Head

GCC Code Coverage Report

Directory:	./		Exec	Total	Coverage
File:	usr.sbin/ospfd/database.c	Lines:	0	183	0.0 %
Date:	2017-11-13	Branches:	0	128	0.0 %


/*	$OpenBSD: database.c,v 1.33 2016/02/18 15:33:24 bluhm Exp $ */

/*
 * Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org>
 * Copyright (c) 2004, 2005 Esben Norby <norby@openbsd.org>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <netinet/ip.h>
#include <arpa/inet.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>

#include "ospfd.h"
#include "ospf.h"
#include "log.h"
#include "ospfe.h"

extern struct ospfd_conf	*oeconf;

void	db_sum_list_next(struct nbr *);

/* database description packet handling */
int
send_db_description(struct nbr *nbr)
{
	struct sockaddr_in	 dst;
	struct db_dscrp_hdr	 dd_hdr;
	struct lsa_entry	*le, *nle;
	struct ibuf		*buf;
	int			 ret = 0;
	u_int8_t		 bits = 0;

	if ((buf = ibuf_open(nbr->iface->mtu - sizeof(struct ip))) == NULL)
		fatal("send_db_description");

	/* OSPF header */
	if (gen_ospf_hdr(buf, nbr->iface, PACKET_TYPE_DD))
		goto fail;

	/* reserve space for database description header */
	if (ibuf_reserve(buf, sizeof(dd_hdr)) == NULL)
		goto fail;

	switch (nbr->state) {
	case NBR_STA_DOWN:
	case NBR_STA_ATTEMPT:
	case NBR_STA_INIT:
	case NBR_STA_2_WAY:
	case NBR_STA_SNAP:
		log_debug("send_db_description: neighbor ID %s: "
		    "cannot send packet in state %s", inet_ntoa(nbr->id),
		    nbr_state_name(nbr->state));
		ret = -1;
		goto done;
	case NBR_STA_XSTRT:
		bits |= OSPF_DBD_MS | OSPF_DBD_M | OSPF_DBD_I;
		nbr->dd_more = 1;
		break;
	case NBR_STA_XCHNG:
		if (nbr->dd_master)
			bits |= OSPF_DBD_MS;
		else
			bits &= ~OSPF_DBD_MS;

		if (TAILQ_EMPTY(&nbr->db_sum_list)) {
			bits &= ~OSPF_DBD_M;
			nbr->dd_more = 0;
		} else {
			bits |= OSPF_DBD_M;
			nbr->dd_more = 1;
		}

		bits &= ~OSPF_DBD_I;

		/* build LSA list, keep space for a possible md5 sum */
		for (le = TAILQ_FIRST(&nbr->db_sum_list); le != NULL &&
		    ibuf_left(buf) >= MD5_DIGEST_LENGTH + sizeof(struct lsa_hdr);
		    le = nle) {
			nbr->dd_end = nle = TAILQ_NEXT(le, entry);
			if (ibuf_add(buf, le->le_lsa, sizeof(struct lsa_hdr)))
				goto fail;
		}
		break;
	case NBR_STA_LOAD:
	case NBR_STA_FULL:
		if (nbr->dd_master)
			bits |= OSPF_DBD_MS;
		else
			bits &= ~OSPF_DBD_MS;
		bits &= ~OSPF_DBD_M;
		bits &= ~OSPF_DBD_I;

		nbr->dd_more = 0;
		break;
	default:
		fatalx("send_db_description: unknown neighbor state");
	}

	/* set destination */
	dst.sin_family = AF_INET;
	dst.sin_len = sizeof(struct sockaddr_in);

	switch (nbr->iface->type) {
	case IF_TYPE_POINTOPOINT:
		inet_aton(AllSPFRouters, &dst.sin_addr);
		dd_hdr.iface_mtu = htons(nbr->iface->mtu);
		break;
	case IF_TYPE_BROADCAST:
		dst.sin_addr = nbr->addr;
		dd_hdr.iface_mtu = htons(nbr->iface->mtu);
		break;
	case IF_TYPE_NBMA:
	case IF_TYPE_POINTOMULTIPOINT:
		/* XXX not supported */
		break;
	case IF_TYPE_VIRTUALLINK:
		dst.sin_addr = nbr->iface->dst;
		dd_hdr.iface_mtu = 0;
		break;
	default:
		fatalx("send_db_description: unknown interface type");
	}

