/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
*/
#include <inet/ipclassifier.h>
#include <inet/ipsec_impl.h>
#include "sctp_impl.h"
#include "sctp_addr.h"
/*
* Common accept code. Called by sctp_conn_request.
* cr_pkt is the INIT / INIT ACK packet.
*/
static int
{
int err;
/* acceptor isn't in any fanouts yet, so don't need to hold locks */
&sctp_options);
if (err != 0)
return (err);
return (err);
return (err);
if ((sctp_options & SCTP_PRSCTP_OPTION) &&
} else {
}
/* Get initial TSNs */
/* Serial numbers are initialized to the same value as the TSNs */
return (ENOMEM);
/*
* Copy sctp_secret from the listener in case we need to validate
* a possibly delayed cookie.
*/
/*
* After acceptor is inserted in the hash list, it can be found.
* So we need to lock it here.
*/
return (0);
}
/* Process the COOKIE packet, mp, directed at the listener 'sctp' */
sctp_t *
{
int err;
/*
* No need to check for duplicate as this is the listener
* and we are holding the lock. This means that no new
* connection can be created out of it. And since the
* fanout already done cannot find a match, it means that
* there is no duplicate.
*/
/*
* Enforce the limit set on the number of connections per listener.
* Note that tlc_cnt starts with 1. So need to add 1 to tlc_max
* for comparison.
*/
now = ddi_get_lbolt64();
"SCTP listener (port %d) association max "
"(%u) reached: %u attempts dropped total\n",
}
return (NULL);
}
}
if (slc_set)
return (NULL);
}
/* Inherit the policy from the listener; use actions from ira */
return (NULL);
}
}
} else {
}
/*
* XXX need to fix the cached policy issue here.
* We temporarily set the conn_laddr/conn_faddr here so
* that IPsec can use it for the latched policy
* selector. This is obvioursly wrong as SCTP can
* use different addresses...
*/
}
return (NULL);
}
/* Save for getpeerucred */
if (is_system_labeled()) {
/* Discard any old label */
}
/*
* If this is an MLP connection or a MAC-Exempt
* connection with an unlabeled node, packets are to be
* exchanged using the security label of the received
* Cookie packet instead of the server application's
* label.
* tsol_check_dest called from ip_set_destination
* might later update TSF_UNLABELED by replacing
* ixa_tsl with a new label.
*/
} else {
}
}
if (err != 0) {
return (NULL);
}
}
}
/*
* On a clustered note send this notification to the clustering
* subsystem.
*/
if (cl_sctp_connect != NULL) {
return (NULL);
}
/* The clustering module frees these list */
}
/* Connection established, so send up the conn_ind */
return (NULL);
}
return (eager);
}
/*
* Connect to a peer - this function inserts the sctp in the
* bind and conn fanouts, sends the INIT, and replies to the client
* with an OK ack.
*/
int
{
int err;
/*
* Determine packet type based on type of address passed in
* the request should contain an IPv4 or IPv6 address.
* Make sure that address family matches the type of
* family of the address passed down.
*/
return (EINVAL);
}
case AF_INET:
/* Check for attempt to connect to non-unicast */
ip0dbg(("sctp_connect: non-unicast\n"));
return (EINVAL);
}
if (connp->conn_ipv6_v6only)
return (EAFNOSUPPORT);
/* convert to v6 mapped */
/* Check for attempt to connect to INADDR_ANY */
/*
* SunOS 4.x and 4.3 BSD allow an application
* to connect a TCP socket to INADDR_ANY.
* When they do this, the kernel picks the
* address of one interface and uses it
* instead. The kernel usually ends up
* picking the address of the loopback
* interface. This is an undocumented feature.
* However, we provide the same thing here
* in case any TCP apps that use this feature
* are being ported to SCTP...
*/
} else {
}
break;
case AF_INET6:
/* Check for attempt to connect to non-unicast. */
ip0dbg(("sctp_connect: non-unicast\n"));
return (EINVAL);
}
if (connp->conn_ipv6_v6only &&
return (EAFNOSUPPORT);
}
/* check for attempt to connect to unspec */
} else {
if (IN6_IS_ADDR_LINKLOCAL(&dstaddr)) {
}
}
break;
default:
return (EAFNOSUPPORT);
}
return (EINVAL);
}
}
/* Cache things in conn_ixa without any refhold */
if (is_system_labeled()) {
/* We need to restart with a label based on the cred */
}
switch (sctp->sctp_state) {
case SCTPS_IDLE: {
/*
* We support a quick connect capability here, allowing
* clients to transition directly from IDLE to COOKIE_WAIT.
* sctp_bindi will pick an unused port, insert the connection
* in the bind hash and transition to BOUND state. SCTP
* picks and uses what it considers the optimal local address
* set (just like specifiying INADDR_ANY to bind()).
*/
sizeof (ss))) != 0) {
return (err);
}
/* FALLTHRU */
}
case SCTPS_BOUND:
/* do the connect */
/* XXX check for attempt to connect to self */
/*
* Don't allow this connection to completely duplicate
* an existing connection.
*
* Ensure that the duplicate check and insertion is atomic.
*/
connp->conn_ports)];
/* found a duplicate connection */
return (EADDRINUSE);
}
/*
* OK; set up the peer addr (this may grow after we get
* the INIT ACK from the peer with additional addresses).
*/
B_FALSE)) != 0) {
return (err);
}
/* No valid src addr, return. */
return (EADDRNOTAVAIL);
}
if (scope_id != 0) {
} else {
}
/* initialize composite headers */
return (err);
}
return (err);
}
/*
* Turn off the don't fragment bit on the (only) faddr,
* so that if one of the messages exchanged during the
* initialization sequence exceeds the path mtu, it
* at least has a chance to get there. SCTP does no
* fragmentation of initialization messages. The DF bit
* will be turned on again in sctp_send_cookie_echo()
* (but the cookie echo will still be sent with the df bit
* off).
*/
/* Mark this address as alive */
/* Send the INIT to the peer */
/*
* sctp_init_mp() could result in modifying the source
* address list, so take the hash lock.
*/
/*
* It may happen that all the source addresses
* faile the connect.
*/
if (sctp->sctp_nsaddrs == 0) {
return (EADDRNOTAVAIL);
}
/* Otherwise, let the retransmission timer retry */
goto notify_ulp;
}
/*
* On a clustered note send this notification to the clustering
* subsystem.
*/
if (cl_sctp_connect != NULL) {
/* The clustering module frees the lists */
}
return (0);
default:
return (EINVAL);
}
}