sys/netinet/sctp_timer.c

   1 /*-
   2  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
   3  * Copyright (c) 2008-2011, by Randall Stewart. All rights reserved.
   4  * Copyright (c) 2008-2011, by Michael Tuexen. All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions are met:
   8  *
   9  * a) Redistributions of source code must retain the above copyright notice,
  10  *   this list of conditions and the following disclaimer.
  11  *
  12  * b) Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in
  14  *   the documentation and/or other materials provided with the distribution.
  15  *
  16  * c) Neither the name of Cisco Systems, Inc. nor the names of its
  17  *    contributors may be used to endorse or promote products derived
  18  *    from this software without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  22  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  24  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  30  * THE POSSIBILITY OF SUCH DAMAGE.
  31  */
  32
  33 /* $KAME: sctp_timer.c,v 1.29 2005/03/06 16:04:18 itojun Exp $   */
  34
  35 #include <sys/cdefs.h>
  36 __FBSDID("$FreeBSD$");
  37
  38 #define _IP_VHL
  39 #include <netinet/sctp_os.h>
  40 #include <netinet/sctp_pcb.h>
  41 #ifdef INET6
  42 #endif
  43 #include <netinet/sctp_var.h>
  44 #include <netinet/sctp_sysctl.h>
  45 #include <netinet/sctp_timer.h>
  46 #include <netinet/sctputil.h>
  47 #include <netinet/sctp_output.h>
  48 #include <netinet/sctp_header.h>
  49 #include <netinet/sctp_indata.h>
  50 #include <netinet/sctp_asconf.h>
  51 #include <netinet/sctp_input.h>
  52 #include <netinet/sctp.h>
  53 #include <netinet/sctp_uio.h>
  54 #include <netinet/udp.h>
  55
  56
  57 void
  58 sctp_early_fr_timer(struct sctp_inpcb *inp,
  59     struct sctp_tcb *stcb,
  60     struct sctp_nets *net)
  61 {
  62         struct sctp_tmit_chunk *chk, *pchk;
  63         struct timeval now, min_wait, tv;
  64         unsigned int cur_rto, cnt = 0, cnt_resend = 0;
  65
  66         /* an early FR is occuring. */
  67         (void)SCTP_GETTIME_TIMEVAL(&now);
  68         /* get cur rto in micro-seconds */
  69         if (net->lastsa == 0) {
  70                 /* Hmm no rtt estimate yet? */
  71                 cur_rto = stcb->asoc.initial_rto >> 2;
  72         } else {
  73
  74                 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
  75         }
  76         if (cur_rto < SCTP_BASE_SYSCTL(sctp_early_fr_msec)) {
  77                 cur_rto = SCTP_BASE_SYSCTL(sctp_early_fr_msec);
  78         }
  79         cur_rto *= 1000;
  80         tv.tv_sec = cur_rto / 1000000;
  81         tv.tv_usec = cur_rto % 1000000;
  82         min_wait = now;
  83         timevalsub(&min_wait, &tv);
  84         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
  85                 /*
  86                  * if we hit here, we don't have enough seconds on the clock
  87                  * to account for the RTO. We just let the lower seconds be
  88                  * the bounds and don't worry about it. This may mean we
  89                  * will mark a lot more than we should.
  90                  */
  91                 min_wait.tv_sec = min_wait.tv_usec = 0;
  92         }
  93         TAILQ_FOREACH_REVERSE_SAFE(chk, &stcb->asoc.sent_queue, sctpchunk_listhead, sctp_next, pchk) {
  94                 if (chk->whoTo != net) {
  95                         continue;
  96                 }
  97                 if (chk->sent == SCTP_DATAGRAM_RESEND)
  98                         cnt_resend++;
  99                 else if ((chk->sent > SCTP_DATAGRAM_UNSENT) &&
 100                     (chk->sent < SCTP_DATAGRAM_RESEND)) {
 101                         /* pending, may need retran */
 102                         if (chk->sent_rcv_time.tv_sec > min_wait.tv_sec) {
 103                                 /*
 104                                  * we have reached a chunk that was sent
 105                                  * some seconds past our min.. forget it we
 106                                  * will find no more to send.
 107                                  */
 108                                 continue;
 109                         } else if (chk->sent_rcv_time.tv_sec == min_wait.tv_sec) {
 110                                 /*
 111                                  * we must look at the micro seconds to
 112                                  * know.
 113                                  */
 114                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
 115                                         /*
 116                                          * ok it was sent after our boundary
 117                                          * time.
 118                                          */
 119                                         continue;
 120                                 }
 121                         }
 122                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_EARLYFR_LOGGING_ENABLE) {
 123                                 sctp_log_fr(chk->rec.data.TSN_seq, chk->snd_count,
 124                                     4, SCTP_FR_MARKED_EARLY);
 125                         }
 126                         SCTP_STAT_INCR(sctps_earlyfrmrkretrans);
 127                         chk->sent = SCTP_DATAGRAM_RESEND;
 128                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 129                         /* double book size since we are doing an early FR */
 130                         chk->book_size_scale++;
 131                         cnt += chk->send_size;
 132                         if ((cnt + net->flight_size) > net->cwnd) {
 133                                 /* Mark all we could possibly resend */
 134                                 break;
 135                         }
 136                 }
 137         }
 138         if (cnt) {
 139                 /*
 140                  * JRS - Use the congestion control given in the congestion
 141                  * control module
 142                  */
 143                 stcb->asoc.cc_functions.sctp_cwnd_update_after_fr_timer(inp, stcb, net);
 144         } else if (cnt_resend) {
 145                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_EARLY_FR_TMR, SCTP_SO_NOT_LOCKED);
 146         }
 147         /* Restart it? */
 148         if (net->flight_size < net->cwnd) {
 149                 SCTP_STAT_INCR(sctps_earlyfrstrtmr);
 150                 sctp_timer_start(SCTP_TIMER_TYPE_EARLYFR, stcb->sctp_ep, stcb, net);
 151         }
 152 }
 153
 154 void
 155 sctp_audit_retranmission_queue(struct sctp_association *asoc)
 156 {
 157         struct sctp_tmit_chunk *chk;
 158
 159         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
 160             asoc->sent_queue_retran_cnt,
 161             asoc->sent_queue_cnt);
 162         asoc->sent_queue_retran_cnt = 0;
 163         asoc->sent_queue_cnt = 0;
 164         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
 165                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 166                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
 167                 }
 168                 asoc->sent_queue_cnt++;
 169         }
 170         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
 171                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 172                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
 173                 }
 174         }
 175         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
 176                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 177                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
 178                 }
 179         }
 180         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
 181             asoc->sent_queue_retran_cnt,
 182             asoc->sent_queue_cnt);
 183 }
 184
 185 int
 186 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
 187     struct sctp_nets *net, uint16_t threshold)
 188 {
 189         if (net) {
 190                 net->error_count++;
 191                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
 192                     net, net->error_count,
 193                     net->failure_threshold);
 194                 if (net->error_count > net->failure_threshold) {
 195                         /* We had a threshold failure */
 196                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
 197                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
 198                                 net->dest_state |= SCTP_ADDR_NOT_REACHABLE;
 199                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
 200                                 if (net == stcb->asoc.primary_destination) {
 201                                         net->dest_state |= SCTP_ADDR_WAS_PRIMARY;
 202                                 }
 203                                 /*
 204                                  * JRS 5/14/07 - If a destination is
 205                                  * unreachable, the PF bit is turned off.
 206                                  * This allows an unambiguous use of the PF
 207                                  * bit for destinations that are reachable
 208                                  * but potentially failed. If the
 209                                  * destination is set to the unreachable
 210                                  * state, also set the destination to the PF
 211                                  * state.
