xref: /freebsd/sys/netinet/sctputil.c (revision 8a3cfbff92b3dced3cde69af4bced05f56f3f5ee)
1f8829a4aSRandall Stewart /*-
251369649SPedro F. Giffuni  * SPDX-License-Identifier: BSD-3-Clause
351369649SPedro F. Giffuni  *
4830d754dSRandall Stewart  * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved.
5807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
6807aad63SMichael Tuexen  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
7f8829a4aSRandall Stewart  *
8f8829a4aSRandall Stewart  * Redistribution and use in source and binary forms, with or without
9f8829a4aSRandall Stewart  * modification, are permitted provided that the following conditions are met:
10f8829a4aSRandall Stewart  *
11f8829a4aSRandall Stewart  * a) Redistributions of source code must retain the above copyright notice,
12f8829a4aSRandall Stewart  *    this list of conditions and the following disclaimer.
13f8829a4aSRandall Stewart  *
14f8829a4aSRandall Stewart  * b) Redistributions in binary form must reproduce the above copyright
15f8829a4aSRandall Stewart  *    notice, this list of conditions and the following disclaimer in
16f8829a4aSRandall Stewart  *    the documentation and/or other materials provided with the distribution.
17f8829a4aSRandall Stewart  *
18f8829a4aSRandall Stewart  * c) Neither the name of Cisco Systems, Inc. nor the names of its
19f8829a4aSRandall Stewart  *    contributors may be used to endorse or promote products derived
20f8829a4aSRandall Stewart  *    from this software without specific prior written permission.
21f8829a4aSRandall Stewart  *
22f8829a4aSRandall Stewart  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23f8829a4aSRandall Stewart  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
24f8829a4aSRandall Stewart  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25f8829a4aSRandall Stewart  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26f8829a4aSRandall Stewart  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27f8829a4aSRandall Stewart  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28f8829a4aSRandall Stewart  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29f8829a4aSRandall Stewart  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30f8829a4aSRandall Stewart  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31f8829a4aSRandall Stewart  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32f8829a4aSRandall Stewart  * THE POSSIBILITY OF SUCH DAMAGE.
33f8829a4aSRandall Stewart  */
34f8829a4aSRandall Stewart 
35f8829a4aSRandall Stewart #include <sys/cdefs.h>
36f8829a4aSRandall Stewart __FBSDID("$FreeBSD$");
37f8829a4aSRandall Stewart 
38f8829a4aSRandall Stewart #include <netinet/sctp_os.h>
39f8829a4aSRandall Stewart #include <netinet/sctp_pcb.h>
40f8829a4aSRandall Stewart #include <netinet/sctputil.h>
41f8829a4aSRandall Stewart #include <netinet/sctp_var.h>
4242551e99SRandall Stewart #include <netinet/sctp_sysctl.h>
43f8829a4aSRandall Stewart #ifdef INET6
443a51a264SMichael Tuexen #include <netinet6/sctp6_var.h>
45f8829a4aSRandall Stewart #endif
46f8829a4aSRandall Stewart #include <netinet/sctp_header.h>
47f8829a4aSRandall Stewart #include <netinet/sctp_output.h>
48f8829a4aSRandall Stewart #include <netinet/sctp_uio.h>
49f8829a4aSRandall Stewart #include <netinet/sctp_timer.h>
5046bf534cSMichael Tuexen #include <netinet/sctp_indata.h>
51f8829a4aSRandall Stewart #include <netinet/sctp_auth.h>
52f8829a4aSRandall Stewart #include <netinet/sctp_asconf.h>
53f7517433SRandall Stewart #include <netinet/sctp_bsd_addr.h>
5410e0318aSMichael Tuexen #if defined(INET6) || defined(INET)
5510e0318aSMichael Tuexen #include <netinet/tcp_var.h>
5610e0318aSMichael Tuexen #endif
573a51a264SMichael Tuexen #include <netinet/udp.h>
583a51a264SMichael Tuexen #include <netinet/udp_var.h>
591e88cc8bSMichael Tuexen #include <netinet/in_kdtrace.h>
603a51a264SMichael Tuexen #include <sys/proc.h>
61fd7af143SMichael Tuexen #ifdef INET6
62fd7af143SMichael Tuexen #include <netinet/icmp6.h>
63fd7af143SMichael Tuexen #endif
64f8829a4aSRandall Stewart 
65f8829a4aSRandall Stewart 
66b9e7085aSRandall Stewart #ifndef KTR_SCTP
67b9e7085aSRandall Stewart #define KTR_SCTP KTR_SUBSYS
6880fefe0aSRandall Stewart #endif
69f8829a4aSRandall Stewart 
70ed654363SMichael Tuexen extern const struct sctp_cc_functions sctp_cc_functions[];
71ed654363SMichael Tuexen extern const struct sctp_ss_functions sctp_ss_functions[];
720e9a9c10SMichael Tuexen 
73f8829a4aSRandall Stewart void
74dcb68fbaSMichael Tuexen sctp_sblog(struct sockbuf *sb, struct sctp_tcb *stcb, int from, int incr)
75f8829a4aSRandall Stewart {
76c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
77c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
78f8829a4aSRandall Stewart 
7980fefe0aSRandall Stewart 	sctp_clog.x.sb.stcb = stcb;
804e88d37aSMichael Tuexen 	sctp_clog.x.sb.so_sbcc = sb->sb_cc;
81f8829a4aSRandall Stewart 	if (stcb)
824e88d37aSMichael Tuexen 		sctp_clog.x.sb.stcb_sbcc = stcb->asoc.sb_cc;
83f8829a4aSRandall Stewart 	else
8480fefe0aSRandall Stewart 		sctp_clog.x.sb.stcb_sbcc = 0;
8580fefe0aSRandall Stewart 	sctp_clog.x.sb.incr = incr;
86c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
8780fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SB,
8880fefe0aSRandall Stewart 	    from,
8980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
9080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
9180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
9280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
93c692df45SMichael Tuexen #endif
94f8829a4aSRandall Stewart }
95f8829a4aSRandall Stewart 
96f8829a4aSRandall Stewart void
97f8829a4aSRandall Stewart sctp_log_closing(struct sctp_inpcb *inp, struct sctp_tcb *stcb, int16_t loc)
98f8829a4aSRandall Stewart {
99c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
100c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
101f8829a4aSRandall Stewart 
10280fefe0aSRandall Stewart 	sctp_clog.x.close.inp = (void *)inp;
10380fefe0aSRandall Stewart 	sctp_clog.x.close.sctp_flags = inp->sctp_flags;
104f8829a4aSRandall Stewart 	if (stcb) {
10580fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = (void *)stcb;
10680fefe0aSRandall Stewart 		sctp_clog.x.close.state = (uint16_t)stcb->asoc.state;
107f8829a4aSRandall Stewart 	} else {
10880fefe0aSRandall Stewart 		sctp_clog.x.close.stcb = 0;
10980fefe0aSRandall Stewart 		sctp_clog.x.close.state = 0;
110f8829a4aSRandall Stewart 	}
11180fefe0aSRandall Stewart 	sctp_clog.x.close.loc = loc;
112c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
11380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CLOSE,
11480fefe0aSRandall Stewart 	    0,
11580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
11680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
11780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
11880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
119c692df45SMichael Tuexen #endif
120f8829a4aSRandall Stewart }
121f8829a4aSRandall Stewart 
122f8829a4aSRandall Stewart void
123f8829a4aSRandall Stewart rto_logging(struct sctp_nets *net, int from)
124f8829a4aSRandall Stewart {
125c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
126c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
127f8829a4aSRandall Stewart 
128bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
12980fefe0aSRandall Stewart 	sctp_clog.x.rto.net = (void *)net;
130be1d9176SMichael Tuexen 	sctp_clog.x.rto.rtt = net->rtt / 1000;
131c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
13280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RTT,
13380fefe0aSRandall Stewart 	    from,
13480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
13580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
13680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
13780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
138c692df45SMichael Tuexen #endif
139f8829a4aSRandall Stewart }
140f8829a4aSRandall Stewart 
141f8829a4aSRandall Stewart void
1426a91f103SRandall Stewart sctp_log_strm_del_alt(struct sctp_tcb *stcb, uint32_t tsn, uint16_t sseq, uint16_t stream, int from)
143f8829a4aSRandall Stewart {
144c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
145c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
146f8829a4aSRandall Stewart 
14780fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = stcb;
14880fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = tsn;
14980fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_sseq = sseq;
15080fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_tsn = 0;
15180fefe0aSRandall Stewart 	sctp_clog.x.strlog.e_sseq = 0;
15280fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = stream;
153c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
15480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
15580fefe0aSRandall Stewart 	    from,
15680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
15780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
15880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
15980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
160c692df45SMichael Tuexen #endif
161f8829a4aSRandall Stewart }
162f8829a4aSRandall Stewart 
163f8829a4aSRandall Stewart void
164f8829a4aSRandall Stewart sctp_log_nagle_event(struct sctp_tcb *stcb, int action)
165f8829a4aSRandall Stewart {
166c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
167c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
168f8829a4aSRandall Stewart 
16980fefe0aSRandall Stewart 	sctp_clog.x.nagle.stcb = (void *)stcb;
17080fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_flight = stcb->asoc.total_flight;
17180fefe0aSRandall Stewart 	sctp_clog.x.nagle.total_in_queue = stcb->asoc.total_output_queue_size;
17280fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_queue = stcb->asoc.chunks_on_out_queue;
17380fefe0aSRandall Stewart 	sctp_clog.x.nagle.count_in_flight = stcb->asoc.total_flight_count;
174c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
17580fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_NAGLE,
17680fefe0aSRandall Stewart 	    action,
17780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
17880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
17980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
18080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
181c692df45SMichael Tuexen #endif
182f8829a4aSRandall Stewart }
183f8829a4aSRandall Stewart 
184f8829a4aSRandall Stewart void
185f8829a4aSRandall Stewart sctp_log_sack(uint32_t old_cumack, uint32_t cumack, uint32_t tsn, uint16_t gaps, uint16_t dups, int from)
186f8829a4aSRandall Stewart {
187c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
188c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
189f8829a4aSRandall Stewart 
19080fefe0aSRandall Stewart 	sctp_clog.x.sack.cumack = cumack;
19180fefe0aSRandall Stewart 	sctp_clog.x.sack.oldcumack = old_cumack;
19280fefe0aSRandall Stewart 	sctp_clog.x.sack.tsn = tsn;
19380fefe0aSRandall Stewart 	sctp_clog.x.sack.numGaps = gaps;
19480fefe0aSRandall Stewart 	sctp_clog.x.sack.numDups = dups;
195c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
19680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_SACK,
19780fefe0aSRandall Stewart 	    from,
19880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
19980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
20080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
20180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
202c692df45SMichael Tuexen #endif
203f8829a4aSRandall Stewart }
204f8829a4aSRandall Stewart 
205f8829a4aSRandall Stewart void
206f8829a4aSRandall Stewart sctp_log_map(uint32_t map, uint32_t cum, uint32_t high, int from)
207f8829a4aSRandall Stewart {
208c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
209c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
210f8829a4aSRandall Stewart 
211bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
21280fefe0aSRandall Stewart 	sctp_clog.x.map.base = map;
21380fefe0aSRandall Stewart 	sctp_clog.x.map.cum = cum;
21480fefe0aSRandall Stewart 	sctp_clog.x.map.high = high;
215c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
21680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAP,
21780fefe0aSRandall Stewart 	    from,
21880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
21980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
22080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
22180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
222c692df45SMichael Tuexen #endif
223f8829a4aSRandall Stewart }
224f8829a4aSRandall Stewart 
225f8829a4aSRandall Stewart void
226dcb68fbaSMichael Tuexen sctp_log_fr(uint32_t biggest_tsn, uint32_t biggest_new_tsn, uint32_t tsn, int from)
227f8829a4aSRandall Stewart {
228c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
229c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
230f8829a4aSRandall Stewart 
231bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
23280fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_tsn = biggest_tsn;
23380fefe0aSRandall Stewart 	sctp_clog.x.fr.largest_new_tsn = biggest_new_tsn;
23480fefe0aSRandall Stewart 	sctp_clog.x.fr.tsn = tsn;
235c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
23680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_FR,
23780fefe0aSRandall Stewart 	    from,
23880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
23980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
24080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
24180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
242c692df45SMichael Tuexen #endif
243f8829a4aSRandall Stewart }
244f8829a4aSRandall Stewart 
2454be807c4SMichael Tuexen #ifdef SCTP_MBUF_LOGGING
246f8829a4aSRandall Stewart void
247f8829a4aSRandall Stewart sctp_log_mb(struct mbuf *m, int from)
248f8829a4aSRandall Stewart {
249c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
250c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
251f8829a4aSRandall Stewart 
25280fefe0aSRandall Stewart 	sctp_clog.x.mb.mp = m;
25380fefe0aSRandall Stewart 	sctp_clog.x.mb.mbuf_flags = (uint8_t)(SCTP_BUF_GET_FLAGS(m));
25480fefe0aSRandall Stewart 	sctp_clog.x.mb.size = (uint16_t)(SCTP_BUF_LEN(m));
25580fefe0aSRandall Stewart 	sctp_clog.x.mb.data = SCTP_BUF_AT(m, 0);
256139bc87fSRandall Stewart 	if (SCTP_BUF_IS_EXTENDED(m)) {
25780fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = SCTP_BUF_EXTEND_BASE(m);
25880fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = (uint8_t)(SCTP_BUF_EXTEND_REFCNT(m));
259f8829a4aSRandall Stewart 	} else {
26080fefe0aSRandall Stewart 		sctp_clog.x.mb.ext = 0;
26180fefe0aSRandall Stewart 		sctp_clog.x.mb.refcnt = 0;
262f8829a4aSRandall Stewart 	}
263c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
26480fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBUF,
26580fefe0aSRandall Stewart 	    from,
26680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
26780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
26880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
26980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
270c692df45SMichael Tuexen #endif
271f8829a4aSRandall Stewart }
272f8829a4aSRandall Stewart 
273f8829a4aSRandall Stewart void
2744be807c4SMichael Tuexen sctp_log_mbc(struct mbuf *m, int from)
2754be807c4SMichael Tuexen {
2764be807c4SMichael Tuexen 	struct mbuf *mat;
2774be807c4SMichael Tuexen 
2784be807c4SMichael Tuexen 	for (mat = m; mat; mat = SCTP_BUF_NEXT(mat)) {
2794be807c4SMichael Tuexen 		sctp_log_mb(mat, from);
2804be807c4SMichael Tuexen 	}
2814be807c4SMichael Tuexen }
2824be807c4SMichael Tuexen #endif
2834be807c4SMichael Tuexen 
2844be807c4SMichael Tuexen void
285dcb68fbaSMichael Tuexen sctp_log_strm_del(struct sctp_queued_to_read *control, struct sctp_queued_to_read *poschk, int from)
286f8829a4aSRandall Stewart {
287c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
288c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
289f8829a4aSRandall Stewart 
290f8829a4aSRandall Stewart 	if (control == NULL) {
291ad81507eSRandall Stewart 		SCTP_PRINTF("Gak log of NULL?\n");
292f8829a4aSRandall Stewart 		return;
293f8829a4aSRandall Stewart 	}
29480fefe0aSRandall Stewart 	sctp_clog.x.strlog.stcb = control->stcb;
29580fefe0aSRandall Stewart 	sctp_clog.x.strlog.n_tsn = control->sinfo_tsn;
29649656eefSMichael Tuexen 	sctp_clog.x.strlog.n_sseq = (uint16_t)control->mid;
29780fefe0aSRandall Stewart 	sctp_clog.x.strlog.strm = control->sinfo_stream;
298f8829a4aSRandall Stewart 	if (poschk != NULL) {
29980fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = poschk->sinfo_tsn;
30049656eefSMichael Tuexen 		sctp_clog.x.strlog.e_sseq = (uint16_t)poschk->mid;
301f8829a4aSRandall Stewart 	} else {
30280fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_tsn = 0;
30380fefe0aSRandall Stewart 		sctp_clog.x.strlog.e_sseq = 0;
304f8829a4aSRandall Stewart 	}
305c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
30680fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_STRM,
30780fefe0aSRandall Stewart 	    from,
30880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
30980fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
31080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
31180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
312c692df45SMichael Tuexen #endif
313f8829a4aSRandall Stewart }
314f8829a4aSRandall Stewart 
315f8829a4aSRandall Stewart void
316f8829a4aSRandall Stewart sctp_log_cwnd(struct sctp_tcb *stcb, struct sctp_nets *net, int augment, uint8_t from)
317f8829a4aSRandall Stewart {
318c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
319c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
320f8829a4aSRandall Stewart 
32180fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
322f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
32380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
324f8829a4aSRandall Stewart 	else
32580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
326f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
32780fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
328f8829a4aSRandall Stewart 	else
32980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
330f8829a4aSRandall Stewart 
331f8829a4aSRandall Stewart 	if (net) {
33280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cwnd_new_value = net->cwnd;
33380fefe0aSRandall Stewart 		sctp_clog.x.cwnd.inflight = net->flight_size;
33480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.pseudo_cumack = net->pseudo_cumack;
33580fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = net->new_pseudo_cumack;
33680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.need_new_pseudo_cumack = net->find_pseudo_cumack;
337f8829a4aSRandall Stewart 	}
338f8829a4aSRandall Stewart 	if (SCTP_CWNDLOG_PRESEND == from) {
33980fefe0aSRandall Stewart 		sctp_clog.x.cwnd.meets_pseudo_cumack = stcb->asoc.peers_rwnd;
340f8829a4aSRandall Stewart 	}
34180fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = augment;
342c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
34380fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_CWND,
34480fefe0aSRandall Stewart 	    from,
34580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
34680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
34780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
34880fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
349c692df45SMichael Tuexen #endif
350f8829a4aSRandall Stewart }
351f8829a4aSRandall Stewart 
352f8829a4aSRandall Stewart void
353f8829a4aSRandall Stewart sctp_log_lock(struct sctp_inpcb *inp, struct sctp_tcb *stcb, uint8_t from)
354f8829a4aSRandall Stewart {
355c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
356c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
357f8829a4aSRandall Stewart 
358bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
35903b0b021SRandall Stewart 	if (inp) {
36080fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)inp->sctp_socket;
36103b0b021SRandall Stewart 
36203b0b021SRandall Stewart 	} else {
36380fefe0aSRandall Stewart 		sctp_clog.x.lock.sock = (void *)NULL;
36403b0b021SRandall Stewart 	}
36580fefe0aSRandall Stewart 	sctp_clog.x.lock.inp = (void *)inp;
366f8829a4aSRandall Stewart 	if (stcb) {
36780fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = mtx_owned(&stcb->tcb_mtx);
368f8829a4aSRandall Stewart 	} else {
36980fefe0aSRandall Stewart 		sctp_clog.x.lock.tcb_lock = SCTP_LOCK_UNKNOWN;
370f8829a4aSRandall Stewart 	}
371f8829a4aSRandall Stewart 	if (inp) {
37280fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = mtx_owned(&inp->inp_mtx);
37380fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = mtx_owned(&inp->inp_create_mtx);
374f8829a4aSRandall Stewart 	} else {
37580fefe0aSRandall Stewart 		sctp_clog.x.lock.inp_lock = SCTP_LOCK_UNKNOWN;
37680fefe0aSRandall Stewart 		sctp_clog.x.lock.create_lock = SCTP_LOCK_UNKNOWN;
377f8829a4aSRandall Stewart 	}
378b3f1ea41SRandall Stewart 	sctp_clog.x.lock.info_lock = rw_wowned(&SCTP_BASE_INFO(ipi_ep_mtx));
37952129fcdSRandall Stewart 	if (inp && (inp->sctp_socket)) {
38080fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
38180fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = mtx_owned(&(inp->sctp_socket->so_rcv.sb_mtx));
38280fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = mtx_owned(&(inp->sctp_socket->so_snd.sb_mtx));
383f8829a4aSRandall Stewart 	} else {
38480fefe0aSRandall Stewart 		sctp_clog.x.lock.sock_lock = SCTP_LOCK_UNKNOWN;
38580fefe0aSRandall Stewart 		sctp_clog.x.lock.sockrcvbuf_lock = SCTP_LOCK_UNKNOWN;
38680fefe0aSRandall Stewart 		sctp_clog.x.lock.socksndbuf_lock = SCTP_LOCK_UNKNOWN;
387f8829a4aSRandall Stewart 	}
388c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
38980fefe0aSRandall Stewart 	    SCTP_LOG_LOCK_EVENT,
39080fefe0aSRandall Stewart 	    from,
39180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
39280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
39380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
39480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
395c692df45SMichael Tuexen #endif
396f8829a4aSRandall Stewart }
397f8829a4aSRandall Stewart 
398f8829a4aSRandall Stewart void
399f8829a4aSRandall Stewart sctp_log_maxburst(struct sctp_tcb *stcb, struct sctp_nets *net, int error, int burst, uint8_t from)
400f8829a4aSRandall Stewart {
401c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
402c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
403f8829a4aSRandall Stewart 
404bfefd190SRandall Stewart 	memset(&sctp_clog, 0, sizeof(sctp_clog));
40580fefe0aSRandall Stewart 	sctp_clog.x.cwnd.net = net;
40680fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_new_value = error;
40780fefe0aSRandall Stewart 	sctp_clog.x.cwnd.inflight = net->flight_size;
40880fefe0aSRandall Stewart 	sctp_clog.x.cwnd.cwnd_augment = burst;
409f8829a4aSRandall Stewart 	if (stcb->asoc.send_queue_cnt > 255)
41080fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = 255;
411f8829a4aSRandall Stewart 	else
41280fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_send = stcb->asoc.send_queue_cnt;
413f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt > 255)
41480fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = 255;
415f8829a4aSRandall Stewart 	else
41680fefe0aSRandall Stewart 		sctp_clog.x.cwnd.cnt_in_str = stcb->asoc.stream_queue_cnt;
417c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
41880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MAXBURST,
41980fefe0aSRandall Stewart 	    from,
42080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
42180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
42280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
42380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
424c692df45SMichael Tuexen #endif
425f8829a4aSRandall Stewart }
426f8829a4aSRandall Stewart 
427f8829a4aSRandall Stewart void
428f8829a4aSRandall Stewart sctp_log_rwnd(uint8_t from, uint32_t peers_rwnd, uint32_t snd_size, uint32_t overhead)
429f8829a4aSRandall Stewart {
430c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
431c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
432f8829a4aSRandall Stewart 
43380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
43480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = snd_size;
43580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
43680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = 0;
437c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
43880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
43980fefe0aSRandall Stewart 	    from,
44080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
44180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
44280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
44380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
444c692df45SMichael Tuexen #endif
445f8829a4aSRandall Stewart }
446f8829a4aSRandall Stewart 
447f8829a4aSRandall Stewart void
448f8829a4aSRandall Stewart sctp_log_rwnd_set(uint8_t from, uint32_t peers_rwnd, uint32_t flight_size, uint32_t overhead, uint32_t a_rwndval)
449f8829a4aSRandall Stewart {
450c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
451c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
452f8829a4aSRandall Stewart 
45380fefe0aSRandall Stewart 	sctp_clog.x.rwnd.rwnd = peers_rwnd;
45480fefe0aSRandall Stewart 	sctp_clog.x.rwnd.send_size = flight_size;
45580fefe0aSRandall Stewart 	sctp_clog.x.rwnd.overhead = overhead;
45680fefe0aSRandall Stewart 	sctp_clog.x.rwnd.new_rwnd = a_rwndval;
457c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
45880fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_RWND,
45980fefe0aSRandall Stewart 	    from,
46080fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
46180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
46280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
46380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
464c692df45SMichael Tuexen #endif
465f8829a4aSRandall Stewart }
466f8829a4aSRandall Stewart 
4674be807c4SMichael Tuexen #ifdef SCTP_MBCNT_LOGGING
4684be807c4SMichael Tuexen static void
469f8829a4aSRandall Stewart sctp_log_mbcnt(uint8_t from, uint32_t total_oq, uint32_t book, uint32_t total_mbcnt_q, uint32_t mbcnt)
470f8829a4aSRandall Stewart {
471c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
472c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
473f8829a4aSRandall Stewart 
47480fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_size = total_oq;
47580fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.size_change = book;
47680fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.total_queue_mb_size = total_mbcnt_q;
47780fefe0aSRandall Stewart 	sctp_clog.x.mbcnt.mbcnt_change = mbcnt;
478c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
47980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_MBCNT,
48080fefe0aSRandall Stewart 	    from,
48180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
48280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
48380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
48480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
485c692df45SMichael Tuexen #endif
486f8829a4aSRandall Stewart }
4874be807c4SMichael Tuexen #endif
4884be807c4SMichael Tuexen 
489f8829a4aSRandall Stewart void
490f8829a4aSRandall Stewart sctp_misc_ints(uint8_t from, uint32_t a, uint32_t b, uint32_t c, uint32_t d)
491f8829a4aSRandall Stewart {
492c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
493c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
49480fefe0aSRandall Stewart 	    SCTP_LOG_MISC_EVENT,
49580fefe0aSRandall Stewart 	    from,
49680fefe0aSRandall Stewart 	    a, b, c, d);
497c692df45SMichael Tuexen #endif
498f8829a4aSRandall Stewart }
499f8829a4aSRandall Stewart 
500f8829a4aSRandall Stewart void
5017215cc1bSMichael Tuexen sctp_wakeup_log(struct sctp_tcb *stcb, uint32_t wake_cnt, int from)
502f8829a4aSRandall Stewart {
503c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
504c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
505f8829a4aSRandall Stewart 
50680fefe0aSRandall Stewart 	sctp_clog.x.wake.stcb = (void *)stcb;
50780fefe0aSRandall Stewart 	sctp_clog.x.wake.wake_cnt = wake_cnt;
50880fefe0aSRandall Stewart 	sctp_clog.x.wake.flight = stcb->asoc.total_flight_count;
50980fefe0aSRandall Stewart 	sctp_clog.x.wake.send_q = stcb->asoc.send_queue_cnt;
51080fefe0aSRandall Stewart 	sctp_clog.x.wake.sent_q = stcb->asoc.sent_queue_cnt;
511f8829a4aSRandall Stewart 
512f8829a4aSRandall Stewart 	if (stcb->asoc.stream_queue_cnt < 0xff)
51380fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = (uint8_t)stcb->asoc.stream_queue_cnt;
514f8829a4aSRandall Stewart 	else
51580fefe0aSRandall Stewart 		sctp_clog.x.wake.stream_qcnt = 0xff;
516f8829a4aSRandall Stewart 
517f8829a4aSRandall Stewart 	if (stcb->asoc.chunks_on_out_queue < 0xff)
51880fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = (uint8_t)stcb->asoc.chunks_on_out_queue;
519f8829a4aSRandall Stewart 	else
52080fefe0aSRandall Stewart 		sctp_clog.x.wake.chunks_on_oque = 0xff;
521f8829a4aSRandall Stewart 
52280fefe0aSRandall Stewart 	sctp_clog.x.wake.sctpflags = 0;
523f8829a4aSRandall Stewart 	/* set in the defered mode stuff */
524f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_DONT_WAKE)
52580fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 1;
526f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEOUTPUT)
52780fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 2;
528f8829a4aSRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_WAKEINPUT)
52980fefe0aSRandall Stewart 		sctp_clog.x.wake.sctpflags |= 4;
530f8829a4aSRandall Stewart 	/* what about the sb */
531f8829a4aSRandall Stewart 	if (stcb->sctp_socket) {
532f8829a4aSRandall Stewart 		struct socket *so = stcb->sctp_socket;
533f8829a4aSRandall Stewart 
53480fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = (uint8_t)((so->so_snd.sb_flags & 0x00ff));
535f8829a4aSRandall Stewart 	} else {
53680fefe0aSRandall Stewart 		sctp_clog.x.wake.sbflags = 0xff;
537f8829a4aSRandall Stewart 	}
538c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
53980fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_WAKE,
54080fefe0aSRandall Stewart 	    from,
54180fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
54280fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
54380fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
54480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
545c692df45SMichael Tuexen #endif
546f8829a4aSRandall Stewart }
547f8829a4aSRandall Stewart 
548f8829a4aSRandall Stewart void
54958e6eeefSMichael Tuexen sctp_log_block(uint8_t from, struct sctp_association *asoc, ssize_t sendlen)
550f8829a4aSRandall Stewart {
551c692df45SMichael Tuexen #if defined(SCTP_LOCAL_TRACE_BUF)
552c692df45SMichael Tuexen 	struct sctp_cwnd_log sctp_clog;
553f8829a4aSRandall Stewart 
55480fefe0aSRandall Stewart 	sctp_clog.x.blk.onsb = asoc->total_output_queue_size;
55580fefe0aSRandall Stewart 	sctp_clog.x.blk.send_sent_qcnt = (uint16_t)(asoc->send_queue_cnt + asoc->sent_queue_cnt);
55680fefe0aSRandall Stewart 	sctp_clog.x.blk.peer_rwnd = asoc->peers_rwnd;
55780fefe0aSRandall Stewart 	sctp_clog.x.blk.stream_qcnt = (uint16_t)asoc->stream_queue_cnt;
55880fefe0aSRandall Stewart 	sctp_clog.x.blk.chunks_on_oque = (uint16_t)asoc->chunks_on_out_queue;
55980fefe0aSRandall Stewart 	sctp_clog.x.blk.flight_size = (uint16_t)(asoc->total_flight / 1024);
5609a8e3088SMichael Tuexen 	sctp_clog.x.blk.sndlen = (uint32_t)sendlen;
561c4739e2fSRandall Stewart 	SCTP_CTR6(KTR_SCTP, "SCTP:%d[%d]:%x-%x-%x-%x",
56280fefe0aSRandall Stewart 	    SCTP_LOG_EVENT_BLOCK,
56380fefe0aSRandall Stewart 	    from,
56480fefe0aSRandall Stewart 	    sctp_clog.x.misc.log1,
56580fefe0aSRandall Stewart 	    sctp_clog.x.misc.log2,
56680fefe0aSRandall Stewart 	    sctp_clog.x.misc.log3,
56780fefe0aSRandall Stewart 	    sctp_clog.x.misc.log4);
568c692df45SMichael Tuexen #endif
569f8829a4aSRandall Stewart }
570f8829a4aSRandall Stewart 
571f8829a4aSRandall Stewart int
5727215cc1bSMichael Tuexen sctp_fill_stat_log(void *optval SCTP_UNUSED, size_t *optsize SCTP_UNUSED)
573f8829a4aSRandall Stewart {
57480fefe0aSRandall Stewart 	/* May need to fix this if ktrdump does not work */
575f8829a4aSRandall Stewart 	return (0);
576f8829a4aSRandall Stewart }
577f8829a4aSRandall Stewart 
578f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
579f8829a4aSRandall Stewart uint8_t sctp_audit_data[SCTP_AUDIT_SIZE][2];
580f8829a4aSRandall Stewart static int sctp_audit_indx = 0;
581f8829a4aSRandall Stewart 
582f8829a4aSRandall Stewart static
583f8829a4aSRandall Stewart void
584f8829a4aSRandall Stewart sctp_print_audit_report(void)
585f8829a4aSRandall Stewart {
586f8829a4aSRandall Stewart 	int i;
587f8829a4aSRandall Stewart 	int cnt;
588f8829a4aSRandall Stewart 
589f8829a4aSRandall Stewart 	cnt = 0;
590f8829a4aSRandall Stewart 	for (i = sctp_audit_indx; i < SCTP_AUDIT_SIZE; i++) {
591f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
592f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
593f8829a4aSRandall Stewart 			cnt = 0;
594ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
595f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
596f8829a4aSRandall Stewart 			cnt = 0;
597ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
598f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
599f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
600ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
601f8829a4aSRandall Stewart 			cnt = 0;
602f8829a4aSRandall Stewart 		}
603ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
604f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
605f8829a4aSRandall Stewart 		cnt++;
606f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
607ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
608f8829a4aSRandall Stewart 	}
609f8829a4aSRandall Stewart 	for (i = 0; i < sctp_audit_indx; i++) {
610f8829a4aSRandall Stewart 		if ((sctp_audit_data[i][0] == 0xe0) &&
611f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
612f8829a4aSRandall Stewart 			cnt = 0;
613ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
614f8829a4aSRandall Stewart 		} else if (sctp_audit_data[i][0] == 0xf0) {
615f8829a4aSRandall Stewart 			cnt = 0;
616ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
617f8829a4aSRandall Stewart 		} else if ((sctp_audit_data[i][0] == 0xc0) &&
618f8829a4aSRandall Stewart 		    (sctp_audit_data[i][1] == 0x01)) {
619ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
620f8829a4aSRandall Stewart 			cnt = 0;
621f8829a4aSRandall Stewart 		}
622ad81507eSRandall Stewart 		SCTP_PRINTF("%2.2x%2.2x ", (uint32_t)sctp_audit_data[i][0],
623f8829a4aSRandall Stewart 		    (uint32_t)sctp_audit_data[i][1]);
624f8829a4aSRandall Stewart 		cnt++;
625f8829a4aSRandall Stewart 		if ((cnt % 14) == 0)
626ad81507eSRandall Stewart 			SCTP_PRINTF("\n");
627f8829a4aSRandall Stewart 	}
628ad81507eSRandall Stewart 	SCTP_PRINTF("\n");
629f8829a4aSRandall Stewart }
630f8829a4aSRandall Stewart 
631f8829a4aSRandall Stewart void
632f8829a4aSRandall Stewart sctp_auditing(int from, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
633f8829a4aSRandall Stewart     struct sctp_nets *net)
634f8829a4aSRandall Stewart {
635f8829a4aSRandall Stewart 	int resend_cnt, tot_out, rep, tot_book_cnt;
636f8829a4aSRandall Stewart 	struct sctp_nets *lnet;
637f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
638f8829a4aSRandall Stewart 
639f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xAA;
640f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = 0x000000ff & from;
641f8829a4aSRandall Stewart 	sctp_audit_indx++;
642f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
643f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
644f8829a4aSRandall Stewart 	}
645f8829a4aSRandall Stewart 	if (inp == NULL) {
646f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
647f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x01;
648f8829a4aSRandall Stewart 		sctp_audit_indx++;
649f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
650f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
651f8829a4aSRandall Stewart 		}
652f8829a4aSRandall Stewart 		return;
653f8829a4aSRandall Stewart 	}
654f8829a4aSRandall Stewart 	if (stcb == NULL) {
655f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
656f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0x02;
657f8829a4aSRandall Stewart 		sctp_audit_indx++;
658f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
659f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
660f8829a4aSRandall Stewart 		}
661f8829a4aSRandall Stewart 		return;
662f8829a4aSRandall Stewart 	}
663f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = 0xA1;
664f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] =
665f8829a4aSRandall Stewart 	    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
666f8829a4aSRandall Stewart 	sctp_audit_indx++;
667f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
668f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
669f8829a4aSRandall Stewart 	}
670f8829a4aSRandall Stewart 	rep = 0;
671f8829a4aSRandall Stewart 	tot_book_cnt = 0;
672f8829a4aSRandall Stewart 	resend_cnt = tot_out = 0;
673f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
674f8829a4aSRandall Stewart 		if (chk->sent == SCTP_DATAGRAM_RESEND) {
675f8829a4aSRandall Stewart 			resend_cnt++;
676f8829a4aSRandall Stewart 		} else if (chk->sent < SCTP_DATAGRAM_RESEND) {
677f8829a4aSRandall Stewart 			tot_out += chk->book_size;
678f8829a4aSRandall Stewart 			tot_book_cnt++;
679f8829a4aSRandall Stewart 		}
680f8829a4aSRandall Stewart 	}
681f8829a4aSRandall Stewart 	if (resend_cnt != stcb->asoc.sent_queue_retran_cnt) {
682f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
683f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA1;
684f8829a4aSRandall Stewart 		sctp_audit_indx++;
685f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
686f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
687f8829a4aSRandall Stewart 		}
688ad81507eSRandall Stewart 		SCTP_PRINTF("resend_cnt:%d asoc-tot:%d\n",
689f8829a4aSRandall Stewart 		    resend_cnt, stcb->asoc.sent_queue_retran_cnt);
690f8829a4aSRandall Stewart 		rep = 1;
691f8829a4aSRandall Stewart 		stcb->asoc.sent_queue_retran_cnt = resend_cnt;
692f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xA2;
693f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] =
694f8829a4aSRandall Stewart 		    (0x000000ff & stcb->asoc.sent_queue_retran_cnt);
695f8829a4aSRandall Stewart 		sctp_audit_indx++;
696f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
697f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
698f8829a4aSRandall Stewart 		}
699f8829a4aSRandall Stewart 	}
700f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
701f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
702f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA2;
703f8829a4aSRandall Stewart 		sctp_audit_indx++;
704f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
705f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
706f8829a4aSRandall Stewart 		}
707f8829a4aSRandall Stewart 		rep = 1;
708ad81507eSRandall Stewart 		SCTP_PRINTF("tot_flt:%d asoc_tot:%d\n", tot_out,
709f8829a4aSRandall Stewart 		    (int)stcb->asoc.total_flight);
710f8829a4aSRandall Stewart 		stcb->asoc.total_flight = tot_out;
711f8829a4aSRandall Stewart 	}
712f8829a4aSRandall Stewart 	if (tot_book_cnt != stcb->asoc.total_flight_count) {
713f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
714f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA5;
715f8829a4aSRandall Stewart 		sctp_audit_indx++;
716f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
717f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
718f8829a4aSRandall Stewart 		}
719f8829a4aSRandall Stewart 		rep = 1;
720f31e6c7fSMichael Tuexen 		SCTP_PRINTF("tot_flt_book:%d\n", tot_book_cnt);
721f8829a4aSRandall Stewart 
722f8829a4aSRandall Stewart 		stcb->asoc.total_flight_count = tot_book_cnt;
723f8829a4aSRandall Stewart 	}
724f8829a4aSRandall Stewart 	tot_out = 0;
725f8829a4aSRandall Stewart 	TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
726f8829a4aSRandall Stewart 		tot_out += lnet->flight_size;
727f8829a4aSRandall Stewart 	}
728f8829a4aSRandall Stewart 	if (tot_out != stcb->asoc.total_flight) {
729f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][0] = 0xAF;
730f8829a4aSRandall Stewart 		sctp_audit_data[sctp_audit_indx][1] = 0xA3;
731f8829a4aSRandall Stewart 		sctp_audit_indx++;
732f8829a4aSRandall Stewart 		if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
733f8829a4aSRandall Stewart 			sctp_audit_indx = 0;
734f8829a4aSRandall Stewart 		}
735f8829a4aSRandall Stewart 		rep = 1;
736ad81507eSRandall Stewart 		SCTP_PRINTF("real flight:%d net total was %d\n",
737f8829a4aSRandall Stewart 		    stcb->asoc.total_flight, tot_out);
738f8829a4aSRandall Stewart 		/* now corrective action */
739f8829a4aSRandall Stewart 		TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
740f8829a4aSRandall Stewart 
741f8829a4aSRandall Stewart 			tot_out = 0;
742f8829a4aSRandall Stewart 			TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
743f8829a4aSRandall Stewart 				if ((chk->whoTo == lnet) &&
744f8829a4aSRandall Stewart 				    (chk->sent < SCTP_DATAGRAM_RESEND)) {
745f8829a4aSRandall Stewart 					tot_out += chk->book_size;
746f8829a4aSRandall Stewart 				}
747f8829a4aSRandall Stewart 			}
748f8829a4aSRandall Stewart 			if (lnet->flight_size != tot_out) {
749f31e6c7fSMichael Tuexen 				SCTP_PRINTF("net:%p flight was %d corrected to %d\n",
750dd294dceSMichael Tuexen 				    (void *)lnet, lnet->flight_size,
751ad81507eSRandall Stewart 				    tot_out);
752f8829a4aSRandall Stewart 				lnet->flight_size = tot_out;
753f8829a4aSRandall Stewart 			}
754f8829a4aSRandall Stewart 		}
755f8829a4aSRandall Stewart 	}
756f8829a4aSRandall Stewart 	if (rep) {
757f8829a4aSRandall Stewart 		sctp_print_audit_report();
758f8829a4aSRandall Stewart 	}
759f8829a4aSRandall Stewart }
760f8829a4aSRandall Stewart 
761f8829a4aSRandall Stewart void
762f8829a4aSRandall Stewart sctp_audit_log(uint8_t ev, uint8_t fd)
763f8829a4aSRandall Stewart {
764f8829a4aSRandall Stewart 
765f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][0] = ev;
766f8829a4aSRandall Stewart 	sctp_audit_data[sctp_audit_indx][1] = fd;
767f8829a4aSRandall Stewart 	sctp_audit_indx++;
768f8829a4aSRandall Stewart 	if (sctp_audit_indx >= SCTP_AUDIT_SIZE) {
769f8829a4aSRandall Stewart 		sctp_audit_indx = 0;
770f8829a4aSRandall Stewart 	}
771f8829a4aSRandall Stewart }
772f8829a4aSRandall Stewart 
773f8829a4aSRandall Stewart #endif
774f8829a4aSRandall Stewart 
775f8829a4aSRandall Stewart /*
77612af6654SMichael Tuexen  * sctp_stop_timers_for_shutdown() should be called
77712af6654SMichael Tuexen  * when entering the SHUTDOWN_SENT or SHUTDOWN_ACK_SENT
77812af6654SMichael Tuexen  * state to make sure that all timers are stopped.
77912af6654SMichael Tuexen  */
78012af6654SMichael Tuexen void
78112af6654SMichael Tuexen sctp_stop_timers_for_shutdown(struct sctp_tcb *stcb)
78212af6654SMichael Tuexen {
78312af6654SMichael Tuexen 	struct sctp_association *asoc;
78412af6654SMichael Tuexen 	struct sctp_nets *net;
78512af6654SMichael Tuexen 
78612af6654SMichael Tuexen 	asoc = &stcb->asoc;
78712af6654SMichael Tuexen 
78812af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->dack_timer.timer);
78912af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->strreset_timer.timer);
79012af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->asconf_timer.timer);
79112af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->autoclose_timer.timer);
79212af6654SMichael Tuexen 	(void)SCTP_OS_TIMER_STOP(&asoc->delayed_event_timer.timer);
79312af6654SMichael Tuexen 	TAILQ_FOREACH(net, &asoc->nets, sctp_next) {
79412af6654SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->pmtu_timer.timer);
795ca85e948SMichael Tuexen 		(void)SCTP_OS_TIMER_STOP(&net->hb_timer.timer);
79612af6654SMichael Tuexen 	}
79712af6654SMichael Tuexen }
79812af6654SMichael Tuexen 
79912af6654SMichael Tuexen /*
800589c42c2SMichael Tuexen  * A list of sizes based on typical mtu's, used only if next hop size not
801589c42c2SMichael Tuexen  * returned. These values MUST be multiples of 4 and MUST be ordered.
802f8829a4aSRandall Stewart  */
803437fc91aSMichael Tuexen static uint32_t sctp_mtu_sizes[] = {
804f8829a4aSRandall Stewart 	68,
805f8829a4aSRandall Stewart 	296,
806f8829a4aSRandall Stewart 	508,
807f8829a4aSRandall Stewart 	512,
808f8829a4aSRandall Stewart 	544,
809f8829a4aSRandall Stewart 	576,
810589c42c2SMichael Tuexen 	1004,
811f8829a4aSRandall Stewart 	1492,
812f8829a4aSRandall Stewart 	1500,
813f8829a4aSRandall Stewart 	1536,
814589c42c2SMichael Tuexen 	2000,
815f8829a4aSRandall Stewart 	2048,
816f8829a4aSRandall Stewart 	4352,
817f8829a4aSRandall Stewart 	4464,
818f8829a4aSRandall Stewart 	8166,
819589c42c2SMichael Tuexen 	17912,
820f8829a4aSRandall Stewart 	32000,
821589c42c2SMichael Tuexen 	65532
822f8829a4aSRandall Stewart };
823f8829a4aSRandall Stewart 
824f8829a4aSRandall Stewart /*
825589c42c2SMichael Tuexen  * Return the largest MTU in sctp_mtu_sizes smaller than val.
826589c42c2SMichael Tuexen  * If val is smaller than the minimum, just return the largest
827589c42c2SMichael Tuexen  * multiple of 4 smaller or equal to val.
828589c42c2SMichael Tuexen  * Ensure that the result is a multiple of 4.
829f8829a4aSRandall Stewart  */
830437fc91aSMichael Tuexen uint32_t
831b0471b4bSMichael Tuexen sctp_get_prev_mtu(uint32_t val)
832b0471b4bSMichael Tuexen {
833437fc91aSMichael Tuexen 	uint32_t i;
834437fc91aSMichael Tuexen 
835eef8d4a9SMichael Tuexen 	val &= 0xfffffffc;
836437fc91aSMichael Tuexen 	if (val <= sctp_mtu_sizes[0]) {
837437fc91aSMichael Tuexen 		return (val);
838437fc91aSMichael Tuexen 	}
839437fc91aSMichael Tuexen 	for (i = 1; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
840437fc91aSMichael Tuexen 		if (val <= sctp_mtu_sizes[i]) {
841f8829a4aSRandall Stewart 			break;
842f8829a4aSRandall Stewart 		}
843f8829a4aSRandall Stewart 	}
844589c42c2SMichael Tuexen 	KASSERT((sctp_mtu_sizes[i - 1] & 0x00000003) == 0,
845589c42c2SMichael Tuexen 	    ("sctp_mtu_sizes[%u] not a multiple of 4", i - 1));
846437fc91aSMichael Tuexen 	return (sctp_mtu_sizes[i - 1]);
847437fc91aSMichael Tuexen }
848437fc91aSMichael Tuexen 
849437fc91aSMichael Tuexen /*
850589c42c2SMichael Tuexen  * Return the smallest MTU in sctp_mtu_sizes larger than val.
851589c42c2SMichael Tuexen  * If val is larger than the maximum, just return the largest multiple of 4 smaller
852589c42c2SMichael Tuexen  * or equal to val.
853589c42c2SMichael Tuexen  * Ensure that the result is a multiple of 4.
854437fc91aSMichael Tuexen  */
855437fc91aSMichael Tuexen uint32_t
856b0471b4bSMichael Tuexen sctp_get_next_mtu(uint32_t val)
857b0471b4bSMichael Tuexen {
858437fc91aSMichael Tuexen 	/* select another MTU that is just bigger than this one */
859437fc91aSMichael Tuexen 	uint32_t i;
860437fc91aSMichael Tuexen 
861eef8d4a9SMichael Tuexen 	val &= 0xfffffffc;
862437fc91aSMichael Tuexen 	for (i = 0; i < (sizeof(sctp_mtu_sizes) / sizeof(uint32_t)); i++) {
863437fc91aSMichael Tuexen 		if (val < sctp_mtu_sizes[i]) {
864589c42c2SMichael Tuexen 			KASSERT((sctp_mtu_sizes[i] & 0x00000003) == 0,
865589c42c2SMichael Tuexen 			    ("sctp_mtu_sizes[%u] not a multiple of 4", i));
866437fc91aSMichael Tuexen 			return (sctp_mtu_sizes[i]);
867437fc91aSMichael Tuexen 		}
868437fc91aSMichael Tuexen 	}
869437fc91aSMichael Tuexen 	return (val);
870f8829a4aSRandall Stewart }
871f8829a4aSRandall Stewart 
872f8829a4aSRandall Stewart void
873f8829a4aSRandall Stewart sctp_fill_random_store(struct sctp_pcb *m)
874f8829a4aSRandall Stewart {
875f8829a4aSRandall Stewart 	/*
876f8829a4aSRandall Stewart 	 * Here we use the MD5/SHA-1 to hash with our good randomNumbers and
877f8829a4aSRandall Stewart 	 * our counter. The result becomes our good random numbers and we
878f8829a4aSRandall Stewart 	 * then setup to give these out. Note that we do no locking to
879f8829a4aSRandall Stewart 	 * protect this. This is ok, since if competing folks call this we
88017205eccSRandall Stewart 	 * will get more gobbled gook in the random store which is what we
881f8829a4aSRandall Stewart 	 * want. There is a danger that two guys will use the same random
882f8829a4aSRandall Stewart 	 * numbers, but thats ok too since that is random as well :->
883f8829a4aSRandall Stewart 	 */
884f8829a4aSRandall Stewart 	m->store_at = 0;
885ad81507eSRandall Stewart 	(void)sctp_hmac(SCTP_HMAC, (uint8_t *)m->random_numbers,
886f8829a4aSRandall Stewart 	    sizeof(m->random_numbers), (uint8_t *)&m->random_counter,
887f8829a4aSRandall Stewart 	    sizeof(m->random_counter), (uint8_t *)m->random_store);
888f8829a4aSRandall Stewart 	m->random_counter++;
889f8829a4aSRandall Stewart }
890f8829a4aSRandall Stewart 
891f8829a4aSRandall Stewart uint32_t
892b0471b4bSMichael Tuexen sctp_select_initial_TSN(struct sctp_pcb *inp)
893b0471b4bSMichael Tuexen {
894f8829a4aSRandall Stewart 	/*
895f8829a4aSRandall Stewart 	 * A true implementation should use random selection process to get
896f8829a4aSRandall Stewart 	 * the initial stream sequence number, using RFC1750 as a good
897f8829a4aSRandall Stewart 	 * guideline
898f8829a4aSRandall Stewart 	 */
899139bc87fSRandall Stewart 	uint32_t x, *xp;
900f8829a4aSRandall Stewart 	uint8_t *p;
901851b7298SRandall Stewart 	int store_at, new_store;
902f8829a4aSRandall Stewart 
903851b7298SRandall Stewart 	if (inp->initial_sequence_debug != 0) {
904f8829a4aSRandall Stewart 		uint32_t ret;
905f8829a4aSRandall Stewart 
906851b7298SRandall Stewart 		ret = inp->initial_sequence_debug;
907851b7298SRandall Stewart 		inp->initial_sequence_debug++;
908f8829a4aSRandall Stewart 		return (ret);
909f8829a4aSRandall Stewart 	}
910851b7298SRandall Stewart retry:
911851b7298SRandall Stewart 	store_at = inp->store_at;
912851b7298SRandall Stewart 	new_store = store_at + sizeof(uint32_t);
913851b7298SRandall Stewart 	if (new_store >= (SCTP_SIGNATURE_SIZE - 3)) {
914851b7298SRandall Stewart 		new_store = 0;
915f8829a4aSRandall Stewart 	}
916851b7298SRandall Stewart 	if (!atomic_cmpset_int(&inp->store_at, store_at, new_store)) {
917851b7298SRandall Stewart 		goto retry;
918851b7298SRandall Stewart 	}
919851b7298SRandall Stewart 	if (new_store == 0) {
920851b7298SRandall Stewart 		/* Refill the random store */
921851b7298SRandall Stewart 		sctp_fill_random_store(inp);
922851b7298SRandall Stewart 	}
923851b7298SRandall Stewart 	p = &inp->random_store[store_at];
924139bc87fSRandall Stewart 	xp = (uint32_t *)p;
925f8829a4aSRandall Stewart 	x = *xp;
926f8829a4aSRandall Stewart 	return (x);
927f8829a4aSRandall Stewart }
928f8829a4aSRandall Stewart 
929f8829a4aSRandall Stewart uint32_t
930b0471b4bSMichael Tuexen sctp_select_a_tag(struct sctp_inpcb *inp, uint16_t lport, uint16_t rport, int check)
931b0471b4bSMichael Tuexen {
9327215cc1bSMichael Tuexen 	uint32_t x;
933f8829a4aSRandall Stewart 	struct timeval now;
934f8829a4aSRandall Stewart 
9357215cc1bSMichael Tuexen 	if (check) {
9366e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
9377215cc1bSMichael Tuexen 	}
9387215cc1bSMichael Tuexen 	for (;;) {
939851b7298SRandall Stewart 		x = sctp_select_initial_TSN(&inp->sctp_ep);
940f8829a4aSRandall Stewart 		if (x == 0) {
941f8829a4aSRandall Stewart 			/* we never use 0 */
942f8829a4aSRandall Stewart 			continue;
943f8829a4aSRandall Stewart 		}
9447215cc1bSMichael Tuexen 		if (!check || sctp_is_vtag_good(x, lport, rport, &now)) {
9457215cc1bSMichael Tuexen 			break;
946f8829a4aSRandall Stewart 		}
947f8829a4aSRandall Stewart 	}
948f8829a4aSRandall Stewart 	return (x);
949f8829a4aSRandall Stewart }
950f8829a4aSRandall Stewart 
951e92c2a8dSMichael Tuexen int32_t
952b0471b4bSMichael Tuexen sctp_map_assoc_state(int kernel_state)
953b0471b4bSMichael Tuexen {
954e92c2a8dSMichael Tuexen 	int32_t user_state;
955e92c2a8dSMichael Tuexen 
956e92c2a8dSMichael Tuexen 	if (kernel_state & SCTP_STATE_WAS_ABORTED) {
957e92c2a8dSMichael Tuexen 		user_state = SCTP_CLOSED;
958e92c2a8dSMichael Tuexen 	} else if (kernel_state & SCTP_STATE_SHUTDOWN_PENDING) {
959e92c2a8dSMichael Tuexen 		user_state = SCTP_SHUTDOWN_PENDING;
960e92c2a8dSMichael Tuexen 	} else {
961e92c2a8dSMichael Tuexen 		switch (kernel_state & SCTP_STATE_MASK) {
962e92c2a8dSMichael Tuexen 		case SCTP_STATE_EMPTY:
963e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
964e92c2a8dSMichael Tuexen 			break;
965e92c2a8dSMichael Tuexen 		case SCTP_STATE_INUSE:
966e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
967e92c2a8dSMichael Tuexen 			break;
968e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_WAIT:
969e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_WAIT;
970e92c2a8dSMichael Tuexen 			break;
971e92c2a8dSMichael Tuexen 		case SCTP_STATE_COOKIE_ECHOED:
972e92c2a8dSMichael Tuexen 			user_state = SCTP_COOKIE_ECHOED;
973e92c2a8dSMichael Tuexen 			break;
974e92c2a8dSMichael Tuexen 		case SCTP_STATE_OPEN:
975e92c2a8dSMichael Tuexen 			user_state = SCTP_ESTABLISHED;
976e92c2a8dSMichael Tuexen 			break;
977e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_SENT:
978e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_SENT;
979e92c2a8dSMichael Tuexen 			break;
980e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_RECEIVED:
981e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_RECEIVED;
982e92c2a8dSMichael Tuexen 			break;
983e92c2a8dSMichael Tuexen 		case SCTP_STATE_SHUTDOWN_ACK_SENT:
984e92c2a8dSMichael Tuexen 			user_state = SCTP_SHUTDOWN_ACK_SENT;
985e92c2a8dSMichael Tuexen 			break;
986e92c2a8dSMichael Tuexen 		default:
987e92c2a8dSMichael Tuexen 			user_state = SCTP_CLOSED;
988e92c2a8dSMichael Tuexen 			break;
989e92c2a8dSMichael Tuexen 		}
990e92c2a8dSMichael Tuexen 	}
991e92c2a8dSMichael Tuexen 	return (user_state);
992e92c2a8dSMichael Tuexen }
993e92c2a8dSMichael Tuexen 
994f8829a4aSRandall Stewart int
995a1cb341bSMichael Tuexen sctp_init_asoc(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
996c979034bSMichael Tuexen     uint32_t override_tag, uint32_t vrf_id, uint16_t o_strms)
997f8829a4aSRandall Stewart {
9980696e120SRandall Stewart 	struct sctp_association *asoc;
9990696e120SRandall Stewart 
1000f8829a4aSRandall Stewart 	/*
1001f8829a4aSRandall Stewart 	 * Anything set to zero is taken care of by the allocation routine's
1002f8829a4aSRandall Stewart 	 * bzero
1003f8829a4aSRandall Stewart 	 */
1004f8829a4aSRandall Stewart 
1005f8829a4aSRandall Stewart 	/*
1006f8829a4aSRandall Stewart 	 * Up front select what scoping to apply on addresses I tell my peer
1007f8829a4aSRandall Stewart 	 * Not sure what to do with these right now, we will need to come up
1008f8829a4aSRandall Stewart 	 * with a way to set them. We may need to pass them through from the
1009f8829a4aSRandall Stewart 	 * caller in the sctp_aloc_assoc() function.
