1 /*-
2 * SPDX-License-Identifier: BSD-3-Clause
3 *
4 * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
5 * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
6 * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions are met:
10 *
11 * a) Redistributions of source code must retain the above copyright notice,
12 * this list of conditions and the following disclaimer.
13 *
14 * b) Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in
16 * the documentation and/or other materials provided with the distribution.
17 *
18 * c) Neither the name of Cisco Systems, Inc. nor the names of its
19 * contributors may be used to endorse or promote products derived
20 * from this software without specific prior written permission.
21 *
22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
24 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32 * THE POSSIBILITY OF SUCH DAMAGE.
33 */
34
35 #include <sys/cdefs.h>
36 __FBSDID("$FreeBSD$");
37
38 #define _IP_VHL
39 #include <netinet/sctp_os.h>
40 #include <netinet/sctp_pcb.h>
41 #ifdef INET6
42 #endif
43 #include <netinet/sctp_var.h>
44 #include <netinet/sctp_sysctl.h>
45 #include <netinet/sctp_timer.h>
46 #include <netinet/sctputil.h>
47 #include <netinet/sctp_output.h>
48 #include <netinet/sctp_header.h>
49 #include <netinet/sctp_indata.h>
50 #include <netinet/sctp_asconf.h>
51 #include <netinet/sctp_input.h>
52 #include <netinet/sctp.h>
53 #include <netinet/sctp_uio.h>
54 #if defined(INET) || defined(INET6)
55 #include <netinet/udp.h>
56 #endif
57
58 void
59 sctp_audit_retranmission_queue(struct sctp_association *asoc)
60 {
61 struct sctp_tmit_chunk *chk;
62
63 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
64 asoc->sent_queue_retran_cnt,
65 asoc->sent_queue_cnt);
66 asoc->sent_queue_retran_cnt = 0;
67 asoc->sent_queue_cnt = 0;
68 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
69 if (chk->sent == SCTP_DATAGRAM_RESEND) {
70 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
71 }
72 asoc->sent_queue_cnt++;
73 }
74 TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
75 if (chk->sent == SCTP_DATAGRAM_RESEND) {
76 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
77 }
78 }
79 TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
80 if (chk->sent == SCTP_DATAGRAM_RESEND) {
81 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
82 }
83 }
84 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
85 asoc->sent_queue_retran_cnt,
86 asoc->sent_queue_cnt);
87 }
88
89 static int
90 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
91 struct sctp_nets *net, uint16_t threshold)
92 {
93 if (net) {
94 net->error_count++;
95 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
96 (void *)net, net->error_count,
97 net->failure_threshold);
98 if (net->error_count > net->failure_threshold) {
99 /* We had a threshold failure */
100 if (net->dest_state & SCTP_ADDR_REACHABLE) {
101 net->dest_state &= ~SCTP_ADDR_REACHABLE;
102 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
103 net->dest_state &= ~SCTP_ADDR_PF;
104 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
105 stcb, 0,
106 (void *)net, SCTP_SO_NOT_LOCKED);
107 }
108 } else if ((net->pf_threshold < net->failure_threshold) &&
109 (net->error_count > net->pf_threshold)) {
110 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
111 net->dest_state |= SCTP_ADDR_PF;
112 net->last_active = sctp_get_tick_count();
113 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
114 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
115 inp, stcb, net,
116 SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
117 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
118 }
119 }
120 }
121 if (stcb == NULL)
122 return (0);
123
124 if (net) {
125 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
126 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
127 sctp_misc_ints(SCTP_THRESHOLD_INCR,
128 stcb->asoc.overall_error_count,
129 (stcb->asoc.overall_error_count + 1),
130 SCTP_FROM_SCTP_TIMER,
131 __LINE__);
132 }
133 stcb->asoc.overall_error_count++;
134 }
135 } else {
136 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
137 sctp_misc_ints(SCTP_THRESHOLD_INCR,
138 stcb->asoc.overall_error_count,
139 (stcb->asoc.overall_error_count + 1),
140 SCTP_FROM_SCTP_TIMER,
141 __LINE__);
142 }
143 stcb->asoc.overall_error_count++;
144 }
145 SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
146 (void *)&stcb->asoc, stcb->asoc.overall_error_count,
147 (uint32_t)threshold,
148 ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state));
149 /*
150 * We specifically do not do >= to give the assoc one more change
151 * before we fail it.
152 */
153 if (stcb->asoc.overall_error_count > threshold) {
154 /* Abort notification sends a ULP notify */
155 struct mbuf *op_err;
156
157 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
158 "Association error counter exceeded");
159 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
160 sctp_abort_an_association(inp, stcb, op_err, true, SCTP_SO_NOT_LOCKED);
161 return (1);
162 }
163 return (0);
164 }
165
166 /*
167 * sctp_find_alternate_net() returns a non-NULL pointer as long as there
168 * exists nets, which are not being deleted.
169 */
170 struct sctp_nets *
171 sctp_find_alternate_net(struct sctp_tcb *stcb,
172 struct sctp_nets *net,
173 int mode)
174 {
175 /* Find and return an alternate network if possible */
176 struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
177 bool looped;
178
179 /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
180 int min_errors = -1;
181 uint32_t max_cwnd = 0;
182
183 if (stcb->asoc.numnets == 1) {
184 /* No selection can be made. */
185 return (TAILQ_FIRST(&stcb->asoc.nets));
186 }
187 /*
188 * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
189 * net algorithm. This algorithm chooses the active destination (not
190 * in PF state) with the largest cwnd value. If all destinations are
191 * in PF state, unreachable, or unconfirmed, choose the destination
192 * that is in PF state with the lowest error count. In case of a
193 * tie, choose the destination that was most recently active.
194 */
195 if (mode == 2) {
196 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
197 /*
198 * JRS 5/14/07 - If the destination is unreachable
199 * or unconfirmed, skip it.
200 */
201 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
202 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
203 continue;
204 }
205 /*
206 * JRS 5/14/07 - If the destination is reachable
207 * but in PF state, compare the error count of the
208 * destination to the minimum error count seen thus
209 * far. Store the destination with the lower error
210 * count. If the error counts are equal, store the
211 * destination that was most recently active.