 212                                  */
 213                                 /*
 214                                  * Add debug message here if destination is
 215                                  * not in PF state.
 216                                  */
 217                                 /* Stop any running T3 timers here? */
 218                                 if ((stcb->asoc.sctp_cmt_on_off > 0) &&
 219                                     (stcb->asoc.sctp_cmt_pf > 0)) {
 220                                         net->dest_state &= ~SCTP_ADDR_PF;
 221                                         SCTPDBG(SCTP_DEBUG_TIMER4, "Destination %p moved from PF to unreachable.\n",
 222                                             net);
 223                                 }
 224                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
 225                                     stcb,
 226                                     SCTP_FAILED_THRESHOLD,
 227                                     (void *)net, SCTP_SO_NOT_LOCKED);
 228                         }
 229                 }
 230                 /*********HOLD THIS COMMENT FOR PATCH OF ALTERNATE
 231                  *********ROUTING CODE
 232                  */
 233                 /*********HOLD THIS COMMENT FOR END OF PATCH OF ALTERNATE
 234                  *********ROUTING CODE
 235                  */
 236         }
 237         if (stcb == NULL)
 238                 return (0);
 239
 240         if (net) {
 241                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
 242                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 243                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
 244                                     stcb->asoc.overall_error_count,
 245                                     (stcb->asoc.overall_error_count + 1),
 246                                     SCTP_FROM_SCTP_TIMER,
 247                                     __LINE__);
 248                         }
 249                         stcb->asoc.overall_error_count++;
 250                 }
 251         } else {
 252                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 253                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
 254                             stcb->asoc.overall_error_count,
 255                             (stcb->asoc.overall_error_count + 1),
 256                             SCTP_FROM_SCTP_TIMER,
 257                             __LINE__);
 258                 }
 259                 stcb->asoc.overall_error_count++;
 260         }
 261         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
 262             &stcb->asoc, stcb->asoc.overall_error_count,
 263             (uint32_t) threshold,
 264             ((net == NULL) ? (uint32_t) 0 : (uint32_t) net->dest_state));
 265         /*
 266          * We specifically do not do >= to give the assoc one more change
 267          * before we fail it.
 268          */
 269         if (stcb->asoc.overall_error_count > threshold) {
 270                 /* Abort notification sends a ULP notify */
 271                 struct mbuf *oper;
 272
 273                 oper = sctp_get_mbuf_for_msg((sizeof(struct sctp_paramhdr) + sizeof(uint32_t)),
 274                     0, M_DONTWAIT, 1, MT_DATA);
 275                 if (oper) {
 276                         struct sctp_paramhdr *ph;
 277                         uint32_t *ippp;
 278
 279                         SCTP_BUF_LEN(oper) = sizeof(struct sctp_paramhdr) +
 280                             sizeof(uint32_t);
 281                         ph = mtod(oper, struct sctp_paramhdr *);
 282                         ph->param_type = htons(SCTP_CAUSE_PROTOCOL_VIOLATION);
 283                         ph->param_length = htons(SCTP_BUF_LEN(oper));
 284                         ippp = (uint32_t *) (ph + 1);
 285                         *ippp = htonl(SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
 286                 }
 287                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_1;
 288                 sctp_abort_an_association(inp, stcb, SCTP_FAILED_THRESHOLD, oper, SCTP_SO_NOT_LOCKED);
 289                 return (1);
 290         }
 291         return (0);
 292 }
 293
 294 /*
 295  * sctp_find_alternate_net() returns a non-NULL pointer as long
 296  * the argument net is non-NULL.
 297  */
 298 struct sctp_nets *
 299 sctp_find_alternate_net(struct sctp_tcb *stcb,
 300     struct sctp_nets *net,
 301     int mode)
 302 {
 303         /* Find and return an alternate network if possible */
 304         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
 305         int once;
 306
 307         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
 308         int min_errors = -1;
 309         uint32_t max_cwnd = 0;
 310
 311         if (stcb->asoc.numnets == 1) {
 312                 /* No others but net */
 313                 return (TAILQ_FIRST(&stcb->asoc.nets));
 314         }
 315         /*
 316          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
 317          * net algorithm. This algorithm chooses the active destination (not
 318          * in PF state) with the largest cwnd value. If all destinations are
 319          * in PF state, unreachable, or unconfirmed, choose the desination
 320          * that is in PF state with the lowest error count. In case of a
 321          * tie, choose the destination that was most recently active.
 322          */
 323         if (mode == 2) {
 324                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 325                         /*
 326                          * JRS 5/14/07 - If the destination is unreachable
 327                          * or unconfirmed, skip it.
 328                          */
 329                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 330                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 331                                 continue;
 332                         }
 333                         /*
 334                          * JRS 5/14/07 -  If the destination is reachable
 335                          * but in PF state, compare the error count of the
 336                          * destination to the minimum error count seen thus
 337                          * far. Store the destination with the lower error
 338                          * count.  If the error counts are equal, store the
 339                          * destination that was most recently active.
 340                          */
 341                         if (mnet->dest_state & SCTP_ADDR_PF) {
 342                                 /*
 343                                  * JRS 5/14/07 - If the destination under
 344                                  * consideration is the current destination,
 345                                  * work as if the error count is one higher.
 346                                  * The actual error count will not be
 347                                  * incremented until later in the t3
 348                                  * handler.
 349                                  */
 350                                 if (mnet == net) {
 351                                         if (min_errors == -1) {
 352                                                 min_errors = mnet->error_count + 1;
 353                                                 min_errors_net = mnet;
 354                                         } else if (mnet->error_count + 1 < min_errors) {
 355                                                 min_errors = mnet->error_count + 1;
 356                                                 min_errors_net = mnet;
 357                                         } else if (mnet->error_count + 1 == min_errors
 358                                             && mnet->last_active > min_errors_net->last_active) {
 359                                                 min_errors_net = mnet;
 360                                                 min_errors = mnet->error_count + 1;
 361                                         }
 362                                         continue;
 363                                 } else {
 364                                         if (min_errors == -1) {
 365                                                 min_errors = mnet->error_count;
 366                                                 min_errors_net = mnet;
 367                                         } else if (mnet->error_count < min_errors) {
 368                                                 min_errors = mnet->error_count;
 369                                                 min_errors_net = mnet;
 370                                         } else if (mnet->error_count == min_errors
 371                                             && mnet->last_active > min_errors_net->last_active) {
 372                                                 min_errors_net = mnet;
 373                                                 min_errors = mnet->error_count;
 374                                         }
 375                                         continue;
 376                                 }
 377                         }
 378                         /*
 379                          * JRS 5/14/07 - If the destination is reachable and
 380                          * not in PF state, compare the cwnd of the
 381                          * destination to the highest cwnd seen thus far.
 382                          * Store the destination with the higher cwnd value.
 383                          * If the cwnd values are equal, randomly choose one
 384                          * of the two destinations.
