sys/netinet/sctp_timer.c

   1 /*-
   2  * SPDX-License-Identifier: BSD-3-Clause
   3  *
   4  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
   5  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
   6  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions are met:
  10  *
  11  * a) Redistributions of source code must retain the above copyright notice,
  12  *    this list of conditions and the following disclaimer.
  13  *
  14  * b) Redistributions in binary form must reproduce the above copyright
  15  *    notice, this list of conditions and the following disclaimer in
  16  *    the documentation and/or other materials provided with the distribution.
  17  *
  18  * c) Neither the name of Cisco Systems, Inc. nor the names of its
  19  *    contributors may be used to endorse or promote products derived
  20  *    from this software without specific prior written permission.
  21  *
  22  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  23  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  24  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32  * THE POSSIBILITY OF SUCH DAMAGE.
  33  */
  34
  35 #include <sys/cdefs.h>
  36 __FBSDID("$FreeBSD$");
  37
  38 #define _IP_VHL
  39 #include <netinet/sctp_os.h>
  40 #include <netinet/sctp_pcb.h>
  41 #ifdef INET6
  42 #endif
  43 #include <netinet/sctp_var.h>
  44 #include <netinet/sctp_sysctl.h>
  45 #include <netinet/sctp_timer.h>
  46 #include <netinet/sctputil.h>
  47 #include <netinet/sctp_output.h>
  48 #include <netinet/sctp_header.h>
  49 #include <netinet/sctp_indata.h>
  50 #include <netinet/sctp_asconf.h>
  51 #include <netinet/sctp_input.h>
  52 #include <netinet/sctp.h>
  53 #include <netinet/sctp_uio.h>
  54 #if defined(INET) || defined(INET6)
  55 #include <netinet/udp.h>
  56 #endif
  57
  58
  59 void
  60 sctp_audit_retranmission_queue(struct sctp_association *asoc)
  61 {
  62         struct sctp_tmit_chunk *chk;
  63
  64         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
  65             asoc->sent_queue_retran_cnt,
  66             asoc->sent_queue_cnt);
  67         asoc->sent_queue_retran_cnt = 0;
  68         asoc->sent_queue_cnt = 0;
  69         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
  70                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  71                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  72                 }
  73                 asoc->sent_queue_cnt++;
  74         }
  75         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
  76                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  77                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  78                 }
  79         }
  80         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
  81                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  82                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  83                 }
  84         }
  85         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
  86             asoc->sent_queue_retran_cnt,
  87             asoc->sent_queue_cnt);
  88 }
  89
  90 static int
  91 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
  92     struct sctp_nets *net, uint16_t threshold)
  93 {
  94         if (net) {
  95                 net->error_count++;
  96                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
  97                     (void *)net, net->error_count,
  98                     net->failure_threshold);
  99                 if (net->error_count > net->failure_threshold) {
 100                         /* We had a threshold failure */
 101                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
 102                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
 103                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
 104                                 net->dest_state &= ~SCTP_ADDR_PF;
 105                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
 106                                     stcb, 0,
 107                                     (void *)net, SCTP_SO_NOT_LOCKED);
 108                         }
 109                 } else if ((net->pf_threshold < net->failure_threshold) &&
 110                     (net->error_count > net->pf_threshold)) {
 111                         if (!(net->dest_state & SCTP_ADDR_PF)) {
 112                                 net->dest_state |= SCTP_ADDR_PF;
 113                                 net->last_active = sctp_get_tick_count();
 114                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
 115                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
 116                                     inp, stcb, net,
 117                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
 118                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
 119                         }
 120                 }
 121         }
 122         if (stcb == NULL)
 123                 return (0);
 124
 125         if (net) {
 126                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
 127                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 128                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
 129                                     stcb->asoc.overall_error_count,
 130                                     (stcb->asoc.overall_error_count + 1),
 131                                     SCTP_FROM_SCTP_TIMER,
 132                                     __LINE__);
 133                         }
 134                         stcb->asoc.overall_error_count++;
 135                 }
 136         } else {
 137                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 138                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
 139                             stcb->asoc.overall_error_count,
 140                             (stcb->asoc.overall_error_count + 1),
 141                             SCTP_FROM_SCTP_TIMER,
 142                             __LINE__);
 143                 }
 144                 stcb->asoc.overall_error_count++;
 145         }
 146         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
 147             (void *)&stcb->asoc, stcb->asoc.overall_error_count,
 148             (uint32_t)threshold,
 149             ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state));
 150         /*
 151          * We specifically do not do >= to give the assoc one more change
 152          * before we fail it.
 153          */
 154         if (stcb->asoc.overall_error_count > threshold) {
 155                 /* Abort notification sends a ULP notify */
 156                 struct mbuf *op_err;
 157
 158                 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
 159                     "Association error counter exceeded");
 160                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
 161                 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
 162                 return (1);
 163         }
 164         return (0);
 165 }
 166
 167 /*
 168  * sctp_find_alternate_net() returns a non-NULL pointer as long
 169  * the argument net is non-NULL.
 170  */
 171 struct sctp_nets *
 172 sctp_find_alternate_net(struct sctp_tcb *stcb,
 173     struct sctp_nets *net,
 174     int mode)
 175 {
 176         /* Find and return an alternate network if possible */
 177         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
 178         int once;
 179
 180         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
 181         int min_errors = -1;
 182         uint32_t max_cwnd = 0;
 183
 184         if (stcb->asoc.numnets == 1) {
 185                 /* No others but net */
 186                 return (TAILQ_FIRST(&stcb->asoc.nets));
 187         }
 188         /*
 189          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
 190          * net algorithm. This algorithm chooses the active destination (not
 191          * in PF state) with the largest cwnd value. If all destinations are
 192          * in PF state, unreachable, or unconfirmed, choose the desination
 193          * that is in PF state with the lowest error count. In case of a
 194          * tie, choose the destination that was most recently active.
 195          */
 196         if (mode == 2) {
 197                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 198                         /*
 199                          * JRS 5/14/07 - If the destination is unreachable
 200                          * or unconfirmed, skip it.
 201                          */
 202                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 203                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 204                                 continue;
 205                         }
 206                         /*
 207                          * JRS 5/14/07 -  If the destination is reachable
 208                          * but in PF state, compare the error count of the
 209                          * destination to the minimum error count seen thus
 210                          * far. Store the destination with the lower error
 211                          * count.  If the error counts are equal, store the
 212                          * destination that was most recently active.
