sys/netinet/sctp_usrreq.c

   1 /*-
   2  * Copyright (c) 2001-2008, by Cisco Systems, Inc. All rights reserved.
   3  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
   4  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions are met:
   8  *
   9  * a) Redistributions of source code must retain the above copyright notice,
  10  *    this list of conditions and the following disclaimer.
  11  *
  12  * b) Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in
  14  *    the documentation and/or other materials provided with the distribution.
  15  *
  16  * c) Neither the name of Cisco Systems, Inc. nor the names of its
  17  *    contributors may be used to endorse or promote products derived
  18  *    from this software without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
  22  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  24  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  30  * THE POSSIBILITY OF SUCH DAMAGE.
  31  */
  32
  33 #include <sys/cdefs.h>
  34 __FBSDID("$FreeBSD$");
  35
  36 #include <netinet/sctp_os.h>
  37 #include <sys/proc.h>
  38 #include <netinet/sctp_pcb.h>
  39 #include <netinet/sctp_header.h>
  40 #include <netinet/sctp_var.h>
  41 #ifdef INET6
  42 #endif
  43 #include <netinet/sctp_sysctl.h>
  44 #include <netinet/sctp_output.h>
  45 #include <netinet/sctp_uio.h>
  46 #include <netinet/sctp_asconf.h>
  47 #include <netinet/sctputil.h>
  48 #include <netinet/sctp_indata.h>
  49 #include <netinet/sctp_timer.h>
  50 #include <netinet/sctp_auth.h>
  51 #include <netinet/sctp_bsd_addr.h>
  52 #include <netinet/udp.h>
  53
  54
  55
  56 extern struct sctp_cc_functions sctp_cc_functions[];
  57 extern struct sctp_ss_functions sctp_ss_functions[];
  58
  59 void
  60 sctp_init(void)
  61 {
  62         u_long sb_max_adj;
  63
  64         /* Initialize and modify the sysctled variables */
  65         sctp_init_sysctls();
  66         if ((nmbclusters / 8) > SCTP_ASOC_MAX_CHUNKS_ON_QUEUE)
  67                 SCTP_BASE_SYSCTL(sctp_max_chunks_on_queue) = (nmbclusters / 8);
  68         /*
  69          * Allow a user to take no more than 1/2 the number of clusters or
  70          * the SB_MAX whichever is smaller for the send window.
  71          */
  72         sb_max_adj = (u_long)((u_quad_t) (SB_MAX) * MCLBYTES / (MSIZE + MCLBYTES));
  73         SCTP_BASE_SYSCTL(sctp_sendspace) = min(sb_max_adj,
  74             (((uint32_t) nmbclusters / 2) * SCTP_DEFAULT_MAXSEGMENT));
  75         /*
  76          * Now for the recv window, should we take the same amount? or
  77          * should I do 1/2 the SB_MAX instead in the SB_MAX min above. For
  78          * now I will just copy.
  79          */
  80         SCTP_BASE_SYSCTL(sctp_recvspace) = SCTP_BASE_SYSCTL(sctp_sendspace);
  81         SCTP_BASE_VAR(first_time) = 0;
  82         SCTP_BASE_VAR(sctp_pcb_initialized) = 0;
  83         sctp_pcb_init();
  84 #if defined(SCTP_PACKET_LOGGING)
  85         SCTP_BASE_VAR(packet_log_writers) = 0;
  86         SCTP_BASE_VAR(packet_log_end) = 0;
  87         bzero(&SCTP_BASE_VAR(packet_log_buffer), SCTP_PACKET_LOG_SIZE);
  88 #endif
  89 }
  90
  91 void
  92 sctp_finish(void)
  93 {
  94         sctp_pcb_finish();
  95 }
  96
  97
  98
  99 void
 100 sctp_pathmtu_adjustment(struct sctp_tcb *stcb, uint16_t nxtsz)
 101 {
 102         struct sctp_tmit_chunk *chk;
 103         uint16_t overhead;
 104
 105         /* Adjust that too */
 106         stcb->asoc.smallest_mtu = nxtsz;
 107         /* now off to subtract IP_DF flag if needed */
 108         overhead = IP_HDR_SIZE;
 109         if (sctp_auth_is_required_chunk(SCTP_DATA, stcb->asoc.peer_auth_chunks)) {
 110                 overhead += sctp_get_auth_chunk_len(stcb->asoc.peer_hmac_id);
 111         }
 112         TAILQ_FOREACH(chk, &stcb->asoc.send_queue, sctp_next) {
 113                 if ((chk->send_size + overhead) > nxtsz) {
 114                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 115                 }
 116         }
 117         TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
 118                 if ((chk->send_size + overhead) > nxtsz) {
 119                         /*
 120                          * For this guy we also mark for immediate resend
 121                          * since we sent to big of chunk
 122                          */
 123                         chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
 124                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
 125                                 sctp_flight_size_decrease(chk);
 126                                 sctp_total_flight_decrease(stcb, chk);
 127                         }
 128                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
 129                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
 130                         }
 131                         chk->sent = SCTP_DATAGRAM_RESEND;
 132                         chk->rec.data.doing_fast_retransmit = 0;
 133                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
 134                                 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_PMTU,
 135                                     chk->whoTo->flight_size,
 136                                     chk->book_size,
 137                                     (uintptr_t) chk->whoTo,
 138                                     chk->rec.data.TSN_seq);
 139                         }
 140                         /* Clear any time so NO RTT is being done */
 141                         chk->do_rtt = 0;
 142                 }
 143         }
 144 }
 145
 146 #ifdef INET
 147 static void
 148 sctp_notify_mbuf(struct sctp_inpcb *inp,
 149     struct sctp_tcb *stcb,
 150     struct sctp_nets *net,
 151     struct ip *ip,
 152     struct sctphdr *sh)
 153 {
 154         struct icmp *icmph;
 155         int totsz, tmr_stopped = 0;
 156         uint16_t nxtsz;
 157
 158         /* protection */
 159         if ((inp == NULL) || (stcb == NULL) || (net == NULL) ||
 160             (ip == NULL) || (sh == NULL)) {
 161                 if (stcb != NULL) {
 162                         SCTP_TCB_UNLOCK(stcb);
 163                 }
 164                 return;
 165         }
 166         /* First job is to verify the vtag matches what I would send */
 167         if (ntohl(sh->v_tag) != (stcb->asoc.peer_vtag)) {
 168                 SCTP_TCB_UNLOCK(stcb);
 169                 return;
 170         }
 171         icmph = (struct icmp *)((caddr_t)ip - (sizeof(struct icmp) -
 172             sizeof(struct ip)));
 173         if (icmph->icmp_type != ICMP_UNREACH) {
 174                 /* We only care about unreachable */
 175                 SCTP_TCB_UNLOCK(stcb);
 176                 return;
 177         }
 178         if (icmph->icmp_code != ICMP_UNREACH_NEEDFRAG) {
 179                 /* not a unreachable message due to frag. */
 180                 SCTP_TCB_UNLOCK(stcb);
 181                 return;
 182         }
 183         totsz = ntohs(ip->ip_len);
 184
 185         nxtsz = ntohs(icmph->icmp_nextmtu);
 186         if (nxtsz == 0) {
 187                 /*
 188                  * old type router that does not tell us what the next size
 189                  * mtu is. Rats we will have to guess (in a educated fashion
 190                  * of course)
 191                  */
 192                 nxtsz = sctp_get_prev_mtu(totsz);
 193         }
 194         /* Stop any PMTU timer */
 195         if (SCTP_OS_TIMER_PENDING(&net->pmtu_timer.timer)) {
 196                 tmr_stopped = 1;
 197                 sctp_timer_stop(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net,
 198                     SCTP_FROM_SCTP_USRREQ + SCTP_LOC_1);
 199         }
 200         /* Adjust destination size limit */
 201         if (net->mtu > nxtsz) {
 202                 net->mtu = nxtsz;
 203                 if (net->port) {
 204                         net->mtu -= sizeof(struct udphdr);
 205                 }
 206         }
 207         /* now what about the ep? */
 208         if (stcb->asoc.smallest_mtu > nxtsz) {
 209                 sctp_pathmtu_adjustment(stcb, nxtsz);
 210         }
 211         if (tmr_stopped)
 212                 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
 213
 214         SCTP_TCB_UNLOCK(stcb);
 215 }
 216
 217 void
 218 sctp_notify(struct sctp_inpcb *inp,
 219     struct ip *ip,
 220     struct sctphdr *sh,
 221     struct sockaddr *to,
 222     struct sctp_tcb *stcb,
 223     struct sctp_nets *net)
 224 {
 225 #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
 226         struct socket *so;
 227
 228 #endif
 229         struct icmp *icmph;
 230
 231         /* protection */
 232         if ((inp == NULL) || (stcb == NULL) || (net == NULL) ||
 233             (sh == NULL) || (to == NULL)) {
 234                 if (stcb)
 235                         SCTP_TCB_UNLOCK(stcb);
 236                 return;
 237         }
 238         /* First job is to verify the vtag matches what I would send */
 239         if (ntohl(sh->v_tag) != (stcb->asoc.peer_vtag)) {
 240                 SCTP_TCB_UNLOCK(stcb);
 241                 return;
 242         }
 243         icmph = (struct icmp *)((caddr_t)ip - (sizeof(struct icmp) -
 244             sizeof(struct ip)));
 245         if (icmph->icmp_type != ICMP_UNREACH) {
 246                 /* We only care about unreachable */
 247                 SCTP_TCB_UNLOCK(stcb);
 248                 return;
 249         }
 250         if ((icmph->icmp_code == ICMP_UNREACH_NET) ||
 251             (icmph->icmp_code == ICMP_UNREACH_HOST) ||
 252             (icmph->icmp_code == ICMP_UNREACH_NET_UNKNOWN) ||
 253             (icmph->icmp_code == ICMP_UNREACH_HOST_UNKNOWN) ||
 254             (icmph->icmp_code == ICMP_UNREACH_ISOLATED) ||
 255             (icmph->icmp_code == ICMP_UNREACH_NET_PROHIB) ||
 256             (icmph->icmp_code == ICMP_UNREACH_HOST_PROHIB) ||
 257             (icmph->icmp_code == ICMP_UNREACH_FILTER_PROHIB)) {
 258
 259                 /*
 260                  * Hmm reachablity problems we must examine closely. If its
 261                  * not reachable, we may have lost a network. Or if there is
 262                  * NO protocol at the other end named SCTP. well we consider
 263                  * it a OOTB abort.
 264                  */
 265                 if (net->dest_state & SCTP_ADDR_REACHABLE) {
 266                         /* Ok that destination is NOT reachable */
 267                         net->dest_state &= ~SCTP_ADDR_REACHABLE;
 268                         net->dest_state &= ~SCTP_ADDR_PF;
 269                         sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
 270                             stcb, 0,
 271                             (void *)net, SCTP_SO_NOT_LOCKED);
 272                 }
 273                 SCTP_TCB_UNLOCK(stcb);
 274         } else if ((icmph->icmp_code == ICMP_UNREACH_PROTOCOL) ||
 275             (icmph->icmp_code == ICMP_UNREACH_PORT)) {
 276                 /*
 277                  * Here the peer is either playing tricks on us, including
 278                  * an address that belongs to someone who does not support
 279                  * SCTP OR was a userland implementation that shutdown and
 280                  * now is dead. In either case treat it like a OOTB abort
 281                  * with no TCB
 282                  */
 283                 sctp_abort_notification(stcb, 1, 0, NULL, SCTP_SO_NOT_LOCKED);
 284 #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
 285                 so = SCTP_INP_SO(inp);
 286                 atomic_add_int(&stcb->asoc.refcnt, 1);
 287                 SCTP_TCB_UNLOCK(stcb);
 288                 SCTP_SOCKET_LOCK(so, 1);
 289                 SCTP_TCB_LOCK(stcb);
 290                 atomic_subtract_int(&stcb->asoc.refcnt, 1);
 291 #endif
 292                 (void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_2);
 293 #if defined(__APPLE__) || defined(SCTP_SO_LOCK_TESTING)
 294                 SCTP_SOCKET_UNLOCK(so, 1);
 295                 /* SCTP_TCB_UNLOCK(stcb); MT: I think this is not needed. */
 296 #endif
 297                 /* no need to unlock here, since the TCB is gone */
 298         } else {
 299                 SCTP_TCB_UNLOCK(stcb);
 300         }
 301 }
 302
 303 #endif
 304
 305 #ifdef INET
 306 void
 307 sctp_ctlinput(cmd, sa, vip)
 308         int cmd;
 309         struct sockaddr *sa;
 310         void *vip;
 311 {
 312         struct ip *ip = vip;
 313         struct sctphdr *sh;
 314         uint32_t vrf_id;
 315
 316         /* FIX, for non-bsd is this right? */
 317         vrf_id = SCTP_DEFAULT_VRFID;
 318         if (sa->sa_family != AF_INET ||
 319             ((struct sockaddr_in *)sa)->sin_addr.s_addr == INADDR_ANY) {
 320                 return;
 321         }
 322         if (PRC_IS_REDIRECT(cmd)) {
 323                 ip = 0;
 324         } else if ((unsigned)cmd >= PRC_NCMDS || inetctlerrmap[cmd] == 0) {
 325                 return;
 326         }
 327         if (ip) {
 328                 struct sctp_inpcb *inp = NULL;
 329                 struct sctp_tcb *stcb = NULL;
 330                 struct sctp_nets *net = NULL;
 331                 struct sockaddr_in to, from;
 332
 333                 sh = (struct sctphdr *)((caddr_t)ip + (ip->ip_hl << 2));
 334                 bzero(&to, sizeof(to));
 335                 bzero(&from, sizeof(from));
 336                 from.sin_family = to.sin_family = AF_INET;
 337                 from.sin_len = to.sin_len = sizeof(to);
 338                 from.sin_port = sh->src_port;
 339                 from.sin_addr = ip->ip_src;
 340                 to.sin_port = sh->dest_port;
 341                 to.sin_addr = ip->ip_dst;
 342
 343                 /*
 344                  * 'to' holds the dest of the packet that failed to be sent.
 345                  * 'from' holds our local endpoint address. Thus we reverse
 346                  * the to and the from in the lookup.
 347                  */
 348                 stcb = sctp_findassociation_addr_sa((struct sockaddr *)&to,
 349                     (struct sockaddr *)&from,
 350                     &inp, &net, 1, vrf_id);
 351                 if (stcb != NULL && inp && (inp->sctp_socket != NULL)) {
 352                         if (cmd != PRC_MSGSIZE) {
 353                                 sctp_notify(inp, ip, sh,
 354                                     (struct sockaddr *)&to, stcb,
 355                                     net);
 356                         } else {
 357                                 /* handle possible ICMP size messages */
 358                                 sctp_notify_mbuf(inp, stcb, net, ip, sh);
 359                         }
 360                 } else {
 361                         if ((stcb == NULL) && (inp != NULL)) {
 362                                 /* reduce ref-count */
 363                                 SCTP_INP_WLOCK(inp);
 364                                 SCTP_INP_DECR_REF(inp);
 365                                 SCTP_INP_WUNLOCK(inp);
 366                         }
 367                         if (stcb) {
 368                                 SCTP_TCB_UNLOCK(stcb);
 369                         }
 370                 }
 371         }
 372         return;
 373 }
 374
 375 #endif
 376
 377 static int
 378 sctp_getcred(SYSCTL_HANDLER_ARGS)
 379 {
 380         struct xucred xuc;
 381         struct sockaddr_in addrs[2];
 382         struct sctp_inpcb *inp;
 383         struct sctp_nets *net;
 384         struct sctp_tcb *stcb;
 385         int error;
 386         uint32_t vrf_id;
 387
 388         /* FIX, for non-bsd is this right? */
 389         vrf_id = SCTP_DEFAULT_VRFID;
 390
 391         error = priv_check(req->td, PRIV_NETINET_GETCRED);
 392
 393         if (error)
 394                 return (error);
 395
 396         error = SYSCTL_IN(req, addrs, sizeof(addrs));
 397         if (error)
 398                 return (error);
 399
 400         stcb = sctp_findassociation_addr_sa(sintosa(&addrs[1]),
 401             sintosa(&addrs[0]),
 402             &inp, &net, 1, vrf_id);
 403         if (stcb == NULL || inp == NULL || inp->sctp_socket == NULL) {
 404                 if ((inp != NULL) && (stcb == NULL)) {
 405                         /* reduce ref-count */
 406                         SCTP_INP_WLOCK(inp);
 407                         SCTP_INP_DECR_REF(inp);
 408                         goto cred_can_cont;
 409                 }
 410                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
 411                 error = ENOENT;
 412                 goto out;
 413         }
 414         SCTP_TCB_UNLOCK(stcb);
 415         /*
 416          * We use the write lock here, only since in the error leg we need
 417          * it. If we used RLOCK, then we would have to
 418          * wlock/decr/unlock/rlock. Which in theory could create a hole.
 419          * Better to use higher wlock.
 420          */
 421         SCTP_INP_WLOCK(inp);
 422 cred_can_cont:
 423         error = cr_canseesocket(req->td->td_ucred, inp->sctp_socket);
 424         if (error) {
 425                 SCTP_INP_WUNLOCK(inp);
 426                 goto out;
 427         }
 428         cru2x(inp->sctp_socket->so_cred, &xuc);
 429         SCTP_INP_WUNLOCK(inp);
 430         error = SYSCTL_OUT(req, &xuc, sizeof(struct xucred));
 431 out:
 432         return (error);
 433 }
 434
 435 SYSCTL_PROC(_net_inet_sctp, OID_AUTO, getcred, CTLTYPE_OPAQUE | CTLFLAG_RW,
 436     0, 0, sctp_getcred, "S,ucred", "Get the ucred of a SCTP connection");
 437
 438
 439 #ifdef INET
 440 static void
 441 sctp_abort(struct socket *so)
 442 {
 443         struct sctp_inpcb *inp;
 444         uint32_t flags;
 445
 446         inp = (struct sctp_inpcb *)so->so_pcb;
 447         if (inp == NULL) {
 448                 return;
 449         }
 450 sctp_must_try_again:
 451         flags = inp->sctp_flags;
 452 #ifdef SCTP_LOG_CLOSING
 453         sctp_log_closing(inp, NULL, 17);
 454 #endif
 455         if (((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) &&
 456             (atomic_cmpset_int(&inp->sctp_flags, flags, (flags | SCTP_PCB_FLAGS_SOCKET_GONE | SCTP_PCB_FLAGS_CLOSE_IP)))) {
 457 #ifdef SCTP_LOG_CLOSING
 458                 sctp_log_closing(inp, NULL, 16);
 459 #endif
 460                 sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
 461                     SCTP_CALLED_AFTER_CMPSET_OFCLOSE);
 462                 SOCK_LOCK(so);
 463                 SCTP_SB_CLEAR(so->so_snd);
 464                 /*
 465                  * same for the rcv ones, they are only here for the
 466                  * accounting/select.
 467                  */
 468                 SCTP_SB_CLEAR(so->so_rcv);
 469
 470                 /* Now null out the reference, we are completely detached. */
 471                 so->so_pcb = NULL;
 472                 SOCK_UNLOCK(so);
 473         } else {
 474                 flags = inp->sctp_flags;
 475                 if ((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
 476                         goto sctp_must_try_again;
 477                 }
 478         }
 479         return;
 480 }
 481
 482 static int
 483 sctp_attach(struct socket *so, int proto SCTP_UNUSED, struct thread *p SCTP_UNUSED)
 484 {
 485         struct sctp_inpcb *inp;
 486         struct inpcb *ip_inp;
 487         int error;
 488         uint32_t vrf_id = SCTP_DEFAULT_VRFID;
 489
 490 #ifdef IPSEC
 491         uint32_t flags;
 492
 493 #endif
 494
 495         inp = (struct sctp_inpcb *)so->so_pcb;
 496         if (inp != 0) {
 497                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 498                 return (EINVAL);
 499         }
 500         if (so->so_snd.sb_hiwat == 0 || so->so_rcv.sb_hiwat == 0) {
 501                 error = SCTP_SORESERVE(so, SCTP_BASE_SYSCTL(sctp_sendspace), SCTP_BASE_SYSCTL(sctp_recvspace));
 502                 if (error) {
 503                         return (error);
 504                 }
 505         }
 506         error = sctp_inpcb_alloc(so, vrf_id);
 507         if (error) {
 508                 return (error);
 509         }
 510         inp = (struct sctp_inpcb *)so->so_pcb;
 511         SCTP_INP_WLOCK(inp);
 512         inp->sctp_flags &= ~SCTP_PCB_FLAGS_BOUND_V6;    /* I'm not v6! */
 513         ip_inp = &inp->ip_inp.inp;
 514         ip_inp->inp_vflag |= INP_IPV4;
 515         ip_inp->inp_ip_ttl = MODULE_GLOBAL(ip_defttl);
 516 #ifdef IPSEC
 517         error = ipsec_init_policy(so, &ip_inp->inp_sp);
 518 #ifdef SCTP_LOG_CLOSING
 519         sctp_log_closing(inp, NULL, 17);
 520 #endif
 521         if (error != 0) {
 522 try_again:
 523                 flags = inp->sctp_flags;
 524                 if (((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) &&
 525                     (atomic_cmpset_int(&inp->sctp_flags, flags, (flags | SCTP_PCB_FLAGS_SOCKET_GONE | SCTP_PCB_FLAGS_CLOSE_IP)))) {
 526 #ifdef SCTP_LOG_CLOSING
 527                         sctp_log_closing(inp, NULL, 15);
 528 #endif
 529                         SCTP_INP_WUNLOCK(inp);
 530                         sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
 531                             SCTP_CALLED_AFTER_CMPSET_OFCLOSE);
 532                 } else {
 533                         flags = inp->sctp_flags;
 534                         if ((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
 535                                 goto try_again;
 536                         } else {
 537                                 SCTP_INP_WUNLOCK(inp);
 538                         }
 539                 }
 540                 return (error);
 541         }
 542 #endif                          /* IPSEC */
 543         SCTP_INP_WUNLOCK(inp);
 544         return (0);
 545 }
 546
 547 static int
 548 sctp_bind(struct socket *so, struct sockaddr *addr, struct thread *p)
 549 {
 550         struct sctp_inpcb *inp;
 551
 552         inp = (struct sctp_inpcb *)so->so_pcb;
 553         if (inp == NULL) {
 554                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 555                 return (EINVAL);
 556         }
 557         if (addr != NULL) {
 558                 if ((addr->sa_family != AF_INET) ||
 559                     (addr->sa_len != sizeof(struct sockaddr_in))) {
 560                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 561                         return (EINVAL);
 562                 }
 563         }
 564         return (sctp_inpcb_bind(so, addr, NULL, p));
 565 }
 566
 567 #endif
 568 void
 569 sctp_close(struct socket *so)
 570 {
 571         struct sctp_inpcb *inp;
 572         uint32_t flags;
 573
 574         inp = (struct sctp_inpcb *)so->so_pcb;
 575         if (inp == NULL)
 576                 return;
 577
 578         /*
 579          * Inform all the lower layer assoc that we are done.
 580          */
 581 sctp_must_try_again:
 582         flags = inp->sctp_flags;
 583 #ifdef SCTP_LOG_CLOSING
 584         sctp_log_closing(inp, NULL, 17);
 585 #endif
 586         if (((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) &&
 587             (atomic_cmpset_int(&inp->sctp_flags, flags, (flags | SCTP_PCB_FLAGS_SOCKET_GONE | SCTP_PCB_FLAGS_CLOSE_IP)))) {
 588                 if (((so->so_options & SO_LINGER) && (so->so_linger == 0)) ||
 589                     (so->so_rcv.sb_cc > 0)) {
 590 #ifdef SCTP_LOG_CLOSING
 591                         sctp_log_closing(inp, NULL, 13);
 592 #endif
 593                         sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_ABORT,
 594                             SCTP_CALLED_AFTER_CMPSET_OFCLOSE);
 595                 } else {
 596 #ifdef SCTP_LOG_CLOSING
 597                         sctp_log_closing(inp, NULL, 14);
 598 #endif
 599                         sctp_inpcb_free(inp, SCTP_FREE_SHOULD_USE_GRACEFUL_CLOSE,
 600                             SCTP_CALLED_AFTER_CMPSET_OFCLOSE);
 601                 }
 602                 /*
 603                  * The socket is now detached, no matter what the state of
 604                  * the SCTP association.
 605                  */
 606                 SOCK_LOCK(so);
 607                 SCTP_SB_CLEAR(so->so_snd);
 608                 /*
 609                  * same for the rcv ones, they are only here for the
 610                  * accounting/select.
 611                  */
 612                 SCTP_SB_CLEAR(so->so_rcv);
 613
 614                 /* Now null out the reference, we are completely detached. */
 615                 so->so_pcb = NULL;
 616                 SOCK_UNLOCK(so);
 617         } else {
 618                 flags = inp->sctp_flags;
 619                 if ((flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) {
 620                         goto sctp_must_try_again;
 621                 }
 622         }
 623         return;
 624 }
 625
 626
 627 int
 628 sctp_sendm(struct socket *so, int flags, struct mbuf *m, struct sockaddr *addr,
 629     struct mbuf *control, struct thread *p);
 630
 631
 632 int
 633 sctp_sendm(struct socket *so, int flags, struct mbuf *m, struct sockaddr *addr,
 634     struct mbuf *control, struct thread *p)
 635 {
 636         struct sctp_inpcb *inp;
 637         int error;
 638
 639         inp = (struct sctp_inpcb *)so->so_pcb;
 640         if (inp == NULL) {
 641                 if (control) {
 642                         sctp_m_freem(control);
 643                         control = NULL;
 644                 }
 645                 SCTP_LTRACE_ERR_RET_PKT(m, inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 646                 sctp_m_freem(m);
 647                 return (EINVAL);
 648         }
 649         /* Got to have an to address if we are NOT a connected socket */
 650         if ((addr == NULL) &&
 651             ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) ||
 652             (inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE))) {
 653                 goto connected_type;
 654         } else if (addr == NULL) {
 655                 SCTP_LTRACE_ERR_RET_PKT(m, inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EDESTADDRREQ);
 656                 error = EDESTADDRREQ;
 657                 sctp_m_freem(m);
 658                 if (control) {
 659                         sctp_m_freem(control);
 660                         control = NULL;
 661                 }
 662                 return (error);
 663         }
 664 #ifdef INET6
 665         if (addr->sa_family != AF_INET) {
 666                 /* must be a v4 address! */
 667                 SCTP_LTRACE_ERR_RET_PKT(m, inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EDESTADDRREQ);
 668                 sctp_m_freem(m);
 669                 if (control) {
 670                         sctp_m_freem(control);
 671                         control = NULL;
 672                 }
 673                 error = EDESTADDRREQ;
 674                 return (error);
 675         }
 676 #endif                          /* INET6 */
 677 connected_type:
 678         /* now what about control */
 679         if (control) {
 680                 if (inp->control) {
 681                         SCTP_PRINTF("huh? control set?\n");
 682                         sctp_m_freem(inp->control);
 683                         inp->control = NULL;
 684                 }
 685                 inp->control = control;
 686         }
 687         /* Place the data */
 688         if (inp->pkt) {
 689                 SCTP_BUF_NEXT(inp->pkt_last) = m;
 690                 inp->pkt_last = m;
 691         } else {
 692                 inp->pkt_last = inp->pkt = m;
 693         }
 694         if (
 695         /* FreeBSD uses a flag passed */
 696             ((flags & PRUS_MORETOCOME) == 0)
 697             ) {
 698                 /*
 699                  * note with the current version this code will only be used
 700                  * by OpenBSD-- NetBSD, FreeBSD, and MacOS have methods for
 701                  * re-defining sosend to use the sctp_sosend. One can
 702                  * optionally switch back to this code (by changing back the
 703                  * definitions) but this is not advisable. This code is used
 704                  * by FreeBSD when sending a file with sendfile() though.
 705                  */
 706                 int ret;
 707
 708                 ret = sctp_output(inp, inp->pkt, addr, inp->control, p, flags);
 709                 inp->pkt = NULL;
 710                 inp->control = NULL;
 711                 return (ret);
 712         } else {
 713                 return (0);
 714         }
 715 }
 716
 717 int
 718 sctp_disconnect(struct socket *so)
 719 {
 720         struct sctp_inpcb *inp;
 721
 722         inp = (struct sctp_inpcb *)so->so_pcb;
 723         if (inp == NULL) {
 724                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTCONN);
 725                 return (ENOTCONN);
 726         }
 727         SCTP_INP_RLOCK(inp);
 728         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
 729             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
 730                 if (LIST_EMPTY(&inp->sctp_asoc_list)) {
 731                         /* No connection */
 732                         SCTP_INP_RUNLOCK(inp);
 733                         return (0);
 734                 } else {
 735                         struct sctp_association *asoc;
 736                         struct sctp_tcb *stcb;
 737
 738                         stcb = LIST_FIRST(&inp->sctp_asoc_list);
 739                         if (stcb == NULL) {
 740                                 SCTP_INP_RUNLOCK(inp);
 741                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 742                                 return (EINVAL);
 743                         }
 744                         SCTP_TCB_LOCK(stcb);
 745                         asoc = &stcb->asoc;
 746                         if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
 747                                 /* We are about to be freed, out of here */
 748                                 SCTP_TCB_UNLOCK(stcb);
 749                                 SCTP_INP_RUNLOCK(inp);
 750                                 return (0);
 751                         }
 752                         if (((so->so_options & SO_LINGER) &&
 753                             (so->so_linger == 0)) ||
 754                             (so->so_rcv.sb_cc > 0)) {
 755                                 if (SCTP_GET_STATE(asoc) !=
 756                                     SCTP_STATE_COOKIE_WAIT) {
 757                                         /* Left with Data unread */
 758                                         struct mbuf *err;
 759
 760                                         err = sctp_get_mbuf_for_msg(sizeof(struct sctp_paramhdr), 0, M_NOWAIT, 1, MT_DATA);
 761                                         if (err) {
 762                                                 /*
 763                                                  * Fill in the user
 764                                                  * initiated abort
 765                                                  */
 766                                                 struct sctp_paramhdr *ph;
 767
 768                                                 ph = mtod(err, struct sctp_paramhdr *);
 769                                                 SCTP_BUF_LEN(err) = sizeof(struct sctp_paramhdr);
 770                                                 ph->param_type = htons(SCTP_CAUSE_USER_INITIATED_ABT);
 771                                                 ph->param_length = htons(SCTP_BUF_LEN(err));
 772                                         }
 773                                         sctp_send_abort_tcb(stcb, err, SCTP_SO_LOCKED);
 774                                         SCTP_STAT_INCR_COUNTER32(sctps_aborted);
 775                                 }
 776                                 SCTP_INP_RUNLOCK(inp);
 777                                 if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
 778                                     (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
 779                                         SCTP_STAT_DECR_GAUGE32(sctps_currestab);
 780                                 }
 781                                 (void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_3);
 782                                 /* No unlock tcb assoc is gone */
 783                                 return (0);
 784                         }
 785                         if (TAILQ_EMPTY(&asoc->send_queue) &&
 786                             TAILQ_EMPTY(&asoc->sent_queue) &&
 787                             (asoc->stream_queue_cnt == 0)) {
 788                                 /* there is nothing queued to send, so done */
 789                                 if (asoc->locked_on_sending) {
 790                                         goto abort_anyway;
 791                                 }
 792                                 if ((SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) &&
 793                                     (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_ACK_SENT)) {
 794                                         /* only send SHUTDOWN 1st time thru */
 795                                         struct sctp_nets *netp;
 796
 797                                         if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
 798                                             (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
 799                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
 800                                         }
 801                                         SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
 802                                         SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
 803                                         sctp_stop_timers_for_shutdown(stcb);
 804                                         if (stcb->asoc.alternate) {
 805                                                 netp = stcb->asoc.alternate;
 806                                         } else {
 807                                                 netp = stcb->asoc.primary_destination;
 808                                         }
 809                                         sctp_send_shutdown(stcb, netp);
 810                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
 811                                             stcb->sctp_ep, stcb, netp);
 812                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
 813                                             stcb->sctp_ep, stcb, netp);
 814                                         sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_LOCKED);
 815                                 }
 816                         } else {
 817                                 /*
 818                                  * we still got (or just got) data to send,
 819                                  * so set SHUTDOWN_PENDING
 820                                  */
 821                                 /*
 822                                  * XXX sockets draft says that SCTP_EOF
 823                                  * should be sent with no data. currently,
 824                                  * we will allow user data to be sent first
 825                                  * and move to SHUTDOWN-PENDING
 826                                  */
 827                                 struct sctp_nets *netp;
 828
 829                                 if (stcb->asoc.alternate) {
 830                                         netp = stcb->asoc.alternate;
 831                                 } else {
 832                                         netp = stcb->asoc.primary_destination;
 833                                 }
 834
 835                                 asoc->state |= SCTP_STATE_SHUTDOWN_PENDING;
 836                                 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, stcb->sctp_ep, stcb,
 837                                     netp);
 838                                 if (asoc->locked_on_sending) {
 839                                         /* Locked to send out the data */
 840                                         struct sctp_stream_queue_pending *sp;
 841
 842                                         sp = TAILQ_LAST(&asoc->locked_on_sending->outqueue, sctp_streamhead);
 843                                         if (sp == NULL) {
 844                                                 SCTP_PRINTF("Error, sp is NULL, locked on sending is non-null strm:%d\n",
 845                                                     asoc->locked_on_sending->stream_no);
 846                                         } else {
 847                                                 if ((sp->length == 0) && (sp->msg_is_complete == 0))
 848                                                         asoc->state |= SCTP_STATE_PARTIAL_MSG_LEFT;
 849                                         }
 850                                 }
 851                                 if (TAILQ_EMPTY(&asoc->send_queue) &&
 852                                     TAILQ_EMPTY(&asoc->sent_queue) &&
 853                                     (asoc->state & SCTP_STATE_PARTIAL_MSG_LEFT)) {
 854                                         struct mbuf *op_err;
 855
 856                         abort_anyway:
 857                                         op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, "");
 858                                         stcb->sctp_ep->last_abort_code = SCTP_FROM_SCTP_USRREQ + SCTP_LOC_4;
 859                                         sctp_send_abort_tcb(stcb, op_err, SCTP_SO_LOCKED);
 860                                         SCTP_STAT_INCR_COUNTER32(sctps_aborted);
 861                                         if ((SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_OPEN) ||
 862                                             (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
 863                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
 864                                         }
 865                                         SCTP_INP_RUNLOCK(inp);
 866                                         (void)sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_5);
 867                                         return (0);
 868                                 } else {
 869                                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_CLOSING, SCTP_SO_LOCKED);
 870                                 }
 871                         }
 872                         soisdisconnecting(so);
 873                         SCTP_TCB_UNLOCK(stcb);
 874                         SCTP_INP_RUNLOCK(inp);
 875                         return (0);
 876                 }
 877                 /* not reached */
 878         } else {
 879                 /* UDP model does not support this */
 880                 SCTP_INP_RUNLOCK(inp);
 881                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
 882                 return (EOPNOTSUPP);
 883         }
 884 }
 885
 886 int
 887 sctp_flush(struct socket *so, int how)
 888 {
 889         /*
 890          * We will just clear out the values and let subsequent close clear
 891          * out the data, if any. Note if the user did a shutdown(SHUT_RD)
 892          * they will not be able to read the data, the socket will block
 893          * that from happening.
