#include <config.h>

#include <stdlib.h>

#include <unistd.h>

#include <string.h>

#include <limits.h>

#include <dns/byaddr.h>

#ifdef DIG_SIGCHASE

#include <dns/dnssec.h>

#include <dns/ds.h>

#include <dns/nsec.h>

#include <isc/file.h>

#include <isc/random.h>

#include <ctype.h>

#endif

#include <dns/fixedname.h>

#include <dns/message.h>

#include <dns/name.h>

#include <dns/rdata.h>

#include <dns/rdataclass.h>

#include <dns/rdatalist.h>

#include <dns/rdataset.h>

#include <dns/rdatastruct.h>

#include <dns/rdatatype.h>

#include <dns/result.h>

#include <dns/tsig.h>

#include <dst/dst.h>

#include <isc/app.h>

#include <isc/base64.h>

#include <isc/entropy.h>

#include <isc/lang.h>

#include <isc/netaddr.h>

#ifdef DIG_SIGCHASE

#include <isc/netdb.h>

#endif

#include <isc/print.h>

#include <isc/random.h>

#include <isc/result.h>

#include <isc/string.h>

#include <isc/task.h>

#include <isc/timer.h>

#include <isc/types.h>

#include <isc/util.h>

#include <lwres/lwres.h>

#include <lwres/net.h>

#include <bind9/getaddresses.h>

#include <dig/dig.h>

#if ! defined(NS_INADDRSZ)

#define NS_INADDRSZ 4

#endif

#if ! defined(NS_IN6ADDRSZ)

#define NS_IN6ADDRSZ 16

#endif

static lwres_context_t *lwctx = NULL;

static lwres_conf_t *lwconf;

ISC_LIST(dig_lookup_t) lookup_list;

dig_serverlist_t server_list;

ISC_LIST(dig_searchlist_t) search_list;

have_ipv4 = ISC_FALSE,

have_ipv6 = ISC_FALSE,

specified_source = ISC_FALSE,

free_now = ISC_FALSE,

cancel_now = ISC_FALSE,

usesearch = ISC_FALSE,

qr = ISC_FALSE,

is_dst_up = ISC_FALSE;

in_port_t port = 53;

unsigned int timeout = 0;

isc_mem_t *mctx = NULL;

isc_taskmgr_t *taskmgr = NULL;

isc_task_t *global_task = NULL;

isc_timermgr_t *timermgr = NULL;

isc_socketmgr_t *socketmgr = NULL;

isc_sockaddr_t bind_address;

isc_sockaddr_t bind_any;

int sendcount = 0;

int recvcount = 0;

int sockcount = 0;

int ndots = -1;

int tries = 3;

int lookup_counter = 0;

int exitcode = 0;

int fatalexit = 0;

char keynametext[MXNAME];

char keyfile[MXNAME] = "";

char keysecret[MXNAME] = "";

isc_buffer_t *namebuf = NULL;

dns_tsigkey_t *key = NULL;

isc_boolean_t validated = ISC_TRUE;

isc_entropy_t *entp = NULL;

isc_mempool_t *commctx = NULL;

isc_boolean_t debugging = ISC_FALSE;

isc_boolean_t memdebugging = ISC_FALSE;

char *progname = NULL;

isc_mutex_t lookup_lock;

dig_lookup_t *current_lookup = NULL;

#ifdef DIG_SIGCHASE

isc_result_t get_trusted_key(isc_mem_t *mctx);

dns_rdataset_t * sigchase_scanname(dns_rdatatype_t type,

dns_rdatatype_t covers,

isc_boolean_t *lookedup,

dns_name_t *rdata_name);

dns_rdataset_t * chase_scanname_section(dns_message_t *msg,

dns_name_t *name,

dns_rdatatype_t type,

dns_rdatatype_t covers,

int section);

isc_result_t advanced_rrsearch(dns_rdataset_t **rdataset,

dns_name_t *name,

dns_rdatatype_t type,

dns_rdatatype_t covers,

isc_boolean_t *lookedup);

isc_result_t sigchase_verify_sig_key(dns_name_t *name,

dns_rdataset_t *rdataset,

dst_key_t* dnsseckey,

dns_rdataset_t *sigrdataset,

isc_mem_t *mctx);

isc_result_t sigchase_verify_sig(dns_name_t *name,

dns_rdataset_t *rdataset,

dns_rdataset_t *keyrdataset,

dns_rdataset_t *sigrdataset,

isc_mem_t *mctx);

isc_result_t sigchase_verify_ds(dns_name_t *name,

dns_rdataset_t *keyrdataset,

dns_rdataset_t *dsrdataset,

isc_mem_t *mctx);

void sigchase(dns_message_t *msg);

void print_rdata(dns_rdata_t *rdata, isc_mem_t *mctx);

void print_rdataset(dns_name_t *name,

dns_rdataset_t *rdataset, isc_mem_t *mctx);

void dup_name(dns_name_t *source, dns_name_t* target,

isc_mem_t *mctx);

void dump_database(void);

void dump_database_section(dns_message_t *msg, int section);

dns_rdataset_t * search_type(dns_name_t *name, dns_rdatatype_t type,

dns_rdatatype_t covers);

isc_result_t contains_trusted_key(dns_name_t *name,

dns_rdataset_t *rdataset,

dns_rdataset_t *sigrdataset,

isc_mem_t *mctx);

void print_type(dns_rdatatype_t type);

isc_result_t prove_nx_domain(dns_message_t * msg,

dns_name_t * name,

dns_name_t * rdata_name,

dns_rdataset_t ** rdataset,

dns_rdataset_t ** sigrdataset);

isc_result_t prove_nx_type(dns_message_t * msg, dns_name_t *name,

dns_rdataset_t *nsec,

dns_rdataclass_t class,

dns_rdatatype_t type,

dns_name_t * rdata_name,

dns_rdataset_t ** rdataset,

dns_rdataset_t ** sigrdataset);

isc_result_t prove_nx(dns_message_t * msg, dns_name_t * name,

dns_rdataclass_t class,

dns_rdatatype_t type,

dns_name_t * rdata_name,

dns_rdataset_t ** rdataset,

dns_rdataset_t ** sigrdataset);

static void nameFromString(const char *str, dns_name_t *p_ret);

int inf_name(dns_name_t * name1, dns_name_t * name2);

isc_result_t opentmpkey(isc_mem_t *mctx, const char *file,

char **tempp, FILE **fp);

isc_result_t removetmpkey(isc_mem_t *mctx, const char *file);

void clean_trustedkey(void );

void insert_trustedkey(dst_key_t * key);

#if DIG_SIGCHASE_BU

isc_result_t getneededrr(dns_message_t *msg);

void sigchase_bottom_up(dns_message_t *msg);

void sigchase_bu(dns_message_t *msg);

#endif

#if DIG_SIGCHASE_TD

isc_result_t initialization(dns_name_t *name);

isc_result_t prepare_lookup(dns_name_t *name);

isc_result_t grandfather_pb_test(dns_name_t * zone_name,

dns_rdataset_t *sigrdataset);

isc_result_t child_of_zone(dns_name_t *name,

dns_name_t *zone_name,

dns_name_t *child_name);

void sigchase_td(dns_message_t *msg);

#endif

char trustedkey[MXNAME] = "";

dns_rdataset_t * chase_rdataset = NULL;

dns_rdataset_t * chase_sigrdataset = NULL;

dns_rdataset_t * chase_dsrdataset = NULL;

dns_rdataset_t * chase_sigdsrdataset = NULL;

dns_rdataset_t * chase_keyrdataset = NULL;

dns_rdataset_t * chase_sigkeyrdataset = NULL;

dns_rdataset_t * chase_nsrdataset = NULL;

dns_name_t chase_name; /* the query name */

#if DIG_SIGCHASE_TD

dns_name_t chase_current_name;

dns_name_t chase_authority_name;

#endif

#if DIG_SIGCHASE_BU

dns_name_t chase_signame;

#endif

isc_boolean_t chase_siglookedup = ISC_FALSE;

isc_boolean_t chase_keylookedup = ISC_FALSE;

isc_boolean_t chase_sigkeylookedup = ISC_FALSE;

isc_boolean_t chase_dslookedup = ISC_FALSE;

isc_boolean_t chase_sigdslookedup = ISC_FALSE;

#if DIG_SIGCHASE_TD

isc_boolean_t chase_nslookedup = ISC_FALSE;

isc_boolean_t chase_lookedup = ISC_FALSE;

isc_boolean_t delegation_follow = ISC_FALSE;

isc_boolean_t grandfather_pb = ISC_FALSE;

isc_boolean_t have_response = ISC_FALSE;

isc_boolean_t have_delegation_ns = ISC_FALSE;

dns_message_t * error_message = NULL;

#endif

isc_boolean_t dsvalidating = ISC_FALSE;

isc_boolean_t chase_name_dup = ISC_FALSE;

ISC_LIST(dig_message_t) chase_message_list;

ISC_LIST(dig_message_t) chase_message_list2;

#define MAX_TRUSTED_KEY 5

typedef struct struct_trusted_key_list {

dst_key_t * key[MAX_TRUSTED_KEY];

int nb_tk;

