Stewart )
2822f8829a4aSRandall Stewart {
2823830d754dSRandall Stewart 	struct mbuf *m_notify;
2824f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
2825f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2826f8829a4aSRandall Stewart 	int length;
2827f8829a4aSRandall Stewart 
2828e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT)) {
2829f8829a4aSRandall Stewart 		/* event not enabled */
2830f8829a4aSRandall Stewart 		return;
2831830d754dSRandall Stewart 	}
2832139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_send_failed), 0, M_DONTWAIT, 1, MT_DATA);
2833f8829a4aSRandall Stewart 	if (m_notify == NULL)
2834f8829a4aSRandall Stewart 		/* no space left */
2835f8829a4aSRandall Stewart 		return;
2836fc14de76SRandall Stewart 	length = sizeof(struct sctp_send_failed) + chk->send_size;
2837fc14de76SRandall Stewart 	length -= sizeof(struct sctp_data_chunk);
2838139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2839f8829a4aSRandall Stewart 	ssf = mtod(m_notify, struct sctp_send_failed *);
2840f8829a4aSRandall Stewart 	ssf->ssf_type = SCTP_SEND_FAILED;
2841f8829a4aSRandall Stewart 	if (error == SCTP_NOTIFY_DATAGRAM_UNSENT)
2842f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_UNSENT;
2843f8829a4aSRandall Stewart 	else
2844f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_SENT;
2845f8829a4aSRandall Stewart 	ssf->ssf_length = length;
2846f8829a4aSRandall Stewart 	ssf->ssf_error = error;
2847f8829a4aSRandall Stewart 	/* not exactly what the user sent in, but should be close :) */
2848d00aff5dSRandall Stewart 	bzero(&ssf->ssf_info, sizeof(ssf->ssf_info));
2849f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_stream = chk->rec.data.stream_number;
2850f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_ssn = chk->rec.data.stream_seq;
2851f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_flags = chk->rec.data.rcv_flags;
2852f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_ppid = chk->rec.data.payloadtype;
2853f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_context = chk->rec.data.context;
2854f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
2855f8829a4aSRandall Stewart 	ssf->ssf_assoc_id = sctp_get_associd(stcb);
2856fc14de76SRandall Stewart 
2857830d754dSRandall Stewart 	if (chk->data) {
2858830d754dSRandall Stewart 		/*
2859830d754dSRandall Stewart 		 * trim off the sctp chunk header(it should be there)
2860830d754dSRandall Stewart 		 */
2861830d754dSRandall Stewart 		if (chk->send_size >= sizeof(struct sctp_data_chunk)) {
2862830d754dSRandall Stewart 			m_adj(chk->data, sizeof(struct sctp_data_chunk));
2863830d754dSRandall Stewart 			sctp_mbuf_crush(chk->data);
2864830d754dSRandall Stewart 			chk->send_size -= sizeof(struct sctp_data_chunk);
2865830d754dSRandall Stewart 		}
2866830d754dSRandall Stewart 	}
2867810ec536SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = chk->data;
2868810ec536SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_send_failed);
2869f8829a4aSRandall Stewart 	/* Steal off the mbuf */
2870f8829a4aSRandall Stewart 	chk->data = NULL;
2871f8829a4aSRandall Stewart 	/*
2872f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
2873f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
2874f8829a4aSRandall Stewart 	 * non-reader
2875f8829a4aSRandall Stewart 	 */
2876139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
2877f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2878f8829a4aSRandall Stewart 		return;
2879f8829a4aSRandall Stewart 	}
2880f8829a4aSRandall Stewart 	/* append to socket */
2881f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
2882f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
2883f8829a4aSRandall Stewart 	    m_notify);
2884f8829a4aSRandall Stewart 	if (control == NULL) {
2885f8829a4aSRandall Stewart 		/* no memory */
2886f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2887f8829a4aSRandall Stewart 		return;
2888f8829a4aSRandall Stewart 	}
2889139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2890f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2891f8829a4aSRandall Stewart 	    control,
2892cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
2893cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
2894cfde3ff7SRandall Stewart 	    so_locked);
2895f8829a4aSRandall Stewart }
2896f8829a4aSRandall Stewart 
2897f8829a4aSRandall Stewart 
2898f8829a4aSRandall Stewart static void
2899f8829a4aSRandall Stewart sctp_notify_send_failed2(struct sctp_tcb *stcb, uint32_t error,
2900ceaad40aSRandall Stewart     struct sctp_stream_queue_pending *sp, int so_locked
2901ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2902ceaad40aSRandall Stewart     SCTP_UNUSED
2903ceaad40aSRandall Stewart #endif
2904ceaad40aSRandall Stewart )
2905f8829a4aSRandall Stewart {
2906f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2907f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
2908f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2909f8829a4aSRandall Stewart 	int length;
2910f8829a4aSRandall Stewart 
2911e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT)) {
2912f8829a4aSRandall Stewart 		/* event not enabled */
2913f8829a4aSRandall Stewart 		return;
2914830d754dSRandall Stewart 	}
2915f8829a4aSRandall Stewart 	length = sizeof(struct sctp_send_failed) + sp->length;
2916d00aff5dSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_send_failed), 0, M_DONTWAIT, 1, MT_DATA);
2917f8829a4aSRandall Stewart 	if (m_notify == NULL)
2918f8829a4aSRandall Stewart 		/* no space left */
2919f8829a4aSRandall Stewart 		return;
2920139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2921f8829a4aSRandall Stewart 	ssf = mtod(m_notify, struct sctp_send_failed *);
2922f8829a4aSRandall Stewart 	ssf->ssf_type = SCTP_SEND_FAILED;
2923f8829a4aSRandall Stewart 	if (error == SCTP_NOTIFY_DATAGRAM_UNSENT)
2924f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_UNSENT;
2925f8829a4aSRandall Stewart 	else
2926f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_SENT;
2927f8829a4aSRandall Stewart 	ssf->ssf_length = length;
2928f8829a4aSRandall Stewart 	ssf->ssf_error = error;
2929f8829a4aSRandall Stewart 	/* not exactly what the user sent in, but should be close :) */
2930d00aff5dSRandall Stewart 	bzero(&ssf->ssf_info, sizeof(ssf->ssf_info));
2931f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_stream = sp->stream;
2932f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_ssn = sp->strseq;
2933fc14de76SRandall Stewart 	if (sp->some_taken) {
2934fc14de76SRandall Stewart 		ssf->ssf_info.sinfo_flags = SCTP_DATA_LAST_FRAG;
2935fc14de76SRandall Stewart 	} else {
2936fc14de76SRandall Stewart 		ssf->ssf_info.sinfo_flags = SCTP_DATA_NOT_FRAG;
2937fc14de76SRandall Stewart 	}
2938f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_ppid = sp->ppid;
2939f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_context = sp->context;
2940f8829a4aSRandall Stewart 	ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
2941f8829a4aSRandall Stewart 	ssf->ssf_assoc_id = sctp_get_associd(stcb);
2942139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = sp->data;
2943139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_send_failed);
2944f8829a4aSRandall Stewart 
2945f8829a4aSRandall Stewart 	/* Steal off the mbuf */
2946f8829a4aSRandall Stewart 	sp->data = NULL;
2947f8829a4aSRandall Stewart 	/*
2948f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
2949f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
2950f8829a4aSRandall Stewart 	 * non-reader
2951f8829a4aSRandall Stewart 	 */
2952139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
2953f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2954f8829a4aSRandall Stewart 		return;
2955f8829a4aSRandall Stewart 	}
2956f8829a4aSRandall Stewart 	/* append to socket */
2957f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
2958f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
2959f8829a4aSRandall Stewart 	    m_notify);
2960f8829a4aSRandall Stewart 	if (control == NULL) {
2961f8829a4aSRandall Stewart 		/* no memory */
2962f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2963f8829a4aSRandall Stewart 		return;
2964f8829a4aSRandall Stewart 	}
2965139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2966f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2967f8829a4aSRandall Stewart 	    control,
2968cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
2969f8829a4aSRandall Stewart }
2970f8829a4aSRandall Stewart 
2971f8829a4aSRandall Stewart 
2972f8829a4aSRandall Stewart 
2973f8829a4aSRandall Stewart static void
2974f8829a4aSRandall Stewart sctp_notify_adaptation_layer(struct sctp_tcb *stcb,
2975f8829a4aSRandall Stewart     uint32_t error)
2976f8829a4aSRandall Stewart {
2977f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2978f8829a4aSRandall Stewart 	struct sctp_adaptation_event *sai;
2979f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2980f8829a4aSRandall Stewart 
2981e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT)) {
2982f8829a4aSRandall Stewart 		/* event not enabled */
2983f8829a4aSRandall Stewart 		return;
2984830d754dSRandall Stewart 	}
2985139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_adaption_event), 0, M_DONTWAIT, 1, MT_DATA);
2986f8829a4aSRandall Stewart 	if (m_notify == NULL)
2987f8829a4aSRandall Stewart 		/* no space left */
2988f8829a4aSRandall Stewart 		return;
2989139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2990f8829a4aSRandall Stewart 	sai = mtod(m_notify, struct sctp_adaptation_event *);
2991f8829a4aSRandall Stewart 	sai->sai_type = SCTP_ADAPTATION_INDICATION;
2992f8829a4aSRandall Stewart 	sai->sai_flags = 0;
2993f8829a4aSRandall Stewart 	sai->sai_length = sizeof(struct sctp_adaptation_event);
29942afb3e84SRandall Stewart 	sai->sai_adaptation_ind = stcb->asoc.peers_adaptation;
2995f8829a4aSRandall Stewart 	sai->sai_assoc_id = sctp_get_associd(stcb);
2996f8829a4aSRandall Stewart 
2997139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_adaptation_event);
2998139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2999f8829a4aSRandall Stewart 
3000f8829a4aSRandall Stewart 	/* append to socket */
3001f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3002f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
3003f8829a4aSRandall Stewart 	    m_notify);
3004f8829a4aSRandall Stewart 	if (control == NULL) {
3005f8829a4aSRandall Stewart 		/* no memory */
3006f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3007f8829a4aSRandall Stewart 		return;
3008f8829a4aSRandall Stewart 	}
3009139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3010139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3011f8829a4aSRandall Stewart 	/* not that we need this */
3012f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3013f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3014f8829a4aSRandall Stewart 	    control,
3015cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3016f8829a4aSRandall Stewart }
3017f8829a4aSRandall Stewart 
301803b0b021SRandall Stewart /* This always must be called with the read-queue LOCKED in the INP */
3019810ec536SMichael Tuexen static void
30202dad8a55SRandall Stewart sctp_notify_partial_delivery_indication(struct sctp_tcb *stcb, uint32_t error,
3021810ec536SMichael Tuexen     uint32_t val, int so_locked
3022810ec536SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3023810ec536SMichael Tuexen     SCTP_UNUSED
3024810ec536SMichael Tuexen #endif
3025810ec536SMichael Tuexen )
3026f8829a4aSRandall Stewart {
3027f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3028f8829a4aSRandall Stewart 	struct sctp_pdapi_event *pdapi;
3029f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
303003b0b021SRandall Stewart 	struct sockbuf *sb;
3031f8829a4aSRandall Stewart 
3032e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_PDAPIEVNT)) {
3033f8829a4aSRandall Stewart 		/* event not enabled */
3034f8829a4aSRandall Stewart 		return;
3035830d754dSRandall Stewart 	}
3036cd1386abSMichael Tuexen 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
3037cd1386abSMichael Tuexen 		return;
3038cd1386abSMichael Tuexen 	}
3039139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_pdapi_event), 0, M_DONTWAIT, 1, MT_DATA);
3040f8829a4aSRandall Stewart 	if (m_notify == NULL)
3041f8829a4aSRandall Stewart 		/* no space left */
3042f8829a4aSRandall Stewart 		return;
3043139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3044f8829a4aSRandall Stewart 	pdapi = mtod(m_notify, struct sctp_pdapi_event *);
3045f8829a4aSRandall Stewart 	pdapi->pdapi_type = SCTP_PARTIAL_DELIVERY_EVENT;
3046f8829a4aSRandall Stewart 	pdapi->pdapi_flags = 0;
3047f8829a4aSRandall Stewart 	pdapi->pdapi_length = sizeof(struct sctp_pdapi_event);
3048f8829a4aSRandall Stewart 	pdapi->pdapi_indication = error;
30499a6142d8SRandall Stewart 	pdapi->pdapi_stream = (val >> 16);
30509a6142d8SRandall Stewart 	pdapi->pdapi_seq = (val & 0x0000ffff);
3051f8829a4aSRandall Stewart 	pdapi->pdapi_assoc_id = sctp_get_associd(stcb);
3052f8829a4aSRandall Stewart 
3053139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_pdapi_event);
3054139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3055f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3056f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
3057f8829a4aSRandall Stewart 	    m_notify);
3058f8829a4aSRandall Stewart 	if (control == NULL) {
3059f8829a4aSRandall Stewart 		/* no memory */
3060f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3061f8829a4aSRandall Stewart 		return;
3062f8829a4aSRandall Stewart 	}
3063139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3064139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3065f8829a4aSRandall Stewart 	/* not that we need this */
3066f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
306703b0b021SRandall Stewart 	control->held_length = 0;
306803b0b021SRandall Stewart 	control->length = 0;
306903b0b021SRandall Stewart 	sb = &stcb->sctp_socket->so_rcv;
3070b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
3071139bc87fSRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m_notify));
307280fefe0aSRandall Stewart 	}
307303b0b021SRandall Stewart 	sctp_sballoc(stcb, sb, m_notify);
3074b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
307503b0b021SRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
307680fefe0aSRandall Stewart 	}
3077139bc87fSRandall Stewart 	atomic_add_int(&control->length, SCTP_BUF_LEN(m_notify));
307803b0b021SRandall Stewart 	control->end_added = 1;
307903b0b021SRandall Stewart 	if (stcb->asoc.control_pdapi)
308003b0b021SRandall Stewart 		TAILQ_INSERT_AFTER(&stcb->sctp_ep->read_queue, stcb->asoc.control_pdapi, control, next);
308103b0b021SRandall Stewart 	else {
308203b0b021SRandall Stewart 		/* we really should not see this case */
308303b0b021SRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->sctp_ep->read_queue, control, next);
308403b0b021SRandall Stewart 	}
308503b0b021SRandall Stewart 	if (stcb->sctp_ep && stcb->sctp_socket) {
308603b0b021SRandall Stewart 		/* This should always be the case */
3087810ec536SMichael Tuexen #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3088810ec536SMichael Tuexen 		struct socket *so;
3089810ec536SMichael Tuexen 
3090810ec536SMichael Tuexen 		so = SCTP_INP_SO(stcb->sctp_ep);
3091810ec536SMichael Tuexen 		if (!so_locked) {
3092810ec536SMichael Tuexen 			atomic_add_int(&stcb->asoc.refcnt, 1);
3093810ec536SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
3094810ec536SMichael Tuexen 			SCTP_SOCKET_LOCK(so, 1);
3095810ec536SMichael Tuexen 			SCTP_TCB_LOCK(stcb);
3096810ec536SMichael Tuexen 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
3097810ec536SMichael Tuexen 			if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
3098810ec536SMichael Tuexen 				SCTP_SOCKET_UNLOCK(so, 1);
3099810ec536SMichael Tuexen 				return;
3100810ec536SMichael Tuexen 			}
3101810ec536SMichael Tuexen 		}
3102810ec536SMichael Tuexen #endif
310303b0b021SRandall Stewart 		sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket);
3104810ec536SMichael Tuexen #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3105810ec536SMichael Tuexen 		if (!so_locked) {
3106810ec536SMichael Tuexen 			SCTP_SOCKET_UNLOCK(so, 1);
3107810ec536SMichael Tuexen 		}
3108810ec536SMichael Tuexen #endif
3109f8829a4aSRandall Stewart 	}
3110f8829a4aSRandall Stewart }
3111f8829a4aSRandall Stewart 
3112f8829a4aSRandall Stewart static void
3113f8829a4aSRandall Stewart sctp_notify_shutdown_event(struct sctp_tcb *stcb)
3114f8829a4aSRandall Stewart {
3115f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3116f8829a4aSRandall Stewart 	struct sctp_shutdown_event *sse;
3117f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3118f8829a4aSRandall Stewart 
3119f8829a4aSRandall Stewart 	/*
3120f8829a4aSRandall Stewart 	 * For TCP model AND UDP connected sockets we will send an error up
3121f8829a4aSRandall Stewart 	 * when an SHUTDOWN completes
3122f8829a4aSRandall Stewart 	 */
3123f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3124f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
3125f8829a4aSRandall Stewart 		/* mark socket closed for read/write and wakeup! */
3126ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3127ceaad40aSRandall Stewart 		struct socket *so;
3128ceaad40aSRandall Stewart 
3129ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
3130ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3131ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3132ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3133ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3134ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3135ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
3136ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
3137ceaad40aSRandall Stewart 			return;
3138ceaad40aSRandall Stewart 		}
3139ceaad40aSRandall Stewart #endif
3140f8829a4aSRandall Stewart 		socantsendmore(stcb->sctp_socket);
3141ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3142ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3143ceaad40aSRandall Stewart #endif
3144f8829a4aSRandall Stewart 	}
3145e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT)) {
3146f8829a4aSRandall Stewart 		/* event not enabled */
3147f8829a4aSRandall Stewart 		return;
3148830d754dSRandall Stewart 	}
3149139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_shutdown_event), 0, M_DONTWAIT, 1, MT_DATA);
3150f8829a4aSRandall Stewart 	if (m_notify == NULL)
3151f8829a4aSRandall Stewart 		/* no space left */
3152f8829a4aSRandall Stewart 		return;
3153f8829a4aSRandall Stewart 	sse = mtod(m_notify, struct sctp_shutdown_event *);
3154f8829a4aSRandall Stewart 	sse->sse_type = SCTP_SHUTDOWN_EVENT;
3155f8829a4aSRandall Stewart 	sse->sse_flags = 0;
3156f8829a4aSRandall Stewart 	sse->sse_length = sizeof(struct sctp_shutdown_event);
3157f8829a4aSRandall Stewart 	sse->sse_assoc_id = sctp_get_associd(stcb);
3158f8829a4aSRandall Stewart 
3159139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_shutdown_event);
3160139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3161f8829a4aSRandall Stewart 
3162f8829a4aSRandall Stewart 	/* append to socket */
3163f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3164f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
3165f8829a4aSRandall Stewart 	    m_notify);
3166f8829a4aSRandall Stewart 	if (control == NULL) {
3167f8829a4aSRandall Stewart 		/* no memory */
3168f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3169f8829a4aSRandall Stewart 		return;
3170f8829a4aSRandall Stewart 	}
3171139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3172139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3173f8829a4aSRandall Stewart 	/* not that we need this */
3174f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3175f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3176f8829a4aSRandall Stewart 	    control,
3177cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3178f8829a4aSRandall Stewart }
3179f8829a4aSRandall Stewart 
3180f8829a4aSRandall Stewart static void
3181830d754dSRandall Stewart sctp_notify_sender_dry_event(struct sctp_tcb *stcb,
3182830d754dSRandall Stewart     int so_locked
3183830d754dSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3184830d754dSRandall Stewart     SCTP_UNUSED
3185830d754dSRandall Stewart #endif
3186830d754dSRandall Stewart )
3187830d754dSRandall Stewart {
3188830d754dSRandall Stewart 	struct mbuf *m_notify;
3189830d754dSRandall Stewart 	struct sctp_sender_dry_event *event;
3190830d754dSRandall Stewart 	struct sctp_queued_to_read *control;
3191830d754dSRandall Stewart 
3192e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DRYEVNT)) {
3193830d754dSRandall Stewart 		/* event not enabled */
3194830d754dSRandall Stewart 		return;
3195830d754dSRandall Stewart 	}
3196830d754dSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_sender_dry_event), 0, M_DONTWAIT, 1, MT_DATA);
3197830d754dSRandall Stewart 	if (m_notify == NULL) {
3198830d754dSRandall Stewart 		/* no space left */
3199830d754dSRandall Stewart 		return;
3200830d754dSRandall Stewart 	}
3201830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3202830d754dSRandall Stewart 	event = mtod(m_notify, struct sctp_sender_dry_event *);
3203830d754dSRandall Stewart 	event->sender_dry_type = SCTP_SENDER_DRY_EVENT;
3204830d754dSRandall Stewart 	event->sender_dry_flags = 0;
3205830d754dSRandall Stewart 	event->sender_dry_length = sizeof(struct sctp_sender_dry_event);
3206830d754dSRandall Stewart 	event->sender_dry_assoc_id = sctp_get_associd(stcb);
3207830d754dSRandall Stewart 
3208830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_sender_dry_event);
3209830d754dSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3210830d754dSRandall Stewart 
3211830d754dSRandall Stewart 	/* append to socket */
3212830d754dSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3213830d754dSRandall Stewart 	    0, 0, 0, 0, 0, 0, m_notify);
3214830d754dSRandall Stewart 	if (control == NULL) {
3215830d754dSRandall Stewart 		/* no memory */
3216830d754dSRandall Stewart 		sctp_m_freem(m_notify);
3217830d754dSRandall Stewart 		return;
3218830d754dSRandall Stewart 	}
3219830d754dSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3220830d754dSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3221830d754dSRandall Stewart 	/* not that we need this */
3222830d754dSRandall Stewart 	control->tail_mbuf = m_notify;
3223830d754dSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb, control,
3224cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3225830d754dSRandall Stewart }
3226830d754dSRandall Stewart 
3227ea44232bSRandall Stewart 
3228ea44232bSRandall Stewart static void
3229ea44232bSRandall Stewart sctp_notify_stream_reset_add(struct sctp_tcb *stcb, int number_entries, int flag)
3230ea44232bSRandall Stewart {
3231ea44232bSRandall Stewart 	struct mbuf *m_notify;
3232ea44232bSRandall Stewart 	struct sctp_queued_to_read *control;
3233ea44232bSRandall Stewart 	struct sctp_stream_reset_event *strreset;
3234ea44232bSRandall Stewart 	int len;
3235ea44232bSRandall Stewart 
3236ea44232bSRandall Stewart 	if (sctp_is_feature_off(stcb->sctp_ep, SCTP_PCB_FLAGS_STREAM_RESETEVNT)) {
3237ea44232bSRandall Stewart 		/* event not enabled */
3238ea44232bSRandall Stewart 		return;
3239ea44232bSRandall Stewart 	}
3240ea44232bSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA);
3241ea44232bSRandall Stewart 	if (m_notify == NULL)
3242ea44232bSRandall Stewart 		/* no space left */
3243ea44232bSRandall Stewart 		return;
3244ea44232bSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3245ea44232bSRandall Stewart 	len = sizeof(struct sctp_stream_reset_event) + (number_entries * sizeof(uint16_t));
3246ea44232bSRandall Stewart 	if (len > M_TRAILINGSPACE(m_notify)) {
3247ea44232bSRandall Stewart 		/* never enough room */
3248ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3249ea44232bSRandall Stewart 		return;
3250ea44232bSRandall Stewart 	}
3251ea44232bSRandall Stewart 	strreset = mtod(m_notify, struct sctp_stream_reset_event *);
3252ea44232bSRandall Stewart 	strreset->strreset_type = SCTP_STREAM_RESET_EVENT;
3253ea44232bSRandall Stewart 	strreset->strreset_flags = SCTP_STRRESET_ADD_STREAM | flag;
3254ea44232bSRandall Stewart 	strreset->strreset_length = len;
3255ea44232bSRandall Stewart 	strreset->strreset_assoc_id = sctp_get_associd(stcb);
3256ea44232bSRandall Stewart 	strreset->strreset_list[0] = number_entries;
3257ea44232bSRandall Stewart 
3258ea44232bSRandall Stewart 	SCTP_BUF_LEN(m_notify) = len;
3259ea44232bSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3260ea44232bSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3261ea44232bSRandall Stewart 		/* no space */
3262ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3263ea44232bSRandall Stewart 		return;
3264ea44232bSRandall Stewart 	}
3265ea44232bSRandall Stewart 	/* append to socket */
3266ea44232bSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3267ea44232bSRandall Stewart 	    0, 0, 0, 0, 0, 0,
3268ea44232bSRandall Stewart 	    m_notify);
3269ea44232bSRandall Stewart 	if (control == NULL) {
3270ea44232bSRandall Stewart 		/* no memory */
3271ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3272ea44232bSRandall Stewart 		return;
3273ea44232bSRandall Stewart 	}
3274ea44232bSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3275ea44232bSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3276ea44232bSRandall Stewart 	/* not that we need this */
3277ea44232bSRandall Stewart 	control->tail_mbuf = m_notify;
3278ea44232bSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3279ea44232bSRandall Stewart 	    control,
3280cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3281ea44232bSRandall Stewart }
3282ea44232bSRandall Stewart 
3283ea44232bSRandall Stewart 
3284830d754dSRandall Stewart static void
3285f8829a4aSRandall Stewart sctp_notify_stream_reset(struct sctp_tcb *stcb,
3286f8829a4aSRandall Stewart     int number_entries, uint16_t * list, int flag)
3287f8829a4aSRandall Stewart {
3288f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3289f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3290f8829a4aSRandall Stewart 	struct sctp_stream_reset_event *strreset;
3291f8829a4aSRandall Stewart 	int len;
3292f8829a4aSRandall Stewart 
3293830d754dSRandall Stewart 	if (sctp_is_feature_off(stcb->sctp_ep, SCTP_PCB_FLAGS_STREAM_RESETEVNT)) {
3294f8829a4aSRandall Stewart 		/* event not enabled */
3295f8829a4aSRandall Stewart 		return;
3296830d754dSRandall Stewart 	}
3297139bc87fSRandall Stewart 	m_notify = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_DONTWAIT, 1, MT_DATA);
3298f8829a4aSRandall Stewart 	if (m_notify == NULL)
3299f8829a4aSRandall Stewart 		/* no space left */
3300f8829a4aSRandall Stewart 		return;
3301139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3302f8829a4aSRandall Stewart 	len = sizeof(struct sctp_stream_reset_event) + (number_entries * sizeof(uint16_t));
3303f8829a4aSRandall Stewart 	if (len > M_TRAILINGSPACE(m_notify)) {
3304f8829a4aSRandall Stewart 		/* never enough room */
3305f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3306f8829a4aSRandall Stewart 		return;
3307f8829a4aSRandall Stewart 	}
3308f8829a4aSRandall Stewart 	strreset = mtod(m_notify, struct sctp_stream_reset_event *);
3309f8829a4aSRandall Stewart 	strreset->strreset_type = SCTP_STREAM_RESET_EVENT;
3310f8829a4aSRandall Stewart 	if (number_entries == 0) {
3311f8829a4aSRandall Stewart 		strreset->strreset_flags = flag | SCTP_STRRESET_ALL_STREAMS;
3312f8829a4aSRandall Stewart 	} else {
3313f8829a4aSRandall Stewart 		strreset->strreset_flags = flag | SCTP_STRRESET_STREAM_LIST;
3314f8829a4aSRandall Stewart 	}
3315f8829a4aSRandall Stewart 	strreset->strreset_length = len;
3316f8829a4aSRandall Stewart 	strreset->strreset_assoc_id = sctp_get_associd(stcb);
3317f8829a4aSRandall Stewart 	if (number_entries) {
3318f8829a4aSRandall Stewart 		int i;
3319f8829a4aSRandall Stewart 
3320f8829a4aSRandall Stewart 		for (i = 0; i < number_entries; i++) {
3321f8829a4aSRandall Stewart 			strreset->strreset_list[i] = ntohs(list[i]);
3322f8829a4aSRandall Stewart 		}
3323f8829a4aSRandall Stewart 	}
3324139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = len;
3325139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3326139bc87fSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3327f8829a4aSRandall Stewart 		/* no space */
3328f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3329f8829a4aSRandall Stewart 		return;
3330f8829a4aSRandall Stewart 	}
3331f8829a4aSRandall Stewart 	/* append to socket */
3332f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3333f8829a4aSRandall Stewart 	    0, 0, 0, 0, 0, 0,
3334f8829a4aSRandall Stewart 	    m_notify);
3335f8829a4aSRandall Stewart 	if (control == NULL) {
3336f8829a4aSRandall Stewart 		/* no memory */
3337f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3338f8829a4aSRandall Stewart 		return;
3339f8829a4aSRandall Stewart 	}
3340139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3341139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3342f8829a4aSRandall Stewart 	/* not that we need this */
3343f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3344f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3345f8829a4aSRandall Stewart 	    control,
3346cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3347f8829a4aSRandall Stewart }
3348f8829a4aSRandall Stewart 
3349f8829a4aSRandall Stewart 