 894          */
 895         struct sctp_inpcb *inp;
 896
 897         inp = (struct sctp_inpcb *)so->so_pcb;
 898         if (inp == NULL) {
 899                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 900                 return (EINVAL);
 901         }
 902         SCTP_INP_RLOCK(inp);
 903         /* For the 1 to many model this does nothing */
 904         if (inp->sctp_flags & SCTP_PCB_FLAGS_UDPTYPE) {
 905                 SCTP_INP_RUNLOCK(inp);
 906                 return (0);
 907         }
 908         SCTP_INP_RUNLOCK(inp);
 909         if ((how == PRU_FLUSH_RD) || (how == PRU_FLUSH_RDWR)) {
 910                 /*
 911                  * First make sure the sb will be happy, we don't use these
 912                  * except maybe the count
 913                  */
 914                 SCTP_INP_WLOCK(inp);
 915                 SCTP_INP_READ_LOCK(inp);
 916                 inp->sctp_flags |= SCTP_PCB_FLAGS_SOCKET_CANT_READ;
 917                 SCTP_INP_READ_UNLOCK(inp);
 918                 SCTP_INP_WUNLOCK(inp);
 919                 so->so_rcv.sb_cc = 0;
 920                 so->so_rcv.sb_mbcnt = 0;
 921                 so->so_rcv.sb_mb = NULL;
 922         }
 923         if ((how == PRU_FLUSH_WR) || (how == PRU_FLUSH_RDWR)) {
 924                 /*
 925                  * First make sure the sb will be happy, we don't use these
 926                  * except maybe the count
 927                  */
 928                 so->so_snd.sb_cc = 0;
 929                 so->so_snd.sb_mbcnt = 0;
 930                 so->so_snd.sb_mb = NULL;
 931
 932         }
 933         return (0);
 934 }
 935
 936 int
 937 sctp_shutdown(struct socket *so)
 938 {
 939         struct sctp_inpcb *inp;
 940
 941         inp = (struct sctp_inpcb *)so->so_pcb;
 942         if (inp == NULL) {
 943                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
 944                 return (EINVAL);
 945         }
 946         SCTP_INP_RLOCK(inp);
 947         /* For UDP model this is a invalid call */
 948         if (!((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
 949             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL))) {
 950                 /* Restore the flags that the soshutdown took away. */
 951                 SOCKBUF_LOCK(&so->so_rcv);
 952                 so->so_rcv.sb_state &= ~SBS_CANTRCVMORE;
 953                 SOCKBUF_UNLOCK(&so->so_rcv);
 954                 /* This proc will wakeup for read and do nothing (I hope) */
 955                 SCTP_INP_RUNLOCK(inp);
 956                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
 957                 return (EOPNOTSUPP);
 958         }
 959         /*
 960          * Ok if we reach here its the TCP model and it is either a SHUT_WR
 961          * or SHUT_RDWR. This means we put the shutdown flag against it.
 962          */
 963         {
 964                 struct sctp_tcb *stcb;
 965                 struct sctp_association *asoc;
 966
 967                 if ((so->so_state &
 968                     (SS_ISCONNECTED | SS_ISCONNECTING | SS_ISDISCONNECTING)) == 0) {
 969                         SCTP_INP_RUNLOCK(inp);
 970                         return (ENOTCONN);
 971                 }
 972                 socantsendmore(so);
 973
 974                 stcb = LIST_FIRST(&inp->sctp_asoc_list);
 975                 if (stcb == NULL) {
 976                         /*
 977                          * Ok we hit the case that the shutdown call was
 978                          * made after an abort or something. Nothing to do
 979                          * now.
 980                          */
 981                         SCTP_INP_RUNLOCK(inp);
 982                         return (0);
 983                 }
 984                 SCTP_TCB_LOCK(stcb);
 985                 asoc = &stcb->asoc;
 986                 if (TAILQ_EMPTY(&asoc->send_queue) &&
 987                     TAILQ_EMPTY(&asoc->sent_queue) &&
 988                     (asoc->stream_queue_cnt == 0)) {
 989                         if (asoc->locked_on_sending) {
 990                                 goto abort_anyway;
 991                         }
 992                         /* there is nothing queued to send, so I'm done... */
 993                         if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
 994                                 /* only send SHUTDOWN the first time through */
 995                                 struct sctp_nets *netp;
 996
 997                                 if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
 998                                     (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
 999                                         SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1000                                 }
1001                                 SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1002                                 SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1003                                 sctp_stop_timers_for_shutdown(stcb);
1004                                 if (stcb->asoc.alternate) {
1005                                         netp = stcb->asoc.alternate;
1006                                 } else {
1007                                         netp = stcb->asoc.primary_destination;
1008                                 }
1009                                 sctp_send_shutdown(stcb, netp);
1010                                 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1011                                     stcb->sctp_ep, stcb, netp);
1012                                 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1013                                     stcb->sctp_ep, stcb, netp);
1014                                 sctp_chunk_output(stcb->sctp_ep, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_LOCKED);
1015                         }
1016                 } else {
1017                         /*
1018                          * we still got (or just got) data to send, so set
1019                          * SHUTDOWN_PENDING
1020                          */
1021                         struct sctp_nets *netp;
1022
1023                         if (stcb->asoc.alternate) {
1024                                 netp = stcb->asoc.alternate;
1025                         } else {
1026                                 netp = stcb->asoc.primary_destination;
1027                         }
1028
1029                         asoc->state |= SCTP_STATE_SHUTDOWN_PENDING;
1030                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, stcb->sctp_ep, stcb,
1031                             netp);
1032
1033                         if (asoc->locked_on_sending) {
1034                                 /* Locked to send out the data */
1035                                 struct sctp_stream_queue_pending *sp;
1036
1037                                 sp = TAILQ_LAST(&asoc->locked_on_sending->outqueue, sctp_streamhead);
1038                                 if (sp == NULL) {
1039                                         SCTP_PRINTF("Error, sp is NULL, locked on sending is non-null strm:%d\n",
1040                                             asoc->locked_on_sending->stream_no);
1041                                 } else {
1042                                         if ((sp->length == 0) && (sp->msg_is_complete == 0)) {
1043                                                 asoc->state |= SCTP_STATE_PARTIAL_MSG_LEFT;
1044                                         }
1045                                 }
1046                         }
1047                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1048                             TAILQ_EMPTY(&asoc->sent_queue) &&
1049                             (asoc->state & SCTP_STATE_PARTIAL_MSG_LEFT)) {
1050                                 struct mbuf *op_err;
1051
1052                 abort_anyway:
1053                                 op_err = sctp_generate_cause(SCTP_CAUSE_USER_INITIATED_ABT, "");
1054                                 stcb->sctp_ep->last_abort_code = SCTP_FROM_SCTP_USRREQ + SCTP_LOC_6;
1055                                 sctp_abort_an_association(stcb->sctp_ep, stcb,
1056                                     op_err, SCTP_SO_LOCKED);
1057                                 goto skip_unlock;
1058                         } else {
1059                                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_CLOSING, SCTP_SO_LOCKED);
1060                         }
1061                 }
1062                 SCTP_TCB_UNLOCK(stcb);
1063         }
1064 skip_unlock:
1065         SCTP_INP_RUNLOCK(inp);
1066         return (0);
1067 }
1068
1069 /*
1070  * copies a "user" presentable address and removes embedded scope, etc.
1071  * returns 0 on success, 1 on error
1072  */
1073 static uint32_t
1074 sctp_fill_user_address(struct sockaddr_storage *ss, struct sockaddr *sa)
1075 {
1076 #ifdef INET6
1077         struct sockaddr_in6 lsa6;
1078
1079         sa = (struct sockaddr *)sctp_recover_scope((struct sockaddr_in6 *)sa,
1080             &lsa6);
1081 #endif
1082         memcpy(ss, sa, sa->sa_len);
1083         return (0);
1084 }
1085
1086
1087
1088 /*
1089  * NOTE: assumes addr lock is held
1090  */
1091 static size_t
1092 sctp_fill_up_addresses_vrf(struct sctp_inpcb *inp,
1093     struct sctp_tcb *stcb,
1094     size_t limit,
1095     struct sockaddr_storage *sas,
1096     uint32_t vrf_id)
1097 {
1098         struct sctp_ifn *sctp_ifn;
1099         struct sctp_ifa *sctp_ifa;
1100         size_t actual;
1101         int loopback_scope;
1102
1103 #if defined(INET)
1104         int ipv4_local_scope, ipv4_addr_legal;
1105
1106 #endif
1107 #if defined(INET6)
1108         int local_scope, site_scope, ipv6_addr_legal;
1109
1110 #endif
1111         struct sctp_vrf *vrf;
1112
1113         actual = 0;
1114         if (limit <= 0)
1115                 return (actual);
1116
1117         if (stcb) {
1118                 /* Turn on all the appropriate scope */
1119                 loopback_scope = stcb->asoc.scope.loopback_scope;
1120 #if defined(INET)
1121                 ipv4_local_scope = stcb->asoc.scope.ipv4_local_scope;
1122                 ipv4_addr_legal = stcb->asoc.scope.ipv4_addr_legal;
1123 #endif
1124 #if defined(INET6)
1125                 local_scope = stcb->asoc.scope.local_scope;
1126                 site_scope = stcb->asoc.scope.site_scope;
1127                 ipv6_addr_legal = stcb->asoc.scope.ipv6_addr_legal;
1128 #endif
1129         } else {
1130                 /* Use generic values for endpoints. */
1131                 loopback_scope = 1;
1132 #if defined(INET)
1133                 ipv4_local_scope = 1;
1134 #endif
1135 #if defined(INET6)
1136                 local_scope = 1;
1137                 site_scope = 1;
1138 #endif
1139                 if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
1140 #if defined(INET6)
1141                         ipv6_addr_legal = 1;
1142 #endif
1143 #if defined(INET)
1144                         if (SCTP_IPV6_V6ONLY(inp)) {
1145                                 ipv4_addr_legal = 0;
1146                         } else {
1147                                 ipv4_addr_legal = 1;
1148                         }
1149 #endif
1150                 } else {
1151 #if defined(INET6)
1152                         ipv6_addr_legal = 0;
1153 #endif
1154 #if defined(INET)
1155                         ipv4_addr_legal = 1;
1156 #endif
1157                 }
1158         }
1159         vrf = sctp_find_vrf(vrf_id);
1160         if (vrf == NULL) {
1161                 return (0);
1162         }
1163         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
1164                 LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
1165                         if ((loopback_scope == 0) &&
1166                             SCTP_IFN_IS_IFT_LOOP(sctp_ifn)) {
1167                                 /* Skip loopback if loopback_scope not set */
1168                                 continue;
1169                         }
1170                         LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
1171                                 if (stcb) {
1172                                         /*
1173                                          * For the BOUND-ALL case, the list
1174                                          * associated with a TCB is Always
1175                                          * considered a reverse list.. i.e.
1176                                          * it lists addresses that are NOT
1177                                          * part of the association. If this
1178                                          * is one of those we must skip it.
1179                                          */
1180                                         if (sctp_is_addr_restricted(stcb,
1181                                             sctp_ifa)) {
1182                                                 continue;
1183                                         }
1184                                 }
1185                                 switch (sctp_ifa->address.sa.sa_family) {
1186 #ifdef INET
1187                                 case AF_INET:
1188                                         if (ipv4_addr_legal) {
1189                                                 struct sockaddr_in *sin;
1190
1191                                                 sin = (struct sockaddr_in *)&sctp_ifa->address.sa;
1192                                                 if (sin->sin_addr.s_addr == 0) {
1193                                                         /*
1194                                                          * we skip
1195                                                          * unspecifed
1196                                                          * addresses
1197                                                          */
1198                                                         continue;
1199                                                 }
1200                                                 if (prison_check_ip4(inp->ip_inp.inp.inp_cred,
1201                                                     &sin->sin_addr) != 0) {
1202                                                         continue;
1203                                                 }
1204                                                 if ((ipv4_local_scope == 0) &&
1205                                                     (IN4_ISPRIVATE_ADDRESS(&sin->sin_addr))) {
1206                                                         continue;
1207                                                 }
1208 #ifdef INET6
1209                                                 if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
1210                                                         in6_sin_2_v4mapsin6(sin, (struct sockaddr_in6 *)sas);
1211                                                         ((struct sockaddr_in6 *)sas)->sin6_port = inp->sctp_lport;
1212                                                         sas = (struct sockaddr_storage *)((caddr_t)sas + sizeof(struct sockaddr_in6));
1213                                                         actual += sizeof(struct sockaddr_in6);
1214                                                 } else {
1215 #endif
1216                                                         memcpy(sas, sin, sizeof(*sin));
1217                                                         ((struct sockaddr_in *)sas)->sin_port = inp->sctp_lport;
1218                                                         sas = (struct sockaddr_storage *)((caddr_t)sas + sizeof(*sin));
1219                                                         actual += sizeof(*sin);
1220 #ifdef INET6
1221                                                 }
1222 #endif
1223                                                 if (actual >= limit) {
1224                                                         return (actual);
1225                                                 }
1226                                         } else {
1227                                                 continue;
1228                                         }
1229                                         break;
1230 #endif
1231 #ifdef INET6
1232                                 case AF_INET6:
1233                                         if (ipv6_addr_legal) {
1234                                                 struct sockaddr_in6 *sin6;
1235
1236                                                 sin6 = (struct sockaddr_in6 *)&sctp_ifa->address.sa;
1237                                                 if (IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
1238                                                         /*
1239                                                          * we skip
1240                                                          * unspecifed
1241                                                          * addresses
1242                                                          */
1243                                                         continue;
1244                                                 }
1245                                                 if (prison_check_ip6(inp->ip_inp.inp.inp_cred,
1246                                                     &sin6->sin6_addr) != 0) {
1247                                                         continue;
1248                                                 }
1249                                                 if (IN6_IS_ADDR_LINKLOCAL(&sin6->sin6_addr)) {
1250                                                         if (local_scope == 0)
1251                                                                 continue;
1252                                                         if (sin6->sin6_scope_id == 0) {
1253                                                                 if (sa6_recoverscope(sin6) != 0)
1254                                                                         /*
1255                                                                          *
1256                                                                          * bad
1257                                                                          *
1258                                                                          * li
1259                                                                          * nk
1260                                                                          *
1261                                                                          * loc
1262                                                                          * al
1263                                                                          *
1264                                                                          * add
1265                                                                          * re
1266                                                                          * ss
1267                                                                          * */
1268                                                                         continue;
1269                                                         }
1270                                                 }
1271                                                 if ((site_scope == 0) &&
1272                                                     (IN6_IS_ADDR_SITELOCAL(&sin6->sin6_addr))) {
1273                                                         continue;
1274                                                 }
1275                                                 memcpy(sas, sin6, sizeof(*sin6));
1276                                                 ((struct sockaddr_in6 *)sas)->sin6_port = inp->sctp_lport;
1277                                                 sas = (struct sockaddr_storage *)((caddr_t)sas + sizeof(*sin6));
1278                                                 actual += sizeof(*sin6);
1279                                                 if (actual >= limit) {
1280                                                         return (actual);
1281                                                 }
1282                                         } else {
1283                                                 continue;
1284                                         }
1285                                         break;
1286 #endif
1287                                 default:
1288                                         /* TSNH */
1289                                         break;
1290                                 }
1291                         }
1292                 }
1293         } else {
1294                 struct sctp_laddr *laddr;
1295
1296                 LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
1297                         if (stcb) {
1298                                 if (sctp_is_addr_restricted(stcb, laddr->ifa)) {
1299                                         continue;
1300                                 }
1301                         }
1302                         if (sctp_fill_user_address(sas, &laddr->ifa->address.sa))
1303                                 continue;
1304                         switch (laddr->ifa->address.sa.sa_family) {
1305 #ifdef INET
1306                         case AF_INET:
1307                                 ((struct sockaddr_in *)sas)->sin_port = inp->sctp_lport;
1308                                 break;
1309 #endif
1310 #ifdef INET6
1311                         case AF_INET6:
1312                                 ((struct sockaddr_in6 *)sas)->sin6_port = inp->sctp_lport;
1313                                 break;
1314 #endif
1315                         default:
1316                                 /* TSNH */
1317                                 break;
1318                         }
1319                         sas = (struct sockaddr_storage *)((caddr_t)sas +
1320                             laddr->ifa->address.sa.sa_len);
1321                         actual += laddr->ifa->address.sa.sa_len;
1322                         if (actual >= limit) {
1323                                 return (actual);
1324                         }
1325                 }
1326         }
1327         return (actual);
1328 }
1329
1330 static size_t
1331 sctp_fill_up_addresses(struct sctp_inpcb *inp,
1332     struct sctp_tcb *stcb,
1333     size_t limit,
1334     struct sockaddr_storage *sas)
1335 {
1336         size_t size = 0;
1337
1338         SCTP_IPI_ADDR_RLOCK();
1339         /* fill up addresses for the endpoint's default vrf */
1340         size = sctp_fill_up_addresses_vrf(inp, stcb, limit, sas,
1341             inp->def_vrf_id);
1342         SCTP_IPI_ADDR_RUNLOCK();
1343         return (size);
1344 }
1345
1346 /*
1347  * NOTE: assumes addr lock is held
1348  */
1349 static int
1350 sctp_count_max_addresses_vrf(struct sctp_inpcb *inp, uint32_t vrf_id)
1351 {
1352         int cnt = 0;
1353         struct sctp_vrf *vrf = NULL;
1354
1355         /*
1356          * In both sub-set bound an bound_all cases we return the MAXIMUM
1357          * number of addresses that you COULD get. In reality the sub-set
1358          * bound may have an exclusion list for a given TCB OR in the
1359          * bound-all case a TCB may NOT include the loopback or other
1360          * addresses as well.
1361          */
1362         vrf = sctp_find_vrf(vrf_id);
1363         if (vrf == NULL) {
1364                 return (0);
1365         }
1366         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
1367                 struct sctp_ifn *sctp_ifn;
1368                 struct sctp_ifa *sctp_ifa;
1369
1370                 LIST_FOREACH(sctp_ifn, &vrf->ifnlist, next_ifn) {
1371                         LIST_FOREACH(sctp_ifa, &sctp_ifn->ifalist, next_ifa) {
1372                                 /* Count them if they are the right type */
1373                                 switch (sctp_ifa->address.sa.sa_family) {
1374 #ifdef INET
1375                                 case AF_INET:
1376                                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4))
1377                                                 cnt += sizeof(struct sockaddr_in6);
1378                                         else
1379                                                 cnt += sizeof(struct sockaddr_in);
1380                                         break;
1381 #endif
1382 #ifdef INET6
1383                                 case AF_INET6:
1384                                         cnt += sizeof(struct sockaddr_in6);
1385                                         break;
1386 #endif
1387                                 default:
1388                                         break;
1389                                 }
1390                         }
1391                 }
1392         } else {
1393                 struct sctp_laddr *laddr;
1394
1395                 LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
1396                         switch (laddr->ifa->address.sa.sa_family) {
1397 #ifdef INET
1398                         case AF_INET:
1399                                 if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4))
1400                                         cnt += sizeof(struct sockaddr_in6);
1401                                 else
1402                                         cnt += sizeof(struct sockaddr_in);
1403                                 break;
1404 #endif
1405 #ifdef INET6
1406                         case AF_INET6:
1407                                 cnt += sizeof(struct sockaddr_in6);
1408                                 break;
1409 #endif
1410                         default:
1411                                 break;
1412                         }
1413                 }
1414         }
1415         return (cnt);
1416 }
1417
1418 static int
1419 sctp_count_max_addresses(struct sctp_inpcb *inp)
1420 {
1421         int cnt = 0;
1422
1423         SCTP_IPI_ADDR_RLOCK();
1424         /* count addresses for the endpoint's default VRF */
1425         cnt = sctp_count_max_addresses_vrf(inp, inp->def_vrf_id);
1426         SCTP_IPI_ADDR_RUNLOCK();
1427         return (cnt);
1428 }
1429
1430 static int
1431 sctp_do_connect_x(struct socket *so, struct sctp_inpcb *inp, void *optval,
1432     size_t optsize, void *p, int delay)
1433 {
1434         int error = 0;
1435         int creat_lock_on = 0;
1436         struct sctp_tcb *stcb = NULL;
1437         struct sockaddr *sa;
1438         int num_v6 = 0, num_v4 = 0, *totaddrp, totaddr;
1439         uint32_t vrf_id;
1440         int bad_addresses = 0;
1441         sctp_assoc_t *a_id;
1442
1443         SCTPDBG(SCTP_DEBUG_PCB1, "Connectx called\n");
1444
1445         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
1446             (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED)) {
1447                 /* We are already connected AND the TCP model */
1448                 SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EADDRINUSE);
1449                 return (EADDRINUSE);
1450         }
1451         if ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) &&
1452             (sctp_is_feature_off(inp, SCTP_PCB_FLAGS_PORTREUSE))) {
1453                 SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1454                 return (EINVAL);
1455         }
1456         if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) {
1457                 SCTP_INP_RLOCK(inp);
1458                 stcb = LIST_FIRST(&inp->sctp_asoc_list);
1459                 SCTP_INP_RUNLOCK(inp);
1460         }
1461         if (stcb) {
1462                 SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
1463                 return (EALREADY);
1464         }
1465         SCTP_INP_INCR_REF(inp);
1466         SCTP_ASOC_CREATE_LOCK(inp);
1467         creat_lock_on = 1;
1468         if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
1469             (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
1470                 SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EFAULT);
1471                 error = EFAULT;
1472                 goto out_now;
1473         }
1474         totaddrp = (int *)optval;
1475         totaddr = *totaddrp;
1476         sa = (struct sockaddr *)(totaddrp + 1);
1477         stcb = sctp_connectx_helper_find(inp, sa, &totaddr, &num_v4, &num_v6, &error, (optsize - sizeof(int)), &bad_addresses);
1478         if ((stcb != NULL) || bad_addresses) {
1479                 /* Already have or am bring up an association */
1480                 SCTP_ASOC_CREATE_UNLOCK(inp);
1481                 creat_lock_on = 0;
1482                 if (stcb)
1483                         SCTP_TCB_UNLOCK(stcb);
1484                 if (bad_addresses == 0) {
1485                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
1486                         error = EALREADY;
1487                 }
1488                 goto out_now;
1489         }
1490 #ifdef INET6
1491         if (((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) &&
1492             (num_v6 > 0)) {
1493                 error = EINVAL;
1494                 goto out_now;
1495         }
1496         if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
1497             (num_v4 > 0)) {
1498                 struct in6pcb *inp6;
1499
1500                 inp6 = (struct in6pcb *)inp;
1501                 if (SCTP_IPV6_V6ONLY(inp6)) {
1502                         /*
1503                          * if IPV6_V6ONLY flag, ignore connections destined
1504                          * to a v4 addr or v4-mapped addr
1505                          */
1506                         SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1507                         error = EINVAL;
1508                         goto out_now;
1509                 }
1510         }
1511 #endif                          /* INET6 */
1512         if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) ==
1513             SCTP_PCB_FLAGS_UNBOUND) {
1514                 /* Bind a ephemeral port */
1515                 error = sctp_inpcb_bind(so, NULL, NULL, p);
1516                 if (error) {
1517                         goto out_now;
1518                 }
1519         }
1520         /* FIX ME: do we want to pass in a vrf on the connect call? */
1521         vrf_id = inp->def_vrf_id;
1522
1523
1524         /* We are GOOD to go */
1525         stcb = sctp_aloc_assoc(inp, sa, &error, 0, vrf_id,
1526             (struct thread *)p
1527             );
1528         if (stcb == NULL) {
1529                 /* Gak! no memory */
1530                 goto out_now;
1531         }
1532         if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) {
1533                 stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_CONNECTED;
1534                 /* Set the connected flag so we can queue data */
1535                 soisconnecting(so);
1536         }
1537         SCTP_SET_STATE(&stcb->asoc, SCTP_STATE_COOKIE_WAIT);
1538         /* move to second address */
1539         switch (sa->sa_family) {
1540 #ifdef INET
1541         case AF_INET:
1542                 sa = (struct sockaddr *)((caddr_t)sa + sizeof(struct sockaddr_in));
1543                 break;
1544 #endif
1545 #ifdef INET6
1546         case AF_INET6:
1547                 sa = (struct sockaddr *)((caddr_t)sa + sizeof(struct sockaddr_in6));
1548                 break;
1549 #endif
1550         default:
1551                 break;
1552         }
1553
1554         error = 0;
1555         sctp_connectx_helper_add(stcb, sa, (totaddr - 1), &error);
1556         /* Fill in the return id */
1557         if (error) {
1558                 (void)sctp_free_assoc(inp, stcb, SCTP_PCBFREE_FORCE, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_6);
1559                 goto out_now;
1560         }
1561         a_id = (sctp_assoc_t *) optval;
1562         *a_id = sctp_get_associd(stcb);
1563
1564         /* initialize authentication parameters for the assoc */
1565         sctp_initialize_auth_params(inp, stcb);
1566
1567         if (delay) {
1568                 /* doing delayed connection */
1569                 stcb->asoc.delayed_connection = 1;
1570                 sctp_timer_start(SCTP_TIMER_TYPE_INIT, inp, stcb, stcb->asoc.primary_destination);
1571         } else {
1572                 (void)SCTP_GETTIME_TIMEVAL(&stcb->asoc.time_entered);
1573                 sctp_send_initiate(inp, stcb, SCTP_SO_LOCKED);
1574         }
1575         SCTP_TCB_UNLOCK(stcb);
1576         if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) {
1577                 stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_CONNECTED;
1578                 /* Set the connected flag so we can queue data */
1579                 soisconnecting(so);
1580         }
1581 out_now:
1582         if (creat_lock_on) {
1583                 SCTP_ASOC_CREATE_UNLOCK(inp);
1584         }
1585         SCTP_INP_DECR_REF(inp);
1586         return (error);
1587 }
1588
1589 #define SCTP_FIND_STCB(inp, stcb, assoc_id) { \
1590         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||\
1591             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) { \
1592                 SCTP_INP_RLOCK(inp); \
1593                 stcb = LIST_FIRST(&inp->sctp_asoc_list); \
1594                 if (stcb) { \
1595                         SCTP_TCB_LOCK(stcb); \
1596                 } \
1597                 SCTP_INP_RUNLOCK(inp); \
1598         } else if (assoc_id > SCTP_ALL_ASSOC) { \
1599                 stcb = sctp_findassociation_ep_asocid(inp, assoc_id, 1); \
1600                 if (stcb == NULL) { \
1601                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT); \
1602                         error = ENOENT; \
1603                         break; \
1604                 } \
1605         } else { \
1606                 stcb = NULL; \
1607         } \
1608   }
1609
1610
1611 #define SCTP_CHECK_AND_CAST(destp, srcp, type, size) {\
1612         if (size < sizeof(type)) { \
1613                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL); \
1614                 error = EINVAL; \
1615                 break; \
1616         } else { \
1617                 destp = (type *)srcp; \
1618         } \
1619       }
1620
1621 static int
1622 sctp_getopt(struct socket *so, int optname, void *optval, size_t *optsize,
1623     void *p)
1624 {
1625         struct sctp_inpcb *inp = NULL;
1626         int error, val = 0;
1627         struct sctp_tcb *stcb = NULL;
1628
1629         if (optval == NULL) {
1630                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1631                 return (EINVAL);
1632         }
1633         inp = (struct sctp_inpcb *)so->so_pcb;
1634         if (inp == NULL) {
1635                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1636                 return EINVAL;
1637         }
1638         error = 0;
1639
1640         switch (optname) {
1641         case SCTP_NODELAY:
1642         case SCTP_AUTOCLOSE:
1643         case SCTP_EXPLICIT_EOR:
1644         case SCTP_AUTO_ASCONF:
1645         case SCTP_DISABLE_FRAGMENTS:
1646         case SCTP_I_WANT_MAPPED_V4_ADDR:
1647         case SCTP_USE_EXT_RCVINFO:
1648                 SCTP_INP_RLOCK(inp);
1649                 switch (optname) {
1650                 case SCTP_DISABLE_FRAGMENTS:
1651                         val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NO_FRAGMENT);
1652                         break;
1653                 case SCTP_I_WANT_MAPPED_V4_ADDR:
1654                         val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4);
1655                         break;
1656                 case SCTP_AUTO_ASCONF:
1657                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
1658                                 /* only valid for bound all sockets */
1659                                 val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTO_ASCONF);
1660                         } else {
1661                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1662                                 error = EINVAL;
1663                                 goto flags_out;
1664                         }
1665                         break;
1666                 case SCTP_EXPLICIT_EOR:
1667                         val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXPLICIT_EOR);
1668                         break;
1669                 case SCTP_NODELAY:
1670                         val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NODELAY);
1671                         break;
1672                 case SCTP_USE_EXT_RCVINFO:
1673                         val = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_EXT_RCVINFO);
1674                         break;
1675                 case SCTP_AUTOCLOSE:
1676                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE))
1677                                 val = TICKS_TO_SEC(inp->sctp_ep.auto_close_time);
1678                         else
1679                                 val = 0;
1680                         break;
1681
1682                 default:
1683                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOPROTOOPT);
1684                         error = ENOPROTOOPT;
1685                 }               /* end switch (sopt->sopt_name) */
1686                 if (*optsize < sizeof(val)) {
1687                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1688                         error = EINVAL;
1689                 }
1690 flags_out:
1691                 SCTP_INP_RUNLOCK(inp);
1692                 if (error == 0) {
1693                         /* return the option value */
1694                         *(int *)optval = val;
1695                         *optsize = sizeof(val);
1696                 }
1697                 break;
1698         case SCTP_GET_PACKET_LOG:
1699                 {
1700 #ifdef  SCTP_PACKET_LOGGING
1701                         uint8_t *target;
1702                         int ret;
1703
1704                         SCTP_CHECK_AND_CAST(target, optval, uint8_t, *optsize);
1705                         ret = sctp_copy_out_packet_log(target, (int)*optsize);
1706                         *optsize = ret;
1707 #else
1708                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
1709                         error = EOPNOTSUPP;
1710 #endif
1711                         break;
1712                 }
1713         case SCTP_REUSE_PORT:
1714                 {
1715                         uint32_t *value;
1716
1717                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_UDPTYPE)) {
1718                                 /* Can't do this for a 1-m socket */
1719                                 error = EINVAL;
1720                                 break;
1721                         }
1722                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
1723                         *value = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE);
1724                         *optsize = sizeof(uint32_t);
1725                         break;
1726                 }
1727         case SCTP_PARTIAL_DELIVERY_POINT:
1728                 {
1729                         uint32_t *value;
1730
1731                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
1732                         *value = inp->partial_delivery_point;
1733                         *optsize = sizeof(uint32_t);
1734                         break;
1735                 }
1736         case SCTP_FRAGMENT_INTERLEAVE:
1737                 {
1738                         uint32_t *value;
1739
1740                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
1741                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE)) {
1742                                 if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS)) {
1743                                         *value = SCTP_FRAG_LEVEL_2;
1744                                 } else {
1745                                         *value = SCTP_FRAG_LEVEL_1;
1746                                 }
1747                         } else {
1748                                 *value = SCTP_FRAG_LEVEL_0;
1749                         }
1750                         *optsize = sizeof(uint32_t);
1751                         break;
1752                 }
1753         case SCTP_CMT_ON_OFF:
1754                 {
1755                         struct sctp_assoc_value *av;
1756
1757                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
1758                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
1759                         if (stcb) {
1760                                 av->assoc_value = stcb->asoc.sctp_cmt_on_off;
1761                                 SCTP_TCB_UNLOCK(stcb);
1762                         } else {
1763                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
1764                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
1765                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
1766                                         SCTP_INP_RLOCK(inp);
1767                                         av->assoc_value = inp->sctp_cmt_on_off;
1768                                         SCTP_INP_RUNLOCK(inp);
1769                                 } else {
1770                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1771                                         error = EINVAL;
1772                                 }
1773                         }
1774                         if (error == 0) {
1775                                 *optsize = sizeof(struct sctp_assoc_value);
1776                         }
1777                         break;
1778                 }
1779         case SCTP_PLUGGABLE_CC:
1780                 {
1781                         struct sctp_assoc_value *av;
1782
1783                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
1784                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
1785                         if (stcb) {
1786                                 av->assoc_value = stcb->asoc.congestion_control_module;
1787                                 SCTP_TCB_UNLOCK(stcb);
1788                         } else {
1789                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
1790                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
1791                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
1792                                         SCTP_INP_RLOCK(inp);
1793                                         av->assoc_value = inp->sctp_ep.sctp_default_cc_module;
1794                                         SCTP_INP_RUNLOCK(inp);
1795                                 } else {
1796                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1797                                         error = EINVAL;
1798                                 }
1799                         }
1800                         if (error == 0) {
1801                                 *optsize = sizeof(struct sctp_assoc_value);
1802                         }
1803                         break;
1804                 }
1805         case SCTP_CC_OPTION:
1806                 {
1807                         struct sctp_cc_option *cc_opt;
1808
1809                         SCTP_CHECK_AND_CAST(cc_opt, optval, struct sctp_cc_option, *optsize);
1810                         SCTP_FIND_STCB(inp, stcb, cc_opt->aid_value.assoc_id);
1811                         if (stcb == NULL) {
1812                                 error = EINVAL;
1813                         } else {
1814                                 if (stcb->asoc.cc_functions.sctp_cwnd_socket_option == NULL) {
1815                                         error = ENOTSUP;
1816                                 } else {
1817                                         error = (*stcb->asoc.cc_functions.sctp_cwnd_socket_option) (stcb, 0, cc_opt);
1818                                         *optsize = sizeof(struct sctp_cc_option);
1819                                 }
1820                                 SCTP_TCB_UNLOCK(stcb);
1821                         }