 385                          */
 386                         if (max_cwnd < mnet->cwnd) {
 387                                 max_cwnd_net = mnet;
 388                                 max_cwnd = mnet->cwnd;
 389                         } else if (max_cwnd == mnet->cwnd) {
 390                                 uint32_t rndval;
 391                                 uint8_t this_random;
 392
 393                                 if (stcb->asoc.hb_random_idx > 3) {
 394                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 395                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
 396                                         this_random = stcb->asoc.hb_random_values[0];
 397                                         stcb->asoc.hb_random_idx++;
 398                                         stcb->asoc.hb_ect_randombit = 0;
 399                                 } else {
 400                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 401                                         stcb->asoc.hb_random_idx++;
 402                                         stcb->asoc.hb_ect_randombit = 0;
 403                                 }
 404                                 if (this_random % 2 == 1) {
 405                                         max_cwnd_net = mnet;
 406                                         max_cwnd = mnet->cwnd;  /* Useless? */
 407                                 }
 408                         }
 409                 }
 410                 /*
 411                  * JRS 5/14/07 - After all destination have been considered
 412                  * as alternates, check to see if there was some active
 413                  * destination (not in PF state).  If not, check to see if
 414                  * there was some PF destination with the minimum number of
 415                  * errors.  If not, return the original destination.  If
 416                  * there is a min_errors_net, remove the PF flag from that
 417                  * destination, set the cwnd to one or two MTUs, and return
 418                  * the destination as an alt. If there was some active
 419                  * destination with a highest cwnd, return the destination
 420                  * as an alt.
 421                  */
 422                 if (max_cwnd_net == NULL) {
 423                         if (min_errors_net == NULL) {
 424                                 return (net);
 425                         }
 426                         min_errors_net->dest_state &= ~SCTP_ADDR_PF;
 427                         min_errors_net->cwnd = min_errors_net->mtu * stcb->asoc.sctp_cmt_pf;
 428                         if (SCTP_OS_TIMER_PENDING(&min_errors_net->rxt_timer.timer)) {
 429                                 sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep,
 430                                     stcb, min_errors_net,
 431                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_2);
 432                         }
 433                         SCTPDBG(SCTP_DEBUG_TIMER4, "Destination %p moved from PF to active with %d errors.\n",
 434                             min_errors_net, min_errors_net->error_count);
 435                         return (min_errors_net);
 436                 } else {
 437                         return (max_cwnd_net);
 438                 }
 439         }
 440         /*
 441          * JRS 5/14/07 - If mode is set to 1, use the CMT policy for
 442          * choosing an alternate net.
 443          */
 444         else if (mode == 1) {
 445                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 446                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 447                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 448                                 /*
 449                                  * will skip ones that are not-reachable or
 450                                  * unconfirmed
 451                                  */
 452                                 continue;
 453                         }
 454                         if (max_cwnd < mnet->cwnd) {
 455                                 max_cwnd_net = mnet;
 456                                 max_cwnd = mnet->cwnd;
 457                         } else if (max_cwnd == mnet->cwnd) {
 458                                 uint32_t rndval;
 459                                 uint8_t this_random;
 460
 461                                 if (stcb->asoc.hb_random_idx > 3) {
 462                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 463                                         memcpy(stcb->asoc.hb_random_values, &rndval,
 464                                             sizeof(stcb->asoc.hb_random_values));
 465                                         this_random = stcb->asoc.hb_random_values[0];
 466                                         stcb->asoc.hb_random_idx = 0;
 467                                         stcb->asoc.hb_ect_randombit = 0;
 468                                 } else {
 469                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 470                                         stcb->asoc.hb_random_idx++;
 471                                         stcb->asoc.hb_ect_randombit = 0;
 472                                 }
 473                                 if (this_random % 2) {
 474                                         max_cwnd_net = mnet;
 475                                         max_cwnd = mnet->cwnd;
 476                                 }
 477                         }
 478                 }
 479                 if (max_cwnd_net) {
 480                         return (max_cwnd_net);
 481                 }
 482         }
 483         mnet = net;
 484         once = 0;
 485
 486         if (mnet == NULL) {
 487                 mnet = TAILQ_FIRST(&stcb->asoc.nets);
 488                 if (mnet == NULL) {
 489                         return (NULL);
 490                 }
 491         }
 492         do {
 493                 alt = TAILQ_NEXT(mnet, sctp_next);
 494                 if (alt == NULL) {
 495                         once++;
 496                         if (once > 1) {
 497                                 break;
 498                         }
 499                         alt = TAILQ_FIRST(&stcb->asoc.nets);
 500                         if (alt == NULL) {
 501                                 return (NULL);
 502                         }
 503                 }
 504                 if (alt->ro.ro_rt == NULL) {
 505                         if (alt->ro._s_addr) {
 506                                 sctp_free_ifa(alt->ro._s_addr);
 507                                 alt->ro._s_addr = NULL;
 508                         }
 509                         alt->src_addr_selected = 0;
 510                 }
 511                 /* sa_ignore NO_NULL_CHK */
 512                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
 513                     (alt->ro.ro_rt != NULL) &&
 514                     (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
 515                         /* Found a reachable address */
 516                         break;
 517                 }
 518                 mnet = alt;
 519         } while (alt != NULL);
 520
 521         if (alt == NULL) {
 522                 /* Case where NO insv network exists (dormant state) */
 523                 /* we rotate destinations */
 524                 once = 0;
 525                 mnet = net;
 526                 do {
 527                         if (mnet == NULL) {
 528                                 return (TAILQ_FIRST(&stcb->asoc.nets));
 529                         }
 530                         alt = TAILQ_NEXT(mnet, sctp_next);
 531                         if (alt == NULL) {
 532                                 once++;
 533                                 if (once > 1) {
 534                                         break;
 535                                 }
 536                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
 537                         }
 538                         /* sa_ignore NO_NULL_CHK */
 539                         if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
 540                             (alt != net)) {
 541                                 /* Found an alternate address */
 542                                 break;
 543                         }
 544                         mnet = alt;
 545                 } while (alt != NULL);
 546         }
 547         if (alt == NULL) {
 548                 return (net);
 549         }
 550         return (alt);
 551 }
 552
 553 static void
 554 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
 555     struct sctp_nets *net,
 556     int win_probe,
 557     int num_marked, int num_abandoned)
 558 {
 559         if (net->RTO == 0) {
 560                 net->RTO = stcb->asoc.minrto;
 561         }
 562         net->RTO <<= 1;
 563         if (net->RTO > stcb->asoc.maxrto) {
 564                 net->RTO = stcb->asoc.maxrto;
 565         }
 566         if ((win_probe == 0) && (num_marked || num_abandoned)) {
 567                 /* We don't apply penalty to window probe scenarios */
 568                 /* JRS - Use the congestion control given in the CC module */
 569                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
 570         }
 571 }
 572
 573 #ifndef INVARIANTS
 574 static void
 575 sctp_recover_sent_list(struct sctp_tcb *stcb)
 576 {
 577         struct sctp_tmit_chunk *chk, *nchk;
 578         struct sctp_association *asoc;
 579
 580         asoc = &stcb->asoc;
 581         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
 582                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.TSN_seq)) {
 583                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
 584                             chk, chk->rec.data.TSN_seq, asoc->last_acked_seq);
 585                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
 586                         if (chk->pr_sctp_on) {
 587                                 if (asoc->pr_sctp_cnt != 0)
 588                                         asoc->pr_sctp_cnt--;
 589                         }
 590                         if (chk->data) {
 591                                 /* sa_ignore NO_NULL_CHK */
 592                                 sctp_free_bufspace(stcb, asoc, chk, 1);
 593                                 sctp_m_freem(chk->data);
 594                                 chk->data = NULL;
 595                                 if (asoc->peer_supports_prsctp && PR_SCTP_BUF_ENABLED(chk->flags)) {
 596                                         asoc->sent_queue_cnt_removeable--;
 597                                 }
 598                         }
 599                         asoc->sent_queue_cnt--;
 600                         sctp_free_a_chunk(stcb, chk);
 601                 }
 602         }
 603         SCTP_PRINTF("after recover order is as follows\n");
 604         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
 605                 SCTP_PRINTF("chk:%p TSN:%x\n", chk, chk->rec.data.TSN_seq);
 606         }
 607 }
 608
 609 #endif
 610
 611 static int
 612 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
 613     struct sctp_nets *net,
 614     struct sctp_nets *alt,
 615     int window_probe,
 616     int *num_marked,
 617     int *num_abandoned)
 618 {
 619
 620         /*
 621          * Mark all chunks (well not all) that were sent to *net for
 622          * retransmission. Move them to alt for there destination as well...
