]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - sys/netinet/sctp_timer.c
MFV r331400: 8484 Implement aggregate sum and use for arc counters
[FreeBSD/FreeBSD.git] / sys / netinet / sctp_timer.c
1 /*-
2  * SPDX-License-Identifier: BSD-3-Clause
3  *
4  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
5  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
6  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions are met:
10  *
11  * a) Redistributions of source code must retain the above copyright notice,
12  *    this list of conditions and the following disclaimer.
13  *
14  * b) Redistributions in binary form must reproduce the above copyright
15  *    notice, this list of conditions and the following disclaimer in
16  *    the documentation and/or other materials provided with the distribution.
17  *
18  * c) Neither the name of Cisco Systems, Inc. nor the names of its
19  *    contributors may be used to endorse or promote products derived
20  *    from this software without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
24  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32  * THE POSSIBILITY OF SUCH DAMAGE.
33  */
34
35 #include <sys/cdefs.h>
36 __FBSDID("$FreeBSD$");
37
38 #define _IP_VHL
39 #include <netinet/sctp_os.h>
40 #include <netinet/sctp_pcb.h>
41 #ifdef INET6
42 #endif
43 #include <netinet/sctp_var.h>
44 #include <netinet/sctp_sysctl.h>
45 #include <netinet/sctp_timer.h>
46 #include <netinet/sctputil.h>
47 #include <netinet/sctp_output.h>
48 #include <netinet/sctp_header.h>
49 #include <netinet/sctp_indata.h>
50 #include <netinet/sctp_asconf.h>
51 #include <netinet/sctp_input.h>
52 #include <netinet/sctp.h>
53 #include <netinet/sctp_uio.h>
54 #if defined(INET) || defined(INET6)
55 #include <netinet/udp.h>
56 #endif
57
58
59 void
60 sctp_audit_retranmission_queue(struct sctp_association *asoc)
61 {
62         struct sctp_tmit_chunk *chk;
63
64         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
65             asoc->sent_queue_retran_cnt,
66             asoc->sent_queue_cnt);
67         asoc->sent_queue_retran_cnt = 0;
68         asoc->sent_queue_cnt = 0;
69         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
70                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
71                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
72                 }
73                 asoc->sent_queue_cnt++;
74         }
75         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
76                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
77                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
78                 }
79         }
80         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
81                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
82                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
83                 }
84         }
85         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
86             asoc->sent_queue_retran_cnt,
87             asoc->sent_queue_cnt);
88 }
89
90 static int
91 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
92     struct sctp_nets *net, uint16_t threshold)
93 {
94         if (net) {
95                 net->error_count++;
96                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
97                     (void *)net, net->error_count,
98                     net->failure_threshold);
99                 if (net->error_count > net->failure_threshold) {
100                         /* We had a threshold failure */
101                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
102                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
103                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
104                                 net->dest_state &= ~SCTP_ADDR_PF;
105                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
106                                     stcb, 0,
107                                     (void *)net, SCTP_SO_NOT_LOCKED);
108                         }
109                 } else if ((net->pf_threshold < net->failure_threshold) &&
110                     (net->error_count > net->pf_threshold)) {
111                         if (!(net->dest_state & SCTP_ADDR_PF)) {
112                                 net->dest_state |= SCTP_ADDR_PF;
113                                 net->last_active = sctp_get_tick_count();
114                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
115                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
116                                     inp, stcb, net,
117                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
118                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
119                         }
120                 }
121         }
122         if (stcb == NULL)
123                 return (0);
124
125         if (net) {
126                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
127                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
128                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
129                                     stcb->asoc.overall_error_count,
130                                     (stcb->asoc.overall_error_count + 1),
131                                     SCTP_FROM_SCTP_TIMER,
132                                     __LINE__);
133                         }
134                         stcb->asoc.overall_error_count++;
135                 }
136         } else {
137                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
138                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
139                             stcb->asoc.overall_error_count,
140                             (stcb->asoc.overall_error_count + 1),
141                             SCTP_FROM_SCTP_TIMER,
142                             __LINE__);
143                 }
144                 stcb->asoc.overall_error_count++;
145         }
146         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
147             (void *)&stcb->asoc, stcb->asoc.overall_error_count,
148             (uint32_t)threshold,
149             ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state));
150         /*
151          * We specifically do not do >= to give the assoc one more change
152          * before we fail it.
153          */
154         if (stcb->asoc.overall_error_count > threshold) {
155                 /* Abort notification sends a ULP notify */
156                 struct mbuf *op_err;
157
158                 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
159                     "Association error counter exceeded");
160                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
161                 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
162                 return (1);
163         }
164         return (0);
165 }
166
167 /*
168  * sctp_find_alternate_net() returns a non-NULL pointer as long
169  * the argument net is non-NULL.
170  */
171 struct sctp_nets *
172 sctp_find_alternate_net(struct sctp_tcb *stcb,
173     struct sctp_nets *net,
174     int mode)
175 {
176         /* Find and return an alternate network if possible */
177         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
178         int once;
179
180         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
181         int min_errors = -1;
182         uint32_t max_cwnd = 0;
183
184         if (stcb->asoc.numnets == 1) {
185                 /* No others but net */
186                 return (TAILQ_FIRST(&stcb->asoc.nets));
187         }
188         /*
189          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
190          * net algorithm. This algorithm chooses the active destination (not
191          * in PF state) with the largest cwnd value. If all destinations are
192          * in PF state, unreachable, or unconfirmed, choose the desination
193          * that is in PF state with the lowest error count. In case of a
194          * tie, choose the destination that was most recently active.
195          */
196         if (mode == 2) {
197                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
198                         /*
199                          * JRS 5/14/07 - If the destination is unreachable
200                          * or unconfirmed, skip it.
201                          */
202                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
203                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
204                                 continue;
205                         }
206                         /*
207                          * JRS 5/14/07 -  If the destination is reachable
208                          * but in PF state, compare the error count of the
209                          * destination to the minimum error count seen thus
210                          * far. Store the destination with the lower error
211                          * count.  If the error counts are equal, store the
212                          * destination that was most recently active.