3350f8829a4aSRandall Stewart void
3351f8829a4aSRandall Stewart sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb,
3352ceaad40aSRandall Stewart     uint32_t error, void *data, int so_locked
3353ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3354ceaad40aSRandall Stewart     SCTP_UNUSED
3355ceaad40aSRandall Stewart #endif
3356ceaad40aSRandall Stewart )
3357f8829a4aSRandall Stewart {
3358830d754dSRandall Stewart 	if ((stcb == NULL) ||
3359830d754dSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3360f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3361830d754dSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3362830d754dSRandall Stewart 		/* If the socket is gone we are out of here */
3363f8829a4aSRandall Stewart 		return;
3364f8829a4aSRandall Stewart 	}
3365a99b6783SRandall Stewart 	if (stcb->sctp_socket->so_rcv.sb_state & SBS_CANTRCVMORE) {
3366a99b6783SRandall Stewart 		return;
3367a99b6783SRandall Stewart 	}
336817205eccSRandall Stewart 	if (stcb && ((stcb->asoc.state & SCTP_STATE_COOKIE_WAIT) ||
336917205eccSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_COOKIE_ECHOED))) {
337017205eccSRandall Stewart 		if ((notification == SCTP_NOTIFY_INTERFACE_DOWN) ||
337117205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_UP) ||
337217205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_CONFIRMED)) {
337317205eccSRandall Stewart 			/* Don't report these in front states */
337417205eccSRandall Stewart 			return;
337517205eccSRandall Stewart 		}
337617205eccSRandall Stewart 	}
3377f8829a4aSRandall Stewart 	switch (notification) {
3378f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_UP:
3379f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_up_sent == 0) {
3380ceaad40aSRandall Stewart 			sctp_notify_assoc_change(SCTP_COMM_UP, stcb, error, NULL, so_locked);
3381f8829a4aSRandall Stewart 			stcb->asoc.assoc_up_sent = 1;
3382f8829a4aSRandall Stewart 		}
33832afb3e84SRandall Stewart 		if (stcb->asoc.adaptation_needed && (stcb->asoc.adaptation_sent == 0)) {
33842afb3e84SRandall Stewart 			sctp_notify_adaptation_layer(stcb, error);
33852afb3e84SRandall Stewart 		}
3386830d754dSRandall Stewart 		if (stcb->asoc.peer_supports_auth == 0) {
3387830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3388830d754dSRandall Stewart 			    NULL, so_locked);
3389830d754dSRandall Stewart 		}
3390f8829a4aSRandall Stewart 		break;
3391f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_DOWN:
3392ceaad40aSRandall Stewart 		sctp_notify_assoc_change(SCTP_SHUTDOWN_COMP, stcb, error, NULL, so_locked);
3393f8829a4aSRandall Stewart 		break;
3394f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_DOWN:
3395f8829a4aSRandall Stewart 		{
3396f8829a4aSRandall Stewart 			struct sctp_nets *net;
3397f8829a4aSRandall Stewart 
3398f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3399f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_UNREACHABLE,
3400f8829a4aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, error);
3401f8829a4aSRandall Stewart 			break;
3402f8829a4aSRandall Stewart 		}
3403f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_UP:
3404f8829a4aSRandall Stewart 		{
3405f8829a4aSRandall Stewart 			struct sctp_nets *net;
3406f8829a4aSRandall Stewart 
3407f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3408f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_AVAILABLE,
3409f8829a4aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, error);
3410f8829a4aSRandall Stewart 			break;
3411f8829a4aSRandall Stewart 		}
3412f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_CONFIRMED:
3413f8829a4aSRandall Stewart 		{
3414f8829a4aSRandall Stewart 			struct sctp_nets *net;
3415f8829a4aSRandall Stewart 
3416f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3417f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_CONFIRMED,
3418f8829a4aSRandall Stewart 			    (struct sockaddr *)&net->ro._l_addr, error);
3419f8829a4aSRandall Stewart 			break;
3420f8829a4aSRandall Stewart 		}
3421f8829a4aSRandall Stewart 	case SCTP_NOTIFY_SPECIAL_SP_FAIL:
3422f8829a4aSRandall Stewart 		sctp_notify_send_failed2(stcb, error,
3423ceaad40aSRandall Stewart 		    (struct sctp_stream_queue_pending *)data, so_locked);
3424f8829a4aSRandall Stewart 		break;
3425f8829a4aSRandall Stewart 	case SCTP_NOTIFY_DG_FAIL:
3426f8829a4aSRandall Stewart 		sctp_notify_send_failed(stcb, error,
3427ceaad40aSRandall Stewart 		    (struct sctp_tmit_chunk *)data, so_locked);
3428f8829a4aSRandall Stewart 		break;
3429f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION:
34309a6142d8SRandall Stewart 		{
34319a6142d8SRandall Stewart 			uint32_t val;
34329a6142d8SRandall Stewart 
34339a6142d8SRandall Stewart 			val = *((uint32_t *) data);
34349a6142d8SRandall Stewart 
3435810ec536SMichael Tuexen 			sctp_notify_partial_delivery_indication(stcb, error, val, so_locked);
3436f8829a4aSRandall Stewart 			break;
3437810ec536SMichael Tuexen 		}
3438f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STRDATA_ERR:
3439f8829a4aSRandall Stewart 		break;
3440f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_ABORTED:
3441c105859eSRandall Stewart 		if ((stcb) && (((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_WAIT) ||
3442c105859eSRandall Stewart 		    ((stcb->asoc.state & SCTP_STATE_MASK) == SCTP_STATE_COOKIE_ECHOED))) {
3443ceaad40aSRandall Stewart 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, NULL, so_locked);
3444c105859eSRandall Stewart 		} else {
3445ceaad40aSRandall Stewart 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, NULL, so_locked);
3446c105859eSRandall Stewart 		}
3447f8829a4aSRandall Stewart 		break;
3448f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PEER_OPENED_STREAM:
3449f8829a4aSRandall Stewart 		break;
3450f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STREAM_OPENED_OK:
3451f8829a4aSRandall Stewart 		break;
3452f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_RESTART:
3453ceaad40aSRandall Stewart 		sctp_notify_assoc_change(SCTP_RESTART, stcb, error, data, so_locked);
3454830d754dSRandall Stewart 		if (stcb->asoc.peer_supports_auth == 0) {
3455830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3456830d754dSRandall Stewart 			    NULL, so_locked);
3457830d754dSRandall Stewart 		}
3458f8829a4aSRandall Stewart 		break;
3459f8829a4aSRandall Stewart 	case SCTP_NOTIFY_HB_RESP:
3460f8829a4aSRandall Stewart 		break;
3461ea44232bSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_INSTREAM_ADD_OK:
3462ea44232bSRandall Stewart 		sctp_notify_stream_reset_add(stcb, error, SCTP_STRRESET_INBOUND_STR);
3463ea44232bSRandall Stewart 		break;
3464ea44232bSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_ADD_OK:
3465ea44232bSRandall Stewart 		sctp_notify_stream_reset_add(stcb, error, SCTP_STRRESET_OUTBOUND_STR);
3466ea44232bSRandall Stewart 		break;
3467ea44232bSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_ADD_FAIL:
3468ea44232bSRandall Stewart 		sctp_notify_stream_reset_add(stcb, error, (SCTP_STRRESET_FAILED | SCTP_STRRESET_OUTBOUND_STR));
3469ea44232bSRandall Stewart 		break;
3470ea44232bSRandall Stewart 
3471f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_SEND:
3472f8829a4aSRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *) data), SCTP_STRRESET_OUTBOUND_STR);
3473f8829a4aSRandall Stewart 		break;
3474f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_RECV:
3475f8829a4aSRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *) data), SCTP_STRRESET_INBOUND_STR);
3476f8829a4aSRandall Stewart 		break;
3477f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_OUT:
3478671d309cSRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *) data), (SCTP_STRRESET_OUTBOUND_STR | SCTP_STRRESET_FAILED));
3479f8829a4aSRandall Stewart 		break;
3480f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_IN:
3481671d309cSRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *) data), (SCTP_STRRESET_INBOUND_STR | SCTP_STRRESET_FAILED));
3482f8829a4aSRandall Stewart 		break;
3483f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_ADD_IP:
3484f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_ADDED, data,
3485f8829a4aSRandall Stewart 		    error);
3486f8829a4aSRandall Stewart 		break;
3487f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_DELETE_IP:
3488f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_REMOVED, data,
3489f8829a4aSRandall Stewart 		    error);
3490f8829a4aSRandall Stewart 		break;
3491f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_SET_PRIMARY:
3492f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_MADE_PRIM, data,
3493f8829a4aSRandall Stewart 		    error);
3494f8829a4aSRandall Stewart 		break;
3495f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_SUCCESS:
3496f8829a4aSRandall Stewart 		break;
3497f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_FAILED:
3498f8829a4aSRandall Stewart 		break;
3499f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PEER_SHUTDOWN:
3500f8829a4aSRandall Stewart 		sctp_notify_shutdown_event(stcb);
3501f8829a4aSRandall Stewart 		break;
3502f8829a4aSRandall Stewart 	case SCTP_NOTIFY_AUTH_NEW_KEY:
3503f8829a4aSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_NEWKEY, error,
3504830d754dSRandall Stewart 		    (uint16_t) (uintptr_t) data,
3505830d754dSRandall Stewart 		    so_locked);
3506f8829a4aSRandall Stewart 		break;
3507830d754dSRandall Stewart 	case SCTP_NOTIFY_AUTH_FREE_KEY:
3508830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_FREE_KEY, error,
3509830d754dSRandall Stewart 		    (uint16_t) (uintptr_t) data,
3510830d754dSRandall Stewart 		    so_locked);
3511f8829a4aSRandall Stewart 		break;
3512830d754dSRandall Stewart 	case SCTP_NOTIFY_NO_PEER_AUTH:
3513830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_NO_AUTH, error,
3514830d754dSRandall Stewart 		    (uint16_t) (uintptr_t) data,
3515830d754dSRandall Stewart 		    so_locked);
3516830d754dSRandall Stewart 		break;
3517830d754dSRandall Stewart 	case SCTP_NOTIFY_SENDER_DRY:
3518830d754dSRandall Stewart 		sctp_notify_sender_dry_event(stcb, so_locked);
3519830d754dSRandall Stewart 		break;
3520f8829a4aSRandall Stewart 	default:
3521ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_UTIL1, "%s: unknown notification %xh (%u)\n",
3522ad81507eSRandall Stewart 		    __FUNCTION__, notification, notification);
3523f8829a4aSRandall Stewart 		break;
3524f8829a4aSRandall Stewart 	}			/* end switch */
3525f8829a4aSRandall Stewart }
3526f8829a4aSRandall Stewart 
3527f8829a4aSRandall Stewart void
3528ceaad40aSRandall Stewart sctp_report_all_outbound(struct sctp_tcb *stcb, int holds_lock, int so_locked
3529ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3530ceaad40aSRandall Stewart     SCTP_UNUSED
3531ceaad40aSRandall Stewart #endif
3532ceaad40aSRandall Stewart )
3533f8829a4aSRandall Stewart {
3534f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3535f8829a4aSRandall Stewart 	struct sctp_stream_out *outs;
35364a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk, *nchk;
35374a9ef3f8SMichael Tuexen 	struct sctp_stream_queue_pending *sp, *nsp;
35387f34832bSRandall Stewart 	int i;
3539f8829a4aSRandall Stewart 
3540ad81507eSRandall Stewart 	if (stcb == NULL) {
3541ad81507eSRandall Stewart 		return;
3542ad81507eSRandall Stewart 	}
35434a9ef3f8SMichael Tuexen 	asoc = &stcb->asoc;
35444a9ef3f8SMichael Tuexen 	if (asoc->state & SCTP_STATE_ABOUT_TO_BE_FREED) {
3545478fbccbSRandall Stewart 		/* already being freed */
3546478fbccbSRandall Stewart 		return;
3547478fbccbSRandall Stewart 	}
3548f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3549f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
35504a9ef3f8SMichael Tuexen 	    (asoc->state & SCTP_STATE_CLOSED_SOCKET)) {
3551f8829a4aSRandall Stewart 		return;
3552f8829a4aSRandall Stewart 	}
3553f8829a4aSRandall Stewart 	/* now through all the gunk freeing chunks */
3554ad81507eSRandall Stewart 	if (holds_lock == 0) {
35557f34832bSRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
3556ad81507eSRandall Stewart 	}
3557d00aff5dSRandall Stewart 	/* sent queue SHOULD be empty */
35584a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
3559d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
3560d00aff5dSRandall Stewart 		asoc->sent_queue_cnt--;
35610c0982b8SRandall Stewart 		if (chk->data != NULL) {
3562d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
3563d00aff5dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_DG_FAIL, stcb,
3564ceaad40aSRandall Stewart 			    SCTP_NOTIFY_DATAGRAM_SENT, chk, so_locked);
3565810ec536SMichael Tuexen 			if (chk->data) {
3566d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3567d00aff5dSRandall Stewart 				chk->data = NULL;
3568d00aff5dSRandall Stewart 			}
3569810ec536SMichael Tuexen 		}
3570689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3571d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3572d00aff5dSRandall Stewart 	}
3573d00aff5dSRandall Stewart 	/* pending send queue SHOULD be empty */
35744a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->send_queue, sctp_next, nchk) {
3575d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next);
3576d00aff5dSRandall Stewart 		asoc->send_queue_cnt--;
35770c0982b8SRandall Stewart 		if (chk->data != NULL) {
3578d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
35790c0982b8SRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_DG_FAIL, stcb,
35800c0982b8SRandall Stewart 			    SCTP_NOTIFY_DATAGRAM_UNSENT, chk, so_locked);
3581810ec536SMichael Tuexen 			if (chk->data) {
3582d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3583d00aff5dSRandall Stewart 				chk->data = NULL;
3584d00aff5dSRandall Stewart 			}
3585810ec536SMichael Tuexen 		}
3586689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3587d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3588d00aff5dSRandall Stewart 	}
35894a9ef3f8SMichael Tuexen 	for (i = 0; i < asoc->streamoutcnt; i++) {
35907f34832bSRandall Stewart 		/* For each stream */
35914a9ef3f8SMichael Tuexen 		outs = &asoc->strmout[i];
35927f34832bSRandall Stewart 		/* clean up any sends there */
35934a9ef3f8SMichael Tuexen 		asoc->locked_on_sending = NULL;
35944a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(sp, &outs->outqueue, next, nsp) {
35954a9ef3f8SMichael Tuexen 			asoc->stream_queue_cnt--;
3596f8829a4aSRandall Stewart 			TAILQ_REMOVE(&outs->outqueue, sp, next);
3597f8829a4aSRandall Stewart 			sctp_free_spbufspace(stcb, asoc, sp);
3598478fbccbSRandall Stewart 			if (sp->data) {
3599f8829a4aSRandall Stewart 				sctp_ulp_notify(SCTP_NOTIFY_SPECIAL_SP_FAIL, stcb,
3600ceaad40aSRandall Stewart 				    SCTP_NOTIFY_DATAGRAM_UNSENT, (void *)sp, so_locked);
3601f8829a4aSRandall Stewart 				if (sp->data) {
3602f8829a4aSRandall Stewart 					sctp_m_freem(sp->data);
3603f8829a4aSRandall Stewart 					sp->data = NULL;
3604f8829a4aSRandall Stewart 				}
3605478fbccbSRandall Stewart 			}
36069eea4a2dSMichael Tuexen 			if (sp->net) {
3607f8829a4aSRandall Stewart 				sctp_free_remote_addr(sp->net);
3608f8829a4aSRandall Stewart 				sp->net = NULL;
36099eea4a2dSMichael Tuexen 			}
3610f8829a4aSRandall Stewart 			/* Free the chunk */
3611689e6a5fSMichael Tuexen 			sctp_free_a_strmoq(stcb, sp, so_locked);
36123c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
3613f8829a4aSRandall Stewart 		}
3614f8829a4aSRandall Stewart 	}
3615f8829a4aSRandall Stewart 
3616ad81507eSRandall Stewart 	if (holds_lock == 0) {
36177f34832bSRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
3618f8829a4aSRandall Stewart 	}
3619ad81507eSRandall Stewart }
3620f8829a4aSRandall Stewart 
3621f8829a4aSRandall Stewart void
3622ceaad40aSRandall Stewart sctp_abort_notification(struct sctp_tcb *stcb, int error, int so_locked
3623ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3624ceaad40aSRandall Stewart     SCTP_UNUSED
3625ceaad40aSRandall Stewart #endif
3626ceaad40aSRandall Stewart )
3627f8829a4aSRandall Stewart {
3628ad81507eSRandall Stewart 	if (stcb == NULL) {
3629ad81507eSRandall Stewart 		return;
3630ad81507eSRandall Stewart 	}
3631c55b70ceSMichael Tuexen 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3632c55b70ceSMichael Tuexen 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
3633c55b70ceSMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_CONNECTED))) {
3634c55b70ceSMichael Tuexen 		stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_WAS_ABORTED;
3635c55b70ceSMichael Tuexen 	}
3636f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3637f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3638f8829a4aSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3639f8829a4aSRandall Stewart 		return;
3640f8829a4aSRandall Stewart 	}
3641f8829a4aSRandall Stewart 	/* Tell them we lost the asoc */
3642ceaad40aSRandall Stewart 	sctp_report_all_outbound(stcb, 1, so_locked);
3643ceaad40aSRandall Stewart 	sctp_ulp_notify(SCTP_NOTIFY_ASSOC_ABORTED, stcb, error, NULL, so_locked);
3644f8829a4aSRandall Stewart }
3645f8829a4aSRandall Stewart 
3646f8829a4aSRandall Stewart void
3647f8829a4aSRandall Stewart sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
364817205eccSRandall Stewart     struct mbuf *m, int iphlen, struct sctphdr *sh, struct mbuf *op_err,
3649c54a18d2SRandall Stewart     uint32_t vrf_id, uint16_t port)
3650f8829a4aSRandall Stewart {
3651f8829a4aSRandall Stewart 	uint32_t vtag;
3652f8829a4aSRandall Stewart 
3653ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3654ceaad40aSRandall Stewart 	struct socket *so;
3655ceaad40aSRandall Stewart 
3656ceaad40aSRandall Stewart #endif
3657ceaad40aSRandall Stewart 
3658f8829a4aSRandall Stewart 	vtag = 0;
3659f8829a4aSRandall Stewart 	if (stcb != NULL) {
3660f8829a4aSRandall Stewart 		/* We have a TCB to abort, send notification too */
3661f8829a4aSRandall Stewart 		vtag = stcb->asoc.peer_vtag;
3662ceaad40aSRandall Stewart 		sctp_abort_notification(stcb, 0, SCTP_SO_NOT_LOCKED);
366317205eccSRandall Stewart 		/* get the assoc vrf id and table id */
366417205eccSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
366563981c2bSRandall Stewart 		stcb->asoc.state |= SCTP_STATE_WAS_ABORTED;
3666f8829a4aSRandall Stewart 	}
3667c54a18d2SRandall Stewart 	sctp_send_abort(m, iphlen, sh, vtag, op_err, vrf_id, port);
3668f8829a4aSRandall Stewart 	if (stcb != NULL) {
3669f8829a4aSRandall Stewart 		/* Ok, now lets free it */
3670ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3671ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
3672ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3673ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3674ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3675ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3676ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3677ceaad40aSRandall Stewart #endif
36780271d0cdSMichael Tuexen 		SCTP_STAT_INCR_COUNTER32(sctps_aborted);
36790271d0cdSMichael Tuexen 		if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
36800271d0cdSMichael Tuexen 		    (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
36810271d0cdSMichael Tuexen 			SCTP_STAT_DECR_GAUGE32(sctps_currestab);
36820271d0cdSMichael Tuexen 		}
3683c4739e2fSRandall Stewart 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTPUTIL + SCTP_LOC_4);
3684ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3685ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3686ceaad40aSRandall Stewart #endif
3687f8829a4aSRandall Stewart 	}
3688f8829a4aSRandall Stewart }
3689f8829a4aSRandall Stewart 
3690f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
3691f1f73e57SRandall Stewart void
3692f1f73e57SRandall Stewart sctp_print_out_track_log(struct sctp_tcb *stcb)
3693f1f73e57SRandall Stewart {
369418e198d3SRandall Stewart #ifdef NOSIY_PRINTS
3695f1f73e57SRandall Stewart 	int i;
3696f1f73e57SRandall Stewart 
3697ad81507eSRandall Stewart 	SCTP_PRINTF("Last ep reason:%x\n", stcb->sctp_ep->last_abort_code);
3698ad81507eSRandall Stewart 	SCTP_PRINTF("IN bound TSN log-aaa\n");
3699f1f73e57SRandall Stewart 	if ((stcb->asoc.tsn_in_at == 0) && (stcb->asoc.tsn_in_wrapped == 0)) {
3700ad81507eSRandall Stewart 		SCTP_PRINTF("None rcvd\n");
3701f1f73e57SRandall Stewart 		goto none_in;
3702f1f73e57SRandall Stewart 	}
3703f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_wrapped) {
3704f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_in_at; i < SCTP_TSN_LOG_SIZE; i++) {
3705ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
3706f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
3707f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
3708f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
3709f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
3710f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
3711f1f73e57SRandall Stewart 		}
3712f1f73e57SRandall Stewart 	}
3713f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_at) {
3714f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_in_at; i++) {
3715ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
3716f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
3717f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
3718f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
3719f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
3720f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
3721f1f73e57SRandall Stewart 		}
3722f1f73e57SRandall Stewart 	}
3723f1f73e57SRandall Stewart none_in:
3724ad81507eSRandall Stewart 	SCTP_PRINTF("OUT bound TSN log-aaa\n");
3725ad81507eSRandall Stewart 	if ((stcb->asoc.tsn_out_at == 0) &&
3726ad81507eSRandall Stewart 	    (stcb->asoc.tsn_out_wrapped == 0)) {
3727ad81507eSRandall Stewart 		SCTP_PRINTF("None sent\n");
3728f1f73e57SRandall Stewart 	}
3729f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_wrapped) {
3730f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_out_at; i < SCTP_TSN_LOG_SIZE; i++) {
3731ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
3732f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
3733f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
3734f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
3735f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
3736f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
3737f1f73e57SRandall Stewart 		}
3738f1f73e57SRandall Stewart 	}
3739f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_at) {
3740f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_out_at; i++) {
3741ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
3742f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
3743f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
3744f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
3745f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
3746f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
3747f1f73e57SRandall Stewart 		}
3748f1f73e57SRandall Stewart 	}
374918e198d3SRandall Stewart #endif
3750f1f73e57SRandall Stewart }
3751f1f73e57SRandall Stewart 
3752f1f73e57SRandall Stewart #endif
3753f1f73e57SRandall Stewart 
3754f8829a4aSRandall Stewart void
3755f8829a4aSRandall Stewart sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
3756ceaad40aSRandall Stewart     int error, struct mbuf *op_err,
3757ceaad40aSRandall Stewart     int so_locked
3758ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3759ceaad40aSRandall Stewart     SCTP_UNUSED
3760ceaad40aSRandall Stewart #endif
3761ceaad40aSRandall Stewart )
3762f8829a4aSRandall Stewart {
3763ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3764ceaad40aSRandall Stewart 	struct socket *so;
3765ceaad40aSRandall Stewart 
3766ceaad40aSRandall Stewart #endif
3767ceaad40aSRandall Stewart 
3768ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3769ceaad40aSRandall Stewart 	so = SCTP_INP_SO(inp);
3770ceaad40aSRandall Stewart #endif
3771f8829a4aSRandall Stewart 	if (stcb == NULL) {
3772f8829a4aSRandall Stewart 		/* Got to have a TCB */
3773f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
3774f8829a4aSRandall Stewart 			if (LIST_FIRST(&inp->sctp_asoc_list) == NULL) {
3775b0552ae2SRandall Stewart 				sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
3776b0552ae2SRandall Stewart 				    SCTP_CALLED_DIRECTLY_NOCMPSET);
3777f8829a4aSRandall Stewart 			}
3778f8829a4aSRandall Stewart 		}
3779f8829a4aSRandall Stewart 		return;
378063981c2bSRandall Stewart 	} else {
378163981c2bSRandall Stewart 		stcb->asoc.state |= SCTP_STATE_WAS_ABORTED;
3782f8829a4aSRandall Stewart 	}
3783f8829a4aSRandall Stewart 	/* notify the ulp */
3784f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0)
3785ceaad40aSRandall Stewart 		sctp_abort_notification(stcb, error, so_locked);
3786f8829a4aSRandall Stewart 	/* notify the peer */
3787b201f536SRandall Stewart #if defined(SCTP_PANIC_ON_ABORT)
3788b201f536SRandall Stewart 	panic("aborting an association");
3789b201f536SRandall Stewart #endif
3790ceaad40aSRandall Stewart 	sctp_send_abort_tcb(stcb, op_err, so_locked);
3791f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_aborted);
3792f8829a4aSRandall Stewart 	if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
3793f8829a4aSRandall Stewart 	    (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
3794f8829a4aSRandall Stewart 		SCTP_STAT_DECR_GAUGE32(sctps_currestab);
3795f8829a4aSRandall Stewart 	}
3796f8829a4aSRandall Stewart 	/* now free the asoc */
3797f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
3798f1f73e57SRandall Stewart 	sctp_print_out_track_log(stcb);
3799f1f73e57SRandall Stewart #endif
3800ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3801ceaad40aSRandall Stewart 	if (!so_locked) {
3802ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3803ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3804ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3805ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3806ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3807ceaad40aSRandall Stewart 	}
3808ceaad40aSRandall Stewart #endif
3809c4739e2fSRandall Stewart 	(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTPUTIL + SCTP_LOC_5);
3810ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3811ceaad40aSRandall Stewart 	if (!so_locked) {
3812ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3813ceaad40aSRandall Stewart 	}
3814ceaad40aSRandall Stewart #endif
3815f8829a4aSRandall Stewart }
3816f8829a4aSRandall Stewart 
3817f8829a4aSRandall Stewart void
3818f8829a4aSRandall Stewart sctp_handle_ootb(struct mbuf *m, int iphlen, int offset, struct sctphdr *sh,
3819c54a18d2SRandall Stewart     struct sctp_inpcb *inp, struct mbuf *op_err, uint32_t vrf_id, uint16_t port)
3820f8829a4aSRandall Stewart {
3821f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch, chunk_buf;
3822f8829a4aSRandall Stewart 	unsigned int chk_length;
3823f8829a4aSRandall Stewart 
3824f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_outoftheblue);
3825f8829a4aSRandall Stewart 	/* Generate a TO address for future reference */
3826f8829a4aSRandall Stewart 	if (inp && (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
3827f8829a4aSRandall Stewart 		if (LIST_FIRST(&inp->sctp_asoc_list) == NULL) {
3828b0552ae2SRandall Stewart 			sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
3829b0552ae2SRandall Stewart 			    SCTP_CALLED_DIRECTLY_NOCMPSET);
3830f8829a4aSRandall Stewart 		}
3831f8829a4aSRandall Stewart 	}
3832f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
3833f8829a4aSRandall Stewart 	    sizeof(*ch), (uint8_t *) & chunk_buf);
3834f8829a4aSRandall Stewart 	while (ch != NULL) {
3835f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
3836f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
3837f8829a4aSRandall Stewart 			/* break to abort land */
3838f8829a4aSRandall Stewart 			break;
3839f8829a4aSRandall Stewart 		}
3840f8829a4aSRandall Stewart 		switch (ch->chunk_type) {
3841d55b0b1bSRandall Stewart 		case SCTP_COOKIE_ECHO:
3842d55b0b1bSRandall Stewart 			/* We hit here only if the assoc is being freed */
3843d55b0b1bSRandall Stewart 			return;
3844f8829a4aSRandall Stewart 		case SCTP_PACKET_DROPPED:
3845f8829a4aSRandall Stewart 			/* we don't respond to pkt-dropped */
3846f8829a4aSRandall Stewart 			return;
3847f8829a4aSRandall Stewart 		case SCTP_ABORT_ASSOCIATION:
3848f8829a4aSRandall Stewart 			/* we don't respond with an ABORT to an ABORT */
3849f8829a4aSRandall Stewart 			return;
3850f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_COMPLETE:
3851f8829a4aSRandall Stewart 			/*
3852f8829a4aSRandall Stewart 			 * we ignore it since we are not waiting for it and
3853f8829a4aSRandall Stewart 			 * peer is gone
3854f8829a4aSRandall Stewart 			 */
3855f8829a4aSRandall Stewart 			return;
3856f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_ACK:
3857c54a18d2SRandall Stewart 			sctp_send_shutdown_complete2(m, iphlen, sh, vrf_id, port);
3858f8829a4aSRandall Stewart 			return;
3859f8829a4aSRandall Stewart 		default:
3860f8829a4aSRandall Stewart 			break;
3861f8829a4aSRandall Stewart 		}
3862f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
3863f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
3864f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *) & chunk_buf);
3865f8829a4aSRandall Stewart 	}
3866c54a18d2SRandall Stewart 	sctp_send_abort(m, iphlen, sh, 0, op_err, vrf_id, port);
3867f8829a4aSRandall Stewart }
3868f8829a4aSRandall Stewart 
3869f8829a4aSRandall Stewart /*
3870f8829a4aSRandall Stewart  * check the inbound datagram to make sure there is not an abort inside it,
3871f8829a4aSRandall Stewart  * if there is return 1, else return 0.
