1 /*-
2 * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
3 * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
4 * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions are met:
8 *
9 * a) Redistributions of source code must retain the above copyright notice,
10 * this list of conditions and the following disclaimer.
11 *
12 * b) Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in
14 * the documentation and/or other materials provided with the distribution.
15 *
16 * c) Neither the name of Cisco Systems, Inc. nor the names of its
17 * contributors may be used to endorse or promote products derived
18 * from this software without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
21 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
22 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
24 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
30 * THE POSSIBILITY OF SUCH DAMAGE.
31 */
32
33 #ifdef __FreeBSD__
34 #include <sys/cdefs.h>
35 __FBSDID("$FreeBSD: head/sys/netinet/sctp_timer.c 269448 2014-08-02 21:36:40Z tuexen $");
36 #endif
37
38 #define _IP_VHL
39 #include <netinet/sctp_os.h>
40 #include <netinet/sctp_pcb.h>
41 #ifdef INET6
42 #if defined(__Userspace_os_FreeBSD)
43 #include <netinet6/sctp6_var.h>
44 #endif
45 #endif
46 #include <netinet/sctp_var.h>
47 #include <netinet/sctp_sysctl.h>
48 #include <netinet/sctp_timer.h>
49 #include <netinet/sctputil.h>
50 #include <netinet/sctp_output.h>
51 #include <netinet/sctp_header.h>
52 #include <netinet/sctp_indata.h>
53 #include <netinet/sctp_asconf.h>
54 #include <netinet/sctp_input.h>
55 #include <netinet/sctp.h>
56 #include <netinet/sctp_uio.h>
57 #if defined(INET) || defined(INET6)
58 #if !defined(__Userspace_os_Windows)
59 #include <netinet/udp.h>
60 #endif
61 #endif
62
63 #if defined(__APPLE__)
64 #define APPLE_FILE_NO 6
65 #endif
66
67 void
sctp_audit_retranmission_queue(struct sctp_association * asoc)68 sctp_audit_retranmission_queue(struct sctp_association *asoc)
69 {
70 struct sctp_tmit_chunk *chk;
71
72 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
73 asoc->sent_queue_retran_cnt,
74 asoc->sent_queue_cnt);
75 asoc->sent_queue_retran_cnt = 0;
76 asoc->sent_queue_cnt = 0;
77 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
78 if (chk->sent == SCTP_DATAGRAM_RESEND) {
79 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
80 }
81 asoc->sent_queue_cnt++;
82 }
83 TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
84 if (chk->sent == SCTP_DATAGRAM_RESEND) {
85 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
86 }
87 }
88 TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
89 if (chk->sent == SCTP_DATAGRAM_RESEND) {
90 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
91 }
92 }
93 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
94 asoc->sent_queue_retran_cnt,
95 asoc->sent_queue_cnt);
96 }
97
98 int
sctp_threshold_management(struct sctp_inpcb * inp,struct sctp_tcb * stcb,struct sctp_nets * net,uint16_t threshold)99 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
100 struct sctp_nets *net, uint16_t threshold)
101 {
102 if (net) {
103 net->error_count++;
104 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
105 (void *)net, net->error_count,
106 net->failure_threshold);
107 if (net->error_count > net->failure_threshold) {
108 /* We had a threshold failure */
109 if (net->dest_state & SCTP_ADDR_REACHABLE) {
110 net->dest_state &= ~SCTP_ADDR_REACHABLE;
111 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
112 net->dest_state &= ~SCTP_ADDR_PF;
113 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
114 stcb, 0,
115 (void *)net, SCTP_SO_NOT_LOCKED);
116 }
117 } else if ((net->pf_threshold < net->failure_threshold) &&
118 (net->error_count > net->pf_threshold)) {
119 if (!(net->dest_state & SCTP_ADDR_PF)) {
120 net->dest_state |= SCTP_ADDR_PF;
121 net->last_active = sctp_get_tick_count();
122 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
123 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net, SCTP_FROM_SCTP_TIMER + SCTP_LOC_3);
124 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, stcb->sctp_ep, stcb, net);
125 }
126 }
127 }
128 if (stcb == NULL)
129 return (0);
130
131 if (net) {
132 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
133 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
134 sctp_misc_ints(SCTP_THRESHOLD_INCR,
135 stcb->asoc.overall_error_count,
136 (stcb->asoc.overall_error_count+1),
137 SCTP_FROM_SCTP_TIMER,
138 __LINE__);
139 }
140 stcb->asoc.overall_error_count++;
141 }
142 } else {
143 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
144 sctp_misc_ints(SCTP_THRESHOLD_INCR,
145 stcb->asoc.overall_error_count,
146 (stcb->asoc.overall_error_count+1),
147 SCTP_FROM_SCTP_TIMER,
148 __LINE__);
149 }
150 stcb->asoc.overall_error_count++;
151 }
152 SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
153 (void *)&stcb->asoc, stcb->asoc.overall_error_count,
154 (uint32_t)threshold,
155 ((net == NULL) ? (uint32_t) 0 : (uint32_t) net->dest_state));
156 /*
157 * We specifically do not do >= to give the assoc one more change
158 * before we fail it.
159 */
160 if (stcb->asoc.overall_error_count > threshold) {
161 /* Abort notification sends a ULP notify */
162 struct mbuf *op_err;
163
164 op_err = sctp_generate_cause(SCTP_CAUSE_PROTOCOL_VIOLATION,
165 "Association error couter exceeded");
166 inp->last_abort_code = SCTP_FROM_SCTP_TIMER+SCTP_LOC_1;
167 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
168 return (1);
169 }
170 return (0);
171 }
172
173 /*
174 * sctp_find_alternate_net() returns a non-NULL pointer as long
175 * the argument net is non-NULL.
176 */
177 struct sctp_nets *
sctp_find_alternate_net(struct sctp_tcb * stcb,struct sctp_nets * net,int mode)178 sctp_find_alternate_net(struct sctp_tcb *stcb,
179 struct sctp_nets *net,
180 int mode)
181 {
182 /* Find and return an alternate network if possible */
183 struct sctp_nets *alt, *mnet, *min_errors_net = NULL , *max_cwnd_net = NULL;
184 int once;
185 /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
186 int min_errors = -1;
187 uint32_t max_cwnd = 0;
188
189 if (stcb->asoc.numnets == 1) {
190 /* No others but net */
191 return (TAILQ_FIRST(&stcb->asoc.nets));
192 }
193 /*
194 * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate net algorithm.
