]> CyberLeo.Net >> Repos - FreeBSD/releng/10.3.git/blob - sys/netinet/sctp_timer.c
- Copy stable/10@296371 to releng/10.3 in preparation for 10.3-RC1
[FreeBSD/releng/10.3.git] / sys / netinet / sctp_timer.c
1 /*-
2  * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3  * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
4  * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions are met:
8  *
9  * a) Redistributions of source code must retain the above copyright notice,
10  *    this list of conditions and the following disclaimer.
11  *
12  * b) Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in
14  *    the documentation and/or other materials provided with the distribution.
15  *
16  * c) Neither the name of Cisco Systems, Inc. nor the names of its
17  *    contributors may be used to endorse or promote products derived
18  *    from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30  * THE POSSIBILITY OF SUCH DAMAGE.
31  */
32
33 #include <sys/cdefs.h>
34 __FBSDID("$FreeBSD$");
35
36 #define _IP_VHL
37 #include <netinet/sctp_os.h>
38 #include <netinet/sctp_pcb.h>
39 #ifdef INET6
40 #endif
41 #include <netinet/sctp_var.h>
42 #include <netinet/sctp_sysctl.h>
43 #include <netinet/sctp_timer.h>
44 #include <netinet/sctputil.h>
45 #include <netinet/sctp_output.h>
46 #include <netinet/sctp_header.h>
47 #include <netinet/sctp_indata.h>
48 #include <netinet/sctp_asconf.h>
49 #include <netinet/sctp_input.h>
50 #include <netinet/sctp.h>
51 #include <netinet/sctp_uio.h>
52 #if defined(INET) || defined(INET6)
53 #include <netinet/udp.h>
54 #endif
55
56
57 void
58 sctp_audit_retranmission_queue(struct sctp_association *asoc)
59 {
60         struct sctp_tmit_chunk *chk;
61
62         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
63             asoc->sent_queue_retran_cnt,
64             asoc->sent_queue_cnt);
65         asoc->sent_queue_retran_cnt = 0;
66         asoc->sent_queue_cnt = 0;
67         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
68                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
69                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
70                 }
71                 asoc->sent_queue_cnt++;
72         }
73         TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
74                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
75                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
76                 }
77         }
78         TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
79                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
80                         sctp_ucount_incr(asoc->sent_queue_retran_cnt);
81                 }
82         }
83         SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
84             asoc->sent_queue_retran_cnt,
85             asoc->sent_queue_cnt);
86 }
87
88 static int
89 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
90     struct sctp_nets *net, uint16_t threshold)
91 {
92         if (net) {
93                 net->error_count++;
94                 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
95                     (void *)net, net->error_count,
96                     net->failure_threshold);
97                 if (net->error_count > net->failure_threshold) {
98                         /* We had a threshold failure */
99                         if (net->dest_state & SCTP_ADDR_REACHABLE) {
100                                 net->dest_state &= ~SCTP_ADDR_REACHABLE;
101                                 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
102                                 net->dest_state &= ~SCTP_ADDR_PF;
103                                 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
104                                     stcb, 0,
105                                     (void *)net, SCTP_SO_NOT_LOCKED);
106                         }
107                 } else if ((net->pf_threshold < net->failure_threshold) &&
108                     (net->error_count > net->pf_threshold)) {
109                         if (!(net->dest_state & SCTP_ADDR_PF)) {
110                                 net->dest_state |= SCTP_ADDR_PF;
111                                 net->last_active = sctp_get_tick_count();
112                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
113                                 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
114                                     inp, stcb, net,
115                                     SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
116                                 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
117                         }
118                 }
119         }
120         if (stcb == NULL)
121                 return (0);
122
123         if (net) {
124                 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
125                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
126                                 sctp_misc_ints(SCTP_THRESHOLD_INCR,
127                                     stcb->asoc.overall_error_count,
128                                     (stcb->asoc.overall_error_count + 1),
129                                     SCTP_FROM_SCTP_TIMER,
130                                     __LINE__);
131                         }
132                         stcb->asoc.overall_error_count++;
133                 }
134         } else {
135                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
136                         sctp_misc_ints(SCTP_THRESHOLD_INCR,
137                             stcb->asoc.overall_error_count,
138                             (stcb->asoc.overall_error_count + 1),
139                             SCTP_FROM_SCTP_TIMER,
140                             __LINE__);
141                 }
142                 stcb->asoc.overall_error_count++;
143         }
144         SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
145             (void *)&stcb->asoc, stcb->asoc.overall_error_count,
146             (uint32_t) threshold,
147             ((net == NULL) ? (uint32_t) 0 : (uint32_t) net->dest_state));
148         /*
149          * We specifically do not do >= to give the assoc one more change
150          * before we fail it.
151          */
152         if (stcb->asoc.overall_error_count > threshold) {
153                 /* Abort notification sends a ULP notify */
154                 struct mbuf *op_err;
155
156                 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
157                     "Association error counter exceeded");
158                 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
159                 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
160                 return (1);
161         }
162         return (0);
163 }
164
165 /*
166  * sctp_find_alternate_net() returns a non-NULL pointer as long
167  * the argument net is non-NULL.
168  */
169 struct sctp_nets *
170 sctp_find_alternate_net(struct sctp_tcb *stcb,
171     struct sctp_nets *net,
172     int mode)
173 {
174         /* Find and return an alternate network if possible */
175         struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
176         int once;
177
178         /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
179         int min_errors = -1;
180         uint32_t max_cwnd = 0;
181
182         if (stcb->asoc.numnets == 1) {
183                 /* No others but net */
184                 return (TAILQ_FIRST(&stcb->asoc.nets));
185         }
186         /*
187          * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
188          * net algorithm. This algorithm chooses the active destination (not
189          * in PF state) with the largest cwnd value. If all destinations are
190          * in PF state, unreachable, or unconfirmed, choose the desination
191          * that is in PF state with the lowest error count. In case of a
192          * tie, choose the destination that was most recently active.
193          */
194         if (mode == 2) {
195                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
196                         /*
197                          * JRS 5/14/07 - If the destination is unreachable
198                          * or unconfirmed, skip it.
199                          */
200                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
201                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
202                                 continue;
203                         }
204                         /*
205                          * JRS 5/14/07 -  If the destination is reachable
206                          * but in PF state, compare the error count of the
207                          * destination to the minimum error count seen thus
208                          * far. Store the destination with the lower error
209                          * count.  If the error counts are equal, store the
210                          * destination that was most recently active.