212 */
213 if (mnet->dest_state & SCTP_ADDR_PF) {
214 /*
215 * JRS 5/14/07 - If the destination under
216 * consideration is the current destination,
217 * work as if the error count is one higher.
218 * The actual error count will not be
219 * incremented until later in the t3
220 * handler.
221 */
222 if (mnet == net) {
223 if (min_errors == -1) {
224 min_errors = mnet->error_count + 1;
225 min_errors_net = mnet;
226 } else if (mnet->error_count + 1 < min_errors) {
227 min_errors = mnet->error_count + 1;
228 min_errors_net = mnet;
229 } else if (mnet->error_count + 1 == min_errors
230 && mnet->last_active > min_errors_net->last_active) {
231 min_errors_net = mnet;
232 min_errors = mnet->error_count + 1;
233 }
234 continue;
235 } else {
236 if (min_errors == -1) {
237 min_errors = mnet->error_count;
238 min_errors_net = mnet;
239 } else if (mnet->error_count < min_errors) {
240 min_errors = mnet->error_count;
241 min_errors_net = mnet;
242 } else if (mnet->error_count == min_errors
243 && mnet->last_active > min_errors_net->last_active) {
244 min_errors_net = mnet;
245 min_errors = mnet->error_count;
246 }
247 continue;
248 }
249 }
250 /*
251 * JRS 5/14/07 - If the destination is reachable and
252 * not in PF state, compare the cwnd of the
253 * destination to the highest cwnd seen thus far.
254 * Store the destination with the higher cwnd value.
255 * If the cwnd values are equal, randomly choose one
256 * of the two destinations.
257 */
258 if (max_cwnd < mnet->cwnd) {
259 max_cwnd_net = mnet;
260 max_cwnd = mnet->cwnd;
261 } else if (max_cwnd == mnet->cwnd) {
262 uint32_t rndval;
263 uint8_t this_random;
264
265 if (stcb->asoc.hb_random_idx > 3) {
266 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
267 memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
268 this_random = stcb->asoc.hb_random_values[0];
269 stcb->asoc.hb_random_idx++;
270 stcb->asoc.hb_ect_randombit = 0;
271 } else {
272 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
273 stcb->asoc.hb_random_idx++;
274 stcb->asoc.hb_ect_randombit = 0;
275 }
276 if (this_random % 2 == 1) {
277 max_cwnd_net = mnet;
278 max_cwnd = mnet->cwnd; /* Useless? */
279 }
280 }
281 }
282 if (max_cwnd_net == NULL) {
283 if (min_errors_net == NULL) {
284 return (net);
285 }
286 return (min_errors_net);
287 } else {
288 return (max_cwnd_net);
289 }
290 } /* JRS 5/14/07 - If mode is set to 1, use the
291 * CMT policy for choosing an alternate net. */
292 else if (mode == 1) {
293 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
294 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
295 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
296 /*
297 * will skip ones that are not-reachable or
298 * unconfirmed
299 */
300 continue;
301 }
302 if (max_cwnd < mnet->cwnd) {
303 max_cwnd_net = mnet;
304 max_cwnd = mnet->cwnd;
305 } else if (max_cwnd == mnet->cwnd) {
306 uint32_t rndval;
307 uint8_t this_random;
308
309 if (stcb->asoc.hb_random_idx > 3) {
310 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
311 memcpy(stcb->asoc.hb_random_values, &rndval,
312 sizeof(stcb->asoc.hb_random_values));
313 this_random = stcb->asoc.hb_random_values[0];
314 stcb->asoc.hb_random_idx = 0;
315 stcb->asoc.hb_ect_randombit = 0;
316 } else {
317 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
318 stcb->asoc.hb_random_idx++;
319 stcb->asoc.hb_ect_randombit = 0;
320 }
321 if (this_random % 2) {
322 max_cwnd_net = mnet;
323 max_cwnd = mnet->cwnd;
324 }
325 }
326 }
327 if (max_cwnd_net) {
328 return (max_cwnd_net);
329 }
330 }
331 /* Look for an alternate net, which is active. */
332 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
333 alt = TAILQ_NEXT(net, sctp_next);
334 } else {
335 alt = TAILQ_FIRST(&stcb->asoc.nets);
336 }
337 looped = false;
338 for (;;) {
339 if (alt == NULL) {
340 if (!looped) {
341 alt = TAILQ_FIRST(&stcb->asoc.nets);
342 looped = true;
343 }
344 /* Definitely out of candidates. */
345 if (alt == NULL) {
346 break;
347 }
348 }
349 if (alt->ro.ro_nh == NULL) {
350 if (alt->ro._s_addr) {
351 sctp_free_ifa(alt->ro._s_addr);
352 alt->ro._s_addr = NULL;
353 }
354 alt->src_addr_selected = 0;
355 }
356 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
357 (alt->ro.ro_nh != NULL) &&
358 ((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) &&
359 (alt != net)) {
360 /* Found an alternate net, which is reachable. */
361 break;
362 }
363 alt = TAILQ_NEXT(alt, sctp_next);
364 }
365
366 if (alt == NULL) {
367 /*
368 * In case no active alternate net has been found, look for
369 * an alternate net, which is confirmed.
370 */
371 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
372 alt = TAILQ_NEXT(net, sctp_next);
373 } else {
374 alt = TAILQ_FIRST(&stcb->asoc.nets);
375 }
376 looped = false;
377 for (;;) {
378 if (alt == NULL) {
379 if (!looped) {
380 alt = TAILQ_FIRST(&stcb->asoc.nets);
381 looped = true;
382 }
383 /* Definitely out of candidates. */
384 if (alt == NULL) {
385 break;
386 }
387 }
388 if (((alt->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) &&
389 (alt != net)) {
390 /*
391 * Found an alternate net, which is
392 * confirmed.
393 */
394 break;
395 }
396 alt = TAILQ_NEXT(alt, sctp_next);
397 }
398 }
399 if (alt == NULL) {
400 /*
401 * In case no confirmed alternate net has been found, just
402 * return net, if it is not being deleted. In the other case
403 * just return the first net.
