clnt_vc.c revision 184588
1177633Sdfr/*	$NetBSD: clnt_vc.c,v 1.4 2000/07/14 08:40:42 fvdl Exp $	*/
2177633Sdfr
3177633Sdfr/*
4177633Sdfr * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
5177633Sdfr * unrestricted use provided that this legend is included on all tape
6177633Sdfr * media and as a part of the software program in whole or part.  Users
7177633Sdfr * may copy or modify Sun RPC without charge, but are not authorized
8177633Sdfr * to license or distribute it to anyone else except as part of a product or
9177633Sdfr * program developed by the user.
10177633Sdfr *
11177633Sdfr * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
12177633Sdfr * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
13177633Sdfr * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
14177633Sdfr *
15177633Sdfr * Sun RPC is provided with no support and without any obligation on the
16177633Sdfr * part of Sun Microsystems, Inc. to assist in its use, correction,
17177633Sdfr * modification or enhancement.
18177633Sdfr *
19177633Sdfr * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
20177633Sdfr * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
21177633Sdfr * OR ANY PART THEREOF.
22177633Sdfr *
23177633Sdfr * In no event will Sun Microsystems, Inc. be liable for any lost revenue
24177633Sdfr * or profits or other special, indirect and consequential damages, even if
25177633Sdfr * Sun has been advised of the possibility of such damages.
26177633Sdfr *
27177633Sdfr * Sun Microsystems, Inc.
28177633Sdfr * 2550 Garcia Avenue
29177633Sdfr * Mountain View, California  94043
30177633Sdfr */
31177633Sdfr
32177633Sdfr#if defined(LIBC_SCCS) && !defined(lint)
33177633Sdfrstatic char *sccsid2 = "@(#)clnt_tcp.c 1.37 87/10/05 Copyr 1984 Sun Micro";
34177633Sdfrstatic char *sccsid = "@(#)clnt_tcp.c	2.2 88/08/01 4.0 RPCSRC";
35177633Sdfrstatic char sccsid3[] = "@(#)clnt_vc.c 1.19 89/03/16 Copyr 1988 Sun Micro";
36177633Sdfr#endif
37177633Sdfr#include <sys/cdefs.h>
38177633Sdfr__FBSDID("$FreeBSD: head/sys/rpc/clnt_vc.c 184588 2008-11-03 10:38:00Z dfr $");
39177633Sdfr
40177633Sdfr/*
41177633Sdfr * clnt_tcp.c, Implements a TCP/IP based, client side RPC.
42177633Sdfr *
43177633Sdfr * Copyright (C) 1984, Sun Microsystems, Inc.
44177633Sdfr *
45177633Sdfr * TCP based RPC supports 'batched calls'.
46177633Sdfr * A sequence of calls may be batched-up in a send buffer.  The rpc call
47177633Sdfr * return immediately to the client even though the call was not necessarily
48177633Sdfr * sent.  The batching occurs if the results' xdr routine is NULL (0) AND
49177633Sdfr * the rpc timeout value is zero (see clnt.h, rpc).
50177633Sdfr *
51177633Sdfr * Clients should NOT casually batch calls that in fact return results; that is,
52177633Sdfr * the server side should be aware that a call is batched and not produce any
53177633Sdfr * return message.  Batched calls that produce many result messages can
54177633Sdfr * deadlock (netlock) the client and the server....
55177633Sdfr *
56177633Sdfr * Now go hang yourself.
57177633Sdfr */
58177633Sdfr
59177633Sdfr#include <sys/param.h>
60177633Sdfr#include <sys/systm.h>
61177633Sdfr#include <sys/lock.h>
62177633Sdfr#include <sys/malloc.h>
63177633Sdfr#include <sys/mbuf.h>
64177633Sdfr#include <sys/mutex.h>
65177633Sdfr#include <sys/pcpu.h>
66177633Sdfr#include <sys/proc.h>
67184588Sdfr#include <sys/protosw.h>
68177633Sdfr#include <sys/socket.h>
69177633Sdfr#include <sys/socketvar.h>
70177633Sdfr#include <sys/syslog.h>
71177633Sdfr#include <sys/time.h>
72177633Sdfr#include <sys/uio.h>
73184588Sdfr#include <netinet/tcp.h>
74177633Sdfr
75177633Sdfr#include <rpc/rpc.h>
76177685Sdfr#include <rpc/rpc_com.h>
77177633Sdfr
78177633Sdfr#define MCALL_MSG_SIZE 24
79177633Sdfr
80177633Sdfrstruct cmessage {
81177633Sdfr        struct cmsghdr cmsg;
82177633Sdfr        struct cmsgcred cmcred;
83177633Sdfr};
84177633Sdfr
85180025Sdfrstatic enum clnt_stat clnt_vc_call(CLIENT *, struct rpc_callextra *,
86184588Sdfr    rpcproc_t, struct mbuf *, struct mbuf **, struct timeval);
87177633Sdfrstatic void clnt_vc_geterr(CLIENT *, struct rpc_err *);
88177633Sdfrstatic bool_t clnt_vc_freeres(CLIENT *, xdrproc_t, void *);
89177633Sdfrstatic void clnt_vc_abort(CLIENT *);
90177633Sdfrstatic bool_t clnt_vc_control(CLIENT *, u_int, void *);
91184588Sdfrstatic void clnt_vc_close(CLIENT *);
92177633Sdfrstatic void clnt_vc_destroy(CLIENT *);
93177633Sdfrstatic bool_t time_not_ok(struct timeval *);
94177633Sdfrstatic void clnt_vc_soupcall(struct socket *so, void *arg, int waitflag);
95177633Sdfr
96177633Sdfrstatic struct clnt_ops clnt_vc_ops = {
97177633Sdfr	.cl_call =	clnt_vc_call,
98177633Sdfr	.cl_abort =	clnt_vc_abort,
99177633Sdfr	.cl_geterr =	clnt_vc_geterr,
100177633Sdfr	.cl_freeres =	clnt_vc_freeres,
101184588Sdfr	.cl_close =	clnt_vc_close,
102177633Sdfr	.cl_destroy =	clnt_vc_destroy,
103177633Sdfr	.cl_control =	clnt_vc_control
104177633Sdfr};
105177633Sdfr
106177633Sdfr/*
107180025Sdfr * A pending RPC request which awaits a reply. Requests which have
108180025Sdfr * received their reply will have cr_xid set to zero and cr_mrep to
109180025Sdfr * the mbuf chain of the reply.