195 * This algorithm chooses the active destination (not in PF state) with the largest
196 * cwnd value. If all destinations are in PF state, unreachable, or unconfirmed, choose
197 * the desination that is in PF state with the lowest error count. In case of a tie,
198 * choose the destination that was most recently active.
199 */
200 if (mode == 2) {
201 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
202 /* JRS 5/14/07 - If the destination is unreachable or unconfirmed, skip it. */
203 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
204 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
205 continue;
206 }
207 /*
208 * JRS 5/14/07 - If the destination is reachable but in PF state, compare
209 * the error count of the destination to the minimum error count seen thus far.
210 * Store the destination with the lower error count. If the error counts are
211 * equal, store the destination that was most recently active.
212 */
213 if (mnet->dest_state & SCTP_ADDR_PF) {
214 /*
215 * JRS 5/14/07 - If the destination under consideration is the current
216 * destination, work as if the error count is one higher. The
217 * actual error count will not be incremented until later in the
218 * t3 handler.
219 */
220 if (mnet == net) {
221 if (min_errors == -1) {
222 min_errors = mnet->error_count + 1;
223 min_errors_net = mnet;
224 } else if (mnet->error_count + 1 < min_errors) {
225 min_errors = mnet->error_count + 1;
226 min_errors_net = mnet;
227 } else if (mnet->error_count + 1 == min_errors
228 && mnet->last_active > min_errors_net->last_active) {
229 min_errors_net = mnet;
230 min_errors = mnet->error_count + 1;
231 }
232 continue;
233 } else {
234 if (min_errors == -1) {
235 min_errors = mnet->error_count;
236 min_errors_net = mnet;
237 } else if (mnet->error_count < min_errors) {
238 min_errors = mnet->error_count;
239 min_errors_net = mnet;
240 } else if (mnet->error_count == min_errors
241 && mnet->last_active > min_errors_net->last_active) {
242 min_errors_net = mnet;
243 min_errors = mnet->error_count;
244 }
245 continue;
246 }
247 }
248 /*
249 * JRS 5/14/07 - If the destination is reachable and not in PF state, compare the
250 * cwnd of the destination to the highest cwnd seen thus far. Store the
251 * destination with the higher cwnd value. If the cwnd values are equal,
252 * randomly choose one of the two destinations.
253 */
254 if (max_cwnd < mnet->cwnd) {
255 max_cwnd_net = mnet;
256 max_cwnd = mnet->cwnd;
257 } else if (max_cwnd == mnet->cwnd) {
258 uint32_t rndval;
259 uint8_t this_random;
260
261 if (stcb->asoc.hb_random_idx > 3) {
262 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
263 memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
264 this_random = stcb->asoc.hb_random_values[0];
265 stcb->asoc.hb_random_idx++;
266 stcb->asoc.hb_ect_randombit = 0;
267 } else {
268 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
269 stcb->asoc.hb_random_idx++;
270 stcb->asoc.hb_ect_randombit = 0;
271 }
272 if (this_random % 2 == 1) {
273 max_cwnd_net = mnet;
274 max_cwnd = mnet->cwnd; /* Useless? */
275 }
276 }
277 }
278 if (max_cwnd_net == NULL) {
279 if (min_errors_net == NULL) {
280 return (net);
281 }
282 return (min_errors_net);
283 } else {
284 return (max_cwnd_net);
285 }
286 } /* JRS 5/14/07 - If mode is set to 1, use the CMT policy for choosing an alternate net. */
287 else if (mode == 1) {
288 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
289 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
290 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
291 /*
292 * will skip ones that are not-reachable or
293 * unconfirmed
294 */
295 continue;
296 }
297 if (max_cwnd < mnet->cwnd) {
298 max_cwnd_net = mnet;
299 max_cwnd = mnet->cwnd;
300 } else if (max_cwnd == mnet->cwnd) {
301 uint32_t rndval;
302 uint8_t this_random;
303
304 if (stcb->asoc.hb_random_idx > 3) {
305 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
306 memcpy(stcb->asoc.hb_random_values, &rndval,
307 sizeof(stcb->asoc.hb_random_values));
308 this_random = stcb->asoc.hb_random_values[0];
309 stcb->asoc.hb_random_idx = 0;
310 stcb->asoc.hb_ect_randombit = 0;
311 } else {
312 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
313 stcb->asoc.hb_random_idx++;
314 stcb->asoc.hb_ect_randombit = 0;
315 }
316 if (this_random % 2) {
317 max_cwnd_net = mnet;
318 max_cwnd = mnet->cwnd;
319 }
320 }
321 }
322 if (max_cwnd_net) {
323 return (max_cwnd_net);
324 }
325 }
326 mnet = net;
327 once = 0;
328
329 if (mnet == NULL) {
330 mnet = TAILQ_FIRST(&stcb->asoc.nets);
331 if (mnet == NULL) {
332 return (NULL);
333 }
334 }
335 do {
336 alt = TAILQ_NEXT(mnet, sctp_next);
337 if (alt == NULL)
338 {
339 once++;
340 if (once > 1) {
341 break;
342 }
343 alt = TAILQ_FIRST(&stcb->asoc.nets);
344 if (alt == NULL) {
345 return (NULL);
346 }
347 }
348 if (alt->ro.ro_rt == NULL) {
349 if (alt->ro._s_addr) {
350 sctp_free_ifa(alt->ro._s_addr);
351 alt->ro._s_addr = NULL;
352 }
353 alt->src_addr_selected = 0;
354 }
355 /*sa_ignore NO_NULL_CHK*/
356 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
357 (alt->ro.ro_rt != NULL) &&
358 (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
359 /* Found a reachable address */
360 break;
361 }
362 mnet = alt;
363 } while (alt != NULL);
364
365 if (alt == NULL) {
366 /* Case where NO insv network exists (dormant state) */
367 /* we rotate destinations */
368 once = 0;
369 mnet = net;
370 do {
371 if (mnet == NULL) {
372 return (TAILQ_FIRST(&stcb->asoc.nets));
373 }
374 alt = TAILQ_NEXT(mnet, sctp_next);
375 if (alt == NULL) {
376 once++;
377 if (once > 1) {
378 break;
379 }
380 alt = TAILQ_FIRST(&stcb->asoc.nets);
381 }
382 /*sa_ignore NO_NULL_CHK*/
383 if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
384 (alt != net)) {
385 /* Found an alternate address */
386 break;
387 }
388 mnet = alt;
389 } while (alt != NULL);
390 }
391 if (alt == NULL) {
392 return (net);
393 }
394 return (alt);
395 }
396
397 static void
