]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - sys/netinet/sctp_timer.c
Whitespace changes.
[FreeBSD/FreeBSD.git] / sys / netinet / sctp_timer.c
1 /*-
2  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
4  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions are met:
8  *
9  * a) Redistributions of source code must retain the above copyright notice,
10  *    this list of conditions and the following disclaimer.
11  *
12  * b) Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in
14  *    the documentation and/or other materials provided with the distribution.
15  *
16  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17  *    contributors may be used to endorse or promote products derived
18  *    from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30  * THE POSSIBILITY OF SUCH DAMAGE.
31  */
32
33 #include <sys/cdefs.h>
34 __FBSDID("$FreeBSD$");
35
36 #define _IP_VHL
37 #include <netinet/sctp_os.h>
38 #include <netinet/sctp_pcb.h>
39 #ifdef INET6
40 #endif
41 #include <netinet/sctp_var.h>
42 #include <netinet/sctp_sysctl.h>
43 #include <netinet/sctp_timer.h>
44 #include <netinet/sctputil.h>
45 #include <netinet/sctp_output.h>
46 #include <netinet/sctp_header.h>
47 #include <netinet/sctp_indata.h>
48 #include <netinet/sctp_asconf.h>
49 #include <netinet/sctp_input.h>
50 #include <netinet/sctp.h>
51 #include <netinet/sctp_uio.h>
52 #if defined(INET) || defined(INET6)
53 #include <netinet/udp.h>
54 #endif
55
56
57 void
58 sctp_audit_retranmission_queue(struct sctp_association *asoc)
59 {
60         struct sctp_tmit_chunk *chk;
61
62         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
63             asoc->sent_queue_retran_cnt,
64             asoc->sent_queue_cnt);
65         asoc->sent_queue_retran_cnt = 0;
66         asoc->sent_queue_cnt = 0;
67         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
68                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
69                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
70                 }
71                 asoc->sent_queue_cnt++;
72         }
73         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
74                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
75                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
76                 }
77         }
78         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
79                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
80                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
81                 }
82         }
83         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
84             asoc->sent_queue_retran_cnt,
85             asoc->sent_queue_cnt);
86 }
87
88 static int
89 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
90     struct sctp_nets *net, uint16_t threshold)
91 {
92         if (net) {
93                 net->error_count++;
94                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
95                     (void *)net, net->error_count,
96                     net->failure_threshold);
97                 if (net->error_count > net->failure_threshold) {
98                         /* We had a threshold failure */
99                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
100                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
101                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
102                                 net->dest_state &= ~SCTP_ADDR_PF;
103                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
104                                     stcb, 0,
105                                     (void *)net, SCTP_SO_NOT_LOCKED);
106                         }
107                 } else if ((net->pf_threshold < net->failure_threshold) &&
108                     (net->error_count > net->pf_threshold)) {
109                         if (!(net->dest_state & SCTP_ADDR_PF)) {
110                                 net->dest_state |= SCTP_ADDR_PF;
111                                 net->last_active = sctp_get_tick_count();
112                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
113                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
114                                     inp, stcb, net,
115                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
116                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
117                         }
118                 }
119         }
120         if (stcb == NULL)
121                 return (0);
122
123         if (net) {
124                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
125                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
126                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
127                                     stcb->asoc.overall_error_count,
128                                     (stcb->asoc.overall_error_count + 1),
129                                     SCTP_FROM_SCTP_TIMER,
130                                     __LINE__);
131                         }
132                         stcb->asoc.overall_error_count++;
133                 }
134         } else {
135                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
136                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
137                             stcb->asoc.overall_error_count,
138                             (stcb->asoc.overall_error_count + 1),
139                             SCTP_FROM_SCTP_TIMER,
140                             __LINE__);
141                 }
142                 stcb->asoc.overall_error_count++;
143         }
144         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
145             (void *)&stcb->asoc, stcb->asoc.overall_error_count,
146             (uint32_t) threshold,
147             ((net == NULL) ? (uint32_t) 0 : (uint32_t) net->dest_state));
148         /*
149          * We specifically do not do >= to give the assoc one more change
150          * before we fail it.
151          */
152         if (stcb->asoc.overall_error_count > threshold) {
153                 /* Abort notification sends a ULP notify */
154                 struct mbuf *op_err;
155
156                 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
157                     "Association error counter exceeded");
158                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
159                 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
160                 return (1);
161         }
162         return (0);
163 }
164
165 /*
166  * sctp_find_alternate_net() returns a non-NULL pointer as long
167  * the argument net is non-NULL.
168  */
169 struct sctp_nets *
170 sctp_find_alternate_net(struct sctp_tcb *stcb,
171     struct sctp_nets *net,
172     int mode)
173 {
174         /* Find and return an alternate network if possible */
175         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
176         int once;
177
178         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
179         int min_errors = -1;
180         uint32_t max_cwnd = 0;
181
182         if (stcb->asoc.numnets == 1) {
183                 /* No others but net */
184                 return (TAILQ_FIRST(&stcb->asoc.nets));
185         }
186         /*
187          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
188          * net algorithm. This algorithm chooses the active destination (not
189          * in PF state) with the largest cwnd value. If all destinations are
190          * in PF state, unreachable, or unconfirmed, choose the desination
191          * that is in PF state with the lowest error count. In case of a
192          * tie, choose the destination that was most recently active.
193          */
194         if (mode == 2) {
195                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
196                         /* JRS 5/14/07 - If the destination is unreachable
197                          * or unconfirmed, skip it. */
198                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
199                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
200                                 continue;
201                         }
202                         /*
203                          * JRS 5/14/07 -  If the destination is reachable
204                          * but in PF state, compare the error count of the
205                          * destination to the minimum error count seen thus
206                          * far. Store the destination with the lower error
207                          * count.  If the error counts are equal, store the
208                          * destination that was most recently active.
209                          */
210                         if (mnet->dest_state & SCTP_ADDR_PF) {
211                                 /*
212                                  * JRS 5/14/07 - If the destination under
213                                  * consideration is the current destination,
214                                  * work as if the error count is one higher.