	/* XXX button or not for opaque LSA? */
	dd_hdr.opts = area_ospf_options(nbr->iface->area) | OSPF_OPTION_O;
	dd_hdr.bits = bits;
	dd_hdr.dd_seq_num = htonl(nbr->dd_seq_num);

	memcpy(ibuf_seek(buf, sizeof(struct ospf_hdr), sizeof(dd_hdr)),
	    &dd_hdr, sizeof(dd_hdr));

	/* update authentication and calculate checksum */
	if (auth_gen(buf, nbr->iface))
		goto fail;

	/* transmit packet */
	ret = send_packet(nbr->iface, buf, &dst);
done:
	ibuf_free(buf);
	return (ret);
fail:
	log_warn("send_db_description");
	ibuf_free(buf);
	return (-1);
}

void
recv_db_description(struct nbr *nbr, char *buf, u_int16_t len)
{
	struct db_dscrp_hdr	 dd_hdr;
	int			 dupe = 0;

	if (len < sizeof(dd_hdr)) {
		log_warnx("recv_db_description: neighbor ID %s: "
		    "bad packet size", inet_ntoa(nbr->id));
		return;
	}
	memcpy(&dd_hdr, buf, sizeof(dd_hdr));
	buf += sizeof(dd_hdr);
	len -= sizeof(dd_hdr);

	/* db description packet sanity checks */
	if (ntohs(dd_hdr.iface_mtu) > nbr->iface->mtu) {
		log_warnx("recv_db_description: neighbor ID %s: "
		    "invalid MTU %d expected %d", inet_ntoa(nbr->id),
		    ntohs(dd_hdr.iface_mtu), nbr->iface->mtu);
		return;
	}

	if (nbr->last_rx_options == dd_hdr.opts &&
	    nbr->last_rx_bits == dd_hdr.bits &&
	    ntohl(dd_hdr.dd_seq_num) == nbr->dd_seq_num - nbr->dd_master ?
	    1 : 0) {
		log_debug("recv_db_description: dupe from neighbor ID %s",
		    inet_ntoa(nbr->id));
		dupe = 1;
	}

	switch (nbr->state) {
	case NBR_STA_DOWN:
	case NBR_STA_ATTEMPT:
	case NBR_STA_2_WAY:
	case NBR_STA_SNAP:
		log_debug("recv_db_description: neighbor ID %s: "
		    "packet ignored in state %s", inet_ntoa(nbr->id),
		    nbr_state_name(nbr->state));
		return;
	case NBR_STA_INIT:
		/* evaluate dr and bdr after issuing a 2-Way event */
		nbr_fsm(nbr, NBR_EVT_2_WAY_RCVD);
		if_fsm(nbr->iface, IF_EVT_NBR_CHNG);
		if (nbr->state != NBR_STA_XSTRT)
			return;
		/* FALLTHROUGH */
	case NBR_STA_XSTRT:
		if (dupe)
			return;
		nbr->capa_options = dd_hdr.opts;
		if ((nbr->capa_options & nbr->options) != nbr->options) {
			log_warnx("recv_db_description: neighbor ID %s "
			    "sent inconsistent options %x vs. %x",
			    inet_ntoa(nbr->id), nbr->capa_options,
			    nbr->options);
		}
		/*
		 * check bits: either I,M,MS or only M
		 */
		if (dd_hdr.bits == (OSPF_DBD_I | OSPF_DBD_M | OSPF_DBD_MS)) {
			/* if nbr Router ID is larger than own -> slave */
			if ((ntohl(nbr->id.s_addr)) >
			    ntohl(ospfe_router_id())) {
				/* slave */
				nbr->dd_master = 0;
				nbr->dd_seq_num = ntohl(dd_hdr.dd_seq_num);

				/* event negotiation done */
				nbr_fsm(nbr, NBR_EVT_NEG_DONE);
			}
		} else if (!(dd_hdr.bits & (OSPF_DBD_I | OSPF_DBD_MS))) {
			/* M only case: we are master */
			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num) {
				log_warnx("recv_db_description: "
				    "neighbor ID %s: "
				    "invalid seq num, mine %x his %x",
				    inet_ntoa(nbr->id), nbr->dd_seq_num,
				    ntohl(dd_hdr.dd_seq_num));
				return;
			}
			nbr->dd_seq_num++;

			/* event negotiation done */
			nbr_fsm(nbr, NBR_EVT_NEG_DONE);