sctp_backoff_on_timeout(struct sctp_tcb * stcb,struct sctp_nets * net,int win_probe,int num_marked,int num_abandoned)398 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
399 struct sctp_nets *net,
400 int win_probe,
401 int num_marked, int num_abandoned)
402 {
403 if (net->RTO == 0) {
404 net->RTO = stcb->asoc.minrto;
405 }
406 net->RTO <<= 1;
407 if (net->RTO > stcb->asoc.maxrto) {
408 net->RTO = stcb->asoc.maxrto;
409 }
410 if ((win_probe == 0) && (num_marked || num_abandoned)) {
411 /* We don't apply penalty to window probe scenarios */
412 /* JRS - Use the congestion control given in the CC module */
413 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
414 }
415 }
416
417 #ifndef INVARIANTS
418 static void
sctp_recover_sent_list(struct sctp_tcb * stcb)419 sctp_recover_sent_list(struct sctp_tcb *stcb)
420 {
421 struct sctp_tmit_chunk *chk, *nchk;
422 struct sctp_association *asoc;
423
424 asoc = &stcb->asoc;
425 TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
426 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.TSN_seq)) {
427 SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
428 (void *)chk, chk->rec.data.TSN_seq, asoc->last_acked_seq);
429 if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
430 if (asoc->strmout[chk->rec.data.stream_number].chunks_on_queues > 0) {
431 asoc->strmout[chk->rec.data.stream_number].chunks_on_queues--;
432 }
433 }
434 TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
435 if (PR_SCTP_ENABLED(chk->flags)) {
436 if (asoc->pr_sctp_cnt != 0)
437 asoc->pr_sctp_cnt--;
438 }
439 if (chk->data) {
440 /*sa_ignore NO_NULL_CHK*/
441 sctp_free_bufspace(stcb, asoc, chk, 1);
442 sctp_m_freem(chk->data);
443 chk->data = NULL;
444 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
445 asoc->sent_queue_cnt_removeable--;
446 }
447 }
448 asoc->sent_queue_cnt--;
449 sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
450 }
451 }
452 SCTP_PRINTF("after recover order is as follows\n");
453 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
454 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.TSN_seq);
455 }
456 }
457 #endif
458
459 static int
sctp_mark_all_for_resend(struct sctp_tcb * stcb,struct sctp_nets * net,struct sctp_nets * alt,int window_probe,int * num_marked,int * num_abandoned)460 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
461 struct sctp_nets *net,
462 struct sctp_nets *alt,
463 int window_probe,
464 int *num_marked,
465 int *num_abandoned)
466 {
467
468 /*
469 * Mark all chunks (well not all) that were sent to *net for
470 * retransmission. Move them to alt for there destination as well...
471 * We only mark chunks that have been outstanding long enough to
472 * have received feed-back.
473 */
474 struct sctp_tmit_chunk *chk, *nchk;
475 struct sctp_nets *lnets;
476 struct timeval now, min_wait, tv;
477 int cur_rto;
478 int cnt_abandoned;
479 int audit_tf, num_mk, fir;
480 unsigned int cnt_mk;
481 uint32_t orig_flight, orig_tf;
482 uint32_t tsnlast, tsnfirst;
483 int recovery_cnt = 0;
484
485
486 /* none in flight now */
487 audit_tf = 0;
488 fir = 0;
489 /*
490 * figure out how long a data chunk must be pending before we can
491 * mark it ..
492 */
493 (void)SCTP_GETTIME_TIMEVAL(&now);
494 /* get cur rto in micro-seconds */
495 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
496 cur_rto *= 1000;
497 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
498 sctp_log_fr(cur_rto,
499 stcb->asoc.peers_rwnd,
500 window_probe,
501 SCTP_FR_T3_MARK_TIME);
502 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
503 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
504 }
505 tv.tv_sec = cur_rto / 1000000;
506 tv.tv_usec = cur_rto % 1000000;
507 #ifndef __FreeBSD__
508 timersub(&now, &tv, &min_wait);
509 #else
510 min_wait = now;
511 timevalsub(&min_wait, &tv);
512 #endif
513 if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
514 /*
515 * if we hit here, we don't have enough seconds on the clock
516 * to account for the RTO. We just let the lower seconds be
517 * the bounds and don't worry about it. This may mean we
518 * will mark a lot more than we should.
519 */
520 min_wait.tv_sec = min_wait.tv_usec = 0;
521 }
522 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
523 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
524 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
525 }
526 /*
527 * Our rwnd will be incorrect here since we are not adding back the
528 * cnt * mbuf but we will fix that down below.
529 */
530 orig_flight = net->flight_size;
531 orig_tf = stcb->asoc.total_flight;
532
533 net->fast_retran_ip = 0;
534 /* Now on to each chunk */
535 cnt_abandoned = 0;
536 num_mk = cnt_mk = 0;
537 tsnfirst = tsnlast = 0;
538 #ifndef INVARIANTS
539 start_again:
540 #endif
541 TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
542 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.TSN_seq)) {
543 /* Strange case our list got out of order? */
544 SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
545 (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.TSN_seq);
546 recovery_cnt++;
547 #ifdef INVARIANTS
548 panic("last acked >= chk on sent-Q");
549 #else
550 SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
551 sctp_recover_sent_list(stcb);
552 if (recovery_cnt < 10) {
553 goto start_again;
554 } else {
555 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
556 }
557 #endif
558 }
559 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
560 /*
561 * found one to mark: If it is less than
562 * DATAGRAM_ACKED it MUST not be a skipped or marked
563 * TSN but instead one that is either already set
564 * for retransmission OR one that needs
565 * retransmission.
566 */
567
568 /* validate its been outstanding long enough */
569 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
570 sctp_log_fr(chk->rec.data.TSN_seq,
571 chk->sent_rcv_time.tv_sec,
572 chk->sent_rcv_time.tv_usec,
573 SCTP_FR_T3_MARK_TIME);
574 }
575 if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
576 /*
577 * we have reached a chunk that was sent
578 * some seconds past our min.. forget it we
579 * will find no more to send.