213                          */
214                         if (mnet->dest_state & SCTP_ADDR_PF) {
215                                 /*
216                                  * JRS 5/14/07 - If the destination under
217                                  * consideration is the current destination,
218                                  * work as if the error count is one higher.
219                                  * The actual error count will not be
220                                  * incremented until later in the t3
221                                  * handler.
222                                  */
223                                 if (mnet == net) {
224                                         if (min_errors == -1) {
225                                                 min_errors = mnet->error_count + 1;
226                                                 min_errors_net = mnet;
227                                         } else if (mnet->error_count + 1 < min_errors) {
228                                                 min_errors = mnet->error_count + 1;
229                                                 min_errors_net = mnet;
230                                         } else if (mnet->error_count + 1 == min_errors
231                                             && mnet->last_active > min_errors_net->last_active) {
232                                                 min_errors_net = mnet;
233                                                 min_errors = mnet->error_count + 1;
234                                         }
235                                         continue;
236                                 } else {
237                                         if (min_errors == -1) {
238                                                 min_errors = mnet->error_count;
239                                                 min_errors_net = mnet;
240                                         } else if (mnet->error_count < min_errors) {
241                                                 min_errors = mnet->error_count;
242                                                 min_errors_net = mnet;
243                                         } else if (mnet->error_count == min_errors
244                                             && mnet->last_active > min_errors_net->last_active) {
245                                                 min_errors_net = mnet;
246                                                 min_errors = mnet->error_count;
247                                         }
248                                         continue;
249                                 }
250                         }
251                         /*
252                          * JRS 5/14/07 - If the destination is reachable and
253                          * not in PF state, compare the cwnd of the
254                          * destination to the highest cwnd seen thus far.
255                          * Store the destination with the higher cwnd value.
256                          * If the cwnd values are equal, randomly choose one
257                          * of the two destinations.
258                          */
259                         if (max_cwnd < mnet->cwnd) {
260                                 max_cwnd_net = mnet;
261                                 max_cwnd = mnet->cwnd;
262                         } else if (max_cwnd == mnet->cwnd) {
263                                 uint32_t rndval;
264                                 uint8_t this_random;
265
266                                 if (stcb->asoc.hb_random_idx > 3) {
267                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
268                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
269                                         this_random = stcb->asoc.hb_random_values[0];
270                                         stcb->asoc.hb_random_idx++;
271                                         stcb->asoc.hb_ect_randombit = 0;
272                                 } else {
273                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
274                                         stcb->asoc.hb_random_idx++;
275                                         stcb->asoc.hb_ect_randombit = 0;
276                                 }
277                                 if (this_random % 2 == 1) {
278                                         max_cwnd_net = mnet;
279                                         max_cwnd = mnet->cwnd;  /* Useless? */
280                                 }
281                         }
282                 }
283                 if (max_cwnd_net == NULL) {
284                         if (min_errors_net == NULL) {
285                                 return (net);
286                         }
287                         return (min_errors_net);
288                 } else {
289                         return (max_cwnd_net);
290                 }
291         }                       /* JRS 5/14/07 - If mode is set to 1, use the
292                                  * CMT policy for choosing an alternate net. */
293         else if (mode == 1) {
294                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
295                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
296                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
297                                 /*
298                                  * will skip ones that are not-reachable or
299                                  * unconfirmed
300                                  */
301                                 continue;
302                         }
303                         if (max_cwnd < mnet->cwnd) {
304                                 max_cwnd_net = mnet;
305                                 max_cwnd = mnet->cwnd;
306                         } else if (max_cwnd == mnet->cwnd) {
307                                 uint32_t rndval;
308                                 uint8_t this_random;
309
310                                 if (stcb->asoc.hb_random_idx > 3) {
311                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
312                                         memcpy(stcb->asoc.hb_random_values, &rndval,
313                                             sizeof(stcb->asoc.hb_random_values));
314                                         this_random = stcb->asoc.hb_random_values[0];
315                                         stcb->asoc.hb_random_idx = 0;
316                                         stcb->asoc.hb_ect_randombit = 0;
317                                 } else {
318                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
319                                         stcb->asoc.hb_random_idx++;
320                                         stcb->asoc.hb_ect_randombit = 0;
321                                 }
322                                 if (this_random % 2) {
323                                         max_cwnd_net = mnet;
324                                         max_cwnd = mnet->cwnd;
325                                 }
326                         }
327                 }
328                 if (max_cwnd_net) {
329                         return (max_cwnd_net);
330                 }
331         }
332         mnet = net;
333         once = 0;
334
335         if (mnet == NULL) {
336                 mnet = TAILQ_FIRST(&stcb->asoc.nets);
337                 if (mnet == NULL) {
338                         return (NULL);
339                 }
340         }
341         for (;;) {
342                 alt = TAILQ_NEXT(mnet, sctp_next);
343                 if (alt == NULL) {
344                         once++;
345                         if (once > 1) {
346                                 break;
347                         }
348                         alt = TAILQ_FIRST(&stcb->asoc.nets);
349                         if (alt == NULL) {
350                                 return (NULL);
351                         }
352                 }
353                 if (alt->ro.ro_rt == NULL) {
354                         if (alt->ro._s_addr) {
355                                 sctp_free_ifa(alt->ro._s_addr);
356                                 alt->ro._s_addr = NULL;
357                         }
358                         alt->src_addr_selected = 0;
359                 }
360                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
361                     (alt->ro.ro_rt != NULL) &&
362                     (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
363                         /* Found a reachable address */
364                         break;
365                 }
366                 mnet = alt;
367         }
368
369         if (alt == NULL) {
370                 /* Case where NO insv network exists (dormant state) */
371                 /* we rotate destinations */
372                 once = 0;
373                 mnet = net;
374                 for (;;) {
375                         if (mnet == NULL) {
376                                 return (TAILQ_FIRST(&stcb->asoc.nets));
377                         }
378                         alt = TAILQ_NEXT(mnet, sctp_next);
379                         if (alt == NULL) {
380                                 once++;
381                                 if (once > 1) {
382                                         break;