1010f8829a4aSRandall Stewart 	 */
1011f8829a4aSRandall Stewart 	int i;
1012f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
1013f0396ad1SMichael Tuexen 	int j;
1014f0396ad1SMichael Tuexen #endif
1015f0396ad1SMichael Tuexen 
10160696e120SRandall Stewart 	asoc = &stcb->asoc;
1017f8829a4aSRandall Stewart 	/* init all variables to a known value. */
1018839d21d6SMichael Tuexen 	SCTP_SET_STATE(stcb, SCTP_STATE_INUSE);
1019a1cb341bSMichael Tuexen 	asoc->max_burst = inp->sctp_ep.max_burst;
1020a1cb341bSMichael Tuexen 	asoc->fr_max_burst = inp->sctp_ep.fr_max_burst;
1021a1cb341bSMichael Tuexen 	asoc->heart_beat_delay = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT]);
1022a1cb341bSMichael Tuexen 	asoc->cookie_life = inp->sctp_ep.def_cookie_life;
1023a1cb341bSMichael Tuexen 	asoc->sctp_cmt_on_off = inp->sctp_cmt_on_off;
1024f342355aSMichael Tuexen 	asoc->ecn_supported = inp->ecn_supported;
1025dd973b0eSMichael Tuexen 	asoc->prsctp_supported = inp->prsctp_supported;
102644249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
1027c79bec9cSMichael Tuexen 	asoc->auth_supported = inp->auth_supported;
1028c79bec9cSMichael Tuexen 	asoc->asconf_supported = inp->asconf_supported;
1029317e00efSMichael Tuexen 	asoc->reconfig_supported = inp->reconfig_supported;
1030caea9879SMichael Tuexen 	asoc->nrsack_supported = inp->nrsack_supported;
1031cb9b8e6fSMichael Tuexen 	asoc->pktdrop_supported = inp->pktdrop_supported;
103244249214SRandall Stewart 	asoc->idata_supported = inp->idata_supported;
1033ca85e948SMichael Tuexen 	asoc->sctp_cmt_pf = (uint8_t)0;
1034a1cb341bSMichael Tuexen 	asoc->sctp_frag_point = inp->sctp_frag_point;
1035a1cb341bSMichael Tuexen 	asoc->sctp_features = inp->sctp_features;
1036a1cb341bSMichael Tuexen 	asoc->default_dscp = inp->sctp_ep.default_dscp;
103759b6d5beSMichael Tuexen 	asoc->max_cwnd = inp->max_cwnd;
103842551e99SRandall Stewart #ifdef INET6
1039a1cb341bSMichael Tuexen 	if (inp->sctp_ep.default_flowlabel) {
1040a1cb341bSMichael Tuexen 		asoc->default_flowlabel = inp->sctp_ep.default_flowlabel;
104158bdb691SMichael Tuexen 	} else {
1042a1cb341bSMichael Tuexen 		if (inp->ip_inp.inp.inp_flags & IN6P_AUTOFLOWLABEL) {
1043a1cb341bSMichael Tuexen 			asoc->default_flowlabel = sctp_select_initial_TSN(&inp->sctp_ep);
104458bdb691SMichael Tuexen 			asoc->default_flowlabel &= 0x000fffff;
104558bdb691SMichael Tuexen 			asoc->default_flowlabel |= 0x80000000;
104658bdb691SMichael Tuexen 		} else {
1047f8829a4aSRandall Stewart 			asoc->default_flowlabel = 0;
104858bdb691SMichael Tuexen 		}
104958bdb691SMichael Tuexen 	}
1050f8829a4aSRandall Stewart #endif
10519f22f500SRandall Stewart 	asoc->sb_send_resv = 0;
1052f8829a4aSRandall Stewart 	if (override_tag) {
1053f8829a4aSRandall Stewart 		asoc->my_vtag = override_tag;
1054f8829a4aSRandall Stewart 	} else {
1055a1cb341bSMichael Tuexen 		asoc->my_vtag = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 1);
1056f8829a4aSRandall Stewart 	}
1057de0e935bSRandall Stewart 	/* Get the nonce tags */
1058a1cb341bSMichael Tuexen 	asoc->my_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
1059a1cb341bSMichael Tuexen 	asoc->peer_vtag_nonce = sctp_select_a_tag(inp, stcb->sctp_ep->sctp_lport, stcb->rport, 0);
106042551e99SRandall Stewart 	asoc->vrf_id = vrf_id;
1061de0e935bSRandall Stewart 
106218e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
106318e198d3SRandall Stewart 	asoc->tsn_in_at = 0;
106418e198d3SRandall Stewart 	asoc->tsn_out_at = 0;
106518e198d3SRandall Stewart 	asoc->tsn_in_wrapped = 0;
106618e198d3SRandall Stewart 	asoc->tsn_out_wrapped = 0;
106718e198d3SRandall Stewart 	asoc->cumack_log_at = 0;
1068b201f536SRandall Stewart 	asoc->cumack_log_atsnt = 0;
106918e198d3SRandall Stewart #endif
107018e198d3SRandall Stewart #ifdef SCTP_FS_SPEC_LOG
107118e198d3SRandall Stewart 	asoc->fs_index = 0;
107218e198d3SRandall Stewart #endif
1073f8829a4aSRandall Stewart 	asoc->refcnt = 0;
1074f8829a4aSRandall Stewart 	asoc->assoc_up_sent = 0;
1075f8829a4aSRandall Stewart 	asoc->asconf_seq_out = asoc->str_reset_seq_out = asoc->init_seq_number = asoc->sending_seq =
1076a1cb341bSMichael Tuexen 	    sctp_select_initial_TSN(&inp->sctp_ep);
1077c54a18d2SRandall Stewart 	asoc->asconf_seq_out_acked = asoc->asconf_seq_out - 1;
1078f8829a4aSRandall Stewart 	/* we are optimisitic here */
1079830d754dSRandall Stewart 	asoc->peer_supports_nat = 0;
1080f8829a4aSRandall Stewart 	asoc->sent_queue_retran_cnt = 0;
1081f8829a4aSRandall Stewart 
1082f8829a4aSRandall Stewart 	/* for CMT */
10838933fa13SRandall Stewart 	asoc->last_net_cmt_send_started = NULL;
1084f8829a4aSRandall Stewart 
1085f8829a4aSRandall Stewart 	/* This will need to be adjusted */
1086f8829a4aSRandall Stewart 	asoc->last_acked_seq = asoc->init_seq_number - 1;
1087f8829a4aSRandall Stewart 	asoc->advanced_peer_ack_point = asoc->last_acked_seq;
1088f8829a4aSRandall Stewart 	asoc->asconf_seq_in = asoc->last_acked_seq;
1089f8829a4aSRandall Stewart 
1090f8829a4aSRandall Stewart 	/* here we are different, we hold the next one we expect */
1091f8829a4aSRandall Stewart 	asoc->str_reset_seq_in = asoc->last_acked_seq + 1;
1092f8829a4aSRandall Stewart 
1093a1cb341bSMichael Tuexen 	asoc->initial_init_rto_max = inp->sctp_ep.initial_init_rto_max;
1094a1cb341bSMichael Tuexen 	asoc->initial_rto = inp->sctp_ep.initial_rto;
1095f8829a4aSRandall Stewart 
109628a6addeSMichael Tuexen 	asoc->default_mtu = inp->sctp_ep.default_mtu;
1097a1cb341bSMichael Tuexen 	asoc->max_init_times = inp->sctp_ep.max_init_times;
1098a1cb341bSMichael Tuexen 	asoc->max_send_times = inp->sctp_ep.max_send_times;
1099a1cb341bSMichael Tuexen 	asoc->def_net_failure = inp->sctp_ep.def_net_failure;
1100a1cb341bSMichael Tuexen 	asoc->def_net_pf_threshold = inp->sctp_ep.def_net_pf_threshold;
1101f8829a4aSRandall Stewart 	asoc->free_chunk_cnt = 0;
1102f8829a4aSRandall Stewart 
1103f8829a4aSRandall Stewart 	asoc->iam_blocking = 0;
1104a1cb341bSMichael Tuexen 	asoc->context = inp->sctp_context;
1105a1cb341bSMichael Tuexen 	asoc->local_strreset_support = inp->local_strreset_support;
1106a1cb341bSMichael Tuexen 	asoc->def_send = inp->def_send;
1107a1cb341bSMichael Tuexen 	asoc->delayed_ack = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV]);
1108a1cb341bSMichael Tuexen 	asoc->sack_freq = inp->sctp_ep.sctp_sack_freq;
1109f8829a4aSRandall Stewart 	asoc->pr_sctp_cnt = 0;
1110f8829a4aSRandall Stewart 	asoc->total_output_queue_size = 0;
1111f8829a4aSRandall Stewart 
1112a1cb341bSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
1113a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 1;
1114a1cb341bSMichael Tuexen 		if (SCTP_IPV6_V6ONLY(inp) == 0) {
1115a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 1;
1116f8829a4aSRandall Stewart 		} else {
1117a1cb341bSMichael Tuexen 			asoc->scope.ipv4_addr_legal = 0;
1118f8829a4aSRandall Stewart 		}
1119f8829a4aSRandall Stewart 	} else {
1120a1cb341bSMichael Tuexen 		asoc->scope.ipv6_addr_legal = 0;
1121a1cb341bSMichael Tuexen 		asoc->scope.ipv4_addr_legal = 1;
1122f8829a4aSRandall Stewart 	}
1123f8829a4aSRandall Stewart 
1124a1cb341bSMichael Tuexen 	asoc->my_rwnd = max(SCTP_SB_LIMIT_RCV(inp->sctp_socket), SCTP_MINIMAL_RWND);
1125a1cb341bSMichael Tuexen 	asoc->peers_rwnd = SCTP_SB_LIMIT_RCV(inp->sctp_socket);
1126f8829a4aSRandall Stewart 
1127a1cb341bSMichael Tuexen 	asoc->smallest_mtu = inp->sctp_frag_point;
1128a1cb341bSMichael Tuexen 	asoc->minrto = inp->sctp_ep.sctp_minrto;
1129a1cb341bSMichael Tuexen 	asoc->maxrto = inp->sctp_ep.sctp_maxrto;
1130f8829a4aSRandall Stewart 
1131f8829a4aSRandall Stewart 	asoc->stream_locked_on = 0;
1132f8829a4aSRandall Stewart 	asoc->ecn_echo_cnt_onq = 0;
1133f8829a4aSRandall Stewart 	asoc->stream_locked = 0;
1134f8829a4aSRandall Stewart 
113542551e99SRandall Stewart 	asoc->send_sack = 1;
113642551e99SRandall Stewart 
113742551e99SRandall Stewart 	LIST_INIT(&asoc->sctp_restricted_addrs);
113842551e99SRandall Stewart 
1139f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->nets);
1140f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->pending_reply_queue);
11412afb3e84SRandall Stewart 	TAILQ_INIT(&asoc->asconf_ack_sent);
1142f8829a4aSRandall Stewart 	/* Setup to fill the hb random cache at first HB */
1143f8829a4aSRandall Stewart 	asoc->hb_random_idx = 4;
1144f8829a4aSRandall Stewart 
1145a1cb341bSMichael Tuexen 	asoc->sctp_autoclose_ticks = inp->sctp_ep.auto_close_time;
1146f8829a4aSRandall Stewart 
1147a1cb341bSMichael Tuexen 	stcb->asoc.congestion_control_module = inp->sctp_ep.sctp_default_cc_module;
1148a1cb341bSMichael Tuexen 	stcb->asoc.cc_functions = sctp_cc_functions[inp->sctp_ep.sctp_default_cc_module];
1149b54d3a6cSRandall Stewart 
1150a1cb341bSMichael Tuexen 	stcb->asoc.stream_scheduling_module = inp->sctp_ep.sctp_default_ss_module;
1151a1cb341bSMichael Tuexen 	stcb->asoc.ss_functions = sctp_ss_functions[inp->sctp_ep.sctp_default_ss_module];
1152f7a77f6fSMichael Tuexen 
1153b54d3a6cSRandall Stewart 	/*
1154f8829a4aSRandall Stewart 	 * Now the stream parameters, here we allocate space for all streams
1155f8829a4aSRandall Stewart 	 * that we request by default.
1156f8829a4aSRandall Stewart 	 */
1157ea44232bSRandall Stewart 	asoc->strm_realoutsize = asoc->streamoutcnt = asoc->pre_open_streams =
1158c979034bSMichael Tuexen 	    o_strms;
1159f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->strmout, struct sctp_stream_out *,
1160f8829a4aSRandall Stewart 	    asoc->streamoutcnt * sizeof(struct sctp_stream_out),
1161207304d4SRandall Stewart 	    SCTP_M_STRMO);
1162f8829a4aSRandall Stewart 	if (asoc->strmout == NULL) {
1163f8829a4aSRandall Stewart 		/* big trouble no memory */
1164c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1165f8829a4aSRandall Stewart 		return (ENOMEM);
1166f8829a4aSRandall Stewart 	}
1167f8829a4aSRandall Stewart 	for (i = 0; i < asoc->streamoutcnt; i++) {
1168f8829a4aSRandall Stewart 		/*
1169f8829a4aSRandall Stewart 		 * inbound side must be set to 0xffff, also NOTE when we get
1170f8829a4aSRandall Stewart 		 * the INIT-ACK back (for INIT sender) we MUST reduce the
1171f8829a4aSRandall Stewart 		 * count (streamoutcnt) but first check if we sent to any of
1172f8829a4aSRandall Stewart 		 * the upper streams that were dropped (if some were). Those
1173f8829a4aSRandall Stewart 		 * that were dropped must be notified to the upper layer as
1174f8829a4aSRandall Stewart 		 * failed to send.
1175f8829a4aSRandall Stewart 		 */
117663d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_ordered = 0;
117763d5b568SMichael Tuexen 		asoc->strmout[i].next_mid_unordered = 0;
1178f8829a4aSRandall Stewart 		TAILQ_INIT(&asoc->strmout[i].outqueue);
1179325c8c46SMichael Tuexen 		asoc->strmout[i].chunks_on_queues = 0;
1180f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
1181f0396ad1SMichael Tuexen 		for (j = 0; j < SCTP_PR_SCTP_MAX + 1; j++) {
1182f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_sent[j] = 0;
1183f0396ad1SMichael Tuexen 			asoc->strmout[i].abandoned_unsent[j] = 0;
1184f0396ad1SMichael Tuexen 		}
1185f0396ad1SMichael Tuexen #else
1186f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_sent[0] = 0;
1187f0396ad1SMichael Tuexen 		asoc->strmout[i].abandoned_unsent[0] = 0;
1188f0396ad1SMichael Tuexen #endif
118949656eefSMichael Tuexen 		asoc->strmout[i].sid = i;
1190f8829a4aSRandall Stewart 		asoc->strmout[i].last_msg_incomplete = 0;
11917cca1775SRandall Stewart 		asoc->strmout[i].state = SCTP_STREAM_OPENING;
1192d1ea5fa9SMichael Tuexen 		asoc->ss_functions.sctp_ss_init_stream(stcb, &asoc->strmout[i], NULL);
1193f8829a4aSRandall Stewart 	}
1194f7a77f6fSMichael Tuexen 	asoc->ss_functions.sctp_ss_init(stcb, asoc, 0);
1195f7a77f6fSMichael Tuexen 
1196f8829a4aSRandall Stewart 	/* Now the mapping array */
1197f8829a4aSRandall Stewart 	asoc->mapping_array_size = SCTP_INITIAL_MAPPING_ARRAY;
1198f8829a4aSRandall Stewart 	SCTP_MALLOC(asoc->mapping_array, uint8_t *, asoc->mapping_array_size,
1199207304d4SRandall Stewart 	    SCTP_M_MAP);
1200f8829a4aSRandall Stewart 	if (asoc->mapping_array == NULL) {
1201207304d4SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1202c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1203f8829a4aSRandall Stewart 		return (ENOMEM);
1204f8829a4aSRandall Stewart 	}
1205f8829a4aSRandall Stewart 	memset(asoc->mapping_array, 0, asoc->mapping_array_size);
1206b5c16493SMichael Tuexen 	SCTP_MALLOC(asoc->nr_mapping_array, uint8_t *, asoc->mapping_array_size,
1207830d754dSRandall Stewart 	    SCTP_M_MAP);
1208bf1be571SRandall Stewart 	if (asoc->nr_mapping_array == NULL) {
1209bf1be571SRandall Stewart 		SCTP_FREE(asoc->strmout, SCTP_M_STRMO);
1210bf1be571SRandall Stewart 		SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1211bf1be571SRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
1212bf1be571SRandall Stewart 		return (ENOMEM);
1213bf1be571SRandall Stewart 	}
1214b5c16493SMichael Tuexen 	memset(asoc->nr_mapping_array, 0, asoc->mapping_array_size);
1215830d754dSRandall Stewart 
1216f8829a4aSRandall Stewart 	/* Now the init of the other outqueues */
1217f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->free_chunks);
1218f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->control_send_queue);
1219c54a18d2SRandall Stewart 	TAILQ_INIT(&asoc->asconf_send_queue);
1220f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->send_queue);
1221f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->sent_queue);
1222f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->resetHead);
1223a1cb341bSMichael Tuexen 	asoc->max_inbound_streams = inp->sctp_ep.max_open_streams_intome;
1224f8829a4aSRandall Stewart 	TAILQ_INIT(&asoc->asconf_queue);
1225f8829a4aSRandall Stewart 	/* authentication fields */
1226f8829a4aSRandall Stewart 	asoc->authinfo.random = NULL;
1227830d754dSRandall Stewart 	asoc->authinfo.active_keyid = 0;
1228f8829a4aSRandall Stewart 	asoc->authinfo.assoc_key = NULL;
1229f8829a4aSRandall Stewart 	asoc->authinfo.assoc_keyid = 0;
1230f8829a4aSRandall Stewart 	asoc->authinfo.recv_key = NULL;
1231f8829a4aSRandall Stewart 	asoc->authinfo.recv_keyid = 0;
1232f8829a4aSRandall Stewart 	LIST_INIT(&asoc->shared_keys);
1233f42a358aSRandall Stewart 	asoc->marked_retrans = 0;
1234a1cb341bSMichael Tuexen 	asoc->port = inp->sctp_ep.port;
1235f42a358aSRandall Stewart 	asoc->timoinit = 0;
1236f42a358aSRandall Stewart 	asoc->timodata = 0;
1237f42a358aSRandall Stewart 	asoc->timosack = 0;
1238f42a358aSRandall Stewart 	asoc->timoshutdown = 0;
1239f42a358aSRandall Stewart 	asoc->timoheartbeat = 0;
1240f42a358aSRandall Stewart 	asoc->timocookie = 0;
1241f42a358aSRandall Stewart 	asoc->timoshutdownack = 0;
12426e55db54SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&asoc->start_time);
12436e55db54SRandall Stewart 	asoc->discontinuity_time = asoc->start_time;
1244f0396ad1SMichael Tuexen 	for (i = 0; i < SCTP_PR_SCTP_MAX + 1; i++) {
1245f0396ad1SMichael Tuexen 		asoc->abandoned_unsent[i] = 0;
1246f0396ad1SMichael Tuexen 		asoc->abandoned_sent[i] = 0;
1247f0396ad1SMichael Tuexen 	}
1248eacc51c5SRandall Stewart 	/*
1249eacc51c5SRandall Stewart 	 * sa_ignore MEMLEAK {memory is put in the assoc mapping array and
125077acdc25SRandall Stewart 	 * freed later when the association is freed.
1251eacc51c5SRandall Stewart 	 */
1252f8829a4aSRandall Stewart 	return (0);
1253f8829a4aSRandall Stewart }
1254f8829a4aSRandall Stewart 
12550e13104dSRandall Stewart void
12560e13104dSRandall Stewart sctp_print_mapping_array(struct sctp_association *asoc)
12570e13104dSRandall Stewart {
1258aed5947cSMichael Tuexen 	unsigned int i, limit;
12590e13104dSRandall Stewart 
1260cd3fd531SMichael Tuexen 	SCTP_PRINTF("Mapping array size: %d, baseTSN: %8.8x, cumAck: %8.8x, highestTSN: (%8.8x, %8.8x).\n",
12610e13104dSRandall Stewart 	    asoc->mapping_array_size,
12620e13104dSRandall Stewart 	    asoc->mapping_array_base_tsn,
12630e13104dSRandall Stewart 	    asoc->cumulative_tsn,
1264aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_map,
1265aed5947cSMichael Tuexen 	    asoc->highest_tsn_inside_nr_map);
1266aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
126760990c0cSMichael Tuexen 		if (asoc->mapping_array[limit - 1] != 0) {
126877acdc25SRandall Stewart 			break;
126977acdc25SRandall Stewart 		}
127077acdc25SRandall Stewart 	}
1271cd3fd531SMichael Tuexen 	SCTP_PRINTF("Renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
127277acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1273cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
127477acdc25SRandall Stewart 	}
1275aed5947cSMichael Tuexen 	if (limit % 16)
1276cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
1277aed5947cSMichael Tuexen 	for (limit = asoc->mapping_array_size; limit > 1; limit--) {
1278aed5947cSMichael Tuexen 		if (asoc->nr_mapping_array[limit - 1]) {
127977acdc25SRandall Stewart 			break;
128077acdc25SRandall Stewart 		}
128177acdc25SRandall Stewart 	}
1282cd3fd531SMichael Tuexen 	SCTP_PRINTF("Non renegable mapping array (last %d entries are zero):\n", asoc->mapping_array_size - limit);
128377acdc25SRandall Stewart 	for (i = 0; i < limit; i++) {
1284cd3fd531SMichael Tuexen 		SCTP_PRINTF("%2.2x%c", asoc->nr_mapping_array[i], ((i + 1) % 16) ? ' ' : '\n');
12850e13104dSRandall Stewart 	}
1286aed5947cSMichael Tuexen 	if (limit % 16)
1287cd3fd531SMichael Tuexen 		SCTP_PRINTF("\n");
12880e13104dSRandall Stewart }
12890e13104dSRandall Stewart 
1290f8829a4aSRandall Stewart int
12910696e120SRandall Stewart sctp_expand_mapping_array(struct sctp_association *asoc, uint32_t needed)
1292f8829a4aSRandall Stewart {
1293f8829a4aSRandall Stewart 	/* mapping array needs to grow */
1294b5c16493SMichael Tuexen 	uint8_t *new_array1, *new_array2;
12950696e120SRandall Stewart 	uint32_t new_size;
1296f8829a4aSRandall Stewart 
12970696e120SRandall Stewart 	new_size = asoc->mapping_array_size + ((needed + 7) / 8 + SCTP_MAPPING_ARRAY_INCR);
1298b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array1, uint8_t *, new_size, SCTP_M_MAP);
1299b5c16493SMichael Tuexen 	SCTP_MALLOC(new_array2, uint8_t *, new_size, SCTP_M_MAP);
1300b5c16493SMichael Tuexen 	if ((new_array1 == NULL) || (new_array2 == NULL)) {
1301f8829a4aSRandall Stewart 		/* can't get more, forget it */
1302b5c16493SMichael Tuexen 		SCTP_PRINTF("No memory for expansion of SCTP mapping array %d\n", new_size);
1303b5c16493SMichael Tuexen 		if (new_array1) {
1304b5c16493SMichael Tuexen 			SCTP_FREE(new_array1, SCTP_M_MAP);
1305b5c16493SMichael Tuexen 		}
1306b5c16493SMichael Tuexen 		if (new_array2) {
1307b5c16493SMichael Tuexen 			SCTP_FREE(new_array2, SCTP_M_MAP);
1308b5c16493SMichael Tuexen 		}
1309f8829a4aSRandall Stewart 		return (-1);
1310f8829a4aSRandall Stewart 	}
1311b5c16493SMichael Tuexen 	memset(new_array1, 0, new_size);
1312b5c16493SMichael Tuexen 	memset(new_array2, 0, new_size);
1313b5c16493SMichael Tuexen 	memcpy(new_array1, asoc->mapping_array, asoc->mapping_array_size);
1314b5c16493SMichael Tuexen 	memcpy(new_array2, asoc->nr_mapping_array, asoc->mapping_array_size);
1315207304d4SRandall Stewart 	SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
1316830d754dSRandall Stewart 	SCTP_FREE(asoc->nr_mapping_array, SCTP_M_MAP);
1317b5c16493SMichael Tuexen 	asoc->mapping_array = new_array1;
1318b5c16493SMichael Tuexen 	asoc->nr_mapping_array = new_array2;
1319b5c16493SMichael Tuexen 	asoc->mapping_array_size = new_size;
1320830d754dSRandall Stewart 	return (0);
1321830d754dSRandall Stewart }
1322830d754dSRandall Stewart 
13238933fa13SRandall Stewart 
132442551e99SRandall Stewart static void
132542551e99SRandall Stewart sctp_iterator_work(struct sctp_iterator *it)
132642551e99SRandall Stewart {
132742551e99SRandall Stewart 	int iteration_count = 0;
132842551e99SRandall Stewart 	int inp_skip = 0;
1329ec4c19fcSRandall Stewart 	int first_in = 1;
1330ec4c19fcSRandall Stewart 	struct sctp_inpcb *tinp;
133142551e99SRandall Stewart 
1332ec4c19fcSRandall Stewart 	SCTP_INP_INFO_RLOCK();
133342551e99SRandall Stewart 	SCTP_ITERATOR_LOCK();
1334dcb436c9SMichael Tuexen 	sctp_it_ctl.cur_it = it;
1335ad81507eSRandall Stewart 	if (it->inp) {
1336ec4c19fcSRandall Stewart 		SCTP_INP_RLOCK(it->inp);
133742551e99SRandall Stewart 		SCTP_INP_DECR_REF(it->inp);
1338ad81507eSRandall Stewart 	}
133942551e99SRandall Stewart 	if (it->inp == NULL) {
134042551e99SRandall Stewart 		/* iterator is complete */
134142551e99SRandall Stewart done_with_iterator:
1342dcb436c9SMichael Tuexen 		sctp_it_ctl.cur_it = NULL;
134342551e99SRandall Stewart 		SCTP_ITERATOR_UNLOCK();
1344ec4c19fcSRandall Stewart 		SCTP_INP_INFO_RUNLOCK();
134542551e99SRandall Stewart 		if (it->function_atend != NULL) {
134642551e99SRandall Stewart 			(*it->function_atend) (it->pointer, it->val);
134742551e99SRandall Stewart 		}
1348207304d4SRandall Stewart 		SCTP_FREE(it, SCTP_M_ITER);
134942551e99SRandall Stewart 		return;
135042551e99SRandall Stewart 	}
135142551e99SRandall Stewart select_a_new_ep:
1352ec4c19fcSRandall Stewart 	if (first_in) {
1353ec4c19fcSRandall Stewart 		first_in = 0;
1354ec4c19fcSRandall Stewart 	} else {
1355f7517433SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1356ec4c19fcSRandall Stewart 	}
135742551e99SRandall Stewart 	while (((it->pcb_flags) &&
135842551e99SRandall Stewart 	    ((it->inp->sctp_flags & it->pcb_flags) != it->pcb_flags)) ||
135942551e99SRandall Stewart 	    ((it->pcb_features) &&
136042551e99SRandall Stewart 	    ((it->inp->sctp_features & it->pcb_features) != it->pcb_features))) {
136142551e99SRandall Stewart 		/* endpoint flags or features don't match, so keep looking */
136242551e99SRandall Stewart 		if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
1363f7517433SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
136442551e99SRandall Stewart 			goto done_with_iterator;
136542551e99SRandall Stewart 		}
1366ec4c19fcSRandall Stewart 		tinp = it->inp;
136742551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
1368ec4c19fcSRandall Stewart 		SCTP_INP_RUNLOCK(tinp);
136942551e99SRandall Stewart 		if (it->inp == NULL) {
137042551e99SRandall Stewart 			goto done_with_iterator;
137142551e99SRandall Stewart 		}
137242551e99SRandall Stewart 		SCTP_INP_RLOCK(it->inp);
1373f7517433SRandall Stewart 	}
137442551e99SRandall Stewart 	/* now go through each assoc which is in the desired state */
137542551e99SRandall Stewart 	if (it->done_current_ep == 0) {
137642551e99SRandall Stewart 		if (it->function_inp != NULL)
137742551e99SRandall Stewart 			inp_skip = (*it->function_inp) (it->inp, it->pointer, it->val);
137842551e99SRandall Stewart 		it->done_current_ep = 1;
137942551e99SRandall Stewart 	}
138042551e99SRandall Stewart 	if (it->stcb == NULL) {
138142551e99SRandall Stewart 		/* run the per instance function */
138242551e99SRandall Stewart 		it->stcb = LIST_FIRST(&it->inp->sctp_asoc_list);
138342551e99SRandall Stewart 	}
138442551e99SRandall Stewart 	if ((inp_skip) || it->stcb == NULL) {
138542551e99SRandall Stewart 		if (it->function_inp_end != NULL) {
138642551e99SRandall Stewart 			inp_skip = (*it->function_inp_end) (it->inp,
138742551e99SRandall Stewart 			    it->pointer,
138842551e99SRandall Stewart 			    it->val);
138942551e99SRandall Stewart 		}
139042551e99SRandall Stewart 		SCTP_INP_RUNLOCK(it->inp);
139142551e99SRandall Stewart 		goto no_stcb;
139242551e99SRandall Stewart 	}
139342551e99SRandall Stewart 	while (it->stcb) {
139442551e99SRandall Stewart 		SCTP_TCB_LOCK(it->stcb);
139542551e99SRandall Stewart 		if (it->asoc_state && ((it->stcb->asoc.state & it->asoc_state) != it->asoc_state)) {
139642551e99SRandall Stewart 			/* not in the right state... keep looking */
139742551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
139842551e99SRandall Stewart 			goto next_assoc;
139942551e99SRandall Stewart 		}
140042551e99SRandall Stewart 		/* see if we have limited out the iterator loop */
140142551e99SRandall Stewart 		iteration_count++;
140242551e99SRandall Stewart 		if (iteration_count > SCTP_ITERATOR_MAX_AT_ONCE) {
140342551e99SRandall Stewart 			/* Pause to let others grab the lock */
140442551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, 1);
140542551e99SRandall Stewart 			SCTP_TCB_UNLOCK(it->stcb);
1406c4739e2fSRandall Stewart 			SCTP_INP_INCR_REF(it->inp);
140742551e99SRandall Stewart 			SCTP_INP_RUNLOCK(it->inp);
140842551e99SRandall Stewart 			SCTP_ITERATOR_UNLOCK();
1409ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RUNLOCK();
1410ec4c19fcSRandall Stewart 			SCTP_INP_INFO_RLOCK();
141142551e99SRandall Stewart 			SCTP_ITERATOR_LOCK();
1412f7517433SRandall Stewart 			if (sctp_it_ctl.iterator_flags) {
1413f7517433SRandall Stewart 				/* We won't be staying here */
1414f7517433SRandall Stewart 				SCTP_INP_DECR_REF(it->inp);
1415f7517433SRandall Stewart 				atomic_add_int(&it->stcb->asoc.refcnt, -1);
1416f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1417f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_IT) {
1418f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_IT;
1419f7517433SRandall Stewart 					goto done_with_iterator;
1420f7517433SRandall Stewart 				}
1421f7517433SRandall Stewart 				if (sctp_it_ctl.iterator_flags &
1422f7517433SRandall Stewart 				    SCTP_ITERATOR_STOP_CUR_INP) {
1423f7517433SRandall Stewart 					sctp_it_ctl.iterator_flags &= ~SCTP_ITERATOR_STOP_CUR_INP;
1424f7517433SRandall Stewart 					goto no_stcb;
1425f7517433SRandall Stewart 				}
1426f7517433SRandall Stewart 				/* If we reach here huh? */
1427cd3fd531SMichael Tuexen 				SCTP_PRINTF("Unknown it ctl flag %x\n",
1428f7517433SRandall Stewart 				    sctp_it_ctl.iterator_flags);
1429f7517433SRandall Stewart 				sctp_it_ctl.iterator_flags = 0;
1430f7517433SRandall Stewart 			}
143142551e99SRandall Stewart 			SCTP_INP_RLOCK(it->inp);
1432c4739e2fSRandall Stewart 			SCTP_INP_DECR_REF(it->inp);
143342551e99SRandall Stewart 			SCTP_TCB_LOCK(it->stcb);
143442551e99SRandall Stewart 			atomic_add_int(&it->stcb->asoc.refcnt, -1);
143542551e99SRandall Stewart 			iteration_count = 0;
143642551e99SRandall Stewart 		}
14370053ed28SMichael Tuexen 
143842551e99SRandall Stewart 		/* run function on this one */
143942551e99SRandall Stewart 		(*it->function_assoc) (it->inp, it->stcb, it->pointer, it->val);
144042551e99SRandall Stewart 
144142551e99SRandall Stewart 		/*
144242551e99SRandall Stewart 		 * we lie here, it really needs to have its own type but
144342551e99SRandall Stewart 		 * first I must verify that this won't effect things :-0
144442551e99SRandall Stewart 		 */
144542551e99SRandall Stewart 		if (it->no_chunk_output == 0)
1446ceaad40aSRandall Stewart 			sctp_chunk_output(it->inp, it->stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
144742551e99SRandall Stewart 
144842551e99SRandall Stewart 		SCTP_TCB_UNLOCK(it->stcb);
144942551e99SRandall Stewart next_assoc:
145042551e99SRandall Stewart 		it->stcb = LIST_NEXT(it->stcb, sctp_tcblist);
145142551e99SRandall Stewart 		if (it->stcb == NULL) {
145242551e99SRandall Stewart 			/* Run last function */
145342551e99SRandall Stewart 			if (it->function_inp_end != NULL) {
145442551e99SRandall Stewart 				inp_skip = (*it->function_inp_end) (it->inp,
145542551e99SRandall Stewart 				    it->pointer,
145642551e99SRandall Stewart 				    it->val);
145742551e99SRandall Stewart 			}
145842551e99SRandall Stewart 		}
145942551e99SRandall Stewart 	}
146042551e99SRandall Stewart 	SCTP_INP_RUNLOCK(it->inp);
146142551e99SRandall Stewart no_stcb:
146242551e99SRandall Stewart 	/* done with all assocs on this endpoint, move on to next endpoint */
146342551e99SRandall Stewart 	it->done_current_ep = 0;
146442551e99SRandall Stewart 	if (it->iterator_flags & SCTP_ITERATOR_DO_SINGLE_INP) {
146542551e99SRandall Stewart 		it->inp = NULL;
146642551e99SRandall Stewart 	} else {
146742551e99SRandall Stewart 		it->inp = LIST_NEXT(it->inp, sctp_list);
146842551e99SRandall Stewart 	}
146942551e99SRandall Stewart 	if (it->inp == NULL) {
147042551e99SRandall Stewart 		goto done_with_iterator;
147142551e99SRandall Stewart 	}
147242551e99SRandall Stewart 	goto select_a_new_ep;
147342551e99SRandall Stewart }
147442551e99SRandall Stewart 
147542551e99SRandall Stewart void
147642551e99SRandall Stewart sctp_iterator_worker(void)
147742551e99SRandall Stewart {
14784a9ef3f8SMichael Tuexen 	struct sctp_iterator *it, *nit;
147942551e99SRandall Stewart 
148042551e99SRandall Stewart 	/* This function is called with the WQ lock in place */
148142551e99SRandall Stewart 
1482f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 1;
14834a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(it, &sctp_it_ctl.iteratorhead, sctp_nxt_itr, nit) {
148442551e99SRandall Stewart 		/* now lets work on this one */
1485f7517433SRandall Stewart 		TAILQ_REMOVE(&sctp_it_ctl.iteratorhead, it, sctp_nxt_itr);
148642551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_UNLOCK();
1487f7517433SRandall Stewart 		CURVNET_SET(it->vn);
148842551e99SRandall Stewart 		sctp_iterator_work(it);
1489f7517433SRandall Stewart 		CURVNET_RESTORE();
149042551e99SRandall Stewart 		SCTP_IPI_ITERATOR_WQ_LOCK();
14913c503c28SRandall Stewart 		/* sa_ignore FREED_MEMORY */
149242551e99SRandall Stewart 	}
1493f7517433SRandall Stewart 	sctp_it_ctl.iterator_running = 0;
149442551e99SRandall Stewart 	return;
149542551e99SRandall Stewart }
149642551e99SRandall Stewart 
1497f8829a4aSRandall Stewart 
1498f8829a4aSRandall Stewart static void
1499f8829a4aSRandall Stewart sctp_handle_addr_wq(void)
1500f8829a4aSRandall Stewart {
1501f8829a4aSRandall Stewart 	/* deal with the ADDR wq from the rtsock calls */
15024a9ef3f8SMichael Tuexen 	struct sctp_laddr *wi, *nwi;
150342551e99SRandall Stewart 	struct sctp_asconf_iterator *asc;
1504f8829a4aSRandall Stewart 
150542551e99SRandall Stewart 	SCTP_MALLOC(asc, struct sctp_asconf_iterator *,
1506207304d4SRandall Stewart 	    sizeof(struct sctp_asconf_iterator), SCTP_M_ASC_IT);
150742551e99SRandall Stewart 	if (asc == NULL) {
150842551e99SRandall Stewart 		/* Try later, no memory */
1509f8829a4aSRandall Stewart 		sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
1510f8829a4aSRandall Stewart 		    (struct sctp_inpcb *)NULL,
1511f8829a4aSRandall Stewart 		    (struct sctp_tcb *)NULL,
1512f8829a4aSRandall Stewart 		    (struct sctp_nets *)NULL);
151342551e99SRandall Stewart 		return;
1514f8829a4aSRandall Stewart 	}
151542551e99SRandall Stewart 	LIST_INIT(&asc->list_of_work);
151642551e99SRandall Stewart 	asc->cnt = 0;
1517f7517433SRandall Stewart 
15184a9ef3f8SMichael Tuexen 	LIST_FOREACH_SAFE(wi, &SCTP_BASE_INFO(addr_wq), sctp_nxt_addr, nwi) {
151942551e99SRandall Stewart 		LIST_REMOVE(wi, sctp_nxt_addr);
152042551e99SRandall Stewart 		LIST_INSERT_HEAD(&asc->list_of_work, wi, sctp_nxt_addr);
152142551e99SRandall Stewart 		asc->cnt++;
1522f8829a4aSRandall Stewart 	}
1523f7517433SRandall Stewart 
152442551e99SRandall Stewart 	if (asc->cnt == 0) {
1525207304d4SRandall Stewart 		SCTP_FREE(asc, SCTP_M_ASC_IT);
152642551e99SRandall Stewart 	} else {
15272b1c7de4SMichael Tuexen 		int ret;
15282b1c7de4SMichael Tuexen 
15292b1c7de4SMichael Tuexen 		ret = sctp_initiate_iterator(sctp_asconf_iterator_ep,
15301b649582SRandall Stewart 		    sctp_asconf_iterator_stcb,
153142551e99SRandall Stewart 		    NULL,	/* No ep end for boundall */
153242551e99SRandall Stewart 		    SCTP_PCB_FLAGS_BOUNDALL,
153342551e99SRandall Stewart 		    SCTP_PCB_ANY_FEATURES,
15341b649582SRandall Stewart 		    SCTP_ASOC_ANY_STATE,
15351b649582SRandall Stewart 		    (void *)asc, 0,
15361b649582SRandall Stewart 		    sctp_asconf_iterator_end, NULL, 0);
15372b1c7de4SMichael Tuexen 		if (ret) {
15382b1c7de4SMichael Tuexen 			SCTP_PRINTF("Failed to initiate iterator for handle_addr_wq\n");
1539b7b84c0eSMichael Tuexen 			/*
1540b7b84c0eSMichael Tuexen 			 * Freeing if we are stopping or put back on the
1541b7b84c0eSMichael Tuexen 			 * addr_wq.
1542b7b84c0eSMichael Tuexen 			 */
15432b1c7de4SMichael Tuexen 			if (SCTP_BASE_VAR(sctp_pcb_initialized) == 0) {
15442b1c7de4SMichael Tuexen 				sctp_asconf_iterator_end(asc, 0);
15452b1c7de4SMichael Tuexen 			} else {
15462b1c7de4SMichael Tuexen 				LIST_FOREACH(wi, &asc->list_of_work, sctp_nxt_addr) {
15472b1c7de4SMichael Tuexen 					LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
15482b1c7de4SMichael Tuexen 				}
15492b1c7de4SMichael Tuexen 				SCTP_FREE(asc, SCTP_M_ASC_IT);
15502b1c7de4SMichael Tuexen 			}
15512b1c7de4SMichael Tuexen 		}
155242551e99SRandall Stewart 	}
1553f8829a4aSRandall Stewart }
1554f8829a4aSRandall Stewart 
1555f8829a4aSRandall Stewart void
1556f8829a4aSRandall Stewart sctp_timeout_handler(void *t)
1557f8829a4aSRandall Stewart {
1558f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
1559f8829a4aSRandall Stewart 	struct sctp_tcb *stcb;
1560f8829a4aSRandall Stewart 	struct sctp_nets *net;
1561f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1562267dbe63SMichael Tuexen 	struct mbuf *op_err;
1563ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1564ceaad40aSRandall Stewart 	struct socket *so;
1565ceaad40aSRandall Stewart #endif
1566548f47a8SMichael Tuexen 	int did_output;
1567fa89f692SMichael Tuexen 	int type;
1568f8829a4aSRandall Stewart 
1569f8829a4aSRandall Stewart 	tmr = (struct sctp_timer *)t;
1570f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)tmr->ep;
1571f8829a4aSRandall Stewart 	stcb = (struct sctp_tcb *)tmr->tcb;
1572f8829a4aSRandall Stewart 	net = (struct sctp_nets *)tmr->net;
15738518270eSMichael Tuexen 	CURVNET_SET((struct vnet *)tmr->vnet);
1574f8829a4aSRandall Stewart 	did_output = 1;
1575f8829a4aSRandall Stewart 
1576f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1577f8829a4aSRandall Stewart 	sctp_audit_log(0xF0, (uint8_t)tmr->type);
1578f8829a4aSRandall Stewart 	sctp_auditing(3, inp, stcb, net);
1579f8829a4aSRandall Stewart #endif
1580f8829a4aSRandall Stewart 
1581f8829a4aSRandall Stewart 	/* sanity checks... */
1582f8829a4aSRandall Stewart 	if (tmr->self != (void *)tmr) {
1583f8829a4aSRandall Stewart 		/*
1584ad81507eSRandall Stewart 		 * SCTP_PRINTF("Stale SCTP timer fired (%p), ignoring...\n",
1585dd294dceSMichael Tuexen 		 * (void *)tmr);
1586f8829a4aSRandall Stewart 		 */
15878518270eSMichael Tuexen 		CURVNET_RESTORE();
1588f8829a4aSRandall Stewart 		return;
1589f8829a4aSRandall Stewart 	}
1590a5d547adSRandall Stewart 	tmr->stopped_from = 0xa001;
1591f8829a4aSRandall Stewart 	if (!SCTP_IS_TIMER_TYPE_VALID(tmr->type)) {
1592f8829a4aSRandall Stewart 		/*
1593ad81507eSRandall Stewart 		 * SCTP_PRINTF("SCTP timer fired with invalid type: 0x%x\n",
1594f8829a4aSRandall Stewart 		 * tmr->type);
1595f8829a4aSRandall Stewart 		 */
15968518270eSMichael Tuexen 		CURVNET_RESTORE();
1597f8829a4aSRandall Stewart 		return;
1598f8829a4aSRandall Stewart 	}
1599a5d547adSRandall Stewart 	tmr->stopped_from = 0xa002;
1600f8829a4aSRandall Stewart 	if ((tmr->type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL)) {
16018518270eSMichael Tuexen 		CURVNET_RESTORE();
1602f8829a4aSRandall Stewart 		return;
1603f8829a4aSRandall Stewart 	}
1604f8829a4aSRandall Stewart 	/* if this is an iterator timeout, get the struct and clear inp */
1605a5d547adSRandall Stewart 	tmr->stopped_from = 0xa003;
1606f8829a4aSRandall Stewart 	if (inp) {
1607f8829a4aSRandall Stewart 		SCTP_INP_INCR_REF(inp);
1608aa1808b7SMichael Tuexen 		if ((inp->sctp_socket == NULL) &&
1609f8829a4aSRandall Stewart 		    ((tmr->type != SCTP_TIMER_TYPE_INPKILL) &&
1610810ec536SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_INIT) &&
1611a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SEND) &&
1612a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_RECV) &&
1613a1e13272SRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_HEARTBEAT) &&
1614f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWN) &&
1615f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNACK) &&
1616f8829a4aSRandall Stewart 		    (tmr->type != SCTP_TIMER_TYPE_SHUTDOWNGUARD) &&
16172c62ba73SMichael Tuexen 		    (tmr->type != SCTP_TIMER_TYPE_ASOCKILL))) {
1618f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
16198518270eSMichael Tuexen 			CURVNET_RESTORE();
1620f8829a4aSRandall Stewart 			return;
1621f8829a4aSRandall Stewart 		}
1622f8829a4aSRandall Stewart 	}
1623a5d547adSRandall Stewart 	tmr->stopped_from = 0xa004;
1624f8829a4aSRandall Stewart 	if (stcb) {
1625c105859eSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1626f8829a4aSRandall Stewart 		if (stcb->asoc.state == 0) {
1627c105859eSRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1628f8829a4aSRandall Stewart 			if (inp) {
1629f8829a4aSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1630f8829a4aSRandall Stewart 			}
16318518270eSMichael Tuexen 			CURVNET_RESTORE();
1632f8829a4aSRandall Stewart 			return;
1633f8829a4aSRandall Stewart 		}
1634f8829a4aSRandall Stewart 	}
1635fa89f692SMichael Tuexen 	type = tmr->type;
1636a5d547adSRandall Stewart 	tmr->stopped_from = 0xa005;
1637fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer type %d goes off\n", type);
1638139bc87fSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
1639f8829a4aSRandall Stewart 		if (inp) {
1640f8829a4aSRandall Stewart 			SCTP_INP_DECR_REF(inp);
1641f8829a4aSRandall Stewart 		}
1642207304d4SRandall Stewart 		if (stcb) {
1643207304d4SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, -1);
1644207304d4SRandall Stewart 		}
16458518270eSMichael Tuexen 		CURVNET_RESTORE();
1646f8829a4aSRandall Stewart 		return;
1647f8829a4aSRandall Stewart 	}
1648a5d547adSRandall Stewart 	tmr->stopped_from = 0xa006;
1649a5d547adSRandall Stewart 
1650f8829a4aSRandall Stewart 	if (stcb) {
1651f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
165250cec919SRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, -1);
1653fa89f692SMichael Tuexen 		if ((type != SCTP_TIMER_TYPE_ASOCKILL) &&
1654b54d3a6cSRandall Stewart 		    ((stcb->asoc.state == 0) ||
1655b54d3a6cSRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED))) {
1656b54d3a6cSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
1657b54d3a6cSRandall Stewart 			if (inp) {
1658b54d3a6cSRandall Stewart 				SCTP_INP_DECR_REF(inp);
1659b54d3a6cSRandall Stewart 			}
16608518270eSMichael Tuexen 			CURVNET_RESTORE();
1661b54d3a6cSRandall Stewart 			return;
1662b54d3a6cSRandall Stewart 		}
16632c62ba73SMichael Tuexen 	} else if (inp != NULL) {
16642c62ba73SMichael Tuexen 		if (type != SCTP_TIMER_TYPE_INPKILL) {
16652c62ba73SMichael Tuexen 			SCTP_INP_WLOCK(inp);
16662c62ba73SMichael Tuexen 		}
16672c62ba73SMichael Tuexen 	} else {
16682c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_LOCK();
1669f8829a4aSRandall Stewart 	}
1670cd0a4ff6SPedro F. Giffuni 	/* record in stopped what t-o occurred */
1671fa89f692SMichael Tuexen 	tmr->stopped_from = type;
167244b7479bSRandall Stewart 
1673f8829a4aSRandall Stewart 	/* mark as being serviced now */
167444b7479bSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
167544b7479bSRandall Stewart 		/*
167644b7479bSRandall Stewart 		 * Callout has been rescheduled.
167744b7479bSRandall Stewart 		 */
167844b7479bSRandall Stewart 		goto get_out;
167944b7479bSRandall Stewart 	}
168044b7479bSRandall Stewart 	if (!SCTP_OS_TIMER_ACTIVE(&tmr->timer)) {
168144b7479bSRandall Stewart 		/*
168244b7479bSRandall Stewart 		 * Not active, so no action.
168344b7479bSRandall Stewart 		 */
168444b7479bSRandall Stewart 		goto get_out;
168544b7479bSRandall Stewart 	}
1686139bc87fSRandall Stewart 	SCTP_OS_TIMER_DEACTIVATE(&tmr->timer);
1687f8829a4aSRandall Stewart 
1688f8829a4aSRandall Stewart 	/* call the handler for the appropriate timer type */
1689fa89f692SMichael Tuexen 	switch (type) {
1690f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
1691f8829a4aSRandall Stewart 		sctp_handle_addr_wq();
1692f8829a4aSRandall Stewart 		break;
1693f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
1694ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1695ad81507eSRandall Stewart 			break;
1696ad81507eSRandall Stewart 		}
1697f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timodata);
1698f42a358aSRandall Stewart 		stcb->asoc.timodata++;
1699f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
1700f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
1701f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
1702f8829a4aSRandall Stewart 		}
1703b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
170460990c0cSMichael Tuexen 		if (sctp_t3rxt_timer(inp, stcb, net)) {
1705f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1706f8829a4aSRandall Stewart 
1707f8829a4aSRandall Stewart 			goto out_decr;
1708f8829a4aSRandall Stewart 		}
1709b54d3a6cSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
1710f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1711f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1712f8829a4aSRandall Stewart #endif
1713ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1714f8829a4aSRandall Stewart 		if ((stcb->asoc.num_send_timers_up == 0) &&
17154a9ef3f8SMichael Tuexen 		    (stcb->asoc.sent_queue_cnt > 0)) {
1716f8829a4aSRandall Stewart 			struct sctp_tmit_chunk *chk;
1717f8829a4aSRandall Stewart 
1718f8829a4aSRandall Stewart 			/*
1719f8829a4aSRandall Stewart 			 * safeguard. If there on some on the sent queue
1720f8829a4aSRandall Stewart 			 * somewhere but no timers running something is
1721f8829a4aSRandall Stewart 			 * wrong... so we start a timer on the first chunk
1722f8829a4aSRandall Stewart 			 * on the send queue on whatever net it is sent to.
1723f8829a4aSRandall Stewart 			 */
1724f8829a4aSRandall Stewart 			chk = TAILQ_FIRST(&stcb->asoc.sent_queue);
1725f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb,
1726f8829a4aSRandall Stewart 			    chk->whoTo);
1727f8829a4aSRandall Stewart 		}
1728f8829a4aSRandall Stewart 		break;
1729f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
1730ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1731ad81507eSRandall Stewart 			break;
1732ad81507eSRandall Stewart 		}
1733f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinit);
1734f42a358aSRandall Stewart 		stcb->asoc.timoinit++;
1735f8829a4aSRandall Stewart 		if (sctp_t1init_timer(inp, stcb, net)) {
1736f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1737f8829a4aSRandall Stewart 			goto out_decr;
1738f8829a4aSRandall Stewart 		}
1739f8829a4aSRandall Stewart 		/* We do output but not here */
1740f8829a4aSRandall Stewart 		did_output = 0;
1741f8829a4aSRandall Stewart 		break;
1742f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
1743ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1744ad81507eSRandall Stewart 			break;
1745ca85e948SMichael Tuexen 		}
1746f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timosack);
1747f42a358aSRandall Stewart 		stcb->asoc.timosack++;
1748689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_NOT_LOCKED);
1749f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1750f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1751f8829a4aSRandall Stewart #endif
1752ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SACK_TMR, SCTP_SO_NOT_LOCKED);
1753f8829a4aSRandall Stewart 		break;
1754f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
1755ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1756ad81507eSRandall Stewart 			break;
1757ad81507eSRandall Stewart 		}
1758f8829a4aSRandall Stewart 		if (sctp_shutdown_timer(inp, stcb, net)) {
1759f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1760f8829a4aSRandall Stewart 			goto out_decr;
1761f8829a4aSRandall Stewart 		}
1762f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdown);
1763f42a358aSRandall Stewart 		stcb->asoc.timoshutdown++;
1764f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1765f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1766f8829a4aSRandall Stewart #endif
1767ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_TMR, SCTP_SO_NOT_LOCKED);
1768f8829a4aSRandall Stewart 		break;
1769f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
1770ca85e948SMichael Tuexen 		if ((stcb == NULL) || (inp == NULL) || (net == NULL)) {
1771ad81507eSRandall Stewart 			break;
1772ad81507eSRandall Stewart 		}
1773f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoheartbeat);
1774f42a358aSRandall Stewart 		stcb->asoc.timoheartbeat++;
1775ca85e948SMichael Tuexen 		if (sctp_heartbeat_timer(inp, stcb, net)) {
1776f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1777f8829a4aSRandall Stewart 			goto out_decr;
1778f8829a4aSRandall Stewart 		}
1779f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1780ca85e948SMichael Tuexen 		sctp_auditing(4, inp, stcb, net);
1781f8829a4aSRandall Stewart #endif
1782ca85e948SMichael Tuexen 		if (!(net->dest_state & SCTP_ADDR_NOHB)) {
1783629749b6SMichael Tuexen 			sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
1784ceaad40aSRandall Stewart 			sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_HB_TMR, SCTP_SO_NOT_LOCKED);
1785f8829a4aSRandall Stewart 		}
1786f8829a4aSRandall Stewart 		break;
1787f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
1788ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1789ad81507eSRandall Stewart 			break;
1790ad81507eSRandall Stewart 		}
17910053ed28SMichael Tuexen 
1792f8829a4aSRandall Stewart 		if (sctp_cookie_timer(inp, stcb, net)) {
1793f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1794f8829a4aSRandall Stewart 			goto out_decr;
1795f8829a4aSRandall Stewart 		}
1796f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timocookie);
1797f42a358aSRandall Stewart 		stcb->asoc.timocookie++;
1798f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1799f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1800f8829a4aSRandall Stewart #endif
1801f8829a4aSRandall Stewart 		/*
1802f8829a4aSRandall Stewart 		 * We consider T3 and Cookie timer pretty much the same with
1803f8829a4aSRandall Stewart 		 * respect to where from in chunk_output.
1804f8829a4aSRandall Stewart 		 */
1805ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1806f8829a4aSRandall Stewart 		break;
1807f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
1808f8829a4aSRandall Stewart 		{
1809f8829a4aSRandall Stewart 			struct timeval tv;
1810f8829a4aSRandall Stewart 			int i, secret;
1811f8829a4aSRandall Stewart 
1812ad81507eSRandall Stewart 			if (inp == NULL) {
1813ad81507eSRandall Stewart 				break;
1814ad81507eSRandall Stewart 			}
1815f8829a4aSRandall Stewart 			SCTP_STAT_INCR(sctps_timosecret);
18166e55db54SRandall Stewart 			(void)SCTP_GETTIME_TIMEVAL(&tv);
1817f8829a4aSRandall Stewart 			inp->sctp_ep.time_of_secret_change = tv.tv_sec;
1818f8829a4aSRandall Stewart 			inp->sctp_ep.last_secret_number =
1819f8829a4aSRandall Stewart 			    inp->sctp_ep.current_secret_number;
1820f8829a4aSRandall Stewart 			inp->sctp_ep.current_secret_number++;
1821f8829a4aSRandall Stewart 			if (inp->sctp_ep.current_secret_number >=
1822f8829a4aSRandall Stewart 			    SCTP_HOW_MANY_SECRETS) {
1823f8829a4aSRandall Stewart 				inp->sctp_ep.current_secret_number = 0;
1824f8829a4aSRandall Stewart 			}
1825f8829a4aSRandall Stewart 			secret = (int)inp->sctp_ep.current_secret_number;
1826f8829a4aSRandall Stewart 			for (i = 0; i < SCTP_NUMBER_OF_SECRETS; i++) {
1827f8829a4aSRandall Stewart 				inp->sctp_ep.secret_key[secret][i] =
1828f8829a4aSRandall Stewart 				    sctp_select_initial_TSN(&inp->sctp_ep);
1829f8829a4aSRandall Stewart 			}
1830f8829a4aSRandall Stewart 			sctp_timer_start(SCTP_TIMER_TYPE_NEWCOOKIE, inp, stcb, net);
1831f8829a4aSRandall Stewart 		}
1832f8829a4aSRandall Stewart 		did_output = 0;
1833f8829a4aSRandall Stewart 		break;
1834f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
1835ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1836ad81507eSRandall Stewart 			break;
1837ad81507eSRandall Stewart 		}
1838f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timopathmtu);
1839f8829a4aSRandall Stewart 		sctp_pathmtu_timer(inp, stcb, net);
1840f8829a4aSRandall Stewart 		did_output = 0;
1841f8829a4aSRandall Stewart 		break;
1842f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
1843ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1844ad81507eSRandall Stewart 			break;
1845ad81507eSRandall Stewart 		}
1846f8829a4aSRandall Stewart 		if (sctp_shutdownack_timer(inp, stcb, net)) {
1847f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1848f8829a4aSRandall Stewart 			goto out_decr;
1849f8829a4aSRandall Stewart 		}
1850f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownack);
1851f42a358aSRandall Stewart 		stcb->asoc.timoshutdownack++;
1852f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1853f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1854f8829a4aSRandall Stewart #endif
1855ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SHUT_ACK_TMR, SCTP_SO_NOT_LOCKED);
1856f8829a4aSRandall Stewart 		break;
1857f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
1858ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1859ad81507eSRandall Stewart 			break;
1860ad81507eSRandall Stewart 		}
1861f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoshutdownguard);
1862267dbe63SMichael Tuexen 		op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1863267dbe63SMichael Tuexen 		    "Shutdown guard timer expired");
1864267dbe63SMichael Tuexen 		sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1865f8829a4aSRandall Stewart 		/* no need to unlock on tcb its gone */
1866f8829a4aSRandall Stewart 		goto out_decr;
1867f8829a4aSRandall Stewart 
1868f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
1869ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1870ad81507eSRandall Stewart 			break;
1871ad81507eSRandall Stewart 		}
1872f8829a4aSRandall Stewart 		if (sctp_strreset_timer(inp, stcb, net)) {
1873f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1874f8829a4aSRandall Stewart 			goto out_decr;
1875f8829a4aSRandall Stewart 		}
1876f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timostrmrst);
1877ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_TMR, SCTP_SO_NOT_LOCKED);
1878f8829a4aSRandall Stewart 		break;
1879f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
1880ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1881ad81507eSRandall Stewart 			break;
1882ad81507eSRandall Stewart 		}
1883f8829a4aSRandall Stewart 		if (sctp_asconf_timer(inp, stcb, net)) {
1884f8829a4aSRandall Stewart 			/* no need to unlock on tcb its gone */
1885f8829a4aSRandall Stewart 			goto out_decr;
1886f8829a4aSRandall Stewart 		}
1887f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoasconf);
1888f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1889f8829a4aSRandall Stewart 		sctp_auditing(4, inp, stcb, net);
1890f8829a4aSRandall Stewart #endif
1891ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_ASCONF_TMR, SCTP_SO_NOT_LOCKED);
1892f8829a4aSRandall Stewart 		break;
1893851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
1894851b7298SRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1895851b7298SRandall Stewart 			break;
1896851b7298SRandall Stewart 		}
189704ee05e8SRandall Stewart 		sctp_delete_prim_timer(inp, stcb, net);
1898851b7298SRandall Stewart 		SCTP_STAT_INCR(sctps_timodelprim);
1899851b7298SRandall Stewart 		break;
1900f8829a4aSRandall Stewart 
1901f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
1902ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1903ad81507eSRandall Stewart 			break;
1904ad81507eSRandall Stewart 		}
1905f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoautoclose);
1906f8829a4aSRandall Stewart 		sctp_autoclose_timer(inp, stcb, net);
1907ceaad40aSRandall Stewart 		sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1908f8829a4aSRandall Stewart 		did_output = 0;
1909f8829a4aSRandall Stewart 		break;
1910f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
1911ad81507eSRandall Stewart 		if ((stcb == NULL) || (inp == NULL)) {
1912ad81507eSRandall Stewart 			break;
1913ad81507eSRandall Stewart 		}
1914f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoassockill);
1915f8829a4aSRandall Stewart 		/* Can we free it yet? */
1916f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1917ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_ASOCKILL, inp, stcb, NULL,
1918ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_1);
1919ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1920ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
1921ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
1922ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
1923ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
1924ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
1925ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
1926ceaad40aSRandall Stewart #endif
1927ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
1928ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_2);
1929ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
1930ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
1931ceaad40aSRandall Stewart #endif
1932f8829a4aSRandall Stewart 		/*
1933f8829a4aSRandall Stewart 		 * free asoc, always unlocks (or destroy's) so prevent
1934f8829a4aSRandall Stewart 		 * duplicate unlock or unlock of a free mtx :-0
1935f8829a4aSRandall Stewart 		 */
1936f8829a4aSRandall Stewart 		stcb = NULL;
1937f8829a4aSRandall Stewart 		goto out_no_decr;
1938f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
1939f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_timoinpkill);
1940ad81507eSRandall Stewart 		if (inp == NULL) {
1941ad81507eSRandall Stewart 			break;
1942ad81507eSRandall Stewart 		}
1943f8829a4aSRandall Stewart 		/*
1944f8829a4aSRandall Stewart 		 * special case, take away our increment since WE are the
1945f8829a4aSRandall Stewart 		 * killer
1946f8829a4aSRandall Stewart 		 */
1947f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1948ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_INPKILL, inp, NULL, NULL,
1949ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_3);
1950b0552ae2SRandall Stewart 		sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
19510c7dc840SRandall Stewart 		    SCTP_CALLED_FROM_INPKILL_TIMER);
1952d61374e1SRandall Stewart 		inp = NULL;
1953f8829a4aSRandall Stewart 		goto out_no_decr;
1954f8829a4aSRandall Stewart 	default:
1955ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "sctp_timeout_handler:unknown timer %d\n",
1956fa89f692SMichael Tuexen 		    type);
1957f8829a4aSRandall Stewart 		break;
195860990c0cSMichael Tuexen 	}
1959f8829a4aSRandall Stewart #ifdef SCTP_AUDITING_ENABLED
1960fa89f692SMichael Tuexen 	sctp_audit_log(0xF1, (uint8_t)type);
1961f8829a4aSRandall Stewart 	if (inp)
1962f8829a4aSRandall Stewart 		sctp_auditing(5, inp, stcb, net);
1963f8829a4aSRandall Stewart #endif
1964f8829a4aSRandall Stewart 	if ((did_output) && stcb) {
1965f8829a4aSRandall Stewart 		/*
1966f8829a4aSRandall Stewart 		 * Now we need to clean up the control chunk chain if an
1967f8829a4aSRandall Stewart 		 * ECNE is on it. It must be marked as UNSENT again so next
1968f8829a4aSRandall Stewart 		 * call will continue to send it until such time that we get
1969f8829a4aSRandall Stewart 		 * a CWR, to remove it. It is, however, less likely that we
1970f8829a4aSRandall Stewart 		 * will find a ecn echo on the chain though.