580 */
581 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
582 sctp_log_fr(0,
583 chk->sent_rcv_time.tv_sec,
584 chk->sent_rcv_time.tv_usec,
585 SCTP_FR_T3_STOPPED);
586 }
587 continue;
588 } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
589 (window_probe == 0)) {
590 /*
591 * we must look at the micro seconds to
592 * know.
593 */
594 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
595 /*
596 * ok it was sent after our boundary
597 * time.
598 */
599 continue;
600 }
601 }
602 if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
603 /* Is it expired? */
604 #ifndef __FreeBSD__
605 if (timercmp(&now, &chk->rec.data.timetodrop, >)) {
606 #else
607 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
608 #endif
609 /* Yes so drop it */
610 if (chk->data) {
611 (void)sctp_release_pr_sctp_chunk(stcb,
612 chk,
613 1,
614 SCTP_SO_NOT_LOCKED);
615 cnt_abandoned++;
616 }
617 continue;
618 }
619 }
620 if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
621 /* Has it been retransmitted tv_sec times? */
622 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
623 if (chk->data) {
624 (void)sctp_release_pr_sctp_chunk(stcb,
625 chk,
626 1,
627 SCTP_SO_NOT_LOCKED);
628 cnt_abandoned++;
629 }
630 continue;
631 }
632 }
633 if (chk->sent < SCTP_DATAGRAM_RESEND) {
634 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
635 num_mk++;
636 if (fir == 0) {
637 fir = 1;
638 tsnfirst = chk->rec.data.TSN_seq;
639 }
640 tsnlast = chk->rec.data.TSN_seq;
641 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
642 sctp_log_fr(chk->rec.data.TSN_seq, chk->snd_count,
643 0, SCTP_FR_T3_MARKED);
644 }
645
646 if (chk->rec.data.chunk_was_revoked) {
647 /* deflate the cwnd */
648 chk->whoTo->cwnd -= chk->book_size;
649 chk->rec.data.chunk_was_revoked = 0;
650 }
651 net->marked_retrans++;
652 stcb->asoc.marked_retrans++;
653 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
654 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
655 chk->whoTo->flight_size,
656 chk->book_size,
657 (uintptr_t)chk->whoTo,
658 chk->rec.data.TSN_seq);
659 }
660 sctp_flight_size_decrease(chk);
661 sctp_total_flight_decrease(stcb, chk);
662 stcb->asoc.peers_rwnd += chk->send_size;
663 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
664 }
665 chk->sent = SCTP_DATAGRAM_RESEND;
666 SCTP_STAT_INCR(sctps_markedretrans);
667
668 /* reset the TSN for striking and other FR stuff */
669 chk->rec.data.doing_fast_retransmit = 0;
670 /* Clear any time so NO RTT is being done */
671
672 if (chk->do_rtt) {
673 if (chk->whoTo->rto_needed == 0) {
674 chk->whoTo->rto_needed = 1;
675 }
676 }
677 chk->do_rtt = 0;
678 if (alt != net) {
679 sctp_free_remote_addr(chk->whoTo);
680 chk->no_fr_allowed = 1;
681 chk->whoTo = alt;
682 atomic_add_int(&alt->ref_count, 1);
683 } else {
684 chk->no_fr_allowed = 0;
685 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
686 chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
687 } else {
688 chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.TSN_seq;
689 }
690 }
691 /* CMT: Do not allow FRs on retransmitted TSNs.
692 */
693 if (stcb->asoc.sctp_cmt_on_off > 0) {
694 chk->no_fr_allowed = 1;
695 }
696 #ifdef THIS_SHOULD_NOT_BE_DONE
697 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
698 /* remember highest acked one */
699 could_be_sent = chk;
700 #endif
701 }
702 if (chk->sent == SCTP_DATAGRAM_RESEND) {
703 cnt_mk++;
704 }
705 }
706 if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
707 /* we did not subtract the same things? */
708 audit_tf = 1;
709 }
710
711 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
712 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
713 }
714 #ifdef SCTP_DEBUG
715 if (num_mk) {
716 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
717 tsnlast);
718 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%ld\n",
719 num_mk, (u_long)stcb->asoc.peers_rwnd);
720 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
721 tsnlast);
722 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%d\n",
723 num_mk,
724 (int)stcb->asoc.peers_rwnd);
725 }
726 #endif
727 *num_marked = num_mk;
728 *num_abandoned = cnt_abandoned;
729 /* Now check for a ECN Echo that may be stranded And
730 * include the cnt_mk'd to have all resends in the
731 * control queue.