383                                 }
384                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
385                                 if (alt == NULL) {
386                                         break;
387                                 }
388                         }
389                         if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
390                             (alt != net)) {
391                                 /* Found an alternate address */
392                                 break;
393                         }
394                         mnet = alt;
395                 }
396         }
397         if (alt == NULL) {
398                 return (net);
399         }
400         return (alt);
401 }
402
403 static void
404 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
405     struct sctp_nets *net,
406     int win_probe,
407     int num_marked, int num_abandoned)
408 {
409         if (net->RTO == 0) {
410                 if (net->RTO_measured) {
411                         net->RTO = stcb->asoc.minrto;
412                 } else {
413                         net->RTO = stcb->asoc.initial_rto;
414                 }
415         }
416         net->RTO <<= 1;
417         if (net->RTO > stcb->asoc.maxrto) {
418                 net->RTO = stcb->asoc.maxrto;
419         }
420         if ((win_probe == 0) && (num_marked || num_abandoned)) {
421                 /* We don't apply penalty to window probe scenarios */
422                 /* JRS - Use the congestion control given in the CC module */
423                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
424         }
425 }
426
427 #ifndef INVARIANTS
428 static void
429 sctp_recover_sent_list(struct sctp_tcb *stcb)
430 {
431         struct sctp_tmit_chunk *chk, *nchk;
432         struct sctp_association *asoc;
433
434         asoc = &stcb->asoc;
435         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
436                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) {
437                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
438                             (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq);
439                         if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
440                                 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
441                                         asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
442                                 }
443                         }
444                         if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) &&
445                             (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) &&
446                             TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) {
447                                 asoc->trigger_reset = 1;
448                         }
449                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
450                         if (PR_SCTP_ENABLED(chk->flags)) {
451                                 if (asoc->pr_sctp_cnt != 0)
452                                         asoc->pr_sctp_cnt--;
453                         }
454                         if (chk->data) {
455                                 /* sa_ignore NO_NULL_CHK */
456                                 sctp_free_bufspace(stcb, asoc, chk, 1);
457                                 sctp_m_freem(chk->data);
458                                 chk->data = NULL;
459                                 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
460                                         asoc->sent_queue_cnt_removeable--;
461                                 }
462                         }
463                         asoc->sent_queue_cnt--;
464                         sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
465                 }
466         }
467         SCTP_PRINTF("after recover order is as follows\n");
468         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
469                 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn);
470         }
471 }
472 #endif
473
474 static int
475 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
476     struct sctp_nets *net,
477     struct sctp_nets *alt,
478     int window_probe,
479     int *num_marked,
480     int *num_abandoned)
481 {
482
483         /*
484          * Mark all chunks (well not all) that were sent to *net for
485          * retransmission. Move them to alt for there destination as well...
486          * We only mark chunks that have been outstanding long enough to
487          * have received feed-back.
488          */
489         struct sctp_tmit_chunk *chk, *nchk;
490         struct sctp_nets *lnets;
491         struct timeval now, min_wait, tv;
492         int cur_rto;
493         int cnt_abandoned;
494         int audit_tf, num_mk, fir;
495         unsigned int cnt_mk;
496         uint32_t orig_flight, orig_tf;
497         uint32_t tsnlast, tsnfirst;
498         int recovery_cnt = 0;
499
500
501         /* none in flight now */
502         audit_tf = 0;
503         fir = 0;
504         /*
505          * figure out how long a data chunk must be pending before we can
506          * mark it ..
507          */
508         (void)SCTP_GETTIME_TIMEVAL(&now);
509         /* get cur rto in micro-seconds */
510         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
511         cur_rto *= 1000;
512         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
513                 sctp_log_fr(cur_rto,
514                     stcb->asoc.peers_rwnd,
515                     window_probe,
516                     SCTP_FR_T3_MARK_TIME);
517                 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
518                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
519         }
520         tv.tv_sec = cur_rto / 1000000;
521         tv.tv_usec = cur_rto % 1000000;
522         min_wait = now;
523         timevalsub(&min_wait, &tv);
524         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
525                 /*
526                  * if we hit here, we don't have enough seconds on the clock
527                  * to account for the RTO. We just let the lower seconds be
528                  * the bounds and don't worry about it. This may mean we
529                  * will mark a lot more than we should.
530                  */
531                 min_wait.tv_sec = min_wait.tv_usec = 0;
532         }
533         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
534                 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
535                 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
536         }
537         /*
538          * Our rwnd will be incorrect here since we are not adding back the
539          * cnt * mbuf but we will fix that down below.
540          */
541         orig_flight = net->flight_size;
542         orig_tf = stcb->asoc.total_flight;
543
544         net->fast_retran_ip = 0;
545         /* Now on to each chunk */
546         cnt_abandoned = 0;
547         num_mk = cnt_mk = 0;
548         tsnfirst = tsnlast = 0;
549 #ifndef INVARIANTS
550 start_again:
551 #endif
552         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
553                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) {
554                         /* Strange case our list got out of order? */
555                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
556                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn);
557                         recovery_cnt++;
558 #ifdef INVARIANTS
559                         panic("last acked >= chk on sent-Q");
560 #else
561                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
562                         sctp_recover_sent_list(stcb);
563                         if (recovery_cnt < 10) {
564                                 goto start_again;
565                         } else {
566                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
567                         }
568 #endif
569                 }
570                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
571                         /*
572                          * found one to mark: If it is less than
573                          * DATAGRAM_ACKED it MUST not be a skipped or marked
574                          * TSN but instead one that is either already set
575                          * for retransmission OR one that needs
576                          * retransmission.
577                          */
578
579                         /* validate its been outstanding long enough */
580                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
581                                 sctp_log_fr(chk->rec.data.tsn,
582                                     chk->sent_rcv_time.tv_sec,
583                                     chk->sent_rcv_time.tv_usec,
584                                     SCTP_FR_T3_MARK_TIME);
585                         }
586                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
587                                 /*
588                                  * we have reached a chunk that was sent
589                                  * some seconds past our min.. forget it we
590                                  * will find no more to send.
