1 /*-
2 * SPDX-License-Identifier: BSD-3-Clause
3 *
4 * Copyright (c) 2001-2007, by Cisco Systems, Inc. All rights reserved.
5 * Copyright (c) 2008-2012, by Randall Stewart. All rights reserved.
6 * Copyright (c) 2008-2012, by Michael Tuexen. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions are met:
10 *
11 * a) Redistributions of source code must retain the above copyright notice,
12 * this list of conditions and the following disclaimer.
13 *
14 * b) Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in
16 * the documentation and/or other materials provided with the distribution.
17 *
18 * c) Neither the name of Cisco Systems, Inc. nor the names of its
19 * contributors may be used to endorse or promote products derived
20 * from this software without specific prior written permission.
21 *
22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
23 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
24 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32 * THE POSSIBILITY OF SUCH DAMAGE.
33 */
34
35 #include <sys/cdefs.h>
36 __FBSDID("$FreeBSD$");
37
38 #define _IP_VHL
39 #include <netinet/sctp_os.h>
40 #include <netinet/sctp_pcb.h>
41 #ifdef INET6
42 #endif
43 #include <netinet/sctp_var.h>
44 #include <netinet/sctp_sysctl.h>
45 #include <netinet/sctp_timer.h>
46 #include <netinet/sctputil.h>
47 #include <netinet/sctp_output.h>
48 #include <netinet/sctp_header.h>
49 #include <netinet/sctp_indata.h>
50 #include <netinet/sctp_asconf.h>
51 #include <netinet/sctp_input.h>
52 #include <netinet/sctp.h>
53 #include <netinet/sctp_uio.h>
54 #if defined(INET) || defined(INET6)
55 #include <netinet/udp.h>
56 #endif
57
58 void
59 sctp_audit_retranmission_queue(struct sctp_association *asoc)
60 {
61 struct sctp_tmit_chunk *chk;
62
63 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit invoked on send queue cnt:%d onqueue:%d\n",
64 asoc->sent_queue_retran_cnt,
65 asoc->sent_queue_cnt);
66 asoc->sent_queue_retran_cnt = 0;
67 asoc->sent_queue_cnt = 0;
68 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
69 if (chk->sent == SCTP_DATAGRAM_RESEND) {
70 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
71 }
72 asoc->sent_queue_cnt++;
73 }
74 TAILQ_FOREACH(chk, &asoc->control_send_queue, sctp_next) {
75 if (chk->sent == SCTP_DATAGRAM_RESEND) {
76 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
77 }
78 }
79 TAILQ_FOREACH(chk, &asoc->asconf_send_queue, sctp_next) {
80 if (chk->sent == SCTP_DATAGRAM_RESEND) {
81 sctp_ucount_incr(asoc->sent_queue_retran_cnt);
82 }
83 }
84 SCTPDBG(SCTP_DEBUG_TIMER4, "Audit completes retran:%d onqueue:%d\n",
85 asoc->sent_queue_retran_cnt,
86 asoc->sent_queue_cnt);
87 }
88
89 static int
90 sctp_threshold_management(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
91 struct sctp_nets *net, uint16_t threshold)
92 {
93 if (net) {
94 net->error_count++;
95 SCTPDBG(SCTP_DEBUG_TIMER4, "Error count for %p now %d thresh:%d\n",
96 (void *)net, net->error_count,
97 net->failure_threshold);
98 if (net->error_count > net->failure_threshold) {
99 /* We had a threshold failure */
100 if (net->dest_state & SCTP_ADDR_REACHABLE) {
101 net->dest_state &= ~SCTP_ADDR_REACHABLE;
102 net->dest_state &= ~SCTP_ADDR_REQ_PRIMARY;
103 net->dest_state &= ~SCTP_ADDR_PF;
104 sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_DOWN,
105 stcb, 0,
106 (void *)net, SCTP_SO_NOT_LOCKED);
107 }
108 } else if ((net->pf_threshold < net->failure_threshold) &&
109 (net->error_count > net->pf_threshold)) {
110 if (!(net->dest_state & SCTP_ADDR_PF)) {
111 net->dest_state |= SCTP_ADDR_PF;
112 net->last_active = sctp_get_tick_count();
113 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
114 sctp_timer_stop(SCTP_TIMER_TYPE_HEARTBEAT,
115 inp, stcb, net,
116 SCTP_FROM_SCTP_TIMER + SCTP_LOC_1);
117 sctp_timer_start(SCTP_TIMER_TYPE_HEARTBEAT, inp, stcb, net);
118 }
119 }
120 }
121 if (stcb == NULL)
122 return (0);
123
124 if (net) {
125 if ((net->dest_state & SCTP_ADDR_UNCONFIRMED) == 0) {
126 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
127 sctp_misc_ints(SCTP_THRESHOLD_INCR,
128 stcb->asoc.overall_error_count,
129 (stcb->asoc.overall_error_count + 1),
130 SCTP_FROM_SCTP_TIMER,
131 __LINE__);
132 }
133 stcb->asoc.overall_error_count++;
134 }
135 } else {
136 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_THRESHOLD_LOGGING) {
137 sctp_misc_ints(SCTP_THRESHOLD_INCR,
138 stcb->asoc.overall_error_count,
139 (stcb->asoc.overall_error_count + 1),
140 SCTP_FROM_SCTP_TIMER,
141 __LINE__);
142 }
143 stcb->asoc.overall_error_count++;
144 }
145 SCTPDBG(SCTP_DEBUG_TIMER4, "Overall error count for %p now %d thresh:%u state:%x\n",
146 (void *)&stcb->asoc, stcb->asoc.overall_error_count,
147 (uint32_t)threshold,
148 ((net == NULL) ? (uint32_t)0 : (uint32_t)net->dest_state));
149 /*
150 * We specifically do not do >= to give the assoc one more change
151 * before we fail it.
152 */
153 if (stcb->asoc.overall_error_count > threshold) {
154 /* Abort notification sends a ULP notify */
155 struct mbuf *op_err;
156
157 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
158 "Association error counter exceeded");
159 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_2;
160 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
161 return (1);
162 }
163 return (0);
164 }
165
166 /*
167 * sctp_find_alternate_net() returns a non-NULL pointer as long
168 * the argument net is non-NULL.
169 */
170 struct sctp_nets *
171 sctp_find_alternate_net(struct sctp_tcb *stcb,
172 struct sctp_nets *net,
173 int mode)
174 {
175 /* Find and return an alternate network if possible */
176 struct sctp_nets *alt, *mnet, *min_errors_net = NULL, *max_cwnd_net = NULL;
177 int once;
178
179 /* JRS 5/14/07 - Initialize min_errors to an impossible value. */
180 int min_errors = -1;
181 uint32_t max_cwnd = 0;
182
183 if (stcb->asoc.numnets == 1) {
184 /* No others but net */
185 return (TAILQ_FIRST(&stcb->asoc.nets));
186 }
187 /*
188 * JRS 5/14/07 - If mode is set to 2, use the CMT PF find alternate
189 * net algorithm. This algorithm chooses the active destination (not
190 * in PF state) with the largest cwnd value. If all destinations are
191 * in PF state, unreachable, or unconfirmed, choose the desination
192 * that is in PF state with the lowest error count. In case of a
193 * tie, choose the destination that was most recently active.
194 */
195 if (mode == 2) {
196 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
197 /*
198 * JRS 5/14/07 - If the destination is unreachable
199 * or unconfirmed, skip it.
200 */
201 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
202 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
203 continue;
204 }
205 /*
206 * JRS 5/14/07 - If the destination is reachable
207 * but in PF state, compare the error count of the
208 * destination to the minimum error count seen thus
209 * far. Store the destination with the lower error
210 * count. If the error counts are equal, store the
211 * destination that was most recently active.
212 */
213 if (mnet->dest_state & SCTP_ADDR_PF) {
214 /*
215 * JRS 5/14/07 - If the destination under
216 * consideration is the current destination,
217 * work as if the error count is one higher.