} struct_tk_list;

struct_tk_list tk_list = { {NULL, NULL, NULL, NULL, NULL}, 0};

#endif

#define DIG_MAX_ADDRESSES 20

#define LOCK_LOOKUP {\

debug("lock_lookup %s:%d", __FILE__, __LINE__);\

check_result(isc_mutex_lock((&lookup_lock)), "isc_mutex_lock");\

debug("success");\

}

#define UNLOCK_LOOKUP {\

debug("unlock_lookup %s:%d", __FILE__, __LINE__);\

check_result(isc_mutex_unlock((&lookup_lock)),\

"isc_mutex_unlock");\

}

static void

cancel_lookup(dig_lookup_t *lookup);

static void

recv_done(isc_task_t *task, isc_event_t *event);

static void

connect_timeout(isc_task_t *task, isc_event_t *event);

static void

launch_next_query(dig_query_t *query, isc_boolean_t include_question);

static void *

mem_alloc(void *arg, size_t size) {

return (isc_mem_get(arg, size));

}

static void

mem_free(void *arg, void *mem, size_t size) {

isc_mem_put(arg, mem, size);

}

char *

next_token(char **stringp, const char *delim) {

char *res;

do {

res = strsep(stringp, delim);

if (res == NULL)

break;

} while (*res == '\0');

return (res);

}

static int

count_dots(char *string) {

char *s;

int i = 0;

s = string;

while (*s != '\0') {

if (*s == '.')

i++;

s++;

}

return (i);

}

static void

hex_dump(isc_buffer_t *b) {

unsigned int len;

isc_region_t r;

isc_buffer_usedregion(b, &r);

printf("%d bytes\n", r.length);

for (len = 0; len < r.length; len++) {

printf("%02x ", r.base[len]);

if (len % 16 == 15)

printf("\n");

}

if (len % 16 != 0)

printf("\n");

}

static isc_result_t

append(const char *text, int len, char **p, char *end) {

if (len > end - *p)

return (ISC_R_NOSPACE);

memcpy(*p, text, len);

*p += len;

return (ISC_R_SUCCESS);

}

static isc_result_t

reverse_octets(const char *in, char **p, char *end) {

char *dot = strchr(in, '.');

int len;

if (dot != NULL) {

isc_result_t result;

result = reverse_octets(dot + 1, p, end);

if (result != ISC_R_SUCCESS)

return (result);

result = append(".", 1, p, end);

if (result != ISC_R_SUCCESS)

return (result);

len = dot - in;

} else {

len = strlen(in);

}

return (append(in, len, p, end));

}

get_reverse(char *reverse, size_t len, char *value, isc_boolean_t ip6_int,

isc_boolean_t strict)

{

int r;

isc_result_t result;

isc_netaddr_t addr;

addr.family = AF_INET6;

r = inet_pton(AF_INET6, value, &addr.type.in6);

if (r > 0) {

/* This is a valid IPv6 address. */

dns_fixedname_t fname;

dns_name_t *name;

unsigned int options = 0;

if (ip6_int)

options |= DNS_BYADDROPT_IPV6INT;

dns_fixedname_init(&fname);

name = dns_fixedname_name(&fname);

result = dns_byaddr_createptrname2(&addr, options, name);

if (result != ISC_R_SUCCESS)

return (result);

dns_name_format(name, reverse, len);

return (ISC_R_SUCCESS);

} else {

/*

char *p = reverse;

char *end = reverse + len;

if (strict && inet_pton(AF_INET, value, &addr.type.in) != 1)

return (DNS_R_BADDOTTEDQUAD);

result = reverse_octets(value, &p, end);

if (result != ISC_R_SUCCESS)

return (result);

/* Append .in-addr.arpa. and a terminating NUL. */

result = append(".in-addr.arpa.", 15, &p, end);

if (result != ISC_R_SUCCESS)

return (result);

return (ISC_R_SUCCESS);

}

}

fatal(const char *format, ...) {

va_list args;

fprintf(stderr, "%s: ", progname);

va_start(args, format);

vfprintf(stderr, format, args);

va_end(args);

fprintf(stderr, "\n");

if (exitcode < 10)

exitcode = 10;

if (fatalexit != 0)

exitcode = fatalexit;

exit(exitcode);

}

debug(const char *format, ...) {

va_list args;

if (debugging) {

va_start(args, format);

vfprintf(stderr, format, args);

va_end(args);

fprintf(stderr, "\n");

}

}

check_result(isc_result_t result, const char *msg) {

if (result != ISC_R_SUCCESS) {

fatal("%s: %s", msg, isc_result_totext(result));

}

}

dig_server_t *

make_server(const char *servname, const char *userarg) {

dig_server_t *srv;

REQUIRE(servname != NULL);

debug("make_server(%s)", servname);

srv = isc_mem_allocate(mctx, sizeof(struct dig_server));

if (srv == NULL)

fatal("memory allocation failure in %s:%d",

__FILE__, __LINE__);

strncpy(srv->servername, servname, MXNAME);

strncpy(srv->userarg, userarg, MXNAME);

srv->servername[MXNAME-1] = 0;

srv->userarg[MXNAME-1] = 0;

ISC_LINK_INIT(srv, link);

return (srv);

}

static int

addr2af(int lwresaddrtype)

{

int af = 0;

switch (lwresaddrtype) {

case LWRES_ADDRTYPE_V4:

af = AF_INET;

break;

case LWRES_ADDRTYPE_V6:

af = AF_INET6;

break;

}

return (af);

}

static void

copy_server_list(lwres_conf_t *confdata, dig_serverlist_t *dest) {

dig_server_t *newsrv;

char tmp[sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255")];

int af;

int i;

debug("copy_server_list()");

for (i = 0; i < confdata->nsnext; i++) {

af = addr2af(confdata->nameservers[i].family);

lwres_net_ntop(af, confdata->nameservers[i].address,

tmp, sizeof(tmp));

newsrv = make_server(tmp, tmp);

ISC_LINK_INIT(newsrv, link);

ISC_LIST_ENQUEUE(*dest, newsrv, link);

}

}

flush_server_list(void) {

dig_server_t *s, *ps;

debug("flush_server_list()");

s = ISC_LIST_HEAD(server_list);

while (s != NULL) {

ps = s;

s = ISC_LIST_NEXT(s, link);

ISC_LIST_DEQUEUE(server_list, ps, link);

isc_mem_free(mctx, ps);

}

}

set_nameserver(char *opt) {

isc_result_t result;

isc_sockaddr_t sockaddrs[DIG_MAX_ADDRESSES];

isc_netaddr_t netaddr;

int count, i;

dig_server_t *srv;

char tmp[ISC_NETADDR_FORMATSIZE];

if (opt == NULL)

return;

result = bind9_getaddresses(opt, 0, sockaddrs,

DIG_MAX_ADDRESSES, &count);

if (result != ISC_R_SUCCESS)

fatal("couldn't get address for '%s': %s",

opt, isc_result_totext(result));

flush_server_list();

for (i = 0; i < count; i++) {

isc_netaddr_fromsockaddr(&netaddr, &sockaddrs[i]);

isc_netaddr_format(&netaddr, tmp, sizeof(tmp));

srv = make_server(tmp, opt);

if (srv == NULL)

fatal("memory allocation failure");

ISC_LIST_APPEND(server_list, srv, link);

}

}

static isc_result_t

add_nameserver(lwres_conf_t *confdata, const char *addr, int af) {

int i = confdata->nsnext;

if (confdata->nsnext >= LWRES_CONFMAXNAMESERVERS)

return (ISC_R_FAILURE);

switch (af) {

case AF_INET:

confdata->nameservers[i].family = LWRES_ADDRTYPE_V4;

confdata->nameservers[i].length = NS_INADDRSZ;

break;

case AF_INET6:

confdata->nameservers[i].family = LWRES_ADDRTYPE_V6;

confdata->nameservers[i].length = NS_IN6ADDRSZ;

break;

default:

return (ISC_R_FAILURE);

}

if (lwres_net_pton(af, addr, &confdata->nameservers[i].address) == 1) {

confdata->nsnext++;

return (ISC_R_SUCCESS);

}

return (ISC_R_FAILURE);

}

clone_server_list(dig_serverlist_t src, dig_serverlist_t *dest) {

dig_server_t *srv, *newsrv;

debug("clone_server_list()");

srv = ISC_LIST_HEAD(src);

while (srv != NULL) {

newsrv = make_server(srv->servername, srv->userarg);

ISC_LINK_INIT(newsrv, link);

ISC_LIST_ENQUEUE(*dest, newsrv, link);

srv = ISC_LIST_NEXT(srv, link);

}

}

dig_lookup_t *

make_empty_lookup(void) {

dig_lookup_t *looknew;

debug("make_empty_lookup()");