 623          * We only mark chunks that have been outstanding long enough to
 624          * have received feed-back.
 625          */
 626         struct sctp_tmit_chunk *chk, *nchk;
 627         struct sctp_nets *lnets;
 628         struct timeval now, min_wait, tv;
 629         int cur_rto;
 630         int cnt_abandoned;
 631         int audit_tf, num_mk, fir;
 632         unsigned int cnt_mk;
 633         uint32_t orig_flight, orig_tf;
 634         uint32_t tsnlast, tsnfirst;
 635         int recovery_cnt = 0;
 636
 637
 638         /* none in flight now */
 639         audit_tf = 0;
 640         fir = 0;
 641         /*
 642          * figure out how long a data chunk must be pending before we can
 643          * mark it ..
 644          */
 645         (void)SCTP_GETTIME_TIMEVAL(&now);
 646         /* get cur rto in micro-seconds */
 647         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
 648         cur_rto *= 1000;
 649         if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 650                 sctp_log_fr(cur_rto,
 651                     stcb->asoc.peers_rwnd,
 652                     window_probe,
 653                     SCTP_FR_T3_MARK_TIME);
 654                 sctp_log_fr(net->flight_size,
 655                     SCTP_OS_TIMER_PENDING(&net->fr_timer.timer),
 656                     SCTP_OS_TIMER_ACTIVE(&net->fr_timer.timer),
 657                     SCTP_FR_CWND_REPORT);
 658                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
 659         }
 660         tv.tv_sec = cur_rto / 1000000;
 661         tv.tv_usec = cur_rto % 1000000;
 662         min_wait = now;
 663         timevalsub(&min_wait, &tv);
 664         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
 665                 /*
 666                  * if we hit here, we don't have enough seconds on the clock
 667                  * to account for the RTO. We just let the lower seconds be
 668                  * the bounds and don't worry about it. This may mean we
 669                  * will mark a lot more than we should.
 670                  */
 671                 min_wait.tv_sec = min_wait.tv_usec = 0;
 672         }
 673         if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 674                 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
 675                 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
 676         }
 677         /*
 678          * Our rwnd will be incorrect here since we are not adding back the
 679          * cnt * mbuf but we will fix that down below.
 680          */
 681         orig_flight = net->flight_size;
 682         orig_tf = stcb->asoc.total_flight;
 683
 684         net->fast_retran_ip = 0;
 685         /* Now on to each chunk */
 686         cnt_abandoned = 0;
 687         num_mk = cnt_mk = 0;
 688         tsnfirst = tsnlast = 0;
 689 #ifndef INVARIANTS
 690 start_again:
 691 #endif
 692         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
 693                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.TSN_seq)) {
 694                         /* Strange case our list got out of order? */
 695                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x",
 696                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.TSN_seq);
 697                         recovery_cnt++;
 698 #ifdef INVARIANTS
 699                         panic("last acked >= chk on sent-Q");
 700 #else
 701                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
 702                         sctp_recover_sent_list(stcb);
 703                         if (recovery_cnt < 10) {
 704                                 goto start_again;
 705                         } else {
 706                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
 707                         }
 708 #endif
 709                 }
 710                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
 711                         /*
 712                          * found one to mark: If it is less than
 713                          * DATAGRAM_ACKED it MUST not be a skipped or marked
 714                          * TSN but instead one that is either already set
 715                          * for retransmission OR one that needs
 716                          * retransmission.
 717                          */
 718
 719                         /* validate its been outstanding long enough */
 720                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 721                                 sctp_log_fr(chk->rec.data.TSN_seq,
 722                                     chk->sent_rcv_time.tv_sec,
 723                                     chk->sent_rcv_time.tv_usec,
 724                                     SCTP_FR_T3_MARK_TIME);
 725                         }
 726                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
 727                                 /*
 728                                  * we have reached a chunk that was sent
 729                                  * some seconds past our min.. forget it we
 730                                  * will find no more to send.
 731                                  */
 732                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 733                                         sctp_log_fr(0,
 734                                             chk->sent_rcv_time.tv_sec,
 735                                             chk->sent_rcv_time.tv_usec,
 736                                             SCTP_FR_T3_STOPPED);
 737                                 }
 738                                 continue;
 739                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
 740                             (window_probe == 0)) {
 741                                 /*
 742                                  * we must look at the micro seconds to
 743                                  * know.
 744                                  */
 745                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
 746                                         /*
 747                                          * ok it was sent after our boundary
 748                                          * time.
 749                                          */
 750                                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 751                                                 sctp_log_fr(0,
 752                                                     chk->sent_rcv_time.tv_sec,
 753                                                     chk->sent_rcv_time.tv_usec,
 754                                                     SCTP_FR_T3_STOPPED);
 755                                         }
 756                                         continue;
 757                                 }
 758                         }
 759                         if (stcb->asoc.peer_supports_prsctp && PR_SCTP_TTL_ENABLED(chk->flags)) {
 760                                 /* Is it expired? */
 761                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
 762                                         /* Yes so drop it */
 763                                         if (chk->data) {
 764                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 765                                                     chk,
 766                                                     (SCTP_RESPONSE_TO_USER_REQ | SCTP_NOTIFY_DATAGRAM_SENT),
 767                                                     SCTP_SO_NOT_LOCKED);
 768                                                 cnt_abandoned++;
 769                                         }
 770                                         continue;
 771                                 }
 772                         }
 773                         if (stcb->asoc.peer_supports_prsctp && PR_SCTP_RTX_ENABLED(chk->flags)) {
 774                                 /* Has it been retransmitted tv_sec times? */
 775                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
 776                                         if (chk->data) {
 777                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 778                                                     chk,
 779                                                     (SCTP_RESPONSE_TO_USER_REQ | SCTP_NOTIFY_DATAGRAM_SENT),
 780                                                     SCTP_SO_NOT_LOCKED);
 781                                                 cnt_abandoned++;
 782                                         }
 783                                         continue;
 784                                 }
 785                         }
 786                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 787                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 788                                 num_mk++;
 789                                 if (fir == 0) {
 790                                         fir = 1;
 791                                         tsnfirst = chk->rec.data.TSN_seq;
 792                                 }
 793                                 tsnlast = chk->rec.data.TSN_seq;
 794                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 795                                         sctp_log_fr(chk->rec.data.TSN_seq, chk->snd_count,
 796                                             0, SCTP_FR_T3_MARKED);
 797                                 }
 798                                 if (chk->rec.data.chunk_was_revoked) {
 799                                         /* deflate the cwnd */
 800                                         chk->whoTo->cwnd -= chk->book_size;
 801                                         chk->rec.data.chunk_was_revoked = 0;
 802                                 }
 803                                 net->marked_retrans++;
 804                                 stcb->asoc.marked_retrans++;
 805                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 806                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
 807                                             chk->whoTo->flight_size,
 808                                             chk->book_size,
 809                                             (uintptr_t) chk->whoTo,
 810                                             chk->rec.data.TSN_seq);
 811                                 }
 812                                 sctp_flight_size_decrease(chk);
 813                                 sctp_total_flight_decrease(stcb, chk);
 814                                 stcb->asoc.peers_rwnd += chk->send_size;
 815                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
 816                         }
 817                         chk->sent = SCTP_DATAGRAM_RESEND;
 818                         SCTP_STAT_INCR(sctps_markedretrans);
 819
 820                         /* reset the TSN for striking and other FR stuff */
 821                         chk->rec.data.doing_fast_retransmit = 0;
 822                         /* Clear any time so NO RTT is being done */
 823                         chk->do_rtt = 0;
 824                         if (alt != net) {
 825                                 sctp_free_remote_addr(chk->whoTo);
 826                                 chk->no_fr_allowed = 1;
 827                                 chk->whoTo = alt;
 828                                 atomic_add_int(&alt->ref_count, 1);
 829                         } else {
 830                                 chk->no_fr_allowed = 0;
 831                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
 832                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
 833                                 } else {
 834                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.TSN_seq;
 835                                 }
 836                         }
 837                         /*
 838                          * CMT: Do not allow FRs on retransmitted TSNs.