218 * The actual error count will not be
219 * incremented until later in the t3
220 * handler.
221 */
222 if (mnet == net) {
223 if (min_errors == -1) {
224 min_errors = mnet->error_count + 1;
225 min_errors_net = mnet;
226 } else if (mnet->error_count + 1 < min_errors) {
227 min_errors = mnet->error_count + 1;
228 min_errors_net = mnet;
229 } else if (mnet->error_count + 1 == min_errors
230 && mnet->last_active > min_errors_net->last_active) {
231 min_errors_net = mnet;
232 min_errors = mnet->error_count + 1;
233 }
234 continue;
235 } else {
236 if (min_errors == -1) {
237 min_errors = mnet->error_count;
238 min_errors_net = mnet;
239 } else if (mnet->error_count < min_errors) {
240 min_errors = mnet->error_count;
241 min_errors_net = mnet;
242 } else if (mnet->error_count == min_errors
243 && mnet->last_active > min_errors_net->last_active) {
244 min_errors_net = mnet;
245 min_errors = mnet->error_count;
246 }
247 continue;
248 }
249 }
250 /*
251 * JRS 5/14/07 - If the destination is reachable and
252 * not in PF state, compare the cwnd of the
253 * destination to the highest cwnd seen thus far.
254 * Store the destination with the higher cwnd value.
255 * If the cwnd values are equal, randomly choose one
256 * of the two destinations.
257 */
258 if (max_cwnd < mnet->cwnd) {
259 max_cwnd_net = mnet;
260 max_cwnd = mnet->cwnd;
261 } else if (max_cwnd == mnet->cwnd) {
262 uint32_t rndval;
263 uint8_t this_random;
264
265 if (stcb->asoc.hb_random_idx > 3) {
266 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
267 memcpy(stcb->asoc.hb_random_values, &rndval, sizeof(stcb->asoc.hb_random_values));
268 this_random = stcb->asoc.hb_random_values[0];
269 stcb->asoc.hb_random_idx++;
270 stcb->asoc.hb_ect_randombit = 0;
271 } else {
272 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
273 stcb->asoc.hb_random_idx++;
274 stcb->asoc.hb_ect_randombit = 0;
275 }
276 if (this_random % 2 == 1) {
277 max_cwnd_net = mnet;
278 max_cwnd = mnet->cwnd; /* Useless? */
279 }
280 }
281 }
282 if (max_cwnd_net == NULL) {
283 if (min_errors_net == NULL) {
284 return (net);
285 }
286 return (min_errors_net);
287 } else {
288 return (max_cwnd_net);
289 }
290 } /* JRS 5/14/07 - If mode is set to 1, use the
291 * CMT policy for choosing an alternate net. */
292 else if (mode == 1) {
293 TAILQ_FOREACH(mnet, &stcb->asoc.nets, sctp_next) {
294 if (((mnet->dest_state & SCTP_ADDR_REACHABLE) != SCTP_ADDR_REACHABLE) ||
295 (mnet->dest_state & SCTP_ADDR_UNCONFIRMED)) {
296 /*
297 * will skip ones that are not-reachable or
298 * unconfirmed
299 */
300 continue;
301 }
302 if (max_cwnd < mnet->cwnd) {
303 max_cwnd_net = mnet;
304 max_cwnd = mnet->cwnd;
305 } else if (max_cwnd == mnet->cwnd) {
306 uint32_t rndval;
307 uint8_t this_random;
308
309 if (stcb->asoc.hb_random_idx > 3) {
310 rndval = sctp_select_initial_TSN(&stcb->sctp_ep->sctp_ep);
311 memcpy(stcb->asoc.hb_random_values, &rndval,
312 sizeof(stcb->asoc.hb_random_values));
313 this_random = stcb->asoc.hb_random_values[0];
314 stcb->asoc.hb_random_idx = 0;
315 stcb->asoc.hb_ect_randombit = 0;
316 } else {
317 this_random = stcb->asoc.hb_random_values[stcb->asoc.hb_random_idx];
318 stcb->asoc.hb_random_idx++;
319 stcb->asoc.hb_ect_randombit = 0;
320 }
321 if (this_random % 2) {
322 max_cwnd_net = mnet;
323 max_cwnd = mnet->cwnd;
324 }
325 }
326 }
327 if (max_cwnd_net) {
328 return (max_cwnd_net);
329 }
330 }
331 mnet = net;
332 once = 0;
333
334 if (mnet == NULL) {
335 mnet = TAILQ_FIRST(&stcb->asoc.nets);
336 if (mnet == NULL) {
337 return (NULL);
338 }
339 }
340 for (;;) {
341 alt = TAILQ_NEXT(mnet, sctp_next);
342 if (alt == NULL) {
343 once++;
344 if (once > 1) {
345 break;
346 }
347 alt = TAILQ_FIRST(&stcb->asoc.nets);
348 if (alt == NULL) {
349 return (NULL);
350 }
351 }
352 if (alt->ro.ro_rt == NULL) {
353 if (alt->ro._s_addr) {
354 sctp_free_ifa(alt->ro._s_addr);
355 alt->ro._s_addr = NULL;
356 }
357 alt->src_addr_selected = 0;
358 }
359 if (((alt->dest_state & SCTP_ADDR_REACHABLE) == SCTP_ADDR_REACHABLE) &&
360 (alt->ro.ro_rt != NULL) &&
361 (!(alt->dest_state & SCTP_ADDR_UNCONFIRMED))) {
362 /* Found a reachable address */
363 break;
364 }
365 mnet = alt;
366 }
367
368 if (alt == NULL) {
369 /* Case where NO insv network exists (dormant state) */
370 /* we rotate destinations */
371 once = 0;
372 mnet = net;
373 for (;;) {
374 if (mnet == NULL) {
375 return (TAILQ_FIRST(&stcb->asoc.nets));
376 }
377 alt = TAILQ_NEXT(mnet, sctp_next);
378 if (alt == NULL) {
379 once++;
380 if (once > 1) {
381 break;
382 }
383 alt = TAILQ_FIRST(&stcb->asoc.nets);
384 if (alt == NULL) {
385 break;
386 }
387 }
388 if ((!(alt->dest_state & SCTP_ADDR_UNCONFIRMED)) &&
389 (alt != net)) {
390 /* Found an alternate address */
391 break;
392 }
393 mnet = alt;
394 }
395 }
396 if (alt == NULL) {
397 return (net);
398 }
399 return (alt);
400 }
401
402 static void
403 sctp_backoff_on_timeout(struct sctp_tcb *stcb,
404 struct sctp_nets *net,
405 int win_probe,
406 int num_marked, int num_abandoned)
407 {
408 if (net->RTO == 0) {
409 if (net->RTO_measured) {
410 net->RTO = stcb->asoc.minrto;
411 } else {
412 net->RTO = stcb->asoc.initial_rto;
413 }
414 }
415 net->RTO <<= 1;
416 if (net->RTO > stcb->asoc.maxrto) {
417 net->RTO = stcb->asoc.maxrto;
418 }
419 if ((win_probe == 0) && (num_marked || num_abandoned)) {
420 /* We don't apply penalty to window probe scenarios */
421 /* JRS - Use the congestion control given in the CC module */
422 stcb->asoc.cc_functions.sctp_cwnd_update_after_timeout(stcb, net);
423 }
424 }
425
426 #ifndef INVARIANTS
427 static void
428 sctp_recover_sent_list(struct sctp_tcb *stcb)
429 {
430 struct sctp_tmit_chunk *chk, *nchk;
431 struct sctp_association *asoc;
432
433 asoc = &stcb->asoc;
434 TAILQ_FOREACH_SAFE(chk, &asoc->sent_queue, sctp_next, nchk) {
435 if (SCTP_TSN_GE(asoc->last_acked_seq, chk->rec.data.tsn)) {
436 SCTP_PRINTF("Found chk:%p tsn:%x <= last_acked_seq:%x\n",
437 (void *)chk, chk->rec.data.tsn, asoc->last_acked_seq);
438 if (chk->sent != SCTP_DATAGRAM_NR_ACKED) {
439 if (asoc->strmout[chk->rec.data.sid].chunks_on_queues > 0) {
440 asoc->strmout[chk->rec.data.sid].chunks_on_queues--;
441 }
442 }
443 if ((asoc->strmout[chk->rec.data.sid].chunks_on_queues == 0) &&
444 (asoc->strmout[chk->rec.data.sid].state == SCTP_STREAM_RESET_PENDING) &&
445 TAILQ_EMPTY(&asoc->strmout[chk->rec.data.sid].outqueue)) {
446 asoc->trigger_reset = 1;
447 }
448 TAILQ_REMOVE(&asoc->sent_queue, chk, sctp_next);
449 if (PR_SCTP_ENABLED(chk->flags)) {
450 if (asoc->pr_sctp_cnt != 0)
451 asoc->pr_sctp_cnt--;
452 }
453 if (chk->data) {
454 /* sa_ignore NO_NULL_CHK */
455 sctp_free_bufspace(stcb, asoc, chk, 1);
456 sctp_m_freem(chk->data);
457 chk->data = NULL;
458 if (asoc->prsctp_supported && PR_SCTP_BUF_ENABLED(chk->flags)) {
459 asoc->sent_queue_cnt_removeable--;
460 }
461 }
462 asoc->sent_queue_cnt--;
463 sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
464 }
465 }
466 SCTP_PRINTF("after recover order is as follows\n");
467 TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) {
468 SCTP_PRINTF("chk:%p TSN:%x\n", (void *)chk, chk->rec.data.tsn);
469 }
470 }
471 #endif
472
473 static int
474 sctp_mark_all_for_resend(struct sctp_tcb *stcb,
475 struct sctp_nets *net,
476 struct sctp_nets *alt,
477 int window_probe,
478 int *num_marked,
479 int *num_abandoned)
480 {
481
482 /*
483 * Mark all chunks (well not all) that were sent to *net for
484 * retransmission. Move them to alt for there destination as well...