INSIST(!free_now);

looknew = isc_mem_allocate(mctx, sizeof(struct dig_lookup));

if (looknew == NULL)

fatal("memory allocation failure in %s:%d",

__FILE__, __LINE__);

looknew->pending = ISC_TRUE;

looknew->textname[0] = 0;

looknew->cmdline[0] = 0;

looknew->rdtype = dns_rdatatype_a;

looknew->qrdtype = dns_rdatatype_a;

looknew->rdclass = dns_rdataclass_in;

looknew->rdtypeset = ISC_FALSE;

looknew->rdclassset = ISC_FALSE;

looknew->sendspace = NULL;

looknew->sendmsg = NULL;

looknew->name = NULL;

looknew->oname = NULL;

looknew->timer = NULL;

looknew->xfr_q = NULL;

looknew->current_query = NULL;

looknew->doing_xfr = ISC_FALSE;

looknew->ixfr_serial = ISC_FALSE;

looknew->trace = ISC_FALSE;

looknew->trace_root = ISC_FALSE;

looknew->identify = ISC_FALSE;

looknew->identify_previous_line = ISC_FALSE;

looknew->ignore = ISC_FALSE;

looknew->servfail_stops = ISC_TRUE;

looknew->besteffort = ISC_TRUE;

looknew->dnssec = ISC_FALSE;

#ifdef DIG_SIGCHASE

looknew->sigchase = ISC_FALSE;

#if DIG_SIGCHASE_TD

looknew->do_topdown = ISC_FALSE;

looknew->trace_root_sigchase = ISC_FALSE;

looknew->rdtype_sigchaseset = ISC_FALSE;

looknew->rdtype_sigchase = dns_rdatatype_any;

looknew->qrdtype_sigchase = dns_rdatatype_any;

looknew->rdclass_sigchase = dns_rdataclass_in;

looknew->rdclass_sigchaseset = ISC_FALSE;

#endif

#endif

looknew->udpsize = 0;

looknew->recurse = ISC_TRUE;

looknew->aaonly = ISC_FALSE;

looknew->adflag = ISC_FALSE;

looknew->cdflag = ISC_FALSE;

looknew->ns_search_only = ISC_FALSE;

looknew->origin = NULL;

looknew->tsigctx = NULL;

looknew->querysig = NULL;

looknew->retries = tries;

looknew->nsfound = 0;

looknew->tcp_mode = ISC_FALSE;

looknew->ip6_int = ISC_FALSE;

looknew->comments = ISC_TRUE;

looknew->stats = ISC_TRUE;

looknew->section_question = ISC_TRUE;

looknew->section_answer = ISC_TRUE;

looknew->section_authority = ISC_TRUE;

looknew->section_additional = ISC_TRUE;

looknew->new_search = ISC_FALSE;

ISC_LINK_INIT(looknew, link);

ISC_LIST_INIT(looknew->q);

ISC_LIST_INIT(looknew->my_server_list);

return (looknew);

}

dig_lookup_t *

clone_lookup(dig_lookup_t *lookold, isc_boolean_t servers) {

dig_lookup_t *looknew;

debug("clone_lookup()");

INSIST(!free_now);

looknew = make_empty_lookup();

INSIST(looknew != NULL);

strncpy(looknew->textname, lookold->textname, MXNAME);

#if DIG_SIGCHASE_TD

strncpy(looknew->textnamesigchase, lookold->textnamesigchase, MXNAME);

#endif

strncpy(looknew->cmdline, lookold->cmdline, MXNAME);

looknew->textname[MXNAME-1] = 0;

looknew->rdtype = lookold->rdtype;

looknew->qrdtype = lookold->qrdtype;

looknew->rdclass = lookold->rdclass;

looknew->rdtypeset = lookold->rdtypeset;

looknew->rdclassset = lookold->rdclassset;

looknew->doing_xfr = lookold->doing_xfr;

looknew->ixfr_serial = lookold->ixfr_serial;

looknew->trace = lookold->trace;

looknew->trace_root = lookold->trace_root;

looknew->identify = lookold->identify;

looknew->identify_previous_line = lookold->identify_previous_line;

looknew->ignore = lookold->ignore;

looknew->servfail_stops = lookold->servfail_stops;

looknew->besteffort = lookold->besteffort;

looknew->dnssec = lookold->dnssec;

#ifdef DIG_SIGCHASE

looknew->sigchase = lookold->sigchase;

#if DIG_SIGCHASE_TD

looknew->do_topdown = lookold->do_topdown;

looknew->trace_root_sigchase = lookold->trace_root_sigchase;

looknew->rdtype_sigchaseset = lookold->rdtype_sigchaseset;

looknew->rdtype_sigchase = lookold->rdtype_sigchase;

looknew->qrdtype_sigchase = lookold->qrdtype_sigchase;

looknew->rdclass_sigchase = lookold->rdclass_sigchase;

looknew->rdclass_sigchaseset = lookold->rdclass_sigchaseset;

#endif

#endif

looknew->udpsize = lookold->udpsize;

looknew->recurse = lookold->recurse;

looknew->aaonly = lookold->aaonly;

looknew->adflag = lookold->adflag;

looknew->cdflag = lookold->cdflag;

looknew->ns_search_only = lookold->ns_search_only;

looknew->tcp_mode = lookold->tcp_mode;

looknew->comments = lookold->comments;

looknew->stats = lookold->stats;

looknew->section_question = lookold->section_question;

looknew->section_answer = lookold->section_answer;

looknew->section_authority = lookold->section_authority;

looknew->section_additional = lookold->section_additional;

looknew->retries = lookold->retries;

looknew->tsigctx = NULL;

if (servers)

clone_server_list(lookold->my_server_list,

&looknew->my_server_list);

return (looknew);

}

dig_lookup_t *

requeue_lookup(dig_lookup_t *lookold, isc_boolean_t servers) {

dig_lookup_t *looknew;

debug("requeue_lookup()");

lookup_counter++;

if (lookup_counter > LOOKUP_LIMIT)

fatal("too many lookups");

looknew = clone_lookup(lookold, servers);

INSIST(looknew != NULL);

debug("before insertion, init@%p -> %p, new@%p -> %p",

lookold, lookold->link.next, looknew, looknew->link.next);

ISC_LIST_PREPEND(lookup_list, looknew, link);

debug("after insertion, init -> %p, new = %p, new -> %p",

lookold, looknew, looknew->link.next);

return (looknew);

}

static void

setup_text_key(void) {

isc_result_t result;

dns_name_t keyname;

isc_buffer_t secretbuf;

int secretsize;

unsigned char *secretstore;

debug("setup_text_key()");

result = isc_buffer_allocate(mctx, &namebuf, MXNAME);

check_result(result, "isc_buffer_allocate");

dns_name_init(&keyname, NULL);

check_result(result, "dns_name_init");

isc_buffer_putstr(namebuf, keynametext);

secretsize = strlen(keysecret) * 3 / 4;

secretstore = isc_mem_allocate(mctx, secretsize);

if (secretstore == NULL)

fatal("memory allocation failure in %s:%d",

__FILE__, __LINE__);

isc_buffer_init(&secretbuf, secretstore, secretsize);

result = isc_base64_decodestring(keysecret, &secretbuf);

if (result != ISC_R_SUCCESS)

goto failure;

secretsize = isc_buffer_usedlength(&secretbuf);

result = dns_name_fromtext(&keyname, namebuf,

dns_rootname, ISC_FALSE,

namebuf);

if (result != ISC_R_SUCCESS)

goto failure;

result = dns_tsigkey_create(&keyname, dns_tsig_hmacmd5_name,

secretstore, secretsize,

ISC_FALSE, NULL, 0, 0, mctx,

NULL, &key);

failure:

if (result != ISC_R_SUCCESS)

printf(";; Couldn't create key %s: %s\n",

keynametext, isc_result_totext(result));

isc_mem_free(mctx, secretstore);

dns_name_invalidate(&keyname);

isc_buffer_free(&namebuf);

}

static void

setup_file_key(void) {

isc_result_t result;

dst_key_t *dstkey = NULL;

debug("setup_file_key()");

result = dst_key_fromnamedfile(keyfile, DST_TYPE_PRIVATE | DST_TYPE_KEY,

mctx, &dstkey);

if (result != ISC_R_SUCCESS) {

fprintf(stderr, "Couldn't read key from %s: %s\n",

keyfile, isc_result_totext(result));

goto failure;

}

result = dns_tsigkey_createfromkey(dst_key_name(dstkey),

dns_tsig_hmacmd5_name,

dstkey, ISC_FALSE, NULL, 0, 0,

mctx, NULL, &key);

if (result != ISC_R_SUCCESS) {

printf(";; Couldn't create key %s: %s\n",

keynametext, isc_result_totext(result));

goto failure;

}

dstkey = NULL;

failure:

if (dstkey != NULL)

dst_key_free(&dstkey);

}

static dig_searchlist_t *

make_searchlist_entry(char *domain) {

dig_searchlist_t *search;

search = isc_mem_allocate(mctx, sizeof(*search));

if (search == NULL)

fatal("memory allocation failure in %s:%d",

__FILE__, __LINE__);

strncpy(search->origin, domain, MXNAME);

search->origin[MXNAME-1] = 0;

ISC_LINK_INIT(search, link);

return (search);

}

static void

create_search_list(lwres_conf_t *confdata) {

int i;

dig_searchlist_t *search;

debug("create_search_list()");

ISC_LIST_INIT(search_list);

for (i = 0; i < confdata->searchnxt; i++) {

search = make_searchlist_entry(confdata->search[i]);

ISC_LIST_APPEND(search_list, search, link);