1822                         break;
1823                 }
1824         case SCTP_PLUGGABLE_SS:
1825                 {
1826                         struct sctp_assoc_value *av;
1827
1828                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
1829                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
1830                         if (stcb) {
1831                                 av->assoc_value = stcb->asoc.stream_scheduling_module;
1832                                 SCTP_TCB_UNLOCK(stcb);
1833                         } else {
1834                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
1835                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
1836                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
1837                                         SCTP_INP_RLOCK(inp);
1838                                         av->assoc_value = inp->sctp_ep.sctp_default_ss_module;
1839                                         SCTP_INP_RUNLOCK(inp);
1840                                 } else {
1841                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1842                                         error = EINVAL;
1843                                 }
1844                         }
1845                         if (error == 0) {
1846                                 *optsize = sizeof(struct sctp_assoc_value);
1847                         }
1848                         break;
1849                 }
1850         case SCTP_SS_VALUE:
1851                 {
1852                         struct sctp_stream_value *av;
1853
1854                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_stream_value, *optsize);
1855                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
1856                         if (stcb) {
1857                                 if (stcb->asoc.ss_functions.sctp_ss_get_value(stcb, &stcb->asoc, &stcb->asoc.strmout[av->stream_id],
1858                                     &av->stream_value) < 0) {
1859                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1860                                         error = EINVAL;
1861                                 } else {
1862                                         *optsize = sizeof(struct sctp_stream_value);
1863                                 }
1864                                 SCTP_TCB_UNLOCK(stcb);
1865                         } else {
1866                                 /*
1867                                  * Can't get stream value without
1868                                  * association
1869                                  */
1870                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1871                                 error = EINVAL;
1872                         }
1873                         break;
1874                 }
1875         case SCTP_GET_ADDR_LEN:
1876                 {
1877                         struct sctp_assoc_value *av;
1878
1879                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
1880                         error = EINVAL;
1881 #ifdef INET
1882                         if (av->assoc_value == AF_INET) {
1883                                 av->assoc_value = sizeof(struct sockaddr_in);
1884                                 error = 0;
1885                         }
1886 #endif
1887 #ifdef INET6
1888                         if (av->assoc_value == AF_INET6) {
1889                                 av->assoc_value = sizeof(struct sockaddr_in6);
1890                                 error = 0;
1891                         }
1892 #endif
1893                         if (error) {
1894                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
1895                         } else {
1896                                 *optsize = sizeof(struct sctp_assoc_value);
1897                         }
1898                         break;
1899                 }
1900         case SCTP_GET_ASSOC_NUMBER:
1901                 {
1902                         uint32_t *value, cnt;
1903
1904                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
1905                         cnt = 0;
1906                         SCTP_INP_RLOCK(inp);
1907                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
1908                                 cnt++;
1909                         }
1910                         SCTP_INP_RUNLOCK(inp);
1911                         *value = cnt;
1912                         *optsize = sizeof(uint32_t);
1913                         break;
1914                 }
1915         case SCTP_GET_ASSOC_ID_LIST:
1916                 {
1917                         struct sctp_assoc_ids *ids;
1918                         unsigned int at, limit;
1919
1920                         SCTP_CHECK_AND_CAST(ids, optval, struct sctp_assoc_ids, *optsize);
1921                         at = 0;
1922                         limit = (*optsize - sizeof(uint32_t)) / sizeof(sctp_assoc_t);
1923                         SCTP_INP_RLOCK(inp);
1924                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
1925                                 if (at < limit) {
1926                                         ids->gaids_assoc_id[at++] = sctp_get_associd(stcb);
1927                                 } else {
1928                                         error = EINVAL;
1929                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
1930                                         break;
1931                                 }
1932                         }
1933                         SCTP_INP_RUNLOCK(inp);
1934                         if (error == 0) {
1935                                 ids->gaids_number_of_ids = at;
1936                                 *optsize = ((at * sizeof(sctp_assoc_t)) + sizeof(uint32_t));
1937                         }
1938                         break;
1939                 }
1940         case SCTP_CONTEXT:
1941                 {
1942                         struct sctp_assoc_value *av;
1943
1944                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
1945                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
1946
1947                         if (stcb) {
1948                                 av->assoc_value = stcb->asoc.context;
1949                                 SCTP_TCB_UNLOCK(stcb);
1950                         } else {
1951                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
1952                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
1953                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
1954                                         SCTP_INP_RLOCK(inp);
1955                                         av->assoc_value = inp->sctp_context;
1956                                         SCTP_INP_RUNLOCK(inp);
1957                                 } else {
1958                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
1959                                         error = EINVAL;
1960                                 }
1961                         }
1962                         if (error == 0) {
1963                                 *optsize = sizeof(struct sctp_assoc_value);
1964                         }
1965                         break;
1966                 }
1967         case SCTP_VRF_ID:
1968                 {
1969                         uint32_t *default_vrfid;
1970
1971                         SCTP_CHECK_AND_CAST(default_vrfid, optval, uint32_t, *optsize);
1972                         *default_vrfid = inp->def_vrf_id;
1973                         *optsize = sizeof(uint32_t);
1974                         break;
1975                 }
1976         case SCTP_GET_ASOC_VRF:
1977                 {
1978                         struct sctp_assoc_value *id;
1979
1980                         SCTP_CHECK_AND_CAST(id, optval, struct sctp_assoc_value, *optsize);
1981                         SCTP_FIND_STCB(inp, stcb, id->assoc_id);
1982                         if (stcb == NULL) {
1983                                 error = EINVAL;
1984                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
1985                         } else {
1986                                 id->assoc_value = stcb->asoc.vrf_id;
1987                                 *optsize = sizeof(struct sctp_assoc_value);
1988                         }
1989                         break;
1990                 }
1991         case SCTP_GET_VRF_IDS:
1992                 {
1993                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
1994                         error = EOPNOTSUPP;
1995                         break;
1996                 }
1997         case SCTP_GET_NONCE_VALUES:
1998                 {
1999                         struct sctp_get_nonce_values *gnv;
2000
2001                         SCTP_CHECK_AND_CAST(gnv, optval, struct sctp_get_nonce_values, *optsize);
2002                         SCTP_FIND_STCB(inp, stcb, gnv->gn_assoc_id);
2003
2004                         if (stcb) {
2005                                 gnv->gn_peers_tag = stcb->asoc.peer_vtag;
2006                                 gnv->gn_local_tag = stcb->asoc.my_vtag;
2007                                 SCTP_TCB_UNLOCK(stcb);
2008                                 *optsize = sizeof(struct sctp_get_nonce_values);
2009                         } else {
2010                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTCONN);
2011                                 error = ENOTCONN;
2012                         }
2013                         break;
2014                 }
2015         case SCTP_DELAYED_SACK:
2016                 {
2017                         struct sctp_sack_info *sack;
2018
2019                         SCTP_CHECK_AND_CAST(sack, optval, struct sctp_sack_info, *optsize);
2020                         SCTP_FIND_STCB(inp, stcb, sack->sack_assoc_id);
2021                         if (stcb) {
2022                                 sack->sack_delay = stcb->asoc.delayed_ack;
2023                                 sack->sack_freq = stcb->asoc.sack_freq;
2024                                 SCTP_TCB_UNLOCK(stcb);
2025                         } else {
2026                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2027                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2028                                     (sack->sack_assoc_id == SCTP_FUTURE_ASSOC)) {
2029                                         SCTP_INP_RLOCK(inp);
2030                                         sack->sack_delay = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV]);
2031                                         sack->sack_freq = inp->sctp_ep.sctp_sack_freq;
2032                                         SCTP_INP_RUNLOCK(inp);
2033                                 } else {
2034                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2035                                         error = EINVAL;
2036                                 }
2037                         }
2038                         if (error == 0) {
2039                                 *optsize = sizeof(struct sctp_sack_info);
2040                         }
2041                         break;
2042                 }
2043         case SCTP_GET_SNDBUF_USE:
2044                 {
2045                         struct sctp_sockstat *ss;
2046
2047                         SCTP_CHECK_AND_CAST(ss, optval, struct sctp_sockstat, *optsize);
2048                         SCTP_FIND_STCB(inp, stcb, ss->ss_assoc_id);
2049
2050                         if (stcb) {
2051                                 ss->ss_total_sndbuf = stcb->asoc.total_output_queue_size;
2052                                 ss->ss_total_recv_buf = (stcb->asoc.size_on_reasm_queue +
2053                                     stcb->asoc.size_on_all_streams);
2054                                 SCTP_TCB_UNLOCK(stcb);
2055                                 *optsize = sizeof(struct sctp_sockstat);
2056                         } else {
2057                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTCONN);
2058                                 error = ENOTCONN;
2059                         }
2060                         break;
2061                 }
2062         case SCTP_MAX_BURST:
2063                 {
2064                         struct sctp_assoc_value *av;
2065
2066                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
2067                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
2068
2069                         if (stcb) {
2070                                 av->assoc_value = stcb->asoc.max_burst;
2071                                 SCTP_TCB_UNLOCK(stcb);
2072                         } else {
2073                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2074                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2075                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
2076                                         SCTP_INP_RLOCK(inp);
2077                                         av->assoc_value = inp->sctp_ep.max_burst;
2078                                         SCTP_INP_RUNLOCK(inp);
2079                                 } else {
2080                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2081                                         error = EINVAL;
2082                                 }
2083                         }
2084                         if (error == 0) {
2085                                 *optsize = sizeof(struct sctp_assoc_value);
2086                         }
2087                         break;
2088                 }
2089         case SCTP_MAXSEG:
2090                 {
2091                         struct sctp_assoc_value *av;
2092                         int ovh;
2093
2094                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
2095                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
2096
2097                         if (stcb) {
2098                                 av->assoc_value = sctp_get_frag_point(stcb, &stcb->asoc);
2099                                 SCTP_TCB_UNLOCK(stcb);
2100                         } else {
2101                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2102                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2103                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
2104                                         SCTP_INP_RLOCK(inp);
2105                                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2106                                                 ovh = SCTP_MED_OVERHEAD;
2107                                         } else {
2108                                                 ovh = SCTP_MED_V4_OVERHEAD;
2109                                         }
2110                                         if (inp->sctp_frag_point >= SCTP_DEFAULT_MAXSEGMENT)
2111                                                 av->assoc_value = 0;
2112                                         else
2113                                                 av->assoc_value = inp->sctp_frag_point - ovh;
2114                                         SCTP_INP_RUNLOCK(inp);
2115                                 } else {
2116                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2117                                         error = EINVAL;
2118                                 }
2119                         }
2120                         if (error == 0) {
2121                                 *optsize = sizeof(struct sctp_assoc_value);
2122                         }
2123                         break;
2124                 }
2125         case SCTP_GET_STAT_LOG:
2126                 error = sctp_fill_stat_log(optval, optsize);
2127                 break;
2128         case SCTP_EVENTS:
2129                 {
2130                         struct sctp_event_subscribe *events;
2131
2132                         SCTP_CHECK_AND_CAST(events, optval, struct sctp_event_subscribe, *optsize);
2133                         memset(events, 0, sizeof(struct sctp_event_subscribe));
2134                         SCTP_INP_RLOCK(inp);
2135                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT))
2136                                 events->sctp_data_io_event = 1;
2137
2138                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVASSOCEVNT))
2139                                 events->sctp_association_event = 1;
2140
2141                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVPADDREVNT))
2142                                 events->sctp_address_event = 1;
2143
2144                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVSENDFAILEVNT))
2145                                 events->sctp_send_failure_event = 1;
2146
2147                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVPEERERR))
2148                                 events->sctp_peer_error_event = 1;
2149
2150                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT))
2151                                 events->sctp_shutdown_event = 1;
2152
2153                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PDAPIEVNT))
2154                                 events->sctp_partial_delivery_event = 1;
2155
2156                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_ADAPTATIONEVNT))
2157                                 events->sctp_adaptation_layer_event = 1;
2158
2159                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTHEVNT))
2160                                 events->sctp_authentication_event = 1;
2161
2162                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_DRYEVNT))
2163                                 events->sctp_sender_dry_event = 1;
2164
2165                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_STREAM_RESETEVNT))
2166                                 events->sctp_stream_reset_event = 1;
2167                         SCTP_INP_RUNLOCK(inp);
2168                         *optsize = sizeof(struct sctp_event_subscribe);
2169                         break;
2170                 }
2171         case SCTP_ADAPTATION_LAYER:
2172                 {
2173                         uint32_t *value;
2174
2175                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
2176
2177                         SCTP_INP_RLOCK(inp);
2178                         *value = inp->sctp_ep.adaptation_layer_indicator;
2179                         SCTP_INP_RUNLOCK(inp);
2180                         *optsize = sizeof(uint32_t);
2181                         break;
2182                 }
2183         case SCTP_SET_INITIAL_DBG_SEQ:
2184                 {
2185                         uint32_t *value;
2186
2187                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
2188                         SCTP_INP_RLOCK(inp);
2189                         *value = inp->sctp_ep.initial_sequence_debug;
2190                         SCTP_INP_RUNLOCK(inp);
2191                         *optsize = sizeof(uint32_t);
2192                         break;
2193                 }
2194         case SCTP_GET_LOCAL_ADDR_SIZE:
2195                 {
2196                         uint32_t *value;
2197
2198                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
2199                         SCTP_INP_RLOCK(inp);
2200                         *value = sctp_count_max_addresses(inp);
2201                         SCTP_INP_RUNLOCK(inp);
2202                         *optsize = sizeof(uint32_t);
2203                         break;
2204                 }
2205         case SCTP_GET_REMOTE_ADDR_SIZE:
2206                 {
2207                         uint32_t *value;
2208                         size_t size;
2209                         struct sctp_nets *net;
2210
2211                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, *optsize);
2212                         /* FIXME MT: change to sctp_assoc_value? */
2213                         SCTP_FIND_STCB(inp, stcb, (sctp_assoc_t) * value);
2214
2215                         if (stcb) {
2216                                 size = 0;
2217                                 /* Count the sizes */
2218                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
2219                                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
2220                                                 size += sizeof(struct sockaddr_in6);
2221                                         } else {
2222                                                 switch (((struct sockaddr *)&net->ro._l_addr)->sa_family) {
2223 #ifdef INET
2224                                                 case AF_INET:
2225                                                         size += sizeof(struct sockaddr_in);
2226                                                         break;
2227 #endif
2228 #ifdef INET6
2229                                                 case AF_INET6:
2230                                                         size += sizeof(struct sockaddr_in6);
2231                                                         break;
2232 #endif
2233                                                 default:
2234                                                         break;
2235                                                 }
2236                                         }
2237                                 }
2238                                 SCTP_TCB_UNLOCK(stcb);
2239                                 *value = (uint32_t) size;
2240                                 *optsize = sizeof(uint32_t);
2241                         } else {
2242                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTCONN);
2243                                 error = ENOTCONN;
2244                         }
2245                         break;
2246                 }
2247         case SCTP_GET_PEER_ADDRESSES:
2248                 /*
2249                  * Get the address information, an array is passed in to
2250                  * fill up we pack it.
2251                  */
2252                 {
2253                         size_t cpsz, left;
2254                         struct sockaddr_storage *sas;
2255                         struct sctp_nets *net;
2256                         struct sctp_getaddresses *saddr;
2257
2258                         SCTP_CHECK_AND_CAST(saddr, optval, struct sctp_getaddresses, *optsize);
2259                         SCTP_FIND_STCB(inp, stcb, saddr->sget_assoc_id);
2260
2261                         if (stcb) {
2262                                 left = (*optsize) - sizeof(struct sctp_getaddresses);
2263                                 *optsize = sizeof(struct sctp_getaddresses);
2264                                 sas = (struct sockaddr_storage *)&saddr->addr[0];
2265
2266                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
2267                                         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) {
2268                                                 cpsz = sizeof(struct sockaddr_in6);
2269                                         } else {
2270                                                 switch (((struct sockaddr *)&net->ro._l_addr)->sa_family) {
2271 #ifdef INET
2272                                                 case AF_INET:
2273                                                         cpsz = sizeof(struct sockaddr_in);
2274                                                         break;
2275 #endif
2276 #ifdef INET6
2277                                                 case AF_INET6:
2278                                                         cpsz = sizeof(struct sockaddr_in6);
2279                                                         break;
2280 #endif
2281                                                 default:
2282                                                         cpsz = 0;
2283                                                         break;
2284                                                 }
2285                                         }
2286                                         if (cpsz == 0) {
2287                                                 break;
2288                                         }
2289                                         if (left < cpsz) {
2290                                                 /* not enough room. */
2291                                                 break;
2292                                         }
2293 #if defined(INET) && defined(INET6)
2294                                         if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_NEEDS_MAPPED_V4)) &&
2295                                             (((struct sockaddr *)&net->ro._l_addr)->sa_family == AF_INET)) {
2296                                                 /* Must map the address */
2297                                                 in6_sin_2_v4mapsin6((struct sockaddr_in *)&net->ro._l_addr,
2298                                                     (struct sockaddr_in6 *)sas);
2299                                         } else {
2300 #endif
2301                                                 memcpy(sas, &net->ro._l_addr, cpsz);
2302 #if defined(INET) && defined(INET6)
2303                                         }
2304 #endif
2305                                         ((struct sockaddr_in *)sas)->sin_port = stcb->rport;
2306
2307                                         sas = (struct sockaddr_storage *)((caddr_t)sas + cpsz);
2308                                         left -= cpsz;
2309                                         *optsize += cpsz;
2310                                 }
2311                                 SCTP_TCB_UNLOCK(stcb);
2312                         } else {
2313                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
2314                                 error = ENOENT;
2315                         }
2316                         break;
2317                 }
2318         case SCTP_GET_LOCAL_ADDRESSES:
2319                 {
2320                         size_t limit, actual;
2321                         struct sockaddr_storage *sas;
2322                         struct sctp_getaddresses *saddr;
2323
2324                         SCTP_CHECK_AND_CAST(saddr, optval, struct sctp_getaddresses, *optsize);
2325                         SCTP_FIND_STCB(inp, stcb, saddr->sget_assoc_id);
2326
2327                         sas = (struct sockaddr_storage *)&saddr->addr[0];
2328                         limit = *optsize - sizeof(sctp_assoc_t);
2329                         actual = sctp_fill_up_addresses(inp, stcb, limit, sas);
2330                         if (stcb) {
2331                                 SCTP_TCB_UNLOCK(stcb);
2332                         }
2333                         *optsize = sizeof(struct sockaddr_storage) + actual;
2334                         break;
2335                 }
2336         case SCTP_PEER_ADDR_PARAMS:
2337                 {
2338                         struct sctp_paddrparams *paddrp;
2339                         struct sctp_nets *net;
2340
2341                         SCTP_CHECK_AND_CAST(paddrp, optval, struct sctp_paddrparams, *optsize);
2342                         SCTP_FIND_STCB(inp, stcb, paddrp->spp_assoc_id);
2343
2344                         net = NULL;
2345                         if (stcb) {
2346                                 net = sctp_findnet(stcb, (struct sockaddr *)&paddrp->spp_address);
2347                         } else {
2348                                 /*
2349                                  * We increment here since
2350                                  * sctp_findassociation_ep_addr() wil do a
2351                                  * decrement if it finds the stcb as long as
2352                                  * the locked tcb (last argument) is NOT a
2353                                  * TCB.. aka NULL.
2354                                  */
2355                                 SCTP_INP_INCR_REF(inp);
2356                                 stcb = sctp_findassociation_ep_addr(&inp, (struct sockaddr *)&paddrp->spp_address, &net, NULL, NULL);
2357                                 if (stcb == NULL) {
2358                                         SCTP_INP_DECR_REF(inp);
2359                                 }
2360                         }
2361                         if (stcb && (net == NULL)) {
2362                                 struct sockaddr *sa;
2363
2364                                 sa = (struct sockaddr *)&paddrp->spp_address;
2365 #ifdef INET
2366                                 if (sa->sa_family == AF_INET) {
2367                                         struct sockaddr_in *sin;
2368
2369                                         sin = (struct sockaddr_in *)sa;
2370                                         if (sin->sin_addr.s_addr) {
2371                                                 error = EINVAL;
2372                                                 SCTP_TCB_UNLOCK(stcb);
2373                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2374                                                 break;
2375                                         }
2376                                 } else
2377 #endif
2378 #ifdef INET6
2379                                 if (sa->sa_family == AF_INET6) {
2380                                         struct sockaddr_in6 *sin6;
2381
2382                                         sin6 = (struct sockaddr_in6 *)sa;
2383                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
2384                                                 error = EINVAL;
2385                                                 SCTP_TCB_UNLOCK(stcb);
2386                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2387                                                 break;
2388                                         }
2389                                 } else
2390 #endif
2391                                 {
2392                                         error = EAFNOSUPPORT;
2393                                         SCTP_TCB_UNLOCK(stcb);
2394                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2395                                         break;
2396                                 }
2397                         }
2398                         if (stcb) {
2399                                 /* Applies to the specific association */
2400                                 paddrp->spp_flags = 0;
2401                                 if (net) {
2402                                         int ovh;
2403
2404                                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
2405                                                 ovh = SCTP_MED_OVERHEAD;
2406                                         } else {
2407                                                 ovh = SCTP_MED_V4_OVERHEAD;
2408                                         }
2409
2410                                         paddrp->spp_hbinterval = net->heart_beat_delay;
2411                                         paddrp->spp_pathmaxrxt = net->failure_threshold;
2412                                         paddrp->spp_pathmtu = net->mtu - ovh;
2413                                         /* get flags for HB */
2414                                         if (net->dest_state & SCTP_ADDR_NOHB) {
2415                                                 paddrp->spp_flags |= SPP_HB_DISABLE;
2416                                         } else {
2417                                                 paddrp->spp_flags |= SPP_HB_ENABLE;
2418                                         }
2419                                         /* get flags for PMTU */
2420                                         if (net->dest_state & SCTP_ADDR_NO_PMTUD) {
2421                                                 paddrp->spp_flags |= SPP_PMTUD_ENABLE;
2422                                         } else {
2423                                                 paddrp->spp_flags |= SPP_PMTUD_DISABLE;
2424                                         }
2425                                         if (net->dscp & 0x01) {
2426                                                 paddrp->spp_dscp = net->dscp & 0xfc;
2427                                                 paddrp->spp_flags |= SPP_DSCP;
2428                                         }
2429 #ifdef INET6
2430                                         if ((net->ro._l_addr.sa.sa_family == AF_INET6) &&
2431                                             (net->flowlabel & 0x80000000)) {
2432                                                 paddrp->spp_ipv6_flowlabel = net->flowlabel & 0x000fffff;
2433                                                 paddrp->spp_flags |= SPP_IPV6_FLOWLABEL;
2434                                         }
2435 #endif
2436                                 } else {
2437                                         /*
2438                                          * No destination so return default
2439                                          * value
2440                                          */
2441                                         paddrp->spp_pathmaxrxt = stcb->asoc.def_net_failure;
2442                                         paddrp->spp_pathmtu = sctp_get_frag_point(stcb, &stcb->asoc);
2443                                         if (stcb->asoc.default_dscp & 0x01) {
2444                                                 paddrp->spp_dscp = stcb->asoc.default_dscp & 0xfc;
2445                                                 paddrp->spp_flags |= SPP_DSCP;
2446                                         }
2447 #ifdef INET6
2448                                         if (stcb->asoc.default_flowlabel & 0x80000000) {
2449                                                 paddrp->spp_ipv6_flowlabel = stcb->asoc.default_flowlabel & 0x000fffff;
2450                                                 paddrp->spp_flags |= SPP_IPV6_FLOWLABEL;
2451                                         }
2452 #endif
2453                                         /* default settings should be these */
2454                                         if (sctp_stcb_is_feature_on(inp, stcb, SCTP_PCB_FLAGS_DONOT_HEARTBEAT)) {
2455                                                 paddrp->spp_flags |= SPP_HB_DISABLE;
2456                                         } else {
2457                                                 paddrp->spp_flags |= SPP_HB_ENABLE;
2458                                         }
2459                                         if (sctp_stcb_is_feature_on(inp, stcb, SCTP_PCB_FLAGS_DO_NOT_PMTUD)) {
2460                                                 paddrp->spp_flags |= SPP_PMTUD_DISABLE;
2461                                         } else {
2462                                                 paddrp->spp_flags |= SPP_PMTUD_ENABLE;
2463                                         }
2464                                         paddrp->spp_hbinterval = stcb->asoc.heart_beat_delay;
2465                                 }
2466                                 paddrp->spp_assoc_id = sctp_get_associd(stcb);
2467                                 SCTP_TCB_UNLOCK(stcb);
2468                         } else {
2469                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2470                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2471                                     (paddrp->spp_assoc_id == SCTP_FUTURE_ASSOC)) {
2472                                         /* Use endpoint defaults */
2473                                         SCTP_INP_RLOCK(inp);
2474                                         paddrp->spp_pathmaxrxt = inp->sctp_ep.def_net_failure;
2475                                         paddrp->spp_hbinterval = TICKS_TO_MSEC(inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT]);
2476                                         paddrp->spp_assoc_id = SCTP_FUTURE_ASSOC;
2477                                         /* get inp's default */
2478                                         if (inp->sctp_ep.default_dscp & 0x01) {
2479                                                 paddrp->spp_dscp = inp->sctp_ep.default_dscp & 0xfc;
2480                                                 paddrp->spp_flags |= SPP_DSCP;
2481                                         }
2482 #ifdef INET6
2483                                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) &&
2484                                             (inp->sctp_ep.default_flowlabel & 0x80000000)) {
2485                                                 paddrp->spp_ipv6_flowlabel = inp->sctp_ep.default_flowlabel & 0x000fffff;
2486                                                 paddrp->spp_flags |= SPP_IPV6_FLOWLABEL;
2487                                         }
2488 #endif
2489                                         /* can't return this */
2490                                         paddrp->spp_pathmtu = 0;
2491
2492                                         if (sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DONOT_HEARTBEAT)) {
2493                                                 paddrp->spp_flags |= SPP_HB_ENABLE;
2494                                         } else {
2495                                                 paddrp->spp_flags |= SPP_HB_DISABLE;
2496                                         }
2497                                         if (sctp_is_feature_off(inp, SCTP_PCB_FLAGS_DO_NOT_PMTUD)) {
2498                                                 paddrp->spp_flags |= SPP_PMTUD_ENABLE;
2499                                         } else {
2500                                                 paddrp->spp_flags |= SPP_PMTUD_DISABLE;
2501                                         }
2502                                         SCTP_INP_RUNLOCK(inp);
2503                                 } else {
2504                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2505                                         error = EINVAL;
2506                                 }
2507                         }
2508                         if (error == 0) {
2509                                 *optsize = sizeof(struct sctp_paddrparams);
2510                         }
2511                         break;
2512                 }
2513         case SCTP_GET_PEER_ADDR_INFO:
2514                 {
2515                         struct sctp_paddrinfo *paddri;
2516                         struct sctp_nets *net;
2517
2518                         SCTP_CHECK_AND_CAST(paddri, optval, struct sctp_paddrinfo, *optsize);
2519                         SCTP_FIND_STCB(inp, stcb, paddri->spinfo_assoc_id);
2520
2521                         net = NULL;
2522                         if (stcb) {
2523                                 net = sctp_findnet(stcb, (struct sockaddr *)&paddri->spinfo_address);
2524                         } else {
2525                                 /*
2526                                  * We increment here since
2527                                  * sctp_findassociation_ep_addr() wil do a
2528                                  * decrement if it finds the stcb as long as
2529                                  * the locked tcb (last argument) is NOT a
2530                                  * TCB.. aka NULL.
2531                                  */
2532                                 SCTP_INP_INCR_REF(inp);
2533                                 stcb = sctp_findassociation_ep_addr(&inp, (struct sockaddr *)&paddri->spinfo_address, &net, NULL, NULL);
2534                                 if (stcb == NULL) {
2535                                         SCTP_INP_DECR_REF(inp);
2536                                 }
2537                         }
2538
2539                         if ((stcb) && (net)) {
2540                                 if (net->dest_state & SCTP_ADDR_UNCONFIRMED) {
2541                                         /* It's unconfirmed */
2542                                         paddri->spinfo_state = SCTP_UNCONFIRMED;
2543                                 } else if (net->dest_state & SCTP_ADDR_REACHABLE) {
2544                                         /* It's active */
2545                                         paddri->spinfo_state = SCTP_ACTIVE;
2546                                 } else {
2547                                         /* It's inactive */
2548                                         paddri->spinfo_state = SCTP_INACTIVE;
2549                                 }
2550                                 paddri->spinfo_cwnd = net->cwnd;
2551                                 paddri->spinfo_srtt = net->lastsa >> SCTP_RTT_SHIFT;
2552                                 paddri->spinfo_rto = net->RTO;
2553                                 paddri->spinfo_assoc_id = sctp_get_associd(stcb);
2554                                 paddri->spinfo_mtu = net->mtu;
2555                                 SCTP_TCB_UNLOCK(stcb);
2556                                 *optsize = sizeof(struct sctp_paddrinfo);
2557                         } else {
2558                                 if (stcb) {
2559                                         SCTP_TCB_UNLOCK(stcb);
2560                                 }
2561                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
2562                                 error = ENOENT;
2563                         }
2564                         break;
2565                 }
2566         case SCTP_PCB_STATUS:
2567                 {
2568                         struct sctp_pcbinfo *spcb;
2569
2570                         SCTP_CHECK_AND_CAST(spcb, optval, struct sctp_pcbinfo, *optsize);
2571                         sctp_fill_pcbinfo(spcb);
2572                         *optsize = sizeof(struct sctp_pcbinfo);
2573                         break;
2574                 }
2575         case SCTP_STATUS:
2576                 {
2577                         struct sctp_nets *net;
2578                         struct sctp_status *sstat;
2579
2580                         SCTP_CHECK_AND_CAST(sstat, optval, struct sctp_status, *optsize);
2581                         SCTP_FIND_STCB(inp, stcb, sstat->sstat_assoc_id);
2582
2583                         if (stcb == NULL) {
2584                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2585                                 error = EINVAL;
2586                                 break;
2587                         }
2588                         /*
2589                          * I think passing the state is fine since
2590                          * sctp_constants.h will be available to the user
2591                          * land.
2592                          */
2593                         sstat->sstat_state = stcb->asoc.state;
2594                         sstat->sstat_assoc_id = sctp_get_associd(stcb);
2595                         sstat->sstat_rwnd = stcb->asoc.peers_rwnd;
2596                         sstat->sstat_unackdata = stcb->asoc.sent_queue_cnt;
2597                         /*
2598                          * We can't include chunks that have been passed to
2599                          * the socket layer. Only things in queue.
2600                          */
2601                         sstat->sstat_penddata = (stcb->asoc.cnt_on_reasm_queue +
2602                             stcb->asoc.cnt_on_all_streams);
2603
2604
2605                         sstat->sstat_instrms = stcb->asoc.streamincnt;
2606                         sstat->sstat_outstrms = stcb->asoc.streamoutcnt;
2607                         sstat->sstat_fragmentation_point = sctp_get_frag_point(stcb, &stcb->asoc);
2608                         memcpy(&sstat->sstat_primary.spinfo_address,
2609                             &stcb->asoc.primary_destination->ro._l_addr,
2610                             ((struct sockaddr *)(&stcb->asoc.primary_destination->ro._l_addr))->sa_len);
2611                         net = stcb->asoc.primary_destination;
2612                         ((struct sockaddr_in *)&sstat->sstat_primary.spinfo_address)->sin_port = stcb->rport;
2613                         /*
2614                          * Again the user can get info from sctp_constants.h
2615                          * for what the state of the network is.