110177633Sdfr */
111177633Sdfrstruct ct_request {
112177633Sdfr	TAILQ_ENTRY(ct_request) cr_link;
113177633Sdfr	uint32_t		cr_xid;		/* XID of request */
114177633Sdfr	struct mbuf		*cr_mrep;	/* reply received by upcall */
115177633Sdfr	int			cr_error;	/* any error from upcall */
116184588Sdfr	char			cr_verf[MAX_AUTH_BYTES]; /* reply verf */
117177633Sdfr};
118177633Sdfr
119177633SdfrTAILQ_HEAD(ct_request_list, ct_request);
120177633Sdfr
121177633Sdfrstruct ct_data {
122177633Sdfr	struct mtx	ct_lock;
123180025Sdfr	int		ct_threads;	/* number of threads in clnt_vc_call */
124184588Sdfr	bool_t		ct_closing;	/* TRUE if we are closing */
125184588Sdfr	bool_t		ct_closed;	/* TRUE if we are closed */
126177633Sdfr	struct socket	*ct_socket;	/* connection socket */
127177633Sdfr	bool_t		ct_closeit;	/* close it on destroy */
128177633Sdfr	struct timeval	ct_wait;	/* wait interval in milliseconds */
129177633Sdfr	struct sockaddr_storage	ct_addr; /* remote addr */
130177633Sdfr	struct rpc_err	ct_error;
131177633Sdfr	uint32_t	ct_xid;
132177633Sdfr	char		ct_mcallc[MCALL_MSG_SIZE]; /* marshalled callmsg */
133177633Sdfr	size_t		ct_mpos;	/* pos after marshal */
134177633Sdfr	const char	*ct_waitchan;
135177633Sdfr	int		ct_waitflag;
136177633Sdfr	struct mbuf	*ct_record;	/* current reply record */
137177633Sdfr	size_t		ct_record_resid; /* how much left of reply to read */
138177633Sdfr	bool_t		ct_record_eor;	 /* true if reading last fragment */
139177633Sdfr	struct ct_request_list ct_pending;
140177633Sdfr};
141177633Sdfr
142177633Sdfrstatic const char clnt_vc_errstr[] = "%s : %s";
143177633Sdfrstatic const char clnt_vc_str[] = "clnt_vc_create";
144177633Sdfrstatic const char clnt_read_vc_str[] = "read_vc";
145177633Sdfrstatic const char __no_mem_str[] = "out of memory";
146177633Sdfr
147177633Sdfr/*
148177633Sdfr * Create a client handle for a connection.
149177633Sdfr * Default options are set, which the user can change using clnt_control()'s.
150177633Sdfr * The rpc/vc package does buffering similar to stdio, so the client
151177633Sdfr * must pick send and receive buffer sizes, 0 => use the default.
152177633Sdfr * NB: fd is copied into a private area.
153177633Sdfr * NB: The rpch->cl_auth is set null authentication. Caller may wish to
154177633Sdfr * set this something more useful.
155177633Sdfr *
156177633Sdfr * fd should be an open socket
157177633Sdfr */
158177633SdfrCLIENT *
159177633Sdfrclnt_vc_create(
160177633Sdfr	struct socket *so,		/* open file descriptor */
161177633Sdfr	struct sockaddr *raddr,		/* servers address */
162177633Sdfr	const rpcprog_t prog,		/* program number */
163177633Sdfr	const rpcvers_t vers,		/* version number */
164177633Sdfr	size_t sendsz,			/* buffer recv size */
165177633Sdfr	size_t recvsz)			/* buffer send size */
166177633Sdfr{
167177633Sdfr	CLIENT *cl;			/* client handle */
168177633Sdfr	struct ct_data *ct = NULL;	/* client handle */
169177633Sdfr	struct timeval now;
170177633Sdfr	struct rpc_msg call_msg;
171177633Sdfr	static uint32_t disrupt;
172177633Sdfr	struct __rpc_sockinfo si;
173177633Sdfr	XDR xdrs;
174184588Sdfr	int error, interrupted, one = 1;
175184588Sdfr	struct sockopt sopt;
176177633Sdfr
177177633Sdfr	if (disrupt == 0)
178177633Sdfr		disrupt = (uint32_t)(long)raddr;
179177633Sdfr
180177633Sdfr	cl = (CLIENT *)mem_alloc(sizeof (*cl));
181177633Sdfr	ct = (struct ct_data *)mem_alloc(sizeof (*ct));
182177633Sdfr
183177633Sdfr	mtx_init(&ct->ct_lock, "ct->ct_lock", NULL, MTX_DEF);
184180025Sdfr	ct->ct_threads = 0;
185180025Sdfr	ct->ct_closing = FALSE;
186184588Sdfr	ct->ct_closed = FALSE;
187177633Sdfr
188177633Sdfr	if ((so->so_state & (SS_ISCONNECTED|SS_ISCONFIRMING)) == 0) {
189177633Sdfr		error = soconnect(so, raddr, curthread);
190180025Sdfr		SOCK_LOCK(so);
191180025Sdfr		interrupted = 0;
192180025Sdfr		while ((so->so_state & SS_ISCONNECTING)
193180025Sdfr		    && so->so_error == 0) {
194180025Sdfr			error = msleep(&so->so_timeo, SOCK_MTX(so),
195180025Sdfr			    PSOCK | PCATCH, "connec", 0);
196180025Sdfr			if (error) {
197180025Sdfr				if (error == EINTR || error == ERESTART)
198180025Sdfr					interrupted = 1;
199180025Sdfr				break;
200180025Sdfr			}
201180025Sdfr		}
202180025Sdfr		if (error == 0) {
203180025Sdfr			error = so->so_error;
204180025Sdfr			so->so_error = 0;
205180025Sdfr		}
206180025Sdfr		SOCK_UNLOCK(so);
207177633Sdfr		if (error) {
208180025Sdfr			if (!interrupted)
209180025Sdfr				so->so_state &= ~SS_ISCONNECTING;
210177633Sdfr			rpc_createerr.cf_stat = RPC_SYSTEMERROR;
211177633Sdfr			rpc_createerr.cf_error.re_errno = error;
212177633Sdfr			goto err;
213177633Sdfr		}
214177633Sdfr	}
215177633Sdfr
216177633Sdfr	if (!__rpc_socket2sockinfo(so, &si))
217177633Sdfr		goto err;
218177633Sdfr
219184588Sdfr	if (so->so_proto->pr_flags & PR_CONNREQUIRED) {
220184588Sdfr		bzero(&sopt, sizeof(sopt));
221184588Sdfr		sopt.sopt_dir = SOPT_SET;
222184588Sdfr		sopt.sopt_level = SOL_SOCKET;
223184588Sdfr		sopt.sopt_name = SO_KEEPALIVE;
224184588Sdfr		sopt.sopt_val = &one;
225184588Sdfr		sopt.sopt_valsize = sizeof(one);
226184588Sdfr		sosetopt(so, &sopt);
227184588Sdfr	}
228184588Sdfr