}

}

setup_system(void) {

dig_searchlist_t *domain = NULL;

lwres_result_t lwresult;

debug("setup_system()");

lwresult = lwres_context_create(&lwctx, mctx, mem_alloc, mem_free, 1);

if (lwresult != LWRES_R_SUCCESS)

fatal("lwres_context_create failed");

(void)lwres_conf_parse(lwctx, RESOLV_CONF);

lwconf = lwres_conf_get(lwctx);

/* Make the search list */

if (lwconf->searchnxt > 0)

create_search_list(lwconf);

else {

/* No search list. Use the domain name if any */

if (lwconf->domainname != NULL) {

domain = make_searchlist_entry(lwconf->domainname);

ISC_LIST_INITANDAPPEND(search_list, domain, link);

domain = NULL;

}

}

ndots = lwconf->ndots;

debug("ndots is %d.", ndots);

/* If we don't find a nameserver fall back to localhost */

if (lwconf->nsnext == 0) {

if (have_ipv4) {

lwresult = add_nameserver(lwconf, "127.0.0.1", AF_INET);

if (lwresult != ISC_R_SUCCESS)

fatal("add_nameserver failed");

}

if (have_ipv6) {

lwresult = add_nameserver(lwconf, "::1", AF_INET6);

if (lwresult != ISC_R_SUCCESS)

fatal("add_nameserver failed");

}

}

if (ISC_LIST_EMPTY(server_list))

copy_server_list(lwconf, &server_list);

if (keyfile[0] != 0)

setup_file_key();

else if (keysecret[0] != 0)

setup_text_key();

#ifdef DIG_SIGCHASE

/* Setup the list of messages for +sigchase */

ISC_LIST_INIT(chase_message_list);

ISC_LIST_INIT(chase_message_list2);

dns_name_init(&chase_name, NULL);

#if DIG_SIGCHASE_TD

dns_name_init(&chase_current_name, NULL);

dns_name_init(&chase_authority_name, NULL);

#endif

#if DIG_SIGCHASE_BU

dns_name_init(&chase_signame, NULL);

#endif

#endif

}

static void

clear_searchlist(void) {

dig_searchlist_t *search;

while ((search = ISC_LIST_HEAD(search_list)) != NULL) {

ISC_LIST_UNLINK(search_list, search, link);

isc_mem_free(mctx, search);

}

}

set_search_domain(char *domain) {

dig_searchlist_t *search;

clear_searchlist();

search = make_searchlist_entry(domain);

ISC_LIST_APPEND(search_list, search, link);

}

setup_libs(void) {

isc_result_t result;

debug("setup_libs()");

result = isc_net_probeipv4();

if (result == ISC_R_SUCCESS)

have_ipv4 = ISC_TRUE;

result = isc_net_probeipv6();

if (result == ISC_R_SUCCESS)

have_ipv6 = ISC_TRUE;

if (!have_ipv6 && !have_ipv4)

fatal("can't find either v4 or v6 networking");

result = isc_mem_create(0, 0, &mctx);

check_result(result, "isc_mem_create");

result = isc_taskmgr_create(mctx, 1, 0, &taskmgr);

check_result(result, "isc_taskmgr_create");

result = isc_task_create(taskmgr, 0, &global_task);

check_result(result, "isc_task_create");

result = isc_timermgr_create(mctx, &timermgr);

check_result(result, "isc_timermgr_create");

result = isc_socketmgr_create(mctx, &socketmgr);

check_result(result, "isc_socketmgr_create");

result = isc_entropy_create(mctx, &entp);

check_result(result, "isc_entropy_create");

result = dst_lib_init(mctx, entp, 0);

check_result(result, "dst_lib_init");

is_dst_up = ISC_TRUE;

result = isc_mempool_create(mctx, COMMSIZE, &commctx);

check_result(result, "isc_mempool_create");

isc_mempool_setname(commctx, "COMMPOOL");

/*

isc_mempool_setfreemax(commctx, 6);

isc_mempool_setfillcount(commctx, 2);

result = isc_mutex_init(&lookup_lock);

check_result(result, "isc_mutex_init");

dns_result_register();

}

static void

add_opt(dns_message_t *msg, isc_uint16_t udpsize, isc_boolean_t dnssec) {

dns_rdataset_t *rdataset = NULL;

dns_rdatalist_t *rdatalist = NULL;

dns_rdata_t *rdata = NULL;

isc_result_t result;

debug("add_opt()");

result = dns_message_gettemprdataset(msg, &rdataset);

check_result(result, "dns_message_gettemprdataset");

dns_rdataset_init(rdataset);

result = dns_message_gettemprdatalist(msg, &rdatalist);

check_result(result, "dns_message_gettemprdatalist");

result = dns_message_gettemprdata(msg, &rdata);

check_result(result, "dns_message_gettemprdata");

debug("setting udp size of %d", udpsize);

rdatalist->type = dns_rdatatype_opt;

rdatalist->covers = 0;

rdatalist->rdclass = udpsize;

rdatalist->ttl = 0;

if (dnssec)

rdatalist->ttl = DNS_MESSAGEEXTFLAG_DO;

rdata->data = NULL;

rdata->length = 0;

ISC_LIST_INIT(rdatalist->rdata);

ISC_LIST_APPEND(rdatalist->rdata, rdata, link);

dns_rdatalist_tordataset(rdatalist, rdataset);

result = dns_message_setopt(msg, rdataset);

check_result(result, "dns_message_setopt");

}

static void

add_question(dns_message_t *message, dns_name_t *name,

dns_rdataclass_t rdclass, dns_rdatatype_t rdtype)

{

dns_rdataset_t *rdataset;

isc_result_t result;

debug("add_question()");

rdataset = NULL;

result = dns_message_gettemprdataset(message, &rdataset);

check_result(result, "dns_message_gettemprdataset()");

dns_rdataset_init(rdataset);

dns_rdataset_makequestion(rdataset, rdclass, rdtype);

ISC_LIST_APPEND(name->list, rdataset, link);

}

static void

check_if_done(void) {

debug("check_if_done()");

debug("list %s", ISC_LIST_EMPTY(lookup_list) ? "empty" : "full");

if (ISC_LIST_EMPTY(lookup_list) && current_lookup == NULL &&

sendcount == 0) {

INSIST(sockcount == 0);

INSIST(recvcount == 0);

debug("shutting down");

dighost_shutdown();

}

}

static void

clear_query(dig_query_t *query) {

dig_lookup_t *lookup;

REQUIRE(query != NULL);

debug("clear_query(%p)", query);

lookup = query->lookup;

if (lookup->current_query == query)

lookup->current_query = NULL;

ISC_LIST_UNLINK(lookup->q, query, link);

if (ISC_LINK_LINKED(&query->recvbuf, link))

ISC_LIST_DEQUEUE(query->recvlist, &query->recvbuf,

link);

if (ISC_LINK_LINKED(&query->lengthbuf, link))

ISC_LIST_DEQUEUE(query->lengthlist, &query->lengthbuf,

link);

INSIST(query->recvspace != NULL);

if (query->sock != NULL) {

isc_socket_detach(&query->sock);

sockcount--;

debug("sockcount=%d", sockcount);

}

isc_mempool_put(commctx, query->recvspace);

isc_buffer_invalidate(&query->recvbuf);

isc_buffer_invalidate(&query->lengthbuf);

isc_mem_free(mctx, query);

}

static isc_boolean_t

try_clear_lookup(dig_lookup_t *lookup) {

dig_server_t *s;

dig_query_t *q;

void *ptr;

REQUIRE(lookup != NULL);

debug("try_clear_lookup(%p)", lookup);

if (ISC_LIST_HEAD(lookup->q) != NULL) {

if (debugging) {

q = ISC_LIST_HEAD(lookup->q);

while (q != NULL) {

debug("query to %s still pending",

q->servname);

q = ISC_LIST_NEXT(q, link);

}

return (ISC_FALSE);

}

}

/*

debug("cleared");

s = ISC_LIST_HEAD(lookup->my_server_list);

while (s != NULL) {

debug("freeing server %p belonging to %p",

s, lookup);

ptr = s;

s = ISC_LIST_NEXT(s, link);

ISC_LIST_DEQUEUE(lookup->my_server_list,

(dig_server_t *)ptr, link);

isc_mem_free(mctx, ptr);

}

if (lookup->sendmsg != NULL)

dns_message_destroy(&lookup->sendmsg);

if (lookup->querysig != NULL) {

debug("freeing buffer %p", lookup->querysig);

isc_buffer_free(&lookup->querysig);

}

if (lookup->timer != NULL)

isc_timer_detach(&lookup->timer);

if (lookup->sendspace != NULL)

isc_mempool_put(commctx, lookup->sendspace);

if (lookup->tsigctx != NULL)

dst_context_destroy(&lookup->tsigctx);

isc_mem_free(mctx, lookup);

return (ISC_TRUE);

}

start_lookup(void) {

debug("start_lookup()");

if (cancel_now)

return;

/*

INSIST(current_lookup == NULL);

current_lookup = ISC_LIST_HEAD(lookup_list);

/*

if (current_lookup != NULL) {

ISC_LIST_DEQUEUE(lookup_list, current_lookup, link);