215                                  * The actual error count will not be
216                                  * incremented until later in the t3
217                                  * handler.
218                                  */
219                                 if (mnet == net) {
220                                         if (min_errors == -1) {
221                                                 min_errors = mnet->error_count + 1;
222                                                 min_errors_net = mnet;
223                                         } else if (mnet->error_count + 1 < min_errors) {
224                                                 min_errors = mnet->error_count + 1;
225                                                 min_errors_net = mnet;
226                                         } else if (mnet->error_count + 1 == min_errors
227                                             && mnet->last_active > min_errors_net->last_active) {
228                                                 min_errors_net = mnet;
229                                                 min_errors = mnet->error_count + 1;
230                                         }
231                                         continue;
232                                 } else {
233                                         if (min_errors == -1) {
234                                                 min_errors = mnet->error_count;
235                                                 min_errors_net = mnet;
236                                         } else if (mnet->error_count < min_errors) {
237                                                 min_errors = mnet->error_count;
238                                                 min_errors_net = mnet;
239                                         } else if (mnet->error_count == min_errors
240                                             && mnet->last_active > min_errors_net->last_active) {
241                                                 min_errors_net = mnet;
242                                                 min_errors = mnet->error_count;
243                                         }
244                                         continue;
245                                 }
246                         }
247                         /*
248                          * JRS 5/14/07 - If the destination is reachable and
249                          * not in PF state, compare the cwnd of the
250                          * destination to the highest cwnd seen thus far.
251                          * Store the destination with the higher cwnd value.
252                          * If the cwnd values are equal, randomly choose one
253                          * of the two destinations.
254                          */
255                         if (max_cwnd < mnet->cwnd) {
256                                 max_cwnd_net = mnet;
257                                 max_cwnd = mnet->cwnd;
258                         } else if (max_cwnd == mnet->cwnd) {
259                                 uint32_t rndval;
260                                 uint8_t this_random;
261
262                                 if (stcb->asoc.hb_random_idx > 3) {
263                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
264                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
265                                         this_random = stcb->asoc.hb_random_values[0];
266                                         stcb->asoc.hb_random_idx++;
267                                         stcb->asoc.hb_ect_randombit = 0;
268                                 } else {
269                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
270                                         stcb->asoc.hb_random_idx++;
271                                         stcb->asoc.hb_ect_randombit = 0;
272                                 }
273                                 if (this_random % 2 == 1) {
274                                         max_cwnd_net = mnet;
275                                         max_cwnd = mnet->cwnd;  /* Useless? */
276                                 }
277                         }
278                 }
279                 if (max_cwnd_net == NULL) {
280                         if (min_errors_net == NULL) {
281                                 return (net);
282                         }
283                         return (min_errors_net);
284                 } else {
285                         return (max_cwnd_net);
286                 }
287         }                       /* JRS 5/14/07 - If mode is set to 1, use the
288           * CMT policy for choosing an alternate net. */ 
289         else if (mode == 1) {
290                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
291                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
292                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
293                                 /*
294                                  * will skip ones that are not-reachable or
295                                  * unconfirmed
296                                  */
297                                 continue;
298                         }
299                         if (max_cwnd < mnet->cwnd) {
300                                 max_cwnd_net = mnet;
301                                 max_cwnd = mnet->cwnd;
302                         } else if (max_cwnd == mnet->cwnd) {
303                                 uint32_t rndval;
304                                 uint8_t this_random;
305
306                                 if (stcb->asoc.hb_random_idx > 3) {
307                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
308                                         memcpy(stcb->asoc.hb_random_values, &rndval,
309                                             sizeof(stcb->asoc.hb_random_values));
310                                         this_random = stcb->asoc.hb_random_values[0];
311                                         stcb->asoc.hb_random_idx = 0;
312                                         stcb->asoc.hb_ect_randombit = 0;
313                                 } else {
314                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
315                                         stcb->asoc.hb_random_idx++;
316                                         stcb->asoc.hb_ect_randombit = 0;
317                                 }
318                                 if (this_random % 2) {
319                                         max_cwnd_net = mnet;
320                                         max_cwnd = mnet->cwnd;
321                                 }
322                         }
323                 }
324                 if (max_cwnd_net) {
325                         return (max_cwnd_net);
326                 }
327         }
328         mnet = net;
329         once = 0;
330
331         if (mnet == NULL) {
332                 mnet = TAILQ_FIRST(&stcb->asoc.nets);
333                 if (mnet == NULL) {
334                         return (NULL);
335                 }
336         }
337         for (;;) {
338                 alt = TAILQ_NEXT(mnet, sctp_next);
339                 if (alt == NULL) {
340                         once++;
341                         if (once > 1) {
342                                 break;
343                         }
344                         alt = TAILQ_FIRST(&stcb->asoc.nets);
345                         if (alt == NULL) {
346                                 return (NULL);
347                         }
348                 }
349                 if (alt->ro.ro_rt == NULL) {
350                         if (alt->ro._s_addr) {
351                                 sctp_free_ifa(alt->ro._s_addr);
352                                 alt->ro._s_addr = NULL;
353                         }
354                         alt->src_addr_selected = 0;
355                 }
356                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
357                     (alt->ro.ro_rt != NULL) &&
358                     (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
359                         /* Found a reachable address */
360                         break;
361                 }
362                 mnet = alt;
363         }
364
365         if (alt == NULL) {
366                 /* Case where NO insv network exists (dormant state) */
367                 /* we rotate destinations */
368                 once = 0;
369                 mnet = net;
370                 for (;;) {
371                         if (mnet == NULL) {
372                                 return (TAILQ_FIRST(&stcb->asoc.nets));
373                         }
374                         alt = TAILQ_NEXT(mnet, sctp_next);
375                         if (alt == NULL) {