1971f8829a4aSRandall Stewart 		 */
1972f8829a4aSRandall Stewart 		sctp_fix_ecn_echo(&stcb->asoc);
1973f8829a4aSRandall Stewart 	}
197444b7479bSRandall Stewart get_out:
1975f8829a4aSRandall Stewart 	if (stcb) {
1976f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
19772c62ba73SMichael Tuexen 	} else if (inp != NULL) {
19782c62ba73SMichael Tuexen 		SCTP_INP_WUNLOCK(inp);
19792c62ba73SMichael Tuexen 	} else {
19802c62ba73SMichael Tuexen 		SCTP_WQ_ADDR_UNLOCK();
1981f8829a4aSRandall Stewart 	}
19822c62ba73SMichael Tuexen 
1983f8829a4aSRandall Stewart out_decr:
1984f8829a4aSRandall Stewart 	if (inp) {
1985f8829a4aSRandall Stewart 		SCTP_INP_DECR_REF(inp);
1986f8829a4aSRandall Stewart 	}
19870053ed28SMichael Tuexen 
1988f8829a4aSRandall Stewart out_no_decr:
1989fa89f692SMichael Tuexen 	SCTPDBG(SCTP_DEBUG_TIMER1, "Timer now complete (type = %d)\n", type);
19908518270eSMichael Tuexen 	CURVNET_RESTORE();
1991f8829a4aSRandall Stewart }
1992f8829a4aSRandall Stewart 
1993ad81507eSRandall Stewart void
1994f8829a4aSRandall Stewart sctp_timer_start(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1995f8829a4aSRandall Stewart     struct sctp_nets *net)
1996f8829a4aSRandall Stewart {
1997ca85e948SMichael Tuexen 	uint32_t to_ticks;
1998f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
1999f8829a4aSRandall Stewart 
2000139bc87fSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) && (inp == NULL))
2001ad81507eSRandall Stewart 		return;
2002f8829a4aSRandall Stewart 
2003f8829a4aSRandall Stewart 	tmr = NULL;
2004f8829a4aSRandall Stewart 	if (stcb) {
2005f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2006f8829a4aSRandall Stewart 	}
2007f8829a4aSRandall Stewart 	switch (t_type) {
2008f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2009f8829a4aSRandall Stewart 		/* Only 1 tick away :-) */
2010b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
201142551e99SRandall Stewart 		to_ticks = SCTP_ADDRESS_TICK_DELAY;
2012f8829a4aSRandall Stewart 		break;
2013f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2014f8829a4aSRandall Stewart 		/* Here we use the RTO timer */
2015f8829a4aSRandall Stewart 		{
2016f8829a4aSRandall Stewart 			int rto_val;
2017f8829a4aSRandall Stewart 
2018f8829a4aSRandall Stewart 			if ((stcb == NULL) || (net == NULL)) {
2019ad81507eSRandall Stewart 				return;
2020f8829a4aSRandall Stewart 			}
2021f8829a4aSRandall Stewart 			tmr = &net->rxt_timer;
2022f8829a4aSRandall Stewart 			if (net->RTO == 0) {
2023f8829a4aSRandall Stewart 				rto_val = stcb->asoc.initial_rto;
2024f8829a4aSRandall Stewart 			} else {
2025f8829a4aSRandall Stewart 				rto_val = net->RTO;
2026f8829a4aSRandall Stewart 			}
2027f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(rto_val);
2028f8829a4aSRandall Stewart 		}
2029f8829a4aSRandall Stewart 		break;
2030f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2031f8829a4aSRandall Stewart 		/*
2032f8829a4aSRandall Stewart 		 * Here we use the INIT timer default usually about 1
2033f8829a4aSRandall Stewart 		 * minute.
2034f8829a4aSRandall Stewart 		 */
2035f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2036ad81507eSRandall Stewart 			return;
2037f8829a4aSRandall Stewart 		}
2038f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2039f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2040f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2041f8829a4aSRandall Stewart 		} else {
2042f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2043f8829a4aSRandall Stewart 		}
2044f8829a4aSRandall Stewart 		break;
2045f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2046f8829a4aSRandall Stewart 		/*
2047f8829a4aSRandall Stewart 		 * Here we use the Delayed-Ack timer value from the inp
2048f8829a4aSRandall Stewart 		 * ususually about 200ms.
2049f8829a4aSRandall Stewart 		 */
2050f8829a4aSRandall Stewart 		if (stcb == NULL) {
2051ad81507eSRandall Stewart 			return;
2052f8829a4aSRandall Stewart 		}
2053f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2054f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.delayed_ack);
2055f8829a4aSRandall Stewart 		break;
2056f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2057f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination. */
2058f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2059ad81507eSRandall Stewart 			return;
2060f8829a4aSRandall Stewart 		}
2061f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2062f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2063f8829a4aSRandall Stewart 		} else {
2064f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2065f8829a4aSRandall Stewart 		}
2066f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2067f8829a4aSRandall Stewart 		break;
2068f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2069f8829a4aSRandall Stewart 		/*
2070f8829a4aSRandall Stewart 		 * the net is used here so that we can add in the RTO. Even
2071f8829a4aSRandall Stewart 		 * though we use a different timer. We also add the HB timer
2072f8829a4aSRandall Stewart 		 * PLUS a random jitter.
2073f8829a4aSRandall Stewart 		 */
2074f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2075ad81507eSRandall Stewart 			return;
2076ad81507eSRandall Stewart 		} else {
2077f8829a4aSRandall Stewart 			uint32_t rndval;
2078ca85e948SMichael Tuexen 			uint32_t jitter;
2079f8829a4aSRandall Stewart 
2080ca85e948SMichael Tuexen 			if ((net->dest_state & SCTP_ADDR_NOHB) &&
2081ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_UNCONFIRMED)) {
2082ad81507eSRandall Stewart 				return;
2083f8829a4aSRandall Stewart 			}
2084f8829a4aSRandall Stewart 			if (net->RTO == 0) {
2085ca85e948SMichael Tuexen 				to_ticks = stcb->asoc.initial_rto;
2086f8829a4aSRandall Stewart 			} else {
2087ca85e948SMichael Tuexen 				to_ticks = net->RTO;
2088f8829a4aSRandall Stewart 			}
2089ca85e948SMichael Tuexen 			rndval = sctp_select_initial_TSN(&inp->sctp_ep);
2090ca85e948SMichael Tuexen 			jitter = rndval % to_ticks;
2091ca85e948SMichael Tuexen 			if (jitter >= (to_ticks >> 1)) {
2092ca85e948SMichael Tuexen 				to_ticks = to_ticks + (jitter - (to_ticks >> 1));
2093f8829a4aSRandall Stewart 			} else {
2094ca85e948SMichael Tuexen 				to_ticks = to_ticks - jitter;
2095f8829a4aSRandall Stewart 			}
2096ca85e948SMichael Tuexen 			if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
2097ca85e948SMichael Tuexen 			    !(net->dest_state & SCTP_ADDR_PF)) {
2098ca85e948SMichael Tuexen 				to_ticks += net->heart_beat_delay;
2099f8829a4aSRandall Stewart 			}
2100f8829a4aSRandall Stewart 			/*
2101f8829a4aSRandall Stewart 			 * Now we must convert the to_ticks that are now in
2102f8829a4aSRandall Stewart 			 * ms to ticks.
2103f8829a4aSRandall Stewart 			 */
2104f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(to_ticks);
2105ca85e948SMichael Tuexen 			tmr = &net->hb_timer;
2106f8829a4aSRandall Stewart 		}
2107f8829a4aSRandall Stewart 		break;
2108f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2109f8829a4aSRandall Stewart 		/*
2110f8829a4aSRandall Stewart 		 * Here we can use the RTO timer from the network since one
2111f8829a4aSRandall Stewart 		 * RTT was compelete. If a retran happened then we will be
2112f8829a4aSRandall Stewart 		 * using the RTO initial value.
2113f8829a4aSRandall Stewart 		 */
2114f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2115ad81507eSRandall Stewart 			return;
2116f8829a4aSRandall Stewart 		}
2117f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2118f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2119f8829a4aSRandall Stewart 		} else {
2120f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2121f8829a4aSRandall Stewart 		}
2122f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2123f8829a4aSRandall Stewart 		break;
2124f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2125f8829a4aSRandall Stewart 		/*
2126f8829a4aSRandall Stewart 		 * nothing needed but the endpoint here ususually about 60
2127f8829a4aSRandall Stewart 		 * minutes.
2128f8829a4aSRandall Stewart 		 */
2129f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2130f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_SIGNATURE];
2131f8829a4aSRandall Stewart 		break;
2132f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2133f8829a4aSRandall Stewart 		if (stcb == NULL) {
2134ad81507eSRandall Stewart 			return;
2135f8829a4aSRandall Stewart 		}
2136f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2137f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_ASOC_KILL_TIMEOUT);
2138f8829a4aSRandall Stewart 		break;
2139f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2140f8829a4aSRandall Stewart 		/*
2141f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2142f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2143f8829a4aSRandall Stewart 		 * state.
2144f8829a4aSRandall Stewart 		 */
2145f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2146f8829a4aSRandall Stewart 		to_ticks = MSEC_TO_TICKS(SCTP_INP_KILL_TIMEOUT);
2147f8829a4aSRandall Stewart 		break;
2148f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2149f8829a4aSRandall Stewart 		/*
2150f8829a4aSRandall Stewart 		 * Here we use the value found in the EP for PMTU ususually
2151f8829a4aSRandall Stewart 		 * about 10 minutes.
2152f8829a4aSRandall Stewart 		 */
2153f3ba71beSMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
2154ad81507eSRandall Stewart 			return;
2155f8829a4aSRandall Stewart 		}
215680c79bbeSMichael Tuexen 		if (net->dest_state & SCTP_ADDR_NO_PMTUD) {
215780c79bbeSMichael Tuexen 			return;
215880c79bbeSMichael Tuexen 		}
2159f8829a4aSRandall Stewart 		to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_PMTU];
2160f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2161f8829a4aSRandall Stewart 		break;
2162f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2163f8829a4aSRandall Stewart 		/* Here we use the RTO of the destination */
2164f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2165ad81507eSRandall Stewart 			return;
2166f8829a4aSRandall Stewart 		}
2167f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2168f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2169f8829a4aSRandall Stewart 		} else {
2170f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2171f8829a4aSRandall Stewart 		}
2172f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2173f8829a4aSRandall Stewart 		break;
2174f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2175f8829a4aSRandall Stewart 		/*
2176f8829a4aSRandall Stewart 		 * Here we use the endpoints shutdown guard timer usually
2177f8829a4aSRandall Stewart 		 * about 3 minutes.
2178f8829a4aSRandall Stewart 		 */
2179f3ba71beSMichael Tuexen 		if (stcb == NULL) {
2180ad81507eSRandall Stewart 			return;
2181f8829a4aSRandall Stewart 		}
21822e2d6794SMichael Tuexen 		if (inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN] == 0) {
21832e2d6794SMichael Tuexen 			to_ticks = 5 * MSEC_TO_TICKS(stcb->asoc.maxrto);
21842e2d6794SMichael Tuexen 		} else {
2185f8829a4aSRandall Stewart 			to_ticks = inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_MAXSHUTDOWN];
21862e2d6794SMichael Tuexen 		}
2187f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2188f8829a4aSRandall Stewart 		break;
2189f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2190f8829a4aSRandall Stewart 		/*
21911b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
21921b649582SRandall Stewart 		 * the net's RTO.
2193f8829a4aSRandall Stewart 		 */
2194f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2195ad81507eSRandall Stewart 			return;
2196f8829a4aSRandall Stewart 		}
2197f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2198f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2199f8829a4aSRandall Stewart 		} else {
2200f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2201f8829a4aSRandall Stewart 		}
2202f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2203f8829a4aSRandall Stewart 		break;
2204f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2205f8829a4aSRandall Stewart 		/*
22061b649582SRandall Stewart 		 * Here the timer comes from the stcb but its value is from
22071b649582SRandall Stewart 		 * the net's RTO.
2208f8829a4aSRandall Stewart 		 */
2209f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
2210ad81507eSRandall Stewart 			return;
2211f8829a4aSRandall Stewart 		}
2212f8829a4aSRandall Stewart 		if (net->RTO == 0) {
2213f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2214f8829a4aSRandall Stewart 		} else {
2215f8829a4aSRandall Stewart 			to_ticks = MSEC_TO_TICKS(net->RTO);
2216f8829a4aSRandall Stewart 		}
2217f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2218f8829a4aSRandall Stewart 		break;
2219851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2220851b7298SRandall Stewart 		if ((stcb == NULL) || (net != NULL)) {
2221851b7298SRandall Stewart 			return;
2222851b7298SRandall Stewart 		}
2223851b7298SRandall Stewart 		to_ticks = MSEC_TO_TICKS(stcb->asoc.initial_rto);
2224851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2225851b7298SRandall Stewart 		break;
2226f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2227f8829a4aSRandall Stewart 		if (stcb == NULL) {
2228ad81507eSRandall Stewart 			return;
2229f8829a4aSRandall Stewart 		}
2230f8829a4aSRandall Stewart 		if (stcb->asoc.sctp_autoclose_ticks == 0) {
2231f8829a4aSRandall Stewart 			/*
2232f8829a4aSRandall Stewart 			 * Really an error since stcb is NOT set to
2233f8829a4aSRandall Stewart 			 * autoclose
2234f8829a4aSRandall Stewart 			 */
2235ad81507eSRandall Stewart 			return;
2236f8829a4aSRandall Stewart 		}
2237f8829a4aSRandall Stewart 		to_ticks = stcb->asoc.sctp_autoclose_ticks;
2238f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2239f8829a4aSRandall Stewart 		break;
2240f8829a4aSRandall Stewart 	default:
2241ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
22426e9c45e0SMichael Tuexen 		    __func__, t_type);
2243ad81507eSRandall Stewart 		return;
2244f8829a4aSRandall Stewart 		break;
224560990c0cSMichael Tuexen 	}
2246f8829a4aSRandall Stewart 	if ((to_ticks <= 0) || (tmr == NULL)) {
2247ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: %d:software error to_ticks:%d tmr:%p not set ??\n",
22486e9c45e0SMichael Tuexen 		    __func__, t_type, to_ticks, (void *)tmr);
2249ad81507eSRandall Stewart 		return;
2250f8829a4aSRandall Stewart 	}
2251139bc87fSRandall Stewart 	if (SCTP_OS_TIMER_PENDING(&tmr->timer)) {
2252f8829a4aSRandall Stewart 		/*
2253f8829a4aSRandall Stewart 		 * we do NOT allow you to have it already running. if it is
2254f8829a4aSRandall Stewart 		 * we leave the current one up unchanged
2255f8829a4aSRandall Stewart 		 */
2256ad81507eSRandall Stewart 		return;
2257f8829a4aSRandall Stewart 	}
2258f8829a4aSRandall Stewart 	/* At this point we can proceed */
2259f8829a4aSRandall Stewart 	if (t_type == SCTP_TIMER_TYPE_SEND) {
2260f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up++;
2261f8829a4aSRandall Stewart 	}
2262a5d547adSRandall Stewart 	tmr->stopped_from = 0;
2263f8829a4aSRandall Stewart 	tmr->type = t_type;
2264f8829a4aSRandall Stewart 	tmr->ep = (void *)inp;
2265f8829a4aSRandall Stewart 	tmr->tcb = (void *)stcb;
2266f8829a4aSRandall Stewart 	tmr->net = (void *)net;
2267f8829a4aSRandall Stewart 	tmr->self = (void *)tmr;
22688518270eSMichael Tuexen 	tmr->vnet = (void *)curvnet;
2269c4739e2fSRandall Stewart 	tmr->ticks = sctp_get_tick_count();
2270ad81507eSRandall Stewart 	(void)SCTP_OS_TIMER_START(&tmr->timer, to_ticks, sctp_timeout_handler, tmr);
2271ad81507eSRandall Stewart 	return;
2272f8829a4aSRandall Stewart }
2273f8829a4aSRandall Stewart 
22746e55db54SRandall Stewart void
2275f8829a4aSRandall Stewart sctp_timer_stop(int t_type, struct sctp_inpcb *inp, struct sctp_tcb *stcb,
2276a5d547adSRandall Stewart     struct sctp_nets *net, uint32_t from)
2277f8829a4aSRandall Stewart {
2278f8829a4aSRandall Stewart 	struct sctp_timer *tmr;
2279f8829a4aSRandall Stewart 
2280f8829a4aSRandall Stewart 	if ((t_type != SCTP_TIMER_TYPE_ADDR_WQ) &&
2281f8829a4aSRandall Stewart 	    (inp == NULL))
22826e55db54SRandall Stewart 		return;
2283f8829a4aSRandall Stewart 
2284f8829a4aSRandall Stewart 	tmr = NULL;
2285f8829a4aSRandall Stewart 	if (stcb) {
2286f8829a4aSRandall Stewart 		SCTP_TCB_LOCK_ASSERT(stcb);
2287f8829a4aSRandall Stewart 	}
2288f8829a4aSRandall Stewart 	switch (t_type) {
2289f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ADDR_WQ:
2290b3f1ea41SRandall Stewart 		tmr = &SCTP_BASE_INFO(addr_wq_timer);
2291f8829a4aSRandall Stewart 		break;
2292f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SEND:
2293f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
22946e55db54SRandall Stewart 			return;
2295f8829a4aSRandall Stewart 		}
2296f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2297f8829a4aSRandall Stewart 		break;
2298f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INIT:
2299f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23006e55db54SRandall Stewart 			return;
2301f8829a4aSRandall Stewart 		}
2302f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2303f8829a4aSRandall Stewart 		break;
2304f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_RECV:
2305f8829a4aSRandall Stewart 		if (stcb == NULL) {
23066e55db54SRandall Stewart 			return;
2307f8829a4aSRandall Stewart 		}
2308f8829a4aSRandall Stewart 		tmr = &stcb->asoc.dack_timer;
2309f8829a4aSRandall Stewart 		break;
2310f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWN:
2311f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23126e55db54SRandall Stewart 			return;
2313f8829a4aSRandall Stewart 		}
2314f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2315f8829a4aSRandall Stewart 		break;
2316f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_HEARTBEAT:
2317ca85e948SMichael Tuexen 		if ((stcb == NULL) || (net == NULL)) {
23186e55db54SRandall Stewart 			return;
2319f8829a4aSRandall Stewart 		}
2320ca85e948SMichael Tuexen 		tmr = &net->hb_timer;
2321f8829a4aSRandall Stewart 		break;
2322f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_COOKIE:
2323f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23246e55db54SRandall Stewart 			return;
2325f8829a4aSRandall Stewart 		}
2326f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2327f8829a4aSRandall Stewart 		break;
2328f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_NEWCOOKIE:
2329f8829a4aSRandall Stewart 		/* nothing needed but the endpoint here */
2330f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2331f8829a4aSRandall Stewart 		/*
2332f8829a4aSRandall Stewart 		 * We re-use the newcookie timer for the INP kill timer. We
2333f8829a4aSRandall Stewart 		 * must assure that we do not kill it by accident.
2334f8829a4aSRandall Stewart 		 */
2335f8829a4aSRandall Stewart 		break;
2336f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASOCKILL:
2337f8829a4aSRandall Stewart 		/*
2338f8829a4aSRandall Stewart 		 * Stop the asoc kill timer.
2339f8829a4aSRandall Stewart 		 */
2340f8829a4aSRandall Stewart 		if (stcb == NULL) {
23416e55db54SRandall Stewart 			return;
2342f8829a4aSRandall Stewart 		}
2343f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2344f8829a4aSRandall Stewart 		break;
2345f8829a4aSRandall Stewart 
2346f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_INPKILL:
2347f8829a4aSRandall Stewart 		/*
2348f8829a4aSRandall Stewart 		 * The inp is setup to die. We re-use the signature_chage
2349f8829a4aSRandall Stewart 		 * timer since that has stopped and we are in the GONE
2350f8829a4aSRandall Stewart 		 * state.
2351f8829a4aSRandall Stewart 		 */
2352f8829a4aSRandall Stewart 		tmr = &inp->sctp_ep.signature_change;
2353f8829a4aSRandall Stewart 		break;
2354f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_PATHMTURAISE:
2355f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23566e55db54SRandall Stewart 			return;
2357f8829a4aSRandall Stewart 		}
2358f8829a4aSRandall Stewart 		tmr = &net->pmtu_timer;
2359f8829a4aSRandall Stewart 		break;
2360f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNACK:
2361f8829a4aSRandall Stewart 		if ((stcb == NULL) || (net == NULL)) {
23626e55db54SRandall Stewart 			return;
2363f8829a4aSRandall Stewart 		}
2364f8829a4aSRandall Stewart 		tmr = &net->rxt_timer;
2365f8829a4aSRandall Stewart 		break;
2366f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_SHUTDOWNGUARD:
2367f8829a4aSRandall Stewart 		if (stcb == NULL) {
23686e55db54SRandall Stewart 			return;
2369f8829a4aSRandall Stewart 		}
2370f8829a4aSRandall Stewart 		tmr = &stcb->asoc.shut_guard_timer;
2371f8829a4aSRandall Stewart 		break;
2372f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_STRRESET:
2373f8829a4aSRandall Stewart 		if (stcb == NULL) {
23746e55db54SRandall Stewart 			return;
2375f8829a4aSRandall Stewart 		}
2376f8829a4aSRandall Stewart 		tmr = &stcb->asoc.strreset_timer;
2377f8829a4aSRandall Stewart 		break;
2378f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_ASCONF:
2379f8829a4aSRandall Stewart 		if (stcb == NULL) {
23806e55db54SRandall Stewart 			return;
2381f8829a4aSRandall Stewart 		}
2382f8829a4aSRandall Stewart 		tmr = &stcb->asoc.asconf_timer;
2383f8829a4aSRandall Stewart 		break;
2384851b7298SRandall Stewart 	case SCTP_TIMER_TYPE_PRIM_DELETED:
2385851b7298SRandall Stewart 		if (stcb == NULL) {
2386851b7298SRandall Stewart 			return;
2387851b7298SRandall Stewart 		}
2388851b7298SRandall Stewart 		tmr = &stcb->asoc.delete_prim_timer;
2389851b7298SRandall Stewart 		break;
2390f8829a4aSRandall Stewart 	case SCTP_TIMER_TYPE_AUTOCLOSE:
2391f8829a4aSRandall Stewart 		if (stcb == NULL) {
23926e55db54SRandall Stewart 			return;
2393f8829a4aSRandall Stewart 		}
2394f8829a4aSRandall Stewart 		tmr = &stcb->asoc.autoclose_timer;
2395f8829a4aSRandall Stewart 		break;
2396f8829a4aSRandall Stewart 	default:
2397ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_TIMER1, "%s: Unknown timer type %d\n",
23986e9c45e0SMichael Tuexen 		    __func__, t_type);
2399f8829a4aSRandall Stewart 		break;
240060990c0cSMichael Tuexen 	}
2401f8829a4aSRandall Stewart 	if (tmr == NULL) {
24026e55db54SRandall Stewart 		return;
2403f8829a4aSRandall Stewart 	}
2404f8829a4aSRandall Stewart 	if ((tmr->type != t_type) && tmr->type) {
2405f8829a4aSRandall Stewart 		/*
2406f8829a4aSRandall Stewart 		 * Ok we have a timer that is under joint use. Cookie timer
2407f8829a4aSRandall Stewart 		 * per chance with the SEND timer. We therefore are NOT
2408f8829a4aSRandall Stewart 		 * running the timer that the caller wants stopped.  So just
2409f8829a4aSRandall Stewart 		 * return.
2410f8829a4aSRandall Stewart 		 */
24116e55db54SRandall Stewart 		return;
2412f8829a4aSRandall Stewart 	}
2413ad81507eSRandall Stewart 	if ((t_type == SCTP_TIMER_TYPE_SEND) && (stcb != NULL)) {
2414f8829a4aSRandall Stewart 		stcb->asoc.num_send_timers_up--;
2415f8829a4aSRandall Stewart 		if (stcb->asoc.num_send_timers_up < 0) {
2416f8829a4aSRandall Stewart 			stcb->asoc.num_send_timers_up = 0;
2417f8829a4aSRandall Stewart 		}
2418f8829a4aSRandall Stewart 	}
2419f8829a4aSRandall Stewart 	tmr->self = NULL;
2420a5d547adSRandall Stewart 	tmr->stopped_from = from;
24216e55db54SRandall Stewart 	(void)SCTP_OS_TIMER_STOP(&tmr->timer);
24226e55db54SRandall Stewart 	return;
2423f8829a4aSRandall Stewart }
2424f8829a4aSRandall Stewart 
2425f8829a4aSRandall Stewart uint32_t
2426b0471b4bSMichael Tuexen sctp_calculate_len(struct mbuf *m)
2427b0471b4bSMichael Tuexen {
2428f8829a4aSRandall Stewart 	uint32_t tlen = 0;
2429f8829a4aSRandall Stewart 	struct mbuf *at;
2430f8829a4aSRandall Stewart 
2431f8829a4aSRandall Stewart 	at = m;
2432f8829a4aSRandall Stewart 	while (at) {
2433139bc87fSRandall Stewart 		tlen += SCTP_BUF_LEN(at);
2434139bc87fSRandall Stewart 		at = SCTP_BUF_NEXT(at);
2435f8829a4aSRandall Stewart 	}
2436f8829a4aSRandall Stewart 	return (tlen);
2437f8829a4aSRandall Stewart }
2438f8829a4aSRandall Stewart 
2439f8829a4aSRandall Stewart void
2440f8829a4aSRandall Stewart sctp_mtu_size_reset(struct sctp_inpcb *inp,
244144b7479bSRandall Stewart     struct sctp_association *asoc, uint32_t mtu)
2442f8829a4aSRandall Stewart {
2443f8829a4aSRandall Stewart 	/*
2444f8829a4aSRandall Stewart 	 * Reset the P-MTU size on this association, this involves changing
2445f8829a4aSRandall Stewart 	 * the asoc MTU, going through ANY chunk+overhead larger than mtu to
2446f8829a4aSRandall Stewart 	 * allow the DF flag to be cleared.
2447f8829a4aSRandall Stewart 	 */
2448f8829a4aSRandall Stewart 	struct sctp_tmit_chunk *chk;
2449f8829a4aSRandall Stewart 	unsigned int eff_mtu, ovh;
2450f8829a4aSRandall Stewart 
2451f8829a4aSRandall Stewart 	asoc->smallest_mtu = mtu;
2452f8829a4aSRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2453f8829a4aSRandall Stewart 		ovh = SCTP_MIN_OVERHEAD;
2454f8829a4aSRandall Stewart 	} else {
2455f8829a4aSRandall Stewart 		ovh = SCTP_MIN_V4_OVERHEAD;
2456f8829a4aSRandall Stewart 	}
2457f8829a4aSRandall Stewart 	eff_mtu = mtu - ovh;
2458f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->send_queue, sctp_next) {
2459f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2460f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2461f8829a4aSRandall Stewart 		}
2462f8829a4aSRandall Stewart 	}
2463f8829a4aSRandall Stewart 	TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
2464f8829a4aSRandall Stewart 		if (chk->send_size > eff_mtu) {
2465f8829a4aSRandall Stewart 			chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
2466f8829a4aSRandall Stewart 		}
2467f8829a4aSRandall Stewart 	}
2468f8829a4aSRandall Stewart }
2469f8829a4aSRandall Stewart 
2470f8829a4aSRandall Stewart 
2471f8829a4aSRandall Stewart /*
2472f8829a4aSRandall Stewart  * given an association and starting time of the current RTT period return
2473f42a358aSRandall Stewart  * RTO in number of msecs net should point to the current network
2474f8829a4aSRandall Stewart  */
2475899288aeSRandall Stewart 
2476f8829a4aSRandall Stewart uint32_t
2477f8829a4aSRandall Stewart sctp_calculate_rto(struct sctp_tcb *stcb,
2478f8829a4aSRandall Stewart     struct sctp_association *asoc,
2479f8829a4aSRandall Stewart     struct sctp_nets *net,
24808c8e10b7SMichael Tuexen     struct timeval *old,
2481b0471b4bSMichael Tuexen     int rtt_from_sack)
2482b0471b4bSMichael Tuexen {
248318e198d3SRandall Stewart 	/*-
2484f8829a4aSRandall Stewart 	 * given an association and the starting time of the current RTT
2485f42a358aSRandall Stewart 	 * period (in value1/value2) return RTO in number of msecs.
2486f8829a4aSRandall Stewart 	 */
2487be1d9176SMichael Tuexen 	int32_t rtt;		/* RTT in ms */
2488be1d9176SMichael Tuexen 	uint32_t new_rto;
2489f8829a4aSRandall Stewart 	int first_measure = 0;
24908c8e10b7SMichael Tuexen 	struct timeval now;
2491f8829a4aSRandall Stewart 
2492f8829a4aSRandall Stewart 	/************************/
2493f8829a4aSRandall Stewart 	/* 1. calculate new RTT */
2494f8829a4aSRandall Stewart 	/************************/
2495f8829a4aSRandall Stewart 	/* get the current time */
2496299108c5SRandall Stewart 	if (stcb->asoc.use_precise_time) {
2497299108c5SRandall Stewart 		(void)SCTP_GETPTIME_TIMEVAL(&now);
2498299108c5SRandall Stewart 	} else {
24996e55db54SRandall Stewart 		(void)SCTP_GETTIME_TIMEVAL(&now);
2500299108c5SRandall Stewart 	}
2501be1d9176SMichael Tuexen 	timevalsub(&now, old);
2502be1d9176SMichael Tuexen 	/* store the current RTT in us */
250381eb4e63SMichael Tuexen 	net->rtt = (uint64_t)1000000 * (uint64_t)now.tv_sec +
2504be1d9176SMichael Tuexen 	    (uint64_t)now.tv_usec;
2505b60b0fe6SMichael Tuexen 	/* compute rtt in ms */
2506b60b0fe6SMichael Tuexen 	rtt = (int32_t)(net->rtt / 1000);
2507f79aab18SRandall Stewart 	if ((asoc->cc_functions.sctp_rtt_calculated) && (rtt_from_sack == SCTP_RTT_FROM_DATA)) {
2508b7b84c0eSMichael Tuexen 		/*
2509b7b84c0eSMichael Tuexen 		 * Tell the CC module that a new update has just occurred
2510b7b84c0eSMichael Tuexen 		 * from a sack
2511b7b84c0eSMichael Tuexen 		 */
2512f79aab18SRandall Stewart 		(*asoc->cc_functions.sctp_rtt_calculated) (stcb, net, &now);
2513f79aab18SRandall Stewart 	}
2514f79aab18SRandall Stewart 	/*
2515f79aab18SRandall Stewart 	 * Do we need to determine the lan? We do this only on sacks i.e.
2516f79aab18SRandall Stewart 	 * RTT being determined from data not non-data (HB/INIT->INITACK).
2517f79aab18SRandall Stewart 	 */
2518f79aab18SRandall Stewart 	if ((rtt_from_sack == SCTP_RTT_FROM_DATA) &&
2519be1d9176SMichael Tuexen 	    (net->lan_type == SCTP_LAN_UNKNOWN)) {
2520be1d9176SMichael Tuexen 		if (net->rtt > SCTP_LOCAL_LAN_RTT) {
2521899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_INTERNET;
2522899288aeSRandall Stewart 		} else {
2523899288aeSRandall Stewart 			net->lan_type = SCTP_LAN_LOCAL;
2524899288aeSRandall Stewart 		}
2525899288aeSRandall Stewart 	}
25260053ed28SMichael Tuexen 
2527f8829a4aSRandall Stewart 	/***************************/
2528f8829a4aSRandall Stewart 	/* 2. update RTTVAR & SRTT */
2529f8829a4aSRandall Stewart 	/***************************/
2530be1d9176SMichael Tuexen 	/*-
2531be1d9176SMichael Tuexen 	 * Compute the scaled average lastsa and the
2532be1d9176SMichael Tuexen 	 * scaled variance lastsv as described in van Jacobson
2533be1d9176SMichael Tuexen 	 * Paper "Congestion Avoidance and Control", Annex A.
2534be1d9176SMichael Tuexen 	 *
2535be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_SHIFT) is the srtt
2536be1d9176SMichael Tuexen 	 * (net->lastsa >> SCTP_RTT_VAR_SHIFT) is the rttvar
2537be1d9176SMichael Tuexen 	 */
25389a972525SRandall Stewart 	if (net->RTO_measured) {
2539be1d9176SMichael Tuexen 		rtt -= (net->lastsa >> SCTP_RTT_SHIFT);
2540be1d9176SMichael Tuexen 		net->lastsa += rtt;
2541be1d9176SMichael Tuexen 		if (rtt < 0) {
2542be1d9176SMichael Tuexen 			rtt = -rtt;
2543be1d9176SMichael Tuexen 		}
2544be1d9176SMichael Tuexen 		rtt -= (net->lastsv >> SCTP_RTT_VAR_SHIFT);
2545be1d9176SMichael Tuexen 		net->lastsv += rtt;
2546b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2547f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_RTTVAR);
254880fefe0aSRandall Stewart 		}
2549f8829a4aSRandall Stewart 	} else {
2550f8829a4aSRandall Stewart 		/* First RTO measurment */
25519a972525SRandall Stewart 		net->RTO_measured = 1;
2552f8829a4aSRandall Stewart 		first_measure = 1;
2553be1d9176SMichael Tuexen 		net->lastsa = rtt << SCTP_RTT_SHIFT;
2554be1d9176SMichael Tuexen 		net->lastsv = (rtt / 2) << SCTP_RTT_VAR_SHIFT;
2555b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RTTVAR_LOGGING_ENABLE) {
2556f8829a4aSRandall Stewart 			rto_logging(net, SCTP_LOG_INITIAL_RTT);
255780fefe0aSRandall Stewart 		}
2558f8829a4aSRandall Stewart 	}
2559be1d9176SMichael Tuexen 	if (net->lastsv == 0) {
2560be1d9176SMichael Tuexen 		net->lastsv = SCTP_CLOCK_GRANULARITY;
2561be1d9176SMichael Tuexen 	}
2562108df27cSRandall Stewart 	new_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
2563f8829a4aSRandall Stewart 	if ((new_rto > SCTP_SAT_NETWORK_MIN) &&
2564f8829a4aSRandall Stewart 	    (stcb->asoc.sat_network_lockout == 0)) {
2565f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 1;
2566f8829a4aSRandall Stewart 	} else if ((!first_measure) && stcb->asoc.sat_network) {
2567f8829a4aSRandall Stewart 		stcb->asoc.sat_network = 0;
2568f8829a4aSRandall Stewart 		stcb->asoc.sat_network_lockout = 1;
2569f8829a4aSRandall Stewart 	}
2570f8829a4aSRandall Stewart 	/* bound it, per C6/C7 in Section 5.3.1 */
2571f8829a4aSRandall Stewart 	if (new_rto < stcb->asoc.minrto) {
2572f8829a4aSRandall Stewart 		new_rto = stcb->asoc.minrto;
2573f8829a4aSRandall Stewart 	}
2574f8829a4aSRandall Stewart 	if (new_rto > stcb->asoc.maxrto) {
2575f8829a4aSRandall Stewart 		new_rto = stcb->asoc.maxrto;
2576f8829a4aSRandall Stewart 	}
25775e54f665SRandall Stewart 	/* we are now returning the RTO */
25785e54f665SRandall Stewart 	return (new_rto);
2579f8829a4aSRandall Stewart }
2580f8829a4aSRandall Stewart 
2581f8829a4aSRandall Stewart /*
2582f8829a4aSRandall Stewart  * return a pointer to a contiguous piece of data from the given mbuf chain
2583f8829a4aSRandall Stewart  * starting at 'off' for 'len' bytes.  If the desired piece spans more than
2584f8829a4aSRandall Stewart  * one mbuf, a copy is made at 'ptr'. caller must ensure that the buffer size
2585f8829a4aSRandall Stewart  * is >= 'len' returns NULL if there there isn't 'len' bytes in the chain.
2586f8829a4aSRandall Stewart  */
258772fb6fdbSRandall Stewart caddr_t
2588f8829a4aSRandall Stewart sctp_m_getptr(struct mbuf *m, int off, int len, uint8_t *in_ptr)
2589f8829a4aSRandall Stewart {
2590f8829a4aSRandall Stewart 	uint32_t count;
2591f8829a4aSRandall Stewart 	uint8_t *ptr;
2592f8829a4aSRandall Stewart 
2593f8829a4aSRandall Stewart 	ptr = in_ptr;
2594f8829a4aSRandall Stewart 	if ((off < 0) || (len <= 0))
2595f8829a4aSRandall Stewart 		return (NULL);
2596f8829a4aSRandall Stewart 
2597f8829a4aSRandall Stewart 	/* find the desired start location */
2598f8829a4aSRandall Stewart 	while ((m != NULL) && (off > 0)) {
2599139bc87fSRandall Stewart 		if (off < SCTP_BUF_LEN(m))
2600f8829a4aSRandall Stewart 			break;
2601139bc87fSRandall Stewart 		off -= SCTP_BUF_LEN(m);
2602139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
2603f8829a4aSRandall Stewart 	}
2604f8829a4aSRandall Stewart 	if (m == NULL)
2605f8829a4aSRandall Stewart 		return (NULL);
2606f8829a4aSRandall Stewart 
2607f8829a4aSRandall Stewart 	/* is the current mbuf large enough (eg. contiguous)? */
2608139bc87fSRandall Stewart 	if ((SCTP_BUF_LEN(m) - off) >= len) {
2609f8829a4aSRandall Stewart 		return (mtod(m, caddr_t)+off);
2610f8829a4aSRandall Stewart 	} else {
2611f8829a4aSRandall Stewart 		/* else, it spans more than one mbuf, so save a temp copy... */
2612f8829a4aSRandall Stewart 		while ((m != NULL) && (len > 0)) {
2613139bc87fSRandall Stewart 			count = min(SCTP_BUF_LEN(m) - off, len);
26145ba7f91fSMichael Tuexen 			memcpy(ptr, mtod(m, caddr_t)+off, count);
2615f8829a4aSRandall Stewart 			len -= count;
2616f8829a4aSRandall Stewart 			ptr += count;
2617f8829a4aSRandall Stewart 			off = 0;
2618139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
2619f8829a4aSRandall Stewart 		}
2620f8829a4aSRandall Stewart 		if ((m == NULL) && (len > 0))
2621f8829a4aSRandall Stewart 			return (NULL);
2622f8829a4aSRandall Stewart 		else
2623f8829a4aSRandall Stewart 			return ((caddr_t)in_ptr);
2624f8829a4aSRandall Stewart 	}
2625f8829a4aSRandall Stewart }
2626f8829a4aSRandall Stewart 
2627f8829a4aSRandall Stewart 
262844b7479bSRandall Stewart 
2629f8829a4aSRandall Stewart struct sctp_paramhdr *
2630f8829a4aSRandall Stewart sctp_get_next_param(struct mbuf *m,
2631f8829a4aSRandall Stewart     int offset,
2632f8829a4aSRandall Stewart     struct sctp_paramhdr *pull,
2633f8829a4aSRandall Stewart     int pull_limit)
2634f8829a4aSRandall Stewart {
2635f8829a4aSRandall Stewart 	/* This just provides a typed signature to Peter's Pull routine */
2636f8829a4aSRandall Stewart 	return ((struct sctp_paramhdr *)sctp_m_getptr(m, offset, pull_limit,
2637f8829a4aSRandall Stewart 	    (uint8_t *)pull));
2638f8829a4aSRandall Stewart }
2639f8829a4aSRandall Stewart 
2640f8829a4aSRandall Stewart 
2641ce11b842SMichael Tuexen struct mbuf *
2642f8829a4aSRandall Stewart sctp_add_pad_tombuf(struct mbuf *m, int padlen)
2643f8829a4aSRandall Stewart {
2644ce11b842SMichael Tuexen 	struct mbuf *m_last;
2645ce11b842SMichael Tuexen 	caddr_t dp;
2646f8829a4aSRandall Stewart 
2647f8829a4aSRandall Stewart 	if (padlen > 3) {
2648ce11b842SMichael Tuexen 		return (NULL);
2649f8829a4aSRandall Stewart 	}
265041eee555SRandall Stewart 	if (padlen <= M_TRAILINGSPACE(m)) {
2651f8829a4aSRandall Stewart 		/*
2652f8829a4aSRandall Stewart 		 * The easy way. We hope the majority of the time we hit
2653f8829a4aSRandall Stewart 		 * here :)
2654f8829a4aSRandall Stewart 		 */
2655ce11b842SMichael Tuexen 		m_last = m;
2656f8829a4aSRandall Stewart 	} else {
2657ce11b842SMichael Tuexen 		/* Hard way we must grow the mbuf chain */
2658ce11b842SMichael Tuexen 		m_last = sctp_get_mbuf_for_msg(padlen, 0, M_NOWAIT, 1, MT_DATA);
2659ce11b842SMichael Tuexen 		if (m_last == NULL) {
2660ce11b842SMichael Tuexen 			return (NULL);
2661f8829a4aSRandall Stewart 		}
2662ce11b842SMichael Tuexen 		SCTP_BUF_LEN(m_last) = 0;
2663ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m_last) = NULL;
2664ce11b842SMichael Tuexen 		SCTP_BUF_NEXT(m) = m_last;
2665f8829a4aSRandall Stewart 	}
2666ce11b842SMichael Tuexen 	dp = mtod(m_last, caddr_t)+SCTP_BUF_LEN(m_last);
2667ce11b842SMichael Tuexen 	SCTP_BUF_LEN(m_last) += padlen;
2668ce11b842SMichael Tuexen 	memset(dp, 0, padlen);
2669ce11b842SMichael Tuexen 	return (m_last);
2670f8829a4aSRandall Stewart }
2671f8829a4aSRandall Stewart 
2672ce11b842SMichael Tuexen struct mbuf *
2673f8829a4aSRandall Stewart sctp_pad_lastmbuf(struct mbuf *m, int padval, struct mbuf *last_mbuf)
2674f8829a4aSRandall Stewart {
2675f8829a4aSRandall Stewart 	/* find the last mbuf in chain and pad it */
2676f8829a4aSRandall Stewart 	struct mbuf *m_at;
2677f8829a4aSRandall Stewart 
2678ce11b842SMichael Tuexen 	if (last_mbuf != NULL) {
2679f8829a4aSRandall Stewart 		return (sctp_add_pad_tombuf(last_mbuf, padval));
2680f8829a4aSRandall Stewart 	} else {
268117267b32SMichael Tuexen 		for (m_at = m; m_at; m_at = SCTP_BUF_NEXT(m_at)) {
2682139bc87fSRandall Stewart 			if (SCTP_BUF_NEXT(m_at) == NULL) {
2683f8829a4aSRandall Stewart 				return (sctp_add_pad_tombuf(m_at, padval));
2684f8829a4aSRandall Stewart 			}
2685f8829a4aSRandall Stewart 		}
2686f8829a4aSRandall Stewart 	}
2687ce11b842SMichael Tuexen 	return (NULL);
2688f8829a4aSRandall Stewart }
2689f8829a4aSRandall Stewart 
2690f8829a4aSRandall Stewart static void
2691c5b5675dSMichael Tuexen sctp_notify_assoc_change(uint16_t state, struct sctp_tcb *stcb,
2692410a3b1eSMichael Tuexen     uint16_t error, struct sctp_abort_chunk *abort, uint8_t from_peer, int so_locked
2693ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2694ceaad40aSRandall Stewart     SCTP_UNUSED
2695ceaad40aSRandall Stewart #endif
2696ceaad40aSRandall Stewart )
2697f8829a4aSRandall Stewart {
2698f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2699f8829a4aSRandall Stewart 	struct sctp_assoc_change *sac;
2700f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
27019a8e3088SMichael Tuexen 	unsigned int notif_len;
27029a8e3088SMichael Tuexen 	uint16_t abort_len;
2703e06b67c7SMichael Tuexen 	unsigned int i;
2704ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2705ceaad40aSRandall Stewart 	struct socket *so;
2706ceaad40aSRandall Stewart #endif
2707ceaad40aSRandall Stewart 
270859713bbfSMichael Tuexen 	if (stcb == NULL) {
270959713bbfSMichael Tuexen 		return;
271059713bbfSMichael Tuexen 	}
271158411b08SMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT)) {
27129a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2713a2b42326SMichael Tuexen 		if (abort != NULL) {
2714c9eb4473SMichael Tuexen 			abort_len = ntohs(abort->ch.chunk_length);
27159669e724SMichael Tuexen 			/*
27169669e724SMichael Tuexen 			 * Only SCTP_CHUNK_BUFFER_SIZE are guaranteed to be
271745d41de5SMichael Tuexen 			 * contiguous.
27189669e724SMichael Tuexen 			 */
27199669e724SMichael Tuexen 			if (abort_len > SCTP_CHUNK_BUFFER_SIZE) {
27209669e724SMichael Tuexen 				abort_len = SCTP_CHUNK_BUFFER_SIZE;
27219669e724SMichael Tuexen 			}
2722a2b42326SMichael Tuexen 		} else {
2723a2b42326SMichael Tuexen 			abort_len = 0;
2724c5b5675dSMichael Tuexen 		}
2725a2b42326SMichael Tuexen 		if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2726a2b42326SMichael Tuexen 			notif_len += SCTP_ASSOC_SUPPORTS_MAX;
2727a2b42326SMichael Tuexen 		} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2728a2b42326SMichael Tuexen 			notif_len += abort_len;
2729a2b42326SMichael Tuexen 		}
2730eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2731a2b42326SMichael Tuexen 		if (m_notify == NULL) {
2732a2b42326SMichael Tuexen 			/* Retry with smaller value. */
27339a8e3088SMichael Tuexen 			notif_len = (unsigned int)sizeof(struct sctp_assoc_change);
2734eb1b1807SGleb Smirnoff 			m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
2735a2b42326SMichael Tuexen 			if (m_notify == NULL) {
273658411b08SMichael Tuexen 				goto set_error;
2737a2b42326SMichael Tuexen 			}
2738a2b42326SMichael Tuexen 		}
2739a2b42326SMichael Tuexen 		SCTP_BUF_NEXT(m_notify) = NULL;
2740f8829a4aSRandall Stewart 		sac = mtod(m_notify, struct sctp_assoc_change *);
2741e432298aSXin LI 		memset(sac, 0, notif_len);
2742f8829a4aSRandall Stewart 		sac->sac_type = SCTP_ASSOC_CHANGE;
2743f8829a4aSRandall Stewart 		sac->sac_flags = 0;
2744f8829a4aSRandall Stewart 		sac->sac_length = sizeof(struct sctp_assoc_change);
2745c5b5675dSMichael Tuexen 		sac->sac_state = state;
2746f8829a4aSRandall Stewart 		sac->sac_error = error;
2747f8829a4aSRandall Stewart 		/* XXX verify these stream counts */
2748f8829a4aSRandall Stewart 		sac->sac_outbound_streams = stcb->asoc.streamoutcnt;
2749f8829a4aSRandall Stewart 		sac->sac_inbound_streams = stcb->asoc.streamincnt;
2750f8829a4aSRandall Stewart 		sac->sac_assoc_id = sctp_get_associd(stcb);
2751a2b42326SMichael Tuexen 		if (notif_len > sizeof(struct sctp_assoc_change)) {
2752c5b5675dSMichael Tuexen 			if ((state == SCTP_COMM_UP) || (state == SCTP_RESTART)) {
2753e06b67c7SMichael Tuexen 				i = 0;
2754c79bec9cSMichael Tuexen 				if (stcb->asoc.prsctp_supported == 1) {
2755e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_PR;
2756e06b67c7SMichael Tuexen 				}
2757c79bec9cSMichael Tuexen 				if (stcb->asoc.auth_supported == 1) {
2758e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_AUTH;
2759e06b67c7SMichael Tuexen 				}
2760c79bec9cSMichael Tuexen 				if (stcb->asoc.asconf_supported == 1) {
2761e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_ASCONF;
2762e06b67c7SMichael Tuexen 				}
276344249214SRandall Stewart 				if (stcb->asoc.idata_supported == 1) {
276444249214SRandall Stewart 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_INTERLEAVING;
276544249214SRandall Stewart 				}
2766e06b67c7SMichael Tuexen 				sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_MULTIBUF;
2767c79bec9cSMichael Tuexen 				if (stcb->asoc.reconfig_supported == 1) {
2768e06b67c7SMichael Tuexen 					sac->sac_info[i++] = SCTP_ASSOC_SUPPORTS_RE_CONFIG;
2769e06b67c7SMichael Tuexen 				}
2770e06b67c7SMichael Tuexen 				sac->sac_length += i;
2771a2b42326SMichael Tuexen 			} else if ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC)) {
2772a2b42326SMichael Tuexen 				memcpy(sac->sac_info, abort, abort_len);
2773a2b42326SMichael Tuexen 				sac->sac_length += abort_len;
2774a2b42326SMichael Tuexen 			}
2775c5b5675dSMichael Tuexen 		}
2776e06b67c7SMichael Tuexen 		SCTP_BUF_LEN(m_notify) = sac->sac_length;
2777f8829a4aSRandall Stewart 		control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
27787215cc1bSMichael Tuexen 		    0, 0, stcb->asoc.context, 0, 0, 0,
2779f8829a4aSRandall Stewart 		    m_notify);
278058411b08SMichael Tuexen 		if (control != NULL) {
2781139bc87fSRandall Stewart 			control->length = SCTP_BUF_LEN(m_notify);
278228cd0699SMichael Tuexen 			control->spec_flags = M_NOTIFICATION;
2783f8829a4aSRandall Stewart 			/* not that we need this */
2784f8829a4aSRandall Stewart 			control->tail_mbuf = m_notify;
2785f8829a4aSRandall Stewart 			sctp_add_to_readq(stcb->sctp_ep, stcb,
2786f8829a4aSRandall Stewart 			    control,
2787cfde3ff7SRandall Stewart 			    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD,
2788cfde3ff7SRandall Stewart 			    so_locked);
278958411b08SMichael Tuexen 		} else {
279058411b08SMichael Tuexen 			sctp_m_freem(m_notify);
279158411b08SMichael Tuexen 		}
279258411b08SMichael Tuexen 	}
279358411b08SMichael Tuexen 	/*
279458411b08SMichael Tuexen 	 * For 1-to-1 style sockets, we send up and error when an ABORT
279558411b08SMichael Tuexen 	 * comes in.
