sctp_indata.c revision 1.2.2.3
1 1.2.2.3 skrll /* $NetBSD: sctp_indata.c,v 1.2.2.3 2016/03/19 11:30:33 skrll Exp $ */ 2 1.2.2.2 skrll /* $KAME: sctp_indata.c,v 1.36 2005/03/06 16:04:17 itojun Exp $ */ 3 1.2.2.2 skrll 4 1.2.2.2 skrll /* 5 1.2.2.2 skrll * Copyright (C) 2002, 2003, 2004 Cisco Systems Inc, 6 1.2.2.2 skrll * All rights reserved. 7 1.2.2.2 skrll * 8 1.2.2.2 skrll * Redistribution and use in source and binary forms, with or without 9 1.2.2.2 skrll * modification, are permitted provided that the following conditions 10 1.2.2.2 skrll * are met: 11 1.2.2.2 skrll * 1. Redistributions of source code must retain the above copyright 12 1.2.2.2 skrll * notice, this list of conditions and the following disclaimer. 13 1.2.2.2 skrll * 2. Redistributions in binary form must reproduce the above copyright 14 1.2.2.2 skrll * notice, this list of conditions and the following disclaimer in the 15 1.2.2.2 skrll * documentation and/or other materials provided with the distribution. 16 1.2.2.2 skrll * 3. Neither the name of the project nor the names of its contributors 17 1.2.2.2 skrll * may be used to endorse or promote products derived from this software 18 1.2.2.2 skrll * without specific prior written permission. 19 1.2.2.2 skrll * 20 1.2.2.2 skrll * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 21 1.2.2.2 skrll * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 1.2.2.2 skrll * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 1.2.2.2 skrll * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 24 1.2.2.2 skrll * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 1.2.2.2 skrll * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 1.2.2.2 skrll * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 1.2.2.2 skrll * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 1.2.2.2 skrll * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 1.2.2.2 skrll * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 1.2.2.2 skrll * SUCH DAMAGE. 31 1.2.2.2 skrll */ 32 1.2.2.2 skrll 33 1.2.2.2 skrll #include <sys/cdefs.h> 34 1.2.2.3 skrll __KERNEL_RCSID(0, "$NetBSD: sctp_indata.c,v 1.2.2.3 2016/03/19 11:30:33 skrll Exp $"); 35 1.2.2.2 skrll 36 1.2.2.2 skrll #ifdef _KERNEL_OPT 37 1.2.2.2 skrll #include "opt_ipsec.h" 38 1.2.2.2 skrll #include "opt_inet.h" 39 1.2.2.2 skrll #include "opt_sctp.h" 40 1.2.2.2 skrll #endif /* _KERNEL_OPT */ 41 1.2.2.2 skrll 42 1.2.2.2 skrll #include <sys/param.h> 43 1.2.2.2 skrll #include <sys/systm.h> 44 1.2.2.2 skrll #include <sys/mbuf.h> 45 1.2.2.2 skrll #include <sys/malloc.h> 46 1.2.2.2 skrll #include <sys/socket.h> 47 1.2.2.2 skrll #include <sys/socketvar.h> 48 1.2.2.2 skrll #include <sys/sysctl.h> 49 1.2.2.2 skrll 50 1.2.2.2 skrll #include <net/if.h> 51 1.2.2.2 skrll #include <net/route.h> 52 1.2.2.2 skrll 53 1.2.2.2 skrll 54 1.2.2.2 skrll #if defined(__FreeBSD__) && __FreeBSD_version >= 500000 55 1.2.2.2 skrll #include <sys/limits.h> 56 1.2.2.2 skrll #else 57 1.2.2.2 skrll #include <machine/limits.h> 58 1.2.2.2 skrll #endif 59 1.2.2.2 skrll #include <machine/cpu.h> 60 1.2.2.2 skrll 61 1.2.2.2 skrll #include <netinet/in.h> 62 1.2.2.2 skrll #include <netinet/in_systm.h> 63 1.2.2.2 skrll #include <netinet/ip.h> 64 1.2.2.2 skrll #ifdef INET6 65 1.2.2.2 skrll #include <netinet/ip6.h> 66 1.2.2.2 skrll #endif /* INET6 */ 67 1.2.2.2 skrll #include <netinet/in_pcb.h> 68 1.2.2.2 skrll #include <netinet/in_var.h> 69 1.2.2.2 skrll #include <netinet/ip_var.h> 70 1.2.2.2 skrll #ifdef INET6 71 1.2.2.2 skrll #include <netinet6/ip6_var.h> 72 1.2.2.2 skrll #endif /* INET6 */ 73 1.2.2.2 skrll #include <netinet/ip_icmp.h> 74 1.2.2.2 skrll #include <netinet/icmp_var.h> 75 1.2.2.2 skrll #include <netinet/sctp_var.h> 76 1.2.2.2 skrll #include <netinet/sctp_pcb.h> 77 1.2.2.2 skrll #include <netinet/sctp_header.h> 78 1.2.2.2 skrll #include <netinet/sctputil.h> 79 1.2.2.2 skrll #include <netinet/sctp_output.h> 80 1.2.2.2 skrll #include <netinet/sctp_input.h> 81 1.2.2.2 skrll #include <netinet/sctp_hashdriver.h> 82 1.2.2.2 skrll #include <netinet/sctp_indata.h> 83 1.2.2.2 skrll #include <netinet/sctp_uio.h> 84 1.2.2.2 skrll #include <netinet/sctp_timer.h> 85 1.2.2.2 skrll #ifdef IPSEC 86 1.2.2.2 skrll #include <netinet6/ipsec.h> 87 1.2.2.2 skrll #include <netkey/key.h> 88 1.2.2.2 skrll #endif /*IPSEC*/ 89 1.2.2.2 skrll 90 1.2.2.2 skrll #include <net/net_osdep.h> 91 1.2.2.2 skrll 92 1.2.2.2 skrll #ifdef SCTP_DEBUG 93 1.2.2.2 skrll extern u_int32_t sctp_debug_on; 94 1.2.2.2 skrll #endif 95 1.2.2.2 skrll 96 1.2.2.2 skrll /* 97 1.2.2.2 skrll * NOTES: On the outbound side of things I need to check the sack timer to 98 1.2.2.2 skrll * see if I should generate a sack into the chunk queue (if I have data to 99 1.2.2.2 skrll * send that is and will be sending it .. for bundling. 100 1.2.2.2 skrll * 101 1.2.2.2 skrll * The callback in sctp_usrreq.c will get called when the socket is read 102 1.2.2.2 skrll * from. This will cause sctp_service_queues() to get called on the top 103 1.2.2.2 skrll * entry in the list. 104 1.2.2.2 skrll */ 105 1.2.2.2 skrll 106 1.2.2.2 skrll extern int sctp_strict_sacks; 107 1.2.2.2 skrll 108 1.2.2.2 skrll void 109 1.2.2.2 skrll sctp_set_rwnd(struct sctp_tcb *stcb, struct sctp_association *asoc) 110 1.2.2.2 skrll { 111 1.2.2.2 skrll u_int32_t calc, calc_w_oh; 112 1.2.2.2 skrll 113 1.2.2.2 skrll #ifdef SCTP_DEBUG 114 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA4) { 115 1.2.2.2 skrll printf("cc:%lu hiwat:%lu lowat:%lu mbcnt:%lu mbmax:%lu\n", 116 1.2.2.2 skrll (u_long)stcb->sctp_socket->so_rcv.sb_cc, 117 1.2.2.2 skrll (u_long)stcb->sctp_socket->so_rcv.sb_hiwat, 118 1.2.2.2 skrll (u_long)stcb->sctp_socket->so_rcv.sb_lowat, 119 1.2.2.2 skrll (u_long)stcb->sctp_socket->so_rcv.sb_mbcnt, 120 1.2.2.2 skrll (u_long)stcb->sctp_socket->so_rcv.sb_mbmax); 121 1.2.2.2 skrll printf("Setting rwnd to: sb:%ld - (del:%d + reasm:%d str:%d)\n", 122 1.2.2.2 skrll sctp_sbspace(&stcb->sctp_socket->so_rcv), 123 1.2.2.2 skrll asoc->size_on_delivery_queue, 124 1.2.2.2 skrll asoc->size_on_reasm_queue, 125 1.2.2.2 skrll asoc->size_on_all_streams); 126 1.2.2.2 skrll } 127 1.2.2.2 skrll #endif 128 1.2.2.2 skrll if (stcb->sctp_socket->so_rcv.sb_cc == 0 && 129 1.2.2.2 skrll asoc->size_on_delivery_queue == 0 && 130 1.2.2.2 skrll asoc->size_on_reasm_queue == 0 && 131 1.2.2.2 skrll asoc->size_on_all_streams == 0) { 132 1.2.2.2 skrll /* Full rwnd granted */ 133 1.2.2.2 skrll asoc->my_rwnd = max(stcb->sctp_socket->so_rcv.sb_hiwat, 134 1.2.2.2 skrll SCTP_MINIMAL_RWND); 135 1.2.2.2 skrll return; 136 1.2.2.2 skrll } 137 1.2.2.2 skrll /* get actual space */ 138 1.2.2.2 skrll calc = (u_int32_t)sctp_sbspace(&stcb->sctp_socket->so_rcv); 139 1.2.2.2 skrll 140 1.2.2.2 skrll /* take out what has NOT been put on socket queue and 141 1.2.2.2 skrll * we yet hold for putting up. 142 1.2.2.2 skrll */ 143 1.2.2.2 skrll calc = sctp_sbspace_sub(calc, (u_int32_t)asoc->size_on_delivery_queue); 144 1.2.2.2 skrll calc = sctp_sbspace_sub(calc, (u_int32_t)asoc->size_on_reasm_queue); 145 1.2.2.2 skrll calc = sctp_sbspace_sub(calc, (u_int32_t)asoc->size_on_all_streams); 146 1.2.2.2 skrll 147 1.2.2.2 skrll /* what is the overhead of all these rwnd's */ 148 1.2.2.2 skrll calc_w_oh = sctp_sbspace_sub(calc, stcb->asoc.my_rwnd_control_len); 149 1.2.2.2 skrll 150 1.2.2.2 skrll asoc->my_rwnd = calc; 151 1.2.2.2 skrll if (calc_w_oh == 0) { 152 1.2.2.2 skrll /* If our overhead is greater than the advertised 153 1.2.2.2 skrll * rwnd, we clamp the rwnd to 1. This lets us 154 1.2.2.2 skrll * still accept inbound segments, but hopefully will 155 1.2.2.2 skrll * shut the sender down when he finally gets the message. 156 1.2.2.2 skrll */ 157 1.2.2.2 skrll asoc->my_rwnd = 1; 158 1.2.2.2 skrll } else { 159 1.2.2.2 skrll /* SWS threshold */ 160 1.2.2.2 skrll if (asoc->my_rwnd && 161 1.2.2.2 skrll (asoc->my_rwnd < stcb->sctp_ep->sctp_ep.sctp_sws_receiver)) { 162 1.2.2.2 skrll /* SWS engaged, tell peer none left */ 163 1.2.2.2 skrll asoc->my_rwnd = 1; 164 1.2.2.2 skrll #ifdef SCTP_DEBUG 165 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA4) { 166 1.2.2.2 skrll printf(" - SWS zeros\n"); 167 1.2.2.2 skrll } 168 1.2.2.2 skrll } else { 169 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA4) { 170 1.2.2.2 skrll printf("\n"); 171 1.2.2.2 skrll } 172 1.2.2.2 skrll #endif 173 1.2.2.2 skrll } 174 1.2.2.2 skrll } 175 1.2.2.2 skrll } 176 1.2.2.2 skrll 177 1.2.2.2 skrll /* 178 1.2.2.2 skrll * Take a chk structure and build it into an mbuf. Hmm should we change things 179 1.2.2.2 skrll * so that instead we store the data side in a chunk? 180 1.2.2.2 skrll */ 181 1.2.2.2 skrll static struct mbuf * 182 1.2.2.2 skrll sctp_build_ctl_nchunk(struct sctp_tcb *stcb, uint32_t tsn, uint32_t ppid, 183 1.2.2.2 skrll uint32_t context, uint16_t stream_no, uint16_t stream_seq, uint8_t flags) 184 1.2.2.2 skrll { 185 1.2.2.2 skrll struct sctp_sndrcvinfo *outinfo; 186 1.2.2.2 skrll struct cmsghdr *cmh; 187 1.2.2.2 skrll struct mbuf *ret; 188 1.2.2.2 skrll 189 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_RECVDATAIOEVNT) == 0) { 190 1.2.2.2 skrll /* user does not want the sndrcv ctl */ 191 1.2.2.2 skrll return (NULL); 192 1.2.2.2 skrll } 193 1.2.2.2 skrll 194 1.2.2.2 skrll MGETHDR(ret, M_DONTWAIT, MT_CONTROL); 195 1.2.2.2 skrll if (ret == NULL) { 196 1.2.2.2 skrll /* No space */ 197 1.2.2.2 skrll return (ret); 198 1.2.2.2 skrll } 199 1.2.2.2 skrll /* We need a CMSG header followed by the struct */ 200 1.2.2.2 skrll cmh = mtod(ret, struct cmsghdr *); 201 1.2.2.2 skrll outinfo = (struct sctp_sndrcvinfo *)CMSG_DATA(cmh); 202 1.2.2.2 skrll cmh->cmsg_level = IPPROTO_SCTP; 203 1.2.2.2 skrll cmh->cmsg_type = SCTP_SNDRCV; 204 1.2.2.2 skrll cmh->cmsg_len = CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 205 1.2.2.2 skrll outinfo->sinfo_stream = stream_no; 206 1.2.2.2 skrll outinfo->sinfo_ssn = stream_seq; 207 1.2.2.2 skrll if (flags & SCTP_DATA_UNORDERED) { 208 1.2.2.2 skrll outinfo->sinfo_flags = MSG_UNORDERED; 209 1.2.2.2 skrll } else { 210 1.2.2.2 skrll outinfo->sinfo_flags = 0; 211 1.2.2.2 skrll } 212 1.2.2.2 skrll outinfo->sinfo_ppid = ppid; 213 1.2.2.2 skrll outinfo->sinfo_context = context; 214 1.2.2.2 skrll outinfo->sinfo_assoc_id = sctp_get_associd(stcb); 215 1.2.2.2 skrll outinfo->sinfo_tsn = tsn; 216 1.2.2.2 skrll outinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn; 217 1.2.2.2 skrll ret->m_len = cmh->cmsg_len; 218 1.2.2.2 skrll ret->m_pkthdr.len = ret->m_len; 219 1.2.2.2 skrll /* 220 1.2.2.2 skrll * We track how many control len's have gone upon the sb 221 1.2.2.2 skrll * and do not count these in the rwnd calculation. 222 1.2.2.2 skrll */ 223 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += 224 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 225 1.2.2.2 skrll 226 1.2.2.2 skrll return (ret); 227 1.2.2.2 skrll } 228 1.2.2.2 skrll 229 1.2.2.2 skrll /* 230 1.2.2.2 skrll * Take a chk structure and build it into an mbuf. Should we change things 231 1.2.2.2 skrll * so that instead we store the data side in a chunk? 232 1.2.2.2 skrll */ 233 1.2.2.2 skrll static 234 1.2.2.2 skrll struct mbuf * 235 1.2.2.2 skrll sctp_build_ctl(struct sctp_tcb *stcb, struct sctp_tmit_chunk *chk) 236 1.2.2.2 skrll { 237 1.2.2.2 skrll struct sctp_sndrcvinfo *outinfo; 238 1.2.2.2 skrll struct cmsghdr *cmh; 239 1.2.2.2 skrll struct mbuf *ret; 240 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_RECVDATAIOEVNT) == 0) { 241 1.2.2.2 skrll /* user does not want the sndrcv ctl */ 242 1.2.2.2 skrll return (NULL); 243 1.2.2.2 skrll } 244 1.2.2.2 skrll MGET(ret, M_DONTWAIT, MT_CONTROL); 245 1.2.2.2 skrll if (ret == NULL) { 246 1.2.2.2 skrll /* No space */ 247 1.2.2.2 skrll return (ret); 248 1.2.2.2 skrll } 249 1.2.2.2 skrll 250 1.2.2.2 skrll /* We need a CMSG header followed by the struct */ 251 1.2.2.2 skrll cmh = mtod(ret, struct cmsghdr *); 252 1.2.2.2 skrll outinfo = (struct sctp_sndrcvinfo *)CMSG_DATA(cmh); 253 1.2.2.2 skrll cmh->cmsg_level = IPPROTO_SCTP; 254 1.2.2.2 skrll cmh->cmsg_type = SCTP_SNDRCV; 255 1.2.2.2 skrll cmh->cmsg_len = CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 256 1.2.2.2 skrll outinfo->sinfo_stream = chk->rec.data.stream_number; 257 1.2.2.2 skrll outinfo->sinfo_ssn = chk->rec.data.stream_seq; 258 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED) { 259 1.2.2.2 skrll outinfo->sinfo_flags = MSG_UNORDERED; 260 1.2.2.2 skrll } else { 261 1.2.2.2 skrll outinfo->sinfo_flags = 0; 262 1.2.2.2 skrll } 263 1.2.2.2 skrll outinfo->sinfo_ppid = chk->rec.data.payloadtype; 264 1.2.2.2 skrll outinfo->sinfo_context = chk->rec.data.context; 265 1.2.2.2 skrll outinfo->sinfo_assoc_id = sctp_get_associd(stcb); 266 1.2.2.2 skrll outinfo->sinfo_tsn = chk->rec.data.TSN_seq; 267 1.2.2.2 skrll outinfo->sinfo_cumtsn = stcb->asoc.cumulative_tsn; 268 1.2.2.2 skrll ret->m_len = cmh->cmsg_len; 269 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += 270 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 271 1.2.2.2 skrll 272 1.2.2.2 skrll return (ret); 273 1.2.2.2 skrll } 274 1.2.2.2 skrll 275 1.2.2.2 skrll int 276 1.2.2.2 skrll sctp_deliver_data(struct sctp_tcb *stcb, struct sctp_association *asoc, 277 1.2.2.2 skrll struct sctp_tmit_chunk *chk, int hold_locks) 278 1.2.2.2 skrll { 279 1.2.2.2 skrll struct mbuf *control, *m; 280 1.2.2.2 skrll int free_it; 281 1.2.2.2 skrll struct sockaddr_in6 sin6; 282 1.2.2.2 skrll const struct sockaddr *to; 283 1.2.2.2 skrll 284 1.2.2.2 skrll #ifdef SCTP_DEBUG 285 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 286 1.2.2.2 skrll printf("I am now in Deliver data! (%p)\n", chk); 287 1.2.2.2 skrll } 288 1.2.2.2 skrll #endif 289 1.2.2.2 skrll /* get a write lock on the inp if not already */ 290 1.2.2.2 skrll if (hold_locks == 0) { 291 1.2.2.2 skrll SCTP_TCB_UNLOCK(stcb); 292 1.2.2.2 skrll SCTP_INP_WLOCK(stcb->sctp_ep); 293 1.2.2.2 skrll SCTP_TCB_LOCK(stcb); 294 1.2.2.2 skrll } 295 1.2.2.2 skrll free_it = 0; 296 1.2.2.2 skrll /* We always add it to the queue */ 297 1.2.2.2 skrll if (stcb && (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) { 298 1.2.2.2 skrll /* socket above is long gone */ 299 1.2.2.2 skrll #ifdef SCTP_DEBUG 300 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 301 1.2.2.2 skrll printf("gone is gone!\n"); 302 1.2.2.2 skrll } 303 1.2.2.2 skrll #endif 304 1.2.2.2 skrll if (chk != NULL) { 305 1.2.2.2 skrll if (chk->data) 306 1.2.2.2 skrll sctp_m_freem(chk->data); 307 1.2.2.2 skrll chk->data = NULL; 308 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 309 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 310 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 311 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 312 1.2.2.2 skrll panic("Chunk count is negative"); 313 1.2.2.2 skrll } 314 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 315 1.2.2.2 skrll } 316 1.2.2.2 skrll TAILQ_FOREACH(chk, &asoc->delivery_queue, sctp_next) { 317 1.2.2.2 skrll asoc->size_on_delivery_queue -= chk->send_size; 318 1.2.2.2 skrll asoc->cnt_on_delivery_queue--; 319 1.2.2.2 skrll /* 320 1.2.2.2 skrll * Lose the data pointer, since its in the socket buffer 321 1.2.2.2 skrll */ 322 1.2.2.2 skrll if (chk->data) 323 1.2.2.2 skrll sctp_m_freem(chk->data); 324 1.2.2.2 skrll chk->data = NULL; 325 1.2.2.2 skrll /* Now free the address and data */ 326 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 327 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 328 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 329 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 330 1.2.2.2 skrll panic("Chunk count is negative"); 331 1.2.2.2 skrll } 332 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 333 1.2.2.2 skrll } 334 1.2.2.2 skrll if (hold_locks == 0) { 335 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 336 1.2.2.2 skrll } 337 1.2.2.2 skrll return (0); 338 1.2.2.2 skrll } 339 1.2.2.2 skrll if (chk != NULL) { 340 1.2.2.2 skrll TAILQ_INSERT_TAIL(&asoc->delivery_queue, chk, sctp_next); 341 1.2.2.2 skrll asoc->size_on_delivery_queue += chk->send_size; 342 1.2.2.2 skrll asoc->cnt_on_delivery_queue++; 343 1.2.2.2 skrll } 344 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 345 1.2.2.2 skrll /* 346 1.2.2.2 skrll * oh oh, fragmented delivery in progress 347 1.2.2.2 skrll * return out of here. 348 1.2.2.2 skrll */ 349 1.2.2.2 skrll #ifdef SCTP_DEBUG 350 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 351 1.2.2.2 skrll printf("Fragmented delivery in progress?\n"); 352 1.2.2.2 skrll } 353 1.2.2.2 skrll #endif 354 1.2.2.2 skrll if (hold_locks == 0) { 355 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 356 1.2.2.2 skrll } 357 1.2.2.2 skrll return (0); 358 1.2.2.2 skrll } 359 1.2.2.2 skrll /* Now grab the first one */ 360 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->delivery_queue); 361 1.2.2.2 skrll if (chk == NULL) { 362 1.2.2.2 skrll /* Nothing in queue */ 363 1.2.2.2 skrll #ifdef SCTP_DEBUG 364 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 365 1.2.2.2 skrll printf("Nothing in queue?\n"); 366 1.2.2.2 skrll } 367 1.2.2.2 skrll #endif 368 1.2.2.2 skrll asoc->size_on_delivery_queue = 0; 369 1.2.2.2 skrll asoc->cnt_on_delivery_queue = 0; 370 1.2.2.2 skrll if (hold_locks == 0) { 371 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 372 1.2.2.2 skrll } 373 1.2.2.2 skrll return (0); 374 1.2.2.2 skrll } 375 1.2.2.2 skrll 376 1.2.2.2 skrll if (stcb->sctp_socket->so_rcv.sb_cc >= stcb->sctp_socket->so_rcv.sb_hiwat) { 377 1.2.2.2 skrll /* Boy, there really is NO room */ 378 1.2.2.2 skrll if (hold_locks == 0) { 379 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 380 1.2.2.2 skrll } 381 1.2.2.2 skrll return (0); 382 1.2.2.2 skrll } 383 1.2.2.2 skrll #ifdef SCTP_DEBUG 384 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 385 1.2.2.2 skrll printf("Now to the delivery with chk(%p)!\n", chk); 386 1.2.2.2 skrll } 387 1.2.2.2 skrll #endif 388 1.2.2.2 skrll /* XXX need to append PKTHDR to the socket buffer first */ 389 1.2.2.2 skrll if ((chk->data->m_flags & M_PKTHDR) == 0) { 390 1.2.2.2 skrll MGETHDR(m, M_DONTWAIT, MT_DATA); 391 1.2.2.2 skrll if (m == NULL) { 392 1.2.2.2 skrll /* no room! */ 393 1.2.2.2 skrll if (hold_locks == 0) { 394 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 395 1.2.2.2 skrll } 396 1.2.2.2 skrll return (0); 397 1.2.2.2 skrll } 398 1.2.2.2 skrll m->m_pkthdr.len = chk->send_size; 399 1.2.2.2 skrll m->m_len = 0; 400 1.2.2.2 skrll m->m_next = chk->data; 401 1.2.2.2 skrll chk->data = m; 402 1.2.2.2 skrll } 403 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) { 404 1.2.2.2 skrll if (chk->data->m_next == NULL) { 405 1.2.2.2 skrll /* hopefully we hit here most of the time */ 406 1.2.2.2 skrll chk->data->m_flags |= M_EOR; 407 1.2.2.2 skrll } else { 408 1.2.2.2 skrll /* Add the flag to the LAST mbuf in the chain */ 409 1.2.2.2 skrll m = chk->data; 410 1.2.2.2 skrll while (m->m_next != NULL) { 411 1.2.2.2 skrll m = m->m_next; 412 1.2.2.2 skrll } 413 1.2.2.2 skrll m->m_flags |= M_EOR; 414 1.2.2.2 skrll } 415 1.2.2.2 skrll } 416 1.2.2.2 skrll 417 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) { 418 1.2.2.2 skrll struct sockaddr_in6 lsa6; 419 1.2.2.2 skrll 420 1.2.2.2 skrll control = sctp_build_ctl(stcb, chk); 421 1.2.2.2 skrll to = rtcache_getdst(&chk->whoTo->ro); 422 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_NEEDS_MAPPED_V4) && 423 1.2.2.2 skrll to->sa_family == AF_INET) { 424 1.2.2.2 skrll const struct sockaddr_in *sin; 425 1.2.2.2 skrll 426 1.2.2.2 skrll sin = (const struct sockaddr_in *)to; 427 1.2.2.3 skrll in6_sin_2_v4mapsin6(sin, &sin6); 428 1.2.2.2 skrll to = (struct sockaddr *)&sin6; 429 1.2.2.2 skrll } 430 1.2.2.2 skrll /* check and strip embedded scope junk */ 431 1.2.2.2 skrll to = (const struct sockaddr *)sctp_recover_scope((const struct sockaddr_in6 *)to, 432 1.2.2.2 skrll &lsa6); 433 1.2.2.2 skrll if (((const struct sockaddr_in *)to)->sin_port == 0) { 434 1.2.2.2 skrll printf("Huh a, port is %d not net:%p %d?\n", 435 1.2.2.2 skrll ((const struct sockaddr_in *)to)->sin_port, 436 1.2.2.2 skrll chk->whoTo, 437 1.2.2.2 skrll (int)(ntohs(stcb->rport))); 438 1.2.2.2 skrll /*((struct sockaddr_in *)to)->sin_port = stcb->rport;*/ 439 1.2.2.2 skrll /* XXX */ 440 1.2.2.2 skrll } 441 1.2.2.2 skrll if (sctp_sbspace(&stcb->sctp_socket->so_rcv) < (long)chk->send_size) { 442 1.2.2.2 skrll /* Gak not enough room */ 443 1.2.2.2 skrll if (control) { 444 1.2.2.2 skrll sctp_m_freem(control); 445 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 446 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 447 1.2.2.2 skrll } 448 1.2.2.2 skrll goto skip; 449 1.2.2.2 skrll } 450 1.2.2.2 skrll if (!sbappendaddr_nocheck(&stcb->sctp_socket->so_rcv, 451 1.2.2.2 skrll to, chk->data, control, stcb->asoc.my_vtag, 452 1.2.2.2 skrll stcb->sctp_ep)) { 453 1.2.2.2 skrll /* Gak not enough room */ 454 1.2.2.2 skrll if (control) { 455 1.2.2.2 skrll sctp_m_freem(control); 456 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 457 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 458 1.2.2.2 skrll } 459 1.2.2.2 skrll } else { 460 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) == 0) { 461 1.2.2.2 skrll if (sctp_add_to_socket_q(stcb->sctp_ep, stcb)) { 462 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += 463 1.2.2.2 skrll sizeof(struct mbuf); 464 1.2.2.2 skrll } 465 1.2.2.2 skrll } else { 466 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += sizeof(struct mbuf); 467 1.2.2.2 skrll } 468 1.2.2.2 skrll free_it = 1; 469 1.2.2.2 skrll } 470 1.2.2.2 skrll } else { 471 1.2.2.2 skrll /* append to a already started message. */ 472 1.2.2.2 skrll if (sctp_sbspace(&stcb->sctp_socket->so_rcv) >= 473 1.2.2.2 skrll (long)chk->send_size) { 474 1.2.2.2 skrll sbappend(&stcb->sctp_socket->so_rcv, chk->data); 475 1.2.2.2 skrll free_it = 1; 476 1.2.2.2 skrll } 477 1.2.2.2 skrll } 478 1.2.2.2 skrll skip: 479 1.2.2.2 skrll if (hold_locks == 0) { 480 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 481 1.2.2.2 skrll } 482 1.2.2.2 skrll /* free up the one we inserted */ 483 1.2.2.2 skrll if (free_it) { 484 1.2.2.2 skrll /* Pull it off the queue */ 485 1.2.2.2 skrll #ifdef SCTP_DEBUG 486 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 487 1.2.2.2 skrll printf("Free_it true, doing tickle wakeup\n"); 488 1.2.2.2 skrll } 489 1.2.2.2 skrll #endif 490 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 491 1.2.2.2 skrll TAILQ_REMOVE(&asoc->delivery_queue, chk, sctp_next); 492 1.2.2.2 skrll asoc->size_on_delivery_queue -= chk->send_size; 493 1.2.2.2 skrll asoc->cnt_on_delivery_queue--; 494 1.2.2.2 skrll /* Lose the data pointer, since its in the socket buffer */ 495 1.2.2.2 skrll chk->data = NULL; 496 1.2.2.2 skrll /* Now free the address and data */ 497 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 498 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 499 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 500 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 501 1.2.2.2 skrll panic("Chunk count is negative"); 502 1.2.2.2 skrll } 503 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 504 1.2.2.2 skrll } 505 1.2.2.2 skrll return (free_it); 506 1.2.2.2 skrll } 507 1.2.2.2 skrll 508 1.2.2.2 skrll /* 509 1.2.2.2 skrll * We are delivering currently from the reassembly queue. We must continue to 510 1.2.2.2 skrll * deliver until we either: 511 1.2.2.2 skrll * 1) run out of space. 