591                                  */
592                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
593                                         sctp_log_fr(0,
594                                             chk->sent_rcv_time.tv_sec,
595                                             chk->sent_rcv_time.tv_usec,
596                                             SCTP_FR_T3_STOPPED);
597                                 }
598                                 continue;
599                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
600                             (window_probe == 0)) {
601                                 /*
602                                  * we must look at the micro seconds to
603                                  * know.
604                                  */
605                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
606                                         /*
607                                          * ok it was sent after our boundary
608                                          * time.
609                                          */
610                                         continue;
611                                 }
612                         }
613                         if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
614                                 /* Is it expired? */
615                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
616                                         /* Yes so drop it */
617                                         if (chk->data) {
618                                                 (void)sctp_release_pr_sctp_chunk(stcb,
619                                                     chk,
620                                                     1,
621                                                     SCTP_SO_NOT_LOCKED);
622                                                 cnt_abandoned++;
623                                         }
624                                         continue;
625                                 }
626                         }
627                         if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
628                                 /* Has it been retransmitted tv_sec times? */
629                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
630                                         if (chk->data) {
631                                                 (void)sctp_release_pr_sctp_chunk(stcb,
632                                                     chk,
633                                                     1,
634                                                     SCTP_SO_NOT_LOCKED);
635                                                 cnt_abandoned++;
636                                         }
637                                         continue;
638                                 }
639                         }
640                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
641                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
642                                 num_mk++;
643                                 if (fir == 0) {
644                                         fir = 1;
645                                         tsnfirst = chk->rec.data.tsn;
646                                 }
647                                 tsnlast = chk->rec.data.tsn;
648                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
649                                         sctp_log_fr(chk->rec.data.tsn, chk->snd_count,
650                                             0, SCTP_FR_T3_MARKED);
651                                 }
652                                 if (chk->rec.data.chunk_was_revoked) {
653                                         /* deflate the cwnd */
654                                         chk->whoTo->cwnd -= chk->book_size;
655                                         chk->rec.data.chunk_was_revoked = 0;
656                                 }
657                                 net->marked_retrans++;
658                                 stcb->asoc.marked_retrans++;
659                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
660                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
661                                             chk->whoTo->flight_size,
662                                             chk->book_size,
663                                             (uint32_t)(uintptr_t)chk->whoTo,
664                                             chk->rec.data.tsn);
665                                 }
666                                 sctp_flight_size_decrease(chk);
667                                 sctp_total_flight_decrease(stcb, chk);
668                                 stcb->asoc.peers_rwnd += chk->send_size;
669                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
670                         }
671                         chk->sent = SCTP_DATAGRAM_RESEND;
672                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
673                         SCTP_STAT_INCR(sctps_markedretrans);
674
675                         /* reset the TSN for striking and other FR stuff */
676                         chk->rec.data.doing_fast_retransmit = 0;
677                         /* Clear any time so NO RTT is being done */
678
679                         if (chk->do_rtt) {
680                                 if (chk->whoTo->rto_needed == 0) {
681                                         chk->whoTo->rto_needed = 1;
682                                 }
683                         }
684                         chk->do_rtt = 0;
685                         if (alt != net) {
686                                 sctp_free_remote_addr(chk->whoTo);
687                                 chk->no_fr_allowed = 1;
688                                 chk->whoTo = alt;
689                                 atomic_add_int(&alt->ref_count, 1);
690                         } else {
691                                 chk->no_fr_allowed = 0;
692                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
693                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
694                                 } else {
695                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn;
696                                 }
697                         }
698                         /*
699                          * CMT: Do not allow FRs on retransmitted TSNs.
700                          */
701                         if (stcb->asoc.sctp_cmt_on_off > 0) {
702                                 chk->no_fr_allowed = 1;
703                         }
704 #ifdef THIS_SHOULD_NOT_BE_DONE
705                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
706                         /* remember highest acked one */
707                         could_be_sent = chk;
708 #endif
709                 }
710                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
711                         cnt_mk++;
712                 }
713         }
714         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
715                 /* we did not subtract the same things? */
716                 audit_tf = 1;
717         }
718         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
719                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
720         }
721 #ifdef SCTP_DEBUG
722         if (num_mk) {
723                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
724                     tsnlast);
725                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n",
726                     num_mk,
727                     stcb->asoc.peers_rwnd);
728         }
729 #endif
730         *num_marked = num_mk;
731         *num_abandoned = cnt_abandoned;
732         /*
733          * Now check for a ECN Echo that may be stranded And include the
734          * cnt_mk'd to have all resends in the control queue.