376                                 once++;
377                                 if (once > 1) {
378                                         break;
379                                 }
380                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
381                                 if (alt == NULL) {
382                                         break;
383                                 }
384                         }
385                         if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
386                             (alt != net)) {
387                                 /* Found an alternate address */
388                                 break;
389                         }
390                         mnet = alt;
391                 }
392         }
393         if (alt == NULL) {
394                 return (net);
395         }
396         return (alt);
397 }
398
399 static void
400 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
401     struct sctp_nets *net,
402     int win_probe,
403     int num_marked, int num_abandoned)
404 {
405         if (net->RTO == 0) {
406                 if (net->RTO_measured) {
407                         net->RTO = stcb->asoc.minrto;
408                 } else {
409                         net->RTO = stcb->asoc.initial_rto;
410                 }
411         }
412         net->RTO <<= 1;
413         if (net->RTO > stcb->asoc.maxrto) {
414                 net->RTO = stcb->asoc.maxrto;
415         }
416         if ((win_probe == 0) && (num_marked || num_abandoned)) {
417                 /* We don't apply penalty to window probe scenarios */
418                 /* JRS - Use the congestion control given in the CC module */
419                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
420         }
421 }
422
423 #ifndef INVARIANTS
424 static void
425 sctp_recover_sent_list(struct sctp_tcb *stcb)
426 {
427         struct sctp_tmit_chunk *chk, *nchk;
428         struct sctp_association *asoc;
429
430         asoc = &stcb->asoc;
431         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
432                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.TSN_seq)) {
433                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
434                             (void *)chk, chk->rec.data.TSN_seq, asoc->last_acked_seq);
435                         if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
436                                 if (asoc->strmout[chk->rec.data.stream_number].chunks_on_queues > 0) {
437                                         asoc->strmout[chk->rec.data.stream_number].chunks_on_queues--;
438                                 }
439                         }
440                         if ((asoc->strmout[chk->rec.data.stream_number].chunks_on_queues == 0) &&
441                             (asoc->strmout[chk->rec.data.stream_number].state == SCTP_STREAM_RESET_PENDING) &&
442                             TAILQ_EMPTY(&asoc->strmout[chk->rec.data.stream_number].outqueue)) {
443                                 asoc->trigger_reset = 1;
444                         }
445                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
446                         if (PR_SCTP_ENABLED(chk->flags)) {
447                                 if (asoc->pr_sctp_cnt != 0)
448                                         asoc->pr_sctp_cnt--;
449                         }
450                         if (chk->data) {
451                                 /* sa_ignore NO_NULL_CHK */
452                                 sctp_free_bufspace(stcb, asoc, chk, 1);
453                                 sctp_m_freem(chk->data);
454                                 chk->data = NULL;
455                                 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
456                                         asoc->sent_queue_cnt_removeable--;
457                                 }
458                         }
459                         asoc->sent_queue_cnt--;
460                         sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
461                 }
462         }
463         SCTP_PRINTF("after recover order is as follows\n");
464         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
465                 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.TSN_seq);
466         }
467 }
468 #endif
469
470 static int
471 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
472     struct sctp_nets *net,
473     struct sctp_nets *alt,
474     int window_probe,
475     int *num_marked,
476     int *num_abandoned)
477 {
478
479         /*
480          * Mark all chunks (well not all) that were sent to *net for
481          * retransmission. Move them to alt for there destination as well...
482          * We only mark chunks that have been outstanding long enough to
483          * have received feed-back.
484          */
485         struct sctp_tmit_chunk *chk, *nchk;
486         struct sctp_nets *lnets;
487         struct timeval now, min_wait, tv;
488         int cur_rto;
489         int cnt_abandoned;
490         int audit_tf, num_mk, fir;
491         unsigned int cnt_mk;
492         uint32_t orig_flight, orig_tf;
493         uint32_t tsnlast, tsnfirst;
494         int recovery_cnt = 0;
495
496
497         /* none in flight now */
498         audit_tf = 0;
499         fir = 0;
500         /*
501          * figure out how long a data chunk must be pending before we can
502          * mark it ..
503          */
504         (void)SCTP_GETTIME_TIMEVAL(&now);
505         /* get cur rto in micro-seconds */
506         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
507         cur_rto *= 1000;
508         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
509                 sctp_log_fr(cur_rto,
510                     stcb->asoc.peers_rwnd,
511                     window_probe,
512                     SCTP_FR_T3_MARK_TIME);
513                 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
514                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
515         }
516         tv.tv_sec = cur_rto / 1000000;
517         tv.tv_usec = cur_rto % 1000000;
518         min_wait = now;
519         timevalsub(&min_wait, &tv);
520         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
521                 /*
522                  * if we hit here, we don't have enough seconds on the clock
523                  * to account for the RTO. We just let the lower seconds be
524                  * the bounds and don't worry about it. This may mean we
525                  * will mark a lot more than we should.
526                  */
527                 min_wait.tv_sec = min_wait.tv_usec = 0;
528         }
529         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
530                 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
531                 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
532         }
533         /*
534          * Our rwnd will be incorrect here since we are not adding back the
535          * cnt * mbuf but we will fix that down below.
536          */
537         orig_flight = net->flight_size;
538         orig_tf = stcb->asoc.total_flight;
539
540         net->fast_retran_ip = 0;
541         /* Now on to each chunk */
542         cnt_abandoned = 0;
543         num_mk = cnt_mk = 0;
544         tsnfirst = tsnlast = 0;
545 #ifndef INVARIANTS
546 start_again:
547 #endif
548         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
549                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.TSN_seq)) {
550                         /* Strange case our list got out of order? */
551                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
552                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.TSN_seq);
553                         recovery_cnt++;
554 #ifdef INVARIANTS
555                         panic("last acked >= chk on sent-Q");
556 #else
557                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
558                         sctp_recover_sent_list(stcb);
559                         if (recovery_cnt < 10) {
560                                 goto start_again;
561                         } else {
562                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
563                         }
564 #endif
565                 }
566                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
567                         /*
568                          * found one to mark: If it is less than
569                          * DATAGRAM_ACKED it MUST not be a skipped or marked
570                          * TSN but instead one that is either already set
571                          * for retransmission OR one that needs
572                          * retransmission.