512 1.2.2.2 skrll * 2) run out of sequential TSN's 513 1.2.2.2 skrll * 3) hit the SCTP_DATA_LAST_FRAG flag. 514 1.2.2.2 skrll */ 515 1.2.2.2 skrll static void 516 1.2.2.2 skrll sctp_service_reassembly(struct sctp_tcb *stcb, struct sctp_association *asoc, int hold_locks) 517 1.2.2.2 skrll { 518 1.2.2.2 skrll const struct sockaddr *to; 519 1.2.2.2 skrll struct sockaddr_in6 sin6; 520 1.2.2.2 skrll struct sctp_tmit_chunk *chk, *at; 521 1.2.2.2 skrll struct mbuf *control, *m; 522 1.2.2.2 skrll u_int16_t nxt_todel; 523 1.2.2.2 skrll u_int16_t stream_no; 524 1.2.2.2 skrll int cntDel; 525 1.2.2.2 skrll cntDel = stream_no = 0; 526 1.2.2.2 skrll if (hold_locks == 0) { 527 1.2.2.2 skrll /* 528 1.2.2.2 skrll * you always have the TCB lock, we need 529 1.2.2.2 skrll * to have the inp write lock as well. 530 1.2.2.2 skrll */ 531 1.2.2.2 skrll SCTP_TCB_UNLOCK(stcb); 532 1.2.2.2 skrll SCTP_INP_WLOCK(stcb->sctp_ep); 533 1.2.2.2 skrll SCTP_TCB_LOCK(stcb); 534 1.2.2.2 skrll } 535 1.2.2.2 skrll if (stcb && (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) { 536 1.2.2.2 skrll /* socket above is long gone */ 537 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 0; 538 1.2.2.2 skrll TAILQ_FOREACH(chk, &asoc->reasmqueue, sctp_next) { 539 1.2.2.2 skrll asoc->size_on_delivery_queue -= chk->send_size; 540 1.2.2.2 skrll asoc->cnt_on_delivery_queue--; 541 1.2.2.2 skrll /* 542 1.2.2.2 skrll * Lose the data pointer, since its in the socket buffer 543 1.2.2.2 skrll */ 544 1.2.2.2 skrll if (chk->data) 545 1.2.2.2 skrll sctp_m_freem(chk->data); 546 1.2.2.2 skrll chk->data = NULL; 547 1.2.2.2 skrll /* Now free the address and data */ 548 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 549 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 550 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 551 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 552 1.2.2.2 skrll panic("Chunk count is negative"); 553 1.2.2.2 skrll } 554 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 555 1.2.2.2 skrll } 556 1.2.2.2 skrll if (hold_locks == 0) { 557 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 558 1.2.2.2 skrll } 559 1.2.2.2 skrll return; 560 1.2.2.2 skrll } 561 1.2.2.2 skrll do { 562 1.2.2.2 skrll if (stcb->sctp_socket->so_rcv.sb_cc >= 563 1.2.2.2 skrll stcb->sctp_socket->so_rcv.sb_hiwat) { 564 1.2.2.2 skrll if (cntDel) { 565 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 566 1.2.2.2 skrll stcb->sctp_socket); 567 1.2.2.2 skrll } 568 1.2.2.2 skrll if (hold_locks == 0) { 569 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 570 1.2.2.2 skrll } 571 1.2.2.2 skrll return; 572 1.2.2.2 skrll } 573 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 574 1.2.2.2 skrll if (chk == NULL) { 575 1.2.2.2 skrll if (cntDel) { 576 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 577 1.2.2.2 skrll stcb->sctp_socket); 578 1.2.2.2 skrll } 579 1.2.2.2 skrll if (hold_locks == 0) { 580 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 581 1.2.2.2 skrll } 582 1.2.2.2 skrll return; 583 1.2.2.2 skrll } 584 1.2.2.2 skrll if (chk->rec.data.TSN_seq != (asoc->tsn_last_delivered + 1)) { 585 1.2.2.2 skrll /* Can't deliver more :< */ 586 1.2.2.2 skrll if (cntDel) { 587 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 588 1.2.2.2 skrll stcb->sctp_socket); 589 1.2.2.2 skrll } 590 1.2.2.2 skrll if (hold_locks == 0) { 591 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 592 1.2.2.2 skrll } 593 1.2.2.2 skrll return; 594 1.2.2.2 skrll } 595 1.2.2.2 skrll stream_no = chk->rec.data.stream_number; 596 1.2.2.2 skrll nxt_todel = asoc->strmin[stream_no].last_sequence_delivered + 1; 597 1.2.2.2 skrll if (nxt_todel != chk->rec.data.stream_seq && 598 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED) == 0) { 599 1.2.2.2 skrll /* 600 1.2.2.2 skrll * Not the next sequence to deliver in its stream OR 601 1.2.2.2 skrll * unordered 602 1.2.2.2 skrll */ 603 1.2.2.2 skrll if (cntDel) { 604 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 605 1.2.2.2 skrll stcb->sctp_socket); 606 1.2.2.2 skrll } 607 1.2.2.2 skrll if (hold_locks == 0) { 608 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 609 1.2.2.2 skrll } 610 1.2.2.2 skrll return; 611 1.2.2.2 skrll } 612 1.2.2.2 skrll 613 1.2.2.2 skrll if ((chk->data->m_flags & M_PKTHDR) == 0) { 614 1.2.2.2 skrll MGETHDR(m, M_DONTWAIT, MT_DATA); 615 1.2.2.2 skrll if (m == NULL) { 616 1.2.2.2 skrll /* no room! */ 617 1.2.2.2 skrll if (hold_locks == 0) { 618 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 619 1.2.2.2 skrll } 620 1.2.2.2 skrll return; 621 1.2.2.2 skrll } 622 1.2.2.2 skrll m->m_pkthdr.len = chk->send_size; 623 1.2.2.2 skrll m->m_len = 0; 624 1.2.2.2 skrll m->m_next = chk->data; 625 1.2.2.2 skrll chk->data = m; 626 1.2.2.2 skrll } 627 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) { 628 1.2.2.2 skrll if (chk->data->m_next == NULL) { 629 1.2.2.2 skrll /* hopefully we hit here most of the time */ 630 1.2.2.2 skrll chk->data->m_flags |= M_EOR; 631 1.2.2.2 skrll } else { 632 1.2.2.2 skrll /* Add the flag to the LAST mbuf in the chain */ 633 1.2.2.2 skrll m = chk->data; 634 1.2.2.2 skrll while (m->m_next != NULL) { 635 1.2.2.2 skrll m = m->m_next; 636 1.2.2.2 skrll } 637 1.2.2.2 skrll m->m_flags |= M_EOR; 638 1.2.2.2 skrll } 639 1.2.2.2 skrll } 640 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) { 641 1.2.2.2 skrll struct sockaddr_in6 lsa6; 642 1.2.2.2 skrll 643 1.2.2.2 skrll control = sctp_build_ctl(stcb, chk); 644 1.2.2.2 skrll to = rtcache_getdst(&chk->whoTo->ro); 645 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_NEEDS_MAPPED_V4) && 646 1.2.2.2 skrll to->sa_family == AF_INET) { 647 1.2.2.2 skrll const struct sockaddr_in *sin; 648 1.2.2.2 skrll 649 1.2.2.2 skrll sin = satocsin(to); 650 1.2.2.3 skrll in6_sin_2_v4mapsin6(sin, &sin6); 651 1.2.2.2 skrll to = (struct sockaddr *)&sin6; 652 1.2.2.2 skrll } 653 1.2.2.2 skrll /* check and strip embedded scope junk */ 654 1.2.2.2 skrll to = (const struct sockaddr *)sctp_recover_scope((const struct sockaddr_in6 *)to, 655 1.2.2.2 skrll &lsa6); 656 1.2.2.2 skrll if (((const struct sockaddr_in *)to)->sin_port == 0) { 657 1.2.2.2 skrll printf("Huh b, port is %d not net:%p %d?\n", 658 1.2.2.2 skrll ((const struct sockaddr_in *)to)->sin_port, 659 1.2.2.2 skrll chk->whoTo, 660 1.2.2.2 skrll (int)(ntohs(stcb->rport))); 661 1.2.2.2 skrll /*((struct sockaddr_in *)to)->sin_port = stcb->rport;*/ 662 1.2.2.2 skrll /* XXX */ 663 1.2.2.2 skrll } 664 1.2.2.2 skrll if (sctp_sbspace(&stcb->sctp_socket->so_rcv) < 665 1.2.2.2 skrll (long)chk->send_size) { 666 1.2.2.2 skrll if (control) { 667 1.2.2.2 skrll sctp_m_freem(control); 668 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 669 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 670 1.2.2.2 skrll } 671 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 672 1.2.2.2 skrll stcb->sctp_socket); 673 1.2.2.2 skrll if (hold_locks == 0) { 674 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 675 1.2.2.2 skrll } 676 1.2.2.2 skrll return; 677 1.2.2.2 skrll } 678 1.2.2.2 skrll if (!sbappendaddr_nocheck(&stcb->sctp_socket->so_rcv, 679 1.2.2.2 skrll to, chk->data, control, stcb->asoc.my_vtag, 680 1.2.2.2 skrll stcb->sctp_ep)) { 681 1.2.2.2 skrll /* Gak not enough room */ 682 1.2.2.2 skrll if (control) { 683 1.2.2.2 skrll sctp_m_freem(control); 684 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 685 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 686 1.2.2.2 skrll } 687 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 688 1.2.2.2 skrll stcb->sctp_socket); 689 1.2.2.2 skrll if (hold_locks == 0) { 690 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 691 1.2.2.2 skrll } 692 1.2.2.2 skrll return; 693 1.2.2.2 skrll } 694 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) == 0) { 695 1.2.2.2 skrll if (sctp_add_to_socket_q(stcb->sctp_ep, stcb)) { 696 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += 697 1.2.2.2 skrll sizeof(struct mbuf); 698 1.2.2.2 skrll } 699 1.2.2.2 skrll } else { 700 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += sizeof(struct mbuf); 701 1.2.2.2 skrll } 702 1.2.2.2 skrll cntDel++; 703 1.2.2.2 skrll } else { 704 1.2.2.2 skrll if (sctp_sbspace(&stcb->sctp_socket->so_rcv) >= 705 1.2.2.2 skrll (long)chk->send_size) { 706 1.2.2.2 skrll sbappend(&stcb->sctp_socket->so_rcv, chk->data); 707 1.2.2.2 skrll cntDel++; 708 1.2.2.2 skrll } else { 709 1.2.2.2 skrll /* out of space in the sb */ 710 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, 711 1.2.2.2 skrll stcb->sctp_socket); 712 1.2.2.2 skrll if (hold_locks == 0) { 713 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 714 1.2.2.2 skrll } 715 1.2.2.2 skrll return; 716 1.2.2.2 skrll } 717 1.2.2.2 skrll } 718 1.2.2.2 skrll /* pull it we did it */ 719 1.2.2.2 skrll TAILQ_REMOVE(&asoc->reasmqueue, chk, sctp_next); 720 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) { 721 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 0; 722 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED) == 0) { 723 1.2.2.2 skrll asoc->strmin[stream_no].last_sequence_delivered++; 724 1.2.2.2 skrll } 725 1.2.2.2 skrll } 726 1.2.2.2 skrll asoc->tsn_last_delivered = chk->rec.data.TSN_seq; 727 1.2.2.2 skrll asoc->size_on_reasm_queue -= chk->send_size; 728 1.2.2.2 skrll asoc->cnt_on_reasm_queue--; 729 1.2.2.2 skrll /* free up the chk */ 730 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 731 1.2.2.2 skrll chk->data = NULL; 732 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 733 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 734 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 735 1.2.2.2 skrll panic("Chunk count is negative"); 736 1.2.2.2 skrll } 737 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 738 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress == 0) { 739 1.2.2.2 skrll /* 740 1.2.2.2 skrll * Now lets see if we can deliver the next one on the 741 1.2.2.2 skrll * stream 742 1.2.2.2 skrll */ 743 1.2.2.2 skrll /*u_int16_t nxt_todel;*/ 744 1.2.2.2 skrll struct sctp_stream_in *strm; 745 1.2.2.2 skrll 746 1.2.2.2 skrll strm = &asoc->strmin[stream_no]; 747 1.2.2.2 skrll nxt_todel = strm->last_sequence_delivered + 1; 748 1.2.2.2 skrll chk = TAILQ_FIRST(&strm->inqueue); 749 1.2.2.2 skrll if (chk && (nxt_todel == chk->rec.data.stream_seq)) { 750 1.2.2.2 skrll while (chk != NULL) { 751 1.2.2.2 skrll /* all delivered */ 752 1.2.2.2 skrll if (nxt_todel == 753 1.2.2.2 skrll chk->rec.data.stream_seq) { 754 1.2.2.2 skrll at = TAILQ_NEXT(chk, sctp_next); 755 1.2.2.2 skrll TAILQ_REMOVE(&strm->inqueue, 756 1.2.2.2 skrll chk, sctp_next); 757 1.2.2.2 skrll asoc->size_on_all_streams -= 758 1.2.2.2 skrll chk->send_size; 759 1.2.2.2 skrll asoc->cnt_on_all_streams--; 760 1.2.2.2 skrll strm->last_sequence_delivered++; 761 1.2.2.2 skrll /* 762 1.2.2.2 skrll * We ignore the return of 763 1.2.2.2 skrll * deliver_data here since we 764 1.2.2.2 skrll * always can hold the chunk on 765 1.2.2.2 skrll * the d-queue. And we have a 766 1.2.2.2 skrll * finite number that can be 767 1.2.2.2 skrll * delivered from the strq. 768 1.2.2.2 skrll */ 769 1.2.2.2 skrll sctp_deliver_data(stcb, asoc, chk, 1); 770 1.2.2.2 skrll chk = at; 771 1.2.2.2 skrll } else { 772 1.2.2.2 skrll break; 773 1.2.2.2 skrll } 774 1.2.2.2 skrll nxt_todel = 775 1.2.2.2 skrll strm->last_sequence_delivered + 1; 776 1.2.2.2 skrll } 777 1.2.2.2 skrll } 778 1.2.2.2 skrll if (!TAILQ_EMPTY(&asoc->delivery_queue)) { 779 1.2.2.2 skrll /* Here if deliver_data fails, we must break */ 780 1.2.2.2 skrll if (sctp_deliver_data(stcb, asoc, NULL, 1) == 0) 781 1.2.2.2 skrll break; 782 1.2.2.2 skrll } 783 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 784 1.2.2.2 skrll if (hold_locks == 0) { 785 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 786 1.2.2.2 skrll } 787 1.2.2.2 skrll return; 788 1.2.2.2 skrll } 789 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 790 1.2.2.2 skrll } while (chk); 791 1.2.2.2 skrll if (cntDel) { 792 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 793 1.2.2.2 skrll } 794 1.2.2.2 skrll if (hold_locks == 0) { 795 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 796 1.2.2.2 skrll } 797 1.2.2.2 skrll } 798 1.2.2.2 skrll 799 1.2.2.2 skrll /* 800 1.2.2.2 skrll * Queue the chunk either right into the socket buffer if it is the next one 801 1.2.2.2 skrll * to go OR put it in the correct place in the delivery queue. If we do 802 1.2.2.2 skrll * append to the so_buf, keep doing so until we are out of order. 803 1.2.2.2 skrll * One big question still remains, what to do when the socket buffer is FULL?? 804 1.2.2.2 skrll */ 805 1.2.2.2 skrll static void 806 1.2.2.2 skrll sctp_queue_data_to_stream(struct sctp_tcb *stcb, struct sctp_association *asoc, 807 1.2.2.2 skrll struct sctp_tmit_chunk *chk, int *abort_flag) 808 1.2.2.2 skrll { 809 1.2.2.2 skrll struct sctp_stream_in *strm; 810 1.2.2.2 skrll struct sctp_tmit_chunk *at; 811 1.2.2.2 skrll int queue_needed; 812 1.2.2.2 skrll u_int16_t nxt_todel; 813 1.2.2.2 skrll struct mbuf *oper; 814 1.2.2.2 skrll 815 1.2.2.2 skrll /*** FIX FIX FIX ??? 816 1.2.2.2 skrll * Need to add code to deal with 16 bit seq wrap 817 1.2.2.2 skrll * without a TSN wrap for ordered delivery (maybe). 818 1.2.2.2 skrll * FIX FIX FIX ??? 819 1.2.2.2 skrll */ 820 1.2.2.2 skrll queue_needed = 1; 821 1.2.2.2 skrll asoc->size_on_all_streams += chk->send_size; 822 1.2.2.2 skrll asoc->cnt_on_all_streams++; 823 1.2.2.2 skrll strm = &asoc->strmin[chk->rec.data.stream_number]; 824 1.2.2.2 skrll nxt_todel = strm->last_sequence_delivered + 1; 825 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 826 1.2.2.2 skrll sctp_log_strm_del(chk, NULL, SCTP_STR_LOG_FROM_INTO_STRD); 827 1.2.2.2 skrll #endif 828 1.2.2.2 skrll #ifdef SCTP_DEBUG 829 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 830 1.2.2.2 skrll printf("queue to stream called for ssn:%u lastdel:%u nxt:%u\n", 831 1.2.2.2 skrll (u_int)chk->rec.data.stream_seq, 832 1.2.2.2 skrll (u_int)strm->last_sequence_delivered, (u_int)nxt_todel); 833 1.2.2.2 skrll } 834 1.2.2.2 skrll #endif 835 1.2.2.2 skrll if (compare_with_wrap(strm->last_sequence_delivered, 836 1.2.2.2 skrll chk->rec.data.stream_seq, MAX_SEQ) || 837 1.2.2.2 skrll (strm->last_sequence_delivered == chk->rec.data.stream_seq)) { 838 1.2.2.2 skrll /* The incoming sseq is behind where we last delivered? */ 839 1.2.2.2 skrll #ifdef SCTP_DEBUG 840 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 841 1.2.2.2 skrll printf("Duplicate S-SEQ:%d delivered:%d from peer, Abort association\n", 842 1.2.2.2 skrll chk->rec.data.stream_seq, 843 1.2.2.2 skrll strm->last_sequence_delivered); 844 1.2.2.2 skrll } 845 1.2.2.2 skrll #endif 846 1.2.2.2 skrll /* 847 1.2.2.2 skrll * throw it in the stream so it gets cleaned up in 848 1.2.2.2 skrll * association destruction 849 1.2.2.2 skrll */ 850 1.2.2.2 skrll TAILQ_INSERT_HEAD(&strm->inqueue, chk, sctp_next); 851 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 852 1.2.2.2 skrll if (oper) { 853 1.2.2.2 skrll struct sctp_paramhdr *ph; 854 1.2.2.2 skrll u_int32_t *ippp; 855 1.2.2.2 skrll 856 1.2.2.2 skrll oper->m_len = sizeof(struct sctp_paramhdr) + 857 1.2.2.2 skrll sizeof(*ippp); 858 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 859 1.2.2.2 skrll ph->param_type = htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 860 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 861 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 862 1.2.2.2 skrll *ippp = htonl(0x00000001); 863 1.2.2.2 skrll } 864 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, 865 1.2.2.2 skrll SCTP_PEER_FAULTY, oper); 866 1.2.2.2 skrll 867 1.2.2.2 skrll *abort_flag = 1; 868 1.2.2.2 skrll return; 869 1.2.2.2 skrll 870 1.2.2.2 skrll } 871 1.2.2.2 skrll if (nxt_todel == chk->rec.data.stream_seq) { 872 1.2.2.2 skrll /* can be delivered right away */ 873 1.2.2.2 skrll #ifdef SCTP_DEBUG 874 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 875 1.2.2.2 skrll printf("It's NEXT!\n"); 876 1.2.2.2 skrll } 877 1.2.2.2 skrll #endif 878 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 879 1.2.2.2 skrll sctp_log_strm_del(chk, NULL, SCTP_STR_LOG_FROM_IMMED_DEL); 880 1.2.2.2 skrll #endif 881 1.2.2.2 skrll queue_needed = 0; 882 1.2.2.2 skrll asoc->size_on_all_streams -= chk->send_size; 883 1.2.2.2 skrll asoc->cnt_on_all_streams--; 884 1.2.2.2 skrll strm->last_sequence_delivered++; 885 1.2.2.2 skrll sctp_deliver_data(stcb, asoc, chk, 0); 886 1.2.2.2 skrll chk = TAILQ_FIRST(&strm->inqueue); 887 1.2.2.2 skrll while (chk != NULL) { 888 1.2.2.2 skrll /* all delivered */ 889 1.2.2.2 skrll nxt_todel = strm->last_sequence_delivered + 1; 890 1.2.2.2 skrll if (nxt_todel == chk->rec.data.stream_seq) { 891 1.2.2.2 skrll at = TAILQ_NEXT(chk, sctp_next); 892 1.2.2.2 skrll TAILQ_REMOVE(&strm->inqueue, chk, sctp_next); 893 1.2.2.2 skrll asoc->size_on_all_streams -= chk->send_size; 894 1.2.2.2 skrll asoc->cnt_on_all_streams--; 895 1.2.2.2 skrll strm->last_sequence_delivered++; 896 1.2.2.2 skrll /* 897 1.2.2.2 skrll * We ignore the return of deliver_data here 898 1.2.2.2 skrll * since we always can hold the chunk on the 899 1.2.2.2 skrll * d-queue. And we have a finite number that 900 1.2.2.2 skrll * can be delivered from the strq. 901 1.2.2.2 skrll */ 902 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 903 1.2.2.2 skrll sctp_log_strm_del(chk, NULL, 904 1.2.2.2 skrll SCTP_STR_LOG_FROM_IMMED_DEL); 905 1.2.2.2 skrll #endif 906 1.2.2.2 skrll sctp_deliver_data(stcb, asoc, chk, 0); 907 1.2.2.2 skrll chk = at; 908 1.2.2.2 skrll continue; 909 1.2.2.2 skrll } 910 1.2.2.2 skrll break; 911 1.2.2.2 skrll } 912 1.2.2.2 skrll } 913 1.2.2.2 skrll if (queue_needed) { 914 1.2.2.2 skrll /* 915 1.2.2.2 skrll * Ok, we did not deliver this guy, find 916 1.2.2.2 skrll * the correct place to put it on the queue. 917 1.2.2.2 skrll */ 918 1.2.2.2 skrll #ifdef SCTP_DEBUG 919 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 920 1.2.2.2 skrll printf("Queue Needed!\n"); 921 1.2.2.2 skrll } 922 1.2.2.2 skrll #endif 923 1.2.2.2 skrll if (TAILQ_EMPTY(&strm->inqueue)) { 924 1.2.2.2 skrll /* Empty queue */ 925 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 926 1.2.2.2 skrll sctp_log_strm_del(chk, NULL, SCTP_STR_LOG_FROM_INSERT_HD); 927 1.2.2.2 skrll #endif 928 1.2.2.2 skrll TAILQ_INSERT_HEAD(&strm->inqueue, chk, sctp_next); 929 1.2.2.2 skrll } else { 930 1.2.2.2 skrll TAILQ_FOREACH(at, &strm->inqueue, sctp_next) { 931 1.2.2.2 skrll if (compare_with_wrap(at->rec.data.stream_seq, 932 1.2.2.2 skrll chk->rec.data.stream_seq, MAX_SEQ)) { 933 1.2.2.2 skrll /* 934 1.2.2.2 skrll * one in queue is bigger than the new 935 1.2.2.2 skrll * one, insert before this one 936 1.2.2.2 skrll */ 937 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 938 1.2.2.2 skrll sctp_log_strm_del(chk, at, 939 1.2.2.2 skrll SCTP_STR_LOG_FROM_INSERT_MD); 940 1.2.2.2 skrll #endif 941 1.2.2.2 skrll TAILQ_INSERT_BEFORE(at, chk, sctp_next); 942 1.2.2.2 skrll break; 943 1.2.2.2 skrll } else if (at->rec.data.stream_seq == 944 1.2.2.2 skrll chk->rec.data.stream_seq) { 945 1.2.2.2 skrll /* 946 1.2.2.2 skrll * Gak, He sent me a duplicate str seq 947 1.2.2.2 skrll * number 948 1.2.2.2 skrll */ 949 1.2.2.2 skrll /* 950 1.2.2.2 skrll * foo bar, I guess I will just free 951 1.2.2.2 skrll * this new guy, should we abort too? 952 1.2.2.2 skrll * FIX ME MAYBE? Or it COULD be that 953 1.2.2.2 skrll * the SSN's have wrapped. Maybe I 954 1.2.2.2 skrll * should compare to TSN somehow... 955 1.2.2.2 skrll * sigh for now just blow away the 956 1.2.2.2 skrll * chunk! 957 1.2.2.2 skrll */ 958 1.2.2.2 skrll 959 1.2.2.2 skrll if (chk->data) 960 1.2.2.2 skrll sctp_m_freem(chk->data); 961 1.2.2.2 skrll chk->data = NULL; 962 1.2.2.2 skrll asoc->size_on_all_streams -= chk->send_size; 963 1.2.2.2 skrll asoc->cnt_on_all_streams--; 964 1.2.2.2 skrll sctp_pegs[SCTP_DUP_SSN_RCVD]++; 965 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 966 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 967 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 968 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 969 1.2.2.2 skrll 0) { 970 1.2.2.2 skrll panic("Chunk count is negative"); 971 1.2.2.2 skrll } 972 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 973 1.2.2.2 skrll return; 974 1.2.2.2 skrll } else { 975 1.2.2.2 skrll if (TAILQ_NEXT(at, sctp_next) == NULL) { 976 1.2.2.2 skrll /* 977 1.2.2.2 skrll * We are at the end, insert it 978 1.2.2.2 skrll * after this one 979 1.2.2.2 skrll */ 980 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 981 1.2.2.2 skrll sctp_log_strm_del(chk, at, 982 1.2.2.2 skrll SCTP_STR_LOG_FROM_INSERT_TL); 983 1.2.2.2 skrll #endif 984 1.2.2.2 skrll TAILQ_INSERT_AFTER(&strm->inqueue, 985 1.2.2.2 skrll at, chk, sctp_next); 986 1.2.2.2 skrll break; 987 1.2.2.2 skrll } 988 1.2.2.2 skrll } 989 1.2.2.2 skrll } 990 1.2.2.2 skrll } 991 1.2.2.2 skrll } else { 992 1.2.2.2 skrll /* We delivered some chunks, wake them up */ 993 1.2.2.2 skrll 994 1.2.2.2 skrll #ifdef SCTP_DEBUG 995 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 996 1.2.2.2 skrll printf("Doing WAKEUP!\n"); 997 1.2.2.2 skrll } 998 1.2.2.2 skrll #endif 999 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 1000 1.2.2.2 skrll } 1001 1.2.2.2 skrll } 1002 1.2.2.2 skrll 1003 1.2.2.2 skrll /* 1004 1.2.2.2 skrll * Returns two things: You get the total size of the deliverable parts of the 1005 1.2.2.2 skrll * first fragmented message on the reassembly queue. And you get a 1 back if 1006 1.2.2.2 skrll * all of the message is ready or a 0 back if the message is still incomplete 1007 1.2.2.2 skrll */ 1008 1.2.2.2 skrll static int 1009 1.2.2.2 skrll sctp_is_all_msg_on_reasm(struct sctp_association *asoc, int *t_size) 1010 1.2.2.2 skrll { 1011 1.2.2.2 skrll struct sctp_tmit_chunk *chk; 1012 1.2.2.2 skrll u_int32_t tsn; 1013 1.2.2.2 skrll 1014 1.2.2.2 skrll *t_size = 0; 1015 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 1016 1.2.2.2 skrll if (chk == NULL) { 1017 1.2.2.2 skrll /* nothing on the queue */ 1018 1.2.2.2 skrll return (0); 1019 1.2.2.2 skrll } 1020 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) == 0) { 1021 1.2.2.2 skrll /* Not a first on the queue */ 1022 1.2.2.2 skrll return (0); 1023 1.2.2.2 skrll } 1024 1.2.2.2 skrll tsn = chk->rec.data.TSN_seq; 1025 1.2.2.2 skrll while (chk) { 1026 1.2.2.2 skrll if (tsn != chk->rec.data.TSN_seq) { 1027 1.2.2.2 skrll return (0); 1028 1.2.2.2 skrll } 1029 1.2.2.2 skrll *t_size += chk->send_size; 1030 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_LAST_FRAG) { 1031 1.2.2.2 skrll return (1); 1032 1.2.2.2 skrll } 1033 1.2.2.2 skrll tsn++; 1034 1.2.2.2 skrll chk = TAILQ_NEXT(chk, sctp_next); 1035 1.2.2.2 skrll } 1036 1.2.2.2 skrll return (0); 1037 1.2.2.2 skrll } 1038 1.2.2.2 skrll 1039 1.2.2.2 skrll /* 1040 1.2.2.2 skrll * Dump onto the re-assembly queue, in its proper place. After dumping on 1041 1.2.2.2 skrll * the queue, see if anthing can be delivered. If so pull it off (or as much 1042 1.2.2.2 skrll * as we can. If we run out of space then we must dump what we can and set 1043 1.2.2.2 skrll * the appropriate flag to say we queued what we could. 1044 1.2.2.2 skrll */ 1045 1.2.2.2 skrll static void 1046 1.2.2.2 skrll sctp_queue_data_for_reasm(struct sctp_tcb *stcb, struct sctp_association *asoc, 1047 1.2.2.2 skrll struct sctp_tmit_chunk *chk, int *abort_flag) 1048 1.2.2.2 skrll { 1049 1.2.2.2 skrll struct mbuf *oper; 1050 1.2.2.2 skrll u_int16_t nxt_todel; 1051 1.2.2.2 skrll u_int32_t cum_ackp1, prev_tsn, post_tsn; 1052 1.2.2.2 skrll int tsize; 1053 1.2.2.2 skrll struct sctp_tmit_chunk *at, *prev, *next; 1054 1.2.2.2 skrll 1055 1.2.2.2 skrll prev = next = NULL; 1056 1.2.2.2 skrll cum_ackp1 = asoc->tsn_last_delivered + 1; 1057 1.2.2.2 skrll 1058 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->reasmqueue)) { 1059 1.2.2.2 skrll /* This is the first one on the queue */ 1060 1.2.2.2 skrll TAILQ_INSERT_HEAD(&asoc->reasmqueue, chk, sctp_next); 1061 1.2.2.2 skrll /* 1062 1.2.2.2 skrll * we do not check for delivery of anything when 1063 1.2.2.2 skrll * only one fragment is here 1064 1.2.2.2 skrll */ 1065 1.2.2.2 skrll asoc->size_on_reasm_queue = chk->send_size; 1066 1.2.2.2 skrll asoc->cnt_on_reasm_queue++; 1067 1.2.2.2 skrll if (chk->rec.data.TSN_seq == cum_ackp1) { 1068 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress == 0 && 1069 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) != 1070 1.2.2.2 skrll SCTP_DATA_FIRST_FRAG) { 1071 1.2.2.2 skrll /* 1072 1.2.2.2 skrll * An empty queue, no delivery inprogress, we 1073 1.2.2.2 skrll * hit the next one and it does NOT have a 1074 1.2.2.2 skrll * FIRST fragment mark. 1075 1.2.2.2 skrll */ 1076 1.2.2.2 skrll #ifdef SCTP_DEBUG 1077 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1078 1.2.2.2 skrll printf("Gak, Evil plot, its not first, no fragmented delivery in progress\n"); 1079 1.2.2.2 skrll } 1080 1.2.2.2 skrll #endif 1081 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1082 1.2.2.2 skrll if (oper) { 1083 1.2.2.2 skrll struct sctp_paramhdr *ph; 1084 1.2.2.2 skrll u_int32_t *ippp; 1085 1.2.2.2 skrll 1086 1.2.2.2 skrll oper->m_len = 1087 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1088 1.2.2.2 skrll sizeof(*ippp); 1089 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 1090 1.2.2.2 skrll ph->param_type = 1091 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1092 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 1093 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1094 1.2.2.2 skrll *ippp = htonl(0x10000001); 1095 1.2.2.2 skrll } 1096 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, 1097 1.2.2.2 skrll SCTP_PEER_FAULTY, oper); 1098 1.2.2.2 skrll *abort_flag = 1; 1099 1.2.2.2 skrll } else if (asoc->fragmented_delivery_inprogress && 1100 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) == SCTP_DATA_FIRST_FRAG) { 1101 1.2.2.2 skrll /* 1102 1.2.2.2 skrll * We are doing a partial delivery and the NEXT 1103 1.2.2.2 skrll * chunk MUST be either the LAST or MIDDLE 1104 1.2.2.2 skrll * fragment NOT a FIRST 1105 1.2.2.2 skrll */ 1106 1.2.2.2 skrll #ifdef SCTP_DEBUG 1107 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1108 1.2.2.2 skrll printf("Gak, Evil plot, it IS a first and fragmented delivery in progress\n"); 1109 1.2.2.2 skrll } 1110 1.2.2.2 skrll #endif 1111 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1112 1.2.2.2 skrll if (oper) { 1113 1.2.2.2 skrll struct sctp_paramhdr *ph; 1114 1.2.2.2 skrll u_int32_t *ippp; 1115 1.2.2.2 skrll 1116 1.2.2.2 skrll oper->m_len = 1117 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1118 1.2.2.2 skrll sizeof(*ippp); 1119 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 1120 1.2.2.2 skrll ph->param_type = 1121 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1122 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 1123 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1124 1.2.2.2 skrll *ippp = htonl(0x10000002); 1125 1.2.2.2 skrll } 1126 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, 1127 1.2.2.2 skrll SCTP_PEER_FAULTY, oper); 1128 1.2.2.2 skrll *abort_flag = 1; 1129 1.2.2.2 skrll } else if (asoc->fragmented_delivery_inprogress) { 1130 1.2.2.2 skrll /* Here we are ok with a MIDDLE or LAST piece */ 1131 1.2.2.2 skrll if (chk->rec.data.stream_number != 1132 1.2.2.2 skrll asoc->str_of_pdapi) { 1133 1.2.2.2 skrll /* Got to be the right STR No */ 1134 1.2.2.2 skrll #ifdef SCTP_DEBUG 1135 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1136 1.2.2.2 skrll printf("Gak, Evil plot, it IS not same stream number %d vs %d\n", 1137 1.2.2.2 skrll chk->rec.data.stream_number, 1138 1.2.2.2 skrll asoc->str_of_pdapi); 1139 1.2.2.2 skrll } 1140 1.2.2.2 skrll #endif 1141 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1142 1.2.2.2 skrll if (oper) { 1143 1.2.2.2 skrll struct sctp_paramhdr *ph; 1144 1.2.2.2 skrll u_int32_t *ippp; 1145 1.2.2.2 skrll oper->m_len = 1146 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1147 1.2.2.2 skrll sizeof(*ippp); 1148 1.2.2.2 skrll ph = mtod(oper, 1149 1.2.2.2 skrll struct sctp_paramhdr *); 1150 1.2.2.2 skrll ph->param_type = 1151 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1152 1.2.2.2 skrll ph->param_length = 1153 1.2.2.2 skrll htons(oper->m_len); 1154 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1155 1.2.2.2 skrll *ippp = htonl(0x10000003); 1156 1.2.2.2 skrll } 1157 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1158 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1159 1.2.2.2 skrll *abort_flag = 1; 1160 1.2.2.2 skrll } else if ((asoc->fragment_flags & SCTP_DATA_UNORDERED) != 1161 1.2.2.2 skrll SCTP_DATA_UNORDERED && 1162 1.2.2.2 skrll chk->rec.data.stream_seq != 1163 1.2.2.2 skrll asoc->ssn_of_pdapi) { 1164 1.2.2.2 skrll /* Got to be the right STR Seq */ 1165 1.2.2.2 skrll #ifdef SCTP_DEBUG 1166 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1167 1.2.2.2 skrll printf("Gak, Evil plot, it IS not same stream seq %d vs %d\n", 1168 1.2.2.2 skrll chk->rec.data.stream_seq, 1169 1.2.2.2 skrll asoc->ssn_of_pdapi); 1170 1.2.2.2 skrll } 1171 1.2.2.2 skrll #endif 1172 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1173 1.2.2.2 skrll if (oper) { 1174 1.2.2.2 skrll struct sctp_paramhdr *ph; 1175 1.2.2.2 skrll u_int32_t *ippp; 1176 1.2.2.2 skrll oper->m_len = 1177 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1178 1.2.2.2 skrll sizeof(*ippp); 1179 1.2.2.2 skrll ph = mtod(oper, 1180 1.2.2.2 skrll struct sctp_paramhdr *); 1181 1.2.2.2 skrll ph->param_type = 1182 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1183 1.2.2.2 skrll ph->param_length = 1184 1.2.2.2 skrll htons(oper->m_len); 1185 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1186 1.2.2.2 skrll *ippp = htonl(0x10000004); 1187 1.2.2.2 skrll } 1188 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1189 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1190 1.2.2.2 skrll *abort_flag = 1; 1191 1.2.2.2 skrll } 1192 1.2.2.2 skrll } 1193 1.2.2.2 skrll } 1194 1.2.2.2 skrll return; 1195 1.2.2.2 skrll } 1196 1.2.2.2 skrll /* Find its place */ 1197 1.2.2.2 skrll at = TAILQ_FIRST(&asoc->reasmqueue); 1198 1.2.2.2 skrll 1199 1.2.2.2 skrll /* Grab the top flags */ 1200 1.2.2.2 skrll TAILQ_FOREACH(at, &asoc->reasmqueue, sctp_next) { 1201 1.2.2.2 skrll if (compare_with_wrap(at->rec.data.TSN_seq, 1202 1.2.2.2 skrll chk->rec.data.TSN_seq, MAX_TSN)) { 1203 1.2.2.2 skrll /* 1204 1.2.2.2 skrll * one in queue is bigger than the new one, insert 1205 1.2.2.2 skrll * before this one 1206 1.2.2.2 skrll */ 1207 1.2.2.2 skrll /* A check */ 1208 1.2.2.2 skrll asoc->size_on_reasm_queue += chk->send_size; 1209 1.2.2.2 skrll asoc->cnt_on_reasm_queue++; 1210 1.2.2.2 skrll next = at; 1211 1.2.2.2 skrll TAILQ_INSERT_BEFORE(at, chk, sctp_next); 1212 1.2.2.2 skrll break; 1213 1.2.2.2 skrll } else if (at->rec.data.TSN_seq == chk->rec.data.TSN_seq) { 1214 1.2.2.2 skrll /* Gak, He sent me a duplicate str seq number */ 1215 1.2.2.2 skrll /* 1216 1.2.2.2 skrll * foo bar, I guess I will just free this new guy, 1217 1.2.2.2 skrll * should we abort too? FIX ME MAYBE? Or it COULD be 1218 1.2.2.2 skrll * that the SSN's have wrapped. Maybe I should compare 1219 1.2.2.2 skrll * to TSN somehow... sigh for now just blow away the 1220 1.2.2.2 skrll * chunk! 