735          */
736         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
737                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
738                         cnt_mk++;
739                 }
740                 if ((chk->whoTo == net) &&
741                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
742                         sctp_free_remote_addr(chk->whoTo);
743                         chk->whoTo = alt;
744                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
745                                 chk->sent = SCTP_DATAGRAM_RESEND;
746                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
747                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
748                                 cnt_mk++;
749                         }
750                         atomic_add_int(&alt->ref_count, 1);
751                 }
752         }
753 #ifdef THIS_SHOULD_NOT_BE_DONE
754         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
755                 /* fix it so we retransmit the highest acked anyway */
756                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
757                 cnt_mk++;
758                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
759         }
760 #endif
761         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
762 #ifdef INVARIANTS
763                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
764                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
765 #endif
766 #ifndef SCTP_AUDITING_ENABLED
767                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
768 #endif
769         }
770         if (audit_tf) {
771                 SCTPDBG(SCTP_DEBUG_TIMER4,
772                     "Audit total flight due to negative value net:%p\n",
773                     (void *)net);
774                 stcb->asoc.total_flight = 0;
775                 stcb->asoc.total_flight_count = 0;
776                 /* Clear all networks flight size */
777                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
778                         lnets->flight_size = 0;
779                         SCTPDBG(SCTP_DEBUG_TIMER4,
780                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
781                             (void *)lnets, lnets->cwnd, lnets->ssthresh);
782                 }
783                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
784                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
785                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
786                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
787                                             chk->whoTo->flight_size,
788                                             chk->book_size,
789                                             (uint32_t)(uintptr_t)chk->whoTo,
790                                             chk->rec.data.tsn);
791                                 }
792                                 sctp_flight_size_increase(chk);
793                                 sctp_total_flight_increase(stcb, chk);
794                         }
795                 }
796         }
797         /* We return 1 if we only have a window probe outstanding */
798         return (0);
799 }
800
801
802 int
803 sctp_t3rxt_timer(struct sctp_inpcb *inp,
804     struct sctp_tcb *stcb,
805     struct sctp_nets *net)
806 {
807         struct sctp_nets *alt;
808         int win_probe, num_mk, num_abandoned;
809
810         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
811                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
812         }
813         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
814                 struct sctp_nets *lnet;
815
816                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
817                         if (net == lnet) {
818                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
819                         } else {
820                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
821                         }
822                 }
823         }
824         /* Find an alternate and mark those for retransmission */
825         if ((stcb->asoc.peers_rwnd == 0) &&
826             (stcb->asoc.total_flight < net->mtu)) {
827                 SCTP_STAT_INCR(sctps_timowindowprobe);
828                 win_probe = 1;
829         } else {
830                 win_probe = 0;
831         }
832
833         if (win_probe == 0) {
834                 /* We don't do normal threshold management on window probes */
835                 if (sctp_threshold_management(inp, stcb, net,
836                     stcb->asoc.max_send_times)) {
837                         /* Association was destroyed */
838                         return (1);
839                 } else {
840                         if (net != stcb->asoc.primary_destination) {
841                                 /* send a immediate HB if our RTO is stale */
842                                 struct timeval now;
843                                 unsigned int ms_goneby;
844
845                                 (void)SCTP_GETTIME_TIMEVAL(&now);
846                                 if (net->last_sent_time.tv_sec) {
847                                         ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
848                                 } else {
849                                         ms_goneby = 0;
850                                 }
851                                 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
852                                         if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
853                                                 /*
854                                                  * no recent feed back in an
855                                                  * RTO or more, request a
856                                                  * RTT update
857                                                  */
858                                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
859                                         }
860                                 }
861                         }
862                 }
863         } else {
864                 /*
865                  * For a window probe we don't penalize the net's but only
866                  * the association. This may fail it if SACKs are not coming
867                  * back. If sack's are coming with rwnd locked at 0, we will
868                  * continue to hold things waiting for rwnd to raise
869                  */
870                 if (sctp_threshold_management(inp, stcb, NULL,
871                     stcb->asoc.max_send_times)) {
872                         /* Association was destroyed */
873                         return (1);
874                 }
875         }
876         if (stcb->asoc.sctp_cmt_on_off > 0) {
877                 if (net->pf_threshold < net->failure_threshold) {
878                         alt = sctp_find_alternate_net(stcb, net, 2);
879                 } else {
880                         /*
881                          * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
882                          * being used, then pick dest with largest ssthresh
883                          * for any retransmission.
884                          */
885                         alt = sctp_find_alternate_net(stcb, net, 1);
886                         /*
887                          * CUCv2: If a different dest is picked for the
888                          * retransmission, then new (rtx-)pseudo_cumack
889                          * needs to be tracked for orig dest. Let CUCv2
890                          * track new (rtx-) pseudo-cumack always.
891                          */
892                         net->find_pseudo_cumack = 1;
893                         net->find_rtx_pseudo_cumack = 1;
894                 }
895         } else {
896                 alt = sctp_find_alternate_net(stcb, net, 0);
897         }
898
899         num_mk = 0;
900         num_abandoned = 0;
901         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
902             &num_mk, &num_abandoned);
903         /* FR Loss recovery just ended with the T3. */
904         stcb->asoc.fast_retran_loss_recovery = 0;
905
906         /* CMT FR loss recovery ended with the T3 */
907         net->fast_retran_loss_recovery = 0;
908         if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
909             (net->flight_size == 0)) {
910                 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
911         }
912         /*
913          * setup the sat loss recovery that prevents satellite cwnd advance.
914          */
915         stcb->asoc.sat_t3_loss_recovery = 1;
916         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
917
918         /* Backoff the timer and cwnd */
919         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
920         if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
921             (net->dest_state & SCTP_ADDR_PF)) {
922                 /* Move all pending over too */
923                 sctp_move_chunks_from_net(stcb, net);
924
925                 /*
926                  * Get the address that failed, to force a new src address
927                  * selecton and a route allocation.
928                  */
929                 if (net->ro._s_addr) {
930                         sctp_free_ifa(net->ro._s_addr);
931                         net->ro._s_addr = NULL;
932                 }
933                 net->src_addr_selected = 0;
934
935                 /* Force a route allocation too */
936                 if (net->ro.ro_rt) {
937                         RTFREE(net->ro.ro_rt);
938                         net->ro.ro_rt = NULL;
939                 }
940                 /* Was it our primary? */
941                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
942                         /*
943                          * Yes, note it as such and find an alternate note:
944                          * this means HB code must use this to resent the
945                          * primary if it goes active AND if someone does a
946                          * change-primary then this flag must be cleared
947                          * from any net structures.
948                          */
949                         if (stcb->asoc.alternate) {
950                                 sctp_free_remote_addr(stcb->asoc.alternate);
951                         }
952                         stcb->asoc.alternate = alt;
953                         atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
954                 }
955         }
956         /*
957          * Special case for cookie-echo'ed case, we don't do output but must
958          * await the COOKIE-ACK before retransmission
959          */
960         if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
961                 /*
962                  * Here we just reset the timer and start again since we
963                  * have not established the asoc
964                  */
965                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
966                 return (0);
967         }
968         if (stcb->asoc.prsctp_supported) {
969                 struct sctp_tmit_chunk *lchk;
970
971                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
972                 /* C3. See if we need to send a Fwd-TSN */
973                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
974                         send_forward_tsn(stcb, &stcb->asoc);
975                         if (lchk) {
976                                 /* Assure a timer is up */
977                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
978                         }
979                 }
980         }
981         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
982                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
983         }
984         return (0);
985 }
986
987 int
988 sctp_t1init_timer(struct sctp_inpcb *inp,
989     struct sctp_tcb *stcb,
990     struct sctp_nets *net)
991 {
992         /* bump the thresholds */
993         if (stcb->asoc.delayed_connection) {
994                 /*
995                  * special hook for delayed connection. The library did NOT
996                  * complete the rest of its sends.