 839                          */
 840                         if (stcb->asoc.sctp_cmt_on_off > 0) {
 841                                 chk->no_fr_allowed = 1;
 842                         }
 843 #ifdef THIS_SHOULD_NOT_BE_DONE
 844                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
 845                         /* remember highest acked one */
 846                         could_be_sent = chk;
 847 #endif
 848                 }
 849                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 850                         cnt_mk++;
 851                 }
 852         }
 853         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
 854                 /* we did not subtract the same things? */
 855                 audit_tf = 1;
 856         }
 857         if (SCTP_BASE_SYSCTL(sctp_logging_level) & (SCTP_EARLYFR_LOGGING_ENABLE | SCTP_FR_LOGGING_ENABLE)) {
 858                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
 859         }
 860 #ifdef SCTP_DEBUG
 861         if (num_mk) {
 862                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
 863                     tsnlast);
 864                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%ld\n",
 865                     num_mk, (u_long)stcb->asoc.peers_rwnd);
 866                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
 867                     tsnlast);
 868                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%d\n",
 869                     num_mk,
 870                     (int)stcb->asoc.peers_rwnd);
 871         }
 872 #endif
 873         *num_marked = num_mk;
 874         *num_abandoned = cnt_abandoned;
 875         /*
 876          * Now check for a ECN Echo that may be stranded And include the
 877          * cnt_mk'd to have all resends in the control queue.
 878          */
 879         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
 880                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 881                         cnt_mk++;
 882                 }
 883                 if ((chk->whoTo == net) &&
 884                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
 885                         sctp_free_remote_addr(chk->whoTo);
 886                         chk->whoTo = alt;
 887                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
 888                                 chk->sent = SCTP_DATAGRAM_RESEND;
 889                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 890                                 cnt_mk++;
 891                         }
 892                         atomic_add_int(&alt->ref_count, 1);
 893                 }
 894         }
 895 #ifdef THIS_SHOULD_NOT_BE_DONE
 896         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
 897                 /* fix it so we retransmit the highest acked anyway */
 898                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 899                 cnt_mk++;
 900                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
 901         }
 902 #endif
 903         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
 904 #ifdef INVARIANTS
 905                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
 906                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
 907 #endif
 908 #ifndef SCTP_AUDITING_ENABLED
 909                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
 910 #endif
 911         }
 912         if (audit_tf) {
 913                 SCTPDBG(SCTP_DEBUG_TIMER4,
 914                     "Audit total flight due to negative value net:%p\n",
 915                     net);
 916                 stcb->asoc.total_flight = 0;
 917                 stcb->asoc.total_flight_count = 0;
 918                 /* Clear all networks flight size */
 919                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
 920                         lnets->flight_size = 0;
 921                         SCTPDBG(SCTP_DEBUG_TIMER4,
 922                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
 923                             lnets, lnets->cwnd, lnets->ssthresh);
 924                 }
 925                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
 926                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 927                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 928                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
 929                                             chk->whoTo->flight_size,
 930                                             chk->book_size,
 931                                             (uintptr_t) chk->whoTo,
 932                                             chk->rec.data.TSN_seq);
 933                                 }
 934                                 sctp_flight_size_increase(chk);
 935                                 sctp_total_flight_increase(stcb, chk);
 936                         }
 937                 }
 938         }
 939         /* We return 1 if we only have a window probe outstanding */
 940         return (0);
 941 }
 942
 943
 944 int
 945 sctp_t3rxt_timer(struct sctp_inpcb *inp,
 946     struct sctp_tcb *stcb,
 947     struct sctp_nets *net)
 948 {
 949         struct sctp_nets *alt;
 950         int win_probe, num_mk, num_abandoned;
 951
 952         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 953                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
 954         }
 955         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
 956                 struct sctp_nets *lnet;
 957
 958                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
 959                         if (net == lnet) {
 960                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
 961                         } else {
 962                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
 963                         }
 964                 }
 965         }
 966         /* Find an alternate and mark those for retransmission */
 967         if ((stcb->asoc.peers_rwnd == 0) &&
 968             (stcb->asoc.total_flight < net->mtu)) {
 969                 SCTP_STAT_INCR(sctps_timowindowprobe);
 970                 win_probe = 1;
 971         } else {
 972                 win_probe = 0;
 973         }
 974
 975         /*
 976          * JRS 5/14/07 - If CMT PF is on and the destination if not already
 977          * in PF state, set the destination to PF state and store the
 978          * current time as the time that the destination was last active. In
 979          * addition, find an alternate destination with PF-based
 980          * find_alt_net().
 981          */
 982         if ((stcb->asoc.sctp_cmt_on_off > 0) &&
 983             (stcb->asoc.sctp_cmt_pf > 0)) {
 984                 if ((net->dest_state & SCTP_ADDR_PF) != SCTP_ADDR_PF) {
 985                         net->dest_state |= SCTP_ADDR_PF;
 986                         net->last_active = sctp_get_tick_count();
 987                         SCTPDBG(SCTP_DEBUG_TIMER4, "Destination %p moved from active to PF.\n",
 988                             net);
 989                 }
 990                 alt = sctp_find_alternate_net(stcb, net, 2);
 991         } else if (stcb->asoc.sctp_cmt_on_off > 0) {
 992                 /*
 993                  * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is being
 994                  * used, then pick dest with largest ssthresh for any
 995                  * retransmission.
 996                  */
 997                 alt = sctp_find_alternate_net(stcb, net, 1);
 998                 /*
 999                  * CUCv2: If a different dest is picked for the
1000                  * retransmission, then new (rtx-)pseudo_cumack needs to be
1001                  * tracked for orig dest. Let CUCv2 track new (rtx-)
1002                  * pseudo-cumack always.
1003                  */
1004                 net->find_pseudo_cumack = 1;
1005                 net->find_rtx_pseudo_cumack = 1;
1006         } else {                /* CMT is OFF */
1007                 alt = sctp_find_alternate_net(stcb, net, 0);
1008         }
1009         num_mk = 0;
1010         num_abandoned = 0;
1011         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
1012             &num_mk, &num_abandoned);
1013         /* FR Loss recovery just ended with the T3. */
1014         stcb->asoc.fast_retran_loss_recovery = 0;
1015
1016         /* CMT FR loss recovery ended with the T3 */
1017         net->fast_retran_loss_recovery = 0;
1018
1019         /*
1020          * setup the sat loss recovery that prevents satellite cwnd advance.