			/* this packet may already have data so pass it on */
			if (len > 0) {
				nbr->dd_pending++;
				ospfe_imsg_compose_rde(IMSG_DD, nbr->peerid,
				    0, buf, len);
			}
		} else {
			/* ignore packet */
			log_debug("recv_db_description: neighbor ID %s: "
			    "packet ignored in state %s (bad flags)",
			    inet_ntoa(nbr->id), nbr_state_name(nbr->state));
		}
		break;
	case NBR_STA_XCHNG:
	case NBR_STA_LOAD:
	case NBR_STA_FULL:
		if (dd_hdr.bits & OSPF_DBD_I ||
		    !(dd_hdr.bits & OSPF_DBD_MS) == !nbr->dd_master) {
			log_warnx("recv_db_description: neighbor ID %s: "
			    "seq num mismatch, bad flags", inet_ntoa(nbr->id));
			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
			return;
		}

		if (nbr->last_rx_options != dd_hdr.opts) {
			log_warnx("recv_db_description: neighbor ID %s: "
			    "seq num mismatch, bad options",
			    inet_ntoa(nbr->id));
			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
			return;
		}

		if (dupe) {
			if (!nbr->dd_master)
				/* retransmit */
				start_db_tx_timer(nbr);
			return;
		}

		if (nbr->state != NBR_STA_XCHNG) {
			log_warnx("recv_db_description: neighbor ID %s: "
			    "invalid seq num, mine %x his %x",
			    inet_ntoa(nbr->id), nbr->dd_seq_num,
			    ntohl(dd_hdr.dd_seq_num));
			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
			return;
		}

		/* sanity check dd seq number */
		if (nbr->dd_master) {
			/* master */
			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num) {
				log_warnx("recv_db_description: "
				    "neighbor ID %s: "
				    "invalid seq num, mine %x his %x, master",
				    inet_ntoa(nbr->id), nbr->dd_seq_num,
				    ntohl(dd_hdr.dd_seq_num));
				nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
				return;
			}
			nbr->dd_seq_num++;
		} else {
			/* slave */
			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num + 1) {
				log_warnx("recv_db_description: "
				    "neighbor ID %s: "
				    "invalid seq num, mine %x his %x, slave",
				    inet_ntoa(nbr->id), nbr->dd_seq_num,
				    ntohl(dd_hdr.dd_seq_num));
				nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
				return;
			}
			nbr->dd_seq_num = ntohl(dd_hdr.dd_seq_num);
		}

		/* forward to RDE and let it decide which LSAs to request */
		if (len > 0) {
			nbr->dd_pending++;
			ospfe_imsg_compose_rde(IMSG_DD, nbr->peerid, 0,
			    buf, len);
		}

		/* next packet */
		db_sum_list_next(nbr);
		start_db_tx_timer(nbr);

		if (!(dd_hdr.bits & OSPF_DBD_M) &&
		    TAILQ_EMPTY(&nbr->db_sum_list))
			if (!nbr->dd_master || !nbr->dd_more)
				nbr_fsm(nbr, NBR_EVT_XCHNG_DONE);
		break;
	default:
		fatalx("recv_db_description: unknown neighbor state");
	}

	nbr->last_rx_options = dd_hdr.opts;
	nbr->last_rx_bits = dd_hdr.bits;
}

void
db_sum_list_add(struct nbr *nbr, struct lsa_hdr *lsa)
{
	struct lsa_entry	*le;

	if ((le = calloc(1, sizeof(*le))) == NULL)
		fatal("db_sum_list_add");

	TAILQ_INSERT_TAIL(&nbr->db_sum_list, le, entry);
	le->le_lsa = lsa;
}

void
db_sum_list_next(struct nbr *nbr)
{
	struct lsa_entry	*le;

	while ((le = TAILQ_FIRST(&nbr->db_sum_list)) != nbr->dd_end) {
		TAILQ_REMOVE(&nbr->db_sum_list, le, entry);
		free(le->le_lsa);
		free(le);
	}
}

void
db_sum_list_clr(struct nbr *nbr)
{
	nbr->dd_end = NULL;
	db_sum_list_next(nbr);
}