 213                          */
 214                         if (mnet->dest_state & SCTP_ADDR_PF) {
 215                                 /*
 216                                  * JRS 5/14/07 - If the destination under
 217                                  * consideration is the current destination,
 218                                  * work as if the error count is one higher.
 219                                  * The actual error count will not be
 220                                  * incremented until later in the t3
 221                                  * handler.
 222                                  */
 223                                 if (mnet == net) {
 224                                         if (min_errors == -1) {
 225                                                 min_errors = mnet->error_count + 1;
 226                                                 min_errors_net = mnet;
 227                                         } else if (mnet->error_count + 1 < min_errors) {
 228                                                 min_errors = mnet->error_count + 1;
 229                                                 min_errors_net = mnet;
 230                                         } else if (mnet->error_count + 1 == min_errors
 231                                             && mnet->last_active > min_errors_net->last_active) {
 232                                                 min_errors_net = mnet;
 233                                                 min_errors = mnet->error_count + 1;
 234                                         }
 235                                         continue;
 236                                 } else {
 237                                         if (min_errors == -1) {
 238                                                 min_errors = mnet->error_count;
 239                                                 min_errors_net = mnet;
 240                                         } else if (mnet->error_count < min_errors) {
 241                                                 min_errors = mnet->error_count;
 242                                                 min_errors_net = mnet;
 243                                         } else if (mnet->error_count == min_errors
 244                                             && mnet->last_active > min_errors_net->last_active) {
 245                                                 min_errors_net = mnet;
 246                                                 min_errors = mnet->error_count;
 247                                         }
 248                                         continue;
 249                                 }
 250                         }
 251                         /*
 252                          * JRS 5/14/07 - If the destination is reachable and
 253                          * not in PF state, compare the cwnd of the
 254                          * destination to the highest cwnd seen thus far.
 255                          * Store the destination with the higher cwnd value.
 256                          * If the cwnd values are equal, randomly choose one
 257                          * of the two destinations.
 258                          */
 259                         if (max_cwnd < mnet->cwnd) {
 260                                 max_cwnd_net = mnet;
 261                                 max_cwnd = mnet->cwnd;
 262                         } else if (max_cwnd == mnet->cwnd) {
 263                                 uint32_t rndval;
 264                                 uint8_t this_random;
 265
 266                                 if (stcb->asoc.hb_random_idx > 3) {
 267                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 268                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
 269                                         this_random = stcb->asoc.hb_random_values[0];
 270                                         stcb->asoc.hb_random_idx++;
 271                                         stcb->asoc.hb_ect_randombit = 0;
 272                                 } else {
 273                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 274                                         stcb->asoc.hb_random_idx++;
 275                                         stcb->asoc.hb_ect_randombit = 0;
 276                                 }
 277                                 if (this_random % 2 == 1) {
 278                                         max_cwnd_net = mnet;
 279                                         max_cwnd = mnet->cwnd;  /* Useless? */
 280                                 }
 281                         }
 282                 }
 283                 if (max_cwnd_net == NULL) {
 284                         if (min_errors_net == NULL) {
 285                                 return (net);
 286                         }
 287                         return (min_errors_net);
 288                 } else {
 289                         return (max_cwnd_net);
 290                 }
 291         }                       /* JRS 5/14/07 - If mode is set to 1, use the
 292                                  * CMT policy for choosing an alternate net. */
 293         else if (mode == 1) {
 294                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 295                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 296                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 297                                 /*
 298                                  * will skip ones that are not-reachable or
 299                                  * unconfirmed
 300                                  */
 301                                 continue;
 302                         }
 303                         if (max_cwnd < mnet->cwnd) {
 304                                 max_cwnd_net = mnet;
 305                                 max_cwnd = mnet->cwnd;
 306                         } else if (max_cwnd == mnet->cwnd) {
 307                                 uint32_t rndval;
 308                                 uint8_t this_random;
 309
 310                                 if (stcb->asoc.hb_random_idx > 3) {
 311                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 312                                         memcpy(stcb->asoc.hb_random_values, &rndval,
 313                                             sizeof(stcb->asoc.hb_random_values));
 314                                         this_random = stcb->asoc.hb_random_values[0];
 315                                         stcb->asoc.hb_random_idx = 0;
 316                                         stcb->asoc.hb_ect_randombit = 0;
 317                                 } else {
 318                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 319                                         stcb->asoc.hb_random_idx++;
 320                                         stcb->asoc.hb_ect_randombit = 0;
 321                                 }
 322                                 if (this_random % 2) {
 323                                         max_cwnd_net = mnet;
 324                                         max_cwnd = mnet->cwnd;
 325                                 }
 326                         }
 327                 }
 328                 if (max_cwnd_net) {
 329                         return (max_cwnd_net);
 330                 }
 331         }
 332         mnet = net;
 333         once = 0;
 334
 335         if (mnet == NULL) {
 336                 mnet = TAILQ_FIRST(&stcb->asoc.nets);
 337                 if (mnet == NULL) {
 338                         return (NULL);
 339                 }
 340         }
 341         for (;;) {
 342                 alt = TAILQ_NEXT(mnet, sctp_next);
 343                 if (alt == NULL) {
 344                         once++;
 345                         if (once > 1) {
 346                                 break;
 347                         }
 348                         alt = TAILQ_FIRST(&stcb->asoc.nets);
 349                         if (alt == NULL) {
 350                                 return (NULL);
 351                         }
 352                 }
 353                 if (alt->ro.ro_rt == NULL) {
 354                         if (alt->ro._s_addr) {
 355                                 sctp_free_ifa(alt->ro._s_addr);
 356                                 alt->ro._s_addr = NULL;
 357                         }
 358                         alt->src_addr_selected = 0;
 359                 }
 360                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
 361                     (alt->ro.ro_rt != NULL) &&
 362                     (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
 363                         /* Found a reachable address */
 364                         break;
 365                 }
 366                 mnet = alt;
 367         }
 368
 369         if (alt == NULL) {
 370                 /* Case where NO insv network exists (dormant state) */
 371                 /* we rotate destinations */
 372                 once = 0;
 373                 mnet = net;
 374                 for (;;) {
 375                         if (mnet == NULL) {
