sys/netinet/sctp_timer.c

   1 /*-
   2  * SPDX-License-Identifier: BSD-3-Clause
   3  *
   4  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
   5  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
   6  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions are met:
  10  *
  11  * a) Redistributions of source code must retain the above copyright notice,
  12  *    this list of conditions and the following disclaimer.
  13  *
  14  * b) Redistributions in binary form must reproduce the above copyright
  15  *    notice, this list of conditions and the following disclaimer in
  16  *    the documentation and/or other materials provided with the distribution.
  17  *
  18  * c) Neither the name of Cisco Systems, Inc. nor the names of its
  19  *    contributors may be used to endorse or promote products derived
  20  *    from this software without specific prior written permission.
  21  *
  22  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  23  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  24  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32  * THE POSSIBILITY OF SUCH DAMAGE.
  33  */
  34
  35 #define _IP_VHL
  36 #include <netinet/sctp_os.h>
  37 #include <netinet/sctp_pcb.h>
  38 #ifdef INET6
  39 #endif
  40 #include <netinet/sctp_var.h>
  41 #include <netinet/sctp_sysctl.h>
  42 #include <netinet/sctp_timer.h>
  43 #include <netinet/sctputil.h>
  44 #include <netinet/sctp_output.h>
  45 #include <netinet/sctp_header.h>
  46 #include <netinet/sctp_indata.h>
  47 #include <netinet/sctp_asconf.h>
  48 #include <netinet/sctp_input.h>
  49 #include <netinet/sctp.h>
  50 #include <netinet/sctp_uio.h>
  51 #if defined(INET) || defined(INET6)
  52 #include <netinet/udp.h>
  53 #endif
  54
  55 void
  56 sctp_audit_retranmission_queue(struct sctp_association *asoc)
  57 {
  58         struct sctp_tmit_chunk *chk;
  59
  60         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
  61             asoc->sent_queue_retran_cnt,
  62             asoc->sent_queue_cnt);
  63         asoc->sent_queue_retran_cnt = 0;
  64         asoc->sent_queue_cnt = 0;
  65         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
  66                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  67                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  68                 }
  69                 asoc->sent_queue_cnt++;
  70         }
  71         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
  72                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  73                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  74                 }
  75         }
  76         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
  77                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
  78                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
  79                 }
  80         }
  81         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
  82             asoc->sent_queue_retran_cnt,
  83             asoc->sent_queue_cnt);
  84 }
  85
  86 static int
  87 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
  88     struct sctp_nets *net, uint16_t threshold)
  89 {
  90         if (net) {
  91                 net->error_count++;
  92                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
  93                     (void *)net, net->error_count,
  94                     net->failure_threshold);
  95                 if (net->error_count > net->failure_threshold) {
  96                         /* We had a threshold failure */
  97                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
  98                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
  99                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
 100                                 net->dest_state &= ~SCTP_ADDR_PF;
 101                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
 102                                     stcb, 0,
 103                                     (void *)net, SCTP_SO_NOT_LOCKED);
 104                         }
 105                 } else if ((net->pf_threshold < net->failure_threshold) &&
 106                     (net->error_count > net->pf_threshold)) {
 107                         if ((net->dest_state & SCTP_ADDR_PF) == 0) {
 108                                 net->dest_state |= SCTP_ADDR_PF;
 109                                 net->last_active = sctp_get_tick_count();
 110                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
 111                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
 112                                     inp, stcb, net,
 113                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
 114                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
 115                         }
 116                 }
 117         }
 118         if (stcb == NULL)
 119                 return (0);
 120
 121         if (net) {
 122                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
 123                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 124                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
 125                                     stcb->asoc.overall_error_count,
 126                                     (stcb->asoc.overall_error_count + 1),
 127                                     SCTP_FROM_SCTP_TIMER,
 128                                     __LINE__);
 129                         }
 130                         stcb->asoc.overall_error_count++;
 131                 }
 132         } else {
 133                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
 134                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
 135                             stcb->asoc.overall_error_count,
 136                             (stcb->asoc.overall_error_count + 1),
 137                             SCTP_FROM_SCTP_TIMER,
 138                             __LINE__);
 139                 }
 140                 stcb->asoc.overall_error_count++;
 141         }
 142         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
 143             (void *)&stcb->asoc, stcb->asoc.overall_error_count,
 144             (uint32_t)threshold,
 145             ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state));
 146         /*
 147          * We specifically do not do >= to give the assoc one more change
 148          * before we fail it.
 149          */
 150         if (stcb->asoc.overall_error_count > threshold) {
 151                 /* Abort notification sends a ULP notify */
 152                 struct mbuf *op_err;
 153
 154                 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
 155                     "Association error counter exceeded");
 156                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
 157                 sctp_abort_an_association(inp, stcb, op_err, true, SCTP_SO_NOT_LOCKED);
 158                 return (1);
 159         }
 160         return (0);
 161 }
 162
 163 /*
 164  * sctp_find_alternate_net() returns a non-NULL pointer as long as there
 165  * exists nets, which are not being deleted.
 166  */
 167 struct sctp_nets *
 168 sctp_find_alternate_net(struct sctp_tcb *stcb,
 169     struct sctp_nets *net,
 170     int mode)
 171 {
 172         /* Find and return an alternate network if possible */
 173         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
 174         bool looped;
 175
 176         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
 177         int min_errors = -1;
 178         uint32_t max_cwnd = 0;
 179
 180         if (stcb->asoc.numnets == 1) {
 181                 /* No selection can be made. */
 182                 return (TAILQ_FIRST(&stcb->asoc.nets));
 183         }
 184         /*
 185          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
 186          * net algorithm. This algorithm chooses the active destination (not
 187          * in PF state) with the largest cwnd value. If all destinations are
 188          * in PF state, unreachable, or unconfirmed, choose the destination
 189          * that is in PF state with the lowest error count. In case of a
 190          * tie, choose the destination that was most recently active.
 191          */
 192         if (mode == 2) {
 193                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 194                         /*
 195                          * JRS 5/14/07 - If the destination is unreachable
 196                          * or unconfirmed, skip it.
 197                          */
 198                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 199                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 200                                 continue;
 201                         }
 202                         /*
 203                          * JRS 5/14/07 -  If the destination is reachable
 204                          * but in PF state, compare the error count of the
 205                          * destination to the minimum error count seen thus
 206                          * far. Store the destination with the lower error
 207                          * count.  If the error counts are equal, store the
 208                          * destination that was most recently active.