3872f8829a4aSRandall Stewart  */
3873f8829a4aSRandall Stewart int
3874f8829a4aSRandall Stewart sctp_is_there_an_abort_here(struct mbuf *m, int iphlen, uint32_t * vtagfill)
3875f8829a4aSRandall Stewart {
3876f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch;
3877f8829a4aSRandall Stewart 	struct sctp_init_chunk *init_chk, chunk_buf;
3878f8829a4aSRandall Stewart 	int offset;
3879f8829a4aSRandall Stewart 	unsigned int chk_length;
3880f8829a4aSRandall Stewart 
3881f8829a4aSRandall Stewart 	offset = iphlen + sizeof(struct sctphdr);
3882f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset, sizeof(*ch),
3883f8829a4aSRandall Stewart 	    (uint8_t *) & chunk_buf);
3884f8829a4aSRandall Stewart 	while (ch != NULL) {
3885f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
3886f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
3887f8829a4aSRandall Stewart 			/* packet is probably corrupt */
3888f8829a4aSRandall Stewart 			break;
3889f8829a4aSRandall Stewart 		}
3890f8829a4aSRandall Stewart 		/* we seem to be ok, is it an abort? */
3891f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_ABORT_ASSOCIATION) {
3892f8829a4aSRandall Stewart 			/* yep, tell them */
3893f8829a4aSRandall Stewart 			return (1);
3894f8829a4aSRandall Stewart 		}
3895f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_INITIATION) {
3896f8829a4aSRandall Stewart 			/* need to update the Vtag */
3897f8829a4aSRandall Stewart 			init_chk = (struct sctp_init_chunk *)sctp_m_getptr(m,
3898f8829a4aSRandall Stewart 			    offset, sizeof(*init_chk), (uint8_t *) & chunk_buf);
3899f8829a4aSRandall Stewart 			if (init_chk != NULL) {
3900f8829a4aSRandall Stewart 				*vtagfill = ntohl(init_chk->init.initiate_tag);
3901f8829a4aSRandall Stewart 			}
3902f8829a4aSRandall Stewart 		}
3903f8829a4aSRandall Stewart 		/* Nope, move to the next chunk */
3904f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
3905f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
3906f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *) & chunk_buf);
3907f8829a4aSRandall Stewart 	}
3908f8829a4aSRandall Stewart 	return (0);
3909f8829a4aSRandall Stewart }
3910f8829a4aSRandall Stewart 
3911f8829a4aSRandall Stewart /*
3912f8829a4aSRandall Stewart  * currently (2/02), ifa_addr embeds scope_id's and don't have sin6_scope_id
3913f8829a4aSRandall Stewart  * set (i.e. it's 0) so, create this function to compare link local scopes
3914f8829a4aSRandall Stewart  */
39155e2c2d87SRandall Stewart #ifdef INET6
3916f8829a4aSRandall Stewart uint32_t
3917f8829a4aSRandall Stewart sctp_is_same_scope(struct sockaddr_in6 *addr1, struct sockaddr_in6 *addr2)
3918f8829a4aSRandall Stewart {
3919f8829a4aSRandall Stewart 	struct sockaddr_in6 a, b;
3920f8829a4aSRandall Stewart 
3921f8829a4aSRandall Stewart 	/* save copies */
3922f8829a4aSRandall Stewart 	a = *addr1;
3923f8829a4aSRandall Stewart 	b = *addr2;
3924f8829a4aSRandall Stewart 
3925f8829a4aSRandall Stewart 	if (a.sin6_scope_id == 0)
3926f8829a4aSRandall Stewart 		if (sa6_recoverscope(&a)) {
3927f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
3928f8829a4aSRandall Stewart 			return (0);
3929f8829a4aSRandall Stewart 		}
3930f8829a4aSRandall Stewart 	if (b.sin6_scope_id == 0)
3931f8829a4aSRandall Stewart 		if (sa6_recoverscope(&b)) {
3932f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
3933f8829a4aSRandall Stewart 			return (0);
3934f8829a4aSRandall Stewart 		}
3935f8829a4aSRandall Stewart 	if (a.sin6_scope_id != b.sin6_scope_id)
3936f8829a4aSRandall Stewart 		return (0);
3937f8829a4aSRandall Stewart 
3938f8829a4aSRandall Stewart 	return (1);
3939f8829a4aSRandall Stewart }
3940f8829a4aSRandall Stewart 
3941f8829a4aSRandall Stewart /*
3942f8829a4aSRandall Stewart  * returns a sockaddr_in6 with embedded scope recovered and removed
3943f8829a4aSRandall Stewart  */
3944f8829a4aSRandall Stewart struct sockaddr_in6 *
3945f8829a4aSRandall Stewart sctp_recover_scope(struct sockaddr_in6 *addr, struct sockaddr_in6 *store)
3946f8829a4aSRandall Stewart {
3947f8829a4aSRandall Stewart 	/* check and strip embedded scope junk */
3948f8829a4aSRandall Stewart 	if (addr->sin6_family == AF_INET6) {
3949f8829a4aSRandall Stewart 		if (IN6_IS_SCOPE_LINKLOCAL(&addr->sin6_addr)) {
3950f8829a4aSRandall Stewart 			if (addr->sin6_scope_id == 0) {
3951f8829a4aSRandall Stewart 				*store = *addr;
3952f8829a4aSRandall Stewart 				if (!sa6_recoverscope(store)) {
3953f8829a4aSRandall Stewart 					/* use the recovered scope */
3954f8829a4aSRandall Stewart 					addr = store;
3955f8829a4aSRandall Stewart 				}
3956f42a358aSRandall Stewart 			} else {
3957f8829a4aSRandall Stewart 				/* else, return the original "to" addr */
3958f42a358aSRandall Stewart 				in6_clearscope(&addr->sin6_addr);
3959f8829a4aSRandall Stewart 			}
3960f8829a4aSRandall Stewart 		}
3961f8829a4aSRandall Stewart 	}
3962f8829a4aSRandall Stewart 	return (addr);
3963f8829a4aSRandall Stewart }
3964f8829a4aSRandall Stewart 
39655e2c2d87SRandall Stewart #endif
39665e2c2d87SRandall Stewart 
3967f8829a4aSRandall Stewart /*
3968f8829a4aSRandall Stewart  * are the two addresses the same?  currently a "scopeless" check returns: 1
3969f8829a4aSRandall Stewart  * if same, 0 if not
3970f8829a4aSRandall Stewart  */
397172fb6fdbSRandall Stewart int
3972f8829a4aSRandall Stewart sctp_cmpaddr(struct sockaddr *sa1, struct sockaddr *sa2)
3973f8829a4aSRandall Stewart {
3974f8829a4aSRandall Stewart 
3975f8829a4aSRandall Stewart 	/* must be valid */
3976f8829a4aSRandall Stewart 	if (sa1 == NULL || sa2 == NULL)
3977f8829a4aSRandall Stewart 		return (0);
3978f8829a4aSRandall Stewart 
3979f8829a4aSRandall Stewart 	/* must be the same family */
3980f8829a4aSRandall Stewart 	if (sa1->sa_family != sa2->sa_family)
3981f8829a4aSRandall Stewart 		return (0);
3982f8829a4aSRandall Stewart 
39835e2c2d87SRandall Stewart 	switch (sa1->sa_family) {
39845e2c2d87SRandall Stewart #ifdef INET6
39855e2c2d87SRandall Stewart 	case AF_INET6:
39865e2c2d87SRandall Stewart 		{
3987f8829a4aSRandall Stewart 			/* IPv6 addresses */
3988f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6_1, *sin6_2;
3989f8829a4aSRandall Stewart 
3990f8829a4aSRandall Stewart 			sin6_1 = (struct sockaddr_in6 *)sa1;
3991f8829a4aSRandall Stewart 			sin6_2 = (struct sockaddr_in6 *)sa2;
3992c54a18d2SRandall Stewart 			return (SCTP6_ARE_ADDR_EQUAL(sin6_1,
3993c54a18d2SRandall Stewart 			    sin6_2));
39945e2c2d87SRandall Stewart 		}
39955e2c2d87SRandall Stewart #endif
3996ea5eba11SMichael Tuexen #ifdef INET
39975e2c2d87SRandall Stewart 	case AF_INET:
39985e2c2d87SRandall Stewart 		{
3999f8829a4aSRandall Stewart 			/* IPv4 addresses */
4000f8829a4aSRandall Stewart 			struct sockaddr_in *sin_1, *sin_2;
4001f8829a4aSRandall Stewart 
4002f8829a4aSRandall Stewart 			sin_1 = (struct sockaddr_in *)sa1;
4003f8829a4aSRandall Stewart 			sin_2 = (struct sockaddr_in *)sa2;
4004f8829a4aSRandall Stewart 			return (sin_1->sin_addr.s_addr == sin_2->sin_addr.s_addr);
40055e2c2d87SRandall Stewart 		}
4006ea5eba11SMichael Tuexen #endif
40075e2c2d87SRandall Stewart 	default:
4008f8829a4aSRandall Stewart 		/* we don't do these... */
4009f8829a4aSRandall Stewart 		return (0);
4010f8829a4aSRandall Stewart 	}
4011f8829a4aSRandall Stewart }
4012f8829a4aSRandall Stewart 
4013f8829a4aSRandall Stewart void
4014f8829a4aSRandall Stewart sctp_print_address(struct sockaddr *sa)
4015f8829a4aSRandall Stewart {
40165e2c2d87SRandall Stewart #ifdef INET6
40177d32aa0cSBjoern A. Zeeb 	char ip6buf[INET6_ADDRSTRLEN];
4018f8829a4aSRandall Stewart 
4019ad81507eSRandall Stewart 	ip6buf[0] = 0;
40205e2c2d87SRandall Stewart #endif
40215e2c2d87SRandall Stewart 
40225e2c2d87SRandall Stewart 	switch (sa->sa_family) {
40235e2c2d87SRandall Stewart #ifdef INET6
40245e2c2d87SRandall Stewart 	case AF_INET6:
40255e2c2d87SRandall Stewart 		{
4026ad81507eSRandall Stewart 			struct sockaddr_in6 *sin6;
4027ad81507eSRandall Stewart 
4028f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
4029ad81507eSRandall Stewart 			SCTP_PRINTF("IPv6 address: %s:port:%d scope:%u\n",
40307d32aa0cSBjoern A. Zeeb 			    ip6_sprintf(ip6buf, &sin6->sin6_addr),
40317d32aa0cSBjoern A. Zeeb 			    ntohs(sin6->sin6_port),
4032f8829a4aSRandall Stewart 			    sin6->sin6_scope_id);
40335e2c2d87SRandall Stewart 			break;
40345e2c2d87SRandall Stewart 		}
40355e2c2d87SRandall Stewart #endif
4036ea5eba11SMichael Tuexen #ifdef INET
40375e2c2d87SRandall Stewart 	case AF_INET:
40385e2c2d87SRandall Stewart 		{
4039f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
4040f8829a4aSRandall Stewart 			unsigned char *p;
4041f8829a4aSRandall Stewart 
4042f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
4043f8829a4aSRandall Stewart 			p = (unsigned char *)&sin->sin_addr;
4044ad81507eSRandall Stewart 			SCTP_PRINTF("IPv4 address: %u.%u.%u.%u:%d\n",
4045f8829a4aSRandall Stewart 			    p[0], p[1], p[2], p[3], ntohs(sin->sin_port));
40465e2c2d87SRandall Stewart 			break;
40475e2c2d87SRandall Stewart 		}
4048ea5eba11SMichael Tuexen #endif
40495e2c2d87SRandall Stewart 	default:
4050ad81507eSRandall Stewart 		SCTP_PRINTF("?\n");
40515e2c2d87SRandall Stewart 		break;
4052f8829a4aSRandall Stewart 	}
4053f8829a4aSRandall Stewart }
4054f8829a4aSRandall Stewart 
4055f8829a4aSRandall Stewart void
4056f8829a4aSRandall Stewart sctp_print_address_pkt(struct ip *iph, struct sctphdr *sh)
4057f8829a4aSRandall Stewart {
40585e2c2d87SRandall Stewart 	switch (iph->ip_v) {
4059ea5eba11SMichael Tuexen #ifdef INET
40605e2c2d87SRandall Stewart 	case IPVERSION:
40615e2c2d87SRandall Stewart 		{
4062f8829a4aSRandall Stewart 			struct sockaddr_in lsa, fsa;
4063f8829a4aSRandall Stewart 
4064f8829a4aSRandall Stewart 			bzero(&lsa, sizeof(lsa));
4065f8829a4aSRandall Stewart 			lsa.sin_len = sizeof(lsa);
4066f8829a4aSRandall Stewart 			lsa.sin_family = AF_INET;
4067f8829a4aSRandall Stewart 			lsa.sin_addr = iph->ip_src;
4068f8829a4aSRandall Stewart 			lsa.sin_port = sh->src_port;
4069f8829a4aSRandall Stewart 			bzero(&fsa, sizeof(fsa));
4070f8829a4aSRandall Stewart 			fsa.sin_len = sizeof(fsa);
4071f8829a4aSRandall Stewart 			fsa.sin_family = AF_INET;
4072f8829a4aSRandall Stewart 			fsa.sin_addr = iph->ip_dst;
4073f8829a4aSRandall Stewart 			fsa.sin_port = sh->dest_port;
4074ad81507eSRandall Stewart 			SCTP_PRINTF("src: ");
4075f8829a4aSRandall Stewart 			sctp_print_address((struct sockaddr *)&lsa);
4076ad81507eSRandall Stewart 			SCTP_PRINTF("dest: ");
4077f8829a4aSRandall Stewart 			sctp_print_address((struct sockaddr *)&fsa);
40785e2c2d87SRandall Stewart 			break;
40795e2c2d87SRandall Stewart 		}
4080ea5eba11SMichael Tuexen #endif
40815e2c2d87SRandall Stewart #ifdef INET6
40825e2c2d87SRandall Stewart 	case IPV6_VERSION >> 4:
40835e2c2d87SRandall Stewart 		{
4084f8829a4aSRandall Stewart 			struct ip6_hdr *ip6;
4085f8829a4aSRandall Stewart 			struct sockaddr_in6 lsa6, fsa6;
4086f8829a4aSRandall Stewart 
4087f8829a4aSRandall Stewart 			ip6 = (struct ip6_hdr *)iph;
4088f8829a4aSRandall Stewart 			bzero(&lsa6, sizeof(lsa6));
4089f8829a4aSRandall Stewart 			lsa6.sin6_len = sizeof(lsa6);
4090f8829a4aSRandall Stewart 			lsa6.sin6_family = AF_INET6;
4091f8829a4aSRandall Stewart 			lsa6.sin6_addr = ip6->ip6_src;
4092f8829a4aSRandall Stewart 			lsa6.sin6_port = sh->src_port;
4093f8829a4aSRandall Stewart 			bzero(&fsa6, sizeof(fsa6));
4094f8829a4aSRandall Stewart 			fsa6.sin6_len = sizeof(fsa6);
4095f8829a4aSRandall Stewart 			fsa6.sin6_family = AF_INET6;
4096f8829a4aSRandall Stewart 			fsa6.sin6_addr = ip6->ip6_dst;
4097f8829a4aSRandall Stewart 			fsa6.sin6_port = sh->dest_port;
4098ad81507eSRandall Stewart 			SCTP_PRINTF("src: ");
4099f8829a4aSRandall Stewart 			sctp_print_address((struct sockaddr *)&lsa6);
4100ad81507eSRandall Stewart 			SCTP_PRINTF("dest: ");
4101f8829a4aSRandall Stewart 			sctp_print_address((struct sockaddr *)&fsa6);
41025e2c2d87SRandall Stewart 			break;
41035e2c2d87SRandall Stewart 		}
41045e2c2d87SRandall Stewart #endif
41055e2c2d87SRandall Stewart 	default:
41065e2c2d87SRandall Stewart 		/* TSNH */
41075e2c2d87SRandall Stewart 		break;
4108f8829a4aSRandall Stewart 	}
4109f8829a4aSRandall Stewart }
4110f8829a4aSRandall Stewart 
4111f8829a4aSRandall Stewart void
4112f8829a4aSRandall Stewart sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp,
4113f8829a4aSRandall Stewart     struct sctp_inpcb *new_inp,
4114d06c82f1SRandall Stewart     struct sctp_tcb *stcb,
4115d06c82f1SRandall Stewart     int waitflags)
4116f8829a4aSRandall Stewart {
4117f8829a4aSRandall Stewart 	/*
4118f8829a4aSRandall Stewart 	 * go through our old INP and pull off any control structures that
4119f8829a4aSRandall Stewart 	 * belong to stcb and move then to the new inp.
4120f8829a4aSRandall Stewart 	 */
4121f8829a4aSRandall Stewart 	struct socket *old_so, *new_so;
4122f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control, *nctl;
4123f8829a4aSRandall Stewart 	struct sctp_readhead tmp_queue;
4124f8829a4aSRandall Stewart 	struct mbuf *m;
4125bff64a4dSRandall Stewart 	int error = 0;
4126f8829a4aSRandall Stewart 
4127f8829a4aSRandall Stewart 	old_so = old_inp->sctp_socket;
4128f8829a4aSRandall Stewart 	new_so = new_inp->sctp_socket;
4129f8829a4aSRandall Stewart 	TAILQ_INIT(&tmp_queue);
4130d06c82f1SRandall Stewart 	error = sblock(&old_so->so_rcv, waitflags);
4131f8829a4aSRandall Stewart 	if (error) {
4132f8829a4aSRandall Stewart 		/*
4133f8829a4aSRandall Stewart 		 * Gak, can't get sblock, we have a problem. data will be
4134f8829a4aSRandall Stewart 		 * left stranded.. and we don't dare look at it since the
4135f8829a4aSRandall Stewart 		 * other thread may be reading something. Oh well, its a
4136f8829a4aSRandall Stewart 		 * screwed up app that does a peeloff OR a accept while
4137f8829a4aSRandall Stewart 		 * reading from the main socket... actually its only the
4138f8829a4aSRandall Stewart 		 * peeloff() case, since I think read will fail on a
4139f8829a4aSRandall Stewart 		 * listening socket..
4140f8829a4aSRandall Stewart 		 */
4141f8829a4aSRandall Stewart 		return;
4142f8829a4aSRandall Stewart 	}
4143f8829a4aSRandall Stewart 	/* lock the socket buffers */
4144f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(old_inp);
41454a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &old_inp->read_queue, next, nctl) {
4146f8829a4aSRandall Stewart 		/* Pull off all for out target stcb */
4147f8829a4aSRandall Stewart 		if (control->stcb == stcb) {
4148f8829a4aSRandall Stewart 			/* remove it we want it */
4149f8829a4aSRandall Stewart 			TAILQ_REMOVE(&old_inp->read_queue, control, next);
4150f8829a4aSRandall Stewart 			TAILQ_INSERT_TAIL(&tmp_queue, control, next);
4151f8829a4aSRandall Stewart 			m = control->data;
4152f8829a4aSRandall Stewart 			while (m) {
4153b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4154139bc87fSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
415580fefe0aSRandall Stewart 				}
4156f8829a4aSRandall Stewart 				sctp_sbfree(control, stcb, &old_so->so_rcv, m);
4157b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4158f8829a4aSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
415980fefe0aSRandall Stewart 				}
4160139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(m);
4161f8829a4aSRandall Stewart 			}
4162f8829a4aSRandall Stewart 		}
4163f8829a4aSRandall Stewart 	}
4164f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(old_inp);
4165f8829a4aSRandall Stewart 	/* Remove the sb-lock on the old socket */
4166f8829a4aSRandall Stewart 
4167f8829a4aSRandall Stewart 	sbunlock(&old_so->so_rcv);
4168f8829a4aSRandall Stewart 	/* Now we move them over to the new socket buffer */
4169f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(new_inp);
41704a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &tmp_queue, next, nctl) {
4171f8829a4aSRandall Stewart 		TAILQ_INSERT_TAIL(&new_inp->read_queue, control, next);
4172f8829a4aSRandall Stewart 		m = control->data;
4173f8829a4aSRandall Stewart 		while (m) {
4174b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4175139bc87fSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
417680fefe0aSRandall Stewart 			}
4177f8829a4aSRandall Stewart 			sctp_sballoc(stcb, &new_so->so_rcv, m);
4178b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4179f8829a4aSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
418080fefe0aSRandall Stewart 			}
4181139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
4182f8829a4aSRandall Stewart 		}
4183f8829a4aSRandall Stewart 	}
4184f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(new_inp);
4185f8829a4aSRandall Stewart }
4186f8829a4aSRandall Stewart 
4187f8829a4aSRandall Stewart void
4188f8829a4aSRandall Stewart sctp_add_to_readq(struct sctp_inpcb *inp,
4189f8829a4aSRandall Stewart     struct sctp_tcb *stcb,
4190f8829a4aSRandall Stewart     struct sctp_queued_to_read *control,
4191f8829a4aSRandall Stewart     struct sockbuf *sb,
4192ceaad40aSRandall Stewart     int end,
4193cfde3ff7SRandall Stewart     int inp_read_lock_held,
4194ceaad40aSRandall Stewart     int so_locked
4195ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4196ceaad40aSRandall Stewart     SCTP_UNUSED
4197ceaad40aSRandall Stewart #endif
4198ceaad40aSRandall Stewart )
4199f8829a4aSRandall Stewart {
4200f8829a4aSRandall Stewart 	/*
4201f8829a4aSRandall Stewart 	 * Here we must place the control on the end of the socket read
4202f8829a4aSRandall Stewart 	 * queue AND increment sb_cc so that select will work properly on
4203f8829a4aSRandall Stewart 	 * read.
4204f8829a4aSRandall Stewart 	 */
4205f8829a4aSRandall Stewart 	struct mbuf *m, *prev = NULL;
4206f8829a4aSRandall Stewart 
420703b0b021SRandall Stewart 	if (inp == NULL) {
420803b0b021SRandall Stewart 		/* Gak, TSNH!! */
4209a5d547adSRandall Stewart #ifdef INVARIANTS
421003b0b021SRandall Stewart 		panic("Gak, inp NULL on add_to_readq");
421103b0b021SRandall Stewart #endif
421203b0b021SRandall Stewart 		return;
421303b0b021SRandall Stewart 	}
4214cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4215f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4216cd1386abSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
4217cd1386abSMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
4218cd1386abSMichael Tuexen 		if (control->data) {
4219cd1386abSMichael Tuexen 			sctp_m_freem(control->data);
4220cd1386abSMichael Tuexen 			control->data = NULL;
4221cd1386abSMichael Tuexen 		}
4222cd1386abSMichael Tuexen 		SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_readq), control);
4223cd1386abSMichael Tuexen 		if (inp_read_lock_held == 0)
4224cd1386abSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4225cd1386abSMichael Tuexen 		return;
4226cd1386abSMichael Tuexen 	}
422742551e99SRandall Stewart 	if (!(control->spec_flags & M_NOTIFICATION)) {
4228a5d547adSRandall Stewart 		atomic_add_int(&inp->total_recvs, 1);
422942551e99SRandall Stewart 		if (!control->do_not_ref_stcb) {
4230a5d547adSRandall Stewart 			atomic_add_int(&stcb->total_recvs, 1);
423142551e99SRandall Stewart 		}
423242551e99SRandall Stewart 	}
4233f8829a4aSRandall Stewart 	m = control->data;
4234f8829a4aSRandall Stewart 	control->held_length = 0;
4235f8829a4aSRandall Stewart 	control->length = 0;
4236f8829a4aSRandall Stewart 	while (m) {
4237139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m) == 0) {
4238f8829a4aSRandall Stewart 			/* Skip mbufs with NO length */
4239f8829a4aSRandall Stewart 			if (prev == NULL) {
4240f8829a4aSRandall Stewart 				/* First one */
4241f8829a4aSRandall Stewart 				control->data = sctp_m_free(m);
4242f8829a4aSRandall Stewart 				m = control->data;
4243f8829a4aSRandall Stewart 			} else {
4244139bc87fSRandall Stewart 				SCTP_BUF_NEXT(prev) = sctp_m_free(m);
4245139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(prev);
4246f8829a4aSRandall Stewart 			}
4247f8829a4aSRandall Stewart 			if (m == NULL) {
4248c2ede4b3SMartin Blapp 				control->tail_mbuf = prev;
4249f8829a4aSRandall Stewart 			}
4250f8829a4aSRandall Stewart 			continue;
4251f8829a4aSRandall Stewart 		}
4252f8829a4aSRandall Stewart 		prev = m;
4253b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4254139bc87fSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
425580fefe0aSRandall Stewart 		}
4256f8829a4aSRandall Stewart 		sctp_sballoc(stcb, sb, m);
4257b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4258f8829a4aSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
425980fefe0aSRandall Stewart 		}
4260139bc87fSRandall Stewart 		atomic_add_int(&control->length, SCTP_BUF_LEN(m));
4261139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
4262f8829a4aSRandall Stewart 	}
4263f8829a4aSRandall Stewart 	if (prev != NULL) {
4264f8829a4aSRandall Stewart 		control->tail_mbuf = prev;
4265f8829a4aSRandall Stewart 	} else {
4266139bc87fSRandall Stewart 		/* Everything got collapsed out?? */
4267cd1386abSMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
4268cd1386abSMichael Tuexen 		SCTP_ZONE_FREE(SCTP_BASE_INFO(ipi_zone_readq), control);
4269cfde3ff7SRandall Stewart 		if (inp_read_lock_held == 0)
427047a490cbSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4271f8829a4aSRandall Stewart 		return;
4272f8829a4aSRandall Stewart 	}
4273f8829a4aSRandall Stewart 	if (end) {
4274f8829a4aSRandall Stewart 		control->end_added = 1;
4275f8829a4aSRandall Stewart 	}
4276f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&inp->read_queue, control, next);
4277cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4278f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4279f8829a4aSRandall Stewart 	if (inp && inp->sctp_socket) {
428017205eccSRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_ZERO_COPY_ACTIVE)) {
428117205eccSRandall Stewart 			SCTP_ZERO_COPY_EVENT(inp, inp->sctp_socket);
4282ceaad40aSRandall Stewart 		} else {
4283ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4284ceaad40aSRandall Stewart 			struct socket *so;
4285ceaad40aSRandall Stewart 
4286ceaad40aSRandall Stewart 			so = SCTP_INP_SO(inp);
4287ceaad40aSRandall Stewart 			if (!so_locked) {
4288ceaad40aSRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
4289ceaad40aSRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
4290ceaad40aSRandall Stewart 				SCTP_SOCKET_LOCK(so, 1);
4291ceaad40aSRandall Stewart 				SCTP_TCB_LOCK(stcb);
4292ceaad40aSRandall Stewart 				atomic_subtract_int(&stcb->asoc.refcnt, 1);
4293ceaad40aSRandall Stewart 				if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4294ceaad40aSRandall Stewart 					SCTP_SOCKET_UNLOCK(so, 1);
4295ceaad40aSRandall Stewart 					return;
4296ceaad40aSRandall Stewart 				}
4297ceaad40aSRandall Stewart 			}
4298ceaad40aSRandall Stewart #endif
4299f8829a4aSRandall Stewart 			sctp_sorwakeup(inp, inp->sctp_socket);
4300ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4301ceaad40aSRandall Stewart 			if (!so_locked) {
4302ceaad40aSRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
4303ceaad40aSRandall Stewart 			}
4304ceaad40aSRandall Stewart #endif
4305ceaad40aSRandall Stewart 		}
4306f8829a4aSRandall Stewart 	}
4307f8829a4aSRandall Stewart }
4308f8829a4aSRandall Stewart 
4309f8829a4aSRandall Stewart 
4310f8829a4aSRandall Stewart int
4311f8829a4aSRandall Stewart sctp_append_to_readq(struct sctp_inpcb *inp,
4312f8829a4aSRandall Stewart     struct sctp_tcb *stcb,
4313f8829a4aSRandall Stewart     struct sctp_queued_to_read *control,
4314f8829a4aSRandall Stewart     struct mbuf *m,
4315f8829a4aSRandall Stewart     int end,
4316f8829a4aSRandall Stewart     int ctls_cumack,
4317f8829a4aSRandall Stewart     struct sockbuf *sb)
4318f8829a4aSRandall Stewart {
4319f8829a4aSRandall Stewart 	/*
4320f8829a4aSRandall Stewart 	 * A partial delivery API event is underway. OR we are appending on
4321f8829a4aSRandall Stewart 	 * the reassembly queue.
4322f8829a4aSRandall Stewart 	 *
4323f8829a4aSRandall Stewart 	 * If PDAPI this means we need to add m to the end of the data.
4324f8829a4aSRandall Stewart 	 * Increase the length in the control AND increment the sb_cc.
4325f8829a4aSRandall Stewart 	 * Otherwise sb is NULL and all we need to do is put it at the end
4326f8829a4aSRandall Stewart 	 * of the mbuf chain.