1021          */
1022         stcb->asoc.sat_t3_loss_recovery = 1;
1023         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
1024
1025         /* Backoff the timer and cwnd */
1026         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
1027         if (win_probe == 0) {
1028                 /* We don't do normal threshold management on window probes */
1029                 if (sctp_threshold_management(inp, stcb, net,
1030                     stcb->asoc.max_send_times)) {
1031                         /* Association was destroyed */
1032                         return (1);
1033                 } else {
1034                         if (net != stcb->asoc.primary_destination) {
1035                                 /* send a immediate HB if our RTO is stale */
1036                                 struct timeval now;
1037                                 unsigned int ms_goneby;
1038
1039                                 (void)SCTP_GETTIME_TIMEVAL(&now);
1040                                 if (net->last_sent_time.tv_sec) {
1041                                         ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
1042                                 } else {
1043                                         ms_goneby = 0;
1044                                 }
1045                                 if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
1046                                         /*
1047                                          * no recent feed back in an RTO or
1048                                          * more, request a RTT update
1049                                          */
1050                                         if (sctp_send_hb(stcb, 1, net) < 0)
1051                                                 /*
1052                                                  * Less than 0 means we lost
1053                                                  * the assoc
1054                                                  */
1055                                                 return (1);
1056                                 }
1057                         }
1058                 }
1059         } else {
1060                 /*
1061                  * For a window probe we don't penalize the net's but only
1062                  * the association. This may fail it if SACKs are not coming
1063                  * back. If sack's are coming with rwnd locked at 0, we will
1064                  * continue to hold things waiting for rwnd to raise
1065                  */
1066                 if (sctp_threshold_management(inp, stcb, NULL,
1067                     stcb->asoc.max_send_times)) {
1068                         /* Association was destroyed */
1069                         return (1);
1070                 }
1071         }
1072         if (net->dest_state & SCTP_ADDR_NOT_REACHABLE) {
1073                 /* Move all pending over too */
1074                 sctp_move_chunks_from_net(stcb, net);
1075
1076                 /*
1077                  * Get the address that failed, to force a new src address
1078                  * selecton and a route allocation.
1079                  */
1080                 if (net->ro._s_addr) {
1081                         sctp_free_ifa(net->ro._s_addr);
1082                         net->ro._s_addr = NULL;
1083                 }
1084                 net->src_addr_selected = 0;
1085
1086                 /* Force a route allocation too */
1087                 if (net->ro.ro_rt) {
1088                         RTFREE(net->ro.ro_rt);
1089                         net->ro.ro_rt = NULL;
1090                 }
1091                 /* Was it our primary? */
1092                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
1093                         /*
1094                          * Yes, note it as such and find an alternate note:
1095                          * this means HB code must use this to resent the
1096                          * primary if it goes active AND if someone does a
1097                          * change-primary then this flag must be cleared
1098                          * from any net structures.
1099                          */
1100                         if (sctp_set_primary_addr(stcb,
1101                             (struct sockaddr *)NULL,
1102                             alt) == 0) {
1103                                 net->dest_state |= SCTP_ADDR_WAS_PRIMARY;
1104                         }
1105                 }
1106         } else if ((stcb->asoc.sctp_cmt_on_off > 0) &&
1107                     (stcb->asoc.sctp_cmt_pf > 0) &&
1108             ((net->dest_state & SCTP_ADDR_PF) == SCTP_ADDR_PF)) {
1109                 /*
1110                  * JRS 5/14/07 - If the destination hasn't failed completely
1111                  * but is in PF state, a PF-heartbeat needs to be sent
1112                  * manually.
1113                  */
1114                 if (sctp_send_hb(stcb, 1, net) < 0)
1115                         /* Return less than 0 means we lost the association */
1116                         return (1);
1117         }
1118         /*
1119          * Special case for cookie-echo'ed case, we don't do output but must
1120          * await the COOKIE-ACK before retransmission
1121          */
1122         if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1123                 /*
1124                  * Here we just reset the timer and start again since we
1125                  * have not established the asoc
1126                  */
1127                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
1128                 return (0);
1129         }
1130         if (stcb->asoc.peer_supports_prsctp) {
1131                 struct sctp_tmit_chunk *lchk;
1132
1133                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
1134                 /* C3. See if we need to send a Fwd-TSN */
1135                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
1136                         send_forward_tsn(stcb, &stcb->asoc);
1137                         if (lchk) {
1138                                 /* Assure a timer is up */
1139                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
1140                         }
1141                 }
1142         }
1143         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
1144                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
1145         }
1146         return (0);
1147 }
1148
1149 int
1150 sctp_t1init_timer(struct sctp_inpcb *inp,
1151     struct sctp_tcb *stcb,
1152     struct sctp_nets *net)
1153 {
1154         /* bump the thresholds */
1155         if (stcb->asoc.delayed_connection) {
1156                 /*
1157                  * special hook for delayed connection. The library did NOT
1158                  * complete the rest of its sends.
1159                  */
1160                 stcb->asoc.delayed_connection = 0;
1161                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1162                 return (0);
1163         }
1164         if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) {
1165                 return (0);
1166         }
1167         if (sctp_threshold_management(inp, stcb, net,
1168             stcb->asoc.max_init_times)) {
1169                 /* Association was destroyed */
1170                 return (1);
1171         }
1172         stcb->asoc.dropped_special_cnt = 0;
1173         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1174         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1175                 net->RTO = stcb->asoc.initial_init_rto_max;
1176         }
1177         if (stcb->asoc.numnets > 1) {
1178                 /* If we have more than one addr use it */
1179                 struct sctp_nets *alt;
1180
1181                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1182                 if (alt != stcb->asoc.primary_destination) {
1183                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1184                         stcb->asoc.primary_destination = alt;
1185                 }
1186         }
1187         /* Send out a new init */
1188         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1189         return (0);
1190 }
1191
1192 /*
1193  * For cookie and asconf we actually need to find and mark for resend, then
1194  * increment the resend counter (after all the threshold management stuff of
1195  * course).
1196  */
1197 int
1198 sctp_cookie_timer(struct sctp_inpcb *inp,
1199     struct sctp_tcb *stcb,
1200     struct sctp_nets *net)
1201 {
1202         struct sctp_nets *alt;
1203         struct sctp_tmit_chunk *cookie;
1204
1205         /* first before all else we must find the cookie */
1206         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1207                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1208                         break;
1209                 }
1210         }
1211         if (cookie == NULL) {
1212                 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1213                         /* FOOBAR! */
1214                         struct mbuf *oper;
1215
1216                         oper = sctp_get_mbuf_for_msg((sizeof(struct sctp_paramhdr) + sizeof(uint32_t)),
1217                             0, M_DONTWAIT, 1, MT_DATA);
1218                         if (oper) {
1219                                 struct sctp_paramhdr *ph;
1220                                 uint32_t *ippp;
1221
1222                                 SCTP_BUF_LEN(oper) = sizeof(struct sctp_paramhdr) +
1223                                     sizeof(uint32_t);
1224                                 ph = mtod(oper, struct sctp_paramhdr *);
1225                                 ph->param_type = htons(SCTP_CAUSE_PROTOCOL_VIOLATION);
1226                                 ph->param_length = htons(SCTP_BUF_LEN(oper));
1227                                 ippp = (uint32_t *) (ph + 1);
1228                                 *ippp = htonl(SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
1229                         }
1230                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_4;
1231                         sctp_abort_an_association(inp, stcb, SCTP_INTERNAL_ERROR,
1232                             oper, SCTP_SO_NOT_LOCKED);
1233                 } else {
1234 #ifdef INVARIANTS
1235                         panic("Cookie timer expires in wrong state?");
1236 #else
1237                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc));
1238                         return (0);
1239 #endif
1240                 }
1241                 return (0);
1242         }
1243         /* Ok we found the cookie, threshold management next */
1244         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1245             stcb->asoc.max_init_times)) {
1246                 /* Assoc is over */
1247                 return (1);
1248         }
1249         /*
1250          * cleared theshold management now lets backoff the address & select
1251          * an alternate
1252          */
1253         stcb->asoc.dropped_special_cnt = 0;
1254         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1255         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1256         if (alt != cookie->whoTo) {
1257                 sctp_free_remote_addr(cookie->whoTo);
1258                 cookie->whoTo = alt;
1259                 atomic_add_int(&alt->ref_count, 1);
1260         }
1261         /* Now mark the retran info */
1262         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1263                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1264         }
1265         cookie->sent = SCTP_DATAGRAM_RESEND;
1266         /*
1267          * Now call the output routine to kick out the cookie again, Note we
1268          * don't mark any chunks for retran so that FR will need to kick in
1269          * to move these (or a send timer).