 209                          */
 210                         if (mnet->dest_state & SCTP_ADDR_PF) {
 211                                 /*
 212                                  * JRS 5/14/07 - If the destination under
 213                                  * consideration is the current destination,
 214                                  * work as if the error count is one higher.
 215                                  * The actual error count will not be
 216                                  * incremented until later in the t3
 217                                  * handler.
 218                                  */
 219                                 if (mnet == net) {
 220                                         if (min_errors == -1) {
 221                                                 min_errors = mnet->error_count + 1;
 222                                                 min_errors_net = mnet;
 223                                         } else if (mnet->error_count + 1 < min_errors) {
 224                                                 min_errors = mnet->error_count + 1;
 225                                                 min_errors_net = mnet;
 226                                         } else if (mnet->error_count + 1 == min_errors
 227                                             && mnet->last_active > min_errors_net->last_active) {
 228                                                 min_errors_net = mnet;
 229                                                 min_errors = mnet->error_count + 1;
 230                                         }
 231                                         continue;
 232                                 } else {
 233                                         if (min_errors == -1) {
 234                                                 min_errors = mnet->error_count;
 235                                                 min_errors_net = mnet;
 236                                         } else if (mnet->error_count < min_errors) {
 237                                                 min_errors = mnet->error_count;
 238                                                 min_errors_net = mnet;
 239                                         } else if (mnet->error_count == min_errors
 240                                             && mnet->last_active > min_errors_net->last_active) {
 241                                                 min_errors_net = mnet;
 242                                                 min_errors = mnet->error_count;
 243                                         }
 244                                         continue;
 245                                 }
 246                         }
 247                         /*
 248                          * JRS 5/14/07 - If the destination is reachable and
 249                          * not in PF state, compare the cwnd of the
 250                          * destination to the highest cwnd seen thus far.
 251                          * Store the destination with the higher cwnd value.
 252                          * If the cwnd values are equal, randomly choose one
 253                          * of the two destinations.
 254                          */
 255                         if (max_cwnd < mnet->cwnd) {
 256                                 max_cwnd_net = mnet;
 257                                 max_cwnd = mnet->cwnd;
 258                         } else if (max_cwnd == mnet->cwnd) {
 259                                 uint32_t rndval;
 260                                 uint8_t this_random;
 261
 262                                 if (stcb->asoc.hb_random_idx > 3) {
 263                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 264                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
 265                                         this_random = stcb->asoc.hb_random_values[0];
 266                                         stcb->asoc.hb_random_idx++;
 267                                         stcb->asoc.hb_ect_randombit = 0;
 268                                 } else {
 269                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 270                                         stcb->asoc.hb_random_idx++;
 271                                         stcb->asoc.hb_ect_randombit = 0;
 272                                 }
 273                                 if (this_random % 2 == 1) {
 274                                         max_cwnd_net = mnet;
 275                                         max_cwnd = mnet->cwnd;  /* Useless? */
 276                                 }
 277                         }
 278                 }
 279                 if (max_cwnd_net == NULL) {
 280                         if (min_errors_net == NULL) {
 281                                 return (net);
 282                         }
 283                         return (min_errors_net);
 284                 } else {
 285                         return (max_cwnd_net);
 286                 }
 287         }                       /* JRS 5/14/07 - If mode is set to 1, use the
 288                                  * CMT policy for choosing an alternate net. */
 289         else if (mode == 1) {
 290                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
 291                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
 292                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
 293                                 /*
 294                                  * will skip ones that are not-reachable or
 295                                  * unconfirmed
 296                                  */
 297                                 continue;
 298                         }
 299                         if (max_cwnd < mnet->cwnd) {
 300                                 max_cwnd_net = mnet;
 301                                 max_cwnd = mnet->cwnd;
 302                         } else if (max_cwnd == mnet->cwnd) {
 303                                 uint32_t rndval;
 304                                 uint8_t this_random;
 305
 306                                 if (stcb->asoc.hb_random_idx > 3) {
 307                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
 308                                         memcpy(stcb->asoc.hb_random_values, &rndval,
 309                                             sizeof(stcb->asoc.hb_random_values));
 310                                         this_random = stcb->asoc.hb_random_values[0];
 311                                         stcb->asoc.hb_random_idx = 0;
 312                                         stcb->asoc.hb_ect_randombit = 0;
 313                                 } else {
 314                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
 315                                         stcb->asoc.hb_random_idx++;
 316                                         stcb->asoc.hb_ect_randombit = 0;
 317                                 }
 318                                 if (this_random % 2) {
 319                                         max_cwnd_net = mnet;
 320                                         max_cwnd = mnet->cwnd;
 321                                 }
 322                         }
 323                 }
 324                 if (max_cwnd_net) {
 325                         return (max_cwnd_net);
 326                 }
 327         }
 328         /* Look for an alternate net, which is active. */
 329         if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
 330                 alt = TAILQ_NEXT(net, sctp_next);
 331         } else {
 332                 alt = TAILQ_FIRST(&stcb->asoc.nets);
 333         }
 334         looped = false;
 335         for (;;) {
 336                 if (alt == NULL) {
 337                         if (!looped) {
 338                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
 339                                 looped = true;
 340                         }
 341                         /* Definitely out of candidates. */
 342                         if (alt == NULL) {
 343                                 break;
 344                         }
 345                 }
 346                 if (alt->ro.ro_nh == NULL) {
 347                         if (alt->ro._s_addr) {
 348                                 sctp_free_ifa(alt->ro._s_addr);
 349                                 alt->ro._s_addr = NULL;
 350                         }
 351                         alt->src_addr_selected = 0;
 352                 }
 353                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
 354                     (alt->ro.ro_nh != NULL) &&
 355                     ((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) &&
 356                     (alt != net)) {
 357                         /* Found an alternate net, which is reachable. */
 358                         break;
 359                 }
 360                 alt = TAILQ_NEXT(alt, sctp_next);
 361         }
 362
 363         if (alt == NULL) {
 364                 /*
 365                  * In case no active alternate net has been found, look for
 366                  * an alternate net, which is confirmed.
 367                  */
 368                 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
 369                         alt = TAILQ_NEXT(net, sctp_next);
 370                 } else {
 371                         alt = TAILQ_FIRST(&stcb->asoc.nets);
 372                 }
 373                 looped = false;
 374                 for (;;) {
 375                         if (alt == NULL) {
 376                                 if (!looped) {
 377                                         alt = TAILQ_FIRST(&stcb->asoc.nets);
 378                                         looped = true;
 379                                 }
 380                                 /* Definitely out of candidates. */
 381                                 if (alt == NULL) {
 382                                         break;
 383                                 }
 384                         }
 385                         if (((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) &&
 386                             (alt != net)) {
 387                                 /*
 388                                  * Found an alternate net, which is
 389                                  * confirmed.