 376                                 return (TAILQ_FIRST(&stcb->asoc.nets));
 377                         }
 378                         alt = TAILQ_NEXT(mnet, sctp_next);
 379                         if (alt == NULL) {
 380                                 once++;
 381                                 if (once > 1) {
 382                                         break;
 383                                 }
 384                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
 385                                 if (alt == NULL) {
 386                                         break;
 387                                 }
 388                         }
 389                         if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
 390                             (alt != net)) {
 391                                 /* Found an alternate address */
 392                                 break;
 393                         }
 394                         mnet = alt;
 395                 }
 396         }
 397         if (alt == NULL) {
 398                 return (net);
 399         }
 400         return (alt);
 401 }
 402
 403 static void
 404 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
 405     struct sctp_nets *net,
 406     int win_probe,
 407     int num_marked, int num_abandoned)
 408 {
 409         if (net->RTO == 0) {
 410                 if (net->RTO_measured) {
 411                         net->RTO = stcb->asoc.minrto;
 412                 } else {
 413                         net->RTO = stcb->asoc.initial_rto;
 414                 }
 415         }
 416         net->RTO <<= 1;
 417         if (net->RTO > stcb->asoc.maxrto) {
 418                 net->RTO = stcb->asoc.maxrto;
 419         }
 420         if ((win_probe == 0) && (num_marked || num_abandoned)) {
 421                 /* We don't apply penalty to window probe scenarios */
 422                 /* JRS - Use the congestion control given in the CC module */
 423                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
 424         }
 425 }
 426
 427 #ifndef INVARIANTS
 428 static void
 429 sctp_recover_sent_list(struct sctp_tcb *stcb)
 430 {
 431         struct sctp_tmit_chunk *chk, *nchk;
 432         struct sctp_association *asoc;
 433
 434         asoc = &stcb->asoc;
 435         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
 436                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) {
 437                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
 438                             (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq);
 439                         if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
 440                                 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
 441                                         asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
 442                                 }
 443                         }
 444                         if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) &&
 445                             (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) &&
 446                             TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) {
 447                                 asoc->trigger_reset = 1;
 448                         }
 449                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
 450                         if (PR_SCTP_ENABLED(chk->flags)) {
 451                                 if (asoc->pr_sctp_cnt != 0)
 452                                         asoc->pr_sctp_cnt--;
 453                         }
 454                         if (chk->data) {
 455                                 /* sa_ignore NO_NULL_CHK */
 456                                 sctp_free_bufspace(stcb, asoc, chk, 1);
 457                                 sctp_m_freem(chk->data);
 458                                 chk->data = NULL;
 459                                 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
 460                                         asoc->sent_queue_cnt_removeable--;
 461                                 }
 462                         }
 463                         asoc->sent_queue_cnt--;
 464                         sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
 465                 }
 466         }
 467         SCTP_PRINTF("after recover order is as follows\n");
 468         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
 469                 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn);
 470         }
 471 }
 472 #endif
 473
 474 static int
 475 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
 476     struct sctp_nets *net,
 477     struct sctp_nets *alt,
 478     int window_probe,
 479     int *num_marked,
 480     int *num_abandoned)
 481 {
 482
 483         /*
 484          * Mark all chunks (well not all) that were sent to *net for
 485          * retransmission. Move them to alt for there destination as well...
 486          * We only mark chunks that have been outstanding long enough to
 487          * have received feed-back.
 488          */
 489         struct sctp_tmit_chunk *chk, *nchk;
 490         struct sctp_nets *lnets;
 491         struct timeval now, min_wait, tv;
 492         int cur_rto;
 493         int cnt_abandoned;
 494         int audit_tf, num_mk, fir;
 495         unsigned int cnt_mk;
 496         uint32_t orig_flight, orig_tf;
 497         uint32_t tsnlast, tsnfirst;
 498         int recovery_cnt = 0;
 499
 500
 501         /* none in flight now */
 502         audit_tf = 0;
 503         fir = 0;
 504         /*
 505          * figure out how long a data chunk must be pending before we can
 506          * mark it ..
 507          */
 508         (void)SCTP_GETTIME_TIMEVAL(&now);
 509         /* get cur rto in micro-seconds */
 510         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
 511         cur_rto *= 1000;
 512         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 513                 sctp_log_fr(cur_rto,
 514                     stcb->asoc.peers_rwnd,
 515                     window_probe,
 516                     SCTP_FR_T3_MARK_TIME);
 517                 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
 518                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
 519         }
 520         tv.tv_sec = cur_rto / 1000000;
 521         tv.tv_usec = cur_rto % 1000000;
 522         min_wait = now;
 523         timevalsub(&min_wait, &tv);
 524         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
 525                 /*
 526                  * if we hit here, we don't have enough seconds on the clock
 527                  * to account for the RTO. We just let the lower seconds be
 528                  * the bounds and don't worry about it. This may mean we
 529                  * will mark a lot more than we should.
 530                  */
 531                 min_wait.tv_sec = min_wait.tv_usec = 0;
 532         }
 533         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 534                 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
 535                 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
 536         }
 537         /*
 538          * Our rwnd will be incorrect here since we are not adding back the
 539          * cnt * mbuf but we will fix that down below.
 540          */
 541         orig_flight = net->flight_size;
 542         orig_tf = stcb->asoc.total_flight;
 543
 544         net->fast_retran_ip = 0;
 545         /* Now on to each chunk */
 546         cnt_abandoned = 0;
 547         num_mk = cnt_mk = 0;
 548         tsnfirst = tsnlast = 0;
 549 #ifndef INVARIANTS
 550 start_again:
 551 #endif
 552         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
 553                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) {
 554                         /* Strange case our list got out of order? */
 555                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
 556                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn);
 557                         recovery_cnt++;
 558 #ifdef INVARIANTS
 559                         panic("last acked >= chk on sent-Q");
 560 #else
 561                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
 562                         sctp_recover_sent_list(stcb);
 563                         if (recovery_cnt < 10) {
 564                                 goto start_again;
 565                         } else {
 566                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
 567                         }
 568 #endif
 569                 }
 570                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
 571                         /*
 572                          * found one to mark: If it is less than
 573                          * DATAGRAM_ACKED it MUST not be a skipped or marked
 574                          * TSN but instead one that is either already set
 575                          * for retransmission OR one that needs
 576                          * retransmission.