485 * We only mark chunks that have been outstanding long enough to
486 * have received feed-back.
487 */
488 struct sctp_tmit_chunk *chk, *nchk;
489 struct sctp_nets *lnets;
490 struct timeval now, min_wait, tv;
491 int cur_rto;
492 int cnt_abandoned;
493 int audit_tf, num_mk, fir;
494 unsigned int cnt_mk;
495 uint32_t orig_flight, orig_tf;
496 uint32_t tsnlast, tsnfirst;
497 #ifndef INVARIANTS
498 int recovery_cnt = 0;
499 #endif
500
501
502 /* none in flight now */
503 audit_tf = 0;
504 fir = 0;
505 /*
506 * figure out how long a data chunk must be pending before we can
507 * mark it ..
508 */
509 (void)SCTP_GETTIME_TIMEVAL(&now);
510 /* get cur rto in micro-seconds */
511 cur_rto = (net->lastsa >> SCTP_RTT_SHIFT) + net->lastsv;
512 cur_rto *= 1000;
513 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
514 sctp_log_fr(cur_rto,
515 stcb->asoc.peers_rwnd,
516 window_probe,
517 SCTP_FR_T3_MARK_TIME);
518 sctp_log_fr(net->flight_size, 0, 0, SCTP_FR_CWND_REPORT);
519 sctp_log_fr(net->flight_size, net->cwnd, stcb->asoc.total_flight, SCTP_FR_CWND_REPORT);
520 }
521 tv.tv_sec = cur_rto / 1000000;
522 tv.tv_usec = cur_rto % 1000000;
523 min_wait = now;
524 timevalsub(&min_wait, &tv);
525 if (min_wait.tv_sec < 0 || min_wait.tv_usec < 0) {
526 /*
527 * if we hit here, we don't have enough seconds on the clock
528 * to account for the RTO. We just let the lower seconds be
529 * the bounds and don't worry about it. This may mean we
530 * will mark a lot more than we should.
531 */
532 min_wait.tv_sec = min_wait.tv_usec = 0;
533 }
534 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
535 sctp_log_fr(cur_rto, now.tv_sec, now.tv_usec, SCTP_FR_T3_MARK_TIME);
536 sctp_log_fr(0, min_wait.tv_sec, min_wait.tv_usec, SCTP_FR_T3_MARK_TIME);
537 }
538 /*
539 * Our rwnd will be incorrect here since we are not adding back the
540 * cnt * mbuf but we will fix that down below.
541 */
542 orig_flight = net->flight_size;
543 orig_tf = stcb->asoc.total_flight;
544
545 net->fast_retran_ip = 0;
546 /* Now on to each chunk */
547 cnt_abandoned = 0;
548 num_mk = cnt_mk = 0;
549 tsnfirst = tsnlast = 0;
550 #ifndef INVARIANTS
551 start_again:
552 #endif
553 TAILQ_FOREACH_SAFE(chk, &stcb->asoc.sent_queue, sctp_next, nchk) {
554 if (SCTP_TSN_GE(stcb->asoc.last_acked_seq, chk->rec.data.tsn)) {
555 /* Strange case our list got out of order? */
556 SCTP_PRINTF("Our list is out of order? last_acked:%x chk:%x\n",
557 (unsigned int)stcb->asoc.last_acked_seq, (unsigned int)chk->rec.data.tsn);
558 #ifdef INVARIANTS
559 panic("last acked >= chk on sent-Q");
560 #else
561 recovery_cnt++;
562 SCTP_PRINTF("Recover attempts a restart cnt:%d\n", recovery_cnt);
563 sctp_recover_sent_list(stcb);
564 if (recovery_cnt < 10) {
565 goto start_again;
566 } else {
567 SCTP_PRINTF("Recovery fails %d times??\n", recovery_cnt);
568 }
569 #endif
570 }
571 if ((chk->whoTo == net) && (chk->sent < SCTP_DATAGRAM_ACKED)) {
572 /*
573 * found one to mark: If it is less than
574 * DATAGRAM_ACKED it MUST not be a skipped or marked
575 * TSN but instead one that is either already set
576 * for retransmission OR one that needs
577 * retransmission.
578 */
579
580 /* validate its been outstanding long enough */
581 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
582 sctp_log_fr(chk->rec.data.tsn,
583 chk->sent_rcv_time.tv_sec,
584 chk->sent_rcv_time.tv_usec,
585 SCTP_FR_T3_MARK_TIME);
586 }
587 if ((chk->sent_rcv_time.tv_sec > min_wait.tv_sec) && (window_probe == 0)) {
588 /*
589 * we have reached a chunk that was sent
590 * some seconds past our min.. forget it we
591 * will find no more to send.
592 */
593 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
594 sctp_log_fr(0,
595 chk->sent_rcv_time.tv_sec,
596 chk->sent_rcv_time.tv_usec,
597 SCTP_FR_T3_STOPPED);
598 }
599 continue;
600 } else if ((chk->sent_rcv_time.tv_sec == min_wait.tv_sec) &&
601 (window_probe == 0)) {
602 /*
603 * we must look at the micro seconds to
604 * know.
605 */
606 if (chk->sent_rcv_time.tv_usec >= min_wait.tv_usec) {
607 /*
608 * ok it was sent after our boundary
609 * time.