 390                                  */
 391                                 break;
 392                         }
 393                         alt = TAILQ_NEXT(alt, sctp_next);
 394                 }
 395         }
 396         if (alt == NULL) {
 397                 /*
 398                  * In case no confirmed alternate net has been found, just
 399                  * return net, if it is not being deleted. In the other case
 400                  * just return the first net.
 401                  */
 402                 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
 403                         alt = net;
 404                 }
 405                 if (alt == NULL) {
 406                         alt = TAILQ_FIRST(&stcb->asoc.nets);
 407                 }
 408         }
 409         return (alt);
 410 }
 411
 412 static void
 413 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
 414     struct sctp_nets *net,
 415     int win_probe,
 416     int num_marked, int num_abandoned)
 417 {
 418         if (net->RTO == 0) {
 419                 if (net->RTO_measured) {
 420                         net->RTO = stcb->asoc.minrto;
 421                 } else {
 422                         net->RTO = stcb->asoc.initial_rto;
 423                 }
 424         }
 425         net->RTO <<= 1;
 426         if (net->RTO > stcb->asoc.maxrto) {
 427                 net->RTO = stcb->asoc.maxrto;
 428         }
 429         if ((win_probe == 0) && (num_marked || num_abandoned)) {
 430                 /* We don't apply penalty to window probe scenarios */
 431                 /* JRS - Use the congestion control given in the CC module */
 432                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
 433         }
 434 }
 435
 436 #ifndef INVARIANTS
 437 static void
 438 sctp_recover_sent_list(struct sctp_tcb *stcb)
 439 {
 440         struct sctp_tmit_chunk *chk, *nchk;
 441         struct sctp_association *asoc;
 442
 443         asoc = &stcb->asoc;
 444         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
 445                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) {
 446                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
 447                             (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq);
 448                         if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
 449                                 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
 450                                         asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
 451                                 }
 452                         }
 453                         if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) &&
 454                             (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) &&
 455                             TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) {
 456                                 asoc->trigger_reset = 1;
 457                         }
 458                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
 459                         if (PR_SCTP_ENABLED(chk->flags)) {
 460                                 if (asoc->pr_sctp_cnt != 0)
 461                                         asoc->pr_sctp_cnt--;
 462                         }
 463                         if (chk->data) {
 464                                 /* sa_ignore NO_NULL_CHK */
 465                                 sctp_free_bufspace(stcb, asoc, chk, 1);
 466                                 sctp_m_freem(chk->data);
 467                                 chk->data = NULL;
 468                                 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
 469                                         asoc->sent_queue_cnt_removeable--;
 470                                 }
 471                         }
 472                         asoc->sent_queue_cnt--;
 473                         sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
 474                 }
 475         }
 476         SCTP_PRINTF("after recover order is as follows\n");
 477         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
 478                 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn);
 479         }
 480 }
 481 #endif
 482
 483 static int
 484 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
 485     struct sctp_nets *net,
 486     struct sctp_nets *alt,
 487     int window_probe,
 488     int *num_marked,
 489     int *num_abandoned)
 490 {
 491
 492         /*
 493          * Mark all chunks (well not all) that were sent to *net for
 494          * retransmission. Move them to alt for there destination as well...
 495          * We only mark chunks that have been outstanding long enough to
 496          * have received feed-back.
 497          */
 498         struct sctp_tmit_chunk *chk, *nchk;
 499         struct sctp_nets *lnets;
 500         struct timeval now, min_wait, tv;
 501         int cur_rto;
 502         int cnt_abandoned;
 503         int audit_tf, num_mk, fir;
 504         unsigned int cnt_mk;
 505         uint32_t orig_flight, orig_tf;
 506         uint32_t tsnlast, tsnfirst;
 507 #ifndef INVARIANTS
 508         int recovery_cnt = 0;
 509 #endif
 510
 511         /* none in flight now */
 512         audit_tf = 0;
 513         fir = 0;
 514         /*
 515          * figure out how long a data chunk must be pending before we can
 516          * mark it ..
 517          */
 518         (void)SCTP_GETTIME_TIMEVAL(&now);
 519         /* get cur rto in micro-seconds */
 520         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
 521         cur_rto *= 1000;
 522         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 523                 sctp_log_fr(cur_rto,
 524                     stcb->asoc.peers_rwnd,
 525                     window_probe,
 526                     SCTP_FR_T3_MARK_TIME);
 527                 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
 528                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
 529         }
 530         tv.tv_sec = cur_rto / 1000000;
 531         tv.tv_usec = cur_rto % 1000000;
 532         min_wait = now;
 533         timevalsub(&min_wait, &tv);
 534         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
 535                 /*
 536                  * if we hit here, we don't have enough seconds on the clock
 537                  * to account for the RTO. We just let the lower seconds be
 538                  * the bounds and don't worry about it. This may mean we
 539                  * will mark a lot more than we should.
 540                  */
 541                 min_wait.tv_sec = min_wait.tv_usec = 0;
 542         }
 543         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 544                 sctp_log_fr(cur_rto, (uint32_t)now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
 545                 sctp_log_fr(0, (uint32_t)min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
 546         }
 547         /*
 548          * Our rwnd will be incorrect here since we are not adding back the
 549          * cnt * mbuf but we will fix that down below.
 550          */
 551         orig_flight = net->flight_size;
 552         orig_tf = stcb->asoc.total_flight;
 553
 554         net->fast_retran_ip = 0;
 555         /* Now on to each chunk */
 556         cnt_abandoned = 0;
 557         num_mk = cnt_mk = 0;
 558         tsnfirst = tsnlast = 0;
 559 #ifndef INVARIANTS
 560 start_again:
 561 #endif
 562         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
 563                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) {
 564                         /* Strange case our list got out of order? */
 565                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
 566                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn);
 567 #ifdef INVARIANTS
 568                         panic("last acked >= chk on sent-Q");
 569 #else
 570                         recovery_cnt++;
 571                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
 572                         sctp_recover_sent_list(stcb);
 573                         if (recovery_cnt < 10) {
 574                                 goto start_again;
 575                         } else {
 576                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
 577                         }
 578 #endif
 579                 }
 580                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
 581                         /*
 582                          * found one to mark: If it is less than
 583                          * DATAGRAM_ACKED it MUST not be a skipped or marked
 584                          * TSN but instead one that is either already set
 585                          * for retransmission OR one that needs
 586                          * retransmission.