#if DIG_SIGCHASE_TD

if (current_lookup->do_topdown &&

!current_lookup->rdtype_sigchaseset) {

dst_key_t * trustedkey = NULL;

isc_buffer_t *b = NULL;

isc_region_t r;

isc_result_t result;

dns_name_t query_name;

dns_name_t * key_name;

int i;

result = get_trusted_key(mctx);

if (result != ISC_R_SUCCESS) {

printf("\n;; No trusted key, "

"+sigchase option is disabled\n");

current_lookup->sigchase = ISC_FALSE;

goto novalidation;

}

dns_name_init(&query_name, NULL);

nameFromString(current_lookup->textname, &query_name);

for (i = 0; i< tk_list.nb_tk; i++) {

key_name = dst_key_name(tk_list.key[i]);

if (dns_name_issubdomain(&query_name,

key_name) == ISC_TRUE)

trustedkey = tk_list.key[i];

/*

}

if (trustedkey == NULL) {

printf("\n;; The queried zone: ");

dns_name_print(&query_name, stdout);

printf(" isn't a subdomain of any Trusted Keys"

": +sigchase option is disable\n");

current_lookup->sigchase = ISC_FALSE;

dns_name_free(&query_name, mctx);

goto novalidation;

}

dns_name_free(&query_name, mctx);

current_lookup->rdtype_sigchase

= current_lookup->rdtype;

current_lookup->rdtype_sigchaseset

= current_lookup->rdtypeset;

current_lookup->rdtype = dns_rdatatype_ns;

current_lookup->qrdtype_sigchase

= current_lookup->qrdtype;

current_lookup->qrdtype = dns_rdatatype_ns;

current_lookup->rdclass_sigchase

= current_lookup->rdclass;

current_lookup->rdclass_sigchaseset

= current_lookup->rdclassset;

current_lookup->rdclass = dns_rdataclass_in;

strncpy(current_lookup->textnamesigchase,

current_lookup->textname, MXNAME);

current_lookup->trace_root_sigchase = ISC_TRUE;

result = isc_buffer_allocate(mctx, &b, BUFSIZE);

check_result(result, "isc_buffer_allocate");

result = dns_name_totext(dst_key_name(trustedkey),

ISC_FALSE, b);

check_result(result, "dns_name_totext");

isc_buffer_usedregion(b, &r);

r.base[r.length] = '\0';

strncpy(current_lookup->textname, (char*)r.base,

MXNAME);

isc_buffer_free(&b);

nameFromString(current_lookup->textnamesigchase,

&chase_name);

dns_name_init(&chase_authority_name, NULL);

}

novalidation:

#endif

setup_lookup(current_lookup);

do_lookup(current_lookup);

} else {

check_if_done();

}

}

static void

check_next_lookup(dig_lookup_t *lookup) {

INSIST(!free_now);

debug("check_next_lookup(%p)", lookup);

if (ISC_LIST_HEAD(lookup->q) != NULL) {

debug("still have a worker");

return;

}

if (try_clear_lookup(lookup)) {

current_lookup = NULL;

start_lookup();

}

}

static int

followup_lookup(dns_message_t *msg, dig_query_t *query, dns_section_t section)

{

dig_lookup_t *lookup = NULL;

dig_server_t *srv = NULL;

dns_rdataset_t *rdataset = NULL;

dns_rdata_t rdata = DNS_RDATA_INIT;

dns_name_t *name = NULL;

isc_result_t result;

isc_boolean_t success = ISC_FALSE;

int numLookups = 0;

INSIST(!free_now);

debug("following up %s", query->lookup->textname);

for (result = dns_message_firstname(msg, section);

result == ISC_R_SUCCESS;

result = dns_message_nextname(msg, section)) {

name = NULL;

dns_message_currentname(msg, section, &name);

if (section == DNS_SECTION_AUTHORITY) {

rdataset = NULL;

result = dns_message_findtype(name, dns_rdatatype_soa,

0, &rdataset);

if (result == ISC_R_SUCCESS)

return (0);

}

rdataset = NULL;

result = dns_message_findtype(name, dns_rdatatype_ns, 0,

&rdataset);

if (result != ISC_R_SUCCESS)

continue;

debug("found NS set");

for (result = dns_rdataset_first(rdataset);

result == ISC_R_SUCCESS;

result = dns_rdataset_next(rdataset)) {

char namestr[DNS_NAME_FORMATSIZE];

dns_rdata_ns_t ns;

if (query->lookup->trace_root &&

query->lookup->nsfound >= MXSERV)

break;

dns_rdataset_current(rdataset, &rdata);

query->lookup->nsfound++;

(void)dns_rdata_tostruct(&rdata, &ns, NULL);

dns_name_format(&ns.name, namestr, sizeof(namestr));

dns_rdata_freestruct(&ns);

/* Initialize lookup if we've not yet */

debug("found NS %d %s", numLookups, namestr);

numLookups++;

if (!success) {

success = ISC_TRUE;

lookup_counter++;

lookup = requeue_lookup(query->lookup,

ISC_FALSE);

cancel_lookup(query->lookup);

lookup->doing_xfr = ISC_FALSE;

if (!lookup->trace_root &&

section == DNS_SECTION_ANSWER)

lookup->trace = ISC_FALSE;

else

lookup->trace = query->lookup->trace;

lookup->ns_search_only =

query->lookup->ns_search_only;

lookup->trace_root = ISC_FALSE;

}

srv = make_server(namestr, namestr);

debug("adding server %s", srv->servername);

ISC_LIST_APPEND(lookup->my_server_list, srv, link);

dns_rdata_reset(&rdata);

}

}

if (lookup == NULL &&

section == DNS_SECTION_ANSWER &&

(query->lookup->trace || query->lookup->ns_search_only))

return (followup_lookup(msg, query, DNS_SECTION_AUTHORITY));

return numLookups;

}

static isc_boolean_t

next_origin(dns_message_t *msg, dig_query_t *query) {

dig_lookup_t *lookup;

UNUSED(msg);

INSIST(!free_now);

debug("next_origin()");

debug("following up %s", query->lookup->textname);

if (!usesearch)

/*

return (ISC_FALSE);

if (query->lookup->origin == NULL)

/*

return (ISC_FALSE);

lookup = requeue_lookup(query->lookup, ISC_TRUE);

lookup->origin = ISC_LIST_NEXT(query->lookup->origin, link);

cancel_lookup(query->lookup);

return (ISC_TRUE);

}

static void

insert_soa(dig_lookup_t *lookup) {

isc_result_t result;

dns_rdata_soa_t soa;

dns_rdata_t *rdata = NULL;

dns_rdatalist_t *rdatalist = NULL;

dns_rdataset_t *rdataset = NULL;

dns_name_t *soaname = NULL;

debug("insert_soa()");

soa.mctx = mctx;

soa.serial = lookup->ixfr_serial;

soa.refresh = 0;

soa.retry = 0;

soa.expire = 0;

soa.minimum = 0;

soa.common.rdclass = lookup->rdclass;

soa.common.rdtype = dns_rdatatype_soa;

dns_name_init(&soa.origin, NULL);

dns_name_init(&soa.contact, NULL);

dns_name_clone(dns_rootname, &soa.origin);

dns_name_clone(dns_rootname, &soa.contact);

isc_buffer_init(&lookup->rdatabuf, lookup->rdatastore,

sizeof(lookup->rdatastore));

result = dns_message_gettemprdata(lookup->sendmsg, &rdata);

check_result(result, "dns_message_gettemprdata");

result = dns_rdata_fromstruct(rdata, lookup->rdclass,

dns_rdatatype_soa, &soa,

&lookup->rdatabuf);

check_result(result, "isc_rdata_fromstruct");

result = dns_message_gettemprdatalist(lookup->sendmsg, &rdatalist);

check_result(result, "dns_message_gettemprdatalist");

result = dns_message_gettemprdataset(lookup->sendmsg, &rdataset);

check_result(result, "dns_message_gettemprdataset");

dns_rdatalist_init(rdatalist);

rdatalist->type = dns_rdatatype_soa;

rdatalist->rdclass = lookup->rdclass;

rdatalist->covers = 0;

rdatalist->ttl = 0;

ISC_LIST_INIT(rdatalist->rdata);

ISC_LIST_APPEND(rdatalist->rdata, rdata, link);

dns_rdataset_init(rdataset);

dns_rdatalist_tordataset(rdatalist, rdataset);

result = dns_message_gettempname(lookup->sendmsg, &soaname);

check_result(result, "dns_message_gettempname");

dns_name_init(soaname, NULL);

dns_name_clone(lookup->name, soaname);

ISC_LIST_INIT(soaname->list);

ISC_LIST_APPEND(soaname->list, rdataset, link);

dns_message_addname(lookup->sendmsg, soaname, DNS_SECTION_AUTHORITY);

}

setup_lookup(dig_lookup_t *lookup) {

isc_result_t result;

isc_uint32_t id;

int len;

dig_server_t *serv;

dig_query_t *query;

isc_buffer_t b;

dns_compress_t cctx;

char store[MXNAME];

REQUIRE(lookup != NULL);