610 */
611 continue;
612 }
613 }
614 if (stcb->asoc.prsctp_supported && PR_SCTP_TTL_ENABLED(chk->flags)) {
615 /* Is it expired? */
616 if (timevalcmp(&now, &chk->rec.data.timetodrop, >)) {
617 /* Yes so drop it */
618 if (chk->data) {
619 (void)sctp_release_pr_sctp_chunk(stcb,
620 chk,
621 1,
622 SCTP_SO_NOT_LOCKED);
623 cnt_abandoned++;
624 }
625 continue;
626 }
627 }
628 if (stcb->asoc.prsctp_supported && PR_SCTP_RTX_ENABLED(chk->flags)) {
629 /* Has it been retransmitted tv_sec times? */
630 if (chk->snd_count > chk->rec.data.timetodrop.tv_sec) {
631 if (chk->data) {
632 (void)sctp_release_pr_sctp_chunk(stcb,
633 chk,
634 1,
635 SCTP_SO_NOT_LOCKED);
636 cnt_abandoned++;
637 }
638 continue;
639 }
640 }
641 if (chk->sent < SCTP_DATAGRAM_RESEND) {
642 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
643 num_mk++;
644 if (fir == 0) {
645 fir = 1;
646 tsnfirst = chk->rec.data.tsn;
647 }
648 tsnlast = chk->rec.data.tsn;
649 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
650 sctp_log_fr(chk->rec.data.tsn, chk->snd_count,
651 0, SCTP_FR_T3_MARKED);
652 }
653
654 if (chk->rec.data.chunk_was_revoked) {
655 /* deflate the cwnd */
656 chk->whoTo->cwnd -= chk->book_size;
657 chk->rec.data.chunk_was_revoked = 0;
658 }
659 net->marked_retrans++;
660 stcb->asoc.marked_retrans++;
661 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
662 sctp_misc_ints(SCTP_FLIGHT_LOG_DOWN_RSND_TO,
663 chk->whoTo->flight_size,
664 chk->book_size,
665 (uint32_t)(uintptr_t)chk->whoTo,
666 chk->rec.data.tsn);
667 }
668 sctp_flight_size_decrease(chk);
669 sctp_total_flight_decrease(stcb, chk);
670 stcb->asoc.peers_rwnd += chk->send_size;
671 stcb->asoc.peers_rwnd += SCTP_BASE_SYSCTL(sctp_peer_chunk_oh);
672 }
673 chk->sent = SCTP_DATAGRAM_RESEND;
674 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
675 SCTP_STAT_INCR(sctps_markedretrans);
676
677 /* reset the TSN for striking and other FR stuff */
678 chk->rec.data.doing_fast_retransmit = 0;
679 /* Clear any time so NO RTT is being done */
680
681 if (chk->do_rtt) {
682 if (chk->whoTo->rto_needed == 0) {
683 chk->whoTo->rto_needed = 1;
684 }
685 }
686 chk->do_rtt = 0;
687 if (alt != net) {
688 sctp_free_remote_addr(chk->whoTo);
689 chk->no_fr_allowed = 1;
690 chk->whoTo = alt;
691 atomic_add_int(&alt->ref_count, 1);
692 } else {
693 chk->no_fr_allowed = 0;
694 if (TAILQ_EMPTY(&stcb->asoc.send_queue)) {
695 chk->rec.data.fast_retran_tsn = stcb->asoc.sending_seq;
696 } else {
697 chk->rec.data.fast_retran_tsn = (TAILQ_FIRST(&stcb->asoc.send_queue))->rec.data.tsn;
698 }
699 }
700 /*
701 * CMT: Do not allow FRs on retransmitted TSNs.
702 */
703 if (stcb->asoc.sctp_cmt_on_off > 0) {
704 chk->no_fr_allowed = 1;
705 }
706 #ifdef THIS_SHOULD_NOT_BE_DONE
707 } else if (chk->sent == SCTP_DATAGRAM_ACKED) {
708 /* remember highest acked one */
709 could_be_sent = chk;
710 #endif
711 }
712 if (chk->sent == SCTP_DATAGRAM_RESEND) {
713 cnt_mk++;
714 }
715 }
716 if ((orig_flight - net->flight_size) != (orig_tf - stcb->asoc.total_flight)) {
717 /* we did not subtract the same things? */
718 audit_tf = 1;
719 }
720
721 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
722 sctp_log_fr(tsnfirst, tsnlast, num_mk, SCTP_FR_T3_TIMEOUT);
723 }
724 #ifdef SCTP_DEBUG
725 if (num_mk) {
726 SCTPDBG(SCTP_DEBUG_TIMER1, "LAST TSN marked was %x\n",
727 tsnlast);
728 SCTPDBG(SCTP_DEBUG_TIMER1, "Num marked for retransmission was %d peer-rwd:%u\n",
729 num_mk,
730 stcb->asoc.peers_rwnd);
731 }
732 #endif
733 *num_marked = num_mk;
734 *num_abandoned = cnt_abandoned;
735 /*
736 * Now check for a ECN Echo that may be stranded And include the
737 * cnt_mk'd to have all resends in the control queue.
738 */
739 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
740 if (chk->sent == SCTP_DATAGRAM_RESEND) {
741 cnt_mk++;
742 }
743 if ((chk->whoTo == net) &&
744 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
745 sctp_free_remote_addr(chk->whoTo);
746 chk->whoTo = alt;
747 if (chk->sent != SCTP_DATAGRAM_RESEND) {
748 chk->sent = SCTP_DATAGRAM_RESEND;
749 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
750 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
751 cnt_mk++;
752 }
753 atomic_add_int(&alt->ref_count, 1);
754 }
755 }
756 #ifdef THIS_SHOULD_NOT_BE_DONE
757 if ((stcb->asoc.sent_queue_retran_cnt == 0) && (could_be_sent)) {
758 /* fix it so we retransmit the highest acked anyway */
759 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
760 cnt_mk++;
761 could_be_sent->sent = SCTP_DATAGRAM_RESEND;
762 }
763 #endif
764 if (stcb->asoc.sent_queue_retran_cnt != cnt_mk) {
765 #ifdef INVARIANTS
766 SCTP_PRINTF("Local Audit says there are %d for retran asoc cnt:%d we marked:%d this time\n",
767 cnt_mk, stcb->asoc.sent_queue_retran_cnt, num_mk);
768 #endif
769 #ifndef SCTP_AUDITING_ENABLED
770 stcb->asoc.sent_queue_retran_cnt = cnt_mk;
771 #endif
772 }
773 if (audit_tf) {
774 SCTPDBG(SCTP_DEBUG_TIMER4,
775 "Audit total flight due to negative value net:%p\n",
776 (void *)net);
777 stcb->asoc.total_flight = 0;
778 stcb->asoc.total_flight_count = 0;
779 /* Clear all networks flight size */
780 TAILQ_FOREACH(lnets, &stcb->asoc.nets, sctp_next) {
781 lnets->flight_size = 0;
782 SCTPDBG(SCTP_DEBUG_TIMER4,
783 "Net:%p c-f cwnd:%d ssthresh:%d\n",
784 (void *)lnets, lnets->cwnd, lnets->ssthresh);
785 }
786 TAILQ_FOREACH(chk, &stcb->asoc.sent_queue, sctp_next) {
787 if (chk->sent < SCTP_DATAGRAM_RESEND) {
788 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FLIGHT_LOGGING_ENABLE) {
789 sctp_misc_ints(SCTP_FLIGHT_LOG_UP,
790 chk->whoTo->flight_size,
791 chk->book_size,
792 (uint32_t)(uintptr_t)chk->whoTo,
793 chk->rec.data.tsn);
794 }
795
796 sctp_flight_size_increase(chk);
797 sctp_total_flight_increase(stcb, chk);
798 }
799 }
800 }
801 /* We return 1 if we only have a window probe outstanding */
802 return (0);
803 }
804
805
806 int
807 sctp_t3rxt_timer(struct sctp_inpcb *inp,
808 struct sctp_tcb *stcb,
809 struct sctp_nets *net)
810 {
811 struct sctp_nets *alt;
812 int win_probe, num_mk, num_abandoned;
813