 577                          */
 578
 579                         /* validate its been outstanding long enough */
 580                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 581                                 sctp_log_fr(chk->rec.data.tsn,
 582                                     chk->sent_rcv_time.tv_sec,
 583                                     chk->sent_rcv_time.tv_usec,
 584                                     SCTP_FR_T3_MARK_TIME);
 585                         }
 586                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
 587                                 /*
 588                                  * we have reached a chunk that was sent
 589                                  * some seconds past our min.. forget it we
 590                                  * will find no more to send.
 591                                  */
 592                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 593                                         sctp_log_fr(0,
 594                                             chk->sent_rcv_time.tv_sec,
 595                                             chk->sent_rcv_time.tv_usec,
 596                                             SCTP_FR_T3_STOPPED);
 597                                 }
 598                                 continue;
 599                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
 600                             (window_probe == 0)) {
 601                                 /*
 602                                  * we must look at the micro seconds to
 603                                  * know.
 604                                  */
 605                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
 606                                         /*
 607                                          * ok it was sent after our boundary
 608                                          * time.
 609                                          */
 610                                         continue;
 611                                 }
 612                         }
 613                         if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
 614                                 /* Is it expired? */
 615                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
 616                                         /* Yes so drop it */
 617                                         if (chk->data) {
 618                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 619                                                     chk,
 620                                                     1,
 621                                                     SCTP_SO_NOT_LOCKED);
 622                                                 cnt_abandoned++;
 623                                         }
 624                                         continue;
 625                                 }
 626                         }
 627                         if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
 628                                 /* Has it been retransmitted tv_sec times? */
 629                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
 630                                         if (chk->data) {
 631                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 632                                                     chk,
 633                                                     1,
 634                                                     SCTP_SO_NOT_LOCKED);
 635                                                 cnt_abandoned++;
 636                                         }
 637                                         continue;
 638                                 }
 639                         }
 640                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 641                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 642                                 num_mk++;
 643                                 if (fir == 0) {
 644                                         fir = 1;
 645                                         tsnfirst = chk->rec.data.tsn;
 646                                 }
 647                                 tsnlast = chk->rec.data.tsn;
 648                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 649                                         sctp_log_fr(chk->rec.data.tsn, chk->snd_count,
 650                                             0, SCTP_FR_T3_MARKED);
 651                                 }
 652
 653                                 if (chk->rec.data.chunk_was_revoked) {
 654                                         /* deflate the cwnd */
 655                                         chk->whoTo->cwnd -= chk->book_size;
 656                                         chk->rec.data.chunk_was_revoked = 0;
 657                                 }
 658                                 net->marked_retrans++;
 659                                 stcb->asoc.marked_retrans++;
 660                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 661                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
 662                                             chk->whoTo->flight_size,
 663                                             chk->book_size,
 664                                             (uint32_t)(uintptr_t)chk->whoTo,
 665                                             chk->rec.data.tsn);
 666                                 }
 667                                 sctp_flight_size_decrease(chk);
 668                                 sctp_total_flight_decrease(stcb, chk);
 669                                 stcb->asoc.peers_rwnd += chk->send_size;
 670                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
 671                         }
 672                         chk->sent = SCTP_DATAGRAM_RESEND;
 673                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 674                         SCTP_STAT_INCR(sctps_markedretrans);
 675
 676                         /* reset the TSN for striking and other FR stuff */
 677                         chk->rec.data.doing_fast_retransmit = 0;
 678                         /* Clear any time so NO RTT is being done */
 679
 680                         if (chk->do_rtt) {
 681                                 if (chk->whoTo->rto_needed == 0) {
 682                                         chk->whoTo->rto_needed = 1;
 683                                 }
 684                         }
 685                         chk->do_rtt = 0;
 686                         if (alt != net) {
 687                                 sctp_free_remote_addr(chk->whoTo);
 688                                 chk->no_fr_allowed = 1;
 689                                 chk->whoTo = alt;
 690                                 atomic_add_int(&alt->ref_count, 1);
 691                         } else {
 692                                 chk->no_fr_allowed = 0;
 693                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
 694                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
 695                                 } else {
 696                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn;
 697                                 }
 698                         }
 699                         /*
 700                          * CMT: Do not allow FRs on retransmitted TSNs.
 701                          */
 702                         if (stcb->asoc.sctp_cmt_on_off > 0) {
 703                                 chk->no_fr_allowed = 1;
 704                         }
 705 #ifdef THIS_SHOULD_NOT_BE_DONE
 706                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
 707                         /* remember highest acked one */
 708                         could_be_sent = chk;
 709 #endif
 710                 }
 711                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 712                         cnt_mk++;
 713                 }
 714         }
 715         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
 716                 /* we did not subtract the same things? */
 717                 audit_tf = 1;
 718         }
 719
 720         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 721                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
 722         }
 723 #ifdef SCTP_DEBUG
 724         if (num_mk) {
 725                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
 726                     tsnlast);
 727                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n",
 728                     num_mk,
 729                     stcb->asoc.peers_rwnd);
 730         }
 731 #endif
 732         *num_marked = num_mk;
 733         *num_abandoned = cnt_abandoned;
 734         /*
 735          * Now check for a ECN Echo that may be stranded And include the
 736          * cnt_mk'd to have all resends in the control queue.