211                          */
212                         if (mnet->dest_state & SCTP_ADDR_PF) {
213                                 /*
214                                  * JRS 5/14/07 - If the destination under
215                                  * consideration is the current destination,
216                                  * work as if the error count is one higher.
217                                  * The actual error count will not be
218                                  * incremented until later in the t3
219                                  * handler.
220                                  */
221                                 if (mnet == net) {
222                                         if (min_errors == -1) {
223                                                 min_errors = mnet->error_count + 1;
224                                                 min_errors_net = mnet;
225                                         } else if (mnet->error_count + 1 < min_errors) {
226                                                 min_errors = mnet->error_count + 1;
227                                                 min_errors_net = mnet;
228                                         } else if (mnet->error_count + 1 == min_errors
229                                             && mnet->last_active > min_errors_net->last_active) {
230                                                 min_errors_net = mnet;
231                                                 min_errors = mnet->error_count + 1;
232                                         }
233                                         continue;
234                                 } else {
235                                         if (min_errors == -1) {
236                                                 min_errors = mnet->error_count;
237                                                 min_errors_net = mnet;
238                                         } else if (mnet->error_count < min_errors) {
239                                                 min_errors = mnet->error_count;
240                                                 min_errors_net = mnet;
241                                         } else if (mnet->error_count == min_errors
242                                             && mnet->last_active > min_errors_net->last_active) {
243                                                 min_errors_net = mnet;
244                                                 min_errors = mnet->error_count;
245                                         }
246                                         continue;
247                                 }
248                         }
249                         /*
250                          * JRS 5/14/07 - If the destination is reachable and
251                          * not in PF state, compare the cwnd of the
252                          * destination to the highest cwnd seen thus far.
253                          * Store the destination with the higher cwnd value.
254                          * If the cwnd values are equal, randomly choose one
255                          * of the two destinations.
256                          */
257                         if (max_cwnd < mnet->cwnd) {
258                                 max_cwnd_net = mnet;
259                                 max_cwnd = mnet->cwnd;
260                         } else if (max_cwnd == mnet->cwnd) {
261                                 uint32_t rndval;
262                                 uint8_t this_random;
263
264                                 if (stcb->asoc.hb_random_idx > 3) {
265                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
266                                         memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
267                                         this_random = stcb->asoc.hb_random_values[0];
268                                         stcb->asoc.hb_random_idx++;
269                                         stcb->asoc.hb_ect_randombit = 0;
270                                 } else {
271                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
272                                         stcb->asoc.hb_random_idx++;
273                                         stcb->asoc.hb_ect_randombit = 0;
274                                 }
275                                 if (this_random % 2 == 1) {
276                                         max_cwnd_net = mnet;
277                                         max_cwnd = mnet->cwnd;  /* Useless? */
278                                 }
279                         }
280                 }
281                 if (max_cwnd_net == NULL) {
282                         if (min_errors_net == NULL) {
283                                 return (net);
284                         }
285                         return (min_errors_net);
286                 } else {
287                         return (max_cwnd_net);
288                 }
289         }
290         /*
291          * JRS 5/14/07 - If mode is set to 1, use the CMT policy for
292          * choosing an alternate net.
293          */ 
294         else if (mode == 1) {
295                 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
296                         if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
297                             (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
298                                 /*
299                                  * will skip ones that are not-reachable or
300                                  * unconfirmed
301                                  */
302                                 continue;
303                         }
304                         if (max_cwnd < mnet->cwnd) {
305                                 max_cwnd_net = mnet;
306                                 max_cwnd = mnet->cwnd;
307                         } else if (max_cwnd == mnet->cwnd) {
308                                 uint32_t rndval;
309                                 uint8_t this_random;
310
311                                 if (stcb->asoc.hb_random_idx > 3) {
312                                         rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
313                                         memcpy(stcb->asoc.hb_random_values, &rndval,
314                                             sizeof(stcb->asoc.hb_random_values));
315                                         this_random = stcb->asoc.hb_random_values[0];
316                                         stcb->asoc.hb_random_idx = 0;
317                                         stcb->asoc.hb_ect_randombit = 0;
318                                 } else {
319                                         this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
320                                         stcb->asoc.hb_random_idx++;
321                                         stcb->asoc.hb_ect_randombit = 0;
322                                 }
323                                 if (this_random % 2) {
324                                         max_cwnd_net = mnet;
325                                         max_cwnd = mnet->cwnd;
326                                 }
327                         }
328                 }
329                 if (max_cwnd_net) {
330                         return (max_cwnd_net);
331                 }
332         }
333         mnet = net;
334         once = 0;
335
336         if (mnet == NULL) {
337                 mnet = TAILQ_FIRST(&stcb->asoc.nets);
338                 if (mnet == NULL) {
339                         return (NULL);
340                 }
341         }
342         for (;;) {
343                 alt = TAILQ_NEXT(mnet, sctp_next);
344                 if (alt == NULL) {
345                         once++;
346                         if (once > 1) {
347                                 break;
348                         }
349                         alt = TAILQ_FIRST(&stcb->asoc.nets);
350                         if (alt == NULL) {
351                                 return (NULL);
352                         }
353                 }
354                 if (alt->ro.ro_rt == NULL) {
355                         if (alt->ro._s_addr) {
356                                 sctp_free_ifa(alt->ro._s_addr);
357                                 alt->ro._s_addr = NULL;
358                         }
359                         alt->src_addr_selected = 0;
360                 }
361                 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
362                     (alt->ro.ro_rt != NULL) &&
363                     (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
364                         /* Found a reachable address */
365                         break;
366                 }
367                 mnet = alt;
368         }
369
370         if (alt == NULL) {
371                 /* Case where NO insv network exists (dormant state) */
372                 /* we rotate destinations */
373                 once = 0;
374                 mnet = net;
375                 for (;;) {
376                         if (mnet == NULL) {