1221 1.2.2.2 skrll */ 1222 1.2.2.2 skrll if (chk->data) 1223 1.2.2.2 skrll sctp_m_freem(chk->data); 1224 1.2.2.2 skrll chk->data = NULL; 1225 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 1226 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 1227 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 1228 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 1229 1.2.2.2 skrll panic("Chunk count is negative"); 1230 1.2.2.2 skrll } 1231 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 1232 1.2.2.2 skrll return; 1233 1.2.2.2 skrll } else { 1234 1.2.2.2 skrll prev = at; 1235 1.2.2.2 skrll if (TAILQ_NEXT(at, sctp_next) == NULL) { 1236 1.2.2.2 skrll /* 1237 1.2.2.2 skrll * We are at the end, insert it after this one 1238 1.2.2.2 skrll */ 1239 1.2.2.2 skrll /* check it first */ 1240 1.2.2.2 skrll asoc->size_on_reasm_queue += chk->send_size; 1241 1.2.2.2 skrll asoc->cnt_on_reasm_queue++; 1242 1.2.2.2 skrll TAILQ_INSERT_AFTER(&asoc->reasmqueue, at, chk, sctp_next); 1243 1.2.2.2 skrll break; 1244 1.2.2.2 skrll } 1245 1.2.2.2 skrll } 1246 1.2.2.2 skrll } 1247 1.2.2.2 skrll /* Now the audits */ 1248 1.2.2.2 skrll if (prev) { 1249 1.2.2.2 skrll prev_tsn = chk->rec.data.TSN_seq - 1; 1250 1.2.2.2 skrll if (prev_tsn == prev->rec.data.TSN_seq) { 1251 1.2.2.2 skrll /* 1252 1.2.2.2 skrll * Ok the one I am dropping onto the end 1253 1.2.2.2 skrll * is the NEXT. A bit of valdiation here. 1254 1.2.2.2 skrll */ 1255 1.2.2.2 skrll if ((prev->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1256 1.2.2.2 skrll SCTP_DATA_FIRST_FRAG || 1257 1.2.2.2 skrll (prev->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1258 1.2.2.2 skrll SCTP_DATA_MIDDLE_FRAG) { 1259 1.2.2.2 skrll /* 1260 1.2.2.2 skrll * Insert chk MUST be a MIDDLE or LAST fragment 1261 1.2.2.2 skrll */ 1262 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1263 1.2.2.2 skrll SCTP_DATA_FIRST_FRAG) { 1264 1.2.2.2 skrll #ifdef SCTP_DEBUG 1265 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1266 1.2.2.2 skrll printf("Prev check - It can be a midlle or last but not a first\n"); 1267 1.2.2.2 skrll printf("Gak, Evil plot, it's a FIRST!\n"); 1268 1.2.2.2 skrll } 1269 1.2.2.2 skrll #endif 1270 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1271 1.2.2.2 skrll if (oper) { 1272 1.2.2.2 skrll struct sctp_paramhdr *ph; 1273 1.2.2.2 skrll u_int32_t *ippp; 1274 1.2.2.2 skrll 1275 1.2.2.2 skrll oper->m_len = 1276 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1277 1.2.2.2 skrll sizeof(*ippp); 1278 1.2.2.2 skrll ph = mtod(oper, 1279 1.2.2.2 skrll struct sctp_paramhdr *); 1280 1.2.2.2 skrll ph->param_type = 1281 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1282 1.2.2.2 skrll ph->param_length = 1283 1.2.2.2 skrll htons(oper->m_len); 1284 1.2.2.2 skrll 1285 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1286 1.2.2.2 skrll *ippp = htonl(0x10000005); 1287 1.2.2.2 skrll } 1288 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1289 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1290 1.2.2.2 skrll *abort_flag = 1; 1291 1.2.2.2 skrll return; 1292 1.2.2.2 skrll } 1293 1.2.2.2 skrll if (chk->rec.data.stream_number != 1294 1.2.2.2 skrll prev->rec.data.stream_number) { 1295 1.2.2.2 skrll /* 1296 1.2.2.2 skrll * Huh, need the correct STR here, they 1297 1.2.2.2 skrll * must be the same. 1298 1.2.2.2 skrll */ 1299 1.2.2.2 skrll #ifdef SCTP_DEBUG 1300 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1301 1.2.2.2 skrll printf("Prev check - Gak, Evil plot, ssn:%d not the same as at:%d\n", 1302 1.2.2.2 skrll chk->rec.data.stream_number, 1303 1.2.2.2 skrll prev->rec.data.stream_number); 1304 1.2.2.2 skrll } 1305 1.2.2.2 skrll #endif 1306 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1307 1.2.2.2 skrll if (oper) { 1308 1.2.2.2 skrll struct sctp_paramhdr *ph; 1309 1.2.2.2 skrll u_int32_t *ippp; 1310 1.2.2.2 skrll 1311 1.2.2.2 skrll oper->m_len = 1312 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1313 1.2.2.2 skrll sizeof(*ippp); 1314 1.2.2.2 skrll ph = mtod(oper, 1315 1.2.2.2 skrll struct sctp_paramhdr *); 1316 1.2.2.2 skrll ph->param_type = 1317 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1318 1.2.2.2 skrll ph->param_length = 1319 1.2.2.2 skrll htons(oper->m_len); 1320 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1321 1.2.2.2 skrll *ippp = htonl(0x10000006); 1322 1.2.2.2 skrll } 1323 1.2.2.2 skrll 1324 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1325 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1326 1.2.2.2 skrll 1327 1.2.2.2 skrll *abort_flag = 1; 1328 1.2.2.2 skrll return; 1329 1.2.2.2 skrll } 1330 1.2.2.2 skrll if ((prev->rec.data.rcv_flags & SCTP_DATA_UNORDERED) == 0 && 1331 1.2.2.2 skrll chk->rec.data.stream_seq != 1332 1.2.2.2 skrll prev->rec.data.stream_seq) { 1333 1.2.2.2 skrll /* 1334 1.2.2.2 skrll * Huh, need the correct STR here, they 1335 1.2.2.2 skrll * must be the same. 1336 1.2.2.2 skrll */ 1337 1.2.2.2 skrll #ifdef SCTP_DEBUG 1338 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1339 1.2.2.2 skrll printf("Prev check - Gak, Evil plot, sseq:%d not the same as at:%d\n", 1340 1.2.2.2 skrll chk->rec.data.stream_seq, 1341 1.2.2.2 skrll prev->rec.data.stream_seq); 1342 1.2.2.2 skrll } 1343 1.2.2.2 skrll #endif 1344 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1345 1.2.2.2 skrll if (oper) { 1346 1.2.2.2 skrll struct sctp_paramhdr *ph; 1347 1.2.2.2 skrll u_int32_t *ippp; 1348 1.2.2.2 skrll 1349 1.2.2.2 skrll oper->m_len = 1350 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1351 1.2.2.2 skrll sizeof(*ippp); 1352 1.2.2.2 skrll ph = mtod(oper, 1353 1.2.2.2 skrll struct sctp_paramhdr *); 1354 1.2.2.2 skrll ph->param_type = 1355 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1356 1.2.2.2 skrll ph->param_length = 1357 1.2.2.2 skrll htons(oper->m_len); 1358 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1359 1.2.2.2 skrll *ippp = htonl(0x10000007); 1360 1.2.2.2 skrll } 1361 1.2.2.2 skrll 1362 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1363 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1364 1.2.2.2 skrll 1365 1.2.2.2 skrll *abort_flag = 1; 1366 1.2.2.2 skrll return; 1367 1.2.2.2 skrll } 1368 1.2.2.2 skrll } else if ((prev->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1369 1.2.2.2 skrll SCTP_DATA_LAST_FRAG) { 1370 1.2.2.2 skrll /* Insert chk MUST be a FIRST */ 1371 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) != 1372 1.2.2.2 skrll SCTP_DATA_FIRST_FRAG) { 1373 1.2.2.2 skrll #ifdef SCTP_DEBUG 1374 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1375 1.2.2.2 skrll printf("Prev check - Gak, evil plot, its not FIRST and it must be!\n"); 1376 1.2.2.2 skrll } 1377 1.2.2.2 skrll #endif 1378 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1379 1.2.2.2 skrll if (oper) { 1380 1.2.2.2 skrll struct sctp_paramhdr *ph; 1381 1.2.2.2 skrll u_int32_t *ippp; 1382 1.2.2.2 skrll 1383 1.2.2.2 skrll oper->m_len = 1384 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1385 1.2.2.2 skrll sizeof(*ippp); 1386 1.2.2.2 skrll ph = mtod(oper, 1387 1.2.2.2 skrll struct sctp_paramhdr *); 1388 1.2.2.2 skrll ph->param_type = 1389 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1390 1.2.2.2 skrll ph->param_length = 1391 1.2.2.2 skrll htons(oper->m_len); 1392 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1393 1.2.2.2 skrll *ippp = htonl(0x10000008); 1394 1.2.2.2 skrll } 1395 1.2.2.2 skrll 1396 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1397 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1398 1.2.2.2 skrll 1399 1.2.2.2 skrll *abort_flag = 1; 1400 1.2.2.2 skrll return; 1401 1.2.2.2 skrll } 1402 1.2.2.2 skrll } 1403 1.2.2.2 skrll } 1404 1.2.2.2 skrll } 1405 1.2.2.2 skrll 1406 1.2.2.2 skrll if (next) { 1407 1.2.2.2 skrll post_tsn = chk->rec.data.TSN_seq + 1; 1408 1.2.2.2 skrll if (post_tsn == next->rec.data.TSN_seq) { 1409 1.2.2.2 skrll /* 1410 1.2.2.2 skrll * Ok the one I am inserting ahead of 1411 1.2.2.2 skrll * is my NEXT one. A bit of valdiation here. 1412 1.2.2.2 skrll */ 1413 1.2.2.2 skrll if (next->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) { 1414 1.2.2.2 skrll /* Insert chk MUST be a last fragment */ 1415 1.2.2.2 skrll if ((chk->rec.data.rcv_flags&SCTP_DATA_FRAG_MASK) 1416 1.2.2.2 skrll != SCTP_DATA_LAST_FRAG) { 1417 1.2.2.2 skrll #ifdef SCTP_DEBUG 1418 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1419 1.2.2.2 skrll printf("Next chk - Next is FIRST, we must be LAST\n"); 1420 1.2.2.2 skrll printf("Gak, Evil plot, its not a last!\n"); 1421 1.2.2.2 skrll } 1422 1.2.2.2 skrll #endif 1423 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1424 1.2.2.2 skrll if (oper) { 1425 1.2.2.2 skrll struct sctp_paramhdr *ph; 1426 1.2.2.2 skrll u_int32_t *ippp; 1427 1.2.2.2 skrll 1428 1.2.2.2 skrll oper->m_len = 1429 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1430 1.2.2.2 skrll sizeof(*ippp); 1431 1.2.2.2 skrll ph = mtod(oper, 1432 1.2.2.2 skrll struct sctp_paramhdr *); 1433 1.2.2.2 skrll ph->param_type = 1434 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1435 1.2.2.2 skrll ph->param_length = 1436 1.2.2.2 skrll htons(oper->m_len); 1437 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1438 1.2.2.2 skrll *ippp = htonl(0x10000009); 1439 1.2.2.2 skrll } 1440 1.2.2.2 skrll 1441 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1442 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1443 1.2.2.2 skrll 1444 1.2.2.2 skrll *abort_flag = 1; 1445 1.2.2.2 skrll return; 1446 1.2.2.2 skrll } 1447 1.2.2.2 skrll } else if ((next->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1448 1.2.2.2 skrll SCTP_DATA_MIDDLE_FRAG || 1449 1.2.2.2 skrll (next->rec.data.rcv_flags&SCTP_DATA_FRAG_MASK) == 1450 1.2.2.2 skrll SCTP_DATA_LAST_FRAG) { 1451 1.2.2.2 skrll /* Insert chk CAN be MIDDLE or FIRST NOT LAST */ 1452 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) == 1453 1.2.2.2 skrll SCTP_DATA_LAST_FRAG) { 1454 1.2.2.2 skrll #ifdef SCTP_DEBUG 1455 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1456 1.2.2.2 skrll printf("Next chk - Next is a MIDDLE/LAST\n"); 1457 1.2.2.2 skrll printf("Gak, Evil plot, new prev chunk is a LAST\n"); 1458 1.2.2.2 skrll } 1459 1.2.2.2 skrll #endif 1460 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1461 1.2.2.2 skrll if (oper) { 1462 1.2.2.2 skrll struct sctp_paramhdr *ph; 1463 1.2.2.2 skrll u_int32_t *ippp; 1464 1.2.2.2 skrll 1465 1.2.2.2 skrll oper->m_len = 1466 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1467 1.2.2.2 skrll sizeof(*ippp); 1468 1.2.2.2 skrll ph = mtod(oper, 1469 1.2.2.2 skrll struct sctp_paramhdr *); 1470 1.2.2.2 skrll ph->param_type = 1471 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1472 1.2.2.2 skrll ph->param_length = 1473 1.2.2.2 skrll htons(oper->m_len); 1474 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1475 1.2.2.2 skrll *ippp = htonl(0x1000000a); 1476 1.2.2.2 skrll } 1477 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1478 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1479 1.2.2.2 skrll 1480 1.2.2.2 skrll *abort_flag = 1; 1481 1.2.2.2 skrll return; 1482 1.2.2.2 skrll } 1483 1.2.2.2 skrll if (chk->rec.data.stream_number != 1484 1.2.2.2 skrll next->rec.data.stream_number) { 1485 1.2.2.2 skrll /* 1486 1.2.2.2 skrll * Huh, need the correct STR here, they 1487 1.2.2.2 skrll * must be the same. 1488 1.2.2.2 skrll */ 1489 1.2.2.2 skrll #ifdef SCTP_DEBUG 1490 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1491 1.2.2.2 skrll printf("Next chk - Gak, Evil plot, ssn:%d not the same as at:%d\n", 1492 1.2.2.2 skrll chk->rec.data.stream_number, 1493 1.2.2.2 skrll next->rec.data.stream_number); 1494 1.2.2.2 skrll } 1495 1.2.2.2 skrll #endif 1496 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1497 1.2.2.2 skrll if (oper) { 1498 1.2.2.2 skrll struct sctp_paramhdr *ph; 1499 1.2.2.2 skrll u_int32_t *ippp; 1500 1.2.2.2 skrll 1501 1.2.2.2 skrll oper->m_len = 1502 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1503 1.2.2.2 skrll sizeof(*ippp); 1504 1.2.2.2 skrll ph = mtod(oper, 1505 1.2.2.2 skrll struct sctp_paramhdr *); 1506 1.2.2.2 skrll ph->param_type = 1507 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1508 1.2.2.2 skrll ph->param_length = 1509 1.2.2.2 skrll htons(oper->m_len); 1510 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1511 1.2.2.2 skrll *ippp = htonl(0x1000000b); 1512 1.2.2.2 skrll } 1513 1.2.2.2 skrll 1514 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1515 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1516 1.2.2.2 skrll 1517 1.2.2.2 skrll *abort_flag = 1; 1518 1.2.2.2 skrll return; 1519 1.2.2.2 skrll } 1520 1.2.2.2 skrll if ((next->rec.data.rcv_flags & SCTP_DATA_UNORDERED) == 0 && 1521 1.2.2.2 skrll chk->rec.data.stream_seq != 1522 1.2.2.2 skrll next->rec.data.stream_seq) { 1523 1.2.2.2 skrll /* 1524 1.2.2.2 skrll * Huh, need the correct STR here, they 1525 1.2.2.2 skrll * must be the same. 1526 1.2.2.2 skrll */ 1527 1.2.2.2 skrll #ifdef SCTP_DEBUG 1528 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1529 1.2.2.2 skrll printf("Next chk - Gak, Evil plot, sseq:%d not the same as at:%d\n", 1530 1.2.2.2 skrll chk->rec.data.stream_seq, 1531 1.2.2.2 skrll next->rec.data.stream_seq); 1532 1.2.2.2 skrll } 1533 1.2.2.2 skrll #endif 1534 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1535 1.2.2.2 skrll if (oper) { 1536 1.2.2.2 skrll struct sctp_paramhdr *ph; 1537 1.2.2.2 skrll u_int32_t *ippp; 1538 1.2.2.2 skrll 1539 1.2.2.2 skrll oper->m_len = 1540 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 1541 1.2.2.2 skrll sizeof(*ippp); 1542 1.2.2.2 skrll ph = mtod(oper, 1543 1.2.2.2 skrll struct sctp_paramhdr *); 1544 1.2.2.2 skrll ph->param_type = 1545 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1546 1.2.2.2 skrll ph->param_length = 1547 1.2.2.2 skrll htons(oper->m_len); 1548 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1549 1.2.2.2 skrll *ippp = htonl(0x1000000c); 1550 1.2.2.2 skrll } 1551 1.2.2.2 skrll 1552 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 1553 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 1554 1.2.2.2 skrll 1555 1.2.2.2 skrll *abort_flag = 1; 1556 1.2.2.2 skrll return; 1557 1.2.2.2 skrll 1558 1.2.2.2 skrll } 1559 1.2.2.2 skrll } 1560 1.2.2.2 skrll } 1561 1.2.2.2 skrll } 1562 1.2.2.2 skrll /* 1563 1.2.2.2 skrll * now that we have all in there place we must check a number of 1564 1.2.2.2 skrll * things to see if we can send data to the ULP. 1565 1.2.2.2 skrll */ 1566 1.2.2.2 skrll /* we need to do some delivery, if we can */ 1567 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 1568 1.2.2.2 skrll if (chk == NULL) { 1569 1.2.2.2 skrll /* Huh? */ 1570 1.2.2.2 skrll asoc->size_on_reasm_queue = 0; 1571 1.2.2.2 skrll asoc->cnt_on_reasm_queue = 0; 1572 1.2.2.2 skrll return; 1573 1.2.2.2 skrll } 1574 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress == 0) { 1575 1.2.2.2 skrll nxt_todel = 1576 1.2.2.2 skrll asoc->strmin[chk->rec.data.stream_number].last_sequence_delivered + 1; 1577 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) && 1578 1.2.2.2 skrll (nxt_todel == chk->rec.data.stream_seq || 1579 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED))) { 1580 1.2.2.2 skrll /* 1581 1.2.2.2 skrll * Yep the first one is here and its 1582 1.2.2.2 skrll * ok to deliver but should we? 1583 1.2.2.2 skrll */ 1584 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->delivery_queue) && 1585 1.2.2.2 skrll (sctp_is_all_msg_on_reasm(asoc, &tsize) || 1586 1.2.2.2 skrll (asoc->size_on_reasm_queue >= 1587 1.2.2.2 skrll (stcb->sctp_socket->so_rcv.sb_hiwat >> 2) && 1588 1.2.2.2 skrll tsize))) { 1589 1.2.2.2 skrll /* 1590 1.2.2.2 skrll * Yes, we setup to 1591 1.2.2.2 skrll * start reception, by backing down the TSN 1592 1.2.2.2 skrll * just in case we can't deliver. If we 1593 1.2.2.2 skrll */ 1594 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 1; 1595 1.2.2.2 skrll asoc->tsn_last_delivered = 1596 1.2.2.2 skrll chk->rec.data.TSN_seq - 1; 1597 1.2.2.2 skrll asoc->str_of_pdapi = 1598 1.2.2.2 skrll chk->rec.data.stream_number; 1599 1.2.2.2 skrll asoc->ssn_of_pdapi = chk->rec.data.stream_seq; 1600 1.2.2.2 skrll asoc->fragment_flags = chk->rec.data.rcv_flags; 1601 1.2.2.2 skrll sctp_service_reassembly(stcb, asoc, 0); 1602 1.2.2.2 skrll } 1603 1.2.2.2 skrll } 1604 1.2.2.2 skrll } else { 1605 1.2.2.2 skrll sctp_service_reassembly(stcb, asoc, 0); 1606 1.2.2.2 skrll } 1607 1.2.2.2 skrll } 1608 1.2.2.2 skrll 1609 1.2.2.2 skrll /* 1610 1.2.2.2 skrll * This is an unfortunate routine. It checks to make sure a evil guy is not 1611 1.2.2.2 skrll * stuffing us full of bad packet fragments. A broken peer could also do this 1612 1.2.2.2 skrll * but this is doubtful. It is to bad I must worry about evil crackers sigh 1613 1.2.2.2 skrll * :< more cycles. 1614 1.2.2.2 skrll */ 1615 1.2.2.2 skrll static int 1616 1.2.2.2 skrll sctp_does_chk_belong_to_reasm(struct sctp_association *asoc, 1617 1.2.2.2 skrll struct sctp_tmit_chunk *chk) 1618 1.2.2.2 skrll { 1619 1.2.2.2 skrll struct sctp_tmit_chunk *at; 1620 1.2.2.2 skrll u_int32_t tsn_est; 1621 1.2.2.2 skrll 1622 1.2.2.2 skrll TAILQ_FOREACH(at, &asoc->reasmqueue, sctp_next) { 1623 1.2.2.2 skrll if (compare_with_wrap(chk->rec.data.TSN_seq, 1624 1.2.2.2 skrll at->rec.data.TSN_seq, MAX_TSN)) { 1625 1.2.2.2 skrll /* is it one bigger? */ 1626 1.2.2.2 skrll tsn_est = at->rec.data.TSN_seq + 1; 1627 1.2.2.2 skrll if (tsn_est == chk->rec.data.TSN_seq) { 1628 1.2.2.2 skrll /* yep. It better be a last then*/ 1629 1.2.2.2 skrll if ((at->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) != 1630 1.2.2.2 skrll SCTP_DATA_LAST_FRAG) { 1631 1.2.2.2 skrll /* 1632 1.2.2.2 skrll * Ok this guy belongs next to a guy 1633 1.2.2.2 skrll * that is NOT last, it should be a 1634 1.2.2.2 skrll * middle/last, not a complete chunk. 1635 1.2.2.2 skrll */ 1636 1.2.2.2 skrll return (1); 1637 1.2.2.2 skrll } else { 1638 1.2.2.2 skrll /* 1639 1.2.2.2 skrll * This guy is ok since its a LAST and 1640 1.2.2.2 skrll * the new chunk is a fully self- 1641 1.2.2.2 skrll * contained one. 1642 1.2.2.2 skrll */ 1643 1.2.2.2 skrll return (0); 1644 1.2.2.2 skrll } 1645 1.2.2.2 skrll } 1646 1.2.2.2 skrll } else if (chk->rec.data.TSN_seq == at->rec.data.TSN_seq) { 1647 1.2.2.2 skrll /* Software error since I have a dup? */ 1648 1.2.2.2 skrll return (1); 1649 1.2.2.2 skrll } else { 1650 1.2.2.2 skrll /* 1651 1.2.2.2 skrll * Ok, 'at' is larger than new chunk but does it 1652 1.2.2.2 skrll * need to be right before it. 1653 1.2.2.2 skrll */ 1654 1.2.2.2 skrll tsn_est = chk->rec.data.TSN_seq + 1; 1655 1.2.2.2 skrll if (tsn_est == at->rec.data.TSN_seq) { 1656 1.2.2.2 skrll /* Yep, It better be a first */ 1657 1.2.2.2 skrll if ((at->rec.data.rcv_flags & SCTP_DATA_FRAG_MASK) != 1658 1.2.2.2 skrll SCTP_DATA_FIRST_FRAG) { 1659 1.2.2.2 skrll return (1); 1660 1.2.2.2 skrll } else { 1661 1.2.2.2 skrll return (0); 1662 1.2.2.2 skrll } 1663 1.2.2.2 skrll } 1664 1.2.2.2 skrll } 1665 1.2.2.2 skrll } 1666 1.2.2.2 skrll return (0); 1667 1.2.2.2 skrll } 1668 1.2.2.2 skrll 1669 1.2.2.2 skrll extern unsigned int sctp_max_chunks_on_queue; 1670 1.2.2.2 skrll static int 1671 1.2.2.2 skrll sctp_process_a_data_chunk(struct sctp_tcb *stcb, struct sctp_association *asoc, 1672 1.2.2.2 skrll struct mbuf **m, int offset, struct sctp_data_chunk *ch, int chk_length, 1673 1.2.2.2 skrll struct sctp_nets *net, u_int32_t *high_tsn, int *abort_flag, 1674 1.2.2.2 skrll int *break_flag, int last_chunk) 1675 1.2.2.2 skrll { 1676 1.2.2.2 skrll /* Process a data chunk */ 1677 1.2.2.2 skrll /* struct sctp_tmit_chunk *chk;*/ 1678 1.2.2.2 skrll struct sctp_tmit_chunk *chk; 1679 1.2.2.2 skrll u_int32_t tsn, gap; 1680 1.2.2.2 skrll struct mbuf *dmbuf; 1681 1.2.2.2 skrll int the_len; 1682 1.2.2.2 skrll u_int16_t strmno, strmseq; 1683 1.2.2.2 skrll struct mbuf *oper; 1684 1.2.2.2 skrll 1685 1.2.2.2 skrll chk = NULL; 1686 1.2.2.2 skrll tsn = ntohl(ch->dp.tsn); 1687 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 1688 1.2.2.2 skrll sctp_log_map(0, tsn, asoc->cumulative_tsn, SCTP_MAP_PREPARE_SLIDE); 1689 1.2.2.2 skrll #endif 1690 1.2.2.2 skrll if (compare_with_wrap(asoc->cumulative_tsn, tsn, MAX_TSN) || 1691 1.2.2.2 skrll asoc->cumulative_tsn == tsn) { 1692 1.2.2.2 skrll /* It is a duplicate */ 1693 1.2.2.2 skrll sctp_pegs[SCTP_DUPTSN_RECVD]++; 1694 1.2.2.2 skrll if (asoc->numduptsns < SCTP_MAX_DUP_TSNS) { 1695 1.2.2.2 skrll /* Record a dup for the next outbound sack */ 1696 1.2.2.2 skrll asoc->dup_tsns[asoc->numduptsns] = tsn; 1697 1.2.2.2 skrll asoc->numduptsns++; 1698 1.2.2.2 skrll } 1699 1.2.2.2 skrll return (0); 1700 1.2.2.2 skrll } 1701 1.2.2.2 skrll /* Calculate the number of TSN's between the base and this TSN */ 1702 1.2.2.2 skrll if (tsn >= asoc->mapping_array_base_tsn) { 1703 1.2.2.2 skrll gap = tsn - asoc->mapping_array_base_tsn; 1704 1.2.2.2 skrll } else { 1705 1.2.2.2 skrll gap = (MAX_TSN - asoc->mapping_array_base_tsn) + tsn + 1; 1706 1.2.2.2 skrll } 1707 1.2.2.2 skrll if (gap >= (SCTP_MAPPING_ARRAY << 3)) { 1708 1.2.2.2 skrll /* Can't hold the bit in the mapping at max array, toss it */ 1709 1.2.2.2 skrll return (0); 1710 1.2.2.2 skrll } 1711 1.2.2.2 skrll if (gap >= (uint32_t)(asoc->mapping_array_size << 3)) { 1712 1.2.2.2 skrll if (sctp_expand_mapping_array(asoc)) { 1713 1.2.2.2 skrll /* Can't expand, drop it */ 1714 1.2.2.2 skrll return (0); 1715 1.2.2.2 skrll } 1716 1.2.2.2 skrll } 1717 1.2.2.2 skrll if (compare_with_wrap(tsn, *high_tsn, MAX_TSN)) { 1718 1.2.2.2 skrll *high_tsn = tsn; 1719 1.2.2.2 skrll } 1720 1.2.2.2 skrll /* See if we have received this one already */ 1721 1.2.2.2 skrll if (SCTP_IS_TSN_PRESENT(asoc->mapping_array, gap)) { 1722 1.2.2.2 skrll sctp_pegs[SCTP_DUPTSN_RECVD]++; 1723 1.2.2.2 skrll if (asoc->numduptsns < SCTP_MAX_DUP_TSNS) { 1724 1.2.2.2 skrll /* Record a dup for the next outbound sack */ 1725 1.2.2.2 skrll asoc->dup_tsns[asoc->numduptsns] = tsn; 1726 1.2.2.2 skrll asoc->numduptsns++; 1727 1.2.2.2 skrll } 1728 1.2.2.2 skrll if (!callout_pending(&asoc->dack_timer.timer)) { 1729 1.2.2.2 skrll /* 1730 1.2.2.2 skrll * By starting the timer we assure that we 1731 1.2.2.2 skrll * WILL sack at the end of the packet 1732 1.2.2.2 skrll * when sctp_sack_check gets called. 1733 1.2.2.2 skrll */ 1734 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, 1735 1.2.2.2 skrll stcb, NULL); 1736 1.2.2.2 skrll } 1737 1.2.2.2 skrll return (0); 1738 1.2.2.2 skrll } 1739 1.2.2.2 skrll /* 1740 1.2.2.2 skrll * Check to see about the GONE flag, duplicates would cause 1741 1.2.2.2 skrll * a sack to be sent up above 1742 1.2.2.2 skrll */ 1743 1.2.2.2 skrll if (stcb && (stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_SOCKET_GONE)) { 1744 1.2.2.2 skrll /* 1745 1.2.2.2 skrll * wait a minute, this guy is gone, there is no 1746 1.2.2.2 skrll * longer a receiver. Send peer an ABORT! 1747 1.2.2.2 skrll */ 1748 1.2.2.2 skrll struct mbuf *op_err; 1749 1.2.2.2 skrll op_err = sctp_generate_invmanparam(SCTP_CAUSE_OUT_OF_RESC); 1750 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, 0, op_err); 1751 1.2.2.2 skrll *abort_flag = 1; 1752 1.2.2.2 skrll return (0); 1753 1.2.2.2 skrll } 1754 1.2.2.2 skrll /* 1755 1.2.2.2 skrll * Now before going further we see if there is room. If NOT then 1756 1.2.2.2 skrll * we MAY let one through only IF this TSN is the one we are 1757 1.2.2.2 skrll * waiting for on a partial delivery API. 1758 1.2.2.2 skrll */ 1759 1.2.2.2 skrll 1760 1.2.2.2 skrll /* now do the tests */ 1761 1.2.2.2 skrll if (((asoc->cnt_on_all_streams + 1762 1.2.2.2 skrll asoc->cnt_on_delivery_queue + 1763 1.2.2.2 skrll asoc->cnt_on_reasm_queue + 1764 1.2.2.2 skrll asoc->cnt_msg_on_sb) > sctp_max_chunks_on_queue) || 1765 1.2.2.2 skrll (((int)asoc->my_rwnd) <= 0)) { 1766 1.2.2.2 skrll /* 1767 1.2.2.2 skrll * When we have NO room in the rwnd we check 1768 1.2.2.2 skrll * to make sure the reader is doing its job... 1769 1.2.2.2 skrll */ 1770 1.2.2.2 skrll if (stcb->sctp_socket->so_rcv.sb_cc) { 1771 1.2.2.2 skrll /* some to read, wake-up */ 1772 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 1773 1.2.2.2 skrll } 1774 1.2.2.2 skrll /* now is it in the mapping array of what we have accepted? */ 1775 1.2.2.2 skrll if (compare_with_wrap(tsn, 1776 1.2.2.2 skrll asoc->highest_tsn_inside_map, MAX_TSN)) { 1777 1.2.2.2 skrll 1778 1.2.2.2 skrll /* Nope not in the valid range dump it */ 1779 1.2.2.2 skrll #ifdef SCTP_DEBUG 1780 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1781 1.2.2.2 skrll printf("My rwnd overrun1:tsn:%lx rwnd %lu sbspace:%ld delq:%d!