573                          */
574
575                         /* validate its been outstanding long enough */
576                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
577                                 sctp_log_fr(chk->rec.data.TSN_seq,
578                                     chk->sent_rcv_time.tv_sec,
579                                     chk->sent_rcv_time.tv_usec,
580                                     SCTP_FR_T3_MARK_TIME);
581                         }
582                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
583                                 /*
584                                  * we have reached a chunk that was sent
585                                  * some seconds past our min.. forget it we
586                                  * will find no more to send.
587                                  */
588                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
589                                         sctp_log_fr(0,
590                                             chk->sent_rcv_time.tv_sec,
591                                             chk->sent_rcv_time.tv_usec,
592                                             SCTP_FR_T3_STOPPED);
593                                 }
594                                 continue;
595                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
596                             (window_probe == 0)) {
597                                 /*
598                                  * we must look at the micro seconds to
599                                  * know.
600                                  */
601                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
602                                         /*
603                                          * ok it was sent after our boundary
604                                          * time.
605                                          */
606                                         continue;
607                                 }
608                         }
609                         if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
610                                 /* Is it expired? */
611                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
612                                         /* Yes so drop it */
613                                         if (chk->data) {
614                                                 (void)sctp_release_pr_sctp_chunk(stcb,
615                                                     chk,
616                                                     1,
617                                                     SCTP_SO_NOT_LOCKED);
618                                                 cnt_abandoned++;
619                                         }
620                                         continue;
621                                 }
622                         }
623                         if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
624                                 /* Has it been retransmitted tv_sec times? */
625                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
626                                         if (chk->data) {
627                                                 (void)sctp_release_pr_sctp_chunk(stcb,
628                                                     chk,
629                                                     1,
630                                                     SCTP_SO_NOT_LOCKED);
631                                                 cnt_abandoned++;
632                                         }
633                                         continue;
634                                 }
635                         }
636                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
637                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
638                                 num_mk++;
639                                 if (fir == 0) {
640                                         fir = 1;
641                                         tsnfirst = chk->rec.data.TSN_seq;
642                                 }
643                                 tsnlast = chk->rec.data.TSN_seq;
644                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
645                                         sctp_log_fr(chk->rec.data.TSN_seq, chk->snd_count,
646                                             0, SCTP_FR_T3_MARKED);
647                                 }
648                                 if (chk->rec.data.chunk_was_revoked) {
649                                         /* deflate the cwnd */
650                                         chk->whoTo->cwnd -= chk->book_size;
651                                         chk->rec.data.chunk_was_revoked = 0;
652                                 }
653                                 net->marked_retrans++;
654                                 stcb->asoc.marked_retrans++;
655                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
656                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
657                                             chk->whoTo->flight_size,
658                                             chk->book_size,
659                                             (uint32_t) (uintptr_t) chk->whoTo,
660                                             chk->rec.data.TSN_seq);
661                                 }
662                                 sctp_flight_size_decrease(chk);
663                                 sctp_total_flight_decrease(stcb, chk);
664                                 stcb->asoc.peers_rwnd += chk->send_size;
665                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
666                         }
667                         chk->sent = SCTP_DATAGRAM_RESEND;
668                         SCTP_STAT_INCR(sctps_markedretrans);
669
670                         /* reset the TSN for striking and other FR stuff */
671                         chk->rec.data.doing_fast_retransmit = 0;
672                         /* Clear any time so NO RTT is being done */
673
674                         if (chk->do_rtt) {
675                                 if (chk->whoTo->rto_needed == 0) {
676                                         chk->whoTo->rto_needed = 1;
677                                 }
678                         }
679                         chk->do_rtt = 0;
680                         if (alt != net) {
681                                 sctp_free_remote_addr(chk->whoTo);
682                                 chk->no_fr_allowed = 1;
683                                 chk->whoTo = alt;
684                                 atomic_add_int(&alt->ref_count, 1);
685                         } else {
686                                 chk->no_fr_allowed = 0;
687                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
688                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
689                                 } else {
690                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.TSN_seq;
691                                 }
692                         }
693                         /*
694                          * CMT: Do not allow FRs on retransmitted TSNs.
695                          */
696                         if (stcb->asoc.sctp_cmt_on_off > 0) {
697                                 chk->no_fr_allowed = 1;
698                         }
699 #ifdef THIS_SHOULD_NOT_BE_DONE
700                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
701                         /* remember highest acked one */
702                         could_be_sent = chk;
703 #endif
704                 }
705                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
706                         cnt_mk++;
707                 }
708         }
709         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
710                 /* we did not subtract the same things? */
711                 audit_tf = 1;
712         }
713         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
714                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
715         }
716 #ifdef SCTP_DEBUG
717         if (num_mk) {
718                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
719                     tsnlast);
720                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%ld\n",
721                     num_mk, (u_long)stcb->asoc.peers_rwnd);
722                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
723                     tsnlast);
724                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%d\n",
725                     num_mk,
726                     (int)stcb->asoc.peers_rwnd);
727         }
728 #endif
729         *num_marked = num_mk;
730         *num_abandoned = cnt_abandoned;
731         /*
732          * Now check for a ECN Echo that may be stranded And include the
733          * cnt_mk'd to have all resends in the control queue.