 737          */
 738         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
 739                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 740                         cnt_mk++;
 741                 }
 742                 if ((chk->whoTo == net) &&
 743                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
 744                         sctp_free_remote_addr(chk->whoTo);
 745                         chk->whoTo = alt;
 746                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
 747                                 chk->sent = SCTP_DATAGRAM_RESEND;
 748                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 749                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 750                                 cnt_mk++;
 751                         }
 752                         atomic_add_int(&alt->ref_count, 1);
 753                 }
 754         }
 755 #ifdef THIS_SHOULD_NOT_BE_DONE
 756         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
 757                 /* fix it so we retransmit the highest acked anyway */
 758                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 759                 cnt_mk++;
 760                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
 761         }
 762 #endif
 763         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
 764 #ifdef INVARIANTS
 765                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
 766                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
 767 #endif
 768 #ifndef SCTP_AUDITING_ENABLED
 769                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
 770 #endif
 771         }
 772         if (audit_tf) {
 773                 SCTPDBG(SCTP_DEBUG_TIMER4,
 774                     "Audit total flight due to negative value net:%p\n",
 775                     (void *)net);
 776                 stcb->asoc.total_flight = 0;
 777                 stcb->asoc.total_flight_count = 0;
 778                 /* Clear all networks flight size */
 779                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
 780                         lnets->flight_size = 0;
 781                         SCTPDBG(SCTP_DEBUG_TIMER4,
 782                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
 783                             (void *)lnets, lnets->cwnd, lnets->ssthresh);
 784                 }
 785                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
 786                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 787                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 788                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
 789                                             chk->whoTo->flight_size,
 790                                             chk->book_size,
 791                                             (uint32_t)(uintptr_t)chk->whoTo,
 792                                             chk->rec.data.tsn);
 793                                 }
 794
 795                                 sctp_flight_size_increase(chk);
 796                                 sctp_total_flight_increase(stcb, chk);
 797                         }
 798                 }
 799         }
 800         /* We return 1 if we only have a window probe outstanding */
 801         return (0);
 802 }
 803
 804
 805 int
 806 sctp_t3rxt_timer(struct sctp_inpcb *inp,
 807     struct sctp_tcb *stcb,
 808     struct sctp_nets *net)
 809 {
 810         struct sctp_nets *alt;
 811         int win_probe, num_mk, num_abandoned;
 812
 813         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 814                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
 815         }
 816         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
 817                 struct sctp_nets *lnet;
 818
 819                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
 820                         if (net == lnet) {
 821                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
 822                         } else {
 823                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
 824                         }
 825                 }
 826         }
 827         /* Find an alternate and mark those for retransmission */
 828         if ((stcb->asoc.peers_rwnd == 0) &&
 829             (stcb->asoc.total_flight < net->mtu)) {
 830                 SCTP_STAT_INCR(sctps_timowindowprobe);
 831                 win_probe = 1;
 832         } else {
 833                 win_probe = 0;
 834         }
 835
 836         if (win_probe == 0) {
 837                 /* We don't do normal threshold management on window probes */
 838                 if (sctp_threshold_management(inp, stcb, net,
 839                     stcb->asoc.max_send_times)) {
 840                         /* Association was destroyed */
 841                         return (1);
 842                 } else {
 843                         if (net != stcb->asoc.primary_destination) {
 844                                 /* send a immediate HB if our RTO is stale */
 845                                 struct timeval now;
 846                                 unsigned int ms_goneby;
 847
 848                                 (void)SCTP_GETTIME_TIMEVAL(&now);
 849                                 if (net->last_sent_time.tv_sec) {
 850                                         ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
 851                                 } else {
 852                                         ms_goneby = 0;
 853                                 }
 854                                 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
 855                                         if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
 856                                                 /*
 857                                                  * no recent feed back in an
 858                                                  * RTO or more, request a
 859                                                  * RTT update
 860                                                  */
 861                                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
 862                                         }
 863                                 }
 864                         }
 865                 }
 866         } else {
 867                 /*
 868                  * For a window probe we don't penalize the net's but only
 869                  * the association. This may fail it if SACKs are not coming
 870                  * back. If sack's are coming with rwnd locked at 0, we will
 871                  * continue to hold things waiting for rwnd to raise
 872                  */
 873                 if (sctp_threshold_management(inp, stcb, NULL,
 874                     stcb->asoc.max_send_times)) {
 875                         /* Association was destroyed */
 876                         return (1);
 877                 }
 878         }
 879         if (stcb->asoc.sctp_cmt_on_off > 0) {
 880                 if (net->pf_threshold < net->failure_threshold) {
 881                         alt = sctp_find_alternate_net(stcb, net, 2);
 882                 } else {
 883                         /*
 884                          * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
 885                          * being used, then pick dest with largest ssthresh
 886                          * for any retransmission.
 887                          */
 888                         alt = sctp_find_alternate_net(stcb, net, 1);
 889                         /*
 890                          * CUCv2: If a different dest is picked for the
 891                          * retransmission, then new (rtx-)pseudo_cumack
 892                          * needs to be tracked for orig dest. Let CUCv2
 893                          * track new (rtx-) pseudo-cumack always.
 894                          */
 895                         net->find_pseudo_cumack = 1;
 896                         net->find_rtx_pseudo_cumack = 1;
 897                 }
 898         } else {
 899                 alt = sctp_find_alternate_net(stcb, net, 0);
 900         }
 901
 902         num_mk = 0;
 903         num_abandoned = 0;
 904         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
 905             &num_mk, &num_abandoned);
 906         /* FR Loss recovery just ended with the T3. */
 907         stcb->asoc.fast_retran_loss_recovery = 0;
 908
 909         /* CMT FR loss recovery ended with the T3 */
 910         net->fast_retran_loss_recovery = 0;
 911         if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
 912             (net->flight_size == 0)) {
 913                 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
 914         }
 915
 916         /*
 917          * setup the sat loss recovery that prevents satellite cwnd advance.
 918          */
 919         stcb->asoc.sat_t3_loss_recovery = 1;
 920         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
 921
 922         /* Backoff the timer and cwnd */
 923         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
 924         if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
 925             (net->dest_state & SCTP_ADDR_PF)) {
 926                 /* Move all pending over too */
 927                 sctp_move_chunks_from_net(stcb, net);
 928
 929                 /*
 930                  * Get the address that failed, to force a new src address
 931                  * selecton and a route allocation.
 932                  */
 933                 if (net->ro._s_addr) {
 934                         sctp_free_ifa(net->ro._s_addr);
 935                         net->ro._s_addr = NULL;
 936                 }
 937                 net->src_addr_selected = 0;
 938
 939                 /* Force a route allocation too */
 940                 if (net->ro.ro_rt) {
 941                         RTFREE(net->ro.ro_rt);
 942                         net->ro.ro_rt = NULL;
 943                 }
 944
 945                 /* Was it our primary? */
 946                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
 947                         /*
 948                          * Yes, note it as such and find an alternate note:
 949                          * this means HB code must use this to resent the
 950                          * primary if it goes active AND if someone does a
 951                          * change-primary then this flag must be cleared
 952                          * from any net structures.