404 */
405 if ((net != NULL) && ((net->dest_state & SCTP_ADDR_BEING_DELETED) == 0)) {
406 alt = net;
407 }
408 if (alt == NULL) {
409 alt = TAILQ_FIRST(&stcb->asoc.nets);
410 }
411 }
412 return (alt);
413 }
414
415 static void
416 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
417 struct sctp_nets *net,
418 int win_probe,
419 int num_marked, int num_abandoned)
420 {
421 if (net->RTO == 0) {
422 if (net->RTO_measured) {
423 net->RTO = stcb->asoc.minrto;
424 } else {
425 net->RTO = stcb->asoc.initial_rto;
426 }
427 }
428 net->RTO <<= 1;
429 if (net->RTO > stcb->asoc.maxrto) {
430 net->RTO = stcb->asoc.maxrto;
431 }
432 if ((win_probe == 0) && (num_marked || num_abandoned)) {
433 /* We don't apply penalty to window probe scenarios */
434 /* JRS - Use the congestion control given in the CC module */
435 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
436 }
437 }
438
439 #ifndef INVARIANTS
440 static void
441 sctp_recover_sent_list(struct sctp_tcb *stcb)
442 {
443 struct sctp_tmit_chunk *chk, *nchk;
444 struct sctp_association *asoc;
445
446 asoc = &stcb->asoc;
447 TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
448 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) {
449 SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
450 (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq);
451 if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
452 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
453 asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
454 }
455 }
456 if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) &&
457 (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) &&
458 TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) {
459 asoc->trigger_reset = 1;
460 }
461 TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
462 if (PR_SCTP_ENABLED(chk->flags)) {
463 if (asoc->pr_sctp_cnt != 0)
464 asoc->pr_sctp_cnt--;
465 }
466 if (chk->data) {
467 /* sa_ignore NO_NULL_CHK */
468 sctp_free_bufspace(stcb, asoc, chk, 1);
469 sctp_m_freem(chk->data);
470 chk->data = NULL;
471 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
472 asoc->sent_queue_cnt_removeable--;
473 }
474 }
475 asoc->sent_queue_cnt--;
476 sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
477 }
478 }
479 SCTP_PRINTF("after recover order is as follows\n");
480 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
481 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn);
482 }
483 }
484 #endif
485
486 static int
487 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
488 struct sctp_nets *net,
489 struct sctp_nets *alt,
490 int window_probe,
491 int *num_marked,
492 int *num_abandoned)
493 {
494
495 /*
496 * Mark all chunks (well not all) that were sent to *net for
497 * retransmission. Move them to alt for there destination as well...
498 * We only mark chunks that have been outstanding long enough to
499 * have received feed-back.
500 */
501 struct sctp_tmit_chunk *chk, *nchk;
502 struct sctp_nets *lnets;
503 struct timeval now, min_wait, tv;
504 int cur_rto;
505 int cnt_abandoned;
506 int audit_tf, num_mk, fir;
507 unsigned int cnt_mk;
508 uint32_t orig_flight, orig_tf;
509 uint32_t tsnlast, tsnfirst;
510 #ifndef INVARIANTS
511 int recovery_cnt = 0;
512 #endif
513
514 /* none in flight now */
515 audit_tf = 0;
516 fir = 0;
517 /*
518 * figure out how long a data chunk must be pending before we can
519 * mark it ..
520 */
521 (void)SCTP_GETTIME_TIMEVAL(&now);
522 /* get cur rto in micro-seconds */
523 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
524 cur_rto *= 1000;
525 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
526 sctp_log_fr(cur_rto,
527 stcb->asoc.peers_rwnd,
528 window_probe,
529 SCTP_FR_T3_MARK_TIME);
530 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
531 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
532 }
533 tv.tv_sec = cur_rto / 1000000;
534 tv.tv_usec = cur_rto % 1000000;
535 min_wait = now;
536 timevalsub(&min_wait, &tv);
537 if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
538 /*
539 * if we hit here, we don't have enough seconds on the clock
540 * to account for the RTO. We just let the lower seconds be
541 * the bounds and don't worry about it. This may mean we
542 * will mark a lot more than we should.
543 */
544 min_wait.tv_sec = min_wait.tv_usec = 0;
545 }
546 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
547 sctp_log_fr(cur_rto, (uint32_t)now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
548 sctp_log_fr(0, (uint32_t)min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
549 }
550 /*
551 * Our rwnd will be incorrect here since we are not adding back the
552 * cnt * mbuf but we will fix that down below.
553 */
554 orig_flight = net->flight_size;
555 orig_tf = stcb->asoc.total_flight;
556
557 net->fast_retran_ip = 0;
558 /* Now on to each chunk */
559 cnt_abandoned = 0;
560 num_mk = cnt_mk = 0;
561 tsnfirst = tsnlast = 0;
562 #ifndef INVARIANTS
563 start_again:
564 #endif
565 TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
566 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) {
567 /* Strange case our list got out of order? */
568 SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
569 (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn);
570 #ifdef INVARIANTS
571 panic("last acked >= chk on sent-Q");
572 #else
573 recovery_cnt++;
574 SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
575 sctp_recover_sent_list(stcb);
576 if (recovery_cnt < 10) {
577 goto start_again;
578 } else {
579 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
580 }
581 #endif
582 }
583 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
584 /*
585 * found one to mark: If it is less than
586 * DATAGRAM_ACKED it MUST not be a skipped or marked
587 * TSN but instead one that is either already set
588 * for retransmission OR one that needs
589 * retransmission.
590 */
591
592 /* validate its been outstanding long enough */
593 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
594 sctp_log_fr(chk->rec.data.tsn,
595 (uint32_t)chk->sent_rcv_time.tv_sec,
596 chk->sent_rcv_time.tv_usec,
597 SCTP_FR_T3_MARK_TIME);
598 }
599 if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
600 /*
601 * we have reached a chunk that was sent
602 * some seconds past our min.. forget it we
603 * will find no more to send.