\n", 1782 1.2.2.2 skrll (u_long)tsn, (u_long)asoc->my_rwnd, 1783 1.2.2.2 skrll sctp_sbspace(&stcb->sctp_socket->so_rcv), 1784 1.2.2.2 skrll stcb->asoc.cnt_on_delivery_queue); 1785 1.2.2.2 skrll } 1786 1.2.2.2 skrll #endif 1787 1.2.2.2 skrll sctp_set_rwnd(stcb, asoc); 1788 1.2.2.2 skrll if ((asoc->cnt_on_all_streams + 1789 1.2.2.2 skrll asoc->cnt_on_delivery_queue + 1790 1.2.2.2 skrll asoc->cnt_on_reasm_queue + 1791 1.2.2.2 skrll asoc->cnt_msg_on_sb) > sctp_max_chunks_on_queue) { 1792 1.2.2.2 skrll sctp_pegs[SCTP_MSGC_DROP]++; 1793 1.2.2.2 skrll } else { 1794 1.2.2.2 skrll sctp_pegs[SCTP_RWND_DROPS]++; 1795 1.2.2.2 skrll } 1796 1.2.2.2 skrll *break_flag = 1; 1797 1.2.2.2 skrll return (0); 1798 1.2.2.2 skrll } 1799 1.2.2.2 skrll } 1800 1.2.2.2 skrll strmno = ntohs(ch->dp.stream_id); 1801 1.2.2.2 skrll if (strmno >= asoc->streamincnt) { 1802 1.2.2.2 skrll struct sctp_paramhdr *phdr; 1803 1.2.2.2 skrll struct mbuf *mb; 1804 1.2.2.2 skrll 1805 1.2.2.2 skrll MGETHDR(mb, M_DONTWAIT, MT_DATA); 1806 1.2.2.2 skrll if (mb != NULL) { 1807 1.2.2.2 skrll /* add some space up front so prepend will work well */ 1808 1.2.2.2 skrll mb->m_data += sizeof(struct sctp_chunkhdr); 1809 1.2.2.2 skrll phdr = mtod(mb, struct sctp_paramhdr *); 1810 1.2.2.2 skrll /* 1811 1.2.2.2 skrll * Error causes are just param's and this one has 1812 1.2.2.2 skrll * two back to back phdr, one with the error type 1813 1.2.2.2 skrll * and size, the other with the streamid and a rsvd 1814 1.2.2.2 skrll */ 1815 1.2.2.2 skrll mb->m_pkthdr.len = mb->m_len = 1816 1.2.2.2 skrll (sizeof(struct sctp_paramhdr) * 2); 1817 1.2.2.2 skrll phdr->param_type = htons(SCTP_CAUSE_INV_STRM); 1818 1.2.2.2 skrll phdr->param_length = 1819 1.2.2.2 skrll htons(sizeof(struct sctp_paramhdr) * 2); 1820 1.2.2.2 skrll phdr++; 1821 1.2.2.2 skrll /* We insert the stream in the type field */ 1822 1.2.2.2 skrll phdr->param_type = ch->dp.stream_id; 1823 1.2.2.2 skrll /* And set the length to 0 for the rsvd field */ 1824 1.2.2.2 skrll phdr->param_length = 0; 1825 1.2.2.2 skrll sctp_queue_op_err(stcb, mb); 1826 1.2.2.2 skrll } 1827 1.2.2.2 skrll sctp_pegs[SCTP_BAD_STRMNO]++; 1828 1.2.2.2 skrll return (0); 1829 1.2.2.2 skrll } 1830 1.2.2.2 skrll /* 1831 1.2.2.2 skrll * Before we continue lets validate that we are not 1832 1.2.2.2 skrll * being fooled by an evil attacker. We can only 1833 1.2.2.2 skrll * have 4k chunks based on our TSN spread allowed 1834 1.2.2.2 skrll * by the mapping array 512 * 8 bits, so there is 1835 1.2.2.2 skrll * no way our stream sequence numbers could have wrapped. 1836 1.2.2.2 skrll * We of course only validate the FIRST fragment so the 1837 1.2.2.2 skrll * bit must be set. 1838 1.2.2.2 skrll */ 1839 1.2.2.2 skrll strmseq = ntohs(ch->dp.stream_sequence); 1840 1.2.2.2 skrll if ((ch->ch.chunk_flags & SCTP_DATA_FIRST_FRAG) && 1841 1.2.2.2 skrll (ch->ch.chunk_flags & SCTP_DATA_UNORDERED) == 0 && 1842 1.2.2.2 skrll (compare_with_wrap(asoc->strmin[strmno].last_sequence_delivered, 1843 1.2.2.2 skrll strmseq, MAX_SEQ) || 1844 1.2.2.2 skrll asoc->strmin[strmno].last_sequence_delivered == strmseq)) { 1845 1.2.2.2 skrll /* The incoming sseq is behind where we last delivered? */ 1846 1.2.2.2 skrll #ifdef SCTP_DEBUG 1847 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 1848 1.2.2.2 skrll printf("EVIL/Broken-Dup S-SEQ:%d delivered:%d from peer, Abort!\n", 1849 1.2.2.2 skrll strmseq, 1850 1.2.2.2 skrll asoc->strmin[strmno].last_sequence_delivered); 1851 1.2.2.2 skrll } 1852 1.2.2.2 skrll #endif 1853 1.2.2.2 skrll /* 1854 1.2.2.2 skrll * throw it in the stream so it gets cleaned up in 1855 1.2.2.2 skrll * association destruction 1856 1.2.2.2 skrll */ 1857 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 1858 1.2.2.2 skrll if (oper) { 1859 1.2.2.2 skrll struct sctp_paramhdr *ph; 1860 1.2.2.2 skrll u_int32_t *ippp; 1861 1.2.2.2 skrll 1862 1.2.2.2 skrll oper->m_len = sizeof(struct sctp_paramhdr) + 1863 1.2.2.2 skrll sizeof(*ippp); 1864 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 1865 1.2.2.2 skrll ph->param_type = htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 1866 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 1867 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 1868 1.2.2.2 skrll *ippp = htonl(0x20000001); 1869 1.2.2.2 skrll } 1870 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, SCTP_PEER_FAULTY, 1871 1.2.2.2 skrll oper); 1872 1.2.2.2 skrll sctp_pegs[SCTP_BAD_SSN_WRAP]++; 1873 1.2.2.2 skrll *abort_flag = 1; 1874 1.2.2.2 skrll return (0); 1875 1.2.2.2 skrll } 1876 1.2.2.2 skrll 1877 1.2.2.2 skrll the_len = (chk_length-sizeof(struct sctp_data_chunk)); 1878 1.2.2.2 skrll if (last_chunk == 0) { 1879 1.2.2.2 skrll dmbuf = sctp_m_copym(*m, 1880 1.2.2.2 skrll (offset + sizeof(struct sctp_data_chunk)), 1881 1.2.2.2 skrll the_len, M_DONTWAIT); 1882 1.2.2.2 skrll } else { 1883 1.2.2.2 skrll /* We can steal the last chunk */ 1884 1.2.2.2 skrll dmbuf = *m; 1885 1.2.2.2 skrll /* lop off the top part */ 1886 1.2.2.2 skrll m_adj(dmbuf, (offset + sizeof(struct sctp_data_chunk))); 1887 1.2.2.2 skrll if (dmbuf->m_pkthdr.len > the_len) { 1888 1.2.2.2 skrll /* Trim the end round bytes off too */ 1889 1.2.2.2 skrll m_adj(dmbuf, -(dmbuf->m_pkthdr.len-the_len)); 1890 1.2.2.2 skrll } 1891 1.2.2.2 skrll sctp_pegs[SCTP_NO_COPY_IN]++; 1892 1.2.2.2 skrll } 1893 1.2.2.2 skrll if (dmbuf == NULL) { 1894 1.2.2.2 skrll sctp_pegs[SCTP_DROP_NOMEMORY]++; 1895 1.2.2.2 skrll return (0); 1896 1.2.2.2 skrll } 1897 1.2.2.2 skrll if ((ch->ch.chunk_flags & SCTP_DATA_NOT_FRAG) == SCTP_DATA_NOT_FRAG && 1898 1.2.2.2 skrll asoc->fragmented_delivery_inprogress == 0 && 1899 1.2.2.2 skrll TAILQ_EMPTY(&asoc->delivery_queue) && 1900 1.2.2.2 skrll ((ch->ch.chunk_flags & SCTP_DATA_UNORDERED) || 1901 1.2.2.2 skrll ((asoc->strmin[strmno].last_sequence_delivered + 1) == strmseq && 1902 1.2.2.2 skrll TAILQ_EMPTY(&asoc->strmin[strmno].inqueue))) && 1903 1.2.2.2 skrll ((long)(stcb->sctp_socket->so_rcv.sb_hiwat - 1904 1.2.2.2 skrll stcb->sctp_socket->so_rcv.sb_cc) >= (long)the_len)) { 1905 1.2.2.2 skrll /* Candidate for express delivery */ 1906 1.2.2.2 skrll /* 1907 1.2.2.2 skrll * Its not fragmented, 1908 1.2.2.2 skrll * No PD-API is up, 1909 1.2.2.2 skrll * Nothing in the delivery queue, 1910 1.2.2.2 skrll * Its un-ordered OR ordered and the next to deliver AND 1911 1.2.2.2 skrll * nothing else is stuck on the stream queue, 1912 1.2.2.2 skrll * And there is room for it in the socket buffer. 1913 1.2.2.2 skrll * Lets just stuff it up the buffer.... 1914 1.2.2.2 skrll */ 1915 1.2.2.2 skrll 1916 1.2.2.2 skrll struct mbuf *control, *mmm; 1917 1.2.2.2 skrll struct sockaddr_in6 sin6; 1918 1.2.2.2 skrll struct sockaddr_in6 lsa6; 1919 1.2.2.2 skrll const struct sockaddr *to; 1920 1.2.2.2 skrll 1921 1.2.2.2 skrll /* It would be nice to avoid this copy if we could :< */ 1922 1.2.2.2 skrll control = sctp_build_ctl_nchunk(stcb, tsn, 1923 1.2.2.2 skrll ch->dp.protocol_id, 0, strmno, strmseq, 1924 1.2.2.2 skrll ch->ch.chunk_flags); 1925 1.2.2.2 skrll /* XXX need to append PKTHDR to the socket buffer first */ 1926 1.2.2.2 skrll 1927 1.2.2.2 skrll if ((dmbuf->m_flags & M_PKTHDR) == 0) { 1928 1.2.2.2 skrll struct mbuf *tmp; 1929 1.2.2.2 skrll MGETHDR(tmp, M_DONTWAIT, MT_DATA); 1930 1.2.2.2 skrll if (tmp == NULL) { 1931 1.2.2.2 skrll 1932 1.2.2.2 skrll /* no room! */ 1933 1.2.2.2 skrll if (control) { 1934 1.2.2.2 skrll sctp_m_freem(control); 1935 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 1936 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 1937 1.2.2.2 skrll } 1938 1.2.2.2 skrll 1939 1.2.2.2 skrll goto failed_express_del; 1940 1.2.2.2 skrll } 1941 1.2.2.2 skrll tmp->m_pkthdr.len = the_len; 1942 1.2.2.2 skrll tmp->m_len = 0; 1943 1.2.2.2 skrll tmp->m_next = dmbuf; 1944 1.2.2.2 skrll dmbuf = tmp; 1945 1.2.2.2 skrll } 1946 1.2.2.2 skrll to = rtcache_getdst(&net->ro); 1947 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_NEEDS_MAPPED_V4) && 1948 1.2.2.2 skrll to->sa_family == AF_INET) { 1949 1.2.2.2 skrll const struct sockaddr_in *sin; 1950 1.2.2.2 skrll 1951 1.2.2.2 skrll sin = satocsin(to); 1952 1.2.2.3 skrll in6_sin_2_v4mapsin6(sin, &sin6); 1953 1.2.2.2 skrll to = (struct sockaddr *)&sin6; 1954 1.2.2.2 skrll } 1955 1.2.2.2 skrll 1956 1.2.2.2 skrll /* check and strip embedded scope junk */ 1957 1.2.2.2 skrll to = (const struct sockaddr *)sctp_recover_scope((const struct sockaddr_in6 *)to, 1958 1.2.2.2 skrll &lsa6); 1959 1.2.2.2 skrll if (((const struct sockaddr_in *)to)->sin_port == 0) { 1960 1.2.2.2 skrll printf("Huh c, port is %d not net:%p %d?\n", 1961 1.2.2.2 skrll ((const struct sockaddr_in *)to)->sin_port, 1962 1.2.2.2 skrll net, 1963 1.2.2.2 skrll (int)(ntohs(stcb->rport))); 1964 1.2.2.2 skrll /*((struct sockaddr_in *)to)->sin_port = stcb->rport;*/ 1965 1.2.2.2 skrll /* XXX */ 1966 1.2.2.2 skrll } 1967 1.2.2.2 skrll 1968 1.2.2.2 skrll mmm = dmbuf; 1969 1.2.2.2 skrll /* Mark the EOR */ 1970 1.2.2.2 skrll while (mmm->m_next != NULL) { 1971 1.2.2.2 skrll mmm = mmm->m_next; 1972 1.2.2.2 skrll } 1973 1.2.2.2 skrll mmm->m_flags |= M_EOR; 1974 1.2.2.2 skrll if (compare_with_wrap(tsn, asoc->highest_tsn_inside_map, MAX_TSN)) { 1975 1.2.2.2 skrll /* we have a new high score */ 1976 1.2.2.2 skrll asoc->highest_tsn_inside_map = tsn; 1977 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 1978 1.2.2.2 skrll sctp_log_map(0, 1, asoc->highest_tsn_inside_map, SCTP_MAP_SLIDE_RESULT); 1979 1.2.2.2 skrll #endif 1980 1.2.2.2 skrll } 1981 1.2.2.2 skrll SCTP_TCB_UNLOCK(stcb); 1982 1.2.2.2 skrll SCTP_INP_WLOCK(stcb->sctp_ep); 1983 1.2.2.2 skrll SCTP_TCB_LOCK(stcb); 1984 1.2.2.2 skrll if (!sbappendaddr_nocheck(&stcb->sctp_socket->so_rcv, to, dmbuf, 1985 1.2.2.2 skrll control, stcb->asoc.my_vtag, stcb->sctp_ep)) { 1986 1.2.2.2 skrll if (control) { 1987 1.2.2.2 skrll sctp_m_freem(control); 1988 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len -= 1989 1.2.2.2 skrll CMSG_LEN(sizeof(struct sctp_sndrcvinfo)); 1990 1.2.2.2 skrll } 1991 1.2.2.2 skrll sctp_m_freem(dmbuf); 1992 1.2.2.2 skrll goto failed_express_del; 1993 1.2.2.2 skrll } 1994 1.2.2.2 skrll if ((stcb->sctp_ep->sctp_flags & SCTP_PCB_FLAGS_IN_TCPPOOL) == 0) { 1995 1.2.2.2 skrll if (sctp_add_to_socket_q(stcb->sctp_ep, stcb)) { 1996 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += sizeof(struct mbuf); 1997 1.2.2.2 skrll } 1998 1.2.2.2 skrll } else { 1999 1.2.2.2 skrll stcb->asoc.my_rwnd_control_len += sizeof(struct mbuf); 2000 1.2.2.2 skrll } 2001 1.2.2.2 skrll SCTP_INP_WUNLOCK(stcb->sctp_ep); 2002 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 2003 1.2.2.2 skrll if ((ch->ch.chunk_flags & SCTP_DATA_UNORDERED) == 0) { 2004 1.2.2.2 skrll 2005 1.2.2.2 skrll /* for ordered, bump what we delivered */ 2006 1.2.2.2 skrll asoc->strmin[strmno].last_sequence_delivered++; 2007 1.2.2.2 skrll } 2008 1.2.2.2 skrll sctp_pegs[SCTP_EXPRESS_ROUTE]++; 2009 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 2010 1.2.2.2 skrll sctp_log_strm_del_alt(tsn, strmseq, 2011 1.2.2.2 skrll SCTP_STR_LOG_FROM_EXPRS_DEL); 2012 1.2.2.2 skrll #endif 2013 1.2.2.2 skrll #ifdef SCTP_DEBUG 2014 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 2015 1.2.2.2 skrll printf("Express Delivery succeeds\n"); 2016 1.2.2.2 skrll } 2017 1.2.2.2 skrll #endif 2018 1.2.2.2 skrll goto finish_express_del; 2019 1.2.2.2 skrll } 2020 1.2.2.2 skrll 2021 1.2.2.2 skrll failed_express_del: 2022 1.2.2.2 skrll /* If we reach here this is a new chunk */ 2023 1.2.2.2 skrll chk = (struct sctp_tmit_chunk *)SCTP_ZONE_GET(sctppcbinfo.ipi_zone_chunk); 2024 1.2.2.2 skrll if (chk == NULL) { 2025 1.2.2.2 skrll /* No memory so we drop the chunk */ 2026 1.2.2.2 skrll sctp_pegs[SCTP_DROP_NOMEMORY]++; 2027 1.2.2.2 skrll if (last_chunk == 0) { 2028 1.2.2.2 skrll /* we copied it, free the copy */ 2029 1.2.2.2 skrll sctp_m_freem(dmbuf); 2030 1.2.2.2 skrll } 2031 1.2.2.2 skrll return (0); 2032 1.2.2.2 skrll } 2033 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk++; 2034 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 2035 1.2.2.2 skrll chk->rec.data.TSN_seq = tsn; 2036 1.2.2.2 skrll chk->rec.data.stream_seq = strmseq; 2037 1.2.2.2 skrll chk->rec.data.stream_number = strmno; 2038 1.2.2.2 skrll chk->rec.data.payloadtype = ch->dp.protocol_id; 2039 1.2.2.2 skrll chk->rec.data.context = 0; 2040 1.2.2.2 skrll chk->rec.data.doing_fast_retransmit = 0; 2041 1.2.2.2 skrll chk->rec.data.rcv_flags = ch->ch.chunk_flags; 2042 1.2.2.2 skrll chk->asoc = asoc; 2043 1.2.2.2 skrll chk->send_size = the_len; 2044 1.2.2.2 skrll chk->whoTo = net; 2045 1.2.2.2 skrll net->ref_count++; 2046 1.2.2.2 skrll chk->data = dmbuf; 2047 1.2.2.2 skrll 2048 1.2.2.2 skrll 2049 1.2.2.2 skrll /* Mark it as received */ 2050 1.2.2.2 skrll /* Now queue it where it belongs */ 2051 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_NOT_FRAG) == 2052 1.2.2.2 skrll SCTP_DATA_NOT_FRAG) { 2053 1.2.2.2 skrll /* First a sanity check */ 2054 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 2055 1.2.2.2 skrll /* 2056 1.2.2.2 skrll * Ok, we have a fragmented delivery in progress 2057 1.2.2.2 skrll * if this chunk is next to deliver OR belongs in 2058 1.2.2.2 skrll * our view to the reassembly, the peer is evil 2059 1.2.2.2 skrll * or broken. 2060 1.2.2.2 skrll */ 2061 1.2.2.2 skrll u_int32_t estimate_tsn; 2062 1.2.2.2 skrll estimate_tsn = asoc->tsn_last_delivered + 1; 2063 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->reasmqueue) && 2064 1.2.2.2 skrll (estimate_tsn == chk->rec.data.TSN_seq)) { 2065 1.2.2.2 skrll /* Evil/Broke peer */ 2066 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 2067 1.2.2.2 skrll if (oper) { 2068 1.2.2.2 skrll struct sctp_paramhdr *ph; 2069 1.2.2.2 skrll u_int32_t *ippp; 2070 1.2.2.2 skrll 2071 1.2.2.2 skrll oper->m_len = 2072 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 2073 1.2.2.2 skrll sizeof(*ippp); 2074 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 2075 1.2.2.2 skrll ph->param_type = 2076 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 2077 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 2078 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 2079 1.2.2.2 skrll *ippp = htonl(0x20000002); 2080 1.2.2.2 skrll } 2081 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, 2082 1.2.2.2 skrll SCTP_PEER_FAULTY, oper); 2083 1.2.2.2 skrll 2084 1.2.2.2 skrll *abort_flag = 1; 2085 1.2.2.2 skrll sctp_pegs[SCTP_DROP_FRAG]++; 2086 1.2.2.2 skrll return (0); 2087 1.2.2.2 skrll } else { 2088 1.2.2.2 skrll if (sctp_does_chk_belong_to_reasm(asoc, chk)) { 2089 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 2090 1.2.2.2 skrll if (oper) { 2091 1.2.2.2 skrll struct sctp_paramhdr *ph; 2092 1.2.2.2 skrll u_int32_t *ippp; 2093 1.2.2.2 skrll 2094 1.2.2.2 skrll oper->m_len = 2095 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 2096 1.2.2.2 skrll sizeof(*ippp); 2097 1.2.2.2 skrll ph = mtod(oper, 2098 1.2.2.2 skrll struct sctp_paramhdr *); 2099 1.2.2.2 skrll ph->param_type = 2100 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 2101 1.2.2.2 skrll ph->param_length = 2102 1.2.2.2 skrll htons(oper->m_len); 2103 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 2104 1.2.2.2 skrll *ippp = htonl(0x20000003); 2105 1.2.2.2 skrll } 2106 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 2107 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 2108 1.2.2.2 skrll 2109 1.2.2.2 skrll *abort_flag = 1; 2110 1.2.2.2 skrll sctp_pegs[SCTP_DROP_FRAG]++; 2111 1.2.2.2 skrll return (0); 2112 1.2.2.2 skrll } 2113 1.2.2.2 skrll } 2114 1.2.2.2 skrll } else { 2115 1.2.2.2 skrll if (!TAILQ_EMPTY(&asoc->reasmqueue)) { 2116 1.2.2.2 skrll /* 2117 1.2.2.2 skrll * Reassembly queue is NOT empty 2118 1.2.2.2 skrll * validate that this chk does not need to 2119 1.2.2.2 skrll * be in reasembly queue. If it does then 2120 1.2.2.2 skrll * our peer is broken or evil. 2121 1.2.2.2 skrll */ 2122 1.2.2.2 skrll if (sctp_does_chk_belong_to_reasm(asoc, chk)) { 2123 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 2124 1.2.2.2 skrll if (oper) { 2125 1.2.2.2 skrll struct sctp_paramhdr *ph; 2126 1.2.2.2 skrll u_int32_t *ippp; 2127 1.2.2.2 skrll 2128 1.2.2.2 skrll oper->m_len = 2129 1.2.2.2 skrll sizeof(struct sctp_paramhdr) + 2130 1.2.2.2 skrll sizeof(*ippp); 2131 1.2.2.2 skrll ph = mtod(oper, 2132 1.2.2.2 skrll struct sctp_paramhdr *); 2133 1.2.2.2 skrll ph->param_type = 2134 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 2135 1.2.2.2 skrll ph->param_length = 2136 1.2.2.2 skrll htons(oper->m_len); 2137 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 2138 1.2.2.2 skrll *ippp = htonl(0x20000004); 2139 1.2.2.2 skrll } 2140 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, 2141 1.2.2.2 skrll stcb, SCTP_PEER_FAULTY, oper); 2142 1.2.2.2 skrll 2143 1.2.2.2 skrll *abort_flag = 1; 2144 1.2.2.2 skrll sctp_pegs[SCTP_DROP_FRAG]++; 2145 1.2.2.2 skrll return (0); 2146 1.2.2.2 skrll } 2147 1.2.2.2 skrll } 2148 1.2.2.2 skrll } 2149 1.2.2.2 skrll if (chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED) { 2150 1.2.2.2 skrll /* queue directly into socket buffer */ 2151 1.2.2.2 skrll sctp_deliver_data(stcb, asoc, chk, 0); 2152 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 2153 1.2.2.2 skrll } else { 2154 1.2.2.2 skrll /* Special check for when streams are resetting. 2155 1.2.2.2 skrll * We could be more smart about this and check the 2156 1.2.2.2 skrll * actual stream to see if it is not being reset.. that 2157 1.2.2.2 skrll * way we would not create a HOLB when amongst streams 2158 1.2.2.2 skrll * being reset and those not being reset. 2159 1.2.2.2 skrll * 2160 1.2.2.2 skrll * We take complete messages that have a stream reset 2161 1.2.2.2 skrll * intervening (aka the TSN is after where our cum-ack needs 2162 1.2.2.2 skrll * to be) off and put them on a pending_reply_queue. The 2163 1.2.2.2 skrll * reassembly ones we do not have to worry about since 2164 1.2.2.2 skrll * they are all sorted and proceessed by TSN order. It 2165 1.2.2.2 skrll * is only the singletons I must worry about. 2166 1.2.2.2 skrll */ 2167 1.2.2.2 skrll if ((asoc->pending_reply) && 2168 1.2.2.2 skrll ((compare_with_wrap(tsn, ntohl(asoc->pending_reply->reset_at_tsn), MAX_TSN)) || 2169 1.2.2.2 skrll (tsn == ntohl(asoc->pending_reply->reset_at_tsn))) 2170 1.2.2.2 skrll ) { 2171 1.2.2.2 skrll /* yep its past where we need to reset... go ahead and 2172 1.2.2.2 skrll * queue it. 2173 1.2.2.2 skrll */ 2174 1.2.2.2 skrll TAILQ_INSERT_TAIL(&asoc->pending_reply_queue , chk, sctp_next); 2175 1.2.2.2 skrll } else { 2176 1.2.2.2 skrll sctp_queue_data_to_stream(stcb, asoc, chk, abort_flag); 2177 1.2.2.2 skrll } 2178 1.2.2.2 skrll } 2179 1.2.2.2 skrll } else { 2180 1.2.2.2 skrll /* Into the re-assembly queue */ 2181 1.2.2.2 skrll sctp_queue_data_for_reasm(stcb, asoc, chk, abort_flag); 2182 1.2.2.2 skrll if (*abort_flag) { 2183 1.2.2.2 skrll sctp_pegs[SCTP_DROP_FRAG]++; 2184 1.2.2.2 skrll return (0); 2185 1.2.2.2 skrll } 2186 1.2.2.2 skrll } 2187 1.2.2.2 skrll if (compare_with_wrap(tsn, asoc->highest_tsn_inside_map, MAX_TSN)) { 2188 1.2.2.2 skrll /* we have a new high score */ 2189 1.2.2.2 skrll asoc->highest_tsn_inside_map = tsn; 2190 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2191 1.2.2.2 skrll sctp_log_map(0, 2, asoc->highest_tsn_inside_map, SCTP_MAP_SLIDE_RESULT); 2192 1.2.2.2 skrll #endif 2193 1.2.2.2 skrll } 2194 1.2.2.2 skrll finish_express_del: 2195 1.2.2.2 skrll if (last_chunk) { 2196 1.2.2.2 skrll *m = NULL; 2197 1.2.2.2 skrll } 2198 1.2.2.2 skrll sctp_pegs[SCTP_PEG_TSNS_RCVD]++; 2199 1.2.2.2 skrll /* Set it present please */ 2200 1.2.2.2 skrll #ifdef SCTP_STR_LOGGING 2201 1.2.2.2 skrll sctp_log_strm_del_alt(tsn, strmseq, SCTP_STR_LOG_FROM_MARK_TSN); 2202 1.2.2.2 skrll #endif 2203 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2204 1.2.2.2 skrll sctp_log_map(asoc->mapping_array_base_tsn, asoc->cumulative_tsn, 2205 1.2.2.2 skrll asoc->highest_tsn_inside_map, SCTP_MAP_PREPARE_SLIDE); 2206 1.2.2.2 skrll #endif 2207 1.2.2.2 skrll SCTP_SET_TSN_PRESENT(asoc->mapping_array, gap); 2208 1.2.2.2 skrll return (1); 2209 1.2.2.2 skrll } 2210 1.2.2.2 skrll 2211 1.2.2.2 skrll void 2212 1.2.2.2 skrll sctp_sack_check(struct sctp_tcb *stcb, int ok_to_sack, int was_a_gap, int *abort_flag) 2213 1.2.2.2 skrll { 2214 1.2.2.2 skrll /* 2215 1.2.2.2 skrll * Now we also need to check the mapping array in a couple of ways. 2216 1.2.2.2 skrll * 1) Did we move the cum-ack point? 2217 1.2.2.2 skrll */ 2218 1.2.2.2 skrll struct sctp_association *asoc; 2219 1.2.2.2 skrll int i, at; 2220 1.2.2.2 skrll int m_size, all_ones; 2221 1.2.2.2 skrll int slide_from, slide_end, lgap, distance; 2222 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2223 1.2.2.2 skrll uint32_t old_cumack, old_base, old_highest; 2224 1.2.2.2 skrll unsigned char aux_array[64]; 2225 1.2.2.2 skrll #endif 2226 1.2.2.2 skrll 2227 1.2.2.2 skrll asoc = &stcb->asoc; 2228 1.2.2.2 skrll at = 0; 2229 1.2.2.2 skrll 2230 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2231 1.2.2.2 skrll old_cumack = asoc->cumulative_tsn; 2232 1.2.2.2 skrll old_base = asoc->mapping_array_base_tsn; 2233 1.2.2.2 skrll old_highest = asoc->highest_tsn_inside_map; 2234 1.2.2.2 skrll if (asoc->mapping_array_size < 64) 2235 1.2.2.2 skrll memcpy(aux_array, asoc->mapping_array, 2236 1.2.2.2 skrll asoc->mapping_array_size); 2237 1.2.2.2 skrll else 2238 1.2.2.2 skrll memcpy(aux_array, asoc->mapping_array, 64); 2239 1.2.2.2 skrll #endif 2240 1.2.2.2 skrll 2241 1.2.2.2 skrll /* 2242 1.2.2.2 skrll * We could probably improve this a small bit by calculating the 2243 1.2.2.2 skrll * offset of the current cum-ack as the starting point. 2244 1.2.2.2 skrll */ 2245 1.2.2.2 skrll all_ones = 1; 2246 1.2.2.2 skrll m_size = stcb->asoc.mapping_array_size << 3; 2247 1.2.2.2 skrll for (i = 0; i < m_size; i++) { 2248 1.2.2.2 skrll if (!SCTP_IS_TSN_PRESENT(asoc->mapping_array, i)) { 2249 1.2.2.2 skrll /* 2250 1.2.2.2 skrll * Ok we found the first place that we are 2251 1.2.2.2 skrll * missing a TSN. 2252 1.2.2.2 skrll */ 2253 1.2.2.2 skrll at = i; 2254 1.2.2.2 skrll all_ones = 0; 2255 1.2.2.2 skrll asoc->cumulative_tsn = asoc->mapping_array_base_tsn + 2256 1.2.2.2 skrll (i - 1); 2257 1.2.2.2 skrll break; 2258 1.2.2.2 skrll } 2259 1.2.2.2 skrll } 2260 1.2.2.2 skrll if (compare_with_wrap(asoc->cumulative_tsn, 2261 1.2.2.2 skrll asoc->highest_tsn_inside_map, 2262 1.2.2.2 skrll MAX_TSN)) { 2263 1.2.2.2 skrll panic("huh, cumack greater than high-tsn in map"); 2264 1.2.2.2 skrll } 2265 1.2.2.2 skrll if (all_ones || 2266 1.2.2.2 skrll (asoc->cumulative_tsn == asoc->highest_tsn_inside_map && at >= 8)) { 2267 1.2.2.2 skrll /* The complete array was completed by a single FR */ 2268 1.2.2.2 skrll /* higest becomes the cum-ack */ 2269 1.2.2.2 skrll int clr; 2270 1.2.2.2 skrll asoc->cumulative_tsn = asoc->highest_tsn_inside_map; 2271 1.2.2.2 skrll /* clear the array */ 2272 1.2.2.2 skrll if (all_ones) 2273 1.2.2.2 skrll clr = asoc->mapping_array_size; 2274 1.2.2.2 skrll else { 2275 1.2.2.2 skrll clr = (at >> 3) + 1; 2276 1.2.2.2 skrll /* 2277 1.2.2.2 skrll * this should be the allones case 2278 1.2.2.2 skrll * but just in case :> 2279 1.2.2.2 skrll */ 2280 1.2.2.2 skrll if (clr > asoc->mapping_array_size) 2281 1.2.2.2 skrll clr = asoc->mapping_array_size; 2282 1.2.2.2 skrll } 2283 1.2.2.2 skrll memset(asoc->mapping_array, 0, clr); 2284 1.2.2.2 skrll /* base becomes one ahead of the cum-ack */ 2285 1.2.2.2 skrll asoc->mapping_array_base_tsn = asoc->cumulative_tsn + 1; 2286 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2287 1.2.2.2 skrll sctp_log_map(old_base, old_cumack, old_highest, 2288 1.2.2.2 skrll SCTP_MAP_PREPARE_SLIDE); 2289 1.2.2.2 skrll sctp_log_map(asoc->mapping_array_base_tsn, asoc->cumulative_tsn, 2290 1.2.2.2 skrll asoc->highest_tsn_inside_map, SCTP_MAP_SLIDE_CLEARED); 2291 1.2.2.2 skrll #endif 2292 1.2.2.2 skrll } else if (at >= 8) { 2293 1.2.2.2 skrll /* we can slide the mapping array down */ 2294 1.2.2.2 skrll /* Calculate the new byte postion we can move down */ 2295 1.2.2.2 skrll slide_from = at >> 3; 2296 1.2.2.2 skrll /* now calculate the ceiling of the move using our highest TSN value */ 2297 1.2.2.2 skrll if (asoc->highest_tsn_inside_map >= asoc->mapping_array_base_tsn) { 2298 1.2.2.2 skrll lgap = asoc->highest_tsn_inside_map - 2299 1.2.2.2 skrll asoc->mapping_array_base_tsn; 2300 1.2.2.2 skrll } else { 2301 1.2.2.2 skrll lgap = (MAX_TSN - asoc->mapping_array_base_tsn) + 2302 1.2.2.2 skrll asoc->highest_tsn_inside_map + 1; 2303 1.2.2.2 skrll } 2304 1.2.2.2 skrll slide_end = lgap >> 3; 2305 1.2.2.2 skrll if (slide_end < slide_from) { 2306 1.2.2.2 skrll panic("impossible slide"); 2307 1.2.2.2 skrll } 2308 1.2.2.2 skrll distance = (slide_end-slide_from) + 1; 2309 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2310 1.2.2.2 skrll sctp_log_map(old_base, old_cumack, old_highest, 2311 1.2.2.2 skrll SCTP_MAP_PREPARE_SLIDE); 2312 1.2.2.2 skrll sctp_log_map((uint32_t)slide_from, (uint32_t)slide_end, 2313 1.2.2.2 skrll (uint32_t)lgap, SCTP_MAP_SLIDE_FROM); 2314 1.2.2.2 skrll #endif 2315 1.2.2.2 skrll if (distance + slide_from > asoc->mapping_array_size || 2316 1.2.2.2 skrll distance < 0) { 2317 1.2.2.2 skrll #ifdef SCTP_DEBUG 2318 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 2319 1.2.2.2 skrll printf("Ugh bad addition.. you can't hrumpp!\n"); 2320 1.2.2.2 skrll } 2321 1.2.2.2 skrll #endif 2322 1.2.2.2 skrll /* 2323 1.2.2.2 skrll * Here we do NOT slide forward the array so that 2324 1.2.2.2 skrll * hopefully when more data comes in to fill it up 2325 1.2.2.2 skrll * we will be able to slide it forward. Really 2326 1.2.2.2 skrll * I don't think this should happen :-0 2327 1.2.2.2 skrll */ 2328 1.2.2.2 skrll 2329 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2330 1.2.2.2 skrll sctp_log_map((uint32_t)distance, (uint32_t)slide_from, 2331 1.2.2.2 skrll (uint32_t)asoc->mapping_array_size, 2332 1.2.2.2 skrll SCTP_MAP_SLIDE_NONE); 2333 1.2.2.2 skrll #endif 2334 1.2.2.2 skrll } else { 2335 1.2.2.2 skrll int ii; 2336 1.2.2.2 skrll for (ii = 0; ii < distance; ii++) { 2337 1.2.2.2 skrll asoc->mapping_array[ii] = 2338 1.2.2.2 skrll asoc->mapping_array[slide_from + ii]; 2339 1.2.2.2 skrll } 2340 1.2.2.2 skrll for (ii = distance;ii <= slide_end; ii++) { 2341 1.2.2.2 skrll asoc->mapping_array[ii] = 0; 2342 1.2.2.2 skrll } 2343 1.2.2.2 skrll asoc->mapping_array_base_tsn += (slide_from << 3); 2344 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 2345 1.2.2.2 skrll sctp_log_map(asoc->mapping_array_base_tsn, 2346 1.2.2.2 skrll asoc->cumulative_tsn, asoc->highest_tsn_inside_map, 2347 1.2.2.2 skrll SCTP_MAP_SLIDE_RESULT); 2348 1.2.2.2 skrll #endif 2349 1.2.2.2 skrll } 2350 1.2.2.2 skrll } 2351 1.2.2.2 skrll 2352 1.2.2.2 skrll /* check the special flag for stream resets */ 2353 1.2.2.2 skrll if ((asoc->pending_reply) && 2354 1.2.2.2 skrll ((compare_with_wrap((asoc->cumulative_tsn+1), ntohl(asoc->pending_reply->reset_at_tsn), MAX_TSN)) || 2355 1.2.2.2 skrll ((asoc->cumulative_tsn+1) == ntohl(asoc->pending_reply->reset_at_tsn))) 2356 1.2.2.2 skrll ) { 2357 1.2.2.2 skrll /* we have finished working through the backlogged TSN's now 2358 1.2.2.2 skrll * time to reset streams. 