279658411b08SMichael Tuexen 	 */
279758411b08SMichael Tuexen set_error:
279858411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
279958411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
280058411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
2801e045904fSMichael Tuexen 		SOCK_LOCK(stcb->sctp_socket);
2802410a3b1eSMichael Tuexen 		if (from_peer) {
2803839d21d6SMichael Tuexen 			if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) {
280458411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNREFUSED);
280558411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNREFUSED;
280658411b08SMichael Tuexen 			} else {
280758411b08SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
280858411b08SMichael Tuexen 				stcb->sctp_socket->so_error = ECONNRESET;
280958411b08SMichael Tuexen 			}
2810410a3b1eSMichael Tuexen 		} else {
2811839d21d6SMichael Tuexen 			if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
2812839d21d6SMichael Tuexen 			    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
2813553bb068SMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ETIMEDOUT);
2814553bb068SMichael Tuexen 				stcb->sctp_socket->so_error = ETIMEDOUT;
2815553bb068SMichael Tuexen 			} else {
2816410a3b1eSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ECONNABORTED);
2817410a3b1eSMichael Tuexen 				stcb->sctp_socket->so_error = ECONNABORTED;
2818410a3b1eSMichael Tuexen 			}
281958411b08SMichael Tuexen 		}
28203acfe1e1SGleb Smirnoff 		SOCK_UNLOCK(stcb->sctp_socket);
2821553bb068SMichael Tuexen 	}
282258411b08SMichael Tuexen 	/* Wake ANY sleepers */
2823ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2824ceaad40aSRandall Stewart 	so = SCTP_INP_SO(stcb->sctp_ep);
2825ceaad40aSRandall Stewart 	if (!so_locked) {
2826ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
2827ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
2828ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
2829ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
2830ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
2831ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
2832ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
2833ceaad40aSRandall Stewart 			return;
2834ceaad40aSRandall Stewart 		}
2835ceaad40aSRandall Stewart 	}
2836ceaad40aSRandall Stewart #endif
283758411b08SMichael Tuexen 	if (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
283858411b08SMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) &&
283958411b08SMichael Tuexen 	    ((state == SCTP_COMM_LOST) || (state == SCTP_CANT_STR_ASSOC))) {
28403acfe1e1SGleb Smirnoff 		socantrcvmore(stcb->sctp_socket);
284158411b08SMichael Tuexen 	}
284258411b08SMichael Tuexen 	sorwakeup(stcb->sctp_socket);
284358411b08SMichael Tuexen 	sowwakeup(stcb->sctp_socket);
2844ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
2845ceaad40aSRandall Stewart 	if (!so_locked) {
2846ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
2847ceaad40aSRandall Stewart 	}
2848ceaad40aSRandall Stewart #endif
2849f8829a4aSRandall Stewart }
2850f8829a4aSRandall Stewart 
2851f8829a4aSRandall Stewart static void
2852f8829a4aSRandall Stewart sctp_notify_peer_addr_change(struct sctp_tcb *stcb, uint32_t state,
28533cb3567dSMichael Tuexen     struct sockaddr *sa, uint32_t error, int so_locked
28543cb3567dSMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
28553cb3567dSMichael Tuexen     SCTP_UNUSED
28563cb3567dSMichael Tuexen #endif
28573cb3567dSMichael Tuexen )
2858f8829a4aSRandall Stewart {
2859f8829a4aSRandall Stewart 	struct mbuf *m_notify;
2860f8829a4aSRandall Stewart 	struct sctp_paddr_change *spc;
2861f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2862f8829a4aSRandall Stewart 
286360990c0cSMichael Tuexen 	if ((stcb == NULL) ||
286460990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT)) {
2865f8829a4aSRandall Stewart 		/* event not enabled */
2866f8829a4aSRandall Stewart 		return;
2867830d754dSRandall Stewart 	}
2868eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_paddr_change), 0, M_NOWAIT, 1, MT_DATA);
2869f8829a4aSRandall Stewart 	if (m_notify == NULL)
2870f8829a4aSRandall Stewart 		return;
2871139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
2872f8829a4aSRandall Stewart 	spc = mtod(m_notify, struct sctp_paddr_change *);
287356711f94SMichael Tuexen 	memset(spc, 0, sizeof(struct sctp_paddr_change));
2874f8829a4aSRandall Stewart 	spc->spc_type = SCTP_PEER_ADDR_CHANGE;
2875f8829a4aSRandall Stewart 	spc->spc_flags = 0;
2876f8829a4aSRandall Stewart 	spc->spc_length = sizeof(struct sctp_paddr_change);
28775e2c2d87SRandall Stewart 	switch (sa->sa_family) {
2878ea5eba11SMichael Tuexen #ifdef INET
28795e2c2d87SRandall Stewart 	case AF_INET:
2880d59107f7SMichael Tuexen #ifdef INET6
2881d59107f7SMichael Tuexen 		if (sctp_is_feature_on(stcb->sctp_ep, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
2882d59107f7SMichael Tuexen 			in6_sin_2_v4mapsin6((struct sockaddr_in *)sa,
2883d59107f7SMichael Tuexen 			    (struct sockaddr_in6 *)&spc->spc_aaddr);
2884d59107f7SMichael Tuexen 		} else {
2885f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2886d59107f7SMichael Tuexen 		}
2887d59107f7SMichael Tuexen #else
2888d59107f7SMichael Tuexen 		memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in));
2889d59107f7SMichael Tuexen #endif
28905e2c2d87SRandall Stewart 		break;
2891ea5eba11SMichael Tuexen #endif
28925e2c2d87SRandall Stewart #ifdef INET6
28935e2c2d87SRandall Stewart 	case AF_INET6:
28945e2c2d87SRandall Stewart 		{
2895f42a358aSRandall Stewart 			struct sockaddr_in6 *sin6;
2896f42a358aSRandall Stewart 
2897f8829a4aSRandall Stewart 			memcpy(&spc->spc_aaddr, sa, sizeof(struct sockaddr_in6));
2898f42a358aSRandall Stewart 
2899f42a358aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)&spc->spc_aaddr;
2900f42a358aSRandall Stewart 			if (IN6_IS_SCOPE_LINKLOCAL(&sin6->sin6_addr)) {
290142551e99SRandall Stewart 				if (sin6->sin6_scope_id == 0) {
290242551e99SRandall Stewart 					/* recover scope_id for user */
2903f42a358aSRandall Stewart 					(void)sa6_recoverscope(sin6);
290442551e99SRandall Stewart 				} else {
290542551e99SRandall Stewart 					/* clear embedded scope_id for user */
290642551e99SRandall Stewart 					in6_clearscope(&sin6->sin6_addr);
290742551e99SRandall Stewart 				}
2908f42a358aSRandall Stewart 			}
29095e2c2d87SRandall Stewart 			break;
29105e2c2d87SRandall Stewart 		}
29115e2c2d87SRandall Stewart #endif
29125e2c2d87SRandall Stewart 	default:
29135e2c2d87SRandall Stewart 		/* TSNH */
29145e2c2d87SRandall Stewart 		break;
2915f8829a4aSRandall Stewart 	}
2916f8829a4aSRandall Stewart 	spc->spc_state = state;
2917f8829a4aSRandall Stewart 	spc->spc_error = error;
2918f8829a4aSRandall Stewart 	spc->spc_assoc_id = sctp_get_associd(stcb);
2919f8829a4aSRandall Stewart 
2920139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_paddr_change);
2921139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
2922f8829a4aSRandall Stewart 
2923f8829a4aSRandall Stewart 	/* append to socket */
2924f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
29257215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
2926f8829a4aSRandall Stewart 	    m_notify);
2927f8829a4aSRandall Stewart 	if (control == NULL) {
2928f8829a4aSRandall Stewart 		/* no memory */
2929f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
2930f8829a4aSRandall Stewart 		return;
2931f8829a4aSRandall Stewart 	}
2932139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
2933139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
2934f8829a4aSRandall Stewart 	/* not that we need this */
2935f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
2936f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
2937f8829a4aSRandall Stewart 	    control,
2938cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
2939cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
29403cb3567dSMichael Tuexen 	    so_locked);
2941f8829a4aSRandall Stewart }
2942f8829a4aSRandall Stewart 
2943f8829a4aSRandall Stewart 
2944f8829a4aSRandall Stewart static void
29451edc9dbaSMichael Tuexen sctp_notify_send_failed(struct sctp_tcb *stcb, uint8_t sent, uint32_t error,
2946ceaad40aSRandall Stewart     struct sctp_tmit_chunk *chk, int so_locked
2947ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
2948ceaad40aSRandall Stewart     SCTP_UNUSED
2949ceaad40aSRandall Stewart #endif
2950ceaad40aSRandall Stewart )
2951f8829a4aSRandall Stewart {
2952830d754dSRandall Stewart 	struct mbuf *m_notify;
2953f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
29549935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
2955f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
2956ab337314SMichael Tuexen 	struct sctp_chunkhdr *chkhdr;
2957ab337314SMichael Tuexen 	int notifhdr_len, chk_len, chkhdr_len, padding_len, payload_len;
2958f8829a4aSRandall Stewart 
295960990c0cSMichael Tuexen 	if ((stcb == NULL) ||
29609935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
29619935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
2962f8829a4aSRandall Stewart 		/* event not enabled */
2963f8829a4aSRandall Stewart 		return;
2964830d754dSRandall Stewart 	}
29650053ed28SMichael Tuexen 
29669935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
2967ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
29689935403aSMichael Tuexen 	} else {
2969ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
29709935403aSMichael Tuexen 	}
2971ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
2972f8829a4aSRandall Stewart 	if (m_notify == NULL)
2973f8829a4aSRandall Stewart 		/* no space left */
2974f8829a4aSRandall Stewart 		return;
2975ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
2976ab337314SMichael Tuexen 	if (stcb->asoc.idata_supported) {
2977ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_idata_chunk);
2978ab337314SMichael Tuexen 	} else {
2979ab337314SMichael Tuexen 		chkhdr_len = sizeof(struct sctp_data_chunk);
2980ab337314SMichael Tuexen 	}
2981ab337314SMichael Tuexen 	/* Use some defaults in case we can't access the chunk header */
2982ab337314SMichael Tuexen 	if (chk->send_size >= chkhdr_len) {
2983ab337314SMichael Tuexen 		payload_len = chk->send_size - chkhdr_len;
2984ab337314SMichael Tuexen 	} else {
2985ab337314SMichael Tuexen 		payload_len = 0;
2986ab337314SMichael Tuexen 	}
2987ab337314SMichael Tuexen 	padding_len = 0;
2988ab337314SMichael Tuexen 	if (chk->data != NULL) {
2989ab337314SMichael Tuexen 		chkhdr = mtod(chk->data, struct sctp_chunkhdr *);
2990ab337314SMichael Tuexen 		if (chkhdr != NULL) {
2991ab337314SMichael Tuexen 			chk_len = ntohs(chkhdr->chunk_length);
2992ab337314SMichael Tuexen 			if ((chk_len >= chkhdr_len) &&
2993ab337314SMichael Tuexen 			    (chk->send_size >= chk_len) &&
2994ab337314SMichael Tuexen 			    (chk->send_size - chk_len < 4)) {
2995ab337314SMichael Tuexen 				padding_len = chk->send_size - chk_len;
2996ab337314SMichael Tuexen 				payload_len = chk->send_size - chkhdr_len - padding_len;
2997ab337314SMichael Tuexen 			}
2998ab337314SMichael Tuexen 		}
2999ab337314SMichael Tuexen 	}
30009935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
30019935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
3002ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
30039935403aSMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
30041edc9dbaSMichael Tuexen 		if (sent) {
30059935403aSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_SENT;
30061edc9dbaSMichael Tuexen 		} else {
30071edc9dbaSMichael Tuexen 			ssfe->ssfe_flags = SCTP_DATA_UNSENT;
30081edc9dbaSMichael Tuexen 		}
3009ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + payload_len);
30109935403aSMichael Tuexen 		ssfe->ssfe_error = error;
30119935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
301249656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = chk->rec.data.sid;
30139935403aSMichael Tuexen 		ssfe->ssfe_info.snd_flags = chk->rec.data.rcv_flags;
301449656eefSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = chk->rec.data.ppid;
30159935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = chk->rec.data.context;
30169935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
30179935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
30189935403aSMichael Tuexen 	} else {
3019f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
3020ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
3021f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
30221edc9dbaSMichael Tuexen 		if (sent) {
3023f8829a4aSRandall Stewart 			ssf->ssf_flags = SCTP_DATA_SENT;
30241edc9dbaSMichael Tuexen 		} else {
30251edc9dbaSMichael Tuexen 			ssf->ssf_flags = SCTP_DATA_UNSENT;
30261edc9dbaSMichael Tuexen 		}
3027ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + payload_len);
3028f8829a4aSRandall Stewart 		ssf->ssf_error = error;
3029f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
303049656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = chk->rec.data.sid;
303149656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ssn = (uint16_t)chk->rec.data.mid;
3032f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_flags = chk->rec.data.rcv_flags;
303349656eefSMichael Tuexen 		ssf->ssf_info.sinfo_ppid = chk->rec.data.ppid;
3034f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = chk->rec.data.context;
3035f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
3036f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
30379935403aSMichael Tuexen 	}
3038ab337314SMichael Tuexen 	if (chk->data != NULL) {
3039ab337314SMichael Tuexen 		/* Trim off the sctp chunk header (it should be there) */
3040ab337314SMichael Tuexen 		if (chk->send_size == chkhdr_len + payload_len + padding_len) {
3041ab337314SMichael Tuexen 			m_adj(chk->data, chkhdr_len);
3042ab337314SMichael Tuexen 			m_adj(chk->data, -padding_len);
3043830d754dSRandall Stewart 			sctp_mbuf_crush(chk->data);
3044ab337314SMichael Tuexen 			chk->send_size -= (chkhdr_len + padding_len);
3045830d754dSRandall Stewart 		}
3046830d754dSRandall Stewart 	}
3047810ec536SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = chk->data;
3048f8829a4aSRandall Stewart 	/* Steal off the mbuf */
3049f8829a4aSRandall Stewart 	chk->data = NULL;
3050f8829a4aSRandall Stewart 	/*
3051f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3052f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3053f8829a4aSRandall Stewart 	 * non-reader
3054f8829a4aSRandall Stewart 	 */
3055139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3056f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3057f8829a4aSRandall Stewart 		return;
3058f8829a4aSRandall Stewart 	}
3059f8829a4aSRandall Stewart 	/* append to socket */
3060f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
30617215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3062f8829a4aSRandall Stewart 	    m_notify);
3063f8829a4aSRandall Stewart 	if (control == NULL) {
3064f8829a4aSRandall Stewart 		/* no memory */
3065f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3066f8829a4aSRandall Stewart 		return;
3067f8829a4aSRandall Stewart 	}
306828cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3069139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
307028cd0699SMichael Tuexen 	/* not that we need this */
307128cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3072f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3073f8829a4aSRandall Stewart 	    control,
3074cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1,
3075cfde3ff7SRandall Stewart 	    SCTP_READ_LOCK_NOT_HELD,
3076cfde3ff7SRandall Stewart 	    so_locked);
3077f8829a4aSRandall Stewart }
3078f8829a4aSRandall Stewart 
3079f8829a4aSRandall Stewart 
3080f8829a4aSRandall Stewart static void
3081f8829a4aSRandall Stewart sctp_notify_send_failed2(struct sctp_tcb *stcb, uint32_t error,
3082ceaad40aSRandall Stewart     struct sctp_stream_queue_pending *sp, int so_locked
3083ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3084ceaad40aSRandall Stewart     SCTP_UNUSED
3085ceaad40aSRandall Stewart #endif
3086ceaad40aSRandall Stewart )
3087f8829a4aSRandall Stewart {
3088f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3089f8829a4aSRandall Stewart 	struct sctp_send_failed *ssf;
30909935403aSMichael Tuexen 	struct sctp_send_failed_event *ssfe;
3091f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3092ab337314SMichael Tuexen 	int notifhdr_len;
3093f8829a4aSRandall Stewart 
309460990c0cSMichael Tuexen 	if ((stcb == NULL) ||
30959935403aSMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT) &&
30969935403aSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT))) {
3097f8829a4aSRandall Stewart 		/* event not enabled */
3098f8829a4aSRandall Stewart 		return;
3099830d754dSRandall Stewart 	}
31009935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
3101ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed_event);
31029935403aSMichael Tuexen 	} else {
3103ab337314SMichael Tuexen 		notifhdr_len = sizeof(struct sctp_send_failed);
31049935403aSMichael Tuexen 	}
3105ab337314SMichael Tuexen 	m_notify = sctp_get_mbuf_for_msg(notifhdr_len, 0, M_NOWAIT, 1, MT_DATA);
31069935403aSMichael Tuexen 	if (m_notify == NULL) {
3107f8829a4aSRandall Stewart 		/* no space left */
3108f8829a4aSRandall Stewart 		return;
31099935403aSMichael Tuexen 	}
3110ab337314SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = notifhdr_len;
31119935403aSMichael Tuexen 	if (sctp_stcb_is_feature_on(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVNSENDFAILEVNT)) {
31129935403aSMichael Tuexen 		ssfe = mtod(m_notify, struct sctp_send_failed_event *);
3113ab337314SMichael Tuexen 		memset(ssfe, 0, notifhdr_len);
3114ad83c8a5SMichael Tuexen 		ssfe->ssfe_type = SCTP_SEND_FAILED_EVENT;
31159935403aSMichael Tuexen 		ssfe->ssfe_flags = SCTP_DATA_UNSENT;
3116ab337314SMichael Tuexen 		ssfe->ssfe_length = (uint32_t)(notifhdr_len + sp->length);
31179935403aSMichael Tuexen 		ssfe->ssfe_error = error;
31189935403aSMichael Tuexen 		/* not exactly what the user sent in, but should be close :) */
311949656eefSMichael Tuexen 		ssfe->ssfe_info.snd_sid = sp->sid;
31209935403aSMichael Tuexen 		if (sp->some_taken) {
31219935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_LAST_FRAG;
31229935403aSMichael Tuexen 		} else {
31239935403aSMichael Tuexen 			ssfe->ssfe_info.snd_flags = SCTP_DATA_NOT_FRAG;
31249935403aSMichael Tuexen 		}
31259935403aSMichael Tuexen 		ssfe->ssfe_info.snd_ppid = sp->ppid;
31269935403aSMichael Tuexen 		ssfe->ssfe_info.snd_context = sp->context;
31279935403aSMichael Tuexen 		ssfe->ssfe_info.snd_assoc_id = sctp_get_associd(stcb);
31289935403aSMichael Tuexen 		ssfe->ssfe_assoc_id = sctp_get_associd(stcb);
31299935403aSMichael Tuexen 	} else {
3130f8829a4aSRandall Stewart 		ssf = mtod(m_notify, struct sctp_send_failed *);
3131ab337314SMichael Tuexen 		memset(ssf, 0, notifhdr_len);
3132f8829a4aSRandall Stewart 		ssf->ssf_type = SCTP_SEND_FAILED;
3133f8829a4aSRandall Stewart 		ssf->ssf_flags = SCTP_DATA_UNSENT;
3134ab337314SMichael Tuexen 		ssf->ssf_length = (uint32_t)(notifhdr_len + sp->length);
3135f8829a4aSRandall Stewart 		ssf->ssf_error = error;
3136f8829a4aSRandall Stewart 		/* not exactly what the user sent in, but should be close :) */
313749656eefSMichael Tuexen 		ssf->ssf_info.sinfo_stream = sp->sid;
3138f3b05218SMichael Tuexen 		ssf->ssf_info.sinfo_ssn = 0;
3139fc14de76SRandall Stewart 		if (sp->some_taken) {
3140fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_LAST_FRAG;
3141fc14de76SRandall Stewart 		} else {
3142fc14de76SRandall Stewart 			ssf->ssf_info.sinfo_flags = SCTP_DATA_NOT_FRAG;
3143fc14de76SRandall Stewart 		}
3144f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_ppid = sp->ppid;
3145f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_context = sp->context;
3146f8829a4aSRandall Stewart 		ssf->ssf_info.sinfo_assoc_id = sctp_get_associd(stcb);
3147f8829a4aSRandall Stewart 		ssf->ssf_assoc_id = sctp_get_associd(stcb);
31489935403aSMichael Tuexen 	}
31499935403aSMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = sp->data;
3150f8829a4aSRandall Stewart 
3151f8829a4aSRandall Stewart 	/* Steal off the mbuf */
3152f8829a4aSRandall Stewart 	sp->data = NULL;
3153f8829a4aSRandall Stewart 	/*
3154f8829a4aSRandall Stewart 	 * For this case, we check the actual socket buffer, since the assoc
3155f8829a4aSRandall Stewart 	 * is going away we don't want to overfill the socket buffer for a
3156f8829a4aSRandall Stewart 	 * non-reader
3157f8829a4aSRandall Stewart 	 */
3158139bc87fSRandall Stewart 	if (sctp_sbspace_failedmsgs(&stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3159f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3160f8829a4aSRandall Stewart 		return;
3161f8829a4aSRandall Stewart 	}
3162f8829a4aSRandall Stewart 	/* append to socket */
3163f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
31647215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3165f8829a4aSRandall Stewart 	    m_notify);
3166f8829a4aSRandall Stewart 	if (control == NULL) {
3167f8829a4aSRandall Stewart 		/* no memory */
3168f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3169f8829a4aSRandall Stewart 		return;
3170f8829a4aSRandall Stewart 	}
317128cd0699SMichael Tuexen 	control->length = SCTP_BUF_LEN(m_notify);
3172139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
317328cd0699SMichael Tuexen 	/* not that we need this */
317428cd0699SMichael Tuexen 	control->tail_mbuf = m_notify;
3175f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3176f8829a4aSRandall Stewart 	    control,
3177cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3178f8829a4aSRandall Stewart }
3179f8829a4aSRandall Stewart 
3180f8829a4aSRandall Stewart 
3181f8829a4aSRandall Stewart 
3182f8829a4aSRandall Stewart static void
31837215cc1bSMichael Tuexen sctp_notify_adaptation_layer(struct sctp_tcb *stcb)
3184f8829a4aSRandall Stewart {
3185f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3186f8829a4aSRandall Stewart 	struct sctp_adaptation_event *sai;
3187f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3188f8829a4aSRandall Stewart 
318960990c0cSMichael Tuexen 	if ((stcb == NULL) ||
319060990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT)) {
3191f8829a4aSRandall Stewart 		/* event not enabled */
3192f8829a4aSRandall Stewart 		return;
3193830d754dSRandall Stewart 	}
31940053ed28SMichael Tuexen 
3195eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_adaption_event), 0, M_NOWAIT, 1, MT_DATA);
3196f8829a4aSRandall Stewart 	if (m_notify == NULL)
3197f8829a4aSRandall Stewart 		/* no space left */
3198f8829a4aSRandall Stewart 		return;
3199139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3200f8829a4aSRandall Stewart 	sai = mtod(m_notify, struct sctp_adaptation_event *);
3201e432298aSXin LI 	memset(sai, 0, sizeof(struct sctp_adaptation_event));
3202f8829a4aSRandall Stewart 	sai->sai_type = SCTP_ADAPTATION_INDICATION;
3203f8829a4aSRandall Stewart 	sai->sai_flags = 0;
3204f8829a4aSRandall Stewart 	sai->sai_length = sizeof(struct sctp_adaptation_event);
32052afb3e84SRandall Stewart 	sai->sai_adaptation_ind = stcb->asoc.peers_adaptation;
3206f8829a4aSRandall Stewart 	sai->sai_assoc_id = sctp_get_associd(stcb);
3207f8829a4aSRandall Stewart 
3208139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_adaptation_event);
3209139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3210f8829a4aSRandall Stewart 
3211f8829a4aSRandall Stewart 	/* append to socket */
3212f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
32137215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3214f8829a4aSRandall Stewart 	    m_notify);
3215f8829a4aSRandall Stewart 	if (control == NULL) {
3216f8829a4aSRandall Stewart 		/* no memory */
3217f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3218f8829a4aSRandall Stewart 		return;
3219f8829a4aSRandall Stewart 	}
3220139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3221139bc87fSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3222f8829a4aSRandall Stewart 	/* not that we need this */
3223f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3224f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3225f8829a4aSRandall Stewart 	    control,
3226cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3227f8829a4aSRandall Stewart }
3228f8829a4aSRandall Stewart 
322903b0b021SRandall Stewart /* This always must be called with the read-queue LOCKED in the INP */
3230810ec536SMichael Tuexen static void
32312dad8a55SRandall Stewart sctp_notify_partial_delivery_indication(struct sctp_tcb *stcb, uint32_t error,
3232810ec536SMichael Tuexen     uint32_t val, int so_locked
3233810ec536SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3234810ec536SMichael Tuexen     SCTP_UNUSED
3235810ec536SMichael Tuexen #endif
3236810ec536SMichael Tuexen )
3237f8829a4aSRandall Stewart {
3238f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3239f8829a4aSRandall Stewart 	struct sctp_pdapi_event *pdapi;
3240f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
324103b0b021SRandall Stewart 	struct sockbuf *sb;
3242f8829a4aSRandall Stewart 
324360990c0cSMichael Tuexen 	if ((stcb == NULL) ||
324460990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_PDAPIEVNT)) {
3245f8829a4aSRandall Stewart 		/* event not enabled */
3246f8829a4aSRandall Stewart 		return;
3247830d754dSRandall Stewart 	}
3248cd1386abSMichael Tuexen 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
3249cd1386abSMichael Tuexen 		return;
3250cd1386abSMichael Tuexen 	}
32510053ed28SMichael Tuexen 
3252eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_pdapi_event), 0, M_NOWAIT, 1, MT_DATA);
3253f8829a4aSRandall Stewart 	if (m_notify == NULL)
3254f8829a4aSRandall Stewart 		/* no space left */
3255f8829a4aSRandall Stewart 		return;
3256139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3257f8829a4aSRandall Stewart 	pdapi = mtod(m_notify, struct sctp_pdapi_event *);
3258e432298aSXin LI 	memset(pdapi, 0, sizeof(struct sctp_pdapi_event));
3259f8829a4aSRandall Stewart 	pdapi->pdapi_type = SCTP_PARTIAL_DELIVERY_EVENT;
3260f8829a4aSRandall Stewart 	pdapi->pdapi_flags = 0;
3261f8829a4aSRandall Stewart 	pdapi->pdapi_length = sizeof(struct sctp_pdapi_event);
3262f8829a4aSRandall Stewart 	pdapi->pdapi_indication = error;
32639a6142d8SRandall Stewart 	pdapi->pdapi_stream = (val >> 16);
32649a6142d8SRandall Stewart 	pdapi->pdapi_seq = (val & 0x0000ffff);
3265f8829a4aSRandall Stewart 	pdapi->pdapi_assoc_id = sctp_get_associd(stcb);
3266f8829a4aSRandall Stewart 
3267139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_pdapi_event);
3268139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3269f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
32707215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3271f8829a4aSRandall Stewart 	    m_notify);
3272f8829a4aSRandall Stewart 	if (control == NULL) {
3273f8829a4aSRandall Stewart 		/* no memory */
3274f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3275f8829a4aSRandall Stewart 		return;
3276f8829a4aSRandall Stewart 	}
3277139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
327828cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3279f8829a4aSRandall Stewart 	/* not that we need this */
3280f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
328103b0b021SRandall Stewart 	sb = &stcb->sctp_socket->so_rcv;
3282b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
3283139bc87fSRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m_notify));
328480fefe0aSRandall Stewart 	}
328503b0b021SRandall Stewart 	sctp_sballoc(stcb, sb, m_notify);
3286b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
328703b0b021SRandall Stewart 		sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
328880fefe0aSRandall Stewart 	}
328903b0b021SRandall Stewart 	control->end_added = 1;
329003b0b021SRandall Stewart 	if (stcb->asoc.control_pdapi)
329103b0b021SRandall Stewart 		TAILQ_INSERT_AFTER(&stcb->sctp_ep->read_queue, stcb->asoc.control_pdapi, control, next);
329203b0b021SRandall Stewart 	else {
329303b0b021SRandall Stewart 		/* we really should not see this case */
329403b0b021SRandall Stewart 		TAILQ_INSERT_TAIL(&stcb->sctp_ep->read_queue, control, next);
329503b0b021SRandall Stewart 	}
329603b0b021SRandall Stewart 	if (stcb->sctp_ep && stcb->sctp_socket) {
329703b0b021SRandall Stewart 		/* This should always be the case */
3298810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3299810ec536SMichael Tuexen 		struct socket *so;
3300810ec536SMichael Tuexen 
3301810ec536SMichael Tuexen 		so = SCTP_INP_SO(stcb->sctp_ep);
3302810ec536SMichael Tuexen 		if (!so_locked) {
3303810ec536SMichael Tuexen 			atomic_add_int(&stcb->asoc.refcnt, 1);
3304810ec536SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
3305810ec536SMichael Tuexen 			SCTP_SOCKET_LOCK(so, 1);
3306810ec536SMichael Tuexen 			SCTP_TCB_LOCK(stcb);
3307810ec536SMichael Tuexen 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
3308810ec536SMichael Tuexen 			if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
3309810ec536SMichael Tuexen 				SCTP_SOCKET_UNLOCK(so, 1);
3310810ec536SMichael Tuexen 				return;
3311810ec536SMichael Tuexen 			}
3312810ec536SMichael Tuexen 		}
3313810ec536SMichael Tuexen #endif
331403b0b021SRandall Stewart 		sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket);
3315810ec536SMichael Tuexen #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3316810ec536SMichael Tuexen 		if (!so_locked) {
3317810ec536SMichael Tuexen 			SCTP_SOCKET_UNLOCK(so, 1);
3318810ec536SMichael Tuexen 		}
3319810ec536SMichael Tuexen #endif
3320f8829a4aSRandall Stewart 	}
3321f8829a4aSRandall Stewart }
3322f8829a4aSRandall Stewart 
3323f8829a4aSRandall Stewart static void
3324f8829a4aSRandall Stewart sctp_notify_shutdown_event(struct sctp_tcb *stcb)
3325f8829a4aSRandall Stewart {
3326f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3327f8829a4aSRandall Stewart 	struct sctp_shutdown_event *sse;
3328f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3329f8829a4aSRandall Stewart 
3330f8829a4aSRandall Stewart 	/*
3331f8829a4aSRandall Stewart 	 * For TCP model AND UDP connected sockets we will send an error up
3332f8829a4aSRandall Stewart 	 * when an SHUTDOWN completes
3333f8829a4aSRandall Stewart 	 */
3334f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3335f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
3336f8829a4aSRandall Stewart 		/* mark socket closed for read/write and wakeup! */
3337ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3338ceaad40aSRandall Stewart 		struct socket *so;
3339ceaad40aSRandall Stewart 
3340ceaad40aSRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
3341ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
3342ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
3343ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
3344ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
3345ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
3346ceaad40aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
3347ceaad40aSRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
3348ceaad40aSRandall Stewart 			return;
3349ceaad40aSRandall Stewart 		}
3350ceaad40aSRandall Stewart #endif
3351f8829a4aSRandall Stewart 		socantsendmore(stcb->sctp_socket);
3352ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
3353ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
3354ceaad40aSRandall Stewart #endif
3355f8829a4aSRandall Stewart 	}
3356e2e7c62eSMichael Tuexen 	if (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT)) {
3357f8829a4aSRandall Stewart 		/* event not enabled */
3358f8829a4aSRandall Stewart 		return;
3359830d754dSRandall Stewart 	}
33600053ed28SMichael Tuexen 
3361eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_shutdown_event), 0, M_NOWAIT, 1, MT_DATA);
3362f8829a4aSRandall Stewart 	if (m_notify == NULL)
3363f8829a4aSRandall Stewart 		/* no space left */
3364f8829a4aSRandall Stewart 		return;
3365f8829a4aSRandall Stewart 	sse = mtod(m_notify, struct sctp_shutdown_event *);
3366e432298aSXin LI 	memset(sse, 0, sizeof(struct sctp_shutdown_event));
3367f8829a4aSRandall Stewart 	sse->sse_type = SCTP_SHUTDOWN_EVENT;
3368f8829a4aSRandall Stewart 	sse->sse_flags = 0;
3369f8829a4aSRandall Stewart 	sse->sse_length = sizeof(struct sctp_shutdown_event);
3370f8829a4aSRandall Stewart 	sse->sse_assoc_id = sctp_get_associd(stcb);
3371f8829a4aSRandall Stewart 
3372139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_shutdown_event);
3373139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3374f8829a4aSRandall Stewart 
3375f8829a4aSRandall Stewart 	/* append to socket */
3376f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
33777215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3378f8829a4aSRandall Stewart 	    m_notify);
3379f8829a4aSRandall Stewart 	if (control == NULL) {
3380f8829a4aSRandall Stewart 		/* no memory */
3381f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3382f8829a4aSRandall Stewart 		return;
3383f8829a4aSRandall Stewart 	}
3384139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
338528cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3386f8829a4aSRandall Stewart 	/* not that we need this */
3387f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3388f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3389f8829a4aSRandall Stewart 	    control,
3390cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3391f8829a4aSRandall Stewart }
3392f8829a4aSRandall Stewart 
3393f8829a4aSRandall Stewart static void
3394830d754dSRandall Stewart sctp_notify_sender_dry_event(struct sctp_tcb *stcb,
3395830d754dSRandall Stewart     int so_locked
3396830d754dSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3397830d754dSRandall Stewart     SCTP_UNUSED
3398830d754dSRandall Stewart #endif
3399830d754dSRandall Stewart )
3400830d754dSRandall Stewart {
3401830d754dSRandall Stewart 	struct mbuf *m_notify;
3402830d754dSRandall Stewart 	struct sctp_sender_dry_event *event;
3403830d754dSRandall Stewart 	struct sctp_queued_to_read *control;
3404830d754dSRandall Stewart 
340560990c0cSMichael Tuexen 	if ((stcb == NULL) ||
340660990c0cSMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_DRYEVNT)) {
3407830d754dSRandall Stewart 		/* event not enabled */
3408830d754dSRandall Stewart 		return;
3409830d754dSRandall Stewart 	}
34100053ed28SMichael Tuexen 
3411eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_sender_dry_event), 0, M_NOWAIT, 1, MT_DATA);
3412830d754dSRandall Stewart 	if (m_notify == NULL) {
3413830d754dSRandall Stewart 		/* no space left */
3414830d754dSRandall Stewart 		return;
3415830d754dSRandall Stewart 	}
3416830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3417830d754dSRandall Stewart 	event = mtod(m_notify, struct sctp_sender_dry_event *);
3418e432298aSXin LI 	memset(event, 0, sizeof(struct sctp_sender_dry_event));
3419830d754dSRandall Stewart 	event->sender_dry_type = SCTP_SENDER_DRY_EVENT;
3420830d754dSRandall Stewart 	event->sender_dry_flags = 0;
3421830d754dSRandall Stewart 	event->sender_dry_length = sizeof(struct sctp_sender_dry_event);
3422830d754dSRandall Stewart 	event->sender_dry_assoc_id = sctp_get_associd(stcb);
3423830d754dSRandall Stewart 
3424830d754dSRandall Stewart 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_sender_dry_event);
3425830d754dSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3426830d754dSRandall Stewart 
3427830d754dSRandall Stewart 	/* append to socket */
3428830d754dSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
34297215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
34307215cc1bSMichael Tuexen 	    m_notify);
3431830d754dSRandall Stewart 	if (control == NULL) {
3432830d754dSRandall Stewart 		/* no memory */
3433830d754dSRandall Stewart 		sctp_m_freem(m_notify);
3434830d754dSRandall Stewart 		return;
3435830d754dSRandall Stewart 	}
3436830d754dSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
3437830d754dSRandall Stewart 	control->spec_flags = M_NOTIFICATION;
3438830d754dSRandall Stewart 	/* not that we need this */
3439830d754dSRandall Stewart 	control->tail_mbuf = m_notify;
3440830d754dSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb, control,
3441cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, so_locked);
3442830d754dSRandall Stewart }
3443830d754dSRandall Stewart 
3444ea44232bSRandall Stewart 
3445c4e848b7SRandall Stewart void
3446c4e848b7SRandall Stewart sctp_notify_stream_reset_add(struct sctp_tcb *stcb, uint16_t numberin, uint16_t numberout, int flag)
3447ea44232bSRandall Stewart {
3448ea44232bSRandall Stewart 	struct mbuf *m_notify;
3449ea44232bSRandall Stewart 	struct sctp_queued_to_read *control;
3450c4e848b7SRandall Stewart 	struct sctp_stream_change_event *stradd;
3451ea44232bSRandall Stewart 
34528c501e51SMichael Tuexen 	if ((stcb == NULL) ||
34538c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_CHANGEEVNT))) {
3454ea44232bSRandall Stewart 		/* event not enabled */
3455ea44232bSRandall Stewart 		return;
3456ea44232bSRandall Stewart 	}
3457c4e848b7SRandall Stewart 	if ((stcb->asoc.peer_req_out) && flag) {
3458c4e848b7SRandall Stewart 		/* Peer made the request, don't tell the local user */
3459c4e848b7SRandall Stewart 		stcb->asoc.peer_req_out = 0;
3460c4e848b7SRandall Stewart 		return;
3461c4e848b7SRandall Stewart 	}
3462c4e848b7SRandall Stewart 	stcb->asoc.peer_req_out = 0;
3463e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_stream_change_event), 0, M_NOWAIT, 1, MT_DATA);
3464ea44232bSRandall Stewart 	if (m_notify == NULL)
3465ea44232bSRandall Stewart 		/* no space left */
3466ea44232bSRandall Stewart 		return;
3467ea44232bSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3468c4e848b7SRandall Stewart 	stradd = mtod(m_notify, struct sctp_stream_change_event *);
3469e432298aSXin LI 	memset(stradd, 0, sizeof(struct sctp_stream_change_event));
3470c4e848b7SRandall Stewart 	stradd->strchange_type = SCTP_STREAM_CHANGE_EVENT;
3471c4e848b7SRandall Stewart 	stradd->strchange_flags = flag;
3472e432298aSXin LI 	stradd->strchange_length = sizeof(struct sctp_stream_change_event);
3473c4e848b7SRandall Stewart 	stradd->strchange_assoc_id = sctp_get_associd(stcb);
3474c4e848b7SRandall Stewart 	stradd->strchange_instrms = numberin;
3475c4e848b7SRandall Stewart 	stradd->strchange_outstrms = numberout;
3476e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_stream_change_event);
3477ea44232bSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3478ea44232bSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3479ea44232bSRandall Stewart 		/* no space */
3480ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3481ea44232bSRandall Stewart 		return;
3482ea44232bSRandall Stewart 	}
3483ea44232bSRandall Stewart 	/* append to socket */
3484ea44232bSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
34857215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3486ea44232bSRandall Stewart 	    m_notify);
3487ea44232bSRandall Stewart 	if (control == NULL) {
3488ea44232bSRandall Stewart 		/* no memory */
3489ea44232bSRandall Stewart 		sctp_m_freem(m_notify);
3490ea44232bSRandall Stewart 		return;
3491ea44232bSRandall Stewart 	}
3492ea44232bSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
349328cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3494ea44232bSRandall Stewart 	/* not that we need this */
3495ea44232bSRandall Stewart 	control->tail_mbuf = m_notify;
3496ea44232bSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3497ea44232bSRandall Stewart 	    control,
3498cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3499ea44232bSRandall Stewart }
3500ea44232bSRandall Stewart 
3501c4e848b7SRandall Stewart void
3502c4e848b7SRandall Stewart sctp_notify_stream_reset_tsn(struct sctp_tcb *stcb, uint32_t sending_tsn, uint32_t recv_tsn, int flag)
3503c4e848b7SRandall Stewart {
3504c4e848b7SRandall Stewart 	struct mbuf *m_notify;
3505c4e848b7SRandall Stewart 	struct sctp_queued_to_read *control;
3506c4e848b7SRandall Stewart 	struct sctp_assoc_reset_event *strasoc;
3507c4e848b7SRandall Stewart 
35088c501e51SMichael Tuexen 	if ((stcb == NULL) ||
35098c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_ASSOC_RESETEVNT))) {
3510c4e848b7SRandall Stewart 		/* event not enabled */
3511c4e848b7SRandall Stewart 		return;
3512c4e848b7SRandall Stewart 	}
3513e432298aSXin LI 	m_notify = sctp_get_mbuf_for_msg(sizeof(struct sctp_assoc_reset_event), 0, M_NOWAIT, 1, MT_DATA);
3514c4e848b7SRandall Stewart 	if (m_notify == NULL)
3515c4e848b7SRandall Stewart 		/* no space left */
3516c4e848b7SRandall Stewart 		return;
3517c4e848b7SRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3518c4e848b7SRandall Stewart 	strasoc = mtod(m_notify, struct sctp_assoc_reset_event *);
3519e432298aSXin LI 	memset(strasoc, 0, sizeof(struct sctp_assoc_reset_event));
3520c4e848b7SRandall Stewart 	strasoc->assocreset_type = SCTP_ASSOC_RESET_EVENT;
3521c4e848b7SRandall Stewart 	strasoc->assocreset_flags = flag;
3522e432298aSXin LI 	strasoc->assocreset_length = sizeof(struct sctp_assoc_reset_event);
3523c4e848b7SRandall Stewart 	strasoc->assocreset_assoc_id = sctp_get_associd(stcb);
3524c4e848b7SRandall Stewart 	strasoc->assocreset_local_tsn = sending_tsn;
3525c4e848b7SRandall Stewart 	strasoc->assocreset_remote_tsn = recv_tsn;
3526e432298aSXin LI 	SCTP_BUF_LEN(m_notify) = sizeof(struct sctp_assoc_reset_event);
3527c4e848b7SRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3528c4e848b7SRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3529c4e848b7SRandall Stewart 		/* no space */
3530c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3531c4e848b7SRandall Stewart 		return;
3532c4e848b7SRandall Stewart 	}
3533c4e848b7SRandall Stewart 	/* append to socket */
3534c4e848b7SRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3535c4e848b7SRandall Stewart 	    0, 0, stcb->asoc.context, 0, 0, 0,
3536c4e848b7SRandall Stewart 	    m_notify);
3537c4e848b7SRandall Stewart 	if (control == NULL) {
3538c4e848b7SRandall Stewart 		/* no memory */
3539c4e848b7SRandall Stewart 		sctp_m_freem(m_notify);
3540c4e848b7SRandall Stewart 		return;
3541c4e848b7SRandall Stewart 	}
3542c4e848b7SRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
354328cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3544c4e848b7SRandall Stewart 	/* not that we need this */
3545c4e848b7SRandall Stewart 	control->tail_mbuf = m_notify;
3546c4e848b7SRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3547c4e848b7SRandall Stewart 	    control,
3548c4e848b7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3549c4e848b7SRandall Stewart }
3550c4e848b7SRandall Stewart 
3551c4e848b7SRandall Stewart 
3552ea44232bSRandall Stewart 
3553830d754dSRandall Stewart static void
3554f8829a4aSRandall Stewart sctp_notify_stream_reset(struct sctp_tcb *stcb,
3555f8829a4aSRandall Stewart     int number_entries, uint16_t *list, int flag)
3556f8829a4aSRandall Stewart {
3557f8829a4aSRandall Stewart 	struct mbuf *m_notify;
3558f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control;
3559f8829a4aSRandall Stewart 	struct sctp_stream_reset_event *strreset;
3560f8829a4aSRandall Stewart 	int len;
3561f8829a4aSRandall Stewart 
35628c501e51SMichael Tuexen 	if ((stcb == NULL) ||
35638c501e51SMichael Tuexen 	    (sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_STREAM_RESETEVNT))) {
3564f8829a4aSRandall Stewart 		/* event not enabled */
3565f8829a4aSRandall Stewart 		return;
3566830d754dSRandall Stewart 	}
35670053ed28SMichael Tuexen 
3568eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(MCLBYTES, 0, M_NOWAIT, 1, MT_DATA);
3569f8829a4aSRandall Stewart 	if (m_notify == NULL)
3570f8829a4aSRandall Stewart 		/* no space left */
3571f8829a4aSRandall Stewart 		return;
3572139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = 0;
3573f8829a4aSRandall Stewart 	len = sizeof(struct sctp_stream_reset_event) + (number_entries * sizeof(uint16_t));
3574f8829a4aSRandall Stewart 	if (len > M_TRAILINGSPACE(m_notify)) {
3575f8829a4aSRandall Stewart 		/* never enough room */
3576f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3577f8829a4aSRandall Stewart 		return;
3578f8829a4aSRandall Stewart 	}
3579f8829a4aSRandall Stewart 	strreset = mtod(m_notify, struct sctp_stream_reset_event *);
3580e432298aSXin LI 	memset(strreset, 0, len);
3581f8829a4aSRandall Stewart 	strreset->strreset_type = SCTP_STREAM_RESET_EVENT;
3582c4e848b7SRandall Stewart 	strreset->strreset_flags = flag;
3583f8829a4aSRandall Stewart 	strreset->strreset_length = len;
3584f8829a4aSRandall Stewart 	strreset->strreset_assoc_id = sctp_get_associd(stcb);
3585f8829a4aSRandall Stewart 	if (number_entries) {
3586f8829a4aSRandall Stewart 		int i;
3587f8829a4aSRandall Stewart 
3588f8829a4aSRandall Stewart 		for (i = 0; i < number_entries; i++) {
3589c4e848b7SRandall Stewart 			strreset->strreset_stream_list[i] = ntohs(list[i]);
3590f8829a4aSRandall Stewart 		}
3591f8829a4aSRandall Stewart 	}
3592139bc87fSRandall Stewart 	SCTP_BUF_LEN(m_notify) = len;
3593139bc87fSRandall Stewart 	SCTP_BUF_NEXT(m_notify) = NULL;
3594139bc87fSRandall Stewart 	if (sctp_sbspace(&stcb->asoc, &stcb->sctp_socket->so_rcv) < SCTP_BUF_LEN(m_notify)) {
3595f8829a4aSRandall Stewart 		/* no space */
3596f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3597f8829a4aSRandall Stewart 		return;
3598f8829a4aSRandall Stewart 	}
3599f8829a4aSRandall Stewart 	/* append to socket */
3600f8829a4aSRandall Stewart 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
36017215cc1bSMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3602f8829a4aSRandall Stewart 	    m_notify);
3603f8829a4aSRandall Stewart 	if (control == NULL) {
3604f8829a4aSRandall Stewart 		/* no memory */
3605f8829a4aSRandall Stewart 		sctp_m_freem(m_notify);
3606f8829a4aSRandall Stewart 		return;
3607f8829a4aSRandall Stewart 	}
3608139bc87fSRandall Stewart 	control->length = SCTP_BUF_LEN(m_notify);
360928cd0699SMichael Tuexen 	control->spec_flags = M_NOTIFICATION;
3610f8829a4aSRandall Stewart 	/* not that we need this */
3611f8829a4aSRandall Stewart 	control->tail_mbuf = m_notify;
3612f8829a4aSRandall Stewart 	sctp_add_to_readq(stcb->sctp_ep, stcb,
3613f8829a4aSRandall Stewart 	    control,
3614cfde3ff7SRandall Stewart 	    &stcb->sctp_socket->so_rcv, 1, SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3615f8829a4aSRandall Stewart }
3616f8829a4aSRandall Stewart 
3617f8829a4aSRandall Stewart 
3618389b1b11SMichael Tuexen static void
3619389b1b11SMichael Tuexen sctp_notify_remote_error(struct sctp_tcb *stcb, uint16_t error, struct sctp_error_chunk *chunk)
3620389b1b11SMichael Tuexen {
3621389b1b11SMichael Tuexen 	struct mbuf *m_notify;
3622389b1b11SMichael Tuexen 	struct sctp_remote_error *sre;
3623389b1b11SMichael Tuexen 	struct sctp_queued_to_read *control;
36249a8e3088SMichael Tuexen 	unsigned int notif_len;
36259a8e3088SMichael Tuexen 	uint16_t chunk_len;
3626389b1b11SMichael Tuexen 
3627389b1b11SMichael Tuexen 	if ((stcb == NULL) ||
3628389b1b11SMichael Tuexen 	    sctp_stcb_is_feature_off(stcb->sctp_ep, stcb, SCTP_PCB_FLAGS_RECVPEERERR)) {
3629389b1b11SMichael Tuexen 		return;
3630389b1b11SMichael Tuexen 	}
3631389b1b11SMichael Tuexen 	if (chunk != NULL) {
3632c9eb4473SMichael Tuexen 		chunk_len = ntohs(chunk->ch.chunk_length);
36339669e724SMichael Tuexen 		/*
36349669e724SMichael Tuexen 		 * Only SCTP_CHUNK_BUFFER_SIZE are guaranteed to be
363545d41de5SMichael Tuexen 		 * contiguous.