229184588Sdfr	if (so->so_proto->pr_protocol == IPPROTO_TCP) {
230184588Sdfr		bzero(&sopt, sizeof(sopt));
231184588Sdfr		sopt.sopt_dir = SOPT_SET;
232184588Sdfr		sopt.sopt_level = IPPROTO_TCP;
233184588Sdfr		sopt.sopt_name = TCP_NODELAY;
234184588Sdfr		sopt.sopt_val = &one;
235184588Sdfr		sopt.sopt_valsize = sizeof(one);
236184588Sdfr		sosetopt(so, &sopt);
237184588Sdfr	}
238184588Sdfr
239177633Sdfr	ct->ct_closeit = FALSE;
240177633Sdfr
241177633Sdfr	/*
242177633Sdfr	 * Set up private data struct
243177633Sdfr	 */
244177633Sdfr	ct->ct_socket = so;
245177633Sdfr	ct->ct_wait.tv_sec = -1;
246177633Sdfr	ct->ct_wait.tv_usec = -1;
247177633Sdfr	memcpy(&ct->ct_addr, raddr, raddr->sa_len);
248177633Sdfr
249177633Sdfr	/*
250177633Sdfr	 * Initialize call message
251177633Sdfr	 */
252177633Sdfr	getmicrotime(&now);
253177633Sdfr	ct->ct_xid = ((uint32_t)++disrupt) ^ __RPC_GETXID(&now);
254177633Sdfr	call_msg.rm_xid = ct->ct_xid;
255177633Sdfr	call_msg.rm_direction = CALL;
256177633Sdfr	call_msg.rm_call.cb_rpcvers = RPC_MSG_VERSION;
257177633Sdfr	call_msg.rm_call.cb_prog = (uint32_t)prog;
258177633Sdfr	call_msg.rm_call.cb_vers = (uint32_t)vers;
259177633Sdfr
260177633Sdfr	/*
261177633Sdfr	 * pre-serialize the static part of the call msg and stash it away
262177633Sdfr	 */
263177633Sdfr	xdrmem_create(&xdrs, ct->ct_mcallc, MCALL_MSG_SIZE,
264177633Sdfr	    XDR_ENCODE);
265177633Sdfr	if (! xdr_callhdr(&xdrs, &call_msg)) {
266177633Sdfr		if (ct->ct_closeit) {
267177633Sdfr			soclose(ct->ct_socket);
268177633Sdfr		}
269177633Sdfr		goto err;
270177633Sdfr	}
271177633Sdfr	ct->ct_mpos = XDR_GETPOS(&xdrs);
272177633Sdfr	XDR_DESTROY(&xdrs);
273177633Sdfr	ct->ct_waitchan = "rpcrecv";
274177633Sdfr	ct->ct_waitflag = 0;
275177633Sdfr
276177633Sdfr	/*
277177633Sdfr	 * Create a client handle which uses xdrrec for serialization
278177633Sdfr	 * and authnone for authentication.
279177633Sdfr	 */
280180025Sdfr	cl->cl_refs = 1;
281177633Sdfr	cl->cl_ops = &clnt_vc_ops;
282177633Sdfr	cl->cl_private = ct;
283177633Sdfr	cl->cl_auth = authnone_create();
284177633Sdfr	sendsz = __rpc_get_t_size(si.si_af, si.si_proto, (int)sendsz);
285177633Sdfr	recvsz = __rpc_get_t_size(si.si_af, si.si_proto, (int)recvsz);
286184588Sdfr	soreserve(ct->ct_socket, sendsz, recvsz);
287177633Sdfr
288177633Sdfr	SOCKBUF_LOCK(&ct->ct_socket->so_rcv);
289177633Sdfr	ct->ct_socket->so_upcallarg = ct;
290177633Sdfr	ct->ct_socket->so_upcall = clnt_vc_soupcall;
291177633Sdfr	ct->ct_socket->so_rcv.sb_flags |= SB_UPCALL;
292177633Sdfr	SOCKBUF_UNLOCK(&ct->ct_socket->so_rcv);
293177633Sdfr
294177633Sdfr	ct->ct_record = NULL;
295177633Sdfr	ct->ct_record_resid = 0;
296177633Sdfr	TAILQ_INIT(&ct->ct_pending);
297177633Sdfr	return (cl);
298177633Sdfr
299177633Sdfrerr:
300177633Sdfr	if (cl) {
301177633Sdfr		if (ct) {
302177633Sdfr			mem_free(ct, sizeof (struct ct_data));
303177633Sdfr		}
304177633Sdfr		if (cl)
305177633Sdfr			mem_free(cl, sizeof (CLIENT));
306177633Sdfr	}
307177633Sdfr	return ((CLIENT *)NULL);
308177633Sdfr}
309177633Sdfr
310177633Sdfrstatic enum clnt_stat
311177633Sdfrclnt_vc_call(
312184588Sdfr	CLIENT		*cl,		/* client handle */
313184588Sdfr	struct rpc_callextra *ext,	/* call metadata */
314184588Sdfr	rpcproc_t	proc,		/* procedure number */
315184588Sdfr	struct mbuf	*args,		/* pointer to args */
316184588Sdfr	struct mbuf	**resultsp,	/* pointer to results */
317184588Sdfr	struct timeval	utimeout)
318177633Sdfr{
319177633Sdfr	struct ct_data *ct = (struct ct_data *) cl->cl_private;
320180025Sdfr	AUTH *auth;
321184588Sdfr	struct rpc_err *errp;
322184588Sdfr	enum clnt_stat stat;
323177633Sdfr	XDR xdrs;
324177633Sdfr	struct rpc_msg reply_msg;
325177633Sdfr	bool_t ok;
326177633Sdfr	int nrefreshes = 2;		/* number of times to refresh cred */
327177633Sdfr	struct timeval timeout;
328177633Sdfr	uint32_t xid;
329184588Sdfr	struct mbuf *mreq = NULL, *results;
330180025Sdfr	struct ct_request *cr;
331177633Sdfr	int error;
332177633Sdfr
333180025Sdfr	cr = malloc(sizeof(struct ct_request), M_RPC, M_WAITOK);
334180025Sdfr
335177633Sdfr	mtx_lock(&ct->ct_lock);
336177633Sdfr
337184588Sdfr	if (ct->ct_closing || ct->ct_closed) {
338180025Sdfr		mtx_unlock(&ct->ct_lock);
339180025Sdfr		free(cr, M_RPC);
340180025Sdfr		return (RPC_CANTSEND);
341180025Sdfr	}
342180025Sdfr	ct->ct_threads++;
343177633Sdfr
344184588Sdfr	if (ext) {
345180025Sdfr		auth = ext->rc_auth;
346184588Sdfr		errp = &ext->rc_err;
347184588Sdfr	} else {
348180025Sdfr		auth = cl->cl_auth;
349184588Sdfr		errp = &ct->ct_error;
350184588Sdfr	}
351180025Sdfr
352180025Sdfr	cr->cr_mrep = NULL;
353180025Sdfr	cr->cr_error = 0;
354180025Sdfr
355177633Sdfr	if (ct->ct_wait.tv_usec == -1) {
356177633Sdfr		timeout = utimeout;	/* use supplied timeout */
357177633Sdfr	} else {
358177633Sdfr		timeout = ct->ct_wait;	/* use default timeout */
359177633Sdfr	}
360177633Sdfr
361177633Sdfrcall_again:
362177633Sdfr	mtx_assert(&ct->ct_lock, MA_OWNED);
363177633Sdfr
364177633Sdfr	ct->ct_xid++;
365177633Sdfr	xid = ct->ct_xid;
366177633Sdfr
367177633Sdfr	mtx_unlock(&ct->ct_lock);
368177633Sdfr
369177633Sdfr	/*
370177633Sdfr	 * Leave space to pre-pend the record mark.