814 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_FR_LOGGING_ENABLE) {
815 sctp_log_fr(0, 0, 0, SCTP_FR_T3_TIMEOUT);
816 }
817 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_LOGGING_ENABLE) {
818 struct sctp_nets *lnet;
819
820 TAILQ_FOREACH(lnet, &stcb->asoc.nets, sctp_next) {
821 if (net == lnet) {
822 sctp_log_cwnd(stcb, lnet, 1, SCTP_CWND_LOG_FROM_T3);
823 } else {
824 sctp_log_cwnd(stcb, lnet, 0, SCTP_CWND_LOG_FROM_T3);
825 }
826 }
827 }
828 /* Find an alternate and mark those for retransmission */
829 if ((stcb->asoc.peers_rwnd == 0) &&
830 (stcb->asoc.total_flight < net->mtu)) {
831 SCTP_STAT_INCR(sctps_timowindowprobe);
832 win_probe = 1;
833 } else {
834 win_probe = 0;
835 }
836
837 if (win_probe == 0) {
838 /* We don't do normal threshold management on window probes */
839 if (sctp_threshold_management(inp, stcb, net,
840 stcb->asoc.max_send_times)) {
841 /* Association was destroyed */
842 return (1);
843 } else {
844 if (net != stcb->asoc.primary_destination) {
845 /* send a immediate HB if our RTO is stale */
846 struct timeval now;
847 unsigned int ms_goneby;
848
849 (void)SCTP_GETTIME_TIMEVAL(&now);
850 if (net->last_sent_time.tv_sec) {
851 ms_goneby = (now.tv_sec - net->last_sent_time.tv_sec) * 1000;
852 } else {
853 ms_goneby = 0;
854 }
855 if ((net->dest_state & SCTP_ADDR_PF) == 0) {
856 if ((ms_goneby > net->RTO) || (net->RTO == 0)) {
857 /*
858 * no recent feed back in an
859 * RTO or more, request a
860 * RTT update
861 */
862 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
863 }
864 }
865 }
866 }
867 } else {
868 /*
869 * For a window probe we don't penalize the net's but only
870 * the association. This may fail it if SACKs are not coming
871 * back. If sack's are coming with rwnd locked at 0, we will
872 * continue to hold things waiting for rwnd to raise
873 */
874 if (sctp_threshold_management(inp, stcb, NULL,
875 stcb->asoc.max_send_times)) {
876 /* Association was destroyed */
877 return (1);
878 }
879 }
880 if (stcb->asoc.sctp_cmt_on_off > 0) {
881 if (net->pf_threshold < net->failure_threshold) {
882 alt = sctp_find_alternate_net(stcb, net, 2);
883 } else {
884 /*
885 * CMT: Using RTX_SSTHRESH policy for CMT. If CMT is
886 * being used, then pick dest with largest ssthresh
887 * for any retransmission.
888 */
889 alt = sctp_find_alternate_net(stcb, net, 1);
890 /*
891 * CUCv2: If a different dest is picked for the
892 * retransmission, then new (rtx-)pseudo_cumack
893 * needs to be tracked for orig dest. Let CUCv2
894 * track new (rtx-) pseudo-cumack always.
895 */
896 net->find_pseudo_cumack = 1;
897 net->find_rtx_pseudo_cumack = 1;
898 }
899 } else {
900 alt = sctp_find_alternate_net(stcb, net, 0);
901 }
902
903 num_mk = 0;
904 num_abandoned = 0;
905 (void)sctp_mark_all_for_resend(stcb, net, alt, win_probe,
906 &num_mk, &num_abandoned);
907 /* FR Loss recovery just ended with the T3. */
908 stcb->asoc.fast_retran_loss_recovery = 0;
909
910 /* CMT FR loss recovery ended with the T3 */
911 net->fast_retran_loss_recovery = 0;
912 if ((stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) &&
913 (net->flight_size == 0)) {
914 (*stcb->asoc.cc_functions.sctp_cwnd_new_transmission_begins) (stcb, net);
915 }
916
917 /*
918 * setup the sat loss recovery that prevents satellite cwnd advance.
919 */
920 stcb->asoc.sat_t3_loss_recovery = 1;
921 stcb->asoc.sat_t3_recovery_tsn = stcb->asoc.sending_seq;
922
923 /* Backoff the timer and cwnd */
924 sctp_backoff_on_timeout(stcb, net, win_probe, num_mk, num_abandoned);
925 if ((!(net->dest_state & SCTP_ADDR_REACHABLE)) ||
926 (net->dest_state & SCTP_ADDR_PF)) {
927 /* Move all pending over too */
928 sctp_move_chunks_from_net(stcb, net);
929
930 /*
931 * Get the address that failed, to force a new src address
932 * selecton and a route allocation.
933 */
934 if (net->ro._s_addr) {
935 sctp_free_ifa(net->ro._s_addr);
936 net->ro._s_addr = NULL;
937 }
938 net->src_addr_selected = 0;
939
940 /* Force a route allocation too */
941 if (net->ro.ro_rt) {
942 RTFREE(net->ro.ro_rt);
943 net->ro.ro_rt = NULL;
944 }
945
946 /* Was it our primary? */
947 if ((stcb->asoc.primary_destination == net) && (alt != net)) {
948 /*
949 * Yes, note it as such and find an alternate note:
950 * this means HB code must use this to resent the
951 * primary if it goes active AND if someone does a
952 * change-primary then this flag must be cleared
953 * from any net structures.
954 */
955 if (stcb->asoc.alternate) {
956 sctp_free_remote_addr(stcb->asoc.alternate);
957 }
958 stcb->asoc.alternate = alt;
959 atomic_add_int(&stcb->asoc.alternate->ref_count, 1);
960 }
961 }
962 /*
963 * Special case for cookie-echo'ed case, we don't do output but must
964 * await the COOKIE-ACK before retransmission
965 */
966 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
967 /*
968 * Here we just reset the timer and start again since we
969 * have not established the asoc
970 */
971 sctp_timer_start(SCTP_TIMER_TYPE_SEND, inp, stcb, net);
972 return (0);
973 }
974 if (stcb->asoc.prsctp_supported) {
975 struct sctp_tmit_chunk *lchk;
976
977 lchk = sctp_try_advance_peer_ack_point(stcb, &stcb->asoc);
978 /* C3. See if we need to send a Fwd-TSN */
979 if (SCTP_TSN_GT(stcb->asoc.advanced_peer_ack_point, stcb->asoc.last_acked_seq)) {
980 send_forward_tsn(stcb, &stcb->asoc);
981 for (; lchk != NULL; lchk = TAILQ_NEXT(lchk, sctp_next)) {
982 if (lchk->whoTo != NULL) {
983 break;
984 }
985 }
986 if (lchk != NULL) {
987 /* Assure a timer is up */
988 sctp_timer_start(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, stcb, lchk->whoTo);
989 }
990 }
991 }
992 if (SCTP_BASE_SYSCTL(sctp_logging_level) & SCTP_CWND_MONITOR_ENABLE) {
993 sctp_log_cwnd(stcb, net, net->cwnd, SCTP_CWND_LOG_FROM_RTX);
994 }
995 return (0);
996 }
997
998 int
999 sctp_t1init_timer(struct sctp_inpcb *inp,
1000 struct sctp_tcb *stcb,
1001 struct sctp_nets *net)
1002 {
1003 /* bump the thresholds */
1004 if (stcb->asoc.delayed_connection) {
1005 /*
1006 * special hook for delayed connection. The library did NOT
1007 * complete the rest of its sends.