377                                 return (TAILQ_FIRST(&stcb->asoc.nets));
378                         }
379                         alt = TAILQ_NEXT(mnet, sctp_next);
380                         if (alt == NULL) {
381                                 once++;
382                                 if (once > 1) {
383                                         break;
384                                 }
385                                 alt = TAILQ_FIRST(&stcb->asoc.nets);
386                                 if (alt == NULL) {
387                                         break;
388                                 }
389                         }
390                         if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
391                             (alt != net)) {
392                                 /* Found an alternate address */
393                                 break;
394                         }
395                         mnet = alt;
396                 }
397         }
398         if (alt == NULL) {
399                 return (net);
400         }
401         return (alt);
402 }
403
404 static void
405 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
406     struct sctp_nets *net,
407     int win_probe,
408     int num_marked, int num_abandoned)
409 {
410         if (net->RTO == 0) {
411                 if (net->RTO_measured) {
412                         net->RTO = stcb->asoc.minrto;
413                 } else {
414                         net->RTO = stcb->asoc.initial_rto;
415                 }
416         }
417         net->RTO <<= 1;
418         if (net->RTO > stcb->asoc.maxrto) {
419                 net->RTO = stcb->asoc.maxrto;
420         }
421         if ((win_probe == 0) && (num_marked || num_abandoned)) {
422                 /* We don't apply penalty to window probe scenarios */
423                 /* JRS - Use the congestion control given in the CC module */
424                 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
425         }
426 }
427
428 #ifndef INVARIANTS
429 static void
430 sctp_recover_sent_list(struct sctp_tcb *stcb)
431 {
432         struct sctp_tmit_chunk *chk, *nchk;
433         struct sctp_association *asoc;
434
435         asoc = &stcb->asoc;
436         TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
437                 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.TSN_seq)) {
438                         SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
439                             (void *)chk, chk->rec.data.TSN_seq, asoc->last_acked_seq);
440                         if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
441                                 if (asoc->strmout[chk->rec.data.stream_number].chunks_on_queues > 0) {
442                                         asoc->strmout[chk->rec.data.stream_number].chunks_on_queues--;
443                                 }
444                         }
445                         if ((asoc->strmout[chk->rec.data.stream_number].chunks_on_queues == 0) &&
446                             (asoc->strmout[chk->rec.data.stream_number].state == SCTP_STREAM_RESET_PENDING) &&
447                             TAILQ_EMPTY(&asoc->strmout[chk->rec.data.stream_number].outqueue)) {
448                                 asoc->trigger_reset = 1;
449                         }
450                         TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
451                         if (PR_SCTP_ENABLED(chk->flags)) {
452                                 if (asoc->pr_sctp_cnt != 0)
453                                         asoc->pr_sctp_cnt--;
454                         }
455                         if (chk->data) {
456                                 /* sa_ignore NO_NULL_CHK */
457                                 sctp_free_bufspace(stcb, asoc, chk, 1);
458                                 sctp_m_freem(chk->data);
459                                 chk->data = NULL;
460                                 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
461                                         asoc->sent_queue_cnt_removeable--;
462                                 }
463                         }
464                         asoc->sent_queue_cnt--;
465                         sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
466                 }
467         }
468         SCTP_PRINTF("after recover order is as follows\n");
469         TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
470                 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.TSN_seq);
471         }
472 }
473
474 #endif
475
476 static int
477 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
478     struct sctp_nets *net,
479     struct sctp_nets *alt,
480     int window_probe,
481     int *num_marked,
482     int *num_abandoned)
483 {
484
485         /*
486          * Mark all chunks (well not all) that were sent to *net for
487          * retransmission. Move them to alt for there destination as well...
488          * We only mark chunks that have been outstanding long enough to
489          * have received feed-back.
490          */
491         struct sctp_tmit_chunk *chk, *nchk;
492         struct sctp_nets *lnets;
493         struct timeval now, min_wait, tv;
494         int cur_rto;
495         int cnt_abandoned;
496         int audit_tf, num_mk, fir;
497         unsigned int cnt_mk;
498         uint32_t orig_flight, orig_tf;
499         uint32_t tsnlast, tsnfirst;
500         int recovery_cnt = 0;
501
502
503         /* none in flight now */
504         audit_tf = 0;
505         fir = 0;
506         /*
507          * figure out how long a data chunk must be pending before we can
508          * mark it ..
509          */
510         (void)SCTP_GETTIME_TIMEVAL(&now);
511         /* get cur rto in micro-seconds */
512         cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
513         cur_rto *= 1000;
514         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
515                 sctp_log_fr(cur_rto,
516                     stcb->asoc.peers_rwnd,
517                     window_probe,
518                     SCTP_FR_T3_MARK_TIME);
519                 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
520                 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
521         }
522         tv.tv_sec = cur_rto / 1000000;
523         tv.tv_usec = cur_rto % 1000000;
524         min_wait = now;
525         timevalsub(&min_wait, &tv);
526         if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
527                 /*
528                  * if we hit here, we don't have enough seconds on the clock
529                  * to account for the RTO. We just let the lower seconds be
530                  * the bounds and don't worry about it. This may mean we
531                  * will mark a lot more than we should.
532                  */
533                 min_wait.tv_sec = min_wait.tv_usec = 0;
534         }
535         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
536                 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
537                 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
538         }
539         /*
540          * Our rwnd will be incorrect here since we are not adding back the
541          * cnt * mbuf but we will fix that down below.
542          */
543         orig_flight = net->flight_size;
544         orig_tf = stcb->asoc.total_flight;
545
546         net->fast_retran_ip = 0;
547         /* Now on to each chunk */
548         cnt_abandoned = 0;
549         num_mk = cnt_mk = 0;
550         tsnfirst = tsnlast = 0;
551 #ifndef INVARIANTS
552 start_again:
553 #endif
554         TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
555                 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.TSN_seq)) {
556                         /* Strange case our list got out of order? */
557                         SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
558                             (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.TSN_seq);
559                         recovery_cnt++;
560 #ifdef INVARIANTS
561                         panic("last acked >= chk on sent-Q");
562 #else
563                         SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
564                         sctp_recover_sent_list(stcb);
565                         if (recovery_cnt < 10) {
566                                 goto start_again;
567                         } else {
568                                 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
569                         }
570 #endif
571                 }
572                 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
573                         /*
574                          * found one to mark: If it is less than
575                          * DATAGRAM_ACKED it MUST not be a skipped or marked
576                          * TSN but instead one that is either already set
577                          * for retransmission OR one that needs
578                          * retransmission.