997                  */
998                 stcb->asoc.delayed_connection = 0;
999                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1000                 return (0);
1001         }
1002         if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) {
1003                 return (0);
1004         }
1005         if (sctp_threshold_management(inp, stcb, net,
1006             stcb->asoc.max_init_times)) {
1007                 /* Association was destroyed */
1008                 return (1);
1009         }
1010         stcb->asoc.dropped_special_cnt = 0;
1011         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1012         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1013                 net->RTO = stcb->asoc.initial_init_rto_max;
1014         }
1015         if (stcb->asoc.numnets > 1) {
1016                 /* If we have more than one addr use it */
1017                 struct sctp_nets *alt;
1018
1019                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1020                 if (alt != stcb->asoc.primary_destination) {
1021                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1022                         stcb->asoc.primary_destination = alt;
1023                 }
1024         }
1025         /* Send out a new init */
1026         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1027         return (0);
1028 }
1029
1030 /*
1031  * For cookie and asconf we actually need to find and mark for resend, then
1032  * increment the resend counter (after all the threshold management stuff of
1033  * course).
1034  */
1035 int
1036 sctp_cookie_timer(struct sctp_inpcb *inp,
1037     struct sctp_tcb *stcb,
1038     struct sctp_nets *net SCTP_UNUSED)
1039 {
1040         struct sctp_nets *alt;
1041         struct sctp_tmit_chunk *cookie;
1042
1043         /* first before all else we must find the cookie */
1044         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1045                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1046                         break;
1047                 }
1048         }
1049         if (cookie == NULL) {
1050                 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1051                         /* FOOBAR! */
1052                         struct mbuf *op_err;
1053
1054                         op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1055                             "Cookie timer expired, but no cookie");
1056                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1057                         sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1058                 } else {
1059 #ifdef INVARIANTS
1060                         panic("Cookie timer expires in wrong state?");
1061 #else
1062                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc));
1063                         return (0);
1064 #endif
1065                 }
1066                 return (0);
1067         }
1068         /* Ok we found the cookie, threshold management next */
1069         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1070             stcb->asoc.max_init_times)) {
1071                 /* Assoc is over */
1072                 return (1);
1073         }
1074         /*
1075          * Cleared threshold management, now lets backoff the address and
1076          * select an alternate
1077          */
1078         stcb->asoc.dropped_special_cnt = 0;
1079         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1080         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1081         if (alt != cookie->whoTo) {
1082                 sctp_free_remote_addr(cookie->whoTo);
1083                 cookie->whoTo = alt;
1084                 atomic_add_int(&alt->ref_count, 1);
1085         }
1086         /* Now mark the retran info */
1087         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1088                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1089         }
1090         cookie->sent = SCTP_DATAGRAM_RESEND;
1091         cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1092         /*
1093          * Now call the output routine to kick out the cookie again, Note we
1094          * don't mark any chunks for retran so that FR will need to kick in
1095          * to move these (or a send timer).
1096          */
1097         return (0);
1098 }
1099
1100 int
1101 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1102     struct sctp_nets *net)
1103 {
1104         struct sctp_nets *alt;
1105         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1106
1107         if (stcb->asoc.stream_reset_outstanding == 0) {
1108                 return (0);
1109         }
1110         /* find the existing STRRESET, we use the seq number we sent out on */
1111         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1112         if (strrst == NULL) {
1113                 return (0);
1114         }
1115         /* do threshold management */
1116         if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1117             stcb->asoc.max_send_times)) {
1118                 /* Assoc is over */
1119                 return (1);
1120         }
1121         /*
1122          * Cleared threshold management, now lets backoff the address and
1123          * select an alternate
1124          */
1125         sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1126         alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1127         sctp_free_remote_addr(strrst->whoTo);
1128         strrst->whoTo = alt;
1129         atomic_add_int(&alt->ref_count, 1);
1130
1131         /* See if a ECN Echo is also stranded */
1132         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1133                 if ((chk->whoTo == net) &&
1134                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1135                         sctp_free_remote_addr(chk->whoTo);
1136                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1137                                 chk->sent = SCTP_DATAGRAM_RESEND;
1138                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1139                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1140                         }
1141                         chk->whoTo = alt;
1142                         atomic_add_int(&alt->ref_count, 1);
1143                 }
1144         }
1145         if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1146                 /*
1147                  * If the address went un-reachable, we need to move to
1148                  * alternates for ALL chk's in queue
1149                  */
1150                 sctp_move_chunks_from_net(stcb, net);
1151         }
1152         /* mark the retran info */
1153         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1154                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1155         strrst->sent = SCTP_DATAGRAM_RESEND;
1156         strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1157
1158         /* restart the timer */
1159         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1160         return (0);
1161 }
1162
1163 int
1164 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1165     struct sctp_nets *net)
1166 {
1167         struct sctp_nets *alt;
1168         struct sctp_tmit_chunk *asconf, *chk;
1169
1170         /* is this a first send, or a retransmission? */
1171         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1172                 /* compose a new ASCONF chunk and send it */
1173                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1174         } else {
1175                 /*
1176                  * Retransmission of the existing ASCONF is needed
1177                  */
1178
1179                 /* find the existing ASCONF */
1180                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1181                 if (asconf == NULL) {
1182                         return (0);
1183                 }
1184                 /* do threshold management */
1185                 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1186                     stcb->asoc.max_send_times)) {
1187                         /* Assoc is over */
1188                         return (1);
1189                 }
1190                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1191                         /*
1192                          * Something is rotten: our peer is not responding
1193                          * to ASCONFs but apparently is to other chunks.