/* timers */
/* ARGSUSED */
void
db_tx_timer(int fd, short event, void *arg)
{
	struct nbr *nbr = arg;
	struct timeval tv;

	switch (nbr->state) {
	case NBR_STA_DOWN:
	case NBR_STA_ATTEMPT:
	case NBR_STA_INIT:
	case NBR_STA_2_WAY:
	case NBR_STA_SNAP:
		return ;
	case NBR_STA_XSTRT:
	case NBR_STA_XCHNG:
	case NBR_STA_LOAD:
	case NBR_STA_FULL:
		send_db_description(nbr);
		break;
	default:
		log_debug("db_tx_timer: neighbor ID %s: unknown neighbor state",
		    inet_ntoa(nbr->id));
		break;
	}

	/* reschedule db_tx_timer but only in master mode */
	if (nbr->dd_master) {
		timerclear(&tv);
		tv.tv_sec = nbr->iface->rxmt_interval;
		if (evtimer_add(&nbr->db_tx_timer, &tv) == -1)
			fatal("db_tx_timer");
	}
}

void
start_db_tx_timer(struct nbr *nbr)
{
	struct timeval	tv;

	if (nbr == nbr->iface->self)
		return;

	timerclear(&tv);
	if (evtimer_add(&nbr->db_tx_timer, &tv) == -1)
		fatal("start_db_tx_timer");
}

void
stop_db_tx_timer(struct nbr *nbr)
{
	if (nbr == nbr->iface->self)
		return;

	if (evtimer_del(&nbr->db_tx_timer) == -1)
		fatal("stop_db_tx_timer");
}


Generated by: GCOVR (Version 3.3)