734          */
735         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
736                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
737                         cnt_mk++;
738                 }
739                 if ((chk->whoTo == net) &&
740                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
741                         sctp_free_remote_addr(chk->whoTo);
742                         chk->whoTo = alt;
743                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
744                                 chk->sent = SCTP_DATAGRAM_RESEND;
745                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
746                                 cnt_mk++;
747                         }
748                         atomic_add_int(&alt->ref_count, 1);
749                 }
750         }
751 #ifdef THIS_SHOULD_NOT_BE_DONE
752         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
753                 /* fix it so we retransmit the highest acked anyway */
754                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
755                 cnt_mk++;
756                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
757         }
758 #endif
759         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
760 #ifdef INVARIANTS
761                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
762                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
763 #endif
764 #ifndef SCTP_AUDITING_ENABLED
765                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
766 #endif
767         }
768         if (audit_tf) {
769                 SCTPDBG(SCTP_DEBUG_TIMER4,
770                     "Audit total flight due to negative value net:%p\n",
771                     (void *)net);
772                 stcb->asoc.total_flight = 0;
773                 stcb->asoc.total_flight_count = 0;
774                 /* Clear all networks flight size */
775                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
776                         lnets->flight_size = 0;
777                         SCTPDBG(SCTP_DEBUG_TIMER4,
778                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
779                             (void *)lnets, lnets->cwnd, lnets->ssthresh);
780                 }
781                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
782                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
783                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
784                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
785                                             chk->whoTo->flight_size,
786                                             chk->book_size,
787                                             (uint32_t) (uintptr_t) chk->whoTo,
788                                             chk->rec.data.TSN_seq);
789                                 }
790                                 sctp_flight_size_increase(chk);
791                                 sctp_total_flight_increase(stcb, chk);
792                         }
793                 }
794         }
795         /* We return 1 if we only have a window probe outstanding */
796         return (0);
797 }
798
799
800 int
801 sctp_t3rxt_timer(struct sctp_inpcb *inp,
802     struct sctp_tcb *stcb,
803     struct sctp_nets *net)
804 {
805         struct sctp_nets *alt;
806         int win_probe, num_mk, num_abandoned;
807
808         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
809                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
810         }
811         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
812                 struct sctp_nets *lnet;
813
814                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
815                         if (net == lnet) {
816                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
817                         } else {
818                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
819                         }
820                 }
821         }
822         /* Find an alternate and mark those for retransmission */
823         if ((stcb->asoc.peers_rwnd == 0) &&
824             (stcb->asoc.total_flight < net->mtu)) {
825                 SCTP_STAT_INCR(sctps_timowindowprobe);
826                 win_probe = 1;
827         } else {
828                 win_probe = 0;
829         }
830
831         if (win_probe == 0) {
832                 /* We don't do normal threshold management on window probes */
833                 if (sctp_threshold_management(inp, stcb, net,
834                     stcb->asoc.max_send_times)) {
835                         /* Association was destroyed */
836                         return (1);
837                 } else {
838                         if (net != stcb->asoc.primary_destination) {
839                                 /* send a immediate HB if our RTO is stale */
840                                 struct timeval now;
841                                 unsigned int ms_goneby;
842
843                                 (void)SCTP_GETTIME_TIMEVAL(&now);
844                                 if (net->last_sent_time.tv_sec) {
845                                         ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
846                                 } else {
847                                         ms_goneby = 0;
848                                 }
849                                 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
850                                         if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
851                                                 /*
852                                                  * no recent feed back in an
853                                                  * RTO or more, request a
854                                                  * RTT update
855                                                  */
856                                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
857                                         }
858                                 }
859                         }
860                 }
861         } else {
862                 /*
863                  * For a window probe we don't penalize the net's but only
864                  * the association. This may fail it if SACKs are not coming
865                  * back. If sack's are coming with rwnd locked at 0, we will
866                  * continue to hold things waiting for rwnd to raise
867                  */
868                 if (sctp_threshold_management(inp, stcb, NULL,
869                     stcb->asoc.max_send_times)) {
870                         /* Association was destroyed */
871                         return (1);
872                 }
873         }
874         if (stcb->asoc.sctp_cmt_on_off > 0) {
875                 if (net->pf_threshold < net->failure_threshold) {
876                         alt = sctp_find_alternate_net(stcb, net, 2);
877                 } else {
878                         /*
879                          * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
880                          * being used, then pick dest with largest ssthresh
881                          * for any retransmission.
882                          */
883                         alt = sctp_find_alternate_net(stcb, net, 1);
884                         /*
885                          * CUCv2: If a different dest is picked for the
886                          * retransmission, then new (rtx-)pseudo_cumack
887                          * needs to be tracked for orig dest. Let CUCv2
888                          * track new (rtx-) pseudo-cumack always.
889                          */
890                         net->find_pseudo_cumack = 1;
891                         net->find_rtx_pseudo_cumack = 1;
892                 }
893         } else {
894                 alt = sctp_find_alternate_net(stcb, net, 0);
895         }
896
897         num_mk = 0;
898         num_abandoned = 0;
899         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
900             &num_mk, &num_abandoned);
901         /* FR Loss recovery just ended with the T3. */
902         stcb->asoc.fast_retran_loss_recovery = 0;
903
904         /* CMT FR loss recovery ended with the T3 */
905         net->fast_retran_loss_recovery = 0;
906         if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
907             (net->flight_size == 0)) {
908                 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
909         }
910         /*
911          * setup the sat loss recovery that prevents satellite cwnd advance.
912          */
913         stcb->asoc.sat_t3_loss_recovery = 1;
914         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
915
916         /* Backoff the timer and cwnd */
917         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
918         if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
919             (net->dest_state & SCTP_ADDR_PF)) {
920                 /* Move all pending over too */
921                 sctp_move_chunks_from_net(stcb, net);
922
923                 /*
924                  * Get the address that failed, to force a new src address
925                  * selecton and a route allocation.
926                  */
927                 if (net->ro._s_addr) {
928                         sctp_free_ifa(net->ro._s_addr);
929                         net->ro._s_addr = NULL;
930                 }
931                 net->src_addr_selected = 0;
932
933                 /* Force a route allocation too */
934                 if (net->ro.ro_rt) {
935                         RTFREE(net->ro.ro_rt);
936                         net->ro.ro_rt = NULL;
937                 }
938                 /* Was it our primary? */
939                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
940                         /*
941                          * Yes, note it as such and find an alternate note:
942                          * this means HB code must use this to resent the
943                          * primary if it goes active AND if someone does a
944                          * change-primary then this flag must be cleared
945                          * from any net structures.