4327f8829a4aSRandall Stewart 	 */
4328f8829a4aSRandall Stewart 	int len = 0;
4329f8829a4aSRandall Stewart 	struct mbuf *mm, *tail = NULL, *prev = NULL;
4330f8829a4aSRandall Stewart 
4331f8829a4aSRandall Stewart 	if (inp) {
4332f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4333f8829a4aSRandall Stewart 	}
4334f8829a4aSRandall Stewart 	if (control == NULL) {
4335f8829a4aSRandall Stewart get_out:
4336f8829a4aSRandall Stewart 		if (inp) {
4337f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
4338f8829a4aSRandall Stewart 		}
4339f8829a4aSRandall Stewart 		return (-1);
4340f8829a4aSRandall Stewart 	}
4341cd1386abSMichael Tuexen 	if (inp && (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ)) {
4342cd1386abSMichael Tuexen 		SCTP_INP_READ_UNLOCK(inp);
4343cd1386abSMichael Tuexen 		return 0;
4344cd1386abSMichael Tuexen 	}
4345139bc87fSRandall Stewart 	if (control->end_added) {
4346f8829a4aSRandall Stewart 		/* huh this one is complete? */
4347f8829a4aSRandall Stewart 		goto get_out;
4348f8829a4aSRandall Stewart 	}
4349f8829a4aSRandall Stewart 	mm = m;
4350f8829a4aSRandall Stewart 	if (mm == NULL) {
4351f8829a4aSRandall Stewart 		goto get_out;
4352f8829a4aSRandall Stewart 	}
4353f8829a4aSRandall Stewart 	while (mm) {
4354139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(mm) == 0) {
4355f8829a4aSRandall Stewart 			/* Skip mbufs with NO lenght */
4356f8829a4aSRandall Stewart 			if (prev == NULL) {
4357f8829a4aSRandall Stewart 				/* First one */
4358f8829a4aSRandall Stewart 				m = sctp_m_free(mm);
4359f8829a4aSRandall Stewart 				mm = m;
4360f8829a4aSRandall Stewart 			} else {
4361139bc87fSRandall Stewart 				SCTP_BUF_NEXT(prev) = sctp_m_free(mm);
4362139bc87fSRandall Stewart 				mm = SCTP_BUF_NEXT(prev);
4363f8829a4aSRandall Stewart 			}
4364f8829a4aSRandall Stewart 			continue;
4365f8829a4aSRandall Stewart 		}
4366f8829a4aSRandall Stewart 		prev = mm;
4367139bc87fSRandall Stewart 		len += SCTP_BUF_LEN(mm);
4368f8829a4aSRandall Stewart 		if (sb) {
4369b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4370139bc87fSRandall Stewart 				sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(mm));
437180fefe0aSRandall Stewart 			}
4372f8829a4aSRandall Stewart 			sctp_sballoc(stcb, sb, mm);
4373b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4374f8829a4aSRandall Stewart 				sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
437580fefe0aSRandall Stewart 			}
4376f8829a4aSRandall Stewart 		}
4377139bc87fSRandall Stewart 		mm = SCTP_BUF_NEXT(mm);
4378f8829a4aSRandall Stewart 	}
4379f8829a4aSRandall Stewart 	if (prev) {
4380f8829a4aSRandall Stewart 		tail = prev;
4381f8829a4aSRandall Stewart 	} else {
4382f8829a4aSRandall Stewart 		/* Really there should always be a prev */
4383f8829a4aSRandall Stewart 		if (m == NULL) {
4384f8829a4aSRandall Stewart 			/* Huh nothing left? */
4385a5d547adSRandall Stewart #ifdef INVARIANTS
4386f8829a4aSRandall Stewart 			panic("Nothing left to add?");
4387f8829a4aSRandall Stewart #else
4388f8829a4aSRandall Stewart 			goto get_out;
4389f8829a4aSRandall Stewart #endif
4390f8829a4aSRandall Stewart 		}
4391f8829a4aSRandall Stewart 		tail = m;
4392f8829a4aSRandall Stewart 	}
4393f8829a4aSRandall Stewart 	if (control->tail_mbuf) {
4394f8829a4aSRandall Stewart 		/* append */
4395139bc87fSRandall Stewart 		SCTP_BUF_NEXT(control->tail_mbuf) = m;
4396f8829a4aSRandall Stewart 		control->tail_mbuf = tail;
4397f8829a4aSRandall Stewart 	} else {
4398f8829a4aSRandall Stewart 		/* nothing there */
4399a5d547adSRandall Stewart #ifdef INVARIANTS
4400f8829a4aSRandall Stewart 		if (control->data != NULL) {
4401f8829a4aSRandall Stewart 			panic("This should NOT happen");
4402f8829a4aSRandall Stewart 		}
4403f8829a4aSRandall Stewart #endif
4404f8829a4aSRandall Stewart 		control->data = m;
4405f8829a4aSRandall Stewart 		control->tail_mbuf = tail;
4406f8829a4aSRandall Stewart 	}
440718e198d3SRandall Stewart 	atomic_add_int(&control->length, len);
440818e198d3SRandall Stewart 	if (end) {
440918e198d3SRandall Stewart 		/* message is complete */
441018e198d3SRandall Stewart 		if (stcb && (control == stcb->asoc.control_pdapi)) {
441118e198d3SRandall Stewart 			stcb->asoc.control_pdapi = NULL;
441218e198d3SRandall Stewart 		}
441318e198d3SRandall Stewart 		control->held_length = 0;
441418e198d3SRandall Stewart 		control->end_added = 1;
441518e198d3SRandall Stewart 	}
4416ad81507eSRandall Stewart 	if (stcb == NULL) {
4417ad81507eSRandall Stewart 		control->do_not_ref_stcb = 1;
4418ad81507eSRandall Stewart 	}
4419f8829a4aSRandall Stewart 	/*
4420f8829a4aSRandall Stewart 	 * When we are appending in partial delivery, the cum-ack is used
4421f8829a4aSRandall Stewart 	 * for the actual pd-api highest tsn on this mbuf. The true cum-ack
4422f8829a4aSRandall Stewart 	 * is populated in the outbound sinfo structure from the true cumack
4423f8829a4aSRandall Stewart 	 * if the association exists...
4424f8829a4aSRandall Stewart 	 */
4425f8829a4aSRandall Stewart 	control->sinfo_tsn = control->sinfo_cumtsn = ctls_cumack;
4426f8829a4aSRandall Stewart 	if (inp) {
4427f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4428f8829a4aSRandall Stewart 	}
4429f8829a4aSRandall Stewart 	if (inp && inp->sctp_socket) {
443017205eccSRandall Stewart 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_ZERO_COPY_ACTIVE)) {
443117205eccSRandall Stewart 			SCTP_ZERO_COPY_EVENT(inp, inp->sctp_socket);
4432ceaad40aSRandall Stewart 		} else {
4433ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4434ceaad40aSRandall Stewart 			struct socket *so;
4435ceaad40aSRandall Stewart 
4436ceaad40aSRandall Stewart 			so = SCTP_INP_SO(inp);
4437ceaad40aSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
4438ceaad40aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
4439ceaad40aSRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
4440ceaad40aSRandall Stewart 			SCTP_TCB_LOCK(stcb);
4441ceaad40aSRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
4442ceaad40aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4443ceaad40aSRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
4444ceaad40aSRandall Stewart 				return (0);
4445ceaad40aSRandall Stewart 			}
4446ceaad40aSRandall Stewart #endif
4447f8829a4aSRandall Stewart 			sctp_sorwakeup(inp, inp->sctp_socket);
4448ceaad40aSRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4449ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
4450ceaad40aSRandall Stewart #endif
4451ceaad40aSRandall Stewart 		}
4452f8829a4aSRandall Stewart 	}
4453f8829a4aSRandall Stewart 	return (0);
4454f8829a4aSRandall Stewart }
4455f8829a4aSRandall Stewart 
4456f8829a4aSRandall Stewart 
4457f8829a4aSRandall Stewart 
4458f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR PATCH FILE OF
4459f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4460f8829a4aSRandall Stewart  */
4461f8829a4aSRandall Stewart 
4462f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR END OF PATCH FILE OF
4463f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4464f8829a4aSRandall Stewart  */
4465f8829a4aSRandall Stewart 
4466f8829a4aSRandall Stewart struct mbuf *
4467f8829a4aSRandall Stewart sctp_generate_invmanparam(int err)
4468f8829a4aSRandall Stewart {
4469f8829a4aSRandall Stewart 	/* Return a MBUF with a invalid mandatory parameter */
4470f8829a4aSRandall Stewart 	struct mbuf *m;
4471f8829a4aSRandall Stewart 
4472f8829a4aSRandall Stewart 	m = sctp_get_mbuf_for_msg(sizeof(struct sctp_paramhdr), 0, M_DONTWAIT, 1, MT_DATA);
4473f8829a4aSRandall Stewart 	if (m) {
4474f8829a4aSRandall Stewart 		struct sctp_paramhdr *ph;
4475f8829a4aSRandall Stewart 
4476139bc87fSRandall Stewart 		SCTP_BUF_LEN(m) = sizeof(struct sctp_paramhdr);
4477f8829a4aSRandall Stewart 		ph = mtod(m, struct sctp_paramhdr *);
4478f8829a4aSRandall Stewart 		ph->param_length = htons(sizeof(struct sctp_paramhdr));
4479f8829a4aSRandall Stewart 		ph->param_type = htons(err);
4480f8829a4aSRandall Stewart 	}
4481f8829a4aSRandall Stewart 	return (m);
4482f8829a4aSRandall Stewart }
4483f8829a4aSRandall Stewart 
4484f8829a4aSRandall Stewart #ifdef SCTP_MBCNT_LOGGING
4485f8829a4aSRandall Stewart void
4486f8829a4aSRandall Stewart sctp_free_bufspace(struct sctp_tcb *stcb, struct sctp_association *asoc,
4487f8829a4aSRandall Stewart     struct sctp_tmit_chunk *tp1, int chk_cnt)
4488f8829a4aSRandall Stewart {
4489f8829a4aSRandall Stewart 	if (tp1->data == NULL) {
4490f8829a4aSRandall Stewart 		return;
4491f8829a4aSRandall Stewart 	}
4492f8829a4aSRandall Stewart 	asoc->chunks_on_out_queue -= chk_cnt;
4493b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBCNT_LOGGING_ENABLE) {
4494f8829a4aSRandall Stewart 		sctp_log_mbcnt(SCTP_LOG_MBCNT_DECREASE,
4495f8829a4aSRandall Stewart 		    asoc->total_output_queue_size,
4496f8829a4aSRandall Stewart 		    tp1->book_size,
4497f8829a4aSRandall Stewart 		    0,
4498f8829a4aSRandall Stewart 		    tp1->mbcnt);
449980fefe0aSRandall Stewart 	}
4500f8829a4aSRandall Stewart 	if (asoc->total_output_queue_size >= tp1->book_size) {
450144b7479bSRandall Stewart 		atomic_add_int(&asoc->total_output_queue_size, -tp1->book_size);
4502f8829a4aSRandall Stewart 	} else {
4503f8829a4aSRandall Stewart 		asoc->total_output_queue_size = 0;
4504f8829a4aSRandall Stewart 	}
4505f8829a4aSRandall Stewart 
4506f8829a4aSRandall Stewart 	if (stcb->sctp_socket && (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) ||
4507f8829a4aSRandall Stewart 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE)))) {
4508f8829a4aSRandall Stewart 		if (stcb->sctp_socket->so_snd.sb_cc >= tp1->book_size) {
4509f8829a4aSRandall Stewart 			stcb->sctp_socket->so_snd.sb_cc -= tp1->book_size;
4510f8829a4aSRandall Stewart 		} else {
4511f8829a4aSRandall Stewart 			stcb->sctp_socket->so_snd.sb_cc = 0;
4512f8829a4aSRandall Stewart 
4513f8829a4aSRandall Stewart 		}
4514f8829a4aSRandall Stewart 	}
4515f8829a4aSRandall Stewart }
4516f8829a4aSRandall Stewart 
4517f8829a4aSRandall Stewart #endif
4518f8829a4aSRandall Stewart 
4519f8829a4aSRandall Stewart int
4520f8829a4aSRandall Stewart sctp_release_pr_sctp_chunk(struct sctp_tcb *stcb, struct sctp_tmit_chunk *tp1,
45210c0982b8SRandall Stewart     int reason, int so_locked
4522ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4523ceaad40aSRandall Stewart     SCTP_UNUSED
4524ceaad40aSRandall Stewart #endif
4525ceaad40aSRandall Stewart )
4526f8829a4aSRandall Stewart {
45270c0982b8SRandall Stewart 	struct sctp_stream_out *strq;
45284a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk = NULL, *tp2;
45290c0982b8SRandall Stewart 	struct sctp_stream_queue_pending *sp;
45300c0982b8SRandall Stewart 	uint16_t stream = 0, seq = 0;
45310c0982b8SRandall Stewart 	uint8_t foundeom = 0;
4532f8829a4aSRandall Stewart 	int ret_sz = 0;
4533f8829a4aSRandall Stewart 	int notdone;
45340c0982b8SRandall Stewart 	int do_wakeup_routine = 0;
4535f8829a4aSRandall Stewart 
45360c0982b8SRandall Stewart 	stream = tp1->rec.data.stream_number;
45370c0982b8SRandall Stewart 	seq = tp1->rec.data.stream_seq;
4538f8829a4aSRandall Stewart 	do {
4539f8829a4aSRandall Stewart 		ret_sz += tp1->book_size;
45400c0982b8SRandall Stewart 		if (tp1->data != NULL) {
45418933fa13SRandall Stewart 			if (tp1->sent < SCTP_DATAGRAM_RESEND) {
4542830d754dSRandall Stewart 				sctp_flight_size_decrease(tp1);
4543830d754dSRandall Stewart 				sctp_total_flight_decrease(stcb, tp1);
45448933fa13SRandall Stewart 			}
45458933fa13SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
45460c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += tp1->send_size;
45470c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
4548830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_DG_FAIL, stcb, reason, tp1, so_locked);
45492f99457bSMichael Tuexen 			if (tp1->data) {
4550f8829a4aSRandall Stewart 				sctp_m_freem(tp1->data);
4551f8829a4aSRandall Stewart 				tp1->data = NULL;
45522f99457bSMichael Tuexen 			}
45530c0982b8SRandall Stewart 			do_wakeup_routine = 1;
4554f8829a4aSRandall Stewart 			if (PR_SCTP_BUF_ENABLED(tp1->flags)) {
4555f8829a4aSRandall Stewart 				stcb->asoc.sent_queue_cnt_removeable--;
4556f8829a4aSRandall Stewart 			}
4557f8829a4aSRandall Stewart 		}
45588933fa13SRandall Stewart 		tp1->sent = SCTP_FORWARD_TSN_SKIP;
4559f8829a4aSRandall Stewart 		if ((tp1->rec.data.rcv_flags & SCTP_DATA_NOT_FRAG) ==
4560f8829a4aSRandall Stewart 		    SCTP_DATA_NOT_FRAG) {
4561f8829a4aSRandall Stewart 			/* not frag'ed we ae done   */
4562f8829a4aSRandall Stewart 			notdone = 0;
4563f8829a4aSRandall Stewart 			foundeom = 1;
4564f8829a4aSRandall Stewart 		} else if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
4565f8829a4aSRandall Stewart 			/* end of frag, we are done */
4566f8829a4aSRandall Stewart 			notdone = 0;
4567f8829a4aSRandall Stewart 			foundeom = 1;
4568f8829a4aSRandall Stewart 		} else {
4569f8829a4aSRandall Stewart 			/*
4570f8829a4aSRandall Stewart 			 * Its a begin or middle piece, we must mark all of
4571f8829a4aSRandall Stewart 			 * it
4572f8829a4aSRandall Stewart 			 */
4573f8829a4aSRandall Stewart 			notdone = 1;
4574f8829a4aSRandall Stewart 			tp1 = TAILQ_NEXT(tp1, sctp_next);
4575f8829a4aSRandall Stewart 		}
4576f8829a4aSRandall Stewart 	} while (tp1 && notdone);
45770c0982b8SRandall Stewart 	if (foundeom == 0) {
4578f8829a4aSRandall Stewart 		/*
4579f8829a4aSRandall Stewart 		 * The multi-part message was scattered across the send and
4580f8829a4aSRandall Stewart 		 * sent queue.
4581f8829a4aSRandall Stewart 		 */
45824a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(tp1, &stcb->asoc.send_queue, sctp_next, tp2) {
45834a9ef3f8SMichael Tuexen 			if ((tp1->rec.data.stream_number != stream) ||
45844a9ef3f8SMichael Tuexen 			    (tp1->rec.data.stream_seq != seq)) {
45854a9ef3f8SMichael Tuexen 				break;
45864a9ef3f8SMichael Tuexen 			}
45870c0982b8SRandall Stewart 			/*
45880c0982b8SRandall Stewart 			 * save to chk in case we have some on stream out
45890c0982b8SRandall Stewart 			 * queue. If so and we have an un-transmitted one we
45900c0982b8SRandall Stewart 			 * don't have to fudge the TSN.
45910c0982b8SRandall Stewart 			 */
45920c0982b8SRandall Stewart 			chk = tp1;
45930c0982b8SRandall Stewart 			ret_sz += tp1->book_size;
45940c0982b8SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
45952f99457bSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_DG_FAIL, stcb, reason, tp1, so_locked);
45962f99457bSMichael Tuexen 			if (tp1->data) {
45970c0982b8SRandall Stewart 				sctp_m_freem(tp1->data);
45982f99457bSMichael Tuexen 				tp1->data = NULL;
45992f99457bSMichael Tuexen 			}
46008933fa13SRandall Stewart 			/* No flight involved here book the size to 0 */
46018933fa13SRandall Stewart 			tp1->book_size = 0;
46020c0982b8SRandall Stewart 			if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
46030c0982b8SRandall Stewart 				foundeom = 1;
4604f8829a4aSRandall Stewart 			}
46050c0982b8SRandall Stewart 			do_wakeup_routine = 1;
46060c0982b8SRandall Stewart 			tp1->sent = SCTP_FORWARD_TSN_SKIP;
46070c0982b8SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.send_queue, tp1, sctp_next);
46080c0982b8SRandall Stewart 			/*
46090c0982b8SRandall Stewart 			 * on to the sent queue so we can wait for it to be
46100c0982b8SRandall Stewart 			 * passed by.
46110c0982b8SRandall Stewart 			 */
46120c0982b8SRandall Stewart 			TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, tp1,
46130c0982b8SRandall Stewart 			    sctp_next);
46140c0982b8SRandall Stewart 			stcb->asoc.send_queue_cnt--;
46150c0982b8SRandall Stewart 			stcb->asoc.sent_queue_cnt++;
46160c0982b8SRandall Stewart 		}
46170c0982b8SRandall Stewart 	}
46180c0982b8SRandall Stewart 	if (foundeom == 0) {
46190c0982b8SRandall Stewart 		/*
46200c0982b8SRandall Stewart 		 * Still no eom found. That means there is stuff left on the
46210c0982b8SRandall Stewart 		 * stream out queue.. yuck.
46220c0982b8SRandall Stewart 		 */
46230c0982b8SRandall Stewart 		strq = &stcb->asoc.strmout[stream];
46240c0982b8SRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
46254a9ef3f8SMichael Tuexen 		TAILQ_FOREACH(sp, &strq->outqueue, next) {
46264a9ef3f8SMichael Tuexen 			/* FIXME: Shouldn't this be a serial number check? */
46274a9ef3f8SMichael Tuexen 			if (sp->strseq > seq) {
46284a9ef3f8SMichael Tuexen 				break;
46294a9ef3f8SMichael Tuexen 			}
46300c0982b8SRandall Stewart 			/* Check if its our SEQ */
46310c0982b8SRandall Stewart 			if (sp->strseq == seq) {
46320c0982b8SRandall Stewart 				sp->discard_rest = 1;
46330c0982b8SRandall Stewart 				/*
46340c0982b8SRandall Stewart 				 * We may need to put a chunk on the queue
46350c0982b8SRandall Stewart 				 * that holds the TSN that would have been
46360c0982b8SRandall Stewart 				 * sent with the LAST bit.
46370c0982b8SRandall Stewart 				 */
46380c0982b8SRandall Stewart 				if (chk == NULL) {
46390c0982b8SRandall Stewart 					/* Yep, we have to */
46400c0982b8SRandall Stewart 					sctp_alloc_a_chunk(stcb, chk);
46410c0982b8SRandall Stewart 					if (chk == NULL) {
46420c0982b8SRandall Stewart 						/*
46430c0982b8SRandall Stewart 						 * we are hosed. All we can
46440c0982b8SRandall Stewart 						 * do is nothing.. which
46450c0982b8SRandall Stewart 						 * will cause an abort if
46460c0982b8SRandall Stewart 						 * the peer is paying
46470c0982b8SRandall Stewart 						 * attention.
46480c0982b8SRandall Stewart 						 */
46490c0982b8SRandall Stewart 						goto oh_well;
46500c0982b8SRandall Stewart 					}
46510c0982b8SRandall Stewart 					memset(chk, 0, sizeof(*chk));
46520c0982b8SRandall Stewart 					chk->rec.data.rcv_flags = SCTP_DATA_LAST_FRAG;
46530c0982b8SRandall Stewart 					chk->sent = SCTP_FORWARD_TSN_SKIP;
46540c0982b8SRandall Stewart 					chk->asoc = &stcb->asoc;
46550c0982b8SRandall Stewart 					chk->rec.data.stream_seq = sp->strseq;
46560c0982b8SRandall Stewart 					chk->rec.data.stream_number = sp->stream;
46570c0982b8SRandall Stewart 					chk->rec.data.payloadtype = sp->ppid;
46580c0982b8SRandall Stewart 					chk->rec.data.context = sp->context;
46590c0982b8SRandall Stewart 					chk->flags = sp->act_flags;
46609eea4a2dSMichael Tuexen 					if (sp->net)
46610c0982b8SRandall Stewart 						chk->whoTo = sp->net;
46629eea4a2dSMichael Tuexen 					else
46639eea4a2dSMichael Tuexen 						chk->whoTo = stcb->asoc.primary_destination;
46640c0982b8SRandall Stewart 					atomic_add_int(&chk->whoTo->ref_count, 1);
46650c0982b8SRandall Stewart 					chk->rec.data.TSN_seq = atomic_fetchadd_int(&stcb->asoc.sending_seq, 1);
46660c0982b8SRandall Stewart 					stcb->asoc.pr_sctp_cnt++;
46670c0982b8SRandall Stewart 					chk->pr_sctp_on = 1;
46680c0982b8SRandall Stewart 					TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, chk, sctp_next);
46690c0982b8SRandall Stewart 					stcb->asoc.sent_queue_cnt++;
46708933fa13SRandall Stewart 					stcb->asoc.pr_sctp_cnt++;
46710c0982b8SRandall Stewart 				} else {
46720c0982b8SRandall Stewart 					chk->rec.data.rcv_flags |= SCTP_DATA_LAST_FRAG;
46730c0982b8SRandall Stewart 				}
46740c0982b8SRandall Stewart 		oh_well:
46750c0982b8SRandall Stewart 				if (sp->data) {
46760c0982b8SRandall Stewart 					/*
46770c0982b8SRandall Stewart 					 * Pull any data to free up the SB
46780c0982b8SRandall Stewart 					 * and allow sender to "add more"
46790c0982b8SRandall Stewart 					 * whilc we will throw away :-)
46800c0982b8SRandall Stewart 					 */
46810c0982b8SRandall Stewart 					sctp_free_spbufspace(stcb, &stcb->asoc,
46820c0982b8SRandall Stewart 					    sp);
46830c0982b8SRandall Stewart 					ret_sz += sp->length;
46840c0982b8SRandall Stewart 					do_wakeup_routine = 1;
46850c0982b8SRandall Stewart 					sp->some_taken = 1;
46860c0982b8SRandall Stewart 					sctp_m_freem(sp->data);
46870c0982b8SRandall Stewart 					sp->length = 0;
46880c0982b8SRandall Stewart 					sp->data = NULL;
46890c0982b8SRandall Stewart 					sp->tail_mbuf = NULL;
46900c0982b8SRandall Stewart 				}
46910c0982b8SRandall Stewart 				break;
46920c0982b8SRandall Stewart 			}
46934a9ef3f8SMichael Tuexen 		}		/* End tailq_foreach */
46940c0982b8SRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
46950c0982b8SRandall Stewart 	}
46960c0982b8SRandall Stewart 	if (do_wakeup_routine) {
46970c0982b8SRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
46988933fa13SRandall Stewart 		struct socket *so;
46998933fa13SRandall Stewart 
47000c0982b8SRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
47010c0982b8SRandall Stewart 		if (!so_locked) {
47020c0982b8SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
47030c0982b8SRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
47040c0982b8SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
47050c0982b8SRandall Stewart 			SCTP_TCB_LOCK(stcb);
47060c0982b8SRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
47070c0982b8SRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
47080c0982b8SRandall Stewart 				/* assoc was freed while we were unlocked */
47090c0982b8SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
47100c0982b8SRandall Stewart 				return (ret_sz);
47110c0982b8SRandall Stewart 			}
47120c0982b8SRandall Stewart 		}
47130c0982b8SRandall Stewart #endif
47140c0982b8SRandall Stewart 		sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket);
47150c0982b8SRandall Stewart #if defined (__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
47160c0982b8SRandall Stewart 		if (!so_locked) {
47170c0982b8SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
47180c0982b8SRandall Stewart 		}
47190c0982b8SRandall Stewart #endif
4720f8829a4aSRandall Stewart 	}
4721f8829a4aSRandall Stewart 	return (ret_sz);
4722f8829a4aSRandall Stewart }
4723f8829a4aSRandall Stewart 
4724f8829a4aSRandall Stewart /*
4725f8829a4aSRandall Stewart  * checks to see if the given address, sa, is one that is currently known by
4726f8829a4aSRandall Stewart  * the kernel note: can't distinguish the same address on multiple interfaces
4727f8829a4aSRandall Stewart  * and doesn't handle multiple addresses with different zone/scope id's note:
4728f8829a4aSRandall Stewart  * ifa_ifwithaddr() compares the entire sockaddr struct
4729f8829a4aSRandall Stewart  */
473042551e99SRandall Stewart struct sctp_ifa *
473180fefe0aSRandall Stewart sctp_find_ifa_in_ep(struct sctp_inpcb *inp, struct sockaddr *addr,
473280fefe0aSRandall Stewart     int holds_lock)
4733f8829a4aSRandall Stewart {
473442551e99SRandall Stewart 	struct sctp_laddr *laddr;
4735f8829a4aSRandall Stewart 
4736ad81507eSRandall Stewart 	if (holds_lock == 0) {
473742551e99SRandall Stewart 		SCTP_INP_RLOCK(inp);
4738ad81507eSRandall Stewart 	}
473942551e99SRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
474042551e99SRandall Stewart 		if (laddr->ifa == NULL)
4741f8829a4aSRandall Stewart 			continue;
474242551e99SRandall Stewart 		if (addr->sa_family != laddr->ifa->address.sa.sa_family)
474342551e99SRandall Stewart 			continue;
4744e6194c2eSMichael Tuexen #ifdef INET
474542551e99SRandall Stewart 		if (addr->sa_family == AF_INET) {
474642551e99SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
474742551e99SRandall Stewart 			    laddr->ifa->address.sin.sin_addr.s_addr) {
474842551e99SRandall Stewart 				/* found him. */
4749ad81507eSRandall Stewart 				if (holds_lock == 0) {
475042551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
4751ad81507eSRandall Stewart 				}
475242551e99SRandall Stewart 				return (laddr->ifa);
475342551e99SRandall Stewart 				break;
475442551e99SRandall Stewart 			}
47555e2c2d87SRandall Stewart 		}
4756e6194c2eSMichael Tuexen #endif
47575e2c2d87SRandall Stewart #ifdef INET6
47585e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
4759c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
4760c54a18d2SRandall Stewart 			    &laddr->ifa->address.sin6)) {
476142551e99SRandall Stewart 				/* found him. */
4762ad81507eSRandall Stewart 				if (holds_lock == 0) {
476342551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
4764ad81507eSRandall Stewart 				}
476542551e99SRandall Stewart 				return (laddr->ifa);
476642551e99SRandall Stewart 				break;
476742551e99SRandall Stewart 			}
476842551e99SRandall Stewart 		}
47695e2c2d87SRandall Stewart #endif
477042551e99SRandall Stewart 	}
4771ad81507eSRandall Stewart 	if (holds_lock == 0) {
477242551e99SRandall Stewart 		SCTP_INP_RUNLOCK(inp);
4773ad81507eSRandall Stewart 	}
477442551e99SRandall Stewart 	return (NULL);
477542551e99SRandall Stewart }
4776f8829a4aSRandall Stewart 
47776a27c376SRandall Stewart uint32_t
47786a27c376SRandall Stewart sctp_get_ifa_hash_val(struct sockaddr *addr)
47796a27c376SRandall Stewart {
4780ea5eba11SMichael Tuexen 	switch (addr->sa_family) {
4781ea5eba11SMichael Tuexen #ifdef INET
4782ea5eba11SMichael Tuexen 	case AF_INET:
4783ea5eba11SMichael Tuexen 		{
47846a27c376SRandall Stewart 			struct sockaddr_in *sin;
47856a27c376SRandall Stewart 
47866a27c376SRandall Stewart 			sin = (struct sockaddr_in *)addr;
47876a27c376SRandall Stewart 			return (sin->sin_addr.s_addr ^ (sin->sin_addr.s_addr >> 16));
4788ea5eba11SMichael Tuexen 		}
4789ea5eba11SMichael Tuexen #endif
4790ea5eba11SMichael Tuexen #ifdef INET6
4791ea5eba11SMichael Tuexen 	case INET6:
4792ea5eba11SMichael Tuexen 		{
47936a27c376SRandall Stewart 			struct sockaddr_in6 *sin6;
47946a27c376SRandall Stewart 			uint32_t hash_of_addr;
47956a27c376SRandall Stewart 
47966a27c376SRandall Stewart 			sin6 = (struct sockaddr_in6 *)addr;
47976a27c376SRandall Stewart 			hash_of_addr = (sin6->sin6_addr.s6_addr32[0] +
47986a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[1] +
47996a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[2] +
48006a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[3]);
48016a27c376SRandall Stewart 			hash_of_addr = (hash_of_addr ^ (hash_of_addr >> 16));
48026a27c376SRandall Stewart 			return (hash_of_addr);
48036a27c376SRandall Stewart 		}
4804ea5eba11SMichael Tuexen #endif
4805ea5eba11SMichael Tuexen 	default:
4806ea5eba11SMichael Tuexen 		break;
4807ea5eba11SMichael Tuexen 	}
48086a27c376SRandall Stewart 	return (0);
48096a27c376SRandall Stewart }
48106a27c376SRandall Stewart 
481142551e99SRandall Stewart struct sctp_ifa *
481242551e99SRandall Stewart sctp_find_ifa_by_addr(struct sockaddr *addr, uint32_t vrf_id, int holds_lock)
481342551e99SRandall Stewart {
481442551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap;
481542551e99SRandall Stewart 	struct sctp_vrf *vrf;
48166a27c376SRandall Stewart 	struct sctp_ifalist *hash_head;
48176a27c376SRandall Stewart 	uint32_t hash_of_addr;
481842551e99SRandall Stewart 