 587                          */
 588
 589                         /* validate its been outstanding long enough */
 590                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 591                                 sctp_log_fr(chk->rec.data.tsn,
 592                                     (uint32_t)chk->sent_rcv_time.tv_sec,
 593                                     chk->sent_rcv_time.tv_usec,
 594                                     SCTP_FR_T3_MARK_TIME);
 595                         }
 596                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
 597                                 /*
 598                                  * we have reached a chunk that was sent
 599                                  * some seconds past our min.. forget it we
 600                                  * will find no more to send.
 601                                  */
 602                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 603                                         sctp_log_fr(0,
 604                                             (uint32_t)chk->sent_rcv_time.tv_sec,
 605                                             chk->sent_rcv_time.tv_usec,
 606                                             SCTP_FR_T3_STOPPED);
 607                                 }
 608                                 continue;
 609                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
 610                             (window_probe == 0)) {
 611                                 /*
 612                                  * we must look at the micro seconds to
 613                                  * know.
 614                                  */
 615                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
 616                                         /*
 617                                          * ok it was sent after our boundary
 618                                          * time.
 619                                          */
 620                                         continue;
 621                                 }
 622                         }
 623                         if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
 624                                 /* Is it expired? */
 625                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
 626                                         /* Yes so drop it */
 627                                         if (chk->data) {
 628                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 629                                                     chk,
 630                                                     1,
 631                                                     SCTP_SO_NOT_LOCKED);
 632                                                 cnt_abandoned++;
 633                                         }
 634                                         continue;
 635                                 }
 636                         }
 637                         if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
 638                                 /* Has it been retransmitted tv_sec times? */
 639                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
 640                                         if (chk->data) {
 641                                                 (void)sctp_release_pr_sctp_chunk(stcb,
 642                                                     chk,
 643                                                     1,
 644                                                     SCTP_SO_NOT_LOCKED);
 645                                                 cnt_abandoned++;
 646                                         }
 647                                         continue;
 648                                 }
 649                         }
 650                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 651                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 652                                 num_mk++;
 653                                 if (fir == 0) {
 654                                         fir = 1;
 655                                         tsnfirst = chk->rec.data.tsn;
 656                                 }
 657                                 tsnlast = chk->rec.data.tsn;
 658                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 659                                         sctp_log_fr(chk->rec.data.tsn, chk->snd_count,
 660                                             0, SCTP_FR_T3_MARKED);
 661                                 }
 662
 663                                 if (chk->rec.data.chunk_was_revoked) {
 664                                         /* deflate the cwnd */
 665                                         chk->whoTo->cwnd -= chk->book_size;
 666                                         chk->rec.data.chunk_was_revoked = 0;
 667                                 }
 668                                 net->marked_retrans++;
 669                                 stcb->asoc.marked_retrans++;
 670                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 671                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
 672                                             chk->whoTo->flight_size,
 673                                             chk->book_size,
 674                                             (uint32_t)(uintptr_t)chk->whoTo,
 675                                             chk->rec.data.tsn);
 676                                 }
 677                                 sctp_flight_size_decrease(chk);
 678                                 sctp_total_flight_decrease(stcb, chk);
 679                                 stcb->asoc.peers_rwnd += chk->send_size;
 680                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
 681                         }
 682                         chk->sent = SCTP_DATAGRAM_RESEND;
 683                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 684                         SCTP_STAT_INCR(sctps_markedretrans);
 685
 686                         /* reset the TSN for striking and other FR stuff */
 687                         chk->rec.data.doing_fast_retransmit = 0;
 688                         /* Clear any time so NO RTT is being done */
 689
 690                         if (chk->do_rtt) {
 691                                 if (chk->whoTo->rto_needed == 0) {
 692                                         chk->whoTo->rto_needed = 1;
 693                                 }
 694                         }
 695                         chk->do_rtt = 0;
 696                         if (alt != net) {
 697                                 sctp_free_remote_addr(chk->whoTo);
 698                                 chk->no_fr_allowed = 1;
 699                                 chk->whoTo = alt;
 700                                 atomic_add_int(&alt->ref_count, 1);
 701                         } else {
 702                                 chk->no_fr_allowed = 0;
 703                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
 704                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
 705                                 } else {
 706                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn;
 707                                 }
 708                         }
 709                         /*
 710                          * CMT: Do not allow FRs on retransmitted TSNs.
 711                          */
 712                         if (stcb->asoc.sctp_cmt_on_off > 0) {
 713                                 chk->no_fr_allowed = 1;
 714                         }
 715 #ifdef THIS_SHOULD_NOT_BE_DONE
 716                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
 717                         /* remember highest acked one */
 718                         could_be_sent = chk;
 719 #endif
 720                 }
 721                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 722                         cnt_mk++;
 723                 }
 724         }
 725         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
 726                 /* we did not subtract the same things? */
 727                 audit_tf = 1;
 728         }
 729
 730         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 731                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
 732         }
 733 #ifdef SCTP_DEBUG
 734         if (num_mk) {
 735                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
 736                     tsnlast);
 737                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n",
 738                     num_mk,
 739                     stcb->asoc.peers_rwnd);
 740         }
 741 #endif
 742         *num_marked = num_mk;
 743         *num_abandoned = cnt_abandoned;
 744         /*
 745          * Now check for a ECN Echo that may be stranded And include the
 746          * cnt_mk'd to have all resends in the control queue.