732 */
733 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
734 if (chk->sent == SCTP_DATAGRAM_RESEND) {
735 cnt_mk++;
736 }
737 if ((chk->whoTo == net) &&
738 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
739 sctp_free_remote_addr(chk->whoTo);
740 chk->whoTo = alt;
741 if (chk->sent != SCTP_DATAGRAM_RESEND) {
742 chk->sent = SCTP_DATAGRAM_RESEND;
743 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
744 cnt_mk++;
745 }
746 atomic_add_int(&alt->ref_count, 1);
747 }
748 }
749 #ifdef THIS_SHOULD_NOT_BE_DONE
750 if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
751 /* fix it so we retransmit the highest acked anyway */
752 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
753 cnt_mk++;
754 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
755 }
756 #endif
757 if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
758 #ifdef INVARIANTS
759 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
760 cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
761 #endif
762 #ifndef SCTP_AUDITING_ENABLED
763 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
764 #endif
765 }
766 if (audit_tf) {
767 SCTPDBG(SCTP_DEBUG_TIMER4,
768 "Audit total flight due to negative value net:%p\n",
769 (void *)net);
770 stcb->asoc.total_flight = 0;
771 stcb->asoc.total_flight_count = 0;
772 /* Clear all networks flight size */
773 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
774 lnets->flight_size = 0;
775 SCTPDBG(SCTP_DEBUG_TIMER4,
776 "Net:%p c-f cwnd:%d ssthresh:%d\n",
777 (void *)lnets, lnets->cwnd, lnets->ssthresh);
778 }
779 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
780 if (chk->sent < SCTP_DATAGRAM_RESEND) {
781 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
782 sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
783 chk->whoTo->flight_size,
784 chk->book_size,
785 (uintptr_t)chk->whoTo,
786 chk->rec.data.TSN_seq);
787 }
788
789 sctp_flight_size_increase(chk);
790 sctp_total_flight_increase(stcb, chk);
791 }
792 }
793 }
794 /* We return 1 if we only have a window probe outstanding */
795 return (0);
796 }
797
798
799 int
800 sctp_t3rxt_timer(struct sctp_inpcb *inp,
801 struct sctp_tcb *stcb,
802 struct sctp_nets *net)
803 {
804 struct sctp_nets *alt;
805 int win_probe, num_mk, num_abandoned;
806
807 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
808 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
809 }
810 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
811 struct sctp_nets *lnet;
812
813 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
814 if (net == lnet) {
815 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
816 } else {
817 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
818 }
819 }
820 }
821 /* Find an alternate and mark those for retransmission */
822 if ((stcb->asoc.peers_rwnd == 0) &&
823 (stcb->asoc.total_flight < net->mtu)) {
824 SCTP_STAT_INCR(sctps_timowindowprobe);
825 win_probe = 1;
826 } else {
827 win_probe = 0;
828 }
829
830 if (win_probe == 0) {
831 /* We don't do normal threshold management on window probes */
832 if (sctp_threshold_management(inp, stcb, net,
833 stcb->asoc.max_send_times)) {
834 /* Association was destroyed */
835 return (1);
836 } else {
837 if (net != stcb->asoc.primary_destination) {
838 /* send a immediate HB if our RTO is stale */
839 struct timeval now;
840 unsigned int ms_goneby;
841
842 (void)SCTP_GETTIME_TIMEVAL(&now);
843 if (net->last_sent_time.tv_sec) {
844 ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
845 } else {
846 ms_goneby = 0;
847 }
848 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
849 if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
850 /*
851 * no recent feed back in an RTO or
852 * more, request a RTT update
853 */
854 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
855 }
856 }
857 }
858 }
859 } else {
860 /*
861 * For a window probe we don't penalize the net's but only
862 * the association. This may fail it if SACKs are not coming
863 * back. If sack's are coming with rwnd locked at 0, we will
864 * continue to hold things waiting for rwnd to raise
865 */
866 if (sctp_threshold_management(inp, stcb, NULL,
867 stcb->asoc.max_send_times)) {
868 /* Association was destroyed */
869 return (1);
870 }
871 }
872 if (stcb->asoc.sctp_cmt_on_off > 0) {
873 if (net->pf_threshold < net->failure_threshold) {
874 alt = sctp_find_alternate_net(stcb, net, 2);
875 } else {
876 /*
877 * CMT: Using RTX_SSTHRESH policy for CMT.
878 * If CMT is being used, then pick dest with
879 * largest ssthresh for any retransmission.
880 */
881 alt = sctp_find_alternate_net(stcb, net, 1);
882 /*
883 * CUCv2: If a different dest is picked for
884 * the retransmission, then new
885 * (rtx-)pseudo_cumack needs to be tracked
886 * for orig dest. Let CUCv2 track new (rtx-)
887 * pseudo-cumack always.
888 */
889 net->find_pseudo_cumack = 1;
890 net->find_rtx_pseudo_cumack = 1;
891 }
892 } else {
893 alt = sctp_find_alternate_net(stcb, net, 0);
894 }
895
896 num_mk = 0;
897 num_abandoned = 0;
898 (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
899 &num_mk, &num_abandoned);
900 /* FR Loss recovery just ended with the T3. */
901 stcb->asoc.fast_retran_loss_recovery = 0;
902
903 /* CMT FR loss recovery ended with the T3 */
904 net->fast_retran_loss_recovery = 0;
905 if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
906 (net->flight_size == 0)) {
907 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins)(stcb, net);
908 }
909
910 /*
911 * setup the sat loss recovery that prevents satellite cwnd advance.
912 */
913 stcb->asoc.sat_t3_loss_recovery = 1;
914 stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
915
916 /* Backoff the timer and cwnd */
917 sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
918 if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
919 (net->dest_state & SCTP_ADDR_PF)) {
920 /* Move all pending over too */
921 sctp_move_chunks_from_net(stcb, net);
922
923 /* Get the address that failed, to
924 * force a new src address selecton and
925 * a route allocation.
926 */
927 if (net->ro._s_addr) {
928 sctp_free_ifa(net->ro._s_addr);
929 net->ro._s_addr = NULL;
930 }
931 net->src_addr_selected = 0;
932
933 /* Force a route allocation too */
934 if (net->ro.ro_rt) {
935 RTFREE(net->ro.ro_rt);
936 net->ro.ro_rt = NULL;
937 }
938
939 /* Was it our primary? */
940 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
941 /*
942 * Yes, note it as such and find an alternate note:
943 * this means HB code must use this to resent the
944 * primary if it goes active AND if someone does a
945 * change-primary then this flag must be cleared
946 * from any net structures.
947 */
948 if (stcb->asoc.alternate) {
949 sctp_free_remote_addr(stcb->asoc.alternate);
950 }
951 stcb->asoc.alternate = alt;
952 atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
953 }
954 }
955 /*
956 * Special case for cookie-echo'ed case, we don't do output but must
957 * await the COOKIE-ACK before retransmission
958 */
959 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
960 /*
961 * Here we just reset the timer and start again since we
962 * have not established the asoc
963 */
964 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
965 return (0);
966 }
967 if (stcb->asoc.prsctp_supported) {
968 struct sctp_tmit_chunk *lchk;
969
970 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
971 /* C3. See if we need to send a Fwd-TSN */
972 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
973 send_forward_tsn(stcb, &stcb->asoc);
974 if (lchk) {
975 /* Assure a timer is up */
976 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
977 }
978 }
979 }
980 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
981 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
982 }
983 return (0);
984 }
985
986 int
987 sctp_t1init_timer(struct sctp_inpcb *inp,
988 struct sctp_tcb *stcb,
989 struct sctp_nets *net)
990 {
991 /* bump the thresholds */
992 if (stcb->asoc.delayed_connection) {
993 /*
994 * special hook for delayed connection. The library did NOT
995 * complete the rest of its sends.