481942551e99SRandall Stewart 	if (holds_lock == 0)
4820c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
482142551e99SRandall Stewart 
4822bff64a4dSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
4823bff64a4dSRandall Stewart 	if (vrf == NULL) {
4824df6e0cc3SRandall Stewart stage_right:
4825bff64a4dSRandall Stewart 		if (holds_lock == 0)
4826c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
4827bff64a4dSRandall Stewart 		return (NULL);
4828bff64a4dSRandall Stewart 	}
4829bff64a4dSRandall Stewart 	hash_of_addr = sctp_get_ifa_hash_val(addr);
4830bff64a4dSRandall Stewart 
483117205eccSRandall Stewart 	hash_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)];
4832bff64a4dSRandall Stewart 	if (hash_head == NULL) {
4833ad81507eSRandall Stewart 		SCTP_PRINTF("hash_of_addr:%x mask:%x table:%x - ",
4834c99efcf6SRandall Stewart 		    hash_of_addr, (uint32_t) vrf->vrf_addr_hashmark,
4835c99efcf6SRandall Stewart 		    (uint32_t) (hash_of_addr & vrf->vrf_addr_hashmark));
4836bff64a4dSRandall Stewart 		sctp_print_address(addr);
4837ad81507eSRandall Stewart 		SCTP_PRINTF("No such bucket for address\n");
4838bff64a4dSRandall Stewart 		if (holds_lock == 0)
4839c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
4840bff64a4dSRandall Stewart 
4841bff64a4dSRandall Stewart 		return (NULL);
4842bff64a4dSRandall Stewart 	}
48436a27c376SRandall Stewart 	LIST_FOREACH(sctp_ifap, hash_head, next_bucket) {
4844bff64a4dSRandall Stewart 		if (sctp_ifap == NULL) {
4845df6e0cc3SRandall Stewart #ifdef INVARIANTS
4846bff64a4dSRandall Stewart 			panic("Huh LIST_FOREACH corrupt");
4847df6e0cc3SRandall Stewart 			goto stage_right;
4848df6e0cc3SRandall Stewart #else
4849df6e0cc3SRandall Stewart 			SCTP_PRINTF("LIST corrupt of sctp_ifap's?\n");
4850df6e0cc3SRandall Stewart 			goto stage_right;
4851df6e0cc3SRandall Stewart #endif
4852bff64a4dSRandall Stewart 		}
48536a27c376SRandall Stewart 		if (addr->sa_family != sctp_ifap->address.sa.sa_family)
48546a27c376SRandall Stewart 			continue;
4855e6194c2eSMichael Tuexen #ifdef INET
48566a27c376SRandall Stewart 		if (addr->sa_family == AF_INET) {
48576a27c376SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
48586a27c376SRandall Stewart 			    sctp_ifap->address.sin.sin_addr.s_addr) {
48596a27c376SRandall Stewart 				/* found him. */
486042551e99SRandall Stewart 				if (holds_lock == 0)
4861c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
486242551e99SRandall Stewart 				return (sctp_ifap);
48636a27c376SRandall Stewart 				break;
48646a27c376SRandall Stewart 			}
48655e2c2d87SRandall Stewart 		}
4866e6194c2eSMichael Tuexen #endif
48675e2c2d87SRandall Stewart #ifdef INET6
48685e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
4869c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
4870c54a18d2SRandall Stewart 			    &sctp_ifap->address.sin6)) {
48716a27c376SRandall Stewart 				/* found him. */
48726a27c376SRandall Stewart 				if (holds_lock == 0)
4873c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
48746a27c376SRandall Stewart 				return (sctp_ifap);
48756a27c376SRandall Stewart 				break;
48766a27c376SRandall Stewart 			}
487742551e99SRandall Stewart 		}
48785e2c2d87SRandall Stewart #endif
487942551e99SRandall Stewart 	}
488042551e99SRandall Stewart 	if (holds_lock == 0)
4881c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
4882f8829a4aSRandall Stewart 	return (NULL);
4883f8829a4aSRandall Stewart }
4884f8829a4aSRandall Stewart 
4885f8829a4aSRandall Stewart static void
48864c9179adSRandall Stewart sctp_user_rcvd(struct sctp_tcb *stcb, uint32_t * freed_so_far, int hold_rlock,
4887f8829a4aSRandall Stewart     uint32_t rwnd_req)
4888f8829a4aSRandall Stewart {
4889f8829a4aSRandall Stewart 	/* User pulled some data, do we need a rwnd update? */
4890f8829a4aSRandall Stewart 	int r_unlocked = 0;
4891f8829a4aSRandall Stewart 	uint32_t dif, rwnd;
4892f8829a4aSRandall Stewart 	struct socket *so = NULL;
4893f8829a4aSRandall Stewart 
4894f8829a4aSRandall Stewart 	if (stcb == NULL)
4895f8829a4aSRandall Stewart 		return;
4896f8829a4aSRandall Stewart 
489750cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
4898f8829a4aSRandall Stewart 
489962c1ff9cSRandall Stewart 	if (stcb->asoc.state & (SCTP_STATE_ABOUT_TO_BE_FREED |
490062c1ff9cSRandall Stewart 	    SCTP_STATE_SHUTDOWN_RECEIVED |
49014c9179adSRandall Stewart 	    SCTP_STATE_SHUTDOWN_ACK_SENT)) {
4902f8829a4aSRandall Stewart 		/* Pre-check If we are freeing no update */
4903f8829a4aSRandall Stewart 		goto no_lock;
4904f8829a4aSRandall Stewart 	}
4905f8829a4aSRandall Stewart 	SCTP_INP_INCR_REF(stcb->sctp_ep);
4906f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
4907f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
4908f8829a4aSRandall Stewart 		goto out;
4909f8829a4aSRandall Stewart 	}
4910f8829a4aSRandall Stewart 	so = stcb->sctp_socket;
4911f8829a4aSRandall Stewart 	if (so == NULL) {
4912f8829a4aSRandall Stewart 		goto out;
4913f8829a4aSRandall Stewart 	}
4914f8829a4aSRandall Stewart 	atomic_add_int(&stcb->freed_by_sorcv_sincelast, *freed_so_far);
4915f8829a4aSRandall Stewart 	/* Have you have freed enough to look */
4916f8829a4aSRandall Stewart 	*freed_so_far = 0;
4917f8829a4aSRandall Stewart 	/* Yep, its worth a look and the lock overhead */
4918f8829a4aSRandall Stewart 
4919f8829a4aSRandall Stewart 	/* Figure out what the rwnd would be */
4920f8829a4aSRandall Stewart 	rwnd = sctp_calc_rwnd(stcb, &stcb->asoc);
4921f8829a4aSRandall Stewart 	if (rwnd >= stcb->asoc.my_last_reported_rwnd) {
4922f8829a4aSRandall Stewart 		dif = rwnd - stcb->asoc.my_last_reported_rwnd;
4923f8829a4aSRandall Stewart 	} else {
4924f8829a4aSRandall Stewart 		dif = 0;
4925f8829a4aSRandall Stewart 	}
4926f8829a4aSRandall Stewart 	if (dif >= rwnd_req) {
4927f8829a4aSRandall Stewart 		if (hold_rlock) {
4928f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(stcb->sctp_ep);
4929f8829a4aSRandall Stewart 			r_unlocked = 1;
4930f8829a4aSRandall Stewart 		}
4931f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
4932f8829a4aSRandall Stewart 			/*
4933f8829a4aSRandall Stewart 			 * One last check before we allow the guy possibly
4934f8829a4aSRandall Stewart 			 * to get in. There is a race, where the guy has not
4935f8829a4aSRandall Stewart 			 * reached the gate. In that case
4936f8829a4aSRandall Stewart 			 */
4937f8829a4aSRandall Stewart 			goto out;
4938f8829a4aSRandall Stewart 		}
4939f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4940f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
4941f8829a4aSRandall Stewart 			/* No reports here */
4942f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
4943f8829a4aSRandall Stewart 			goto out;
4944f8829a4aSRandall Stewart 		}
4945f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_wu_sacks_sent);
4946689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_LOCKED);
4947830d754dSRandall Stewart 
4948f8829a4aSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb,
4949ceaad40aSRandall Stewart 		    SCTP_OUTPUT_FROM_USR_RCVD, SCTP_SO_LOCKED);
4950f8829a4aSRandall Stewart 		/* make sure no timer is running */
4951a5d547adSRandall Stewart 		sctp_timer_stop(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, NULL, SCTP_FROM_SCTPUTIL + SCTP_LOC_6);
4952f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4953f8829a4aSRandall Stewart 	} else {
4954f8829a4aSRandall Stewart 		/* Update how much we have pending */
4955f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = dif;
4956f8829a4aSRandall Stewart 	}
4957f8829a4aSRandall Stewart out:
4958f8829a4aSRandall Stewart 	if (so && r_unlocked && hold_rlock) {
4959f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(stcb->sctp_ep);
4960f8829a4aSRandall Stewart 	}
4961f8829a4aSRandall Stewart 	SCTP_INP_DECR_REF(stcb->sctp_ep);
4962f8829a4aSRandall Stewart no_lock:
496350cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, -1);
4964f8829a4aSRandall Stewart 	return;
4965f8829a4aSRandall Stewart }
4966f8829a4aSRandall Stewart 
4967f8829a4aSRandall Stewart int
4968f8829a4aSRandall Stewart sctp_sorecvmsg(struct socket *so,
4969f8829a4aSRandall Stewart     struct uio *uio,
4970f8829a4aSRandall Stewart     struct mbuf **mp,
4971f8829a4aSRandall Stewart     struct sockaddr *from,
4972f8829a4aSRandall Stewart     int fromlen,
4973f8829a4aSRandall Stewart     int *msg_flags,
4974f8829a4aSRandall Stewart     struct sctp_sndrcvinfo *sinfo,
4975f8829a4aSRandall Stewart     int filling_sinfo)
4976f8829a4aSRandall Stewart {
4977f8829a4aSRandall Stewart 	/*
4978f8829a4aSRandall Stewart 	 * MSG flags we will look at MSG_DONTWAIT - non-blocking IO.
4979f8829a4aSRandall Stewart 	 * MSG_PEEK - Look don't touch :-D (only valid with OUT mbuf copy
4980f8829a4aSRandall Stewart 	 * mp=NULL thus uio is the copy method to userland) MSG_WAITALL - ??
4981f8829a4aSRandall Stewart 	 * On the way out we may send out any combination of:
4982f8829a4aSRandall Stewart 	 * MSG_NOTIFICATION MSG_EOR
4983f8829a4aSRandall Stewart 	 *
4984f8829a4aSRandall Stewart 	 */
4985f8829a4aSRandall Stewart 	struct sctp_inpcb *inp = NULL;
4986f8829a4aSRandall Stewart 	int my_len = 0;
4987f8829a4aSRandall Stewart 	int cp_len = 0, error = 0;
4988f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control = NULL, *ctl = NULL, *nxt = NULL;
498994b0d969SMichael Tuexen 	struct mbuf *m = NULL;
4990f8829a4aSRandall Stewart 	struct sctp_tcb *stcb = NULL;
4991f8829a4aSRandall Stewart 	int wakeup_read_socket = 0;
4992f8829a4aSRandall Stewart 	int freecnt_applied = 0;
4993f8829a4aSRandall Stewart 	int out_flags = 0, in_flags = 0;
4994f8829a4aSRandall Stewart 	int block_allowed = 1;
49954c9179adSRandall Stewart 	uint32_t freed_so_far = 0;
499681aca91aSRandall Stewart 	uint32_t copied_so_far = 0;
499793164cf9SRandall Stewart 	int in_eeor_mode = 0;
4998f8829a4aSRandall Stewart 	int no_rcv_needed = 0;
4999f8829a4aSRandall Stewart 	uint32_t rwnd_req = 0;
5000f8829a4aSRandall Stewart 	int hold_sblock = 0;
5001f8829a4aSRandall Stewart 	int hold_rlock = 0;
500242551e99SRandall Stewart 	int slen = 0;
50034c9179adSRandall Stewart 	uint32_t held_length = 0;
50047abab911SRobert Watson 	int sockbuf_lock = 0;
5005f8829a4aSRandall Stewart 
500617205eccSRandall Stewart 	if (uio == NULL) {
5007c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
500817205eccSRandall Stewart 		return (EINVAL);
500917205eccSRandall Stewart 	}
5010f8829a4aSRandall Stewart 	if (msg_flags) {
5011f8829a4aSRandall Stewart 		in_flags = *msg_flags;
5012c105859eSRandall Stewart 		if (in_flags & MSG_PEEK)
5013c105859eSRandall Stewart 			SCTP_STAT_INCR(sctps_read_peeks);
5014f8829a4aSRandall Stewart 	} else {
5015f8829a4aSRandall Stewart 		in_flags = 0;
5016f8829a4aSRandall Stewart 	}
5017f8829a4aSRandall Stewart 	slen = uio->uio_resid;
501817205eccSRandall Stewart 
5019f8829a4aSRandall Stewart 	/* Pull in and set up our int flags */
5020f8829a4aSRandall Stewart 	if (in_flags & MSG_OOB) {
5021f8829a4aSRandall Stewart 		/* Out of band's NOT supported */
5022f8829a4aSRandall Stewart 		return (EOPNOTSUPP);
5023f8829a4aSRandall Stewart 	}
5024f8829a4aSRandall Stewart 	if ((in_flags & MSG_PEEK) && (mp != NULL)) {
5025c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
5026f8829a4aSRandall Stewart 		return (EINVAL);
5027f8829a4aSRandall Stewart 	}
5028f8829a4aSRandall Stewart 	if ((in_flags & (MSG_DONTWAIT
5029f8829a4aSRandall Stewart 	    | MSG_NBIO
5030f8829a4aSRandall Stewart 	    )) ||
503142551e99SRandall Stewart 	    SCTP_SO_IS_NBIO(so)) {
5032f8829a4aSRandall Stewart 		block_allowed = 0;
5033f8829a4aSRandall Stewart 	}
5034f8829a4aSRandall Stewart 	/* setup the endpoint */
5035f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
5036f8829a4aSRandall Stewart 	if (inp == NULL) {
5037c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EFAULT);
5038f8829a4aSRandall Stewart 		return (EFAULT);
5039f8829a4aSRandall Stewart 	}
504062c1ff9cSRandall Stewart 	rwnd_req = (SCTP_SB_LIMIT_RCV(so) >> SCTP_RWND_HIWAT_SHIFT);
5041f8829a4aSRandall Stewart 	/* Must be at least a MTU's worth */
5042f8829a4aSRandall Stewart 	if (rwnd_req < SCTP_MIN_RWND)
5043f8829a4aSRandall Stewart 		rwnd_req = SCTP_MIN_RWND;
5044f8829a4aSRandall Stewart 	in_eeor_mode = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXPLICIT_EOR);
5045b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5046f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTER,
504717205eccSRandall Stewart 		    rwnd_req, in_eeor_mode, so->so_rcv.sb_cc, uio->uio_resid);
504880fefe0aSRandall Stewart 	}
5049b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5050f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTERPL,
505117205eccSRandall Stewart 		    rwnd_req, block_allowed, so->so_rcv.sb_cc, uio->uio_resid);
505280fefe0aSRandall Stewart 	}
5053265de5bbSRobert Watson 	error = sblock(&so->so_rcv, (block_allowed ? SBL_WAIT : 0));
50547abab911SRobert Watson 	sockbuf_lock = 1;
5055f8829a4aSRandall Stewart 	if (error) {
5056f8829a4aSRandall Stewart 		goto release_unlocked;
5057f8829a4aSRandall Stewart 	}
5058f8829a4aSRandall Stewart restart:
50597abab911SRobert Watson 
5060f8829a4aSRandall Stewart 
5061f8829a4aSRandall Stewart restart_nosblocks:
5062f8829a4aSRandall Stewart 	if (hold_sblock == 0) {
5063f8829a4aSRandall Stewart 		SOCKBUF_LOCK(&so->so_rcv);
5064f8829a4aSRandall Stewart 		hold_sblock = 1;
5065f8829a4aSRandall Stewart 	}
5066f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5067f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5068f8829a4aSRandall Stewart 		goto out;
5069f8829a4aSRandall Stewart 	}
507044b7479bSRandall Stewart 	if (so->so_rcv.sb_state & SBS_CANTRCVMORE) {
5071f8829a4aSRandall Stewart 		if (so->so_error) {
5072f8829a4aSRandall Stewart 			error = so->so_error;
507344b7479bSRandall Stewart 			if ((in_flags & MSG_PEEK) == 0)
507444b7479bSRandall Stewart 				so->so_error = 0;
50759f22f500SRandall Stewart 			goto out;
5076f8829a4aSRandall Stewart 		} else {
50779f22f500SRandall Stewart 			if (so->so_rcv.sb_cc == 0) {
5078c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
50797924093fSRandall Stewart 				/* indicate EOF */
50807924093fSRandall Stewart 				error = 0;
5081f8829a4aSRandall Stewart 				goto out;
5082f8829a4aSRandall Stewart 			}
50839f22f500SRandall Stewart 		}
50849f22f500SRandall Stewart 	}
5085f8829a4aSRandall Stewart 	if ((so->so_rcv.sb_cc <= held_length) && block_allowed) {
5086f8829a4aSRandall Stewart 		/* we need to wait for data */
5087f8829a4aSRandall Stewart 		if ((so->so_rcv.sb_cc == 0) &&
5088f8829a4aSRandall Stewart 		    ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5089f8829a4aSRandall Stewart 		    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL))) {
5090f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0) {
5091f8829a4aSRandall Stewart 				/*
5092f8829a4aSRandall Stewart 				 * For active open side clear flags for
5093f8829a4aSRandall Stewart 				 * re-use passive open is blocked by
5094f8829a4aSRandall Stewart 				 * connect.
5095f8829a4aSRandall Stewart 				 */
5096f8829a4aSRandall Stewart 				if (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED) {
5097f8829a4aSRandall Stewart 					/*
5098f8829a4aSRandall Stewart 					 * You were aborted, passive side
5099f8829a4aSRandall Stewart 					 * always hits here
5100f8829a4aSRandall Stewart 					 */
5101c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
5102f8829a4aSRandall Stewart 					error = ECONNRESET;
5103f8829a4aSRandall Stewart 				}
5104f8829a4aSRandall Stewart 				so->so_state &= ~(SS_ISCONNECTING |
5105f8829a4aSRandall Stewart 				    SS_ISDISCONNECTING |
5106f8829a4aSRandall Stewart 				    SS_ISCONFIRMING |
5107f8829a4aSRandall Stewart 				    SS_ISCONNECTED);
5108f8829a4aSRandall Stewart 				if (error == 0) {
5109f8829a4aSRandall Stewart 					if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) == 0) {
5110c4739e2fSRandall Stewart 						SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
5111f8829a4aSRandall Stewart 						error = ENOTCONN;
5112f8829a4aSRandall Stewart 					}
5113f8829a4aSRandall Stewart 				}
5114f8829a4aSRandall Stewart 				goto out;
5115f8829a4aSRandall Stewart 			}
5116f8829a4aSRandall Stewart 		}
5117f8829a4aSRandall Stewart 		error = sbwait(&so->so_rcv);
5118f8829a4aSRandall Stewart 		if (error) {
5119f8829a4aSRandall Stewart 			goto out;
5120f8829a4aSRandall Stewart 		}
5121f8829a4aSRandall Stewart 		held_length = 0;
5122f8829a4aSRandall Stewart 		goto restart_nosblocks;
5123f8829a4aSRandall Stewart 	} else if (so->so_rcv.sb_cc == 0) {
512444b7479bSRandall Stewart 		if (so->so_error) {
512544b7479bSRandall Stewart 			error = so->so_error;
512644b7479bSRandall Stewart 			if ((in_flags & MSG_PEEK) == 0)
512744b7479bSRandall Stewart 				so->so_error = 0;
512844b7479bSRandall Stewart 		} else {
512944b7479bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
513044b7479bSRandall Stewart 			    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
513144b7479bSRandall Stewart 				if ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0) {
513244b7479bSRandall Stewart 					/*
513344b7479bSRandall Stewart 					 * For active open side clear flags
513444b7479bSRandall Stewart 					 * for re-use passive open is
513544b7479bSRandall Stewart 					 * blocked by connect.
513644b7479bSRandall Stewart 					 */
513744b7479bSRandall Stewart 					if (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED) {
513844b7479bSRandall Stewart 						/*
513944b7479bSRandall Stewart 						 * You were aborted, passive
514044b7479bSRandall Stewart 						 * side always hits here
514144b7479bSRandall Stewart 						 */
5142c4739e2fSRandall Stewart 						SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
514344b7479bSRandall Stewart 						error = ECONNRESET;
514444b7479bSRandall Stewart 					}
514544b7479bSRandall Stewart 					so->so_state &= ~(SS_ISCONNECTING |
514644b7479bSRandall Stewart 					    SS_ISDISCONNECTING |
514744b7479bSRandall Stewart 					    SS_ISCONFIRMING |
514844b7479bSRandall Stewart 					    SS_ISCONNECTED);
514944b7479bSRandall Stewart 					if (error == 0) {
515044b7479bSRandall Stewart 						if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) == 0) {
5151c4739e2fSRandall Stewart 							SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
515244b7479bSRandall Stewart 							error = ENOTCONN;
515344b7479bSRandall Stewart 						}
515444b7479bSRandall Stewart 					}
515544b7479bSRandall Stewart 					goto out;
515644b7479bSRandall Stewart 				}
515744b7479bSRandall Stewart 			}
5158c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EWOULDBLOCK);
5159f8829a4aSRandall Stewart 			error = EWOULDBLOCK;
516044b7479bSRandall Stewart 		}
5161f8829a4aSRandall Stewart 		goto out;
5162f8829a4aSRandall Stewart 	}
5163d06c82f1SRandall Stewart 	if (hold_sblock == 1) {
5164d06c82f1SRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5165d06c82f1SRandall Stewart 		hold_sblock = 0;
5166d06c82f1SRandall Stewart 	}
5167f8829a4aSRandall Stewart 	/* we possibly have data we can read */
51683c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
5169f8829a4aSRandall Stewart 	control = TAILQ_FIRST(&inp->read_queue);
5170f8829a4aSRandall Stewart 	if (control == NULL) {
5171f8829a4aSRandall Stewart 		/*
5172f8829a4aSRandall Stewart 		 * This could be happening since the appender did the
5173f8829a4aSRandall Stewart 		 * increment but as not yet did the tailq insert onto the
5174f8829a4aSRandall Stewart 		 * read_queue
5175f8829a4aSRandall Stewart 		 */
5176f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5177f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5178f8829a4aSRandall Stewart 			hold_rlock = 1;
5179f8829a4aSRandall Stewart 		}
5180f8829a4aSRandall Stewart 		control = TAILQ_FIRST(&inp->read_queue);
5181f8829a4aSRandall Stewart 		if ((control == NULL) && (so->so_rcv.sb_cc != 0)) {
5182a5d547adSRandall Stewart #ifdef INVARIANTS
5183f8829a4aSRandall Stewart 			panic("Huh, its non zero and nothing on control?");
5184f8829a4aSRandall Stewart #endif
5185f8829a4aSRandall Stewart 			so->so_rcv.sb_cc = 0;
5186f8829a4aSRandall Stewart 		}
5187f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5188f8829a4aSRandall Stewart 		hold_rlock = 0;
5189f8829a4aSRandall Stewart 		goto restart;
5190f8829a4aSRandall Stewart 	}
5191f8829a4aSRandall Stewart 	if ((control->length == 0) &&
5192f8829a4aSRandall Stewart 	    (control->do_not_ref_stcb)) {
5193f8829a4aSRandall Stewart 		/*
5194f8829a4aSRandall Stewart 		 * Clean up code for freeing assoc that left behind a
5195f8829a4aSRandall Stewart 		 * pdapi.. maybe a peer in EEOR that just closed after
5196f8829a4aSRandall Stewart 		 * sending and never indicated a EOR.
5197f8829a4aSRandall Stewart 		 */
5198f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5199f8829a4aSRandall Stewart 			hold_rlock = 1;
5200f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5201f8829a4aSRandall Stewart 		}
5202f8829a4aSRandall Stewart 		control->held_length = 0;
5203f8829a4aSRandall Stewart 		if (control->data) {
5204f8829a4aSRandall Stewart 			/* Hmm there is data here .. fix */
52054c9179adSRandall Stewart 			struct mbuf *m_tmp;
5206f8829a4aSRandall Stewart 			int cnt = 0;
5207f8829a4aSRandall Stewart 
52084c9179adSRandall Stewart 			m_tmp = control->data;
52094c9179adSRandall Stewart 			while (m_tmp) {
52104c9179adSRandall Stewart 				cnt += SCTP_BUF_LEN(m_tmp);
52114c9179adSRandall Stewart 				if (SCTP_BUF_NEXT(m_tmp) == NULL) {
52124c9179adSRandall Stewart 					control->tail_mbuf = m_tmp;
5213f8829a4aSRandall Stewart 					control->end_added = 1;
5214f8829a4aSRandall Stewart 				}
52154c9179adSRandall Stewart 				m_tmp = SCTP_BUF_NEXT(m_tmp);
5216f8829a4aSRandall Stewart 			}
5217f8829a4aSRandall Stewart 			control->length = cnt;
5218f8829a4aSRandall Stewart 		} else {
5219f8829a4aSRandall Stewart 			/* remove it */
5220f8829a4aSRandall Stewart 			TAILQ_REMOVE(&inp->read_queue, control, next);
5221f8829a4aSRandall Stewart 			/* Add back any hiddend data */
5222f8829a4aSRandall Stewart 			sctp_free_remote_addr(control->whoFrom);
5223f8829a4aSRandall Stewart 			sctp_free_a_readq(stcb, control);
5224f8829a4aSRandall Stewart 		}
5225f8829a4aSRandall Stewart 		if (hold_rlock) {
5226f8829a4aSRandall Stewart 			hold_rlock = 0;
5227f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5228f8829a4aSRandall Stewart 		}
5229f8829a4aSRandall Stewart 		goto restart;
5230f8829a4aSRandall Stewart 	}
5231810ec536SMichael Tuexen 	if ((control->length == 0) &&
5232810ec536SMichael Tuexen 	    (control->end_added == 1)) {
5233810ec536SMichael Tuexen 		/*
5234810ec536SMichael Tuexen 		 * Do we also need to check for (control->pdapi_aborted ==
5235810ec536SMichael Tuexen 		 * 1)?
5236810ec536SMichael Tuexen 		 */
5237810ec536SMichael Tuexen 		if (hold_rlock == 0) {
5238810ec536SMichael Tuexen 			hold_rlock = 1;
5239810ec536SMichael Tuexen 			SCTP_INP_READ_LOCK(inp);
5240810ec536SMichael Tuexen 		}
5241810ec536SMichael Tuexen 		TAILQ_REMOVE(&inp->read_queue, control, next);
5242810ec536SMichael Tuexen 		if (control->data) {
5243810ec536SMichael Tuexen #ifdef INVARIANTS
5244810ec536SMichael Tuexen 			panic("control->data not null but control->length == 0");
5245810ec536SMichael Tuexen #else
5246810ec536SMichael Tuexen 			SCTP_PRINTF("Strange, data left in the control buffer. Cleaning up.\n");
5247810ec536SMichael Tuexen 			sctp_m_freem(control->data);
5248810ec536SMichael Tuexen 			control->data = NULL;
5249810ec536SMichael Tuexen #endif
5250810ec536SMichael Tuexen 		}
5251810ec536SMichael Tuexen 		if (control->aux_data) {
5252810ec536SMichael Tuexen 			sctp_m_free(control->aux_data);
5253810ec536SMichael Tuexen 			control->aux_data = NULL;
5254810ec536SMichael Tuexen 		}
5255810ec536SMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
5256810ec536SMichael Tuexen 		sctp_free_a_readq(stcb, control);
5257810ec536SMichael Tuexen 		if (hold_rlock) {
5258810ec536SMichael Tuexen 			hold_rlock = 0;
5259810ec536SMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
5260810ec536SMichael Tuexen 		}
5261810ec536SMichael Tuexen 		goto restart;
5262810ec536SMichael Tuexen 	}
5263f8829a4aSRandall Stewart 	if (control->length == 0) {
5264f8829a4aSRandall Stewart 		if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE)) &&
5265f8829a4aSRandall Stewart 		    (filling_sinfo)) {
5266f8829a4aSRandall Stewart 			/* find a more suitable one then this */
5267f8829a4aSRandall Stewart 			ctl = TAILQ_NEXT(control, next);
5268f8829a4aSRandall Stewart 			while (ctl) {
52699a6142d8SRandall Stewart 				if ((ctl->stcb != control->stcb) && (ctl->length) &&
52709a6142d8SRandall Stewart 				    (ctl->some_taken ||
52716114cd96SRandall Stewart 				    (ctl->spec_flags & M_NOTIFICATION) ||
52729a6142d8SRandall Stewart 				    ((ctl->do_not_ref_stcb == 0) &&
52739a6142d8SRandall Stewart 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))
52749a6142d8SRandall Stewart 				    ) {
52759a6142d8SRandall Stewart 					/*-
52769a6142d8SRandall Stewart 					 * If we have a different TCB next, and there is data
52779a6142d8SRandall Stewart 					 * present. If we have already taken some (pdapi), OR we can
52789a6142d8SRandall Stewart 					 * ref the tcb and no delivery as started on this stream, we
527917205eccSRandall Stewart 					 * take it. Note we allow a notification on a different
528017205eccSRandall Stewart 					 * assoc to be delivered..
52819a6142d8SRandall Stewart 					 */
52829a6142d8SRandall Stewart 					control = ctl;
52839a6142d8SRandall Stewart 					goto found_one;
52849a6142d8SRandall Stewart 				} else if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS)) &&
52859a6142d8SRandall Stewart 					    (ctl->length) &&
52869a6142d8SRandall Stewart 					    ((ctl->some_taken) ||
52879a6142d8SRandall Stewart 					    ((ctl->do_not_ref_stcb == 0) &&
528817205eccSRandall Stewart 					    ((ctl->spec_flags & M_NOTIFICATION) == 0) &&
5289b5c16493SMichael Tuexen 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))) {
52909a6142d8SRandall Stewart 					/*-
52919a6142d8SRandall Stewart 					 * If we have the same tcb, and there is data present, and we
52929a6142d8SRandall Stewart 					 * have the strm interleave feature present. Then if we have
52939a6142d8SRandall Stewart 					 * taken some (pdapi) or we can refer to tht tcb AND we have
52949a6142d8SRandall Stewart 					 * not started a delivery for this stream, we can take it.
529517205eccSRandall Stewart 					 * Note we do NOT allow a notificaiton on the same assoc to
529617205eccSRandall Stewart 					 * be delivered.