2359 1.2.2.2 skrll * 1: call reset function. 2360 1.2.2.2 skrll * 2: free pending_reply space 2361 1.2.2.2 skrll * 3: distribute any chunks in pending_reply_queue. 2362 1.2.2.2 skrll */ 2363 1.2.2.2 skrll struct sctp_tmit_chunk *chk; 2364 1.2.2.2 skrll sctp_handle_stream_reset_response(stcb, asoc->pending_reply); 2365 1.2.2.2 skrll free(asoc->pending_reply, M_PCB); 2366 1.2.2.2 skrll asoc->pending_reply = NULL; 2367 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->pending_reply_queue); 2368 1.2.2.2 skrll while (chk) { 2369 1.2.2.2 skrll TAILQ_REMOVE(&asoc->pending_reply_queue, chk, sctp_next); 2370 1.2.2.2 skrll sctp_queue_data_to_stream(stcb, asoc, chk, abort_flag); 2371 1.2.2.2 skrll if (*abort_flag) { 2372 1.2.2.2 skrll return; 2373 1.2.2.2 skrll } 2374 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->pending_reply_queue); 2375 1.2.2.2 skrll } 2376 1.2.2.2 skrll } 2377 1.2.2.2 skrll /* 2378 1.2.2.2 skrll * Now we need to see if we need to queue a sack or just start 2379 1.2.2.2 skrll * the timer (if allowed). 2380 1.2.2.2 skrll */ 2381 1.2.2.2 skrll if (ok_to_sack) { 2382 1.2.2.2 skrll if (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_SENT) { 2383 1.2.2.2 skrll /* 2384 1.2.2.2 skrll * Ok special case, in SHUTDOWN-SENT case. 2385 1.2.2.2 skrll * here we maker sure SACK timer is off and 2386 1.2.2.2 skrll * instead send a SHUTDOWN and a SACK 2387 1.2.2.2 skrll */ 2388 1.2.2.2 skrll if (callout_pending(&stcb->asoc.dack_timer.timer)) { 2389 1.2.2.2 skrll sctp_timer_stop(SCTP_TIMER_TYPE_RECV, 2390 1.2.2.2 skrll stcb->sctp_ep, stcb, NULL); 2391 1.2.2.2 skrll } 2392 1.2.2.2 skrll #ifdef SCTP_DEBUG 2393 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_OUTPUT4) { 2394 1.2.2.2 skrll printf("%s:%d sends a shutdown\n", 2395 1.2.2.2 skrll __FILE__, 2396 1.2.2.2 skrll __LINE__ 2397 1.2.2.2 skrll ); 2398 1.2.2.2 skrll } 2399 1.2.2.2 skrll #endif 2400 1.2.2.2 skrll sctp_send_shutdown(stcb, stcb->asoc.primary_destination); 2401 1.2.2.2 skrll sctp_send_sack(stcb); 2402 1.2.2.2 skrll } else { 2403 1.2.2.2 skrll int is_a_gap; 2404 1.2.2.2 skrll /* is there a gap now ? */ 2405 1.2.2.2 skrll is_a_gap = compare_with_wrap(stcb->asoc.highest_tsn_inside_map, 2406 1.2.2.2 skrll stcb->asoc.cumulative_tsn, MAX_TSN); 2407 1.2.2.2 skrll if ((stcb->asoc.first_ack_sent == 0) || /* First time we send a sack */ 2408 1.2.2.2 skrll ((was_a_gap) && (is_a_gap == 0)) || /* was a gap, but no longer is one */ 2409 1.2.2.2 skrll (stcb->asoc.numduptsns) || /* we have dup's */ 2410 1.2.2.2 skrll (is_a_gap) || /* is still a gap */ 2411 1.2.2.2 skrll (callout_pending(&stcb->asoc.dack_timer.timer)) /* timer was up . second packet */ 2412 1.2.2.2 skrll ) { 2413 1.2.2.2 skrll /* 2414 1.2.2.2 skrll * Ok we must build a SACK since the timer 2415 1.2.2.2 skrll * is pending, we got our first packet OR 2416 1.2.2.2 skrll * there are gaps or duplicates. 2417 1.2.2.2 skrll */ 2418 1.2.2.2 skrll stcb->asoc.first_ack_sent = 1; 2419 1.2.2.2 skrll sctp_send_sack(stcb); 2420 1.2.2.2 skrll /* The sending will stop the timer */ 2421 1.2.2.2 skrll } else { 2422 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_RECV, 2423 1.2.2.2 skrll stcb->sctp_ep, stcb, NULL); 2424 1.2.2.2 skrll } 2425 1.2.2.2 skrll } 2426 1.2.2.2 skrll } 2427 1.2.2.2 skrll } 2428 1.2.2.2 skrll 2429 1.2.2.2 skrll void 2430 1.2.2.2 skrll sctp_service_queues(struct sctp_tcb *stcb, struct sctp_association *asoc, int hold_locks) 2431 1.2.2.2 skrll { 2432 1.2.2.2 skrll struct sctp_tmit_chunk *chk; 2433 1.2.2.2 skrll int tsize, cntDel; 2434 1.2.2.2 skrll u_int16_t nxt_todel; 2435 1.2.2.2 skrll 2436 1.2.2.2 skrll cntDel = 0; 2437 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 2438 1.2.2.2 skrll sctp_service_reassembly(stcb, asoc, hold_locks); 2439 1.2.2.2 skrll } 2440 1.2.2.2 skrll /* Can we proceed further, i.e. the PD-API is complete */ 2441 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 2442 1.2.2.2 skrll /* no */ 2443 1.2.2.2 skrll return; 2444 1.2.2.2 skrll } 2445 1.2.2.2 skrll 2446 1.2.2.2 skrll /* 2447 1.2.2.2 skrll * Yes, reassembly delivery no longer in progress see if we 2448 1.2.2.2 skrll * have some on the sb hold queue. 2449 1.2.2.2 skrll */ 2450 1.2.2.2 skrll do { 2451 1.2.2.2 skrll if (stcb->sctp_socket->so_rcv.sb_cc >= stcb->sctp_socket->so_rcv.sb_hiwat) { 2452 1.2.2.2 skrll if (cntDel == 0) 2453 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 2454 1.2.2.2 skrll break; 2455 1.2.2.2 skrll } 2456 1.2.2.2 skrll /* If deliver_data says no we must stop */ 2457 1.2.2.2 skrll if (sctp_deliver_data(stcb, asoc, (struct sctp_tmit_chunk *)NULL, hold_locks) == 0) 2458 1.2.2.2 skrll break; 2459 1.2.2.2 skrll cntDel++; 2460 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->delivery_queue); 2461 1.2.2.2 skrll } while (chk); 2462 1.2.2.2 skrll if (cntDel) { 2463 1.2.2.2 skrll sctp_sorwakeup(stcb->sctp_ep, stcb->sctp_socket); 2464 1.2.2.2 skrll } 2465 1.2.2.2 skrll /* 2466 1.2.2.2 skrll * Now is there some other chunk I can deliver 2467 1.2.2.2 skrll * from the reassembly queue. 2468 1.2.2.2 skrll */ 2469 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 2470 1.2.2.2 skrll if (chk == NULL) { 2471 1.2.2.2 skrll asoc->size_on_reasm_queue = 0; 2472 1.2.2.2 skrll asoc->cnt_on_reasm_queue = 0; 2473 1.2.2.2 skrll return; 2474 1.2.2.2 skrll } 2475 1.2.2.2 skrll nxt_todel = asoc->strmin[chk->rec.data.stream_number].last_sequence_delivered + 1; 2476 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG) && 2477 1.2.2.2 skrll ((nxt_todel == chk->rec.data.stream_seq) || 2478 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED))) { 2479 1.2.2.2 skrll /* 2480 1.2.2.2 skrll * Yep the first one is here. We setup to 2481 1.2.2.2 skrll * start reception, by backing down the TSN 2482 1.2.2.2 skrll * just in case we can't deliver. 2483 1.2.2.2 skrll */ 2484 1.2.2.2 skrll 2485 1.2.2.2 skrll /* 2486 1.2.2.2 skrll * Before we start though either all of the 2487 1.2.2.2 skrll * message should be here or 1/4 the socket buffer 2488 1.2.2.2 skrll * max or nothing on the delivery queue and something 2489 1.2.2.2 skrll * can be delivered. 2490 1.2.2.2 skrll */ 2491 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->delivery_queue) && 2492 1.2.2.2 skrll (sctp_is_all_msg_on_reasm(asoc, &tsize) || 2493 1.2.2.2 skrll (asoc->size_on_reasm_queue >= 2494 1.2.2.2 skrll (stcb->sctp_socket->so_rcv.sb_hiwat >> 2) && tsize))) { 2495 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 1; 2496 1.2.2.2 skrll asoc->tsn_last_delivered = chk->rec.data.TSN_seq-1; 2497 1.2.2.2 skrll asoc->str_of_pdapi = chk->rec.data.stream_number; 2498 1.2.2.2 skrll asoc->ssn_of_pdapi = chk->rec.data.stream_seq; 2499 1.2.2.2 skrll asoc->fragment_flags = chk->rec.data.rcv_flags; 2500 1.2.2.2 skrll sctp_service_reassembly(stcb, asoc, hold_locks); 2501 1.2.2.2 skrll } 2502 1.2.2.2 skrll } 2503 1.2.2.2 skrll } 2504 1.2.2.2 skrll 2505 1.2.2.2 skrll int 2506 1.2.2.2 skrll sctp_process_data(struct mbuf **mm, int iphlen, int *offset, int length, 2507 1.2.2.2 skrll struct sctphdr *sh, struct sctp_inpcb *inp, struct sctp_tcb *stcb, 2508 1.2.2.2 skrll struct sctp_nets *net, u_int32_t *high_tsn) 2509 1.2.2.2 skrll { 2510 1.2.2.2 skrll struct sctp_data_chunk *ch, chunk_buf; 2511 1.2.2.2 skrll struct sctp_association *asoc; 2512 1.2.2.2 skrll int num_chunks = 0; /* number of control chunks processed */ 2513 1.2.2.2 skrll int chk_length, break_flag, last_chunk; 2514 1.2.2.2 skrll int abort_flag = 0, was_a_gap = 0; 2515 1.2.2.2 skrll struct mbuf *m; 2516 1.2.2.2 skrll 2517 1.2.2.2 skrll /* set the rwnd */ 2518 1.2.2.2 skrll sctp_set_rwnd(stcb, &stcb->asoc); 2519 1.2.2.2 skrll 2520 1.2.2.2 skrll m = *mm; 2521 1.2.2.2 skrll asoc = &stcb->asoc; 2522 1.2.2.2 skrll if (compare_with_wrap(stcb->asoc.highest_tsn_inside_map, 2523 1.2.2.2 skrll stcb->asoc.cumulative_tsn, MAX_TSN)) { 2524 1.2.2.2 skrll /* there was a gap before this data was processed */ 2525 1.2.2.2 skrll was_a_gap = 1; 2526 1.2.2.2 skrll } 2527 1.2.2.2 skrll /* 2528 1.2.2.2 skrll * setup where we got the last DATA packet from for 2529 1.2.2.2 skrll * any SACK that may need to go out. Don't bump 2530 1.2.2.2 skrll * the net. This is done ONLY when a chunk 2531 1.2.2.2 skrll * is assigned. 2532 1.2.2.2 skrll */ 2533 1.2.2.2 skrll asoc->last_data_chunk_from = net; 2534 1.2.2.2 skrll 2535 1.2.2.2 skrll /* 2536 1.2.2.2 skrll * Now before we proceed we must figure out if this 2537 1.2.2.2 skrll * is a wasted cluster... i.e. it is a small packet 2538 1.2.2.2 skrll * sent in and yet the driver underneath allocated a 2539 1.2.2.2 skrll * full cluster for it. If so we must copy it to a 2540 1.2.2.2 skrll * smaller mbuf and free up the cluster mbuf. This 2541 1.2.2.2 skrll * will help with cluster starvation. 2542 1.2.2.2 skrll */ 2543 1.2.2.2 skrll if (m->m_len < (long)MHLEN && m->m_next == NULL) { 2544 1.2.2.2 skrll /* we only handle mbufs that are singletons.. not chains */ 2545 1.2.2.2 skrll MGET(m, M_DONTWAIT, MT_DATA); 2546 1.2.2.2 skrll if (m) { 2547 1.2.2.2 skrll /* ok lets see if we can copy the data up */ 2548 1.2.2.2 skrll vaddr_t *from, *to; 2549 1.2.2.2 skrll 2550 1.2.2.2 skrll if ((*mm)->m_flags & M_PKTHDR) { 2551 1.2.2.2 skrll /* got to copy the header first */ 2552 1.2.2.2 skrll #ifdef __APPLE__ 2553 1.2.2.2 skrll M_COPY_PKTHDR(m, (*mm)); 2554 1.2.2.2 skrll #else 2555 1.2.2.2 skrll M_MOVE_PKTHDR(m, (*mm)); 2556 1.2.2.2 skrll #endif 2557 1.2.2.2 skrll } 2558 1.2.2.2 skrll /* get the pointers and copy */ 2559 1.2.2.2 skrll to = mtod(m, vaddr_t *); 2560 1.2.2.2 skrll from = mtod((*mm), vaddr_t *); 2561 1.2.2.2 skrll memcpy(to, from, (*mm)->m_len); 2562 1.2.2.2 skrll /* copy the length and free up the old */ 2563 1.2.2.2 skrll m->m_len = (*mm)->m_len; 2564 1.2.2.2 skrll sctp_m_freem(*mm); 2565 1.2.2.2 skrll /* sucess, back copy */ 2566 1.2.2.2 skrll *mm = m; 2567 1.2.2.2 skrll } else { 2568 1.2.2.2 skrll /* We are in trouble in the mbuf world .. yikes */ 2569 1.2.2.2 skrll m = *mm; 2570 1.2.2.2 skrll } 2571 1.2.2.2 skrll } 2572 1.2.2.2 skrll /* get pointer to the first chunk header */ 2573 1.2.2.2 skrll ch = (struct sctp_data_chunk *)sctp_m_getptr(m, *offset, 2574 1.2.2.2 skrll sizeof(chunk_buf), (u_int8_t *)&chunk_buf); 2575 1.2.2.2 skrll if (ch == NULL) { 2576 1.2.2.2 skrll printf(" ... its short\n"); 2577 1.2.2.2 skrll return (1); 2578 1.2.2.2 skrll } 2579 1.2.2.2 skrll /* 2580 1.2.2.2 skrll * process all DATA chunks... 2581 1.2.2.2 skrll */ 2582 1.2.2.2 skrll 2583 1.2.2.2 skrll #ifdef SCTP_DEBUG 2584 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INPUT1) { 2585 1.2.2.2 skrll printf("In process data off:%d length:%d iphlen:%d ch->type:%d\n", 2586 1.2.2.2 skrll *offset, length, iphlen, (int)ch->ch.chunk_type); 2587 1.2.2.2 skrll } 2588 1.2.2.2 skrll #endif 2589 1.2.2.2 skrll 2590 1.2.2.2 skrll *high_tsn = asoc->cumulative_tsn; 2591 1.2.2.2 skrll break_flag = 0; 2592 1.2.2.2 skrll while (ch->ch.chunk_type == SCTP_DATA) { 2593 1.2.2.2 skrll /* validate chunk length */ 2594 1.2.2.2 skrll chk_length = ntohs(ch->ch.chunk_length); 2595 1.2.2.2 skrll if ((size_t)chk_length < sizeof(struct sctp_data_chunk) + 1 || 2596 1.2.2.2 skrll length - *offset < chk_length) { 2597 1.2.2.2 skrll /* 2598 1.2.2.2 skrll * Need to send an abort since we had a invalid 2599 1.2.2.2 skrll * data chunk. 2600 1.2.2.2 skrll */ 2601 1.2.2.2 skrll struct mbuf *op_err; 2602 1.2.2.2 skrll MGET(op_err, M_DONTWAIT, MT_DATA); 2603 1.2.2.2 skrll if (op_err) { 2604 1.2.2.2 skrll struct sctp_paramhdr *ph; 2605 1.2.2.2 skrll u_int32_t *ippp; 2606 1.2.2.2 skrll 2607 1.2.2.2 skrll op_err->m_len = sizeof(struct sctp_paramhdr) + 2608 1.2.2.2 skrll sizeof(*ippp); 2609 1.2.2.2 skrll ph = mtod(op_err, struct sctp_paramhdr *); 2610 1.2.2.2 skrll ph->param_type = 2611 1.2.2.2 skrll htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 2612 1.2.2.2 skrll ph->param_length = htons(op_err->m_len); 2613 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 2614 1.2.2.2 skrll *ippp = htonl(0x30000001); 2615 1.2.2.2 skrll } 2616 1.2.2.2 skrll sctp_abort_association(inp, stcb, m, iphlen, sh, 2617 1.2.2.2 skrll op_err); 2618 1.2.2.2 skrll return (2); 2619 1.2.2.2 skrll } 2620 1.2.2.2 skrll #ifdef SCTP_DEBUG 2621 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INPUT1) { 2622 1.2.2.2 skrll printf("A chunk of len:%d to process (tot:%d)\n", 2623 1.2.2.2 skrll chk_length, length - *offset); 2624 1.2.2.2 skrll } 2625 1.2.2.2 skrll #endif 2626 1.2.2.2 skrll 2627 1.2.2.2 skrll #ifdef SCTP_AUDITING_ENABLED 2628 1.2.2.2 skrll sctp_audit_log(0xB1, 0); 2629 1.2.2.2 skrll #endif 2630 1.2.2.2 skrll if (SCTP_SIZE32(chk_length) == *offset - length) { 2631 1.2.2.2 skrll last_chunk = 1; 2632 1.2.2.2 skrll } else { 2633 1.2.2.2 skrll last_chunk = 0; 2634 1.2.2.2 skrll } 2635 1.2.2.2 skrll if (sctp_process_a_data_chunk(stcb, asoc, mm, *offset, ch, 2636 1.2.2.2 skrll chk_length, net, high_tsn, &abort_flag, &break_flag, 2637 1.2.2.2 skrll last_chunk)) { 2638 1.2.2.2 skrll num_chunks++; 2639 1.2.2.2 skrll #ifdef SCTP_DEBUG 2640 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INPUT1) { 2641 1.2.2.2 skrll printf("Now incr num_chunks to %d\n", 2642 1.2.2.2 skrll num_chunks); 2643 1.2.2.2 skrll } 2644 1.2.2.2 skrll #endif 2645 1.2.2.2 skrll } 2646 1.2.2.2 skrll if (abort_flag) 2647 1.2.2.2 skrll return (2); 2648 1.2.2.2 skrll 2649 1.2.2.2 skrll if (break_flag) { 2650 1.2.2.2 skrll /* 2651 1.2.2.2 skrll * Set because of out of rwnd space and no drop rep 2652 1.2.2.2 skrll * space left. 2653 1.2.2.2 skrll */ 2654 1.2.2.2 skrll break; 2655 1.2.2.2 skrll } 2656 1.2.2.2 skrll 2657 1.2.2.2 skrll *offset += SCTP_SIZE32(chk_length); 2658 1.2.2.2 skrll if (*offset >= length) { 2659 1.2.2.2 skrll /* no more data left in the mbuf chain */ 2660 1.2.2.2 skrll break; 2661 1.2.2.2 skrll } 2662 1.2.2.2 skrll ch = (struct sctp_data_chunk *)sctp_m_getptr(m, *offset, 2663 1.2.2.2 skrll sizeof(chunk_buf), (u_int8_t *)&chunk_buf); 2664 1.2.2.2 skrll if (ch == NULL) { 2665 1.2.2.2 skrll *offset = length; 2666 1.2.2.2 skrll break; 2667 1.2.2.2 skrll } 2668 1.2.2.2 skrll } /* while */ 2669 1.2.2.2 skrll if (break_flag) { 2670 1.2.2.2 skrll /* 2671 1.2.2.2 skrll * we need to report rwnd overrun drops. 2672 1.2.2.2 skrll */ 2673 1.2.2.2 skrll sctp_send_packet_dropped(stcb, net, *mm, iphlen, 0); 2674 1.2.2.2 skrll } 2675 1.2.2.2 skrll if (num_chunks) { 2676 1.2.2.2 skrll /* 2677 1.2.2.2 skrll * Did we get data, if so update the time for 2678 1.2.2.2 skrll * auto-close and give peer credit for being 2679 1.2.2.2 skrll * alive. 2680 1.2.2.2 skrll */ 2681 1.2.2.2 skrll sctp_pegs[SCTP_DATA_DG_RECV]++; 2682 1.2.2.2 skrll stcb->asoc.overall_error_count = 0; 2683 1.2.2.2 skrll SCTP_GETTIME_TIMEVAL(&stcb->asoc.time_last_rcvd); 2684 1.2.2.2 skrll } 2685 1.2.2.2 skrll /* now service all of the reassm queue and delivery queue */ 2686 1.2.2.2 skrll sctp_service_queues(stcb, asoc, 0); 2687 1.2.2.2 skrll if (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_SENT) { 2688 1.2.2.2 skrll /* 2689 1.2.2.2 skrll * Assure that we ack right away by making 2690 1.2.2.2 skrll * sure that a d-ack timer is running. So the 2691 1.2.2.2 skrll * sack_check will send a sack. 2692 1.2.2.2 skrll */ 2693 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_RECV, stcb->sctp_ep, stcb, 2694 1.2.2.2 skrll net); 2695 1.2.2.2 skrll } 2696 1.2.2.2 skrll /* Start a sack timer or QUEUE a SACK for sending */ 2697 1.2.2.2 skrll sctp_sack_check(stcb, 1, was_a_gap, &abort_flag); 2698 1.2.2.2 skrll if (abort_flag) 2699 1.2.2.2 skrll return (2); 2700 1.2.2.2 skrll 2701 1.2.2.2 skrll return (0); 2702 1.2.2.2 skrll } 2703 1.2.2.2 skrll 2704 1.2.2.2 skrll static void 2705 1.2.2.2 skrll sctp_handle_segments(struct sctp_tcb *stcb, struct sctp_association *asoc, 2706 1.2.2.2 skrll struct sctp_sack_chunk *ch, u_long last_tsn, u_long *biggest_tsn_acked, 2707 1.2.2.2 skrll u_long *biggest_newly_acked_tsn, int num_seg, int *ecn_seg_sums) 2708 1.2.2.2 skrll { 2709 1.2.2.2 skrll /************************************************/ 2710 1.2.2.2 skrll /* process fragments and update sendqueue */ 2711 1.2.2.2 skrll /************************************************/ 2712 1.2.2.2 skrll struct sctp_sack *sack; 2713 1.2.2.2 skrll struct sctp_gap_ack_block *frag; 2714 1.2.2.2 skrll struct sctp_tmit_chunk *tp1; 2715 1.2.2.2 skrll int i; 2716 1.2.2.2 skrll unsigned int j; 2717 1.2.2.2 skrll #ifdef SCTP_FR_LOGGING 2718 1.2.2.2 skrll int num_frs=0; 2719 1.2.2.2 skrll #endif 2720 1.2.2.2 skrll uint16_t frag_strt, frag_end, primary_flag_set; 2721 1.2.2.2 skrll u_long last_frag_high; 2722 1.2.2.2 skrll 2723 1.2.2.2 skrll if (asoc->primary_destination->dest_state & SCTP_ADDR_SWITCH_PRIMARY) { 2724 1.2.2.2 skrll primary_flag_set = 1; 2725 1.2.2.2 skrll } else { 2726 1.2.2.2 skrll primary_flag_set = 0; 2727 1.2.2.2 skrll } 2728 1.2.2.2 skrll 2729 1.2.2.2 skrll sack = &ch->sack; 2730 1.2.2.2 skrll frag = (struct sctp_gap_ack_block *)((vaddr_t)sack + 2731 1.2.2.2 skrll sizeof(struct sctp_sack)); 2732 1.2.2.2 skrll tp1 = NULL; 2733 1.2.2.2 skrll last_frag_high = 0; 2734 1.2.2.2 skrll for (i = 0; i < num_seg; i++) { 2735 1.2.2.2 skrll frag_strt = ntohs(frag->start); 2736 1.2.2.2 skrll frag_end = ntohs(frag->end); 2737 1.2.2.2 skrll /* some sanity checks on the fargment offsets */ 2738 1.2.2.2 skrll if (frag_strt > frag_end) { 2739 1.2.2.2 skrll /* this one is malformed, skip */ 2740 1.2.2.2 skrll frag++; 2741 1.2.2.2 skrll continue; 2742 1.2.2.2 skrll } 2743 1.2.2.2 skrll if (compare_with_wrap((frag_end+last_tsn), *biggest_tsn_acked, 2744 1.2.2.2 skrll MAX_TSN)) 2745 1.2.2.2 skrll *biggest_tsn_acked = frag_end+last_tsn; 2746 1.2.2.2 skrll 2747 1.2.2.2 skrll /* mark acked dgs and find out the highestTSN being acked */ 2748 1.2.2.2 skrll if (tp1 == NULL) { 2749 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 2750 1.2.2.2 skrll 2751 1.2.2.2 skrll /* save the locations of the last frags */ 2752 1.2.2.2 skrll last_frag_high = frag_end + last_tsn; 2753 1.2.2.2 skrll } else { 2754 1.2.2.2 skrll /* 2755 1.2.2.2 skrll * now lets see if we need to reset the queue 2756 1.2.2.2 skrll * due to a out-of-order SACK fragment 2757 1.2.2.2 skrll */ 2758 1.2.2.2 skrll if (compare_with_wrap(frag_strt+last_tsn, 2759 1.2.2.2 skrll last_frag_high, MAX_TSN)) { 2760 1.2.2.2 skrll /* 2761 1.2.2.2 skrll * if the new frag starts after the last TSN 2762 1.2.2.2 skrll * frag covered, we are ok 2763 1.2.2.2 skrll * and this one is beyond the last one 2764 1.2.2.2 skrll */ 2765 1.2.2.2 skrll ; 2766 1.2.2.2 skrll } else { 2767 1.2.2.2 skrll /* 2768 1.2.2.2 skrll * ok, they have reset us, so we need to reset 2769 1.2.2.2 skrll * the queue this will cause extra hunting but 2770 1.2.2.2 skrll * hey, they chose the performance 2771 1.2.2.2 skrll * hit when they failed to order there gaps.. 2772 1.2.2.2 skrll */ 2773 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 2774 1.2.2.2 skrll } 2775 1.2.2.2 skrll last_frag_high = frag_end + last_tsn; 2776 1.2.2.2 skrll } 2777 1.2.2.2 skrll for (j = frag_strt + last_tsn; j <= frag_end + last_tsn; j++) { 2778 1.2.2.2 skrll while (tp1) { 2779 1.2.2.2 skrll #ifdef SCTP_FR_LOGGING 2780 1.2.2.2 skrll if (tp1->rec.data.doing_fast_retransmit) 2781 1.2.2.2 skrll num_frs++; 2782 1.2.2.2 skrll #endif 2783 1.2.2.2 skrll 2784 1.2.2.2 skrll if (tp1->rec.data.TSN_seq == j) { 2785 1.2.2.2 skrll if (tp1->sent != SCTP_DATAGRAM_UNSENT) { 2786 1.2.2.2 skrll /* must be held until cum-ack passes */ 2787 1.2.2.2 skrll /* ECN Nonce: Add the nonce value to the sender's nonce sum */ 2788 1.2.2.2 skrll if (tp1->sent < SCTP_DATAGRAM_ACKED) { 2789 1.2.2.2 skrll /* 2790 1.2.2.2 skrll * If it is less than 2791 1.2.2.2 skrll * ACKED, it is now 2792 1.2.2.2 skrll * no-longer in flight. 2793 1.2.2.2 skrll * Higher values may 2794 1.2.2.2 skrll * already be set via 2795 1.2.2.2 skrll * previous Gap Ack 2796 1.2.2.2 skrll * Blocks... 2797 1.2.2.2 skrll * i.e. ACKED or MARKED. 2798 1.2.2.2 skrll */ 2799 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, 2800 1.2.2.2 skrll *biggest_newly_acked_tsn, 2801 1.2.2.2 skrll MAX_TSN)) { 2802 1.2.2.2 skrll *biggest_newly_acked_tsn = 2803 1.2.2.2 skrll tp1->rec.data.TSN_seq; 2804 1.2.2.2 skrll } 2805 1.2.2.2 skrll sctp_flight_size_decrease(tp1); 2806 1.2.2.2 skrll 2807 1.2.2.2 skrll sctp_total_flight_decrease(stcb, tp1); 2808 1.2.2.2 skrll 2809 1.2.2.2 skrll if (tp1->snd_count < 2) { 2810 1.2.2.2 skrll /* True non-retransmited chunk */ 2811 1.2.2.2 skrll tp1->whoTo->net_ack2 += 2812 1.2.2.2 skrll tp1->send_size; 2813 1.2.2.2 skrll 2814 1.2.2.2 skrll /* update RTO too? */ 2815 1.2.2.2 skrll if (tp1->do_rtt) { 2816 1.2.2.2 skrll tp1->whoTo->RTO = 2817 1.2.2.2 skrll sctp_calculate_rto(stcb, 2818 1.2.2.2 skrll asoc, 2819 1.2.2.2 skrll tp1->whoTo, 2820 1.2.2.2 skrll &tp1->sent_rcv_time); 2821 1.2.2.2 skrll tp1->whoTo->rto_pending = 0; 2822 1.2.2.2 skrll tp1->do_rtt = 0; 2823 1.2.2.2 skrll } 2824 1.2.2.2 skrll } 2825 1.2.2.2 skrll } 2826 1.2.2.2 skrll if (tp1->sent <= SCTP_DATAGRAM_RESEND && 2827 1.2.2.2 skrll tp1->sent != SCTP_DATAGRAM_UNSENT && 2828 1.2.2.2 skrll compare_with_wrap(tp1->rec.data.TSN_seq, 2829 1.2.2.2 skrll asoc->this_sack_highest_gap, 2830 1.2.2.2 skrll MAX_TSN)) { 2831 1.2.2.2 skrll asoc->this_sack_highest_gap = 2832 1.2.2.2 skrll tp1->rec.data.TSN_seq; 2833 1.2.2.2 skrll if (primary_flag_set) { 2834 1.2.2.2 skrll tp1->whoTo->cacc_saw_newack = 1; 2835 1.2.2.2 skrll } 2836 1.2.2.2 skrll } 2837 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_RESEND) { 2838 1.2.2.2 skrll #ifdef SCTP_DEBUG 2839 1.2.2.2 skrll if (sctp_debug_on & 2840 1.2.2.2 skrll SCTP_DEBUG_INDATA3) { 2841 1.2.2.2 skrll printf("Hmm. one that is in RESEND that is now ACKED\n"); 2842 1.2.2.2 skrll } 2843 1.2.2.2 skrll #endif 2844 1.2.2.2 skrll sctp_ucount_decr(asoc->sent_queue_retran_cnt); 2845 1.2.2.2 skrll #ifdef SCTP_AUDITING_ENABLED 2846 1.2.2.2 skrll sctp_audit_log(0xB2, 2847 1.2.2.2 skrll (asoc->sent_queue_retran_cnt & 0x000000ff)); 2848 1.2.2.2 skrll #endif 2849 1.2.2.2 skrll 2850 1.2.2.2 skrll } 2851 1.2.2.2 skrll (*ecn_seg_sums) += tp1->rec.data.ect_nonce; 2852 1.2.2.2 skrll (*ecn_seg_sums) &= SCTP_SACK_NONCE_SUM; 2853 1.2.2.2 skrll tp1->sent = SCTP_DATAGRAM_MARKED; 2854 1.2.2.2 skrll } 2855 1.2.2.2 skrll break; 2856 1.2.2.2 skrll } /* if (tp1->TSN_seq == j) */ 2857 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, j, 2858 1.2.2.2 skrll MAX_TSN)) 2859 1.2.2.2 skrll break; 2860 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 2861 1.2.2.2 skrll }/* end while (tp1) */ 2862 1.2.2.2 skrll } /* end for (j = fragStart */ 2863 1.2.2.2 skrll frag++; /* next one */ 2864 1.2.2.2 skrll } 2865 1.2.2.2 skrll #ifdef SCTP_FR_LOGGING 2866 1.2.2.2 skrll if (num_frs) 2867 1.2.2.2 skrll sctp_log_fr(*biggest_tsn_acked, *biggest_newly_acked_tsn, 2868 1.2.2.2 skrll last_tsn, SCTP_FR_LOG_BIGGEST_TSNS); 2869 1.2.2.2 skrll #endif 2870 1.2.2.2 skrll } 2871 1.2.2.2 skrll 2872 1.2.2.2 skrll static void 2873 1.2.2.2 skrll sctp_check_for_revoked(struct sctp_association *asoc, u_long cum_ack, 2874 1.2.2.2 skrll u_long biggest_tsn_acked) 2875 1.2.2.2 skrll { 2876 1.2.2.2 skrll struct sctp_tmit_chunk *tp1; 2877 1.2.2.2 skrll int tot_revoked=0; 2878 1.2.2.2 skrll 2879 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 2880 1.2.2.2 skrll while (tp1) { 2881 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, cum_ack, 2882 1.2.2.2 skrll MAX_TSN)) { 2883 1.2.2.2 skrll /* 2884 1.2.2.2 skrll * ok this guy is either ACK or MARKED. If it is ACKED 2885 1.2.2.2 skrll * it has been previously acked but not this time i.e. 2886 1.2.2.2 skrll * revoked. If it is MARKED it was ACK'ed again. 2887 1.2.2.2 skrll */ 2888 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_ACKED) { 2889 1.2.2.2 skrll /* it has been revoked */ 2890 1.2.2.2 skrll /* 2891 1.2.2.2 skrll * We do NOT add back to flight size here since 2892 1.2.2.2 skrll * it is really NOT in flight. Resend (when/if 2893 1.2.2.2 skrll * it occurs will add to flight size 2894 1.2.2.2 skrll */ 2895 1.2.2.2 skrll tp1->sent = SCTP_DATAGRAM_SENT; 2896 1.2.2.2 skrll tot_revoked++; 2897 1.2.2.2 skrll } else if (tp1->sent == SCTP_DATAGRAM_MARKED) { 2898 1.2.2.2 skrll /* it has been re-acked in this SACK */ 2899 1.2.2.2 skrll tp1->sent = SCTP_DATAGRAM_ACKED; 2900 1.2.2.2 skrll } 2901 1.2.2.2 skrll } 2902 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, biggest_tsn_acked, 2903 1.2.2.2 skrll MAX_TSN)) { 2904 1.2.2.2 skrll /* above the sack */ 2905 1.2.2.2 skrll break; 2906 1.2.2.2 skrll } 2907 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_UNSENT) 2908 1.2.2.2 skrll break; 2909 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 2910 1.2.2.2 skrll } 2911 1.2.2.2 skrll if (tot_revoked > 0) { 2912 1.2.2.2 skrll /* Setup the ecn nonce re-sync point. We 2913 1.2.2.2 skrll * do this since once data is revoked 2914 1.2.2.2 skrll * we begin to retransmit things, which 2915 1.2.2.2 skrll * do NOT have the ECN bits set. This means 2916 1.2.2.2 skrll * we are now out of sync and must wait until 2917 1.2.2.2 skrll * we get back in sync with the peer to 2918 1.2.2.2 skrll * check ECN bits. 2919 1.2.2.2 skrll */ 2920 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->send_queue); 2921 1.2.2.2 skrll if (tp1 == NULL) { 2922 1.2.2.2 skrll asoc->nonce_resync_tsn = asoc->sending_seq; 2923 1.2.2.2 skrll } else { 2924 1.2.2.2 skrll asoc->nonce_resync_tsn = tp1->rec.data.TSN_seq; 2925 1.2.2.2 skrll } 2926 1.2.2.2 skrll asoc->nonce_wait_for_ecne = 0; 2927 1.2.2.2 skrll asoc->nonce_sum_check = 0; 2928 1.2.2.2 skrll } 2929 1.2.2.2 skrll 2930 1.2.2.2 skrll } 2931 1.2.2.2 skrll 2932 1.2.2.2 skrll extern int sctp_peer_chunk_oh; 2933 1.2.2.2 skrll 2934 1.2.2.2 skrll static void 2935 1.2.2.2 skrll sctp_strike_gap_ack_chunks(struct sctp_tcb *stcb, struct sctp_association *asoc, 2936 1.2.2.2 skrll u_long biggest_tsn_acked, int strike_enabled, 2937 1.2.2.2 skrll u_long biggest_tsn_newly_acked, int accum_moved) 2938 1.2.2.2 skrll { 2939 1.2.2.2 skrll struct sctp_tmit_chunk *tp1; 2940 1.2.2.2 skrll int strike_flag=0; 2941 1.2.2.2 skrll struct timeval now; 2942 1.2.2.2 skrll int tot_retrans=0; 2943 1.2.2.2 skrll u_int32_t sending_seq; 2944 1.2.2.2 skrll int primary_switch_active = 0; 2945 1.2.2.2 skrll int double_switch_active = 0; 2946 1.2.2.2 skrll 2947 1.2.2.2 skrll /* select the sending_seq, this is 2948 1.2.2.2 skrll * either the next thing ready to 2949 1.2.2.2 skrll * be sent but not transmitted, OR, 2950 1.2.2.2 skrll * the next seq we assign. 