996 */
997 stcb->asoc.delayed_connection = 0;
998 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
999 return (0);
1000 }
1001 if (SCTP_GET_STATE((&stcb->asoc)) != SCTP_STATE_COOKIE_WAIT) {
1002 return (0);
1003 }
1004 if (sctp_threshold_management(inp, stcb, net,
1005 stcb->asoc.max_init_times)) {
1006 /* Association was destroyed */
1007 return (1);
1008 }
1009 stcb->asoc.dropped_special_cnt = 0;
1010 sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1011 if (stcb->asoc.initial_init_rto_max < net->RTO) {
1012 net->RTO = stcb->asoc.initial_init_rto_max;
1013 }
1014 if (stcb->asoc.numnets > 1) {
1015 /* If we have more than one addr use it */
1016 struct sctp_nets *alt;
1017
1018 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1019 if (alt != stcb->asoc.primary_destination) {
1020 sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1021 stcb->asoc.primary_destination = alt;
1022 }
1023 }
1024 /* Send out a new init */
1025 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1026 return (0);
1027 }
1028
1029 /*
1030 * For cookie and asconf we actually need to find and mark for resend, then
1031 * increment the resend counter (after all the threshold management stuff of
1032 * course).
1033 */
1034 int
1035 sctp_cookie_timer(struct sctp_inpcb *inp,
1036 struct sctp_tcb *stcb,
1037 struct sctp_nets *net SCTP_UNUSED)
1038 {
1039 struct sctp_nets *alt;
1040 struct sctp_tmit_chunk *cookie;
1041
1042 /* first before all else we must find the cookie */
1043 TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1044 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1045 break;
1046 }
1047 }
1048 if (cookie == NULL) {
1049 if (SCTP_GET_STATE(&stcb->asoc) == SCTP_STATE_COOKIE_ECHOED) {
1050 /* FOOBAR! */
1051 struct mbuf *op_err;
1052
1053 op_err = sctp_generate_cause(SCTP_CAUSE_PROTOCOL_VIOLATION,
1054 "Cookie timer expired, but no cookie");
1055 inp->last_abort_code = SCTP_FROM_SCTP_TIMER+SCTP_LOC_4;
1056 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1057 } else {
1058 #ifdef INVARIANTS
1059 panic("Cookie timer expires in wrong state?");
1060 #else
1061 SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(&stcb->asoc));
1062 return (0);
1063 #endif
1064 }
1065 return (0);
1066 }
1067 /* Ok we found the cookie, threshold management next */
1068 if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1069 stcb->asoc.max_init_times)) {
1070 /* Assoc is over */
1071 return (1);
1072 }
1073 /*
1074 * cleared theshold management now lets backoff the address & select
1075 * an alternate
1076 */
1077 stcb->asoc.dropped_special_cnt = 0;
1078 sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1079 alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1080 if (alt != cookie->whoTo) {
1081 sctp_free_remote_addr(cookie->whoTo);
1082 cookie->whoTo = alt;
1083 atomic_add_int(&alt->ref_count, 1);
1084 }
1085 /* Now mark the retran info */
1086 if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1087 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1088 }
1089 cookie->sent = SCTP_DATAGRAM_RESEND;
1090 /*
1091 * Now call the output routine to kick out the cookie again, Note we
1092 * don't mark any chunks for retran so that FR will need to kick in
1093 * to move these (or a send timer).
1094 */
1095 return (0);
1096 }
1097
1098 int
1099 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1100 struct sctp_nets *net)
1101 {
1102 struct sctp_nets *alt;
1103 struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1104
1105 if (stcb->asoc.stream_reset_outstanding == 0) {
1106 return (0);
1107 }
1108 /* find the existing STRRESET, we use the seq number we sent out on */
1109 (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1110 if (strrst == NULL) {
1111 return (0);
1112 }
1113 /* do threshold management */
1114 if (sctp_threshold_management(inp, stcb, strrst->whoTo,
1115 stcb->asoc.max_send_times)) {
1116 /* Assoc is over */
1117 return (1);
1118 }
1119 /*
1120 * cleared theshold management now lets backoff the address & select
1121 * an alternate
1122 */
1123 sctp_backoff_on_timeout(stcb, strrst->whoTo, 1, 0, 0);
1124 alt = sctp_find_alternate_net(stcb, strrst->whoTo, 0);
1125 sctp_free_remote_addr(strrst->whoTo);
1126 strrst->whoTo = alt;
1127 atomic_add_int(&alt->ref_count, 1);
1128
1129 /* See if a ECN Echo is also stranded */
1130 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1131 if ((chk->whoTo == net) &&
1132 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1133 sctp_free_remote_addr(chk->whoTo);
1134 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1135 chk->sent = SCTP_DATAGRAM_RESEND;
1136 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1137 }
1138 chk->whoTo = alt;
1139 atomic_add_int(&alt->ref_count, 1);
1140 }
1141 }
1142 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1143 /*
1144 * If the address went un-reachable, we need to move to
1145 * alternates for ALL chk's in queue
1146 */
1147 sctp_move_chunks_from_net(stcb, net);
1148 }
1149 /* mark the retran info */
1150 if (strrst->sent != SCTP_DATAGRAM_RESEND)
1151 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1152 strrst->sent = SCTP_DATAGRAM_RESEND;
1153
1154 /* restart the timer */
1155 sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, strrst->whoTo);
1156 return (0);
1157 }
1158
1159 int
1160 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1161 struct sctp_nets *net)
1162 {
1163 struct sctp_nets *alt;
1164 struct sctp_tmit_chunk *asconf, *chk;
1165
1166 /* is this a first send, or a retransmission? */
1167 if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1168 /* compose a new ASCONF chunk and send it */
1169 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1170 } else {
1171 /*
1172 * Retransmission of the existing ASCONF is needed
1173 */
1174
1175 /* find the existing ASCONF */
1176 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1177 if (asconf == NULL) {
1178 return (0);
1179 }
1180 /* do threshold management */
1181 if (sctp_threshold_management(inp, stcb, asconf->whoTo,
1182 stcb->asoc.max_send_times)) {
1183 /* Assoc is over */
1184 return (1);
1185 }
1186 if (asconf->snd_count > stcb->asoc.max_send_times) {
1187 /*
1188 * Something is rotten: our peer is not responding to
1189 * ASCONFs but apparently is to other chunks. i.e. it
1190 * is not properly handling the chunk type upper bits.
1191 * Mark this peer as ASCONF incapable and cleanup.