2616                          */
2617                         if (net->dest_state & SCTP_ADDR_UNCONFIRMED) {
2618                                 /* It's unconfirmed */
2619                                 sstat->sstat_primary.spinfo_state = SCTP_UNCONFIRMED;
2620                         } else if (net->dest_state & SCTP_ADDR_REACHABLE) {
2621                                 /* It's active */
2622                                 sstat->sstat_primary.spinfo_state = SCTP_ACTIVE;
2623                         } else {
2624                                 /* It's inactive */
2625                                 sstat->sstat_primary.spinfo_state = SCTP_INACTIVE;
2626                         }
2627                         sstat->sstat_primary.spinfo_cwnd = net->cwnd;
2628                         sstat->sstat_primary.spinfo_srtt = net->lastsa >> SCTP_RTT_SHIFT;
2629                         sstat->sstat_primary.spinfo_rto = net->RTO;
2630                         sstat->sstat_primary.spinfo_mtu = net->mtu;
2631                         sstat->sstat_primary.spinfo_assoc_id = sctp_get_associd(stcb);
2632                         SCTP_TCB_UNLOCK(stcb);
2633                         *optsize = sizeof(struct sctp_status);
2634                         break;
2635                 }
2636         case SCTP_RTOINFO:
2637                 {
2638                         struct sctp_rtoinfo *srto;
2639
2640                         SCTP_CHECK_AND_CAST(srto, optval, struct sctp_rtoinfo, *optsize);
2641                         SCTP_FIND_STCB(inp, stcb, srto->srto_assoc_id);
2642
2643                         if (stcb) {
2644                                 srto->srto_initial = stcb->asoc.initial_rto;
2645                                 srto->srto_max = stcb->asoc.maxrto;
2646                                 srto->srto_min = stcb->asoc.minrto;
2647                                 SCTP_TCB_UNLOCK(stcb);
2648                         } else {
2649                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2650                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2651                                     (srto->srto_assoc_id == SCTP_FUTURE_ASSOC)) {
2652                                         SCTP_INP_RLOCK(inp);
2653                                         srto->srto_initial = inp->sctp_ep.initial_rto;
2654                                         srto->srto_max = inp->sctp_ep.sctp_maxrto;
2655                                         srto->srto_min = inp->sctp_ep.sctp_minrto;
2656                                         SCTP_INP_RUNLOCK(inp);
2657                                 } else {
2658                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2659                                         error = EINVAL;
2660                                 }
2661                         }
2662                         if (error == 0) {
2663                                 *optsize = sizeof(struct sctp_rtoinfo);
2664                         }
2665                         break;
2666                 }
2667         case SCTP_TIMEOUTS:
2668                 {
2669                         struct sctp_timeouts *stimo;
2670
2671                         SCTP_CHECK_AND_CAST(stimo, optval, struct sctp_timeouts, *optsize);
2672                         SCTP_FIND_STCB(inp, stcb, stimo->stimo_assoc_id);
2673
2674                         if (stcb) {
2675                                 stimo->stimo_init = stcb->asoc.timoinit;
2676                                 stimo->stimo_data = stcb->asoc.timodata;
2677                                 stimo->stimo_sack = stcb->asoc.timosack;
2678                                 stimo->stimo_shutdown = stcb->asoc.timoshutdown;
2679                                 stimo->stimo_heartbeat = stcb->asoc.timoheartbeat;
2680                                 stimo->stimo_cookie = stcb->asoc.timocookie;
2681                                 stimo->stimo_shutdownack = stcb->asoc.timoshutdownack;
2682                                 SCTP_TCB_UNLOCK(stcb);
2683                                 *optsize = sizeof(struct sctp_timeouts);
2684                         } else {
2685                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2686                                 error = EINVAL;
2687                         }
2688                         break;
2689                 }
2690         case SCTP_ASSOCINFO:
2691                 {
2692                         struct sctp_assocparams *sasoc;
2693
2694                         SCTP_CHECK_AND_CAST(sasoc, optval, struct sctp_assocparams, *optsize);
2695                         SCTP_FIND_STCB(inp, stcb, sasoc->sasoc_assoc_id);
2696
2697                         if (stcb) {
2698                                 sasoc->sasoc_cookie_life = TICKS_TO_MSEC(stcb->asoc.cookie_life);
2699                                 sasoc->sasoc_asocmaxrxt = stcb->asoc.max_send_times;
2700                                 sasoc->sasoc_number_peer_destinations = stcb->asoc.numnets;
2701                                 sasoc->sasoc_peer_rwnd = stcb->asoc.peers_rwnd;
2702                                 sasoc->sasoc_local_rwnd = stcb->asoc.my_rwnd;
2703                                 SCTP_TCB_UNLOCK(stcb);
2704                         } else {
2705                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2706                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2707                                     (sasoc->sasoc_assoc_id == SCTP_FUTURE_ASSOC)) {
2708                                         SCTP_INP_RLOCK(inp);
2709                                         sasoc->sasoc_cookie_life = TICKS_TO_MSEC(inp->sctp_ep.def_cookie_life);
2710                                         sasoc->sasoc_asocmaxrxt = inp->sctp_ep.max_send_times;
2711                                         sasoc->sasoc_number_peer_destinations = 0;
2712                                         sasoc->sasoc_peer_rwnd = 0;
2713                                         sasoc->sasoc_local_rwnd = sbspace(&inp->sctp_socket->so_rcv);
2714                                         SCTP_INP_RUNLOCK(inp);
2715                                 } else {
2716                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2717                                         error = EINVAL;
2718                                 }
2719                         }
2720                         if (error == 0) {
2721                                 *optsize = sizeof(struct sctp_assocparams);
2722                         }
2723                         break;
2724                 }
2725         case SCTP_DEFAULT_SEND_PARAM:
2726                 {
2727                         struct sctp_sndrcvinfo *s_info;
2728
2729                         SCTP_CHECK_AND_CAST(s_info, optval, struct sctp_sndrcvinfo, *optsize);
2730                         SCTP_FIND_STCB(inp, stcb, s_info->sinfo_assoc_id);
2731
2732                         if (stcb) {
2733                                 memcpy(s_info, &stcb->asoc.def_send, sizeof(stcb->asoc.def_send));
2734                                 SCTP_TCB_UNLOCK(stcb);
2735                         } else {
2736                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2737                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2738                                     (s_info->sinfo_assoc_id == SCTP_FUTURE_ASSOC)) {
2739                                         SCTP_INP_RLOCK(inp);
2740                                         memcpy(s_info, &inp->def_send, sizeof(inp->def_send));
2741                                         SCTP_INP_RUNLOCK(inp);
2742                                 } else {
2743                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2744                                         error = EINVAL;
2745                                 }
2746                         }
2747                         if (error == 0) {
2748                                 *optsize = sizeof(struct sctp_sndrcvinfo);
2749                         }
2750                         break;
2751                 }
2752         case SCTP_INITMSG:
2753                 {
2754                         struct sctp_initmsg *sinit;
2755
2756                         SCTP_CHECK_AND_CAST(sinit, optval, struct sctp_initmsg, *optsize);
2757                         SCTP_INP_RLOCK(inp);
2758                         sinit->sinit_num_ostreams = inp->sctp_ep.pre_open_stream_count;
2759                         sinit->sinit_max_instreams = inp->sctp_ep.max_open_streams_intome;
2760                         sinit->sinit_max_attempts = inp->sctp_ep.max_init_times;
2761                         sinit->sinit_max_init_timeo = inp->sctp_ep.initial_init_rto_max;
2762                         SCTP_INP_RUNLOCK(inp);
2763                         *optsize = sizeof(struct sctp_initmsg);
2764                         break;
2765                 }
2766         case SCTP_PRIMARY_ADDR:
2767                 /* we allow a "get" operation on this */
2768                 {
2769                         struct sctp_setprim *ssp;
2770
2771                         SCTP_CHECK_AND_CAST(ssp, optval, struct sctp_setprim, *optsize);
2772                         SCTP_FIND_STCB(inp, stcb, ssp->ssp_assoc_id);
2773
2774                         if (stcb) {
2775                                 /* simply copy out the sockaddr_storage... */
2776                                 size_t len;
2777
2778                                 len = *optsize;
2779                                 if (len > stcb->asoc.primary_destination->ro._l_addr.sa.sa_len)
2780                                         len = stcb->asoc.primary_destination->ro._l_addr.sa.sa_len;
2781
2782                                 memcpy(&ssp->ssp_addr,
2783                                     &stcb->asoc.primary_destination->ro._l_addr,
2784                                     len);
2785                                 SCTP_TCB_UNLOCK(stcb);
2786                                 *optsize = sizeof(struct sctp_setprim);
2787                         } else {
2788                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2789                                 error = EINVAL;
2790                         }
2791                         break;
2792                 }
2793         case SCTP_HMAC_IDENT:
2794                 {
2795                         struct sctp_hmacalgo *shmac;
2796                         sctp_hmaclist_t *hmaclist;
2797                         uint32_t size;
2798                         int i;
2799
2800                         SCTP_CHECK_AND_CAST(shmac, optval, struct sctp_hmacalgo, *optsize);
2801
2802                         SCTP_INP_RLOCK(inp);
2803                         hmaclist = inp->sctp_ep.local_hmacs;
2804                         if (hmaclist == NULL) {
2805                                 /* no HMACs to return */
2806                                 *optsize = sizeof(*shmac);
2807                                 SCTP_INP_RUNLOCK(inp);
2808                                 break;
2809                         }
2810                         /* is there room for all of the hmac ids? */
2811                         size = sizeof(*shmac) + (hmaclist->num_algo *
2812                             sizeof(shmac->shmac_idents[0]));
2813                         if ((size_t)(*optsize) < size) {
2814                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2815                                 error = EINVAL;
2816                                 SCTP_INP_RUNLOCK(inp);
2817                                 break;
2818                         }
2819                         /* copy in the list */
2820                         shmac->shmac_number_of_idents = hmaclist->num_algo;
2821                         for (i = 0; i < hmaclist->num_algo; i++) {
2822                                 shmac->shmac_idents[i] = hmaclist->hmac[i];
2823                         }
2824                         SCTP_INP_RUNLOCK(inp);
2825                         *optsize = size;
2826                         break;
2827                 }
2828         case SCTP_AUTH_ACTIVE_KEY:
2829                 {
2830                         struct sctp_authkeyid *scact;
2831
2832                         SCTP_CHECK_AND_CAST(scact, optval, struct sctp_authkeyid, *optsize);
2833                         SCTP_FIND_STCB(inp, stcb, scact->scact_assoc_id);
2834
2835                         if (stcb) {
2836                                 /* get the active key on the assoc */
2837                                 scact->scact_keynumber = stcb->asoc.authinfo.active_keyid;
2838                                 SCTP_TCB_UNLOCK(stcb);
2839                         } else {
2840                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2841                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2842                                     (scact->scact_assoc_id == SCTP_FUTURE_ASSOC)) {
2843                                         /* get the endpoint active key */
2844                                         SCTP_INP_RLOCK(inp);
2845                                         scact->scact_keynumber = inp->sctp_ep.default_keyid;
2846                                         SCTP_INP_RUNLOCK(inp);
2847                                 } else {
2848                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2849                                         error = EINVAL;
2850                                 }
2851                         }
2852                         if (error == 0) {
2853                                 *optsize = sizeof(struct sctp_authkeyid);
2854                         }
2855                         break;
2856                 }
2857         case SCTP_LOCAL_AUTH_CHUNKS:
2858                 {
2859                         struct sctp_authchunks *sac;
2860                         sctp_auth_chklist_t *chklist = NULL;
2861                         size_t size = 0;
2862
2863                         SCTP_CHECK_AND_CAST(sac, optval, struct sctp_authchunks, *optsize);
2864                         SCTP_FIND_STCB(inp, stcb, sac->gauth_assoc_id);
2865
2866                         if (stcb) {
2867                                 /* get off the assoc */
2868                                 chklist = stcb->asoc.local_auth_chunks;
2869                                 /* is there enough space? */
2870                                 size = sctp_auth_get_chklist_size(chklist);
2871                                 if (*optsize < (sizeof(struct sctp_authchunks) + size)) {
2872                                         error = EINVAL;
2873                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2874                                 } else {
2875                                         /* copy in the chunks */
2876                                         (void)sctp_serialize_auth_chunks(chklist, sac->gauth_chunks);
2877                                         sac->gauth_number_of_chunks = (uint32_t) size;
2878                                         *optsize = sizeof(struct sctp_authchunks) + size;
2879                                 }
2880                                 SCTP_TCB_UNLOCK(stcb);
2881                         } else {
2882                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
2883                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
2884                                     (sac->gauth_assoc_id == SCTP_FUTURE_ASSOC)) {
2885                                         /* get off the endpoint */
2886                                         SCTP_INP_RLOCK(inp);
2887                                         chklist = inp->sctp_ep.local_auth_chunks;
2888                                         /* is there enough space? */
2889                                         size = sctp_auth_get_chklist_size(chklist);
2890                                         if (*optsize < (sizeof(struct sctp_authchunks) + size)) {
2891                                                 error = EINVAL;
2892                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2893                                         } else {
2894                                                 /* copy in the chunks */
2895                                                 (void)sctp_serialize_auth_chunks(chklist, sac->gauth_chunks);
2896                                                 sac->gauth_number_of_chunks = (uint32_t) size;
2897                                                 *optsize = sizeof(struct sctp_authchunks) + size;
2898                                         }
2899                                         SCTP_INP_RUNLOCK(inp);
2900                                 } else {
2901                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2902                                         error = EINVAL;
2903                                 }
2904                         }
2905                         break;
2906                 }
2907         case SCTP_PEER_AUTH_CHUNKS:
2908                 {
2909                         struct sctp_authchunks *sac;
2910                         sctp_auth_chklist_t *chklist = NULL;
2911                         size_t size = 0;
2912
2913                         SCTP_CHECK_AND_CAST(sac, optval, struct sctp_authchunks, *optsize);
2914                         SCTP_FIND_STCB(inp, stcb, sac->gauth_assoc_id);
2915
2916                         if (stcb) {
2917                                 /* get off the assoc */
2918                                 chklist = stcb->asoc.peer_auth_chunks;
2919                                 /* is there enough space? */
2920                                 size = sctp_auth_get_chklist_size(chklist);
2921                                 if (*optsize < (sizeof(struct sctp_authchunks) + size)) {
2922                                         error = EINVAL;
2923                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
2924                                 } else {
2925                                         /* copy in the chunks */
2926                                         (void)sctp_serialize_auth_chunks(chklist, sac->gauth_chunks);
2927                                         sac->gauth_number_of_chunks = (uint32_t) size;
2928                                         *optsize = sizeof(struct sctp_authchunks) + size;
2929                                 }
2930                                 SCTP_TCB_UNLOCK(stcb);
2931                         } else {
2932                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
2933                                 error = ENOENT;
2934                         }
2935                         break;
2936                 }
2937         case SCTP_EVENT:
2938                 {
2939                         struct sctp_event *event;
2940                         uint32_t event_type;
2941
2942                         SCTP_CHECK_AND_CAST(event, optval, struct sctp_event, *optsize);
2943                         SCTP_FIND_STCB(inp, stcb, event->se_assoc_id);
2944
2945                         switch (event->se_type) {
2946                         case SCTP_ASSOC_CHANGE:
2947                                 event_type = SCTP_PCB_FLAGS_RECVASSOCEVNT;
2948                                 break;
2949                         case SCTP_PEER_ADDR_CHANGE:
2950                                 event_type = SCTP_PCB_FLAGS_RECVPADDREVNT;
2951                                 break;
2952                         case SCTP_REMOTE_ERROR:
2953                                 event_type = SCTP_PCB_FLAGS_RECVPEERERR;
2954                                 break;
2955                         case SCTP_SEND_FAILED:
2956                                 event_type = SCTP_PCB_FLAGS_RECVSENDFAILEVNT;
2957                                 break;
2958                         case SCTP_SHUTDOWN_EVENT:
2959                                 event_type = SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT;
2960                                 break;
2961                         case SCTP_ADAPTATION_INDICATION:
2962                                 event_type = SCTP_PCB_FLAGS_ADAPTATIONEVNT;
2963                                 break;
2964                         case SCTP_PARTIAL_DELIVERY_EVENT:
2965                                 event_type = SCTP_PCB_FLAGS_PDAPIEVNT;
2966                                 break;
2967                         case SCTP_AUTHENTICATION_EVENT:
2968                                 event_type = SCTP_PCB_FLAGS_AUTHEVNT;
2969                                 break;
2970                         case SCTP_STREAM_RESET_EVENT:
2971                                 event_type = SCTP_PCB_FLAGS_STREAM_RESETEVNT;
2972                                 break;
2973                         case SCTP_SENDER_DRY_EVENT:
2974                                 event_type = SCTP_PCB_FLAGS_DRYEVNT;
2975                                 break;
2976                         case SCTP_NOTIFICATIONS_STOPPED_EVENT:
2977                                 event_type = 0;
2978                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTSUP);
2979                                 error = ENOTSUP;
2980                                 break;
2981                         case SCTP_ASSOC_RESET_EVENT:
2982                                 event_type = SCTP_PCB_FLAGS_ASSOC_RESETEVNT;
2983                                 break;
2984                         case SCTP_STREAM_CHANGE_EVENT:
2985                                 event_type = SCTP_PCB_FLAGS_STREAM_CHANGEEVNT;
2986                                 break;
2987                         case SCTP_SEND_FAILED_EVENT:
2988                                 event_type = SCTP_PCB_FLAGS_RECVNSENDFAILEVNT;
2989                                 break;
2990                         default:
2991                                 event_type = 0;
2992                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
2993                                 error = EINVAL;
2994                                 break;
2995                         }
2996                         if (event_type > 0) {
2997                                 if (stcb) {
2998                                         event->se_on = sctp_stcb_is_feature_on(inp, stcb, event_type);
2999                                         SCTP_TCB_UNLOCK(stcb);
3000                                 } else {
3001                                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3002                                             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3003                                             (event->se_assoc_id == SCTP_FUTURE_ASSOC)) {
3004                                                 SCTP_INP_RLOCK(inp);
3005                                                 event->se_on = sctp_is_feature_on(inp, event_type);
3006                                                 SCTP_INP_RUNLOCK(inp);
3007                                         } else {
3008                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3009                                                 error = EINVAL;
3010                                         }
3011                                 }
3012                         }
3013                         if (error == 0) {
3014                                 *optsize = sizeof(struct sctp_event);
3015                         }
3016                         break;
3017                 }
3018         case SCTP_RECVRCVINFO:
3019                 {
3020                         int onoff;
3021
3022                         if (*optsize < sizeof(int)) {
3023                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3024                                 error = EINVAL;
3025                         } else {
3026                                 SCTP_INP_RLOCK(inp);
3027                                 onoff = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVRCVINFO);
3028                                 SCTP_INP_RUNLOCK(inp);
3029                         }
3030                         if (error == 0) {
3031                                 /* return the option value */
3032                                 *(int *)optval = onoff;
3033                                 *optsize = sizeof(int);
3034                         }
3035                         break;
3036                 }
3037         case SCTP_RECVNXTINFO:
3038                 {
3039                         int onoff;
3040
3041                         if (*optsize < sizeof(int)) {
3042                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3043                                 error = EINVAL;
3044                         } else {
3045                                 SCTP_INP_RLOCK(inp);
3046                                 onoff = sctp_is_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO);
3047                                 SCTP_INP_RUNLOCK(inp);
3048                         }
3049                         if (error == 0) {
3050                                 /* return the option value */
3051                                 *(int *)optval = onoff;
3052                                 *optsize = sizeof(int);
3053                         }
3054                         break;
3055                 }
3056         case SCTP_DEFAULT_SNDINFO:
3057                 {
3058                         struct sctp_sndinfo *info;
3059
3060                         SCTP_CHECK_AND_CAST(info, optval, struct sctp_sndinfo, *optsize);
3061                         SCTP_FIND_STCB(inp, stcb, info->snd_assoc_id);
3062
3063                         if (stcb) {
3064                                 info->snd_sid = stcb->asoc.def_send.sinfo_stream;
3065                                 info->snd_flags = stcb->asoc.def_send.sinfo_flags;
3066                                 info->snd_flags &= 0xfff0;
3067                                 info->snd_ppid = stcb->asoc.def_send.sinfo_ppid;
3068                                 info->snd_context = stcb->asoc.def_send.sinfo_context;
3069                                 SCTP_TCB_UNLOCK(stcb);
3070                         } else {
3071                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3072                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3073                                     (info->snd_assoc_id == SCTP_FUTURE_ASSOC)) {
3074                                         SCTP_INP_RLOCK(inp);
3075                                         info->snd_sid = inp->def_send.sinfo_stream;
3076                                         info->snd_flags = inp->def_send.sinfo_flags;
3077                                         info->snd_flags &= 0xfff0;
3078                                         info->snd_ppid = inp->def_send.sinfo_ppid;
3079                                         info->snd_context = inp->def_send.sinfo_context;
3080                                         SCTP_INP_RUNLOCK(inp);
3081                                 } else {
3082                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3083                                         error = EINVAL;
3084                                 }
3085                         }
3086                         if (error == 0) {
3087                                 *optsize = sizeof(struct sctp_sndinfo);
3088                         }
3089                         break;
3090                 }
3091         case SCTP_DEFAULT_PRINFO:
3092                 {
3093                         struct sctp_default_prinfo *info;
3094
3095                         SCTP_CHECK_AND_CAST(info, optval, struct sctp_default_prinfo, *optsize);
3096                         SCTP_FIND_STCB(inp, stcb, info->pr_assoc_id);
3097
3098                         if (stcb) {
3099                                 info->pr_policy = PR_SCTP_POLICY(stcb->asoc.def_send.sinfo_flags);
3100                                 info->pr_value = stcb->asoc.def_send.sinfo_timetolive;
3101                                 SCTP_TCB_UNLOCK(stcb);
3102                         } else {
3103                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3104                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3105                                     (info->pr_assoc_id == SCTP_FUTURE_ASSOC)) {
3106                                         SCTP_INP_RLOCK(inp);
3107                                         info->pr_policy = PR_SCTP_POLICY(inp->def_send.sinfo_flags);
3108                                         info->pr_value = inp->def_send.sinfo_timetolive;
3109                                         SCTP_INP_RUNLOCK(inp);
3110                                 } else {
3111                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3112                                         error = EINVAL;
3113                                 }
3114                         }
3115                         if (error == 0) {
3116                                 *optsize = sizeof(struct sctp_default_prinfo);
3117                         }
3118                         break;
3119                 }
3120         case SCTP_PEER_ADDR_THLDS:
3121                 {
3122                         struct sctp_paddrthlds *thlds;
3123                         struct sctp_nets *net;
3124
3125                         SCTP_CHECK_AND_CAST(thlds, optval, struct sctp_paddrthlds, *optsize);
3126                         SCTP_FIND_STCB(inp, stcb, thlds->spt_assoc_id);
3127
3128                         net = NULL;
3129                         if (stcb) {
3130                                 net = sctp_findnet(stcb, (struct sockaddr *)&thlds->spt_address);
3131                         } else {
3132                                 /*
3133                                  * We increment here since
3134                                  * sctp_findassociation_ep_addr() wil do a
3135                                  * decrement if it finds the stcb as long as
3136                                  * the locked tcb (last argument) is NOT a
3137                                  * TCB.. aka NULL.
3138                                  */
3139                                 SCTP_INP_INCR_REF(inp);
3140                                 stcb = sctp_findassociation_ep_addr(&inp, (struct sockaddr *)&thlds->spt_address, &net, NULL, NULL);
3141                                 if (stcb == NULL) {
3142                                         SCTP_INP_DECR_REF(inp);
3143                                 }
3144                         }
3145                         if (stcb && (net == NULL)) {
3146                                 struct sockaddr *sa;
3147
3148                                 sa = (struct sockaddr *)&thlds->spt_address;
3149 #ifdef INET
3150                                 if (sa->sa_family == AF_INET) {
3151                                         struct sockaddr_in *sin;
3152
3153                                         sin = (struct sockaddr_in *)sa;
3154                                         if (sin->sin_addr.s_addr) {
3155                                                 error = EINVAL;
3156                                                 SCTP_TCB_UNLOCK(stcb);
3157                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3158                                                 break;
3159                                         }
3160                                 } else
3161 #endif
3162 #ifdef INET6
3163                                 if (sa->sa_family == AF_INET6) {
3164                                         struct sockaddr_in6 *sin6;
3165
3166                                         sin6 = (struct sockaddr_in6 *)sa;
3167                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
3168                                                 error = EINVAL;
3169                                                 SCTP_TCB_UNLOCK(stcb);
3170                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3171                                                 break;
3172                                         }
3173                                 } else
3174 #endif
3175                                 {
3176                                         error = EAFNOSUPPORT;
3177                                         SCTP_TCB_UNLOCK(stcb);
3178                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3179                                         break;
3180                                 }
3181                         }
3182                         if (stcb) {
3183                                 if (net) {
3184                                         thlds->spt_pathmaxrxt = net->failure_threshold;
3185                                         thlds->spt_pathpfthld = net->pf_threshold;
3186                                 } else {
3187                                         thlds->spt_pathmaxrxt = stcb->asoc.def_net_failure;
3188                                         thlds->spt_pathpfthld = stcb->asoc.def_net_pf_threshold;
3189                                 }
3190                                 thlds->spt_assoc_id = sctp_get_associd(stcb);
3191                                 SCTP_TCB_UNLOCK(stcb);
3192                         } else {
3193                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3194                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3195                                     (thlds->spt_assoc_id == SCTP_FUTURE_ASSOC)) {
3196                                         /* Use endpoint defaults */
3197                                         SCTP_INP_RLOCK(inp);
3198                                         thlds->spt_pathmaxrxt = inp->sctp_ep.def_net_failure;
3199                                         thlds->spt_pathpfthld = inp->sctp_ep.def_net_pf_threshold;
3200                                         SCTP_INP_RUNLOCK(inp);
3201                                 } else {
3202                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3203                                         error = EINVAL;
3204                                 }
3205                         }
3206                         if (error == 0) {
3207                                 *optsize = sizeof(struct sctp_paddrthlds);
3208                         }
3209                         break;
3210                 }
3211         case SCTP_REMOTE_UDP_ENCAPS_PORT:
3212                 {
3213                         struct sctp_udpencaps *encaps;
3214                         struct sctp_nets *net;
3215
3216                         SCTP_CHECK_AND_CAST(encaps, optval, struct sctp_udpencaps, *optsize);
3217                         SCTP_FIND_STCB(inp, stcb, encaps->sue_assoc_id);
3218
3219                         if (stcb) {
3220                                 net = sctp_findnet(stcb, (struct sockaddr *)&encaps->sue_address);
3221                         } else {
3222                                 /*
3223                                  * We increment here since
3224                                  * sctp_findassociation_ep_addr() wil do a
3225                                  * decrement if it finds the stcb as long as
3226                                  * the locked tcb (last argument) is NOT a
3227                                  * TCB.. aka NULL.
3228                                  */
3229                                 net = NULL;
3230                                 SCTP_INP_INCR_REF(inp);
3231                                 stcb = sctp_findassociation_ep_addr(&inp, (struct sockaddr *)&encaps->sue_address, &net, NULL, NULL);
3232                                 if (stcb == NULL) {
3233                                         SCTP_INP_DECR_REF(inp);
3234                                 }
3235                         }
3236                         if (stcb && (net == NULL)) {
3237                                 struct sockaddr *sa;
3238
3239                                 sa = (struct sockaddr *)&encaps->sue_address;
3240 #ifdef INET
3241                                 if (sa->sa_family == AF_INET) {
3242                                         struct sockaddr_in *sin;
3243
3244                                         sin = (struct sockaddr_in *)sa;
3245                                         if (sin->sin_addr.s_addr) {
3246                                                 error = EINVAL;
3247                                                 SCTP_TCB_UNLOCK(stcb);
3248                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3249                                                 break;
3250                                         }
3251                                 } else
3252 #endif
3253 #ifdef INET6
3254                                 if (sa->sa_family == AF_INET6) {
3255                                         struct sockaddr_in6 *sin6;
3256
3257                                         sin6 = (struct sockaddr_in6 *)sa;
3258                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
3259                                                 error = EINVAL;
3260                                                 SCTP_TCB_UNLOCK(stcb);
3261                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3262                                                 break;
3263                                         }
3264                                 } else
3265 #endif
3266                                 {
3267                                         error = EAFNOSUPPORT;
3268                                         SCTP_TCB_UNLOCK(stcb);
3269                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
3270                                         break;
3271                                 }
3272                         }
3273                         if (stcb) {
3274                                 if (net) {
3275                                         encaps->sue_port = net->port;
3276                                 } else {
3277                                         encaps->sue_port = stcb->asoc.port;
3278                                 }
3279                                 SCTP_TCB_UNLOCK(stcb);
3280                         } else {
3281                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3282                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3283                                     (encaps->sue_assoc_id == SCTP_FUTURE_ASSOC)) {
3284                                         SCTP_INP_RLOCK(inp);
3285                                         encaps->sue_port = inp->sctp_ep.port;
3286                                         SCTP_INP_RUNLOCK(inp);
3287                                 } else {
3288                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3289                                         error = EINVAL;
3290                                 }
3291                         }
3292                         if (error == 0) {
3293                                 *optsize = sizeof(struct sctp_udpencaps);
3294                         }
3295                         break;
3296                 }
3297         case SCTP_ECN_SUPPORTED:
3298                 {
3299                         struct sctp_assoc_value *av;
3300
3301                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
3302                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3303
3304                         if (stcb) {
3305                                 av->assoc_value = stcb->asoc.ecn_supported;
3306                                 SCTP_TCB_UNLOCK(stcb);
3307                         } else {
3308                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3309                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3310                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
3311                                         SCTP_INP_RLOCK(inp);
3312                                         av->assoc_value = inp->ecn_supported;
3313                                         SCTP_INP_RUNLOCK(inp);
3314                                 } else {
3315                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3316                                         error = EINVAL;
3317                                 }
3318                         }
3319                         if (error == 0) {
3320                                 *optsize = sizeof(struct sctp_assoc_value);
3321                         }
3322                         break;
3323                 }
3324         case SCTP_PR_SUPPORTED:
3325                 {
3326                         struct sctp_assoc_value *av;
3327
3328                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
3329                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3330
3331                         if (stcb) {
3332                                 av->assoc_value = stcb->asoc.prsctp_supported;
3333                                 SCTP_TCB_UNLOCK(stcb);
3334                         } else {
3335                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3336                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3337                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
3338                                         SCTP_INP_RLOCK(inp);
3339                                         av->assoc_value = inp->prsctp_supported;
3340                                         SCTP_INP_RUNLOCK(inp);
3341                                 } else {
3342                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3343                                         error = EINVAL;
3344                                 }
3345                         }
3346                         if (error == 0) {
3347                                 *optsize = sizeof(struct sctp_assoc_value);
3348                         }
3349                         break;
3350                 }
3351         case SCTP_NRSACK_SUPPORTED:
3352                 {
3353                         struct sctp_assoc_value *av;
3354
3355                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
3356                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3357
3358                         if (stcb) {
3359                                 av->assoc_value = stcb->asoc.nrsack_supported;
3360                                 SCTP_TCB_UNLOCK(stcb);
3361                         } else {
3362                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3363                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3364                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
3365                                         SCTP_INP_RLOCK(inp);
3366                                         av->assoc_value = inp->nrsack_supported;
3367                                         SCTP_INP_RUNLOCK(inp);
3368                                 } else {
3369                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3370                                         error = EINVAL;
3371                                 }
3372                         }
3373                         if (error == 0) {
3374                                 *optsize = sizeof(struct sctp_assoc_value);
3375                         }
3376                         break;
3377                 }
3378         case SCTP_PKTDROP_SUPPORTED:
3379                 {
3380                         struct sctp_assoc_value *av;
3381
3382                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
3383                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3384
3385                         if (stcb) {
3386                                 av->assoc_value = stcb->asoc.pktdrop_supported;
3387                                 SCTP_TCB_UNLOCK(stcb);
3388                         } else {
3389                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3390                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3391                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
3392                                         SCTP_INP_RLOCK(inp);
3393                                         av->assoc_value = inp->pktdrop_supported;
3394                                         SCTP_INP_RUNLOCK(inp);
3395                                 } else {
3396                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3397                                         error = EINVAL;
3398                                 }
3399                         }
3400                         if (error == 0) {
3401                                 *optsize = sizeof(struct sctp_assoc_value);
3402                         }
3403                         break;
3404                 }
3405         case SCTP_ENABLE_STREAM_RESET:
3406                 {
3407                         struct sctp_assoc_value *av;
3408
3409                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, *optsize);
3410                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3411
3412                         if (stcb) {
3413                                 av->assoc_value = (uint32_t) stcb->asoc.local_strreset_support;
3414                                 SCTP_TCB_UNLOCK(stcb);
3415                         } else {
3416                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3417                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3418                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
3419                                         SCTP_INP_RLOCK(inp);
3420                                         av->assoc_value = (uint32_t) inp->local_strreset_support;
3421                                         SCTP_INP_RUNLOCK(inp);
3422                                 } else {
3423                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3424                                         error = EINVAL;
3425                                 }
3426                         }
3427                         if (error == 0) {
3428                                 *optsize = sizeof(struct sctp_assoc_value);
3429                         }
3430                         break;
3431                 }
3432         default:
3433                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOPROTOOPT);
3434                 error = ENOPROTOOPT;
3435                 break;
3436         }                       /* end switch (sopt->sopt_name) */
3437         if (error) {
3438                 *optsize = 0;
3439         }
3440         return (error);
3441 }
3442
3443 static int
3444 sctp_setopt(struct socket *so, int optname, void *optval, size_t optsize,
3445     void *p)
3446 {
3447         int error, set_opt;
3448         uint32_t *mopt;
3449         struct sctp_tcb *stcb = NULL;
3450         struct sctp_inpcb *inp = NULL;
3451         uint32_t vrf_id;
3452
3453         if (optval == NULL) {
3454                 SCTP_PRINTF("optval is NULL\n");
3455                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3456                 return (EINVAL);
3457         }
3458         inp = (struct sctp_inpcb *)so->so_pcb;
3459         if (inp == NULL) {
3460                 SCTP_PRINTF("inp is NULL?\n");
3461                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3462                 return (EINVAL);
3463         }
3464         vrf_id = inp->def_vrf_id;
3465
3466         error = 0;
3467         switch (optname) {
3468         case SCTP_NODELAY:
3469         case SCTP_AUTOCLOSE:
3470         case SCTP_AUTO_ASCONF:
3471         case SCTP_EXPLICIT_EOR:
3472         case SCTP_DISABLE_FRAGMENTS:
3473         case SCTP_USE_EXT_RCVINFO:
3474         case SCTP_I_WANT_MAPPED_V4_ADDR:
3475                 /* copy in the option value */
3476                 SCTP_CHECK_AND_CAST(mopt, optval, uint32_t, optsize);
3477                 set_opt = 0;
3478                 if (error)
3479                         break;
3480                 switch (optname) {
3481                 case SCTP_DISABLE_FRAGMENTS:
3482                         set_opt = SCTP_PCB_FLAGS_NO_FRAGMENT;
3483                         break;
3484                 case SCTP_AUTO_ASCONF:
3485                         /*
3486                          * NOTE: we don't really support this flag
3487                          */
3488                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
3489                                 /* only valid for bound all sockets */
3490                                 if ((SCTP_BASE_SYSCTL(sctp_auto_asconf) == 0) &&
3491                                     (*mopt != 0)) {
3492                                         /* forbidden by admin */
3493                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EPERM);
3494                                         return (EPERM);
3495                                 }
3496                                 set_opt = SCTP_PCB_FLAGS_AUTO_ASCONF;
3497                         } else {
3498                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3499                                 return (EINVAL);
3500                         }
3501                         break;
3502                 case SCTP_EXPLICIT_EOR:
3503                         set_opt = SCTP_PCB_FLAGS_EXPLICIT_EOR;
3504                         break;
3505                 case SCTP_USE_EXT_RCVINFO:
3506                         set_opt = SCTP_PCB_FLAGS_EXT_RCVINFO;
3507                         break;
3508                 case SCTP_I_WANT_MAPPED_V4_ADDR:
3509                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
3510                                 set_opt = SCTP_PCB_FLAGS_NEEDS_MAPPED_V4;
3511                         } else {
3512                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3513                                 return (EINVAL);
3514                         }
3515                         break;
3516                 case SCTP_NODELAY:
3517                         set_opt = SCTP_PCB_FLAGS_NODELAY;
3518                         break;
3519                 case SCTP_AUTOCLOSE:
3520                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3521                             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
3522                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3523                                 return (EINVAL);
3524                         }
3525                         set_opt = SCTP_PCB_FLAGS_AUTOCLOSE;
3526                         /*
3527                          * The value is in ticks. Note this does not effect
3528                          * old associations, only new ones.