1270          */
1271         return (0);
1272 }
1273
1274 int
1275 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1276     struct sctp_nets *net)
1277 {
1278         struct sctp_nets *alt;
1279         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1280
1281         if (stcb->asoc.stream_reset_outstanding == 0) {
1282                 return (0);
1283         }
1284         /* find the existing STRRESET, we use the seq number we sent out on */
1285         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1286         if (strrst == NULL) {
1287                 return (0);
1288         }
1289         /* do threshold management */
1290         if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1291             stcb->asoc.max_send_times)) {
1292                 /* Assoc is over */
1293                 return (1);
1294         }
1295         /*
1296          * cleared theshold management now lets backoff the address & select
1297          * an alternate
1298          */
1299         sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1300         alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1301         sctp_free_remote_addr(strrst->whoTo);
1302         strrst->whoTo = alt;
1303         atomic_add_int(&alt->ref_count, 1);
1304
1305         /* See if a ECN Echo is also stranded */
1306         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1307                 if ((chk->whoTo == net) &&
1308                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1309                         sctp_free_remote_addr(chk->whoTo);
1310                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1311                                 chk->sent = SCTP_DATAGRAM_RESEND;
1312                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1313                         }
1314                         chk->whoTo = alt;
1315                         atomic_add_int(&alt->ref_count, 1);
1316                 }
1317         }
1318         if (net->dest_state & SCTP_ADDR_NOT_REACHABLE) {
1319                 /*
1320                  * If the address went un-reachable, we need to move to
1321                  * alternates for ALL chk's in queue
1322                  */
1323                 sctp_move_chunks_from_net(stcb, net);
1324         }
1325         /* mark the retran info */
1326         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1327                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1328         strrst->sent = SCTP_DATAGRAM_RESEND;
1329
1330         /* restart the timer */
1331         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1332         return (0);
1333 }
1334
1335 int
1336 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1337     struct sctp_nets *net)
1338 {
1339         struct sctp_nets *alt;
1340         struct sctp_tmit_chunk *asconf, *chk;
1341
1342         /* is this a first send, or a retransmission? */
1343         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1344                 /* compose a new ASCONF chunk and send it */
1345                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1346         } else {
1347                 /*
1348                  * Retransmission of the existing ASCONF is needed
1349                  */
1350
1351                 /* find the existing ASCONF */
1352                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1353                 if (asconf == NULL) {
1354                         return (0);
1355                 }
1356                 /* do threshold management */
1357                 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1358                     stcb->asoc.max_send_times)) {
1359                         /* Assoc is over */
1360                         return (1);
1361                 }
1362                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1363                         /*
1364                          * Something is rotten: our peer is not responding
1365                          * to ASCONFs but apparently is to other chunks.
1366                          * i.e. it is not properly handling the chunk type
1367                          * upper bits. Mark this peer as ASCONF incapable
1368                          * and cleanup.
1369                          */
1370                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1371                         sctp_asconf_cleanup(stcb, net);
1372                         return (0);
1373                 }
1374                 /*
1375                  * cleared threshold management, so now backoff the net and
1376                  * select an alternate
1377                  */
1378                 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1379                 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1380                 if (asconf->whoTo != alt) {
1381                         sctp_free_remote_addr(asconf->whoTo);
1382                         asconf->whoTo = alt;
1383                         atomic_add_int(&alt->ref_count, 1);
1384                 }
1385                 /* See if an ECN Echo is also stranded */
1386                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1387                         if ((chk->whoTo == net) &&
1388                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1389                                 sctp_free_remote_addr(chk->whoTo);
1390                                 chk->whoTo = alt;
1391                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1392                                         chk->sent = SCTP_DATAGRAM_RESEND;
1393                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1394                                 }
1395                                 atomic_add_int(&alt->ref_count, 1);
1396                         }
1397                 }
1398                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1399                         if (chk->whoTo != alt) {
1400                                 sctp_free_remote_addr(chk->whoTo);
1401                                 chk->whoTo = alt;
1402                                 atomic_add_int(&alt->ref_count, 1);
1403                         }
1404                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1405                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1406                         chk->sent = SCTP_DATAGRAM_RESEND;
1407                 }
1408                 if (net->dest_state & SCTP_ADDR_NOT_REACHABLE) {
1409                         /*
1410                          * If the address went un-reachable, we need to move
1411                          * to the alternate for ALL chunks in queue
1412                          */
1413                         sctp_move_chunks_from_net(stcb, net);
1414                 }
1415                 /* mark the retran info */
1416                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1417                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1418                 asconf->sent = SCTP_DATAGRAM_RESEND;
1419
1420                 /* send another ASCONF if any and we can do */
1421                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1422         }
1423         return (0);
1424 }
1425
1426 /* Mobility adaptation */
1427 void
1428 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1429     struct sctp_nets *net)
1430 {
1431         if (stcb->asoc.deleted_primary == NULL) {
1432                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1433                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1434                 return;
1435         }
1436         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1437         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1438         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1439         stcb->asoc.deleted_primary = NULL;
1440         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1441         return;
1442 }
1443
1444 /*
1445  * For the shutdown and shutdown-ack, we do not keep one around on the
1446  * control queue. This means we must generate a new one and call the general
1447  * chunk output routine, AFTER having done threshold management.
1448  * It is assumed that net is non-NULL.
1449  */
1450 int
1451 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1452     struct sctp_nets *net)
1453 {
1454         struct sctp_nets *alt;
1455
1456         /* first threshold managment */
1457         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1458                 /* Assoc is over */
1459                 return (1);
1460         }
1461         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1462         /* second select an alternative */
1463         alt = sctp_find_alternate_net(stcb, net, 0);
1464
1465         /* third generate a shutdown into the queue for out net */
1466         sctp_send_shutdown(stcb, alt);
1467
1468         /* fourth restart timer */
1469         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1470         return (0);
1471 }
1472
1473 int
1474 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1475     struct sctp_nets *net)
1476 {
1477         struct sctp_nets *alt;
1478
1479         /* first threshold managment */
1480         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1481                 /* Assoc is over */
1482                 return (1);
1483         }
1484         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1485         /* second select an alternative */
1486         alt = sctp_find_alternate_net(stcb, net, 0);
1487
1488         /* third generate a shutdown into the queue for out net */
1489         sctp_send_shutdown_ack(stcb, alt);
1490
1491         /* fourth restart timer */
1492         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1493         return (0);
1494 }
1495
1496 static void
1497 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1498     struct sctp_tcb *stcb)
1499 {
1500         struct sctp_stream_queue_pending *sp;
1501         unsigned int i, chks_in_queue = 0;
1502         int being_filled = 0;
1503
1504         /*
1505          * This function is ONLY called when the send/sent queues are empty.