Line	Branch	Exec	Source
1			/* $OpenBSD: database.c,v 1.33 2016/02/18 15:33:24 bluhm Exp $ */
2
3			/*
4			* Copyright (c) 2005 Claudio Jeker <claudio@openbsd.org>
5			* Copyright (c) 2004, 2005 Esben Norby <norby@openbsd.org>
6			*
7			* Permission to use, copy, modify, and distribute this software for any
8			* purpose with or without fee is hereby granted, provided that the above
9			* copyright notice and this permission notice appear in all copies.
10			*
11			* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12			* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13			* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14			* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15			* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16			* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17			* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18			*/
19
20			#include <sys/types.h>
21			#include <sys/socket.h>
22			#include <netinet/in.h>
23			#include <netinet/ip.h>
24			#include <arpa/inet.h>
25			#include <stdlib.h>
26			#include <string.h>
27			#include <unistd.h>
28
29			#include "ospfd.h"
30			#include "ospf.h"
31			#include "log.h"
32			#include "ospfe.h"
33
34			extern struct ospfd_conf *oeconf;
35
36			void db_sum_list_next(struct nbr *);
37
38			/* database description packet handling */
39			int
40			send_db_description(struct nbr *nbr)
41			{
42			struct sockaddr_in dst;
43			struct db_dscrp_hdr dd_hdr;
44			struct lsa_entry le, nle;
45			struct ibuf *buf;
46			int ret = 0;
47			u_int8_t bits = 0;
48
49			if ((buf = ibuf_open(nbr->iface->mtu - sizeof(struct ip))) == NULL)
50			fatal("send_db_description");
51
52			/* OSPF header */
53			if (gen_ospf_hdr(buf, nbr->iface, PACKET_TYPE_DD))
54			goto fail;
55
56			/* reserve space for database description header */
57			if (ibuf_reserve(buf, sizeof(dd_hdr)) == NULL)
58			goto fail;
59
60			switch (nbr->state) {
61			case NBR_STA_DOWN:
62			case NBR_STA_ATTEMPT:
63			case NBR_STA_INIT:
64			case NBR_STA_2_WAY:
65			case NBR_STA_SNAP:
66			log_debug("send_db_description: neighbor ID %s: "
67			"cannot send packet in state %s", inet_ntoa(nbr->id),
68			nbr_state_name(nbr->state));
69			ret = -1;
70			goto done;
71			case NBR_STA_XSTRT:
72			bits \|= OSPF_DBD_MS \| OSPF_DBD_M \| OSPF_DBD_I;
73			nbr->dd_more = 1;
74			break;
75			case NBR_STA_XCHNG:
76			if (nbr->dd_master)
77			bits \|= OSPF_DBD_MS;
78			else
79			bits &= ~OSPF_DBD_MS;
80
81			if (TAILQ_EMPTY(&nbr->db_sum_list)) {
82			bits &= ~OSPF_DBD_M;
83			nbr->dd_more = 0;
84			} else {
85			bits \|= OSPF_DBD_M;
86			nbr->dd_more = 1;
87			}
88
89			bits &= ~OSPF_DBD_I;
90
91			/* build LSA list, keep space for a possible md5 sum */
92			for (le = TAILQ_FIRST(&nbr->db_sum_list); le != NULL &&
93			ibuf_left(buf) >= MD5_DIGEST_LENGTH + sizeof(struct lsa_hdr);
94			le = nle) {
95			nbr->dd_end = nle = TAILQ_NEXT(le, entry);
96			if (ibuf_add(buf, le->le_lsa, sizeof(struct lsa_hdr)))
97			goto fail;
98			}
99			break;
100			case NBR_STA_LOAD:
101			case NBR_STA_FULL:
102			if (nbr->dd_master)
103			bits \|= OSPF_DBD_MS;
104			else
105			bits &= ~OSPF_DBD_MS;
106			bits &= ~OSPF_DBD_M;
107			bits &= ~OSPF_DBD_I;
108
109			nbr->dd_more = 0;
110			break;
111			default:
112			fatalx("send_db_description: unknown neighbor state");
113			}
114
115			/* set destination */
116			dst.sin_family = AF_INET;
117			dst.sin_len = sizeof(struct sockaddr_in);
118
119			switch (nbr->iface->type) {
120			case IF_TYPE_POINTOPOINT:
121			inet_aton(AllSPFRouters, &dst.sin_addr);
122			dd_hdr.iface_mtu = htons(nbr->iface->mtu);
123			break;
124			case IF_TYPE_BROADCAST:
125			dst.sin_addr = nbr->addr;
126			dd_hdr.iface_mtu = htons(nbr->iface->mtu);
127			break;
128			case IF_TYPE_NBMA:
129			case IF_TYPE_POINTOMULTIPOINT:
130			/* XXX not supported */
131			break;
132			case IF_TYPE_VIRTUALLINK:
133			dst.sin_addr = nbr->iface->dst;
134			dd_hdr.iface_mtu = 0;
135			break;
136			default:
137			fatalx("send_db_description: unknown interface type");
138			}
139
140			/* XXX button or not for opaque LSA? */
141			dd_hdr.opts = area_ospf_options(nbr->iface->area) \| OSPF_OPTION_O;