1194                          * i.e. it is not properly handling the chunk type
1195                          * upper bits. Mark this peer as ASCONF incapable
1196                          * and cleanup.
1197                          */
1198                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1199                         sctp_asconf_cleanup(stcb, net);
1200                         return (0);
1201                 }
1202                 /*
1203                  * cleared threshold management, so now backoff the net and
1204                  * select an alternate
1205                  */
1206                 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1207                 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1208                 if (asconf->whoTo != alt) {
1209                         sctp_free_remote_addr(asconf->whoTo);
1210                         asconf->whoTo = alt;
1211                         atomic_add_int(&alt->ref_count, 1);
1212                 }
1213                 /* See if an ECN Echo is also stranded */
1214                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1215                         if ((chk->whoTo == net) &&
1216                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1217                                 sctp_free_remote_addr(chk->whoTo);
1218                                 chk->whoTo = alt;
1219                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1220                                         chk->sent = SCTP_DATAGRAM_RESEND;
1221                                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1222                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1223                                 }
1224                                 atomic_add_int(&alt->ref_count, 1);
1225                         }
1226                 }
1227                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1228                         if (chk->whoTo != alt) {
1229                                 sctp_free_remote_addr(chk->whoTo);
1230                                 chk->whoTo = alt;
1231                                 atomic_add_int(&alt->ref_count, 1);
1232                         }
1233                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1234                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1235                         chk->sent = SCTP_DATAGRAM_RESEND;
1236                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1237                 }
1238                 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1239                         /*
1240                          * If the address went un-reachable, we need to move
1241                          * to the alternate for ALL chunks in queue
1242                          */
1243                         sctp_move_chunks_from_net(stcb, net);
1244                 }
1245                 /* mark the retran info */
1246                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1247                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1248                 asconf->sent = SCTP_DATAGRAM_RESEND;
1249                 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1250
1251                 /* send another ASCONF if any and we can do */
1252                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1253         }
1254         return (0);
1255 }
1256
1257 /* Mobility adaptation */
1258 void
1259 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1260     struct sctp_nets *net SCTP_UNUSED)
1261 {
1262         if (stcb->asoc.deleted_primary == NULL) {
1263                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1264                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1265                 return;
1266         }
1267         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1268         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1269         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1270         stcb->asoc.deleted_primary = NULL;
1271         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1272         return;
1273 }
1274
1275 /*
1276  * For the shutdown and shutdown-ack, we do not keep one around on the
1277  * control queue. This means we must generate a new one and call the general
1278  * chunk output routine, AFTER having done threshold management.
1279  * It is assumed that net is non-NULL.
1280  */
1281 int
1282 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1283     struct sctp_nets *net)
1284 {
1285         struct sctp_nets *alt;
1286
1287         /* first threshold management */
1288         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1289                 /* Assoc is over */
1290                 return (1);
1291         }
1292         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1293         /* second select an alternative */
1294         alt = sctp_find_alternate_net(stcb, net, 0);
1295
1296         /* third generate a shutdown into the queue for out net */
1297         sctp_send_shutdown(stcb, alt);
1298
1299         /* fourth restart timer */
1300         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1301         return (0);
1302 }
1303
1304 int
1305 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1306     struct sctp_nets *net)
1307 {
1308         struct sctp_nets *alt;
1309
1310         /* first threshold management */
1311         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1312                 /* Assoc is over */
1313                 return (1);
1314         }
1315         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1316         /* second select an alternative */
1317         alt = sctp_find_alternate_net(stcb, net, 0);
1318
1319         /* third generate a shutdown into the queue for out net */
1320         sctp_send_shutdown_ack(stcb, alt);
1321
1322         /* fourth restart timer */
1323         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1324         return (0);
1325 }
1326
1327 static void
1328 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1329     struct sctp_tcb *stcb)
1330 {
1331         struct sctp_stream_queue_pending *sp;
1332         unsigned int i, chks_in_queue = 0;
1333         int being_filled = 0;
1334
1335         /*
1336          * This function is ONLY called when the send/sent queues are empty.
1337          */
1338         if ((stcb == NULL) || (inp == NULL))
1339                 return;
1340
1341         if (stcb->asoc.sent_queue_retran_cnt) {
1342                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1343                     stcb->asoc.sent_queue_retran_cnt);
1344                 stcb->asoc.sent_queue_retran_cnt = 0;
1345         }
1346         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1347                 /* No stream scheduler information, initialize scheduler */
1348                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1349                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1350                         /* yep, we lost a stream or two */
1351                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1352                 } else {
1353                         /* no streams lost */
1354                         stcb->asoc.total_output_queue_size = 0;
1355                 }
1356         }
1357         /* Check to see if some data queued, if so report it */
1358         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1359                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1360                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1361                                 if (sp->msg_is_complete)
1362                                         being_filled++;
1363                                 chks_in_queue++;
1364                         }
1365                 }
1366         }
1367         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1368                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1369                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1370         }
1371         if (chks_in_queue) {
1372                 /* call the output queue function */
1373                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1374                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1375                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1376                         /*
1377                          * Probably should go in and make it go back through
1378                          * and add fragments allowed
1379                          */
1380                         if (being_filled == 0) {
1381                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1382                                     chks_in_queue);
1383                         }
1384                 }
1385         } else {
1386                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1387                     (u_long)stcb->asoc.total_output_queue_size);
1388                 stcb->asoc.total_output_queue_size = 0;
1389         }
1390 }
1391
1392 int
1393 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1394     struct sctp_nets *net)
1395 {
1396         uint8_t net_was_pf;
1397
1398         if (net->dest_state & SCTP_ADDR_PF) {
1399                 net_was_pf = 1;
1400         } else {
1401                 net_was_pf = 0;
1402         }
1403         if (net->hb_responded == 0) {
1404                 if (net->ro._s_addr) {
1405                         /*
1406                          * Invalidate the src address if we did not get a
1407                          * response last time.