604 */
605 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
606 sctp_log_fr(0,
607 (uint32_t)chk->sent_rcv_time.tv_sec,
608 chk->sent_rcv_time.tv_usec,
609 SCTP_FR_T3_STOPPED);
610 }
611 continue;
612 } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
613 (window_probe == 0)) {
614 /*
615 * we must look at the micro seconds to
616 * know.
617 */
618 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
619 /*
620 * ok it was sent after our boundary
621 * time.
622 */
623 continue;
624 }
625 }
626 if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
627 /* Is it expired? */
628 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
629 /* Yes so drop it */
630 if (chk->data) {
631 (void)sctp_release_pr_sctp_chunk(stcb,
632 chk,
633 1,
634 SCTP_SO_NOT_LOCKED);
635 cnt_abandoned++;
636 }
637 continue;
638 }
639 }
640 if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
641 /* Has it been retransmitted tv_sec times? */
642 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
643 if (chk->data) {
644 (void)sctp_release_pr_sctp_chunk(stcb,
645 chk,
646 1,
647 SCTP_SO_NOT_LOCKED);
648 cnt_abandoned++;
649 }
650 continue;
651 }
652 }
653 if (chk->sent < SCTP_DATAGRAM_RESEND) {
654 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
655 num_mk++;
656 if (fir == 0) {
657 fir = 1;
658 tsnfirst = chk->rec.data.tsn;
659 }
660 tsnlast = chk->rec.data.tsn;
661 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
662 sctp_log_fr(chk->rec.data.tsn, chk->snd_count,
663 0, SCTP_FR_T3_MARKED);
664 }
665
666 if (chk->rec.data.chunk_was_revoked) {
667 /* deflate the cwnd */
668 chk->whoTo->cwnd -= chk->book_size;
669 chk->rec.data.chunk_was_revoked = 0;
670 }
671 net->marked_retrans++;
672 stcb->asoc.marked_retrans++;
673 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
674 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
675 chk->whoTo->flight_size,
676 chk->book_size,
677 (uint32_t)(uintptr_t)chk->whoTo,
678 chk->rec.data.tsn);
679 }
680 sctp_flight_size_decrease(chk);
681 sctp_total_flight_decrease(stcb, chk);
682 stcb->asoc.peers_rwnd += chk->send_size;
683 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
684 }
685 chk->sent = SCTP_DATAGRAM_RESEND;
686 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
687 SCTP_STAT_INCR(sctps_markedretrans);
688
689 /* reset the TSN for striking and other FR stuff */
690 chk->rec.data.doing_fast_retransmit = 0;
691 /* Clear any time so NO RTT is being done */
692
693 if (chk->do_rtt) {
694 if (chk->whoTo->rto_needed == 0) {
695 chk->whoTo->rto_needed = 1;
696 }
697 }
698 chk->do_rtt = 0;
699 if (alt != net) {
700 sctp_free_remote_addr(chk->whoTo);
701 chk->no_fr_allowed = 1;
702 chk->whoTo = alt;
703 atomic_add_int(&alt->ref_count, 1);
704 } else {
705 chk->no_fr_allowed = 0;
706 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
707 chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
708 } else {
709 chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn;
710 }
711 }
712 /*
713 * CMT: Do not allow FRs on retransmitted TSNs.
714 */
715 if (stcb->asoc.sctp_cmt_on_off > 0) {
716 chk->no_fr_allowed = 1;
717 }
718 #ifdef THIS_SHOULD_NOT_BE_DONE
719 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
720 /* remember highest acked one */
721 could_be_sent = chk;
722 #endif
723 }
724 if (chk->sent == SCTP_DATAGRAM_RESEND) {
725 cnt_mk++;
726 }
727 }
728 if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
729 /* we did not subtract the same things? */
730 audit_tf = 1;
731 }
732
733 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
734 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
735 }
736 #ifdef SCTP_DEBUG
737 if (num_mk) {
738 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
739 tsnlast);
740 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n",
741 num_mk,
742 stcb->asoc.peers_rwnd);
743 }
744 #endif
745 *num_marked = num_mk;
746 *num_abandoned = cnt_abandoned;
747 /*
748 * Now check for a ECN Echo that may be stranded And include the
749 * cnt_mk'd to have all resends in the control queue.
750 */
751 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
752 if (chk->sent == SCTP_DATAGRAM_RESEND) {
753 cnt_mk++;
754 }
755 if ((chk->whoTo == net) &&
756 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
757 sctp_free_remote_addr(chk->whoTo);
758 chk->whoTo = alt;
759 if (chk->sent != SCTP_DATAGRAM_RESEND) {
760 chk->sent = SCTP_DATAGRAM_RESEND;
761 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
762 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
763 cnt_mk++;
764 }
765 atomic_add_int(&alt->ref_count, 1);
766 }
767 }
768 #ifdef THIS_SHOULD_NOT_BE_DONE
769 if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
770 /* fix it so we retransmit the highest acked anyway */
771 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
772 cnt_mk++;
773 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
774 }
775 #endif
776 if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
777 #ifdef INVARIANTS
778 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
779 cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
780 #endif
781 #ifndef SCTP_AUDITING_ENABLED
782 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
783 #endif
784 }
785 if (audit_tf) {
786 SCTPDBG(SCTP_DEBUG_TIMER4,
787 "Audit total flight due to negative value net:%p\n",
788 (void *)net);
789 stcb->asoc.total_flight = 0;
790 stcb->asoc.total_flight_count = 0;
791 /* Clear all networks flight size */
792 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
793 lnets->flight_size = 0;
794 SCTPDBG(SCTP_DEBUG_TIMER4,
795 "Net:%p c-f cwnd:%d ssthresh:%d\n",
796 (void *)lnets, lnets->cwnd, lnets->ssthresh);
797 }
798 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
799 if (chk->sent < SCTP_DATAGRAM_RESEND) {
800 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
801 sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
802 chk->whoTo->flight_size,
803 chk->book_size,
804 (uint32_t)(uintptr_t)chk->whoTo,
805 chk->rec.data.tsn);
806 }
807
808 sctp_flight_size_increase(chk);
809 sctp_total_flight_increase(stcb, chk);
810 }
811 }
812 }
813 /* We return 1 if we only have a window probe outstanding */