36369669e724SMichael Tuexen 		 */
36379669e724SMichael Tuexen 		if (chunk_len > SCTP_CHUNK_BUFFER_SIZE) {
36389669e724SMichael Tuexen 			chunk_len = SCTP_CHUNK_BUFFER_SIZE;
36399669e724SMichael Tuexen 		}
3640389b1b11SMichael Tuexen 	} else {
3641389b1b11SMichael Tuexen 		chunk_len = 0;
3642389b1b11SMichael Tuexen 	}
36439a8e3088SMichael Tuexen 	notif_len = (unsigned int)(sizeof(struct sctp_remote_error) + chunk_len);
3644eb1b1807SGleb Smirnoff 	m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3645389b1b11SMichael Tuexen 	if (m_notify == NULL) {
3646389b1b11SMichael Tuexen 		/* Retry with smaller value. */
36479a8e3088SMichael Tuexen 		notif_len = (unsigned int)sizeof(struct sctp_remote_error);
3648eb1b1807SGleb Smirnoff 		m_notify = sctp_get_mbuf_for_msg(notif_len, 0, M_NOWAIT, 1, MT_DATA);
3649389b1b11SMichael Tuexen 		if (m_notify == NULL) {
3650389b1b11SMichael Tuexen 			return;
3651389b1b11SMichael Tuexen 		}
3652389b1b11SMichael Tuexen 	}
3653389b1b11SMichael Tuexen 	SCTP_BUF_NEXT(m_notify) = NULL;
3654389b1b11SMichael Tuexen 	sre = mtod(m_notify, struct sctp_remote_error *);
365556711f94SMichael Tuexen 	memset(sre, 0, notif_len);
3656389b1b11SMichael Tuexen 	sre->sre_type = SCTP_REMOTE_ERROR;
3657389b1b11SMichael Tuexen 	sre->sre_flags = 0;
3658389b1b11SMichael Tuexen 	sre->sre_length = sizeof(struct sctp_remote_error);
3659389b1b11SMichael Tuexen 	sre->sre_error = error;
3660389b1b11SMichael Tuexen 	sre->sre_assoc_id = sctp_get_associd(stcb);
3661389b1b11SMichael Tuexen 	if (notif_len > sizeof(struct sctp_remote_error)) {
3662389b1b11SMichael Tuexen 		memcpy(sre->sre_data, chunk, chunk_len);
3663389b1b11SMichael Tuexen 		sre->sre_length += chunk_len;
3664389b1b11SMichael Tuexen 	}
3665389b1b11SMichael Tuexen 	SCTP_BUF_LEN(m_notify) = sre->sre_length;
3666389b1b11SMichael Tuexen 	control = sctp_build_readq_entry(stcb, stcb->asoc.primary_destination,
3667389b1b11SMichael Tuexen 	    0, 0, stcb->asoc.context, 0, 0, 0,
3668389b1b11SMichael Tuexen 	    m_notify);
3669389b1b11SMichael Tuexen 	if (control != NULL) {
3670389b1b11SMichael Tuexen 		control->length = SCTP_BUF_LEN(m_notify);
367128cd0699SMichael Tuexen 		control->spec_flags = M_NOTIFICATION;
3672389b1b11SMichael Tuexen 		/* not that we need this */
3673389b1b11SMichael Tuexen 		control->tail_mbuf = m_notify;
3674389b1b11SMichael Tuexen 		sctp_add_to_readq(stcb->sctp_ep, stcb,
3675389b1b11SMichael Tuexen 		    control,
3676389b1b11SMichael Tuexen 		    &stcb->sctp_socket->so_rcv, 1,
3677389b1b11SMichael Tuexen 		    SCTP_READ_LOCK_NOT_HELD, SCTP_SO_NOT_LOCKED);
3678389b1b11SMichael Tuexen 	} else {
3679389b1b11SMichael Tuexen 		sctp_m_freem(m_notify);
3680389b1b11SMichael Tuexen 	}
3681389b1b11SMichael Tuexen }
3682389b1b11SMichael Tuexen 
3683389b1b11SMichael Tuexen 
3684f8829a4aSRandall Stewart void
3685f8829a4aSRandall Stewart sctp_ulp_notify(uint32_t notification, struct sctp_tcb *stcb,
3686ceaad40aSRandall Stewart     uint32_t error, void *data, int so_locked
3687ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3688ceaad40aSRandall Stewart     SCTP_UNUSED
3689ceaad40aSRandall Stewart #endif
3690ceaad40aSRandall Stewart )
3691f8829a4aSRandall Stewart {
3692830d754dSRandall Stewart 	if ((stcb == NULL) ||
3693830d754dSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3694f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3695830d754dSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3696830d754dSRandall Stewart 		/* If the socket is gone we are out of here */
3697f8829a4aSRandall Stewart 		return;
3698f8829a4aSRandall Stewart 	}
3699a99b6783SRandall Stewart 	if (stcb->sctp_socket->so_rcv.sb_state & SBS_CANTRCVMORE) {
3700a99b6783SRandall Stewart 		return;
3701a99b6783SRandall Stewart 	}
3702839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3703839d21d6SMichael Tuexen 	    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
370417205eccSRandall Stewart 		if ((notification == SCTP_NOTIFY_INTERFACE_DOWN) ||
370517205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_UP) ||
370617205eccSRandall Stewart 		    (notification == SCTP_NOTIFY_INTERFACE_CONFIRMED)) {
370717205eccSRandall Stewart 			/* Don't report these in front states */
370817205eccSRandall Stewart 			return;
370917205eccSRandall Stewart 		}
371017205eccSRandall Stewart 	}
3711f8829a4aSRandall Stewart 	switch (notification) {
3712f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_UP:
3713f8829a4aSRandall Stewart 		if (stcb->asoc.assoc_up_sent == 0) {
3714410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_UP, stcb, error, NULL, 0, so_locked);
3715f8829a4aSRandall Stewart 			stcb->asoc.assoc_up_sent = 1;
3716f8829a4aSRandall Stewart 		}
37172afb3e84SRandall Stewart 		if (stcb->asoc.adaptation_needed && (stcb->asoc.adaptation_sent == 0)) {
37187215cc1bSMichael Tuexen 			sctp_notify_adaptation_layer(stcb);
37192afb3e84SRandall Stewart 		}
3720c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3721830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3722830d754dSRandall Stewart 			    NULL, so_locked);
3723830d754dSRandall Stewart 		}
3724f8829a4aSRandall Stewart 		break;
3725f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_DOWN:
3726410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_SHUTDOWN_COMP, stcb, error, NULL, 0, so_locked);
3727f8829a4aSRandall Stewart 		break;
3728f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_DOWN:
3729f8829a4aSRandall Stewart 		{
3730f8829a4aSRandall Stewart 			struct sctp_nets *net;
3731f8829a4aSRandall Stewart 
3732f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3733f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_UNREACHABLE,
37343cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3735f8829a4aSRandall Stewart 			break;
3736f8829a4aSRandall Stewart 		}
3737f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_UP:
3738f8829a4aSRandall Stewart 		{
3739f8829a4aSRandall Stewart 			struct sctp_nets *net;
3740f8829a4aSRandall Stewart 
3741f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3742f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_AVAILABLE,
37433cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3744f8829a4aSRandall Stewart 			break;
3745f8829a4aSRandall Stewart 		}
3746f8829a4aSRandall Stewart 	case SCTP_NOTIFY_INTERFACE_CONFIRMED:
3747f8829a4aSRandall Stewart 		{
3748f8829a4aSRandall Stewart 			struct sctp_nets *net;
3749f8829a4aSRandall Stewart 
3750f8829a4aSRandall Stewart 			net = (struct sctp_nets *)data;
3751f8829a4aSRandall Stewart 			sctp_notify_peer_addr_change(stcb, SCTP_ADDR_CONFIRMED,
37523cb3567dSMichael Tuexen 			    (struct sockaddr *)&net->ro._l_addr, error, so_locked);
3753f8829a4aSRandall Stewart 			break;
3754f8829a4aSRandall Stewart 		}
3755f8829a4aSRandall Stewart 	case SCTP_NOTIFY_SPECIAL_SP_FAIL:
3756f8829a4aSRandall Stewart 		sctp_notify_send_failed2(stcb, error,
3757ceaad40aSRandall Stewart 		    (struct sctp_stream_queue_pending *)data, so_locked);
3758f8829a4aSRandall Stewart 		break;
37591edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_SENT_DG_FAIL:
37601edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 1, error,
37611edc9dbaSMichael Tuexen 		    (struct sctp_tmit_chunk *)data, so_locked);
37621edc9dbaSMichael Tuexen 		break;
37631edc9dbaSMichael Tuexen 	case SCTP_NOTIFY_UNSENT_DG_FAIL:
37641edc9dbaSMichael Tuexen 		sctp_notify_send_failed(stcb, 0, error,
3765ceaad40aSRandall Stewart 		    (struct sctp_tmit_chunk *)data, so_locked);
3766f8829a4aSRandall Stewart 		break;
3767f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION:
37689a6142d8SRandall Stewart 		{
37699a6142d8SRandall Stewart 			uint32_t val;
37709a6142d8SRandall Stewart 
37719a6142d8SRandall Stewart 			val = *((uint32_t *)data);
37729a6142d8SRandall Stewart 
3773810ec536SMichael Tuexen 			sctp_notify_partial_delivery_indication(stcb, error, val, so_locked);
3774f8829a4aSRandall Stewart 			break;
3775810ec536SMichael Tuexen 		}
3776410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_LOC_ABORTED:
3777839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3778839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
3779410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 0, so_locked);
3780c105859eSRandall Stewart 		} else {
3781410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 0, so_locked);
3782410a3b1eSMichael Tuexen 		}
3783410a3b1eSMichael Tuexen 		break;
3784410a3b1eSMichael Tuexen 	case SCTP_NOTIFY_ASSOC_REM_ABORTED:
3785839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_WAIT) ||
3786839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED)) {
3787410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_CANT_STR_ASSOC, stcb, error, data, 1, so_locked);
3788410a3b1eSMichael Tuexen 		} else {
3789410a3b1eSMichael Tuexen 			sctp_notify_assoc_change(SCTP_COMM_LOST, stcb, error, data, 1, so_locked);
3790c105859eSRandall Stewart 		}
3791f8829a4aSRandall Stewart 		break;
3792f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASSOC_RESTART:
3793410a3b1eSMichael Tuexen 		sctp_notify_assoc_change(SCTP_RESTART, stcb, error, NULL, 0, so_locked);
3794c79bec9cSMichael Tuexen 		if (stcb->asoc.auth_supported == 0) {
3795830d754dSRandall Stewart 			sctp_ulp_notify(SCTP_NOTIFY_NO_PEER_AUTH, stcb, 0,
3796830d754dSRandall Stewart 			    NULL, so_locked);
3797830d754dSRandall Stewart 		}
3798f8829a4aSRandall Stewart 		break;
3799f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_SEND:
3800d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_OUTGOING_SSN);
3801f8829a4aSRandall Stewart 		break;
3802f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_RECV:
3803d7714577SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data), SCTP_STREAM_RESET_INCOMING);
3804f8829a4aSRandall Stewart 		break;
3805f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_OUT:
3806c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3807d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_FAILED));
3808f8829a4aSRandall Stewart 		break;
3809d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_OUT:
3810d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3811d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_OUTGOING_SSN | SCTP_STREAM_RESET_DENIED));
3812d4260646SMichael Tuexen 		break;
3813f8829a4aSRandall Stewart 	case SCTP_NOTIFY_STR_RESET_FAILED_IN:
3814c4e848b7SRandall Stewart 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3815d7714577SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_FAILED));
3816f8829a4aSRandall Stewart 		break;
3817d4260646SMichael Tuexen 	case SCTP_NOTIFY_STR_RESET_DENIED_IN:
3818d4260646SMichael Tuexen 		sctp_notify_stream_reset(stcb, error, ((uint16_t *)data),
3819d4260646SMichael Tuexen 		    (SCTP_STREAM_RESET_INCOMING | SCTP_STREAM_RESET_DENIED));
3820d4260646SMichael Tuexen 		break;
3821f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_ADD_IP:
3822f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_ADDED, data,
38233cb3567dSMichael Tuexen 		    error, so_locked);
3824f8829a4aSRandall Stewart 		break;
3825f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_DELETE_IP:
3826f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_REMOVED, data,
38273cb3567dSMichael Tuexen 		    error, so_locked);
3828f8829a4aSRandall Stewart 		break;
3829f8829a4aSRandall Stewart 	case SCTP_NOTIFY_ASCONF_SET_PRIMARY:
3830f8829a4aSRandall Stewart 		sctp_notify_peer_addr_change(stcb, SCTP_ADDR_MADE_PRIM, data,
38313cb3567dSMichael Tuexen 		    error, so_locked);
3832f8829a4aSRandall Stewart 		break;
3833f8829a4aSRandall Stewart 	case SCTP_NOTIFY_PEER_SHUTDOWN:
3834f8829a4aSRandall Stewart 		sctp_notify_shutdown_event(stcb);
3835f8829a4aSRandall Stewart 		break;
3836f8829a4aSRandall Stewart 	case SCTP_NOTIFY_AUTH_NEW_KEY:
383778f28045SMichael Tuexen 		sctp_notify_authentication(stcb, SCTP_AUTH_NEW_KEY, error,
3838830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3839830d754dSRandall Stewart 		    so_locked);
3840f8829a4aSRandall Stewart 		break;
3841830d754dSRandall Stewart 	case SCTP_NOTIFY_AUTH_FREE_KEY:
3842830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_FREE_KEY, error,
3843830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3844830d754dSRandall Stewart 		    so_locked);
3845f8829a4aSRandall Stewart 		break;
3846830d754dSRandall Stewart 	case SCTP_NOTIFY_NO_PEER_AUTH:
3847830d754dSRandall Stewart 		sctp_notify_authentication(stcb, SCTP_AUTH_NO_AUTH, error,
3848830d754dSRandall Stewart 		    (uint16_t)(uintptr_t)data,
3849830d754dSRandall Stewart 		    so_locked);
3850830d754dSRandall Stewart 		break;
3851830d754dSRandall Stewart 	case SCTP_NOTIFY_SENDER_DRY:
3852830d754dSRandall Stewart 		sctp_notify_sender_dry_event(stcb, so_locked);
3853830d754dSRandall Stewart 		break;
3854389b1b11SMichael Tuexen 	case SCTP_NOTIFY_REMOTE_ERROR:
3855389b1b11SMichael Tuexen 		sctp_notify_remote_error(stcb, error, data);
3856389b1b11SMichael Tuexen 		break;
3857f8829a4aSRandall Stewart 	default:
3858ad81507eSRandall Stewart 		SCTPDBG(SCTP_DEBUG_UTIL1, "%s: unknown notification %xh (%u)\n",
38596e9c45e0SMichael Tuexen 		    __func__, notification, notification);
3860f8829a4aSRandall Stewart 		break;
3861f8829a4aSRandall Stewart 	}			/* end switch */
3862f8829a4aSRandall Stewart }
3863f8829a4aSRandall Stewart 
3864f8829a4aSRandall Stewart void
38651edc9dbaSMichael Tuexen sctp_report_all_outbound(struct sctp_tcb *stcb, uint16_t error, int holds_lock, int so_locked
3866ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3867ceaad40aSRandall Stewart     SCTP_UNUSED
3868ceaad40aSRandall Stewart #endif
3869ceaad40aSRandall Stewart )
3870f8829a4aSRandall Stewart {
3871f8829a4aSRandall Stewart 	struct sctp_association *asoc;
3872f8829a4aSRandall Stewart 	struct sctp_stream_out *outs;
38734a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk, *nchk;
38744a9ef3f8SMichael Tuexen 	struct sctp_stream_queue_pending *sp, *nsp;
38757f34832bSRandall Stewart 	int i;
3876f8829a4aSRandall Stewart 
3877ad81507eSRandall Stewart 	if (stcb == NULL) {
3878ad81507eSRandall Stewart 		return;
3879ad81507eSRandall Stewart 	}
38804a9ef3f8SMichael Tuexen 	asoc = &stcb->asoc;
38814a9ef3f8SMichael Tuexen 	if (asoc->state & SCTP_STATE_ABOUT_TO_BE_FREED) {
3882478fbccbSRandall Stewart 		/* already being freed */
3883478fbccbSRandall Stewart 		return;
3884478fbccbSRandall Stewart 	}
3885f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3886f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
38874a9ef3f8SMichael Tuexen 	    (asoc->state & SCTP_STATE_CLOSED_SOCKET)) {
3888f8829a4aSRandall Stewart 		return;
3889f8829a4aSRandall Stewart 	}
3890f8829a4aSRandall Stewart 	/* now through all the gunk freeing chunks */
3891ad81507eSRandall Stewart 	if (holds_lock == 0) {
38927f34832bSRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
3893ad81507eSRandall Stewart 	}
3894d00aff5dSRandall Stewart 	/* sent queue SHOULD be empty */
38954a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
3896d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
3897d00aff5dSRandall Stewart 		asoc->sent_queue_cnt--;
3898325c8c46SMichael Tuexen 		if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
389949656eefSMichael Tuexen 			if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
390049656eefSMichael Tuexen 				asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3901a7ad6026SMichael Tuexen #ifdef INVARIANTS
3902a7ad6026SMichael Tuexen 			} else {
390349656eefSMichael Tuexen 				panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3904a7ad6026SMichael Tuexen #endif
3905a7ad6026SMichael Tuexen 			}
3906a7ad6026SMichael Tuexen 		}
39070c0982b8SRandall Stewart 		if (chk->data != NULL) {
3908d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
39091edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb,
39101edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3911810ec536SMichael Tuexen 			if (chk->data) {
3912d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3913d00aff5dSRandall Stewart 				chk->data = NULL;
3914d00aff5dSRandall Stewart 			}
3915810ec536SMichael Tuexen 		}
3916689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3917d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3918d00aff5dSRandall Stewart 	}
3919d00aff5dSRandall Stewart 	/* pending send queue SHOULD be empty */
39204a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(chk, &asoc->send_queue, sctp_next, nchk) {
3921d00aff5dSRandall Stewart 		TAILQ_REMOVE(&asoc->send_queue, chk, sctp_next);
3922d00aff5dSRandall Stewart 		asoc->send_queue_cnt--;
392349656eefSMichael Tuexen 		if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
392449656eefSMichael Tuexen 			asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
3925a7ad6026SMichael Tuexen #ifdef INVARIANTS
3926a7ad6026SMichael Tuexen 		} else {
392749656eefSMichael Tuexen 			panic("No chunks on the queues for sid %u.", chk->rec.data.sid);
3928a7ad6026SMichael Tuexen #endif
3929a7ad6026SMichael Tuexen 		}
39300c0982b8SRandall Stewart 		if (chk->data != NULL) {
3931d00aff5dSRandall Stewart 			sctp_free_bufspace(stcb, asoc, chk, 1);
39321edc9dbaSMichael Tuexen 			sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb,
39331edc9dbaSMichael Tuexen 			    error, chk, so_locked);
3934810ec536SMichael Tuexen 			if (chk->data) {
3935d00aff5dSRandall Stewart 				sctp_m_freem(chk->data);
3936d00aff5dSRandall Stewart 				chk->data = NULL;
3937d00aff5dSRandall Stewart 			}
3938810ec536SMichael Tuexen 		}
3939689e6a5fSMichael Tuexen 		sctp_free_a_chunk(stcb, chk, so_locked);
3940d00aff5dSRandall Stewart 		/* sa_ignore FREED_MEMORY */
3941d00aff5dSRandall Stewart 	}
39424a9ef3f8SMichael Tuexen 	for (i = 0; i < asoc->streamoutcnt; i++) {
39437f34832bSRandall Stewart 		/* For each stream */
39444a9ef3f8SMichael Tuexen 		outs = &asoc->strmout[i];
39457f34832bSRandall Stewart 		/* clean up any sends there */
39464a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(sp, &outs->outqueue, next, nsp) {
39474d58b0c3SMichael Tuexen 			atomic_subtract_int(&asoc->stream_queue_cnt, 1);
3948f8829a4aSRandall Stewart 			TAILQ_REMOVE(&outs->outqueue, sp, next);
3949d9707e43SMichael Tuexen 			stcb->asoc.ss_functions.sctp_ss_remove_from_stream(stcb, asoc, outs, sp, 1);
3950f8829a4aSRandall Stewart 			sctp_free_spbufspace(stcb, asoc, sp);
3951478fbccbSRandall Stewart 			if (sp->data) {
3952f8829a4aSRandall Stewart 				sctp_ulp_notify(SCTP_NOTIFY_SPECIAL_SP_FAIL, stcb,
39531edc9dbaSMichael Tuexen 				    error, (void *)sp, so_locked);
3954f8829a4aSRandall Stewart 				if (sp->data) {
3955f8829a4aSRandall Stewart 					sctp_m_freem(sp->data);
3956f8829a4aSRandall Stewart 					sp->data = NULL;
3957d07b2ac6SMichael Tuexen 					sp->tail_mbuf = NULL;
3958d07b2ac6SMichael Tuexen 					sp->length = 0;
3959f8829a4aSRandall Stewart 				}
3960478fbccbSRandall Stewart 			}
39619eea4a2dSMichael Tuexen 			if (sp->net) {
3962f8829a4aSRandall Stewart 				sctp_free_remote_addr(sp->net);
3963f8829a4aSRandall Stewart 				sp->net = NULL;
39649eea4a2dSMichael Tuexen 			}
3965f8829a4aSRandall Stewart 			/* Free the chunk */
3966689e6a5fSMichael Tuexen 			sctp_free_a_strmoq(stcb, sp, so_locked);
39673c503c28SRandall Stewart 			/* sa_ignore FREED_MEMORY */
3968f8829a4aSRandall Stewart 		}
3969f8829a4aSRandall Stewart 	}
3970f8829a4aSRandall Stewart 
3971ad81507eSRandall Stewart 	if (holds_lock == 0) {
39727f34832bSRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
3973f8829a4aSRandall Stewart 	}
3974ad81507eSRandall Stewart }
3975f8829a4aSRandall Stewart 
3976f8829a4aSRandall Stewart void
3977410a3b1eSMichael Tuexen sctp_abort_notification(struct sctp_tcb *stcb, uint8_t from_peer, uint16_t error,
3978a2b42326SMichael Tuexen     struct sctp_abort_chunk *abort, int so_locked
3979ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
3980ceaad40aSRandall Stewart     SCTP_UNUSED
3981ceaad40aSRandall Stewart #endif
3982ceaad40aSRandall Stewart )
3983f8829a4aSRandall Stewart {
3984ad81507eSRandall Stewart 	if (stcb == NULL) {
3985ad81507eSRandall Stewart 		return;
3986ad81507eSRandall Stewart 	}
3987c55b70ceSMichael Tuexen 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3988c55b70ceSMichael Tuexen 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
3989c55b70ceSMichael Tuexen 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_CONNECTED))) {
3990c55b70ceSMichael Tuexen 		stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_WAS_ABORTED;
3991c55b70ceSMichael Tuexen 	}
3992f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
3993f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
3994f8829a4aSRandall Stewart 	    (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET)) {
3995f8829a4aSRandall Stewart 		return;
3996f8829a4aSRandall Stewart 	}
3997f8829a4aSRandall Stewart 	/* Tell them we lost the asoc */
39986982c0faSMichael Tuexen 	sctp_report_all_outbound(stcb, error, 0, so_locked);
3999410a3b1eSMichael Tuexen 	if (from_peer) {
4000410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_REM_ABORTED, stcb, error, abort, so_locked);
4001410a3b1eSMichael Tuexen 	} else {
4002410a3b1eSMichael Tuexen 		sctp_ulp_notify(SCTP_NOTIFY_ASSOC_LOC_ABORTED, stcb, error, abort, so_locked);
4003410a3b1eSMichael Tuexen 	}
4004f8829a4aSRandall Stewart }
4005f8829a4aSRandall Stewart 
4006f8829a4aSRandall Stewart void
4007f8829a4aSRandall Stewart sctp_abort_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
4008b1754ad1SMichael Tuexen     struct mbuf *m, int iphlen,
4009b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
4010b1754ad1SMichael Tuexen     struct sctphdr *sh, struct mbuf *op_err,
4011457b4b88SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid,
4012c54a18d2SRandall Stewart     uint32_t vrf_id, uint16_t port)
4013f8829a4aSRandall Stewart {
4014f8829a4aSRandall Stewart 	uint32_t vtag;
4015ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4016ceaad40aSRandall Stewart 	struct socket *so;
4017ceaad40aSRandall Stewart #endif
4018ceaad40aSRandall Stewart 
4019f8829a4aSRandall Stewart 	vtag = 0;
4020f8829a4aSRandall Stewart 	if (stcb != NULL) {
4021f8829a4aSRandall Stewart 		vtag = stcb->asoc.peer_vtag;
402217205eccSRandall Stewart 		vrf_id = stcb->asoc.vrf_id;
4023f8829a4aSRandall Stewart 	}
4024b1754ad1SMichael Tuexen 	sctp_send_abort(m, iphlen, src, dst, sh, vtag, op_err,
4025d089f9b9SMichael Tuexen 	    mflowtype, mflowid, inp->fibnum,
4026f30ac432SMichael Tuexen 	    vrf_id, port);
4027f8829a4aSRandall Stewart 	if (stcb != NULL) {
4028884d8c53SMichael Tuexen 		/* We have a TCB to abort, send notification too */
4029884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, SCTP_SO_NOT_LOCKED);
4030839d21d6SMichael Tuexen 		SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED);
4031f8829a4aSRandall Stewart 		/* Ok, now lets free it */
4032ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4033ceaad40aSRandall Stewart 		so = SCTP_INP_SO(inp);
4034ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4035ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4036ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
4037ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4038ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
4039ceaad40aSRandall Stewart #endif
40400271d0cdSMichael Tuexen 		SCTP_STAT_INCR_COUNTER32(sctps_aborted);
4041839d21d6SMichael Tuexen 		if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
4042839d21d6SMichael Tuexen 		    (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
40430271d0cdSMichael Tuexen 			SCTP_STAT_DECR_GAUGE32(sctps_currestab);
40440271d0cdSMichael Tuexen 		}
4045ba785902SMichael Tuexen 		(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
4046ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_4);
4047ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4048ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
4049ceaad40aSRandall Stewart #endif
4050f8829a4aSRandall Stewart 	}
4051f8829a4aSRandall Stewart }
4052f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
4053f1f73e57SRandall Stewart void
4054f1f73e57SRandall Stewart sctp_print_out_track_log(struct sctp_tcb *stcb)
4055f1f73e57SRandall Stewart {
405618e198d3SRandall Stewart #ifdef NOSIY_PRINTS
4057f1f73e57SRandall Stewart 	int i;
4058f1f73e57SRandall Stewart 
4059ad81507eSRandall Stewart 	SCTP_PRINTF("Last ep reason:%x\n", stcb->sctp_ep->last_abort_code);
4060ad81507eSRandall Stewart 	SCTP_PRINTF("IN bound TSN log-aaa\n");
4061f1f73e57SRandall Stewart 	if ((stcb->asoc.tsn_in_at == 0) && (stcb->asoc.tsn_in_wrapped == 0)) {
4062ad81507eSRandall Stewart 		SCTP_PRINTF("None rcvd\n");
4063f1f73e57SRandall Stewart 		goto none_in;
4064f1f73e57SRandall Stewart 	}
4065f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_wrapped) {
4066f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_in_at; i < SCTP_TSN_LOG_SIZE; i++) {
4067ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4068f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4069f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4070f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4071f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4072f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4073f1f73e57SRandall Stewart 		}
4074f1f73e57SRandall Stewart 	}
4075f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_in_at) {
4076f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_in_at; i++) {
4077ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4078f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].tsn,
4079f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].strm,
4080f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].seq,
4081f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].flgs,
4082f1f73e57SRandall Stewart 			    stcb->asoc.in_tsnlog[i].sz);
4083f1f73e57SRandall Stewart 		}
4084f1f73e57SRandall Stewart 	}
4085f1f73e57SRandall Stewart none_in:
4086ad81507eSRandall Stewart 	SCTP_PRINTF("OUT bound TSN log-aaa\n");
4087ad81507eSRandall Stewart 	if ((stcb->asoc.tsn_out_at == 0) &&
4088ad81507eSRandall Stewart 	    (stcb->asoc.tsn_out_wrapped == 0)) {
4089ad81507eSRandall Stewart 		SCTP_PRINTF("None sent\n");
4090f1f73e57SRandall Stewart 	}
4091f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_wrapped) {
4092f1f73e57SRandall Stewart 		for (i = stcb->asoc.tsn_out_at; i < SCTP_TSN_LOG_SIZE; i++) {
4093ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4094f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4095f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4096f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4097f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4098f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4099f1f73e57SRandall Stewart 		}
4100f1f73e57SRandall Stewart 	}
4101f1f73e57SRandall Stewart 	if (stcb->asoc.tsn_out_at) {
4102f1f73e57SRandall Stewart 		for (i = 0; i < stcb->asoc.tsn_out_at; i++) {
4103ad81507eSRandall Stewart 			SCTP_PRINTF("TSN:%x strm:%d seq:%d flags:%x sz:%d\n",
4104f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].tsn,
4105f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].strm,
4106f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].seq,
4107f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].flgs,
4108f1f73e57SRandall Stewart 			    stcb->asoc.out_tsnlog[i].sz);
4109f1f73e57SRandall Stewart 		}
4110f1f73e57SRandall Stewart 	}
411118e198d3SRandall Stewart #endif
4112f1f73e57SRandall Stewart }
4113f1f73e57SRandall Stewart #endif
4114f1f73e57SRandall Stewart 
4115f8829a4aSRandall Stewart void
4116f8829a4aSRandall Stewart sctp_abort_an_association(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
4117a2b42326SMichael Tuexen     struct mbuf *op_err,
4118ceaad40aSRandall Stewart     int so_locked
4119ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4120ceaad40aSRandall Stewart     SCTP_UNUSED
4121ceaad40aSRandall Stewart #endif
4122ceaad40aSRandall Stewart )
4123f8829a4aSRandall Stewart {
4124ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4125ceaad40aSRandall Stewart 	struct socket *so;
4126ceaad40aSRandall Stewart #endif
4127ceaad40aSRandall Stewart 
4128ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4129ceaad40aSRandall Stewart 	so = SCTP_INP_SO(inp);
4130ceaad40aSRandall Stewart #endif
4131f8829a4aSRandall Stewart 	if (stcb == NULL) {
4132f8829a4aSRandall Stewart 		/* Got to have a TCB */
4133f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
4134fe1831e0SMichael Tuexen 			if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4135b0552ae2SRandall Stewart 				sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4136b0552ae2SRandall Stewart 				    SCTP_CALLED_DIRECTLY_NOCMPSET);
4137f8829a4aSRandall Stewart 			}
4138f8829a4aSRandall Stewart 		}
4139f8829a4aSRandall Stewart 		return;
414063981c2bSRandall Stewart 	} else {
4141839d21d6SMichael Tuexen 		SCTP_ADD_SUBSTATE(stcb, SCTP_STATE_WAS_ABORTED);
4142f8829a4aSRandall Stewart 	}
4143f8829a4aSRandall Stewart 	/* notify the peer */
4144ceaad40aSRandall Stewart 	sctp_send_abort_tcb(stcb, op_err, so_locked);
4145f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_aborted);
4146839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
4147839d21d6SMichael Tuexen 	    (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
4148f8829a4aSRandall Stewart 		SCTP_STAT_DECR_GAUGE32(sctps_currestab);
4149f8829a4aSRandall Stewart 	}
4150884d8c53SMichael Tuexen 	/* notify the ulp */
4151884d8c53SMichael Tuexen 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
4152884d8c53SMichael Tuexen 		sctp_abort_notification(stcb, 0, 0, NULL, so_locked);
4153884d8c53SMichael Tuexen 	}
4154f8829a4aSRandall Stewart 	/* now free the asoc */
4155f1f73e57SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
4156f1f73e57SRandall Stewart 	sctp_print_out_track_log(stcb);
4157f1f73e57SRandall Stewart #endif
4158ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4159ceaad40aSRandall Stewart 	if (!so_locked) {
4160ceaad40aSRandall Stewart 		atomic_add_int(&stcb->asoc.refcnt, 1);
4161ceaad40aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
4162ceaad40aSRandall Stewart 		SCTP_SOCKET_LOCK(so, 1);
4163ceaad40aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
4164ceaad40aSRandall Stewart 		atomic_subtract_int(&stcb->asoc.refcnt, 1);
4165ceaad40aSRandall Stewart 	}
4166ceaad40aSRandall Stewart #endif
4167ba785902SMichael Tuexen 	(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
4168ba785902SMichael Tuexen 	    SCTP_FROM_SCTPUTIL + SCTP_LOC_5);
4169ceaad40aSRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
4170ceaad40aSRandall Stewart 	if (!so_locked) {
4171ceaad40aSRandall Stewart 		SCTP_SOCKET_UNLOCK(so, 1);
4172ceaad40aSRandall Stewart 	}
4173ceaad40aSRandall Stewart #endif
4174f8829a4aSRandall Stewart }
4175f8829a4aSRandall Stewart 
4176f8829a4aSRandall Stewart void
4177b1754ad1SMichael Tuexen sctp_handle_ootb(struct mbuf *m, int iphlen, int offset,
4178b1754ad1SMichael Tuexen     struct sockaddr *src, struct sockaddr *dst,
4179b1754ad1SMichael Tuexen     struct sctphdr *sh, struct sctp_inpcb *inp,
4180ff1ffd74SMichael Tuexen     struct mbuf *cause,
4181d089f9b9SMichael Tuexen     uint8_t mflowtype, uint32_t mflowid, uint16_t fibnum,
4182f30ac432SMichael Tuexen     uint32_t vrf_id, uint16_t port)
4183f8829a4aSRandall Stewart {
4184f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch, chunk_buf;
4185f8829a4aSRandall Stewart 	unsigned int chk_length;
4186c58e60beSMichael Tuexen 	int contains_init_chunk;
4187f8829a4aSRandall Stewart 
4188f8829a4aSRandall Stewart 	SCTP_STAT_INCR_COUNTER32(sctps_outoftheblue);
4189f8829a4aSRandall Stewart 	/* Generate a TO address for future reference */
4190f8829a4aSRandall Stewart 	if (inp && (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
4191fe1831e0SMichael Tuexen 		if (LIST_EMPTY(&inp->sctp_asoc_list)) {
4192b0552ae2SRandall Stewart 			sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
4193b0552ae2SRandall Stewart 			    SCTP_CALLED_DIRECTLY_NOCMPSET);
4194f8829a4aSRandall Stewart 		}
4195f8829a4aSRandall Stewart 	}
4196c58e60beSMichael Tuexen 	contains_init_chunk = 0;
4197f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4198f8829a4aSRandall Stewart 	    sizeof(*ch), (uint8_t *)&chunk_buf);
4199f8829a4aSRandall Stewart 	while (ch != NULL) {
4200f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4201f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4202f8829a4aSRandall Stewart 			/* break to abort land */
4203f8829a4aSRandall Stewart 			break;
4204f8829a4aSRandall Stewart 		}
4205f8829a4aSRandall Stewart 		switch (ch->chunk_type) {
4206c58e60beSMichael Tuexen 		case SCTP_INIT:
4207c58e60beSMichael Tuexen 			contains_init_chunk = 1;
4208c58e60beSMichael Tuexen 			break;
4209f8829a4aSRandall Stewart 		case SCTP_PACKET_DROPPED:
4210f8829a4aSRandall Stewart 			/* we don't respond to pkt-dropped */
4211f8829a4aSRandall Stewart 			return;
4212f8829a4aSRandall Stewart 		case SCTP_ABORT_ASSOCIATION:
4213f8829a4aSRandall Stewart 			/* we don't respond with an ABORT to an ABORT */
4214f8829a4aSRandall Stewart 			return;
4215f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_COMPLETE:
4216f8829a4aSRandall Stewart 			/*
4217f8829a4aSRandall Stewart 			 * we ignore it since we are not waiting for it and
4218f8829a4aSRandall Stewart 			 * peer is gone
4219f8829a4aSRandall Stewart 			 */
4220f8829a4aSRandall Stewart 			return;
4221f8829a4aSRandall Stewart 		case SCTP_SHUTDOWN_ACK:
4222b1754ad1SMichael Tuexen 			sctp_send_shutdown_complete2(src, dst, sh,
4223d089f9b9SMichael Tuexen 			    mflowtype, mflowid, fibnum,
4224f30ac432SMichael Tuexen 			    vrf_id, port);
4225f8829a4aSRandall Stewart 			return;
4226f8829a4aSRandall Stewart 		default:
4227f8829a4aSRandall Stewart 			break;
4228f8829a4aSRandall Stewart 		}
4229f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4230f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4231f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4232f8829a4aSRandall Stewart 	}
4233c58e60beSMichael Tuexen 	if ((SCTP_BASE_SYSCTL(sctp_blackhole) == 0) ||
4234c58e60beSMichael Tuexen 	    ((SCTP_BASE_SYSCTL(sctp_blackhole) == 1) &&
4235c58e60beSMichael Tuexen 	    (contains_init_chunk == 0))) {
4236ff1ffd74SMichael Tuexen 		sctp_send_abort(m, iphlen, src, dst, sh, 0, cause,
4237d089f9b9SMichael Tuexen 		    mflowtype, mflowid, fibnum,
4238f30ac432SMichael Tuexen 		    vrf_id, port);
4239f8829a4aSRandall Stewart 	}
4240c58e60beSMichael Tuexen }
4241f8829a4aSRandall Stewart 
4242f8829a4aSRandall Stewart /*
4243f8829a4aSRandall Stewart  * check the inbound datagram to make sure there is not an abort inside it,
4244f8829a4aSRandall Stewart  * if there is return 1, else return 0.
4245f8829a4aSRandall Stewart  */
4246f8829a4aSRandall Stewart int
4247f8829a4aSRandall Stewart sctp_is_there_an_abort_here(struct mbuf *m, int iphlen, uint32_t *vtagfill)
4248f8829a4aSRandall Stewart {
4249f8829a4aSRandall Stewart 	struct sctp_chunkhdr *ch;
4250f8829a4aSRandall Stewart 	struct sctp_init_chunk *init_chk, chunk_buf;
4251f8829a4aSRandall Stewart 	int offset;
4252f8829a4aSRandall Stewart 	unsigned int chk_length;
4253f8829a4aSRandall Stewart 
4254f8829a4aSRandall Stewart 	offset = iphlen + sizeof(struct sctphdr);
4255f8829a4aSRandall Stewart 	ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset, sizeof(*ch),
4256f8829a4aSRandall Stewart 	    (uint8_t *)&chunk_buf);
4257f8829a4aSRandall Stewart 	while (ch != NULL) {
4258f8829a4aSRandall Stewart 		chk_length = ntohs(ch->chunk_length);
4259f8829a4aSRandall Stewart 		if (chk_length < sizeof(*ch)) {
4260f8829a4aSRandall Stewart 			/* packet is probably corrupt */
4261f8829a4aSRandall Stewart 			break;
4262f8829a4aSRandall Stewart 		}
4263f8829a4aSRandall Stewart 		/* we seem to be ok, is it an abort? */
4264f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_ABORT_ASSOCIATION) {
4265f8829a4aSRandall Stewart 			/* yep, tell them */
4266f8829a4aSRandall Stewart 			return (1);
4267f8829a4aSRandall Stewart 		}
4268f8829a4aSRandall Stewart 		if (ch->chunk_type == SCTP_INITIATION) {
4269f8829a4aSRandall Stewart 			/* need to update the Vtag */
4270f8829a4aSRandall Stewart 			init_chk = (struct sctp_init_chunk *)sctp_m_getptr(m,
4271f8829a4aSRandall Stewart 			    offset, sizeof(*init_chk), (uint8_t *)&chunk_buf);
4272f8829a4aSRandall Stewart 			if (init_chk != NULL) {
4273f8829a4aSRandall Stewart 				*vtagfill = ntohl(init_chk->init.initiate_tag);
4274f8829a4aSRandall Stewart 			}
4275f8829a4aSRandall Stewart 		}
4276f8829a4aSRandall Stewart 		/* Nope, move to the next chunk */
4277f8829a4aSRandall Stewart 		offset += SCTP_SIZE32(chk_length);
4278f8829a4aSRandall Stewart 		ch = (struct sctp_chunkhdr *)sctp_m_getptr(m, offset,
4279f8829a4aSRandall Stewart 		    sizeof(*ch), (uint8_t *)&chunk_buf);
4280f8829a4aSRandall Stewart 	}
4281f8829a4aSRandall Stewart 	return (0);
4282f8829a4aSRandall Stewart }
4283f8829a4aSRandall Stewart 
4284f8829a4aSRandall Stewart /*
4285f8829a4aSRandall Stewart  * currently (2/02), ifa_addr embeds scope_id's and don't have sin6_scope_id
4286f8829a4aSRandall Stewart  * set (i.e. it's 0) so, create this function to compare link local scopes
4287f8829a4aSRandall Stewart  */
42885e2c2d87SRandall Stewart #ifdef INET6
4289f8829a4aSRandall Stewart uint32_t
4290b0471b4bSMichael Tuexen sctp_is_same_scope(struct sockaddr_in6 *addr1, struct sockaddr_in6 *addr2)
4291b0471b4bSMichael Tuexen {
4292f8829a4aSRandall Stewart 	struct sockaddr_in6 a, b;
4293f8829a4aSRandall Stewart 
4294f8829a4aSRandall Stewart 	/* save copies */
4295f8829a4aSRandall Stewart 	a = *addr1;
4296f8829a4aSRandall Stewart 	b = *addr2;
4297f8829a4aSRandall Stewart 
4298f8829a4aSRandall Stewart 	if (a.sin6_scope_id == 0)
4299f8829a4aSRandall Stewart 		if (sa6_recoverscope(&a)) {
4300f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4301f8829a4aSRandall Stewart 			return (0);
4302f8829a4aSRandall Stewart 		}
4303f8829a4aSRandall Stewart 	if (b.sin6_scope_id == 0)
4304f8829a4aSRandall Stewart 		if (sa6_recoverscope(&b)) {
4305f8829a4aSRandall Stewart 			/* can't get scope, so can't match */
4306f8829a4aSRandall Stewart 			return (0);
4307f8829a4aSRandall Stewart 		}
4308f8829a4aSRandall Stewart 	if (a.sin6_scope_id != b.sin6_scope_id)
4309f8829a4aSRandall Stewart 		return (0);
4310f8829a4aSRandall Stewart 
4311f8829a4aSRandall Stewart 	return (1);
4312f8829a4aSRandall Stewart }
4313f8829a4aSRandall Stewart 
4314f8829a4aSRandall Stewart /*
4315f8829a4aSRandall Stewart  * returns a sockaddr_in6 with embedded scope recovered and removed
4316f8829a4aSRandall Stewart  */
4317f8829a4aSRandall Stewart struct sockaddr_in6 *
4318f8829a4aSRandall Stewart sctp_recover_scope(struct sockaddr_in6 *addr, struct sockaddr_in6 *store)
4319f8829a4aSRandall Stewart {
4320f8829a4aSRandall Stewart 	/* check and strip embedded scope junk */
4321f8829a4aSRandall Stewart 	if (addr->sin6_family == AF_INET6) {
4322f8829a4aSRandall Stewart 		if (IN6_IS_SCOPE_LINKLOCAL(&addr->sin6_addr)) {
4323f8829a4aSRandall Stewart 			if (addr->sin6_scope_id == 0) {
4324f8829a4aSRandall Stewart 				*store = *addr;
4325f8829a4aSRandall Stewart 				if (!sa6_recoverscope(store)) {
4326f8829a4aSRandall Stewart 					/* use the recovered scope */
4327f8829a4aSRandall Stewart 					addr = store;
4328f8829a4aSRandall Stewart 				}
4329f42a358aSRandall Stewart 			} else {
4330f8829a4aSRandall Stewart 				/* else, return the original "to" addr */
4331f42a358aSRandall Stewart 				in6_clearscope(&addr->sin6_addr);
4332f8829a4aSRandall Stewart 			}
4333f8829a4aSRandall Stewart 		}
4334f8829a4aSRandall Stewart 	}
4335f8829a4aSRandall Stewart 	return (addr);
4336f8829a4aSRandall Stewart }
43375e2c2d87SRandall Stewart #endif
43385e2c2d87SRandall Stewart 
4339f8829a4aSRandall Stewart /*
4340f8829a4aSRandall Stewart  * are the two addresses the same?  currently a "scopeless" check returns: 1
4341f8829a4aSRandall Stewart  * if same, 0 if not
4342f8829a4aSRandall Stewart  */
434372fb6fdbSRandall Stewart int
4344f8829a4aSRandall Stewart sctp_cmpaddr(struct sockaddr *sa1, struct sockaddr *sa2)
4345f8829a4aSRandall Stewart {
4346f8829a4aSRandall Stewart 
4347f8829a4aSRandall Stewart 	/* must be valid */
4348f8829a4aSRandall Stewart 	if (sa1 == NULL || sa2 == NULL)
4349f8829a4aSRandall Stewart 		return (0);
4350f8829a4aSRandall Stewart 
4351f8829a4aSRandall Stewart 	/* must be the same family */
4352f8829a4aSRandall Stewart 	if (sa1->sa_family != sa2->sa_family)
4353f8829a4aSRandall Stewart 		return (0);
4354f8829a4aSRandall Stewart 
43555e2c2d87SRandall Stewart 	switch (sa1->sa_family) {
43565e2c2d87SRandall Stewart #ifdef INET6
43575e2c2d87SRandall Stewart 	case AF_INET6:
43585e2c2d87SRandall Stewart 		{
4359f8829a4aSRandall Stewart 			/* IPv6 addresses */
4360f8829a4aSRandall Stewart 			struct sockaddr_in6 *sin6_1, *sin6_2;
4361f8829a4aSRandall Stewart 
4362f8829a4aSRandall Stewart 			sin6_1 = (struct sockaddr_in6 *)sa1;
4363f8829a4aSRandall Stewart 			sin6_2 = (struct sockaddr_in6 *)sa2;
4364c54a18d2SRandall Stewart 			return (SCTP6_ARE_ADDR_EQUAL(sin6_1,
4365c54a18d2SRandall Stewart 			    sin6_2));
43665e2c2d87SRandall Stewart 		}
43675e2c2d87SRandall Stewart #endif
4368ea5eba11SMichael Tuexen #ifdef INET
43695e2c2d87SRandall Stewart 	case AF_INET:
43705e2c2d87SRandall Stewart 		{
4371f8829a4aSRandall Stewart 			/* IPv4 addresses */
4372f8829a4aSRandall Stewart 			struct sockaddr_in *sin_1, *sin_2;
4373f8829a4aSRandall Stewart 
4374f8829a4aSRandall Stewart 			sin_1 = (struct sockaddr_in *)sa1;
4375f8829a4aSRandall Stewart 			sin_2 = (struct sockaddr_in *)sa2;
4376f8829a4aSRandall Stewart 			return (sin_1->sin_addr.s_addr == sin_2->sin_addr.s_addr);
43775e2c2d87SRandall Stewart 		}
4378ea5eba11SMichael Tuexen #endif
43795e2c2d87SRandall Stewart 	default:
4380f8829a4aSRandall Stewart 		/* we don't do these... */
4381f8829a4aSRandall Stewart 		return (0);
4382f8829a4aSRandall Stewart 	}
4383f8829a4aSRandall Stewart }
4384f8829a4aSRandall Stewart 
4385f8829a4aSRandall Stewart void
4386f8829a4aSRandall Stewart sctp_print_address(struct sockaddr *sa)
4387f8829a4aSRandall Stewart {
43885e2c2d87SRandall Stewart #ifdef INET6
43897d32aa0cSBjoern A. Zeeb 	char ip6buf[INET6_ADDRSTRLEN];
43905e2c2d87SRandall Stewart #endif
43915e2c2d87SRandall Stewart 
43925e2c2d87SRandall Stewart 	switch (sa->sa_family) {
43935e2c2d87SRandall Stewart #ifdef INET6
43945e2c2d87SRandall Stewart 	case AF_INET6:
43955e2c2d87SRandall Stewart 		{
4396ad81507eSRandall Stewart 			struct sockaddr_in6 *sin6;
4397ad81507eSRandall Stewart 
4398f8829a4aSRandall Stewart 			sin6 = (struct sockaddr_in6 *)sa;
4399ad81507eSRandall Stewart 			SCTP_PRINTF("IPv6 address: %s:port:%d scope:%u\n",
44007d32aa0cSBjoern A. Zeeb 			    ip6_sprintf(ip6buf, &sin6->sin6_addr),
44017d32aa0cSBjoern A. Zeeb 			    ntohs(sin6->sin6_port),
4402f8829a4aSRandall Stewart 			    sin6->sin6_scope_id);
44035e2c2d87SRandall Stewart 			break;
44045e2c2d87SRandall Stewart 		}
44055e2c2d87SRandall Stewart #endif
4406ea5eba11SMichael Tuexen #ifdef INET
44075e2c2d87SRandall Stewart 	case AF_INET:
44085e2c2d87SRandall Stewart 		{
4409f8829a4aSRandall Stewart 			struct sockaddr_in *sin;
4410f8829a4aSRandall Stewart 			unsigned char *p;
4411f8829a4aSRandall Stewart 
4412f8829a4aSRandall Stewart 			sin = (struct sockaddr_in *)sa;
4413f8829a4aSRandall Stewart 			p = (unsigned char *)&sin->sin_addr;
4414ad81507eSRandall Stewart 			SCTP_PRINTF("IPv4 address: %u.%u.%u.%u:%d\n",
4415f8829a4aSRandall Stewart 			    p[0], p[1], p[2], p[3], ntohs(sin->sin_port));
44165e2c2d87SRandall Stewart 			break;
44175e2c2d87SRandall Stewart 		}
4418ea5eba11SMichael Tuexen #endif
44195e2c2d87SRandall Stewart 	default:
4420ad81507eSRandall Stewart 		SCTP_PRINTF("?\n");
44215e2c2d87SRandall Stewart 		break;
4422f8829a4aSRandall Stewart 	}
4423f8829a4aSRandall Stewart }
4424f8829a4aSRandall Stewart 
4425f8829a4aSRandall Stewart void
4426f8829a4aSRandall Stewart sctp_pull_off_control_to_new_inp(struct sctp_inpcb *old_inp,
4427f8829a4aSRandall Stewart     struct sctp_inpcb *new_inp,
4428d06c82f1SRandall Stewart     struct sctp_tcb *stcb,
4429d06c82f1SRandall Stewart     int waitflags)
4430f8829a4aSRandall Stewart {
4431f8829a4aSRandall Stewart 	/*
4432f8829a4aSRandall Stewart 	 * go through our old INP and pull off any control structures that
4433f8829a4aSRandall Stewart 	 * belong to stcb and move then to the new inp.
4434f8829a4aSRandall Stewart 	 */
4435f8829a4aSRandall Stewart 	struct socket *old_so, *new_so;
4436f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control, *nctl;
4437f8829a4aSRandall Stewart 	struct sctp_readhead tmp_queue;
4438f8829a4aSRandall Stewart 	struct mbuf *m;
4439bff64a4dSRandall Stewart 	int error = 0;
4440f8829a4aSRandall Stewart 
4441f8829a4aSRandall Stewart 	old_so = old_inp->sctp_socket;
4442f8829a4aSRandall Stewart 	new_so = new_inp->sctp_socket;
4443f8829a4aSRandall Stewart 	TAILQ_INIT(&tmp_queue);
4444d06c82f1SRandall Stewart 	error = sblock(&old_so->so_rcv, waitflags);
4445f8829a4aSRandall Stewart 	if (error) {
4446f8829a4aSRandall Stewart 		/*
4447f8829a4aSRandall Stewart 		 * Gak, can't get sblock, we have a problem. data will be
4448f8829a4aSRandall Stewart 		 * left stranded.. and we don't dare look at it since the
4449f8829a4aSRandall Stewart 		 * other thread may be reading something. Oh well, its a
4450f8829a4aSRandall Stewart 		 * screwed up app that does a peeloff OR a accept while
4451f8829a4aSRandall Stewart 		 * reading from the main socket... actually its only the
4452f8829a4aSRandall Stewart 		 * peeloff() case, since I think read will fail on a
4453f8829a4aSRandall Stewart 		 * listening socket..
4454f8829a4aSRandall Stewart 		 */
4455f8829a4aSRandall Stewart 		return;
4456f8829a4aSRandall Stewart 	}
4457f8829a4aSRandall Stewart 	/* lock the socket buffers */
4458f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(old_inp);
44594a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &old_inp->read_queue, next, nctl) {
4460f8829a4aSRandall Stewart 		/* Pull off all for out target stcb */
4461f8829a4aSRandall Stewart 		if (control->stcb == stcb) {
4462f8829a4aSRandall Stewart 			/* remove it we want it */
4463f8829a4aSRandall Stewart 			TAILQ_REMOVE(&old_inp->read_queue, control, next);
4464f8829a4aSRandall Stewart 			TAILQ_INSERT_TAIL(&tmp_queue, control, next);
4465f8829a4aSRandall Stewart 			m = control->data;
4466f8829a4aSRandall Stewart 			while (m) {
4467b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4468139bc87fSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
446980fefe0aSRandall Stewart 				}
4470f8829a4aSRandall Stewart 				sctp_sbfree(control, stcb, &old_so->so_rcv, m);
4471b3f1ea41SRandall Stewart 				if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4472f8829a4aSRandall Stewart 					sctp_sblog(&old_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
447380fefe0aSRandall Stewart 				}
4474139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(m);
4475f8829a4aSRandall Stewart 			}
4476f8829a4aSRandall Stewart 		}
4477f8829a4aSRandall Stewart 	}
4478f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(old_inp);
4479f8829a4aSRandall Stewart 	/* Remove the sb-lock on the old socket */
4480f8829a4aSRandall Stewart 
4481f8829a4aSRandall Stewart 	sbunlock(&old_so->so_rcv);
4482f8829a4aSRandall Stewart 	/* Now we move them over to the new socket buffer */
4483f8829a4aSRandall Stewart 	SCTP_INP_READ_LOCK(new_inp);
44844a9ef3f8SMichael Tuexen 	TAILQ_FOREACH_SAFE(control, &tmp_queue, next, nctl) {
4485f8829a4aSRandall Stewart 		TAILQ_INSERT_TAIL(&new_inp->read_queue, control, next);
4486f8829a4aSRandall Stewart 		m = control->data;
4487f8829a4aSRandall Stewart 		while (m) {
4488b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4489139bc87fSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
449080fefe0aSRandall Stewart 			}
4491f8829a4aSRandall Stewart 			sctp_sballoc(stcb, &new_so->so_rcv, m);
4492b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4493f8829a4aSRandall Stewart 				sctp_sblog(&new_so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
449480fefe0aSRandall Stewart 			}
4495139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
4496f8829a4aSRandall Stewart 		}
4497f8829a4aSRandall Stewart 	}
4498f8829a4aSRandall Stewart 	SCTP_INP_READ_UNLOCK(new_inp);
4499f8829a4aSRandall Stewart }
4500f8829a4aSRandall Stewart 
4501f8829a4aSRandall Stewart void
4502b1deed45SMichael Tuexen sctp_wakeup_the_read_socket(struct sctp_inpcb *inp,
4503b1deed45SMichael Tuexen     struct sctp_tcb *stcb,
4504b1deed45SMichael Tuexen     int so_locked
4505b1deed45SMichael Tuexen #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4506b1deed45SMichael Tuexen     SCTP_UNUSED
4507b1deed45SMichael Tuexen #endif
4508b1deed45SMichael Tuexen )
450944249214SRandall Stewart {
4510b1deed45SMichael Tuexen 	if ((inp != NULL) && (inp->sctp_socket != NULL)) {
451144249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
451244249214SRandall Stewart 		struct socket *so;
451344249214SRandall Stewart 
451444249214SRandall Stewart 		so = SCTP_INP_SO(inp);
451544249214SRandall Stewart 		if (!so_locked) {
451644249214SRandall Stewart 			if (stcb) {
451744249214SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
451844249214SRandall Stewart 				SCTP_TCB_UNLOCK(stcb);
451944249214SRandall Stewart 			}
452044249214SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
452144249214SRandall Stewart 			if (stcb) {
452244249214SRandall Stewart 				SCTP_TCB_LOCK(stcb);
452344249214SRandall Stewart 				atomic_subtract_int(&stcb->asoc.refcnt, 1);
452444249214SRandall Stewart 			}
452544249214SRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
452644249214SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
452744249214SRandall Stewart 				return;
452844249214SRandall Stewart 			}
452944249214SRandall Stewart 		}
453044249214SRandall Stewart #endif
453144249214SRandall Stewart 		sctp_sorwakeup(inp, inp->sctp_socket);
453244249214SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
453344249214SRandall Stewart 		if (!so_locked) {
453444249214SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
453544249214SRandall Stewart 		}
453644249214SRandall Stewart #endif
453744249214SRandall Stewart 	}
453844249214SRandall Stewart }
453944249214SRandall Stewart 
454044249214SRandall Stewart void
4541f8829a4aSRandall Stewart sctp_add_to_readq(struct sctp_inpcb *inp,
4542f8829a4aSRandall Stewart     struct sctp_tcb *stcb,
4543f8829a4aSRandall Stewart     struct sctp_queued_to_read *control,
4544f8829a4aSRandall Stewart     struct sockbuf *sb,
4545ceaad40aSRandall Stewart     int end,
4546cfde3ff7SRandall Stewart     int inp_read_lock_held,
4547ceaad40aSRandall Stewart     int so_locked
4548ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4549ceaad40aSRandall Stewart     SCTP_UNUSED
4550ceaad40aSRandall Stewart #endif
4551ceaad40aSRandall Stewart )
4552f8829a4aSRandall Stewart {
4553f8829a4aSRandall Stewart 	/*
4554f8829a4aSRandall Stewart 	 * Here we must place the control on the end of the socket read
45554e88d37aSMichael Tuexen 	 * queue AND increment sb_cc so that select will work properly on
4556f8829a4aSRandall Stewart 	 * read.
4557f8829a4aSRandall Stewart 	 */
4558f8829a4aSRandall Stewart 	struct mbuf *m, *prev = NULL;
4559f8829a4aSRandall Stewart 
456003b0b021SRandall Stewart 	if (inp == NULL) {
456103b0b021SRandall Stewart 		/* Gak, TSNH!! */
4562a5d547adSRandall Stewart #ifdef INVARIANTS
456303b0b021SRandall Stewart 		panic("Gak, inp NULL on add_to_readq");
456403b0b021SRandall Stewart #endif
456503b0b021SRandall Stewart 		return;
456603b0b021SRandall Stewart 	}
4567cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4568f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(inp);
4569cd1386abSMichael Tuexen 	if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_CANT_READ) {
4570*8a3cfbffSMichael Tuexen 		if (!control->on_strm_q) {
4571cd1386abSMichael Tuexen 			sctp_free_remote_addr(control->whoFrom);
4572cd1386abSMichael Tuexen 			if (control->data) {
4573cd1386abSMichael Tuexen 				sctp_m_freem(control->data);
4574cd1386abSMichael Tuexen 				control->data = NULL;
4575cd1386abSMichael Tuexen 			}
457644249214SRandall Stewart 			sctp_free_a_readq(stcb, control);
4577*8a3cfbffSMichael Tuexen 		}
4578cd1386abSMichael Tuexen 		if (inp_read_lock_held == 0)
4579cd1386abSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4580cd1386abSMichael Tuexen 		return;
4581cd1386abSMichael Tuexen 	}
458242551e99SRandall Stewart 	if (!(control->spec_flags & M_NOTIFICATION)) {
4583a5d547adSRandall Stewart 		atomic_add_int(&inp->total_recvs, 1);
458442551e99SRandall Stewart 		if (!control->do_not_ref_stcb) {
4585a5d547adSRandall Stewart 			atomic_add_int(&stcb->total_recvs, 1);
458642551e99SRandall Stewart 		}
458742551e99SRandall Stewart 	}
4588f8829a4aSRandall Stewart 	m = control->data;
4589f8829a4aSRandall Stewart 	control->held_length = 0;
4590f8829a4aSRandall Stewart 	control->length = 0;
4591f8829a4aSRandall Stewart 	while (m) {
4592139bc87fSRandall Stewart 		if (SCTP_BUF_LEN(m) == 0) {
4593f8829a4aSRandall Stewart 			/* Skip mbufs with NO length */
4594f8829a4aSRandall Stewart 			if (prev == NULL) {
4595f8829a4aSRandall Stewart 				/* First one */
4596f8829a4aSRandall Stewart 				control->data = sctp_m_free(m);
4597f8829a4aSRandall Stewart 				m = control->data;
4598f8829a4aSRandall Stewart 			} else {
4599139bc87fSRandall Stewart 				SCTP_BUF_NEXT(prev) = sctp_m_free(m);
4600139bc87fSRandall Stewart 				m = SCTP_BUF_NEXT(prev);
4601f8829a4aSRandall Stewart 			}
4602f8829a4aSRandall Stewart 			if (m == NULL) {
4603c2ede4b3SMartin Blapp 				control->tail_mbuf = prev;
4604f8829a4aSRandall Stewart 			}
4605f8829a4aSRandall Stewart 			continue;
4606f8829a4aSRandall Stewart 		}
4607f8829a4aSRandall Stewart 		prev = m;
4608b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4609139bc87fSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBALLOC, SCTP_BUF_LEN(m));
461080fefe0aSRandall Stewart 		}
4611f8829a4aSRandall Stewart 		sctp_sballoc(stcb, sb, m);
4612b3f1ea41SRandall Stewart 		if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
4613f8829a4aSRandall Stewart 			sctp_sblog(sb, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
461480fefe0aSRandall Stewart 		}
4615139bc87fSRandall Stewart 		atomic_add_int(&control->length, SCTP_BUF_LEN(m));
4616139bc87fSRandall Stewart 		m = SCTP_BUF_NEXT(m);
4617f8829a4aSRandall Stewart 	}
4618f8829a4aSRandall Stewart 	if (prev != NULL) {
4619f8829a4aSRandall Stewart 		control->tail_mbuf = prev;
4620f8829a4aSRandall Stewart 	} else {
4621139bc87fSRandall Stewart 		/* Everything got collapsed out?? */
4622*8a3cfbffSMichael Tuexen 		if (!control->on_strm_q) {
4623cd1386abSMichael Tuexen 			sctp_free_remote_addr(control->whoFrom);
462444249214SRandall Stewart 			sctp_free_a_readq(stcb, control);
4625*8a3cfbffSMichael Tuexen 		}
4626cfde3ff7SRandall Stewart 		if (inp_read_lock_held == 0)
462747a490cbSMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
4628f8829a4aSRandall Stewart 		return;
4629f8829a4aSRandall Stewart 	}
4630f8829a4aSRandall Stewart 	if (end) {
4631f8829a4aSRandall Stewart 		control->end_added = 1;
4632f8829a4aSRandall Stewart 	}
4633f8829a4aSRandall Stewart 	TAILQ_INSERT_TAIL(&inp->read_queue, control, next);
463444249214SRandall Stewart 	control->on_read_q = 1;
4635cfde3ff7SRandall Stewart 	if (inp_read_lock_held == 0)
4636f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
4637f8829a4aSRandall Stewart 	if (inp && inp->sctp_socket) {
4638b1deed45SMichael Tuexen 		sctp_wakeup_the_read_socket(inp, stcb, so_locked);
4639f8829a4aSRandall Stewart 	}
4640f8829a4aSRandall Stewart }
4641f8829a4aSRandall Stewart 
4642f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR PATCH FILE OF
4643f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4644f8829a4aSRandall Stewart  */
4645f8829a4aSRandall Stewart 
4646f8829a4aSRandall Stewart /*************HOLD THIS COMMENT FOR END OF PATCH FILE OF
4647f8829a4aSRandall Stewart  *************ALTERNATE ROUTING CODE
4648f8829a4aSRandall Stewart  */
4649f8829a4aSRandall Stewart 
4650f8829a4aSRandall Stewart struct mbuf *
4651ff1ffd74SMichael Tuexen sctp_generate_cause(uint16_t code, char *info)
4652f8829a4aSRandall Stewart {
4653f8829a4aSRandall Stewart 	struct mbuf *m;
4654ff1ffd74SMichael Tuexen 	struct sctp_gen_error_cause *cause;
46559a8e3088SMichael Tuexen 	size_t info_len;
46569a8e3088SMichael Tuexen 	uint16_t len;
4657f8829a4aSRandall Stewart 
4658ff1ffd74SMichael Tuexen 	if ((code == 0) || (info == NULL)) {
4659ff1ffd74SMichael Tuexen 		return (NULL);
4660ff1ffd74SMichael Tuexen 	}
4661ff1ffd74SMichael Tuexen 	info_len = strlen(info);
46629a8e3088SMichael Tuexen 	if (info_len > (SCTP_MAX_CAUSE_LENGTH - sizeof(struct sctp_paramhdr))) {
46639a8e3088SMichael Tuexen 		return (NULL);
46649a8e3088SMichael Tuexen 	}
46659a8e3088SMichael Tuexen 	len = (uint16_t)(sizeof(struct sctp_paramhdr) + info_len);
4666ff1ffd74SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
4667ff1ffd74SMichael Tuexen 	if (m != NULL) {
4668ff1ffd74SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
4669ff1ffd74SMichael Tuexen 		cause = mtod(m, struct sctp_gen_error_cause *);
4670ff1ffd74SMichael Tuexen 		cause->code = htons(code);
46719a8e3088SMichael Tuexen 		cause->length = htons(len);
4672ff1ffd74SMichael Tuexen 		memcpy(cause->info, info, info_len);
4673f8829a4aSRandall Stewart 	}
4674f8829a4aSRandall Stewart 	return (m);
4675f8829a4aSRandall Stewart }
4676f8829a4aSRandall Stewart 
467732451da4SMichael Tuexen struct mbuf *
467832451da4SMichael Tuexen sctp_generate_no_user_data_cause(uint32_t tsn)
467932451da4SMichael Tuexen {
468032451da4SMichael Tuexen 	struct mbuf *m;
468132451da4SMichael Tuexen 	struct sctp_error_no_user_data *no_user_data_cause;
46829a8e3088SMichael Tuexen 	uint16_t len;
468332451da4SMichael Tuexen 
46849a8e3088SMichael Tuexen 	len = (uint16_t)sizeof(struct sctp_error_no_user_data);
468532451da4SMichael Tuexen 	m = sctp_get_mbuf_for_msg(len, 0, M_NOWAIT, 1, MT_DATA);
468632451da4SMichael Tuexen 	if (m != NULL) {
468732451da4SMichael Tuexen 		SCTP_BUF_LEN(m) = len;
468832451da4SMichael Tuexen 		no_user_data_cause = mtod(m, struct sctp_error_no_user_data *);
468932451da4SMichael Tuexen 		no_user_data_cause->cause.code = htons(SCTP_CAUSE_NO_USER_DATA);
46909a8e3088SMichael Tuexen 		no_user_data_cause->cause.length = htons(len);
46918b9c95f4SMichael Tuexen 		no_user_data_cause->tsn = htonl(tsn);
469232451da4SMichael Tuexen 	}
469332451da4SMichael Tuexen 	return (m);
469432451da4SMichael Tuexen }
469532451da4SMichael Tuexen 
4696f8829a4aSRandall Stewart #ifdef SCTP_MBCNT_LOGGING
4697f8829a4aSRandall Stewart void
4698f8829a4aSRandall Stewart sctp_free_bufspace(struct sctp_tcb *stcb, struct sctp_association *asoc,
4699f8829a4aSRandall Stewart     struct sctp_tmit_chunk *tp1, int chk_cnt)
4700f8829a4aSRandall Stewart {
4701f8829a4aSRandall Stewart 	if (tp1->data == NULL) {
4702f8829a4aSRandall Stewart 		return;
4703f8829a4aSRandall Stewart 	}
4704f8829a4aSRandall Stewart 	asoc->chunks_on_out_queue -= chk_cnt;
4705b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBCNT_LOGGING_ENABLE) {
4706f8829a4aSRandall Stewart 		sctp_log_mbcnt(SCTP_LOG_MBCNT_DECREASE,
4707f8829a4aSRandall Stewart 		    asoc->total_output_queue_size,
4708f8829a4aSRandall Stewart 		    tp1->book_size,
4709f8829a4aSRandall Stewart 		    0,
4710f8829a4aSRandall Stewart 		    tp1->mbcnt);
471180fefe0aSRandall Stewart 	}
4712f8829a4aSRandall Stewart 	if (asoc->total_output_queue_size >= tp1->book_size) {
471344b7479bSRandall Stewart 		atomic_add_int(&asoc->total_output_queue_size, -tp1->book_size);
4714f8829a4aSRandall Stewart 	} else {
4715f8829a4aSRandall Stewart 		asoc->total_output_queue_size = 0;
4716f8829a4aSRandall Stewart 	}
4717f8829a4aSRandall Stewart 
4718f8829a4aSRandall Stewart 	if (stcb->sctp_socket && (((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) ||
4719f8829a4aSRandall Stewart 	    ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE)))) {
47204e88d37aSMichael Tuexen 		if (stcb->sctp_socket->so_snd.sb_cc >= tp1->book_size) {
47214e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc -= tp1->book_size;
4722f8829a4aSRandall Stewart 		} else {
47234e88d37aSMichael Tuexen 			stcb->sctp_socket->so_snd.sb_cc = 0;
4724f8829a4aSRandall Stewart 
4725f8829a4aSRandall Stewart 		}
4726f8829a4aSRandall Stewart 	}
4727f8829a4aSRandall Stewart }
4728f8829a4aSRandall Stewart 
4729f8829a4aSRandall Stewart #endif
4730f8829a4aSRandall Stewart 
4731f8829a4aSRandall Stewart int
4732f8829a4aSRandall Stewart sctp_release_pr_sctp_chunk(struct sctp_tcb *stcb, struct sctp_tmit_chunk *tp1,
47331edc9dbaSMichael Tuexen     uint8_t sent, int so_locked
4734ceaad40aSRandall Stewart #if !defined(__APPLE__) && !defined(SCTP_SO_LOCK_TESTING)
4735ceaad40aSRandall Stewart     SCTP_UNUSED
4736ceaad40aSRandall Stewart #endif
4737ceaad40aSRandall Stewart )
4738f8829a4aSRandall Stewart {
47390c0982b8SRandall Stewart 	struct sctp_stream_out *strq;
47404a9ef3f8SMichael Tuexen 	struct sctp_tmit_chunk *chk = NULL, *tp2;
47410c0982b8SRandall Stewart 	struct sctp_stream_queue_pending *sp;
474249656eefSMichael Tuexen 	uint32_t mid;
474349656eefSMichael Tuexen 	uint16_t sid;
47440c0982b8SRandall Stewart 	uint8_t foundeom = 0;
4745f8829a4aSRandall Stewart 	int ret_sz = 0;
4746f8829a4aSRandall Stewart 	int notdone;
47470c0982b8SRandall Stewart 	int do_wakeup_routine = 0;
4748f8829a4aSRandall Stewart 
474949656eefSMichael Tuexen 	sid = tp1->rec.data.sid;
475049656eefSMichael Tuexen 	mid = tp1->rec.data.mid;
4751f0396ad1SMichael Tuexen 	if (sent || !(tp1->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG)) {
4752f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[0]++;
4753f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
475449656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_sent[0]++;
4755f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4756ad15e154SMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_sent[PR_SCTP_POLICY(tp1->flags)]++;
4757f0396ad1SMichael Tuexen #endif
4758f0396ad1SMichael Tuexen 	} else {
4759f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[0]++;
4760f0396ad1SMichael Tuexen 		stcb->asoc.abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
476149656eefSMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_unsent[0]++;
4762f0396ad1SMichael Tuexen #if defined(SCTP_DETAILED_STR_STATS)
4763ad15e154SMichael Tuexen 		stcb->asoc.strmout[sid].abandoned_unsent[PR_SCTP_POLICY(tp1->flags)]++;
4764f0396ad1SMichael Tuexen #endif
4765f0396ad1SMichael Tuexen 	}
4766f8829a4aSRandall Stewart 	do {
4767f8829a4aSRandall Stewart 		ret_sz += tp1->book_size;
47680c0982b8SRandall Stewart 		if (tp1->data != NULL) {
47698933fa13SRandall Stewart 			if (tp1->sent < SCTP_DATAGRAM_RESEND) {
4770830d754dSRandall Stewart 				sctp_flight_size_decrease(tp1);
4771830d754dSRandall Stewart 				sctp_total_flight_decrease(stcb, tp1);
47728933fa13SRandall Stewart 			}
47738933fa13SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
47740c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += tp1->send_size;
47750c0982b8SRandall Stewart 			stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
47761edc9dbaSMichael Tuexen 			if (sent) {
47771edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
47781edc9dbaSMichael Tuexen 			} else {
47791edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
47801edc9dbaSMichael Tuexen 			}
47812f99457bSMichael Tuexen 			if (tp1->data) {
4782f8829a4aSRandall Stewart 				sctp_m_freem(tp1->data);
4783f8829a4aSRandall Stewart 				tp1->data = NULL;
47842f99457bSMichael Tuexen 			}
47850c0982b8SRandall Stewart 			do_wakeup_routine = 1;
4786f8829a4aSRandall Stewart 			if (PR_SCTP_BUF_ENABLED(tp1->flags)) {
4787f8829a4aSRandall Stewart 				stcb->asoc.sent_queue_cnt_removeable--;
4788f8829a4aSRandall Stewart 			}
4789f8829a4aSRandall Stewart 		}
47908933fa13SRandall Stewart 		tp1->sent = SCTP_FORWARD_TSN_SKIP;
4791f8829a4aSRandall Stewart 		if ((tp1->rec.data.rcv_flags & SCTP_DATA_NOT_FRAG) ==
4792f8829a4aSRandall Stewart 		    SCTP_DATA_NOT_FRAG) {
4793f8829a4aSRandall Stewart 			/* not frag'ed we ae done   */
4794f8829a4aSRandall Stewart 			notdone = 0;
4795f8829a4aSRandall Stewart 			foundeom = 1;
4796f8829a4aSRandall Stewart 		} else if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
4797f8829a4aSRandall Stewart 			/* end of frag, we are done */
4798f8829a4aSRandall Stewart 			notdone = 0;
4799f8829a4aSRandall Stewart 			foundeom = 1;
4800f8829a4aSRandall Stewart 		} else {
4801f8829a4aSRandall Stewart 			/*
4802f8829a4aSRandall Stewart 			 * Its a begin or middle piece, we must mark all of
4803f8829a4aSRandall Stewart 			 * it
4804f8829a4aSRandall Stewart 			 */
4805f8829a4aSRandall Stewart 			notdone = 1;
4806f8829a4aSRandall Stewart 			tp1 = TAILQ_NEXT(tp1, sctp_next);
4807f8829a4aSRandall Stewart 		}
4808f8829a4aSRandall Stewart 	} while (tp1 && notdone);
48090c0982b8SRandall Stewart 	if (foundeom == 0) {
4810f8829a4aSRandall Stewart 		/*
4811f8829a4aSRandall Stewart 		 * The multi-part message was scattered across the send and
4812f8829a4aSRandall Stewart 		 * sent queue.