946                          */
947                         if (stcb->asoc.alternate) {
948                                 sctp_free_remote_addr(stcb->asoc.alternate);
949                         }
950                         stcb->asoc.alternate = alt;
951                         atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
952                 }
953         }
954         /*
955          * Special case for cookie-echo'ed case, we don't do output but must
956          * await the COOKIE-ACK before retransmission
957          */
958         if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
959                 /*
960                  * Here we just reset the timer and start again since we
961                  * have not established the asoc
962                  */
963                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
964                 return (0);
965         }
966         if (stcb->asoc.prsctp_supported) {
967                 struct sctp_tmit_chunk *lchk;
968
969                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
970                 /* C3. See if we need to send a Fwd-TSN */
971                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
972                         send_forward_tsn(stcb, &stcb->asoc);
973                         if (lchk) {
974                                 /* Assure a timer is up */
975                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
976                         }
977                 }
978         }
979         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
980                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
981         }
982         return (0);
983 }
984
985 int
986 sctp_t1init_timer(struct sctp_inpcb *inp,
987     struct sctp_tcb *stcb,
988     struct sctp_nets *net)
989 {
990         /* bump the thresholds */
991         if (stcb->asoc.delayed_connection) {
992                 /*
993                  * special hook for delayed connection. The library did NOT
994                  * complete the rest of its sends.
995                  */
996                 stcb->asoc.delayed_connection = 0;
997                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
998                 return (0);
999         }
1000         if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) {
1001                 return (0);
1002         }
1003         if (sctp_threshold_management(inp, stcb, net,
1004             stcb->asoc.max_init_times)) {
1005                 /* Association was destroyed */
1006                 return (1);
1007         }
1008         stcb->asoc.dropped_special_cnt = 0;
1009         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1010         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1011                 net->RTO = stcb->asoc.initial_init_rto_max;
1012         }
1013         if (stcb->asoc.numnets > 1) {
1014                 /* If we have more than one addr use it */
1015                 struct sctp_nets *alt;
1016
1017                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1018                 if (alt != stcb->asoc.primary_destination) {
1019                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1020                         stcb->asoc.primary_destination = alt;
1021                 }
1022         }
1023         /* Send out a new init */
1024         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1025         return (0);
1026 }
1027
1028 /*
1029  * For cookie and asconf we actually need to find and mark for resend, then
1030  * increment the resend counter (after all the threshold management stuff of
1031  * course).
1032  */
1033 int
1034 sctp_cookie_timer(struct sctp_inpcb *inp,
1035     struct sctp_tcb *stcb,
1036     struct sctp_nets *net SCTP_UNUSED)
1037 {
1038         struct sctp_nets *alt;
1039         struct sctp_tmit_chunk *cookie;
1040
1041         /* first before all else we must find the cookie */
1042         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1043                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1044                         break;
1045                 }
1046         }
1047         if (cookie == NULL) {
1048                 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1049                         /* FOOBAR! */
1050                         struct mbuf *op_err;
1051
1052                         op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1053                             "Cookie timer expired, but no cookie");
1054                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1055                         sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1056                 } else {
1057 #ifdef INVARIANTS
1058                         panic("Cookie timer expires in wrong state?");
1059 #else
1060                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc));
1061                         return (0);
1062 #endif
1063                 }
1064                 return (0);
1065         }
1066         /* Ok we found the cookie, threshold management next */
1067         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1068             stcb->asoc.max_init_times)) {
1069                 /* Assoc is over */
1070                 return (1);
1071         }
1072         /*
1073          * Cleared threshold management, now lets backoff the address and
1074          * select an alternate
1075          */
1076         stcb->asoc.dropped_special_cnt = 0;
1077         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1078         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1079         if (alt != cookie->whoTo) {
1080                 sctp_free_remote_addr(cookie->whoTo);
1081                 cookie->whoTo = alt;
1082                 atomic_add_int(&alt->ref_count, 1);
1083         }
1084         /* Now mark the retran info */
1085         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1086                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1087         }
1088         cookie->sent = SCTP_DATAGRAM_RESEND;
1089         /*
1090          * Now call the output routine to kick out the cookie again, Note we
1091          * don't mark any chunks for retran so that FR will need to kick in
1092          * to move these (or a send timer).
1093          */
1094         return (0);
1095 }
1096
1097 int
1098 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1099     struct sctp_nets *net)
1100 {
1101         struct sctp_nets *alt;
1102         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1103
1104         if (stcb->asoc.stream_reset_outstanding == 0) {
1105                 return (0);
1106         }
1107         /* find the existing STRRESET, we use the seq number we sent out on */
1108         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1109         if (strrst == NULL) {
1110                 return (0);
1111         }
1112         /* do threshold management */
1113         if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1114             stcb->asoc.max_send_times)) {
1115                 /* Assoc is over */
1116                 return (1);
1117         }
1118         /*
1119          * Cleared threshold management, now lets backoff the address and
1120          * select an alternate
1121          */
1122         sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1123         alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1124         sctp_free_remote_addr(strrst->whoTo);
1125         strrst->whoTo = alt;
1126         atomic_add_int(&alt->ref_count, 1);
1127
1128         /* See if a ECN Echo is also stranded */
1129         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1130                 if ((chk->whoTo == net) &&
1131                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1132                         sctp_free_remote_addr(chk->whoTo);
1133                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1134                                 chk->sent = SCTP_DATAGRAM_RESEND;
1135                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1136                         }
1137                         chk->whoTo = alt;
1138                         atomic_add_int(&alt->ref_count, 1);
1139                 }
1140         }
1141         if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1142                 /*
1143                  * If the address went un-reachable, we need to move to
1144                  * alternates for ALL chk's in queue
1145                  */
1146                 sctp_move_chunks_from_net(stcb, net);
1147         }
1148         /* mark the retran info */
1149         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1150                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1151         strrst->sent = SCTP_DATAGRAM_RESEND;
1152
1153         /* restart the timer */
1154         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1155         return (0);
1156 }
1157
1158 int
1159 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1160     struct sctp_nets *net)
1161 {
1162         struct sctp_nets *alt;
1163         struct sctp_tmit_chunk *asconf, *chk;
1164
1165         /* is this a first send, or a retransmission? */
1166         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1167                 /* compose a new ASCONF chunk and send it */
1168                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1169         } else {
1170                 /*
1171                  * Retransmission of the existing ASCONF is needed
1172                  */
1173
1174                 /* find the existing ASCONF */
1175                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1176                 if (asconf == NULL) {
1177                         return (0);
1178                 }
1179                 /* do threshold management */
1180                 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1181                     stcb->asoc.max_send_times)) {
1182                         /* Assoc is over */
1183                         return (1);
1184                 }
1185                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1186                         /*
1187                          * Something is rotten: our peer is not responding
1188                          * to ASCONFs but apparently is to other chunks.