814 return (0);
815 }
816
817 int
818 sctp_t3rxt_timer(struct sctp_inpcb *inp,
819 struct sctp_tcb *stcb,
820 struct sctp_nets *net)
821 {
822 struct sctp_nets *alt;
823 int win_probe, num_mk, num_abandoned;
824
825 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
826 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
827 }
828 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
829 struct sctp_nets *lnet;
830
831 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
832 if (net == lnet) {
833 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
834 } else {
835 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
836 }
837 }
838 }
839 /* Find an alternate and mark those for retransmission */
840 if ((stcb->asoc.peers_rwnd == 0) &&
841 (stcb->asoc.total_flight < net->mtu)) {
842 SCTP_STAT_INCR(sctps_timowindowprobe);
843 win_probe = 1;
844 } else {
845 win_probe = 0;
846 }
847
848 if (win_probe == 0) {
849 /* We don't do normal threshold management on window probes */
850 if (sctp_threshold_management(inp, stcb, net,
851 stcb->asoc.max_send_times)) {
852 /* Association was destroyed */
853 return (1);
854 } else {
855 if (net != stcb->asoc.primary_destination) {
856 /* send a immediate HB if our RTO is stale */
857 struct timeval now;
858 uint32_t ms_goneby;
859
860 (void)SCTP_GETTIME_TIMEVAL(&now);
861 if (net->last_sent_time.tv_sec) {
862 ms_goneby = (uint32_t)(now.tv_sec - net->last_sent_time.tv_sec) * 1000;
863 } else {
864 ms_goneby = 0;
865 }
866 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
867 if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
868 /*
869 * no recent feed back in an
870 * RTO or more, request a
871 * RTT update
872 */
873 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
874 }
875 }
876 }
877 }
878 } else {
879 /*
880 * For a window probe we don't penalize the net's but only
881 * the association. This may fail it if SACKs are not coming
882 * back. If sack's are coming with rwnd locked at 0, we will
883 * continue to hold things waiting for rwnd to raise
884 */
885 if (sctp_threshold_management(inp, stcb, NULL,
886 stcb->asoc.max_send_times)) {
887 /* Association was destroyed */
888 return (1);
889 }
890 }
891 if (stcb->asoc.sctp_cmt_on_off > 0) {
892 if (net->pf_threshold < net->failure_threshold) {
893 alt = sctp_find_alternate_net(stcb, net, 2);
894 } else {
895 /*
896 * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
897 * being used, then pick dest with largest ssthresh
898 * for any retransmission.
899 */
900 alt = sctp_find_alternate_net(stcb, net, 1);
901 /*
902 * CUCv2: If a different dest is picked for the
903 * retransmission, then new (rtx-)pseudo_cumack
904 * needs to be tracked for orig dest. Let CUCv2
905 * track new (rtx-) pseudo-cumack always.
906 */
907 net->find_pseudo_cumack = 1;
908 net->find_rtx_pseudo_cumack = 1;
909 }
910 } else {
911 alt = sctp_find_alternate_net(stcb, net, 0);
912 }
913
914 num_mk = 0;
915 num_abandoned = 0;
916 (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
917 &num_mk, &num_abandoned);
918 /* FR Loss recovery just ended with the T3. */
919 stcb->asoc.fast_retran_loss_recovery = 0;
920
921 /* CMT FR loss recovery ended with the T3 */
922 net->fast_retran_loss_recovery = 0;
923 if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
924 (net->flight_size == 0)) {
925 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
926 }
927
928 /*
929 * setup the sat loss recovery that prevents satellite cwnd advance.
930 */
931 stcb->asoc.sat_t3_loss_recovery = 1;
932 stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
933
934 /* Backoff the timer and cwnd */
935 sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
936 if (((net->dest_state & SCTP_ADDR_REACHABLE) == 0) ||
937 (net->dest_state & SCTP_ADDR_PF)) {
938 /* Move all pending over too */
939 sctp_move_chunks_from_net(stcb, net);
940
941 /*
942 * Get the address that failed, to force a new src address
943 * selection and a route allocation.
944 */
945 if (net->ro._s_addr != NULL) {
946 sctp_free_ifa(net->ro._s_addr);
947 net->ro._s_addr = NULL;
948 }
949 net->src_addr_selected = 0;
950
951 /* Force a route allocation too */
952 RO_NHFREE(&net->ro);
953
954 /* Was it our primary? */
955 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
956 /*
957 * Yes, note it as such and find an alternate note:
958 * this means HB code must use this to resent the
959 * primary if it goes active AND if someone does a
960 * change-primary then this flag must be cleared
961 * from any net structures.
962 */
963 if (stcb->asoc.alternate != NULL) {
964 sctp_free_remote_addr(stcb->asoc.alternate);
965 }
966 stcb->asoc.alternate = alt;
967 atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
968 }
969 }
970 /*
971 * Special case for cookie-echo'ed case, we don't do output but must
972 * await the COOKIE-ACK before retransmission
973 */
974 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
975 /*
976 * Here we just reset the timer and start again since we
977 * have not established the asoc
978 */
979 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
980 return (0);
981 }
982 if (stcb->asoc.prsctp_supported) {
983 struct sctp_tmit_chunk *lchk;
984
985 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
986 /* C3. See if we need to send a Fwd-TSN */
987 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
988 send_forward_tsn(stcb, &stcb->asoc);
989 for (; lchk != NULL; lchk = TAILQ_NEXT(lchk, sctp_next)) {
990 if (lchk->whoTo != NULL) {
991 break;
992 }
993 }
994 if (lchk != NULL) {
995 /* Assure a timer is up */
996 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
997 }
998 }
999 }
1000 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
1001 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
1002 }
1003 return (0);
1004 }
1005
1006 int
1007 sctp_t1init_timer(struct sctp_inpcb *inp,
1008 struct sctp_tcb *stcb,
1009 struct sctp_nets *net)
1010 {
1011 /* bump the thresholds */
1012 if (stcb->asoc.delayed_connection) {
1013 /*
1014 * special hook for delayed connection. The library did NOT
1015 * complete the rest of its sends.