4813f8829a4aSRandall Stewart 		 */
48144a9ef3f8SMichael Tuexen 		TAILQ_FOREACH_SAFE(tp1, &stcb->asoc.send_queue, sctp_next, tp2) {
481549656eefSMichael Tuexen 			if ((tp1->rec.data.sid != sid) ||
481649656eefSMichael Tuexen 			    (!SCTP_MID_EQ(stcb->asoc.idata_supported, tp1->rec.data.mid, mid))) {
48174a9ef3f8SMichael Tuexen 				break;
48184a9ef3f8SMichael Tuexen 			}
48190c0982b8SRandall Stewart 			/*
48200c0982b8SRandall Stewart 			 * save to chk in case we have some on stream out
48210c0982b8SRandall Stewart 			 * queue. If so and we have an un-transmitted one we
48220c0982b8SRandall Stewart 			 * don't have to fudge the TSN.
48230c0982b8SRandall Stewart 			 */
48240c0982b8SRandall Stewart 			chk = tp1;
48250c0982b8SRandall Stewart 			ret_sz += tp1->book_size;
48260c0982b8SRandall Stewart 			sctp_free_bufspace(stcb, &stcb->asoc, tp1, 1);
48271edc9dbaSMichael Tuexen 			if (sent) {
48281edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_SENT_DG_FAIL, stcb, 0, tp1, so_locked);
48291edc9dbaSMichael Tuexen 			} else {
48301edc9dbaSMichael Tuexen 				sctp_ulp_notify(SCTP_NOTIFY_UNSENT_DG_FAIL, stcb, 0, tp1, so_locked);
48311edc9dbaSMichael Tuexen 			}
48322f99457bSMichael Tuexen 			if (tp1->data) {
48330c0982b8SRandall Stewart 				sctp_m_freem(tp1->data);
48342f99457bSMichael Tuexen 				tp1->data = NULL;
48352f99457bSMichael Tuexen 			}
48368933fa13SRandall Stewart 			/* No flight involved here book the size to 0 */
48378933fa13SRandall Stewart 			tp1->book_size = 0;
48380c0982b8SRandall Stewart 			if (tp1->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) {
48390c0982b8SRandall Stewart 				foundeom = 1;
4840f8829a4aSRandall Stewart 			}
48410c0982b8SRandall Stewart 			do_wakeup_routine = 1;
48420c0982b8SRandall Stewart 			tp1->sent = SCTP_FORWARD_TSN_SKIP;
48430c0982b8SRandall Stewart 			TAILQ_REMOVE(&stcb->asoc.send_queue, tp1, sctp_next);
4844b7b84c0eSMichael Tuexen 			/*
4845b7b84c0eSMichael Tuexen 			 * on to the sent queue so we can wait for it to be
4846b7b84c0eSMichael Tuexen 			 * passed by.
4847b7b84c0eSMichael Tuexen 			 */
48480c0982b8SRandall Stewart 			TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, tp1,
48490c0982b8SRandall Stewart 			    sctp_next);
48500c0982b8SRandall Stewart 			stcb->asoc.send_queue_cnt--;
48510c0982b8SRandall Stewart 			stcb->asoc.sent_queue_cnt++;
48520c0982b8SRandall Stewart 		}
48530c0982b8SRandall Stewart 	}
48540c0982b8SRandall Stewart 	if (foundeom == 0) {
48550c0982b8SRandall Stewart 		/*
48560c0982b8SRandall Stewart 		 * Still no eom found. That means there is stuff left on the
48570c0982b8SRandall Stewart 		 * stream out queue.. yuck.
48580c0982b8SRandall Stewart 		 */
48590c0982b8SRandall Stewart 		SCTP_TCB_SEND_LOCK(stcb);
486049656eefSMichael Tuexen 		strq = &stcb->asoc.strmout[sid];
4861f3b05218SMichael Tuexen 		sp = TAILQ_FIRST(&strq->outqueue);
4862f3b05218SMichael Tuexen 		if (sp != NULL) {
48630c0982b8SRandall Stewart 			sp->discard_rest = 1;
48640c0982b8SRandall Stewart 			/*
4865f3b05218SMichael Tuexen 			 * We may need to put a chunk on the queue that
4866f3b05218SMichael Tuexen 			 * holds the TSN that would have been sent with the
4867f3b05218SMichael Tuexen 			 * LAST bit.
48680c0982b8SRandall Stewart 			 */
48690c0982b8SRandall Stewart 			if (chk == NULL) {
48700c0982b8SRandall Stewart 				/* Yep, we have to */
48710c0982b8SRandall Stewart 				sctp_alloc_a_chunk(stcb, chk);
48720c0982b8SRandall Stewart 				if (chk == NULL) {
48730c0982b8SRandall Stewart 					/*
4874f3b05218SMichael Tuexen 					 * we are hosed. All we can do is
4875f3b05218SMichael Tuexen 					 * nothing.. which will cause an
4876f3b05218SMichael Tuexen 					 * abort if the peer is paying
48770c0982b8SRandall Stewart 					 * attention.
48780c0982b8SRandall Stewart 					 */
48790c0982b8SRandall Stewart 					goto oh_well;
48800c0982b8SRandall Stewart 				}
48810c0982b8SRandall Stewart 				memset(chk, 0, sizeof(*chk));
488263d5b568SMichael Tuexen 				chk->rec.data.rcv_flags = 0;
48830c0982b8SRandall Stewart 				chk->sent = SCTP_FORWARD_TSN_SKIP;
48840c0982b8SRandall Stewart 				chk->asoc = &stcb->asoc;
488563d5b568SMichael Tuexen 				if (stcb->asoc.idata_supported == 0) {
488663d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
488749656eefSMichael Tuexen 						chk->rec.data.mid = 0;
488863d5b568SMichael Tuexen 					} else {
488949656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
489063d5b568SMichael Tuexen 					}
489163d5b568SMichael Tuexen 				} else {
489263d5b568SMichael Tuexen 					if (sp->sinfo_flags & SCTP_UNORDERED) {
489349656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_unordered;
489463d5b568SMichael Tuexen 					} else {
489549656eefSMichael Tuexen 						chk->rec.data.mid = strq->next_mid_ordered;
489663d5b568SMichael Tuexen 					}
489763d5b568SMichael Tuexen 				}
489849656eefSMichael Tuexen 				chk->rec.data.sid = sp->sid;
489949656eefSMichael Tuexen 				chk->rec.data.ppid = sp->ppid;
49000c0982b8SRandall Stewart 				chk->rec.data.context = sp->context;
49010c0982b8SRandall Stewart 				chk->flags = sp->act_flags;
49027fd5b436SMichael Tuexen 				chk->whoTo = NULL;
490349656eefSMichael Tuexen 				chk->rec.data.tsn = atomic_fetchadd_int(&stcb->asoc.sending_seq, 1);
49047fd5b436SMichael Tuexen 				strq->chunks_on_queues++;
49050c0982b8SRandall Stewart 				TAILQ_INSERT_TAIL(&stcb->asoc.sent_queue, chk, sctp_next);
49060c0982b8SRandall Stewart 				stcb->asoc.sent_queue_cnt++;
49078933fa13SRandall Stewart 				stcb->asoc.pr_sctp_cnt++;
49080c0982b8SRandall Stewart 			}
490963d5b568SMichael Tuexen 			chk->rec.data.rcv_flags |= SCTP_DATA_LAST_FRAG;
4910d1ea5fa9SMichael Tuexen 			if (sp->sinfo_flags & SCTP_UNORDERED) {
4911d1ea5fa9SMichael Tuexen 				chk->rec.data.rcv_flags |= SCTP_DATA_UNORDERED;
4912d1ea5fa9SMichael Tuexen 			}
491363d5b568SMichael Tuexen 			if (stcb->asoc.idata_supported == 0) {
491463d5b568SMichael Tuexen 				if ((sp->sinfo_flags & SCTP_UNORDERED) == 0) {
491563d5b568SMichael Tuexen 					strq->next_mid_ordered++;
491663d5b568SMichael Tuexen 				}
491763d5b568SMichael Tuexen 			} else {
491863d5b568SMichael Tuexen 				if (sp->sinfo_flags & SCTP_UNORDERED) {
491963d5b568SMichael Tuexen 					strq->next_mid_unordered++;
492063d5b568SMichael Tuexen 				} else {
492163d5b568SMichael Tuexen 					strq->next_mid_ordered++;
492263d5b568SMichael Tuexen 				}
492363d5b568SMichael Tuexen 			}
49240c0982b8SRandall Stewart 	oh_well:
49250c0982b8SRandall Stewart 			if (sp->data) {
49260c0982b8SRandall Stewart 				/*
4927f3b05218SMichael Tuexen 				 * Pull any data to free up the SB and allow
4928f3b05218SMichael Tuexen 				 * sender to "add more" while we will throw
4929f3b05218SMichael Tuexen 				 * away :-)
49300c0982b8SRandall Stewart 				 */
4931f3b05218SMichael Tuexen 				sctp_free_spbufspace(stcb, &stcb->asoc, sp);
49320c0982b8SRandall Stewart 				ret_sz += sp->length;
49330c0982b8SRandall Stewart 				do_wakeup_routine = 1;
49340c0982b8SRandall Stewart 				sp->some_taken = 1;
49350c0982b8SRandall Stewart 				sctp_m_freem(sp->data);
49360c0982b8SRandall Stewart 				sp->data = NULL;
49370c0982b8SRandall Stewart 				sp->tail_mbuf = NULL;
4938d07b2ac6SMichael Tuexen 				sp->length = 0;
49390c0982b8SRandall Stewart 			}
49400c0982b8SRandall Stewart 		}
49410c0982b8SRandall Stewart 		SCTP_TCB_SEND_UNLOCK(stcb);
49420c0982b8SRandall Stewart 	}
49430c0982b8SRandall Stewart 	if (do_wakeup_routine) {
49440c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
49458933fa13SRandall Stewart 		struct socket *so;
49468933fa13SRandall Stewart 
49470c0982b8SRandall Stewart 		so = SCTP_INP_SO(stcb->sctp_ep);
49480c0982b8SRandall Stewart 		if (!so_locked) {
49490c0982b8SRandall Stewart 			atomic_add_int(&stcb->asoc.refcnt, 1);
49500c0982b8SRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
49510c0982b8SRandall Stewart 			SCTP_SOCKET_LOCK(so, 1);
49520c0982b8SRandall Stewart 			SCTP_TCB_LOCK(stcb);
49530c0982b8SRandall Stewart 			atomic_subtract_int(&stcb->asoc.refcnt, 1);
49540c0982b8SRandall Stewart 			if (stcb->asoc.state & SCTP_STATE_CLOSED_SOCKET) {
49550c0982b8SRandall Stewart 				/* assoc was freed while we were unlocked */
49560c0982b8SRandall Stewart 				SCTP_SOCKET_UNLOCK(so, 1);
49570c0982b8SRandall Stewart 				return (ret_sz);
49580c0982b8SRandall Stewart 			}
49590c0982b8SRandall Stewart 		}
49600c0982b8SRandall Stewart #endif
49610c0982b8SRandall Stewart 		sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket);
49620c0982b8SRandall Stewart #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
49630c0982b8SRandall Stewart 		if (!so_locked) {
49640c0982b8SRandall Stewart 			SCTP_SOCKET_UNLOCK(so, 1);
49650c0982b8SRandall Stewart 		}
49660c0982b8SRandall Stewart #endif
4967f8829a4aSRandall Stewart 	}
4968f8829a4aSRandall Stewart 	return (ret_sz);
4969f8829a4aSRandall Stewart }
4970f8829a4aSRandall Stewart 
4971f8829a4aSRandall Stewart /*
4972f8829a4aSRandall Stewart  * checks to see if the given address, sa, is one that is currently known by
4973f8829a4aSRandall Stewart  * the kernel note: can't distinguish the same address on multiple interfaces
4974f8829a4aSRandall Stewart  * and doesn't handle multiple addresses with different zone/scope id's note:
4975f8829a4aSRandall Stewart  * ifa_ifwithaddr() compares the entire sockaddr struct
4976f8829a4aSRandall Stewart  */
497742551e99SRandall Stewart struct sctp_ifa *
497880fefe0aSRandall Stewart sctp_find_ifa_in_ep(struct sctp_inpcb *inp, struct sockaddr *addr,
497980fefe0aSRandall Stewart     int holds_lock)
4980f8829a4aSRandall Stewart {
498142551e99SRandall Stewart 	struct sctp_laddr *laddr;
4982f8829a4aSRandall Stewart 
4983ad81507eSRandall Stewart 	if (holds_lock == 0) {
498442551e99SRandall Stewart 		SCTP_INP_RLOCK(inp);
4985ad81507eSRandall Stewart 	}
49860053ed28SMichael Tuexen 
498742551e99SRandall Stewart 	LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
498842551e99SRandall Stewart 		if (laddr->ifa == NULL)
4989f8829a4aSRandall Stewart 			continue;
499042551e99SRandall Stewart 		if (addr->sa_family != laddr->ifa->address.sa.sa_family)
499142551e99SRandall Stewart 			continue;
4992e6194c2eSMichael Tuexen #ifdef INET
499342551e99SRandall Stewart 		if (addr->sa_family == AF_INET) {
499442551e99SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
499542551e99SRandall Stewart 			    laddr->ifa->address.sin.sin_addr.s_addr) {
499642551e99SRandall Stewart 				/* found him. */
4997ad81507eSRandall Stewart 				if (holds_lock == 0) {
499842551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
4999ad81507eSRandall Stewart 				}
500042551e99SRandall Stewart 				return (laddr->ifa);
500142551e99SRandall Stewart 				break;
500242551e99SRandall Stewart 			}
50035e2c2d87SRandall Stewart 		}
5004e6194c2eSMichael Tuexen #endif
50055e2c2d87SRandall Stewart #ifdef INET6
50065e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
5007c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
5008c54a18d2SRandall Stewart 			    &laddr->ifa->address.sin6)) {
500942551e99SRandall Stewart 				/* found him. */
5010ad81507eSRandall Stewart 				if (holds_lock == 0) {
501142551e99SRandall Stewart 					SCTP_INP_RUNLOCK(inp);
5012ad81507eSRandall Stewart 				}
501342551e99SRandall Stewart 				return (laddr->ifa);
501442551e99SRandall Stewart 				break;
501542551e99SRandall Stewart 			}
501642551e99SRandall Stewart 		}
50175e2c2d87SRandall Stewart #endif
501842551e99SRandall Stewart 	}
5019ad81507eSRandall Stewart 	if (holds_lock == 0) {
502042551e99SRandall Stewart 		SCTP_INP_RUNLOCK(inp);
5021ad81507eSRandall Stewart 	}
502242551e99SRandall Stewart 	return (NULL);
502342551e99SRandall Stewart }
5024f8829a4aSRandall Stewart 
50256a27c376SRandall Stewart uint32_t
5026b0471b4bSMichael Tuexen sctp_get_ifa_hash_val(struct sockaddr *addr)
5027b0471b4bSMichael Tuexen {
5028ea5eba11SMichael Tuexen 	switch (addr->sa_family) {
5029ea5eba11SMichael Tuexen #ifdef INET
5030ea5eba11SMichael Tuexen 	case AF_INET:
5031ea5eba11SMichael Tuexen 		{
50326a27c376SRandall Stewart 			struct sockaddr_in *sin;
50336a27c376SRandall Stewart 
50346a27c376SRandall Stewart 			sin = (struct sockaddr_in *)addr;
50356a27c376SRandall Stewart 			return (sin->sin_addr.s_addr ^ (sin->sin_addr.s_addr >> 16));
5036ea5eba11SMichael Tuexen 		}
5037ea5eba11SMichael Tuexen #endif
5038ea5eba11SMichael Tuexen #ifdef INET6
50392c2e3218SMichael Tuexen 	case AF_INET6:
5040ea5eba11SMichael Tuexen 		{
50416a27c376SRandall Stewart 			struct sockaddr_in6 *sin6;
50426a27c376SRandall Stewart 			uint32_t hash_of_addr;
50436a27c376SRandall Stewart 
50446a27c376SRandall Stewart 			sin6 = (struct sockaddr_in6 *)addr;
50456a27c376SRandall Stewart 			hash_of_addr = (sin6->sin6_addr.s6_addr32[0] +
50466a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[1] +
50476a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[2] +
50486a27c376SRandall Stewart 			    sin6->sin6_addr.s6_addr32[3]);
50496a27c376SRandall Stewart 			hash_of_addr = (hash_of_addr ^ (hash_of_addr >> 16));
50506a27c376SRandall Stewart 			return (hash_of_addr);
50516a27c376SRandall Stewart 		}
5052ea5eba11SMichael Tuexen #endif
5053ea5eba11SMichael Tuexen 	default:
5054ea5eba11SMichael Tuexen 		break;
5055ea5eba11SMichael Tuexen 	}
50566a27c376SRandall Stewart 	return (0);
50576a27c376SRandall Stewart }
50586a27c376SRandall Stewart 
505942551e99SRandall Stewart struct sctp_ifa *
506042551e99SRandall Stewart sctp_find_ifa_by_addr(struct sockaddr *addr, uint32_t vrf_id, int holds_lock)
506142551e99SRandall Stewart {
506242551e99SRandall Stewart 	struct sctp_ifa *sctp_ifap;
506342551e99SRandall Stewart 	struct sctp_vrf *vrf;
50646a27c376SRandall Stewart 	struct sctp_ifalist *hash_head;
50656a27c376SRandall Stewart 	uint32_t hash_of_addr;
506642551e99SRandall Stewart 
506742551e99SRandall Stewart 	if (holds_lock == 0)
5068c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RLOCK();
506942551e99SRandall Stewart 
5070bff64a4dSRandall Stewart 	vrf = sctp_find_vrf(vrf_id);
5071bff64a4dSRandall Stewart 	if (vrf == NULL) {
5072bff64a4dSRandall Stewart 		if (holds_lock == 0)
5073c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5074bff64a4dSRandall Stewart 		return (NULL);
5075bff64a4dSRandall Stewart 	}
50760053ed28SMichael Tuexen 
5077bff64a4dSRandall Stewart 	hash_of_addr = sctp_get_ifa_hash_val(addr);
5078bff64a4dSRandall Stewart 
507917205eccSRandall Stewart 	hash_head = &vrf->vrf_addr_hash[(hash_of_addr & vrf->vrf_addr_hashmark)];
5080bff64a4dSRandall Stewart 	if (hash_head == NULL) {
5081ad81507eSRandall Stewart 		SCTP_PRINTF("hash_of_addr:%x mask:%x table:%x - ",
5082c99efcf6SRandall Stewart 		    hash_of_addr, (uint32_t)vrf->vrf_addr_hashmark,
5083c99efcf6SRandall Stewart 		    (uint32_t)(hash_of_addr & vrf->vrf_addr_hashmark));
5084bff64a4dSRandall Stewart 		sctp_print_address(addr);
5085ad81507eSRandall Stewart 		SCTP_PRINTF("No such bucket for address\n");
5086bff64a4dSRandall Stewart 		if (holds_lock == 0)
5087c99efcf6SRandall Stewart 			SCTP_IPI_ADDR_RUNLOCK();
5088bff64a4dSRandall Stewart 
5089bff64a4dSRandall Stewart 		return (NULL);
5090bff64a4dSRandall Stewart 	}
50916a27c376SRandall Stewart 	LIST_FOREACH(sctp_ifap, hash_head, next_bucket) {
50926a27c376SRandall Stewart 		if (addr->sa_family != sctp_ifap->address.sa.sa_family)
50936a27c376SRandall Stewart 			continue;
5094e6194c2eSMichael Tuexen #ifdef INET
50956a27c376SRandall Stewart 		if (addr->sa_family == AF_INET) {
50966a27c376SRandall Stewart 			if (((struct sockaddr_in *)addr)->sin_addr.s_addr ==
50976a27c376SRandall Stewart 			    sctp_ifap->address.sin.sin_addr.s_addr) {
50986a27c376SRandall Stewart 				/* found him. */
509942551e99SRandall Stewart 				if (holds_lock == 0)
5100c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
510142551e99SRandall Stewart 				return (sctp_ifap);
51026a27c376SRandall Stewart 				break;
51036a27c376SRandall Stewart 			}
51045e2c2d87SRandall Stewart 		}
5105e6194c2eSMichael Tuexen #endif
51065e2c2d87SRandall Stewart #ifdef INET6
51075e2c2d87SRandall Stewart 		if (addr->sa_family == AF_INET6) {
5108c54a18d2SRandall Stewart 			if (SCTP6_ARE_ADDR_EQUAL((struct sockaddr_in6 *)addr,
5109c54a18d2SRandall Stewart 			    &sctp_ifap->address.sin6)) {
51106a27c376SRandall Stewart 				/* found him. */
51116a27c376SRandall Stewart 				if (holds_lock == 0)
5112c99efcf6SRandall Stewart 					SCTP_IPI_ADDR_RUNLOCK();
51136a27c376SRandall Stewart 				return (sctp_ifap);
51146a27c376SRandall Stewart 				break;
51156a27c376SRandall Stewart 			}
511642551e99SRandall Stewart 		}
51175e2c2d87SRandall Stewart #endif
511842551e99SRandall Stewart 	}
511942551e99SRandall Stewart 	if (holds_lock == 0)
5120c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
5121f8829a4aSRandall Stewart 	return (NULL);
5122f8829a4aSRandall Stewart }
5123f8829a4aSRandall Stewart 
5124f8829a4aSRandall Stewart static void
51254c9179adSRandall Stewart sctp_user_rcvd(struct sctp_tcb *stcb, uint32_t *freed_so_far, int hold_rlock,
5126f8829a4aSRandall Stewart     uint32_t rwnd_req)
5127f8829a4aSRandall Stewart {
5128f8829a4aSRandall Stewart 	/* User pulled some data, do we need a rwnd update? */
5129f8829a4aSRandall Stewart 	int r_unlocked = 0;
5130f8829a4aSRandall Stewart 	uint32_t dif, rwnd;
5131f8829a4aSRandall Stewart 	struct socket *so = NULL;
5132f8829a4aSRandall Stewart 
5133f8829a4aSRandall Stewart 	if (stcb == NULL)
5134f8829a4aSRandall Stewart 		return;
5135f8829a4aSRandall Stewart 
513650cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, 1);
5137f8829a4aSRandall Stewart 
5138839d21d6SMichael Tuexen 	if ((SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_ACK_SENT) ||
513961a21880SMichael Tuexen 	    (stcb->asoc.state & (SCTP_STATE_ABOUT_TO_BE_FREED | SCTP_STATE_SHUTDOWN_RECEIVED))) {
5140f8829a4aSRandall Stewart 		/* Pre-check If we are freeing no update */
5141f8829a4aSRandall Stewart 		goto no_lock;
5142f8829a4aSRandall Stewart 	}
5143f8829a4aSRandall Stewart 	SCTP_INP_INCR_REF(stcb->sctp_ep);
5144f8829a4aSRandall Stewart 	if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5145f8829a4aSRandall Stewart 	    (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5146f8829a4aSRandall Stewart 		goto out;
5147f8829a4aSRandall Stewart 	}
5148f8829a4aSRandall Stewart 	so = stcb->sctp_socket;
5149f8829a4aSRandall Stewart 	if (so == NULL) {
5150f8829a4aSRandall Stewart 		goto out;
5151f8829a4aSRandall Stewart 	}
5152f8829a4aSRandall Stewart 	atomic_add_int(&stcb->freed_by_sorcv_sincelast, *freed_so_far);
5153f8829a4aSRandall Stewart 	/* Have you have freed enough to look */
5154f8829a4aSRandall Stewart 	*freed_so_far = 0;
5155f8829a4aSRandall Stewart 	/* Yep, its worth a look and the lock overhead */
5156f8829a4aSRandall Stewart 
5157f8829a4aSRandall Stewart 	/* Figure out what the rwnd would be */
5158f8829a4aSRandall Stewart 	rwnd = sctp_calc_rwnd(stcb, &stcb->asoc);
5159f8829a4aSRandall Stewart 	if (rwnd >= stcb->asoc.my_last_reported_rwnd) {
5160f8829a4aSRandall Stewart 		dif = rwnd - stcb->asoc.my_last_reported_rwnd;
5161f8829a4aSRandall Stewart 	} else {
5162f8829a4aSRandall Stewart 		dif = 0;
5163f8829a4aSRandall Stewart 	}
5164f8829a4aSRandall Stewart 	if (dif >= rwnd_req) {
5165f8829a4aSRandall Stewart 		if (hold_rlock) {
5166f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(stcb->sctp_ep);
5167f8829a4aSRandall Stewart 			r_unlocked = 1;
5168f8829a4aSRandall Stewart 		}
5169f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5170f8829a4aSRandall Stewart 			/*
5171f8829a4aSRandall Stewart 			 * One last check before we allow the guy possibly
5172f8829a4aSRandall Stewart 			 * to get in. There is a race, where the guy has not
5173f8829a4aSRandall Stewart 			 * reached the gate. In that case
5174f8829a4aSRandall Stewart 			 */
5175f8829a4aSRandall Stewart 			goto out;
5176f8829a4aSRandall Stewart 		}
5177f8829a4aSRandall Stewart 		SCTP_TCB_LOCK(stcb);
5178f8829a4aSRandall Stewart 		if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5179f8829a4aSRandall Stewart 			/* No reports here */
5180f8829a4aSRandall Stewart 			SCTP_TCB_UNLOCK(stcb);
5181f8829a4aSRandall Stewart 			goto out;
5182f8829a4aSRandall Stewart 		}
5183f8829a4aSRandall Stewart 		SCTP_STAT_INCR(sctps_wu_sacks_sent);
5184689e6a5fSMichael Tuexen 		sctp_send_sack(stcb, SCTP_SO_LOCKED);
5185830d754dSRandall Stewart 
5186f8829a4aSRandall Stewart 		sctp_chunk_output(stcb->sctp_ep, stcb,
5187ceaad40aSRandall Stewart 		    SCTP_OUTPUT_FROM_USR_RCVD, SCTP_SO_LOCKED);
5188f8829a4aSRandall Stewart 		/* make sure no timer is running */
5189ba785902SMichael Tuexen 		sctp_timer_stop(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, NULL,
5190ba785902SMichael Tuexen 		    SCTP_FROM_SCTPUTIL + SCTP_LOC_6);
5191f8829a4aSRandall Stewart 		SCTP_TCB_UNLOCK(stcb);
5192f8829a4aSRandall Stewart 	} else {
5193f8829a4aSRandall Stewart 		/* Update how much we have pending */
5194f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = dif;
5195f8829a4aSRandall Stewart 	}
5196f8829a4aSRandall Stewart out:
5197f8829a4aSRandall Stewart 	if (so && r_unlocked && hold_rlock) {
5198f8829a4aSRandall Stewart 		SCTP_INP_READ_LOCK(stcb->sctp_ep);
5199f8829a4aSRandall Stewart 	}
52000053ed28SMichael Tuexen 
5201f8829a4aSRandall Stewart 	SCTP_INP_DECR_REF(stcb->sctp_ep);
5202f8829a4aSRandall Stewart no_lock:
520350cec919SRandall Stewart 	atomic_add_int(&stcb->asoc.refcnt, -1);
5204f8829a4aSRandall Stewart 	return;
5205f8829a4aSRandall Stewart }
5206f8829a4aSRandall Stewart 
5207f8829a4aSRandall Stewart int
5208f8829a4aSRandall Stewart sctp_sorecvmsg(struct socket *so,
5209f8829a4aSRandall Stewart     struct uio *uio,
5210f8829a4aSRandall Stewart     struct mbuf **mp,
5211f8829a4aSRandall Stewart     struct sockaddr *from,
5212f8829a4aSRandall Stewart     int fromlen,
5213f8829a4aSRandall Stewart     int *msg_flags,
5214f8829a4aSRandall Stewart     struct sctp_sndrcvinfo *sinfo,
5215f8829a4aSRandall Stewart     int filling_sinfo)
5216f8829a4aSRandall Stewart {
5217f8829a4aSRandall Stewart 	/*
5218f8829a4aSRandall Stewart 	 * MSG flags we will look at MSG_DONTWAIT - non-blocking IO.
5219f8829a4aSRandall Stewart 	 * MSG_PEEK - Look don't touch :-D (only valid with OUT mbuf copy
5220f8829a4aSRandall Stewart 	 * mp=NULL thus uio is the copy method to userland) MSG_WAITALL - ??
5221f8829a4aSRandall Stewart 	 * On the way out we may send out any combination of:
5222f8829a4aSRandall Stewart 	 * MSG_NOTIFICATION MSG_EOR
5223f8829a4aSRandall Stewart 	 *
5224f8829a4aSRandall Stewart 	 */
5225f8829a4aSRandall Stewart 	struct sctp_inpcb *inp = NULL;
522658e6eeefSMichael Tuexen 	ssize_t my_len = 0;
522758e6eeefSMichael Tuexen 	ssize_t cp_len = 0;
52280d3cf13dSMichael Tuexen 	int error = 0;
5229f8829a4aSRandall Stewart 	struct sctp_queued_to_read *control = NULL, *ctl = NULL, *nxt = NULL;
523094b0d969SMichael Tuexen 	struct mbuf *m = NULL;
5231f8829a4aSRandall Stewart 	struct sctp_tcb *stcb = NULL;
5232f8829a4aSRandall Stewart 	int wakeup_read_socket = 0;
5233f8829a4aSRandall Stewart 	int freecnt_applied = 0;
5234f8829a4aSRandall Stewart 	int out_flags = 0, in_flags = 0;
5235f8829a4aSRandall Stewart 	int block_allowed = 1;
52364c9179adSRandall Stewart 	uint32_t freed_so_far = 0;
523758e6eeefSMichael Tuexen 	ssize_t copied_so_far = 0;
523893164cf9SRandall Stewart 	int in_eeor_mode = 0;
5239f8829a4aSRandall Stewart 	int no_rcv_needed = 0;
5240f8829a4aSRandall Stewart 	uint32_t rwnd_req = 0;
5241f8829a4aSRandall Stewart 	int hold_sblock = 0;
5242f8829a4aSRandall Stewart 	int hold_rlock = 0;
52439a8e3088SMichael Tuexen 	ssize_t slen = 0;
52444c9179adSRandall Stewart 	uint32_t held_length = 0;
52457abab911SRobert Watson 	int sockbuf_lock = 0;
5246f8829a4aSRandall Stewart 
524717205eccSRandall Stewart 	if (uio == NULL) {
5248c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
524917205eccSRandall Stewart 		return (EINVAL);
525017205eccSRandall Stewart 	}
52510053ed28SMichael Tuexen 
5252f8829a4aSRandall Stewart 	if (msg_flags) {
5253f8829a4aSRandall Stewart 		in_flags = *msg_flags;
5254c105859eSRandall Stewart 		if (in_flags & MSG_PEEK)
5255c105859eSRandall Stewart 			SCTP_STAT_INCR(sctps_read_peeks);
5256f8829a4aSRandall Stewart 	} else {
5257f8829a4aSRandall Stewart 		in_flags = 0;
5258f8829a4aSRandall Stewart 	}
5259f8829a4aSRandall Stewart 	slen = uio->uio_resid;
526017205eccSRandall Stewart 
5261f8829a4aSRandall Stewart 	/* Pull in and set up our int flags */
5262f8829a4aSRandall Stewart 	if (in_flags & MSG_OOB) {
5263f8829a4aSRandall Stewart 		/* Out of band's NOT supported */
5264f8829a4aSRandall Stewart 		return (EOPNOTSUPP);
5265f8829a4aSRandall Stewart 	}
5266f8829a4aSRandall Stewart 	if ((in_flags & MSG_PEEK) && (mp != NULL)) {
5267c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
5268f8829a4aSRandall Stewart 		return (EINVAL);
5269f8829a4aSRandall Stewart 	}
5270f8829a4aSRandall Stewart 	if ((in_flags & (MSG_DONTWAIT
5271f8829a4aSRandall Stewart 	    | MSG_NBIO
5272f8829a4aSRandall Stewart 	    )) ||
527342551e99SRandall Stewart 	    SCTP_SO_IS_NBIO(so)) {
5274f8829a4aSRandall Stewart 		block_allowed = 0;
5275f8829a4aSRandall Stewart 	}
5276f8829a4aSRandall Stewart 	/* setup the endpoint */
5277f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
5278f8829a4aSRandall Stewart 	if (inp == NULL) {
5279c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EFAULT);
5280f8829a4aSRandall Stewart 		return (EFAULT);
5281f8829a4aSRandall Stewart 	}
528262c1ff9cSRandall Stewart 	rwnd_req = (SCTP_SB_LIMIT_RCV(so) >> SCTP_RWND_HIWAT_SHIFT);
5283f8829a4aSRandall Stewart 	/* Must be at least a MTU's worth */
5284f8829a4aSRandall Stewart 	if (rwnd_req < SCTP_MIN_RWND)
5285f8829a4aSRandall Stewart 		rwnd_req = SCTP_MIN_RWND;
5286f8829a4aSRandall Stewart 	in_eeor_mode = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXPLICIT_EOR);
5287b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5288f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTER,
52899a8e3088SMichael Tuexen 		    rwnd_req, in_eeor_mode, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
529080fefe0aSRandall Stewart 	}
5291b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
5292f8829a4aSRandall Stewart 		sctp_misc_ints(SCTP_SORECV_ENTERPL,
52939a8e3088SMichael Tuexen 		    rwnd_req, block_allowed, so->so_rcv.sb_cc, (uint32_t)uio->uio_resid);
529480fefe0aSRandall Stewart 	}
52950053ed28SMichael Tuexen 
52960053ed28SMichael Tuexen 
5297265de5bbSRobert Watson 	error = sblock(&so->so_rcv, (block_allowed ? SBL_WAIT : 0));
5298f8829a4aSRandall Stewart 	if (error) {
5299f8829a4aSRandall Stewart 		goto release_unlocked;
5300f8829a4aSRandall Stewart 	}
53018e1e6e5fSMateusz Guzik 	sockbuf_lock = 1;
5302f8829a4aSRandall Stewart restart:
53037abab911SRobert Watson 
5304f8829a4aSRandall Stewart 
5305f8829a4aSRandall Stewart restart_nosblocks:
5306f8829a4aSRandall Stewart 	if (hold_sblock == 0) {
5307f8829a4aSRandall Stewart 		SOCKBUF_LOCK(&so->so_rcv);
5308f8829a4aSRandall Stewart 		hold_sblock = 1;
5309f8829a4aSRandall Stewart 	}
5310f8829a4aSRandall Stewart 	if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) ||
5311f8829a4aSRandall Stewart 	    (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE)) {
5312f8829a4aSRandall Stewart 		goto out;
5313f8829a4aSRandall Stewart 	}
53144e88d37aSMichael Tuexen 	if ((so->so_rcv.sb_state & SBS_CANTRCVMORE) && (so->so_rcv.sb_cc == 0)) {
5315f8829a4aSRandall Stewart 		if (so->so_error) {
5316f8829a4aSRandall Stewart 			error = so->so_error;
531744b7479bSRandall Stewart 			if ((in_flags & MSG_PEEK) == 0)
531844b7479bSRandall Stewart 				so->so_error = 0;
53199f22f500SRandall Stewart 			goto out;
5320f8829a4aSRandall Stewart 		} else {
53214e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc == 0) {
53227924093fSRandall Stewart 				/* indicate EOF */
53237924093fSRandall Stewart 				error = 0;
5324f8829a4aSRandall Stewart 				goto out;
5325f8829a4aSRandall Stewart 			}
53269f22f500SRandall Stewart 		}
53279f22f500SRandall Stewart 	}
53289de217ceSMichael Tuexen 	if (so->so_rcv.sb_cc <= held_length) {
53299de217ceSMichael Tuexen 		if (so->so_error) {
53309de217ceSMichael Tuexen 			error = so->so_error;
53319de217ceSMichael Tuexen 			if ((in_flags & MSG_PEEK) == 0) {
53329de217ceSMichael Tuexen 				so->so_error = 0;
53339de217ceSMichael Tuexen 			}
53349de217ceSMichael Tuexen 			goto out;
53359de217ceSMichael Tuexen 		}
53364e88d37aSMichael Tuexen 		if ((so->so_rcv.sb_cc == 0) &&
5337f8829a4aSRandall Stewart 		    ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5338f8829a4aSRandall Stewart 		    (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL))) {
5339f8829a4aSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0) {
5340f8829a4aSRandall Stewart 				/*
5341f8829a4aSRandall Stewart 				 * For active open side clear flags for
5342f8829a4aSRandall Stewart 				 * re-use passive open is blocked by
5343f8829a4aSRandall Stewart 				 * connect.
5344f8829a4aSRandall Stewart 				 */
5345f8829a4aSRandall Stewart 				if (inp->sctp_flags & SCTP_PCB_FLAGS_WAS_ABORTED) {
5346b7b84c0eSMichael Tuexen 					/*
5347b7b84c0eSMichael Tuexen 					 * You were aborted, passive side
5348b7b84c0eSMichael Tuexen 					 * always hits here
5349b7b84c0eSMichael Tuexen 					 */
5350c4739e2fSRandall Stewart 					SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ECONNRESET);
5351f8829a4aSRandall Stewart 					error = ECONNRESET;
5352f8829a4aSRandall Stewart 				}
5353f8829a4aSRandall Stewart 				so->so_state &= ~(SS_ISCONNECTING |
5354f8829a4aSRandall Stewart 				    SS_ISDISCONNECTING |
5355f8829a4aSRandall Stewart 				    SS_ISCONFIRMING |
5356f8829a4aSRandall Stewart 				    SS_ISCONNECTED);
5357f8829a4aSRandall Stewart 				if (error == 0) {
5358f8829a4aSRandall Stewart 					if ((inp->sctp_flags & SCTP_PCB_FLAGS_WAS_CONNECTED) == 0) {
5359c4739e2fSRandall Stewart 						SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOTCONN);
5360f8829a4aSRandall Stewart 						error = ENOTCONN;
5361f8829a4aSRandall Stewart 					}
5362f8829a4aSRandall Stewart 				}
5363f8829a4aSRandall Stewart 				goto out;
5364f8829a4aSRandall Stewart 			}
5365f8829a4aSRandall Stewart 		}
53669de217ceSMichael Tuexen 		if (block_allowed) {
5367f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5368f8829a4aSRandall Stewart 			if (error) {
5369f8829a4aSRandall Stewart 				goto out;
5370f8829a4aSRandall Stewart 			}
5371f8829a4aSRandall Stewart 			held_length = 0;
5372f8829a4aSRandall Stewart 			goto restart_nosblocks;
537344b7479bSRandall Stewart 		} else {
5374c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EWOULDBLOCK);
5375f8829a4aSRandall Stewart 			error = EWOULDBLOCK;
5376f8829a4aSRandall Stewart 			goto out;
5377f8829a4aSRandall Stewart 		}
53789de217ceSMichael Tuexen 	}
5379d06c82f1SRandall Stewart 	if (hold_sblock == 1) {
5380d06c82f1SRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
5381d06c82f1SRandall Stewart 		hold_sblock = 0;
5382d06c82f1SRandall Stewart 	}
5383f8829a4aSRandall Stewart 	/* we possibly have data we can read */
53843c503c28SRandall Stewart 	/* sa_ignore FREED_MEMORY */
5385f8829a4aSRandall Stewart 	control = TAILQ_FIRST(&inp->read_queue);
5386f8829a4aSRandall Stewart 	if (control == NULL) {
5387f8829a4aSRandall Stewart 		/*
5388f8829a4aSRandall Stewart 		 * This could be happening since the appender did the
5389f8829a4aSRandall Stewart 		 * increment but as not yet did the tailq insert onto the
5390f8829a4aSRandall Stewart 		 * read_queue
5391f8829a4aSRandall Stewart 		 */
5392f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5393f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5394f8829a4aSRandall Stewart 		}
5395f8829a4aSRandall Stewart 		control = TAILQ_FIRST(&inp->read_queue);
53964e88d37aSMichael Tuexen 		if ((control == NULL) && (so->so_rcv.sb_cc != 0)) {
5397a5d547adSRandall Stewart #ifdef INVARIANTS
5398f8829a4aSRandall Stewart 			panic("Huh, its non zero and nothing on control?");
5399f8829a4aSRandall Stewart #endif
54004e88d37aSMichael Tuexen 			so->so_rcv.sb_cc = 0;
5401f8829a4aSRandall Stewart 		}
5402f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
5403f8829a4aSRandall Stewart 		hold_rlock = 0;
5404f8829a4aSRandall Stewart 		goto restart;
5405f8829a4aSRandall Stewart 	}
54060053ed28SMichael Tuexen 
5407f8829a4aSRandall Stewart 	if ((control->length == 0) &&
5408f8829a4aSRandall Stewart 	    (control->do_not_ref_stcb)) {
5409f8829a4aSRandall Stewart 		/*
5410f8829a4aSRandall Stewart 		 * Clean up code for freeing assoc that left behind a
5411f8829a4aSRandall Stewart 		 * pdapi.. maybe a peer in EEOR that just closed after
5412f8829a4aSRandall Stewart 		 * sending and never indicated a EOR.
5413f8829a4aSRandall Stewart 		 */
5414f8829a4aSRandall Stewart 		if (hold_rlock == 0) {
5415f8829a4aSRandall Stewart 			hold_rlock = 1;
5416f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5417f8829a4aSRandall Stewart 		}
5418f8829a4aSRandall Stewart 		control->held_length = 0;
5419f8829a4aSRandall Stewart 		if (control->data) {
5420f8829a4aSRandall Stewart 			/* Hmm there is data here .. fix */
54214c9179adSRandall Stewart 			struct mbuf *m_tmp;
5422f8829a4aSRandall Stewart 			int cnt = 0;
5423f8829a4aSRandall Stewart 
54244c9179adSRandall Stewart 			m_tmp = control->data;
54254c9179adSRandall Stewart 			while (m_tmp) {
54264c9179adSRandall Stewart 				cnt += SCTP_BUF_LEN(m_tmp);
54274c9179adSRandall Stewart 				if (SCTP_BUF_NEXT(m_tmp) == NULL) {
54284c9179adSRandall Stewart 					control->tail_mbuf = m_tmp;
5429f8829a4aSRandall Stewart 					control->end_added = 1;
5430f8829a4aSRandall Stewart 				}
54314c9179adSRandall Stewart 				m_tmp = SCTP_BUF_NEXT(m_tmp);
5432f8829a4aSRandall Stewart 			}
5433f8829a4aSRandall Stewart 			control->length = cnt;
5434f8829a4aSRandall Stewart 		} else {
5435f8829a4aSRandall Stewart 			/* remove it */
5436f8829a4aSRandall Stewart 			TAILQ_REMOVE(&inp->read_queue, control, next);
5437f8829a4aSRandall Stewart 			/* Add back any hiddend data */
5438f8829a4aSRandall Stewart 			sctp_free_remote_addr(control->whoFrom);
5439f8829a4aSRandall Stewart 			sctp_free_a_readq(stcb, control);
5440f8829a4aSRandall Stewart 		}
5441f8829a4aSRandall Stewart 		if (hold_rlock) {
5442f8829a4aSRandall Stewart 			hold_rlock = 0;
5443f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5444f8829a4aSRandall Stewart 		}
5445f8829a4aSRandall Stewart 		goto restart;
5446f8829a4aSRandall Stewart 	}
5447810ec536SMichael Tuexen 	if ((control->length == 0) &&
5448810ec536SMichael Tuexen 	    (control->end_added == 1)) {
5449b7b84c0eSMichael Tuexen 		/*
5450b7b84c0eSMichael Tuexen 		 * Do we also need to check for (control->pdapi_aborted ==
5451b7b84c0eSMichael Tuexen 		 * 1)?
5452b7b84c0eSMichael Tuexen 		 */
5453810ec536SMichael Tuexen 		if (hold_rlock == 0) {
5454810ec536SMichael Tuexen 			hold_rlock = 1;
5455810ec536SMichael Tuexen 			SCTP_INP_READ_LOCK(inp);
5456810ec536SMichael Tuexen 		}
5457810ec536SMichael Tuexen 		TAILQ_REMOVE(&inp->read_queue, control, next);
5458810ec536SMichael Tuexen 		if (control->data) {
5459810ec536SMichael Tuexen #ifdef INVARIANTS
5460810ec536SMichael Tuexen 			panic("control->data not null but control->length == 0");
5461810ec536SMichael Tuexen #else
5462810ec536SMichael Tuexen 			SCTP_PRINTF("Strange, data left in the control buffer. Cleaning up.\n");
5463810ec536SMichael Tuexen 			sctp_m_freem(control->data);
5464810ec536SMichael Tuexen 			control->data = NULL;
5465810ec536SMichael Tuexen #endif
5466810ec536SMichael Tuexen 		}
5467810ec536SMichael Tuexen 		if (control->aux_data) {
5468810ec536SMichael Tuexen 			sctp_m_free(control->aux_data);
5469810ec536SMichael Tuexen 			control->aux_data = NULL;
5470810ec536SMichael Tuexen 		}
547198d5fd97SMichael Tuexen #ifdef INVARIANTS
547244249214SRandall Stewart 		if (control->on_strm_q) {
547344249214SRandall Stewart 			panic("About to free ctl:%p so:%p and its in %d",
547444249214SRandall Stewart 			    control, so, control->on_strm_q);
547544249214SRandall Stewart 		}
547698d5fd97SMichael Tuexen #endif
5477810ec536SMichael Tuexen 		sctp_free_remote_addr(control->whoFrom);
5478810ec536SMichael Tuexen 		sctp_free_a_readq(stcb, control);
5479810ec536SMichael Tuexen 		if (hold_rlock) {
5480810ec536SMichael Tuexen 			hold_rlock = 0;
5481810ec536SMichael Tuexen 			SCTP_INP_READ_UNLOCK(inp);
5482810ec536SMichael Tuexen 		}
5483810ec536SMichael Tuexen 		goto restart;
5484810ec536SMichael Tuexen 	}
5485f8829a4aSRandall Stewart 	if (control->length == 0) {
5486f8829a4aSRandall Stewart 		if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE)) &&
5487f8829a4aSRandall Stewart 		    (filling_sinfo)) {
5488f8829a4aSRandall Stewart 			/* find a more suitable one then this */
5489f8829a4aSRandall Stewart 			ctl = TAILQ_NEXT(control, next);
5490f8829a4aSRandall Stewart 			while (ctl) {
54919a6142d8SRandall Stewart 				if ((ctl->stcb != control->stcb) && (ctl->length) &&
54929a6142d8SRandall Stewart 				    (ctl->some_taken ||
54936114cd96SRandall Stewart 				    (ctl->spec_flags & M_NOTIFICATION) ||
54949a6142d8SRandall Stewart 				    ((ctl->do_not_ref_stcb == 0) &&
54959a6142d8SRandall Stewart 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))
54969a6142d8SRandall Stewart 				    ) {
54979a6142d8SRandall Stewart 					/*-
54989a6142d8SRandall Stewart 					 * If we have a different TCB next, and there is data
54999a6142d8SRandall Stewart 					 * present. If we have already taken some (pdapi), OR we can
55009a6142d8SRandall Stewart 					 * ref the tcb and no delivery as started on this stream, we
550117205eccSRandall Stewart 					 * take it. Note we allow a notification on a different
550217205eccSRandall Stewart 					 * assoc to be delivered..
55039a6142d8SRandall Stewart 					 */
55049a6142d8SRandall Stewart 					control = ctl;
55059a6142d8SRandall Stewart 					goto found_one;
55069a6142d8SRandall Stewart 				} else if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS)) &&
55079a6142d8SRandall Stewart 					    (ctl->length) &&
55089a6142d8SRandall Stewart 					    ((ctl->some_taken) ||
55099a6142d8SRandall Stewart 					    ((ctl->do_not_ref_stcb == 0) &&
551017205eccSRandall Stewart 					    ((ctl->spec_flags & M_NOTIFICATION) == 0) &&
5511b5c16493SMichael Tuexen 				    (ctl->stcb->asoc.strmin[ctl->sinfo_stream].delivery_started == 0)))) {
55129a6142d8SRandall Stewart 					/*-
55139a6142d8SRandall Stewart 					 * If we have the same tcb, and there is data present, and we
55149a6142d8SRandall Stewart 					 * have the strm interleave feature present. Then if we have
55159a6142d8SRandall Stewart 					 * taken some (pdapi) or we can refer to tht tcb AND we have
55169a6142d8SRandall Stewart 					 * not started a delivery for this stream, we can take it.
551717205eccSRandall Stewart 					 * Note we do NOT allow a notificaiton on the same assoc to
551817205eccSRandall Stewart 					 * be delivered.
55199a6142d8SRandall Stewart 					 */
5520f8829a4aSRandall Stewart 					control = ctl;
5521f8829a4aSRandall Stewart 					goto found_one;
5522f8829a4aSRandall Stewart 				}
5523f8829a4aSRandall Stewart 				ctl = TAILQ_NEXT(ctl, next);
5524f8829a4aSRandall Stewart 			}
5525f8829a4aSRandall Stewart 		}
5526f8829a4aSRandall Stewart 		/*
5527f8829a4aSRandall Stewart 		 * if we reach here, not suitable replacement is available
55284e88d37aSMichael Tuexen 		 * <or> fragment interleave is NOT on. So stuff the sb_cc
5529f8829a4aSRandall Stewart 		 * into the our held count, and its time to sleep again.
5530f8829a4aSRandall Stewart 		 */
55314e88d37aSMichael Tuexen 		held_length = so->so_rcv.sb_cc;
55324e88d37aSMichael Tuexen 		control->held_length = so->so_rcv.sb_cc;
5533f8829a4aSRandall Stewart 		goto restart;
5534f8829a4aSRandall Stewart 	}
5535f8829a4aSRandall Stewart 	/* Clear the held length since there is something to read */
5536f8829a4aSRandall Stewart 	control->held_length = 0;
5537f8829a4aSRandall Stewart found_one:
5538f8829a4aSRandall Stewart 	/*
5539f8829a4aSRandall Stewart 	 * If we reach here, control has a some data for us to read off.
5540f8829a4aSRandall Stewart 	 * Note that stcb COULD be NULL.
5541f8829a4aSRandall Stewart 	 */
55429c5ca6f2SMichael Tuexen 	if (hold_rlock == 0) {
55439c5ca6f2SMichael Tuexen 		hold_rlock = 1;
55449c5ca6f2SMichael Tuexen 		SCTP_INP_READ_LOCK(inp);
5545f8829a4aSRandall Stewart 	}
55469c5ca6f2SMichael Tuexen 	control->some_taken++;
5547f8829a4aSRandall Stewart 	stcb = control->stcb;
5548f8829a4aSRandall Stewart 	if (stcb) {
55490696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) &&
55500696e120SRandall Stewart 		    (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED)) {
555150cec919SRandall Stewart 			if (freecnt_applied == 0)
5552f8829a4aSRandall Stewart 				stcb = NULL;
5553f8829a4aSRandall Stewart 		} else if (control->do_not_ref_stcb == 0) {
5554f8829a4aSRandall Stewart 			/* you can't free it on me please */
5555f8829a4aSRandall Stewart 			/*
5556f8829a4aSRandall Stewart 			 * The lock on the socket buffer protects us so the
5557f8829a4aSRandall Stewart 			 * free code will stop. But since we used the
5558f8829a4aSRandall Stewart 			 * socketbuf lock and the sender uses the tcb_lock
5559f8829a4aSRandall Stewart 			 * to increment, we need to use the atomic add to
5560f8829a4aSRandall Stewart 			 * the refcnt
5561f8829a4aSRandall Stewart 			 */
5562d55b0b1bSRandall Stewart 			if (freecnt_applied) {
5563d55b0b1bSRandall Stewart #ifdef INVARIANTS
5564207304d4SRandall Stewart 				panic("refcnt already incremented");
5565d55b0b1bSRandall Stewart #else
5566cd3fd531SMichael Tuexen 				SCTP_PRINTF("refcnt already incremented?\n");
5567d55b0b1bSRandall Stewart #endif
5568d55b0b1bSRandall Stewart 			} else {
556950cec919SRandall Stewart 				atomic_add_int(&stcb->asoc.refcnt, 1);
5570f8829a4aSRandall Stewart 				freecnt_applied = 1;
5571d55b0b1bSRandall Stewart 			}
5572f8829a4aSRandall Stewart 			/*
5573f8829a4aSRandall Stewart 			 * Setup to remember how much we have not yet told
5574f8829a4aSRandall Stewart 			 * the peer our rwnd has opened up. Note we grab the
5575f8829a4aSRandall Stewart 			 * value from the tcb from last time. Note too that
55760696e120SRandall Stewart 			 * sack sending clears this when a sack is sent,
5577f8829a4aSRandall Stewart 			 * which is fine. Once we hit the rwnd_req, we then
5578f8829a4aSRandall Stewart 			 * will go to the sctp_user_rcvd() that will not
5579f8829a4aSRandall Stewart 			 * lock until it KNOWs it MUST send a WUP-SACK.
5580f8829a4aSRandall Stewart 			 */
558158e6eeefSMichael Tuexen 			freed_so_far = (uint32_t)stcb->freed_by_sorcv_sincelast;
5582f8829a4aSRandall Stewart 			stcb->freed_by_sorcv_sincelast = 0;
5583f8829a4aSRandall Stewart 		}
5584f8829a4aSRandall Stewart 	}
55856114cd96SRandall Stewart 	if (stcb &&
55866114cd96SRandall Stewart 	    ((control->spec_flags & M_NOTIFICATION) == 0) &&
55876114cd96SRandall Stewart 	    control->do_not_ref_stcb == 0) {
5588d06c82f1SRandall Stewart 		stcb->asoc.strmin[control->sinfo_stream].delivery_started = 1;
5589d06c82f1SRandall Stewart 	}
55900053ed28SMichael Tuexen 
5591f8829a4aSRandall Stewart 	/* First lets get off the sinfo and sockaddr info */
55925f05199cSMichael Tuexen 	if ((sinfo != NULL) && (filling_sinfo != 0)) {
55935f05199cSMichael Tuexen 		sinfo->sinfo_stream = control->sinfo_stream;
559449656eefSMichael Tuexen 		sinfo->sinfo_ssn = (uint16_t)control->mid;
55955f05199cSMichael Tuexen 		sinfo->sinfo_flags = control->sinfo_flags;
55965f05199cSMichael Tuexen 		sinfo->sinfo_ppid = control->sinfo_ppid;
55975f05199cSMichael Tuexen 		sinfo->sinfo_context = control->sinfo_context;
55985f05199cSMichael Tuexen 		sinfo->sinfo_timetolive = control->sinfo_timetolive;
55995f05199cSMichael Tuexen 		sinfo->sinfo_tsn = control->sinfo_tsn;
56005f05199cSMichael Tuexen 		sinfo->sinfo_cumtsn = control->sinfo_cumtsn;
56015f05199cSMichael Tuexen 		sinfo->sinfo_assoc_id = control->sinfo_assoc_id;
5602f8829a4aSRandall Stewart 		nxt = TAILQ_NEXT(control, next);
5603e2e7c62eSMichael Tuexen 		if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
5604e2e7c62eSMichael Tuexen 		    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) {
5605f8829a4aSRandall Stewart 			struct sctp_extrcvinfo *s_extra;
5606f8829a4aSRandall Stewart 
5607f8829a4aSRandall Stewart 			s_extra = (struct sctp_extrcvinfo *)sinfo;
56089a6142d8SRandall Stewart 			if ((nxt) &&
56099a6142d8SRandall Stewart 			    (nxt->length)) {
5610b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NEXT_MSG_AVAIL;
5611f8829a4aSRandall Stewart 				if (nxt->sinfo_flags & SCTP_UNORDERED) {
5612b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_UNORDERED;
5613f8829a4aSRandall Stewart 				}
5614f42a358aSRandall Stewart 				if (nxt->spec_flags & M_NOTIFICATION) {
5615b70b526dSMichael Tuexen 					s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_IS_NOTIFICATION;
5616f42a358aSRandall Stewart 				}
5617b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = nxt->sinfo_assoc_id;
5618b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = nxt->length;
5619b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = nxt->sinfo_ppid;
5620b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = nxt->sinfo_stream;
5621f8829a4aSRandall Stewart 				if (nxt->tail_mbuf != NULL) {
5622139bc87fSRandall Stewart 					if (nxt->end_added) {
5623b70b526dSMichael Tuexen 						s_extra->serinfo_next_flags |= SCTP_NEXT_MSG_ISCOMPLETE;
5624f8829a4aSRandall Stewart 					}
5625f8829a4aSRandall Stewart 				}
5626f8829a4aSRandall Stewart 			} else {
5627f8829a4aSRandall Stewart 				/*
5628f8829a4aSRandall Stewart 				 * we explicitly 0 this, since the memcpy
5629f8829a4aSRandall Stewart 				 * got some other things beyond the older
5630f8829a4aSRandall Stewart 				 * sinfo_ that is on the control's structure
5631f8829a4aSRandall Stewart 				 * :-D
5632f8829a4aSRandall Stewart 				 */
56339a6142d8SRandall Stewart 				nxt = NULL;
5634b70b526dSMichael Tuexen 				s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
5635b70b526dSMichael Tuexen 				s_extra->serinfo_next_aid = 0;
5636b70b526dSMichael Tuexen 				s_extra->serinfo_next_length = 0;
5637b70b526dSMichael Tuexen 				s_extra->serinfo_next_ppid = 0;
5638b70b526dSMichael Tuexen 				s_extra->serinfo_next_stream = 0;
5639f8829a4aSRandall Stewart 			}
5640f8829a4aSRandall Stewart 		}
5641f8829a4aSRandall Stewart 		/*
5642f8829a4aSRandall Stewart 		 * update off the real current cum-ack, if we have an stcb.