371177633Sdfr	 */
372177633Sdfr	MGETHDR(mreq, M_WAIT, MT_DATA);
373177633Sdfr	mreq->m_data += sizeof(uint32_t);
374184588Sdfr	KASSERT(ct->ct_mpos + sizeof(uint32_t) <= MHLEN,
375184588Sdfr	    ("RPC header too big"));
376184588Sdfr	bcopy(ct->ct_mcallc, mreq->m_data, ct->ct_mpos);
377184588Sdfr	mreq->m_len = ct->ct_mpos;
378177633Sdfr
379177633Sdfr	/*
380177633Sdfr	 * The XID is the first thing in the request.
381177633Sdfr	 */
382177633Sdfr	*mtod(mreq, uint32_t *) = htonl(xid);
383177633Sdfr
384177633Sdfr	xdrmbuf_create(&xdrs, mreq, XDR_ENCODE);
385177633Sdfr
386184588Sdfr	errp->re_status = stat = RPC_SUCCESS;
387177633Sdfr
388177633Sdfr	if ((! XDR_PUTINT32(&xdrs, &proc)) ||
389184588Sdfr	    (! AUTH_MARSHALL(auth, xid, &xdrs,
390184588Sdfr		m_copym(args, 0, M_COPYALL, M_WAITOK)))) {
391184588Sdfr		errp->re_status = stat = RPC_CANTENCODEARGS;
392180025Sdfr		mtx_lock(&ct->ct_lock);
393180025Sdfr		goto out;
394177633Sdfr	}
395184588Sdfr	mreq->m_pkthdr.len = m_length(mreq, NULL);
396177633Sdfr
397177633Sdfr	/*
398177633Sdfr	 * Prepend a record marker containing the packet length.
399177633Sdfr	 */
400177633Sdfr	M_PREPEND(mreq, sizeof(uint32_t), M_WAIT);
401177633Sdfr	*mtod(mreq, uint32_t *) =
402177633Sdfr		htonl(0x80000000 | (mreq->m_pkthdr.len - sizeof(uint32_t)));
403177633Sdfr
404180025Sdfr	cr->cr_xid = xid;
405177633Sdfr	mtx_lock(&ct->ct_lock);
406180025Sdfr	TAILQ_INSERT_TAIL(&ct->ct_pending, cr, cr_link);
407177633Sdfr	mtx_unlock(&ct->ct_lock);
408177633Sdfr
409177633Sdfr	/*
410177633Sdfr	 * sosend consumes mreq.
411177633Sdfr	 */
412177633Sdfr	error = sosend(ct->ct_socket, NULL, NULL, mreq, NULL, 0, curthread);
413177633Sdfr	mreq = NULL;
414184588Sdfr	if (error == EMSGSIZE) {
415184588Sdfr		SOCKBUF_LOCK(&ct->ct_socket->so_snd);
416184588Sdfr		sbwait(&ct->ct_socket->so_snd);
417184588Sdfr		SOCKBUF_UNLOCK(&ct->ct_socket->so_snd);
418184588Sdfr		AUTH_VALIDATE(auth, xid, NULL, NULL);
419184588Sdfr		mtx_lock(&ct->ct_lock);
420184588Sdfr		TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
421184588Sdfr		goto call_again;
422184588Sdfr	}
423177633Sdfr
424184588Sdfr	reply_msg.acpted_rply.ar_verf.oa_flavor = AUTH_NULL;
425184588Sdfr	reply_msg.acpted_rply.ar_verf.oa_base = cr->cr_verf;
426184588Sdfr	reply_msg.acpted_rply.ar_verf.oa_length = 0;
427184588Sdfr	reply_msg.acpted_rply.ar_results.where = NULL;
428184588Sdfr	reply_msg.acpted_rply.ar_results.proc = (xdrproc_t)xdr_void;
429177633Sdfr
430177633Sdfr	mtx_lock(&ct->ct_lock);
431177633Sdfr	if (error) {
432180025Sdfr		TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
433184588Sdfr		errp->re_errno = error;
434184588Sdfr		errp->re_status = stat = RPC_CANTSEND;
435177633Sdfr		goto out;
436177633Sdfr	}
437177633Sdfr
438177633Sdfr	/*
439177633Sdfr	 * Check to see if we got an upcall while waiting for the
440177633Sdfr	 * lock. In both these cases, the request has been removed
441177633Sdfr	 * from ct->ct_pending.
442177633Sdfr	 */
443180025Sdfr	if (cr->cr_error) {
444180025Sdfr		TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
445184588Sdfr		errp->re_errno = cr->cr_error;
446184588Sdfr		errp->re_status = stat = RPC_CANTRECV;
447177633Sdfr		goto out;
448177633Sdfr	}
449180025Sdfr	if (cr->cr_mrep) {
450180025Sdfr		TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
451177633Sdfr		goto got_reply;
452177633Sdfr	}
453177633Sdfr
454177633Sdfr	/*
455177633Sdfr	 * Hack to provide rpc-based message passing
456177633Sdfr	 */
457177633Sdfr	if (timeout.tv_sec == 0 && timeout.tv_usec == 0) {
458180025Sdfr		TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
459184588Sdfr		errp->re_status = stat = RPC_TIMEDOUT;
460177633Sdfr		goto out;
461177633Sdfr	}
462177633Sdfr
463180025Sdfr	error = msleep(cr, &ct->ct_lock, ct->ct_waitflag, ct->ct_waitchan,
464177633Sdfr	    tvtohz(&timeout));
465177633Sdfr
466180025Sdfr	TAILQ_REMOVE(&ct->ct_pending, cr, cr_link);
467180025Sdfr
468177633Sdfr	if (error) {
469177633Sdfr		/*
470177633Sdfr		 * The sleep returned an error so our request is still
471177633Sdfr		 * on the list. Turn the error code into an
472177633Sdfr		 * appropriate client status.