579                          */
580
581                         /* validate its been outstanding long enough */
582                         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
583                                 sctp_log_fr(chk->rec.data.TSN_seq,
584                                     chk->sent_rcv_time.tv_sec,
585                                     chk->sent_rcv_time.tv_usec,
586                                     SCTP_FR_T3_MARK_TIME);
587                         }
588                         if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
589                                 /*
590                                  * we have reached a chunk that was sent
591                                  * some seconds past our min.. forget it we
592                                  * will find no more to send.
593                                  */
594                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
595                                         sctp_log_fr(0,
596                                             chk->sent_rcv_time.tv_sec,
597                                             chk->sent_rcv_time.tv_usec,
598                                             SCTP_FR_T3_STOPPED);
599                                 }
600                                 continue;
601                         } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
602                             (window_probe == 0)) {
603                                 /*
604                                  * we must look at the micro seconds to
605                                  * know.
606                                  */
607                                 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
608                                         /*
609                                          * ok it was sent after our boundary
610                                          * time.
611                                          */
612                                         continue;
613                                 }
614                         }
615                         if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
616                                 /* Is it expired? */
617                                 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
618                                         /* Yes so drop it */
619                                         if (chk->data) {
620                                                 (void)sctp_release_pr_sctp_chunk(stcb,
621                                                     chk,
622                                                     1,
623                                                     SCTP_SO_NOT_LOCKED);
624                                                 cnt_abandoned++;
625                                         }
626                                         continue;
627                                 }
628                         }
629                         if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
630                                 /* Has it been retransmitted tv_sec times? */
631                                 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
632                                         if (chk->data) {
633                                                 (void)sctp_release_pr_sctp_chunk(stcb,
634                                                     chk,
635                                                     1,
636                                                     SCTP_SO_NOT_LOCKED);
637                                                 cnt_abandoned++;
638                                         }
639                                         continue;
640                                 }
641                         }
642                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
643                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
644                                 num_mk++;
645                                 if (fir == 0) {
646                                         fir = 1;
647                                         tsnfirst = chk->rec.data.TSN_seq;
648                                 }
649                                 tsnlast = chk->rec.data.TSN_seq;
650                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
651                                         sctp_log_fr(chk->rec.data.TSN_seq, chk->snd_count,
652                                             0, SCTP_FR_T3_MARKED);
653                                 }
654                                 if (chk->rec.data.chunk_was_revoked) {
655                                         /* deflate the cwnd */
656                                         chk->whoTo->cwnd -= chk->book_size;
657                                         chk->rec.data.chunk_was_revoked = 0;
658                                 }
659                                 net->marked_retrans++;
660                                 stcb->asoc.marked_retrans++;
661                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
662                                         sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
663                                             chk->whoTo->flight_size,
664                                             chk->book_size,
665                                             (uintptr_t) chk->whoTo,
666                                             chk->rec.data.TSN_seq);
667                                 }
668                                 sctp_flight_size_decrease(chk);
669                                 sctp_total_flight_decrease(stcb, chk);
670                                 stcb->asoc.peers_rwnd += chk->send_size;
671                                 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
672                         }
673                         chk->sent = SCTP_DATAGRAM_RESEND;
674                         SCTP_STAT_INCR(sctps_markedretrans);
675
676                         /* reset the TSN for striking and other FR stuff */
677                         chk->rec.data.doing_fast_retransmit = 0;
678                         /* Clear any time so NO RTT is being done */
679
680                         if (chk->do_rtt) {
681                                 if (chk->whoTo->rto_needed == 0) {
682                                         chk->whoTo->rto_needed = 1;
683                                 }
684                         }
685                         chk->do_rtt = 0;
686                         if (alt != net) {
687                                 sctp_free_remote_addr(chk->whoTo);
688                                 chk->no_fr_allowed = 1;
689                                 chk->whoTo = alt;
690                                 atomic_add_int(&alt->ref_count, 1);
691                         } else {
692                                 chk->no_fr_allowed = 0;
693                                 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
694                                         chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
695                                 } else {
696                                         chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.TSN_seq;
697                                 }
698                         }
699                         /*
700                          * CMT: Do not allow FRs on retransmitted TSNs.
701                          */
702                         if (stcb->asoc.sctp_cmt_on_off > 0) {
703                                 chk->no_fr_allowed = 1;
704                         }
705 #ifdef THIS_SHOULD_NOT_BE_DONE
706                 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
707                         /* remember highest acked one */
708                         could_be_sent = chk;
709 #endif
710                 }
711                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
712                         cnt_mk++;
713                 }
714         }
715         if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
716                 /* we did not subtract the same things? */
717                 audit_tf = 1;
718         }
719         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
720                 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
721         }
722 #ifdef SCTP_DEBUG
723         if (num_mk) {
724                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
725                     tsnlast);
726                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%ld\n",
727                     num_mk, (u_long)stcb->asoc.peers_rwnd);
728                 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
729                     tsnlast);
730                 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%d\n",
731                     num_mk,
732                     (int)stcb->asoc.peers_rwnd);
733         }
734 #endif
735         *num_marked = num_mk;
736         *num_abandoned = cnt_abandoned;
737         /*
738          * Now check for a ECN Echo that may be stranded And include the
739          * cnt_mk'd to have all resends in the control queue.