 953                          */
 954                         if (stcb->asoc.alternate) {
 955                                 sctp_free_remote_addr(stcb->asoc.alternate);
 956                         }
 957                         stcb->asoc.alternate = alt;
 958                         atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
 959                 }
 960         }
 961         /*
 962          * Special case for cookie-echo'ed case, we don't do output but must
 963          * await the COOKIE-ACK before retransmission
 964          */
 965         if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
 966                 /*
 967                  * Here we just reset the timer and start again since we
 968                  * have not established the asoc
 969                  */
 970                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
 971                 return (0);
 972         }
 973         if (stcb->asoc.prsctp_supported) {
 974                 struct sctp_tmit_chunk *lchk;
 975
 976                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
 977                 /* C3. See if we need to send a Fwd-TSN */
 978                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
 979                         send_forward_tsn(stcb, &stcb->asoc);
 980                         if (lchk) {
 981                                 /* Assure a timer is up */
 982                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
 983                         }
 984                 }
 985         }
 986         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
 987                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
 988         }
 989         return (0);
 990 }
 991
 992 int
 993 sctp_t1init_timer(struct sctp_inpcb *inp,
 994     struct sctp_tcb *stcb,
 995     struct sctp_nets *net)
 996 {
 997         /* bump the thresholds */
 998         if (stcb->asoc.delayed_connection) {
 999                 /*
1000                  * special hook for delayed connection. The library did NOT
1001                  * complete the rest of its sends.
1002                  */
1003                 stcb->asoc.delayed_connection = 0;
1004                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1005                 return (0);
1006         }
1007         if (SCTP_GET_STATE(stcb) != SCTP_STATE_COOKIE_WAIT) {
1008                 return (0);
1009         }
1010         if (sctp_threshold_management(inp, stcb, net,
1011             stcb->asoc.max_init_times)) {
1012                 /* Association was destroyed */
1013                 return (1);
1014         }
1015         stcb->asoc.dropped_special_cnt = 0;
1016         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1017         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1018                 net->RTO = stcb->asoc.initial_init_rto_max;
1019         }
1020         if (stcb->asoc.numnets > 1) {
1021                 /* If we have more than one addr use it */
1022                 struct sctp_nets *alt;
1023
1024                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1025                 if (alt != stcb->asoc.primary_destination) {
1026                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1027                         stcb->asoc.primary_destination = alt;
1028                 }
1029         }
1030         /* Send out a new init */
1031         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1032         return (0);
1033 }
1034
1035 /*
1036  * For cookie and asconf we actually need to find and mark for resend, then
1037  * increment the resend counter (after all the threshold management stuff of
1038  * course).
1039  */
1040 int
1041 sctp_cookie_timer(struct sctp_inpcb *inp,
1042     struct sctp_tcb *stcb,
1043     struct sctp_nets *net SCTP_UNUSED)
1044 {
1045         struct sctp_nets *alt;
1046         struct sctp_tmit_chunk *cookie;
1047
1048         /* first before all else we must find the cookie */
1049         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1050                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1051                         break;
1052                 }
1053         }
1054         if (cookie == NULL) {
1055                 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
1056                         /* FOOBAR! */
1057                         struct mbuf *op_err;
1058
1059                         op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1060                             "Cookie timer expired, but no cookie");
1061                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1062                         sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1063                 } else {
1064 #ifdef INVARIANTS
1065                         panic("Cookie timer expires in wrong state?");
1066 #else
1067                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(stcb));
1068                         return (0);
1069 #endif
1070                 }
1071                 return (0);
1072         }
1073         /* Ok we found the cookie, threshold management next */
1074         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1075             stcb->asoc.max_init_times)) {
1076                 /* Assoc is over */
1077                 return (1);
1078         }
1079         /*
1080          * Cleared threshold management, now lets backoff the address and
1081          * select an alternate
1082          */
1083         stcb->asoc.dropped_special_cnt = 0;
1084         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1085         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1086         if (alt != cookie->whoTo) {
1087                 sctp_free_remote_addr(cookie->whoTo);
1088                 cookie->whoTo = alt;
1089                 atomic_add_int(&alt->ref_count, 1);
1090         }
1091         /* Now mark the retran info */
1092         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1093                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1094         }
1095         cookie->sent = SCTP_DATAGRAM_RESEND;
1096         cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1097         /*
1098          * Now call the output routine to kick out the cookie again, Note we
1099          * don't mark any chunks for retran so that FR will need to kick in
1100          * to move these (or a send timer).
1101          */
1102         return (0);
1103 }
1104
1105 int
1106 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1107     struct sctp_nets *net)
1108 {
1109         struct sctp_nets *alt;
1110         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1111
1112         if (stcb->asoc.stream_reset_outstanding == 0) {
1113                 return (0);
1114         }
1115         /* find the existing STRRESET, we use the seq number we sent out on */
1116         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1117         if (strrst == NULL) {
1118                 return (0);
1119         }
1120         /* do threshold management */
1121         if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1122             stcb->asoc.max_send_times)) {
1123                 /* Assoc is over */
1124                 return (1);
1125         }
1126         /*
1127          * Cleared threshold management, now lets backoff the address and
1128          * select an alternate
1129          */
1130         sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1131         alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1132         sctp_free_remote_addr(strrst->whoTo);
1133         strrst->whoTo = alt;
1134         atomic_add_int(&alt->ref_count, 1);
1135
1136         /* See if a ECN Echo is also stranded */
1137         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1138                 if ((chk->whoTo == net) &&
1139                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1140                         sctp_free_remote_addr(chk->whoTo);
1141                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1142                                 chk->sent = SCTP_DATAGRAM_RESEND;
1143                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1144                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1145                         }
1146                         chk->whoTo = alt;
1147                         atomic_add_int(&alt->ref_count, 1);
1148                 }
1149         }
1150         if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1151                 /*
1152                  * If the address went un-reachable, we need to move to
1153                  * alternates for ALL chk's in queue
1154                  */
1155                 sctp_move_chunks_from_net(stcb, net);
1156         }
1157         /* mark the retran info */
1158         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1159                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1160         strrst->sent = SCTP_DATAGRAM_RESEND;
1161         strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1162
1163         /* restart the timer */
1164         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1165         return (0);
1166 }
1167
1168 int
1169 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1170     struct sctp_nets *net)
1171 {
1172         struct sctp_nets *alt;
1173         struct sctp_tmit_chunk *asconf, *chk;
1174
1175         /* is this a first send, or a retransmission? */
1176         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1177                 /* compose a new ASCONF chunk and send it */
1178                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1179         } else {
1180                 /*
1181                  * Retransmission of the existing ASCONF is needed
1182                  */
1183
1184                 /* find the existing ASCONF */
1185                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1186                 if (asconf == NULL) {
1187                         return (0);
1188                 }
1189                 /* do threshold management */
1190                 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1191                     stcb->asoc.max_send_times)) {
1192                         /* Assoc is over */
1193                         return (1);
1194                 }
1195                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1196                         /*
1197                          * Something is rotten: our peer is not responding
1198                          * to ASCONFs but apparently is to other chunks.
