cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <config.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington#include <string.h>

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/hex.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <isc/mem.h>

6028d1ce0380d0ba7f6c6ecd1ad20b31ddd1becbDavid Lawrence#include <isc/serial.h>

364a82f7c25b62967678027043425201a5e5171aBob Halley#include <isc/stats.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <isc/util.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <dns/adb.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <dns/byaddr.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <dns/cache.h>

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#include <dns/db.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/dlz.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/dns64.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/dnssec.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/events.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/message.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/ncache.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/nsec3.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/order.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/rdata.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/rdataclass.h>

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews#include <dns/rdatalist.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/rdataset.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <dns/rdatasetiter.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/rdatastruct.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/rdatatype.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/resolver.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/result.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/stats.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/tkey.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/view.h>

4a4066453f45c869fc9f91d9807b7b8b25b004a0Mark Andrews#include <dns/zone.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <dns/zt.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <named/client.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <named/globals.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <named/log.h>

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#include <named/server.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <named/sortlist.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#include <named/xfrout.h>

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

bdfaef63f576f810fab27f64395faccf2fcd9434Francis Dupont#if 0

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define dns64_bis_return_excluded_addresses 1

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#endif

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define PARTIALANSWER(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_PARTIALANSWER) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define USECACHE(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_CACHEOK) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define RECURSIONOK(c) (((c)->query.attributes & \

ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein NS_QUERYATTR_RECURSIONOK) != 0)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington#define RECURSING(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_RECURSING) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define CACHEGLUEOK(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_CACHEGLUEOK) != 0)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#define WANTRECURSION(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_WANTRECURSION) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define WANTDNSSEC(c) (((c)->attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_CLIENTATTR_WANTDNSSEC) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define WANTAD(c) (((c)->attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_CLIENTATTR_WANTAD) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define NOAUTHORITY(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_NOAUTHORITY) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define NOADDITIONAL(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_NOADDITIONAL) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define SECURE(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_SECURE) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define DNS64(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_DNS64) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define DNS64EXCLUDE(c) (((c)->query.attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_DNS64EXCLUDE) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define NOQNAME(r) (((r)->attributes & \

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews DNS_RDATASETATTR_NOQNAME) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington#if 0

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#define CTRACE(m) isc_log_write(ns_g_lctx, \

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington NS_LOGCATEGORY_CLIENT, \

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff NS_LOGMODULE_QUERY, \

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff ISC_LOG_DEBUG(3), \

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff "client %p: %s", client, (m))

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#define QTRACE(m) isc_log_write(ns_g_lctx, \

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews NS_LOGCATEGORY_GENERAL, \

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews NS_LOGMODULE_QUERY, \

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews ISC_LOG_DEBUG(3), \

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews "query %p: %s", query, (m))

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews#else

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews#define CTRACE(m) ((void)m)

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#define QTRACE(m) ((void)m)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#endif

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews#define DNS_GETDB_NOEXACT 0x01U

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#define DNS_GETDB_NOLOG 0x02U

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff#define DNS_GETDB_PARTIAL 0x04U

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff#define DNS_GETDB_IGNOREACL 0x08U

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington#define PENDINGOK(x) (((x) & DNS_DBFIND_PENDINGOK) != 0)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewstypedef struct client_additionalctx {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ns_client_t *client;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_rdataset_t *rdataset;

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff} client_additionalctx_t;

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonstatic isc_result_t

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonquery_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrewsstatic isc_boolean_t

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halleyvalidate(ns_client_t *client, dns_db_t *db, dns_name_t *name,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsstatic void

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsquery_findclosestnsec3(dns_name_t *qname, dns_db_t *db,

784a904bd06c7492361ed09a882d10c636b1291bAutomatic Updater dns_dbversion_t *version, ns_client_t *client,

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset,

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews dns_name_t *fname, isc_boolean_t exact,

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews dns_name_t *found);

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrewsstatic inline void

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrewslog_queryerror(ns_client_t *client, isc_result_t result, int line, int level);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonstatic void

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonrpz_st_clear(ns_client_t *client);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halleystatic inline void

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtoninc_stats(ns_client_t *client, isc_statscounter_t counter) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_zone_t *zone = client->query.authzone;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_rdatatype_t qtype;