2951 1.2.2.2 skrll */ 2952 1.2.2.2 skrll tp1 = TAILQ_FIRST(&stcb->asoc.send_queue); 2953 1.2.2.2 skrll if (tp1 == NULL) { 2954 1.2.2.2 skrll sending_seq = asoc->sending_seq; 2955 1.2.2.2 skrll } else { 2956 1.2.2.2 skrll sending_seq = tp1->rec.data.TSN_seq; 2957 1.2.2.2 skrll } 2958 1.2.2.2 skrll 2959 1.2.2.2 skrll if (asoc->primary_destination->dest_state & SCTP_ADDR_SWITCH_PRIMARY) { 2960 1.2.2.2 skrll primary_switch_active = 1; 2961 1.2.2.2 skrll } 2962 1.2.2.2 skrll if (asoc->primary_destination->dest_state & SCTP_ADDR_DOUBLE_SWITCH) { 2963 1.2.2.2 skrll double_switch_active = 1; 2964 1.2.2.2 skrll } 2965 1.2.2.2 skrll if (stcb->asoc.peer_supports_prsctp ) { 2966 1.2.2.2 skrll SCTP_GETTIME_TIMEVAL(&now); 2967 1.2.2.2 skrll } 2968 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 2969 1.2.2.2 skrll while (tp1) { 2970 1.2.2.2 skrll strike_flag=0; 2971 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, biggest_tsn_acked, 2972 1.2.2.2 skrll MAX_TSN) || 2973 1.2.2.2 skrll tp1->sent == SCTP_DATAGRAM_UNSENT) { 2974 1.2.2.2 skrll /* done */ 2975 1.2.2.2 skrll break; 2976 1.2.2.2 skrll } 2977 1.2.2.2 skrll if ((tp1->flags & (SCTP_PR_SCTP_ENABLED|SCTP_PR_SCTP_BUFFER)) == 2978 1.2.2.2 skrll SCTP_PR_SCTP_ENABLED && 2979 1.2.2.2 skrll tp1->sent < SCTP_DATAGRAM_ACKED) { 2980 1.2.2.2 skrll /* Is it expired? */ 2981 1.2.2.2 skrll #ifndef __FreeBSD__ 2982 1.2.2.2 skrll if (timercmp(&now, &tp1->rec.data.timetodrop, >)) 2983 1.2.2.2 skrll #else 2984 1.2.2.2 skrll if (timevalcmp(&now, &tp1->rec.data.timetodrop, >)) 2985 1.2.2.2 skrll #endif 2986 1.2.2.2 skrll { 2987 1.2.2.2 skrll /* Yes so drop it */ 2988 1.2.2.2 skrll if (tp1->data != NULL) { 2989 1.2.2.2 skrll sctp_release_pr_sctp_chunk(stcb, tp1, 2990 1.2.2.2 skrll (SCTP_RESPONSE_TO_USER_REQ|SCTP_NOTIFY_DATAGRAM_SENT), 2991 1.2.2.2 skrll &asoc->sent_queue); 2992 1.2.2.2 skrll } 2993 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 2994 1.2.2.2 skrll continue; 2995 1.2.2.2 skrll } 2996 1.2.2.2 skrll } 2997 1.2.2.2 skrll 2998 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, 2999 1.2.2.2 skrll asoc->this_sack_highest_gap, MAX_TSN)) { 3000 1.2.2.2 skrll /* we are beyond the tsn in the sack */ 3001 1.2.2.2 skrll break; 3002 1.2.2.2 skrll } 3003 1.2.2.2 skrll if (tp1->sent >= SCTP_DATAGRAM_RESEND) { 3004 1.2.2.2 skrll /* either a RESEND, ACKED, or MARKED */ 3005 1.2.2.2 skrll /* skip */ 3006 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3007 1.2.2.2 skrll continue; 3008 1.2.2.2 skrll } 3009 1.2.2.2 skrll if (primary_switch_active && (strike_enabled == 0)) { 3010 1.2.2.2 skrll if (tp1->whoTo != asoc->primary_destination) { 3011 1.2.2.2 skrll /* 3012 1.2.2.2 skrll * We can only strike things on the primary if 3013 1.2.2.2 skrll * the strike_enabled flag is clear 3014 1.2.2.2 skrll */ 3015 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3016 1.2.2.2 skrll continue; 3017 1.2.2.2 skrll } 3018 1.2.2.2 skrll } else if (primary_switch_active) { 3019 1.2.2.2 skrll if (tp1->whoTo->cacc_saw_newack == 0) { 3020 1.2.2.2 skrll /* 3021 1.2.2.2 skrll * Only one was received but it was NOT 3022 1.2.2.2 skrll * this one. 3023 1.2.2.2 skrll */ 3024 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3025 1.2.2.2 skrll continue; 3026 1.2.2.2 skrll } 3027 1.2.2.2 skrll } 3028 1.2.2.2 skrll if (double_switch_active && 3029 1.2.2.2 skrll (compare_with_wrap(asoc->primary_destination->next_tsn_at_change, 3030 1.2.2.2 skrll tp1->rec.data.TSN_seq, MAX_TSN))) { 3031 1.2.2.2 skrll /* 3032 1.2.2.2 skrll * With a double switch we do NOT mark unless we 3033 1.2.2.2 skrll * are beyond the switch point. 3034 1.2.2.2 skrll */ 3035 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3036 1.2.2.2 skrll continue; 3037 1.2.2.2 skrll } 3038 1.2.2.2 skrll /* 3039 1.2.2.2 skrll * Here we check to see if we were have already done a FR 3040 1.2.2.2 skrll * and if so we see if the biggest TSN we saw in the sack is 3041 1.2.2.2 skrll * smaller than the recovery point. If so we don't strike the 3042 1.2.2.2 skrll * tsn... otherwise we CAN strike the TSN. 3043 1.2.2.2 skrll */ 3044 1.2.2.2 skrll if (accum_moved && asoc->fast_retran_loss_recovery) { 3045 1.2.2.2 skrll /* 3046 1.2.2.2 skrll * Strike the TSN if in fast-recovery and 3047 1.2.2.2 skrll * cum-ack moved. 3048 1.2.2.2 skrll */ 3049 1.2.2.2 skrll tp1->sent++; 3050 1.2.2.2 skrll } else if (tp1->rec.data.doing_fast_retransmit) { 3051 1.2.2.2 skrll /* 3052 1.2.2.2 skrll * For those that have done a FR we must 3053 1.2.2.2 skrll * take special consideration if we strike. I.e 3054 1.2.2.2 skrll * the biggest_newly_acked must be higher 3055 1.2.2.2 skrll * than the sending_seq at the time we did 3056 1.2.2.2 skrll * the FR. 3057 1.2.2.2 skrll */ 3058 1.2.2.2 skrll #ifdef SCTP_FR_TO_ALTERNATE 3059 1.2.2.2 skrll /* 3060 1.2.2.2 skrll * If FR's go to new networks, then we 3061 1.2.2.2 skrll * must only do this for singly homed asoc's. However 3062 1.2.2.2 skrll * if the FR's go to the same network (Armando's work) 3063 1.2.2.2 skrll * then its ok to FR multiple times. 3064 1.2.2.2 skrll */ 3065 1.2.2.2 skrll if (asoc->numnets < 2) 3066 1.2.2.2 skrll #else 3067 1.2.2.2 skrll if (1) 3068 1.2.2.2 skrll #endif 3069 1.2.2.2 skrll { 3070 1.2.2.2 skrll if ((compare_with_wrap(biggest_tsn_newly_acked, 3071 1.2.2.2 skrll tp1->rec.data.fast_retran_tsn, MAX_TSN)) || 3072 1.2.2.2 skrll (biggest_tsn_newly_acked == 3073 1.2.2.2 skrll tp1->rec.data.fast_retran_tsn)) { 3074 1.2.2.2 skrll /* 3075 1.2.2.2 skrll * Strike the TSN, since this ack is 3076 1.2.2.2 skrll * beyond where things were when we did 3077 1.2.2.2 skrll * a FR. 3078 1.2.2.2 skrll */ 3079 1.2.2.2 skrll #ifdef SCTP_FR_LOGGING 3080 1.2.2.2 skrll sctp_log_fr(biggest_tsn_newly_acked, 3081 1.2.2.2 skrll tp1->rec.data.TSN_seq, 3082 1.2.2.2 skrll tp1->rec.data.fast_retran_tsn, 3083 1.2.2.2 skrll SCTP_FR_LOG_STRIKE_CHUNK); 3084 1.2.2.2 skrll #endif 3085 1.2.2.2 skrll tp1->sent++; 3086 1.2.2.2 skrll strike_flag=1; 3087 1.2.2.2 skrll } 3088 1.2.2.2 skrll } 3089 1.2.2.2 skrll } else if (compare_with_wrap(tp1->rec.data.TSN_seq, 3090 1.2.2.2 skrll biggest_tsn_newly_acked, MAX_TSN)) { 3091 1.2.2.2 skrll /* 3092 1.2.2.2 skrll * We don't strike these: 3093 1.2.2.2 skrll * This is the HTNA algorithm i.e. we don't strike 3094 1.2.2.2 skrll * If our TSN is larger than the Highest TSN Newly 3095 1.2.2.2 skrll * Acked. 3096 1.2.2.2 skrll */ 3097 1.2.2.2 skrll ; 3098 1.2.2.2 skrll } else { 3099 1.2.2.2 skrll /* Strike the TSN */ 3100 1.2.2.2 skrll tp1->sent++; 3101 1.2.2.2 skrll } 3102 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_RESEND) { 3103 1.2.2.2 skrll /* Increment the count to resend */ 3104 1.2.2.2 skrll struct sctp_nets *alt; 3105 1.2.2.2 skrll 3106 1.2.2.2 skrll #ifdef SCTP_FR_LOGGING 3107 1.2.2.2 skrll sctp_log_fr(tp1->rec.data.TSN_seq, tp1->snd_count, 3108 1.2.2.2 skrll 0, SCTP_FR_MARKED); 3109 1.2.2.2 skrll #endif 3110 1.2.2.2 skrll if (strike_flag) { 3111 1.2.2.2 skrll /* This is a subsequent FR */ 3112 1.2.2.2 skrll sctp_pegs[SCTP_DUP_FR]++; 3113 1.2.2.2 skrll } 3114 1.2.2.2 skrll asoc->sent_queue_retran_cnt++; 3115 1.2.2.2 skrll #ifdef SCTP_FR_TO_ALTERNATE 3116 1.2.2.2 skrll /* Can we find an alternate? */ 3117 1.2.2.2 skrll alt = sctp_find_alternate_net(stcb, tp1->whoTo); 3118 1.2.2.2 skrll #else 3119 1.2.2.2 skrll /* 3120 1.2.2.2 skrll * default behavior is to NOT retransmit FR's 3121 1.2.2.2 skrll * to an alternate. Armando Caro's paper details 3122 1.2.2.2 skrll * why. 3123 1.2.2.2 skrll */ 3124 1.2.2.2 skrll alt = tp1->whoTo; 3125 1.2.2.2 skrll #endif 3126 1.2.2.2 skrll tp1->rec.data.doing_fast_retransmit = 1; 3127 1.2.2.2 skrll tot_retrans++; 3128 1.2.2.2 skrll /* mark the sending seq for possible subsequent FR's */ 3129 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->send_queue)) { 3130 1.2.2.2 skrll /* 3131 1.2.2.2 skrll * If the queue of send is empty then its the 3132 1.2.2.2 skrll * next sequence number that will be assigned so 3133 1.2.2.2 skrll * we subtract one from this to get the one we 3134 1.2.2.2 skrll * last sent. 3135 1.2.2.2 skrll */ 3136 1.2.2.2 skrll tp1->rec.data.fast_retran_tsn = sending_seq - 1; 3137 1.2.2.2 skrll } else { 3138 1.2.2.2 skrll /* 3139 1.2.2.2 skrll * If there are chunks on the send queue 3140 1.2.2.2 skrll * (unsent data that has made it from the 3141 1.2.2.2 skrll * stream queues but not out the door, we take 3142 1.2.2.2 skrll * the first one (which will have the lowest 3143 1.2.2.2 skrll * TSN) and subtract one to get the one we last 3144 1.2.2.2 skrll * sent. 3145 1.2.2.2 skrll */ 3146 1.2.2.2 skrll struct sctp_tmit_chunk *ttt; 3147 1.2.2.2 skrll ttt = TAILQ_FIRST(&asoc->send_queue); 3148 1.2.2.2 skrll tp1->rec.data.fast_retran_tsn = 3149 1.2.2.2 skrll ttt->rec.data.TSN_seq - 1; 3150 1.2.2.2 skrll } 3151 1.2.2.2 skrll if (tp1->do_rtt) { 3152 1.2.2.2 skrll /* 3153 1.2.2.2 skrll * this guy had a RTO calculation pending on it, 3154 1.2.2.2 skrll * cancel it 3155 1.2.2.2 skrll */ 3156 1.2.2.2 skrll tp1->whoTo->rto_pending = 0; 3157 1.2.2.2 skrll tp1->do_rtt = 0; 3158 1.2.2.2 skrll } 3159 1.2.2.2 skrll /* fix counts and things */ 3160 1.2.2.2 skrll 3161 1.2.2.2 skrll tp1->whoTo->net_ack++; 3162 1.2.2.2 skrll sctp_flight_size_decrease(tp1); 3163 1.2.2.2 skrll #ifdef SCTP_LOG_RWND 3164 1.2.2.2 skrll sctp_log_rwnd(SCTP_INCREASE_PEER_RWND, 3165 1.2.2.2 skrll asoc->peers_rwnd , tp1->send_size, sctp_peer_chunk_oh); 3166 1.2.2.2 skrll #endif 3167 1.2.2.2 skrll /* add back to the rwnd */ 3168 1.2.2.2 skrll asoc->peers_rwnd += (tp1->send_size + sctp_peer_chunk_oh); 3169 1.2.2.2 skrll 3170 1.2.2.2 skrll /* remove from the total flight */ 3171 1.2.2.2 skrll sctp_total_flight_decrease(stcb, tp1); 3172 1.2.2.2 skrll if (alt != tp1->whoTo) { 3173 1.2.2.2 skrll /* yes, there is an alternate. */ 3174 1.2.2.2 skrll sctp_free_remote_addr(tp1->whoTo); 3175 1.2.2.2 skrll tp1->whoTo = alt; 3176 1.2.2.2 skrll alt->ref_count++; 3177 1.2.2.2 skrll } 3178 1.2.2.2 skrll } 3179 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3180 1.2.2.2 skrll } /* while (tp1) */ 3181 1.2.2.2 skrll 3182 1.2.2.2 skrll if (tot_retrans > 0) { 3183 1.2.2.2 skrll /* Setup the ecn nonce re-sync point. We 3184 1.2.2.2 skrll * do this since once we go to FR something 3185 1.2.2.2 skrll * we introduce a Karn's rule scenario and 3186 1.2.2.2 skrll * won't know the totals for the ECN bits. 3187 1.2.2.2 skrll */ 3188 1.2.2.2 skrll asoc->nonce_resync_tsn = sending_seq; 3189 1.2.2.2 skrll asoc->nonce_wait_for_ecne = 0; 3190 1.2.2.2 skrll asoc->nonce_sum_check = 0; 3191 1.2.2.2 skrll } 3192 1.2.2.2 skrll 3193 1.2.2.2 skrll } 3194 1.2.2.2 skrll 3195 1.2.2.2 skrll struct sctp_tmit_chunk * 3196 1.2.2.2 skrll sctp_try_advance_peer_ack_point(struct sctp_tcb *stcb, 3197 1.2.2.2 skrll struct sctp_association *asoc) 3198 1.2.2.2 skrll { 3199 1.2.2.2 skrll struct sctp_tmit_chunk *tp1, *tp2, *a_adv=NULL; 3200 1.2.2.2 skrll struct timeval now; 3201 1.2.2.2 skrll int now_filled=0; 3202 1.2.2.2 skrll 3203 1.2.2.2 skrll if (asoc->peer_supports_prsctp == 0) { 3204 1.2.2.2 skrll return (NULL); 3205 1.2.2.2 skrll } 3206 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 3207 1.2.2.2 skrll while (tp1) { 3208 1.2.2.2 skrll if (tp1->sent != SCTP_FORWARD_TSN_SKIP && 3209 1.2.2.2 skrll tp1->sent != SCTP_DATAGRAM_RESEND) { 3210 1.2.2.2 skrll /* no chance to advance, out of here */ 3211 1.2.2.2 skrll break; 3212 1.2.2.2 skrll } 3213 1.2.2.2 skrll if ((tp1->flags & SCTP_PR_SCTP_ENABLED) == 0) { 3214 1.2.2.2 skrll /* 3215 1.2.2.2 skrll * We can't fwd-tsn past any that are reliable 3216 1.2.2.2 skrll * aka retransmitted until the asoc fails. 3217 1.2.2.2 skrll */ 3218 1.2.2.2 skrll break; 3219 1.2.2.2 skrll } 3220 1.2.2.2 skrll if (!now_filled) { 3221 1.2.2.2 skrll SCTP_GETTIME_TIMEVAL(&now); 3222 1.2.2.2 skrll now_filled = 1; 3223 1.2.2.2 skrll } 3224 1.2.2.2 skrll tp2 = TAILQ_NEXT(tp1, sctp_next); 3225 1.2.2.2 skrll /* 3226 1.2.2.2 skrll * now we got a chunk which is marked for another 3227 1.2.2.2 skrll * retransmission to a PR-stream but has run 3228 1.2.2.2 skrll * out its chances already maybe OR has been 3229 1.2.2.2 skrll * marked to skip now. Can we skip it if its a 3230 1.2.2.2 skrll * resend? 3231 1.2.2.2 skrll */ 3232 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_RESEND && 3233 1.2.2.2 skrll (tp1->flags & SCTP_PR_SCTP_BUFFER) == 0) { 3234 1.2.2.2 skrll /* 3235 1.2.2.2 skrll * Now is this one marked for resend and its time 3236 1.2.2.2 skrll * is now up? 3237 1.2.2.2 skrll */ 3238 1.2.2.2 skrll #ifndef __FreeBSD__ 3239 1.2.2.2 skrll if (timercmp(&now, &tp1->rec.data.timetodrop, >)) 3240 1.2.2.2 skrll #else 3241 1.2.2.2 skrll if (timevalcmp(&now, &tp1->rec.data.timetodrop, >)) 3242 1.2.2.2 skrll #endif 3243 1.2.2.2 skrll { 3244 1.2.2.2 skrll /* Yes so drop it */ 3245 1.2.2.2 skrll if (tp1->data) { 3246 1.2.2.2 skrll sctp_release_pr_sctp_chunk(stcb, tp1, 3247 1.2.2.2 skrll (SCTP_RESPONSE_TO_USER_REQ|SCTP_NOTIFY_DATAGRAM_SENT), 3248 1.2.2.2 skrll &asoc->sent_queue); 3249 1.2.2.2 skrll } 3250 1.2.2.2 skrll } else { 3251 1.2.2.2 skrll /* 3252 1.2.2.2 skrll * No, we are done when hit one for resend whos 3253 1.2.2.2 skrll * time as not expired. 3254 1.2.2.2 skrll */ 3255 1.2.2.2 skrll break; 3256 1.2.2.2 skrll } 3257 1.2.2.2 skrll } 3258 1.2.2.2 skrll /* 3259 1.2.2.2 skrll * Ok now if this chunk is marked to drop it 3260 1.2.2.2 skrll * we can clean up the chunk, advance our peer ack point 3261 1.2.2.2 skrll * and we can check the next chunk. 3262 1.2.2.2 skrll */ 3263 1.2.2.2 skrll if (tp1->sent == SCTP_FORWARD_TSN_SKIP) { 3264 1.2.2.2 skrll /* advance PeerAckPoint goes forward */ 3265 1.2.2.2 skrll asoc->advanced_peer_ack_point = tp1->rec.data.TSN_seq; 3266 1.2.2.2 skrll a_adv = tp1; 3267 1.2.2.2 skrll /* 3268 1.2.2.2 skrll * we don't want to de-queue it here. Just wait for the 3269 1.2.2.2 skrll * next peer SACK to come with a new cumTSN and then 3270 1.2.2.2 skrll * the chunk will be droped in the normal fashion. 3271 1.2.2.2 skrll */ 3272 1.2.2.2 skrll if (tp1->data) { 3273 1.2.2.2 skrll sctp_free_bufspace(stcb, asoc, tp1); 3274 1.2.2.2 skrll #ifdef SCTP_DEBUG 3275 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_OUTPUT2) { 3276 1.2.2.2 skrll printf("--total out:%lu total_mbuf_out:%lu\n", 3277 1.2.2.2 skrll (u_long)asoc->total_output_queue_size, 3278 1.2.2.2 skrll (u_long)asoc->total_output_mbuf_queue_size); 3279 1.2.2.2 skrll } 3280 1.2.2.2 skrll #endif 3281 1.2.2.2 skrll /* 3282 1.2.2.2 skrll * Maybe there should be another notification 3283 1.2.2.2 skrll * type 3284 1.2.2.2 skrll */ 3285 1.2.2.2 skrll sctp_ulp_notify(SCTP_NOTIFY_DG_FAIL, stcb, 3286 1.2.2.2 skrll (SCTP_RESPONSE_TO_USER_REQ|SCTP_NOTIFY_DATAGRAM_SENT), 3287 1.2.2.2 skrll tp1); 3288 1.2.2.2 skrll sctp_m_freem(tp1->data); 3289 1.2.2.2 skrll tp1->data = NULL; 3290 1.2.2.2 skrll sctp_sowwakeup(stcb->sctp_ep, 3291 1.2.2.2 skrll stcb->sctp_socket); 3292 1.2.2.2 skrll } 3293 1.2.2.2 skrll } else { 3294 1.2.2.2 skrll /* If it is still in RESEND we can advance no further */ 3295 1.2.2.2 skrll break; 3296 1.2.2.2 skrll } 3297 1.2.2.2 skrll /* 3298 1.2.2.2 skrll * If we hit here we just dumped tp1, move to next 3299 1.2.2.2 skrll * tsn on sent queue. 3300 1.2.2.2 skrll */ 3301 1.2.2.2 skrll tp1 = tp2; 3302 1.2.2.2 skrll } 3303 1.2.2.2 skrll return (a_adv); 3304 1.2.2.2 skrll } 3305 1.2.2.2 skrll 3306 1.2.2.2 skrll #ifdef SCTP_HIGH_SPEED 3307 1.2.2.2 skrll struct sctp_hs_raise_drop { 3308 1.2.2.2 skrll int32_t cwnd; 3309 1.2.2.2 skrll int32_t increase; 3310 1.2.2.2 skrll int32_t drop_percent; 3311 1.2.2.2 skrll }; 3312 1.2.2.2 skrll 3313 1.2.2.2 skrll #define SCTP_HS_TABLE_SIZE 73 3314 1.2.2.2 skrll 3315 1.2.2.2 skrll struct sctp_hs_raise_drop sctp_cwnd_adjust[SCTP_HS_TABLE_SIZE] = { 3316 1.2.2.2 skrll {38,1,50}, /* 0 */ 3317 1.2.2.2 skrll {118,2,44}, /* 1 */ 3318 1.2.2.2 skrll {221,3,41}, /* 2 */ 3319 1.2.2.2 skrll {347,4,38}, /* 3 */ 3320 1.2.2.2 skrll {495,5,37}, /* 4 */ 3321 1.2.2.2 skrll {663,6,35}, /* 5 */ 3322 1.2.2.2 skrll {851,7,34}, /* 6 */ 3323 1.2.2.2 skrll {1058,8,33}, /* 7 */ 3324 1.2.2.2 skrll {1284,9,32}, /* 8 */ 3325 1.2.2.2 skrll {1529,10,31}, /* 9 */ 3326 1.2.2.2 skrll {1793,11,30}, /* 10 */ 3327 1.2.2.2 skrll {2076,12,29}, /* 11 */ 3328 1.2.2.2 skrll {2378,13,28}, /* 12 */ 3329 1.2.2.2 skrll {2699,14,28}, /* 13 */ 3330 1.2.2.2 skrll {3039,15,27}, /* 14 */ 3331 1.2.2.2 skrll {3399,16,27}, /* 15 */ 3332 1.2.2.2 skrll {3778,17,26}, /* 16 */ 3333 1.2.2.2 skrll {4177,18,26}, /* 17 */ 3334 1.2.2.2 skrll {4596,19,25}, /* 18 */ 3335 1.2.2.2 skrll {5036,20,25}, /* 19 */ 3336 1.2.2.2 skrll {5497,21,24}, /* 20 */ 3337 1.2.2.2 skrll {5979,22,24}, /* 21 */ 3338 1.2.2.2 skrll {6483,23,23}, /* 22 */ 3339 1.2.2.2 skrll {7009,24,23}, /* 23 */ 3340 1.2.2.2 skrll {7558,25,22}, /* 24 */ 3341 1.2.2.2 skrll {8130,26,22}, /* 25 */ 3342 1.2.2.2 skrll {8726,27,22}, /* 26 */ 3343 1.2.2.2 skrll {9346,28,21}, /* 27 */ 3344 1.2.2.2 skrll {9991,29,21}, /* 28 */ 3345 1.2.2.2 skrll {10661,30,21}, /* 29 */ 3346 1.2.2.2 skrll {11358,31,20}, /* 30 */ 3347 1.2.2.2 skrll {12082,32,20}, /* 31 */ 3348 1.2.2.2 skrll {12834,33,20}, /* 32 */ 3349 1.2.2.2 skrll {13614,34,19}, /* 33 */ 3350 1.2.2.2 skrll {14424,35,19}, /* 34 */ 3351 1.2.2.2 skrll {15265,36,19}, /* 35 */ 3352 1.2.2.2 skrll {16137,37,19}, /* 36 */ 3353 1.2.2.2 skrll {17042,38,18}, /* 37 */ 3354 1.2.2.2 skrll {17981,39,18}, /* 38 */ 3355 1.2.2.2 skrll {18955,40,18}, /* 39 */ 3356 1.2.2.2 skrll {19965,41,17}, /* 40 */ 3357 1.2.2.2 skrll {21013,42,17}, /* 41 */ 3358 1.2.2.2 skrll {22101,43,17}, /* 42 */ 3359 1.2.2.2 skrll {23230,44,17}, /* 43 */ 3360 1.2.2.2 skrll {24402,45,16}, /* 44 */ 3361 1.2.2.2 skrll {25618,46,16}, /* 45 */ 3362 1.2.2.2 skrll {26881,47,16}, /* 46 */ 3363 1.2.2.2 skrll {28193,48,16}, /* 47 */ 3364 1.2.2.2 skrll {29557,49,15}, /* 48 */ 3365 1.2.2.2 skrll {30975,50,15}, /* 49 */ 3366 1.2.2.2 skrll {32450,51,15}, /* 50 */ 3367 1.2.2.2 skrll {33986,52,15}, /* 51 */ 3368 1.2.2.2 skrll {35586,53,14}, /* 52 */ 3369 1.2.2.2 skrll {37253,54,14}, /* 53 */ 3370 1.2.2.2 skrll {38992,55,14}, /* 54 */ 3371 1.2.2.2 skrll {40808,56,14}, /* 55 */ 3372 1.2.2.2 skrll {42707,57,13}, /* 56 */ 3373 1.2.2.2 skrll {44694,58,13}, /* 57 */ 3374 1.2.2.2 skrll {46776,59,13}, /* 58 */ 3375 1.2.2.2 skrll {48961,60,13}, /* 59 */ 3376 1.2.2.2 skrll {51258,61,13}, /* 60 */ 3377 1.2.2.2 skrll {53677,62,12}, /* 61 */ 3378 1.2.2.2 skrll {56230,63,12}, /* 62 */ 3379 1.2.2.2 skrll {58932,64,12}, /* 63 */ 3380 1.2.2.2 skrll {61799,65,12}, /* 64 */ 3381 1.2.2.2 skrll {64851,66,11}, /* 65 */ 3382 1.2.2.2 skrll {68113,67,11}, /* 66 */ 3383 1.2.2.2 skrll {71617,68,11}, /* 67 */ 3384 1.2.2.2 skrll {75401,69,10}, /* 68 */ 3385 1.2.2.2 skrll {79517,70,10}, /* 69 */ 3386 1.2.2.2 skrll {84035,71,10}, /* 70 */ 3387 1.2.2.2 skrll {89053,72,10}, /* 71 */ 3388 1.2.2.2 skrll {94717,73,9} /* 72 */ 3389 1.2.2.2 skrll }; 3390 1.2.2.2 skrll 3391 1.2.2.2 skrll static void 3392 1.2.2.2 skrll sctp_hs_cwnd_increase(struct sctp_nets *net) 3393 1.2.2.2 skrll { 3394 1.2.2.2 skrll int cur_val, i, indx, incr; 3395 1.2.2.2 skrll 3396 1.2.2.2 skrll cur_val = net->cwnd >> 10; 3397 1.2.2.2 skrll indx = SCTP_HS_TABLE_SIZE - 1; 3398 1.2.2.2 skrll 3399 1.2.2.2 skrll if (cur_val < sctp_cwnd_adjust[0].cwnd) { 3400 1.2.2.2 skrll /* normal mode */ 3401 1.2.2.2 skrll if (net->net_ack > net->mtu) { 3402 1.2.2.2 skrll net->cwnd += net->mtu; 3403 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3404 1.2.2.2 skrll sctp_log_cwnd(net, net->mtu, SCTP_CWND_LOG_FROM_SS); 3405 1.2.2.2 skrll #endif 3406 1.2.2.2 skrll } else { 3407 1.2.2.2 skrll net->cwnd += net->net_ack; 3408 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3409 1.2.2.2 skrll sctp_log_cwnd(net, net->net_ack, SCTP_CWND_LOG_FROM_SS); 3410 1.2.2.2 skrll #endif 3411 1.2.2.2 skrll } 3412 1.2.2.2 skrll } else { 3413 1.2.2.2 skrll for (i=net->last_hs_used; i<SCTP_HS_TABLE_SIZE; i++) { 3414 1.2.2.2 skrll if (cur_val < sctp_cwnd_adjust[i].cwnd) { 3415 1.2.2.2 skrll indx = i; 3416 1.2.2.2 skrll break; 3417 1.2.2.2 skrll } 3418 1.2.2.2 skrll } 3419 1.2.2.2 skrll net->last_hs_used = indx; 3420 1.2.2.2 skrll incr = ((sctp_cwnd_adjust[indx].increase) << 10); 3421 1.2.2.2 skrll net->cwnd += incr; 3422 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3423 1.2.2.2 skrll sctp_log_cwnd(net, incr, SCTP_CWND_LOG_FROM_SS); 3424 1.2.2.2 skrll #endif 3425 1.2.2.2 skrll } 3426 1.2.2.2 skrll } 3427 1.2.2.2 skrll 3428 1.2.2.2 skrll static void 3429 1.2.2.2 skrll sctp_hs_cwnd_decrease(struct sctp_nets *net) 3430 1.2.2.2 skrll { 3431 1.2.2.2 skrll int cur_val, i, indx; 3432 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3433 1.2.2.2 skrll int old_cwnd = net->cwnd; 3434 1.2.2.2 skrll #endif 3435 1.2.2.2 skrll 3436 1.2.2.2 skrll cur_val = net->cwnd >> 10; 3437 1.2.2.2 skrll indx = net->last_hs_used; 3438 1.2.2.2 skrll if (cur_val < sctp_cwnd_adjust[0].cwnd) { 3439 1.2.2.2 skrll /* normal mode */ 3440 1.2.2.2 skrll net->ssthresh = net->cwnd / 2; 3441 1.2.2.2 skrll if (net->ssthresh < (net->mtu*2)) { 3442 1.2.2.2 skrll net->ssthresh = 2 * net->mtu; 3443 1.2.2.2 skrll } 3444 1.2.2.2 skrll net->cwnd = net->ssthresh; 3445 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3446 1.2.2.2 skrll sctp_log_cwnd(net, (net->cwnd-old_cwnd), SCTP_CWND_LOG_FROM_FR); 3447 1.2.2.2 skrll #endif 3448 1.2.2.2 skrll } else { 3449 1.2.2.2 skrll /* drop by the proper amount */ 3450 1.2.2.2 skrll net->ssthresh = net->cwnd - (int)((net->cwnd / 100) * 3451 1.2.2.2 skrll sctp_cwnd_adjust[net->last_hs_used].drop_percent); 3452 1.2.2.2 skrll net->cwnd = net->ssthresh; 3453 1.2.2.2 skrll /* now where are we */ 3454 1.2.2.2 skrll indx = net->last_hs_used; 3455 1.2.2.2 skrll cur_val = net->cwnd >> 10; 3456 1.2.2.2 skrll /* reset where we are in the table */ 3457 1.2.2.2 skrll if (cur_val < sctp_cwnd_adjust[0].cwnd) { 3458 1.2.2.2 skrll /* feel out of hs */ 3459 1.2.2.2 skrll net->last_hs_used = 0; 3460 1.2.2.2 skrll } else { 3461 1.2.2.2 skrll for (i = indx; i >= 1; i--) { 3462 1.2.2.2 skrll if (cur_val > sctp_cwnd_adjust[i - 1].cwnd) { 3463 1.2.2.2 skrll break; 3464 1.2.2.2 skrll } 3465 1.2.2.2 skrll } 3466 1.2.2.2 skrll net->last_hs_used = indx; 3467 1.2.2.2 skrll } 3468 1.2.2.2 skrll } 3469 1.2.2.2 skrll } 3470 1.2.2.2 skrll #endif 3471 1.2.2.2 skrll 3472 1.2.2.2 skrll void 3473 1.2.2.2 skrll sctp_handle_sack(struct sctp_sack_chunk *ch, struct sctp_tcb *stcb, 3474 1.2.2.2 skrll struct sctp_nets *net_from, int *abort_now) 3475 1.2.2.2 skrll { 3476 1.2.2.2 skrll struct sctp_association *asoc; 3477 1.2.2.2 skrll struct sctp_sack *sack; 3478 1.2.2.2 skrll struct sctp_tmit_chunk *tp1, *tp2; 3479 1.2.2.2 skrll u_long cum_ack, last_tsn, biggest_tsn_acked, biggest_tsn_newly_acked; 3480 1.2.2.2 skrll uint16_t num_seg; 3481 1.2.2.2 skrll unsigned int sack_length; 3482 1.2.2.2 skrll uint32_t send_s; 3483 1.2.2.2 skrll int some_on_streamwheel; 3484 1.2.2.2 skrll int strike_enabled = 0, cnt_of_cacc = 0; 3485 1.2.2.2 skrll int accum_moved = 0; 3486 1.2.2.2 skrll int marking_allowed = 1; 3487 1.2.2.2 skrll int will_exit_fast_recovery=0; 3488 1.2.2.2 skrll u_int32_t a_rwnd; 3489 1.2.2.2 skrll struct sctp_nets *net = NULL; 3490 1.2.2.2 skrll int nonce_sum_flag, ecn_seg_sums=0; 3491 1.2.2.2 skrll asoc = &stcb->asoc; 3492 1.2.2.2 skrll 3493 1.2.2.2 skrll /* 3494 1.2.2.2 skrll * Handle the incoming sack on data I have been sending. 3495 1.2.2.2 skrll */ 3496 1.2.2.2 skrll 3497 1.2.2.2 skrll /* 3498 1.2.2.2 skrll * we take any chance we can to service our queues since we 3499 1.2.2.2 skrll * cannot get awoken when the socket is read from :< 3500 1.2.2.2 skrll */ 3501 1.2.2.2 skrll asoc->overall_error_count = 0; 3502 1.2.2.2 skrll 3503 1.2.2.2 skrll if (asoc->sent_queue_retran_cnt) { 3504 1.2.2.2 skrll #ifdef SCTP_DEBUG 3505 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 3506 1.2.2.2 skrll printf("Handling SACK for asoc:%p retran:%d\n", 3507 1.2.2.2 skrll asoc, asoc->sent_queue_retran_cnt); 3508 1.2.2.2 skrll } 3509 1.2.2.2 skrll #endif 3510 1.2.2.2 skrll } 3511 1.2.2.2 skrll 3512 1.2.2.2 skrll sctp_service_queues(stcb, asoc, 0); 3513 1.2.2.2 skrll 3514 1.2.2.2 skrll /* 3515 1.2.2.2 skrll * Now perform the actual SACK handling: 3516 1.2.2.2 skrll * 1) Verify that it is not an old sack, if so discard. 3517 1.2.2.2 skrll * 2) If there is nothing left in the send queue (cum-ack is equal 3518 1.2.2.2 skrll * to last acked) then you have a duplicate too, update any rwnd 3519 1.2.2.2 skrll * change and verify no timers are running. then return. 3520 1.2.2.2 skrll * 3) Process any new consequtive data i.e. cum-ack moved 3521 1.2.2.2 skrll * process these first and note that it moved. 3522 1.2.2.2 skrll * 4) Process any sack blocks. 3523 1.2.2.2 skrll * 5) Drop any acked from the queue. 3524 1.2.2.2 skrll * 6) Check for any revoked blocks and mark. 3525 1.2.2.2 skrll * 7) Update the cwnd. 3526 1.2.2.2 skrll * 8) Nothing left, sync up flightsizes and things, stop all timers 3527 1.2.2.2 skrll * and also check for shutdown_pending state. If so then go ahead 3528 1.2.2.2 skrll * and send off the shutdown. If in shutdown recv, send off the 3529 1.2.2.2 skrll * shutdown-ack and start that timer, Ret. 3530 1.2.2.2 skrll * 9) Strike any non-acked things and do FR procedure if needed being 3531 1.2.2.2 skrll * sure to set the FR flag. 3532 1.2.2.2 skrll * 10) Do pr-sctp procedures. 3533 1.2.2.2 skrll * 11) Apply any FR penalties. 3534 1.2.2.2 skrll * 12) Assure we will SACK if in shutdown_recv state. 