1008 */
1009 stcb->asoc.delayed_connection = 0;
1010 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1011 return (0);
1012 }
1013 if (SCTP_GET_STATE(stcb) != SCTP_STATE_COOKIE_WAIT) {
1014 return (0);
1015 }
1016 if (sctp_threshold_management(inp, stcb, net,
1017 stcb->asoc.max_init_times)) {
1018 /* Association was destroyed */
1019 return (1);
1020 }
1021 stcb->asoc.dropped_special_cnt = 0;
1022 sctp_backoff_on_timeout(stcb, stcb->asoc.primary_destination, 1, 0, 0);
1023 if (stcb->asoc.initial_init_rto_max < net->RTO) {
1024 net->RTO = stcb->asoc.initial_init_rto_max;
1025 }
1026 if (stcb->asoc.numnets > 1) {
1027 /* If we have more than one addr use it */
1028 struct sctp_nets *alt;
1029
1030 alt = sctp_find_alternate_net(stcb, stcb->asoc.primary_destination, 0);
1031 if (alt != stcb->asoc.primary_destination) {
1032 sctp_move_chunks_from_net(stcb, stcb->asoc.primary_destination);
1033 stcb->asoc.primary_destination = alt;
1034 }
1035 }
1036 /* Send out a new init */
1037 sctp_send_initiate(inp, stcb, SCTP_SO_NOT_LOCKED);
1038 return (0);
1039 }
1040
1041 /*
1042 * For cookie and asconf we actually need to find and mark for resend, then
1043 * increment the resend counter (after all the threshold management stuff of
1044 * course).
1045 */
1046 int
1047 sctp_cookie_timer(struct sctp_inpcb *inp,
1048 struct sctp_tcb *stcb,
1049 struct sctp_nets *net SCTP_UNUSED)
1050 {
1051 struct sctp_nets *alt;
1052 struct sctp_tmit_chunk *cookie;
1053
1054 /* first before all else we must find the cookie */
1055 TAILQ_FOREACH(cookie, &stcb->asoc.control_send_queue, sctp_next) {
1056 if (cookie->rec.chunk_id.id == SCTP_COOKIE_ECHO) {
1057 break;
1058 }
1059 }
1060 if (cookie == NULL) {
1061 if (SCTP_GET_STATE(stcb) == SCTP_STATE_COOKIE_ECHOED) {
1062 /* FOOBAR! */
1063 struct mbuf *op_err;
1064
1065 op_err = sctp_generate_cause(SCTP_BASE_SYSCTL(sctp_diag_info_code),
1066 "Cookie timer expired, but no cookie");
1067 inp->last_abort_code = SCTP_FROM_SCTP_TIMER + SCTP_LOC_3;
1068 sctp_abort_an_association(inp, stcb, op_err, SCTP_SO_NOT_LOCKED);
1069 } else {
1070 #ifdef INVARIANTS
1071 panic("Cookie timer expires in wrong state?");
1072 #else
1073 SCTP_PRINTF("Strange in state %d not cookie-echoed yet c-e timer expires?\n", SCTP_GET_STATE(stcb));
1074 return (0);
1075 #endif
1076 }
1077 return (0);
1078 }
1079 /* Ok we found the cookie, threshold management next */
1080 if (sctp_threshold_management(inp, stcb, cookie->whoTo,
1081 stcb->asoc.max_init_times)) {
1082 /* Assoc is over */
1083 return (1);
1084 }
1085 /*
1086 * Cleared threshold management, now lets backoff the address and
1087 * select an alternate
1088 */
1089 stcb->asoc.dropped_special_cnt = 0;
1090 sctp_backoff_on_timeout(stcb, cookie->whoTo, 1, 0, 0);
1091 alt = sctp_find_alternate_net(stcb, cookie->whoTo, 0);
1092 if (alt != cookie->whoTo) {
1093 sctp_free_remote_addr(cookie->whoTo);
1094 cookie->whoTo = alt;
1095 atomic_add_int(&alt->ref_count, 1);
1096 }
1097 /* Now mark the retran info */
1098 if (cookie->sent != SCTP_DATAGRAM_RESEND) {
1099 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1100 }
1101 cookie->sent = SCTP_DATAGRAM_RESEND;
1102 cookie->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1103 /*
1104 * Now call the output routine to kick out the cookie again, Note we
1105 * don't mark any chunks for retran so that FR will need to kick in
1106 * to move these (or a send timer).
1107 */
1108 return (0);
1109 }
1110
1111 int
1112 sctp_strreset_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1113 {
1114 struct sctp_nets *alt, *net;
1115 struct sctp_tmit_chunk *strrst = NULL, *chk = NULL;
1116
1117 if (stcb->asoc.stream_reset_outstanding == 0) {
1118 return (0);
1119 }
1120 /* find the existing STRRESET, we use the seq number we sent out on */
1121 (void)sctp_find_stream_reset(stcb, stcb->asoc.str_reset_seq_out, &strrst);
1122 if (strrst == NULL) {
1123 return (0);
1124 }
1125 net = strrst->whoTo;
1126 /* do threshold management */
1127 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1128 /* Assoc is over */
1129 return (1);
1130 }
1131 /*
1132 * Cleared threshold management, now lets backoff the address and
1133 * select an alternate
1134 */
1135 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1136 alt = sctp_find_alternate_net(stcb, net, 0);
1137 strrst->whoTo = alt;
1138 atomic_add_int(&alt->ref_count, 1);
1139
1140 /* See if a ECN Echo is also stranded */
1141 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1142 if ((chk->whoTo == net) &&
1143 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1144 sctp_free_remote_addr(chk->whoTo);
1145 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1146 chk->sent = SCTP_DATAGRAM_RESEND;
1147 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1148 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1149 }
1150 chk->whoTo = alt;
1151 atomic_add_int(&alt->ref_count, 1);
1152 }
1153 }
1154 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1155 /*
1156 * If the address went un-reachable, we need to move to
1157 * alternates for ALL chk's in queue
1158 */
1159 sctp_move_chunks_from_net(stcb, net);
1160 }
1161 sctp_free_remote_addr(net);
1162
1163 /* mark the retran info */
1164 if (strrst->sent != SCTP_DATAGRAM_RESEND)
1165 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1166 strrst->sent = SCTP_DATAGRAM_RESEND;
1167 strrst->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1168
1169 /* restart the timer */
1170 sctp_timer_start(SCTP_TIMER_TYPE_STRRESET, inp, stcb, alt);
1171 return (0);
1172 }
1173
1174 int
1175 sctp_asconf_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1176 struct sctp_nets *net)
1177 {
1178 struct sctp_nets *alt;
1179 struct sctp_tmit_chunk *asconf, *chk;
1180
1181 /* is this a first send, or a retransmission? */
1182 if (TAILQ_EMPTY(&stcb->asoc.asconf_send_queue)) {
1183 /* compose a new ASCONF chunk and send it */
1184 sctp_send_asconf(stcb, net, SCTP_ADDR_NOT_LOCKED);
1185 } else {
1186 /*
1187 * Retransmission of the existing ASCONF is needed
1188 */
1189
1190 /* find the existing ASCONF */
1191 asconf = TAILQ_FIRST(&stcb->asoc.asconf_send_queue);
1192 if (asconf == NULL) {
1193 return (0);
1194 }
1195 net = asconf->whoTo;
1196 /* do threshold management */
1197 if (sctp_threshold_management(inp, stcb, net,
1198 stcb->asoc.max_send_times)) {
1199 /* Assoc is over */
1200 return (1);
1201 }
1202 if (asconf->snd_count > stcb->asoc.max_send_times) {
1203 /*
1204 * Something is rotten: our peer is not responding
1205 * to ASCONFs but apparently is to other chunks.
1206 * i.e. it is not properly handling the chunk type
1207 * upper bits. Mark this peer as ASCONF incapable
1208 * and cleanup.