1016 */
1017 stcb->asoc.delayed_connection = 0;
1018 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1019 return (0);
1020 }
1021 if (SCTP_GET_STATE(stcb) != SCTP_STATE_COOKIE_WAIT) {
1022 return (0);
1023 }
1024 if (sctp_threshold_management(inp, stcb, net,
1025 stcb->asoc.max_init_times)) {
1026 /* Association was destroyed */
1027 return (1);
1028 }
1029 stcb->asoc.dropped_special_cnt = 0;
1030 sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1031 if (stcb->asoc.initial_init_rto_max < net->RTO) {
1032 net->RTO = stcb->asoc.initial_init_rto_max;
1033 }
1034 if (stcb->asoc.numnets > 1) {
1035 /* If we have more than one addr use it */
1036 struct sctp_nets *alt;
1037
1038 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1039 if (alt != stcb->asoc.primary_destination) {
1040 sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1041 stcb->asoc.primary_destination = alt;
1042 }
1043 }
1044 /* Send out a new init */
1045 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1046 return (0);
1047 }
1048
1049 /*
1050 * For cookie and asconf we actually need to find and mark for resend, then
1051 * increment the resend counter (after all the threshold management stuff of
1052 * course).
1053 */
1054 int
1055 sctp_cookie_timer(struct sctp_inpcb *inp,
1056 struct sctp_tcb *stcb,
1057 struct sctp_nets *net SCTP_UNUSED)
1058 {
1059 struct sctp_nets *alt;
1060 struct sctp_tmit_chunk *cookie;
1061
1062 /* first before all else we must find the cookie */
1063 TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1064 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1065 break;
1066 }
1067 }
1068 if (cookie == NULL) {
1069 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
1070 /* FOOBAR! */
1071 struct mbuf *op_err;
1072
1073 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1074 "Cookie timer expired, but no cookie");
1075 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1076 sctp_abort_an_association(inp, stcb, op_err, false, SCTP_SO_NOT_LOCKED);
1077 } else {
1078 #ifdef INVARIANTS
1079 panic("Cookie timer expires in wrong state?");
1080 #else
1081 SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(stcb));
1082 return (0);
1083 #endif
1084 }
1085 return (0);
1086 }
1087 /* Ok we found the cookie, threshold management next */
1088 if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1089 stcb->asoc.max_init_times)) {
1090 /* Assoc is over */
1091 return (1);
1092 }
1093 /*
1094 * Cleared threshold management, now lets backoff the address and
1095 * select an alternate
1096 */
1097 stcb->asoc.dropped_special_cnt = 0;
1098 sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1099 alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1100 if (alt != cookie->whoTo) {
1101 sctp_free_remote_addr(cookie->whoTo);
1102 cookie->whoTo = alt;
1103 atomic_add_int(&alt->ref_count, 1);
1104 }
1105 /* Now mark the retran info */
1106 if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1107 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1108 }
1109 cookie->sent = SCTP_DATAGRAM_RESEND;
1110 cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1111 /*
1112 * Now call the output routine to kick out the cookie again, Note we
1113 * don't mark any chunks for retran so that FR will need to kick in
1114 * to move these (or a send timer).
1115 */
1116 return (0);
1117 }
1118
1119 int
1120 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1121 {
1122 struct sctp_nets *alt, *net;
1123 struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1124
1125 if (stcb->asoc.stream_reset_outstanding == 0) {
1126 return (0);
1127 }
1128 /* find the existing STRRESET, we use the seq number we sent out on */
1129 (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1130 if (strrst == NULL) {
1131 return (0);
1132 }
1133 net = strrst->whoTo;
1134 /* do threshold management */
1135 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1136 /* Assoc is over */
1137 return (1);
1138 }
1139 /*
1140 * Cleared threshold management, now lets backoff the address and
1141 * select an alternate
1142 */
1143 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1144 alt = sctp_find_alternate_net(stcb, net, 0);
1145 strrst->whoTo = alt;
1146 atomic_add_int(&alt->ref_count, 1);
1147
1148 /* See if a ECN Echo is also stranded */
1149 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1150 if ((chk->whoTo == net) &&
1151 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1152 sctp_free_remote_addr(chk->whoTo);
1153 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1154 chk->sent = SCTP_DATAGRAM_RESEND;
1155 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1156 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1157 }
1158 chk->whoTo = alt;
1159 atomic_add_int(&alt->ref_count, 1);
1160 }
1161 }
1162 if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) {
1163 /*
1164 * If the address went un-reachable, we need to move to
1165 * alternates for ALL chk's in queue
1166 */
1167 sctp_move_chunks_from_net(stcb, net);
1168 }
1169 sctp_free_remote_addr(net);
1170
1171 /* mark the retran info */
1172 if (strrst->sent != SCTP_DATAGRAM_RESEND)
1173 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1174 strrst->sent = SCTP_DATAGRAM_RESEND;
1175 strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1176
1177 /* restart the timer */
1178 sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, alt);
1179 return (0);
1180 }
1181
1182 int
1183 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1184 struct sctp_nets *net)
1185 {
1186 struct sctp_nets *alt;
1187 struct sctp_tmit_chunk *asconf, *chk;
1188
1189 /* is this a first send, or a retransmission? */
1190 if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1191 /* compose a new ASCONF chunk and send it */
1192 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1193 } else {
1194 /*
1195 * Retransmission of the existing ASCONF is needed
1196 */
1197
1198 /* find the existing ASCONF */
1199 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1200 if (asconf == NULL) {
1201 return (0);
1202 }
1203 net = asconf->whoTo;
1204 /* do threshold management */
1205 if (sctp_threshold_management(inp, stcb, net,
1206 stcb->asoc.max_send_times)) {
1207 /* Assoc is over */
1208 return (1);
1209 }
1210 if (asconf->snd_count > stcb->asoc.max_send_times) {
1211 /*
1212 * Something is rotten: our peer is not responding
1213 * to ASCONFs but apparently is to other chunks.
1214 * i.e. it is not properly handling the chunk type
1215 * upper bits. Mark this peer as ASCONF incapable
1216 * and cleanup.