3529                          */
3530                         inp->sctp_ep.auto_close_time = SEC_TO_TICKS(*mopt);
3531                         break;
3532                 }
3533                 SCTP_INP_WLOCK(inp);
3534                 if (*mopt != 0) {
3535                         sctp_feature_on(inp, set_opt);
3536                 } else {
3537                         sctp_feature_off(inp, set_opt);
3538                 }
3539                 SCTP_INP_WUNLOCK(inp);
3540                 break;
3541         case SCTP_REUSE_PORT:
3542                 {
3543                         SCTP_CHECK_AND_CAST(mopt, optval, uint32_t, optsize);
3544                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) == 0) {
3545                                 /* Can't set it after we are bound */
3546                                 error = EINVAL;
3547                                 break;
3548                         }
3549                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_UDPTYPE)) {
3550                                 /* Can't do this for a 1-m socket */
3551                                 error = EINVAL;
3552                                 break;
3553                         }
3554                         if (optval)
3555                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE);
3556                         else
3557                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_PORTREUSE);
3558                         break;
3559                 }
3560         case SCTP_PARTIAL_DELIVERY_POINT:
3561                 {
3562                         uint32_t *value;
3563
3564                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, optsize);
3565                         if (*value > SCTP_SB_LIMIT_RCV(so)) {
3566                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3567                                 error = EINVAL;
3568                                 break;
3569                         }
3570                         inp->partial_delivery_point = *value;
3571                         break;
3572                 }
3573         case SCTP_FRAGMENT_INTERLEAVE:
3574                 /* not yet until we re-write sctp_recvmsg() */
3575                 {
3576                         uint32_t *level;
3577
3578                         SCTP_CHECK_AND_CAST(level, optval, uint32_t, optsize);
3579                         if (*level == SCTP_FRAG_LEVEL_2) {
3580                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
3581                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
3582                         } else if (*level == SCTP_FRAG_LEVEL_1) {
3583                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
3584                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
3585                         } else if (*level == SCTP_FRAG_LEVEL_0) {
3586                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_FRAG_INTERLEAVE);
3587                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_INTERLEAVE_STRMS);
3588
3589                         } else {
3590                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3591                                 error = EINVAL;
3592                         }
3593                         break;
3594                 }
3595         case SCTP_CMT_ON_OFF:
3596                 if (SCTP_BASE_SYSCTL(sctp_cmt_on_off)) {
3597                         struct sctp_assoc_value *av;
3598
3599                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
3600                         if (av->assoc_value > SCTP_CMT_MAX) {
3601                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3602                                 error = EINVAL;
3603                                 break;
3604                         }
3605                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3606                         if (stcb) {
3607                                 stcb->asoc.sctp_cmt_on_off = av->assoc_value;
3608                                 SCTP_TCB_UNLOCK(stcb);
3609                         } else {
3610                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3611                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3612                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
3613                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3614                                         SCTP_INP_WLOCK(inp);
3615                                         inp->sctp_cmt_on_off = av->assoc_value;
3616                                         SCTP_INP_WUNLOCK(inp);
3617                                 }
3618                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
3619                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3620                                         SCTP_INP_RLOCK(inp);
3621                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3622                                                 SCTP_TCB_LOCK(stcb);
3623                                                 stcb->asoc.sctp_cmt_on_off = av->assoc_value;
3624                                                 SCTP_TCB_UNLOCK(stcb);
3625                                         }
3626                                         SCTP_INP_RUNLOCK(inp);
3627                                 }
3628                         }
3629                 } else {
3630                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOPROTOOPT);
3631                         error = ENOPROTOOPT;
3632                 }
3633                 break;
3634         case SCTP_PLUGGABLE_CC:
3635                 {
3636                         struct sctp_assoc_value *av;
3637                         struct sctp_nets *net;
3638
3639                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
3640                         if ((av->assoc_value != SCTP_CC_RFC2581) &&
3641                             (av->assoc_value != SCTP_CC_HSTCP) &&
3642                             (av->assoc_value != SCTP_CC_HTCP) &&
3643                             (av->assoc_value != SCTP_CC_RTCC)) {
3644                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3645                                 error = EINVAL;
3646                                 break;
3647                         }
3648                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3649                         if (stcb) {
3650                                 stcb->asoc.cc_functions = sctp_cc_functions[av->assoc_value];
3651                                 stcb->asoc.congestion_control_module = av->assoc_value;
3652                                 if (stcb->asoc.cc_functions.sctp_set_initial_cc_param != NULL) {
3653                                         TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
3654                                                 stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
3655                                         }
3656                                 }
3657                                 SCTP_TCB_UNLOCK(stcb);
3658                         } else {
3659                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3660                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3661                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
3662                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3663                                         SCTP_INP_WLOCK(inp);
3664                                         inp->sctp_ep.sctp_default_cc_module = av->assoc_value;
3665                                         SCTP_INP_WUNLOCK(inp);
3666                                 }
3667                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
3668                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3669                                         SCTP_INP_RLOCK(inp);
3670                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3671                                                 SCTP_TCB_LOCK(stcb);
3672                                                 stcb->asoc.cc_functions = sctp_cc_functions[av->assoc_value];
3673                                                 stcb->asoc.congestion_control_module = av->assoc_value;
3674                                                 if (stcb->asoc.cc_functions.sctp_set_initial_cc_param != NULL) {
3675                                                         TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
3676                                                                 stcb->asoc.cc_functions.sctp_set_initial_cc_param(stcb, net);
3677                                                         }
3678                                                 }
3679                                                 SCTP_TCB_UNLOCK(stcb);
3680                                         }
3681                                         SCTP_INP_RUNLOCK(inp);
3682                                 }
3683                         }
3684                         break;
3685                 }
3686         case SCTP_CC_OPTION:
3687                 {
3688                         struct sctp_cc_option *cc_opt;
3689
3690                         SCTP_CHECK_AND_CAST(cc_opt, optval, struct sctp_cc_option, optsize);
3691                         SCTP_FIND_STCB(inp, stcb, cc_opt->aid_value.assoc_id);
3692                         if (stcb == NULL) {
3693                                 if (cc_opt->aid_value.assoc_id == SCTP_CURRENT_ASSOC) {
3694                                         SCTP_INP_RLOCK(inp);
3695                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3696                                                 SCTP_TCB_LOCK(stcb);
3697                                                 if (stcb->asoc.cc_functions.sctp_cwnd_socket_option) {
3698                                                         (*stcb->asoc.cc_functions.sctp_cwnd_socket_option) (stcb, 1, cc_opt);
3699                                                 }
3700                                                 SCTP_TCB_UNLOCK(stcb);
3701                                         }
3702                                         SCTP_INP_RUNLOCK(inp);
3703                                 } else {
3704                                         error = EINVAL;
3705                                 }
3706                         } else {
3707                                 if (stcb->asoc.cc_functions.sctp_cwnd_socket_option == NULL) {
3708                                         error = ENOTSUP;
3709                                 } else {
3710                                         error = (*stcb->asoc.cc_functions.sctp_cwnd_socket_option) (stcb, 1,
3711                                             cc_opt);
3712                                 }
3713                                 SCTP_TCB_UNLOCK(stcb);
3714                         }
3715                         break;
3716                 }
3717         case SCTP_PLUGGABLE_SS:
3718                 {
3719                         struct sctp_assoc_value *av;
3720
3721                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
3722                         if ((av->assoc_value != SCTP_SS_DEFAULT) &&
3723                             (av->assoc_value != SCTP_SS_ROUND_ROBIN) &&
3724                             (av->assoc_value != SCTP_SS_ROUND_ROBIN_PACKET) &&
3725                             (av->assoc_value != SCTP_SS_PRIORITY) &&
3726                             (av->assoc_value != SCTP_SS_FAIR_BANDWITH) &&
3727                             (av->assoc_value != SCTP_SS_FIRST_COME)) {
3728                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3729                                 error = EINVAL;
3730                                 break;
3731                         }
3732                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3733                         if (stcb) {
3734                                 stcb->asoc.ss_functions.sctp_ss_clear(stcb, &stcb->asoc, 1, 1);
3735                                 stcb->asoc.ss_functions = sctp_ss_functions[av->assoc_value];
3736                                 stcb->asoc.stream_scheduling_module = av->assoc_value;
3737                                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 1);
3738                                 SCTP_TCB_UNLOCK(stcb);
3739                         } else {
3740                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3741                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3742                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
3743                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3744                                         SCTP_INP_WLOCK(inp);
3745                                         inp->sctp_ep.sctp_default_ss_module = av->assoc_value;
3746                                         SCTP_INP_WUNLOCK(inp);
3747                                 }
3748                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
3749                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3750                                         SCTP_INP_RLOCK(inp);
3751                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3752                                                 SCTP_TCB_LOCK(stcb);
3753                                                 stcb->asoc.ss_functions.sctp_ss_clear(stcb, &stcb->asoc, 1, 1);
3754                                                 stcb->asoc.ss_functions = sctp_ss_functions[av->assoc_value];
3755                                                 stcb->asoc.stream_scheduling_module = av->assoc_value;
3756                                                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 1);
3757                                                 SCTP_TCB_UNLOCK(stcb);
3758                                         }
3759                                         SCTP_INP_RUNLOCK(inp);
3760                                 }
3761                         }
3762                         break;
3763                 }
3764         case SCTP_SS_VALUE:
3765                 {
3766                         struct sctp_stream_value *av;
3767
3768                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_stream_value, optsize);
3769                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3770                         if (stcb) {
3771                                 if (stcb->asoc.ss_functions.sctp_ss_set_value(stcb, &stcb->asoc, &stcb->asoc.strmout[av->stream_id],
3772                                     av->stream_value) < 0) {
3773                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3774                                         error = EINVAL;
3775                                 }
3776                                 SCTP_TCB_UNLOCK(stcb);
3777                         } else {
3778                                 if (av->assoc_id == SCTP_CURRENT_ASSOC) {
3779                                         SCTP_INP_RLOCK(inp);
3780                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3781                                                 SCTP_TCB_LOCK(stcb);
3782                                                 stcb->asoc.ss_functions.sctp_ss_set_value(stcb,
3783                                                     &stcb->asoc,
3784                                                     &stcb->asoc.strmout[av->stream_id],
3785                                                     av->stream_value);
3786                                                 SCTP_TCB_UNLOCK(stcb);
3787                                         }
3788                                         SCTP_INP_RUNLOCK(inp);
3789
3790                                 } else {
3791                                         /*
3792                                          * Can't set stream value without
3793                                          * association
3794                                          */
3795                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3796                                         error = EINVAL;
3797                                 }
3798                         }
3799                         break;
3800                 }
3801         case SCTP_CLR_STAT_LOG:
3802                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
3803                 error = EOPNOTSUPP;
3804                 break;
3805         case SCTP_CONTEXT:
3806                 {
3807                         struct sctp_assoc_value *av;
3808
3809                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
3810                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
3811
3812                         if (stcb) {
3813                                 stcb->asoc.context = av->assoc_value;
3814                                 SCTP_TCB_UNLOCK(stcb);
3815                         } else {
3816                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3817                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3818                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
3819                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3820                                         SCTP_INP_WLOCK(inp);
3821                                         inp->sctp_context = av->assoc_value;
3822                                         SCTP_INP_WUNLOCK(inp);
3823                                 }
3824                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
3825                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
3826                                         SCTP_INP_RLOCK(inp);
3827                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3828                                                 SCTP_TCB_LOCK(stcb);
3829                                                 stcb->asoc.context = av->assoc_value;
3830                                                 SCTP_TCB_UNLOCK(stcb);
3831                                         }
3832                                         SCTP_INP_RUNLOCK(inp);
3833                                 }
3834                         }
3835                         break;
3836                 }
3837         case SCTP_VRF_ID:
3838                 {
3839                         uint32_t *default_vrfid;
3840
3841                         SCTP_CHECK_AND_CAST(default_vrfid, optval, uint32_t, optsize);
3842                         if (*default_vrfid > SCTP_MAX_VRF_ID) {
3843                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3844                                 error = EINVAL;
3845                                 break;
3846                         }
3847                         inp->def_vrf_id = *default_vrfid;
3848                         break;
3849                 }
3850         case SCTP_DEL_VRF_ID:
3851                 {
3852                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
3853                         error = EOPNOTSUPP;
3854                         break;
3855                 }
3856         case SCTP_ADD_VRF_ID:
3857                 {
3858                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
3859                         error = EOPNOTSUPP;
3860                         break;
3861                 }
3862         case SCTP_DELAYED_SACK:
3863                 {
3864                         struct sctp_sack_info *sack;
3865
3866                         SCTP_CHECK_AND_CAST(sack, optval, struct sctp_sack_info, optsize);
3867                         SCTP_FIND_STCB(inp, stcb, sack->sack_assoc_id);
3868                         if (sack->sack_delay) {
3869                                 if (sack->sack_delay > SCTP_MAX_SACK_DELAY)
3870                                         sack->sack_delay = SCTP_MAX_SACK_DELAY;
3871                                 if (MSEC_TO_TICKS(sack->sack_delay) < 1) {
3872                                         sack->sack_delay = TICKS_TO_MSEC(1);
3873                                 }
3874                         }
3875                         if (stcb) {
3876                                 if (sack->sack_delay) {
3877                                         stcb->asoc.delayed_ack = sack->sack_delay;
3878                                 }
3879                                 if (sack->sack_freq) {
3880                                         stcb->asoc.sack_freq = sack->sack_freq;
3881                                 }
3882                                 SCTP_TCB_UNLOCK(stcb);
3883                         } else {
3884                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3885                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3886                                     (sack->sack_assoc_id == SCTP_FUTURE_ASSOC) ||
3887                                     (sack->sack_assoc_id == SCTP_ALL_ASSOC)) {
3888                                         SCTP_INP_WLOCK(inp);
3889                                         if (sack->sack_delay) {
3890                                                 inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_RECV] = MSEC_TO_TICKS(sack->sack_delay);
3891                                         }
3892                                         if (sack->sack_freq) {
3893                                                 inp->sctp_ep.sctp_sack_freq = sack->sack_freq;
3894                                         }
3895                                         SCTP_INP_WUNLOCK(inp);
3896                                 }
3897                                 if ((sack->sack_assoc_id == SCTP_CURRENT_ASSOC) ||
3898                                     (sack->sack_assoc_id == SCTP_ALL_ASSOC)) {
3899                                         SCTP_INP_RLOCK(inp);
3900                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
3901                                                 SCTP_TCB_LOCK(stcb);
3902                                                 if (sack->sack_delay) {
3903                                                         stcb->asoc.delayed_ack = sack->sack_delay;
3904                                                 }
3905                                                 if (sack->sack_freq) {
3906                                                         stcb->asoc.sack_freq = sack->sack_freq;
3907                                                 }
3908                                                 SCTP_TCB_UNLOCK(stcb);
3909                                         }
3910                                         SCTP_INP_RUNLOCK(inp);
3911                                 }
3912                         }
3913                         break;
3914                 }
3915         case SCTP_AUTH_CHUNK:
3916                 {
3917                         struct sctp_authchunk *sauth;
3918
3919                         SCTP_CHECK_AND_CAST(sauth, optval, struct sctp_authchunk, optsize);
3920
3921                         SCTP_INP_WLOCK(inp);
3922                         if (sctp_auth_add_chunk(sauth->sauth_chunk, inp->sctp_ep.local_auth_chunks)) {
3923                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3924                                 error = EINVAL;
3925                         }
3926                         SCTP_INP_WUNLOCK(inp);
3927                         break;
3928                 }
3929         case SCTP_AUTH_KEY:
3930                 {
3931                         struct sctp_authkey *sca;
3932                         struct sctp_keyhead *shared_keys;
3933                         sctp_sharedkey_t *shared_key;
3934                         sctp_key_t *key = NULL;
3935                         size_t size;
3936
3937                         SCTP_CHECK_AND_CAST(sca, optval, struct sctp_authkey, optsize);
3938                         if (sca->sca_keylength == 0) {
3939                                 size = optsize - sizeof(struct sctp_authkey);
3940                         } else {
3941                                 if (sca->sca_keylength + sizeof(struct sctp_authkey) <= optsize) {
3942                                         size = sca->sca_keylength;
3943                                 } else {
3944                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
3945                                         error = EINVAL;
3946                                         break;
3947                                 }
3948                         }
3949                         SCTP_FIND_STCB(inp, stcb, sca->sca_assoc_id);
3950
3951                         if (stcb) {
3952                                 shared_keys = &stcb->asoc.shared_keys;
3953                                 /* clear the cached keys for this key id */
3954                                 sctp_clear_cachedkeys(stcb, sca->sca_keynumber);
3955                                 /*
3956                                  * create the new shared key and
3957                                  * insert/replace it
3958                                  */
3959                                 if (size > 0) {
3960                                         key = sctp_set_key(sca->sca_key, (uint32_t) size);
3961                                         if (key == NULL) {
3962                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOMEM);
3963                                                 error = ENOMEM;
3964                                                 SCTP_TCB_UNLOCK(stcb);
3965                                                 break;
3966                                         }
3967                                 }
3968                                 shared_key = sctp_alloc_sharedkey();
3969                                 if (shared_key == NULL) {
3970                                         sctp_free_key(key);
3971                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOMEM);
3972                                         error = ENOMEM;
3973                                         SCTP_TCB_UNLOCK(stcb);
3974                                         break;
3975                                 }
3976                                 shared_key->key = key;
3977                                 shared_key->keyid = sca->sca_keynumber;
3978                                 error = sctp_insert_sharedkey(shared_keys, shared_key);
3979                                 SCTP_TCB_UNLOCK(stcb);
3980                         } else {
3981                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
3982                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
3983                                     (sca->sca_assoc_id == SCTP_FUTURE_ASSOC) ||
3984                                     (sca->sca_assoc_id == SCTP_ALL_ASSOC)) {
3985                                         SCTP_INP_WLOCK(inp);
3986                                         shared_keys = &inp->sctp_ep.shared_keys;
3987                                         /*
3988                                          * clear the cached keys on all
3989                                          * assocs for this key id
3990                                          */
3991                                         sctp_clear_cachedkeys_ep(inp, sca->sca_keynumber);
3992                                         /*
3993                                          * create the new shared key and
3994                                          * insert/replace it
3995                                          */
3996                                         if (size > 0) {
3997                                                 key = sctp_set_key(sca->sca_key, (uint32_t) size);
3998                                                 if (key == NULL) {
3999                                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOMEM);
4000                                                         error = ENOMEM;
4001                                                         SCTP_INP_WUNLOCK(inp);
4002                                                         break;
4003                                                 }
4004                                         }
4005                                         shared_key = sctp_alloc_sharedkey();
4006                                         if (shared_key == NULL) {
4007                                                 sctp_free_key(key);
4008                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOMEM);
4009                                                 error = ENOMEM;
4010                                                 SCTP_INP_WUNLOCK(inp);
4011                                                 break;
4012                                         }
4013                                         shared_key->key = key;
4014                                         shared_key->keyid = sca->sca_keynumber;
4015                                         error = sctp_insert_sharedkey(shared_keys, shared_key);
4016                                         SCTP_INP_WUNLOCK(inp);
4017                                 }
4018                                 if ((sca->sca_assoc_id == SCTP_CURRENT_ASSOC) ||
4019                                     (sca->sca_assoc_id == SCTP_ALL_ASSOC)) {
4020                                         SCTP_INP_RLOCK(inp);
4021                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4022                                                 SCTP_TCB_LOCK(stcb);
4023                                                 shared_keys = &stcb->asoc.shared_keys;
4024                                                 /*
4025                                                  * clear the cached keys for
4026                                                  * this key id
4027                                                  */
4028                                                 sctp_clear_cachedkeys(stcb, sca->sca_keynumber);
4029                                                 /*
4030                                                  * create the new shared key
4031                                                  * and insert/replace it
4032                                                  */
4033                                                 if (size > 0) {
4034                                                         key = sctp_set_key(sca->sca_key, (uint32_t) size);
4035                                                         if (key == NULL) {
4036                                                                 SCTP_TCB_UNLOCK(stcb);
4037                                                                 continue;
4038                                                         }
4039                                                 }
4040                                                 shared_key = sctp_alloc_sharedkey();
4041                                                 if (shared_key == NULL) {
4042                                                         sctp_free_key(key);
4043                                                         SCTP_TCB_UNLOCK(stcb);
4044                                                         continue;
4045                                                 }
4046                                                 shared_key->key = key;
4047                                                 shared_key->keyid = sca->sca_keynumber;
4048                                                 error = sctp_insert_sharedkey(shared_keys, shared_key);
4049                                                 SCTP_TCB_UNLOCK(stcb);
4050                                         }
4051                                         SCTP_INP_RUNLOCK(inp);
4052                                 }
4053                         }
4054                         break;
4055                 }
4056         case SCTP_HMAC_IDENT:
4057                 {
4058                         struct sctp_hmacalgo *shmac;
4059                         sctp_hmaclist_t *hmaclist;
4060                         uint16_t hmacid;
4061                         uint32_t i;
4062
4063                         SCTP_CHECK_AND_CAST(shmac, optval, struct sctp_hmacalgo, optsize);
4064                         if (optsize < sizeof(struct sctp_hmacalgo) + shmac->shmac_number_of_idents * sizeof(uint16_t)) {
4065                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4066                                 error = EINVAL;
4067                                 break;
4068                         }
4069                         hmaclist = sctp_alloc_hmaclist(shmac->shmac_number_of_idents);
4070                         if (hmaclist == NULL) {
4071                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOMEM);
4072                                 error = ENOMEM;
4073                                 break;
4074                         }
4075                         for (i = 0; i < shmac->shmac_number_of_idents; i++) {
4076                                 hmacid = shmac->shmac_idents[i];
4077                                 if (sctp_auth_add_hmacid(hmaclist, hmacid)) {
4078                                          /* invalid HMACs were found */ ;
4079                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4080                                         error = EINVAL;
4081                                         sctp_free_hmaclist(hmaclist);
4082                                         goto sctp_set_hmac_done;
4083                                 }
4084                         }
4085                         for (i = 0; i < hmaclist->num_algo; i++) {
4086                                 if (hmaclist->hmac[i] == SCTP_AUTH_HMAC_ID_SHA1) {
4087                                         /* already in list */
4088                                         break;
4089                                 }
4090                         }
4091                         if (i == hmaclist->num_algo) {
4092                                 /* not found in list */
4093                                 sctp_free_hmaclist(hmaclist);
4094                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4095                                 error = EINVAL;
4096                                 break;
4097                         }
4098                         /* set it on the endpoint */
4099                         SCTP_INP_WLOCK(inp);
4100                         if (inp->sctp_ep.local_hmacs)
4101                                 sctp_free_hmaclist(inp->sctp_ep.local_hmacs);
4102                         inp->sctp_ep.local_hmacs = hmaclist;
4103                         SCTP_INP_WUNLOCK(inp);
4104         sctp_set_hmac_done:
4105                         break;
4106                 }
4107         case SCTP_AUTH_ACTIVE_KEY:
4108                 {
4109                         struct sctp_authkeyid *scact;
4110
4111                         SCTP_CHECK_AND_CAST(scact, optval, struct sctp_authkeyid, optsize);
4112                         SCTP_FIND_STCB(inp, stcb, scact->scact_assoc_id);
4113
4114                         /* set the active key on the right place */
4115                         if (stcb) {
4116                                 /* set the active key on the assoc */
4117                                 if (sctp_auth_setactivekey(stcb,
4118                                     scact->scact_keynumber)) {
4119                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL,
4120                                             SCTP_FROM_SCTP_USRREQ,
4121                                             EINVAL);
4122                                         error = EINVAL;
4123                                 }
4124                                 SCTP_TCB_UNLOCK(stcb);
4125                         } else {
4126                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4127                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4128                                     (scact->scact_assoc_id == SCTP_FUTURE_ASSOC) ||
4129                                     (scact->scact_assoc_id == SCTP_ALL_ASSOC)) {
4130                                         SCTP_INP_WLOCK(inp);
4131                                         if (sctp_auth_setactivekey_ep(inp, scact->scact_keynumber)) {
4132                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4133                                                 error = EINVAL;
4134                                         }
4135                                         SCTP_INP_WUNLOCK(inp);
4136                                 }
4137                                 if ((scact->scact_assoc_id == SCTP_CURRENT_ASSOC) ||
4138                                     (scact->scact_assoc_id == SCTP_ALL_ASSOC)) {
4139                                         SCTP_INP_RLOCK(inp);
4140                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4141                                                 SCTP_TCB_LOCK(stcb);
4142                                                 sctp_auth_setactivekey(stcb, scact->scact_keynumber);
4143                                                 SCTP_TCB_UNLOCK(stcb);
4144                                         }
4145                                         SCTP_INP_RUNLOCK(inp);
4146                                 }
4147                         }
4148                         break;
4149                 }
4150         case SCTP_AUTH_DELETE_KEY:
4151                 {
4152                         struct sctp_authkeyid *scdel;
4153
4154                         SCTP_CHECK_AND_CAST(scdel, optval, struct sctp_authkeyid, optsize);
4155                         SCTP_FIND_STCB(inp, stcb, scdel->scact_assoc_id);
4156
4157                         /* delete the key from the right place */
4158                         if (stcb) {
4159                                 if (sctp_delete_sharedkey(stcb, scdel->scact_keynumber)) {
4160                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4161                                         error = EINVAL;
4162                                 }
4163                                 SCTP_TCB_UNLOCK(stcb);
4164                         } else {
4165                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4166                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4167                                     (scdel->scact_assoc_id == SCTP_FUTURE_ASSOC) ||
4168                                     (scdel->scact_assoc_id == SCTP_ALL_ASSOC)) {
4169                                         SCTP_INP_WLOCK(inp);
4170                                         if (sctp_delete_sharedkey_ep(inp, scdel->scact_keynumber)) {
4171                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4172                                                 error = EINVAL;
4173                                         }
4174                                         SCTP_INP_WUNLOCK(inp);
4175                                 }
4176                                 if ((scdel->scact_assoc_id == SCTP_CURRENT_ASSOC) ||
4177                                     (scdel->scact_assoc_id == SCTP_ALL_ASSOC)) {
4178                                         SCTP_INP_RLOCK(inp);
4179                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4180                                                 SCTP_TCB_LOCK(stcb);
4181                                                 sctp_delete_sharedkey(stcb, scdel->scact_keynumber);
4182                                                 SCTP_TCB_UNLOCK(stcb);
4183                                         }
4184                                         SCTP_INP_RUNLOCK(inp);
4185                                 }
4186                         }
4187                         break;
4188                 }
4189         case SCTP_AUTH_DEACTIVATE_KEY:
4190                 {
4191                         struct sctp_authkeyid *keyid;
4192
4193                         SCTP_CHECK_AND_CAST(keyid, optval, struct sctp_authkeyid, optsize);
4194                         SCTP_FIND_STCB(inp, stcb, keyid->scact_assoc_id);
4195
4196                         /* deactivate the key from the right place */
4197                         if (stcb) {
4198                                 if (sctp_deact_sharedkey(stcb, keyid->scact_keynumber)) {
4199                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4200                                         error = EINVAL;
4201                                 }
4202                                 SCTP_TCB_UNLOCK(stcb);
4203                         } else {
4204                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4205                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4206                                     (keyid->scact_assoc_id == SCTP_FUTURE_ASSOC) ||
4207                                     (keyid->scact_assoc_id == SCTP_ALL_ASSOC)) {
4208                                         SCTP_INP_WLOCK(inp);
4209                                         if (sctp_deact_sharedkey_ep(inp, keyid->scact_keynumber)) {
4210                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4211                                                 error = EINVAL;
4212                                         }
4213                                         SCTP_INP_WUNLOCK(inp);
4214                                 }
4215                                 if ((keyid->scact_assoc_id == SCTP_CURRENT_ASSOC) ||
4216                                     (keyid->scact_assoc_id == SCTP_ALL_ASSOC)) {
4217                                         SCTP_INP_RLOCK(inp);
4218                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4219                                                 SCTP_TCB_LOCK(stcb);
4220                                                 sctp_deact_sharedkey(stcb, keyid->scact_keynumber);
4221                                                 SCTP_TCB_UNLOCK(stcb);
4222                                         }
4223                                         SCTP_INP_RUNLOCK(inp);
4224                                 }
4225                         }
4226                         break;
4227                 }
4228         case SCTP_ENABLE_STREAM_RESET:
4229                 {
4230                         struct sctp_assoc_value *av;
4231
4232                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
4233                         if (av->assoc_value & (~SCTP_ENABLE_VALUE_MASK)) {
4234                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4235                                 error = EINVAL;
4236                                 break;
4237                         }
4238                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
4239                         if (stcb) {
4240                                 stcb->asoc.local_strreset_support = (uint8_t) av->assoc_value;
4241                                 SCTP_TCB_UNLOCK(stcb);
4242                         } else {
4243                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4244                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4245                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
4246                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
4247                                         SCTP_INP_WLOCK(inp);
4248                                         inp->local_strreset_support = (uint8_t) av->assoc_value;
4249                                         SCTP_INP_WUNLOCK(inp);
4250                                 }
4251                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
4252                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
4253                                         SCTP_INP_RLOCK(inp);
4254                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4255                                                 SCTP_TCB_LOCK(stcb);
4256                                                 stcb->asoc.local_strreset_support = (uint8_t) av->assoc_value;
4257                                                 SCTP_TCB_UNLOCK(stcb);
4258                                         }
4259                                         SCTP_INP_RUNLOCK(inp);
4260                                 }
4261                         }
4262                         break;
4263                 }
4264         case SCTP_RESET_STREAMS:
4265                 {
4266                         struct sctp_reset_streams *strrst;
4267                         int i, send_out = 0;
4268                         int send_in = 0;
4269
4270                         SCTP_CHECK_AND_CAST(strrst, optval, struct sctp_reset_streams, optsize);
4271                         SCTP_FIND_STCB(inp, stcb, strrst->srs_assoc_id);
4272                         if (stcb == NULL) {
4273                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
4274                                 error = ENOENT;
4275                                 break;
4276                         }
4277                         if (stcb->asoc.peer_supports_strreset == 0) {
4278                                 /*
4279                                  * Peer does not support the chunk type.
4280                                  */
4281                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
4282                                 error = EOPNOTSUPP;
4283                                 SCTP_TCB_UNLOCK(stcb);
4284                                 break;
4285                         }
4286                         if (stcb->asoc.stream_reset_outstanding) {
4287                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
4288                                 error = EALREADY;
4289                                 SCTP_TCB_UNLOCK(stcb);
4290                                 break;
4291                         }
4292                         if (strrst->srs_flags & SCTP_STREAM_RESET_INCOMING) {
4293                                 send_in = 1;
4294                         }
4295                         if (strrst->srs_flags & SCTP_STREAM_RESET_OUTGOING) {
4296                                 send_out = 1;
4297                         }
4298                         if ((send_in == 0) && (send_out == 0)) {
4299                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4300                                 error = EINVAL;
4301                                 SCTP_TCB_UNLOCK(stcb);
4302                                 break;
4303                         }
4304                         for (i = 0; i < strrst->srs_number_streams; i++) {
4305                                 if ((send_in) &&
4306                                     (strrst->srs_stream_list[i] > stcb->asoc.streamincnt)) {
4307                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4308                                         error = EINVAL;
4309                                         break;
4310                                 }
4311                                 if ((send_out) &&
4312                                     (strrst->srs_stream_list[i] > stcb->asoc.streamoutcnt)) {
4313                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4314                                         error = EINVAL;
4315                                         break;
4316                                 }
4317                         }
4318                         if (error) {
4319                                 SCTP_TCB_UNLOCK(stcb);
4320                                 break;
4321                         }
4322                         error = sctp_send_str_reset_req(stcb, strrst->srs_number_streams,
4323                             strrst->srs_stream_list,
4324                             send_out, send_in, 0, 0, 0, 0, 0);
4325
4326                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_REQ, SCTP_SO_LOCKED);
4327                         SCTP_TCB_UNLOCK(stcb);
4328                         break;
4329                 }
4330         case SCTP_ADD_STREAMS:
4331                 {
4332                         struct sctp_add_streams *stradd;
4333                         uint8_t addstream = 0;
4334                         uint16_t add_o_strmcnt = 0;
4335                         uint16_t add_i_strmcnt = 0;
4336
4337                         SCTP_CHECK_AND_CAST(stradd, optval, struct sctp_add_streams, optsize);
4338                         SCTP_FIND_STCB(inp, stcb, stradd->sas_assoc_id);
4339                         if (stcb == NULL) {
4340                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
4341                                 error = ENOENT;
4342                                 break;
4343                         }
4344                         if (stcb->asoc.peer_supports_strreset == 0) {
4345                                 /*
4346                                  * Peer does not support the chunk type.