1209 */
1210 SCTPDBG(SCTP_DEBUG_TIMER1, "asconf_timer: Peer has not responded to our repeated ASCONFs\n");
1211 sctp_asconf_cleanup(stcb);
1212 return (0);
1213 }
1214 /*
1215 * cleared threshold management, so now backoff the net and
1216 * select an alternate
1217 */
1218 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1219 alt = sctp_find_alternate_net(stcb, net, 0);
1220 if (asconf->whoTo != alt) {
1221 asconf->whoTo = alt;
1222 atomic_add_int(&alt->ref_count, 1);
1223 }
1224
1225 /* See if an ECN Echo is also stranded */
1226 TAILQ_FOREACH(chk, &stcb->asoc.control_send_queue, sctp_next) {
1227 if ((chk->whoTo == net) &&
1228 (chk->rec.chunk_id.id == SCTP_ECN_ECHO)) {
1229 sctp_free_remote_addr(chk->whoTo);
1230 chk->whoTo = alt;
1231 if (chk->sent != SCTP_DATAGRAM_RESEND) {
1232 chk->sent = SCTP_DATAGRAM_RESEND;
1233 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1234 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1235 }
1236 atomic_add_int(&alt->ref_count, 1);
1237 }
1238 }
1239 TAILQ_FOREACH(chk, &stcb->asoc.asconf_send_queue, sctp_next) {
1240 if (chk->whoTo != alt) {
1241 sctp_free_remote_addr(chk->whoTo);
1242 chk->whoTo = alt;
1243 atomic_add_int(&alt->ref_count, 1);
1244 }
1245 if (asconf->sent != SCTP_DATAGRAM_RESEND && chk->sent != SCTP_DATAGRAM_UNSENT)
1246 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1247 chk->sent = SCTP_DATAGRAM_RESEND;
1248 chk->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1249 }
1250 if (!(net->dest_state & SCTP_ADDR_REACHABLE)) {
1251 /*
1252 * If the address went un-reachable, we need to move
1253 * to the alternate for ALL chunks in queue
1254 */
1255 sctp_move_chunks_from_net(stcb, net);
1256 }
1257 sctp_free_remote_addr(net);
1258
1259 /* mark the retran info */
1260 if (asconf->sent != SCTP_DATAGRAM_RESEND)
1261 sctp_ucount_incr(stcb->asoc.sent_queue_retran_cnt);
1262 asconf->sent = SCTP_DATAGRAM_RESEND;
1263 asconf->flags |= CHUNK_FLAGS_FRAGMENT_OK;
1264
1265 /* send another ASCONF if any and we can do */
1266 sctp_send_asconf(stcb, alt, SCTP_ADDR_NOT_LOCKED);
1267 }
1268 return (0);
1269 }
1270
1271 /* Mobility adaptation */
1272 void
1273 sctp_delete_prim_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1274 {
1275 if (stcb->asoc.deleted_primary == NULL) {
1276 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: deleted_primary is not stored...\n");
1277 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1278 return;
1279 }
1280 SCTPDBG(SCTP_DEBUG_ASCONF1, "delete_prim_timer: finished to keep deleted primary ");
1281 SCTPDBG_ADDR(SCTP_DEBUG_ASCONF1, &stcb->asoc.deleted_primary->ro._l_addr.sa);
1282 sctp_free_remote_addr(stcb->asoc.deleted_primary);
1283 stcb->asoc.deleted_primary = NULL;
1284 sctp_mobility_feature_off(inp, SCTP_MOBILITY_PRIM_DELETED);
1285 return;
1286 }
1287
1288 /*
1289 * For the shutdown and shutdown-ack, we do not keep one around on the
1290 * control queue. This means we must generate a new one and call the general
1291 * chunk output routine, AFTER having done threshold management.
1292 * It is assumed that net is non-NULL.
1293 */
1294 int
1295 sctp_shutdown_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1296 struct sctp_nets *net)
1297 {
1298 struct sctp_nets *alt;
1299
1300 /* first threshold management */
1301 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1302 /* Assoc is over */
1303 return (1);
1304 }
1305 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1306 /* second select an alternative */
1307 alt = sctp_find_alternate_net(stcb, net, 0);
1308
1309 /* third generate a shutdown into the queue for out net */
1310 sctp_send_shutdown(stcb, alt);
1311
1312 /* fourth restart timer */
1313 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, inp, stcb, alt);
1314 return (0);
1315 }
1316
1317 int
1318 sctp_shutdownack_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1319 struct sctp_nets *net)
1320 {
1321 struct sctp_nets *alt;
1322
1323 /* first threshold management */
1324 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1325 /* Assoc is over */
1326 return (1);
1327 }
1328 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1329 /* second select an alternative */
1330 alt = sctp_find_alternate_net(stcb, net, 0);
1331
1332 /* third generate a shutdown into the queue for out net */
1333 sctp_send_shutdown_ack(stcb, alt);
1334
1335 /* fourth restart timer */
1336 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, inp, stcb, alt);
1337 return (0);
1338 }
1339
1340 static void
1341 sctp_audit_stream_queues_for_size(struct sctp_inpcb *inp,
1342 struct sctp_tcb *stcb)
1343 {
1344 struct sctp_stream_queue_pending *sp;
1345 unsigned int i, chks_in_queue = 0;
1346 int being_filled = 0;
1347
1348 /*
1349 * This function is ONLY called when the send/sent queues are empty.
1350 */
1351 if ((stcb == NULL) || (inp == NULL))
1352 return;
1353
1354 if (stcb->asoc.sent_queue_retran_cnt) {
1355 SCTP_PRINTF("Hmm, sent_queue_retran_cnt is non-zero %d\n",
1356 stcb->asoc.sent_queue_retran_cnt);
1357 stcb->asoc.sent_queue_retran_cnt = 0;
1358 }
1359 if (stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1360 /* No stream scheduler information, initialize scheduler */
1361 stcb->asoc.ss_functions.sctp_ss_init(stcb, &stcb->asoc, 0);
1362 if (!stcb->asoc.ss_functions.sctp_ss_is_empty(stcb, &stcb->asoc)) {
1363 /* yep, we lost a stream or two */
1364 SCTP_PRINTF("Found additional streams NOT managed by scheduler, corrected\n");
1365 } else {
1366 /* no streams lost */
1367 stcb->asoc.total_output_queue_size = 0;
1368 }
1369 }
1370 /* Check to see if some data queued, if so report it */
1371 for (i = 0; i < stcb->asoc.streamoutcnt; i++) {
1372 if (!TAILQ_EMPTY(&stcb->asoc.strmout[i].outqueue)) {
1373 TAILQ_FOREACH(sp, &stcb->asoc.strmout[i].outqueue, next) {
1374 if (sp->msg_is_complete)
1375 being_filled++;
1376 chks_in_queue++;
1377 }
1378 }
1379 }
1380 if (chks_in_queue != stcb->asoc.stream_queue_cnt) {
1381 SCTP_PRINTF("Hmm, stream queue cnt at %d I counted %d in stream out wheel\n",
1382 stcb->asoc.stream_queue_cnt, chks_in_queue);
1383 }
1384 if (chks_in_queue) {
1385 /* call the output queue function */
1386 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_T3, SCTP_SO_NOT_LOCKED);
1387 if ((TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1388 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1389 /*
1390 * Probably should go in and make it go back through
1391 * and add fragments allowed
1392 */
1393 if (being_filled == 0) {
1394 SCTP_PRINTF("Still nothing moved %d chunks are stuck\n",
1395 chks_in_queue);
1396 }
1397 }
1398 } else {
1399 SCTP_PRINTF("Found no chunks on any queue tot:%lu\n",
1400 (u_long)stcb->asoc.total_output_queue_size);
1401 stcb->asoc.total_output_queue_size = 0;
1402 }
1403 }
1404
1405 int
1406 sctp_heartbeat_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb,
1407 struct sctp_nets *net)
1408 {
1409 uint8_t net_was_pf;
1410
1411 if (net->dest_state & SCTP_ADDR_PF) {
1412 net_was_pf = 1;
1413 } else {
1414 net_was_pf = 0;
1415 }
1416 if (net->hb_responded == 0) {
1417 if (net->ro._s_addr) {
1418 /*
1419 * Invalidate the src address if we did not get a
1420 * response last time.