52979a6142d8SRandall Stewart 					 */
5298f8829a4aSRandall Stewart 					control = ctl;
5299f8829a4aSRandall Stewart 					goto found_one;
5300f8829a4aSRandall Stewart 				}
5301f8829a4aSRandall Stewart 				ctl = TAILQ_NEXT(ctl, next);
5302f8829a4aSRandall Stewart 			}
5303f8829a4aSRandall Stewart 		}
5304f8829a4aSRandall Stewart 		/*
5305f8829a4aSRandall Stewart 		 * if we reach here, not suitable replacement is available
5306f8829a4aSRandall Stewart 		 * <or> fragment interleave is NOT on. So stuff the sb_cc
5307f8829a4aSRandall Stewart 		 * into the our held count, and its time to sleep again.
5308f8829a4aSRandall Stewart 		 */
5309f8829a4aSRandall Stewart 		held_length = so->so_rcv.sb_cc;
5310f8829a4aSRandall Stewart 		control->held_length = so->so_rcv.sb_cc;
5311f8829a4aSRandall Stewart 		goto restart;
5312f8829a4aSRandall Stewart 	}
5313f8829a4aSRandall Stewart 	/* Clear the held length since there is something to read */
5314f8829a4aSRandall Stewart 	control->held_length = 0;
5315f8829a4aSRandall Stewart 	if (hold_rlock) {
5316f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5317f8829a4aSRandall Stewart 		hold_rlock = 0;
5318f8829a4aSRandall Stewart 	}
5319f8829a4aSRandall Stewart found_one:
5320f8829a4aSRandall Stewart 	/*
5321f8829a4aSRandall Stewart 	 * If we reach here, control has a some data for us to read off.
5322f8829a4aSRandall Stewart 	 * Note that stcb COULD be NULL.
5323f8829a4aSRandall Stewart 	 */
53249c04b296SRandall Stewart 	control->some_taken++;
5325f8829a4aSRandall Stewart 	if (hold_sblock) {
5326f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5327f8829a4aSRandall Stewart 		hold_sblock = 0;
5328f8829a4aSRandall Stewart 	}
5329f8829a4aSRandall Stewart 	stcb = control->stcb;
5330f8829a4aSRandall Stewart 	if (stcb) {
53310696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) &&
53320696e120SRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED)) {
533350cec919SRandall Stewart 			if (freecnt_applied == 0)
5334f8829a4aSRandall Stewart 				stcb = NULL;
5335f8829a4aSRandall Stewart 		} else if (control->do_not_ref_stcb == 0) {
5336f8829a4aSRandall Stewart 			/* you can't free it on me please */
5337f8829a4aSRandall Stewart 			/*
5338f8829a4aSRandall Stewart 			 * The lock on the socket buffer protects us so the
5339f8829a4aSRandall Stewart 			 * free code will stop. But since we used the
5340f8829a4aSRandall Stewart 			 * socketbuf lock and the sender uses the tcb_lock
5341f8829a4aSRandall Stewart 			 * to increment, we need to use the atomic add to
5342f8829a4aSRandall Stewart 			 * the refcnt
5343f8829a4aSRandall Stewart 			 */
5344d55b0b1bSRandall Stewart 			if (freecnt_applied) {
5345d55b0b1bSRandall Stewart #ifdef INVARIANTS
5346207304d4SRandall Stewart 				panic("refcnt already incremented");
5347d55b0b1bSRandall Stewart #else
5348d55b0b1bSRandall Stewart 				printf("refcnt already incremented?\n");
5349d55b0b1bSRandall Stewart #endif
5350d55b0b1bSRandall Stewart 			} else {
535150cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5352f8829a4aSRandall Stewart 				freecnt_applied = 1;
5353d55b0b1bSRandall Stewart 			}
5354f8829a4aSRandall Stewart 			/*
5355f8829a4aSRandall Stewart 			 * Setup to remember how much we have not yet told
5356f8829a4aSRandall Stewart 			 * the peer our rwnd has opened up. Note we grab the
5357f8829a4aSRandall Stewart 			 * value from the tcb from last time. Note too that
53580696e120SRandall Stewart 			 * sack sending clears this when a sack is sent,
5359f8829a4aSRandall Stewart 			 * which is fine. Once we hit the rwnd_req, we then
5360f8829a4aSRandall Stewart 			 * will go to the sctp_user_rcvd() that will not
5361f8829a4aSRandall Stewart 			 * lock until it KNOWs it MUST send a WUP-SACK.
5362f8829a4aSRandall Stewart 			 */
5363f8829a4aSRandall Stewart 			freed_so_far = stcb->freed_by_sorcv_sincelast;
5364f8829a4aSRandall Stewart 			stcb->freed_by_sorcv_sincelast = 0;
5365f8829a4aSRandall Stewart 		}
5366f8829a4aSRandall Stewart 	}
53676114cd96SRandall Stewart 	if (stcb &&
53686114cd96SRandall Stewart 	    ((control->spec_flags & M_NOTIFICATION) == 0) &&
53696114cd96SRandall Stewart 	    control->do_not_ref_stcb == 0) {
5370d06c82f1SRandall Stewart 		stcb->asoc.strmin[control->sinfo_stream].delivery_started = 1;
5371d06c82f1SRandall Stewart 	}
5372f8829a4aSRandall Stewart 	/* First lets get off the sinfo and sockaddr info */
5373f8829a4aSRandall Stewart 	if ((sinfo) && filling_sinfo) {
5374f8829a4aSRandall Stewart 		memcpy(sinfo, control, sizeof(struct sctp_nonpad_sndrcvinfo));
5375f8829a4aSRandall Stewart 		nxt = TAILQ_NEXT(control, next);
5376e2e7c62eSMichael Tuexen 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
5377e2e7c62eSMichael Tuexen 		    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) {
5378f8829a4aSRandall Stewart 			struct sctp_extrcvinfo *s_extra;
5379f8829a4aSRandall Stewart 
5380f8829a4aSRandall Stewart 			s_extra = (struct sctp_extrcvinfo *)sinfo;
53819a6142d8SRandall Stewart 			if ((nxt) &&
53829a6142d8SRandall Stewart 			    (nxt->length)) {
53839a6142d8SRandall Stewart 				s_extra->sreinfo_next_flags = SCTP_NEXT_MSG_AVAIL;
5384f8829a4aSRandall Stewart 				if (nxt->sinfo_flags & SCTP_UNORDERED) {
53859a6142d8SRandall Stewart 					s_extra->sreinfo_next_flags |= SCTP_NEXT_MSG_IS_UNORDERED;
5386f8829a4aSRandall Stewart 				}
5387f42a358aSRandall Stewart 				if (nxt->spec_flags & M_NOTIFICATION) {
53889a6142d8SRandall Stewart 					s_extra->sreinfo_next_flags |= SCTP_NEXT_MSG_IS_NOTIFICATION;
5389f42a358aSRandall Stewart 				}
53909a6142d8SRandall Stewart 				s_extra->sreinfo_next_aid = nxt->sinfo_assoc_id;
53919a6142d8SRandall Stewart 				s_extra->sreinfo_next_length = nxt->length;
53929a6142d8SRandall Stewart 				s_extra->sreinfo_next_ppid = nxt->sinfo_ppid;
53939a6142d8SRandall Stewart 				s_extra->sreinfo_next_stream = nxt->sinfo_stream;
5394f8829a4aSRandall Stewart 				if (nxt->tail_mbuf != NULL) {
5395139bc87fSRandall Stewart 					if (nxt->end_added) {
53969a6142d8SRandall Stewart 						s_extra->sreinfo_next_flags |= SCTP_NEXT_MSG_ISCOMPLETE;
5397f8829a4aSRandall Stewart 					}
5398f8829a4aSRandall Stewart 				}
5399f8829a4aSRandall Stewart 			} else {
5400f8829a4aSRandall Stewart 				/*
5401f8829a4aSRandall Stewart 				 * we explicitly 0 this, since the memcpy
5402f8829a4aSRandall Stewart 				 * got some other things beyond the older
5403f8829a4aSRandall Stewart 				 * sinfo_ that is on the control's structure
5404f8829a4aSRandall Stewart 				 * :-D
5405f8829a4aSRandall Stewart 				 */
54069a6142d8SRandall Stewart 				nxt = NULL;
54079a6142d8SRandall Stewart 				s_extra->sreinfo_next_flags = SCTP_NO_NEXT_MSG;
54089a6142d8SRandall Stewart 				s_extra->sreinfo_next_aid = 0;
54099a6142d8SRandall Stewart 				s_extra->sreinfo_next_length = 0;
54109a6142d8SRandall Stewart 				s_extra->sreinfo_next_ppid = 0;
54119a6142d8SRandall Stewart 				s_extra->sreinfo_next_stream = 0;
5412f8829a4aSRandall Stewart 			}
5413f8829a4aSRandall Stewart 		}
5414f8829a4aSRandall Stewart 		/*
5415f8829a4aSRandall Stewart 		 * update off the real current cum-ack, if we have an stcb.
5416f8829a4aSRandall Stewart 		 */
54170696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) && stcb)
5418f8829a4aSRandall Stewart 			sinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn;
5419f8829a4aSRandall Stewart 		/*
5420f8829a4aSRandall Stewart 		 * mask off the high bits, we keep the actual chunk bits in
5421f8829a4aSRandall Stewart 		 * there.
5422f8829a4aSRandall Stewart 		 */
5423f8829a4aSRandall Stewart 		sinfo->sinfo_flags &= 0x00ff;
54245f26a41dSRandall Stewart 		if ((control->sinfo_flags >> 8) & SCTP_DATA_UNORDERED) {
54255f26a41dSRandall Stewart 			sinfo->sinfo_flags |= SCTP_UNORDERED;
54265f26a41dSRandall Stewart 		}
5427f8829a4aSRandall Stewart 	}
542818e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
542918e198d3SRandall Stewart 	{
543018e198d3SRandall Stewart 		int index, newindex;
543118e198d3SRandall Stewart 		struct sctp_pcbtsn_rlog *entry;
543218e198d3SRandall Stewart 
543318e198d3SRandall Stewart 		do {
543418e198d3SRandall Stewart 			index = inp->readlog_index;
543518e198d3SRandall Stewart 			newindex = index + 1;
543618e198d3SRandall Stewart 			if (newindex >= SCTP_READ_LOG_SIZE) {
543718e198d3SRandall Stewart 				newindex = 0;
543818e198d3SRandall Stewart 			}
543918e198d3SRandall Stewart 		} while (atomic_cmpset_int(&inp->readlog_index, index, newindex) == 0);
544018e198d3SRandall Stewart 		entry = &inp->readlog[index];
544118e198d3SRandall Stewart 		entry->vtag = control->sinfo_assoc_id;
544218e198d3SRandall Stewart 		entry->strm = control->sinfo_stream;
544318e198d3SRandall Stewart 		entry->seq = control->sinfo_ssn;
544418e198d3SRandall Stewart 		entry->sz = control->length;
544518e198d3SRandall Stewart 		entry->flgs = control->sinfo_flags;
544618e198d3SRandall Stewart 	}
544718e198d3SRandall Stewart #endif
5448f8829a4aSRandall Stewart 	if (fromlen && from) {
5449f8829a4aSRandall Stewart 		struct sockaddr *to;
5450f8829a4aSRandall Stewart 
545142551e99SRandall Stewart #ifdef INET
5452baf3da66SRandall Stewart 		cp_len = min((size_t)fromlen, (size_t)control->whoFrom->ro._l_addr.sin.sin_len);
5453f8829a4aSRandall Stewart 		memcpy(from, &control->whoFrom->ro._l_addr, cp_len);
5454f8829a4aSRandall Stewart 		((struct sockaddr_in *)from)->sin_port = control->port_from;
5455f8829a4aSRandall Stewart #else
5456f8829a4aSRandall Stewart 		/* No AF_INET use AF_INET6 */
5457baf3da66SRandall Stewart 		cp_len = min((size_t)fromlen, (size_t)control->whoFrom->ro._l_addr.sin6.sin6_len);
5458f8829a4aSRandall Stewart 		memcpy(from, &control->whoFrom->ro._l_addr, cp_len);
5459f8829a4aSRandall Stewart 		((struct sockaddr_in6 *)from)->sin6_port = control->port_from;
5460f8829a4aSRandall Stewart #endif
5461f8829a4aSRandall Stewart 
5462f8829a4aSRandall Stewart 		to = from;
546342551e99SRandall Stewart #if defined(INET) && defined(INET6)
54645e2c2d87SRandall Stewart 		if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) &&
5465f8829a4aSRandall Stewart 		    (to->sa_family == AF_INET) &&
5466f8829a4aSRandall Stewart 		    ((size_t)fromlen >= sizeof(struct sockaddr_in6))) {
5467f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
5468f8829a4aSRandall Stewart 			struct sockaddr_in6 sin6;
5469f8829a4aSRandall Stewart 
5470f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)to;
5471f8829a4aSRandall Stewart 			bzero(&sin6, sizeof(sin6));
5472f8829a4aSRandall Stewart 			sin6.sin6_family = AF_INET6;
5473f8829a4aSRandall Stewart 			sin6.sin6_len = sizeof(struct sockaddr_in6);
5474d6af161aSRandall Stewart 			sin6.sin6_addr.s6_addr32[2] = htonl(0xffff);
5475f8829a4aSRandall Stewart 			bcopy(&sin->sin_addr,
5476d6af161aSRandall Stewart 			    &sin6.sin6_addr.s6_addr32[3],
5477d6af161aSRandall Stewart 			    sizeof(sin6.sin6_addr.s6_addr32[3]));
5478f8829a4aSRandall Stewart 			sin6.sin6_port = sin->sin_port;
5479f8829a4aSRandall Stewart 			memcpy(from, (caddr_t)&sin6, sizeof(sin6));
5480f8829a4aSRandall Stewart 		}
5481f8829a4aSRandall Stewart #endif
548242551e99SRandall Stewart #if defined(INET6)
5483f8829a4aSRandall Stewart 		{
5484f8829a4aSRandall Stewart 			struct sockaddr_in6 lsa6, *to6;
5485f8829a4aSRandall Stewart 
5486f8829a4aSRandall Stewart 			to6 = (struct sockaddr_in6 *)to;
5487f8829a4aSRandall Stewart 			sctp_recover_scope_mac(to6, (&lsa6));
5488f8829a4aSRandall Stewart 		}
5489f8829a4aSRandall Stewart #endif
5490f8829a4aSRandall Stewart 	}
5491f8829a4aSRandall Stewart 	/* now copy out what data we can */
5492f8829a4aSRandall Stewart 	if (mp == NULL) {
5493f8829a4aSRandall Stewart 		/* copy out each mbuf in the chain up to length */
5494f8829a4aSRandall Stewart get_more_data:
5495f8829a4aSRandall Stewart 		m = control->data;
5496f8829a4aSRandall Stewart 		while (m) {
5497f8829a4aSRandall Stewart 			/* Move out all we can */
5498f8829a4aSRandall Stewart 			cp_len = (int)uio->uio_resid;
5499139bc87fSRandall Stewart 			my_len = (int)SCTP_BUF_LEN(m);
5500f8829a4aSRandall Stewart 			if (cp_len > my_len) {
5501f8829a4aSRandall Stewart 				/* not enough in this buf */
5502f8829a4aSRandall Stewart 				cp_len = my_len;
5503f8829a4aSRandall Stewart 			}
5504f8829a4aSRandall Stewart 			if (hold_rlock) {
5505f8829a4aSRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
5506f8829a4aSRandall Stewart 				hold_rlock = 0;
5507f8829a4aSRandall Stewart 			}
5508f8829a4aSRandall Stewart 			if (cp_len > 0)
5509f8829a4aSRandall Stewart 				error = uiomove(mtod(m, char *), cp_len, uio);
5510f8829a4aSRandall Stewart 			/* re-read */
5511f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
5512f8829a4aSRandall Stewart 				goto release;
5513f8829a4aSRandall Stewart 			}
55140696e120SRandall Stewart 			if ((control->do_not_ref_stcb == 0) && stcb &&
5515f8829a4aSRandall Stewart 			    stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5516f8829a4aSRandall Stewart 				no_rcv_needed = 1;
5517f8829a4aSRandall Stewart 			}
5518f8829a4aSRandall Stewart 			if (error) {
5519f8829a4aSRandall Stewart 				/* error we are out of here */
5520f8829a4aSRandall Stewart 				goto release;
5521f8829a4aSRandall Stewart 			}
5522139bc87fSRandall Stewart 			if ((SCTP_BUF_NEXT(m) == NULL) &&
5523139bc87fSRandall Stewart 			    (cp_len >= SCTP_BUF_LEN(m)) &&
5524f8829a4aSRandall Stewart 			    ((control->end_added == 0) ||
55250696e120SRandall Stewart 			    (control->end_added &&
55260696e120SRandall Stewart 			    (TAILQ_NEXT(control, next) == NULL)))
5527f8829a4aSRandall Stewart 			    ) {
5528f8829a4aSRandall Stewart 				SCTP_INP_READ_LOCK(inp);
5529f8829a4aSRandall Stewart 				hold_rlock = 1;
5530f8829a4aSRandall Stewart 			}
5531139bc87fSRandall Stewart 			if (cp_len == SCTP_BUF_LEN(m)) {
5532139bc87fSRandall Stewart 				if ((SCTP_BUF_NEXT(m) == NULL) &&
5533139bc87fSRandall Stewart 				    (control->end_added)) {
5534f8829a4aSRandall Stewart 					out_flags |= MSG_EOR;
553552129fcdSRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
553652129fcdSRandall Stewart 					    (control->stcb != NULL) &&
553752129fcdSRandall Stewart 					    ((control->spec_flags & M_NOTIFICATION) == 0))
5538ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5539f8829a4aSRandall Stewart 				}
5540139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5541f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5542f8829a4aSRandall Stewart 				}
5543f8829a4aSRandall Stewart 				/* we ate up the mbuf */
5544f8829a4aSRandall Stewart 				if (in_flags & MSG_PEEK) {
5545f8829a4aSRandall Stewart 					/* just looking */
5546139bc87fSRandall Stewart 					m = SCTP_BUF_NEXT(m);
5547f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5548f8829a4aSRandall Stewart 				} else {
5549f8829a4aSRandall Stewart 					/* dispose of the mbuf */
5550b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5551f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5552139bc87fSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
555380fefe0aSRandall Stewart 					}
5554f8829a4aSRandall Stewart 					sctp_sbfree(control, stcb, &so->so_rcv, m);
5555b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5556f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5557f8829a4aSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
555880fefe0aSRandall Stewart 					}
5559f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5560f8829a4aSRandall Stewart 					freed_so_far += cp_len;
5561c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
556218e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5563f8829a4aSRandall Stewart 					control->data = sctp_m_free(m);
5564f8829a4aSRandall Stewart 					m = control->data;
5565f8829a4aSRandall Stewart 					/*
5566f8829a4aSRandall Stewart 					 * been through it all, must hold sb
5567f8829a4aSRandall Stewart 					 * lock ok to null tail
5568f8829a4aSRandall Stewart 					 */
5569f8829a4aSRandall Stewart 					if (control->data == NULL) {
5570a5d547adSRandall Stewart #ifdef INVARIANTS
5571f8829a4aSRandall Stewart 						if ((control->end_added == 0) ||
5572f8829a4aSRandall Stewart 						    (TAILQ_NEXT(control, next) == NULL)) {
5573f8829a4aSRandall Stewart 							/*
5574f8829a4aSRandall Stewart 							 * If the end is not
5575f8829a4aSRandall Stewart 							 * added, OR the
5576f8829a4aSRandall Stewart 							 * next is NOT null
5577f8829a4aSRandall Stewart 							 * we MUST have the
5578f8829a4aSRandall Stewart 							 * lock.
5579f8829a4aSRandall Stewart 							 */
5580f8829a4aSRandall Stewart 							if (mtx_owned(&inp->inp_rdata_mtx) == 0) {
5581f8829a4aSRandall Stewart 								panic("Hmm we don't own the lock?");
5582f8829a4aSRandall Stewart 							}
5583f8829a4aSRandall Stewart 						}
5584f8829a4aSRandall Stewart #endif
5585f8829a4aSRandall Stewart 						control->tail_mbuf = NULL;
5586a5d547adSRandall Stewart #ifdef INVARIANTS
5587f8829a4aSRandall Stewart 						if ((control->end_added) && ((out_flags & MSG_EOR) == 0)) {
5588f8829a4aSRandall Stewart 							panic("end_added, nothing left and no MSG_EOR");
5589f8829a4aSRandall Stewart 						}
5590f8829a4aSRandall Stewart #endif
5591f8829a4aSRandall Stewart 					}
5592f8829a4aSRandall Stewart 				}
5593f8829a4aSRandall Stewart 			} else {
5594f8829a4aSRandall Stewart 				/* Do we need to trim the mbuf? */
5595139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5596f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5597f8829a4aSRandall Stewart 				}
5598f8829a4aSRandall Stewart 				if ((in_flags & MSG_PEEK) == 0) {
5599139bc87fSRandall Stewart 					SCTP_BUF_RESV_UF(m, cp_len);
5600139bc87fSRandall Stewart 					SCTP_BUF_LEN(m) -= cp_len;
5601b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5602f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, cp_len);
560380fefe0aSRandall Stewart 					}
5604f8829a4aSRandall Stewart 					atomic_subtract_int(&so->so_rcv.sb_cc, cp_len);
56050696e120SRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
56060696e120SRandall Stewart 					    stcb) {
5607f8829a4aSRandall Stewart 						atomic_subtract_int(&stcb->asoc.sb_cc, cp_len);
5608f8829a4aSRandall Stewart 					}
5609f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5610f8829a4aSRandall Stewart 					freed_so_far += cp_len;
5611c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
5612b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5613f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb,
5614f8829a4aSRandall Stewart 						    SCTP_LOG_SBRESULT, 0);
561580fefe0aSRandall Stewart 					}
561618e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5617f8829a4aSRandall Stewart 				} else {
5618f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5619f8829a4aSRandall Stewart 				}
5620f8829a4aSRandall Stewart 			}
5621d61a0ae0SRandall Stewart 			if ((out_flags & MSG_EOR) || (uio->uio_resid == 0)) {
5622f8829a4aSRandall Stewart 				break;
5623f8829a4aSRandall Stewart 			}
5624f8829a4aSRandall Stewart 			if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5625f8829a4aSRandall Stewart 			    (control->do_not_ref_stcb == 0) &&
5626f8829a4aSRandall Stewart 			    (freed_so_far >= rwnd_req)) {
5627f8829a4aSRandall Stewart 				sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5628f8829a4aSRandall Stewart 			}
5629f8829a4aSRandall Stewart 		}		/* end while(m) */
5630f8829a4aSRandall Stewart 		/*
5631f8829a4aSRandall Stewart 		 * At this point we have looked at it all and we either have
5632f8829a4aSRandall Stewart 		 * a MSG_EOR/or read all the user wants... <OR>
5633f8829a4aSRandall Stewart 		 * control->length == 0.
5634f8829a4aSRandall Stewart 		 */
5635d61a0ae0SRandall Stewart 		if ((out_flags & MSG_EOR) && ((in_flags & MSG_PEEK) == 0)) {
5636f8829a4aSRandall Stewart 			/* we are done with this control */
5637f8829a4aSRandall Stewart 			if (control->length == 0) {
5638f8829a4aSRandall Stewart 				if (control->data) {
5639a5d547adSRandall Stewart #ifdef INVARIANTS
5640f8829a4aSRandall Stewart 					panic("control->data not null at read eor?");
5641f8829a4aSRandall Stewart #else
5642ad81507eSRandall Stewart 					SCTP_PRINTF("Strange, data left in the control buffer .. invarients would panic?\n");
5643f8829a4aSRandall Stewart 					sctp_m_freem(control->data);
5644f8829a4aSRandall Stewart 					control->data = NULL;
5645f8829a4aSRandall Stewart #endif
5646f8829a4aSRandall Stewart 				}
5647f8829a4aSRandall Stewart 		done_with_control:
5648f8829a4aSRandall Stewart 				if (TAILQ_NEXT(control, next) == NULL) {
5649f8829a4aSRandall Stewart 					/*
5650f8829a4aSRandall Stewart 					 * If we don't have a next we need a
5651b201f536SRandall Stewart 					 * lock, if there is a next
5652b201f536SRandall Stewart 					 * interrupt is filling ahead of us
5653b201f536SRandall Stewart 					 * and we don't need a lock to
5654b201f536SRandall Stewart 					 * remove this guy (which is the
5655b201f536SRandall Stewart 					 * head of the queue).
5656f8829a4aSRandall Stewart 					 */
5657f8829a4aSRandall Stewart 					if (hold_rlock == 0) {
5658f8829a4aSRandall Stewart 						SCTP_INP_READ_LOCK(inp);
5659f8829a4aSRandall Stewart 						hold_rlock = 1;
5660f8829a4aSRandall Stewart 					}
5661f8829a4aSRandall Stewart 				}
5662f8829a4aSRandall Stewart 				TAILQ_REMOVE(&inp->read_queue, control, next);
5663f8829a4aSRandall Stewart 				/* Add back any hiddend data */
5664f8829a4aSRandall Stewart 				if (control->held_length) {
5665f8829a4aSRandall Stewart 					held_length = 0;
5666f8829a4aSRandall Stewart 					control->held_length = 0;
5667f8829a4aSRandall Stewart 					wakeup_read_socket = 1;
5668f8829a4aSRandall Stewart 				}
566917205eccSRandall Stewart 				if (control->aux_data) {
567017205eccSRandall Stewart 					sctp_m_free(control->aux_data);
567117205eccSRandall Stewart 					control->aux_data = NULL;
567217205eccSRandall Stewart 				}
5673f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5674f8829a4aSRandall Stewart 				sctp_free_remote_addr(control->whoFrom);
5675f8829a4aSRandall Stewart 				control->data = NULL;
5676f8829a4aSRandall Stewart 				sctp_free_a_readq(stcb, control);
5677f8829a4aSRandall Stewart 				control = NULL;
56780696e120SRandall Stewart 				if ((freed_so_far >= rwnd_req) &&
56790696e120SRandall Stewart 				    (no_rcv_needed == 0))
5680f8829a4aSRandall Stewart 					sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5681f8829a4aSRandall Stewart 
5682f8829a4aSRandall Stewart 			} else {
5683f8829a4aSRandall Stewart 				/*
5684f8829a4aSRandall Stewart 				 * The user did not read all of this
5685f8829a4aSRandall Stewart 				 * message, turn off the returned MSG_EOR
5686f8829a4aSRandall Stewart 				 * since we are leaving more behind on the
5687f8829a4aSRandall Stewart 				 * control to read.
5688f8829a4aSRandall Stewart 				 */
5689a5d547adSRandall Stewart #ifdef INVARIANTS
56900696e120SRandall Stewart 				if (control->end_added &&
56910696e120SRandall Stewart 				    (control->data == NULL) &&
5692f8829a4aSRandall Stewart 				    (control->tail_mbuf == NULL)) {
5693f8829a4aSRandall Stewart 					panic("Gak, control->length is corrupt?");
5694f8829a4aSRandall Stewart 				}
5695f8829a4aSRandall Stewart #endif
5696f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5697f8829a4aSRandall Stewart 				out_flags &= ~MSG_EOR;
5698f8829a4aSRandall Stewart 			}
5699f8829a4aSRandall Stewart 		}
5700f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
5701f8829a4aSRandall Stewart 			goto release;
5702f8829a4aSRandall Stewart 		}
5703f8829a4aSRandall Stewart 		if ((uio->uio_resid == 0) ||
5704f8829a4aSRandall Stewart 		    ((in_eeor_mode) && (copied_so_far >= max(so->so_rcv.sb_lowat, 1)))
5705f8829a4aSRandall Stewart 		    ) {
5706f8829a4aSRandall Stewart 			goto release;
5707f8829a4aSRandall Stewart 		}
5708f8829a4aSRandall Stewart 		/*
5709f8829a4aSRandall Stewart 		 * If I hit here the receiver wants more and this message is
5710f8829a4aSRandall Stewart 		 * NOT done (pd-api). So two questions. Can we block? if not
5711f8829a4aSRandall Stewart 		 * we are done. Did the user NOT set MSG_WAITALL?
5712f8829a4aSRandall Stewart 		 */
5713f8829a4aSRandall Stewart 		if (block_allowed == 0) {
5714f8829a4aSRandall Stewart 			goto release;
5715f8829a4aSRandall Stewart 		}
5716f8829a4aSRandall Stewart 		/*
5717f8829a4aSRandall Stewart 		 * We need to wait for more data a few things: - We don't
5718f8829a4aSRandall Stewart 		 * sbunlock() so we don't get someone else reading. - We
5719f8829a4aSRandall Stewart 		 * must be sure to account for the case where what is added
5720f8829a4aSRandall Stewart 		 * is NOT to our control when we wakeup.
5721f8829a4aSRandall Stewart 		 */
5722f8829a4aSRandall Stewart 
5723f8829a4aSRandall Stewart 		/*
5724f8829a4aSRandall Stewart 		 * Do we need to tell the transport a rwnd update might be
5725f8829a4aSRandall Stewart 		 * needed before we go to sleep?