142			dd_hdr.bits = bits;
143			dd_hdr.dd_seq_num = htonl(nbr->dd_seq_num);
144
145			memcpy(ibuf_seek(buf, sizeof(struct ospf_hdr), sizeof(dd_hdr)),
146			&dd_hdr, sizeof(dd_hdr));
147
148			/* update authentication and calculate checksum */
149			if (auth_gen(buf, nbr->iface))
150			goto fail;
151
152			/* transmit packet */
153			ret = send_packet(nbr->iface, buf, &dst);
154			done:
155			ibuf_free(buf);
156			return (ret);
157			fail:
158			log_warn("send_db_description");
159			ibuf_free(buf);
160			return (-1);
161			}
162
163			void
164			recv_db_description(struct nbr nbr, char buf, u_int16_t len)
165			{
166			struct db_dscrp_hdr dd_hdr;
167			int dupe = 0;
168
169			if (len < sizeof(dd_hdr)) {
170			log_warnx("recv_db_description: neighbor ID %s: "
171			"bad packet size", inet_ntoa(nbr->id));
172			return;
173			}
174			memcpy(&dd_hdr, buf, sizeof(dd_hdr));
175			buf += sizeof(dd_hdr);
176			len -= sizeof(dd_hdr);
177
178			/* db description packet sanity checks */
179			if (ntohs(dd_hdr.iface_mtu) > nbr->iface->mtu) {
180			log_warnx("recv_db_description: neighbor ID %s: "
181			"invalid MTU %d expected %d", inet_ntoa(nbr->id),
182			ntohs(dd_hdr.iface_mtu), nbr->iface->mtu);
183			return;
184			}
185
186			if (nbr->last_rx_options == dd_hdr.opts &&
187			nbr->last_rx_bits == dd_hdr.bits &&
188			ntohl(dd_hdr.dd_seq_num) == nbr->dd_seq_num - nbr->dd_master ?
189			1 : 0) {
190			log_debug("recv_db_description: dupe from neighbor ID %s",
191			inet_ntoa(nbr->id));
192			dupe = 1;
193			}
194
195			switch (nbr->state) {
196			case NBR_STA_DOWN:
197			case NBR_STA_ATTEMPT:
198			case NBR_STA_2_WAY:
199			case NBR_STA_SNAP:
200			log_debug("recv_db_description: neighbor ID %s: "
201			"packet ignored in state %s", inet_ntoa(nbr->id),
202			nbr_state_name(nbr->state));
203			return;
204			case NBR_STA_INIT:
205			/* evaluate dr and bdr after issuing a 2-Way event */
206			nbr_fsm(nbr, NBR_EVT_2_WAY_RCVD);
207			if_fsm(nbr->iface, IF_EVT_NBR_CHNG);
208			if (nbr->state != NBR_STA_XSTRT)
209			return;
210			/* FALLTHROUGH */
211			case NBR_STA_XSTRT:
212			if (dupe)
213			return;
214			nbr->capa_options = dd_hdr.opts;
215			if ((nbr->capa_options & nbr->options) != nbr->options) {
216			log_warnx("recv_db_description: neighbor ID %s "
217			"sent inconsistent options %x vs. %x",
218			inet_ntoa(nbr->id), nbr->capa_options,
219			nbr->options);
220			}
221			/*
222			* check bits: either I,M,MS or only M
223			*/
224			if (dd_hdr.bits == (OSPF_DBD_I \| OSPF_DBD_M \| OSPF_DBD_MS)) {
225			/* if nbr Router ID is larger than own -> slave */
226			if ((ntohl(nbr->id.s_addr)) >
227			ntohl(ospfe_router_id())) {
228			/* slave */
229			nbr->dd_master = 0;
230			nbr->dd_seq_num = ntohl(dd_hdr.dd_seq_num);
231
232			/* event negotiation done */
233			nbr_fsm(nbr, NBR_EVT_NEG_DONE);
234			}
235			} else if (!(dd_hdr.bits & (OSPF_DBD_I \| OSPF_DBD_MS))) {
236			/* M only case: we are master */
237			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num) {
238			log_warnx("recv_db_description: "
239			"neighbor ID %s: "
240			"invalid seq num, mine %x his %x",
241			inet_ntoa(nbr->id), nbr->dd_seq_num,
242			ntohl(dd_hdr.dd_seq_num));
243			return;
244			}
245			nbr->dd_seq_num++;
246
247			/* event negotiation done */
248			nbr_fsm(nbr, NBR_EVT_NEG_DONE);
249
250			/* this packet may already have data so pass it on */
251			if (len > 0) {
252			nbr->dd_pending++;
253			ospfe_imsg_compose_rde(IMSG_DD, nbr->peerid,
254			0, buf, len);
255			}
256			} else {
257			/* ignore packet */
258			log_debug("recv_db_description: neighbor ID %s: "
259			"packet ignored in state %s (bad flags)",
260			inet_ntoa(nbr->id), nbr_state_name(nbr->state));
261			}
262			break;
263			case NBR_STA_XCHNG:
264			case NBR_STA_LOAD:
265			case NBR_STA_FULL:
266			if (dd_hdr.bits & OSPF_DBD_I \|\|
267			!(dd_hdr.bits & OSPF_DBD_MS) == !nbr->dd_master) {
268			log_warnx("recv_db_description: neighbor ID %s: "
269			"seq num mismatch, bad flags", inet_ntoa(nbr->id));
270			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
271			return;
272			}
273
274			if (nbr->last_rx_options != dd_hdr.opts) {