 747          */
 748         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
 749                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
 750                         cnt_mk++;
 751                 }
 752                 if ((chk->whoTo == net) &&
 753                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
 754                         sctp_free_remote_addr(chk->whoTo);
 755                         chk->whoTo = alt;
 756                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
 757                                 chk->sent = SCTP_DATAGRAM_RESEND;
 758                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 759                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 760                                 cnt_mk++;
 761                         }
 762                         atomic_add_int(&alt->ref_count, 1);
 763                 }
 764         }
 765 #ifdef THIS_SHOULD_NOT_BE_DONE
 766         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
 767                 /* fix it so we retransmit the highest acked anyway */
 768                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 769                 cnt_mk++;
 770                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
 771         }
 772 #endif
 773         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
 774 #ifdef INVARIANTS
 775                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
 776                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
 777 #endif
 778 #ifndef SCTP_AUDITING_ENABLED
 779                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
 780 #endif
 781         }
 782         if (audit_tf) {
 783                 SCTPDBG(SCTP_DEBUG_TIMER4,
 784                     "Audit total flight due to negative value net:%p\n",
 785                     (void *)net);
 786                 stcb->asoc.total_flight = 0;
 787                 stcb->asoc.total_flight_count = 0;
 788                 /* Clear all networks flight size */
 789                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
 790                         lnets->flight_size = 0;
 791                         SCTPDBG(SCTP_DEBUG_TIMER4,
 792                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
 793                             (void *)lnets, lnets->cwnd, lnets->ssthresh);
 794                 }
 795                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
 796                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 797                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 798                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
 799                                             chk->whoTo->flight_size,
 800                                             chk->book_size,
 801                                             (uint32_t)(uintptr_t)chk->whoTo,
 802                                             chk->rec.data.tsn);
 803                                 }
 804
 805                                 sctp_flight_size_increase(chk);
 806                                 sctp_total_flight_increase(stcb, chk);
 807                         }
 808                 }
 809         }
 810         /* We return 1 if we only have a window probe outstanding */
 811         return (0);
 812 }
 813
 814 int
 815 sctp_t3rxt_timer(struct sctp_inpcb *inp,
 816     struct sctp_tcb *stcb,
 817     struct sctp_nets *net)
 818 {
 819         struct sctp_nets *alt;
 820         int win_probe, num_mk, num_abandoned;
 821
 822         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
 823                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
 824         }
 825         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
 826                 struct sctp_nets *lnet;
 827
 828                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
 829                         if (net == lnet) {
 830                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
 831                         } else {
 832                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
 833                         }
 834                 }
 835         }
 836         /* Find an alternate and mark those for retransmission */
 837         if ((stcb->asoc.peers_rwnd == 0) &&
 838             (stcb->asoc.total_flight < net->mtu)) {
 839                 SCTP_STAT_INCR(sctps_timowindowprobe);
 840                 win_probe = 1;
 841         } else {
 842                 win_probe = 0;
 843         }
 844
 845         if (win_probe == 0) {
 846                 /* We don't do normal threshold management on window probes */
 847                 if (sctp_threshold_management(inp, stcb, net,
 848                     stcb->asoc.max_send_times)) {
 849                         /* Association was destroyed */
 850                         return (1);
 851                 } else {
 852                         if (net != stcb->asoc.primary_destination) {
 853                                 /* send a immediate HB if our RTO is stale */
 854                                 struct timeval now;
 855                                 uint32_t ms_goneby;
 856
 857                                 (void)SCTP_GETTIME_TIMEVAL(&now);
 858                                 if (net->last_sent_time.tv_sec) {
 859                                         ms_goneby = (uint32_t)(now.tv_sec - net->last_sent_time.tv_sec) * 1000;
 860                                 } else {
 861                                         ms_goneby = 0;
 862                                 }
 863                                 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
 864                                         if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
 865                                                 /*
 866                                                  * no recent feed back in an
 867                                                  * RTO or more, request a
 868                                                  * RTT update
 869                                                  */
 870                                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
 871                                         }
 872                                 }
 873                         }
 874                 }
 875         } else {
 876                 /*
 877                  * For a window probe we don't penalize the net's but only
 878                  * the association. This may fail it if SACKs are not coming
 879                  * back. If sack's are coming with rwnd locked at 0, we will
 880                  * continue to hold things waiting for rwnd to raise
 881                  */
 882                 if (sctp_threshold_management(inp, stcb, NULL,
 883                     stcb->asoc.max_send_times)) {
 884                         /* Association was destroyed */
 885                         return (1);
 886                 }
 887         }
 888         if (stcb->asoc.sctp_cmt_on_off > 0) {
 889                 if (net->pf_threshold < net->failure_threshold) {
 890                         alt = sctp_find_alternate_net(stcb, net, 2);
 891                 } else {
 892                         /*
 893                          * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
 894                          * being used, then pick dest with largest ssthresh
 895                          * for any retransmission.
 896                          */
 897                         alt = sctp_find_alternate_net(stcb, net, 1);
 898                         /*
 899                          * CUCv2: If a different dest is picked for the
 900                          * retransmission, then new (rtx-)pseudo_cumack
 901                          * needs to be tracked for orig dest. Let CUCv2
 902                          * track new (rtx-) pseudo-cumack always.
 903                          */
 904                         net->find_pseudo_cumack = 1;
 905                         net->find_rtx_pseudo_cumack = 1;
 906                 }
 907         } else {
 908                 alt = sctp_find_alternate_net(stcb, net, 0);
 909         }
 910
 911         num_mk = 0;
 912         num_abandoned = 0;
 913         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
 914             &num_mk, &num_abandoned);
 915         /* FR Loss recovery just ended with the T3. */
 916         stcb->asoc.fast_retran_loss_recovery = 0;
 917
 918         /* CMT FR loss recovery ended with the T3 */
 919         net->fast_retran_loss_recovery = 0;
 920         if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
 921             (net->flight_size == 0)) {
 922                 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
 923         }
 924
 925         /*
 926          * setup the sat loss recovery that prevents satellite cwnd advance.
 927          */
 928         stcb->asoc.sat_t3_loss_recovery = 1;
 929         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
 930
 931         /* Backoff the timer and cwnd */
 932         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
 933         if (((net->dest_state & SCTP_ADDR_REACHABLE) == 0) ||
 934             (net->dest_state & SCTP_ADDR_PF)) {
 935                 /* Move all pending over too */
 936                 sctp_move_chunks_from_net(stcb, net);
 937
 938                 /*
 939                  * Get the address that failed, to force a new src address
 940                  * selection and a route allocation.
 941                  */
 942                 if (net->ro._s_addr != NULL) {
 943                         sctp_free_ifa(net->ro._s_addr);
 944                         net->ro._s_addr = NULL;
 945                 }
 946                 net->src_addr_selected = 0;
 947
 948                 /* Force a route allocation too */
 949                 RO_NHFREE(&net->ro);
 950
 951                 /* Was it our primary? */
 952                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
 953                         /*
 954                          * Yes, note it as such and find an alternate note:
 955                          * this means HB code must use this to resent the
 956                          * primary if it goes active AND if someone does a
 957                          * change-primary then this flag must be cleared
 958                          * from any net structures.