INSIST(!free_now);

debug("setup_lookup(%p)", lookup);

result = dns_message_create(mctx, DNS_MESSAGE_INTENTRENDER,

&lookup->sendmsg);

check_result(result, "dns_message_create");

if (lookup->new_search) {

debug("resetting lookup counter.");

lookup_counter = 0;

}

if (ISC_LIST_EMPTY(lookup->my_server_list)) {

debug("cloning server list");

clone_server_list(server_list, &lookup->my_server_list);

}

result = dns_message_gettempname(lookup->sendmsg, &lookup->name);

check_result(result, "dns_message_gettempname");

dns_name_init(lookup->name, NULL);

isc_buffer_init(&lookup->namebuf, lookup->namespace,

sizeof(lookup->namespace));

isc_buffer_init(&lookup->onamebuf, lookup->onamespace,

sizeof(lookup->onamespace));

/*

/* XXX New search here? */

if ((count_dots(lookup->textname) >= ndots) || !usesearch)

lookup->origin = NULL; /* Force abs lookup */

else if (lookup->origin == NULL && lookup->new_search && usesearch) {

lookup->origin = ISC_LIST_HEAD(search_list);

}

if (lookup->origin != NULL) {

debug("trying origin %s", lookup->origin->origin);

result = dns_message_gettempname(lookup->sendmsg,

&lookup->oname);

check_result(result, "dns_message_gettempname");

dns_name_init(lookup->oname, NULL);

/* XXX Helper funct to conv char* to name? */

len = strlen(lookup->origin->origin);

isc_buffer_init(&b, lookup->origin->origin, len);

isc_buffer_add(&b, len);

result = dns_name_fromtext(lookup->oname, &b, dns_rootname,

ISC_FALSE, &lookup->onamebuf);

if (result != ISC_R_SUCCESS) {

dns_message_puttempname(lookup->sendmsg,

&lookup->name);

dns_message_puttempname(lookup->sendmsg,

&lookup->oname);

fatal("'%s' is not in legal name syntax (%s)",

lookup->origin->origin,

isc_result_totext(result));

}

if (lookup->trace && lookup->trace_root) {

dns_name_clone(dns_rootname, lookup->name);

} else {

len = strlen(lookup->textname);

isc_buffer_init(&b, lookup->textname, len);

isc_buffer_add(&b, len);

result = dns_name_fromtext(lookup->name, &b,

lookup->oname, ISC_FALSE,

&lookup->namebuf);

}

if (result != ISC_R_SUCCESS) {

dns_message_puttempname(lookup->sendmsg,

&lookup->name);

dns_message_puttempname(lookup->sendmsg,

&lookup->oname);

fatal("'%s' is not in legal name syntax (%s)",

lookup->textname, isc_result_totext(result));

}

dns_message_puttempname(lookup->sendmsg, &lookup->oname);

} else {

debug("using root origin");

if (lookup->trace && lookup->trace_root)

dns_name_clone(dns_rootname, lookup->name);

else {

len = strlen(lookup->textname);

isc_buffer_init(&b, lookup->textname, len);

isc_buffer_add(&b, len);

result = dns_name_fromtext(lookup->name, &b,

dns_rootname,

ISC_FALSE,

&lookup->namebuf);

}

if (result != ISC_R_SUCCESS) {

dns_message_puttempname(lookup->sendmsg,

&lookup->name);

isc_buffer_init(&b, store, MXNAME);

fatal("'%s' is not a legal name "

"(%s)", lookup->textname,

isc_result_totext(result));

}

}

dns_name_format(lookup->name, store, sizeof(store));

trying(store, lookup);

INSIST(dns_name_isabsolute(lookup->name));

isc_random_get(&id);

lookup->sendmsg->id = (unsigned short)id & 0xFFFF;

lookup->sendmsg->opcode = dns_opcode_query;

lookup->msgcounter = 0;

/*

if (lookup->trace || (lookup->ns_search_only && !lookup->trace_root))

lookup->recurse = ISC_FALSE;

if (lookup->recurse &&

lookup->rdtype != dns_rdatatype_axfr &&

lookup->rdtype != dns_rdatatype_ixfr) {

debug("recursive query");

lookup->sendmsg->flags |= DNS_MESSAGEFLAG_RD;

}

/* XXX aaflag */

if (lookup->aaonly) {

debug("AA query");

lookup->sendmsg->flags |= DNS_MESSAGEFLAG_AA;

}

if (lookup->adflag) {

debug("AD query");

lookup->sendmsg->flags |= DNS_MESSAGEFLAG_AD;

}

if (lookup->cdflag) {

debug("CD query");

lookup->sendmsg->flags |= DNS_MESSAGEFLAG_CD;

}

dns_message_addname(lookup->sendmsg, lookup->name,

DNS_SECTION_QUESTION);

if (lookup->trace && lookup->trace_root) {

lookup->qrdtype = lookup->rdtype;

lookup->rdtype = dns_rdatatype_ns;

}

if ((lookup->rdtype == dns_rdatatype_axfr) ||

(lookup->rdtype == dns_rdatatype_ixfr)) {

lookup->doing_xfr = ISC_TRUE;

/*

lookup->tcp_mode = ISC_TRUE;

}

add_question(lookup->sendmsg, lookup->name, lookup->rdclass,

lookup->rdtype);

/* add_soa */

if (lookup->rdtype == dns_rdatatype_ixfr)

insert_soa(lookup);

/* XXX Insist this? */

lookup->tsigctx = NULL;

lookup->querysig = NULL;

if (key != NULL) {

debug("initializing keys");

result = dns_message_settsigkey(lookup->sendmsg, key);

check_result(result, "dns_message_settsigkey");

}

lookup->sendspace = isc_mempool_get(commctx);

if (lookup->sendspace == NULL)

fatal("memory allocation failure");

result = dns_compress_init(&cctx, -1, mctx);

check_result(result, "dns_compress_init");

debug("starting to render the message");

isc_buffer_init(&lookup->sendbuf, lookup->sendspace, COMMSIZE);

result = dns_message_renderbegin(lookup->sendmsg, &cctx,

&lookup->sendbuf);

check_result(result, "dns_message_renderbegin");

if (lookup->udpsize > 0 || lookup->dnssec) {

if (lookup->udpsize == 0)

lookup->udpsize = 2048;

add_opt(lookup->sendmsg, lookup->udpsize, lookup->dnssec);

}

result = dns_message_rendersection(lookup->sendmsg,

DNS_SECTION_QUESTION, 0);

check_result(result, "dns_message_rendersection");

result = dns_message_rendersection(lookup->sendmsg,

DNS_SECTION_AUTHORITY, 0);

check_result(result, "dns_message_rendersection");

result = dns_message_renderend(lookup->sendmsg);

check_result(result, "dns_message_renderend");

debug("done rendering");

dns_compress_invalidate(&cctx);

/*

if (isc_buffer_usedlength(&lookup->sendbuf) > 512)

lookup->tcp_mode = ISC_TRUE;

lookup->pending = ISC_FALSE;

for (serv = ISC_LIST_HEAD(lookup->my_server_list);

serv != NULL;

serv = ISC_LIST_NEXT(serv, link)) {

query = isc_mem_allocate(mctx, sizeof(dig_query_t));

if (query == NULL)

fatal("memory allocation failure in %s:%d",

__FILE__, __LINE__);

debug("create query %p linked to lookup %p",

query, lookup);

query->lookup = lookup;

query->waiting_connect = ISC_FALSE;

query->recv_made = ISC_FALSE;

query->first_pass = ISC_TRUE;

query->first_soa_rcvd = ISC_FALSE;

query->second_rr_rcvd = ISC_FALSE;

query->first_repeat_rcvd = ISC_FALSE;

query->warn_id = ISC_TRUE;

query->first_rr_serial = 0;

query->second_rr_serial = 0;

query->servname = serv->servername;

query->userarg = serv->userarg;

query->rr_count = 0;

query->msg_count = 0;

ISC_LINK_INIT(query, link);

ISC_LIST_INIT(query->recvlist);

ISC_LIST_INIT(query->lengthlist);

query->sock = NULL;

query->recvspace = isc_mempool_get(commctx);

if (query->recvspace == NULL)

fatal("memory allocation failure");

isc_buffer_init(&query->recvbuf, query->recvspace, COMMSIZE);

isc_buffer_init(&query->lengthbuf, query->lengthspace, 2);

isc_buffer_init(&query->slbuf, query->slspace, 2);

ISC_LINK_INIT(query, link);

ISC_LIST_ENQUEUE(lookup->q, query, link);

}

/* XXX qrflag, print_query, etc... */

if (!ISC_LIST_EMPTY(lookup->q) && qr) {

printmessage(ISC_LIST_HEAD(lookup->q), lookup->sendmsg,

ISC_TRUE);

}

}

static void

send_done(isc_task_t *_task, isc_event_t *event) {

REQUIRE(event->ev_type == ISC_SOCKEVENT_SENDDONE);

UNUSED(_task);

LOCK_LOOKUP;

isc_event_free(&event);

debug("send_done()");

sendcount--;

debug("sendcount=%d", sendcount);

INSIST(sendcount >= 0);

check_if_done();

UNLOCK_LOOKUP;