473177633Sdfr		 */
474184588Sdfr		errp->re_errno = error;
475177633Sdfr		switch (error) {
476177633Sdfr		case EINTR:
477184588Sdfr			stat = RPC_INTR;
478177633Sdfr			break;
479177633Sdfr		case EWOULDBLOCK:
480184588Sdfr			stat = RPC_TIMEDOUT;
481177633Sdfr			break;
482177633Sdfr		default:
483184588Sdfr			stat = RPC_CANTRECV;
484177633Sdfr		}
485184588Sdfr		errp->re_status = stat;
486177633Sdfr		goto out;
487177633Sdfr	} else {
488177633Sdfr		/*
489177633Sdfr		 * We were woken up by the upcall.  If the
490177633Sdfr		 * upcall had a receive error, report that,
491177633Sdfr		 * otherwise we have a reply.
492177633Sdfr		 */
493180025Sdfr		if (cr->cr_error) {
494184588Sdfr			errp->re_errno = cr->cr_error;
495184588Sdfr			errp->re_status = stat = RPC_CANTRECV;
496177633Sdfr			goto out;
497177633Sdfr		}
498177633Sdfr	}
499177633Sdfr
500177633Sdfrgot_reply:
501177633Sdfr	/*
502177633Sdfr	 * Now decode and validate the response. We need to drop the
503177633Sdfr	 * lock since xdr_replymsg may end up sleeping in malloc.
504177633Sdfr	 */
505177633Sdfr	mtx_unlock(&ct->ct_lock);
506177633Sdfr
507184588Sdfr	if (ext && ext->rc_feedback)
508184588Sdfr		ext->rc_feedback(FEEDBACK_OK, proc, ext->rc_feedback_arg);
509184588Sdfr
510180025Sdfr	xdrmbuf_create(&xdrs, cr->cr_mrep, XDR_DECODE);
511177633Sdfr	ok = xdr_replymsg(&xdrs, &reply_msg);
512180025Sdfr	cr->cr_mrep = NULL;
513177633Sdfr
514177633Sdfr	if (ok) {
515177633Sdfr		if ((reply_msg.rm_reply.rp_stat == MSG_ACCEPTED) &&
516184588Sdfr		    (reply_msg.acpted_rply.ar_stat == SUCCESS))
517184588Sdfr			errp->re_status = stat = RPC_SUCCESS;
518177633Sdfr		else
519184588Sdfr			stat = _seterr_reply(&reply_msg, errp);
520177633Sdfr
521184588Sdfr		if (stat == RPC_SUCCESS) {
522184588Sdfr			results = xdrmbuf_getall(&xdrs);
523184588Sdfr			if (!AUTH_VALIDATE(auth, xid,
524184588Sdfr				&reply_msg.acpted_rply.ar_verf,
525184588Sdfr				&results)) {
526184588Sdfr				errp->re_status = stat = RPC_AUTHERROR;
527184588Sdfr				errp->re_why = AUTH_INVALIDRESP;
528184588Sdfr			} else {
529184588Sdfr				KASSERT(results,
530184588Sdfr				    ("auth validated but no result"));
531184588Sdfr				*resultsp = results;
532177633Sdfr			}
533177633Sdfr		}		/* end successful completion */
534177633Sdfr		/*
535177633Sdfr		 * If unsuccesful AND error is an authentication error
536177633Sdfr		 * then refresh credentials and try again, else break
537177633Sdfr		 */
538184588Sdfr		else if (stat == RPC_AUTHERROR)
539177633Sdfr			/* maybe our credentials need to be refreshed ... */
540177633Sdfr			if (nrefreshes > 0 &&
541184588Sdfr			    AUTH_REFRESH(auth, &reply_msg)) {
542177633Sdfr				nrefreshes--;
543184588Sdfr				XDR_DESTROY(&xdrs);
544184588Sdfr				mtx_lock(&ct->ct_lock);
545177633Sdfr				goto call_again;
546177633Sdfr			}
547177633Sdfr		/* end of unsuccessful completion */
548177633Sdfr	}	/* end of valid reply message */
549177633Sdfr	else {
550184588Sdfr		errp->re_status = stat = RPC_CANTDECODERES;
551177633Sdfr	}
552184588Sdfr	XDR_DESTROY(&xdrs);
553184588Sdfr	mtx_lock(&ct->ct_lock);
554177633Sdfrout:
555177633Sdfr	mtx_assert(&ct->ct_lock, MA_OWNED);
556177633Sdfr
557184588Sdfr	KASSERT(stat != RPC_SUCCESS || *resultsp,
558184588Sdfr	    ("RPC_SUCCESS without reply"));
559184588Sdfr
560177633Sdfr	if (mreq)
561177633Sdfr		m_freem(mreq);
562180025Sdfr	if (cr->cr_mrep)
563180025Sdfr		m_freem(cr->cr_mrep);
564177633Sdfr
565180025Sdfr	ct->ct_threads--;
566180025Sdfr	if (ct->ct_closing)
567180025Sdfr		wakeup(ct);
568180025Sdfr
569177633Sdfr	mtx_unlock(&ct->ct_lock);
570180025Sdfr
571184588Sdfr	if (auth && stat != RPC_SUCCESS)
572184588Sdfr		AUTH_VALIDATE(auth, xid, NULL, NULL);
573184588Sdfr
574180025Sdfr	free(cr, M_RPC);
575180025Sdfr
576184588Sdfr	return (stat);
577177633Sdfr}
578177633Sdfr
579177633Sdfrstatic void
580177633Sdfrclnt_vc_geterr(CLIENT *cl, struct rpc_err *errp)
581177633Sdfr{
582177633Sdfr	struct ct_data *ct = (struct ct_data *) cl->cl_private;
583177633Sdfr
584177633Sdfr	*errp = ct->ct_error;
585177633Sdfr}
586177633Sdfr
587177633Sdfrstatic bool_t
588177633Sdfrclnt_vc_freeres(CLIENT *cl, xdrproc_t xdr_res, void *res_ptr)
589177633Sdfr{
590177633Sdfr	XDR xdrs;
591177633Sdfr	bool_t dummy;
592177633Sdfr
593177633Sdfr	xdrs.x_op = XDR_FREE;
594177633Sdfr	dummy = (*xdr_res)(&xdrs, res_ptr);
595177633Sdfr
596177633Sdfr	return (dummy);
597177633Sdfr}
598177633Sdfr
599177633Sdfr/*ARGSUSED*/
600177633Sdfrstatic void
601177633Sdfrclnt_vc_abort(CLIENT *cl)
602177633Sdfr{
603177633Sdfr}
604177633Sdfr