740          */
741         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
742                 if (chk->sent == SCTP_DATAGRAM_RESEND) {
743                         cnt_mk++;
744                 }
745                 if ((chk->whoTo == net) &&
746                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
747                         sctp_free_remote_addr(chk->whoTo);
748                         chk->whoTo = alt;
749                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
750                                 chk->sent = SCTP_DATAGRAM_RESEND;
751                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
752                                 cnt_mk++;
753                         }
754                         atomic_add_int(&alt->ref_count, 1);
755                 }
756         }
757 #ifdef THIS_SHOULD_NOT_BE_DONE
758         if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
759                 /* fix it so we retransmit the highest acked anyway */
760                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
761                 cnt_mk++;
762                 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
763         }
764 #endif
765         if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
766 #ifdef INVARIANTS
767                 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
768                     cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
769 #endif
770 #ifndef SCTP_AUDITING_ENABLED
771                 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
772 #endif
773         }
774         if (audit_tf) {
775                 SCTPDBG(SCTP_DEBUG_TIMER4,
776                     "Audit total flight due to negative value net:%p\n",
777                     (void *)net);
778                 stcb->asoc.total_flight = 0;
779                 stcb->asoc.total_flight_count = 0;
780                 /* Clear all networks flight size */
781                 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
782                         lnets->flight_size = 0;
783                         SCTPDBG(SCTP_DEBUG_TIMER4,
784                             "Net:%p c-f cwnd:%d ssthresh:%d\n",
785                             (void *)lnets, lnets->cwnd, lnets->ssthresh);
786                 }
787                 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
788                         if (chk->sent < SCTP_DATAGRAM_RESEND) {
789                                 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
790                                         sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
791                                             chk->whoTo->flight_size,
792                                             chk->book_size,
793                                             (uintptr_t) chk->whoTo,
794                                             chk->rec.data.TSN_seq);
795                                 }
796                                 sctp_flight_size_increase(chk);
797                                 sctp_total_flight_increase(stcb, chk);
798                         }
799                 }
800         }
801         /* We return 1 if we only have a window probe outstanding */
802         return (0);
803 }
804
805
806 int
807 sctp_t3rxt_timer(struct sctp_inpcb *inp,
808     struct sctp_tcb *stcb,
809     struct sctp_nets *net)
810 {
811         struct sctp_nets *alt;
812         int win_probe, num_mk, num_abandoned;
813
814         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
815                 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
816         }
817         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
818                 struct sctp_nets *lnet;
819
820                 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
821                         if (net == lnet) {
822                                 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
823                         } else {
824                                 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
825                         }
826                 }
827         }
828         /* Find an alternate and mark those for retransmission */
829         if ((stcb->asoc.peers_rwnd == 0) &&
830             (stcb->asoc.total_flight < net->mtu)) {
831                 SCTP_STAT_INCR(sctps_timowindowprobe);
832                 win_probe = 1;
833         } else {
834                 win_probe = 0;
835         }
836
837         if (win_probe == 0) {
838                 /* We don't do normal threshold management on window probes */
839                 if (sctp_threshold_management(inp, stcb, net,
840                     stcb->asoc.max_send_times)) {
841                         /* Association was destroyed */
842                         return (1);
843                 } else {
844                         if (net != stcb->asoc.primary_destination) {
845                                 /* send a immediate HB if our RTO is stale */
846                                 struct timeval now;
847                                 unsigned int ms_goneby;
848
849                                 (void)SCTP_GETTIME_TIMEVAL(&now);
850                                 if (net->last_sent_time.tv_sec) {
851                                         ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
852                                 } else {
853                                         ms_goneby = 0;
854                                 }
855                                 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
856                                         if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
857                                                 /*
858                                                  * no recent feed back in an
859                                                  * RTO or more, request a
860                                                  * RTT update
861                                                  */
862                                                 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
863                                         }
864                                 }
865                         }
866                 }
867         } else {
868                 /*
869                  * For a window probe we don't penalize the net's but only
870                  * the association. This may fail it if SACKs are not coming
871                  * back. If sack's are coming with rwnd locked at 0, we will
872                  * continue to hold things waiting for rwnd to raise
873                  */
874                 if (sctp_threshold_management(inp, stcb, NULL,
875                     stcb->asoc.max_send_times)) {
876                         /* Association was destroyed */
877                         return (1);
878                 }
879         }
880         if (stcb->asoc.sctp_cmt_on_off > 0) {
881                 if (net->pf_threshold < net->failure_threshold) {
882                         alt = sctp_find_alternate_net(stcb, net, 2);
883                 } else {
884                         /*
885                          * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
886                          * being used, then pick dest with largest ssthresh
887                          * for any retransmission.
888                          */
889                         alt = sctp_find_alternate_net(stcb, net, 1);
890                         /*
891                          * CUCv2: If a different dest is picked for the
892                          * retransmission, then new (rtx-)pseudo_cumack
893                          * needs to be tracked for orig dest. Let CUCv2
894                          * track new (rtx-) pseudo-cumack always.
895                          */
896                         net->find_pseudo_cumack = 1;
897                         net->find_rtx_pseudo_cumack = 1;
898                 }
899         } else {
900                 alt = sctp_find_alternate_net(stcb, net, 0);
901         }
902
903         num_mk = 0;
904         num_abandoned = 0;
905         (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
906             &num_mk, &num_abandoned);
907         /* FR Loss recovery just ended with the T3. */
908         stcb->asoc.fast_retran_loss_recovery = 0;
909
910         /* CMT FR loss recovery ended with the T3 */
911         net->fast_retran_loss_recovery = 0;
912         if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
913             (net->flight_size == 0)) {
914                 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
915         }
916         /*
917          * setup the sat loss recovery that prevents satellite cwnd advance.
918          */
919         stcb->asoc.sat_t3_loss_recovery = 1;
920         stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
921
922         /* Backoff the timer and cwnd */
923         sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
924         if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
925             (net->dest_state & SCTP_ADDR_PF)) {
926                 /* Move all pending over too */
927                 sctp_move_chunks_from_net(stcb, net);
928
929                 /*
930                  * Get the address that failed, to force a new src address
931                  * selecton and a route allocation.
932                  */
933                 if (net->ro._s_addr) {
934                         sctp_free_ifa(net->ro._s_addr);
935                         net->ro._s_addr = NULL;
936                 }
937                 net->src_addr_selected = 0;
938
939                 /* Force a route allocation too */
940                 if (net->ro.ro_rt) {
941                         RTFREE(net->ro.ro_rt);
942                         net->ro.ro_rt = NULL;
943                 }
944                 /* Was it our primary? */
945                 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
946                         /*
947                          * Yes, note it as such and find an alternate note:
948                          * this means HB code must use this to resent the
949                          * primary if it goes active AND if someone does a
950                          * change-primary then this flag must be cleared
951                          * from any net structures.