}

static void

cancel_lookup(dig_lookup_t *lookup) {

dig_query_t *query, *next;

debug("cancel_lookup()");

query = ISC_LIST_HEAD(lookup->q);

while (query != NULL) {

next = ISC_LIST_NEXT(query, link);

if (query->sock != NULL) {

isc_socket_cancel(query->sock, global_task,

ISC_SOCKCANCEL_ALL);

check_if_done();

} else {

clear_query(query);

}

query = next;

}

if (lookup->timer != NULL)

isc_timer_detach(&lookup->timer);

lookup->pending = ISC_FALSE;

lookup->retries = 0;

}

static void

bringup_timer(dig_query_t *query, unsigned int default_timeout) {

dig_lookup_t *l;

unsigned int local_timeout;

isc_result_t result;

debug("bringup_timer()");

/*

l = query->lookup;

if (ISC_LIST_NEXT(query, link) != NULL)

local_timeout = SERVER_TIMEOUT;

else {

if (timeout == 0) {

local_timeout = default_timeout;

} else

local_timeout = timeout;

}

debug("have local timeout of %d", local_timeout);

isc_interval_set(&l->interval, local_timeout, 0);

if (l->timer != NULL)

isc_timer_detach(&l->timer);

result = isc_timer_create(timermgr,

isc_timertype_once,

NULL,

&l->interval,

global_task,

connect_timeout,

l, &l->timer);

check_result(result, "isc_timer_create");

}

static void

connect_done(isc_task_t *task, isc_event_t *event);

static void

send_tcp_connect(dig_query_t *query) {

isc_result_t result;

dig_query_t *next;

dig_lookup_t *l;

debug("send_tcp_connect(%p)", query);

l = query->lookup;

query->waiting_connect = ISC_TRUE;

query->lookup->current_query = query;

get_address(query->servname, port, &query->sockaddr);

if (specified_source &&

(isc_sockaddr_pf(&query->sockaddr) !=

isc_sockaddr_pf(&bind_address))) {

printf(";; Skipping server %s, incompatible "

"address family\n", query->servname);

query->waiting_connect = ISC_FALSE;

next = ISC_LIST_NEXT(query, link);

l = query->lookup;

clear_query(query);

if (next == NULL) {

printf(";; No acceptable nameservers\n");

check_next_lookup(l);

return;

}

send_tcp_connect(next);

return;

}

INSIST(query->sock == NULL);

result = isc_socket_create(socketmgr,

isc_sockaddr_pf(&query->sockaddr),

isc_sockettype_tcp, &query->sock);

check_result(result, "isc_socket_create");

sockcount++;

debug("sockcount=%d", sockcount);

if (specified_source)

result = isc_socket_bind(query->sock, &bind_address);

else {

if ((isc_sockaddr_pf(&query->sockaddr) == AF_INET) &&

have_ipv4)

isc_sockaddr_any(&bind_any);

else

isc_sockaddr_any6(&bind_any);

result = isc_socket_bind(query->sock, &bind_any);

}

check_result(result, "isc_socket_bind");

bringup_timer(query, TCP_TIMEOUT);

result = isc_socket_connect(query->sock, &query->sockaddr,

global_task, connect_done, query);

check_result(result, "isc_socket_connect");

/*

if (l->ns_search_only && !l->trace_root) {

debug("sending next, since searching");

next = ISC_LIST_NEXT(query, link);

if (next != NULL)

send_tcp_connect(next);

}

}

static void

send_udp(dig_query_t *query) {

dig_lookup_t *l = NULL;

dig_query_t *next;

isc_result_t result;

debug("send_udp(%p)", query);

l = query->lookup;

bringup_timer(query, UDP_TIMEOUT);

l->current_query = query;

debug("working on lookup %p, query %p",

query->lookup, query);

if (!query->recv_made) {

/* XXX Check the sense of this, need assertion? */

query->waiting_connect = ISC_FALSE;

get_address(query->servname, port, &query->sockaddr);

result = isc_socket_create(socketmgr,

isc_sockaddr_pf(&query->sockaddr),

isc_sockettype_udp, &query->sock);

check_result(result, "isc_socket_create");

sockcount++;

debug("sockcount=%d", sockcount);

if (specified_source) {

result = isc_socket_bind(query->sock, &bind_address);

} else {

isc_sockaddr_anyofpf(&bind_any,

isc_sockaddr_pf(&query->sockaddr));

result = isc_socket_bind(query->sock, &bind_any);

}

check_result(result, "isc_socket_bind");

query->recv_made = ISC_TRUE;

ISC_LINK_INIT(&query->recvbuf, link);

ISC_LIST_ENQUEUE(query->recvlist, &query->recvbuf,

link);

debug("recving with lookup=%p, query=%p, sock=%p",

query->lookup, query,

query->sock);

result = isc_socket_recvv(query->sock,

&query->recvlist, 1,

global_task, recv_done,

query);

check_result(result, "isc_socket_recvv");

recvcount++;

debug("recvcount=%d", recvcount);

}

ISC_LIST_INIT(query->sendlist);

ISC_LINK_INIT(&l->sendbuf, link);

ISC_LIST_ENQUEUE(query->sendlist, &l->sendbuf,

link);

debug("sending a request");

TIME_NOW(&query->time_sent);

INSIST(query->sock != NULL);

result = isc_socket_sendtov(query->sock, &query->sendlist,

global_task, send_done, query,

&query->sockaddr, NULL);

check_result(result, "isc_socket_sendtov");

sendcount++;

/*

if (l->ns_search_only && !l->trace_root) {

debug("sending next, since searching");

next = ISC_LIST_NEXT(query, link);

if (next != NULL)

send_udp(next);

}

}

static void

connect_timeout(isc_task_t *task, isc_event_t *event) {

dig_lookup_t *l = NULL, *n;

dig_query_t *query = NULL, *cq;

UNUSED(task);

REQUIRE(event->ev_type == ISC_TIMEREVENT_IDLE);

debug("connect_timeout()");

LOCK_LOOKUP;

l = event->ev_arg;

query = l->current_query;

isc_event_free(&event);

INSIST(!free_now);

if ((query != NULL) && (query->lookup->current_query != NULL) &&

(ISC_LIST_NEXT(query->lookup->current_query, link) != NULL)) {

debug("trying next server...");

cq = query->lookup->current_query;

if (!l->tcp_mode)

send_udp(ISC_LIST_NEXT(cq, link));

else

send_tcp_connect(ISC_LIST_NEXT(cq, link));

UNLOCK_LOOKUP;

return;

}

if (l->retries > 1) {

if (!l->tcp_mode) {

l->retries--;

debug("resending UDP request to first server");

send_udp(ISC_LIST_HEAD(l->q));

} else {

debug("making new TCP request, %d tries left",

l->retries);

l->retries--;

n = requeue_lookup(l, ISC_TRUE);

cancel_lookup(l);

check_next_lookup(l);

}

} else {

fputs(l->cmdline, stdout);

printf(";; connection timed out; no servers could be "

"reached\n");

cancel_lookup(l);

check_next_lookup(l);

if (exitcode < 9)

exitcode = 9;

}

UNLOCK_LOOKUP;

}

static void

tcp_length_done(isc_task_t *task, isc_event_t *event) {

isc_socketevent_t *sevent;

isc_buffer_t *b = NULL;

isc_result_t result;

dig_query_t *query = NULL;

dig_lookup_t *l;

isc_uint16_t length;

REQUIRE(event->ev_type == ISC_SOCKEVENT_RECVDONE);

INSIST(!free_now);

UNUSED(task);

debug("tcp_length_done()");

LOCK_LOOKUP;

sevent = (isc_socketevent_t *)event;

query = event->ev_arg;

recvcount--;

INSIST(recvcount >= 0);

if (sevent->result == ISC_R_CANCELED) {

isc_event_free(&event);

l = query->lookup;

clear_query(query);

check_next_lookup(l);

UNLOCK_LOOKUP;

return;

}

if (sevent->result != ISC_R_SUCCESS) {

char sockstr[ISC_SOCKADDR_FORMATSIZE];

isc_sockaddr_format(&query->sockaddr, sockstr,

sizeof(sockstr));

printf(";; communications error to %s: %s\n",

sockstr, isc_result_totext(sevent->result));

l = query->lookup;

isc_socket_detach(&query->sock);

sockcount--;

debug("sockcount=%d", sockcount);

INSIST(sockcount >= 0);

isc_event_free(&event);

clear_query(query);

check_next_lookup(l);

UNLOCK_LOOKUP;

return;

}

b = ISC_LIST_HEAD(sevent->bufferlist);

ISC_LIST_DEQUEUE(sevent->bufferlist, &query->lengthbuf, link);

length = isc_buffer_getuint16(b);

if (length == 0) {

isc_event_free(&event);

launch_next_query(query, ISC_FALSE);

UNLOCK_LOOKUP;

return;

}

/*

isc_buffer_invalidate(&query->recvbuf);

isc_buffer_init(&query->recvbuf, query->recvspace, length);

ENSURE(ISC_LIST_EMPTY(query->recvlist));

ISC_LINK_INIT(&query->recvbuf, link);