 959                          */
 960                         if (stcb->asoc.alternate != NULL) {
 961                                 sctp_free_remote_addr(stcb->asoc.alternate);
 962                         }
 963                         stcb->asoc.alternate = alt;
 964                         atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
 965                 }
 966         }
 967         /*
 968          * Special case for cookie-echo'ed case, we don't do output but must
 969          * await the COOKIE-ACK before retransmission
 970          */
 971         if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
 972                 /*
 973                  * Here we just reset the timer and start again since we
 974                  * have not established the asoc
 975                  */
 976                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
 977                 return (0);
 978         }
 979         if (stcb->asoc.prsctp_supported) {
 980                 struct sctp_tmit_chunk *lchk;
 981
 982                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
 983                 /* C3. See if we need to send a Fwd-TSN */
 984                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
 985                         send_forward_tsn(stcb, &stcb->asoc);
 986                         for (; lchk != NULL; lchk = TAILQ_NEXT(lchk, sctp_next)) {
 987                                 if (lchk->whoTo != NULL) {
 988                                         break;
 989                                 }
 990                         }
 991                         if (lchk != NULL) {
 992                                 /* Assure a timer is up */
 993                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
 994                         }
 995                 }
 996         }
 997         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
 998                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
 999         }
1000         return (0);
1001 }
1002
1003 int
1004 sctp_t1init_timer(struct sctp_inpcb *inp,
1005     struct sctp_tcb *stcb,
1006     struct sctp_nets *net)
1007 {
1008         /* bump the thresholds */
1009         if (stcb->asoc.delayed_connection) {
1010                 /*
1011                  * special hook for delayed connection. The library did NOT
1012                  * complete the rest of its sends.
1013                  */
1014                 stcb->asoc.delayed_connection = 0;
1015                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1016                 return (0);
1017         }
1018         if (SCTP_GET_STATE(stcb) != SCTP_STATE_COOKIE_WAIT) {
1019                 return (0);
1020         }
1021         if (sctp_threshold_management(inp, stcb, net,
1022             stcb->asoc.max_init_times)) {
1023                 /* Association was destroyed */
1024                 return (1);
1025         }
1026         stcb->asoc.dropped_special_cnt = 0;
1027         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1028         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1029                 net->RTO = stcb->asoc.initial_init_rto_max;
1030         }
1031         if (stcb->asoc.numnets > 1) {
1032                 /* If we have more than one addr use it */
1033                 struct sctp_nets *alt;
1034
1035                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1036                 if (alt != stcb->asoc.primary_destination) {
1037                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1038                         stcb->asoc.primary_destination = alt;
1039                 }
1040         }
1041         /* Send out a new init */
1042         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1043         return (0);
1044 }
1045
1046 /*
1047  * For cookie and asconf we actually need to find and mark for resend, then
1048  * increment the resend counter (after all the threshold management stuff of
1049  * course).
1050  */
1051 int
1052 sctp_cookie_timer(struct sctp_inpcb *inp,
1053     struct sctp_tcb *stcb,
1054     struct sctp_nets *net SCTP_UNUSED)
1055 {
1056         struct sctp_nets *alt;
1057         struct sctp_tmit_chunk *cookie;
1058
1059         /* first before all else we must find the cookie */
1060         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1061                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1062                         break;
1063                 }
1064         }
1065         if (cookie == NULL) {
1066                 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
1067                         /* FOOBAR! */
1068                         struct mbuf *op_err;
1069
1070                         op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1071                             "Cookie timer expired, but no cookie");
1072                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1073                         sctp_abort_an_association(inp, stcb, op_err, false, SCTP_SO_NOT_LOCKED);
1074                 } else {
1075 #ifdef INVARIANTS
1076                         panic("Cookie timer expires in wrong state?");
1077 #else
1078                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(stcb));
1079                         return (0);
1080 #endif
1081                 }
1082                 return (0);
1083         }
1084         /* Ok we found the cookie, threshold management next */
1085         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1086             stcb->asoc.max_init_times)) {
1087                 /* Assoc is over */
1088                 return (1);
1089         }
1090         /*
1091          * Cleared threshold management, now lets backoff the address and
1092          * select an alternate
1093          */
1094         stcb->asoc.dropped_special_cnt = 0;
1095         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1096         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1097         if (alt != cookie->whoTo) {
1098                 sctp_free_remote_addr(cookie->whoTo);
1099                 cookie->whoTo = alt;
1100                 atomic_add_int(&alt->ref_count, 1);
1101         }
1102         /* Now mark the retran info */
1103         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1104                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1105         }
1106         cookie->sent = SCTP_DATAGRAM_RESEND;
1107         cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1108         /*
1109          * Now call the output routine to kick out the cookie again, Note we
1110          * don't mark any chunks for retran so that FR will need to kick in
1111          * to move these (or a send timer).
1112          */
1113         return (0);
1114 }
1115
1116 int
1117 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1118 {
1119         struct sctp_nets *alt, *net;
1120         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1121
1122         if (stcb->asoc.stream_reset_outstanding == 0) {
1123                 return (0);
1124         }
1125         /* find the existing STRRESET, we use the seq number we sent out on */
1126         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1127         if (strrst == NULL) {
1128                 return (0);
1129         }
1130         net = strrst->whoTo;
1131         /* do threshold management */
1132         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1133                 /* Assoc is over */
1134                 return (1);
1135         }
1136         /*
1137          * Cleared threshold management, now lets backoff the address and
1138          * select an alternate
1139          */
1140         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1141         alt = sctp_find_alternate_net(stcb, net, 0);
1142         strrst->whoTo = alt;
1143         atomic_add_int(&alt->ref_count, 1);
1144
1145         /* See if a ECN Echo is also stranded */
1146         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1147                 if ((chk->whoTo == net) &&
1148                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1149                         sctp_free_remote_addr(chk->whoTo);
1150                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1151                                 chk->sent = SCTP_DATAGRAM_RESEND;
1152                                 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1153                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1154                         }
1155                         chk->whoTo = alt;
1156                         atomic_add_int(&alt->ref_count, 1);
1157                 }
1158         }
1159         if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) {
1160                 /*
1161                  * If the address went un-reachable, we need to move to
1162                  * alternates for ALL chk's in queue
1163                  */
1164                 sctp_move_chunks_from_net(stcb, net);
1165         }
1166         sctp_free_remote_addr(net);
1167
1168         /* mark the retran info */
1169         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1170                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1171         strrst->sent = SCTP_DATAGRAM_RESEND;
1172         strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1173
1174         /* restart the timer */
1175         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, alt);
1176         return (0);
1177 }
1178
1179 int
1180 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1181     struct sctp_nets *net)
1182 {
1183         struct sctp_nets *alt;
1184         struct sctp_tmit_chunk *asconf, *chk;
1185
1186         /* is this a first send, or a retransmission? */
1187         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1188                 /* compose a new ASCONF chunk and send it */
1189                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1190         } else {
1191                 /*
1192                  * Retransmission of the existing ASCONF is needed
1193                  */
1194
1195                 /* find the existing ASCONF */
1196                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1197                 if (asconf == NULL) {
1198                         return (0);
1199                 }
1200                 net = asconf->whoTo;
1201                 /* do threshold management */
1202                 if (sctp_threshold_management(inp, stcb, net,
1203                     stcb->asoc.max_send_times)) {
1204                         /* Assoc is over */
1205                         return (1);
1206                 }
1207                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1208                         /*
1209                          * Something is rotten: our peer is not responding
1210                          * to ASCONFs but apparently is to other chunks.