1421 */
1422 sctp_free_ifa(net->ro._s_addr);
1423 net->ro._s_addr = NULL;
1424 net->src_addr_selected = 0;
1425 }
1426 sctp_backoff_on_timeout(stcb, net, 1, 0, 0);
1427 if (sctp_threshold_management(inp, stcb, net, stcb->asoc.max_send_times)) {
1428 /* Assoc is over */
1429 return (1);
1430 }
1431 }
1432 /* Zero PBA, if it needs it */
1433 if (net->partial_bytes_acked) {
1434 net->partial_bytes_acked = 0;
1435 }
1436 if ((stcb->asoc.total_output_queue_size > 0) &&
1437 (TAILQ_EMPTY(&stcb->asoc.send_queue)) &&
1438 (TAILQ_EMPTY(&stcb->asoc.sent_queue))) {
1439 sctp_audit_stream_queues_for_size(inp, stcb);
1440 }
1441 if (!(net->dest_state & SCTP_ADDR_NOHB) &&
1442 !((net_was_pf == 0) && (net->dest_state & SCTP_ADDR_PF))) {
1443 /*
1444 * when move to PF during threshold mangement, a HB has been
1445 * queued in that routine
1446 */
1447 uint32_t ms_gone_by;
1448
1449 if ((net->last_sent_time.tv_sec > 0) ||
1450 (net->last_sent_time.tv_usec > 0)) {
1451 struct timeval diff;
1452
1453 SCTP_GETTIME_TIMEVAL(&diff);
1454 timevalsub(&diff, &net->last_sent_time);
1455 ms_gone_by = (uint32_t)(diff.tv_sec * 1000) +
1456 (uint32_t)(diff.tv_usec / 1000);
1457 } else {
1458 ms_gone_by = 0xffffffff;
1459 }
1460 if ((ms_gone_by >= net->heart_beat_delay) ||
1461 (net->dest_state & SCTP_ADDR_PF)) {
1462 sctp_send_hb(stcb, net, SCTP_SO_NOT_LOCKED);
1463 }
1464 }
1465 return (0);
1466 }
1467
1468 void
1469 sctp_pathmtu_timer(struct sctp_inpcb *inp,
1470 struct sctp_tcb *stcb,
1471 struct sctp_nets *net)
1472 {
1473 uint32_t next_mtu, mtu;
1474
1475 next_mtu = sctp_get_next_mtu(net->mtu);
1476
1477 if ((next_mtu > net->mtu) && (net->port == 0)) {
1478 if ((net->src_addr_selected == 0) ||
1479 (net->ro._s_addr == NULL) ||
1480 (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1481 if ((net->ro._s_addr != NULL) && (net->ro._s_addr->localifa_flags & SCTP_BEING_DELETED)) {
1482 sctp_free_ifa(net->ro._s_addr);
1483 net->ro._s_addr = NULL;
1484 net->src_addr_selected = 0;
1485 } else if (net->ro._s_addr == NULL) {
1486 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1487 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1488 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1489
1490 /* KAME hack: embed scopeid */
1491 (void)sa6_embedscope(sin6, MODULE_GLOBAL(ip6_use_defzone));
1492 }
1493 #endif
1494
1495 net->ro._s_addr = sctp_source_address_selection(inp,
1496 stcb,
1497 (sctp_route_t *)&net->ro,
1498 net, 0, stcb->asoc.vrf_id);
1499 #if defined(INET6) && defined(SCTP_EMBEDDED_V6_SCOPE)
1500 if (net->ro._l_addr.sa.sa_family == AF_INET6) {
1501 struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)&net->ro._l_addr;
1502
1503 (void)sa6_recoverscope(sin6);
1504 }
1505 #endif /* INET6 */
1506 }
1507 if (net->ro._s_addr)
1508 net->src_addr_selected = 1;
1509 }
1510 if (net->ro._s_addr) {
1511 mtu = SCTP_GATHER_MTU_FROM_ROUTE(net->ro._s_addr, &net->ro._s_addr.sa, net->ro.ro_rt);
1512 #if defined(INET) || defined(INET6)
1513 if (net->port) {
1514 mtu -= sizeof(struct udphdr);
1515 }
1516 #endif
1517 if (mtu > next_mtu) {
1518 net->mtu = next_mtu;
1519 } else {
1520 net->mtu = mtu;
1521 }
1522 }
1523 }
1524 /* restart the timer */
1525 sctp_timer_start(SCTP_TIMER_TYPE_PATHMTURAISE, inp, stcb, net);
1526 }
1527
1528 void
1529 sctp_autoclose_timer(struct sctp_inpcb *inp, struct sctp_tcb *stcb)
1530 {
1531 struct timeval tn, *tim_touse;
1532 struct sctp_association *asoc;
1533 uint32_t ticks_gone_by;
1534
1535 (void)SCTP_GETTIME_TIMEVAL(&tn);
1536 if (stcb->asoc.sctp_autoclose_ticks > 0 &&
1537 sctp_is_feature_on(inp, SCTP_PCB_FLAGS_AUTOCLOSE)) {
1538 /* Auto close is on */
1539 asoc = &stcb->asoc;
1540 /* pick the time to use */
1541 if (asoc->time_last_rcvd.tv_sec >
1542 asoc->time_last_sent.tv_sec) {
1543 tim_touse = &asoc->time_last_rcvd;
1544 } else {
1545 tim_touse = &asoc->time_last_sent;
1546 }
1547 /* Now has long enough transpired to autoclose? */
1548 ticks_gone_by = sctp_secs_to_ticks((uint32_t)(tn.tv_sec - tim_touse->tv_sec));
1549 if (ticks_gone_by >= asoc->sctp_autoclose_ticks) {
1550 /*
1551 * autoclose time has hit, call the output routine,
1552 * which should do nothing just to be SURE we don't
1553 * have hanging data. We can then safely check the
1554 * queues and know that we are clear to send
1555 * shutdown
1556 */
1557 sctp_chunk_output(inp, stcb, SCTP_OUTPUT_FROM_AUTOCLOSE_TMR, SCTP_SO_NOT_LOCKED);
1558 /* Are we clean? */
1559 if (TAILQ_EMPTY(&asoc->send_queue) &&
1560 TAILQ_EMPTY(&asoc->sent_queue)) {
1561 /*
1562 * there is nothing queued to send, so I'm
1563 * done...
1564 */
1565 if (SCTP_GET_STATE(stcb) != SCTP_STATE_SHUTDOWN_SENT) {
1566 /* only send SHUTDOWN 1st time thru */
1567 struct sctp_nets *net;
1568
1569 if ((SCTP_GET_STATE(stcb) == SCTP_STATE_OPEN) ||
1570 (SCTP_GET_STATE(stcb) == SCTP_STATE_SHUTDOWN_RECEIVED)) {
1571 SCTP_STAT_DECR_GAUGE32(sctps_currestab);
1572 }
1573 SCTP_SET_STATE(stcb, SCTP_STATE_SHUTDOWN_SENT);
1574 sctp_stop_timers_for_shutdown(stcb);
1575 if (stcb->asoc.alternate) {
1576 net = stcb->asoc.alternate;
1577 } else {
1578 net = stcb->asoc.primary_destination;
1579 }
1580 sctp_send_shutdown(stcb, net);
1581 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN,
1582 stcb->sctp_ep, stcb, net);
1583 sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD,
1584 stcb->sctp_ep, stcb, NULL);
1585 }
1586 }
1587 } else {
1588 /*
1589 * No auto close at this time, reset t-o to check
1590 * later
1591 */
1592 uint32_t tmp;
1593
1594 /* fool the timer startup to use the time left */
1595 tmp = asoc->sctp_autoclose_ticks;
1596 asoc->sctp_autoclose_ticks -= ticks_gone_by;
1597 sctp_timer_start(SCTP_TIMER_TYPE_AUTOCLOSE, inp, stcb, NULL);
1598 /* restore the real tick value */
1599 asoc->sctp_autoclose_ticks = tmp;
1600 }
1601 }
1602 }
Cache object: b97de984c381941b574ce76728f76557
|