4347                                  */
4348                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
4349                                 error = EOPNOTSUPP;
4350                                 SCTP_TCB_UNLOCK(stcb);
4351                                 break;
4352                         }
4353                         if (stcb->asoc.stream_reset_outstanding) {
4354                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
4355                                 error = EALREADY;
4356                                 SCTP_TCB_UNLOCK(stcb);
4357                                 break;
4358                         }
4359                         if ((stradd->sas_outstrms == 0) &&
4360                             (stradd->sas_instrms == 0)) {
4361                                 error = EINVAL;
4362                                 goto skip_stuff;
4363                         }
4364                         if (stradd->sas_outstrms) {
4365                                 addstream = 1;
4366                                 /* We allocate here */
4367                                 add_o_strmcnt = stradd->sas_outstrms;
4368                                 if ((((int)add_o_strmcnt) + ((int)stcb->asoc.streamoutcnt)) > 0x0000ffff) {
4369                                         /* You can't have more than 64k */
4370                                         error = EINVAL;
4371                                         goto skip_stuff;
4372                                 }
4373                         }
4374                         if (stradd->sas_instrms) {
4375                                 int cnt;
4376
4377                                 addstream |= 2;
4378                                 /*
4379                                  * We allocate inside
4380                                  * sctp_send_str_reset_req()
4381                                  */
4382                                 add_i_strmcnt = stradd->sas_instrms;
4383                                 cnt = add_i_strmcnt;
4384                                 cnt += stcb->asoc.streamincnt;
4385                                 if (cnt > 0x0000ffff) {
4386                                         /* You can't have more than 64k */
4387                                         error = EINVAL;
4388                                         goto skip_stuff;
4389                                 }
4390                                 if (cnt > (int)stcb->asoc.max_inbound_streams) {
4391                                         /* More than you are allowed */
4392                                         error = EINVAL;
4393                                         goto skip_stuff;
4394                                 }
4395                         }
4396                         error = sctp_send_str_reset_req(stcb, 0, NULL, 0, 0, 0, addstream, add_o_strmcnt, add_i_strmcnt, 0);
4397                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_REQ, SCTP_SO_LOCKED);
4398         skip_stuff:
4399                         SCTP_TCB_UNLOCK(stcb);
4400                         break;
4401                 }
4402         case SCTP_RESET_ASSOC:
4403                 {
4404                         uint32_t *value;
4405
4406                         SCTP_CHECK_AND_CAST(value, optval, uint32_t, optsize);
4407                         SCTP_FIND_STCB(inp, stcb, (sctp_assoc_t) * value);
4408                         if (stcb == NULL) {
4409                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
4410                                 error = ENOENT;
4411                                 break;
4412                         }
4413                         if (stcb->asoc.peer_supports_strreset == 0) {
4414                                 /*
4415                                  * Peer does not support the chunk type.
4416                                  */
4417                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
4418                                 error = EOPNOTSUPP;
4419                                 SCTP_TCB_UNLOCK(stcb);
4420                                 break;
4421                         }
4422                         if (stcb->asoc.stream_reset_outstanding) {
4423                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
4424                                 error = EALREADY;
4425                                 SCTP_TCB_UNLOCK(stcb);
4426                                 break;
4427                         }
4428                         error = sctp_send_str_reset_req(stcb, 0, NULL, 0, 0, 1, 0, 0, 0, 0);
4429                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_STRRST_REQ, SCTP_SO_LOCKED);
4430                         SCTP_TCB_UNLOCK(stcb);
4431                         break;
4432                 }
4433         case SCTP_CONNECT_X:
4434                 if (optsize < (sizeof(int) + sizeof(struct sockaddr_in))) {
4435                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4436                         error = EINVAL;
4437                         break;
4438                 }
4439                 error = sctp_do_connect_x(so, inp, optval, optsize, p, 0);
4440                 break;
4441         case SCTP_CONNECT_X_DELAYED:
4442                 if (optsize < (sizeof(int) + sizeof(struct sockaddr_in))) {
4443                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4444                         error = EINVAL;
4445                         break;
4446                 }
4447                 error = sctp_do_connect_x(so, inp, optval, optsize, p, 1);
4448                 break;
4449         case SCTP_CONNECT_X_COMPLETE:
4450                 {
4451                         struct sockaddr *sa;
4452                         struct sctp_nets *net;
4453
4454                         /* FIXME MT: check correct? */
4455                         SCTP_CHECK_AND_CAST(sa, optval, struct sockaddr, optsize);
4456
4457                         /* find tcb */
4458                         if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) {
4459                                 SCTP_INP_RLOCK(inp);
4460                                 stcb = LIST_FIRST(&inp->sctp_asoc_list);
4461                                 if (stcb) {
4462                                         SCTP_TCB_LOCK(stcb);
4463                                         net = sctp_findnet(stcb, sa);
4464                                 }
4465                                 SCTP_INP_RUNLOCK(inp);
4466                         } else {
4467                                 /*
4468                                  * We increment here since
4469                                  * sctp_findassociation_ep_addr() wil do a
4470                                  * decrement if it finds the stcb as long as
4471                                  * the locked tcb (last argument) is NOT a
4472                                  * TCB.. aka NULL.
4473                                  */
4474                                 SCTP_INP_INCR_REF(inp);
4475                                 stcb = sctp_findassociation_ep_addr(&inp, sa, &net, NULL, NULL);
4476                                 if (stcb == NULL) {
4477                                         SCTP_INP_DECR_REF(inp);
4478                                 }
4479                         }
4480
4481                         if (stcb == NULL) {
4482                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
4483                                 error = ENOENT;
4484                                 break;
4485                         }
4486                         if (stcb->asoc.delayed_connection == 1) {
4487                                 stcb->asoc.delayed_connection = 0;
4488                                 (void)SCTP_GETTIME_TIMEVAL(&stcb->asoc.time_entered);
4489                                 sctp_timer_stop(SCTP_TIMER_TYPE_INIT, inp, stcb,
4490                                     stcb->asoc.primary_destination,
4491                                     SCTP_FROM_SCTP_USRREQ + SCTP_LOC_9);
4492                                 sctp_send_initiate(inp, stcb, SCTP_SO_LOCKED);
4493                         } else {
4494                                 /*
4495                                  * already expired or did not use delayed
4496                                  * connectx
4497                                  */
4498                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
4499                                 error = EALREADY;
4500                         }
4501                         SCTP_TCB_UNLOCK(stcb);
4502                         break;
4503                 }
4504         case SCTP_MAX_BURST:
4505                 {
4506                         struct sctp_assoc_value *av;
4507
4508                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
4509                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
4510
4511                         if (stcb) {
4512                                 stcb->asoc.max_burst = av->assoc_value;
4513                                 SCTP_TCB_UNLOCK(stcb);
4514                         } else {
4515                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4516                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4517                                     (av->assoc_id == SCTP_FUTURE_ASSOC) ||
4518                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
4519                                         SCTP_INP_WLOCK(inp);
4520                                         inp->sctp_ep.max_burst = av->assoc_value;
4521                                         SCTP_INP_WUNLOCK(inp);
4522                                 }
4523                                 if ((av->assoc_id == SCTP_CURRENT_ASSOC) ||
4524                                     (av->assoc_id == SCTP_ALL_ASSOC)) {
4525                                         SCTP_INP_RLOCK(inp);
4526                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4527                                                 SCTP_TCB_LOCK(stcb);
4528                                                 stcb->asoc.max_burst = av->assoc_value;
4529                                                 SCTP_TCB_UNLOCK(stcb);
4530                                         }
4531                                         SCTP_INP_RUNLOCK(inp);
4532                                 }
4533                         }
4534                         break;
4535                 }
4536         case SCTP_MAXSEG:
4537                 {
4538                         struct sctp_assoc_value *av;
4539                         int ovh;
4540
4541                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
4542                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
4543
4544                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
4545                                 ovh = SCTP_MED_OVERHEAD;
4546                         } else {
4547                                 ovh = SCTP_MED_V4_OVERHEAD;
4548                         }
4549                         if (stcb) {
4550                                 if (av->assoc_value) {
4551                                         stcb->asoc.sctp_frag_point = (av->assoc_value + ovh);
4552                                 } else {
4553                                         stcb->asoc.sctp_frag_point = SCTP_DEFAULT_MAXSEGMENT;
4554                                 }
4555                                 SCTP_TCB_UNLOCK(stcb);
4556                         } else {
4557                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4558                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4559                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
4560                                         SCTP_INP_WLOCK(inp);
4561                                         /*
4562                                          * FIXME MT: I think this is not in
4563                                          * tune with the API ID
4564                                          */
4565                                         if (av->assoc_value) {
4566                                                 inp->sctp_frag_point = (av->assoc_value + ovh);
4567                                         } else {
4568                                                 inp->sctp_frag_point = SCTP_DEFAULT_MAXSEGMENT;
4569                                         }
4570                                         SCTP_INP_WUNLOCK(inp);
4571                                 } else {
4572                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4573                                         error = EINVAL;
4574                                 }
4575                         }
4576                         break;
4577                 }
4578         case SCTP_EVENTS:
4579                 {
4580                         struct sctp_event_subscribe *events;
4581
4582                         SCTP_CHECK_AND_CAST(events, optval, struct sctp_event_subscribe, optsize);
4583
4584                         SCTP_INP_WLOCK(inp);
4585                         if (events->sctp_data_io_event) {
4586                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT);
4587                         } else {
4588                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVDATAIOEVNT);
4589                         }
4590
4591                         if (events->sctp_association_event) {
4592                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVASSOCEVNT);
4593                         } else {
4594                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVASSOCEVNT);
4595                         }
4596
4597                         if (events->sctp_address_event) {
4598                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVPADDREVNT);
4599                         } else {
4600                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVPADDREVNT);
4601                         }
4602
4603                         if (events->sctp_send_failure_event) {
4604                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVSENDFAILEVNT);
4605                         } else {
4606                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVSENDFAILEVNT);
4607                         }
4608
4609                         if (events->sctp_peer_error_event) {
4610                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVPEERERR);
4611                         } else {
4612                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVPEERERR);
4613                         }
4614
4615                         if (events->sctp_shutdown_event) {
4616                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT);
4617                         } else {
4618                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT);
4619                         }
4620
4621                         if (events->sctp_partial_delivery_event) {
4622                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_PDAPIEVNT);
4623                         } else {
4624                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_PDAPIEVNT);
4625                         }
4626
4627                         if (events->sctp_adaptation_layer_event) {
4628                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_ADAPTATIONEVNT);
4629                         } else {
4630                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_ADAPTATIONEVNT);
4631                         }
4632
4633                         if (events->sctp_authentication_event) {
4634                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_AUTHEVNT);
4635                         } else {
4636                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_AUTHEVNT);
4637                         }
4638
4639                         if (events->sctp_sender_dry_event) {
4640                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_DRYEVNT);
4641                         } else {
4642                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_DRYEVNT);
4643                         }
4644
4645                         if (events->sctp_stream_reset_event) {
4646                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_STREAM_RESETEVNT);
4647                         } else {
4648                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_STREAM_RESETEVNT);
4649                         }
4650                         SCTP_INP_WUNLOCK(inp);
4651
4652                         SCTP_INP_RLOCK(inp);
4653                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4654                                 SCTP_TCB_LOCK(stcb);
4655                                 if (events->sctp_association_event) {
4656                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT);
4657                                 } else {
4658                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_RECVASSOCEVNT);
4659                                 }
4660                                 if (events->sctp_address_event) {
4661                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT);
4662                                 } else {
4663                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_RECVPADDREVNT);
4664                                 }
4665                                 if (events->sctp_send_failure_event) {
4666                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT);
4667                                 } else {
4668                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_RECVSENDFAILEVNT);
4669                                 }
4670                                 if (events->sctp_peer_error_event) {
4671                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_RECVPEERERR);
4672                                 } else {
4673                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_RECVPEERERR);
4674                                 }
4675                                 if (events->sctp_shutdown_event) {
4676                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT);
4677                                 } else {
4678                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT);
4679                                 }
4680                                 if (events->sctp_partial_delivery_event) {
4681                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_PDAPIEVNT);
4682                                 } else {
4683                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_PDAPIEVNT);
4684                                 }
4685                                 if (events->sctp_adaptation_layer_event) {
4686                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT);
4687                                 } else {
4688                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_ADAPTATIONEVNT);
4689                                 }
4690                                 if (events->sctp_authentication_event) {
4691                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_AUTHEVNT);
4692                                 } else {
4693                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_AUTHEVNT);
4694                                 }
4695                                 if (events->sctp_sender_dry_event) {
4696                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_DRYEVNT);
4697                                 } else {
4698                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_DRYEVNT);
4699                                 }
4700                                 if (events->sctp_stream_reset_event) {
4701                                         sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_STREAM_RESETEVNT);
4702                                 } else {
4703                                         sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_STREAM_RESETEVNT);
4704                                 }
4705                                 SCTP_TCB_UNLOCK(stcb);
4706                         }
4707                         /*
4708                          * Send up the sender dry event only for 1-to-1
4709                          * style sockets.
4710                          */
4711                         if (events->sctp_sender_dry_event) {
4712                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4713                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
4714                                         stcb = LIST_FIRST(&inp->sctp_asoc_list);
4715                                         if (stcb) {
4716                                                 SCTP_TCB_LOCK(stcb);
4717                                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue) &&
4718                                                     TAILQ_EMPTY(&stcb->asoc.sent_queue) &&
4719                                                     (stcb->asoc.stream_queue_cnt == 0)) {
4720                                                         sctp_ulp_notify(SCTP_NOTIFY_SENDER_DRY, stcb, 0, NULL, SCTP_SO_LOCKED);
4721                                                 }
4722                                                 SCTP_TCB_UNLOCK(stcb);
4723                                         }
4724                                 }
4725                         }
4726                         SCTP_INP_RUNLOCK(inp);
4727                         break;
4728                 }
4729         case SCTP_ADAPTATION_LAYER:
4730                 {
4731                         struct sctp_setadaptation *adap_bits;
4732
4733                         SCTP_CHECK_AND_CAST(adap_bits, optval, struct sctp_setadaptation, optsize);
4734                         SCTP_INP_WLOCK(inp);
4735                         inp->sctp_ep.adaptation_layer_indicator = adap_bits->ssb_adaptation_ind;
4736                         inp->sctp_ep.adaptation_layer_indicator_provided = 1;
4737                         SCTP_INP_WUNLOCK(inp);
4738                         break;
4739                 }
4740 #ifdef SCTP_DEBUG
4741         case SCTP_SET_INITIAL_DBG_SEQ:
4742                 {
4743                         uint32_t *vvv;
4744
4745                         SCTP_CHECK_AND_CAST(vvv, optval, uint32_t, optsize);
4746                         SCTP_INP_WLOCK(inp);
4747                         inp->sctp_ep.initial_sequence_debug = *vvv;
4748                         SCTP_INP_WUNLOCK(inp);
4749                         break;
4750                 }
4751 #endif
4752         case SCTP_DEFAULT_SEND_PARAM:
4753                 {
4754                         struct sctp_sndrcvinfo *s_info;
4755
4756                         SCTP_CHECK_AND_CAST(s_info, optval, struct sctp_sndrcvinfo, optsize);
4757                         SCTP_FIND_STCB(inp, stcb, s_info->sinfo_assoc_id);
4758
4759                         if (stcb) {
4760                                 if (s_info->sinfo_stream < stcb->asoc.streamoutcnt) {
4761                                         memcpy(&stcb->asoc.def_send, s_info, min(optsize, sizeof(stcb->asoc.def_send)));
4762                                 } else {
4763                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4764                                         error = EINVAL;
4765                                 }
4766                                 SCTP_TCB_UNLOCK(stcb);
4767                         } else {
4768                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
4769                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
4770                                     (s_info->sinfo_assoc_id == SCTP_FUTURE_ASSOC) ||
4771                                     (s_info->sinfo_assoc_id == SCTP_ALL_ASSOC)) {
4772                                         SCTP_INP_WLOCK(inp);
4773                                         memcpy(&inp->def_send, s_info, min(optsize, sizeof(inp->def_send)));
4774                                         SCTP_INP_WUNLOCK(inp);
4775                                 }
4776                                 if ((s_info->sinfo_assoc_id == SCTP_CURRENT_ASSOC) ||
4777                                     (s_info->sinfo_assoc_id == SCTP_ALL_ASSOC)) {
4778                                         SCTP_INP_RLOCK(inp);
4779                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
4780                                                 SCTP_TCB_LOCK(stcb);
4781                                                 if (s_info->sinfo_stream < stcb->asoc.streamoutcnt) {
4782                                                         memcpy(&stcb->asoc.def_send, s_info, min(optsize, sizeof(stcb->asoc.def_send)));
4783                                                 }
4784                                                 SCTP_TCB_UNLOCK(stcb);
4785                                         }
4786                                         SCTP_INP_RUNLOCK(inp);
4787                                 }
4788                         }
4789                         break;
4790                 }
4791         case SCTP_PEER_ADDR_PARAMS:
4792                 {
4793                         struct sctp_paddrparams *paddrp;
4794                         struct sctp_nets *net;
4795
4796                         SCTP_CHECK_AND_CAST(paddrp, optval, struct sctp_paddrparams, optsize);
4797                         SCTP_FIND_STCB(inp, stcb, paddrp->spp_assoc_id);
4798                         net = NULL;
4799                         if (stcb) {
4800                                 net = sctp_findnet(stcb, (struct sockaddr *)&paddrp->spp_address);
4801                         } else {
4802                                 /*
4803                                  * We increment here since
4804                                  * sctp_findassociation_ep_addr() wil do a
4805                                  * decrement if it finds the stcb as long as
4806                                  * the locked tcb (last argument) is NOT a
4807                                  * TCB.. aka NULL.
4808                                  */
4809                                 SCTP_INP_INCR_REF(inp);
4810                                 stcb = sctp_findassociation_ep_addr(&inp,
4811                                     (struct sockaddr *)&paddrp->spp_address,
4812                                     &net, NULL, NULL);
4813                                 if (stcb == NULL) {
4814                                         SCTP_INP_DECR_REF(inp);
4815                                 }
4816                         }
4817                         if (stcb && (net == NULL)) {
4818                                 struct sockaddr *sa;
4819
4820                                 sa = (struct sockaddr *)&paddrp->spp_address;
4821 #ifdef INET
4822                                 if (sa->sa_family == AF_INET) {
4823
4824                                         struct sockaddr_in *sin;
4825
4826                                         sin = (struct sockaddr_in *)sa;
4827                                         if (sin->sin_addr.s_addr) {
4828                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4829                                                 SCTP_TCB_UNLOCK(stcb);
4830                                                 error = EINVAL;
4831                                                 break;
4832                                         }
4833                                 } else
4834 #endif
4835 #ifdef INET6
4836                                 if (sa->sa_family == AF_INET6) {
4837                                         struct sockaddr_in6 *sin6;
4838
4839                                         sin6 = (struct sockaddr_in6 *)sa;
4840                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
4841                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4842                                                 SCTP_TCB_UNLOCK(stcb);
4843                                                 error = EINVAL;
4844                                                 break;
4845                                         }
4846                                 } else
4847 #endif
4848                                 {
4849                                         error = EAFNOSUPPORT;
4850                                         SCTP_TCB_UNLOCK(stcb);
4851                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
4852                                         break;
4853                                 }
4854                         }
4855                         /* sanity checks */
4856                         if ((paddrp->spp_flags & SPP_HB_ENABLE) && (paddrp->spp_flags & SPP_HB_DISABLE)) {
4857                                 if (stcb)
4858                                         SCTP_TCB_UNLOCK(stcb);
4859                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4860                                 return (EINVAL);
4861                         }
4862                         if ((paddrp->spp_flags & SPP_PMTUD_ENABLE) && (paddrp->spp_flags & SPP_PMTUD_DISABLE)) {
4863                                 if (stcb)
4864                                         SCTP_TCB_UNLOCK(stcb);
4865                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
4866                                 return (EINVAL);
4867                         }
4868                         if (stcb) {
4869                                 /************************TCB SPECIFIC SET ******************/
4870                                 /*
4871                                  * do we change the timer for HB, we run
4872                                  * only one?
4873                                  */
4874                                 int ovh = 0;
4875
4876                                 if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
4877                                         ovh = SCTP_MED_OVERHEAD;
4878                                 } else {
4879                                         ovh = SCTP_MED_V4_OVERHEAD;
4880                                 }
4881
4882                                 /* network sets ? */
4883                                 if (net) {
4884                                         /************************NET SPECIFIC SET ******************/
4885                                         if (paddrp->spp_flags & SPP_HB_DISABLE) {
4886                                                 if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED) &&
4887                                                     !(net->dest_state & SCTP_ADDR_NOHB)) {
4888                                                         sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net,
4889                                                             SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
4890                                                 }
4891                                                 net->dest_state |= SCTP_ADDR_NOHB;
4892                                         }
4893                                         if (paddrp->spp_flags & SPP_HB_ENABLE) {
4894                                                 if (paddrp->spp_hbinterval) {
4895                                                         net->heart_beat_delay = paddrp->spp_hbinterval;
4896                                                 } else if (paddrp->spp_flags & SPP_HB_TIME_IS_ZERO) {
4897                                                         net->heart_beat_delay = 0;
4898                                                 }
4899                                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net,
4900                                                     SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
4901                                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
4902                                                 net->dest_state &= ~SCTP_ADDR_NOHB;
4903                                         }
4904                                         if (paddrp->spp_flags & SPP_HB_DEMAND) {
4905                                                 /* on demand HB */
4906                                                 sctp_send_hb(stcb, net, SCTP_SO_LOCKED);
4907                                                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_SOCKOPT, SCTP_SO_LOCKED);
4908                                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
4909                                         }
4910                                         if ((paddrp->spp_flags & SPP_PMTUD_DISABLE) && (paddrp->spp_pathmtu >= SCTP_SMALLEST_PMTU)) {
4911                                                 if (SCTP_OS_TIMER_PENDING(&net->pmtu_timer.timer)) {
4912                                                         sctp_timer_stop(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net,
4913                                                             SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
4914                                                 }
4915                                                 net->dest_state |= SCTP_ADDR_NO_PMTUD;
4916                                                 net->mtu = paddrp->spp_pathmtu + ovh;
4917                                                 if (net->mtu < stcb->asoc.smallest_mtu) {
4918                                                         sctp_pathmtu_adjustment(stcb, net->mtu);
4919                                                 }
4920                                         }
4921                                         if (paddrp->spp_flags & SPP_PMTUD_ENABLE) {
4922                                                 if (!SCTP_OS_TIMER_PENDING(&net->pmtu_timer.timer)) {
4923                                                         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
4924                                                 }
4925                                                 net->dest_state &= ~SCTP_ADDR_NO_PMTUD;
4926                                         }
4927                                         if (paddrp->spp_pathmaxrxt) {
4928                                                 if (net->dest_state & SCTP_ADDR_PF) {
4929                                                         if (net->error_count > paddrp->spp_pathmaxrxt) {
4930                                                                 net->dest_state &= ~SCTP_ADDR_PF;
4931                                                         }
4932                                                 } else {
4933                                                         if ((net->error_count <= paddrp->spp_pathmaxrxt) &&
4934                                                             (net->error_count > net->pf_threshold)) {
4935                                                                 net->dest_state |= SCTP_ADDR_PF;
4936                                                                 sctp_send_hb(stcb, net, SCTP_SO_LOCKED);
4937                                                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net, SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
4938                                                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
4939                                                         }
4940                                                 }
4941                                                 if (net->dest_state & SCTP_ADDR_REACHABLE) {
4942                                                         if (net->error_count > paddrp->spp_pathmaxrxt) {
4943                                                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
4944                                                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, stcb, 0, net, SCTP_SO_LOCKED);
4945                                                         }
4946                                                 } else {
4947                                                         if (net->error_count <= paddrp->spp_pathmaxrxt) {
4948                                                                 net->dest_state |= SCTP_ADDR_REACHABLE;
4949                                                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_UP, stcb, 0, net, SCTP_SO_LOCKED);
4950                                                         }
4951                                                 }
4952                                                 net->failure_threshold = paddrp->spp_pathmaxrxt;
4953                                         }
4954                                         if (paddrp->spp_flags & SPP_DSCP) {
4955                                                 net->dscp = paddrp->spp_dscp & 0xfc;
4956                                                 net->dscp |= 0x01;
4957                                         }
4958 #ifdef INET6
4959                                         if (paddrp->spp_flags & SPP_IPV6_FLOWLABEL) {
4960                                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
4961                                                         net->flowlabel = paddrp->spp_ipv6_flowlabel & 0x000fffff;
4962                                                         net->flowlabel |= 0x80000000;
4963                                                 }
4964                                         }
4965 #endif
4966                                 } else {
4967                                         /************************ASSOC ONLY -- NO NET SPECIFIC SET ******************/
4968                                         if (paddrp->spp_pathmaxrxt) {
4969                                                 stcb->asoc.def_net_failure = paddrp->spp_pathmaxrxt;
4970                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
4971                                                         if (net->dest_state & SCTP_ADDR_PF) {
4972                                                                 if (net->error_count > paddrp->spp_pathmaxrxt) {
4973                                                                         net->dest_state &= ~SCTP_ADDR_PF;
4974                                                                 }
4975                                                         } else {
4976                                                                 if ((net->error_count <= paddrp->spp_pathmaxrxt) &&
4977                                                                     (net->error_count > net->pf_threshold)) {
4978                                                                         net->dest_state |= SCTP_ADDR_PF;
4979                                                                         sctp_send_hb(stcb, net, SCTP_SO_LOCKED);
4980                                                                         sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net, SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
4981                                                                         sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
4982                                                                 }
4983                                                         }
4984                                                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
4985                                                                 if (net->error_count > paddrp->spp_pathmaxrxt) {
4986                                                                         net->dest_state &= ~SCTP_ADDR_REACHABLE;
4987                                                                         sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, stcb, 0, net, SCTP_SO_LOCKED);
4988                                                                 }
4989                                                         } else {
4990                                                                 if (net->error_count <= paddrp->spp_pathmaxrxt) {
4991                                                                         net->dest_state |= SCTP_ADDR_REACHABLE;
4992                                                                         sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_UP, stcb, 0, net, SCTP_SO_LOCKED);
4993                                                                 }
4994                                                         }
4995                                                         net->failure_threshold = paddrp->spp_pathmaxrxt;
4996                                                 }
4997                                         }
4998                                         if (paddrp->spp_flags & SPP_HB_ENABLE) {
4999                                                 if (paddrp->spp_hbinterval) {
5000                                                         stcb->asoc.heart_beat_delay = paddrp->spp_hbinterval;
5001                                                 } else if (paddrp->spp_flags & SPP_HB_TIME_IS_ZERO) {
5002                                                         stcb->asoc.heart_beat_delay = 0;
5003                                                 }
5004                                                 /* Turn back on the timer */
5005                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5006                                                         if (paddrp->spp_hbinterval) {
5007                                                                 net->heart_beat_delay = paddrp->spp_hbinterval;
5008                                                         } else if (paddrp->spp_flags & SPP_HB_TIME_IS_ZERO) {
5009                                                                 net->heart_beat_delay = 0;
5010                                                         }
5011                                                         if (net->dest_state & SCTP_ADDR_NOHB) {
5012                                                                 net->dest_state &= ~SCTP_ADDR_NOHB;
5013                                                         }
5014                                                         sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net,
5015                                                             SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
5016                                                         sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
5017                                                 }
5018                                                 sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_DONOT_HEARTBEAT);
5019                                         }
5020                                         if (paddrp->spp_flags & SPP_HB_DISABLE) {
5021                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5022                                                         if (!(net->dest_state & SCTP_ADDR_NOHB)) {
5023                                                                 net->dest_state |= SCTP_ADDR_NOHB;
5024                                                                 if (!(net->dest_state & SCTP_ADDR_UNCONFIRMED)) {
5025                                                                         sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
5026                                                                 }
5027                                                         }
5028                                                 }
5029                                                 sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_DONOT_HEARTBEAT);
5030                                         }
5031                                         if ((paddrp->spp_flags & SPP_PMTUD_DISABLE) && (paddrp->spp_pathmtu >= SCTP_SMALLEST_PMTU)) {
5032                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5033                                                         if (SCTP_OS_TIMER_PENDING(&net->pmtu_timer.timer)) {
5034                                                                 sctp_timer_stop(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net,
5035                                                                     SCTP_FROM_SCTP_USRREQ + SCTP_LOC_10);
5036                                                         }
5037                                                         net->dest_state |= SCTP_ADDR_NO_PMTUD;
5038                                                         net->mtu = paddrp->spp_pathmtu + ovh;
5039                                                         if (net->mtu < stcb->asoc.smallest_mtu) {
5040                                                                 sctp_pathmtu_adjustment(stcb, net->mtu);
5041                                                         }
5042                                                 }
5043                                                 sctp_stcb_feature_on(inp, stcb, SCTP_PCB_FLAGS_DO_NOT_PMTUD);
5044                                         }
5045                                         if (paddrp->spp_flags & SPP_PMTUD_ENABLE) {
5046                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5047                                                         if (!SCTP_OS_TIMER_PENDING(&net->pmtu_timer.timer)) {
5048                                                                 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
5049                                                         }
5050                                                         net->dest_state &= ~SCTP_ADDR_NO_PMTUD;
5051                                                 }
5052                                                 sctp_stcb_feature_off(inp, stcb, SCTP_PCB_FLAGS_DO_NOT_PMTUD);
5053                                         }
5054                                         if (paddrp->spp_flags & SPP_DSCP) {
5055                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5056                                                         net->dscp = paddrp->spp_dscp & 0xfc;
5057                                                         net->dscp |= 0x01;
5058                                                 }
5059                                                 stcb->asoc.default_dscp = paddrp->spp_dscp & 0xfc;
5060                                                 stcb->asoc.default_dscp |= 0x01;
5061                                         }
5062 #ifdef INET6
5063                                         if (paddrp->spp_flags & SPP_IPV6_FLOWLABEL) {
5064                                                 TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5065                                                         if (net->ro._l_addr.sa.sa_family == AF_INET6) {
5066                                                                 net->flowlabel = paddrp->spp_ipv6_flowlabel & 0x000fffff;
5067                                                                 net->flowlabel |= 0x80000000;
5068                                                         }
5069                                                 }
5070                                                 stcb->asoc.default_flowlabel = paddrp->spp_ipv6_flowlabel & 0x000fffff;
5071                                                 stcb->asoc.default_flowlabel |= 0x80000000;
5072                                         }
5073 #endif
5074                                 }
5075                                 SCTP_TCB_UNLOCK(stcb);
5076                         } else {
5077                                 /************************NO TCB, SET TO default stuff ******************/
5078                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5079                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5080                                     (paddrp->spp_assoc_id == SCTP_FUTURE_ASSOC)) {
5081                                         SCTP_INP_WLOCK(inp);
5082                                         /*
5083                                          * For the TOS/FLOWLABEL stuff you
5084                                          * set it with the options on the
5085                                          * socket
5086                                          */
5087                                         if (paddrp->spp_pathmaxrxt) {
5088                                                 inp->sctp_ep.def_net_failure = paddrp->spp_pathmaxrxt;
5089                                         }
5090                                         if (paddrp->spp_flags & SPP_HB_TIME_IS_ZERO)
5091                                                 inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = 0;
5092                                         else if (paddrp->spp_hbinterval) {
5093                                                 if (paddrp->spp_hbinterval > SCTP_MAX_HB_INTERVAL)
5094                                                         paddrp->spp_hbinterval = SCTP_MAX_HB_INTERVAL;
5095                                                 inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = MSEC_TO_TICKS(paddrp->spp_hbinterval);
5096                                         }
5097                                         if (paddrp->spp_flags & SPP_HB_ENABLE) {
5098                                                 if (paddrp->spp_flags & SPP_HB_TIME_IS_ZERO) {
5099                                                         inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = 0;
5100                                                 } else if (paddrp->spp_hbinterval) {
5101                                                         inp->sctp_ep.sctp_timeoutticks[SCTP_TIMER_HEARTBEAT] = MSEC_TO_TICKS(paddrp->spp_hbinterval);
5102                                                 }
5103                                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_DONOT_HEARTBEAT);
5104                                         } else if (paddrp->spp_flags & SPP_HB_DISABLE) {
5105                                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_DONOT_HEARTBEAT);
5106                                         }
5107                                         if (paddrp->spp_flags & SPP_PMTUD_ENABLE) {
5108                                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_DO_NOT_PMTUD);
5109                                         } else if (paddrp->spp_flags & SPP_PMTUD_DISABLE) {
5110                                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_DO_NOT_PMTUD);
5111                                         }
5112                                         if (paddrp->spp_flags & SPP_DSCP) {
5113                                                 inp->sctp_ep.default_dscp = paddrp->spp_dscp & 0xfc;
5114                                                 inp->sctp_ep.default_dscp |= 0x01;
5115                                         }
5116 #ifdef INET6
5117                                         if (paddrp->spp_flags & SPP_IPV6_FLOWLABEL) {
5118                                                 if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
5119                                                         inp->sctp_ep.default_flowlabel = paddrp->spp_ipv6_flowlabel & 0x000fffff;
5120                                                         inp->sctp_ep.default_flowlabel |= 0x80000000;
5121                                                 }
5122                                         }
5123 #endif
5124                                         SCTP_INP_WUNLOCK(inp);
5125                                 } else {
5126                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5127                                         error = EINVAL;
5128                                 }
5129                         }
5130                         break;
5131                 }
5132         case SCTP_RTOINFO:
5133                 {
5134                         struct sctp_rtoinfo *srto;
5135                         uint32_t new_init, new_min, new_max;
5136
5137                         SCTP_CHECK_AND_CAST(srto, optval, struct sctp_rtoinfo, optsize);
5138                         SCTP_FIND_STCB(inp, stcb, srto->srto_assoc_id);
5139
5140                         if (stcb) {
5141                                 if (srto->srto_initial)
5142                                         new_init = srto->srto_initial;
5143                                 else
5144                                         new_init = stcb->asoc.initial_rto;
5145                                 if (srto->srto_max)
5146                                         new_max = srto->srto_max;
5147                                 else
5148                                         new_max = stcb->asoc.maxrto;
5149                                 if (srto->srto_min)
5150                                         new_min = srto->srto_min;
5151                                 else
5152                                         new_min = stcb->asoc.minrto;
5153                                 if ((new_min <= new_init) && (new_init <= new_max)) {
5154                                         stcb->asoc.initial_rto = new_init;
5155                                         stcb->asoc.maxrto = new_max;
5156                                         stcb->asoc.minrto = new_min;
5157                                 } else {
5158                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5159                                         error = EINVAL;
5160                                 }
5161                                 SCTP_TCB_UNLOCK(stcb);
5162                         } else {
5163                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5164                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5165                                     (srto->srto_assoc_id == SCTP_FUTURE_ASSOC)) {
5166                                         SCTP_INP_WLOCK(inp);
5167                                         if (srto->srto_initial)
5168                                                 new_init = srto->srto_initial;
5169                                         else
5170                                                 new_init = inp->sctp_ep.initial_rto;
5171                                         if (srto->srto_max)
5172                                                 new_max = srto->srto_max;
5173                                         else
5174                                                 new_max = inp->sctp_ep.sctp_maxrto;
5175                                         if (srto->srto_min)
5176                                                 new_min = srto->srto_min;
5177                                         else
5178                                                 new_min = inp->sctp_ep.sctp_minrto;
5179                                         if ((new_min <= new_init) && (new_init <= new_max)) {
5180                                                 inp->sctp_ep.initial_rto = new_init;
5181                                                 inp->sctp_ep.sctp_maxrto = new_max;
5182                                                 inp->sctp_ep.sctp_minrto = new_min;
5183                                         } else {
5184                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5185                                                 error = EINVAL;
5186                                         }
5187                                         SCTP_INP_WUNLOCK(inp);
5188                                 } else {
5189                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5190                                         error = EINVAL;
5191                                 }
5192                         }
5193                         break;
5194                 }
5195         case SCTP_ASSOCINFO:
5196                 {
5197                         struct sctp_assocparams *sasoc;
5198
5199                         SCTP_CHECK_AND_CAST(sasoc, optval, struct sctp_assocparams, optsize);
5200                         SCTP_FIND_STCB(inp, stcb, sasoc->sasoc_assoc_id);
5201                         if (sasoc->sasoc_cookie_life) {
5202                                 /* boundary check the cookie life */
5203                                 if (sasoc->sasoc_cookie_life < 1000)
5204                                         sasoc->sasoc_cookie_life = 1000;
5205                                 if (sasoc->sasoc_cookie_life > SCTP_MAX_COOKIE_LIFE) {
5206                                         sasoc->sasoc_cookie_life = SCTP_MAX_COOKIE_LIFE;
5207                                 }
5208                         }
5209                         if (stcb) {
5210                                 if (sasoc->sasoc_asocmaxrxt)
5211                                         stcb->asoc.max_send_times = sasoc->sasoc_asocmaxrxt;
5212                                 if (sasoc->sasoc_cookie_life) {
5213                                         stcb->asoc.cookie_life = MSEC_TO_TICKS(sasoc->sasoc_cookie_life);
5214                                 }
5215                                 SCTP_TCB_UNLOCK(stcb);
5216                         } else {
5217                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5218                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5219                                     (sasoc->sasoc_assoc_id == SCTP_FUTURE_ASSOC)) {
5220                                         SCTP_INP_WLOCK(inp);
5221                                         if (sasoc->sasoc_asocmaxrxt)
5222                                                 inp->sctp_ep.max_send_times = sasoc->sasoc_asocmaxrxt;
5223                                         if (sasoc->sasoc_cookie_life) {
5224                                                 inp->sctp_ep.def_cookie_life = MSEC_TO_TICKS(sasoc->sasoc_cookie_life);
5225                                         }
5226                                         SCTP_INP_WUNLOCK(inp);
5227                                 } else {
5228                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5229                                         error = EINVAL;
5230                                 }
5231                         }
5232                         break;
5233                 }
5234         case SCTP_INITMSG:
5235                 {
5236                         struct sctp_initmsg *sinit;
5237
5238                         SCTP_CHECK_AND_CAST(sinit, optval, struct sctp_initmsg, optsize);
5239                         SCTP_INP_WLOCK(inp);
5240                         if (sinit->sinit_num_ostreams)
5241                                 inp->sctp_ep.pre_open_stream_count = sinit->sinit_num_ostreams;
5242
5243                         if (sinit->sinit_max_instreams)
5244                                 inp->sctp_ep.max_open_streams_intome = sinit->sinit_max_instreams;
5245
5246                         if (sinit->sinit_max_attempts)
5247                                 inp->sctp_ep.max_init_times = sinit->sinit_max_attempts;
5248
5249                         if (sinit->sinit_max_init_timeo)
5250                                 inp->sctp_ep.initial_init_rto_max = sinit->sinit_max_init_timeo;
5251                         SCTP_INP_WUNLOCK(inp);
5252                         break;
5253                 }
5254         case SCTP_PRIMARY_ADDR:
5255                 {
5256                         struct sctp_setprim *spa;
5257                         struct sctp_nets *net;
5258
5259                         SCTP_CHECK_AND_CAST(spa, optval, struct sctp_setprim, optsize);
5260                         SCTP_FIND_STCB(inp, stcb, spa->ssp_assoc_id);
5261
5262                         net = NULL;
5263                         if (stcb) {
5264                                 net = sctp_findnet(stcb, (struct sockaddr *)&spa->ssp_addr);
5265                         } else {
5266                                 /*
5267                                  * We increment here since
5268                                  * sctp_findassociation_ep_addr() wil do a
5269                                  * decrement if it finds the stcb as long as
5270                                  * the locked tcb (last argument) is NOT a
5271                                  * TCB.. aka NULL.