1217 */
1218 SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1219 sctp_asconf_cleanup(stcb);
1220 return (0);
1221 }
1222 /*
1223 * cleared threshold management, so now backoff the net and
1224 * select an alternate
1225 */
1226 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1227 alt = sctp_find_alternate_net(stcb, net, 0);
1228 if (asconf->whoTo != alt) {
1229 asconf->whoTo = alt;
1230 atomic_add_int(&alt->ref_count, 1);
1231 }
1232
1233 /* See if an ECN Echo is also stranded */
1234 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1235 if ((chk->whoTo == net) &&
1236 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1237 sctp_free_remote_addr(chk->whoTo);
1238 chk->whoTo = alt;
1239 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1240 chk->sent = SCTP_DATAGRAM_RESEND;
1241 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1242 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1243 }
1244 atomic_add_int(&alt->ref_count, 1);
1245 }
1246 }
1247 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1248 if (chk->whoTo != alt) {
1249 sctp_free_remote_addr(chk->whoTo);
1250 chk->whoTo = alt;
1251 atomic_add_int(&alt->ref_count, 1);
1252 }
1253 if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1254 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1255 chk->sent = SCTP_DATAGRAM_RESEND;
1256 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1257 }
1258 if ((net->dest_state & SCTP_ADDR_REACHABLE) == 0) {
1259 /*
1260 * If the address went un-reachable, we need to move
1261 * to the alternate for ALL chunks in queue
1262 */
1263 sctp_move_chunks_from_net(stcb, net);
1264 }
1265 sctp_free_remote_addr(net);
1266
1267 /* mark the retran info */
1268 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1269 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1270 asconf->sent = SCTP_DATAGRAM_RESEND;
1271 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1272
1273 /* send another ASCONF if any and we can do */
1274 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1275 }
1276 return (0);
1277 }
1278
1279 /* Mobility adaptation */
1280 void
1281 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1282 {
1283 if (stcb->asoc.deleted_primary == NULL) {
1284 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1285 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1286 return;
1287 }
1288 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1289 SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1290 sctp_free_remote_addr(stcb->asoc.deleted_primary);
1291 stcb->asoc.deleted_primary = NULL;
1292 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1293 return;
1294 }
1295
1296 /*
1297 * For the shutdown and shutdown-ack, we do not keep one around on the
1298 * control queue. This means we must generate a new one and call the general
1299 * chunk output routine, AFTER having done threshold management.
1300 * It is assumed that net is non-NULL.
1301 */
1302 int
1303 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1304 struct sctp_nets *net)
1305 {
1306 struct sctp_nets *alt;
1307
1308 /* first threshold management */
1309 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1310 /* Assoc is over */
1311 return (1);
1312 }
1313 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1314 /* second select an alternative */
1315 alt = sctp_find_alternate_net(stcb, net, 0);
1316
1317 /* third generate a shutdown into the queue for out net */
1318 sctp_send_shutdown(stcb, alt);
1319
1320 /* fourth restart timer */
1321 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1322 return (0);
1323 }
1324
1325 int
1326 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1327 struct sctp_nets *net)
1328 {
1329 struct sctp_nets *alt;
1330
1331 /* first threshold management */
1332 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1333 /* Assoc is over */
1334 return (1);
1335 }
1336 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1337 /* second select an alternative */
1338 alt = sctp_find_alternate_net(stcb, net, 0);
1339
1340 /* third generate a shutdown into the queue for out net */
1341 sctp_send_shutdown_ack(stcb, alt);
1342
1343 /* fourth restart timer */
1344 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1345 return (0);
1346 }
1347
1348 static void
1349 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1350 {
1351 struct sctp_stream_queue_pending *sp;
1352 unsigned int i, chks_in_queue = 0;
1353 int being_filled = 0;
1354
1355 KASSERT(inp != NULL, ("inp is NULL"));
1356 KASSERT(stcb != NULL, ("stcb is NULL"));
1357 SCTP_TCB_LOCK_ASSERT(stcb);
1358 KASSERT(TAILQ_EMPTY(&stcb->asoc.send_queue), ("send_queue not empty"));
1359 KASSERT(TAILQ_EMPTY(&stcb->asoc.sent_queue), ("sent_queue not empty"));
1360
1361 if (stcb->asoc.sent_queue_retran_cnt) {
1362 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1363 stcb->asoc.sent_queue_retran_cnt);
1364 stcb->asoc.sent_queue_retran_cnt = 0;
1365 }
1366 if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1367 /* No stream scheduler information, initialize scheduler */
1368 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc);
1369 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1370 /* yep, we lost a stream or two */
1371 SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1372 } else {
1373 /* no streams lost */
1374 stcb->asoc.total_output_queue_size = 0;
1375 }
1376 }
1377 /* Check to see if some data queued, if so report it */
1378 for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1379 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1380 TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1381 if (sp->msg_is_complete)
1382 being_filled++;
1383 chks_in_queue++;
1384 }
1385 }
1386 }
1387 if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1388 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1389 stcb->asoc.stream_queue_cnt, chks_in_queue);
1390 }
1391 if (chks_in_queue) {
1392 /* call the output queue function */
1393 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1394 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1395 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1396 /*
1397 * Probably should go in and make it go back through
1398 * and add fragments allowed
1399 */
1400 if (being_filled == 0) {
1401 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1402 chks_in_queue);
1403 }
1404 }
1405 } else {
1406 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1407 (u_long)stcb->asoc.total_output_queue_size);
1408 stcb->asoc.total_output_queue_size = 0;
1409 }
1410 }
1411
1412 int
1413 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1414 struct sctp_nets *net)
1415 {
1416 bool net_was_pf;
1417
1418 net_was_pf = (net->dest_state & SCTP_ADDR_PF) != 0;
1419 if (net->hb_responded == 0) {
1420 if (net->ro._s_addr != NULL) {
1421 /*
1422 * Invalidate the src address if we did not get a
1423 * response last time.