5643f8829a4aSRandall Stewart 		 */
56440696e120SRandall Stewart 		if ((control->do_not_ref_stcb == 0) && stcb)
5645f8829a4aSRandall Stewart 			sinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn;
5646f8829a4aSRandall Stewart 		/*
5647f8829a4aSRandall Stewart 		 * mask off the high bits, we keep the actual chunk bits in
5648f8829a4aSRandall Stewart 		 * there.
5649f8829a4aSRandall Stewart 		 */
5650f8829a4aSRandall Stewart 		sinfo->sinfo_flags &= 0x00ff;
56515f26a41dSRandall Stewart 		if ((control->sinfo_flags >> 8) & SCTP_DATA_UNORDERED) {
56525f26a41dSRandall Stewart 			sinfo->sinfo_flags |= SCTP_UNORDERED;
56535f26a41dSRandall Stewart 		}
5654f8829a4aSRandall Stewart 	}
565518e198d3SRandall Stewart #ifdef SCTP_ASOCLOG_OF_TSNS
565618e198d3SRandall Stewart 	{
565718e198d3SRandall Stewart 		int index, newindex;
565818e198d3SRandall Stewart 		struct sctp_pcbtsn_rlog *entry;
565918e198d3SRandall Stewart 
566018e198d3SRandall Stewart 		do {
566118e198d3SRandall Stewart 			index = inp->readlog_index;
566218e198d3SRandall Stewart 			newindex = index + 1;
566318e198d3SRandall Stewart 			if (newindex >= SCTP_READ_LOG_SIZE) {
566418e198d3SRandall Stewart 				newindex = 0;
566518e198d3SRandall Stewart 			}
566618e198d3SRandall Stewart 		} while (atomic_cmpset_int(&inp->readlog_index, index, newindex) == 0);
566718e198d3SRandall Stewart 		entry = &inp->readlog[index];
566818e198d3SRandall Stewart 		entry->vtag = control->sinfo_assoc_id;
566918e198d3SRandall Stewart 		entry->strm = control->sinfo_stream;
567049656eefSMichael Tuexen 		entry->seq = (uint16_t)control->mid;
567118e198d3SRandall Stewart 		entry->sz = control->length;
567218e198d3SRandall Stewart 		entry->flgs = control->sinfo_flags;
567318e198d3SRandall Stewart 	}
567418e198d3SRandall Stewart #endif
5675d59107f7SMichael Tuexen 	if ((fromlen > 0) && (from != NULL)) {
5676d59107f7SMichael Tuexen 		union sctp_sockstore store;
5677d59107f7SMichael Tuexen 		size_t len;
5678d59107f7SMichael Tuexen 
5679b5b6e5c2SMichael Tuexen 		switch (control->whoFrom->ro._l_addr.sa.sa_family) {
5680b5b6e5c2SMichael Tuexen #ifdef INET6
5681b5b6e5c2SMichael Tuexen 		case AF_INET6:
5682d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in6);
5683d59107f7SMichael Tuexen 			store.sin6 = control->whoFrom->ro._l_addr.sin6;
5684d59107f7SMichael Tuexen 			store.sin6.sin6_port = control->port_from;
5685b5b6e5c2SMichael Tuexen 			break;
5686f8829a4aSRandall Stewart #endif
5687b5b6e5c2SMichael Tuexen #ifdef INET
5688b5b6e5c2SMichael Tuexen 		case AF_INET:
5689d59107f7SMichael Tuexen #ifdef INET6
5690d59107f7SMichael Tuexen 			if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
5691d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in6);
5692d59107f7SMichael Tuexen 				in6_sin_2_v4mapsin6(&control->whoFrom->ro._l_addr.sin,
5693d59107f7SMichael Tuexen 				    &store.sin6);
5694d59107f7SMichael Tuexen 				store.sin6.sin6_port = control->port_from;
5695d59107f7SMichael Tuexen 			} else {
5696d59107f7SMichael Tuexen 				len = sizeof(struct sockaddr_in);
5697d59107f7SMichael Tuexen 				store.sin = control->whoFrom->ro._l_addr.sin;
5698d59107f7SMichael Tuexen 				store.sin.sin_port = control->port_from;
5699d59107f7SMichael Tuexen 			}
5700d59107f7SMichael Tuexen #else
5701d59107f7SMichael Tuexen 			len = sizeof(struct sockaddr_in);
5702d59107f7SMichael Tuexen 			store.sin = control->whoFrom->ro._l_addr.sin;
5703d59107f7SMichael Tuexen 			store.sin.sin_port = control->port_from;
5704d59107f7SMichael Tuexen #endif
5705b5b6e5c2SMichael Tuexen 			break;
5706b5b6e5c2SMichael Tuexen #endif
5707b5b6e5c2SMichael Tuexen 		default:
5708d59107f7SMichael Tuexen 			len = 0;
5709b5b6e5c2SMichael Tuexen 			break;
5710b5b6e5c2SMichael Tuexen 		}
5711d59107f7SMichael Tuexen 		memcpy(from, &store, min((size_t)fromlen, len));
5712e0e00a4dSMichael Tuexen #ifdef INET6
5713f8829a4aSRandall Stewart 		{
5714b5b6e5c2SMichael Tuexen 			struct sockaddr_in6 lsa6, *from6;
5715f8829a4aSRandall Stewart 
5716b5b6e5c2SMichael Tuexen 			from6 = (struct sockaddr_in6 *)from;
5717b5b6e5c2SMichael Tuexen 			sctp_recover_scope_mac(from6, (&lsa6));
5718f8829a4aSRandall Stewart 		}
5719f8829a4aSRandall Stewart #endif
5720f8829a4aSRandall Stewart 	}
57219c5ca6f2SMichael Tuexen 	if (hold_rlock) {
57229c5ca6f2SMichael Tuexen 		SCTP_INP_READ_UNLOCK(inp);
57239c5ca6f2SMichael Tuexen 		hold_rlock = 0;
57249c5ca6f2SMichael Tuexen 	}
57259c5ca6f2SMichael Tuexen 	if (hold_sblock) {
57269c5ca6f2SMichael Tuexen 		SOCKBUF_UNLOCK(&so->so_rcv);
57279c5ca6f2SMichael Tuexen 		hold_sblock = 0;
57289c5ca6f2SMichael Tuexen 	}
5729f8829a4aSRandall Stewart 	/* now copy out what data we can */
5730f8829a4aSRandall Stewart 	if (mp == NULL) {
5731f8829a4aSRandall Stewart 		/* copy out each mbuf in the chain up to length */
5732f8829a4aSRandall Stewart get_more_data:
5733f8829a4aSRandall Stewart 		m = control->data;
5734f8829a4aSRandall Stewart 		while (m) {
5735f8829a4aSRandall Stewart 			/* Move out all we can */
57360d3cf13dSMichael Tuexen 			cp_len = uio->uio_resid;
57370d3cf13dSMichael Tuexen 			my_len = SCTP_BUF_LEN(m);
5738f8829a4aSRandall Stewart 			if (cp_len > my_len) {
5739f8829a4aSRandall Stewart 				/* not enough in this buf */
5740f8829a4aSRandall Stewart 				cp_len = my_len;
5741f8829a4aSRandall Stewart 			}
5742f8829a4aSRandall Stewart 			if (hold_rlock) {
5743f8829a4aSRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
5744f8829a4aSRandall Stewart 				hold_rlock = 0;
5745f8829a4aSRandall Stewart 			}
5746f8829a4aSRandall Stewart 			if (cp_len > 0)
574758e6eeefSMichael Tuexen 				error = uiomove(mtod(m, char *), (int)cp_len, uio);
5748f8829a4aSRandall Stewart 			/* re-read */
5749f8829a4aSRandall Stewart 			if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) {
5750f8829a4aSRandall Stewart 				goto release;
5751f8829a4aSRandall Stewart 			}
57520053ed28SMichael Tuexen 
57530696e120SRandall Stewart 			if ((control->do_not_ref_stcb == 0) && stcb &&
5754f8829a4aSRandall Stewart 			    stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
5755f8829a4aSRandall Stewart 				no_rcv_needed = 1;
5756f8829a4aSRandall Stewart 			}
5757f8829a4aSRandall Stewart 			if (error) {
5758f8829a4aSRandall Stewart 				/* error we are out of here */
5759f8829a4aSRandall Stewart 				goto release;
5760f8829a4aSRandall Stewart 			}
5761f8829a4aSRandall Stewart 			SCTP_INP_READ_LOCK(inp);
5762f8829a4aSRandall Stewart 			hold_rlock = 1;
5763139bc87fSRandall Stewart 			if (cp_len == SCTP_BUF_LEN(m)) {
5764139bc87fSRandall Stewart 				if ((SCTP_BUF_NEXT(m) == NULL) &&
5765139bc87fSRandall Stewart 				    (control->end_added)) {
5766f8829a4aSRandall Stewart 					out_flags |= MSG_EOR;
576752129fcdSRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
576852129fcdSRandall Stewart 					    (control->stcb != NULL) &&
576952129fcdSRandall Stewart 					    ((control->spec_flags & M_NOTIFICATION) == 0))
5770ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
5771f8829a4aSRandall Stewart 				}
5772139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5773f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5774f8829a4aSRandall Stewart 				}
5775f8829a4aSRandall Stewart 				/* we ate up the mbuf */
5776f8829a4aSRandall Stewart 				if (in_flags & MSG_PEEK) {
5777f8829a4aSRandall Stewart 					/* just looking */
5778139bc87fSRandall Stewart 					m = SCTP_BUF_NEXT(m);
5779f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5780f8829a4aSRandall Stewart 				} else {
5781f8829a4aSRandall Stewart 					/* dispose of the mbuf */
5782b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5783f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5784139bc87fSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
578580fefe0aSRandall Stewart 					}
5786f8829a4aSRandall Stewart 					sctp_sbfree(control, stcb, &so->so_rcv, m);
5787b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5788f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv,
5789f8829a4aSRandall Stewart 						    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
579080fefe0aSRandall Stewart 					}
5791f8829a4aSRandall Stewart 					copied_so_far += cp_len;
579258e6eeefSMichael Tuexen 					freed_so_far += (uint32_t)cp_len;
5793c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
579418e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5795f8829a4aSRandall Stewart 					control->data = sctp_m_free(m);
5796f8829a4aSRandall Stewart 					m = control->data;
5797b7b84c0eSMichael Tuexen 					/*
5798b7b84c0eSMichael Tuexen 					 * been through it all, must hold sb
5799b7b84c0eSMichael Tuexen 					 * lock ok to null tail
5800b7b84c0eSMichael Tuexen 					 */
5801f8829a4aSRandall Stewart 					if (control->data == NULL) {
5802a5d547adSRandall Stewart #ifdef INVARIANTS
5803f8829a4aSRandall Stewart 						if ((control->end_added == 0) ||
5804f8829a4aSRandall Stewart 						    (TAILQ_NEXT(control, next) == NULL)) {
5805f8829a4aSRandall Stewart 							/*
5806f8829a4aSRandall Stewart 							 * If the end is not
5807f8829a4aSRandall Stewart 							 * added, OR the
5808f8829a4aSRandall Stewart 							 * next is NOT null
5809f8829a4aSRandall Stewart 							 * we MUST have the
5810f8829a4aSRandall Stewart 							 * lock.
5811f8829a4aSRandall Stewart 							 */
5812f8829a4aSRandall Stewart 							if (mtx_owned(&inp->inp_rdata_mtx) == 0) {
5813f8829a4aSRandall Stewart 								panic("Hmm we don't own the lock?");
5814f8829a4aSRandall Stewart 							}
5815f8829a4aSRandall Stewart 						}
5816f8829a4aSRandall Stewart #endif
5817f8829a4aSRandall Stewart 						control->tail_mbuf = NULL;
5818a5d547adSRandall Stewart #ifdef INVARIANTS
5819f8829a4aSRandall Stewart 						if ((control->end_added) && ((out_flags & MSG_EOR) == 0)) {
5820f8829a4aSRandall Stewart 							panic("end_added, nothing left and no MSG_EOR");
5821f8829a4aSRandall Stewart 						}
5822f8829a4aSRandall Stewart #endif
5823f8829a4aSRandall Stewart 					}
5824f8829a4aSRandall Stewart 				}
5825f8829a4aSRandall Stewart 			} else {
5826f8829a4aSRandall Stewart 				/* Do we need to trim the mbuf? */
5827139bc87fSRandall Stewart 				if (control->spec_flags & M_NOTIFICATION) {
5828f8829a4aSRandall Stewart 					out_flags |= MSG_NOTIFICATION;
5829f8829a4aSRandall Stewart 				}
5830f8829a4aSRandall Stewart 				if ((in_flags & MSG_PEEK) == 0) {
5831139bc87fSRandall Stewart 					SCTP_BUF_RESV_UF(m, cp_len);
583258e6eeefSMichael Tuexen 					SCTP_BUF_LEN(m) -= (int)cp_len;
5833b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
583458e6eeefSMichael Tuexen 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, (int)cp_len);
583580fefe0aSRandall Stewart 					}
58364e88d37aSMichael Tuexen 					atomic_subtract_int(&so->so_rcv.sb_cc, cp_len);
58370696e120SRandall Stewart 					if ((control->do_not_ref_stcb == 0) &&
58380696e120SRandall Stewart 					    stcb) {
58394e88d37aSMichael Tuexen 						atomic_subtract_int(&stcb->asoc.sb_cc, cp_len);
5840f8829a4aSRandall Stewart 					}
5841f8829a4aSRandall Stewart 					copied_so_far += cp_len;
584258e6eeefSMichael Tuexen 					freed_so_far += (uint32_t)cp_len;
5843c4739e2fSRandall Stewart 					freed_so_far += MSIZE;
5844b3f1ea41SRandall Stewart 					if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
5845f8829a4aSRandall Stewart 						sctp_sblog(&so->so_rcv, control->do_not_ref_stcb ? NULL : stcb,
5846f8829a4aSRandall Stewart 						    SCTP_LOG_SBRESULT, 0);
584780fefe0aSRandall Stewart 					}
584818e198d3SRandall Stewart 					atomic_subtract_int(&control->length, cp_len);
5849f8829a4aSRandall Stewart 				} else {
5850f8829a4aSRandall Stewart 					copied_so_far += cp_len;
5851f8829a4aSRandall Stewart 				}
5852f8829a4aSRandall Stewart 			}
5853d61a0ae0SRandall Stewart 			if ((out_flags & MSG_EOR) || (uio->uio_resid == 0)) {
5854f8829a4aSRandall Stewart 				break;
5855f8829a4aSRandall Stewart 			}
5856f8829a4aSRandall Stewart 			if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5857f8829a4aSRandall Stewart 			    (control->do_not_ref_stcb == 0) &&
5858f8829a4aSRandall Stewart 			    (freed_so_far >= rwnd_req)) {
5859f8829a4aSRandall Stewart 				sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5860f8829a4aSRandall Stewart 			}
5861f8829a4aSRandall Stewart 		}		/* end while(m) */
5862f8829a4aSRandall Stewart 		/*
5863f8829a4aSRandall Stewart 		 * At this point we have looked at it all and we either have
5864f8829a4aSRandall Stewart 		 * a MSG_EOR/or read all the user wants... <OR>
5865f8829a4aSRandall Stewart 		 * control->length == 0.
5866f8829a4aSRandall Stewart 		 */
5867d61a0ae0SRandall Stewart 		if ((out_flags & MSG_EOR) && ((in_flags & MSG_PEEK) == 0)) {
5868f8829a4aSRandall Stewart 			/* we are done with this control */
5869f8829a4aSRandall Stewart 			if (control->length == 0) {
5870f8829a4aSRandall Stewart 				if (control->data) {
5871a5d547adSRandall Stewart #ifdef INVARIANTS
5872f8829a4aSRandall Stewart 					panic("control->data not null at read eor?");
5873f8829a4aSRandall Stewart #else
5874ad81507eSRandall Stewart 					SCTP_PRINTF("Strange, data left in the control buffer .. invarients would panic?\n");
5875f8829a4aSRandall Stewart 					sctp_m_freem(control->data);
5876f8829a4aSRandall Stewart 					control->data = NULL;
5877f8829a4aSRandall Stewart #endif
5878f8829a4aSRandall Stewart 				}
5879f8829a4aSRandall Stewart 		done_with_control:
5880f8829a4aSRandall Stewart 				if (hold_rlock == 0) {
5881f8829a4aSRandall Stewart 					SCTP_INP_READ_LOCK(inp);
5882f8829a4aSRandall Stewart 					hold_rlock = 1;
5883f8829a4aSRandall Stewart 				}
5884f8829a4aSRandall Stewart 				TAILQ_REMOVE(&inp->read_queue, control, next);
5885f8829a4aSRandall Stewart 				/* Add back any hiddend data */
5886f8829a4aSRandall Stewart 				if (control->held_length) {
5887f8829a4aSRandall Stewart 					held_length = 0;
5888f8829a4aSRandall Stewart 					control->held_length = 0;
5889f8829a4aSRandall Stewart 					wakeup_read_socket = 1;
5890f8829a4aSRandall Stewart 				}
589117205eccSRandall Stewart 				if (control->aux_data) {
589217205eccSRandall Stewart 					sctp_m_free(control->aux_data);
589317205eccSRandall Stewart 					control->aux_data = NULL;
589417205eccSRandall Stewart 				}
5895f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5896f8829a4aSRandall Stewart 				sctp_free_remote_addr(control->whoFrom);
5897f8829a4aSRandall Stewart 				control->data = NULL;
589898d5fd97SMichael Tuexen #ifdef INVARIANTS
589944249214SRandall Stewart 				if (control->on_strm_q) {
590044249214SRandall Stewart 					panic("About to free ctl:%p so:%p and its in %d",
590144249214SRandall Stewart 					    control, so, control->on_strm_q);
590244249214SRandall Stewart 				}
590398d5fd97SMichael Tuexen #endif
5904f8829a4aSRandall Stewart 				sctp_free_a_readq(stcb, control);
5905f8829a4aSRandall Stewart 				control = NULL;
59060696e120SRandall Stewart 				if ((freed_so_far >= rwnd_req) &&
59070696e120SRandall Stewart 				    (no_rcv_needed == 0))
5908f8829a4aSRandall Stewart 					sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5909f8829a4aSRandall Stewart 
5910f8829a4aSRandall Stewart 			} else {
5911f8829a4aSRandall Stewart 				/*
5912f8829a4aSRandall Stewart 				 * The user did not read all of this
5913f8829a4aSRandall Stewart 				 * message, turn off the returned MSG_EOR
5914f8829a4aSRandall Stewart 				 * since we are leaving more behind on the
5915f8829a4aSRandall Stewart 				 * control to read.
5916f8829a4aSRandall Stewart 				 */
5917a5d547adSRandall Stewart #ifdef INVARIANTS
59180696e120SRandall Stewart 				if (control->end_added &&
59190696e120SRandall Stewart 				    (control->data == NULL) &&
5920f8829a4aSRandall Stewart 				    (control->tail_mbuf == NULL)) {
5921f8829a4aSRandall Stewart 					panic("Gak, control->length is corrupt?");
5922f8829a4aSRandall Stewart 				}
5923f8829a4aSRandall Stewart #endif
5924f8829a4aSRandall Stewart 				no_rcv_needed = control->do_not_ref_stcb;
5925f8829a4aSRandall Stewart 				out_flags &= ~MSG_EOR;
5926f8829a4aSRandall Stewart 			}
5927f8829a4aSRandall Stewart 		}
5928f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
5929f8829a4aSRandall Stewart 			goto release;
5930f8829a4aSRandall Stewart 		}
5931f8829a4aSRandall Stewart 		if ((uio->uio_resid == 0) ||
593204aab884SMichael Tuexen 		    ((in_eeor_mode) &&
593304aab884SMichael Tuexen 		    (copied_so_far >= (uint32_t)max(so->so_rcv.sb_lowat, 1)))) {
5934f8829a4aSRandall Stewart 			goto release;
5935f8829a4aSRandall Stewart 		}
5936f8829a4aSRandall Stewart 		/*
5937f8829a4aSRandall Stewart 		 * If I hit here the receiver wants more and this message is
5938f8829a4aSRandall Stewart 		 * NOT done (pd-api). So two questions. Can we block? if not
5939f8829a4aSRandall Stewart 		 * we are done. Did the user NOT set MSG_WAITALL?
5940f8829a4aSRandall Stewart 		 */
5941f8829a4aSRandall Stewart 		if (block_allowed == 0) {
5942f8829a4aSRandall Stewart 			goto release;
5943f8829a4aSRandall Stewart 		}
5944f8829a4aSRandall Stewart 		/*
5945f8829a4aSRandall Stewart 		 * We need to wait for more data a few things: - We don't
5946f8829a4aSRandall Stewart 		 * sbunlock() so we don't get someone else reading. - We
5947f8829a4aSRandall Stewart 		 * must be sure to account for the case where what is added
5948f8829a4aSRandall Stewart 		 * is NOT to our control when we wakeup.
5949f8829a4aSRandall Stewart 		 */
5950f8829a4aSRandall Stewart 
5951f8829a4aSRandall Stewart 		/*
5952f8829a4aSRandall Stewart 		 * Do we need to tell the transport a rwnd update might be
5953f8829a4aSRandall Stewart 		 * needed before we go to sleep?
5954f8829a4aSRandall Stewart 		 */
5955f8829a4aSRandall Stewart 		if (((stcb) && (in_flags & MSG_PEEK) == 0) &&
5956f8829a4aSRandall Stewart 		    ((freed_so_far >= rwnd_req) &&
5957f8829a4aSRandall Stewart 		    (control->do_not_ref_stcb == 0) &&
5958f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))) {
5959f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
5960f8829a4aSRandall Stewart 		}
5961f8829a4aSRandall Stewart wait_some_more:
596244b7479bSRandall Stewart 		if (so->so_rcv.sb_state & SBS_CANTRCVMORE) {
5963f8829a4aSRandall Stewart 			goto release;
5964f8829a4aSRandall Stewart 		}
59650053ed28SMichael Tuexen 
5966f8829a4aSRandall Stewart 		if (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)
5967f8829a4aSRandall Stewart 			goto release;
5968f8829a4aSRandall Stewart 
5969f8829a4aSRandall Stewart 		if (hold_rlock == 1) {
5970f8829a4aSRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
5971f8829a4aSRandall Stewart 			hold_rlock = 0;
5972f8829a4aSRandall Stewart 		}
5973f8829a4aSRandall Stewart 		if (hold_sblock == 0) {
5974f8829a4aSRandall Stewart 			SOCKBUF_LOCK(&so->so_rcv);
5975f8829a4aSRandall Stewart 			hold_sblock = 1;
5976f8829a4aSRandall Stewart 		}
5977851b7298SRandall Stewart 		if ((copied_so_far) && (control->length == 0) &&
5978b5c16493SMichael Tuexen 		    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE))) {
5979851b7298SRandall Stewart 			goto release;
5980851b7298SRandall Stewart 		}
59814e88d37aSMichael Tuexen 		if (so->so_rcv.sb_cc <= control->held_length) {
5982f8829a4aSRandall Stewart 			error = sbwait(&so->so_rcv);
5983f8829a4aSRandall Stewart 			if (error) {
5984f8829a4aSRandall Stewart 				goto release;
5985f8829a4aSRandall Stewart 			}
5986f8829a4aSRandall Stewart 			control->held_length = 0;
5987f8829a4aSRandall Stewart 		}
5988f8829a4aSRandall Stewart 		if (hold_sblock) {
5989f8829a4aSRandall Stewart 			SOCKBUF_UNLOCK(&so->so_rcv);
5990f8829a4aSRandall Stewart 			hold_sblock = 0;
5991f8829a4aSRandall Stewart 		}
5992f8829a4aSRandall Stewart 		if (control->length == 0) {
5993f8829a4aSRandall Stewart 			/* still nothing here */
5994f8829a4aSRandall Stewart 			if (control->end_added == 1) {
5995f8829a4aSRandall Stewart 				/* he aborted, or is done i.e.did a shutdown */
5996f8829a4aSRandall Stewart 				out_flags |= MSG_EOR;
59979a6142d8SRandall Stewart 				if (control->pdapi_aborted) {
59986114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
5999ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
60009a6142d8SRandall Stewart 
600103b0b021SRandall Stewart 					out_flags |= MSG_TRUNC;
60029a6142d8SRandall Stewart 				} else {
60036114cd96SRandall Stewart 					if ((control->do_not_ref_stcb == 0) && ((control->spec_flags & M_NOTIFICATION) == 0))
6004ee7f9857SRandall Stewart 						control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
60059a6142d8SRandall Stewart 				}
6006f8829a4aSRandall Stewart 				goto done_with_control;
6007f8829a4aSRandall Stewart 			}
60084e88d37aSMichael Tuexen 			if (so->so_rcv.sb_cc > held_length) {
60094e88d37aSMichael Tuexen 				control->held_length = so->so_rcv.sb_cc;
6010f8829a4aSRandall Stewart 				held_length = 0;
6011f8829a4aSRandall Stewart 			}
6012f8829a4aSRandall Stewart 			goto wait_some_more;
6013f8829a4aSRandall Stewart 		} else if (control->data == NULL) {
601450cec919SRandall Stewart 			/*
601550cec919SRandall Stewart 			 * we must re-sync since data is probably being
601650cec919SRandall Stewart 			 * added
601750cec919SRandall Stewart 			 */
601850cec919SRandall Stewart 			SCTP_INP_READ_LOCK(inp);
601950cec919SRandall Stewart 			if ((control->length > 0) && (control->data == NULL)) {
6020b7b84c0eSMichael Tuexen 				/*
6021b7b84c0eSMichael Tuexen 				 * big trouble.. we have the lock and its
6022b7b84c0eSMichael Tuexen 				 * corrupt?
6023b7b84c0eSMichael Tuexen 				 */
60249c04b296SRandall Stewart #ifdef INVARIANTS
60259d18771fSRandall Stewart 				panic("Impossible data==NULL length !=0");
60269c04b296SRandall Stewart #endif
60279c04b296SRandall Stewart 				out_flags |= MSG_EOR;
60289c04b296SRandall Stewart 				out_flags |= MSG_TRUNC;
60299c04b296SRandall Stewart 				control->length = 0;
60309c04b296SRandall Stewart 				SCTP_INP_READ_UNLOCK(inp);
60319c04b296SRandall Stewart 				goto done_with_control;
6032f8829a4aSRandall Stewart 			}
603350cec919SRandall Stewart 			SCTP_INP_READ_UNLOCK(inp);
603450cec919SRandall Stewart 			/* We will fall around to get more data */
603550cec919SRandall Stewart 		}
6036f8829a4aSRandall Stewart 		goto get_more_data;
6037f8829a4aSRandall Stewart 	} else {
603817205eccSRandall Stewart 		/*-
603917205eccSRandall Stewart 		 * Give caller back the mbuf chain,
604017205eccSRandall Stewart 		 * store in uio_resid the length
6041f8829a4aSRandall Stewart 		 */
604217205eccSRandall Stewart 		wakeup_read_socket = 0;
6043f8829a4aSRandall Stewart 		if ((control->end_added == 0) ||
6044f8829a4aSRandall Stewart 		    (TAILQ_NEXT(control, next) == NULL)) {
6045f8829a4aSRandall Stewart 			/* Need to get rlock */
6046f8829a4aSRandall Stewart 			if (hold_rlock == 0) {
6047f8829a4aSRandall Stewart 				SCTP_INP_READ_LOCK(inp);
6048f8829a4aSRandall Stewart 				hold_rlock = 1;
6049f8829a4aSRandall Stewart 			}
6050f8829a4aSRandall Stewart 		}
6051139bc87fSRandall Stewart 		if (control->end_added) {
6052f8829a4aSRandall Stewart 			out_flags |= MSG_EOR;
605360990c0cSMichael Tuexen 			if ((control->do_not_ref_stcb == 0) &&
605460990c0cSMichael Tuexen 			    (control->stcb != NULL) &&
605560990c0cSMichael Tuexen 			    ((control->spec_flags & M_NOTIFICATION) == 0))
6056ee7f9857SRandall Stewart 				control->stcb->asoc.strmin[control->sinfo_stream].delivery_started = 0;
6057f8829a4aSRandall Stewart 		}
6058139bc87fSRandall Stewart 		if (control->spec_flags & M_NOTIFICATION) {
6059f8829a4aSRandall Stewart 			out_flags |= MSG_NOTIFICATION;
6060f8829a4aSRandall Stewart 		}
606117205eccSRandall Stewart 		uio->uio_resid = control->length;
6062f8829a4aSRandall Stewart 		*mp = control->data;
6063f8829a4aSRandall Stewart 		m = control->data;
6064f8829a4aSRandall Stewart 		while (m) {
6065b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
6066f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
6067139bc87fSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBFREE, SCTP_BUF_LEN(m));
606880fefe0aSRandall Stewart 			}
6069f8829a4aSRandall Stewart 			sctp_sbfree(control, stcb, &so->so_rcv, m);
607058e6eeefSMichael Tuexen 			freed_so_far += (uint32_t)SCTP_BUF_LEN(m);
6071c4739e2fSRandall Stewart 			freed_so_far += MSIZE;
6072b3f1ea41SRandall Stewart 			if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_SB_LOGGING_ENABLE) {
6073f8829a4aSRandall Stewart 				sctp_sblog(&so->so_rcv,
6074f8829a4aSRandall Stewart 				    control->do_not_ref_stcb ? NULL : stcb, SCTP_LOG_SBRESULT, 0);
607580fefe0aSRandall Stewart 			}
6076139bc87fSRandall Stewart 			m = SCTP_BUF_NEXT(m);
6077f8829a4aSRandall Stewart 		}
6078f8829a4aSRandall Stewart 		control->data = control->tail_mbuf = NULL;
6079f8829a4aSRandall Stewart 		control->length = 0;
6080f8829a4aSRandall Stewart 		if (out_flags & MSG_EOR) {
6081f8829a4aSRandall Stewart 			/* Done with this control */
6082f8829a4aSRandall Stewart 			goto done_with_control;
6083f8829a4aSRandall Stewart 		}
6084f8829a4aSRandall Stewart 	}
6085f8829a4aSRandall Stewart release:
6086f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6087f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6088f8829a4aSRandall Stewart 		hold_rlock = 0;
6089f8829a4aSRandall Stewart 	}
60907abab911SRobert Watson 	if (hold_sblock == 1) {
60917abab911SRobert Watson 		SOCKBUF_UNLOCK(&so->so_rcv);
60927abab911SRobert Watson 		hold_sblock = 0;
6093f8829a4aSRandall Stewart 	}
60940053ed28SMichael Tuexen 
6095f8829a4aSRandall Stewart 	sbunlock(&so->so_rcv);
60967abab911SRobert Watson 	sockbuf_lock = 0;
6097f8829a4aSRandall Stewart 
6098f8829a4aSRandall Stewart release_unlocked:
6099f8829a4aSRandall Stewart 	if (hold_sblock) {
6100f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6101f8829a4aSRandall Stewart 		hold_sblock = 0;
6102f8829a4aSRandall Stewart 	}
6103f8829a4aSRandall Stewart 	if ((stcb) && (in_flags & MSG_PEEK) == 0) {
6104f8829a4aSRandall Stewart 		if ((freed_so_far >= rwnd_req) &&
6105f8829a4aSRandall Stewart 		    (control && (control->do_not_ref_stcb == 0)) &&
6106f8829a4aSRandall Stewart 		    (no_rcv_needed == 0))
6107f8829a4aSRandall Stewart 			sctp_user_rcvd(stcb, &freed_so_far, hold_rlock, rwnd_req);
6108f8829a4aSRandall Stewart 	}
6109f8829a4aSRandall Stewart out:
61101b9f62a0SRandall Stewart 	if (msg_flags) {
61111b9f62a0SRandall Stewart 		*msg_flags = out_flags;
61121b9f62a0SRandall Stewart 	}
61139a6142d8SRandall Stewart 	if (((out_flags & MSG_EOR) == 0) &&
61149a6142d8SRandall Stewart 	    ((in_flags & MSG_PEEK) == 0) &&
61159a6142d8SRandall Stewart 	    (sinfo) &&
6116e2e7c62eSMichael Tuexen 	    (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO) ||
6117e2e7c62eSMichael Tuexen 	    sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO))) {
61189a6142d8SRandall Stewart 		struct sctp_extrcvinfo *s_extra;
61199a6142d8SRandall Stewart 
61209a6142d8SRandall Stewart 		s_extra = (struct sctp_extrcvinfo *)sinfo;
6121b70b526dSMichael Tuexen 		s_extra->serinfo_next_flags = SCTP_NO_NEXT_MSG;
61229a6142d8SRandall Stewart 	}
6123f8829a4aSRandall Stewart 	if (hold_rlock == 1) {
6124f8829a4aSRandall Stewart 		SCTP_INP_READ_UNLOCK(inp);
6125f8829a4aSRandall Stewart 	}
6126f8829a4aSRandall Stewart 	if (hold_sblock) {
6127f8829a4aSRandall Stewart 		SOCKBUF_UNLOCK(&so->so_rcv);
6128f8829a4aSRandall Stewart 	}
61297abab911SRobert Watson 	if (sockbuf_lock) {
61307abab911SRobert Watson 		sbunlock(&so->so_rcv);
61317abab911SRobert Watson 	}
61320053ed28SMichael Tuexen 
613350cec919SRandall Stewart 	if (freecnt_applied) {
6134f8829a4aSRandall Stewart 		/*
6135f8829a4aSRandall Stewart 		 * The lock on the socket buffer protects us so the free
6136f8829a4aSRandall Stewart 		 * code will stop. But since we used the socketbuf lock and
6137f8829a4aSRandall Stewart 		 * the sender uses the tcb_lock to increment, we need to use
6138f8829a4aSRandall Stewart 		 * the atomic add to the refcnt.
6139f8829a4aSRandall Stewart 		 */
614050cec919SRandall Stewart 		if (stcb == NULL) {
6141df6e0cc3SRandall Stewart #ifdef INVARIANTS
614250cec919SRandall Stewart 			panic("stcb for refcnt has gone NULL?");
6143df6e0cc3SRandall Stewart 			goto stage_left;
6144df6e0cc3SRandall Stewart #else
6145df6e0cc3SRandall Stewart 			goto stage_left;
6146df6e0cc3SRandall Stewart #endif
614750cec919SRandall Stewart 		}
6148f8829a4aSRandall Stewart 		/* Save the value back for next time */
6149f8829a4aSRandall Stewart 		stcb->freed_by_sorcv_sincelast = freed_so_far;
6150cf46caceSMichael Tuexen 		atomic_add_int(&stcb->asoc.refcnt, -1);
6151f8829a4aSRandall Stewart 	}
6152b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_RECV_RWND_LOGGING_ENABLE) {
6153f8829a4aSRandall Stewart 		if (stcb) {
6154f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6155f8829a4aSRandall Stewart 			    freed_so_far,
61569a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6157f8829a4aSRandall Stewart 			    stcb->asoc.my_rwnd,
61584e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6159f8829a4aSRandall Stewart 		} else {
6160f8829a4aSRandall Stewart 			sctp_misc_ints(SCTP_SORECV_DONE,
6161f8829a4aSRandall Stewart 			    freed_so_far,
61629a8e3088SMichael Tuexen 			    (uint32_t)((uio) ? (slen - uio->uio_resid) : slen),
6163f8829a4aSRandall Stewart 			    0,
61644e88d37aSMichael Tuexen 			    so->so_rcv.sb_cc);
6165f8829a4aSRandall Stewart 		}
616680fefe0aSRandall Stewart 	}
6167df6e0cc3SRandall Stewart stage_left:
6168f8829a4aSRandall Stewart 	if (wakeup_read_socket) {
6169f8829a4aSRandall Stewart 		sctp_sorwakeup(inp, so);
6170f8829a4aSRandall Stewart 	}
6171f8829a4aSRandall Stewart 	return (error);
6172f8829a4aSRandall Stewart }
6173f8829a4aSRandall Stewart 
6174f8829a4aSRandall Stewart 
6175f8829a4aSRandall Stewart #ifdef SCTP_MBUF_LOGGING
6176f8829a4aSRandall Stewart struct mbuf *
6177f8829a4aSRandall Stewart sctp_m_free(struct mbuf *m)
6178f8829a4aSRandall Stewart {
6179b3f1ea41SRandall Stewart 	if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_MBUF_LOGGING_ENABLE) {
6180f8829a4aSRandall Stewart 		sctp_log_mb(m, SCTP_MBUF_IFREE);
6181f8829a4aSRandall Stewart 	}
6182f8829a4aSRandall Stewart 	return (m_free(m));
6183f8829a4aSRandall Stewart }
6184f8829a4aSRandall Stewart 
6185f8829a4aSRandall Stewart void
6186f8829a4aSRandall Stewart sctp_m_freem(struct mbuf *mb)
6187f8829a4aSRandall Stewart {
6188f8829a4aSRandall Stewart 	while (mb != NULL)
6189f8829a4aSRandall Stewart 		mb = sctp_m_free(mb);
6190f8829a4aSRandall Stewart }
6191f8829a4aSRandall Stewart 
6192f8829a4aSRandall Stewart #endif
6193f8829a4aSRandall Stewart 
619442551e99SRandall Stewart int
619542551e99SRandall Stewart sctp_dynamic_set_primary(struct sockaddr *sa, uint32_t vrf_id)
619642551e99SRandall Stewart {
619742551e99SRandall Stewart 	/*
619842551e99SRandall Stewart 	 * Given a local address. For all associations that holds the
619942551e99SRandall Stewart 	 * address, request a peer-set-primary.
620042551e99SRandall Stewart 	 */
620142551e99SRandall Stewart 	struct sctp_ifa *ifa;
620242551e99SRandall Stewart 	struct sctp_laddr *wi;
620342551e99SRandall Stewart 
620442551e99SRandall Stewart 	ifa = sctp_find_ifa_by_addr(sa, vrf_id, 0);
620542551e99SRandall Stewart 	if (ifa == NULL) {
6206c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, EADDRNOTAVAIL);
620742551e99SRandall Stewart 		return (EADDRNOTAVAIL);
620842551e99SRandall Stewart 	}
620942551e99SRandall Stewart 	/*
621042551e99SRandall Stewart 	 * Now that we have the ifa we must awaken the iterator with this
621142551e99SRandall Stewart 	 * message.
621242551e99SRandall Stewart 	 */
6213b3f1ea41SRandall Stewart 	wi = SCTP_ZONE_GET(SCTP_BASE_INFO(ipi_zone_laddr), struct sctp_laddr);
621442551e99SRandall Stewart 	if (wi == NULL) {
6215c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(NULL, NULL, NULL, SCTP_FROM_SCTPUTIL, ENOMEM);
621642551e99SRandall Stewart 		return (ENOMEM);
621742551e99SRandall Stewart 	}
621842551e99SRandall Stewart 	/* Now incr the count and int wi structure */
621942551e99SRandall Stewart 	SCTP_INCR_LADDR_COUNT();
62205ba7f91fSMichael Tuexen 	memset(wi, 0, sizeof(*wi));
6221d61a0ae0SRandall Stewart 	(void)SCTP_GETTIME_TIMEVAL(&wi->start_time);
622242551e99SRandall Stewart 	wi->ifa = ifa;
622342551e99SRandall Stewart 	wi->action = SCTP_SET_PRIM_ADDR;
622442551e99SRandall Stewart 	atomic_add_int(&ifa->refcount, 1);
622542551e99SRandall Stewart 
622642551e99SRandall Stewart 	/* Now add it to the work queue */
6227f7517433SRandall Stewart 	SCTP_WQ_ADDR_LOCK();
622842551e99SRandall Stewart 	/*
622942551e99SRandall Stewart 	 * Should this really be a tailq? As it is we will process the
623042551e99SRandall Stewart 	 * newest first :-0
623142551e99SRandall Stewart 	 */
6232b3f1ea41SRandall Stewart 	LIST_INSERT_HEAD(&SCTP_BASE_INFO(addr_wq), wi, sctp_nxt_addr);
623342551e99SRandall Stewart 	sctp_timer_start(SCTP_TIMER_TYPE_ADDR_WQ,
623442551e99SRandall Stewart 	    (struct sctp_inpcb *)NULL,
623542551e99SRandall Stewart 	    (struct sctp_tcb *)NULL,
623642551e99SRandall Stewart 	    (struct sctp_nets *)NULL);
62372c62ba73SMichael Tuexen 	SCTP_WQ_ADDR_UNLOCK();
623842551e99SRandall Stewart 	return (0);
623942551e99SRandall Stewart }
624042551e99SRandall Stewart 
624142551e99SRandall Stewart 
6242f8829a4aSRandall Stewart int
624317205eccSRandall Stewart sctp_soreceive(struct socket *so,
624417205eccSRandall Stewart     struct sockaddr **psa,
624517205eccSRandall Stewart     struct uio *uio,
624617205eccSRandall Stewart     struct mbuf **mp0,
624717205eccSRandall Stewart     struct mbuf **controlp,
624817205eccSRandall Stewart     int *flagsp)
6249f8829a4aSRandall Stewart {
6250f8829a4aSRandall Stewart 	int error, fromlen;
6251f8829a4aSRandall Stewart 	uint8_t sockbuf[256];
6252f8829a4aSRandall Stewart 	struct sockaddr *from;
6253f8829a4aSRandall Stewart 	struct sctp_extrcvinfo sinfo;
6254f8829a4aSRandall Stewart 	int filling_sinfo = 1;
625546bf534cSMichael Tuexen 	int flags;
6256f8829a4aSRandall Stewart 	struct sctp_inpcb *inp;
6257f8829a4aSRandall Stewart 
6258f8829a4aSRandall Stewart 	inp = (struct sctp_inpcb *)so->so_pcb;
6259f8829a4aSRandall Stewart 	/* pickup the assoc we are reading from */
6260f8829a4aSRandall Stewart 	if (inp == NULL) {
6261c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6262f8829a4aSRandall Stewart 		return (EINVAL);
6263f8829a4aSRandall Stewart 	}
6264e2e7c62eSMichael Tuexen 	if ((sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT) &&
6265e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVRCVINFO) &&
6266e2e7c62eSMichael Tuexen 	    sctp_is_feature_off(inp, SCTP_PCB_FLAGS_RECVNXTINFO)) ||
6267f8829a4aSRandall Stewart 	    (controlp == NULL)) {
6268f8829a4aSRandall Stewart 		/* user does not want the sndrcv ctl */
6269f8829a4aSRandall Stewart 		filling_sinfo = 0;
6270f8829a4aSRandall Stewart 	}
6271f8829a4aSRandall Stewart 	if (psa) {
6272f8829a4aSRandall Stewart 		from = (struct sockaddr *)sockbuf;
6273f8829a4aSRandall Stewart 		fromlen = sizeof(sockbuf);
6274f8829a4aSRandall Stewart 		from->sa_len = 0;
6275f8829a4aSRandall Stewart 	} else {
6276f8829a4aSRandall Stewart 		from = NULL;
6277f8829a4aSRandall Stewart 		fromlen = 0;
6278f8829a4aSRandall Stewart 	}
6279f8829a4aSRandall Stewart 
6280e432298aSXin LI 	if (filling_sinfo) {
6281e432298aSXin LI 		memset(&sinfo, 0, sizeof(struct sctp_extrcvinfo));
6282e432298aSXin LI 	}
628346bf534cSMichael Tuexen 	if (flagsp != NULL) {
628446bf534cSMichael Tuexen 		flags = *flagsp;
628546bf534cSMichael Tuexen 	} else {
628646bf534cSMichael Tuexen 		flags = 0;
628746bf534cSMichael Tuexen 	}
628846bf534cSMichael Tuexen 	error = sctp_sorecvmsg(so, uio, mp0, from, fromlen, &flags,
6289f8829a4aSRandall Stewart 	    (struct sctp_sndrcvinfo *)&sinfo, filling_sinfo);
629046bf534cSMichael Tuexen 	if (flagsp != NULL) {
629146bf534cSMichael Tuexen 		*flagsp = flags;
629246bf534cSMichael Tuexen 	}
6293e432298aSXin LI 	if (controlp != NULL) {
6294f8829a4aSRandall Stewart 		/* copy back the sinfo in a CMSG format */
629546bf534cSMichael Tuexen 		if (filling_sinfo && ((flags & MSG_NOTIFICATION) == 0)) {
6296f8829a4aSRandall Stewart 			*controlp = sctp_build_ctl_nchunk(inp,
6297f8829a4aSRandall Stewart 			    (struct sctp_sndrcvinfo *)&sinfo);
629846bf534cSMichael Tuexen 		} else {
6299f8829a4aSRandall Stewart 			*controlp = NULL;
6300f8829a4aSRandall Stewart 		}
630146bf534cSMichael Tuexen 	}
6302f8829a4aSRandall Stewart 	if (psa) {
6303f8829a4aSRandall Stewart 		/* copy back the address info */
6304f8829a4aSRandall Stewart 		if (from && from->sa_len) {
6305f8829a4aSRandall Stewart 			*psa = sodupsockaddr(from, M_NOWAIT);
6306f8829a4aSRandall Stewart 		} else {
6307f8829a4aSRandall Stewart 			*psa = NULL;
6308f8829a4aSRandall Stewart 		}
6309f8829a4aSRandall Stewart 	}
6310f8829a4aSRandall Stewart 	return (error);
6311f8829a4aSRandall Stewart }
631217205eccSRandall Stewart 
631317205eccSRandall Stewart 
631417205eccSRandall Stewart 
631517205eccSRandall Stewart 
631617205eccSRandall Stewart 
631717205eccSRandall Stewart int
6318d61a0ae0SRandall Stewart sctp_connectx_helper_add(struct sctp_tcb *stcb, struct sockaddr *addr,
6319d61a0ae0SRandall Stewart     int totaddr, int *error)
632017205eccSRandall Stewart {
632117205eccSRandall Stewart 	int added = 0;
632217205eccSRandall Stewart 	int i;
632317205eccSRandall Stewart 	struct sctp_inpcb *inp;
632417205eccSRandall Stewart 	struct sockaddr *sa;
632517205eccSRandall Stewart 	size_t incr = 0;
632692776dfdSMichael Tuexen #ifdef INET
632792776dfdSMichael Tuexen 	struct sockaddr_in *sin;
632892776dfdSMichael Tuexen #endif
632992776dfdSMichael Tuexen #ifdef INET6
633092776dfdSMichael Tuexen 	struct sockaddr_in6 *sin6;
633192776dfdSMichael Tuexen #endif
633292776dfdSMichael Tuexen 
633317205eccSRandall Stewart 	sa = addr;
633417205eccSRandall Stewart 	inp = stcb->sctp_ep;
633517205eccSRandall Stewart 	*error = 0;
633617205eccSRandall Stewart 	for (i = 0; i < totaddr; i++) {
6337ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6338ea5eba11SMichael Tuexen #ifdef INET
6339ea5eba11SMichael Tuexen 		case AF_INET:
634017205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in);
634192776dfdSMichael Tuexen 			sin = (struct sockaddr_in *)sa;
634292776dfdSMichael Tuexen 			if ((sin->sin_addr.s_addr == INADDR_ANY) ||
634392776dfdSMichael Tuexen 			    (sin->sin_addr.s_addr == INADDR_BROADCAST) ||
634492776dfdSMichael Tuexen 			    IN_MULTICAST(ntohl(sin->sin_addr.s_addr))) {
634592776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6346ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6347ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_7);
634892776dfdSMichael Tuexen 				*error = EINVAL;
634992776dfdSMichael Tuexen 				goto out_now;
635092776dfdSMichael Tuexen 			}
63517154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
63527154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
63537154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
635417205eccSRandall Stewart 				/* assoc gone no un-lock */
6355c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6356ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6357ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_8);
635817205eccSRandall Stewart 				*error = ENOBUFS;
635917205eccSRandall Stewart 				goto out_now;
636017205eccSRandall Stewart 			}
636117205eccSRandall Stewart 			added++;
6362ea5eba11SMichael Tuexen 			break;
6363ea5eba11SMichael Tuexen #endif
6364ea5eba11SMichael Tuexen #ifdef INET6
6365ea5eba11SMichael Tuexen 		case AF_INET6:
636617205eccSRandall Stewart 			incr = sizeof(struct sockaddr_in6);
636792776dfdSMichael Tuexen 			sin6 = (struct sockaddr_in6 *)sa;
636892776dfdSMichael Tuexen 			if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr) ||
636992776dfdSMichael Tuexen 			    IN6_IS_ADDR_MULTICAST(&sin6->sin6_addr)) {
637092776dfdSMichael Tuexen 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6371ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6372ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_9);
637392776dfdSMichael Tuexen 				*error = EINVAL;
637492776dfdSMichael Tuexen 				goto out_now;
637592776dfdSMichael Tuexen 			}
63767154bf4aSMichael Tuexen 			if (sctp_add_remote_addr(stcb, sa, NULL, stcb->asoc.port,
63777154bf4aSMichael Tuexen 			    SCTP_DONOT_SETSCOPE,
63787154bf4aSMichael Tuexen 			    SCTP_ADDR_IS_CONFIRMED)) {
637917205eccSRandall Stewart 				/* assoc gone no un-lock */
6380c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(NULL, stcb, NULL, SCTP_FROM_SCTPUTIL, ENOBUFS);
6381ba785902SMichael Tuexen 				(void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC,
6382ba785902SMichael Tuexen 				    SCTP_FROM_SCTPUTIL + SCTP_LOC_10);
638317205eccSRandall Stewart 				*error = ENOBUFS;
638417205eccSRandall Stewart 				goto out_now;
638517205eccSRandall Stewart 			}
638617205eccSRandall Stewart 			added++;
6387ea5eba11SMichael Tuexen 			break;
6388ea5eba11SMichael Tuexen #endif
6389ea5eba11SMichael Tuexen 		default:
6390ea5eba11SMichael Tuexen 			break;
639117205eccSRandall Stewart 		}
639217205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
639317205eccSRandall Stewart 	}
639417205eccSRandall Stewart out_now:
639517205eccSRandall Stewart 	return (added);
639617205eccSRandall Stewart }
639717205eccSRandall Stewart 
6398fc26bf71SMichael Tuexen int
6399d61a0ae0SRandall Stewart sctp_connectx_helper_find(struct sctp_inpcb *inp, struct sockaddr *addr,
6400fc26bf71SMichael Tuexen     unsigned int totaddr,
6401fc26bf71SMichael Tuexen     unsigned int *num_v4, unsigned int *num_v6,
6402fc26bf71SMichael Tuexen     unsigned int limit)
640317205eccSRandall Stewart {
640417205eccSRandall Stewart 	struct sockaddr *sa;
6405fc26bf71SMichael Tuexen 	struct sctp_tcb *stcb;
64069a8e3088SMichael Tuexen 	unsigned int incr, at, i;
640717205eccSRandall Stewart 
6408e1949767SMichael Tuexen 	at = 0;
640917205eccSRandall Stewart 	sa = addr;
6410fc26bf71SMichael Tuexen 	*num_v6 = *num_v4 = 0;
641117205eccSRandall Stewart 	/* account and validate addresses */
6412fc26bf71SMichael Tuexen 	if (totaddr == 0) {
6413fc26bf71SMichael Tuexen 		return (EINVAL);
6414fc26bf71SMichael Tuexen 	}
6415fc26bf71SMichael Tuexen 	for (i = 0; i < totaddr; i++) {
6416fc26bf71SMichael Tuexen 		if (at + sizeof(struct sockaddr) > limit) {
6417fc26bf71SMichael Tuexen 			return (EINVAL);
6418fc26bf71SMichael Tuexen 		}
6419ea5eba11SMichael Tuexen 		switch (sa->sa_family) {
6420ea5eba11SMichael Tuexen #ifdef INET
6421ea5eba11SMichael Tuexen 		case AF_INET:
6422e1949767SMichael Tuexen 			incr = (unsigned int)sizeof(struct sockaddr_in);
6423d61a0ae0SRandall Stewart 			if (sa->sa_len != incr) {
6424fc26bf71SMichael Tuexen 				return (EINVAL);
6425d61a0ae0SRandall Stewart 			}
64269a8e3088SMichael Tuexen 			(*num_v4) += 1;
6427ea5eba11SMichael Tuexen 			break;
6428ea5eba11SMichael Tuexen #endif
6429ea5eba11SMichael Tuexen #ifdef INET6
6430ea5eba11SMichael Tuexen 		case AF_INET6:
6431ea5eba11SMichael Tuexen 			{
643217205eccSRandall Stewart 				struct sockaddr_in6 *sin6;
643317205eccSRandall Stewart 
643417205eccSRandall Stewart 				sin6 = (struct sockaddr_in6 *)sa;
643517205eccSRandall Stewart 				if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
643617205eccSRandall Stewart 					/* Must be non-mapped for connectx */
6437fc26bf71SMichael Tuexen 					return (EINVAL);
643817205eccSRandall Stewart 				}
6439e1949767SMichael Tuexen 				incr = (unsigned int)sizeof(struct sockaddr_in6);
6440d61a0ae0SRandall Stewart 				if (sa->sa_len != incr) {
6441fc26bf71SMichael Tuexen 					return (EINVAL);
6442d61a0ae0SRandall Stewart 				}
64439a8e3088SMichael Tuexen 				(*num_v6) += 1;
6444ea5eba11SMichael Tuexen 				break;
6445ea5eba11SMichael Tuexen 			}
6446ea5eba11SMichael Tuexen #endif
6447ea5eba11SMichael Tuexen 		default:
6448fc26bf71SMichael Tuexen 			return (EINVAL);
644917205eccSRandall Stewart 		}
6450fc26bf71SMichael Tuexen 		if ((at + incr) > limit) {
6451fc26bf71SMichael Tuexen 			return (EINVAL);
6452ea5eba11SMichael Tuexen 		}
6453d61a0ae0SRandall Stewart 		SCTP_INP_INCR_REF(inp);
645417205eccSRandall Stewart 		stcb = sctp_findassociation_ep_addr(&inp, sa, NULL, NULL, NULL);
645517205eccSRandall Stewart 		if (stcb != NULL) {
6456fc26bf71SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
6457fc26bf71SMichael Tuexen 			return (EALREADY);
6458d61a0ae0SRandall Stewart 		} else {
6459d61a0ae0SRandall Stewart 			SCTP_INP_DECR_REF(inp);
646017205eccSRandall Stewart 		}
6461fc26bf71SMichael Tuexen 		at += incr;
646217205eccSRandall Stewart 		sa = (struct sockaddr *)((caddr_t)sa + incr);
646317205eccSRandall Stewart 	}
6464fc26bf71SMichael Tuexen 	return (0);
646517205eccSRandall Stewart }
646635918f85SRandall Stewart 
646735918f85SRandall Stewart /*
646835918f85SRandall Stewart  * sctp_bindx(ADD) for one address.
646935918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
647035918f85SRandall Stewart  */
647135918f85SRandall Stewart void
647235918f85SRandall Stewart sctp_bindx_add_address(struct socket *so, struct sctp_inpcb *inp,
647335918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
647435918f85SRandall Stewart     uint32_t vrf_id, int *error, void *p)
647535918f85SRandall Stewart {
647635918f85SRandall Stewart 	struct sockaddr *addr_touse;
6477d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
647835918f85SRandall Stewart 	struct sockaddr_in sin;
64795e2c2d87SRandall Stewart #endif
64805e2c2d87SRandall Stewart 
648135918f85SRandall Stewart 	/* see if we're bound all already! */
648235918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6483c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
648435918f85SRandall Stewart 		*error = EINVAL;
648535918f85SRandall Stewart 		return;
648635918f85SRandall Stewart 	}
648735918f85SRandall Stewart 	addr_touse = sa;
6488ea5eba11SMichael Tuexen #ifdef INET6
648935918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6490d59107f7SMichael Tuexen #ifdef INET
649135918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
649235918f85SRandall Stewart 
6493d59107f7SMichael Tuexen #endif
649435918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6495c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
649635918f85SRandall Stewart 			*error = EINVAL;
649735918f85SRandall Stewart 			return;
649835918f85SRandall Stewart 		}
6499db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6500db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6501c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6502db4fd95bSRandall Stewart 			*error = EINVAL;
6503db4fd95bSRandall Stewart 			return;
6504db4fd95bSRandall Stewart 		}
6505d59107f7SMichael Tuexen #ifdef INET
650635918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
650735918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6508db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6509db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6510db4fd95bSRandall Stewart 				/* can't bind v4-mapped on PF_INET sockets */
6511c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6512db4fd95bSRandall Stewart 				*error = EINVAL;
6513db4fd95bSRandall Stewart 				return;
6514db4fd95bSRandall Stewart 			}
651535918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
651635918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
651735918f85SRandall Stewart 		}
6518d59107f7SMichael Tuexen #endif
651935918f85SRandall Stewart 	}
652035918f85SRandall Stewart #endif
6521ea5eba11SMichael Tuexen #ifdef INET
652235918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
652335918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6524c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
652535918f85SRandall Stewart 			*error = EINVAL;
652635918f85SRandall Stewart 			return;
652735918f85SRandall Stewart 		}
6528db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6529db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6530db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6531c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6532db4fd95bSRandall Stewart 			*error = EINVAL;
6533db4fd95bSRandall Stewart 			return;
6534db4fd95bSRandall Stewart 		}
653535918f85SRandall Stewart 	}
6536ea5eba11SMichael Tuexen #endif
653735918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
653835918f85SRandall Stewart 		if (p == NULL) {
653935918f85SRandall Stewart 			/* Can't get proc for Net/Open BSD */
6540c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
654135918f85SRandall Stewart 			*error = EINVAL;
654235918f85SRandall Stewart 			return;
654335918f85SRandall Stewart 		}
65441b649582SRandall Stewart 		*error = sctp_inpcb_bind(so, addr_touse, NULL, p);
654535918f85SRandall Stewart 		return;
654635918f85SRandall Stewart 	}
654735918f85SRandall Stewart 	/*
654835918f85SRandall Stewart 	 * No locks required here since bind and mgmt_ep_sa all do their own
654935918f85SRandall Stewart 	 * locking. If we do something for the FIX: below we may need to
655035918f85SRandall Stewart 	 * lock in that case.