1408                          */
1409                         sctp_free_ifa(net->ro._s_addr);
1410                         net->ro._s_addr = NULL;
1411                         net->src_addr_selected = 0;
1412                 }
1413                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1414                 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1415                         /* Assoc is over */
1416                         return (1);
1417                 }
1418         }
1419         /* Zero PBA, if it needs it */
1420         if (net->partial_bytes_acked) {
1421                 net->partial_bytes_acked = 0;
1422         }
1423         if ((stcb->asoc.total_output_queue_size > 0) &&
1424             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1425             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1426                 sctp_audit_stream_queues_for_size(inp, stcb);
1427         }
1428         if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1429             !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1430                 /*
1431                  * when move to PF during threshold mangement, a HB has been
1432                  * queued in that routine
1433                  */
1434                 uint32_t ms_gone_by;
1435
1436                 if ((net->last_sent_time.tv_sec > 0) ||
1437                     (net->last_sent_time.tv_usec > 0)) {
1438                         struct timeval diff;
1439
1440                         SCTP_GETTIME_TIMEVAL(&diff);
1441                         timevalsub(&diff, &net->last_sent_time);
1442                         ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1443                             (uint32_t)(diff.tv_usec / 1000);
1444                 } else {
1445                         ms_gone_by = 0xffffffff;
1446                 }
1447                 if ((ms_gone_by >= net->heart_beat_delay) ||
1448                     (net->dest_state & SCTP_ADDR_PF)) {
1449                         sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1450                 }
1451         }
1452         return (0);
1453 }
1454
1455 void
1456 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1457     struct sctp_tcb *stcb,
1458     struct sctp_nets *net)
1459 {
1460         uint32_t next_mtu, mtu;
1461
1462         next_mtu = sctp_get_next_mtu(net->mtu);
1463
1464         if ((next_mtu > net->mtu) && (net->port == 0)) {
1465                 if ((net->src_addr_selected == 0) ||
1466                     (net->ro._s_addr == NULL) ||
1467                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1468                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1469                                 sctp_free_ifa(net->ro._s_addr);
1470                                 net->ro._s_addr = NULL;
1471                                 net->src_addr_selected = 0;
1472                         } else if (net->ro._s_addr == NULL) {
1473 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1474                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1475                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1476
1477                                         /* KAME hack: embed scopeid */
1478                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1479                                 }
1480 #endif
1481
1482                                 net->ro._s_addr = sctp_source_address_selection(inp,
1483                                     stcb,
1484                                     (sctp_route_t *)&net->ro,
1485                                     net, 0, stcb->asoc.vrf_id);
1486 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1487                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1488                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1489
1490                                         (void)sa6_recoverscope(sin6);
1491                                 }
1492 #endif                          /* INET6 */
1493                         }
1494                         if (net->ro._s_addr)
1495                                 net->src_addr_selected = 1;
1496                 }
1497                 if (net->ro._s_addr) {
1498                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1499 #if defined(INET) || defined(INET6)
1500                         if (net->port) {
1501                                 mtu -= sizeof(struct udphdr);
1502                         }
1503 #endif
1504                         if (mtu > next_mtu) {
1505                                 net->mtu = next_mtu;
1506                         } else {
1507                                 net->mtu = mtu;
1508                         }
1509                 }
1510         }
1511         /* restart the timer */
1512         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1513 }
1514
1515 void
1516 sctp_autoclose_timer(struct sctp_inpcb *inp,
1517     struct sctp_tcb *stcb,
1518     struct sctp_nets *net)
1519 {
1520         struct timeval tn, *tim_touse;
1521         struct sctp_association *asoc;
1522         int ticks_gone_by;
1523
1524         (void)SCTP_GETTIME_TIMEVAL(&tn);
1525         if (stcb->asoc.sctp_autoclose_ticks &&
1526             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1527                 /* Auto close is on */
1528                 asoc = &stcb->asoc;
1529                 /* pick the time to use */
1530                 if (asoc->time_last_rcvd.tv_sec >
1531                     asoc->time_last_sent.tv_sec) {
1532                         tim_touse = &asoc->time_last_rcvd;
1533                 } else {
1534                         tim_touse = &asoc->time_last_sent;
1535                 }
1536                 /* Now has long enough transpired to autoclose? */
1537                 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1538                 if ((ticks_gone_by > 0) &&
1539                     (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1540                         /*
1541                          * autoclose time has hit, call the output routine,
1542                          * which should do nothing just to be SURE we don't
1543                          * have hanging data. We can then safely check the
1544                          * queues and know that we are clear to send
1545                          * shutdown
1546                          */
1547                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1548                         /* Are we clean? */
1549                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1550                             TAILQ_EMPTY(&asoc->sent_queue)) {
1551                                 /*
1552                                  * there is nothing queued to send, so I'm
1553                                  * done...
1554                                  */
1555                                 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
1556                                         /* only send SHUTDOWN 1st time thru */
1557                                         struct sctp_nets *netp;
1558
1559                                         if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
1560                                             (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1561                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1562                                         }
1563                                         SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1564                                         SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1565                                         sctp_stop_timers_for_shutdown(stcb);
1566                                         if (stcb->asoc.alternate) {
1567                                                 netp = stcb->asoc.alternate;
1568                                         } else {
1569                                                 netp = stcb->asoc.primary_destination;
1570                                         }
1571                                         sctp_send_shutdown(stcb, netp);
1572                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1573                                             stcb->sctp_ep, stcb,
1574                                             netp);
1575                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1576                                             stcb->sctp_ep, stcb,
1577                                             netp);
1578                                 }
1579                         }
1580                 } else {
1581                         /*
1582                          * No auto close at this time, reset t-o to check
1583                          * later
1584                          */
1585                         int tmp;
1586
1587                         /* fool the timer startup to use the time left */
1588                         tmp = asoc->sctp_autoclose_ticks;
1589                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1590                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1591                             net);
1592                         /* restore the real tick value */
1593                         asoc->sctp_autoclose_ticks = tmp;
1594                 }
1595         }
1596 }