5726f8829a4aSRandall Stewart 		 */
5727f8829a4aSRandall Stewart 		if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5728f8829a4aSRandall Stewart 		    ((freed_so_far >= rwnd_req) &&
5729f8829a4aSRandall Stewart 		    (control->do_not_ref_stcb == 0) &&
5730f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))) {
5731f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5732f8829a4aSRandall Stewart 		}
5733f8829a4aSRandall Stewart wait_some_more:
573444b7479bSRandall Stewart 		if (so->so_rcv.sb_state & SBS_CANTRCVMORE) {
5735f8829a4aSRandall Stewart 			goto release;
5736f8829a4aSRandall Stewart 		}
5737f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)
5738f8829a4aSRandall Stewart 			goto release;
5739f8829a4aSRandall Stewart 
5740f8829a4aSRandall Stewart 		if (hold_rlock == 1) {
5741f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5742f8829a4aSRandall Stewart 			hold_rlock = 0;
5743f8829a4aSRandall Stewart 		}
5744f8829a4aSRandall Stewart 		if (hold_sblock == 0) {
5745f8829a4aSRandall Stewart 			SOCKBUF_LOCK(&so->so_rcv);
5746f8829a4aSRandall Stewart 			hold_sblock = 1;
5747f8829a4aSRandall Stewart 		}
5748851b7298SRandall Stewart 		if ((copied_so_far) && (control->length == 0) &&
5749b5c16493SMichael Tuexen 		    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE))) {
5750851b7298SRandall Stewart 			goto release;
5751851b7298SRandall Stewart 		}
5752f8829a4aSRandall Stewart 		if (so->so_rcv.sb_cc <= control->held_length) {
5753f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5754f8829a4aSRandall Stewart 			if (error) {
5755f8829a4aSRandall Stewart 				goto release;
5756f8829a4aSRandall Stewart 			}
5757f8829a4aSRandall Stewart 			control->held_length = 0;
5758f8829a4aSRandall Stewart 		}
5759f8829a4aSRandall Stewart 		if (hold_sblock) {
5760f8829a4aSRandall Stewart 			SOCKBUF_UNLOCK(&so->so_rcv);
5761f8829a4aSRandall Stewart 			hold_sblock = 0;
5762f8829a4aSRandall Stewart 		}
5763f8829a4aSRandall Stewart 		if (control->length == 0) {
5764f8829a4aSRandall Stewart 			/* still nothing here */
5765f8829a4aSRandall Stewart 			if (control->end_added == 1) {
5766f8829a4aSRandall Stewart 				/* he aborted, or is done i.e.did a shutdown */
5767f8829a4aSRandall Stewart 				out_flags |= MSG_EOR;
57689a6142d8SRandall Stewart 				if (control->pdapi_aborted) {
57696114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5770ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
57719a6142d8SRandall Stewart 
577203b0b021SRandall Stewart 					out_flags |= MSG_TRUNC;
57739a6142d8SRandall Stewart 				} else {
57746114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5775ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
57769a6142d8SRandall Stewart 				}
5777f8829a4aSRandall Stewart 				goto done_with_control;
5778f8829a4aSRandall Stewart 			}
5779f8829a4aSRandall Stewart 			if (so->so_rcv.sb_cc > held_length) {
5780f8829a4aSRandall Stewart 				control->held_length = so->so_rcv.sb_cc;
5781f8829a4aSRandall Stewart 				held_length = 0;
5782f8829a4aSRandall Stewart 			}
5783f8829a4aSRandall Stewart 			goto wait_some_more;
5784f8829a4aSRandall Stewart 		} else if (control->data == NULL) {
578550cec919SRandall Stewart 			/*
578650cec919SRandall Stewart 			 * we must re-sync since data is probably being
578750cec919SRandall Stewart 			 * added
578850cec919SRandall Stewart 			 */
578950cec919SRandall Stewart 			SCTP_INP_READ_LOCK(inp);
579050cec919SRandall Stewart 			if ((control->length > 0) && (control->data == NULL)) {
579150cec919SRandall Stewart 				/*
579250cec919SRandall Stewart 				 * big trouble.. we have the lock and its
579350cec919SRandall Stewart 				 * corrupt?
579450cec919SRandall Stewart 				 */
57959c04b296SRandall Stewart #ifdef INVARIANTS
5796f8829a4aSRandall Stewart 				panic("Impossible data==NULL length !=0");
57979c04b296SRandall Stewart #endif
57989c04b296SRandall Stewart 				out_flags |= MSG_EOR;
57999c04b296SRandall Stewart 				out_flags |= MSG_TRUNC;
58009c04b296SRandall Stewart 				control->length = 0;
58019c04b296SRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
58029c04b296SRandall Stewart 				goto done_with_control;
5803f8829a4aSRandall Stewart 			}
580450cec919SRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
580550cec919SRandall Stewart 			/* We will fall around to get more data */
580650cec919SRandall Stewart 		}
5807f8829a4aSRandall Stewart 		goto get_more_data;
5808f8829a4aSRandall Stewart 	} else {
580917205eccSRandall Stewart 		/*-
581017205eccSRandall Stewart 		 * Give caller back the mbuf chain,
581117205eccSRandall Stewart 		 * store in uio_resid the length
5812f8829a4aSRandall Stewart 		 */
581317205eccSRandall Stewart 		wakeup_read_socket = 0;
5814f8829a4aSRandall Stewart 		if ((control->end_added == 0) ||
5815f8829a4aSRandall Stewart 		    (TAILQ_NEXT(control, next) == NULL)) {
5816f8829a4aSRandall Stewart 			/* Need to get rlock */
5817f8829a4aSRandall Stewart 			if (hold_rlock == 0) {
5818f8829a4aSRandall Stewart 				SCTP_INP_READ_LOCK(inp);
5819f8829a4aSRandall Stewart 				hold_rlock = 1;
5820f8829a4aSRandall Stewart 			}
5821f8829a4aSRandall Stewart 		}
5822139bc87fSRandall Stewart 		if (control->end_added) {
5823f8829a4aSRandall Stewart 			out_flags |= MSG_EOR;
58246114cd96SRandall Stewart 			if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5825ee7f9857SRandall Stewart 				control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5826f8829a4aSRandall Stewart 		}
5827139bc87fSRandall Stewart 		if (control->spec_flags & M_NOTIFICATION) {
5828f8829a4aSRandall Stewart 			out_flags |= MSG_NOTIFICATION;
5829f8829a4aSRandall Stewart 		}
583017205eccSRandall Stewart 		uio->uio_resid = control->length;
5831f8829a4aSRandall Stewart 		*mp = control->data;
5832f8829a4aSRandall Stewart 		m = control->data;
5833f8829a4aSRandall Stewart 		while (m) {
5834b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5835f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
5836139bc87fSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
583780fefe0aSRandall Stewart 			}
5838f8829a4aSRandall Stewart 			sctp_sbfree(control, stcb, &so->so_rcv, m);
5839139bc87fSRandall Stewart 			freed_so_far += SCTP_BUF_LEN(m);
5840c4739e2fSRandall Stewart 			freed_so_far += MSIZE;
5841b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5842f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
5843f8829a4aSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
584480fefe0aSRandall Stewart 			}
5845139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
5846f8829a4aSRandall Stewart 		}
5847f8829a4aSRandall Stewart 		control->data = control->tail_mbuf = NULL;
5848f8829a4aSRandall Stewart 		control->length = 0;
5849f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
5850f8829a4aSRandall Stewart 			/* Done with this control */
5851f8829a4aSRandall Stewart 			goto done_with_control;
5852f8829a4aSRandall Stewart 		}
5853f8829a4aSRandall Stewart 	}
5854f8829a4aSRandall Stewart release:
5855f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
5856f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5857f8829a4aSRandall Stewart 		hold_rlock = 0;
5858f8829a4aSRandall Stewart 	}
58597abab911SRobert Watson 	if (hold_sblock == 1) {
58607abab911SRobert Watson 		SOCKBUF_UNLOCK(&so->so_rcv);
58617abab911SRobert Watson 		hold_sblock = 0;
5862f8829a4aSRandall Stewart 	}
5863f8829a4aSRandall Stewart 	sbunlock(&so->so_rcv);
58647abab911SRobert Watson 	sockbuf_lock = 0;
5865f8829a4aSRandall Stewart 
5866f8829a4aSRandall Stewart release_unlocked:
5867f8829a4aSRandall Stewart 	if (hold_sblock) {
5868f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5869f8829a4aSRandall Stewart 		hold_sblock = 0;
5870f8829a4aSRandall Stewart 	}
5871f8829a4aSRandall Stewart 	if ((stcb) && (in_flags & MSG_PEEK) == 0) {
5872f8829a4aSRandall Stewart 		if ((freed_so_far >= rwnd_req) &&
5873f8829a4aSRandall Stewart 		    (control && (control->do_not_ref_stcb == 0)) &&
5874f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))
5875f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5876f8829a4aSRandall Stewart 	}
5877f8829a4aSRandall Stewart out:
58781b9f62a0SRandall Stewart 	if (msg_flags) {
58791b9f62a0SRandall Stewart 		*msg_flags = out_flags;
58801b9f62a0SRandall Stewart 	}
58819a6142d8SRandall Stewart 	if (((out_flags & MSG_EOR) == 0) &&
58829a6142d8SRandall Stewart 	    ((in_flags & MSG_PEEK) == 0) &&
58839a6142d8SRandall Stewart 	    (sinfo) &&
5884e2e7c62eSMichael Tuexen 	    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
5885e2e7c62eSMichael Tuexen 	    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO))) {
58869a6142d8SRandall Stewart 		struct sctp_extrcvinfo *s_extra;
58879a6142d8SRandall Stewart 
58889a6142d8SRandall Stewart 		s_extra = (struct sctp_extrcvinfo *)sinfo;
58899a6142d8SRandall Stewart 		s_extra->sreinfo_next_flags = SCTP_NO_NEXT_MSG;
58909a6142d8SRandall Stewart 	}
5891f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
5892f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5893f8829a4aSRandall Stewart 		hold_rlock = 0;
5894f8829a4aSRandall Stewart 	}
5895f8829a4aSRandall Stewart 	if (hold_sblock) {
5896f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5897f8829a4aSRandall Stewart 		hold_sblock = 0;
5898f8829a4aSRandall Stewart 	}
58997abab911SRobert Watson 	if (sockbuf_lock) {
59007abab911SRobert Watson 		sbunlock(&so->so_rcv);
59017abab911SRobert Watson 	}
590250cec919SRandall Stewart 	if (freecnt_applied) {
5903f8829a4aSRandall Stewart 		/*
5904f8829a4aSRandall Stewart 		 * The lock on the socket buffer protects us so the free
5905f8829a4aSRandall Stewart 		 * code will stop. But since we used the socketbuf lock and
5906f8829a4aSRandall Stewart 		 * the sender uses the tcb_lock to increment, we need to use
5907f8829a4aSRandall Stewart 		 * the atomic add to the refcnt.
5908f8829a4aSRandall Stewart 		 */
590950cec919SRandall Stewart 		if (stcb == NULL) {
5910df6e0cc3SRandall Stewart #ifdef INVARIANTS
591150cec919SRandall Stewart 			panic("stcb for refcnt has gone NULL?");
5912df6e0cc3SRandall Stewart 			goto stage_left;
5913df6e0cc3SRandall Stewart #else
5914df6e0cc3SRandall Stewart 			goto stage_left;
5915df6e0cc3SRandall Stewart #endif
591650cec919SRandall Stewart 		}
591750cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
5918f8829a4aSRandall Stewart 		freecnt_applied = 0;
5919f8829a4aSRandall Stewart 		/* Save the value back for next time */
5920f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = freed_so_far;
5921f8829a4aSRandall Stewart 	}
5922b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5923f8829a4aSRandall Stewart 		if (stcb) {
5924f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
5925f8829a4aSRandall Stewart 			    freed_so_far,
5926f8829a4aSRandall Stewart 			    ((uio) ? (slen - uio->uio_resid) : slen),
5927f8829a4aSRandall Stewart 			    stcb->asoc.my_rwnd,
5928f8829a4aSRandall Stewart 			    so->so_rcv.sb_cc);
5929f8829a4aSRandall Stewart 		} else {
5930f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
5931f8829a4aSRandall Stewart 			    freed_so_far,
5932f8829a4aSRandall Stewart 			    ((uio) ? (slen - uio->uio_resid) : slen),
5933f8829a4aSRandall Stewart 			    0,
5934f8829a4aSRandall Stewart 			    so->so_rcv.sb_cc);
5935f8829a4aSRandall Stewart 		}
593680fefe0aSRandall Stewart 	}
5937df6e0cc3SRandall Stewart stage_left:
5938f8829a4aSRandall Stewart 	if (wakeup_read_socket) {
5939f8829a4aSRandall Stewart 		sctp_sorwakeup(inp, so);
5940f8829a4aSRandall Stewart 	}
5941f8829a4aSRandall Stewart 	return (error);
5942f8829a4aSRandall Stewart }
5943f8829a4aSRandall Stewart 
5944f8829a4aSRandall Stewart 
5945f8829a4aSRandall Stewart #ifdef SCTP_MBUF_LOGGING
5946f8829a4aSRandall Stewart struct mbuf *
5947f8829a4aSRandall Stewart sctp_m_free(struct mbuf *m)
5948f8829a4aSRandall Stewart {
5949b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBUF_LOGGING_ENABLE) {
5950139bc87fSRandall Stewart 		if (SCTP_BUF_IS_EXTENDED(m)) {
5951f8829a4aSRandall Stewart 			sctp_log_mb(m, SCTP_MBUF_IFREE);
5952f8829a4aSRandall Stewart 		}
595380fefe0aSRandall Stewart 	}
5954f8829a4aSRandall Stewart 	return (m_free(m));
5955f8829a4aSRandall Stewart }
5956f8829a4aSRandall Stewart 
5957f8829a4aSRandall Stewart void
5958f8829a4aSRandall Stewart sctp_m_freem(struct mbuf *mb)
5959f8829a4aSRandall Stewart {
5960f8829a4aSRandall Stewart 	while (mb != NULL)
5961f8829a4aSRandall Stewart 		mb = sctp_m_free(mb);
5962f8829a4aSRandall Stewart }
5963f8829a4aSRandall Stewart 
5964f8829a4aSRandall Stewart #endif
5965f8829a4aSRandall Stewart 
596642551e99SRandall Stewart int
596742551e99SRandall Stewart sctp_dynamic_set_primary(struct sockaddr *sa, uint32_t vrf_id)
596842551e99SRandall Stewart {
596942551e99SRandall Stewart 	/*
597042551e99SRandall Stewart 	 * Given a local address. For all associations that holds the
597142551e99SRandall Stewart 	 * address, request a peer-set-primary.
597242551e99SRandall Stewart 	 */
597342551e99SRandall Stewart 	struct sctp_ifa *ifa;
597442551e99SRandall Stewart 	struct sctp_laddr *wi;
597542551e99SRandall Stewart 
597642551e99SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, 0);
597742551e99SRandall Stewart 	if (ifa == NULL) {
5978c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EADDRNOTAVAIL);
597942551e99SRandall Stewart 		return (EADDRNOTAVAIL);
598042551e99SRandall Stewart 	}
598142551e99SRandall Stewart 	/*
598242551e99SRandall Stewart 	 * Now that we have the ifa we must awaken the iterator with this
598342551e99SRandall Stewart 	 * message.
598442551e99SRandall Stewart 	 */
5985b3f1ea41SRandall Stewart 	wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
598642551e99SRandall Stewart 	if (wi == NULL) {
5987c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
598842551e99SRandall Stewart 		return (ENOMEM);
598942551e99SRandall Stewart 	}
599042551e99SRandall Stewart 	/* Now incr the count and int wi structure */
599142551e99SRandall Stewart 	SCTP_INCR_LADDR_COUNT();
599242551e99SRandall Stewart 	bzero(wi, sizeof(*wi));
5993d61a0ae0SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
599442551e99SRandall Stewart 	wi->ifa = ifa;
599542551e99SRandall Stewart 	wi->action = SCTP_SET_PRIM_ADDR;
599642551e99SRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
599742551e99SRandall Stewart 
599842551e99SRandall Stewart 	/* Now add it to the work queue */
5999f7517433SRandall Stewart 	SCTP_WQ_ADDR_LOCK();
600042551e99SRandall Stewart 	/*
600142551e99SRandall Stewart 	 * Should this really be a tailq? As it is we will process the
600242551e99SRandall Stewart 	 * newest first :-0
600342551e99SRandall Stewart 	 */
6004b3f1ea41SRandall Stewart 	LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
6005f7517433SRandall Stewart 	SCTP_WQ_ADDR_UNLOCK();
600642551e99SRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
600742551e99SRandall Stewart 	    (struct sctp_inpcb *)NULL,
600842551e99SRandall Stewart 	    (struct sctp_tcb *)NULL,
600942551e99SRandall Stewart 	    (struct sctp_nets *)NULL);
601042551e99SRandall Stewart 	return (0);
601142551e99SRandall Stewart }
601242551e99SRandall Stewart 
601342551e99SRandall Stewart 
6014f8829a4aSRandall Stewart int
601517205eccSRandall Stewart sctp_soreceive(struct socket *so,
601617205eccSRandall Stewart     struct sockaddr **psa,
601717205eccSRandall Stewart     struct uio *uio,
601817205eccSRandall Stewart     struct mbuf **mp0,
601917205eccSRandall Stewart     struct mbuf **controlp,
602017205eccSRandall Stewart     int *flagsp)
6021f8829a4aSRandall Stewart {
6022f8829a4aSRandall Stewart 	int error, fromlen;
6023f8829a4aSRandall Stewart 	uint8_t sockbuf[256];
6024f8829a4aSRandall Stewart 	struct sockaddr *from;
6025f8829a4aSRandall Stewart 	struct sctp_extrcvinfo sinfo;
6026f8829a4aSRandall Stewart 	int filling_sinfo = 1;
6027f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
6028f8829a4aSRandall Stewart 
6029f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
6030f8829a4aSRandall Stewart 	/* pickup the assoc we are reading from */
6031f8829a4aSRandall Stewart 	if (inp == NULL) {
6032c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6033f8829a4aSRandall Stewart 		return (EINVAL);
6034f8829a4aSRandall Stewart 	}
6035e2e7c62eSMichael Tuexen 	if ((sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT) &&
6036e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVRCVINFO) &&
6037e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) ||
6038f8829a4aSRandall Stewart 	    (controlp == NULL)) {
6039f8829a4aSRandall Stewart 		/* user does not want the sndrcv ctl */
6040f8829a4aSRandall Stewart 		filling_sinfo = 0;
6041f8829a4aSRandall Stewart 	}
6042f8829a4aSRandall Stewart 	if (psa) {
6043f8829a4aSRandall Stewart 		from = (struct sockaddr *)sockbuf;
6044f8829a4aSRandall Stewart 		fromlen = sizeof(sockbuf);
6045f8829a4aSRandall Stewart 		from->sa_len = 0;
6046f8829a4aSRandall Stewart 	} else {
6047f8829a4aSRandall Stewart 		from = NULL;
6048f8829a4aSRandall Stewart 		fromlen = 0;
6049f8829a4aSRandall Stewart 	}
6050f8829a4aSRandall Stewart 
6051f8829a4aSRandall Stewart 	error = sctp_sorecvmsg(so, uio, mp0, from, fromlen, flagsp,
6052f8829a4aSRandall Stewart 	    (struct sctp_sndrcvinfo *)&sinfo, filling_sinfo);
6053f8829a4aSRandall Stewart 	if ((controlp) && (filling_sinfo)) {
6054f8829a4aSRandall Stewart 		/* copy back the sinfo in a CMSG format */
6055f8829a4aSRandall Stewart 		if (filling_sinfo)
6056f8829a4aSRandall Stewart 			*controlp = sctp_build_ctl_nchunk(inp,
6057f8829a4aSRandall Stewart 			    (struct sctp_sndrcvinfo *)&sinfo);
6058f8829a4aSRandall Stewart 		else
6059f8829a4aSRandall Stewart 			*controlp = NULL;
6060f8829a4aSRandall Stewart 	}
6061f8829a4aSRandall Stewart 	if (psa) {
6062f8829a4aSRandall Stewart 		/* copy back the address info */
6063f8829a4aSRandall Stewart 		if (from && from->sa_len) {
6064f8829a4aSRandall Stewart 			*psa = sodupsockaddr(from, M_NOWAIT);
6065f8829a4aSRandall Stewart 		} else {
6066f8829a4aSRandall Stewart 			*psa = NULL;
6067f8829a4aSRandall Stewart 		}
6068f8829a4aSRandall Stewart 	}
6069f8829a4aSRandall Stewart 	return (error);
6070f8829a4aSRandall Stewart }
607117205eccSRandall Stewart 
607217205eccSRandall Stewart 
607317205eccSRandall Stewart 
607417205eccSRandall Stewart 
607517205eccSRandall Stewart 
607617205eccSRandall Stewart int
6077d61a0ae0SRandall Stewart sctp_connectx_helper_add(struct sctp_tcb *stcb, struct sockaddr *addr,
6078d61a0ae0SRandall Stewart     int totaddr, int *error)
607917205eccSRandall Stewart {
608017205eccSRandall Stewart 	int added = 0;
608117205eccSRandall Stewart 	int i;
608217205eccSRandall Stewart 	struct sctp_inpcb *inp;
608317205eccSRandall Stewart 	struct sockaddr *sa;
608417205eccSRandall Stewart 	size_t incr = 0;
608517205eccSRandall Stewart 
608692776dfdSMichael Tuexen #ifdef INET
608792776dfdSMichael Tuexen 	struct sockaddr_in *sin;
608892776dfdSMichael Tuexen 
608992776dfdSMichael Tuexen #endif
609092776dfdSMichael Tuexen #ifdef INET6
609192776dfdSMichael Tuexen 	struct sockaddr_in6 *sin6;
609292776dfdSMichael Tuexen 
609392776dfdSMichael Tuexen #endif
609492776dfdSMichael Tuexen 
609517205eccSRandall Stewart 	sa = addr;
609617205eccSRandall Stewart 	inp = stcb->sctp_ep;
609717205eccSRandall Stewart 	*error = 0;
609817205eccSRandall Stewart 	for (i = 0; i < totaddr; i++) {
6099ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6100ea5eba11SMichael Tuexen #ifdef INET
6101ea5eba11SMichael Tuexen 		case AF_INET:
610217205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in);
610392776dfdSMichael Tuexen 			sin = (struct sockaddr_in *)sa;
610492776dfdSMichael Tuexen 			if ((sin->sin_addr.s_addr == INADDR_ANY) ||
610592776dfdSMichael Tuexen 			    (sin->sin_addr.s_addr == INADDR_BROADCAST) ||
610692776dfdSMichael Tuexen 			    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
610792776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
610892776dfdSMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_7);
610992776dfdSMichael Tuexen 				*error = EINVAL;
611092776dfdSMichael Tuexen 				goto out_now;
611192776dfdSMichael Tuexen 			}
6112ca85e948SMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, SCTP_DONOT_SETSCOPE, SCTP_ADDR_IS_CONFIRMED)) {
611317205eccSRandall Stewart 				/* assoc gone no un-lock */
6114c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6115c4739e2fSRandall Stewart 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_7);
611617205eccSRandall Stewart 				*error = ENOBUFS;
611717205eccSRandall Stewart 				goto out_now;
611817205eccSRandall Stewart 			}
611917205eccSRandall Stewart 			added++;
6120ea5eba11SMichael Tuexen 			break;
6121ea5eba11SMichael Tuexen #endif
6122ea5eba11SMichael Tuexen #ifdef INET6
6123ea5eba11SMichael Tuexen 		case AF_INET6:
612417205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in6);
612592776dfdSMichael Tuexen 			sin6 = (struct sockaddr_in6 *)sa;
612692776dfdSMichael Tuexen 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr) ||
612792776dfdSMichael Tuexen 			    IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
612892776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
612992776dfdSMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_8);
613092776dfdSMichael Tuexen 				*error = EINVAL;
613192776dfdSMichael Tuexen 				goto out_now;
613292776dfdSMichael Tuexen 			}
6133ca85e948SMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, SCTP_DONOT_SETSCOPE, SCTP_ADDR_IS_CONFIRMED)) {
613417205eccSRandall Stewart 				/* assoc gone no un-lock */
6135c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6136c4739e2fSRandall Stewart 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_8);
613717205eccSRandall Stewart 				*error = ENOBUFS;
613817205eccSRandall Stewart 				goto out_now;
613917205eccSRandall Stewart 			}
614017205eccSRandall Stewart 			added++;
6141ea5eba11SMichael Tuexen 			break;
6142ea5eba11SMichael Tuexen #endif
6143ea5eba11SMichael Tuexen 		default:
6144ea5eba11SMichael Tuexen 			break;
614517205eccSRandall Stewart 		}
614617205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
614717205eccSRandall Stewart 	}
614817205eccSRandall Stewart out_now:
614917205eccSRandall Stewart 	return (added);
615017205eccSRandall Stewart }
615117205eccSRandall Stewart 
615217205eccSRandall Stewart struct sctp_tcb *
6153d61a0ae0SRandall Stewart sctp_connectx_helper_find(struct sctp_inpcb *inp, struct sockaddr *addr,
6154d61a0ae0SRandall Stewart     int *totaddr, int *num_v4, int *num_v6, int *error,
6155d61a0ae0SRandall Stewart     int limit, int *bad_addr)
615617205eccSRandall Stewart {
615717205eccSRandall Stewart 	struct sockaddr *sa;
615817205eccSRandall Stewart 	struct sctp_tcb *stcb = NULL;
615917205eccSRandall Stewart 	size_t incr, at, i;
616017205eccSRandall Stewart 
616117205eccSRandall Stewart 	at = incr = 0;
616217205eccSRandall Stewart 	sa = addr;
6163ea5eba11SMichael Tuexen 
616417205eccSRandall Stewart 	*error = *num_v6 = *num_v4 = 0;
616517205eccSRandall Stewart 	/* account and validate addresses */
61664c9179adSRandall Stewart 	for (i = 0; i < (size_t)*totaddr; i++) {
6167ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6168ea5eba11SMichael Tuexen #ifdef INET
6169ea5eba11SMichael Tuexen 		case AF_INET:
617017205eccSRandall Stewart 			(*num_v4) += 1;
617117205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in);
6172d61a0ae0SRandall Stewart 			if (sa->sa_len != incr) {
6173c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6174d61a0ae0SRandall Stewart 				*error = EINVAL;
6175d61a0ae0SRandall Stewart 				*bad_addr = 1;
6176d61a0ae0SRandall Stewart 				return (NULL);
6177d61a0ae0SRandall Stewart 			}
6178ea5eba11SMichael Tuexen 			break;
6179ea5eba11SMichael Tuexen #endif
6180ea5eba11SMichael Tuexen #ifdef INET6
6181ea5eba11SMichael Tuexen 		case AF_INET6:
6182ea5eba11SMichael Tuexen 			{
618317205eccSRandall Stewart 				struct sockaddr_in6 *sin6;
618417205eccSRandall Stewart 
618517205eccSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
618617205eccSRandall Stewart 				if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
618717205eccSRandall Stewart 					/* Must be non-mapped for connectx */
6188c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
618917205eccSRandall Stewart 					*error = EINVAL;
6190d61a0ae0SRandall Stewart 					*bad_addr = 1;
619117205eccSRandall Stewart 					return (NULL);
619217205eccSRandall Stewart 				}
619317205eccSRandall Stewart 				(*num_v6) += 1;
619417205eccSRandall Stewart 				incr = sizeof(struct sockaddr_in6);
6195d61a0ae0SRandall Stewart 				if (sa->sa_len != incr) {
6196c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6197d61a0ae0SRandall Stewart 					*error = EINVAL;
6198d61a0ae0SRandall Stewart 					*bad_addr = 1;
6199d61a0ae0SRandall Stewart 					return (NULL);
6200d61a0ae0SRandall Stewart 				}
6201ea5eba11SMichael Tuexen 				break;
6202ea5eba11SMichael Tuexen 			}
6203ea5eba11SMichael Tuexen #endif
6204ea5eba11SMichael Tuexen 		default:
620517205eccSRandall Stewart 			*totaddr = i;
620617205eccSRandall Stewart 			/* we are done */
620717205eccSRandall Stewart 			break;
620817205eccSRandall Stewart 		}
6209ea5eba11SMichael Tuexen 		if (i == (size_t)*totaddr) {
6210ea5eba11SMichael Tuexen 			break;
6211ea5eba11SMichael Tuexen 		}
6212d61a0ae0SRandall Stewart 		SCTP_INP_INCR_REF(inp);
621317205eccSRandall Stewart 		stcb = sctp_findassociation_ep_addr(&inp, sa, NULL, NULL, NULL);
621417205eccSRandall Stewart 		if (stcb != NULL) {
621517205eccSRandall Stewart 			/* Already have or am bring up an association */
621617205eccSRandall Stewart 			return (stcb);
6217d61a0ae0SRandall Stewart 		} else {
6218d61a0ae0SRandall Stewart 			SCTP_INP_DECR_REF(inp);
621917205eccSRandall Stewart 		}
62204c9179adSRandall Stewart 		if ((at + incr) > (size_t)limit) {
622117205eccSRandall Stewart 			*totaddr = i;
622217205eccSRandall Stewart 			break;
622317205eccSRandall Stewart 		}
622417205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
622517205eccSRandall Stewart 	}
622617205eccSRandall Stewart 	return ((struct sctp_tcb *)NULL);
622717205eccSRandall Stewart }
622835918f85SRandall Stewart 
622935918f85SRandall Stewart /*
623035918f85SRandall Stewart  * sctp_bindx(ADD) for one address.