1506          */
1507         if ((stcb == NULL) || (inp == NULL))
1508                 return;
1509
1510         if (stcb->asoc.sent_queue_retran_cnt) {
1511                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1512                     stcb->asoc.sent_queue_retran_cnt);
1513                 stcb->asoc.sent_queue_retran_cnt = 0;
1514         }
1515         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1516                 /* No stream scheduler information, initialize scheduler */
1517                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1518                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1519                         /* yep, we lost a stream or two */
1520                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1521                 } else {
1522                         /* no streams lost */
1523                         stcb->asoc.total_output_queue_size = 0;
1524                 }
1525         }
1526         /* Check to see if some data queued, if so report it */
1527         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1528                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1529                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1530                                 if (sp->msg_is_complete)
1531                                         being_filled++;
1532                                 chks_in_queue++;
1533                         }
1534                 }
1535         }
1536         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1537                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1538                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1539         }
1540         if (chks_in_queue) {
1541                 /* call the output queue function */
1542                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1543                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1544                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1545                         /*
1546                          * Probably should go in and make it go back through
1547                          * and add fragments allowed
1548                          */
1549                         if (being_filled == 0) {
1550                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1551                                     chks_in_queue);
1552                         }
1553                 }
1554         } else {
1555                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1556                     (u_long)stcb->asoc.total_output_queue_size);
1557                 stcb->asoc.total_output_queue_size = 0;
1558         }
1559 }
1560
1561 int
1562 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1563     struct sctp_nets *net, int cnt_of_unconf)
1564 {
1565         int ret;
1566
1567         if (net) {
1568                 if (net->hb_responded == 0) {
1569                         if (net->ro._s_addr) {
1570                                 /*
1571                                  * Invalidate the src address if we did not
1572                                  * get a response last time.
1573                                  */
1574                                 sctp_free_ifa(net->ro._s_addr);
1575                                 net->ro._s_addr = NULL;
1576                                 net->src_addr_selected = 0;
1577                         }
1578                         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1579                 }
1580                 /* Zero PBA, if it needs it */
1581                 if (net->partial_bytes_acked) {
1582                         net->partial_bytes_acked = 0;
1583                 }
1584         }
1585         if ((stcb->asoc.total_output_queue_size > 0) &&
1586             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1587             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1588                 sctp_audit_stream_queues_for_size(inp, stcb);
1589         }
1590         /* Send a new HB, this will do threshold managment, pick a new dest */
1591         if (cnt_of_unconf == 0) {
1592                 if (sctp_send_hb(stcb, 0, NULL) < 0) {
1593                         return (1);
1594                 }
1595         } else {
1596                 /*
1597                  * this will send out extra hb's up to maxburst if there are
1598                  * any unconfirmed addresses.
1599                  */
1600                 uint32_t cnt_sent = 0;
1601
1602                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
1603                         if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
1604                             (net->dest_state & SCTP_ADDR_REACHABLE)) {
1605                                 cnt_sent++;
1606                                 if (net->hb_responded == 0) {
1607                                         /* Did we respond last time? */
1608                                         if (net->ro._s_addr) {
1609                                                 sctp_free_ifa(net->ro._s_addr);
1610                                                 net->ro._s_addr = NULL;
1611                                                 net->src_addr_selected = 0;
1612                                         }
1613                                 }
1614                                 ret = sctp_send_hb(stcb, 1, net);
1615                                 if (ret < 0)
1616                                         return 1;
1617                                 else if (ret == 0) {
1618                                         break;
1619                                 }
1620                                 if (SCTP_BASE_SYSCTL(sctp_hb_maxburst) &&
1621                                     (cnt_sent >= SCTP_BASE_SYSCTL(sctp_hb_maxburst)))
1622                                         break;
1623                         }
1624                 }
1625         }
1626         return (0);
1627 }
1628
1629 void
1630 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1631     struct sctp_tcb *stcb,
1632     struct sctp_nets *net)
1633 {
1634         uint32_t next_mtu, mtu;
1635
1636         next_mtu = sctp_get_next_mtu(inp, net->mtu);
1637
1638         if ((next_mtu > net->mtu) && (net->port == 0)) {
1639                 if ((net->src_addr_selected == 0) ||
1640                     (net->ro._s_addr == NULL) ||
1641                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1642                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1643                                 sctp_free_ifa(net->ro._s_addr);
1644                                 net->ro._s_addr = NULL;
1645                                 net->src_addr_selected = 0;
1646                         } else if (net->ro._s_addr == NULL) {
1647 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1648                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1649                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1650
1651                                         /* KAME hack: embed scopeid */
1652                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1653                                 }
1654 #endif
1655
1656                                 net->ro._s_addr = sctp_source_address_selection(inp,
1657                                     stcb,
1658                                     (sctp_route_t *) & net->ro,
1659                                     net, 0, stcb->asoc.vrf_id);
1660 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1661                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1662                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1663
1664                                         (void)sa6_recoverscope(sin6);
1665                                 }
1666 #endif                          /* INET6 */
1667                         }
1668                         if (net->ro._s_addr)
1669                                 net->src_addr_selected = 1;
1670                 }
1671                 if (net->ro._s_addr) {
1672                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1673                         if (net->port) {
1674                                 mtu -= sizeof(struct udphdr);
1675                         }
1676                         if (mtu > next_mtu) {
1677                                 net->mtu = next_mtu;
1678                         }
1679                 }
1680         }
1681         /* restart the timer */
1682         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1683 }
1684
1685 void
1686 sctp_autoclose_timer(struct sctp_inpcb *inp,
1687     struct sctp_tcb *stcb,
1688     struct sctp_nets *net)
1689 {
1690         struct timeval tn, *tim_touse;
1691         struct sctp_association *asoc;
1692         int ticks_gone_by;
1693
1694         (void)SCTP_GETTIME_TIMEVAL(&tn);
1695         if (stcb->asoc.sctp_autoclose_ticks &&
1696             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1697                 /* Auto close is on */
1698                 asoc = &stcb->asoc;
1699                 /* pick the time to use */
1700                 if (asoc->time_last_rcvd.tv_sec >
1701                     asoc->time_last_sent.tv_sec) {
1702                         tim_touse = &asoc->time_last_rcvd;
1703                 } else {
1704                         tim_touse = &asoc->time_last_sent;
1705                 }
1706                 /* Now has long enough transpired to autoclose? */
1707                 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1708                 if ((ticks_gone_by > 0) &&
1709                     (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1710                         /*
1711                          * autoclose time has hit, call the output routine,
1712                          * which should do nothing just to be SURE we don't
1713                          * have hanging data. We can then safely check the
1714                          * queues and know that we are clear to send
1715                          * shutdown
1716                          */
1717                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1718                         /* Are we clean? */
1719                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1720                             TAILQ_EMPTY(&asoc->sent_queue)) {
1721                                 /*
1722                                  * there is nothing queued to send, so I'm
1723                                  * done...
1724                                  */
1725                                 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
1726                                         /* only send SHUTDOWN 1st time thru */
1727                                         sctp_send_shutdown(stcb, stcb->asoc.primary_destination);
1728                                         if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
1729                                             (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1730                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1731                                         }
1732                                         SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1733                                         SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1734                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1735                                             stcb->sctp_ep, stcb,
1736                                             asoc->primary_destination);
1737                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1738                                             stcb->sctp_ep, stcb,
1739                                             asoc->primary_destination);
1740                                 }
1741                         }
1742                 } else {
1743                         /*
1744                          * No auto close at this time, reset t-o to check
1745                          * later
1746                          */
1747                         int tmp;
1748
1749                         /* fool the timer startup to use the time left */
1750                         tmp = asoc->sctp_autoclose_ticks;
1751                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1752                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1753                             net);
1754                         /* restore the real tick value */
1755                         asoc->sctp_autoclose_ticks = tmp;
1756                 }
1757         }
1758 }