1189                          * i.e. it is not properly handling the chunk type
1190                          * upper bits. Mark this peer as ASCONF incapable
1191                          * and cleanup.
1192                          */
1193                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1194                         sctp_asconf_cleanup(stcb, net);
1195                         return (0);
1196                 }
1197                 /*
1198                  * cleared threshold management, so now backoff the net and
1199                  * select an alternate
1200                  */
1201                 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1202                 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1203                 if (asconf->whoTo != alt) {
1204                         sctp_free_remote_addr(asconf->whoTo);
1205                         asconf->whoTo = alt;
1206                         atomic_add_int(&alt->ref_count, 1);
1207                 }
1208                 /* See if an ECN Echo is also stranded */
1209                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1210                         if ((chk->whoTo == net) &&
1211                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1212                                 sctp_free_remote_addr(chk->whoTo);
1213                                 chk->whoTo = alt;
1214                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1215                                         chk->sent = SCTP_DATAGRAM_RESEND;
1216                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1217                                 }
1218                                 atomic_add_int(&alt->ref_count, 1);
1219                         }
1220                 }
1221                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1222                         if (chk->whoTo != alt) {
1223                                 sctp_free_remote_addr(chk->whoTo);
1224                                 chk->whoTo = alt;
1225                                 atomic_add_int(&alt->ref_count, 1);
1226                         }
1227                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1228                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1229                         chk->sent = SCTP_DATAGRAM_RESEND;
1230                 }
1231                 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1232                         /*
1233                          * If the address went un-reachable, we need to move
1234                          * to the alternate for ALL chunks in queue
1235                          */
1236                         sctp_move_chunks_from_net(stcb, net);
1237                 }
1238                 /* mark the retran info */
1239                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1240                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1241                 asconf->sent = SCTP_DATAGRAM_RESEND;
1242
1243                 /* send another ASCONF if any and we can do */
1244                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1245         }
1246         return (0);
1247 }
1248
1249 /* Mobility adaptation */
1250 void
1251 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1252     struct sctp_nets *net SCTP_UNUSED)
1253 {
1254         if (stcb->asoc.deleted_primary == NULL) {
1255                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1256                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1257                 return;
1258         }
1259         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1260         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1261         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1262         stcb->asoc.deleted_primary = NULL;
1263         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1264         return;
1265 }
1266
1267 /*
1268  * For the shutdown and shutdown-ack, we do not keep one around on the
1269  * control queue. This means we must generate a new one and call the general
1270  * chunk output routine, AFTER having done threshold management.
1271  * It is assumed that net is non-NULL.
1272  */
1273 int
1274 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1275     struct sctp_nets *net)
1276 {
1277         struct sctp_nets *alt;
1278
1279         /* first threshold management */
1280         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1281                 /* Assoc is over */
1282                 return (1);
1283         }
1284         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1285         /* second select an alternative */
1286         alt = sctp_find_alternate_net(stcb, net, 0);
1287
1288         /* third generate a shutdown into the queue for out net */
1289         sctp_send_shutdown(stcb, alt);
1290
1291         /* fourth restart timer */
1292         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1293         return (0);
1294 }
1295
1296 int
1297 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1298     struct sctp_nets *net)
1299 {
1300         struct sctp_nets *alt;
1301
1302         /* first threshold management */
1303         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1304                 /* Assoc is over */
1305                 return (1);
1306         }
1307         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1308         /* second select an alternative */
1309         alt = sctp_find_alternate_net(stcb, net, 0);
1310
1311         /* third generate a shutdown into the queue for out net */
1312         sctp_send_shutdown_ack(stcb, alt);
1313
1314         /* fourth restart timer */
1315         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1316         return (0);
1317 }
1318
1319 static void
1320 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1321     struct sctp_tcb *stcb)
1322 {
1323         struct sctp_stream_queue_pending *sp;
1324         unsigned int i, chks_in_queue = 0;
1325         int being_filled = 0;
1326
1327         /*
1328          * This function is ONLY called when the send/sent queues are empty.
1329          */
1330         if ((stcb == NULL) || (inp == NULL))
1331                 return;
1332
1333         if (stcb->asoc.sent_queue_retran_cnt) {
1334                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1335                     stcb->asoc.sent_queue_retran_cnt);
1336                 stcb->asoc.sent_queue_retran_cnt = 0;
1337         }
1338         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1339                 /* No stream scheduler information, initialize scheduler */
1340                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1341                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1342                         /* yep, we lost a stream or two */
1343                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1344                 } else {
1345                         /* no streams lost */
1346                         stcb->asoc.total_output_queue_size = 0;
1347                 }
1348         }
1349         /* Check to see if some data queued, if so report it */
1350         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1351                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1352                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1353                                 if (sp->msg_is_complete)
1354                                         being_filled++;
1355                                 chks_in_queue++;
1356                         }
1357                 }
1358         }
1359         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1360                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1361                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1362         }
1363         if (chks_in_queue) {
1364                 /* call the output queue function */
1365                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1366                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1367                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1368                         /*
1369                          * Probably should go in and make it go back through
1370                          * and add fragments allowed
1371                          */
1372                         if (being_filled == 0) {
1373                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1374                                     chks_in_queue);
1375                         }
1376                 }
1377         } else {
1378                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1379                     (u_long)stcb->asoc.total_output_queue_size);
1380                 stcb->asoc.total_output_queue_size = 0;
1381         }
1382 }
1383
1384 int
1385 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1386     struct sctp_nets *net)
1387 {
1388         uint8_t net_was_pf;
1389
1390         if (net->dest_state & SCTP_ADDR_PF) {
1391                 net_was_pf = 1;
1392         } else {
1393                 net_was_pf = 0;
1394         }
1395         if (net->hb_responded == 0) {
1396                 if (net->ro._s_addr) {
1397                         /*
1398                          * Invalidate the src address if we did not get a
1399                          * response last time.