605177633Sdfrstatic bool_t
606177633Sdfrclnt_vc_control(CLIENT *cl, u_int request, void *info)
607177633Sdfr{
608177633Sdfr	struct ct_data *ct = (struct ct_data *)cl->cl_private;
609177633Sdfr	void *infop = info;
610177633Sdfr
611177633Sdfr	mtx_lock(&ct->ct_lock);
612177633Sdfr
613177633Sdfr	switch (request) {
614177633Sdfr	case CLSET_FD_CLOSE:
615177633Sdfr		ct->ct_closeit = TRUE;
616177633Sdfr		mtx_unlock(&ct->ct_lock);
617177633Sdfr		return (TRUE);
618177633Sdfr	case CLSET_FD_NCLOSE:
619177633Sdfr		ct->ct_closeit = FALSE;
620177633Sdfr		mtx_unlock(&ct->ct_lock);
621177633Sdfr		return (TRUE);
622177633Sdfr	default:
623177633Sdfr		break;
624177633Sdfr	}
625177633Sdfr
626177633Sdfr	/* for other requests which use info */
627177633Sdfr	if (info == NULL) {
628177633Sdfr		mtx_unlock(&ct->ct_lock);
629177633Sdfr		return (FALSE);
630177633Sdfr	}
631177633Sdfr	switch (request) {
632177633Sdfr	case CLSET_TIMEOUT:
633177633Sdfr		if (time_not_ok((struct timeval *)info)) {
634177633Sdfr			mtx_unlock(&ct->ct_lock);
635177633Sdfr			return (FALSE);
636177633Sdfr		}
637177633Sdfr		ct->ct_wait = *(struct timeval *)infop;
638177633Sdfr		break;
639177633Sdfr	case CLGET_TIMEOUT:
640177633Sdfr		*(struct timeval *)infop = ct->ct_wait;
641177633Sdfr		break;
642177633Sdfr	case CLGET_SERVER_ADDR:
643177633Sdfr		(void) memcpy(info, &ct->ct_addr, (size_t)ct->ct_addr.ss_len);
644177633Sdfr		break;
645177633Sdfr	case CLGET_SVC_ADDR:
646177633Sdfr		/*
647177633Sdfr		 * Slightly different semantics to userland - we use
648177633Sdfr		 * sockaddr instead of netbuf.
649177633Sdfr		 */
650177633Sdfr		memcpy(info, &ct->ct_addr, ct->ct_addr.ss_len);
651177633Sdfr		break;
652177633Sdfr	case CLSET_SVC_ADDR:		/* set to new address */
653177633Sdfr		mtx_unlock(&ct->ct_lock);
654177633Sdfr		return (FALSE);
655177633Sdfr	case CLGET_XID:
656177633Sdfr		*(uint32_t *)info = ct->ct_xid;
657177633Sdfr		break;
658177633Sdfr	case CLSET_XID:
659177633Sdfr		/* This will set the xid of the NEXT call */
660177633Sdfr		/* decrement by 1 as clnt_vc_call() increments once */
661177633Sdfr		ct->ct_xid = *(uint32_t *)info - 1;
662177633Sdfr		break;
663177633Sdfr	case CLGET_VERS:
664177633Sdfr		/*
665177633Sdfr		 * This RELIES on the information that, in the call body,
666177633Sdfr		 * the version number field is the fifth field from the
667177633Sdfr		 * begining of the RPC header. MUST be changed if the
668177633Sdfr		 * call_struct is changed
669177633Sdfr		 */
670177633Sdfr		*(uint32_t *)info =
671177633Sdfr		    ntohl(*(uint32_t *)(void *)(ct->ct_mcallc +
672177633Sdfr		    4 * BYTES_PER_XDR_UNIT));
673177633Sdfr		break;
674177633Sdfr
675177633Sdfr	case CLSET_VERS:
676177633Sdfr		*(uint32_t *)(void *)(ct->ct_mcallc +
677177633Sdfr		    4 * BYTES_PER_XDR_UNIT) =
678177633Sdfr		    htonl(*(uint32_t *)info);
679177633Sdfr		break;
680177633Sdfr
681177633Sdfr	case CLGET_PROG:
682177633Sdfr		/*
683177633Sdfr		 * This RELIES on the information that, in the call body,
684177633Sdfr		 * the program number field is the fourth field from the
685177633Sdfr		 * begining of the RPC header. MUST be changed if the
686177633Sdfr		 * call_struct is changed
687177633Sdfr		 */
688177633Sdfr		*(uint32_t *)info =
689177633Sdfr		    ntohl(*(uint32_t *)(void *)(ct->ct_mcallc +
690177633Sdfr		    3 * BYTES_PER_XDR_UNIT));
691177633Sdfr		break;
692177633Sdfr
693177633Sdfr	case CLSET_PROG:
694177633Sdfr		*(uint32_t *)(void *)(ct->ct_mcallc +
695177633Sdfr		    3 * BYTES_PER_XDR_UNIT) =
696177633Sdfr		    htonl(*(uint32_t *)info);
697177633Sdfr		break;
698177633Sdfr
699177633Sdfr	case CLSET_WAITCHAN:
700184588Sdfr		ct->ct_waitchan = (const char *)info;
701177633Sdfr		break;
702177633Sdfr
703177633Sdfr	case CLGET_WAITCHAN:
704177633Sdfr		*(const char **) info = ct->ct_waitchan;
705177633Sdfr		break;
706177633Sdfr
707177633Sdfr	case CLSET_INTERRUPTIBLE:
708177633Sdfr		if (*(int *) info)
709177633Sdfr			ct->ct_waitflag = PCATCH;
710177633Sdfr		else
711177633Sdfr			ct->ct_waitflag = 0;
712177633Sdfr		break;
713177633Sdfr
714177633Sdfr	case CLGET_INTERRUPTIBLE:
715177633Sdfr		if (ct->ct_waitflag)
716177633Sdfr			*(int *) info = TRUE;
717177633Sdfr		else
718177633Sdfr			*(int *) info = FALSE;
719177633Sdfr		break;
720177633Sdfr
721177633Sdfr	default:
722177633Sdfr		mtx_unlock(&ct->ct_lock);
723177633Sdfr		return (FALSE);
724177633Sdfr	}
725177633Sdfr
726177633Sdfr	mtx_unlock(&ct->ct_lock);
727177633Sdfr	return (TRUE);
728177633Sdfr}
729177633Sdfr
730177633Sdfrstatic void