952                          */
953                         if (stcb->asoc.alternate) {
954                                 sctp_free_remote_addr(stcb->asoc.alternate);
955                         }
956                         stcb->asoc.alternate = alt;
957                         atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
958                 }
959         }
960         /*
961          * Special case for cookie-echo'ed case, we don't do output but must
962          * await the COOKIE-ACK before retransmission
963          */
964         if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
965                 /*
966                  * Here we just reset the timer and start again since we
967                  * have not established the asoc
968                  */
969                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
970                 return (0);
971         }
972         if (stcb->asoc.prsctp_supported) {
973                 struct sctp_tmit_chunk *lchk;
974
975                 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
976                 /* C3. See if we need to send a Fwd-TSN */
977                 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
978                         send_forward_tsn(stcb, &stcb->asoc);
979                         if (lchk) {
980                                 /* Assure a timer is up */
981                                 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
982                         }
983                 }
984         }
985         if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
986                 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
987         }
988         return (0);
989 }
990
991 int
992 sctp_t1init_timer(struct sctp_inpcb *inp,
993     struct sctp_tcb *stcb,
994     struct sctp_nets *net)
995 {
996         /* bump the thresholds */
997         if (stcb->asoc.delayed_connection) {
998                 /*
999                  * special hook for delayed connection. The library did NOT
1000                  * complete the rest of its sends.
1001                  */
1002                 stcb->asoc.delayed_connection = 0;
1003                 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1004                 return (0);
1005         }
1006         if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) {
1007                 return (0);
1008         }
1009         if (sctp_threshold_management(inp, stcb, net,
1010             stcb->asoc.max_init_times)) {
1011                 /* Association was destroyed */
1012                 return (1);
1013         }
1014         stcb->asoc.dropped_special_cnt = 0;
1015         sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1016         if (stcb->asoc.initial_init_rto_max < net->RTO) {
1017                 net->RTO = stcb->asoc.initial_init_rto_max;
1018         }
1019         if (stcb->asoc.numnets > 1) {
1020                 /* If we have more than one addr use it */
1021                 struct sctp_nets *alt;
1022
1023                 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1024                 if (alt != stcb->asoc.primary_destination) {
1025                         sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1026                         stcb->asoc.primary_destination = alt;
1027                 }
1028         }
1029         /* Send out a new init */
1030         sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1031         return (0);
1032 }
1033
1034 /*
1035  * For cookie and asconf we actually need to find and mark for resend, then
1036  * increment the resend counter (after all the threshold management stuff of
1037  * course).
1038  */
1039 int
1040 sctp_cookie_timer(struct sctp_inpcb *inp,
1041     struct sctp_tcb *stcb,
1042     struct sctp_nets *net SCTP_UNUSED)
1043 {
1044         struct sctp_nets *alt;
1045         struct sctp_tmit_chunk *cookie;
1046
1047         /* first before all else we must find the cookie */
1048         TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1049                 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1050                         break;
1051                 }
1052         }
1053         if (cookie == NULL) {
1054                 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1055                         /* FOOBAR! */
1056                         struct mbuf *op_err;
1057
1058                         op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1059                             "Cookie timer expired, but no cookie");
1060                         inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1061                         sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1062                 } else {
1063 #ifdef INVARIANTS
1064                         panic("Cookie timer expires in wrong state?");
1065 #else
1066                         SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc));
1067                         return (0);
1068 #endif
1069                 }
1070                 return (0);
1071         }
1072         /* Ok we found the cookie, threshold management next */
1073         if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1074             stcb->asoc.max_init_times)) {
1075                 /* Assoc is over */
1076                 return (1);
1077         }
1078         /*
1079          * cleared theshold management now lets backoff the address & select
1080          * an alternate
1081          */
1082         stcb->asoc.dropped_special_cnt = 0;
1083         sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1084         alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1085         if (alt != cookie->whoTo) {
1086                 sctp_free_remote_addr(cookie->whoTo);
1087                 cookie->whoTo = alt;
1088                 atomic_add_int(&alt->ref_count, 1);
1089         }
1090         /* Now mark the retran info */
1091         if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1092                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1093         }
1094         cookie->sent = SCTP_DATAGRAM_RESEND;
1095         /*
1096          * Now call the output routine to kick out the cookie again, Note we
1097          * don't mark any chunks for retran so that FR will need to kick in
1098          * to move these (or a send timer).
1099          */
1100         return (0);
1101 }
1102
1103 int
1104 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1105     struct sctp_nets *net)
1106 {
1107         struct sctp_nets *alt;
1108         struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1109
1110         if (stcb->asoc.stream_reset_outstanding == 0) {
1111                 return (0);
1112         }
1113         /* find the existing STRRESET, we use the seq number we sent out on */
1114         (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1115         if (strrst == NULL) {
1116                 return (0);
1117         }
1118         /* do threshold management */
1119         if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1120             stcb->asoc.max_send_times)) {
1121                 /* Assoc is over */
1122                 return (1);
1123         }
1124         /*
1125          * cleared theshold management now lets backoff the address & select
1126          * an alternate
1127          */
1128         sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1129         alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1130         sctp_free_remote_addr(strrst->whoTo);
1131         strrst->whoTo = alt;
1132         atomic_add_int(&alt->ref_count, 1);
1133
1134         /* See if a ECN Echo is also stranded */
1135         TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1136                 if ((chk->whoTo == net) &&
1137                     (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1138                         sctp_free_remote_addr(chk->whoTo);
1139                         if (chk->sent != SCTP_DATAGRAM_RESEND) {
1140                                 chk->sent = SCTP_DATAGRAM_RESEND;
1141                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1142                         }
1143                         chk->whoTo = alt;
1144                         atomic_add_int(&alt->ref_count, 1);
1145                 }
1146         }
1147         if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1148                 /*
1149                  * If the address went un-reachable, we need to move to
1150                  * alternates for ALL chk's in queue
1151                  */
1152                 sctp_move_chunks_from_net(stcb, net);
1153         }
1154         /* mark the retran info */
1155         if (strrst->sent != SCTP_DATAGRAM_RESEND)
1156                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1157         strrst->sent = SCTP_DATAGRAM_RESEND;
1158
1159         /* restart the timer */
1160         sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1161         return (0);
1162 }
1163
1164 int
1165 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1166     struct sctp_nets *net)
1167 {
1168         struct sctp_nets *alt;
1169         struct sctp_tmit_chunk *asconf, *chk;
1170
1171         /* is this a first send, or a retransmission? */
1172         if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1173                 /* compose a new ASCONF chunk and send it */
1174                 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1175         } else {
1176                 /*
1177                  * Retransmission of the existing ASCONF is needed
1178                  */
1179
1180                 /* find the existing ASCONF */
1181                 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1182                 if (asconf == NULL) {
1183                         return (0);
1184                 }
1185                 /* do threshold management */
1186                 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1187                     stcb->asoc.max_send_times)) {
1188                         /* Assoc is over */
1189                         return (1);
1190                 }
1191                 if (asconf->snd_count > stcb->asoc.max_send_times) {
1192                         /*
1193                          * Something is rotten: our peer is not responding
1194                          * to ASCONFs but apparently is to other chunks.