1192 */
1193 SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1194 sctp_asconf_cleanup(stcb, net);
1195 return (0);
1196 }
1197 /*
1198 * cleared threshold management, so now backoff the net and
1199 * select an alternate
1200 */
1201 sctp_backoff_on_timeout(stcb, asconf->whoTo, 1, 0, 0);
1202 alt = sctp_find_alternate_net(stcb, asconf->whoTo, 0);
1203 if (asconf->whoTo != alt) {
1204 sctp_free_remote_addr(asconf->whoTo);
1205 asconf->whoTo = alt;
1206 atomic_add_int(&alt->ref_count, 1);
1207 }
1208
1209 /* See if an ECN Echo is also stranded */
1210 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1211 if ((chk->whoTo == net) &&
1212 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1213 sctp_free_remote_addr(chk->whoTo);
1214 chk->whoTo = alt;
1215 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1216 chk->sent = SCTP_DATAGRAM_RESEND;
1217 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1218 }
1219 atomic_add_int(&alt->ref_count, 1);
1220 }
1221 }
1222 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1223 if (chk->whoTo != alt) {
1224 sctp_free_remote_addr(chk->whoTo);
1225 chk->whoTo = alt;
1226 atomic_add_int(&alt->ref_count, 1);
1227 }
1228 if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1229 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1230 chk->sent = SCTP_DATAGRAM_RESEND;
1231 }
1232 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1233 /*
1234 * If the address went un-reachable, we need to move
1235 * to the alternate for ALL chunks in queue
1236 */
1237 sctp_move_chunks_from_net(stcb, net);
1238 }
1239 /* mark the retran info */
1240 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1241 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1242 asconf->sent = SCTP_DATAGRAM_RESEND;
1243
1244 /* send another ASCONF if any and we can do */
1245 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1246 }
1247 return (0);
1248 }
1249
1250 /* Mobility adaptation */
1251 void
1252 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1253 struct sctp_nets *net SCTP_UNUSED)
1254 {
1255 if (stcb->asoc.deleted_primary == NULL) {
1256 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1257 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1258 return;
1259 }
1260 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1261 SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1262 sctp_free_remote_addr(stcb->asoc.deleted_primary);
1263 stcb->asoc.deleted_primary = NULL;
1264 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1265 return;
1266 }
1267
1268 /*
1269 * For the shutdown and shutdown-ack, we do not keep one around on the
1270 * control queue. This means we must generate a new one and call the general
1271 * chunk output routine, AFTER having done threshold management.
1272 * It is assumed that net is non-NULL.
1273 */
1274 int
1275 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1276 struct sctp_nets *net)
1277 {
1278 struct sctp_nets *alt;
1279
1280 /* first threshold managment */
1281 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1282 /* Assoc is over */
1283 return (1);
1284 }
1285 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1286 /* second select an alternative */
1287 alt = sctp_find_alternate_net(stcb, net, 0);
1288
1289 /* third generate a shutdown into the queue for out net */
1290 sctp_send_shutdown(stcb, alt);
1291
1292 /* fourth restart timer */
1293 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1294 return (0);
1295 }
1296
1297 int
1298 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1299 struct sctp_nets *net)
1300 {
1301 struct sctp_nets *alt;
1302
1303 /* first threshold managment */
1304 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1305 /* Assoc is over */
1306 return (1);
1307 }
1308 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1309 /* second select an alternative */
1310 alt = sctp_find_alternate_net(stcb, net, 0);
1311
1312 /* third generate a shutdown into the queue for out net */
1313 sctp_send_shutdown_ack(stcb, alt);
1314
1315 /* fourth restart timer */
1316 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1317 return (0);
1318 }
1319
1320 static void
1321 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1322 struct sctp_tcb *stcb)
1323 {
1324 struct sctp_stream_queue_pending *sp;
1325 unsigned int i, chks_in_queue = 0;
1326 int being_filled = 0;
1327 /*
1328 * This function is ONLY called when the send/sent queues are empty.
1329 */
1330 if ((stcb == NULL) || (inp == NULL))
1331 return;
1332
1333 if (stcb->asoc.sent_queue_retran_cnt) {
1334 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1335 stcb->asoc.sent_queue_retran_cnt);
1336 stcb->asoc.sent_queue_retran_cnt = 0;
1337 }
1338 if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1339 /* No stream scheduler information, initialize scheduler */
1340 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1341 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1342 /* yep, we lost a stream or two */
1343 SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1344 } else {
1345 /* no streams lost */
1346 stcb->asoc.total_output_queue_size = 0;
1347 }
1348 }
1349 /* Check to see if some data queued, if so report it */
1350 for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1351 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1352 TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1353 if (sp->msg_is_complete)
1354 being_filled++;
1355 chks_in_queue++;
1356 }
1357 }
1358 }
1359 if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1360 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1361 stcb->asoc.stream_queue_cnt, chks_in_queue);
1362 }
1363 if (chks_in_queue) {
1364 /* call the output queue function */
1365 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1366 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1367 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1368 /*
1369 * Probably should go in and make it go back through
1370 * and add fragments allowed
1371 */
1372 if (being_filled == 0) {
1373 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1374 chks_in_queue);
1375 }
1376 }
1377 } else {
1378 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1379 (u_long)stcb->asoc.total_output_queue_size);
1380 stcb->asoc.total_output_queue_size = 0;
1381 }
1382 }
1383
1384 int
1385 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1386 struct sctp_nets *net)
1387 {
1388 uint8_t net_was_pf;
1389
1390 if (net->dest_state & SCTP_ADDR_PF) {
1391 net_was_pf = 1;
1392 } else {
1393 net_was_pf = 0;
1394 }
1395 if (net->hb_responded == 0) {
1396 if (net->ro._s_addr) {
1397 /* Invalidate the src address if we did not get
1398 * a response last time.