275			log_warnx("recv_db_description: neighbor ID %s: "
276			"seq num mismatch, bad options",
277			inet_ntoa(nbr->id));
278			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
279			return;
280			}
281
282			if (dupe) {
283			if (!nbr->dd_master)
284			/* retransmit */
285			start_db_tx_timer(nbr);
286			return;
287			}
288
289			if (nbr->state != NBR_STA_XCHNG) {
290			log_warnx("recv_db_description: neighbor ID %s: "
291			"invalid seq num, mine %x his %x",
292			inet_ntoa(nbr->id), nbr->dd_seq_num,
293			ntohl(dd_hdr.dd_seq_num));
294			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
295			return;
296			}
297
298			/* sanity check dd seq number */
299			if (nbr->dd_master) {
300			/* master */
301			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num) {
302			log_warnx("recv_db_description: "
303			"neighbor ID %s: "
304			"invalid seq num, mine %x his %x, master",
305			inet_ntoa(nbr->id), nbr->dd_seq_num,
306			ntohl(dd_hdr.dd_seq_num));
307			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
308			return;
309			}
310			nbr->dd_seq_num++;
311			} else {
312			/* slave */
313			if (ntohl(dd_hdr.dd_seq_num) != nbr->dd_seq_num + 1) {
314			log_warnx("recv_db_description: "
315			"neighbor ID %s: "
316			"invalid seq num, mine %x his %x, slave",
317			inet_ntoa(nbr->id), nbr->dd_seq_num,
318			ntohl(dd_hdr.dd_seq_num));
319			nbr_fsm(nbr, NBR_EVT_SEQ_NUM_MIS);
320			return;
321			}
322			nbr->dd_seq_num = ntohl(dd_hdr.dd_seq_num);
323			}
324
325			/* forward to RDE and let it decide which LSAs to request */
326			if (len > 0) {
327			nbr->dd_pending++;
328			ospfe_imsg_compose_rde(IMSG_DD, nbr->peerid, 0,
329			buf, len);
330			}
331
332			/* next packet */
333			db_sum_list_next(nbr);
334			start_db_tx_timer(nbr);
335
336			if (!(dd_hdr.bits & OSPF_DBD_M) &&
337			TAILQ_EMPTY(&nbr->db_sum_list))
338			if (!nbr->dd_master \|\| !nbr->dd_more)
339			nbr_fsm(nbr, NBR_EVT_XCHNG_DONE);
340			break;
341			default:
342			fatalx("recv_db_description: unknown neighbor state");
343			}
344
345			nbr->last_rx_options = dd_hdr.opts;
346			nbr->last_rx_bits = dd_hdr.bits;
347			}
348
349			void
350			db_sum_list_add(struct nbr nbr, struct lsa_hdr lsa)
351			{
352			struct lsa_entry *le;
353
354			if ((le = calloc(1, sizeof(*le))) == NULL)
355			fatal("db_sum_list_add");
356
357			TAILQ_INSERT_TAIL(&nbr->db_sum_list, le, entry);
358			le->le_lsa = lsa;
359			}
360
361			void
362			db_sum_list_next(struct nbr *nbr)
363			{
364			struct lsa_entry *le;
365
366			while ((le = TAILQ_FIRST(&nbr->db_sum_list)) != nbr->dd_end) {
367			TAILQ_REMOVE(&nbr->db_sum_list, le, entry);
368			free(le->le_lsa);
369			free(le);
370			}
371			}
372
373			void
374			db_sum_list_clr(struct nbr *nbr)
375			{
376			nbr->dd_end = NULL;
377			db_sum_list_next(nbr);
378			}
379
380			/* timers */
381			/* ARGSUSED */
382			void
383			db_tx_timer(int fd, short event, void *arg)
384			{
385			struct nbr *nbr = arg;
386			struct timeval tv;
387
388			switch (nbr->state) {
389			case NBR_STA_DOWN:
390			case NBR_STA_ATTEMPT:
391			case NBR_STA_INIT:
392			case NBR_STA_2_WAY:
393			case NBR_STA_SNAP:
394			return ;
395			case NBR_STA_XSTRT:
396			case NBR_STA_XCHNG:
397			case NBR_STA_LOAD:
398			case NBR_STA_FULL:
399			send_db_description(nbr);
400			break;
401			default:
402			log_debug("db_tx_timer: neighbor ID %s: unknown neighbor state",
403			inet_ntoa(nbr->id));
404			break;
405			}
406
407			/* reschedule db_tx_timer but only in master mode */
408			if (nbr->dd_master) {
409			timerclear(&tv);
410			tv.tv_sec = nbr->iface->rxmt_interval;
411			if (evtimer_add(&nbr->db_tx_timer, &tv) == -1)
412			fatal("db_tx_timer");
413			}
414			}
415
416			void
417			start_db_tx_timer(struct nbr *nbr)
418			{
419			struct timeval tv;
420
421			if (nbr == nbr->iface->self)
422			return;
423
424			timerclear(&tv);
425			if (evtimer_add(&nbr->db_tx_timer, &tv) == -1)
426			fatal("start_db_tx_timer");
427			}
428
429			void
430			stop_db_tx_timer(struct nbr *nbr)
431			{
432			if (nbr == nbr->iface->self)
433			return;
434
435			if (evtimer_del(&nbr->db_tx_timer) == -1)
436			fatal("stop_db_tx_timer");
437			}