3535 1.2.2.2 skrll */ 3536 1.2.2.2 skrll 3537 1.2.2.2 skrll sack_length = ntohs(ch->ch.chunk_length); 3538 1.2.2.2 skrll if (sack_length < sizeof(struct sctp_sack_chunk)) { 3539 1.2.2.2 skrll #ifdef SCTP_DEBUG 3540 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 3541 1.2.2.2 skrll printf("Bad size on sack chunk .. to small\n"); 3542 1.2.2.2 skrll } 3543 1.2.2.2 skrll #endif 3544 1.2.2.2 skrll return; 3545 1.2.2.2 skrll } 3546 1.2.2.2 skrll /* ECN Nonce */ 3547 1.2.2.2 skrll nonce_sum_flag = ch->ch.chunk_flags & SCTP_SACK_NONCE_SUM; 3548 1.2.2.2 skrll sack = &ch->sack; 3549 1.2.2.2 skrll cum_ack = last_tsn = ntohl(sack->cum_tsn_ack); 3550 1.2.2.2 skrll num_seg = ntohs(sack->num_gap_ack_blks); 3551 1.2.2.2 skrll 3552 1.2.2.2 skrll /* reality check */ 3553 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->send_queue)) { 3554 1.2.2.2 skrll send_s = asoc->sending_seq; 3555 1.2.2.2 skrll } else { 3556 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->send_queue); 3557 1.2.2.2 skrll send_s = tp1->rec.data.TSN_seq; 3558 1.2.2.2 skrll } 3559 1.2.2.2 skrll 3560 1.2.2.2 skrll if (sctp_strict_sacks) { 3561 1.2.2.2 skrll if (cum_ack == send_s || 3562 1.2.2.2 skrll compare_with_wrap(cum_ack, send_s, MAX_TSN)) { 3563 1.2.2.2 skrll struct mbuf *oper; 3564 1.2.2.2 skrll /* 3565 1.2.2.2 skrll * no way, we have not even sent this TSN out yet. 3566 1.2.2.2 skrll * Peer is hopelessly messed up with us. 3567 1.2.2.2 skrll */ 3568 1.2.2.2 skrll hopeless_peer: 3569 1.2.2.2 skrll *abort_now = 1; 3570 1.2.2.2 skrll /* XXX */ 3571 1.2.2.2 skrll MGET(oper, M_DONTWAIT, MT_DATA); 3572 1.2.2.2 skrll if (oper) { 3573 1.2.2.2 skrll struct sctp_paramhdr *ph; 3574 1.2.2.2 skrll u_int32_t *ippp; 3575 1.2.2.2 skrll 3576 1.2.2.2 skrll oper->m_len = sizeof(struct sctp_paramhdr) + 3577 1.2.2.2 skrll sizeof(*ippp); 3578 1.2.2.2 skrll ph = mtod(oper, struct sctp_paramhdr *); 3579 1.2.2.2 skrll ph->param_type = htons(SCTP_CAUSE_PROTOCOL_VIOLATION); 3580 1.2.2.2 skrll ph->param_length = htons(oper->m_len); 3581 1.2.2.2 skrll ippp = (u_int32_t *)(ph + 1); 3582 1.2.2.2 skrll *ippp = htonl(0x30000002); 3583 1.2.2.2 skrll } 3584 1.2.2.2 skrll sctp_abort_an_association(stcb->sctp_ep, stcb, SCTP_PEER_FAULTY, oper); 3585 1.2.2.2 skrll return; 3586 1.2.2.2 skrll } 3587 1.2.2.2 skrll } 3588 1.2.2.2 skrll /* update the Rwnd of the peer */ 3589 1.2.2.2 skrll a_rwnd = (u_int32_t)ntohl(sack->a_rwnd); 3590 1.2.2.2 skrll if (asoc->sent_queue_retran_cnt) { 3591 1.2.2.2 skrll #ifdef SCTP_DEBUG 3592 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 3593 1.2.2.2 skrll printf("cum_ack:%lx num_seg:%u last_acked_seq:%x\n", 3594 1.2.2.2 skrll cum_ack, (u_int)num_seg, asoc->last_acked_seq); 3595 1.2.2.2 skrll } 3596 1.2.2.2 skrll #endif 3597 1.2.2.2 skrll } 3598 1.2.2.2 skrll if (compare_with_wrap(asoc->t3timeout_highest_marked, cum_ack, MAX_TSN)) { 3599 1.2.2.2 skrll /* we are not allowed to mark for FR */ 3600 1.2.2.2 skrll marking_allowed = 0; 3601 1.2.2.2 skrll } 3602 1.2.2.2 skrll /**********************/ 3603 1.2.2.2 skrll /* 1) check the range */ 3604 1.2.2.2 skrll /**********************/ 3605 1.2.2.2 skrll if (compare_with_wrap(asoc->last_acked_seq, last_tsn, MAX_TSN)) { 3606 1.2.2.2 skrll /* acking something behind */ 3607 1.2.2.2 skrll if (asoc->sent_queue_retran_cnt) { 3608 1.2.2.2 skrll #ifdef SCTP_DEBUG 3609 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 3610 1.2.2.2 skrll printf("The cum-ack is behind us\n"); 3611 1.2.2.2 skrll } 3612 1.2.2.2 skrll #endif 3613 1.2.2.2 skrll } 3614 1.2.2.2 skrll return; 3615 1.2.2.2 skrll } 3616 1.2.2.2 skrll 3617 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->sent_queue)) { 3618 1.2.2.2 skrll /* nothing left on sendqueue.. consider done */ 3619 1.2.2.2 skrll #ifdef SCTP_LOG_RWND 3620 1.2.2.2 skrll sctp_log_rwnd_set(SCTP_SET_PEER_RWND_VIA_SACK, 3621 1.2.2.2 skrll asoc->peers_rwnd, 0, 0, a_rwnd); 3622 1.2.2.2 skrll #endif 3623 1.2.2.2 skrll asoc->peers_rwnd = a_rwnd; 3624 1.2.2.2 skrll if (asoc->sent_queue_retran_cnt) { 3625 1.2.2.2 skrll #ifdef SCTP_DEBUG 3626 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 3627 1.2.2.2 skrll printf("Huh? retran set but none on queue\n"); 3628 1.2.2.2 skrll } 3629 1.2.2.2 skrll #endif 3630 1.2.2.2 skrll asoc->sent_queue_retran_cnt = 0; 3631 1.2.2.2 skrll } 3632 1.2.2.2 skrll if (asoc->peers_rwnd < stcb->sctp_ep->sctp_ep.sctp_sws_sender) { 3633 1.2.2.2 skrll /* SWS sender side engages */ 3634 1.2.2.2 skrll asoc->peers_rwnd = 0; 3635 1.2.2.2 skrll } 3636 1.2.2.2 skrll /* stop any timers */ 3637 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3638 1.2.2.2 skrll sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, 3639 1.2.2.2 skrll stcb, net); 3640 1.2.2.2 skrll net->partial_bytes_acked = 0; 3641 1.2.2.2 skrll net->flight_size = 0; 3642 1.2.2.2 skrll } 3643 1.2.2.2 skrll asoc->total_flight = 0; 3644 1.2.2.2 skrll asoc->total_flight_count = 0; 3645 1.2.2.2 skrll return; 3646 1.2.2.2 skrll } 3647 1.2.2.2 skrll /* 3648 1.2.2.2 skrll * We init netAckSz and netAckSz2 to 0. These are used to track 2 3649 1.2.2.2 skrll * things. The total byte count acked is tracked in netAckSz AND 3650 1.2.2.2 skrll * netAck2 is used to track the total bytes acked that are un- 3651 1.2.2.2 skrll * amibguious and were never retransmitted. We track these on a 3652 1.2.2.2 skrll * per destination address basis. 3653 1.2.2.2 skrll */ 3654 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3655 1.2.2.2 skrll net->prev_cwnd = net->cwnd; 3656 1.2.2.2 skrll net->net_ack = 0; 3657 1.2.2.2 skrll net->net_ack2 = 0; 3658 1.2.2.2 skrll } 3659 1.2.2.2 skrll /* process the new consecutive TSN first */ 3660 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 3661 1.2.2.2 skrll while (tp1) { 3662 1.2.2.2 skrll if (compare_with_wrap(last_tsn, tp1->rec.data.TSN_seq, 3663 1.2.2.2 skrll MAX_TSN) || 3664 1.2.2.2 skrll last_tsn == tp1->rec.data.TSN_seq) { 3665 1.2.2.2 skrll if (tp1->sent != SCTP_DATAGRAM_UNSENT) { 3666 1.2.2.2 skrll /* ECN Nonce: Add the nonce to the sender's nonce sum */ 3667 1.2.2.2 skrll asoc->nonce_sum_expect_base += tp1->rec.data.ect_nonce; 3668 1.2.2.2 skrll accum_moved = 1; 3669 1.2.2.2 skrll if (tp1->sent < SCTP_DATAGRAM_ACKED) { 3670 1.2.2.2 skrll /* 3671 1.2.2.2 skrll * If it is less than ACKED, it is now 3672 1.2.2.2 skrll * no-longer in flight. Higher values 3673 1.2.2.2 skrll * may occur during marking 3674 1.2.2.2 skrll */ 3675 1.2.2.2 skrll if ((tp1->whoTo->dest_state & 3676 1.2.2.2 skrll SCTP_ADDR_UNCONFIRMED) && 3677 1.2.2.2 skrll (tp1->snd_count < 2) ) { 3678 1.2.2.2 skrll /* 3679 1.2.2.2 skrll * If there was no retran and 3680 1.2.2.2 skrll * the address is un-confirmed 3681 1.2.2.2 skrll * and we sent there and are 3682 1.2.2.2 skrll * now sacked.. its confirmed, 3683 1.2.2.2 skrll * mark it so. 3684 1.2.2.2 skrll */ 3685 1.2.2.2 skrll tp1->whoTo->dest_state &= 3686 1.2.2.2 skrll ~SCTP_ADDR_UNCONFIRMED; 3687 1.2.2.2 skrll } 3688 1.2.2.2 skrll sctp_flight_size_decrease(tp1); 3689 1.2.2.2 skrll sctp_total_flight_decrease(stcb, tp1); 3690 1.2.2.2 skrll tp1->whoTo->net_ack += tp1->send_size; 3691 1.2.2.2 skrll if (tp1->snd_count < 2) { 3692 1.2.2.2 skrll /* True non-retransmited chunk */ 3693 1.2.2.2 skrll tp1->whoTo->net_ack2 += 3694 1.2.2.2 skrll tp1->send_size; 3695 1.2.2.2 skrll /* update RTO too? */ 3696 1.2.2.2 skrll if (tp1->do_rtt) { 3697 1.2.2.2 skrll tp1->whoTo->RTO = 3698 1.2.2.2 skrll sctp_calculate_rto(stcb, 3699 1.2.2.2 skrll asoc, tp1->whoTo, 3700 1.2.2.2 skrll &tp1->sent_rcv_time); 3701 1.2.2.2 skrll tp1->whoTo->rto_pending = 0; 3702 1.2.2.2 skrll tp1->do_rtt = 0; 3703 1.2.2.2 skrll } 3704 1.2.2.2 skrll } 3705 1.2.2.2 skrll } 3706 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_RESEND) { 3707 1.2.2.2 skrll #ifdef SCTP_DEBUG 3708 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA3) { 3709 1.2.2.2 skrll printf("Hmm. one that is in RESEND that is now ACKED\n"); 3710 1.2.2.2 skrll } 3711 1.2.2.2 skrll #endif 3712 1.2.2.2 skrll sctp_ucount_decr(asoc->sent_queue_retran_cnt); 3713 1.2.2.2 skrll #ifdef SCTP_AUDITING_ENABLED 3714 1.2.2.2 skrll sctp_audit_log(0xB3, 3715 1.2.2.2 skrll (asoc->sent_queue_retran_cnt & 0x000000ff)); 3716 1.2.2.2 skrll #endif 3717 1.2.2.2 skrll 3718 1.2.2.2 skrll } 3719 1.2.2.2 skrll tp1->sent = SCTP_DATAGRAM_ACKED; 3720 1.2.2.2 skrll } 3721 1.2.2.2 skrll } else { 3722 1.2.2.2 skrll break; 3723 1.2.2.2 skrll } 3724 1.2.2.2 skrll tp1 = TAILQ_NEXT(tp1, sctp_next); 3725 1.2.2.2 skrll } 3726 1.2.2.2 skrll /*******************************************/ 3727 1.2.2.2 skrll /* cancel ALL T3-send timer if accum moved */ 3728 1.2.2.2 skrll /*******************************************/ 3729 1.2.2.2 skrll if (accum_moved) { 3730 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3731 1.2.2.2 skrll sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, 3732 1.2.2.2 skrll stcb, net); 3733 1.2.2.2 skrll } 3734 1.2.2.2 skrll } 3735 1.2.2.2 skrll biggest_tsn_newly_acked = biggest_tsn_acked = last_tsn; 3736 1.2.2.2 skrll /* always set this up to cum-ack */ 3737 1.2.2.2 skrll asoc->this_sack_highest_gap = last_tsn; 3738 1.2.2.2 skrll 3739 1.2.2.2 skrll if (num_seg * sizeof(struct sctp_gap_ack_block) + sizeof(struct sctp_sack_chunk) > sack_length) { 3740 1.2.2.2 skrll /* skip corrupt segments */ 3741 1.2.2.2 skrll strike_enabled = 0; 3742 1.2.2.2 skrll goto skip_segments; 3743 1.2.2.2 skrll } 3744 1.2.2.2 skrll 3745 1.2.2.2 skrll if (num_seg > 0) { 3746 1.2.2.2 skrll if (asoc->primary_destination->dest_state & 3747 1.2.2.2 skrll SCTP_ADDR_SWITCH_PRIMARY) { 3748 1.2.2.2 skrll /* clear the nets CACC flags */ 3749 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3750 1.2.2.2 skrll net->cacc_saw_newack = 0; 3751 1.2.2.2 skrll } 3752 1.2.2.2 skrll } 3753 1.2.2.2 skrll /* 3754 1.2.2.2 skrll * thisSackHighestGap will increase while handling NEW segments 3755 1.2.2.2 skrll */ 3756 1.2.2.2 skrll 3757 1.2.2.2 skrll sctp_handle_segments(stcb, asoc, ch, last_tsn, 3758 1.2.2.2 skrll &biggest_tsn_acked, &biggest_tsn_newly_acked, 3759 1.2.2.2 skrll num_seg, &ecn_seg_sums); 3760 1.2.2.2 skrll 3761 1.2.2.2 skrll if (sctp_strict_sacks) { 3762 1.2.2.2 skrll /* validate the biggest_tsn_acked in the gap acks 3763 1.2.2.2 skrll * if strict adherence is wanted. 3764 1.2.2.2 skrll */ 3765 1.2.2.2 skrll if ((biggest_tsn_acked == send_s) || 3766 1.2.2.2 skrll (compare_with_wrap(biggest_tsn_acked, send_s, MAX_TSN))) { 3767 1.2.2.2 skrll /* 3768 1.2.2.2 skrll * peer is either confused or we are under 3769 1.2.2.2 skrll * attack. We must abort. 3770 1.2.2.2 skrll */ 3771 1.2.2.2 skrll goto hopeless_peer; 3772 1.2.2.2 skrll } 3773 1.2.2.2 skrll } 3774 1.2.2.2 skrll 3775 1.2.2.2 skrll if (asoc->primary_destination->dest_state & 3776 1.2.2.2 skrll SCTP_ADDR_SWITCH_PRIMARY) { 3777 1.2.2.2 skrll /* clear the nets CACC flags */ 3778 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3779 1.2.2.2 skrll if (net->cacc_saw_newack) { 3780 1.2.2.2 skrll cnt_of_cacc++; 3781 1.2.2.2 skrll } 3782 1.2.2.2 skrll } 3783 1.2.2.2 skrll } 3784 1.2.2.2 skrll 3785 1.2.2.2 skrll } 3786 1.2.2.2 skrll 3787 1.2.2.2 skrll if (cnt_of_cacc < 2) { 3788 1.2.2.2 skrll strike_enabled = 1; 3789 1.2.2.2 skrll } else { 3790 1.2.2.2 skrll strike_enabled = 0; 3791 1.2.2.2 skrll } 3792 1.2.2.2 skrll skip_segments: 3793 1.2.2.2 skrll /********************************************/ 3794 1.2.2.2 skrll /* drop the acked chunks from the sendqueue */ 3795 1.2.2.2 skrll /********************************************/ 3796 1.2.2.2 skrll asoc->last_acked_seq = cum_ack; 3797 1.2.2.2 skrll if (asoc->primary_destination->dest_state & SCTP_ADDR_SWITCH_PRIMARY) { 3798 1.2.2.2 skrll if ((cum_ack == asoc->primary_destination->next_tsn_at_change) || 3799 1.2.2.2 skrll (compare_with_wrap(cum_ack, 3800 1.2.2.2 skrll asoc->primary_destination->next_tsn_at_change, MAX_TSN))) { 3801 1.2.2.2 skrll struct sctp_nets *lnet; 3802 1.2.2.2 skrll /* Turn off the switch flag for ALL addresses */ 3803 1.2.2.2 skrll TAILQ_FOREACH(lnet, &asoc->nets, sctp_next) { 3804 1.2.2.2 skrll asoc->primary_destination->dest_state &= 3805 1.2.2.2 skrll ~(SCTP_ADDR_SWITCH_PRIMARY|SCTP_ADDR_DOUBLE_SWITCH); 3806 1.2.2.2 skrll } 3807 1.2.2.2 skrll } 3808 1.2.2.2 skrll } 3809 1.2.2.2 skrll /* Drag along the t3 timeout point so we don't have a problem at wrap */ 3810 1.2.2.2 skrll if (marking_allowed) { 3811 1.2.2.2 skrll asoc->t3timeout_highest_marked = cum_ack; 3812 1.2.2.2 skrll } 3813 1.2.2.2 skrll tp1 = TAILQ_FIRST(&asoc->sent_queue); 3814 1.2.2.2 skrll do { 3815 1.2.2.2 skrll if (compare_with_wrap(tp1->rec.data.TSN_seq, cum_ack, 3816 1.2.2.2 skrll MAX_TSN)) { 3817 1.2.2.2 skrll break; 3818 1.2.2.2 skrll } 3819 1.2.2.2 skrll if (tp1->sent == SCTP_DATAGRAM_UNSENT) { 3820 1.2.2.2 skrll /* no more sent on list */ 3821 1.2.2.2 skrll break; 3822 1.2.2.2 skrll } 3823 1.2.2.2 skrll tp2 = TAILQ_NEXT(tp1, sctp_next); 3824 1.2.2.2 skrll TAILQ_REMOVE(&asoc->sent_queue, tp1, sctp_next); 3825 1.2.2.2 skrll if (tp1->data) { 3826 1.2.2.2 skrll sctp_free_bufspace(stcb, asoc, tp1); 3827 1.2.2.2 skrll #ifdef SCTP_DEBUG 3828 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_OUTPUT2) { 3829 1.2.2.2 skrll printf("--total out:%lu total_mbuf_out:%lu\n", 3830 1.2.2.2 skrll (u_long)asoc->total_output_queue_size, 3831 1.2.2.2 skrll (u_long)asoc->total_output_mbuf_queue_size); 3832 1.2.2.2 skrll } 3833 1.2.2.2 skrll #endif 3834 1.2.2.2 skrll 3835 1.2.2.2 skrll sctp_m_freem(tp1->data); 3836 1.2.2.2 skrll if (tp1->flags & SCTP_PR_SCTP_BUFFER) { 3837 1.2.2.2 skrll asoc->sent_queue_cnt_removeable--; 3838 1.2.2.2 skrll } 3839 1.2.2.2 skrll 3840 1.2.2.2 skrll } 3841 1.2.2.2 skrll tp1->data = NULL; 3842 1.2.2.2 skrll asoc->sent_queue_cnt--; 3843 1.2.2.2 skrll sctp_free_remote_addr(tp1->whoTo); 3844 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 3845 1.2.2.2 skrll asoc->chunks_on_out_queue--; 3846 1.2.2.2 skrll 3847 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 3848 1.2.2.2 skrll panic("Chunk count is going negative"); 3849 1.2.2.2 skrll } 3850 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, tp1); 3851 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 3852 1.2.2.2 skrll sctp_sowwakeup(stcb->sctp_ep, stcb->sctp_socket); 3853 1.2.2.2 skrll tp1 = tp2; 3854 1.2.2.2 skrll } while (tp1 != NULL); 3855 1.2.2.2 skrll 3856 1.2.2.2 skrll 3857 1.2.2.2 skrll if (asoc->fast_retran_loss_recovery && accum_moved) { 3858 1.2.2.2 skrll if (compare_with_wrap(asoc->last_acked_seq, 3859 1.2.2.2 skrll asoc->fast_recovery_tsn, MAX_TSN) || 3860 1.2.2.2 skrll asoc->last_acked_seq == asoc->fast_recovery_tsn) { 3861 1.2.2.2 skrll /* Setup so we will exit RFC2582 fast recovery */ 3862 1.2.2.2 skrll will_exit_fast_recovery = 1; 3863 1.2.2.2 skrll } 3864 1.2.2.2 skrll } 3865 1.2.2.2 skrll 3866 1.2.2.2 skrll /* Check for revoked fragments if we hand 3867 1.2.2.2 skrll * fragments in a previous segment. If we 3868 1.2.2.2 skrll * had no previous fragments we cannot have 3869 1.2.2.2 skrll * a revoke issue. 3870 1.2.2.2 skrll */ 3871 1.2.2.2 skrll if (asoc->saw_sack_with_frags) 3872 1.2.2.2 skrll sctp_check_for_revoked(asoc, cum_ack, biggest_tsn_acked); 3873 1.2.2.2 skrll 3874 1.2.2.2 skrll if (num_seg) 3875 1.2.2.2 skrll asoc->saw_sack_with_frags = 1; 3876 1.2.2.2 skrll else 3877 1.2.2.2 skrll asoc->saw_sack_with_frags = 0; 3878 1.2.2.2 skrll 3879 1.2.2.2 skrll /******************************/ 3880 1.2.2.2 skrll /* update cwnd */ 3881 1.2.2.2 skrll /******************************/ 3882 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 3883 1.2.2.2 skrll /* if nothing was acked on this destination skip it */ 3884 1.2.2.2 skrll if (net->net_ack == 0) 3885 1.2.2.2 skrll continue; 3886 1.2.2.2 skrll 3887 1.2.2.2 skrll if (net->net_ack2 > 0) { 3888 1.2.2.2 skrll /* 3889 1.2.2.2 skrll * Karn's rule applies to clearing error count, 3890 1.2.2.2 skrll * this is optional. 3891 1.2.2.2 skrll */ 3892 1.2.2.2 skrll net->error_count = 0; 3893 1.2.2.2 skrll if ((net->dest_state&SCTP_ADDR_NOT_REACHABLE) == 3894 1.2.2.2 skrll SCTP_ADDR_NOT_REACHABLE) { 3895 1.2.2.2 skrll /* addr came good */ 3896 1.2.2.2 skrll net->dest_state &= ~SCTP_ADDR_NOT_REACHABLE; 3897 1.2.2.2 skrll net->dest_state |= SCTP_ADDR_REACHABLE; 3898 1.2.2.2 skrll sctp_ulp_notify(SCTP_NOTIFY_INTERFACE_UP, stcb, 3899 1.2.2.2 skrll SCTP_RECEIVED_SACK, (void *)net); 3900 1.2.2.2 skrll /* now was it the primary? if so restore */ 3901 1.2.2.2 skrll if (net->dest_state & SCTP_ADDR_WAS_PRIMARY) { 3902 1.2.2.2 skrll sctp_set_primary_addr(stcb, (struct sockaddr *)NULL, net); 3903 1.2.2.2 skrll } 3904 1.2.2.2 skrll } 3905 1.2.2.2 skrll } 3906 1.2.2.2 skrll 3907 1.2.2.2 skrll if (asoc->fast_retran_loss_recovery && 3908 1.2.2.2 skrll will_exit_fast_recovery == 0) { 3909 1.2.2.2 skrll /* If we are in loss recovery we skip any cwnd update */ 3910 1.2.2.2 skrll sctp_pegs[SCTP_CWND_SKIP]++; 3911 1.2.2.2 skrll goto skip_cwnd_update; 3912 1.2.2.2 skrll } 3913 1.2.2.2 skrll if (accum_moved) { 3914 1.2.2.2 skrll /* If the cumulative ack moved we can proceed */ 3915 1.2.2.2 skrll if (net->cwnd <= net->ssthresh) { 3916 1.2.2.2 skrll /* We are in slow start */ 3917 1.2.2.2 skrll if (net->flight_size + net->net_ack >= 3918 1.2.2.2 skrll net->cwnd ) { 3919 1.2.2.2 skrll #ifdef SCTP_HIGH_SPEED 3920 1.2.2.2 skrll sctp_hs_cwnd_increase(net); 3921 1.2.2.2 skrll #else 3922 1.2.2.2 skrll if (net->net_ack > net->mtu) { 3923 1.2.2.2 skrll net->cwnd += net->mtu; 3924 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3925 1.2.2.2 skrll sctp_log_cwnd(net, net->mtu, 3926 1.2.2.2 skrll SCTP_CWND_LOG_FROM_SS); 3927 1.2.2.2 skrll #endif 3928 1.2.2.2 skrll 3929 1.2.2.2 skrll } else { 3930 1.2.2.2 skrll net->cwnd += net->net_ack; 3931 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3932 1.2.2.2 skrll sctp_log_cwnd(net, net->net_ack, 3933 1.2.2.2 skrll SCTP_CWND_LOG_FROM_SS); 3934 1.2.2.2 skrll #endif 3935 1.2.2.2 skrll 3936 1.2.2.2 skrll } 3937 1.2.2.2 skrll #endif 3938 1.2.2.2 skrll sctp_pegs[SCTP_CWND_SS]++; 3939 1.2.2.2 skrll } else { 3940 1.2.2.2 skrll unsigned int dif; 3941 1.2.2.2 skrll sctp_pegs[SCTP_CWND_NOUSE_SS]++; 3942 1.2.2.2 skrll dif = net->cwnd - (net->flight_size + 3943 1.2.2.2 skrll net->net_ack); 3944 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3945 1.2.2.2 skrll /* sctp_log_cwnd(net, net->net_ack, 3946 1.2.2.2 skrll SCTP_CWND_LOG_NOADV_SS);*/ 3947 1.2.2.2 skrll #endif 3948 1.2.2.2 skrll if (dif > sctp_pegs[SCTP_CWND_DIFF_SA]) { 3949 1.2.2.2 skrll sctp_pegs[SCTP_CWND_DIFF_SA] = 3950 1.2.2.2 skrll dif; 3951 1.2.2.2 skrll sctp_pegs[SCTP_OQS_AT_SS] = 3952 1.2.2.2 skrll asoc->total_output_queue_size; 3953 1.2.2.2 skrll sctp_pegs[SCTP_SQQ_AT_SS] = 3954 1.2.2.2 skrll asoc->sent_queue_cnt; 3955 1.2.2.2 skrll sctp_pegs[SCTP_SQC_AT_SS] = 3956 1.2.2.2 skrll asoc->send_queue_cnt; 3957 1.2.2.2 skrll } 3958 1.2.2.2 skrll } 3959 1.2.2.2 skrll } else { 3960 1.2.2.2 skrll /* We are in congestion avoidance */ 3961 1.2.2.2 skrll if (net->flight_size + net->net_ack >= 3962 1.2.2.2 skrll net->cwnd) { 3963 1.2.2.2 skrll /* 3964 1.2.2.2 skrll * add to pba only if we had a cwnd's 3965 1.2.2.2 skrll * worth (or so) in flight OR the 3966 1.2.2.2 skrll * burst limit was applied. 3967 1.2.2.2 skrll */ 3968 1.2.2.2 skrll net->partial_bytes_acked += 3969 1.2.2.2 skrll net->net_ack; 3970 1.2.2.2 skrll 3971 1.2.2.2 skrll /* 3972 1.2.2.2 skrll * Do we need to increase 3973 1.2.2.2 skrll * (if pba is > cwnd)? 3974 1.2.2.2 skrll */ 3975 1.2.2.2 skrll if (net->partial_bytes_acked >= 3976 1.2.2.2 skrll net->cwnd) { 3977 1.2.2.2 skrll if (net->cwnd < 3978 1.2.2.2 skrll net->partial_bytes_acked) { 3979 1.2.2.2 skrll net->partial_bytes_acked -= 3980 1.2.2.2 skrll net->cwnd; 3981 1.2.2.2 skrll } else { 3982 1.2.2.2 skrll net->partial_bytes_acked = 3983 1.2.2.2 skrll 0; 3984 1.2.2.2 skrll } 3985 1.2.2.2 skrll net->cwnd += net->mtu; 3986 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3987 1.2.2.2 skrll sctp_log_cwnd(net, net->mtu, 3988 1.2.2.2 skrll SCTP_CWND_LOG_FROM_CA); 3989 1.2.2.2 skrll #endif 3990 1.2.2.2 skrll sctp_pegs[SCTP_CWND_CA]++; 3991 1.2.2.2 skrll } 3992 1.2.2.2 skrll } else { 3993 1.2.2.2 skrll unsigned int dif; 3994 1.2.2.2 skrll sctp_pegs[SCTP_CWND_NOUSE_CA]++; 3995 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 3996 1.2.2.2 skrll /* sctp_log_cwnd(net, net->net_ack, 3997 1.2.2.2 skrll SCTP_CWND_LOG_NOADV_CA); 3998 1.2.2.2 skrll */ 3999 1.2.2.2 skrll #endif 4000 1.2.2.2 skrll dif = net->cwnd - (net->flight_size + 4001 1.2.2.2 skrll net->net_ack); 4002 1.2.2.2 skrll if (dif > sctp_pegs[SCTP_CWND_DIFF_CA]) { 4003 1.2.2.2 skrll sctp_pegs[SCTP_CWND_DIFF_CA] = 4004 1.2.2.2 skrll dif; 4005 1.2.2.2 skrll sctp_pegs[SCTP_OQS_AT_CA] = 4006 1.2.2.2 skrll asoc->total_output_queue_size; 4007 1.2.2.2 skrll sctp_pegs[SCTP_SQQ_AT_CA] = 4008 1.2.2.2 skrll asoc->sent_queue_cnt; 4009 1.2.2.2 skrll sctp_pegs[SCTP_SQC_AT_CA] = 4010 1.2.2.2 skrll asoc->send_queue_cnt; 4011 1.2.2.2 skrll 4012 1.2.2.2 skrll } 4013 1.2.2.2 skrll 4014 1.2.2.2 skrll } 4015 1.2.2.2 skrll } 4016 1.2.2.2 skrll } else { 4017 1.2.2.2 skrll sctp_pegs[SCTP_CWND_NOCUM]++; 4018 1.2.2.2 skrll } 4019 1.2.2.2 skrll skip_cwnd_update: 4020 1.2.2.2 skrll /* 4021 1.2.2.2 skrll * NOW, according to Karn's rule do we need to restore the 4022 1.2.2.2 skrll * RTO timer back? Check our net_ack2. If not set then we 4023 1.2.2.2 skrll * have a ambiguity.. i.e. all data ack'd was sent to more 4024 1.2.2.2 skrll * than one place. 4025 1.2.2.2 skrll */ 4026 1.2.2.2 skrll 4027 1.2.2.2 skrll if (net->net_ack2) { 4028 1.2.2.2 skrll /* restore any doubled timers */ 4029 1.2.2.2 skrll net->RTO = ((net->lastsa >> 2) + net->lastsv) >> 1; 4030 1.2.2.2 skrll if (net->RTO < stcb->asoc.minrto) { 4031 1.2.2.2 skrll net->RTO = stcb->asoc.minrto; 4032 1.2.2.2 skrll } 4033 1.2.2.2 skrll if (net->RTO > stcb->asoc.maxrto) { 4034 1.2.2.2 skrll net->RTO = stcb->asoc.maxrto; 4035 1.2.2.2 skrll } 4036 1.2.2.2 skrll } 4037 1.2.2.2 skrll if (net->cwnd > sctp_pegs[SCTP_MAX_CWND]) { 4038 1.2.2.2 skrll sctp_pegs[SCTP_MAX_CWND] = net->cwnd; 4039 1.2.2.2 skrll } 4040 1.2.2.2 skrll } 4041 1.2.2.2 skrll /**********************************/ 4042 1.2.2.2 skrll /* Now what about shutdown issues */ 4043 1.2.2.2 skrll /**********************************/ 4044 1.2.2.2 skrll some_on_streamwheel = 0; 4045 1.2.2.2 skrll if (!TAILQ_EMPTY(&asoc->out_wheel)) { 4046 1.2.2.2 skrll /* Check to see if some data queued */ 4047 1.2.2.2 skrll struct sctp_stream_out *outs; 4048 1.2.2.2 skrll TAILQ_FOREACH(outs, &asoc->out_wheel, next_spoke) { 4049 1.2.2.2 skrll if (!TAILQ_EMPTY(&outs->outqueue)) { 4050 1.2.2.2 skrll some_on_streamwheel = 1; 4051 1.2.2.2 skrll break; 4052 1.2.2.2 skrll } 4053 1.2.2.2 skrll } 4054 1.2.2.2 skrll } 4055 1.2.2.2 skrll if (TAILQ_EMPTY(&asoc->send_queue) && TAILQ_EMPTY(&asoc->sent_queue) && 4056 1.2.2.2 skrll some_on_streamwheel == 0) { 4057 1.2.2.2 skrll /* nothing left on sendqueue.. consider done */ 4058 1.2.2.2 skrll /* stop all timers */ 4059 1.2.2.2 skrll #ifdef SCTP_LOG_RWND 4060 1.2.2.2 skrll sctp_log_rwnd_set(SCTP_SET_PEER_RWND_VIA_SACK, 4061 1.2.2.2 skrll asoc->peers_rwnd, 0, 0, a_rwnd); 4062 1.2.2.2 skrll #endif 4063 1.2.2.2 skrll asoc->peers_rwnd = a_rwnd; 4064 1.2.2.2 skrll if (asoc->peers_rwnd < stcb->sctp_ep->sctp_ep.sctp_sws_sender) { 4065 1.2.2.2 skrll /* SWS sender side engages */ 4066 1.2.2.2 skrll asoc->peers_rwnd = 0; 4067 1.2.2.2 skrll } 4068 1.2.2.2 skrll /* stop any timers */ 4069 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 4070 1.2.2.2 skrll sctp_timer_stop(SCTP_TIMER_TYPE_SEND, stcb->sctp_ep, 4071 1.2.2.2 skrll stcb, net); 4072 1.2.2.2 skrll net->flight_size = 0; 4073 1.2.2.2 skrll net->partial_bytes_acked = 0; 4074 1.2.2.2 skrll } 4075 1.2.2.2 skrll asoc->total_flight = 0; 4076 1.2.2.2 skrll asoc->total_flight_count = 0; 4077 1.2.2.2 skrll /* clean up */ 4078 1.2.2.2 skrll if (asoc->state & SCTP_STATE_SHUTDOWN_PENDING) { 4079 1.2.2.2 skrll asoc->state = SCTP_STATE_SHUTDOWN_SENT; 4080 1.2.2.2 skrll #ifdef SCTP_DEBUG 4081 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_OUTPUT4) { 4082 1.2.2.2 skrll printf("%s:%d sends a shutdown\n", 4083 1.2.2.2 skrll __FILE__, 4084 1.2.2.2 skrll __LINE__ 4085 1.2.2.2 skrll ); 4086 1.2.2.2 skrll } 4087 1.2.2.2 skrll #endif 4088 1.2.2.2 skrll sctp_send_shutdown(stcb, 4089 1.2.2.2 skrll stcb->asoc.primary_destination); 4090 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWN, 4091 1.2.2.2 skrll stcb->sctp_ep, stcb, asoc->primary_destination); 4092 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNGUARD, 4093 1.2.2.2 skrll stcb->sctp_ep, stcb, asoc->primary_destination); 4094 1.2.2.2 skrll } else if (SCTP_GET_STATE(asoc) == SCTP_STATE_SHUTDOWN_RECEIVED) { 4095 1.2.2.2 skrll asoc->state = SCTP_STATE_SHUTDOWN_ACK_SENT; 4096 1.2.2.2 skrll 4097 1.2.2.2 skrll sctp_send_shutdown_ack(stcb, 4098 1.2.2.2 skrll stcb->asoc.primary_destination); 4099 1.2.2.2 skrll 4100 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SHUTDOWNACK, 4101 1.2.2.2 skrll stcb->sctp_ep, stcb, asoc->primary_destination); 4102 1.2.2.2 skrll } 4103 1.2.2.2 skrll return; 4104 1.2.2.2 skrll } 4105 1.2.2.2 skrll /* 4106 1.2.2.2 skrll * Now here we are going to recycle net_ack for a different 4107 1.2.2.2 skrll * use... HEADS UP. 4108 1.2.2.2 skrll */ 4109 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 4110 1.2.2.2 skrll net->net_ack = 0; 4111 1.2.2.2 skrll } 4112 1.2.2.2 skrll if ((num_seg > 0) && marking_allowed) { 4113 1.2.2.2 skrll sctp_strike_gap_ack_chunks(stcb, asoc, biggest_tsn_acked, 4114 1.2.2.2 skrll strike_enabled, biggest_tsn_newly_acked, accum_moved); 4115 1.2.2.2 skrll } 4116 1.2.2.2 skrll 4117 1.2.2.2 skrll /*********************************************/ 4118 1.2.2.2 skrll /* Here we perform PR-SCTP procedures */ 4119 1.2.2.2 skrll /* (section 4.2) */ 4120 1.2.2.2 skrll /*********************************************/ 4121 1.2.2.2 skrll /* C1. update advancedPeerAckPoint */ 4122 1.2.2.2 skrll if (compare_with_wrap(cum_ack, asoc->advanced_peer_ack_point, MAX_TSN)) { 4123 1.2.2.2 skrll asoc->advanced_peer_ack_point = cum_ack; 4124 1.2.2.2 skrll } 4125 1.2.2.2 skrll /* C2. try to further move advancedPeerAckPoint ahead */ 4126 1.2.2.2 skrll if (asoc->peer_supports_prsctp) { 4127 1.2.2.2 skrll struct sctp_tmit_chunk *lchk; 4128 1.2.2.2 skrll lchk = sctp_try_advance_peer_ack_point(stcb, asoc); 4129 1.2.2.2 skrll /* C3. See if we need to send a Fwd-TSN */ 4130 1.2.2.2 skrll if (compare_with_wrap(asoc->advanced_peer_ack_point, cum_ack, 4131 1.2.2.2 skrll MAX_TSN)) { 4132 1.2.2.2 skrll /* 4133 1.2.2.2 skrll * ISSUE with ECN, see FWD-TSN processing for notes 4134 1.2.2.2 skrll * on issues that will occur when the ECN NONCE stuff 4135 1.2.2.2 skrll * is put into SCTP for cross checking. 