731184588Sdfrclnt_vc_close(CLIENT *cl)
732177633Sdfr{
733177633Sdfr	struct ct_data *ct = (struct ct_data *) cl->cl_private;
734180025Sdfr	struct ct_request *cr;
735177633Sdfr
736177633Sdfr	mtx_lock(&ct->ct_lock);
737177633Sdfr
738184588Sdfr	if (ct->ct_closed) {
739184588Sdfr		mtx_unlock(&ct->ct_lock);
740184588Sdfr		return;
741184588Sdfr	}
742184588Sdfr
743184588Sdfr	if (ct->ct_closing) {
744184588Sdfr		while (ct->ct_closing)
745184588Sdfr			msleep(ct, &ct->ct_lock, 0, "rpcclose", 0);
746184588Sdfr		KASSERT(ct->ct_closed, ("client should be closed"));
747184588Sdfr		mtx_unlock(&ct->ct_lock);
748184588Sdfr		return;
749184588Sdfr	}
750184588Sdfr
751177633Sdfr	if (ct->ct_socket) {
752177633Sdfr		SOCKBUF_LOCK(&ct->ct_socket->so_rcv);
753177633Sdfr		ct->ct_socket->so_upcallarg = NULL;
754177633Sdfr		ct->ct_socket->so_upcall = NULL;
755177633Sdfr		ct->ct_socket->so_rcv.sb_flags &= ~SB_UPCALL;
756177633Sdfr		SOCKBUF_UNLOCK(&ct->ct_socket->so_rcv);
757177633Sdfr
758180025Sdfr		/*
759180025Sdfr		 * Abort any pending requests and wait until everyone
760180025Sdfr		 * has finished with clnt_vc_call.
761180025Sdfr		 */
762180025Sdfr		ct->ct_closing = TRUE;
763180025Sdfr		TAILQ_FOREACH(cr, &ct->ct_pending, cr_link) {
764180025Sdfr			cr->cr_xid = 0;
765180025Sdfr			cr->cr_error = ESHUTDOWN;
766180025Sdfr			wakeup(cr);
767180025Sdfr		}
768177633Sdfr
769180025Sdfr		while (ct->ct_threads)
770180025Sdfr			msleep(ct, &ct->ct_lock, 0, "rpcclose", 0);
771184588Sdfr	}
772180025Sdfr
773184588Sdfr	ct->ct_closing = FALSE;
774184588Sdfr	ct->ct_closed = TRUE;
775184588Sdfr	mtx_unlock(&ct->ct_lock);
776184588Sdfr	wakeup(ct);
777184588Sdfr}
778184588Sdfr
779184588Sdfrstatic void
780184588Sdfrclnt_vc_destroy(CLIENT *cl)
781184588Sdfr{
782184588Sdfr	struct ct_data *ct = (struct ct_data *) cl->cl_private;
783184588Sdfr	struct socket *so = NULL;
784184588Sdfr
785184588Sdfr	clnt_vc_close(cl);
786184588Sdfr
787184588Sdfr	mtx_lock(&ct->ct_lock);
788184588Sdfr
789184588Sdfr	if (ct->ct_socket) {
790177633Sdfr		if (ct->ct_closeit) {
791177633Sdfr			so = ct->ct_socket;
792177633Sdfr		}
793177633Sdfr	}
794177633Sdfr
795177633Sdfr	mtx_unlock(&ct->ct_lock);
796177633Sdfr
797177633Sdfr	mtx_destroy(&ct->ct_lock);
798177633Sdfr	if (so) {
799177633Sdfr		soshutdown(so, SHUT_WR);
800177633Sdfr		soclose(so);
801177633Sdfr	}
802177633Sdfr	mem_free(ct, sizeof(struct ct_data));
803177633Sdfr	mem_free(cl, sizeof(CLIENT));
804177633Sdfr}
805177633Sdfr
806177633Sdfr/*
807177633Sdfr * Make sure that the time is not garbage.   -1 value is disallowed.
808177633Sdfr * Note this is different from time_not_ok in clnt_dg.c
809177633Sdfr */
810177633Sdfrstatic bool_t
811177633Sdfrtime_not_ok(struct timeval *t)
812177633Sdfr{
813177633Sdfr	return (t->tv_sec <= -1 || t->tv_sec > 100000000 ||
814177633Sdfr		t->tv_usec <= -1 || t->tv_usec > 1000000);
815177633Sdfr}
816177633Sdfr
817177633Sdfrvoid
818177633Sdfrclnt_vc_soupcall(struct socket *so, void *arg, int waitflag)
819177633Sdfr{
820177633Sdfr	struct ct_data *ct = (struct ct_data *) arg;
821177633Sdfr	struct uio uio;
822177633Sdfr	struct mbuf *m;
823177633Sdfr	struct ct_request *cr;
824177633Sdfr	int error, rcvflag, foundreq;
825177633Sdfr	uint32_t xid, header;
826184588Sdfr	bool_t do_read;
827177633Sdfr
828177633Sdfr	uio.uio_td = curthread;
829177633Sdfr	do {
830177633Sdfr		/*
831177633Sdfr		 * If ct_record_resid is zero, we are waiting for a
832177633Sdfr		 * record mark.
833177633Sdfr		 */
834177633Sdfr		if (ct->ct_record_resid == 0) {
835177633Sdfr
836177633Sdfr			/*
837177633Sdfr			 * Make sure there is either a whole record
838177633Sdfr			 * mark in the buffer or there is some other
839177633Sdfr			 * error condition
840177633Sdfr			 */
841177633Sdfr			do_read = FALSE;
842177633Sdfr			SOCKBUF_LOCK(&so->so_rcv);
843177633Sdfr			if (so->so_rcv.sb_cc >= sizeof(uint32_t)
844177633Sdfr			    || (so->so_rcv.sb_state & SBS_CANTRCVMORE)
845177633Sdfr			    || so->so_error)
846177633Sdfr				do_read = TRUE;
847177633Sdfr			SOCKBUF_UNLOCK(&so->so_rcv);
848177633Sdfr
849177633Sdfr			if (!do_read)
850177633Sdfr				return;
851177633Sdfr
852177633Sdfr			uio.uio_resid = sizeof(uint32_t);
853177633Sdfr			m = NULL;
854177633Sdfr			rcvflag = MSG_DONTWAIT | MSG_SOCALLBCK;
855177633Sdfr			error = soreceive(so, NULL, &uio, &m, NULL, &rcvflag);
856177633Sdfr
857177633Sdfr			if (error == EWOULDBLOCK)
858177633Sdfr				break;
859177633Sdfr
860177633Sdfr			/*
861177633Sdfr			 * If there was an error, wake up all pending
862177633Sdfr			 * requests.