5272                                  */
5273                                 SCTP_INP_INCR_REF(inp);
5274                                 stcb = sctp_findassociation_ep_addr(&inp,
5275                                     (struct sockaddr *)&spa->ssp_addr,
5276                                     &net, NULL, NULL);
5277                                 if (stcb == NULL) {
5278                                         SCTP_INP_DECR_REF(inp);
5279                                 }
5280                         }
5281
5282                         if ((stcb) && (net)) {
5283                                 if ((net != stcb->asoc.primary_destination) &&
5284                                     (!(net->dest_state & SCTP_ADDR_UNCONFIRMED))) {
5285                                         /* Ok we need to set it */
5286                                         if (sctp_set_primary_addr(stcb, (struct sockaddr *)NULL, net) == 0) {
5287                                                 if ((stcb->asoc.alternate) &&
5288                                                     (!(net->dest_state & SCTP_ADDR_PF)) &&
5289                                                     (net->dest_state & SCTP_ADDR_REACHABLE)) {
5290                                                         sctp_free_remote_addr(stcb->asoc.alternate);
5291                                                         stcb->asoc.alternate = NULL;
5292                                                 }
5293                                         }
5294                                 }
5295                         } else {
5296                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5297                                 error = EINVAL;
5298                         }
5299                         if (stcb) {
5300                                 SCTP_TCB_UNLOCK(stcb);
5301                         }
5302                         break;
5303                 }
5304         case SCTP_SET_DYNAMIC_PRIMARY:
5305                 {
5306                         union sctp_sockstore *ss;
5307
5308                         error = priv_check(curthread,
5309                             PRIV_NETINET_RESERVEDPORT);
5310                         if (error)
5311                                 break;
5312
5313                         SCTP_CHECK_AND_CAST(ss, optval, union sctp_sockstore, optsize);
5314                         /* SUPER USER CHECK? */
5315                         error = sctp_dynamic_set_primary(&ss->sa, vrf_id);
5316                         break;
5317                 }
5318         case SCTP_SET_PEER_PRIMARY_ADDR:
5319                 {
5320                         struct sctp_setpeerprim *sspp;
5321
5322                         SCTP_CHECK_AND_CAST(sspp, optval, struct sctp_setpeerprim, optsize);
5323                         SCTP_FIND_STCB(inp, stcb, sspp->sspp_assoc_id);
5324                         if (stcb != NULL) {
5325                                 struct sctp_ifa *ifa;
5326
5327                                 ifa = sctp_find_ifa_by_addr((struct sockaddr *)&sspp->sspp_addr,
5328                                     stcb->asoc.vrf_id, SCTP_ADDR_NOT_LOCKED);
5329                                 if (ifa == NULL) {
5330                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5331                                         error = EINVAL;
5332                                         goto out_of_it;
5333                                 }
5334                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
5335                                         /*
5336                                          * Must validate the ifa found is in
5337                                          * our ep
5338                                          */
5339                                         struct sctp_laddr *laddr;
5340                                         int found = 0;
5341
5342                                         LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
5343                                                 if (laddr->ifa == NULL) {
5344                                                         SCTPDBG(SCTP_DEBUG_OUTPUT1, "%s: NULL ifa\n",
5345                                                             __FUNCTION__);
5346                                                         continue;
5347                                                 }
5348                                                 if (laddr->ifa == ifa) {
5349                                                         found = 1;
5350                                                         break;
5351                                                 }
5352                                         }
5353                                         if (!found) {
5354                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5355                                                 error = EINVAL;
5356                                                 goto out_of_it;
5357                                         }
5358                                 } else {
5359                                         switch (sspp->sspp_addr.ss_family) {
5360 #ifdef INET
5361                                         case AF_INET:
5362                                                 {
5363                                                         struct sockaddr_in *sin;
5364
5365                                                         sin = (struct sockaddr_in *)&sspp->sspp_addr;
5366                                                         if (prison_check_ip4(inp->ip_inp.inp.inp_cred,
5367                                                             &sin->sin_addr) != 0) {
5368                                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5369                                                                 error = EINVAL;
5370                                                                 goto out_of_it;
5371                                                         }
5372                                                         break;
5373                                                 }
5374 #endif
5375 #ifdef INET6
5376                                         case AF_INET6:
5377                                                 {
5378                                                         struct sockaddr_in6 *sin6;
5379
5380                                                         sin6 = (struct sockaddr_in6 *)&sspp->sspp_addr;
5381                                                         if (prison_check_ip6(inp->ip_inp.inp.inp_cred,
5382                                                             &sin6->sin6_addr) != 0) {
5383                                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5384                                                                 error = EINVAL;
5385                                                                 goto out_of_it;
5386                                                         }
5387                                                         break;
5388                                                 }
5389 #endif
5390                                         default:
5391                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5392                                                 error = EINVAL;
5393                                                 goto out_of_it;
5394                                         }
5395                                 }
5396                                 if (sctp_set_primary_ip_address_sa(stcb,
5397                                     (struct sockaddr *)&sspp->sspp_addr) != 0) {
5398                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5399                                         error = EINVAL;
5400                                 }
5401                 out_of_it:
5402                                 SCTP_TCB_UNLOCK(stcb);
5403                         } else {
5404                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5405                                 error = EINVAL;
5406                         }
5407                         break;
5408                 }
5409         case SCTP_BINDX_ADD_ADDR:
5410                 {
5411                         struct sctp_getaddresses *addrs;
5412                         struct thread *td;
5413
5414                         td = (struct thread *)p;
5415                         SCTP_CHECK_AND_CAST(addrs, optval, struct sctp_getaddresses,
5416                             optsize);
5417 #ifdef INET
5418                         if (addrs->addr->sa_family == AF_INET) {
5419                                 if (optsize < sizeof(struct sctp_getaddresses) - sizeof(struct sockaddr) + sizeof(struct sockaddr_in)) {
5420                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5421                                         error = EINVAL;
5422                                         break;
5423                                 }
5424                                 if (td != NULL && (error = prison_local_ip4(td->td_ucred, &(((struct sockaddr_in *)(addrs->addr))->sin_addr)))) {
5425                                         SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, error);
5426                                         break;
5427                                 }
5428                         } else
5429 #endif
5430 #ifdef INET6
5431                         if (addrs->addr->sa_family == AF_INET6) {
5432                                 if (optsize < sizeof(struct sctp_getaddresses) - sizeof(struct sockaddr) + sizeof(struct sockaddr_in6)) {
5433                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5434                                         error = EINVAL;
5435                                         break;
5436                                 }
5437                                 if (td != NULL && (error = prison_local_ip6(td->td_ucred, &(((struct sockaddr_in6 *)(addrs->addr))->sin6_addr),
5438                                     (SCTP_IPV6_V6ONLY(inp) != 0))) != 0) {
5439                                         SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, error);
5440                                         break;
5441                                 }
5442                         } else
5443 #endif
5444                         {
5445                                 error = EAFNOSUPPORT;
5446                                 break;
5447                         }
5448                         sctp_bindx_add_address(so, inp, addrs->addr,
5449                             addrs->sget_assoc_id, vrf_id,
5450                             &error, p);
5451                         break;
5452                 }
5453         case SCTP_BINDX_REM_ADDR:
5454                 {
5455                         struct sctp_getaddresses *addrs;
5456                         struct thread *td;
5457
5458                         td = (struct thread *)p;
5459
5460                         SCTP_CHECK_AND_CAST(addrs, optval, struct sctp_getaddresses, optsize);
5461 #ifdef INET
5462                         if (addrs->addr->sa_family == AF_INET) {
5463                                 if (optsize < sizeof(struct sctp_getaddresses) - sizeof(struct sockaddr) + sizeof(struct sockaddr_in)) {
5464                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5465                                         error = EINVAL;
5466                                         break;
5467                                 }
5468                                 if (td != NULL && (error = prison_local_ip4(td->td_ucred, &(((struct sockaddr_in *)(addrs->addr))->sin_addr)))) {
5469                                         SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, error);
5470                                         break;
5471                                 }
5472                         } else
5473 #endif
5474 #ifdef INET6
5475                         if (addrs->addr->sa_family == AF_INET6) {
5476                                 if (optsize < sizeof(struct sctp_getaddresses) - sizeof(struct sockaddr) + sizeof(struct sockaddr_in6)) {
5477                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5478                                         error = EINVAL;
5479                                         break;
5480                                 }
5481                                 if (td != NULL &&
5482                                     (error = prison_local_ip6(td->td_ucred,
5483                                     &(((struct sockaddr_in6 *)(addrs->addr))->sin6_addr),
5484                                     (SCTP_IPV6_V6ONLY(inp) != 0))) != 0) {
5485                                         SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, error);
5486                                         break;
5487                                 }
5488                         } else
5489 #endif
5490                         {
5491                                 error = EAFNOSUPPORT;
5492                                 break;
5493                         }
5494                         sctp_bindx_delete_address(inp, addrs->addr,
5495                             addrs->sget_assoc_id, vrf_id,
5496                             &error);
5497                         break;
5498                 }
5499         case SCTP_EVENT:
5500                 {
5501                         struct sctp_event *event;
5502                         uint32_t event_type;
5503
5504                         SCTP_CHECK_AND_CAST(event, optval, struct sctp_event, optsize);
5505                         SCTP_FIND_STCB(inp, stcb, event->se_assoc_id);
5506                         switch (event->se_type) {
5507                         case SCTP_ASSOC_CHANGE:
5508                                 event_type = SCTP_PCB_FLAGS_RECVASSOCEVNT;
5509                                 break;
5510                         case SCTP_PEER_ADDR_CHANGE:
5511                                 event_type = SCTP_PCB_FLAGS_RECVPADDREVNT;
5512                                 break;
5513                         case SCTP_REMOTE_ERROR:
5514                                 event_type = SCTP_PCB_FLAGS_RECVPEERERR;
5515                                 break;
5516                         case SCTP_SEND_FAILED:
5517                                 event_type = SCTP_PCB_FLAGS_RECVSENDFAILEVNT;
5518                                 break;
5519                         case SCTP_SHUTDOWN_EVENT:
5520                                 event_type = SCTP_PCB_FLAGS_RECVSHUTDOWNEVNT;
5521                                 break;
5522                         case SCTP_ADAPTATION_INDICATION:
5523                                 event_type = SCTP_PCB_FLAGS_ADAPTATIONEVNT;
5524                                 break;
5525                         case SCTP_PARTIAL_DELIVERY_EVENT:
5526                                 event_type = SCTP_PCB_FLAGS_PDAPIEVNT;
5527                                 break;
5528                         case SCTP_AUTHENTICATION_EVENT:
5529                                 event_type = SCTP_PCB_FLAGS_AUTHEVNT;
5530                                 break;
5531                         case SCTP_STREAM_RESET_EVENT:
5532                                 event_type = SCTP_PCB_FLAGS_STREAM_RESETEVNT;
5533                                 break;
5534                         case SCTP_SENDER_DRY_EVENT:
5535                                 event_type = SCTP_PCB_FLAGS_DRYEVNT;
5536                                 break;
5537                         case SCTP_NOTIFICATIONS_STOPPED_EVENT:
5538                                 event_type = 0;
5539                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTSUP);
5540                                 error = ENOTSUP;
5541                                 break;
5542                         case SCTP_ASSOC_RESET_EVENT:
5543                                 event_type = SCTP_PCB_FLAGS_ASSOC_RESETEVNT;
5544                                 break;
5545                         case SCTP_STREAM_CHANGE_EVENT:
5546                                 event_type = SCTP_PCB_FLAGS_STREAM_CHANGEEVNT;
5547                                 break;
5548                         case SCTP_SEND_FAILED_EVENT:
5549                                 event_type = SCTP_PCB_FLAGS_RECVNSENDFAILEVNT;
5550                                 break;
5551                         default:
5552                                 event_type = 0;
5553                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5554                                 error = EINVAL;
5555                                 break;
5556                         }
5557                         if (event_type > 0) {
5558                                 if (stcb) {
5559                                         if (event->se_on) {
5560                                                 sctp_stcb_feature_on(inp, stcb, event_type);
5561                                                 if (event_type == SCTP_PCB_FLAGS_DRYEVNT) {
5562                                                         if (TAILQ_EMPTY(&stcb->asoc.send_queue) &&
5563                                                             TAILQ_EMPTY(&stcb->asoc.sent_queue) &&
5564                                                             (stcb->asoc.stream_queue_cnt == 0)) {
5565                                                                 sctp_ulp_notify(SCTP_NOTIFY_SENDER_DRY, stcb, 0, NULL, SCTP_SO_LOCKED);
5566                                                         }
5567                                                 }
5568                                         } else {
5569                                                 sctp_stcb_feature_off(inp, stcb, event_type);
5570                                         }
5571                                         SCTP_TCB_UNLOCK(stcb);
5572                                 } else {
5573                                         /*
5574                                          * We don't want to send up a storm
5575                                          * of events, so return an error for
5576                                          * sender dry events
5577                                          */
5578                                         if ((event_type == SCTP_PCB_FLAGS_DRYEVNT) &&
5579                                             ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) == 0) &&
5580                                             ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) == 0) &&
5581                                             ((event->se_assoc_id == SCTP_ALL_ASSOC) ||
5582                                             (event->se_assoc_id == SCTP_CURRENT_ASSOC))) {
5583                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTSUP);
5584                                                 error = ENOTSUP;
5585                                                 break;
5586                                         }
5587                                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5588                                             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5589                                             (event->se_assoc_id == SCTP_FUTURE_ASSOC) ||
5590                                             (event->se_assoc_id == SCTP_ALL_ASSOC)) {
5591                                                 SCTP_INP_WLOCK(inp);
5592                                                 if (event->se_on) {
5593                                                         sctp_feature_on(inp, event_type);
5594                                                 } else {
5595                                                         sctp_feature_off(inp, event_type);
5596                                                 }
5597                                                 SCTP_INP_WUNLOCK(inp);
5598                                         }
5599                                         if ((event->se_assoc_id == SCTP_CURRENT_ASSOC) ||
5600                                             (event->se_assoc_id == SCTP_ALL_ASSOC)) {
5601                                                 SCTP_INP_RLOCK(inp);
5602                                                 LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
5603                                                         SCTP_TCB_LOCK(stcb);
5604                                                         if (event->se_on) {
5605                                                                 sctp_stcb_feature_on(inp, stcb, event_type);
5606                                                         } else {
5607                                                                 sctp_stcb_feature_off(inp, stcb, event_type);
5608                                                         }
5609                                                         SCTP_TCB_UNLOCK(stcb);
5610                                                 }
5611                                                 SCTP_INP_RUNLOCK(inp);
5612                                         }
5613                                 }
5614                         }
5615                         break;
5616                 }
5617         case SCTP_RECVRCVINFO:
5618                 {
5619                         int *onoff;
5620
5621                         SCTP_CHECK_AND_CAST(onoff, optval, int, optsize);
5622                         SCTP_INP_WLOCK(inp);
5623                         if (*onoff != 0) {
5624                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVRCVINFO);
5625                         } else {
5626                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVRCVINFO);
5627                         }
5628                         SCTP_INP_WUNLOCK(inp);
5629                         break;
5630                 }
5631         case SCTP_RECVNXTINFO:
5632                 {
5633                         int *onoff;
5634
5635                         SCTP_CHECK_AND_CAST(onoff, optval, int, optsize);
5636                         SCTP_INP_WLOCK(inp);
5637                         if (*onoff != 0) {
5638                                 sctp_feature_on(inp, SCTP_PCB_FLAGS_RECVNXTINFO);
5639                         } else {
5640                                 sctp_feature_off(inp, SCTP_PCB_FLAGS_RECVNXTINFO);
5641                         }
5642                         SCTP_INP_WUNLOCK(inp);
5643                         break;
5644                 }
5645         case SCTP_DEFAULT_SNDINFO:
5646                 {
5647                         struct sctp_sndinfo *info;
5648                         uint16_t policy;
5649
5650                         SCTP_CHECK_AND_CAST(info, optval, struct sctp_sndinfo, optsize);
5651                         SCTP_FIND_STCB(inp, stcb, info->snd_assoc_id);
5652
5653                         if (stcb) {
5654                                 if (info->snd_sid < stcb->asoc.streamoutcnt) {
5655                                         stcb->asoc.def_send.sinfo_stream = info->snd_sid;
5656                                         policy = PR_SCTP_POLICY(stcb->asoc.def_send.sinfo_flags);
5657                                         stcb->asoc.def_send.sinfo_flags = info->snd_flags;
5658                                         stcb->asoc.def_send.sinfo_flags |= policy;
5659                                         stcb->asoc.def_send.sinfo_ppid = info->snd_ppid;
5660                                         stcb->asoc.def_send.sinfo_context = info->snd_context;
5661                                 } else {
5662                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5663                                         error = EINVAL;
5664                                 }
5665                                 SCTP_TCB_UNLOCK(stcb);
5666                         } else {
5667                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5668                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5669                                     (info->snd_assoc_id == SCTP_FUTURE_ASSOC) ||
5670                                     (info->snd_assoc_id == SCTP_ALL_ASSOC)) {
5671                                         SCTP_INP_WLOCK(inp);
5672                                         inp->def_send.sinfo_stream = info->snd_sid;
5673                                         policy = PR_SCTP_POLICY(inp->def_send.sinfo_flags);
5674                                         inp->def_send.sinfo_flags = info->snd_flags;
5675                                         inp->def_send.sinfo_flags |= policy;
5676                                         inp->def_send.sinfo_ppid = info->snd_ppid;
5677                                         inp->def_send.sinfo_context = info->snd_context;
5678                                         SCTP_INP_WUNLOCK(inp);
5679                                 }
5680                                 if ((info->snd_assoc_id == SCTP_CURRENT_ASSOC) ||
5681                                     (info->snd_assoc_id == SCTP_ALL_ASSOC)) {
5682                                         SCTP_INP_RLOCK(inp);
5683                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
5684                                                 SCTP_TCB_LOCK(stcb);
5685                                                 if (info->snd_sid < stcb->asoc.streamoutcnt) {
5686                                                         stcb->asoc.def_send.sinfo_stream = info->snd_sid;
5687                                                         policy = PR_SCTP_POLICY(stcb->asoc.def_send.sinfo_flags);
5688                                                         stcb->asoc.def_send.sinfo_flags = info->snd_flags;
5689                                                         stcb->asoc.def_send.sinfo_flags |= policy;
5690                                                         stcb->asoc.def_send.sinfo_ppid = info->snd_ppid;
5691                                                         stcb->asoc.def_send.sinfo_context = info->snd_context;
5692                                                 }
5693                                                 SCTP_TCB_UNLOCK(stcb);
5694                                         }
5695                                         SCTP_INP_RUNLOCK(inp);
5696                                 }
5697                         }
5698                         break;
5699                 }
5700         case SCTP_DEFAULT_PRINFO:
5701                 {
5702                         struct sctp_default_prinfo *info;
5703
5704                         SCTP_CHECK_AND_CAST(info, optval, struct sctp_default_prinfo, optsize);
5705                         SCTP_FIND_STCB(inp, stcb, info->pr_assoc_id);
5706
5707                         if (PR_SCTP_INVALID_POLICY(info->pr_policy)) {
5708                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5709                                 error = EINVAL;
5710                                 break;
5711                         }
5712                         if (stcb) {
5713                                 stcb->asoc.def_send.sinfo_flags &= 0xfff0;
5714                                 stcb->asoc.def_send.sinfo_flags |= info->pr_policy;
5715                                 stcb->asoc.def_send.sinfo_timetolive = info->pr_value;
5716                                 SCTP_TCB_UNLOCK(stcb);
5717                         } else {
5718                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5719                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5720                                     (info->pr_assoc_id == SCTP_FUTURE_ASSOC) ||
5721                                     (info->pr_assoc_id == SCTP_ALL_ASSOC)) {
5722                                         SCTP_INP_WLOCK(inp);
5723                                         inp->def_send.sinfo_flags &= 0xfff0;
5724                                         inp->def_send.sinfo_flags |= info->pr_policy;
5725                                         inp->def_send.sinfo_timetolive = info->pr_value;
5726                                         SCTP_INP_WUNLOCK(inp);
5727                                 }
5728                                 if ((info->pr_assoc_id == SCTP_CURRENT_ASSOC) ||
5729                                     (info->pr_assoc_id == SCTP_ALL_ASSOC)) {
5730                                         SCTP_INP_RLOCK(inp);
5731                                         LIST_FOREACH(stcb, &inp->sctp_asoc_list, sctp_tcblist) {
5732                                                 SCTP_TCB_LOCK(stcb);
5733                                                 stcb->asoc.def_send.sinfo_flags &= 0xfff0;
5734                                                 stcb->asoc.def_send.sinfo_flags |= info->pr_policy;
5735                                                 stcb->asoc.def_send.sinfo_timetolive = info->pr_value;
5736                                                 SCTP_TCB_UNLOCK(stcb);
5737                                         }
5738                                         SCTP_INP_RUNLOCK(inp);
5739                                 }
5740                         }
5741                         break;
5742                 }
5743         case SCTP_PEER_ADDR_THLDS:
5744                 /* Applies to the specific association */
5745                 {
5746                         struct sctp_paddrthlds *thlds;
5747                         struct sctp_nets *net;
5748
5749                         SCTP_CHECK_AND_CAST(thlds, optval, struct sctp_paddrthlds, optsize);
5750                         SCTP_FIND_STCB(inp, stcb, thlds->spt_assoc_id);
5751                         net = NULL;
5752                         if (stcb) {
5753                                 net = sctp_findnet(stcb, (struct sockaddr *)&thlds->spt_address);
5754                         } else {
5755                                 /*
5756                                  * We increment here since
5757                                  * sctp_findassociation_ep_addr() wil do a
5758                                  * decrement if it finds the stcb as long as
5759                                  * the locked tcb (last argument) is NOT a
5760                                  * TCB.. aka NULL.
5761                                  */
5762                                 SCTP_INP_INCR_REF(inp);
5763                                 stcb = sctp_findassociation_ep_addr(&inp,
5764                                     (struct sockaddr *)&thlds->spt_address,
5765                                     &net, NULL, NULL);
5766                                 if (stcb == NULL) {
5767                                         SCTP_INP_DECR_REF(inp);
5768                                 }
5769                         }
5770                         if (stcb && (net == NULL)) {
5771                                 struct sockaddr *sa;
5772
5773                                 sa = (struct sockaddr *)&thlds->spt_address;
5774 #ifdef INET
5775                                 if (sa->sa_family == AF_INET) {
5776
5777                                         struct sockaddr_in *sin;
5778
5779                                         sin = (struct sockaddr_in *)sa;
5780                                         if (sin->sin_addr.s_addr) {
5781                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5782                                                 SCTP_TCB_UNLOCK(stcb);
5783                                                 error = EINVAL;
5784                                                 break;
5785                                         }
5786                                 } else
5787 #endif
5788 #ifdef INET6
5789                                 if (sa->sa_family == AF_INET6) {
5790                                         struct sockaddr_in6 *sin6;
5791
5792                                         sin6 = (struct sockaddr_in6 *)sa;
5793                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
5794                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5795                                                 SCTP_TCB_UNLOCK(stcb);
5796                                                 error = EINVAL;
5797                                                 break;
5798                                         }
5799                                 } else
5800 #endif
5801                                 {
5802                                         error = EAFNOSUPPORT;
5803                                         SCTP_TCB_UNLOCK(stcb);
5804                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
5805                                         break;
5806                                 }
5807                         }
5808                         if (stcb) {
5809                                 if (net) {
5810                                         if (net->dest_state & SCTP_ADDR_PF) {
5811                                                 if ((net->failure_threshold > thlds->spt_pathmaxrxt) ||
5812                                                     (net->failure_threshold <= thlds->spt_pathpfthld)) {
5813                                                         net->dest_state &= ~SCTP_ADDR_PF;
5814                                                 }
5815                                         } else {
5816                                                 if ((net->failure_threshold > thlds->spt_pathpfthld) &&
5817                                                     (net->failure_threshold <= thlds->spt_pathmaxrxt)) {
5818                                                         net->dest_state |= SCTP_ADDR_PF;
5819                                                         sctp_send_hb(stcb, net, SCTP_SO_LOCKED);
5820                                                         sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net, SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
5821                                                         sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
5822                                                 }
5823                                         }
5824                                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
5825                                                 if (net->failure_threshold > thlds->spt_pathmaxrxt) {
5826                                                         net->dest_state &= ~SCTP_ADDR_REACHABLE;
5827                                                         sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, stcb, 0, net, SCTP_SO_LOCKED);
5828                                                 }
5829                                         } else {
5830                                                 if (net->failure_threshold <= thlds->spt_pathmaxrxt) {
5831                                                         net->dest_state |= SCTP_ADDR_REACHABLE;
5832                                                         sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_UP, stcb, 0, net, SCTP_SO_LOCKED);
5833                                                 }
5834                                         }
5835                                         net->failure_threshold = thlds->spt_pathmaxrxt;
5836                                         net->pf_threshold = thlds->spt_pathpfthld;
5837                                 } else {
5838                                         TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
5839                                                 if (net->dest_state & SCTP_ADDR_PF) {
5840                                                         if ((net->failure_threshold > thlds->spt_pathmaxrxt) ||
5841                                                             (net->failure_threshold <= thlds->spt_pathpfthld)) {
5842                                                                 net->dest_state &= ~SCTP_ADDR_PF;
5843                                                         }
5844                                                 } else {
5845                                                         if ((net->failure_threshold > thlds->spt_pathpfthld) &&
5846                                                             (net->failure_threshold <= thlds->spt_pathmaxrxt)) {
5847                                                                 net->dest_state |= SCTP_ADDR_PF;
5848                                                                 sctp_send_hb(stcb, net, SCTP_SO_LOCKED);
5849                                                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net, SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
5850                                                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
5851                                                         }
5852                                                 }
5853                                                 if (net->dest_state & SCTP_ADDR_REACHABLE) {
5854                                                         if (net->failure_threshold > thlds->spt_pathmaxrxt) {
5855                                                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
5856                                                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN, stcb, 0, net, SCTP_SO_LOCKED);
5857                                                         }
5858                                                 } else {
5859                                                         if (net->failure_threshold <= thlds->spt_pathmaxrxt) {
5860                                                                 net->dest_state |= SCTP_ADDR_REACHABLE;
5861                                                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_UP, stcb, 0, net, SCTP_SO_LOCKED);
5862                                                         }
5863                                                 }
5864                                                 net->failure_threshold = thlds->spt_pathmaxrxt;
5865                                                 net->pf_threshold = thlds->spt_pathpfthld;
5866                                         }
5867                                         stcb->asoc.def_net_failure = thlds->spt_pathmaxrxt;
5868                                         stcb->asoc.def_net_pf_threshold = thlds->spt_pathpfthld;
5869                                 }
5870                         } else {
5871                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5872                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5873                                     (thlds->spt_assoc_id == SCTP_FUTURE_ASSOC)) {
5874                                         SCTP_INP_WLOCK(inp);
5875                                         inp->sctp_ep.def_net_failure = thlds->spt_pathmaxrxt;
5876                                         inp->sctp_ep.def_net_pf_threshold = thlds->spt_pathpfthld;
5877                                         SCTP_INP_WUNLOCK(inp);
5878                                 } else {
5879                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5880                                         error = EINVAL;
5881                                 }
5882                         }
5883                         break;
5884                 }
5885         case SCTP_REMOTE_UDP_ENCAPS_PORT:
5886                 {
5887                         struct sctp_udpencaps *encaps;
5888                         struct sctp_nets *net;
5889
5890                         SCTP_CHECK_AND_CAST(encaps, optval, struct sctp_udpencaps, optsize);
5891                         SCTP_FIND_STCB(inp, stcb, encaps->sue_assoc_id);
5892                         if (stcb) {
5893                                 net = sctp_findnet(stcb, (struct sockaddr *)&encaps->sue_address);
5894                         } else {
5895                                 /*
5896                                  * We increment here since
5897                                  * sctp_findassociation_ep_addr() wil do a
5898                                  * decrement if it finds the stcb as long as
5899                                  * the locked tcb (last argument) is NOT a
5900                                  * TCB.. aka NULL.