ISC_LIST_ENQUEUE(query->recvlist, &query->recvbuf, link);

debug("recving with lookup=%p, query=%p",

query->lookup, query);

result = isc_socket_recvv(query->sock, &query->recvlist, length, task,

recv_done, query);

check_result(result, "isc_socket_recvv");

recvcount++;

debug("resubmitted recv request with length %d, recvcount=%d",

length, recvcount);

isc_event_free(&event);

UNLOCK_LOOKUP;

}

static void

launch_next_query(dig_query_t *query, isc_boolean_t include_question) {

isc_result_t result;

dig_lookup_t *l;

INSIST(!free_now);

debug("launch_next_query()");

if (!query->lookup->pending) {

debug("ignoring launch_next_query because !pending");

isc_socket_detach(&query->sock);

sockcount--;

debug("sockcount=%d", sockcount);

INSIST(sockcount >= 0);

query->waiting_connect = ISC_FALSE;

l = query->lookup;

clear_query(query);

check_next_lookup(l);

return;

}

isc_buffer_clear(&query->slbuf);

isc_buffer_clear(&query->lengthbuf);

isc_buffer_putuint16(&query->slbuf,

(isc_uint16_t) query->lookup->sendbuf.used);

ISC_LIST_INIT(query->sendlist);

ISC_LINK_INIT(&query->slbuf, link);

ISC_LIST_ENQUEUE(query->sendlist, &query->slbuf, link);

if (include_question) {

ISC_LINK_INIT(&query->lookup->sendbuf, link);

ISC_LIST_ENQUEUE(query->sendlist, &query->lookup->sendbuf,

link);

}

ISC_LINK_INIT(&query->lengthbuf, link);

ISC_LIST_ENQUEUE(query->lengthlist, &query->lengthbuf, link);

result = isc_socket_recvv(query->sock, &query->lengthlist, 0,

global_task, tcp_length_done, query);

check_result(result, "isc_socket_recvv");

recvcount++;

debug("recvcount=%d", recvcount);

if (!query->first_soa_rcvd) {

debug("sending a request in launch_next_query");

TIME_NOW(&query->time_sent);

result = isc_socket_sendv(query->sock, &query->sendlist,

global_task, send_done, query);

check_result(result, "isc_socket_sendv");

sendcount++;

debug("sendcount=%d", sendcount);

}

query->waiting_connect = ISC_FALSE;

#if 0

check_next_lookup(query->lookup);

#endif

return;

}

static void

connect_done(isc_task_t *task, isc_event_t *event) {

isc_socketevent_t *sevent = NULL;

dig_query_t *query = NULL, *next;

dig_lookup_t *l;

UNUSED(task);

REQUIRE(event->ev_type == ISC_SOCKEVENT_CONNECT);

INSIST(!free_now);

debug("connect_done()");

LOCK_LOOKUP;

sevent = (isc_socketevent_t *)event;

query = sevent->ev_arg;

INSIST(query->waiting_connect);

query->waiting_connect = ISC_FALSE;

if (sevent->result == ISC_R_CANCELED) {

debug("in cancel handler");

isc_socket_detach(&query->sock);

sockcount--;

INSIST(sockcount >= 0);

debug("sockcount=%d", sockcount);

query->waiting_connect = ISC_FALSE;

isc_event_free(&event);

l = query->lookup;

clear_query(query);

check_next_lookup(l);

UNLOCK_LOOKUP;

return;

}

if (sevent->result != ISC_R_SUCCESS) {

char sockstr[ISC_SOCKADDR_FORMATSIZE];

debug("unsuccessful connection: %s",

isc_result_totext(sevent->result));

isc_sockaddr_format(&query->sockaddr, sockstr,

sizeof(sockstr));

if (sevent->result != ISC_R_CANCELED)

printf(";; Connection to %s(%s) for %s failed: "

"%s.\n", sockstr,

query->servname, query->lookup->textname,

isc_result_totext(sevent->result));

isc_socket_detach(&query->sock);

sockcount--;

INSIST(sockcount >= 0);

/* XXX Clean up exitcodes */

if (exitcode < 9)

exitcode = 9;

debug("sockcount=%d", sockcount);

query->waiting_connect = ISC_FALSE;

isc_event_free(&event);

l = query->lookup;

if (l->current_query != NULL)

next = ISC_LIST_NEXT(l->current_query, link);

else

next = NULL;

clear_query(query);

if (next != NULL) {

bringup_timer(next, TCP_TIMEOUT);

send_tcp_connect(next);

} else {

check_next_lookup(l);

}

UNLOCK_LOOKUP;

return;

}

launch_next_query(query, ISC_TRUE);

isc_event_free(&event);

UNLOCK_LOOKUP;

}

static isc_boolean_t

check_for_more_data(dig_query_t *query, dns_message_t *msg,

isc_socketevent_t *sevent)

{

dns_rdataset_t *rdataset = NULL;

dns_rdata_t rdata = DNS_RDATA_INIT;

dns_rdata_soa_t soa;

isc_uint32_t serial;

isc_result_t result;

debug("check_for_more_data()");

/*

query->msg_count++;

result = dns_message_firstname(msg, DNS_SECTION_ANSWER);

if (result != ISC_R_SUCCESS) {

puts("; Transfer failed.");

return (ISC_TRUE);

}

do {

dns_name_t *name;

name = NULL;

dns_message_currentname(msg, DNS_SECTION_ANSWER,

&name);

for (rdataset = ISC_LIST_HEAD(name->list);

rdataset != NULL;

rdataset = ISC_LIST_NEXT(rdataset, link)) {

result = dns_rdataset_first(rdataset);

if (result != ISC_R_SUCCESS)

continue;

do {

query->rr_count++;

dns_rdata_reset(&rdata);

dns_rdataset_current(rdataset, &rdata);

/*

if ((!query->first_soa_rcvd) &&

(rdata.type != dns_rdatatype_soa)) {

puts("; Transfer failed. "

"Didn't start with "

"SOA answer.");

return (ISC_TRUE);

}

if ((!query->second_rr_rcvd) &&

(rdata.type != dns_rdatatype_soa)) {

query->second_rr_rcvd = ISC_TRUE;

query->second_rr_serial = 0;

debug("got the second rr as nonsoa");

goto next_rdata;

}

/*

if (rdata.type != dns_rdatatype_soa)

goto next_rdata;

/* Now we have an SOA. Work with it. */

debug("got an SOA");

(void)dns_rdata_tostruct(&rdata, &soa, NULL);

serial = soa.serial;

dns_rdata_freestruct(&soa);

if (!query->first_soa_rcvd) {

query->first_soa_rcvd = ISC_TRUE;

query->first_rr_serial = serial;

debug("this is the first %d",

query->lookup->ixfr_serial);

if (query->lookup->ixfr_serial >=

serial)

goto doexit;

goto next_rdata;

}

if (query->lookup->rdtype ==

dns_rdatatype_axfr) {

debug("doing axfr, got second SOA");

goto doexit;

}

if (!query->second_rr_rcvd) {

if (query->first_rr_serial == serial) {

debug("doing ixfr, got "

"empty zone");

goto doexit;

}

debug("this is the second %d",

query->lookup->ixfr_serial);

query->second_rr_rcvd = ISC_TRUE;

query->second_rr_serial = serial;

goto next_rdata;

}

if (query->second_rr_serial == 0) {

/*

debug("done, since axfr");

goto doexit;

}

/*

if (query->first_rr_serial == serial) {

debug("got a match for ixfr");

if (!query->first_repeat_rcvd) {

query->first_repeat_rcvd =

ISC_TRUE;

goto next_rdata;

}

debug("done with ixfr");

goto doexit;

}

debug("meaningless soa %d", serial);

next_rdata:

result = dns_rdataset_next(rdataset);

} while (result == ISC_R_SUCCESS);

}

result = dns_message_nextname(msg, DNS_SECTION_ANSWER);

} while (result == ISC_R_SUCCESS);

launch_next_query(query, ISC_FALSE);

return (ISC_FALSE);

doexit:

received(sevent->n, &sevent->address, query);

return (ISC_TRUE);

}

static void

recv_done(isc_task_t *task, isc_event_t *event) {

isc_socketevent_t *sevent = NULL;

dig_query_t *query = NULL;

isc_buffer_t *b = NULL;

dns_message_t *msg = NULL;

#ifdef DIG_SIGCHASE

dig_message_t *chase_msg = NULL;

dig_message_t *chase_msg2 = NULL;

#endif

isc_result_t result;

dig_lookup_t *n, *l;

isc_boolean_t docancel = ISC_FALSE;

isc_boolean_t match = ISC_TRUE;

unsigned int parseflags;

dns_messageid_t id;

unsigned int msgflags;

#ifdef DIG_SIGCHASE

isc_result_t do_sigchase = ISC_FALSE;

dns_message_t *msg_temp = NULL;

isc_region_t r;

isc_buffer_t *buf = NULL;

#endif

UNUSED(task);

INSIST(!free_now);

debug("recv_done()");

LOCK_LOOKUP;

recvcount--;

debug("recvcount=%d", recvcount);

INSIST(recvcount >= 0);

query = event->ev_arg;

debug("lookup=%p, query=%p", query->lookup, query);

l = query->lookup;