623135918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
623235918f85SRandall Stewart  */
623335918f85SRandall Stewart void
623435918f85SRandall Stewart sctp_bindx_add_address(struct socket *so, struct sctp_inpcb *inp,
623535918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
623635918f85SRandall Stewart     uint32_t vrf_id, int *error, void *p)
623735918f85SRandall Stewart {
623835918f85SRandall Stewart 	struct sockaddr *addr_touse;
62395e2c2d87SRandall Stewart 
62405e2c2d87SRandall Stewart #ifdef INET6
624135918f85SRandall Stewart 	struct sockaddr_in sin;
624235918f85SRandall Stewart 
62435e2c2d87SRandall Stewart #endif
62445e2c2d87SRandall Stewart 
624535918f85SRandall Stewart 	/* see if we're bound all already! */
624635918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6247c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
624835918f85SRandall Stewart 		*error = EINVAL;
624935918f85SRandall Stewart 		return;
625035918f85SRandall Stewart 	}
625135918f85SRandall Stewart 	addr_touse = sa;
6252ea5eba11SMichael Tuexen #ifdef INET6
625335918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
625435918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
625535918f85SRandall Stewart 
625635918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6257c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
625835918f85SRandall Stewart 			*error = EINVAL;
625935918f85SRandall Stewart 			return;
626035918f85SRandall Stewart 		}
6261db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6262db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6263c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6264db4fd95bSRandall Stewart 			*error = EINVAL;
6265db4fd95bSRandall Stewart 			return;
6266db4fd95bSRandall Stewart 		}
626735918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
626835918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6269db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6270db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6271db4fd95bSRandall Stewart 				/* can't bind v4-mapped on PF_INET sockets */
6272c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6273db4fd95bSRandall Stewart 				*error = EINVAL;
6274db4fd95bSRandall Stewart 				return;
6275db4fd95bSRandall Stewart 			}
627635918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
627735918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
627835918f85SRandall Stewart 		}
627935918f85SRandall Stewart 	}
628035918f85SRandall Stewart #endif
6281ea5eba11SMichael Tuexen #ifdef INET
628235918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
628335918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6284c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
628535918f85SRandall Stewart 			*error = EINVAL;
628635918f85SRandall Stewart 			return;
628735918f85SRandall Stewart 		}
6288db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6289db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6290db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6291c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6292db4fd95bSRandall Stewart 			*error = EINVAL;
6293db4fd95bSRandall Stewart 			return;
6294db4fd95bSRandall Stewart 		}
629535918f85SRandall Stewart 	}
6296ea5eba11SMichael Tuexen #endif
629735918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
629835918f85SRandall Stewart 		if (p == NULL) {
629935918f85SRandall Stewart 			/* Can't get proc for Net/Open BSD */
6300c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
630135918f85SRandall Stewart 			*error = EINVAL;
630235918f85SRandall Stewart 			return;
630335918f85SRandall Stewart 		}
63041b649582SRandall Stewart 		*error = sctp_inpcb_bind(so, addr_touse, NULL, p);
630535918f85SRandall Stewart 		return;
630635918f85SRandall Stewart 	}
630735918f85SRandall Stewart 	/*
630835918f85SRandall Stewart 	 * No locks required here since bind and mgmt_ep_sa all do their own
630935918f85SRandall Stewart 	 * locking. If we do something for the FIX: below we may need to
631035918f85SRandall Stewart 	 * lock in that case.
631135918f85SRandall Stewart 	 */
631235918f85SRandall Stewart 	if (assoc_id == 0) {
631335918f85SRandall Stewart 		/* add the address */
631435918f85SRandall Stewart 		struct sctp_inpcb *lep;
631597c76f10SRandall Stewart 		struct sockaddr_in *lsin = (struct sockaddr_in *)addr_touse;
631635918f85SRandall Stewart 
631797c76f10SRandall Stewart 		/* validate the incoming port */
631897c76f10SRandall Stewart 		if ((lsin->sin_port != 0) &&
631997c76f10SRandall Stewart 		    (lsin->sin_port != inp->sctp_lport)) {
6320c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
632197c76f10SRandall Stewart 			*error = EINVAL;
632297c76f10SRandall Stewart 			return;
632397c76f10SRandall Stewart 		} else {
632497c76f10SRandall Stewart 			/* user specified 0 port, set it to existing port */
632597c76f10SRandall Stewart 			lsin->sin_port = inp->sctp_lport;
632697c76f10SRandall Stewart 		}
632797c76f10SRandall Stewart 
632835918f85SRandall Stewart 		lep = sctp_pcb_findep(addr_touse, 1, 0, vrf_id);
632935918f85SRandall Stewart 		if (lep != NULL) {
633035918f85SRandall Stewart 			/*
633135918f85SRandall Stewart 			 * We must decrement the refcount since we have the
633235918f85SRandall Stewart 			 * ep already and are binding. No remove going on
633335918f85SRandall Stewart 			 * here.
633435918f85SRandall Stewart 			 */
63356d9e8f2bSRandall Stewart 			SCTP_INP_DECR_REF(lep);
633635918f85SRandall Stewart 		}
633735918f85SRandall Stewart 		if (lep == inp) {
633835918f85SRandall Stewart 			/* already bound to it.. ok */
633935918f85SRandall Stewart 			return;
634035918f85SRandall Stewart 		} else if (lep == NULL) {
634135918f85SRandall Stewart 			((struct sockaddr_in *)addr_touse)->sin_port = 0;
634235918f85SRandall Stewart 			*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
634335918f85SRandall Stewart 			    SCTP_ADD_IP_ADDRESS,
634480fefe0aSRandall Stewart 			    vrf_id, NULL);
634535918f85SRandall Stewart 		} else {
634635918f85SRandall Stewart 			*error = EADDRINUSE;
634735918f85SRandall Stewart 		}
634835918f85SRandall Stewart 		if (*error)
634935918f85SRandall Stewart 			return;
635035918f85SRandall Stewart 	} else {
635135918f85SRandall Stewart 		/*
635235918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
635335918f85SRandall Stewart 		 */
635435918f85SRandall Stewart 	}
635535918f85SRandall Stewart }
635635918f85SRandall Stewart 
635735918f85SRandall Stewart /*
635835918f85SRandall Stewart  * sctp_bindx(DELETE) for one address.
635935918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
636035918f85SRandall Stewart  */
636135918f85SRandall Stewart void
636235918f85SRandall Stewart sctp_bindx_delete_address(struct socket *so, struct sctp_inpcb *inp,
636335918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
636435918f85SRandall Stewart     uint32_t vrf_id, int *error)
636535918f85SRandall Stewart {
636635918f85SRandall Stewart 	struct sockaddr *addr_touse;
63675e2c2d87SRandall Stewart 
63685e2c2d87SRandall Stewart #ifdef INET6
636935918f85SRandall Stewart 	struct sockaddr_in sin;
637035918f85SRandall Stewart 
63715e2c2d87SRandall Stewart #endif
63725e2c2d87SRandall Stewart 
637335918f85SRandall Stewart 	/* see if we're bound all already! */
637435918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6375c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
637635918f85SRandall Stewart 		*error = EINVAL;
637735918f85SRandall Stewart 		return;
637835918f85SRandall Stewart 	}
637935918f85SRandall Stewart 	addr_touse = sa;
6380fc14de76SRandall Stewart #if defined(INET6) && !defined(__Userspace__)	/* TODO port in6_sin6_2_sin */
638135918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
638235918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
638335918f85SRandall Stewart 
638435918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6385c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
638635918f85SRandall Stewart 			*error = EINVAL;
638735918f85SRandall Stewart 			return;
638835918f85SRandall Stewart 		}
6389db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6390db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6391c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6392db4fd95bSRandall Stewart 			*error = EINVAL;
6393db4fd95bSRandall Stewart 			return;
6394db4fd95bSRandall Stewart 		}
639535918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
639635918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6397db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6398db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6399db4fd95bSRandall Stewart 				/* can't bind mapped-v4 on PF_INET sockets */
6400c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6401db4fd95bSRandall Stewart 				*error = EINVAL;
6402db4fd95bSRandall Stewart 				return;
6403db4fd95bSRandall Stewart 			}
640435918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
640535918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
640635918f85SRandall Stewart 		}
640735918f85SRandall Stewart 	}
640835918f85SRandall Stewart #endif
6409ea5eba11SMichael Tuexen #ifdef INET
641035918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
641135918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6412c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
641335918f85SRandall Stewart 			*error = EINVAL;
641435918f85SRandall Stewart 			return;
641535918f85SRandall Stewart 		}
6416db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6417db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6418db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6419c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6420db4fd95bSRandall Stewart 			*error = EINVAL;
6421db4fd95bSRandall Stewart 			return;
6422db4fd95bSRandall Stewart 		}
642335918f85SRandall Stewart 	}
6424ea5eba11SMichael Tuexen #endif
642535918f85SRandall Stewart 	/*
642635918f85SRandall Stewart 	 * No lock required mgmt_ep_sa does its own locking. If the FIX:
642735918f85SRandall Stewart 	 * below is ever changed we may need to lock before calling
642835918f85SRandall Stewart 	 * association level binding.
642935918f85SRandall Stewart 	 */
643035918f85SRandall Stewart 	if (assoc_id == 0) {
643135918f85SRandall Stewart 		/* delete the address */
643235918f85SRandall Stewart 		*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
643335918f85SRandall Stewart 		    SCTP_DEL_IP_ADDRESS,
643480fefe0aSRandall Stewart 		    vrf_id, NULL);
643535918f85SRandall Stewart 	} else {
643635918f85SRandall Stewart 		/*
643735918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
643835918f85SRandall Stewart 		 */
643935918f85SRandall Stewart 	}
644035918f85SRandall Stewart }
64411b649582SRandall Stewart 
64421b649582SRandall Stewart /*
64431b649582SRandall Stewart  * returns the valid local address count for an assoc, taking into account
64441b649582SRandall Stewart  * all scoping rules
64451b649582SRandall Stewart  */
64461b649582SRandall Stewart int
64471b649582SRandall Stewart sctp_local_addr_count(struct sctp_tcb *stcb)
64481b649582SRandall Stewart {
64491b649582SRandall Stewart 	int loopback_scope, ipv4_local_scope, local_scope, site_scope;
64501b649582SRandall Stewart 	int ipv4_addr_legal, ipv6_addr_legal;
64511b649582SRandall Stewart 	struct sctp_vrf *vrf;
64521b649582SRandall Stewart 	struct sctp_ifn *sctp_ifn;
64531b649582SRandall Stewart 	struct sctp_ifa *sctp_ifa;
64541b649582SRandall Stewart 	int count = 0;
64551b649582SRandall Stewart 
64561b649582SRandall Stewart 	/* Turn on all the appropriate scopes */
64571b649582SRandall Stewart 	loopback_scope = stcb->asoc.loopback_scope;
64581b649582SRandall Stewart 	ipv4_local_scope = stcb->asoc.ipv4_local_scope;
64591b649582SRandall Stewart 	local_scope = stcb->asoc.local_scope;
64601b649582SRandall Stewart 	site_scope = stcb->asoc.site_scope;
64611b649582SRandall Stewart 	ipv4_addr_legal = ipv6_addr_legal = 0;
64621b649582SRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
64631b649582SRandall Stewart 		ipv6_addr_legal = 1;
64641b649582SRandall Stewart 		if (SCTP_IPV6_V6ONLY(stcb->sctp_ep) == 0) {
64651b649582SRandall Stewart 			ipv4_addr_legal = 1;
64661b649582SRandall Stewart 		}
64671b649582SRandall Stewart 	} else {
64681b649582SRandall Stewart 		ipv4_addr_legal = 1;
64691b649582SRandall Stewart 	}
64701b649582SRandall Stewart 
6471c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
64721b649582SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
64731b649582SRandall Stewart 	if (vrf == NULL) {
64741b649582SRandall Stewart 		/* no vrf, no addresses */
6475c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
64761b649582SRandall Stewart 		return (0);
64771b649582SRandall Stewart 	}
64781b649582SRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
64791b649582SRandall Stewart 		/*
64801b649582SRandall Stewart 		 * bound all case: go through all ifns on the vrf
64811b649582SRandall Stewart 		 */
64821b649582SRandall Stewart 		LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
64831b649582SRandall Stewart 			if ((loopback_scope == 0) &&
64841b649582SRandall Stewart 			    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
64851b649582SRandall Stewart 				continue;
64861b649582SRandall Stewart 			}
64871b649582SRandall Stewart 			LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
64881b649582SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa))
64891b649582SRandall Stewart 					continue;
64905e2c2d87SRandall Stewart 				switch (sctp_ifa->address.sa.sa_family) {
6491ea5eba11SMichael Tuexen #ifdef INET
64925e2c2d87SRandall Stewart 				case AF_INET:
64935e2c2d87SRandall Stewart 					if (ipv4_addr_legal) {
64941b649582SRandall Stewart 						struct sockaddr_in *sin;
64951b649582SRandall Stewart 
64961b649582SRandall Stewart 						sin = (struct sockaddr_in *)&sctp_ifa->address.sa;
64971b649582SRandall Stewart 						if (sin->sin_addr.s_addr == 0) {
64985e2c2d87SRandall Stewart 							/*
64995e2c2d87SRandall Stewart 							 * skip unspecified
65005e2c2d87SRandall Stewart 							 * addrs
65015e2c2d87SRandall Stewart 							 */
65021b649582SRandall Stewart 							continue;
65031b649582SRandall Stewart 						}
65041b649582SRandall Stewart 						if ((ipv4_local_scope == 0) &&
65051b649582SRandall Stewart 						    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
65061b649582SRandall Stewart 							continue;
65071b649582SRandall Stewart 						}
65081b649582SRandall Stewart 						/* count this one */
65091b649582SRandall Stewart 						count++;
65105e2c2d87SRandall Stewart 					} else {
65115e2c2d87SRandall Stewart 						continue;
65125e2c2d87SRandall Stewart 					}
65135e2c2d87SRandall Stewart 					break;
6514ea5eba11SMichael Tuexen #endif
65155e2c2d87SRandall Stewart #ifdef INET6
65165e2c2d87SRandall Stewart 				case AF_INET6:
65175e2c2d87SRandall Stewart 					if (ipv6_addr_legal) {
65181b649582SRandall Stewart 						struct sockaddr_in6 *sin6;
65191b649582SRandall Stewart 
65201b649582SRandall Stewart 						sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa;
65211b649582SRandall Stewart 						if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
65221b649582SRandall Stewart 							continue;
65231b649582SRandall Stewart 						}
65241b649582SRandall Stewart 						if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
65251b649582SRandall Stewart 							if (local_scope == 0)
65261b649582SRandall Stewart 								continue;
65271b649582SRandall Stewart 							if (sin6->sin6_scope_id == 0) {
65281b649582SRandall Stewart 								if (sa6_recoverscope(sin6) != 0)
65291b649582SRandall Stewart 									/*
65305e2c2d87SRandall Stewart 									 *
65315e2c2d87SRandall Stewart 									 * bad
65325e2c2d87SRandall Stewart 									 *
65335e2c2d87SRandall Stewart 									 * li
65345e2c2d87SRandall Stewart 									 * nk
65355e2c2d87SRandall Stewart 									 *
65365e2c2d87SRandall Stewart 									 * loc
65375e2c2d87SRandall Stewart 									 * al
65385e2c2d87SRandall Stewart 									 *
65395e2c2d87SRandall Stewart 									 * add
65405e2c2d87SRandall Stewart 									 * re
65415e2c2d87SRandall Stewart 									 * ss
65425e2c2d87SRandall Stewart 									 * */
65431b649582SRandall Stewart 									continue;
65441b649582SRandall Stewart 							}
65451b649582SRandall Stewart 						}
65461b649582SRandall Stewart 						if ((site_scope == 0) &&
65471b649582SRandall Stewart 						    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
65481b649582SRandall Stewart 							continue;
65491b649582SRandall Stewart 						}
65501b649582SRandall Stewart 						/* count this one */
65511b649582SRandall Stewart 						count++;
65521b649582SRandall Stewart 					}
65535e2c2d87SRandall Stewart 					break;
65545e2c2d87SRandall Stewart #endif
65555e2c2d87SRandall Stewart 				default:
65565e2c2d87SRandall Stewart 					/* TSNH */
65575e2c2d87SRandall Stewart 					break;
65585e2c2d87SRandall Stewart 				}
65591b649582SRandall Stewart 			}
65601b649582SRandall Stewart 		}
65611b649582SRandall Stewart 	} else {
65621b649582SRandall Stewart 		/*
65631b649582SRandall Stewart 		 * subset bound case
65641b649582SRandall Stewart 		 */
65651b649582SRandall Stewart 		struct sctp_laddr *laddr;
65661b649582SRandall Stewart 
65671b649582SRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list,
65681b649582SRandall Stewart 		    sctp_nxt_addr) {
65691b649582SRandall Stewart 			if (sctp_is_addr_restricted(stcb, laddr->ifa)) {
65701b649582SRandall Stewart 				continue;
65711b649582SRandall Stewart 			}
65721b649582SRandall Stewart 			/* count this one */
65731b649582SRandall Stewart 			count++;
65741b649582SRandall Stewart 		}
65751b649582SRandall Stewart 	}
6576c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
65771b649582SRandall Stewart 	return (count);
65781b649582SRandall Stewart }
6579c4739e2fSRandall Stewart 
6580c4739e2fSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF)
6581c4739e2fSRandall Stewart 
6582c4739e2fSRandall Stewart void
6583b27a6b7dSRandall Stewart sctp_log_trace(uint32_t subsys, const char *str SCTP_UNUSED, uint32_t a, uint32_t b, uint32_t c, uint32_t d, uint32_t e, uint32_t f)
6584c4739e2fSRandall Stewart {
6585b27a6b7dSRandall Stewart 	uint32_t saveindex, newindex;
6586c4739e2fSRandall Stewart 
6587c4739e2fSRandall Stewart 	do {
6588b3f1ea41SRandall Stewart 		saveindex = SCTP_BASE_SYSCTL(sctp_log).index;
6589c4739e2fSRandall Stewart 		if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6590c4739e2fSRandall Stewart 			newindex = 1;
6591c4739e2fSRandall Stewart 		} else {
6592c4739e2fSRandall Stewart 			newindex = saveindex + 1;
6593c4739e2fSRandall Stewart 		}
6594b3f1ea41SRandall Stewart 	} while (atomic_cmpset_int(&SCTP_BASE_SYSCTL(sctp_log).index, saveindex, newindex) == 0);
6595c4739e2fSRandall Stewart 	if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6596c4739e2fSRandall Stewart 		saveindex = 0;
6597c4739e2fSRandall Stewart 	}
6598b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].timestamp = SCTP_GET_CYCLECOUNT;
6599b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].subsys = subsys;
6600b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[0] = a;
6601b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[1] = b;
6602b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[2] = c;
6603b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[3] = d;
6604b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[4] = e;
6605b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[5] = f;
6606c4739e2fSRandall Stewart }
6607c4739e2fSRandall Stewart 
6608c4739e2fSRandall Stewart #endif
6609ea5eba11SMichael Tuexen /* XXX: Remove the #ifdef after tunneling over IPv6 works also on FreeBSD. */
6610ea5eba11SMichael Tuexen #ifdef INET
6611c54a18d2SRandall Stewart /* We will need to add support
6612c54a18d2SRandall Stewart  * to bind the ports and such here
6613c54a18d2SRandall Stewart  * so we can do UDP tunneling. In
6614c54a18d2SRandall Stewart  * the mean-time, we return error
6615c54a18d2SRandall Stewart  */
6616a99b6783SRandall Stewart #include <netinet/udp.h>
6617a99b6783SRandall Stewart #include <netinet/udp_var.h>
6618a99b6783SRandall Stewart #include <sys/proc.h>
6619a1f2f7a5SRandall Stewart #ifdef INET6
6620a99b6783SRandall Stewart #include <netinet6/sctp6_var.h>
6621a1f2f7a5SRandall Stewart #endif
6622a99b6783SRandall Stewart 
6623a99b6783SRandall Stewart static void
6624a99b6783SRandall Stewart sctp_recv_udp_tunneled_packet(struct mbuf *m, int off, struct inpcb *ignored)
6625a99b6783SRandall Stewart {
6626a99b6783SRandall Stewart 	struct ip *iph;
6627a99b6783SRandall Stewart 	struct mbuf *sp, *last;
6628a99b6783SRandall Stewart 	struct udphdr *uhdr;
6629e6194c2eSMichael Tuexen 	uint16_t port = 0;
6630a99b6783SRandall Stewart 	int header_size = sizeof(struct udphdr) + sizeof(struct sctphdr);
6631a99b6783SRandall Stewart 
6632a99b6783SRandall Stewart 	/*
6633a99b6783SRandall Stewart 	 * Split out the mbuf chain. Leave the IP header in m, place the
6634a99b6783SRandall Stewart 	 * rest in the sp.
6635a99b6783SRandall Stewart 	 */
6636a99b6783SRandall Stewart 	if ((m->m_flags & M_PKTHDR) == 0) {
6637a99b6783SRandall Stewart 		/* Can't handle one that is not a pkt hdr */
6638a99b6783SRandall Stewart 		goto out;
6639a99b6783SRandall Stewart 	}
6640a99b6783SRandall Stewart 	/* pull the src port */
6641a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6642a99b6783SRandall Stewart 	uhdr = (struct udphdr *)((caddr_t)iph + off);
6643a99b6783SRandall Stewart 
6644a99b6783SRandall Stewart 	port = uhdr->uh_sport;
6645a99b6783SRandall Stewart 	sp = m_split(m, off, M_DONTWAIT);
6646a99b6783SRandall Stewart 	if (sp == NULL) {
6647a99b6783SRandall Stewart 		/* Gak, drop packet, we can't do a split */
6648a99b6783SRandall Stewart 		goto out;
6649a99b6783SRandall Stewart 	}
6650a99b6783SRandall Stewart 	if (sp->m_pkthdr.len < header_size) {
6651a99b6783SRandall Stewart 		/* Gak, packet can't have an SCTP header in it - to small */
6652a99b6783SRandall Stewart 		m_freem(sp);
6653a99b6783SRandall Stewart 		goto out;
6654a99b6783SRandall Stewart 	}
6655a99b6783SRandall Stewart 	/* ok now pull up the UDP header and SCTP header together */
6656a99b6783SRandall Stewart 	sp = m_pullup(sp, header_size);
6657a99b6783SRandall Stewart 	if (sp == NULL) {
6658a99b6783SRandall Stewart 		/* Gak pullup failed */
6659a99b6783SRandall Stewart 		goto out;
6660a99b6783SRandall Stewart 	}
6661a99b6783SRandall Stewart 	/* trim out the UDP header */
6662a99b6783SRandall Stewart 	m_adj(sp, sizeof(struct udphdr));
6663a99b6783SRandall Stewart 
6664a99b6783SRandall Stewart 	/* Now reconstruct the mbuf chain */
6665a99b6783SRandall Stewart 	/* 1) find last one */
6666a99b6783SRandall Stewart 	last = m;
6667a99b6783SRandall Stewart 	while (last->m_next != NULL) {
6668a99b6783SRandall Stewart 		last = last->m_next;
6669a99b6783SRandall Stewart 	}
6670a99b6783SRandall Stewart 	last->m_next = sp;
6671a99b6783SRandall Stewart 	m->m_pkthdr.len += sp->m_pkthdr.len;
6672a99b6783SRandall Stewart 	last = m;
6673a99b6783SRandall Stewart 	while (last != NULL) {
6674a99b6783SRandall Stewart 		last = last->m_next;
6675a99b6783SRandall Stewart 	}
6676a99b6783SRandall Stewart 	/* Now its ready for sctp_input or sctp6_input */
6677a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6678a99b6783SRandall Stewart 	switch (iph->ip_v) {
6679e6194c2eSMichael Tuexen #ifdef INET
6680a99b6783SRandall Stewart 	case IPVERSION:
6681a99b6783SRandall Stewart 		{
6682e6194c2eSMichael Tuexen 			uint16_t len;
6683e6194c2eSMichael Tuexen 
6684a99b6783SRandall Stewart 			/* its IPv4 */
6685a99b6783SRandall Stewart 			len = SCTP_GET_IPV4_LENGTH(iph);
6686a99b6783SRandall Stewart 			len -= sizeof(struct udphdr);
6687a99b6783SRandall Stewart 			SCTP_GET_IPV4_LENGTH(iph) = len;
6688a99b6783SRandall Stewart 			sctp_input_with_port(m, off, port);
6689a99b6783SRandall Stewart 			break;
6690a99b6783SRandall Stewart 		}
6691e6194c2eSMichael Tuexen #endif
6692a99b6783SRandall Stewart #ifdef INET6
6693a99b6783SRandall Stewart 	case IPV6_VERSION >> 4:
6694a99b6783SRandall Stewart 		{
6695a99b6783SRandall Stewart 			/* its IPv6 - NOT supported */
6696a99b6783SRandall Stewart 			goto out;
6697a99b6783SRandall Stewart 			break;
6698a99b6783SRandall Stewart 
6699a99b6783SRandall Stewart 		}
6700a99b6783SRandall Stewart #endif
6701a99b6783SRandall Stewart 	default:
6702a99b6783SRandall Stewart 		{
6703a99b6783SRandall Stewart 			m_freem(m);
6704a99b6783SRandall Stewart 			break;
6705a99b6783SRandall Stewart 		}
6706a99b6783SRandall Stewart 	}
6707a99b6783SRandall Stewart 	return;
6708a99b6783SRandall Stewart out:
6709a99b6783SRandall Stewart 	m_freem(m);
6710a99b6783SRandall Stewart }
6711c54a18d2SRandall Stewart 
6712c54a18d2SRandall Stewart void
6713c54a18d2SRandall Stewart sctp_over_udp_stop(void)
6714c54a18d2SRandall Stewart {
6715a99b6783SRandall Stewart 	struct socket *sop;
6716a99b6783SRandall Stewart 
6717a99b6783SRandall Stewart 	/*
6718a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
6719a99b6783SRandall Stewart 	 * for writting!
6720a99b6783SRandall Stewart 	 */
6721a99b6783SRandall Stewart 	if (SCTP_BASE_INFO(udp_tun_socket) == NULL) {
6722a99b6783SRandall Stewart 		/* Nothing to do */
6723c54a18d2SRandall Stewart 		return;
6724c54a18d2SRandall Stewart 	}
6725a99b6783SRandall Stewart 	sop = SCTP_BASE_INFO(udp_tun_socket);
6726a99b6783SRandall Stewart 	soclose(sop);
6727a99b6783SRandall Stewart 	SCTP_BASE_INFO(udp_tun_socket) = NULL;
6728a99b6783SRandall Stewart }
6729ea5eba11SMichael Tuexen 
6730c54a18d2SRandall Stewart int
6731c54a18d2SRandall Stewart sctp_over_udp_start(void)
6732c54a18d2SRandall Stewart {
6733a99b6783SRandall Stewart 	uint16_t port;
6734a99b6783SRandall Stewart 	int ret;
6735a99b6783SRandall Stewart 	struct sockaddr_in sin;
6736a99b6783SRandall Stewart 	struct socket *sop = NULL;
6737a99b6783SRandall Stewart 	struct thread *th;
6738a99b6783SRandall Stewart 	struct ucred *cred;
6739a99b6783SRandall Stewart 
6740a99b6783SRandall Stewart 	/*
6741a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
6742a99b6783SRandall Stewart 	 * for writting!
6743a99b6783SRandall Stewart 	 */
6744a99b6783SRandall Stewart 	port = SCTP_BASE_SYSCTL(sctp_udp_tunneling_port);
6745a99b6783SRandall Stewart 	if (port == 0) {
6746a99b6783SRandall Stewart 		/* Must have a port set */
6747a99b6783SRandall Stewart 		return (EINVAL);
6748a99b6783SRandall Stewart 	}
6749a99b6783SRandall Stewart 	if (SCTP_BASE_INFO(udp_tun_socket) != NULL) {
6750a99b6783SRandall Stewart 		/* Already running -- must stop first */
6751a99b6783SRandall Stewart 		return (EALREADY);
6752a99b6783SRandall Stewart 	}
6753a99b6783SRandall Stewart 	th = curthread;
6754a99b6783SRandall Stewart 	cred = th->td_ucred;
6755a99b6783SRandall Stewart 	if ((ret = socreate(PF_INET, &sop,
6756a99b6783SRandall Stewart 	    SOCK_DGRAM, IPPROTO_UDP, cred, th))) {
6757a99b6783SRandall Stewart 		return (ret);
6758a99b6783SRandall Stewart 	}
6759a99b6783SRandall Stewart 	SCTP_BASE_INFO(udp_tun_socket) = sop;
6760a99b6783SRandall Stewart 	/* call the special UDP hook */
6761a99b6783SRandall Stewart 	ret = udp_set_kernel_tunneling(sop, sctp_recv_udp_tunneled_packet);
6762a99b6783SRandall Stewart 	if (ret) {
6763a99b6783SRandall Stewart 		goto exit_stage_left;
6764a99b6783SRandall Stewart 	}
6765a99b6783SRandall Stewart 	/* Ok we have a socket, bind it to the port */
6766a99b6783SRandall Stewart 	memset(&sin, 0, sizeof(sin));
6767a99b6783SRandall Stewart 	sin.sin_len = sizeof(sin);
6768a99b6783SRandall Stewart 	sin.sin_family = AF_INET;
6769a99b6783SRandall Stewart 	sin.sin_port = htons(port);
6770a99b6783SRandall Stewart 	ret = sobind(sop, (struct sockaddr *)&sin, th);
6771a99b6783SRandall Stewart 	if (ret) {
6772a99b6783SRandall Stewart 		/* Close up we cant get the port */
6773a99b6783SRandall Stewart exit_stage_left:
6774a99b6783SRandall Stewart 		sctp_over_udp_stop();
6775a99b6783SRandall Stewart 		return (ret);
6776a99b6783SRandall Stewart 	}
6777a99b6783SRandall Stewart 	/*
6778a99b6783SRandall Stewart 	 * Ok we should now get UDP packets directly to our input routine
6779a99b6783SRandall Stewart 	 * sctp_recv_upd_tunneled_packet().
6780a99b6783SRandall Stewart 	 */
6781a99b6783SRandall Stewart 	return (0);
6782c54a18d2SRandall Stewart }
6783ea5eba11SMichael Tuexen 
6784ea5eba11SMichael Tuexen #endif
6785