1424 */
1425 sctp_free_ifa(net->ro._s_addr);
1426 net->ro._s_addr = NULL;
1427 net->src_addr_selected = 0;
1428 }
1429 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1430 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1431 /* Assoc is over */
1432 return (1);
1433 }
1434 }
1435 /* Zero PBA, if it needs it */
1436 if (net->partial_bytes_acked > 0) {
1437 net->partial_bytes_acked = 0;
1438 }
1439 if ((stcb->asoc.total_output_queue_size > 0) &&
1440 (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1441 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1442 sctp_audit_stream_queues_for_size(inp, stcb);
1443 }
1444 if ((((net->dest_state & SCTP_ADDR_NOHB) == 0) ||
1445 (net->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
1446 (net_was_pf || ((net->dest_state & SCTP_ADDR_PF) == 0))) {
1447 /*
1448 * When moving to PF during threshold management, a HB has
1449 * been queued in that routine.
1450 */
1451 uint32_t ms_gone_by;
1452
1453 if ((net->last_sent_time.tv_sec > 0) ||
1454 (net->last_sent_time.tv_usec > 0)) {
1455 struct timeval diff;
1456
1457 SCTP_GETTIME_TIMEVAL(&diff);
1458 timevalsub(&diff, &net->last_sent_time);
1459 ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1460 (uint32_t)(diff.tv_usec / 1000);
1461 } else {
1462 ms_gone_by = 0xffffffff;
1463 }
1464 if ((ms_gone_by >= net->heart_beat_delay) ||
1465 (net->dest_state & SCTP_ADDR_UNCONFIRMED) ||
1466 (net->dest_state & SCTP_ADDR_PF)) {
1467 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1468 }
1469 }
1470 return (0);
1471 }
1472
1473 void
1474 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1475 struct sctp_tcb *stcb,
1476 struct sctp_nets *net)
1477 {
1478 uint32_t next_mtu, mtu;
1479
1480 next_mtu = sctp_get_next_mtu(net->mtu);
1481
1482 if ((next_mtu > net->mtu) && (net->port == 0)) {
1483 if ((net->src_addr_selected == 0) ||
1484 (net->ro._s_addr == NULL) ||
1485 (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1486 if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1487 sctp_free_ifa(net->ro._s_addr);
1488 net->ro._s_addr = NULL;
1489 net->src_addr_selected = 0;
1490 } else if (net->ro._s_addr == NULL) {
1491 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1492 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1493 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1494
1495 /* KAME hack: embed scopeid */
1496 (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1497 }
1498 #endif
1499
1500 net->ro._s_addr = sctp_source_address_selection(inp,
1501 stcb,
1502 (sctp_route_t *)&net->ro,
1503 net, 0, stcb->asoc.vrf_id);
1504 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1505 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1506 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1507
1508 (void)sa6_recoverscope(sin6);
1509 }
1510 #endif /* INET6 */
1511 }
1512 if (net->ro._s_addr)
1513 net->src_addr_selected = 1;
1514 }
1515 if (net->ro._s_addr) {
1516 mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_nh);
1517 #if defined(INET) || defined(INET6)
1518 if (net->port) {
1519 mtu -= sizeof(struct udphdr);
1520 }
1521 #endif
1522 if (mtu > next_mtu) {
1523 net->mtu = next_mtu;
1524 } else {
1525 net->mtu = mtu;
1526 }
1527 }
1528 }
1529 /* restart the timer */
1530 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1531 }
1532
1533 void
1534 sctp_autoclose_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1535 {
1536 struct timeval tn, *tim_touse;
1537 struct sctp_association *asoc;
1538 uint32_t ticks_gone_by;
1539
1540 (void)SCTP_GETTIME_TIMEVAL(&tn);
1541 if (stcb->asoc.sctp_autoclose_ticks > 0 &&
1542 sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1543 /* Auto close is on */
1544 asoc = &stcb->asoc;
1545 /* pick the time to use */
1546 if (asoc->time_last_rcvd.tv_sec >
1547 asoc->time_last_sent.tv_sec) {
1548 tim_touse = &asoc->time_last_rcvd;
1549 } else {
1550 tim_touse = &asoc->time_last_sent;
1551 }
1552 /* Now has long enough transpired to autoclose? */
1553 ticks_gone_by = sctp_secs_to_ticks((uint32_t)(tn.tv_sec - tim_touse->tv_sec));
1554 if (ticks_gone_by >= asoc->sctp_autoclose_ticks) {
1555 /*
1556 * autoclose time has hit, call the output routine,
1557 * which should do nothing just to be SURE we don't
1558 * have hanging data. We can then safely check the
1559 * queues and know that we are clear to send
1560 * shutdown
1561 */
1562 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1563 /* Are we clean? */
1564 if (TAILQ_EMPTY(&asoc->send_queue) &&
1565 TAILQ_EMPTY(&asoc->sent_queue)) {
1566 /*
1567 * there is nothing queued to send, so I'm
1568 * done...
1569 */
1570 if (SCTP_GET_STATE(stcb) != SCTP_STATE_SHUTDOWN_SENT) {
1571 /* only send SHUTDOWN 1st time thru */
1572 struct sctp_nets *net;
1573
1574 if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
1575 (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1576 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1577 }
1578 SCTP_SET_STATE(stcb, SCTP_STATE_SHUTDOWN_SENT);
1579 sctp_stop_timers_for_shutdown(stcb);
1580 if (stcb->asoc.alternate) {
1581 net = stcb->asoc.alternate;
1582 } else {
1583 net = stcb->asoc.primary_destination;
1584 }
1585 sctp_send_shutdown(stcb, net);
1586 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1587 stcb->sctp_ep, stcb, net);
1588 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1589 stcb->sctp_ep, stcb, NULL);
1590 }
1591 }
1592 } else {
1593 /*
1594 * No auto close at this time, reset t-o to check
1595 * later
1596 */
1597 uint32_t tmp;
1598
1599 /* fool the timer startup to use the time left */
1600 tmp = asoc->sctp_autoclose_ticks;
1601 asoc->sctp_autoclose_ticks -= ticks_gone_by;
1602 sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb, NULL);
1603 /* restore the real tick value */
1604 asoc->sctp_autoclose_ticks = tmp;
1605 }
1606 }
1607 }
Cache object: 9c4e9635e123969c72c367e8286c6122
|