1199                          * i.e. it is not properly handling the chunk type
1200                          * upper bits. Mark this peer as ASCONF incapable
1201                          * and cleanup.
1202                          */
1203                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1204                         sctp_asconf_cleanup(stcb, net);
1205                         return (0);
1206                 }
1207                 /*
1208                  * cleared threshold management, so now backoff the net and
1209                  * select an alternate
1210                  */
1211                 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1212                 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1213                 if (asconf->whoTo != alt) {
1214                         sctp_free_remote_addr(asconf->whoTo);
1215                         asconf->whoTo = alt;
1216                         atomic_add_int(&alt->ref_count, 1);
1217                 }
1218
1219                 /* See if an ECN Echo is also stranded */
1220                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1221                         if ((chk->whoTo == net) &&
1222                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1223                                 sctp_free_remote_addr(chk->whoTo);
1224                                 chk->whoTo = alt;
1225                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1226                                         chk->sent = SCTP_DATAGRAM_RESEND;
1227                                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1228                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1229                                 }
1230                                 atomic_add_int(&alt->ref_count, 1);
1231                         }
1232                 }
1233                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1234                         if (chk->whoTo != alt) {
1235                                 sctp_free_remote_addr(chk->whoTo);
1236                                 chk->whoTo = alt;
1237                                 atomic_add_int(&alt->ref_count, 1);
1238                         }
1239                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1240                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1241                         chk->sent = SCTP_DATAGRAM_RESEND;
1242                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1243                 }
1244                 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1245                         /*
1246                          * If the address went un-reachable, we need to move
1247                          * to the alternate for ALL chunks in queue
1248                          */
1249                         sctp_move_chunks_from_net(stcb, net);
1250                 }
1251                 /* mark the retran info */
1252                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1253                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1254                 asconf->sent = SCTP_DATAGRAM_RESEND;
1255                 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1256
1257                 /* send another ASCONF if any and we can do */
1258                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1259         }
1260         return (0);
1261 }
1262
1263 /* Mobility adaptation */
1264 void
1265 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1266     struct sctp_nets *net SCTP_UNUSED)
1267 {
1268         if (stcb->asoc.deleted_primary == NULL) {
1269                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1270                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1271                 return;
1272         }
1273         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1274         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1275         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1276         stcb->asoc.deleted_primary = NULL;
1277         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1278         return;
1279 }
1280
1281 /*
1282  * For the shutdown and shutdown-ack, we do not keep one around on the
1283  * control queue. This means we must generate a new one and call the general
1284  * chunk output routine, AFTER having done threshold management.
1285  * It is assumed that net is non-NULL.
1286  */
1287 int
1288 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1289     struct sctp_nets *net)
1290 {
1291         struct sctp_nets *alt;
1292
1293         /* first threshold management */
1294         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1295                 /* Assoc is over */
1296                 return (1);
1297         }
1298         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1299         /* second select an alternative */
1300         alt = sctp_find_alternate_net(stcb, net, 0);
1301
1302         /* third generate a shutdown into the queue for out net */
1303         sctp_send_shutdown(stcb, alt);
1304
1305         /* fourth restart timer */
1306         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1307         return (0);
1308 }
1309
1310 int
1311 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1312     struct sctp_nets *net)
1313 {
1314         struct sctp_nets *alt;
1315
1316         /* first threshold management */
1317         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1318                 /* Assoc is over */
1319                 return (1);
1320         }
1321         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1322         /* second select an alternative */
1323         alt = sctp_find_alternate_net(stcb, net, 0);
1324
1325         /* third generate a shutdown into the queue for out net */
1326         sctp_send_shutdown_ack(stcb, alt);
1327
1328         /* fourth restart timer */
1329         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1330         return (0);
1331 }
1332
1333 static void
1334 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1335     struct sctp_tcb *stcb)
1336 {
1337         struct sctp_stream_queue_pending *sp;
1338         unsigned int i, chks_in_queue = 0;
1339         int being_filled = 0;
1340
1341         /*
1342          * This function is ONLY called when the send/sent queues are empty.
1343          */
1344         if ((stcb == NULL) || (inp == NULL))
1345                 return;
1346
1347         if (stcb->asoc.sent_queue_retran_cnt) {
1348                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1349                     stcb->asoc.sent_queue_retran_cnt);
1350                 stcb->asoc.sent_queue_retran_cnt = 0;
1351         }
1352         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1353                 /* No stream scheduler information, initialize scheduler */
1354                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1355                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1356                         /* yep, we lost a stream or two */
1357                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1358                 } else {
1359                         /* no streams lost */
1360                         stcb->asoc.total_output_queue_size = 0;
1361                 }
1362         }
1363         /* Check to see if some data queued, if so report it */
1364         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1365                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1366                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1367                                 if (sp->msg_is_complete)
1368                                         being_filled++;
1369                                 chks_in_queue++;
1370                         }
1371                 }
1372         }
1373         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1374                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1375                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1376         }
1377         if (chks_in_queue) {
1378                 /* call the output queue function */
1379                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1380                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1381                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1382                         /*
1383                          * Probably should go in and make it go back through
1384                          * and add fragments allowed
1385                          */
1386                         if (being_filled == 0) {
1387                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1388                                     chks_in_queue);
1389                         }
1390                 }
1391         } else {
1392                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1393                     (u_long)stcb->asoc.total_output_queue_size);
1394                 stcb->asoc.total_output_queue_size = 0;
1395         }
1396 }
1397
1398 int
1399 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1400     struct sctp_nets *net)
1401 {
1402         uint8_t net_was_pf;
1403
1404         if (net->dest_state & SCTP_ADDR_PF) {
1405                 net_was_pf = 1;
1406         } else {
1407                 net_was_pf = 0;
1408         }
1409         if (net->hb_responded == 0) {
1410                 if (net->ro._s_addr) {
1411                         /*
1412                          * Invalidate the src address if we did not get a
1413                          * response last time.