1399 */
1400 sctp_free_ifa(net->ro._s_addr);
1401 net->ro._s_addr = NULL;
1402 net->src_addr_selected = 0;
1403 }
1404 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1405 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1406 /* Assoc is over */
1407 return (1);
1408 }
1409 }
1410 /* Zero PBA, if it needs it */
1411 if (net->partial_bytes_acked) {
1412 net->partial_bytes_acked = 0;
1413 }
1414 if ((stcb->asoc.total_output_queue_size > 0) &&
1415 (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1416 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1417 sctp_audit_stream_queues_for_size(inp, stcb);
1418 }
1419 if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1420 !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1421 /* when move to PF during threshold mangement, a HB has been
1422 queued in that routine */
1423 uint32_t ms_gone_by;
1424
1425 if ((net->last_sent_time.tv_sec > 0) ||
1426 (net->last_sent_time.tv_usec > 0)) {
1427 #ifdef __FreeBSD__
1428 struct timeval diff;
1429
1430 SCTP_GETTIME_TIMEVAL(&diff);
1431 timevalsub(&diff, &net->last_sent_time);
1432 #else
1433 struct timeval diff, now;
1434
1435 SCTP_GETTIME_TIMEVAL(&now);
1436 timersub(&now, &net->last_sent_time, &diff);
1437 #endif
1438 ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1439 (uint32_t)(diff.tv_usec / 1000);
1440 } else {
1441 ms_gone_by = 0xffffffff;
1442 }
1443 if ((ms_gone_by >= net->heart_beat_delay) ||
1444 (net->dest_state & SCTP_ADDR_PF)) {
1445 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1446 }
1447 }
1448 return (0);
1449 }
1450
1451 void
1452 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1453 struct sctp_tcb *stcb,
1454 struct sctp_nets *net)
1455 {
1456 uint32_t next_mtu, mtu;
1457
1458 next_mtu = sctp_get_next_mtu(net->mtu);
1459
1460 if ((next_mtu > net->mtu) && (net->port == 0)) {
1461 if ((net->src_addr_selected == 0) ||
1462 (net->ro._s_addr == NULL) ||
1463 (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1464 if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1465 sctp_free_ifa(net->ro._s_addr);
1466 net->ro._s_addr = NULL;
1467 net->src_addr_selected = 0;
1468 } else if (net->ro._s_addr == NULL) {
1469 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1470 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1471 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1472 /* KAME hack: embed scopeid */
1473 #if defined(__APPLE__)
1474 #if defined(APPLE_LEOPARD) || defined(APPLE_SNOWLEOPARD)
1475 (void)in6_embedscope(&sin6->sin6_addr, sin6, NULL, NULL);
1476 #else
1477 (void)in6_embedscope(&sin6->sin6_addr, sin6, NULL, NULL, NULL);
1478 #endif
1479 #elif defined(SCTP_KAME)
1480 (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1481 #else
1482 (void)in6_embedscope(&sin6->sin6_addr, sin6);
1483 #endif
1484 }
1485 #endif
1486
1487 net->ro._s_addr = sctp_source_address_selection(inp,
1488 stcb,
1489 (sctp_route_t *)&net->ro,
1490 net, 0, stcb->asoc.vrf_id);
1491 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1492 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1493 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1494 #ifdef SCTP_KAME
1495 (void)sa6_recoverscope(sin6);
1496 #else
1497 (void)in6_recoverscope(sin6, &sin6->sin6_addr, NULL);
1498 #endif /* SCTP_KAME */
1499 }
1500 #endif /* INET6 */
1501 }
1502 if (net->ro._s_addr)
1503 net->src_addr_selected = 1;
1504 }
1505 if (net->ro._s_addr) {
1506 mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1507 #if defined(INET) || defined(INET6)
1508 if (net->port) {
1509 mtu -= sizeof(struct udphdr);
1510 }
1511 #endif
1512 if (mtu > next_mtu) {
1513 net->mtu = next_mtu;
1514 }
1515 }
1516 }
1517 /* restart the timer */
1518 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1519 }
1520
1521 void
1522 sctp_autoclose_timer(struct sctp_inpcb *inp,
1523 struct sctp_tcb *stcb,
1524 struct sctp_nets *net)
1525 {
1526 struct timeval tn, *tim_touse;
1527 struct sctp_association *asoc;
1528 int ticks_gone_by;
1529
1530 (void)SCTP_GETTIME_TIMEVAL(&tn);
1531 if (stcb->asoc.sctp_autoclose_ticks &&
1532 sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1533 /* Auto close is on */
1534 asoc = &stcb->asoc;
1535 /* pick the time to use */
1536 if (asoc->time_last_rcvd.tv_sec >
1537 asoc->time_last_sent.tv_sec) {
1538 tim_touse = &asoc->time_last_rcvd;
1539 } else {
1540 tim_touse = &asoc->time_last_sent;
1541 }
1542 /* Now has long enough transpired to autoclose? */
1543 ticks_gone_by = SEC_TO_TICKS(tn.tv_sec - tim_touse->tv_sec);
1544 if ((ticks_gone_by > 0) &&
1545 (ticks_gone_by >= (int)asoc->sctp_autoclose_ticks)) {
1546 /*
1547 * autoclose time has hit, call the output routine,
1548 * which should do nothing just to be SURE we don't
1549 * have hanging data. We can then safely check the
1550 * queues and know that we are clear to send
1551 * shutdown
1552 */
1553 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1554 /* Are we clean? */
1555 if (TAILQ_EMPTY(&asoc->send_queue) &&
1556 TAILQ_EMPTY(&asoc->sent_queue)) {
1557 /*
1558 * there is nothing queued to send, so I'm
1559 * done...
1560 */
1561 if (SCTP_GET_STATE(asoc) != SCTP_STATE_SHUTDOWN_SENT) {
1562 /* only send SHUTDOWN 1st time thru */
1563 struct sctp_nets *netp;
1564
1565 if ((SCTP_GET_STATE(asoc) == SCTP_STATE_OPEN) ||
1566 (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1567 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1568 }
1569 SCTP_SET_STATE(asoc, SCTP_STATE_SHUTDOWN_SENT);
1570 SCTP_CLEAR_SUBSTATE(asoc, SCTP_STATE_SHUTDOWN_PENDING);
1571 sctp_stop_timers_for_shutdown(stcb);
1572 if (stcb->asoc.alternate) {
1573 netp = stcb->asoc.alternate;
1574 } else {
1575 netp = stcb->asoc.primary_destination;
1576 }
1577 sctp_send_shutdown(stcb, netp);
1578 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1579 stcb->sctp_ep, stcb,
1580 netp);
1581 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1582 stcb->sctp_ep, stcb,
1583 netp);
1584 }
1585 }
1586 } else {
1587 /*
1588 * No auto close at this time, reset t-o to check
1589 * later
1590 */
1591 int tmp;
1592
1593 /* fool the timer startup to use the time left */
1594 tmp = asoc->sctp_autoclose_ticks;
1595 asoc->sctp_autoclose_ticks -= ticks_gone_by;
1596 sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb,
1597 net);
1598 /* restore the real tick value */
1599 asoc->sctp_autoclose_ticks = tmp;
1600 }
1601 }
1602 }
1603
1604