1195                          * i.e. it is not properly handling the chunk type
1196                          * upper bits. Mark this peer as ASCONF incapable
1197                          * and cleanup.
1198                          */
1199                         SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1200                         sctp_asconf_cleanup(stcb, net);
1201                         return (0);
1202                 }
1203                 /*
1204                  * cleared threshold management, so now backoff the net and
1205                  * select an alternate
1206                  */
1207                 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1208                 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1209                 if (asconf->whoTo != alt) {
1210                         sctp_free_remote_addr(asconf->whoTo);
1211                         asconf->whoTo = alt;
1212                         atomic_add_int(&alt->ref_count, 1);
1213                 }
1214                 /* See if an ECN Echo is also stranded */
1215                 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1216                         if ((chk->whoTo == net) &&
1217                             (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1218                                 sctp_free_remote_addr(chk->whoTo);
1219                                 chk->whoTo = alt;
1220                                 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1221                                         chk->sent = SCTP_DATAGRAM_RESEND;
1222                                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1223                                 }
1224                                 atomic_add_int(&alt->ref_count, 1);
1225                         }
1226                 }
1227                 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1228                         if (chk->whoTo != alt) {
1229                                 sctp_free_remote_addr(chk->whoTo);
1230                                 chk->whoTo = alt;
1231                                 atomic_add_int(&alt->ref_count, 1);
1232                         }
1233                         if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1234                                 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1235                         chk->sent = SCTP_DATAGRAM_RESEND;
1236                 }
1237                 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1238                         /*
1239                          * If the address went un-reachable, we need to move
1240                          * to the alternate for ALL chunks in queue
1241                          */
1242                         sctp_move_chunks_from_net(stcb, net);
1243                 }
1244                 /* mark the retran info */
1245                 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1246                         sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1247                 asconf->sent = SCTP_DATAGRAM_RESEND;
1248
1249                 /* send another ASCONF if any and we can do */
1250                 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1251         }
1252         return (0);
1253 }
1254
1255 /* Mobility adaptation */
1256 void
1257 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1258     struct sctp_nets *net SCTP_UNUSED)
1259 {
1260         if (stcb->asoc.deleted_primary == NULL) {
1261                 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1262                 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1263                 return;
1264         }
1265         SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1266         SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1267         sctp_free_remote_addr(stcb->asoc.deleted_primary);
1268         stcb->asoc.deleted_primary = NULL;
1269         sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1270         return;
1271 }
1272
1273 /*
1274  * For the shutdown and shutdown-ack, we do not keep one around on the
1275  * control queue. This means we must generate a new one and call the general
1276  * chunk output routine, AFTER having done threshold management.
1277  * It is assumed that net is non-NULL.
1278  */
1279 int
1280 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1281     struct sctp_nets *net)
1282 {
1283         struct sctp_nets *alt;
1284
1285         /* first threshold managment */
1286         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1287                 /* Assoc is over */
1288                 return (1);
1289         }
1290         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1291         /* second select an alternative */
1292         alt = sctp_find_alternate_net(stcb, net, 0);
1293
1294         /* third generate a shutdown into the queue for out net */
1295         sctp_send_shutdown(stcb, alt);
1296
1297         /* fourth restart timer */
1298         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1299         return (0);
1300 }
1301
1302 int
1303 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1304     struct sctp_nets *net)
1305 {
1306         struct sctp_nets *alt;
1307
1308         /* first threshold managment */
1309         if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1310                 /* Assoc is over */
1311                 return (1);
1312         }
1313         sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1314         /* second select an alternative */
1315         alt = sctp_find_alternate_net(stcb, net, 0);
1316
1317         /* third generate a shutdown into the queue for out net */
1318         sctp_send_shutdown_ack(stcb, alt);
1319
1320         /* fourth restart timer */
1321         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1322         return (0);
1323 }
1324
1325 static void
1326 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1327     struct sctp_tcb *stcb)
1328 {
1329         struct sctp_stream_queue_pending *sp;
1330         unsigned int i, chks_in_queue = 0;
1331         int being_filled = 0;
1332
1333         /*
1334          * This function is ONLY called when the send/sent queues are empty.
1335          */
1336         if ((stcb == NULL) || (inp == NULL))
1337                 return;
1338
1339         if (stcb->asoc.sent_queue_retran_cnt) {
1340                 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1341                     stcb->asoc.sent_queue_retran_cnt);
1342                 stcb->asoc.sent_queue_retran_cnt = 0;
1343         }
1344         if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1345                 /* No stream scheduler information, initialize scheduler */
1346                 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1347                 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1348                         /* yep, we lost a stream or two */
1349                         SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1350                 } else {
1351                         /* no streams lost */
1352                         stcb->asoc.total_output_queue_size = 0;
1353                 }
1354         }
1355         /* Check to see if some data queued, if so report it */
1356         for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1357                 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1358                         TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1359                                 if (sp->msg_is_complete)
1360                                         being_filled++;
1361                                 chks_in_queue++;
1362                         }
1363                 }
1364         }
1365         if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1366                 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1367                     stcb->asoc.stream_queue_cnt, chks_in_queue);
1368         }
1369         if (chks_in_queue) {
1370                 /* call the output queue function */
1371                 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1372                 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1373                     (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1374                         /*
1375                          * Probably should go in and make it go back through
1376                          * and add fragments allowed
1377                          */
1378                         if (being_filled == 0) {
1379                                 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1380                                     chks_in_queue);
1381                         }
1382                 }
1383         } else {
1384                 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1385                     (u_long)stcb->asoc.total_output_queue_size);
1386                 stcb->asoc.total_output_queue_size = 0;
1387         }
1388 }
1389
1390 int
1391 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1392     struct sctp_nets *net)
1393 {
1394         uint8_t net_was_pf;
1395
1396         if (net->dest_state & SCTP_ADDR_PF) {
1397                 net_was_pf = 1;
1398         } else {
1399                 net_was_pf = 0;
1400         }
1401         if (net->hb_responded == 0) {
1402                 if (net->ro._s_addr) {
1403                         /*
1404                          * Invalidate the src address if we did not get a
1405                          * response last time.