1400                          */
1401                         sctp_free_ifa(net->ro._s_addr);
1402                         net->ro._s_addr = NULL;
1403                         net->src_addr_selected = 0;
1404                 }
1405                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1406                 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1407                         /* Assoc is over */
1408                         return (1);
1409                 }
1410         }
1411         /* Zero PBA, if it needs it */
1412         if (net->partial_bytes_acked) {
1413                 net->partial_bytes_acked = 0;
1414         }
1415         if ((stcb->asoc.total_output_queue_size > 0) &&
1416             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1417             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1418                 sctp_audit_stream_queues_for_size(inp, stcb);
1419         }
1420         if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1421             !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1422                 /*
1423                  * when move to PF during threshold mangement, a HB has been
1424                  * queued in that routine
1425                  */
1426                 uint32_t ms_gone_by;
1427
1428                 if ((net->last_sent_time.tv_sec > 0) ||
1429                     (net->last_sent_time.tv_usec > 0)) {
1430                         struct timeval diff;
1431
1432                         SCTP_GETTIME_TIMEVAL(&diff);
1433                         timevalsub(&diff, &net->last_sent_time);
1434                         ms_gone_by = (uint32_t) (diff.tv_sec * 1000) +
1435                             (uint32_t) (diff.tv_usec / 1000);
1436                 } else {
1437                         ms_gone_by = 0xffffffff;
1438                 }
1439                 if ((ms_gone_by >= net->heart_beat_delay) ||
1440                     (net->dest_state & SCTP_ADDR_PF)) {
1441                         sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1442                 }
1443         }
1444         return (0);
1445 }
1446
1447 void
1448 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1449     struct sctp_tcb *stcb,
1450     struct sctp_nets *net)
1451 {
1452         uint32_t next_mtu, mtu;
1453
1454         next_mtu = sctp_get_next_mtu(net->mtu);
1455
1456         if ((next_mtu > net->mtu) && (net->port == 0)) {
1457                 if ((net->src_addr_selected == 0) ||
1458                     (net->ro._s_addr == NULL) ||
1459                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1460                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1461                                 sctp_free_ifa(net->ro._s_addr);
1462                                 net->ro._s_addr = NULL;
1463                                 net->src_addr_selected = 0;
1464                         } else if (net->ro._s_addr == NULL) {
1465 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1466                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1467                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1468
1469                                         /* KAME hack: embed scopeid */
1470                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1471                                 }
1472 #endif
1473
1474                                 net->ro._s_addr = sctp_source_address_selection(inp,
1475                                     stcb,
1476                                     (sctp_route_t *) & net->ro,
1477                                     net, 0, stcb->asoc.vrf_id);
1478 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1479                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1480                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1481
1482                                         (void)sa6_recoverscope(sin6);
1483                                 }
1484 #endif                          /* INET6 */
1485                         }
1486                         if (net->ro._s_addr)
1487                                 net->src_addr_selected = 1;
1488                 }
1489                 if (net->ro._s_addr) {
1490                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1491 #if defined(INET) || defined(INET6)
1492                         if (net->port) {
1493                                 mtu -= sizeof(struct udphdr);
1494                         }
1495 #endif
1496                         if (mtu > next_mtu) {
1497                                 net->mtu = next_mtu;
1498                         } else {
1499                                 net->mtu = mtu;
1500                         }
1501                 }
1502         }
1503         /* restart the timer */
1504         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1505 }
1506
1507 void
1508 sctp_autoclose_timer(struct sctp_inpcb *inp,
1509     struct sctp_tcb *stcb,
1510     struct sctp_nets *net)
1511 {
1512         struct timeval tn, *tim_touse;
1513         struct sctp_association *asoc;
1514         int ticks_gone_by;
1515
1516         (void)SCTP_GETTIME_TIMEVAL(&tn);
1517         if (stcb->asoc.sctp_autoclose_ticks &&
1518             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1519                 /* Auto close is on */
1520                 asoc = &stcb->asoc;
1521                 /* pick the time to use */
1522                 if (asoc->time_last_rcvd.tv_sec >
1523                     asoc->time_last_sent.tv_sec) {
1524                         tim_touse = &asoc->time_last_rcvd;
1525                 } else {
1526                         tim_touse = &asoc->time_last_sent;
1527                 }
1528                 /* Now has long enough transpired to autoclose? */
1529                 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1530                 if ((ticks_gone_by > 0) &&
1531                     (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1532                         /*
1533                          * autoclose time has hit, call the output routine,
1534                          * which should do nothing just to be SURE we don't
1535                          * have hanging data. We can then safely check the
1536                          * queues and know that we are clear to send
1537                          * shutdown
1538                          */
1539                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1540                         /* Are we clean? */
1541                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1542                             TAILQ_EMPTY(&asoc->sent_queue)) {
1543                                 /*
1544                                  * there is nothing queued to send, so I'm
1545                                  * done...
1546                                  */
1547                                 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
1548                                         /* only send SHUTDOWN 1st time thru */
1549                                         struct sctp_nets *netp;
1550
1551                                         if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
1552                                             (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1553                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1554                                         }
1555                                         SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1556                                         SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1557                                         sctp_stop_timers_for_shutdown(stcb);
1558                                         if (stcb->asoc.alternate) {
1559                                                 netp = stcb->asoc.alternate;
1560                                         } else {
1561                                                 netp = stcb->asoc.primary_destination;
1562                                         }
1563                                         sctp_send_shutdown(stcb, netp);
1564                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1565                                             stcb->sctp_ep, stcb,
1566                                             netp);
1567                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1568                                             stcb->sctp_ep, stcb,
1569                                             netp);
1570                                 }
1571                         }
1572                 } else {
1573                         /*
1574                          * No auto close at this time, reset t-o to check
1575                          * later
1576                          */
1577                         int tmp;
1578
1579                         /* fool the timer startup to use the time left */
1580                         tmp = asoc->sctp_autoclose_ticks;
1581                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1582                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1583                             net);
1584                         /* restore the real tick value */
1585                         asoc->sctp_autoclose_ticks = tmp;
1586                 }
1587         }
1588 }