4136 1.2.2.2 skrll */ 4137 1.2.2.2 skrll send_forward_tsn(stcb, asoc); 4138 1.2.2.2 skrll 4139 1.2.2.2 skrll /* ECN Nonce: Disable Nonce Sum check when FWD TSN is sent and store resync tsn*/ 4140 1.2.2.2 skrll asoc->nonce_sum_check = 0; 4141 1.2.2.2 skrll asoc->nonce_resync_tsn = asoc->advanced_peer_ack_point; 4142 1.2.2.2 skrll if (lchk) { 4143 1.2.2.2 skrll /* Assure a timer is up */ 4144 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SEND, 4145 1.2.2.2 skrll stcb->sctp_ep, stcb, lchk->whoTo); 4146 1.2.2.2 skrll } 4147 1.2.2.2 skrll } 4148 1.2.2.2 skrll } 4149 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 4150 1.2.2.2 skrll if (asoc->fast_retran_loss_recovery == 0) { 4151 1.2.2.2 skrll /* out of a RFC2582 Fast recovery window? */ 4152 1.2.2.2 skrll if (net->net_ack > 0) { 4153 1.2.2.2 skrll /* 4154 1.2.2.2 skrll * per section 7.2.3, are there 4155 1.2.2.2 skrll * any destinations that had a fast 4156 1.2.2.2 skrll * retransmit to them. If so what we 4157 1.2.2.2 skrll * need to do is adjust ssthresh and 4158 1.2.2.2 skrll * cwnd. 4159 1.2.2.2 skrll */ 4160 1.2.2.2 skrll struct sctp_tmit_chunk *lchk; 4161 1.2.2.2 skrll #ifdef SCTP_HIGH_SPEED 4162 1.2.2.2 skrll sctp_hs_cwnd_decrease(net); 4163 1.2.2.2 skrll #else 4164 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 4165 1.2.2.2 skrll int old_cwnd = net->cwnd; 4166 1.2.2.2 skrll #endif 4167 1.2.2.2 skrll net->ssthresh = net->cwnd / 2; 4168 1.2.2.2 skrll if (net->ssthresh < (net->mtu*2)) { 4169 1.2.2.2 skrll net->ssthresh = 2 * net->mtu; 4170 1.2.2.2 skrll } 4171 1.2.2.2 skrll net->cwnd = net->ssthresh; 4172 1.2.2.2 skrll #ifdef SCTP_CWND_LOGGING 4173 1.2.2.2 skrll sctp_log_cwnd(net, (net->cwnd-old_cwnd), 4174 1.2.2.2 skrll SCTP_CWND_LOG_FROM_FR); 4175 1.2.2.2 skrll #endif 4176 1.2.2.2 skrll #endif 4177 1.2.2.2 skrll 4178 1.2.2.2 skrll lchk = TAILQ_FIRST(&asoc->send_queue); 4179 1.2.2.2 skrll 4180 1.2.2.2 skrll net->partial_bytes_acked = 0; 4181 1.2.2.2 skrll /* Turn on fast recovery window */ 4182 1.2.2.2 skrll asoc->fast_retran_loss_recovery = 1; 4183 1.2.2.2 skrll if (lchk == NULL) { 4184 1.2.2.2 skrll /* Mark end of the window */ 4185 1.2.2.2 skrll asoc->fast_recovery_tsn = asoc->sending_seq - 1; 4186 1.2.2.2 skrll } else { 4187 1.2.2.2 skrll asoc->fast_recovery_tsn = lchk->rec.data.TSN_seq - 1; 4188 1.2.2.2 skrll } 4189 1.2.2.2 skrll 4190 1.2.2.2 skrll 4191 1.2.2.2 skrll /* Disable Nonce Sum Checking and store the resync tsn*/ 4192 1.2.2.2 skrll asoc->nonce_sum_check = 0; 4193 1.2.2.2 skrll asoc->nonce_resync_tsn = asoc->fast_recovery_tsn + 1; 4194 1.2.2.2 skrll 4195 1.2.2.2 skrll sctp_timer_stop(SCTP_TIMER_TYPE_SEND, 4196 1.2.2.2 skrll stcb->sctp_ep, stcb, net); 4197 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SEND, 4198 1.2.2.2 skrll stcb->sctp_ep, stcb, net); 4199 1.2.2.2 skrll } 4200 1.2.2.2 skrll } else if (net->net_ack > 0) { 4201 1.2.2.2 skrll /* 4202 1.2.2.2 skrll * Mark a peg that we WOULD have done a cwnd reduction 4203 1.2.2.2 skrll * but RFC2582 prevented this action. 4204 1.2.2.2 skrll */ 4205 1.2.2.2 skrll sctp_pegs[SCTP_FR_INAWINDOW]++; 4206 1.2.2.2 skrll } 4207 1.2.2.2 skrll } 4208 1.2.2.2 skrll 4209 1.2.2.2 skrll 4210 1.2.2.2 skrll /****************************************************************** 4211 1.2.2.2 skrll * Here we do the stuff with ECN Nonce checking. 4212 1.2.2.2 skrll * We basically check to see if the nonce sum flag was incorrect 4213 1.2.2.2 skrll * or if resynchronization needs to be done. Also if we catch a 4214 1.2.2.2 skrll * misbehaving receiver we give him the kick. 4215 1.2.2.2 skrll ******************************************************************/ 4216 1.2.2.2 skrll 4217 1.2.2.2 skrll if (asoc->ecn_nonce_allowed) { 4218 1.2.2.2 skrll if (asoc->nonce_sum_check) { 4219 1.2.2.2 skrll if (nonce_sum_flag != ((asoc->nonce_sum_expect_base + ecn_seg_sums) & SCTP_SACK_NONCE_SUM)) { 4220 1.2.2.2 skrll if (asoc->nonce_wait_for_ecne == 0) { 4221 1.2.2.2 skrll struct sctp_tmit_chunk *lchk; 4222 1.2.2.2 skrll lchk = TAILQ_FIRST(&asoc->send_queue); 4223 1.2.2.2 skrll asoc->nonce_wait_for_ecne = 1; 4224 1.2.2.2 skrll if (lchk) { 4225 1.2.2.2 skrll asoc->nonce_wait_tsn = lchk->rec.data.TSN_seq; 4226 1.2.2.2 skrll } else { 4227 1.2.2.2 skrll asoc->nonce_wait_tsn = asoc->sending_seq; 4228 1.2.2.2 skrll } 4229 1.2.2.2 skrll } else { 4230 1.2.2.2 skrll if (compare_with_wrap(asoc->last_acked_seq, asoc->nonce_wait_tsn, MAX_TSN) || 4231 1.2.2.2 skrll (asoc->last_acked_seq == asoc->nonce_wait_tsn)) { 4232 1.2.2.2 skrll /* Misbehaving peer. We need to react to this guy */ 4233 1.2.2.2 skrll printf("Mis-behaving peer detected\n"); 4234 1.2.2.2 skrll asoc->ecn_allowed = 0; 4235 1.2.2.2 skrll asoc->ecn_nonce_allowed = 0; 4236 1.2.2.2 skrll } 4237 1.2.2.2 skrll } 4238 1.2.2.2 skrll } 4239 1.2.2.2 skrll } else { 4240 1.2.2.2 skrll /* See if Resynchronization Possible */ 4241 1.2.2.2 skrll if (compare_with_wrap(asoc->last_acked_seq, asoc->nonce_resync_tsn, MAX_TSN)) { 4242 1.2.2.2 skrll asoc->nonce_sum_check = 1; 4243 1.2.2.2 skrll /* now we must calculate what the base 4244 1.2.2.2 skrll * is. We do this based on two things, we know 4245 1.2.2.2 skrll * the total's for all the segments gap-acked 4246 1.2.2.2 skrll * in the SACK, its stored in ecn_seg_sums. 4247 1.2.2.2 skrll * We also know the SACK's nonce sum, its 4248 1.2.2.2 skrll * in nonce_sum_flag. So we can build a truth 4249 1.2.2.2 skrll * table to back-calculate the new value of asoc->nonce_sum_expect_base: 4250 1.2.2.2 skrll * 4251 1.2.2.2 skrll * SACK-flag-Value Seg-Sums Base 4252 1.2.2.2 skrll * 0 0 0 4253 1.2.2.2 skrll * 1 0 1 4254 1.2.2.2 skrll * 0 1 1 4255 1.2.2.2 skrll * 1 1 0 4256 1.2.2.2 skrll */ 4257 1.2.2.2 skrll asoc->nonce_sum_expect_base = (ecn_seg_sums ^ nonce_sum_flag) & SCTP_SACK_NONCE_SUM; 4258 1.2.2.2 skrll } 4259 1.2.2.2 skrll } 4260 1.2.2.2 skrll } 4261 1.2.2.2 skrll /* Now are we exiting loss recovery ? */ 4262 1.2.2.2 skrll if (will_exit_fast_recovery) { 4263 1.2.2.2 skrll /* Ok, we must exit fast recovery */ 4264 1.2.2.2 skrll asoc->fast_retran_loss_recovery = 0; 4265 1.2.2.2 skrll } 4266 1.2.2.2 skrll if ((asoc->sat_t3_loss_recovery) && 4267 1.2.2.2 skrll ((compare_with_wrap(asoc->last_acked_seq, asoc->sat_t3_recovery_tsn, 4268 1.2.2.2 skrll MAX_TSN) || 4269 1.2.2.2 skrll (asoc->last_acked_seq == asoc->sat_t3_recovery_tsn)))) { 4270 1.2.2.2 skrll /* end satellite t3 loss recovery */ 4271 1.2.2.2 skrll asoc->sat_t3_loss_recovery = 0; 4272 1.2.2.2 skrll } 4273 1.2.2.2 skrll /* Adjust and set the new rwnd value */ 4274 1.2.2.2 skrll #ifdef SCTP_LOG_RWND 4275 1.2.2.2 skrll sctp_log_rwnd_set(SCTP_SET_PEER_RWND_VIA_SACK, 4276 1.2.2.2 skrll asoc->peers_rwnd, asoc->total_flight, (asoc->sent_queue_cnt * sctp_peer_chunk_oh), a_rwnd); 4277 1.2.2.2 skrll #endif 4278 1.2.2.2 skrll 4279 1.2.2.2 skrll asoc->peers_rwnd = sctp_sbspace_sub(a_rwnd, 4280 1.2.2.2 skrll (u_int32_t)(asoc->total_flight + (asoc->sent_queue_cnt * sctp_peer_chunk_oh))); 4281 1.2.2.2 skrll if (asoc->peers_rwnd < stcb->sctp_ep->sctp_ep.sctp_sws_sender) { 4282 1.2.2.2 skrll /* SWS sender side engages */ 4283 1.2.2.2 skrll asoc->peers_rwnd = 0; 4284 1.2.2.2 skrll } 4285 1.2.2.2 skrll /* 4286 1.2.2.2 skrll * Now we must setup so we have a timer up for anyone with 4287 1.2.2.2 skrll * outstanding data. 4288 1.2.2.2 skrll */ 4289 1.2.2.2 skrll TAILQ_FOREACH(net, &asoc->nets, sctp_next) { 4290 1.2.2.2 skrll struct sctp_tmit_chunk *chk; 4291 1.2.2.2 skrll TAILQ_FOREACH(chk, &asoc->sent_queue, sctp_next) { 4292 1.2.2.2 skrll if (chk->whoTo == net && 4293 1.2.2.2 skrll (chk->sent < SCTP_DATAGRAM_ACKED || 4294 1.2.2.2 skrll chk->sent == SCTP_FORWARD_TSN_SKIP)) { 4295 1.2.2.2 skrll /* 4296 1.2.2.2 skrll * Not ack'ed and still outstanding to this 4297 1.2.2.2 skrll * destination or marked and must be 4298 1.2.2.2 skrll * sacked after fwd-tsn sent. 4299 1.2.2.2 skrll */ 4300 1.2.2.2 skrll sctp_timer_start(SCTP_TIMER_TYPE_SEND, 4301 1.2.2.2 skrll stcb->sctp_ep, stcb, net); 4302 1.2.2.2 skrll break; 4303 1.2.2.2 skrll } 4304 1.2.2.2 skrll } 4305 1.2.2.2 skrll } 4306 1.2.2.2 skrll } 4307 1.2.2.2 skrll 4308 1.2.2.2 skrll void 4309 1.2.2.2 skrll sctp_update_acked(struct sctp_tcb *stcb, struct sctp_shutdown_chunk *cp, 4310 1.2.2.2 skrll struct sctp_nets *netp, int *abort_flag) 4311 1.2.2.2 skrll { 4312 1.2.2.2 skrll /* Mutate a shutdown into a SACK */ 4313 1.2.2.2 skrll struct sctp_sack_chunk sack; 4314 1.2.2.2 skrll 4315 1.2.2.2 skrll /* Copy cum-ack */ 4316 1.2.2.2 skrll sack.sack.cum_tsn_ack = cp->cumulative_tsn_ack; 4317 1.2.2.2 skrll /* Arrange so a_rwnd does NOT change */ 4318 1.2.2.2 skrll sack.ch.chunk_type = SCTP_SELECTIVE_ACK; 4319 1.2.2.2 skrll sack.ch.chunk_flags = 0; 4320 1.2.2.2 skrll sack.ch.chunk_length = ntohs(sizeof(struct sctp_sack_chunk)); 4321 1.2.2.2 skrll sack.sack.a_rwnd = 4322 1.2.2.2 skrll htonl(stcb->asoc.peers_rwnd + stcb->asoc.total_flight); 4323 1.2.2.2 skrll /* 4324 1.2.2.2 skrll * no gaps in this one. This may cause a temporal view to reneging, 4325 1.2.2.2 skrll * but hopefully the second chunk is a true SACK in the packet and 4326 1.2.2.2 skrll * will correct this view. One will come soon after no matter what 4327 1.2.2.2 skrll * to fix this. 4328 1.2.2.2 skrll */ 4329 1.2.2.2 skrll sack.sack.num_gap_ack_blks = 0; 4330 1.2.2.2 skrll sack.sack.num_dup_tsns = 0; 4331 1.2.2.2 skrll /* Now call the SACK processor */ 4332 1.2.2.2 skrll sctp_handle_sack(&sack, stcb, netp, abort_flag); 4333 1.2.2.2 skrll } 4334 1.2.2.2 skrll 4335 1.2.2.2 skrll static void 4336 1.2.2.2 skrll sctp_kick_prsctp_reorder_queue(struct sctp_tcb *stcb, 4337 1.2.2.2 skrll struct sctp_stream_in *strmin) 4338 1.2.2.2 skrll { 4339 1.2.2.2 skrll struct sctp_tmit_chunk *chk, *nchk; 4340 1.2.2.2 skrll struct sctp_association *asoc; 4341 1.2.2.2 skrll int tt; 4342 1.2.2.2 skrll 4343 1.2.2.2 skrll asoc = &stcb->asoc; 4344 1.2.2.2 skrll tt = strmin->last_sequence_delivered; 4345 1.2.2.2 skrll /* 4346 1.2.2.2 skrll * First deliver anything prior to and including the stream no that 4347 1.2.2.2 skrll * came in 4348 1.2.2.2 skrll */ 4349 1.2.2.2 skrll chk = TAILQ_FIRST(&strmin->inqueue); 4350 1.2.2.2 skrll while (chk) { 4351 1.2.2.2 skrll nchk = TAILQ_NEXT(chk, sctp_next); 4352 1.2.2.2 skrll if (compare_with_wrap(tt, chk->rec.data.stream_seq, MAX_SEQ) || 4353 1.2.2.2 skrll (tt == chk->rec.data.stream_seq)) { 4354 1.2.2.2 skrll /* this is deliverable now */ 4355 1.2.2.2 skrll TAILQ_REMOVE(&strmin->inqueue, chk, sctp_next); 4356 1.2.2.2 skrll /* subtract pending on streams */ 4357 1.2.2.2 skrll asoc->size_on_all_streams -= chk->send_size; 4358 1.2.2.2 skrll asoc->cnt_on_all_streams--; 4359 1.2.2.2 skrll /* deliver it to at least the delivery-q */ 4360 1.2.2.2 skrll sctp_deliver_data(stcb, &stcb->asoc, chk, 0); 4361 1.2.2.2 skrll } else { 4362 1.2.2.2 skrll /* no more delivery now. */ 4363 1.2.2.2 skrll break; 4364 1.2.2.2 skrll } 4365 1.2.2.2 skrll chk = nchk; 4366 1.2.2.2 skrll } 4367 1.2.2.2 skrll /* 4368 1.2.2.2 skrll * now we must deliver things in queue the normal way if any 4369 1.2.2.2 skrll * are now ready. 4370 1.2.2.2 skrll */ 4371 1.2.2.2 skrll tt = strmin->last_sequence_delivered + 1; 4372 1.2.2.2 skrll chk = TAILQ_FIRST(&strmin->inqueue); 4373 1.2.2.2 skrll while (chk) { 4374 1.2.2.2 skrll nchk = TAILQ_NEXT(chk, sctp_next); 4375 1.2.2.2 skrll if (tt == chk->rec.data.stream_seq) { 4376 1.2.2.2 skrll /* this is deliverable now */ 4377 1.2.2.2 skrll TAILQ_REMOVE(&strmin->inqueue, chk, sctp_next); 4378 1.2.2.2 skrll /* subtract pending on streams */ 4379 1.2.2.2 skrll asoc->size_on_all_streams -= chk->send_size; 4380 1.2.2.2 skrll asoc->cnt_on_all_streams--; 4381 1.2.2.2 skrll /* deliver it to at least the delivery-q */ 4382 1.2.2.2 skrll strmin->last_sequence_delivered = 4383 1.2.2.2 skrll chk->rec.data.stream_seq; 4384 1.2.2.2 skrll sctp_deliver_data(stcb, &stcb->asoc, chk, 0); 4385 1.2.2.2 skrll tt = strmin->last_sequence_delivered + 1; 4386 1.2.2.2 skrll } else { 4387 1.2.2.2 skrll break; 4388 1.2.2.2 skrll } 4389 1.2.2.2 skrll chk = nchk; 4390 1.2.2.2 skrll } 4391 1.2.2.2 skrll 4392 1.2.2.2 skrll } 4393 1.2.2.2 skrll 4394 1.2.2.2 skrll void 4395 1.2.2.2 skrll sctp_handle_forward_tsn(struct sctp_tcb *stcb, 4396 1.2.2.2 skrll struct sctp_forward_tsn_chunk *fwd, int *abort_flag) 4397 1.2.2.2 skrll { 4398 1.2.2.2 skrll /* 4399 1.2.2.2 skrll * ISSUES that MUST be fixed for ECN! When we are the 4400 1.2.2.2 skrll * sender of the forward TSN, when the SACK comes back 4401 1.2.2.2 skrll * that acknowledges the FWD-TSN we must reset the 4402 1.2.2.2 skrll * NONCE sum to match correctly. This will get quite 4403 1.2.2.2 skrll * tricky since we may have sent more data interveneing and 4404 1.2.2.2 skrll * must carefully account for what the SACK says on the 4405 1.2.2.2 skrll * nonce and any gaps that are reported. This work 4406 1.2.2.2 skrll * will NOT be done here, but I note it here since 4407 1.2.2.2 skrll * it is really related to PR-SCTP and FWD-TSN's 4408 1.2.2.2 skrll */ 4409 1.2.2.2 skrll 4410 1.2.2.2 skrll /* The pr-sctp fwd tsn */ 4411 1.2.2.2 skrll /* 4412 1.2.2.2 skrll * here we will perform all the data receiver side steps for 4413 1.2.2.2 skrll * processing FwdTSN, as required in by pr-sctp draft: 4414 1.2.2.2 skrll * 4415 1.2.2.2 skrll * Assume we get FwdTSN(x): 4416 1.2.2.2 skrll * 4417 1.2.2.2 skrll * 1) update local cumTSN to x 4418 1.2.2.2 skrll * 2) try to further advance cumTSN to x + others we have 4419 1.2.2.2 skrll * 3) examine and update re-ordering queue on pr-in-streams 4420 1.2.2.2 skrll * 4) clean up re-assembly queue 4421 1.2.2.2 skrll * 5) Send a sack to report where we are. 4422 1.2.2.2 skrll */ 4423 1.2.2.2 skrll struct sctp_strseq *stseq; 4424 1.2.2.2 skrll struct sctp_association *asoc; 4425 1.2.2.2 skrll u_int32_t new_cum_tsn, gap, back_out_htsn; 4426 1.2.2.2 skrll unsigned int i, cnt_gone, fwd_sz, cumack_set_flag, m_size; 4427 1.2.2.2 skrll struct sctp_stream_in *strm; 4428 1.2.2.2 skrll struct sctp_tmit_chunk *chk, *at; 4429 1.2.2.2 skrll 4430 1.2.2.2 skrll cumack_set_flag = 0; 4431 1.2.2.2 skrll asoc = &stcb->asoc; 4432 1.2.2.2 skrll cnt_gone = 0; 4433 1.2.2.2 skrll if ((fwd_sz = ntohs(fwd->ch.chunk_length)) < sizeof(struct sctp_forward_tsn_chunk)) { 4434 1.2.2.2 skrll #ifdef SCTP_DEBUG 4435 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 4436 1.2.2.2 skrll printf("Bad size too small/big fwd-tsn\n"); 4437 1.2.2.2 skrll } 4438 1.2.2.2 skrll #endif 4439 1.2.2.2 skrll return; 4440 1.2.2.2 skrll } 4441 1.2.2.2 skrll m_size = (stcb->asoc.mapping_array_size << 3); 4442 1.2.2.2 skrll /*************************************************************/ 4443 1.2.2.2 skrll /* 1. Here we update local cumTSN and shift the bitmap array */ 4444 1.2.2.2 skrll /*************************************************************/ 4445 1.2.2.2 skrll new_cum_tsn = ntohl(fwd->new_cumulative_tsn); 4446 1.2.2.2 skrll 4447 1.2.2.2 skrll if (compare_with_wrap(asoc->cumulative_tsn, new_cum_tsn, MAX_TSN) || 4448 1.2.2.2 skrll asoc->cumulative_tsn == new_cum_tsn) { 4449 1.2.2.2 skrll /* Already got there ... */ 4450 1.2.2.2 skrll return; 4451 1.2.2.2 skrll } 4452 1.2.2.2 skrll 4453 1.2.2.2 skrll back_out_htsn = asoc->highest_tsn_inside_map; 4454 1.2.2.2 skrll if (compare_with_wrap(new_cum_tsn, asoc->highest_tsn_inside_map, 4455 1.2.2.2 skrll MAX_TSN)) { 4456 1.2.2.2 skrll asoc->highest_tsn_inside_map = new_cum_tsn; 4457 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 4458 1.2.2.2 skrll sctp_log_map(0, 0, asoc->highest_tsn_inside_map, SCTP_MAP_SLIDE_RESULT); 4459 1.2.2.2 skrll #endif 4460 1.2.2.2 skrll } 4461 1.2.2.2 skrll /* 4462 1.2.2.2 skrll * now we know the new TSN is more advanced, let's find the 4463 1.2.2.2 skrll * actual gap 4464 1.2.2.2 skrll */ 4465 1.2.2.2 skrll if ((compare_with_wrap(new_cum_tsn, asoc->mapping_array_base_tsn, 4466 1.2.2.2 skrll MAX_TSN)) || 4467 1.2.2.2 skrll (new_cum_tsn == asoc->mapping_array_base_tsn)) { 4468 1.2.2.2 skrll gap = new_cum_tsn - asoc->mapping_array_base_tsn; 4469 1.2.2.2 skrll } else { 4470 1.2.2.2 skrll /* try to prevent underflow here */ 4471 1.2.2.2 skrll gap = new_cum_tsn + (MAX_TSN - asoc->mapping_array_base_tsn) + 1; 4472 1.2.2.2 skrll } 4473 1.2.2.2 skrll 4474 1.2.2.2 skrll if (gap >= m_size) { 4475 1.2.2.2 skrll asoc->highest_tsn_inside_map = back_out_htsn; 4476 1.2.2.2 skrll if ((long)gap > sctp_sbspace(&stcb->sctp_socket->so_rcv)) { 4477 1.2.2.2 skrll /* 4478 1.2.2.2 skrll * out of range (of single byte chunks in the rwnd I 4479 1.2.2.2 skrll * give out) 4480 1.2.2.2 skrll * too questionable. better to drop it silently 4481 1.2.2.2 skrll */ 4482 1.2.2.2 skrll return; 4483 1.2.2.2 skrll } 4484 1.2.2.2 skrll if (asoc->highest_tsn_inside_map > 4485 1.2.2.2 skrll asoc->mapping_array_base_tsn) { 4486 1.2.2.2 skrll gap = asoc->highest_tsn_inside_map - 4487 1.2.2.2 skrll asoc->mapping_array_base_tsn; 4488 1.2.2.2 skrll } else { 4489 1.2.2.2 skrll gap = asoc->highest_tsn_inside_map + 4490 1.2.2.2 skrll (MAX_TSN - asoc->mapping_array_base_tsn) + 1; 4491 1.2.2.2 skrll } 4492 1.2.2.2 skrll cumack_set_flag = 1; 4493 1.2.2.2 skrll } 4494 1.2.2.2 skrll for (i = 0; i <= gap; i++) { 4495 1.2.2.2 skrll SCTP_SET_TSN_PRESENT(asoc->mapping_array, i); 4496 1.2.2.2 skrll } 4497 1.2.2.2 skrll /* 4498 1.2.2.2 skrll * Now after marking all, slide thing forward but no 4499 1.2.2.2 skrll * sack please. 4500 1.2.2.2 skrll */ 4501 1.2.2.2 skrll sctp_sack_check(stcb, 0, 0, abort_flag); 4502 1.2.2.2 skrll if (*abort_flag) 4503 1.2.2.2 skrll return; 4504 1.2.2.2 skrll 4505 1.2.2.2 skrll if (cumack_set_flag) { 4506 1.2.2.2 skrll /* 4507 1.2.2.2 skrll * fwd-tsn went outside my gap array - not a 4508 1.2.2.2 skrll * common occurance. Do the same thing we 4509 1.2.2.2 skrll * do when a cookie-echo arrives. 4510 1.2.2.2 skrll */ 4511 1.2.2.2 skrll asoc->highest_tsn_inside_map = new_cum_tsn - 1; 4512 1.2.2.2 skrll asoc->mapping_array_base_tsn = new_cum_tsn; 4513 1.2.2.2 skrll asoc->cumulative_tsn = asoc->highest_tsn_inside_map; 4514 1.2.2.2 skrll #ifdef SCTP_MAP_LOGGING 4515 1.2.2.2 skrll sctp_log_map(0, 3, asoc->highest_tsn_inside_map, SCTP_MAP_SLIDE_RESULT); 4516 1.2.2.2 skrll #endif 4517 1.2.2.2 skrll asoc->last_echo_tsn = asoc->highest_tsn_inside_map; 4518 1.2.2.2 skrll } 4519 1.2.2.2 skrll /*************************************************************/ 4520 1.2.2.2 skrll /* 2. Clear up re-assembly queue */ 4521 1.2.2.2 skrll /*************************************************************/ 4522 1.2.2.2 skrll 4523 1.2.2.2 skrll /* 4524 1.2.2.2 skrll * First service it if pd-api is up, just in case we can 4525 1.2.2.2 skrll * progress it forward 4526 1.2.2.2 skrll */ 4527 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 4528 1.2.2.2 skrll sctp_service_reassembly(stcb, asoc, 0); 4529 1.2.2.2 skrll } 4530 1.2.2.2 skrll if (!TAILQ_EMPTY(&asoc->reasmqueue)) { 4531 1.2.2.2 skrll /* For each one on here see if we need to toss it */ 4532 1.2.2.2 skrll /* 4533 1.2.2.2 skrll * For now large messages held on the reasmqueue that are 4534 1.2.2.2 skrll * complete will be tossed too. We could in theory do more 4535 1.2.2.2 skrll * work to spin through and stop after dumping one msg 4536 1.2.2.2 skrll * aka seeing the start of a new msg at the head, and call 4537 1.2.2.2 skrll * the delivery function... to see if it can be delivered... 4538 1.2.2.2 skrll * But for now we just dump everything on the queue. 4539 1.2.2.2 skrll */ 4540 1.2.2.2 skrll chk = TAILQ_FIRST(&asoc->reasmqueue); 4541 1.2.2.2 skrll while (chk) { 4542 1.2.2.2 skrll at = TAILQ_NEXT(chk, sctp_next); 4543 1.2.2.2 skrll if (compare_with_wrap(asoc->cumulative_tsn, 4544 1.2.2.2 skrll chk->rec.data.TSN_seq, MAX_TSN) || 4545 1.2.2.2 skrll asoc->cumulative_tsn == chk->rec.data.TSN_seq) { 4546 1.2.2.2 skrll /* It needs to be tossed */ 4547 1.2.2.2 skrll TAILQ_REMOVE(&asoc->reasmqueue, chk, sctp_next); 4548 1.2.2.2 skrll if (compare_with_wrap(chk->rec.data.TSN_seq, 4549 1.2.2.2 skrll asoc->tsn_last_delivered, MAX_TSN)) { 4550 1.2.2.2 skrll asoc->tsn_last_delivered = 4551 1.2.2.2 skrll chk->rec.data.TSN_seq; 4552 1.2.2.2 skrll asoc->str_of_pdapi = 4553 1.2.2.2 skrll chk->rec.data.stream_number; 4554 1.2.2.2 skrll asoc->ssn_of_pdapi = 4555 1.2.2.2 skrll chk->rec.data.stream_seq; 4556 1.2.2.2 skrll asoc->fragment_flags = 4557 1.2.2.2 skrll chk->rec.data.rcv_flags; 4558 1.2.2.2 skrll } 4559 1.2.2.2 skrll asoc->size_on_reasm_queue -= chk->send_size; 4560 1.2.2.2 skrll asoc->cnt_on_reasm_queue--; 4561 1.2.2.2 skrll cnt_gone++; 4562 1.2.2.2 skrll 4563 1.2.2.2 skrll /* Clear up any stream problem */ 4564 1.2.2.2 skrll if ((chk->rec.data.rcv_flags & SCTP_DATA_UNORDERED) != 4565 1.2.2.2 skrll SCTP_DATA_UNORDERED && 4566 1.2.2.2 skrll (compare_with_wrap(chk->rec.data.stream_seq, 4567 1.2.2.2 skrll asoc->strmin[chk->rec.data.stream_number].last_sequence_delivered, 4568 1.2.2.2 skrll MAX_SEQ))) { 4569 1.2.2.2 skrll /* 4570 1.2.2.2 skrll * We must dump forward this streams 4571 1.2.2.2 skrll * sequence number if the chunk is not 4572 1.2.2.2 skrll * unordered that is being skipped. 4573 1.2.2.2 skrll * There is a chance that if the peer 4574 1.2.2.2 skrll * does not include the last fragment 4575 1.2.2.2 skrll * in its FWD-TSN we WILL have a problem 4576 1.2.2.2 skrll * here since you would have a partial 4577 1.2.2.2 skrll * chunk in queue that may not be 4578 1.2.2.2 skrll * deliverable. 4579 1.2.2.2 skrll * Also if a Partial delivery API as 4580 1.2.2.2 skrll * started the user may get a partial 4581 1.2.2.2 skrll * chunk. The next read returning a new 4582 1.2.2.2 skrll * chunk... really ugly but I see no way 4583 1.2.2.2 skrll * around it! Maybe a notify?? 4584 1.2.2.2 skrll */ 4585 1.2.2.2 skrll asoc->strmin[chk->rec.data.stream_number].last_sequence_delivered = 4586 1.2.2.2 skrll chk->rec.data.stream_seq; 4587 1.2.2.2 skrll } 4588 1.2.2.2 skrll if (chk->data) { 4589 1.2.2.2 skrll sctp_m_freem(chk->data); 4590 1.2.2.2 skrll chk->data = NULL; 4591 1.2.2.2 skrll } 4592 1.2.2.2 skrll sctp_free_remote_addr(chk->whoTo); 4593 1.2.2.2 skrll SCTP_ZONE_FREE(sctppcbinfo.ipi_zone_chunk, chk); 4594 1.2.2.2 skrll sctppcbinfo.ipi_count_chunk--; 4595 1.2.2.2 skrll if ((int)sctppcbinfo.ipi_count_chunk < 0) { 4596 1.2.2.2 skrll panic("Chunk count is negative"); 4597 1.2.2.2 skrll } 4598 1.2.2.2 skrll sctppcbinfo.ipi_gencnt_chunk++; 4599 1.2.2.2 skrll } else { 4600 1.2.2.2 skrll /* 4601 1.2.2.2 skrll * Ok we have gone beyond the end of the 4602 1.2.2.2 skrll * fwd-tsn's mark. Some checks... 4603 1.2.2.2 skrll */ 4604 1.2.2.2 skrll if ((asoc->fragmented_delivery_inprogress) && 4605 1.2.2.2 skrll (chk->rec.data.rcv_flags & SCTP_DATA_FIRST_FRAG)) { 4606 1.2.2.2 skrll /* Special case PD-API is up and what we fwd-tsn' 4607 1.2.2.2 skrll * over includes one that had the LAST_FRAG. We 4608 1.2.2.2 skrll * no longer need to do the PD-API. 4609 1.2.2.2 skrll */ 4610 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 0; 4611 1.2.2.2 skrll sctp_ulp_notify(SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION, 4612 1.2.2.2 skrll stcb, SCTP_PARTIAL_DELIVERY_ABORTED, (void *)NULL); 4613 1.2.2.2 skrll 4614 1.2.2.2 skrll } 4615 1.2.2.2 skrll break; 4616 1.2.2.2 skrll } 4617 1.2.2.2 skrll chk = at; 4618 1.2.2.2 skrll } 4619 1.2.2.2 skrll } 4620 1.2.2.2 skrll if (asoc->fragmented_delivery_inprogress) { 4621 1.2.2.2 skrll /* 4622 1.2.2.2 skrll * Ok we removed cnt_gone chunks in the PD-API queue that 4623 1.2.2.2 skrll * were being delivered. So now we must turn off the 4624 1.2.2.2 skrll * flag. 4625 1.2.2.2 skrll */ 4626 1.2.2.2 skrll sctp_ulp_notify(SCTP_NOTIFY_PARTIAL_DELVIERY_INDICATION, 4627 1.2.2.2 skrll stcb, SCTP_PARTIAL_DELIVERY_ABORTED, (void *)NULL); 4628 1.2.2.2 skrll asoc->fragmented_delivery_inprogress = 0; 4629 1.2.2.2 skrll } 4630 1.2.2.2 skrll /*************************************************************/ 4631 1.2.2.2 skrll /* 3. Update the PR-stream re-ordering queues */ 4632 1.2.2.2 skrll /*************************************************************/ 4633 1.2.2.2 skrll stseq = (struct sctp_strseq *)((vaddr_t)fwd + sizeof(*fwd)); 4634 1.2.2.2 skrll fwd_sz -= sizeof(*fwd); 4635 1.2.2.2 skrll { 4636 1.2.2.2 skrll /* New method. */ 4637 1.2.2.2 skrll int num_str; 4638 1.2.2.2 skrll num_str = fwd_sz/sizeof(struct sctp_strseq); 4639 1.2.2.2 skrll #ifdef SCTP_DEBUG 4640 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 4641 1.2.2.2 skrll printf("Using NEW method, %d strseq's reported in FWD-TSN\n", 4642 1.2.2.2 skrll num_str); 4643 1.2.2.2 skrll } 4644 1.2.2.2 skrll #endif 4645 1.2.2.2 skrll for (i = 0; i < num_str; i++) { 4646 1.2.2.2 skrll u_int16_t st; 4647 1.2.2.2 skrll #if 0 4648 1.2.2.2 skrll unsigned char *xx; 4649 1.2.2.2 skrll /* Convert */ 4650 1.2.2.2 skrll xx = (unsigned char *)&stseq[i]; 4651 1.2.2.2 skrll #endif 4652 1.2.2.2 skrll st = ntohs(stseq[i].stream); 4653 1.2.2.2 skrll stseq[i].stream = st; 4654 1.2.2.2 skrll st = ntohs(stseq[i].sequence); 4655 1.2.2.2 skrll stseq[i].sequence = st; 4656 1.2.2.2 skrll /* now process */ 4657 1.2.2.2 skrll if (stseq[i].stream > asoc->streamincnt) { 4658 1.2.2.2 skrll #ifdef SCTP_DEBUG 4659 1.2.2.2 skrll if (sctp_debug_on & SCTP_DEBUG_INDATA1) { 4660 1.2.2.2 skrll printf("Bogus stream number %d " 4661 1.2.2.2 skrll "streamincnt is %d\n", 4662 1.2.2.2 skrll stseq[i].stream, asoc->streamincnt); 4663 1.2.2.2 skrll } 4664 1.2.2.2 skrll #endif 4665 1.2.2.2 skrll /* 4666 1.2.2.2 skrll * It is arguable if we should continue. Since 4667 1.2.2.2 skrll * the peer sent bogus stream info we may be in 4668 1.2.2.2 skrll * deep trouble.. 4669 1.2.2.2 skrll * a return may be a better choice? 4670 1.2.2.2 skrll */ 4671 1.2.2.2 skrll continue; 4672 1.2.2.2 skrll } 4673 1.2.2.2 skrll strm = &asoc->strmin[stseq[i].stream]; 4674 1.2.2.2 skrll if (compare_with_wrap(stseq[i].sequence, 4675 1.2.2.2 skrll strm->last_sequence_delivered, MAX_SEQ)) { 4676 1.2.2.2 skrll /* Update the sequence number */ 4677 1.2.2.2 skrll strm->last_sequence_delivered = 4678 1.2.2.2 skrll stseq[i].sequence; 4679 1.2.2.2 skrll } 4680 1.2.2.2 skrll /* now kick the stream the new way */ 4681 1.2.2.2 skrll sctp_kick_prsctp_reorder_queue(stcb, strm); 4682 1.2.2.2 skrll } 4683 1.2.2.2 skrll } 4684 1.2.2.2 skrll } 4685
Indexes created Sun Sep 21 20:09:37 GMT 2025