863177633Sdfr			 */
864177633Sdfr			if (error || uio.uio_resid > 0) {
865177633Sdfr			wakeup_all:
866177633Sdfr				mtx_lock(&ct->ct_lock);
867177633Sdfr				if (!error) {
868177633Sdfr					/*
869177633Sdfr					 * We must have got EOF trying
870177633Sdfr					 * to read from the stream.
871177633Sdfr					 */
872177633Sdfr					error = ECONNRESET;
873177633Sdfr				}
874177633Sdfr				ct->ct_error.re_status = RPC_CANTRECV;
875177633Sdfr				ct->ct_error.re_errno = error;
876177633Sdfr				TAILQ_FOREACH(cr, &ct->ct_pending, cr_link) {
877177633Sdfr					cr->cr_error = error;
878177633Sdfr					wakeup(cr);
879177633Sdfr				}
880177633Sdfr				mtx_unlock(&ct->ct_lock);
881177633Sdfr				break;
882177633Sdfr			}
883184588Sdfr			bcopy(mtod(m, uint32_t *), &header, sizeof(uint32_t));
884177633Sdfr			header = ntohl(header);
885177633Sdfr			ct->ct_record = NULL;
886177633Sdfr			ct->ct_record_resid = header & 0x7fffffff;
887177633Sdfr			ct->ct_record_eor = ((header & 0x80000000) != 0);
888177633Sdfr			m_freem(m);
889177633Sdfr		} else {
890177633Sdfr			/*
891184588Sdfr			 * Wait until the socket has the whole record
892184588Sdfr			 * buffered.
893184588Sdfr			 */
894184588Sdfr			do_read = FALSE;
895184588Sdfr			SOCKBUF_LOCK(&so->so_rcv);
896184588Sdfr			if (so->so_rcv.sb_cc >= ct->ct_record_resid
897184588Sdfr			    || (so->so_rcv.sb_state & SBS_CANTRCVMORE)
898184588Sdfr			    || so->so_error)
899184588Sdfr				do_read = TRUE;
900184588Sdfr			SOCKBUF_UNLOCK(&so->so_rcv);
901184588Sdfr
902184588Sdfr			if (!do_read)
903184588Sdfr				return;
904184588Sdfr
905184588Sdfr			/*
906177633Sdfr			 * We have the record mark. Read as much as
907177633Sdfr			 * the socket has buffered up to the end of
908177633Sdfr			 * this record.
909177633Sdfr			 */
910177633Sdfr			uio.uio_resid = ct->ct_record_resid;
911177633Sdfr			m = NULL;
912177633Sdfr			rcvflag = MSG_DONTWAIT | MSG_SOCALLBCK;
913177633Sdfr			error = soreceive(so, NULL, &uio, &m, NULL, &rcvflag);
914177633Sdfr
915177633Sdfr			if (error == EWOULDBLOCK)
916177633Sdfr				break;
917177633Sdfr
918177633Sdfr			if (error || uio.uio_resid == ct->ct_record_resid)
919177633Sdfr				goto wakeup_all;
920177633Sdfr
921177633Sdfr			/*
922177633Sdfr			 * If we have part of the record already,
923177633Sdfr			 * chain this bit onto the end.
924177633Sdfr			 */
925177633Sdfr			if (ct->ct_record)
926177633Sdfr				m_last(ct->ct_record)->m_next = m;
927177633Sdfr			else
928177633Sdfr				ct->ct_record = m;
929177633Sdfr
930177633Sdfr			ct->ct_record_resid = uio.uio_resid;
931177633Sdfr
932177633Sdfr			/*
933177633Sdfr			 * If we have the entire record, see if we can
934177633Sdfr			 * match it to a request.
935177633Sdfr			 */
936177633Sdfr			if (ct->ct_record_resid == 0
937177633Sdfr			    && ct->ct_record_eor) {
938177633Sdfr				/*
939177633Sdfr				 * The XID is in the first uint32_t of
940177633Sdfr				 * the reply.
941177633Sdfr				 */
942184588Sdfr				if (ct->ct_record->m_len < sizeof(xid))
943184588Sdfr					ct->ct_record =
944184588Sdfr						m_pullup(ct->ct_record,
945184588Sdfr						    sizeof(xid));
946177633Sdfr				if (!ct->ct_record)
947177633Sdfr					break;
948184588Sdfr				bcopy(mtod(ct->ct_record, uint32_t *),
949184588Sdfr				    &xid, sizeof(uint32_t));
950177633Sdfr				xid = ntohl(xid);
951177633Sdfr
952177633Sdfr				mtx_lock(&ct->ct_lock);
953177633Sdfr				foundreq = 0;
954177633Sdfr				TAILQ_FOREACH(cr, &ct->ct_pending, cr_link) {
955177633Sdfr					if (cr->cr_xid == xid) {
956177633Sdfr						/*
957177633Sdfr						 * This one
958180025Sdfr						 * matches. We leave
959180025Sdfr						 * the reply mbuf in
960177633Sdfr						 * cr->cr_mrep. Set
961177633Sdfr						 * the XID to zero so
962180025Sdfr						 * that we will ignore
963180025Sdfr						 * any duplicaed
964180025Sdfr						 * replies.
965177633Sdfr						 */
966177633Sdfr						cr->cr_xid = 0;
967177633Sdfr						cr->cr_mrep = ct->ct_record;
968177633Sdfr						cr->cr_error = 0;
969177633Sdfr						foundreq = 1;
970177633Sdfr						wakeup(cr);
971177633Sdfr						break;
972177633Sdfr					}
973177633Sdfr				}
974177633Sdfr				mtx_unlock(&ct->ct_lock);
975177633Sdfr
976177633Sdfr				if (!foundreq)
977177633Sdfr					m_freem(ct->ct_record);
978177633Sdfr				ct->ct_record = NULL;
979177633Sdfr			}
980177633Sdfr		}
981177633Sdfr	} while (m);
982177633Sdfr}
983