1414                          */
1415                         sctp_free_ifa(net->ro._s_addr);
1416                         net->ro._s_addr = NULL;
1417                         net->src_addr_selected = 0;
1418                 }
1419                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1420                 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1421                         /* Assoc is over */
1422                         return (1);
1423                 }
1424         }
1425         /* Zero PBA, if it needs it */
1426         if (net->partial_bytes_acked) {
1427                 net->partial_bytes_acked = 0;
1428         }
1429         if ((stcb->asoc.total_output_queue_size > 0) &&
1430             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1431             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1432                 sctp_audit_stream_queues_for_size(inp, stcb);
1433         }
1434         if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1435             !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1436                 /*
1437                  * when move to PF during threshold mangement, a HB has been
1438                  * queued in that routine
1439                  */
1440                 uint32_t ms_gone_by;
1441
1442                 if ((net->last_sent_time.tv_sec > 0) ||
1443                     (net->last_sent_time.tv_usec > 0)) {
1444                         struct timeval diff;
1445
1446                         SCTP_GETTIME_TIMEVAL(&diff);
1447                         timevalsub(&diff, &net->last_sent_time);
1448                         ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1449                             (uint32_t)(diff.tv_usec / 1000);
1450                 } else {
1451                         ms_gone_by = 0xffffffff;
1452                 }
1453                 if ((ms_gone_by >= net->heart_beat_delay) ||
1454                     (net->dest_state & SCTP_ADDR_PF)) {
1455                         sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1456                 }
1457         }
1458         return (0);
1459 }
1460
1461 void
1462 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1463     struct sctp_tcb *stcb,
1464     struct sctp_nets *net)
1465 {
1466         uint32_t next_mtu, mtu;
1467
1468         next_mtu = sctp_get_next_mtu(net->mtu);
1469
1470         if ((next_mtu > net->mtu) && (net->port == 0)) {
1471                 if ((net->src_addr_selected == 0) ||
1472                     (net->ro._s_addr == NULL) ||
1473                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1474                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1475                                 sctp_free_ifa(net->ro._s_addr);
1476                                 net->ro._s_addr = NULL;
1477                                 net->src_addr_selected = 0;
1478                         } else if (net->ro._s_addr == NULL) {
1479 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1480                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1481                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1482
1483                                         /* KAME hack: embed scopeid */
1484                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1485                                 }
1486 #endif
1487
1488                                 net->ro._s_addr = sctp_source_address_selection(inp,
1489                                     stcb,
1490                                     (sctp_route_t *)&net->ro,
1491                                     net, 0, stcb->asoc.vrf_id);
1492 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1493                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1494                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1495
1496                                         (void)sa6_recoverscope(sin6);
1497                                 }
1498 #endif                          /* INET6 */
1499                         }
1500                         if (net->ro._s_addr)
1501                                 net->src_addr_selected = 1;
1502                 }
1503                 if (net->ro._s_addr) {
1504                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1505 #if defined(INET) || defined(INET6)
1506                         if (net->port) {
1507                                 mtu -= sizeof(struct udphdr);
1508                         }
1509 #endif
1510                         if (mtu > next_mtu) {
1511                                 net->mtu = next_mtu;
1512                         } else {
1513                                 net->mtu = mtu;
1514                         }
1515                 }
1516         }
1517         /* restart the timer */
1518         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1519 }
1520
1521 void
1522 sctp_autoclose_timer(struct sctp_inpcb *inp,
1523     struct sctp_tcb *stcb,
1524     struct sctp_nets *net)
1525 {
1526         struct timeval tn, *tim_touse;
1527         struct sctp_association *asoc;
1528         int ticks_gone_by;
1529
1530         (void)SCTP_GETTIME_TIMEVAL(&tn);
1531         if (stcb->asoc.sctp_autoclose_ticks &&
1532             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1533                 /* Auto close is on */
1534                 asoc = &stcb->asoc;
1535                 /* pick the time to use */
1536                 if (asoc->time_last_rcvd.tv_sec >
1537                     asoc->time_last_sent.tv_sec) {
1538                         tim_touse = &asoc->time_last_rcvd;
1539                 } else {
1540                         tim_touse = &asoc->time_last_sent;
1541                 }
1542                 /* Now has long enough transpired to autoclose? */
1543                 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1544                 if ((ticks_gone_by > 0) &&
1545                     (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1546                         /*
1547                          * autoclose time has hit, call the output routine,
1548                          * which should do nothing just to be SURE we don't
1549                          * have hanging data. We can then safely check the
1550                          * queues and know that we are clear to send
1551                          * shutdown
1552                          */
1553                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1554                         /* Are we clean? */
1555                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1556                             TAILQ_EMPTY(&asoc->sent_queue)) {
1557                                 /*
1558                                  * there is nothing queued to send, so I'm
1559                                  * done...
1560                                  */
1561                                 if (SCTP_GET_STATE(stcb) != SCTP_STATE_SHUTDOWN_SENT) {
1562                                         /* only send SHUTDOWN 1st time thru */
1563                                         struct sctp_nets *netp;
1564
1565                                         if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
1566                                             (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1567                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1568                                         }
1569                                         SCTP_SET_STATE(stcb, SCTP_STATE_SHUTDOWN_SENT);
1570                                         sctp_stop_timers_for_shutdown(stcb);
1571                                         if (stcb->asoc.alternate) {
1572                                                 netp = stcb->asoc.alternate;
1573                                         } else {
1574                                                 netp = stcb->asoc.primary_destination;
1575                                         }
1576                                         sctp_send_shutdown(stcb, netp);
1577                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1578                                             stcb->sctp_ep, stcb,
1579                                             netp);
1580                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1581                                             stcb->sctp_ep, stcb,
1582                                             netp);
1583                                 }
1584                         }
1585                 } else {
1586                         /*
1587                          * No auto close at this time, reset t-o to check
1588                          * later
1589                          */
1590                         int tmp;
1591
1592                         /* fool the timer startup to use the time left */
1593                         tmp = asoc->sctp_autoclose_ticks;
1594                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1595                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1596                             net);
1597                         /* restore the real tick value */
1598                         asoc->sctp_autoclose_ticks = tmp;
1599                 }
1600         }
1601 }