5901                                  */
5902                                 net = NULL;
5903                                 SCTP_INP_INCR_REF(inp);
5904                                 stcb = sctp_findassociation_ep_addr(&inp, (struct sockaddr *)&encaps->sue_address, &net, NULL, NULL);
5905                                 if (stcb == NULL) {
5906                                         SCTP_INP_DECR_REF(inp);
5907                                 }
5908                         }
5909                         if (stcb && (net == NULL)) {
5910                                 struct sockaddr *sa;
5911
5912                                 sa = (struct sockaddr *)&encaps->sue_address;
5913 #ifdef INET
5914                                 if (sa->sa_family == AF_INET) {
5915
5916                                         struct sockaddr_in *sin;
5917
5918                                         sin = (struct sockaddr_in *)sa;
5919                                         if (sin->sin_addr.s_addr) {
5920                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5921                                                 SCTP_TCB_UNLOCK(stcb);
5922                                                 error = EINVAL;
5923                                                 break;
5924                                         }
5925                                 } else
5926 #endif
5927 #ifdef INET6
5928                                 if (sa->sa_family == AF_INET6) {
5929                                         struct sockaddr_in6 *sin6;
5930
5931                                         sin6 = (struct sockaddr_in6 *)sa;
5932                                         if (!IN6_IS_ADDR_UNSPECIFIED(&sin6->sin6_addr)) {
5933                                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5934                                                 SCTP_TCB_UNLOCK(stcb);
5935                                                 error = EINVAL;
5936                                                 break;
5937                                         }
5938                                 } else
5939 #endif
5940                                 {
5941                                         error = EAFNOSUPPORT;
5942                                         SCTP_TCB_UNLOCK(stcb);
5943                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
5944                                         break;
5945                                 }
5946                         }
5947                         if (stcb) {
5948                                 if (net) {
5949                                         net->port = encaps->sue_port;
5950                                 } else {
5951                                         stcb->asoc.port = encaps->sue_port;
5952                                 }
5953                                 SCTP_TCB_UNLOCK(stcb);
5954                         } else {
5955                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5956                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5957                                     (encaps->sue_assoc_id == SCTP_FUTURE_ASSOC)) {
5958                                         SCTP_INP_WLOCK(inp);
5959                                         inp->sctp_ep.port = encaps->sue_port;
5960                                         SCTP_INP_WUNLOCK(inp);
5961                                 } else {
5962                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5963                                         error = EINVAL;
5964                                 }
5965                         }
5966                         break;
5967                 }
5968         case SCTP_ECN_SUPPORTED:
5969                 {
5970                         struct sctp_assoc_value *av;
5971
5972                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
5973                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
5974
5975                         if (stcb) {
5976                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5977                                 error = EINVAL;
5978                                 SCTP_TCB_UNLOCK(stcb);
5979                         } else {
5980                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
5981                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
5982                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
5983                                         SCTP_INP_WLOCK(inp);
5984                                         if (av->assoc_value == 0) {
5985                                                 inp->ecn_supported = 0;
5986                                         } else {
5987                                                 inp->ecn_supported = 1;
5988                                         }
5989                                         SCTP_INP_WUNLOCK(inp);
5990                                 } else {
5991                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
5992                                         error = EINVAL;
5993                                 }
5994                         }
5995                         break;
5996                 }
5997         case SCTP_PR_SUPPORTED:
5998                 {
5999                         struct sctp_assoc_value *av;
6000
6001                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
6002                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
6003
6004                         if (stcb) {
6005                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6006                                 error = EINVAL;
6007                                 SCTP_TCB_UNLOCK(stcb);
6008                         } else {
6009                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
6010                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
6011                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
6012                                         SCTP_INP_WLOCK(inp);
6013                                         if (av->assoc_value == 0) {
6014                                                 inp->prsctp_supported = 0;
6015                                         } else {
6016                                                 inp->prsctp_supported = 1;
6017                                         }
6018                                         SCTP_INP_WUNLOCK(inp);
6019                                 } else {
6020                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6021                                         error = EINVAL;
6022                                 }
6023                         }
6024                         break;
6025                 }
6026         case SCTP_NRSACK_SUPPORTED:
6027                 {
6028                         struct sctp_assoc_value *av;
6029
6030                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
6031                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
6032
6033                         if (stcb) {
6034                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6035                                 error = EINVAL;
6036                                 SCTP_TCB_UNLOCK(stcb);
6037                         } else {
6038                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
6039                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
6040                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
6041                                         SCTP_INP_WLOCK(inp);
6042                                         if (av->assoc_value == 0) {
6043                                                 inp->nrsack_supported = 0;
6044                                         } else {
6045                                                 inp->nrsack_supported = 1;
6046                                         }
6047                                         SCTP_INP_WUNLOCK(inp);
6048                                 } else {
6049                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6050                                         error = EINVAL;
6051                                 }
6052                         }
6053                         break;
6054                 }
6055         case SCTP_PKTDROP_SUPPORTED:
6056                 {
6057                         struct sctp_assoc_value *av;
6058
6059                         SCTP_CHECK_AND_CAST(av, optval, struct sctp_assoc_value, optsize);
6060                         SCTP_FIND_STCB(inp, stcb, av->assoc_id);
6061
6062                         if (stcb) {
6063                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6064                                 error = EINVAL;
6065                                 SCTP_TCB_UNLOCK(stcb);
6066                         } else {
6067                                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) ||
6068                                     (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) ||
6069                                     (av->assoc_id == SCTP_FUTURE_ASSOC)) {
6070                                         SCTP_INP_WLOCK(inp);
6071                                         if (av->assoc_value == 0) {
6072                                                 inp->pktdrop_supported = 0;
6073                                         } else {
6074                                                 inp->pktdrop_supported = 1;
6075                                         }
6076                                         SCTP_INP_WUNLOCK(inp);
6077                                 } else {
6078                                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6079                                         error = EINVAL;
6080                                 }
6081                         }
6082                         break;
6083                 }
6084         default:
6085                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOPROTOOPT);
6086                 error = ENOPROTOOPT;
6087                 break;
6088         }                       /* end switch (opt) */
6089         return (error);
6090 }
6091
6092 int
6093 sctp_ctloutput(struct socket *so, struct sockopt *sopt)
6094 {
6095         void *optval = NULL;
6096         size_t optsize = 0;
6097         void *p;
6098         int error = 0;
6099
6100         if (sopt->sopt_level != IPPROTO_SCTP) {
6101                 /* wrong proto level... send back up to IP */
6102 #ifdef INET6
6103                 if (INP_CHECK_SOCKAF(so, AF_INET6))
6104                         error = ip6_ctloutput(so, sopt);
6105 #endif                          /* INET6 */
6106 #if defined(INET) && defined(INET6)
6107                 else
6108 #endif
6109 #ifdef INET
6110                         error = ip_ctloutput(so, sopt);
6111 #endif
6112                 return (error);
6113         }
6114         optsize = sopt->sopt_valsize;
6115         if (optsize) {
6116                 SCTP_MALLOC(optval, void *, optsize, SCTP_M_SOCKOPT);
6117                 if (optval == NULL) {
6118                         SCTP_LTRACE_ERR_RET(so->so_pcb, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOBUFS);
6119                         return (ENOBUFS);
6120                 }
6121                 error = sooptcopyin(sopt, optval, optsize, optsize);
6122                 if (error) {
6123                         SCTP_FREE(optval, SCTP_M_SOCKOPT);
6124                         goto out;
6125                 }
6126         }
6127         p = (void *)sopt->sopt_td;
6128         if (sopt->sopt_dir == SOPT_SET) {
6129                 error = sctp_setopt(so, sopt->sopt_name, optval, optsize, p);
6130         } else if (sopt->sopt_dir == SOPT_GET) {
6131                 error = sctp_getopt(so, sopt->sopt_name, optval, &optsize, p);
6132         } else {
6133                 SCTP_LTRACE_ERR_RET(so->so_pcb, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6134                 error = EINVAL;
6135         }
6136         if ((error == 0) && (optval != NULL)) {
6137                 error = sooptcopyout(sopt, optval, optsize);
6138                 SCTP_FREE(optval, SCTP_M_SOCKOPT);
6139         } else if (optval != NULL) {
6140                 SCTP_FREE(optval, SCTP_M_SOCKOPT);
6141         }
6142 out:
6143         return (error);
6144 }
6145
6146 #ifdef INET
6147 static int
6148 sctp_connect(struct socket *so, struct sockaddr *addr, struct thread *p)
6149 {
6150         int error = 0;
6151         int create_lock_on = 0;
6152         uint32_t vrf_id;
6153         struct sctp_inpcb *inp;
6154         struct sctp_tcb *stcb = NULL;
6155
6156         inp = (struct sctp_inpcb *)so->so_pcb;
6157         if (inp == NULL) {
6158                 /* I made the same as TCP since we are not setup? */
6159                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6160                 return (ECONNRESET);
6161         }
6162         if (addr == NULL) {
6163                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6164                 return EINVAL;
6165         }
6166         switch (addr->sa_family) {
6167 #ifdef INET6
6168         case AF_INET6:
6169                 {
6170                         struct sockaddr_in6 *sin6p;
6171
6172                         if (addr->sa_len != sizeof(struct sockaddr_in6)) {
6173                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6174                                 return (EINVAL);
6175                         }
6176                         sin6p = (struct sockaddr_in6 *)addr;
6177                         if (p != NULL && (error = prison_remote_ip6(p->td_ucred, &sin6p->sin6_addr)) != 0) {
6178                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
6179                                 return (error);
6180                         }
6181                         break;
6182                 }
6183 #endif
6184 #ifdef INET
6185         case AF_INET:
6186                 {
6187                         struct sockaddr_in *sinp;
6188
6189                         if (addr->sa_len != sizeof(struct sockaddr_in)) {
6190                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6191                                 return (EINVAL);
6192                         }
6193                         sinp = (struct sockaddr_in *)addr;
6194                         if (p != NULL && (error = prison_remote_ip4(p->td_ucred, &sinp->sin_addr)) != 0) {
6195                                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, error);
6196                                 return (error);
6197                         }
6198                         break;
6199                 }
6200 #endif
6201         default:
6202                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EAFNOSUPPORT);
6203                 return (EAFNOSUPPORT);
6204         }
6205         SCTP_INP_INCR_REF(inp);
6206         SCTP_ASOC_CREATE_LOCK(inp);
6207         create_lock_on = 1;
6208
6209
6210         if ((inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) ||
6211             (inp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) {
6212                 /* Should I really unlock ? */
6213                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EFAULT);
6214                 error = EFAULT;
6215                 goto out_now;
6216         }
6217 #ifdef INET6
6218         if (((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) &&
6219             (addr->sa_family == AF_INET6)) {
6220                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6221                 error = EINVAL;
6222                 goto out_now;
6223         }
6224 #endif
6225         if ((inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) ==
6226             SCTP_PCB_FLAGS_UNBOUND) {
6227                 /* Bind a ephemeral port */
6228                 error = sctp_inpcb_bind(so, NULL, NULL, p);
6229                 if (error) {
6230                         goto out_now;
6231                 }
6232         }
6233         /* Now do we connect? */
6234         if ((inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) &&
6235             (sctp_is_feature_off(inp, SCTP_PCB_FLAGS_PORTREUSE))) {
6236                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6237                 error = EINVAL;
6238                 goto out_now;
6239         }
6240         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
6241             (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED)) {
6242                 /* We are already connected AND the TCP model */
6243                 SCTP_LTRACE_ERR_RET(inp, stcb, NULL, SCTP_FROM_SCTP_USRREQ, EADDRINUSE);
6244                 error = EADDRINUSE;
6245                 goto out_now;
6246         }
6247         if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) {
6248                 SCTP_INP_RLOCK(inp);
6249                 stcb = LIST_FIRST(&inp->sctp_asoc_list);
6250                 SCTP_INP_RUNLOCK(inp);
6251         } else {
6252                 /*
6253                  * We increment here since sctp_findassociation_ep_addr()
6254                  * will do a decrement if it finds the stcb as long as the
6255                  * locked tcb (last argument) is NOT a TCB.. aka NULL.
6256                  */
6257                 SCTP_INP_INCR_REF(inp);
6258                 stcb = sctp_findassociation_ep_addr(&inp, addr, NULL, NULL, NULL);
6259                 if (stcb == NULL) {
6260                         SCTP_INP_DECR_REF(inp);
6261                 } else {
6262                         SCTP_TCB_UNLOCK(stcb);
6263                 }
6264         }
6265         if (stcb != NULL) {
6266                 /* Already have or am bring up an association */
6267                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EALREADY);
6268                 error = EALREADY;
6269                 goto out_now;
6270         }
6271         vrf_id = inp->def_vrf_id;
6272         /* We are GOOD to go */
6273         stcb = sctp_aloc_assoc(inp, addr, &error, 0, vrf_id, p);
6274         if (stcb == NULL) {
6275                 /* Gak! no memory */
6276                 goto out_now;
6277         }
6278         if (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) {
6279                 stcb->sctp_ep->sctp_flags |= SCTP_PCB_FLAGS_CONNECTED;
6280                 /* Set the connected flag so we can queue data */
6281                 soisconnecting(so);
6282         }
6283         SCTP_SET_STATE(&stcb->asoc, SCTP_STATE_COOKIE_WAIT);
6284         (void)SCTP_GETTIME_TIMEVAL(&stcb->asoc.time_entered);
6285
6286         /* initialize authentication parameters for the assoc */
6287         sctp_initialize_auth_params(inp, stcb);
6288
6289         sctp_send_initiate(inp, stcb, SCTP_SO_LOCKED);
6290         SCTP_TCB_UNLOCK(stcb);
6291 out_now:
6292         if (create_lock_on) {
6293                 SCTP_ASOC_CREATE_UNLOCK(inp);
6294         }
6295         SCTP_INP_DECR_REF(inp);
6296         return (error);
6297 }
6298
6299 #endif
6300
6301 int
6302 sctp_listen(struct socket *so, int backlog, struct thread *p)
6303 {
6304         /*
6305          * Note this module depends on the protocol processing being called
6306          * AFTER any socket level flags and backlog are applied to the
6307          * socket. The traditional way that the socket flags are applied is
6308          * AFTER protocol processing. We have made a change to the
6309          * sys/kern/uipc_socket.c module to reverse this but this MUST be in
6310          * place if the socket API for SCTP is to work properly.
6311          */
6312
6313         int error = 0;
6314         struct sctp_inpcb *inp;
6315
6316         inp = (struct sctp_inpcb *)so->so_pcb;
6317         if (inp == NULL) {
6318                 /* I made the same as TCP since we are not setup? */
6319                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6320                 return (ECONNRESET);
6321         }
6322         if (sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE)) {
6323                 /* See if we have a listener */
6324                 struct sctp_inpcb *tinp;
6325                 union sctp_sockstore store;
6326
6327                 if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) == 0) {
6328                         /* not bound all */
6329                         struct sctp_laddr *laddr;
6330
6331                         LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
6332                                 memcpy(&store, &laddr->ifa->address, sizeof(store));
6333                                 switch (store.sa.sa_family) {
6334 #ifdef INET
6335                                 case AF_INET:
6336                                         store.sin.sin_port = inp->sctp_lport;
6337                                         break;
6338 #endif
6339 #ifdef INET6
6340                                 case AF_INET6:
6341                                         store.sin6.sin6_port = inp->sctp_lport;
6342                                         break;
6343 #endif
6344                                 default:
6345                                         break;
6346                                 }
6347                                 tinp = sctp_pcb_findep(&store.sa, 0, 0, inp->def_vrf_id);
6348                                 if (tinp && (tinp != inp) &&
6349                                     ((tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) == 0) &&
6350                                     ((tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) &&
6351                                     (tinp->sctp_socket->so_qlimit)) {
6352                                         /*
6353                                          * we have a listener already and
6354                                          * its not this inp.
6355                                          */
6356                                         SCTP_INP_DECR_REF(tinp);
6357                                         return (EADDRINUSE);
6358                                 } else if (tinp) {
6359                                         SCTP_INP_DECR_REF(tinp);
6360                                 }
6361                         }
6362                 } else {
6363                         /* Setup a local addr bound all */
6364                         memset(&store, 0, sizeof(store));
6365 #ifdef INET6
6366                         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) {
6367                                 store.sa.sa_family = AF_INET6;
6368                                 store.sa.sa_len = sizeof(struct sockaddr_in6);
6369                         }
6370 #endif
6371 #ifdef INET
6372                         if ((inp->sctp_flags & SCTP_PCB_FLAGS_BOUND_V6) == 0) {
6373                                 store.sa.sa_family = AF_INET;
6374                                 store.sa.sa_len = sizeof(struct sockaddr_in);
6375                         }
6376 #endif
6377                         switch (store.sa.sa_family) {
6378 #ifdef INET
6379                         case AF_INET:
6380                                 store.sin.sin_port = inp->sctp_lport;
6381                                 break;
6382 #endif
6383 #ifdef INET6
6384                         case AF_INET6:
6385                                 store.sin6.sin6_port = inp->sctp_lport;
6386                                 break;
6387 #endif
6388                         default:
6389                                 break;
6390                         }
6391                         tinp = sctp_pcb_findep(&store.sa, 0, 0, inp->def_vrf_id);
6392                         if (tinp && (tinp != inp) &&
6393                             ((tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_ALLGONE) == 0) &&
6394                             ((tinp->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE) == 0) &&
6395                             (tinp->sctp_socket->so_qlimit)) {
6396                                 /*
6397                                  * we have a listener already and its not
6398                                  * this inp.
6399                                  */
6400                                 SCTP_INP_DECR_REF(tinp);
6401                                 return (EADDRINUSE);
6402                         } else if (tinp) {
6403                                 SCTP_INP_DECR_REF(inp);
6404                         }
6405                 }
6406         }
6407         SCTP_INP_RLOCK(inp);
6408 #ifdef SCTP_LOCK_LOGGING
6409         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_LOCK_LOGGING_ENABLE) {
6410                 sctp_log_lock(inp, (struct sctp_tcb *)NULL, SCTP_LOG_LOCK_SOCK);
6411         }
6412 #endif
6413         SOCK_LOCK(so);
6414         error = solisten_proto_check(so);
6415         if (error) {
6416                 SOCK_UNLOCK(so);
6417                 SCTP_INP_RUNLOCK(inp);
6418                 return (error);
6419         }
6420         if ((sctp_is_feature_on(inp, SCTP_PCB_FLAGS_PORTREUSE)) &&
6421             (inp->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL)) {
6422                 /*
6423                  * The unlucky case - We are in the tcp pool with this guy.
6424                  * - Someone else is in the main inp slot. - We must move
6425                  * this guy (the listener) to the main slot - We must then
6426                  * move the guy that was listener to the TCP Pool.
6427                  */
6428                 if (sctp_swap_inpcb_for_listen(inp)) {
6429                         goto in_use;
6430                 }
6431         }
6432         if ((inp->sctp_flags & SCTP_PCB_FLAGS_TCPTYPE) &&
6433             (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED)) {
6434                 /* We are already connected AND the TCP model */
6435 in_use:
6436                 SCTP_INP_RUNLOCK(inp);
6437                 SOCK_UNLOCK(so);
6438                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EADDRINUSE);
6439                 return (EADDRINUSE);
6440         }
6441         SCTP_INP_RUNLOCK(inp);
6442         if (inp->sctp_flags & SCTP_PCB_FLAGS_UNBOUND) {
6443                 /* We must do a bind. */
6444                 SOCK_UNLOCK(so);
6445                 if ((error = sctp_inpcb_bind(so, NULL, NULL, p))) {
6446                         /* bind error, probably perm */
6447                         return (error);
6448                 }
6449                 SOCK_LOCK(so);
6450         }
6451         /* It appears for 7.0 and on, we must always call this. */
6452         solisten_proto(so, backlog);
6453         if (inp->sctp_flags & SCTP_PCB_FLAGS_UDPTYPE) {
6454                 /* remove the ACCEPTCONN flag for one-to-many sockets */
6455                 so->so_options &= ~SO_ACCEPTCONN;
6456         }
6457         if (backlog == 0) {
6458                 /* turning off listen */
6459                 so->so_options &= ~SO_ACCEPTCONN;
6460         }
6461         SOCK_UNLOCK(so);
6462         return (error);
6463 }
6464
6465 static int sctp_defered_wakeup_cnt = 0;
6466
6467 int
6468 sctp_accept(struct socket *so, struct sockaddr **addr)
6469 {
6470         struct sctp_tcb *stcb;
6471         struct sctp_inpcb *inp;
6472         union sctp_sockstore store;
6473
6474 #ifdef INET6
6475         int error;
6476
6477 #endif
6478         inp = (struct sctp_inpcb *)so->so_pcb;
6479
6480         if (inp == NULL) {
6481                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6482                 return (ECONNRESET);
6483         }
6484         SCTP_INP_RLOCK(inp);
6485         if (inp->sctp_flags & SCTP_PCB_FLAGS_UDPTYPE) {
6486                 SCTP_INP_RUNLOCK(inp);
6487                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EOPNOTSUPP);
6488                 return (EOPNOTSUPP);
6489         }
6490         if (so->so_state & SS_ISDISCONNECTED) {
6491                 SCTP_INP_RUNLOCK(inp);
6492                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ECONNABORTED);
6493                 return (ECONNABORTED);
6494         }
6495         stcb = LIST_FIRST(&inp->sctp_asoc_list);
6496         if (stcb == NULL) {
6497                 SCTP_INP_RUNLOCK(inp);
6498                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6499                 return (ECONNRESET);
6500         }
6501         SCTP_TCB_LOCK(stcb);
6502         SCTP_INP_RUNLOCK(inp);
6503         store = stcb->asoc.primary_destination->ro._l_addr;
6504         stcb->asoc.state &= ~SCTP_STATE_IN_ACCEPT_QUEUE;
6505         SCTP_TCB_UNLOCK(stcb);
6506         switch (store.sa.sa_family) {
6507 #ifdef INET
6508         case AF_INET:
6509                 {
6510                         struct sockaddr_in *sin;
6511
6512                         SCTP_MALLOC_SONAME(sin, struct sockaddr_in *, sizeof *sin);
6513                         if (sin == NULL)
6514                                 return (ENOMEM);
6515                         sin->sin_family = AF_INET;
6516                         sin->sin_len = sizeof(*sin);
6517                         sin->sin_port = store.sin.sin_port;
6518                         sin->sin_addr = store.sin.sin_addr;
6519                         *addr = (struct sockaddr *)sin;
6520                         break;
6521                 }
6522 #endif
6523 #ifdef INET6
6524         case AF_INET6:
6525                 {
6526                         struct sockaddr_in6 *sin6;
6527
6528                         SCTP_MALLOC_SONAME(sin6, struct sockaddr_in6 *, sizeof *sin6);
6529                         if (sin6 == NULL)
6530                                 return (ENOMEM);
6531                         sin6->sin6_family = AF_INET6;
6532                         sin6->sin6_len = sizeof(*sin6);
6533                         sin6->sin6_port = store.sin6.sin6_port;
6534                         sin6->sin6_addr = store.sin6.sin6_addr;
6535                         if ((error = sa6_recoverscope(sin6)) != 0) {
6536                                 SCTP_FREE_SONAME(sin6);
6537                                 return (error);
6538                         }
6539                         *addr = (struct sockaddr *)sin6;
6540                         break;
6541                 }
6542 #endif
6543         default:
6544                 /* TSNH */
6545                 break;
6546         }
6547         /* Wake any delayed sleep action */
6548         if (inp->sctp_flags & SCTP_PCB_FLAGS_DONT_WAKE) {
6549                 SCTP_INP_WLOCK(inp);
6550                 inp->sctp_flags &= ~SCTP_PCB_FLAGS_DONT_WAKE;
6551                 if (inp->sctp_flags & SCTP_PCB_FLAGS_WAKEOUTPUT) {
6552                         inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEOUTPUT;
6553                         SCTP_INP_WUNLOCK(inp);
6554                         SOCKBUF_LOCK(&inp->sctp_socket->so_snd);
6555                         if (sowriteable(inp->sctp_socket)) {
6556                                 sowwakeup_locked(inp->sctp_socket);
6557                         } else {
6558                                 SOCKBUF_UNLOCK(&inp->sctp_socket->so_snd);
6559                         }
6560                         SCTP_INP_WLOCK(inp);
6561                 }
6562                 if (inp->sctp_flags & SCTP_PCB_FLAGS_WAKEINPUT) {
6563                         inp->sctp_flags &= ~SCTP_PCB_FLAGS_WAKEINPUT;
6564                         SCTP_INP_WUNLOCK(inp);
6565                         SOCKBUF_LOCK(&inp->sctp_socket->so_rcv);
6566                         if (soreadable(inp->sctp_socket)) {
6567                                 sctp_defered_wakeup_cnt++;
6568                                 sorwakeup_locked(inp->sctp_socket);
6569                         } else {
6570                                 SOCKBUF_UNLOCK(&inp->sctp_socket->so_rcv);
6571                         }
6572                         SCTP_INP_WLOCK(inp);
6573                 }
6574                 SCTP_INP_WUNLOCK(inp);
6575         }
6576         if (stcb->asoc.state & SCTP_STATE_ABOUT_TO_BE_FREED) {
6577                 SCTP_TCB_LOCK(stcb);
6578                 sctp_free_assoc(inp, stcb, SCTP_NORMAL_PROC, SCTP_FROM_SCTP_USRREQ + SCTP_LOC_7);
6579         }
6580         return (0);
6581 }
6582
6583 #ifdef INET
6584 int
6585 sctp_ingetaddr(struct socket *so, struct sockaddr **addr)
6586 {
6587         struct sockaddr_in *sin;
6588         uint32_t vrf_id;
6589         struct sctp_inpcb *inp;
6590         struct sctp_ifa *sctp_ifa;
6591
6592         /*
6593          * Do the malloc first in case it blocks.
6594          */
6595         SCTP_MALLOC_SONAME(sin, struct sockaddr_in *, sizeof *sin);
6596         if (sin == NULL)
6597                 return (ENOMEM);
6598         sin->sin_family = AF_INET;
6599         sin->sin_len = sizeof(*sin);
6600         inp = (struct sctp_inpcb *)so->so_pcb;
6601         if (!inp) {
6602                 SCTP_FREE_SONAME(sin);
6603                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6604                 return (ECONNRESET);
6605         }
6606         SCTP_INP_RLOCK(inp);
6607         sin->sin_port = inp->sctp_lport;
6608         if (inp->sctp_flags & SCTP_PCB_FLAGS_BOUNDALL) {
6609                 if (inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) {
6610                         struct sctp_tcb *stcb;
6611                         struct sockaddr_in *sin_a;
6612                         struct sctp_nets *net;
6613                         int fnd;
6614
6615                         stcb = LIST_FIRST(&inp->sctp_asoc_list);
6616                         if (stcb == NULL) {
6617                                 goto notConn;
6618                         }
6619                         fnd = 0;
6620                         sin_a = NULL;
6621                         SCTP_TCB_LOCK(stcb);
6622                         TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
6623                                 sin_a = (struct sockaddr_in *)&net->ro._l_addr;
6624                                 if (sin_a == NULL)
6625                                         /* this will make coverity happy */
6626                                         continue;
6627
6628                                 if (sin_a->sin_family == AF_INET) {
6629                                         fnd = 1;
6630                                         break;
6631                                 }
6632                         }
6633                         if ((!fnd) || (sin_a == NULL)) {
6634                                 /* punt */
6635                                 SCTP_TCB_UNLOCK(stcb);
6636                                 goto notConn;
6637                         }
6638                         vrf_id = inp->def_vrf_id;
6639                         sctp_ifa = sctp_source_address_selection(inp,
6640                             stcb,
6641                             (sctp_route_t *) & net->ro,
6642                             net, 0, vrf_id);
6643                         if (sctp_ifa) {
6644                                 sin->sin_addr = sctp_ifa->address.sin.sin_addr;
6645                                 sctp_free_ifa(sctp_ifa);
6646                         }
6647                         SCTP_TCB_UNLOCK(stcb);
6648                 } else {
6649                         /* For the bound all case you get back 0 */
6650         notConn:
6651                         sin->sin_addr.s_addr = 0;
6652                 }
6653
6654         } else {
6655                 /* Take the first IPv4 address in the list */
6656                 struct sctp_laddr *laddr;
6657                 int fnd = 0;
6658
6659                 LIST_FOREACH(laddr, &inp->sctp_addr_list, sctp_nxt_addr) {
6660                         if (laddr->ifa->address.sa.sa_family == AF_INET) {
6661                                 struct sockaddr_in *sin_a;
6662
6663                                 sin_a = (struct sockaddr_in *)&laddr->ifa->address.sa;
6664                                 sin->sin_addr = sin_a->sin_addr;
6665                                 fnd = 1;
6666                                 break;
6667                         }
6668                 }
6669                 if (!fnd) {
6670                         SCTP_FREE_SONAME(sin);
6671                         SCTP_INP_RUNLOCK(inp);
6672                         SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
6673                         return (ENOENT);
6674                 }
6675         }
6676         SCTP_INP_RUNLOCK(inp);
6677         (*addr) = (struct sockaddr *)sin;
6678         return (0);
6679 }
6680
6681 int
6682 sctp_peeraddr(struct socket *so, struct sockaddr **addr)
6683 {
6684         struct sockaddr_in *sin;
6685         int fnd;
6686         struct sockaddr_in *sin_a;
6687         struct sctp_inpcb *inp;
6688         struct sctp_tcb *stcb;
6689         struct sctp_nets *net;
6690
6691         /* Do the malloc first in case it blocks. */
6692         SCTP_MALLOC_SONAME(sin, struct sockaddr_in *, sizeof *sin);
6693         if (sin == NULL)
6694                 return (ENOMEM);
6695         sin->sin_family = AF_INET;
6696         sin->sin_len = sizeof(*sin);
6697
6698         inp = (struct sctp_inpcb *)so->so_pcb;
6699         if ((inp == NULL) ||
6700             ((inp->sctp_flags & SCTP_PCB_FLAGS_CONNECTED) == 0)) {
6701                 /* UDP type and listeners will drop out here */
6702                 SCTP_FREE_SONAME(sin);
6703                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOTCONN);
6704                 return (ENOTCONN);
6705         }
6706         SCTP_INP_RLOCK(inp);
6707         stcb = LIST_FIRST(&inp->sctp_asoc_list);
6708         if (stcb) {
6709                 SCTP_TCB_LOCK(stcb);
6710         }
6711         SCTP_INP_RUNLOCK(inp);
6712         if (stcb == NULL) {
6713                 SCTP_FREE_SONAME(sin);
6714                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, EINVAL);
6715                 return (ECONNRESET);
6716         }
6717         fnd = 0;
6718         TAILQ_FOREACH(net, &stcb->asoc.nets, sctp_next) {
6719                 sin_a = (struct sockaddr_in *)&net->ro._l_addr;
6720                 if (sin_a->sin_family == AF_INET) {
6721                         fnd = 1;
6722                         sin->sin_port = stcb->rport;
6723                         sin->sin_addr = sin_a->sin_addr;
6724                         break;
6725                 }
6726         }
6727         SCTP_TCB_UNLOCK(stcb);
6728         if (!fnd) {
6729                 /* No IPv4 address */
6730                 SCTP_FREE_SONAME(sin);
6731                 SCTP_LTRACE_ERR_RET(inp, NULL, NULL, SCTP_FROM_SCTP_USRREQ, ENOENT);
6732                 return (ENOENT);
6733         }
6734         (*addr) = (struct sockaddr *)sin;
6735         return (0);
6736 }
6737
6738 struct pr_usrreqs sctp_usrreqs = {
6739         .pru_abort = sctp_abort,
6740         .pru_accept = sctp_accept,
6741         .pru_attach = sctp_attach,
6742         .pru_bind = sctp_bind,
6743         .pru_connect = sctp_connect,
6744         .pru_control = in_control,
6745         .pru_close = sctp_close,
6746         .pru_detach = sctp_close,
6747         .pru_sopoll = sopoll_generic,
6748         .pru_flush = sctp_flush,
6749         .pru_disconnect = sctp_disconnect,
6750         .pru_listen = sctp_listen,
6751         .pru_peeraddr = sctp_peeraddr,
6752         .pru_send = sctp_sendm,
6753         .pru_shutdown = sctp_shutdown,
6754         .pru_sockaddr = sctp_ingetaddr,
6755         .pru_sosend = sctp_sosend,
6756         .pru_soreceive = sctp_soreceive
6757 };
6758
6759 #endif