1211                          * i.e. it is not properly handling the chunk type
1212                          * upper bits. Mark this peer as ASCONF incapable
1213                          * and cleanup.
1214                          */
1215                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1216                         sctp_asconf_cleanup(stcb);
1217                         return (0);
1218                 }
1219                 /*
1220                  * cleared threshold management, so now backoff the net and
1221                  * select an alternate
1222                  */
1223                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1224                 alt = sctp_find_alternate_net(stcb, net, 0);
1225                 if (asconf->whoTo != alt) {
1226                         asconf->whoTo = alt;
1227                         atomic_add_int(&alt->ref_count, 1);
1228                 }
1229
1230                 /* See if an ECN Echo is also stranded */
1231                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1232                         if ((chk->whoTo == net) &&
1233                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1234                                 sctp_free_remote_addr(chk->whoTo);
1235                                 chk->whoTo = alt;
1236                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1237                                         chk->sent = SCTP_DATAGRAM_RESEND;
1238                                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1239                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1240                                 }
1241                                 atomic_add_int(&alt->ref_count, 1);
1242                         }
1243                 }
1244                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1245                         if (chk->whoTo != alt) {
1246                                 sctp_free_remote_addr(chk->whoTo);
1247                                 chk->whoTo = alt;
1248                                 atomic_add_int(&alt->ref_count, 1);
1249                         }
1250                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1251                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1252                         chk->sent = SCTP_DATAGRAM_RESEND;
1253                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1254                 }
1255                 if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) {
1256                         /*
1257                          * If the address went un-reachable, we need to move
1258                          * to the alternate for ALL chunks in queue
1259                          */
1260                         sctp_move_chunks_from_net(stcb, net);
1261                 }
1262                 sctp_free_remote_addr(net);
1263
1264                 /* mark the retran info */
1265                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1266                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1267                 asconf->sent = SCTP_DATAGRAM_RESEND;
1268                 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1269
1270                 /* send another ASCONF if any and we can do */
1271                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1272         }
1273         return (0);
1274 }
1275
1276 /* Mobility adaptation */
1277 void
1278 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1279 {
1280         if (stcb->asoc.deleted_primary == NULL) {
1281                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1282                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1283                 return;
1284         }
1285         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1286         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1287         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1288         stcb->asoc.deleted_primary = NULL;
1289         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1290         return;
1291 }
1292
1293 /*
1294  * For the shutdown and shutdown-ack, we do not keep one around on the
1295  * control queue. This means we must generate a new one and call the general
1296  * chunk output routine, AFTER having done threshold management.
1297  * It is assumed that net is non-NULL.
1298  */
1299 int
1300 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1301     struct sctp_nets *net)
1302 {
1303         struct sctp_nets *alt;
1304
1305         /* first threshold management */
1306         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1307                 /* Assoc is over */
1308                 return (1);
1309         }
1310         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1311         /* second select an alternative */
1312         alt = sctp_find_alternate_net(stcb, net, 0);
1313
1314         /* third generate a shutdown into the queue for out net */
1315         sctp_send_shutdown(stcb, alt);
1316
1317         /* fourth restart timer */
1318         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1319         return (0);
1320 }
1321
1322 int
1323 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1324     struct sctp_nets *net)
1325 {
1326         struct sctp_nets *alt;
1327
1328         /* first threshold management */
1329         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1330                 /* Assoc is over */
1331                 return (1);
1332         }
1333         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1334         /* second select an alternative */
1335         alt = sctp_find_alternate_net(stcb, net, 0);
1336
1337         /* third generate a shutdown into the queue for out net */
1338         sctp_send_shutdown_ack(stcb, alt);
1339
1340         /* fourth restart timer */
1341         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1342         return (0);
1343 }
1344
1345 static void
1346 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1347 {
1348         struct sctp_stream_queue_pending *sp;
1349         unsigned int i, chks_in_queue = 0;
1350         int being_filled = 0;
1351
1352         KASSERT(inp != NULL, ("inp is NULL"));
1353         KASSERT(stcb != NULL, ("stcb is NULL"));
1354         SCTP_TCB_LOCK_ASSERT(stcb);
1355         KASSERT(TAILQ_EMPTY(&stcb->asoc.send_queue), ("send_queue not empty"));
1356         KASSERT(TAILQ_EMPTY(&stcb->asoc.sent_queue), ("sent_queue not empty"));
1357
1358         if (stcb->asoc.sent_queue_retran_cnt) {
1359                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1360                     stcb->asoc.sent_queue_retran_cnt);
1361                 stcb->asoc.sent_queue_retran_cnt = 0;
1362         }
1363         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1364                 /* No stream scheduler information, initialize scheduler */
1365                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc);
1366                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1367                         /* yep, we lost a stream or two */
1368                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1369                 } else {
1370                         /* no streams lost */
1371                         stcb->asoc.total_output_queue_size = 0;
1372                 }
1373         }
1374         /* Check to see if some data queued, if so report it */
1375         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1376                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1377                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1378                                 if (sp->msg_is_complete)
1379                                         being_filled++;
1380                                 chks_in_queue++;
1381                         }
1382                 }
1383         }
1384         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1385                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1386                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1387         }
1388         if (chks_in_queue) {
1389                 /* call the output queue function */
1390                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1391                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1392                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1393                         /*
1394                          * Probably should go in and make it go back through
1395                          * and add fragments allowed
1396                          */
1397                         if (being_filled == 0) {
1398                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1399                                     chks_in_queue);
1400                         }
1401                 }
1402         } else {
1403                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1404                     (u_long)stcb->asoc.total_output_queue_size);
1405                 stcb->asoc.total_output_queue_size = 0;
1406         }
1407 }
1408
1409 int
1410 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1411     struct sctp_nets *net)
1412 {
1413         bool net_was_pf;
1414
1415         net_was_pf = (net->dest_state & SCTP_ADDR_PF) != 0;
1416         if (net->hb_responded == 0) {
1417                 if (net->ro._s_addr != NULL) {
1418                         /*
1419                          * Invalidate the src address if we did not get a
1420                          * response last time.