1406                          */
1407                         sctp_free_ifa(net->ro._s_addr);
1408                         net->ro._s_addr = NULL;
1409                         net->src_addr_selected = 0;
1410                 }
1411                 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1412                 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1413                         /* Assoc is over */
1414                         return (1);
1415                 }
1416         }
1417         /* Zero PBA, if it needs it */
1418         if (net->partial_bytes_acked) {
1419                 net->partial_bytes_acked = 0;
1420         }
1421         if ((stcb->asoc.total_output_queue_size > 0) &&
1422             (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1423             (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1424                 sctp_audit_stream_queues_for_size(inp, stcb);
1425         }
1426         if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1427             !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1428                 /*
1429                  * when move to PF during threshold mangement, a HB has been
1430                  * queued in that routine
1431                  */
1432                 uint32_t ms_gone_by;
1433
1434                 if ((net->last_sent_time.tv_sec > 0) ||
1435                     (net->last_sent_time.tv_usec > 0)) {
1436                         struct timeval diff;
1437
1438                         SCTP_GETTIME_TIMEVAL(&diff);
1439                         timevalsub(&diff, &net->last_sent_time);
1440                         ms_gone_by = (uint32_t) (diff.tv_sec * 1000) +
1441                             (uint32_t) (diff.tv_usec / 1000);
1442                 } else {
1443                         ms_gone_by = 0xffffffff;
1444                 }
1445                 if ((ms_gone_by >= net->heart_beat_delay) ||
1446                     (net->dest_state & SCTP_ADDR_PF)) {
1447                         sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1448                 }
1449         }
1450         return (0);
1451 }
1452
1453 void
1454 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1455     struct sctp_tcb *stcb,
1456     struct sctp_nets *net)
1457 {
1458         uint32_t next_mtu, mtu;
1459
1460         next_mtu = sctp_get_next_mtu(net->mtu);
1461
1462         if ((next_mtu > net->mtu) && (net->port == 0)) {
1463                 if ((net->src_addr_selected == 0) ||
1464                     (net->ro._s_addr == NULL) ||
1465                     (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1466                         if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1467                                 sctp_free_ifa(net->ro._s_addr);
1468                                 net->ro._s_addr = NULL;
1469                                 net->src_addr_selected = 0;
1470                         } else if (net->ro._s_addr == NULL) {
1471 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1472                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1473                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1474
1475                                         /* KAME hack: embed scopeid */
1476                                         (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1477                                 }
1478 #endif
1479
1480                                 net->ro._s_addr = sctp_source_address_selection(inp,
1481                                     stcb,
1482                                     (sctp_route_t *) & net->ro,
1483                                     net, 0, stcb->asoc.vrf_id);
1484 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1485                                 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1486                                         struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1487
1488                                         (void)sa6_recoverscope(sin6);
1489                                 }
1490 #endif                          /* INET6 */
1491                         }
1492                         if (net->ro._s_addr)
1493                                 net->src_addr_selected = 1;
1494                 }
1495                 if (net->ro._s_addr) {
1496                         mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1497 #if defined(INET) || defined(INET6)
1498                         if (net->port) {
1499                                 mtu -= sizeof(struct udphdr);
1500                         }
1501 #endif
1502                         if (mtu > next_mtu) {
1503                                 net->mtu = next_mtu;
1504                         } else {
1505                                 net->mtu = mtu;
1506                         }
1507                 }
1508         }
1509         /* restart the timer */
1510         sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1511 }
1512
1513 void
1514 sctp_autoclose_timer(struct sctp_inpcb *inp,
1515     struct sctp_tcb *stcb,
1516     struct sctp_nets *net)
1517 {
1518         struct timeval tn, *tim_touse;
1519         struct sctp_association *asoc;
1520         int ticks_gone_by;
1521
1522         (void)SCTP_GETTIME_TIMEVAL(&tn);
1523         if (stcb->asoc.sctp_autoclose_ticks &&
1524             sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1525                 /* Auto close is on */
1526                 asoc = &stcb->asoc;
1527                 /* pick the time to use */
1528                 if (asoc->time_last_rcvd.tv_sec >
1529                     asoc->time_last_sent.tv_sec) {
1530                         tim_touse = &asoc->time_last_rcvd;
1531                 } else {
1532                         tim_touse = &asoc->time_last_sent;
1533                 }
1534                 /* Now has long enough transpired to autoclose? */
1535                 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1536                 if ((ticks_gone_by > 0) &&
1537                     (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1538                         /*
1539                          * autoclose time has hit, call the output routine,
1540                          * which should do nothing just to be SURE we don't
1541                          * have hanging data. We can then safely check the
1542                          * queues and know that we are clear to send
1543                          * shutdown
1544                          */
1545                         sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1546                         /* Are we clean? */
1547                         if (TAILQ_EMPTY(&asoc->send_queue) &&
1548                             TAILQ_EMPTY(&asoc->sent_queue)) {
1549                                 /*
1550                                  * there is nothing queued to send, so I'm
1551                                  * done...
1552                                  */
1553                                 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
1554                                         /* only send SHUTDOWN 1st time thru */
1555                                         struct sctp_nets *netp;
1556
1557                                         if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
1558                                             (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1559                                                 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1560                                         }
1561                                         SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1562                                         SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1563                                         sctp_stop_timers_for_shutdown(stcb);
1564                                         if (stcb->asoc.alternate) {
1565                                                 netp = stcb->asoc.alternate;
1566                                         } else {
1567                                                 netp = stcb->asoc.primary_destination;
1568                                         }
1569                                         sctp_send_shutdown(stcb, netp);
1570                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1571                                             stcb->sctp_ep, stcb,
1572                                             netp);
1573                                         sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1574                                             stcb->sctp_ep, stcb,
1575                                             netp);
1576                                 }
1577                         }
1578                 } else {
1579                         /*
1580                          * No auto close at this time, reset t-o to check
1581                          * later
1582                          */
1583                         int tmp;
1584
1585                         /* fool the timer startup to use the time left */
1586                         tmp = asoc->sctp_autoclose_ticks;
1587                         asoc->sctp_autoclose_ticks -= ticks_gone_by;
1588                         sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1589                             net);
1590                         /* restore the real tick value */
1591                         asoc->sctp_autoclose_ticks = tmp;
1592                 }
1593         }
1594 }