655135918f85SRandall Stewart 	 */
655235918f85SRandall Stewart 	if (assoc_id == 0) {
655335918f85SRandall Stewart 		/* add the address */
655435918f85SRandall Stewart 		struct sctp_inpcb *lep;
655597c76f10SRandall Stewart 		struct sockaddr_in *lsin = (struct sockaddr_in *)addr_touse;
655635918f85SRandall Stewart 
655797c76f10SRandall Stewart 		/* validate the incoming port */
655897c76f10SRandall Stewart 		if ((lsin->sin_port != 0) &&
655997c76f10SRandall Stewart 		    (lsin->sin_port != inp->sctp_lport)) {
6560c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
656197c76f10SRandall Stewart 			*error = EINVAL;
656297c76f10SRandall Stewart 			return;
656397c76f10SRandall Stewart 		} else {
656497c76f10SRandall Stewart 			/* user specified 0 port, set it to existing port */
656597c76f10SRandall Stewart 			lsin->sin_port = inp->sctp_lport;
656697c76f10SRandall Stewart 		}
656797c76f10SRandall Stewart 
656835918f85SRandall Stewart 		lep = sctp_pcb_findep(addr_touse, 1, 0, vrf_id);
656935918f85SRandall Stewart 		if (lep != NULL) {
657035918f85SRandall Stewart 			/*
657135918f85SRandall Stewart 			 * We must decrement the refcount since we have the
657235918f85SRandall Stewart 			 * ep already and are binding. No remove going on
657335918f85SRandall Stewart 			 * here.
657435918f85SRandall Stewart 			 */
65756d9e8f2bSRandall Stewart 			SCTP_INP_DECR_REF(lep);
657635918f85SRandall Stewart 		}
657735918f85SRandall Stewart 		if (lep == inp) {
657835918f85SRandall Stewart 			/* already bound to it.. ok */
657935918f85SRandall Stewart 			return;
658035918f85SRandall Stewart 		} else if (lep == NULL) {
658135918f85SRandall Stewart 			((struct sockaddr_in *)addr_touse)->sin_port = 0;
658235918f85SRandall Stewart 			*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
658335918f85SRandall Stewart 			    SCTP_ADD_IP_ADDRESS,
658480fefe0aSRandall Stewart 			    vrf_id, NULL);
658535918f85SRandall Stewart 		} else {
658635918f85SRandall Stewart 			*error = EADDRINUSE;
658735918f85SRandall Stewart 		}
658835918f85SRandall Stewart 		if (*error)
658935918f85SRandall Stewart 			return;
659035918f85SRandall Stewart 	} else {
659135918f85SRandall Stewart 		/*
659235918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
659335918f85SRandall Stewart 		 */
659435918f85SRandall Stewart 	}
659535918f85SRandall Stewart }
659635918f85SRandall Stewart 
659735918f85SRandall Stewart /*
659835918f85SRandall Stewart  * sctp_bindx(DELETE) for one address.
659935918f85SRandall Stewart  * assumes all arguments are valid/checked by caller.
660035918f85SRandall Stewart  */
660135918f85SRandall Stewart void
66027215cc1bSMichael Tuexen sctp_bindx_delete_address(struct sctp_inpcb *inp,
660335918f85SRandall Stewart     struct sockaddr *sa, sctp_assoc_t assoc_id,
660435918f85SRandall Stewart     uint32_t vrf_id, int *error)
660535918f85SRandall Stewart {
660635918f85SRandall Stewart 	struct sockaddr *addr_touse;
6607d59107f7SMichael Tuexen #if defined(INET) && defined(INET6)
660835918f85SRandall Stewart 	struct sockaddr_in sin;
66095e2c2d87SRandall Stewart #endif
66105e2c2d87SRandall Stewart 
661135918f85SRandall Stewart 	/* see if we're bound all already! */
661235918f85SRandall Stewart 	if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6613c4739e2fSRandall Stewart 		SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
661435918f85SRandall Stewart 		*error = EINVAL;
661535918f85SRandall Stewart 		return;
661635918f85SRandall Stewart 	}
661735918f85SRandall Stewart 	addr_touse = sa;
6618e0e00a4dSMichael Tuexen #ifdef INET6
661935918f85SRandall Stewart 	if (sa->sa_family == AF_INET6) {
6620d59107f7SMichael Tuexen #ifdef INET
662135918f85SRandall Stewart 		struct sockaddr_in6 *sin6;
6622d59107f7SMichael Tuexen #endif
6623d59107f7SMichael Tuexen 
662435918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in6)) {
6625c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
662635918f85SRandall Stewart 			*error = EINVAL;
662735918f85SRandall Stewart 			return;
662835918f85SRandall Stewart 		}
6629db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6630db4fd95bSRandall Stewart 			/* can only bind v6 on PF_INET6 sockets */
6631c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6632db4fd95bSRandall Stewart 			*error = EINVAL;
6633db4fd95bSRandall Stewart 			return;
6634db4fd95bSRandall Stewart 		}
6635d59107f7SMichael Tuexen #ifdef INET
663635918f85SRandall Stewart 		sin6 = (struct sockaddr_in6 *)addr_touse;
663735918f85SRandall Stewart 		if (IN6_IS_ADDR_V4MAPPED(&sin6->sin6_addr)) {
6638db4fd95bSRandall Stewart 			if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6639db4fd95bSRandall Stewart 			    SCTP_IPV6_V6ONLY(inp)) {
6640db4fd95bSRandall Stewart 				/* can't bind mapped-v4 on PF_INET sockets */
6641c4739e2fSRandall Stewart 				SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6642db4fd95bSRandall Stewart 				*error = EINVAL;
6643db4fd95bSRandall Stewart 				return;
6644db4fd95bSRandall Stewart 			}
664535918f85SRandall Stewart 			in6_sin6_2_sin(&sin, sin6);
664635918f85SRandall Stewart 			addr_touse = (struct sockaddr *)&sin;
664735918f85SRandall Stewart 		}
6648d59107f7SMichael Tuexen #endif
664935918f85SRandall Stewart 	}
665035918f85SRandall Stewart #endif
6651ea5eba11SMichael Tuexen #ifdef INET
665235918f85SRandall Stewart 	if (sa->sa_family == AF_INET) {
665335918f85SRandall Stewart 		if (sa->sa_len != sizeof(struct sockaddr_in)) {
6654c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
665535918f85SRandall Stewart 			*error = EINVAL;
665635918f85SRandall Stewart 			return;
665735918f85SRandall Stewart 		}
6658db4fd95bSRandall Stewart 		if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
6659db4fd95bSRandall Stewart 		    SCTP_IPV6_V6ONLY(inp)) {
6660db4fd95bSRandall Stewart 			/* can't bind v4 on PF_INET sockets */
6661c4739e2fSRandall Stewart 			SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTPUTIL, EINVAL);
6662db4fd95bSRandall Stewart 			*error = EINVAL;
6663db4fd95bSRandall Stewart 			return;
6664db4fd95bSRandall Stewart 		}
666535918f85SRandall Stewart 	}
6666ea5eba11SMichael Tuexen #endif
666735918f85SRandall Stewart 	/*
666835918f85SRandall Stewart 	 * No lock required mgmt_ep_sa does its own locking. If the FIX:
666935918f85SRandall Stewart 	 * below is ever changed we may need to lock before calling
667035918f85SRandall Stewart 	 * association level binding.
667135918f85SRandall Stewart 	 */
667235918f85SRandall Stewart 	if (assoc_id == 0) {
667335918f85SRandall Stewart 		/* delete the address */
667435918f85SRandall Stewart 		*error = sctp_addr_mgmt_ep_sa(inp, addr_touse,
667535918f85SRandall Stewart 		    SCTP_DEL_IP_ADDRESS,
667680fefe0aSRandall Stewart 		    vrf_id, NULL);
667735918f85SRandall Stewart 	} else {
667835918f85SRandall Stewart 		/*
667935918f85SRandall Stewart 		 * FIX: decide whether we allow assoc based bindx
668035918f85SRandall Stewart 		 */
668135918f85SRandall Stewart 	}
668235918f85SRandall Stewart }
66831b649582SRandall Stewart 
66841b649582SRandall Stewart /*
66851b649582SRandall Stewart  * returns the valid local address count for an assoc, taking into account
66861b649582SRandall Stewart  * all scoping rules
66871b649582SRandall Stewart  */
66881b649582SRandall Stewart int
66891b649582SRandall Stewart sctp_local_addr_count(struct sctp_tcb *stcb)
66901b649582SRandall Stewart {
6691b54ddf22SMichael Tuexen 	int loopback_scope;
6692b54ddf22SMichael Tuexen #if defined(INET)
6693b54ddf22SMichael Tuexen 	int ipv4_local_scope, ipv4_addr_legal;
6694b54ddf22SMichael Tuexen #endif
6695b54ddf22SMichael Tuexen #if defined (INET6)
6696b54ddf22SMichael Tuexen 	int local_scope, site_scope, ipv6_addr_legal;
6697b54ddf22SMichael Tuexen #endif
66981b649582SRandall Stewart 	struct sctp_vrf *vrf;
66991b649582SRandall Stewart 	struct sctp_ifn *sctp_ifn;
67001b649582SRandall Stewart 	struct sctp_ifa *sctp_ifa;
67011b649582SRandall Stewart 	int count = 0;
67021b649582SRandall Stewart 
67031b649582SRandall Stewart 	/* Turn on all the appropriate scopes */
6704a1cb341bSMichael Tuexen 	loopback_scope = stcb->asoc.scope.loopback_scope;
6705b54ddf22SMichael Tuexen #if defined(INET)
6706a1cb341bSMichael Tuexen 	ipv4_local_scope = stcb->asoc.scope.ipv4_local_scope;
6707b54ddf22SMichael Tuexen 	ipv4_addr_legal = stcb->asoc.scope.ipv4_addr_legal;
6708b54ddf22SMichael Tuexen #endif
6709b54ddf22SMichael Tuexen #if defined(INET6)
6710a1cb341bSMichael Tuexen 	local_scope = stcb->asoc.scope.local_scope;
6711a1cb341bSMichael Tuexen 	site_scope = stcb->asoc.scope.site_scope;
6712a1cb341bSMichael Tuexen 	ipv6_addr_legal = stcb->asoc.scope.ipv6_addr_legal;
6713b54ddf22SMichael Tuexen #endif
6714c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RLOCK();
67151b649582SRandall Stewart 	vrf = sctp_find_vrf(stcb->asoc.vrf_id);
67161b649582SRandall Stewart 	if (vrf == NULL) {
67171b649582SRandall Stewart 		/* no vrf, no addresses */
6718c99efcf6SRandall Stewart 		SCTP_IPI_ADDR_RUNLOCK();
67191b649582SRandall Stewart 		return (0);
67201b649582SRandall Stewart 	}
67210053ed28SMichael Tuexen 
67221b649582SRandall Stewart 	if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
67231b649582SRandall Stewart 		/*
67241b649582SRandall Stewart 		 * bound all case: go through all ifns on the vrf
67251b649582SRandall Stewart 		 */
67261b649582SRandall Stewart 		LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
67271b649582SRandall Stewart 			if ((loopback_scope == 0) &&
67281b649582SRandall Stewart 			    SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
67291b649582SRandall Stewart 				continue;
67301b649582SRandall Stewart 			}
67311b649582SRandall Stewart 			LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
67321b649582SRandall Stewart 				if (sctp_is_addr_restricted(stcb, sctp_ifa))
67331b649582SRandall Stewart 					continue;
67345e2c2d87SRandall Stewart 				switch (sctp_ifa->address.sa.sa_family) {
6735ea5eba11SMichael Tuexen #ifdef INET
67365e2c2d87SRandall Stewart 				case AF_INET:
67375e2c2d87SRandall Stewart 					if (ipv4_addr_legal) {
67381b649582SRandall Stewart 						struct sockaddr_in *sin;
67391b649582SRandall Stewart 
674024aaac8dSMichael Tuexen 						sin = &sctp_ifa->address.sin;
67411b649582SRandall Stewart 						if (sin->sin_addr.s_addr == 0) {
6742b7b84c0eSMichael Tuexen 							/*
6743b7b84c0eSMichael Tuexen 							 * skip unspecified
6744b7b84c0eSMichael Tuexen 							 * addrs
6745b7b84c0eSMichael Tuexen 							 */
67461b649582SRandall Stewart 							continue;
67471b649582SRandall Stewart 						}
67486ba22f19SMichael Tuexen 						if (prison_check_ip4(stcb->sctp_ep->ip_inp.inp.inp_cred,
67496ba22f19SMichael Tuexen 						    &sin->sin_addr) != 0) {
67506ba22f19SMichael Tuexen 							continue;
67516ba22f19SMichael Tuexen 						}
67521b649582SRandall Stewart 						if ((ipv4_local_scope == 0) &&
67531b649582SRandall Stewart 						    (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
67541b649582SRandall Stewart 							continue;
67551b649582SRandall Stewart 						}
67561b649582SRandall Stewart 						/* count this one */
67571b649582SRandall Stewart 						count++;
67585e2c2d87SRandall Stewart 					} else {
67595e2c2d87SRandall Stewart 						continue;
67605e2c2d87SRandall Stewart 					}
67615e2c2d87SRandall Stewart 					break;
6762ea5eba11SMichael Tuexen #endif
67635e2c2d87SRandall Stewart #ifdef INET6
67645e2c2d87SRandall Stewart 				case AF_INET6:
67655e2c2d87SRandall Stewart 					if (ipv6_addr_legal) {
67661b649582SRandall Stewart 						struct sockaddr_in6 *sin6;
67671b649582SRandall Stewart 
676824aaac8dSMichael Tuexen 						sin6 = &sctp_ifa->address.sin6;
67691b649582SRandall Stewart 						if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
67701b649582SRandall Stewart 							continue;
67711b649582SRandall Stewart 						}
67726ba22f19SMichael Tuexen 						if (prison_check_ip6(stcb->sctp_ep->ip_inp.inp.inp_cred,
67736ba22f19SMichael Tuexen 						    &sin6->sin6_addr) != 0) {
67746ba22f19SMichael Tuexen 							continue;
67756ba22f19SMichael Tuexen 						}
67761b649582SRandall Stewart 						if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
67771b649582SRandall Stewart 							if (local_scope == 0)
67781b649582SRandall Stewart 								continue;
67791b649582SRandall Stewart 							if (sin6->sin6_scope_id == 0) {
67801b649582SRandall Stewart 								if (sa6_recoverscope(sin6) != 0)
67811b649582SRandall Stewart 									/*
67825e2c2d87SRandall Stewart 									 *
67835e2c2d87SRandall Stewart 									 * bad
67845b495f17SMichael Tuexen 									 * link
67855e2c2d87SRandall Stewart 									 *
67865b495f17SMichael Tuexen 									 * local
67875e2c2d87SRandall Stewart 									 *
67885b495f17SMichael Tuexen 									 * address
67895b495f17SMichael Tuexen 									 */
67901b649582SRandall Stewart 									continue;
67911b649582SRandall Stewart 							}
67921b649582SRandall Stewart 						}
67931b649582SRandall Stewart 						if ((site_scope == 0) &&
67941b649582SRandall Stewart 						    (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
67951b649582SRandall Stewart 							continue;
67961b649582SRandall Stewart 						}
67971b649582SRandall Stewart 						/* count this one */
67981b649582SRandall Stewart 						count++;
67991b649582SRandall Stewart 					}
68005e2c2d87SRandall Stewart 					break;
68015e2c2d87SRandall Stewart #endif
68025e2c2d87SRandall Stewart 				default:
68035e2c2d87SRandall Stewart 					/* TSNH */
68045e2c2d87SRandall Stewart 					break;
68055e2c2d87SRandall Stewart 				}
68061b649582SRandall Stewart 			}
68071b649582SRandall Stewart 		}
68081b649582SRandall Stewart 	} else {
68091b649582SRandall Stewart 		/*
68101b649582SRandall Stewart 		 * subset bound case
68111b649582SRandall Stewart 		 */
68121b649582SRandall Stewart 		struct sctp_laddr *laddr;
68131b649582SRandall Stewart 
68141b649582SRandall Stewart 		LIST_FOREACH(laddr, &stcb->sctp_ep->sctp_addr_list,
68151b649582SRandall Stewart 		    sctp_nxt_addr) {
68161b649582SRandall Stewart 			if (sctp_is_addr_restricted(stcb, laddr->ifa)) {
68171b649582SRandall Stewart 				continue;
68181b649582SRandall Stewart 			}
68191b649582SRandall Stewart 			/* count this one */
68201b649582SRandall Stewart 			count++;
68211b649582SRandall Stewart 		}
68221b649582SRandall Stewart 	}
6823c99efcf6SRandall Stewart 	SCTP_IPI_ADDR_RUNLOCK();
68241b649582SRandall Stewart 	return (count);
68251b649582SRandall Stewart }
6826c4739e2fSRandall Stewart 
6827c4739e2fSRandall Stewart #if defined(SCTP_LOCAL_TRACE_BUF)
6828c4739e2fSRandall Stewart 
6829c4739e2fSRandall Stewart void
6830b27a6b7dSRandall Stewart sctp_log_trace(uint32_t subsys, const char *str SCTP_UNUSED, uint32_t a, uint32_t b, uint32_t c, uint32_t d, uint32_t e, uint32_t f)
6831c4739e2fSRandall Stewart {
6832b27a6b7dSRandall Stewart 	uint32_t saveindex, newindex;
6833c4739e2fSRandall Stewart 
6834c4739e2fSRandall Stewart 	do {
6835b3f1ea41SRandall Stewart 		saveindex = SCTP_BASE_SYSCTL(sctp_log).index;
6836c4739e2fSRandall Stewart 		if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6837c4739e2fSRandall Stewart 			newindex = 1;
6838c4739e2fSRandall Stewart 		} else {
6839c4739e2fSRandall Stewart 			newindex = saveindex + 1;
6840c4739e2fSRandall Stewart 		}
6841b3f1ea41SRandall Stewart 	} while (atomic_cmpset_int(&SCTP_BASE_SYSCTL(sctp_log).index, saveindex, newindex) == 0);
6842c4739e2fSRandall Stewart 	if (saveindex >= SCTP_MAX_LOGGING_SIZE) {
6843c4739e2fSRandall Stewart 		saveindex = 0;
6844c4739e2fSRandall Stewart 	}
6845b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].timestamp = SCTP_GET_CYCLECOUNT;
6846b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].subsys = subsys;
6847b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[0] = a;
6848b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[1] = b;
6849b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[2] = c;
6850b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[3] = d;
6851b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[4] = e;
6852b3f1ea41SRandall Stewart 	SCTP_BASE_SYSCTL(sctp_log).entry[saveindex].params[5] = f;
6853c4739e2fSRandall Stewart }
6854c4739e2fSRandall Stewart 
6855c4739e2fSRandall Stewart #endif
6856a99b6783SRandall Stewart static void
68577cca1775SRandall Stewart sctp_recv_udp_tunneled_packet(struct mbuf *m, int off, struct inpcb *inp,
685881d3ec17SBryan Venteicher     const struct sockaddr *sa SCTP_UNUSED, void *ctx SCTP_UNUSED)
6859a99b6783SRandall Stewart {
6860a99b6783SRandall Stewart 	struct ip *iph;
68613a51a264SMichael Tuexen #ifdef INET6
68623a51a264SMichael Tuexen 	struct ip6_hdr *ip6;
68633a51a264SMichael Tuexen #endif
6864a99b6783SRandall Stewart 	struct mbuf *sp, *last;
6865a99b6783SRandall Stewart 	struct udphdr *uhdr;
6866285052f0SMichael Tuexen 	uint16_t port;
6867a99b6783SRandall Stewart 
6868a99b6783SRandall Stewart 	if ((m->m_flags & M_PKTHDR) == 0) {
6869a99b6783SRandall Stewart 		/* Can't handle one that is not a pkt hdr */
6870a99b6783SRandall Stewart 		goto out;
6871a99b6783SRandall Stewart 	}
6872285052f0SMichael Tuexen 	/* Pull the src port */
6873a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6874a99b6783SRandall Stewart 	uhdr = (struct udphdr *)((caddr_t)iph + off);
6875a99b6783SRandall Stewart 	port = uhdr->uh_sport;
6876285052f0SMichael Tuexen 	/*
6877285052f0SMichael Tuexen 	 * Split out the mbuf chain. Leave the IP header in m, place the
6878285052f0SMichael Tuexen 	 * rest in the sp.
6879285052f0SMichael Tuexen 	 */
6880eb1b1807SGleb Smirnoff 	sp = m_split(m, off, M_NOWAIT);
6881a99b6783SRandall Stewart 	if (sp == NULL) {
6882a99b6783SRandall Stewart 		/* Gak, drop packet, we can't do a split */
6883a99b6783SRandall Stewart 		goto out;
6884a99b6783SRandall Stewart 	}
6885285052f0SMichael Tuexen 	if (sp->m_pkthdr.len < sizeof(struct udphdr) + sizeof(struct sctphdr)) {
6886285052f0SMichael Tuexen 		/* Gak, packet can't have an SCTP header in it - too small */
6887a99b6783SRandall Stewart 		m_freem(sp);
6888a99b6783SRandall Stewart 		goto out;
6889a99b6783SRandall Stewart 	}
6890285052f0SMichael Tuexen 	/* Now pull up the UDP header and SCTP header together */
6891285052f0SMichael Tuexen 	sp = m_pullup(sp, sizeof(struct udphdr) + sizeof(struct sctphdr));
6892a99b6783SRandall Stewart 	if (sp == NULL) {
6893a99b6783SRandall Stewart 		/* Gak pullup failed */
6894a99b6783SRandall Stewart 		goto out;
6895a99b6783SRandall Stewart 	}
6896285052f0SMichael Tuexen 	/* Trim out the UDP header */
6897a99b6783SRandall Stewart 	m_adj(sp, sizeof(struct udphdr));
6898a99b6783SRandall Stewart 
6899a99b6783SRandall Stewart 	/* Now reconstruct the mbuf chain */
6900285052f0SMichael Tuexen 	for (last = m; last->m_next; last = last->m_next);
6901a99b6783SRandall Stewart 	last->m_next = sp;
6902a99b6783SRandall Stewart 	m->m_pkthdr.len += sp->m_pkthdr.len;
690352f175beSMichael Tuexen 	/*
690452f175beSMichael Tuexen 	 * The CSUM_DATA_VALID flags indicates that the HW checked the UDP
690552f175beSMichael Tuexen 	 * checksum and it was valid. Since CSUM_DATA_VALID ==
690652f175beSMichael Tuexen 	 * CSUM_SCTP_VALID this would imply that the HW also verified the
690752f175beSMichael Tuexen 	 * SCTP checksum. Therefore, clear the bit.
690852f175beSMichael Tuexen 	 */
690952f175beSMichael Tuexen 	SCTPDBG(SCTP_DEBUG_CRCOFFLOAD,
691052f175beSMichael Tuexen 	    "sctp_recv_udp_tunneled_packet(): Packet of length %d received on %s with csum_flags 0x%b.\n",
691152f175beSMichael Tuexen 	    m->m_pkthdr.len,
691252f175beSMichael Tuexen 	    if_name(m->m_pkthdr.rcvif),
691352f175beSMichael Tuexen 	    (int)m->m_pkthdr.csum_flags, CSUM_BITS);
691452f175beSMichael Tuexen 	m->m_pkthdr.csum_flags &= ~CSUM_DATA_VALID;
6915a99b6783SRandall Stewart 	iph = mtod(m, struct ip *);
6916a99b6783SRandall Stewart 	switch (iph->ip_v) {
6917e6194c2eSMichael Tuexen #ifdef INET
6918a99b6783SRandall Stewart 	case IPVERSION:
691909c1c856SMichael Tuexen 		iph->ip_len = htons(ntohs(iph->ip_len) - sizeof(struct udphdr));
6920a99b6783SRandall Stewart 		sctp_input_with_port(m, off, port);
6921a99b6783SRandall Stewart 		break;
6922e6194c2eSMichael Tuexen #endif
6923a99b6783SRandall Stewart #ifdef INET6
6924a99b6783SRandall Stewart 	case IPV6_VERSION >> 4:
69253a51a264SMichael Tuexen 		ip6 = mtod(m, struct ip6_hdr *);
69263a51a264SMichael Tuexen 		ip6->ip6_plen = htons(ntohs(ip6->ip6_plen) - sizeof(struct udphdr));
69273a51a264SMichael Tuexen 		sctp6_input_with_port(&m, &off, port);
6928a99b6783SRandall Stewart 		break;
6929a99b6783SRandall Stewart #endif
6930a99b6783SRandall Stewart 	default:
6931285052f0SMichael Tuexen 		goto out;
6932a99b6783SRandall Stewart 		break;
6933a99b6783SRandall Stewart 	}
6934a99b6783SRandall Stewart 	return;
6935a99b6783SRandall Stewart out:
6936a99b6783SRandall Stewart 	m_freem(m);
6937a99b6783SRandall Stewart }
6938c54a18d2SRandall Stewart 
6939fd7af143SMichael Tuexen #ifdef INET
6940fd7af143SMichael Tuexen static void
6941fd7af143SMichael Tuexen sctp_recv_icmp_tunneled_packet(int cmd, struct sockaddr *sa, void *vip, void *ctx SCTP_UNUSED)
6942fd7af143SMichael Tuexen {
6943fd7af143SMichael Tuexen 	struct ip *outer_ip, *inner_ip;
6944fd7af143SMichael Tuexen 	struct sctphdr *sh;
6945fd7af143SMichael Tuexen 	struct icmp *icmp;
6946fd7af143SMichael Tuexen 	struct udphdr *udp;
6947fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
6948fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
6949fd7af143SMichael Tuexen 	struct sctp_nets *net;
6950fd7af143SMichael Tuexen 	struct sctp_init_chunk *ch;
6951fd7af143SMichael Tuexen 	struct sockaddr_in src, dst;
6952fd7af143SMichael Tuexen 	uint8_t type, code;
6953fd7af143SMichael Tuexen 
6954fd7af143SMichael Tuexen 	inner_ip = (struct ip *)vip;
6955fd7af143SMichael Tuexen 	icmp = (struct icmp *)((caddr_t)inner_ip -
6956fd7af143SMichael Tuexen 	    (sizeof(struct icmp) - sizeof(struct ip)));
6957fd7af143SMichael Tuexen 	outer_ip = (struct ip *)((caddr_t)icmp - sizeof(struct ip));
6958fd7af143SMichael Tuexen 	if (ntohs(outer_ip->ip_len) <
6959fd7af143SMichael Tuexen 	    sizeof(struct ip) + 8 + (inner_ip->ip_hl << 2) + sizeof(struct udphdr) + 8) {
6960fd7af143SMichael Tuexen 		return;
6961fd7af143SMichael Tuexen 	}
6962fd7af143SMichael Tuexen 	udp = (struct udphdr *)((caddr_t)inner_ip + (inner_ip->ip_hl << 2));
6963fd7af143SMichael Tuexen 	sh = (struct sctphdr *)(udp + 1);
6964fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in));
6965fd7af143SMichael Tuexen 	src.sin_family = AF_INET;
6966fd7af143SMichael Tuexen 	src.sin_len = sizeof(struct sockaddr_in);
6967fd7af143SMichael Tuexen 	src.sin_port = sh->src_port;
6968fd7af143SMichael Tuexen 	src.sin_addr = inner_ip->ip_src;
6969fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in));
6970fd7af143SMichael Tuexen 	dst.sin_family = AF_INET;
6971fd7af143SMichael Tuexen 	dst.sin_len = sizeof(struct sockaddr_in);
6972fd7af143SMichael Tuexen 	dst.sin_port = sh->dest_port;
6973fd7af143SMichael Tuexen 	dst.sin_addr = inner_ip->ip_dst;
6974fd7af143SMichael Tuexen 	/*
6975fd7af143SMichael Tuexen 	 * 'dst' holds the dest of the packet that failed to be sent. 'src'
6976fd7af143SMichael Tuexen 	 * holds our local endpoint address. Thus we reverse the dst and the
6977fd7af143SMichael Tuexen 	 * src in the lookup.
6978fd7af143SMichael Tuexen 	 */
6979fd7af143SMichael Tuexen 	inp = NULL;
6980fd7af143SMichael Tuexen 	net = NULL;
6981fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
6982fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
6983fd7af143SMichael Tuexen 	    &inp, &net, 1,
6984fd7af143SMichael Tuexen 	    SCTP_DEFAULT_VRFID);
6985fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
6986fd7af143SMichael Tuexen 	    (net != NULL) &&
698755b8cd93SMichael Tuexen 	    (inp != NULL)) {
6988fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
6989fd7af143SMichael Tuexen 		if ((udp->uh_dport != net->port) ||
6990fd7af143SMichael Tuexen 		    (udp->uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
6991fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
6992fd7af143SMichael Tuexen 			return;
6993fd7af143SMichael Tuexen 		}
6994fd7af143SMichael Tuexen 		/* Check the verification tag */
6995fd7af143SMichael Tuexen 		if (ntohl(sh->v_tag) != 0) {
6996fd7af143SMichael Tuexen 			/*
6997fd7af143SMichael Tuexen 			 * This must be the verification tag used for
6998fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
6999fd7af143SMichael Tuexen 			 * reflecting the verification tag.
7000fd7af143SMichael Tuexen 			 */
7001fd7af143SMichael Tuexen 			if (ntohl(sh->v_tag) != stcb->asoc.peer_vtag) {
7002fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7003fd7af143SMichael Tuexen 				return;
7004fd7af143SMichael Tuexen 			}
7005fd7af143SMichael Tuexen 		} else {
7006fd7af143SMichael Tuexen 			if (ntohs(outer_ip->ip_len) >=
7007fd7af143SMichael Tuexen 			    sizeof(struct ip) +
7008fd7af143SMichael Tuexen 			    8 + (inner_ip->ip_hl << 2) + 8 + 20) {
7009fd7af143SMichael Tuexen 				/*
7010fd7af143SMichael Tuexen 				 * In this case we can check if we got an
7011fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
7012fd7af143SMichael Tuexen 				 * matches.
7013fd7af143SMichael Tuexen 				 */
7014fd7af143SMichael Tuexen 				ch = (struct sctp_init_chunk *)(sh + 1);
7015fd7af143SMichael Tuexen 				if ((ch->ch.chunk_type != SCTP_INITIATION) ||
7016fd7af143SMichael Tuexen 				    (ntohl(ch->init.initiate_tag) != stcb->asoc.my_vtag)) {
7017fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
7018fd7af143SMichael Tuexen 					return;
7019fd7af143SMichael Tuexen 				}
7020fd7af143SMichael Tuexen 			} else {
7021fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7022fd7af143SMichael Tuexen 				return;
7023fd7af143SMichael Tuexen 			}
7024fd7af143SMichael Tuexen 		}
7025fd7af143SMichael Tuexen 		type = icmp->icmp_type;
7026fd7af143SMichael Tuexen 		code = icmp->icmp_code;
70273c3f9e2aSMichael Tuexen 		if ((type == ICMP_UNREACH) &&
70283c3f9e2aSMichael Tuexen 		    (code == ICMP_UNREACH_PORT)) {
7029fd7af143SMichael Tuexen 			code = ICMP_UNREACH_PROTOCOL;
7030fd7af143SMichael Tuexen 		}
7031fd7af143SMichael Tuexen 		sctp_notify(inp, stcb, net, type, code,
7032fd7af143SMichael Tuexen 		    ntohs(inner_ip->ip_len),
70336ebfa5eeSMichael Tuexen 		    (uint32_t)ntohs(icmp->icmp_nextmtu));
7034fd7af143SMichael Tuexen 	} else {
7035fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
7036fd7af143SMichael Tuexen 			/* reduce ref-count */
7037fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
7038fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
7039fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
7040fd7af143SMichael Tuexen 		}
7041fd7af143SMichael Tuexen 		if (stcb) {
7042fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7043fd7af143SMichael Tuexen 		}
7044fd7af143SMichael Tuexen 	}
7045fd7af143SMichael Tuexen 	return;
7046fd7af143SMichael Tuexen }
7047fd7af143SMichael Tuexen #endif
7048fd7af143SMichael Tuexen 
7049fd7af143SMichael Tuexen #ifdef INET6
7050fd7af143SMichael Tuexen static void
7051fd7af143SMichael Tuexen sctp_recv_icmp6_tunneled_packet(int cmd, struct sockaddr *sa, void *d, void *ctx SCTP_UNUSED)
7052fd7af143SMichael Tuexen {
7053fd7af143SMichael Tuexen 	struct ip6ctlparam *ip6cp;
7054fd7af143SMichael Tuexen 	struct sctp_inpcb *inp;
7055fd7af143SMichael Tuexen 	struct sctp_tcb *stcb;
7056fd7af143SMichael Tuexen 	struct sctp_nets *net;
7057fd7af143SMichael Tuexen 	struct sctphdr sh;
7058fd7af143SMichael Tuexen 	struct udphdr udp;
7059fd7af143SMichael Tuexen 	struct sockaddr_in6 src, dst;
7060fd7af143SMichael Tuexen 	uint8_t type, code;
7061fd7af143SMichael Tuexen 
7062fd7af143SMichael Tuexen 	ip6cp = (struct ip6ctlparam *)d;
7063fd7af143SMichael Tuexen 	/*
7064fd7af143SMichael Tuexen 	 * XXX: We assume that when IPV6 is non NULL, M and OFF are valid.
7065fd7af143SMichael Tuexen 	 */
7066fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m == NULL) {
7067fd7af143SMichael Tuexen 		return;
7068fd7af143SMichael Tuexen 	}
7069fd7af143SMichael Tuexen 	/*
7070fd7af143SMichael Tuexen 	 * Check if we can safely examine the ports and the verification tag
7071fd7af143SMichael Tuexen 	 * of the SCTP common header.
7072fd7af143SMichael Tuexen 	 */
7073fd7af143SMichael Tuexen 	if (ip6cp->ip6c_m->m_pkthdr.len <
7074fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr) + offsetof(struct sctphdr, checksum)) {
7075fd7af143SMichael Tuexen 		return;
7076fd7af143SMichael Tuexen 	}
7077fd7af143SMichael Tuexen 	/* Copy out the UDP header. */
7078fd7af143SMichael Tuexen 	memset(&udp, 0, sizeof(struct udphdr));
7079fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
7080fd7af143SMichael Tuexen 	    ip6cp->ip6c_off,
7081fd7af143SMichael Tuexen 	    sizeof(struct udphdr),
7082fd7af143SMichael Tuexen 	    (caddr_t)&udp);
7083fd7af143SMichael Tuexen 	/* Copy out the port numbers and the verification tag. */
7084fd7af143SMichael Tuexen 	memset(&sh, 0, sizeof(struct sctphdr));
7085fd7af143SMichael Tuexen 	m_copydata(ip6cp->ip6c_m,
7086fd7af143SMichael Tuexen 	    ip6cp->ip6c_off + sizeof(struct udphdr),
7087fd7af143SMichael Tuexen 	    sizeof(uint16_t) + sizeof(uint16_t) + sizeof(uint32_t),
7088fd7af143SMichael Tuexen 	    (caddr_t)&sh);
7089fd7af143SMichael Tuexen 	memset(&src, 0, sizeof(struct sockaddr_in6));
7090fd7af143SMichael Tuexen 	src.sin6_family = AF_INET6;
7091fd7af143SMichael Tuexen 	src.sin6_len = sizeof(struct sockaddr_in6);
7092fd7af143SMichael Tuexen 	src.sin6_port = sh.src_port;
7093fd7af143SMichael Tuexen 	src.sin6_addr = ip6cp->ip6c_ip6->ip6_src;
7094fd7af143SMichael Tuexen 	if (in6_setscope(&src.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7095fd7af143SMichael Tuexen 		return;
7096fd7af143SMichael Tuexen 	}
7097fd7af143SMichael Tuexen 	memset(&dst, 0, sizeof(struct sockaddr_in6));
7098fd7af143SMichael Tuexen 	dst.sin6_family = AF_INET6;
7099fd7af143SMichael Tuexen 	dst.sin6_len = sizeof(struct sockaddr_in6);
7100fd7af143SMichael Tuexen 	dst.sin6_port = sh.dest_port;
7101fd7af143SMichael Tuexen 	dst.sin6_addr = ip6cp->ip6c_ip6->ip6_dst;
7102fd7af143SMichael Tuexen 	if (in6_setscope(&dst.sin6_addr, ip6cp->ip6c_m->m_pkthdr.rcvif, NULL) != 0) {
7103fd7af143SMichael Tuexen 		return;
7104fd7af143SMichael Tuexen 	}
7105fd7af143SMichael Tuexen 	inp = NULL;
7106fd7af143SMichael Tuexen 	net = NULL;
7107fd7af143SMichael Tuexen 	stcb = sctp_findassociation_addr_sa((struct sockaddr *)&dst,
7108fd7af143SMichael Tuexen 	    (struct sockaddr *)&src,
7109fd7af143SMichael Tuexen 	    &inp, &net, 1, SCTP_DEFAULT_VRFID);
7110fd7af143SMichael Tuexen 	if ((stcb != NULL) &&
7111fd7af143SMichael Tuexen 	    (net != NULL) &&
711255b8cd93SMichael Tuexen 	    (inp != NULL)) {
7113fd7af143SMichael Tuexen 		/* Check the UDP port numbers */
7114fd7af143SMichael Tuexen 		if ((udp.uh_dport != net->port) ||
7115fd7af143SMichael Tuexen 		    (udp.uh_sport != htons(SCTP_BASE_SYSCTL(sctp_udp_tunneling_port)))) {
7116fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7117fd7af143SMichael Tuexen 			return;
7118fd7af143SMichael Tuexen 		}
7119fd7af143SMichael Tuexen 		/* Check the verification tag */
7120fd7af143SMichael Tuexen 		if (ntohl(sh.v_tag) != 0) {
7121fd7af143SMichael Tuexen 			/*
7122fd7af143SMichael Tuexen 			 * This must be the verification tag used for
7123fd7af143SMichael Tuexen 			 * sending out packets. We don't consider packets
7124fd7af143SMichael Tuexen 			 * reflecting the verification tag.
7125fd7af143SMichael Tuexen 			 */
7126fd7af143SMichael Tuexen 			if (ntohl(sh.v_tag) != stcb->asoc.peer_vtag) {
7127fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7128fd7af143SMichael Tuexen 				return;
7129fd7af143SMichael Tuexen 			}
7130fd7af143SMichael Tuexen 		} else {
7131fd7af143SMichael Tuexen 			if (ip6cp->ip6c_m->m_pkthdr.len >=
7132fd7af143SMichael Tuexen 			    ip6cp->ip6c_off + sizeof(struct udphdr) +
7133fd7af143SMichael Tuexen 			    sizeof(struct sctphdr) +
7134fd7af143SMichael Tuexen 			    sizeof(struct sctp_chunkhdr) +
7135fd7af143SMichael Tuexen 			    offsetof(struct sctp_init, a_rwnd)) {
7136fd7af143SMichael Tuexen 				/*
7137fd7af143SMichael Tuexen 				 * In this case we can check if we got an
7138fd7af143SMichael Tuexen 				 * INIT chunk and if the initiate tag
7139fd7af143SMichael Tuexen 				 * matches.
7140fd7af143SMichael Tuexen 				 */
7141fd7af143SMichael Tuexen 				uint32_t initiate_tag;
7142fd7af143SMichael Tuexen 				uint8_t chunk_type;
7143fd7af143SMichael Tuexen 
7144fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7145fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7146fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7147fd7af143SMichael Tuexen 				    sizeof(struct sctphdr),
7148fd7af143SMichael Tuexen 				    sizeof(uint8_t),
7149fd7af143SMichael Tuexen 				    (caddr_t)&chunk_type);
7150fd7af143SMichael Tuexen 				m_copydata(ip6cp->ip6c_m,
7151fd7af143SMichael Tuexen 				    ip6cp->ip6c_off +
7152fd7af143SMichael Tuexen 				    sizeof(struct udphdr) +
7153fd7af143SMichael Tuexen 				    sizeof(struct sctphdr) +
7154fd7af143SMichael Tuexen 				    sizeof(struct sctp_chunkhdr),
7155fd7af143SMichael Tuexen 				    sizeof(uint32_t),
7156fd7af143SMichael Tuexen 				    (caddr_t)&initiate_tag);
7157fd7af143SMichael Tuexen 				if ((chunk_type != SCTP_INITIATION) ||
7158fd7af143SMichael Tuexen 				    (ntohl(initiate_tag) != stcb->asoc.my_vtag)) {
7159fd7af143SMichael Tuexen 					SCTP_TCB_UNLOCK(stcb);
7160fd7af143SMichael Tuexen 					return;
7161fd7af143SMichael Tuexen 				}
7162fd7af143SMichael Tuexen 			} else {
7163fd7af143SMichael Tuexen 				SCTP_TCB_UNLOCK(stcb);
7164fd7af143SMichael Tuexen 				return;
7165fd7af143SMichael Tuexen 			}
7166fd7af143SMichael Tuexen 		}
7167fd7af143SMichael Tuexen 		type = ip6cp->ip6c_icmp6->icmp6_type;
7168fd7af143SMichael Tuexen 		code = ip6cp->ip6c_icmp6->icmp6_code;
7169fd7af143SMichael Tuexen 		if ((type == ICMP6_DST_UNREACH) &&
7170fd7af143SMichael Tuexen 		    (code == ICMP6_DST_UNREACH_NOPORT)) {
7171fd7af143SMichael Tuexen 			type = ICMP6_PARAM_PROB;
7172fd7af143SMichael Tuexen 			code = ICMP6_PARAMPROB_NEXTHEADER;
7173fd7af143SMichael Tuexen 		}
7174fd7af143SMichael Tuexen 		sctp6_notify(inp, stcb, net, type, code,
71756ebfa5eeSMichael Tuexen 		    ntohl(ip6cp->ip6c_icmp6->icmp6_mtu));
7176fd7af143SMichael Tuexen 	} else {
7177fd7af143SMichael Tuexen 		if ((stcb == NULL) && (inp != NULL)) {
7178fd7af143SMichael Tuexen 			/* reduce inp's ref-count */
7179fd7af143SMichael Tuexen 			SCTP_INP_WLOCK(inp);
7180fd7af143SMichael Tuexen 			SCTP_INP_DECR_REF(inp);
7181fd7af143SMichael Tuexen 			SCTP_INP_WUNLOCK(inp);
7182fd7af143SMichael Tuexen 		}
7183fd7af143SMichael Tuexen 		if (stcb) {
7184fd7af143SMichael Tuexen 			SCTP_TCB_UNLOCK(stcb);
7185fd7af143SMichael Tuexen 		}
7186fd7af143SMichael Tuexen 	}
7187fd7af143SMichael Tuexen }
7188fd7af143SMichael Tuexen #endif
7189fd7af143SMichael Tuexen 
7190c54a18d2SRandall Stewart void
7191c54a18d2SRandall Stewart sctp_over_udp_stop(void)
7192c54a18d2SRandall Stewart {
7193a99b6783SRandall Stewart 	/*
7194a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7195a99b6783SRandall Stewart 	 * for writting!
7196a99b6783SRandall Stewart 	 */
71973a51a264SMichael Tuexen #ifdef INET
71983a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
71993a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp4_tun_socket));
72003a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp4_tun_socket) = NULL;
7201c54a18d2SRandall Stewart 	}
72023a51a264SMichael Tuexen #endif
72033a51a264SMichael Tuexen #ifdef INET6
72043a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
72053a51a264SMichael Tuexen 		soclose(SCTP_BASE_INFO(udp6_tun_socket));
72063a51a264SMichael Tuexen 		SCTP_BASE_INFO(udp6_tun_socket) = NULL;
72073a51a264SMichael Tuexen 	}
72083a51a264SMichael Tuexen #endif
7209a99b6783SRandall Stewart }
7210ea5eba11SMichael Tuexen 
7211c54a18d2SRandall Stewart int
7212c54a18d2SRandall Stewart sctp_over_udp_start(void)
7213c54a18d2SRandall Stewart {
7214a99b6783SRandall Stewart 	uint16_t port;
7215a99b6783SRandall Stewart 	int ret;
72163a51a264SMichael Tuexen #ifdef INET
72173a51a264SMichael Tuexen 	struct sockaddr_in sin;
72183a51a264SMichael Tuexen #endif
72193a51a264SMichael Tuexen #ifdef INET6
72203a51a264SMichael Tuexen 	struct sockaddr_in6 sin6;
72213a51a264SMichael Tuexen #endif
7222a99b6783SRandall Stewart 	/*
7223a99b6783SRandall Stewart 	 * This function assumes sysctl caller holds sctp_sysctl_info_lock()
7224a99b6783SRandall Stewart 	 * for writting!
7225a99b6783SRandall Stewart 	 */
7226a99b6783SRandall Stewart 	port = SCTP_BASE_SYSCTL(sctp_udp_tunneling_port);
72273a51a264SMichael Tuexen 	if (ntohs(port) == 0) {
7228a99b6783SRandall Stewart 		/* Must have a port set */
7229a99b6783SRandall Stewart 		return (EINVAL);
7230a99b6783SRandall Stewart 	}
72313a51a264SMichael Tuexen #ifdef INET
72323a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp4_tun_socket) != NULL) {
7233a99b6783SRandall Stewart 		/* Already running -- must stop first */
7234a99b6783SRandall Stewart 		return (EALREADY);
7235a99b6783SRandall Stewart 	}
72363a51a264SMichael Tuexen #endif
72373a51a264SMichael Tuexen #ifdef INET6
72383a51a264SMichael Tuexen 	if (SCTP_BASE_INFO(udp6_tun_socket) != NULL) {
72393a51a264SMichael Tuexen 		/* Already running -- must stop first */
72403a51a264SMichael Tuexen 		return (EALREADY);
7241a99b6783SRandall Stewart 	}
72423a51a264SMichael Tuexen #endif
72433a51a264SMichael Tuexen #ifdef INET
72443a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET, &SCTP_BASE_INFO(udp4_tun_socket),
72453a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
72463a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
7247a99b6783SRandall Stewart 		sctp_over_udp_stop();
7248a99b6783SRandall Stewart 		return (ret);
7249a99b6783SRandall Stewart 	}
72503a51a264SMichael Tuexen 	/* Call the special UDP hook. */
72513a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp4_tun_socket),
7252fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7253fd7af143SMichael Tuexen 	    sctp_recv_icmp_tunneled_packet,
7254fd7af143SMichael Tuexen 	    NULL))) {
72553a51a264SMichael Tuexen 		sctp_over_udp_stop();
72563a51a264SMichael Tuexen 		return (ret);
72573a51a264SMichael Tuexen 	}
72583a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
72593a51a264SMichael Tuexen 	memset(&sin, 0, sizeof(struct sockaddr_in));
72603a51a264SMichael Tuexen 	sin.sin_len = sizeof(struct sockaddr_in);
72613a51a264SMichael Tuexen 	sin.sin_family = AF_INET;
72623a51a264SMichael Tuexen 	sin.sin_port = htons(port);
72633a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp4_tun_socket),
72643a51a264SMichael Tuexen 	    (struct sockaddr *)&sin, curthread))) {
72653a51a264SMichael Tuexen 		sctp_over_udp_stop();
72663a51a264SMichael Tuexen 		return (ret);
72673a51a264SMichael Tuexen 	}
72683a51a264SMichael Tuexen #endif
72693a51a264SMichael Tuexen #ifdef INET6
72703a51a264SMichael Tuexen 	if ((ret = socreate(PF_INET6, &SCTP_BASE_INFO(udp6_tun_socket),
72713a51a264SMichael Tuexen 	    SOCK_DGRAM, IPPROTO_UDP,
72723a51a264SMichael Tuexen 	    curthread->td_ucred, curthread))) {
72733a51a264SMichael Tuexen 		sctp_over_udp_stop();
72743a51a264SMichael Tuexen 		return (ret);
72753a51a264SMichael Tuexen 	}
72763a51a264SMichael Tuexen 	/* Call the special UDP hook. */
72773a51a264SMichael Tuexen 	if ((ret = udp_set_kernel_tunneling(SCTP_BASE_INFO(udp6_tun_socket),
7278fd7af143SMichael Tuexen 	    sctp_recv_udp_tunneled_packet,
7279fd7af143SMichael Tuexen 	    sctp_recv_icmp6_tunneled_packet,
7280fd7af143SMichael Tuexen 	    NULL))) {
72813a51a264SMichael Tuexen 		sctp_over_udp_stop();
72823a51a264SMichael Tuexen 		return (ret);
72833a51a264SMichael Tuexen 	}
72843a51a264SMichael Tuexen 	/* Ok, we have a socket, bind it to the port. */
72853a51a264SMichael Tuexen 	memset(&sin6, 0, sizeof(struct sockaddr_in6));
72863a51a264SMichael Tuexen 	sin6.sin6_len = sizeof(struct sockaddr_in6);
72873a51a264SMichael Tuexen 	sin6.sin6_family = AF_INET6;
72883a51a264SMichael Tuexen 	sin6.sin6_port = htons(port);
72893a51a264SMichael Tuexen 	if ((ret = sobind(SCTP_BASE_INFO(udp6_tun_socket),
72903a51a264SMichael Tuexen 	    (struct sockaddr *)&sin6, curthread))) {
72913a51a264SMichael Tuexen 		sctp_over_udp_stop();
72923a51a264SMichael Tuexen 		return (ret);
72933a51a264SMichael Tuexen 	}
72943a51a264SMichael Tuexen #endif
7295a99b6783SRandall Stewart 	return (0);
7296c54a18d2SRandall Stewart }
729710e0318aSMichael Tuexen 
729810e0318aSMichael Tuexen /*
729910e0318aSMichael Tuexen  * sctp_min_mtu ()returns the minimum of all non-zero arguments.
730010e0318aSMichael Tuexen  * If all arguments are zero, zero is returned.
730110e0318aSMichael Tuexen  */
730210e0318aSMichael Tuexen uint32_t
7303b0471b4bSMichael Tuexen sctp_min_mtu(uint32_t mtu1, uint32_t mtu2, uint32_t mtu3)
7304b0471b4bSMichael Tuexen {
730510e0318aSMichael Tuexen 	if (mtu1 > 0) {
730610e0318aSMichael Tuexen 		if (mtu2 > 0) {
730710e0318aSMichael Tuexen 			if (mtu3 > 0) {
730810e0318aSMichael Tuexen 				return (min(mtu1, min(mtu2, mtu3)));
730910e0318aSMichael Tuexen 			} else {
731010e0318aSMichael Tuexen 				return (min(mtu1, mtu2));
731110e0318aSMichael Tuexen 			}
731210e0318aSMichael Tuexen 		} else {
731310e0318aSMichael Tuexen 			if (mtu3 > 0) {
731410e0318aSMichael Tuexen 				return (min(mtu1, mtu3));
731510e0318aSMichael Tuexen 			} else {
731610e0318aSMichael Tuexen 				return (mtu1);
731710e0318aSMichael Tuexen 			}
731810e0318aSMichael Tuexen 		}
731910e0318aSMichael Tuexen 	} else {
732010e0318aSMichael Tuexen 		if (mtu2 > 0) {
732110e0318aSMichael Tuexen 			if (mtu3 > 0) {
732210e0318aSMichael Tuexen 				return (min(mtu2, mtu3));
732310e0318aSMichael Tuexen 			} else {
732410e0318aSMichael Tuexen 				return (mtu2);
732510e0318aSMichael Tuexen 			}
732610e0318aSMichael Tuexen 		} else {
732710e0318aSMichael Tuexen 			return (mtu3);
732810e0318aSMichael Tuexen 		}
732910e0318aSMichael Tuexen 	}
733010e0318aSMichael Tuexen }
733110e0318aSMichael Tuexen 
733210e0318aSMichael Tuexen void
733310e0318aSMichael Tuexen sctp_hc_set_mtu(union sctp_sockstore *addr, uint16_t fibnum, uint32_t mtu)
733410e0318aSMichael Tuexen {
733510e0318aSMichael Tuexen 	struct in_conninfo inc;
733610e0318aSMichael Tuexen 
733710e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
733810e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
733910e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
734010e0318aSMichael Tuexen #ifdef INET
734110e0318aSMichael Tuexen 	case AF_INET:
734210e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
734310e0318aSMichael Tuexen 		break;
734410e0318aSMichael Tuexen #endif
734510e0318aSMichael Tuexen #ifdef INET6
734610e0318aSMichael Tuexen 	case AF_INET6:
734710e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
734810e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
734910e0318aSMichael Tuexen 		break;
735010e0318aSMichael Tuexen #endif
735110e0318aSMichael Tuexen 	default:
735210e0318aSMichael Tuexen 		return;
735310e0318aSMichael Tuexen 	}
735410e0318aSMichael Tuexen 	tcp_hc_updatemtu(&inc, (u_long)mtu);
735510e0318aSMichael Tuexen }
735610e0318aSMichael Tuexen 
735710e0318aSMichael Tuexen uint32_t
7358b0471b4bSMichael Tuexen sctp_hc_get_mtu(union sctp_sockstore *addr, uint16_t fibnum)
7359b0471b4bSMichael Tuexen {
736010e0318aSMichael Tuexen 	struct in_conninfo inc;
736110e0318aSMichael Tuexen 
736210e0318aSMichael Tuexen 	memset(&inc, 0, sizeof(struct in_conninfo));
736310e0318aSMichael Tuexen 	inc.inc_fibnum = fibnum;
736410e0318aSMichael Tuexen 	switch (addr->sa.sa_family) {
736510e0318aSMichael Tuexen #ifdef INET
736610e0318aSMichael Tuexen 	case AF_INET:
736710e0318aSMichael Tuexen 		inc.inc_faddr = addr->sin.sin_addr;
736810e0318aSMichael Tuexen 		break;
736910e0318aSMichael Tuexen #endif
737010e0318aSMichael Tuexen #ifdef INET6
737110e0318aSMichael Tuexen 	case AF_INET6:
737210e0318aSMichael Tuexen 		inc.inc_flags |= INC_ISIPV6;
737310e0318aSMichael Tuexen 		inc.inc6_faddr = addr->sin6.sin6_addr;
737410e0318aSMichael Tuexen 		break;
737510e0318aSMichael Tuexen #endif
737610e0318aSMichael Tuexen 	default:
737710e0318aSMichael Tuexen 		return (0);
737810e0318aSMichael Tuexen 	}
737910e0318aSMichael Tuexen 	return ((uint32_t)tcp_hc_getmtu(&inc));
738010e0318aSMichael Tuexen }
73816ef849e6SMichael Tuexen 
73821a0b0216SMichael Tuexen void
73831a0b0216SMichael Tuexen sctp_set_state(struct sctp_tcb *stcb, int new_state)
73841a0b0216SMichael Tuexen {
73851e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
73861e88cc8bSMichael Tuexen 	int old_state = stcb->asoc.state;
73871e88cc8bSMichael Tuexen #endif
73881e88cc8bSMichael Tuexen 
73891a0b0216SMichael Tuexen 	KASSERT((new_state & ~SCTP_STATE_MASK) == 0,
73901a0b0216SMichael Tuexen 	    ("sctp_set_state: Can't set substate (new_state = %x)",
73911a0b0216SMichael Tuexen 	    new_state));
73921a0b0216SMichael Tuexen 	stcb->asoc.state = (stcb->asoc.state & ~SCTP_STATE_MASK) | new_state;
73931a0b0216SMichael Tuexen 	if ((new_state == SCTP_STATE_SHUTDOWN_RECEIVED) ||
73941a0b0216SMichael Tuexen 	    (new_state == SCTP_STATE_SHUTDOWN_SENT) ||
73951a0b0216SMichael Tuexen 	    (new_state == SCTP_STATE_SHUTDOWN_ACK_SENT)) {
73961a0b0216SMichael Tuexen 		SCTP_CLEAR_SUBSTATE(stcb, SCTP_STATE_SHUTDOWN_PENDING);
73971a0b0216SMichael Tuexen 	}
73981e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
73991e88cc8bSMichael Tuexen 	if (((old_state & SCTP_STATE_MASK) != new_state) &&
74001e88cc8bSMichael Tuexen 	    !(((old_state & SCTP_STATE_MASK) == SCTP_STATE_EMPTY) &&
74011e88cc8bSMichael Tuexen 	    (new_state == SCTP_STATE_INUSE))) {
74021e88cc8bSMichael Tuexen 		SCTP_PROBE6(state__change, NULL, stcb, NULL, stcb, NULL, old_state);
74031e88cc8bSMichael Tuexen 	}
74041e88cc8bSMichael Tuexen #endif
74051a0b0216SMichael Tuexen }
74061a0b0216SMichael Tuexen 
74071a0b0216SMichael Tuexen void
74081a0b0216SMichael Tuexen sctp_add_substate(struct sctp_tcb *stcb, int substate)
74091a0b0216SMichael Tuexen {
74101e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
74111e88cc8bSMichael Tuexen 	int old_state = stcb->asoc.state;
74121e88cc8bSMichael Tuexen #endif
74131e88cc8bSMichael Tuexen 
74141a0b0216SMichael Tuexen 	KASSERT((substate & SCTP_STATE_MASK) == 0,
74151a0b0216SMichael Tuexen 	    ("sctp_add_substate: Can't set state (substate = %x)",
74161a0b0216SMichael Tuexen 	    substate));
74171a0b0216SMichael Tuexen 	stcb->asoc.state |= substate;
74181e88cc8bSMichael Tuexen #if defined(KDTRACE_HOOKS)
74191e88cc8bSMichael Tuexen 	if (((substate & SCTP_STATE_ABOUT_TO_BE_FREED) &&
74201e88cc8bSMichael Tuexen 	    ((old_state & SCTP_STATE_ABOUT_TO_BE_FREED) == 0)) ||
74211e88cc8bSMichael Tuexen 	    ((substate & SCTP_STATE_SHUTDOWN_PENDING) &&
74221e88cc8bSMichael Tuexen 	    ((old_state & SCTP_STATE_SHUTDOWN_PENDING) == 0))) {
74231e88cc8bSMichael Tuexen 		SCTP_PROBE6(state__change, NULL, stcb, NULL, stcb, NULL, old_state);
74241e88cc8bSMichael Tuexen 	}
74251e88cc8bSMichael Tuexen #endif
74261a0b0216SMichael Tuexen }
7427