1421                          */
1422                         sctp_free_ifa(net->ro._s_addr);
1423                         net->ro._s_addr = NULL;
1424                         net->src_addr_selected = 0;
1425                 }
1426                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1427                 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1428                         /* Assoc is over */
1429                         return (1);
1430                 }
1431         }
1432         /* Zero PBA, if it needs it */
1433         if (net->partial_bytes_acked > 0) {
1434                 net->partial_bytes_acked = 0;
1435         }
1436         if ((stcb->asoc.total_output_queue_size > 0) &&
1437             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1438             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1439                 sctp_audit_stream_queues_for_size(inp, stcb);
1440         }
1441         if ((((net->dest_state & SCTP_ADDR_NOHB) == 0) ||
1442             (net->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
1443             (net_was_pf || ((net->dest_state & SCTP_ADDR_PF) == 0))) {
1444                 /*
1445                  * When moving to PF during threshold management, a HB has
1446                  * been queued in that routine.
1447                  */
1448                 uint32_t ms_gone_by;
1449
1450                 if ((net->last_sent_time.tv_sec > 0) ||
1451                     (net->last_sent_time.tv_usec > 0)) {
1452                         struct timeval diff;
1453
1454                         SCTP_GETTIME_TIMEVAL(&diff);
1455                         timevalsub(&diff, &net->last_sent_time);
1456                         ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1457                             (uint32_t)(diff.tv_usec / 1000);
1458                 } else {
1459                         ms_gone_by = 0xffffffff;
1460                 }
1461                 if ((ms_gone_by >= net->heart_beat_delay) ||
1462                     (net->dest_state & SCTP_ADDR_UNCONFIRMED) ||
1463                     (net->dest_state & SCTP_ADDR_PF)) {
1464                         sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1465                 }
1466         }
1467         return (0);
1468 }
1469
1470 void
1471 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1472     struct sctp_tcb *stcb,
1473     struct sctp_nets *net)
1474 {
1475         uint32_t next_mtu, mtu;
1476
1477         next_mtu = sctp_get_next_mtu(net->mtu);
1478
1479         if ((next_mtu > net->mtu) && (net->port == 0)) {
1480                 if ((net->src_addr_selected == 0) ||
1481                     (net->ro._s_addr == NULL) ||
1482                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1483                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1484                                 sctp_free_ifa(net->ro._s_addr);
1485                                 net->ro._s_addr = NULL;
1486                                 net->src_addr_selected = 0;
1487                         } else if (net->ro._s_addr == NULL) {
1488 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1489                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1490                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1491
1492                                         /* KAME hack: embed scopeid */
1493                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1494                                 }
1495 #endif
1496
1497                                 net->ro._s_addr = sctp_source_address_selection(inp,
1498                                     stcb,
1499                                     (sctp_route_t *)&net->ro,
1500                                     net, 0, stcb->asoc.vrf_id);
1501 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1502                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1503                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1504
1505                                         (void)sa6_recoverscope(sin6);
1506                                 }
1507 #endif                          /* INET6 */
1508                         }
1509                         if (net->ro._s_addr)
1510                                 net->src_addr_selected = 1;
1511                 }
1512                 if (net->ro._s_addr) {
1513                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_nh);
1514 #if defined(INET) || defined(INET6)
1515                         if (net->port) {
1516                                 mtu -= sizeof(struct udphdr);
1517                         }
1518 #endif
1519                         if (mtu > next_mtu) {
1520                                 net->mtu = next_mtu;
1521                         } else {
1522                                 net->mtu = mtu;
1523                         }
1524                 }
1525         }
1526         /* restart the timer */
1527         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1528 }
1529
1530 void
1531 sctp_autoclose_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1532 {
1533         struct timeval tn, *tim_touse;
1534         struct sctp_association *asoc;
1535         uint32_t ticks_gone_by;
1536
1537         (void)SCTP_GETTIME_TIMEVAL(&tn);
1538         if (stcb->asoc.sctp_autoclose_ticks > 0 &&
1539             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1540                 /* Auto close is on */
1541                 asoc = &stcb->asoc;
1542                 /* pick the time to use */
1543                 if (asoc->time_last_rcvd.tv_sec >
1544                     asoc->time_last_sent.tv_sec) {
1545                         tim_touse = &asoc->time_last_rcvd;
1546                 } else {
1547                         tim_touse = &asoc->time_last_sent;
1548                 }
1549                 /* Now has long enough transpired to autoclose? */
1550                 ticks_gone_by = sctp_secs_to_ticks((uint32_t)(tn.tv_sec - tim_touse->tv_sec));
1551                 if (ticks_gone_by >= asoc->sctp_autoclose_ticks) {
1552                         /*
1553                          * autoclose time has hit, call the output routine,
1554                          * which should do nothing just to be SURE we don't
1555                          * have hanging data. We can then safely check the
1556                          * queues and know that we are clear to send
1557                          * shutdown
1558                          */
1559                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1560                         /* Are we clean? */
1561                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1562                             TAILQ_EMPTY(&asoc->sent_queue)) {
1563                                 /*
1564                                  * there is nothing queued to send, so I'm
1565                                  * done...
1566                                  */
1567                                 if (SCTP_GET_STATE(stcb) != SCTP_STATE_SHUTDOWN_SENT) {
1568                                         /* only send SHUTDOWN 1st time thru */
1569                                         struct sctp_nets *net;
1570
1571                                         if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
1572                                             (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1573                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1574                                         }
1575                                         SCTP_SET_STATE(stcb, SCTP_STATE_SHUTDOWN_SENT);
1576                                         sctp_stop_timers_for_shutdown(stcb);
1577                                         if (stcb->asoc.alternate) {
1578                                                 net = stcb->asoc.alternate;
1579                                         } else {
1580                                                 net = stcb->asoc.primary_destination;
1581                                         }
1582                                         sctp_send_shutdown(stcb, net);
1583                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1584                                             stcb->sctp_ep, stcb, net);
1585                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1586                                             stcb->sctp_ep, stcb, NULL);
1587                                 }
1588                         }
1589                 } else {
1590                         /*
1591                          * No auto close at this time, reset t-o to check
1592                          * later
1593                          */
1594                         uint32_t tmp;
1595
1596                         /* fool the timer startup to use the time left */
1597                         tmp = asoc->sctp_autoclose_ticks;
1598                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1599                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb, NULL);
1600                         /* restore the real tick value */
1601                         asoc->sctp_autoclose_ticks = tmp;
1602                 }
1603         }
1604 }