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews dns_rdataset_t *rdataset;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews isc_stats_t *zonestats;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_stats_t *querystats = NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington isc_stats_increment(ns_g_server->nsstats, counter);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley if (zone == NULL)

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley return;

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley /* Do regular response type stats */

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley zonestats = dns_zone_getrequeststats(zone);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley if (zonestats != NULL)

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley isc_stats_increment(zonestats, counter);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley /* Do query type statistics

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (counter == dns_nsstatscounter_authans) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington querystats = dns_zone_getrcvquerystats(zone);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (querystats != NULL) {

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley rdataset = ISC_LIST_HEAD(client->query.qname->list);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley if (rdataset != NULL) {

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley qtype = rdataset->type;

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley dns_rdatatypestats_increment(querystats, qtype);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley }

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsstatic void

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrewsquery_send(ns_client_t *client) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews isc_statscounter_t counter;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if ((client->message->flags & DNS_MESSAGEFLAG_AA) == 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews inc_stats(client, dns_nsstatscounter_nonauthans);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews else

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews inc_stats(client, dns_nsstatscounter_authans);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (client->message->rcode == dns_rcode_noerror) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dns_section_t answer = DNS_SECTION_ANSWER;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews if (ISC_LIST_EMPTY(client->message->sections[answer])) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (client->query.isreferral)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews counter = dns_nsstatscounter_referral;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews else

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews counter = dns_nsstatscounter_nxrrset;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews } else

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews counter = dns_nsstatscounter_success;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews } else if (client->message->rcode == dns_rcode_nxdomain)

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews counter = dns_nsstatscounter_nxdomain;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews else /* We end up here in case of YXDOMAIN, and maybe others */

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews counter = dns_nsstatscounter_failure;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington inc_stats(client, counter);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff ns_client_send(client);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley}

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrewsstatic void

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsquery_error(ns_client_t *client, isc_result_t result, int line) {

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews int loglevel = ISC_LOG_DEBUG(3);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews switch (result) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews case DNS_R_SERVFAIL:

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews loglevel = ISC_LOG_DEBUG(1);

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews inc_stats(client, dns_nsstatscounter_servfail);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews break;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews case DNS_R_FORMERR:

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews inc_stats(client, dns_nsstatscounter_formerr);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews break;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews default:

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff inc_stats(client, dns_nsstatscounter_failure);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley break;

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley }

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley log_queryerror(client, result, line, loglevel);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley ns_client_error(client, result);

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley}

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halleystatic void

383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halleyquery_next(ns_client_t *client, isc_result_t result) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (result == DNS_R_DUPLICATE)

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff inc_stats(client, dns_nsstatscounter_duplicate);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff else if (result == DNS_R_DROP)

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff inc_stats(client, dns_nsstatscounter_dropped);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff else

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff inc_stats(client, dns_nsstatscounter_failure);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff ns_client_next(client, result);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafssonstatic inline void

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonquery_freefreeversions(ns_client_t *client, isc_boolean_t everything) {

e672951ed28b2e9cc7a19c3d7fa4a258382f981cAutomatic Updater ns_dbversion_t *dbversion, *dbversion_next;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews unsigned int i;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews for (dbversion = ISC_LIST_HEAD(client->query.freeversions), i = 0;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dbversion != NULL;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dbversion = dbversion_next, i++)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dbversion_next = ISC_LIST_NEXT(dbversion, link);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff if (i > 3 || everything) {

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff ISC_LIST_UNLINK(client->query.freeversions, dbversion,

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff link);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff isc_mem_put(client->mctx, dbversion,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews sizeof(*dbversion));

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews }

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff}

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsns_query_cancel(ns_client_t *client) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews LOCK(&client->query.fetchlock);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (client->query.fetch != NULL) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_resolver_cancelfetch(client->query.fetch);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews client->query.fetch = NULL;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

735ca24fa61ad9cd0285776c2fc4c14032f8f194Mark Andrews UNLOCK(&client->query.fetchlock);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsstatic inline void

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsquery_putrdataset(ns_client_t *client, dns_rdataset_t **rdatasetp) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_rdataset_t *rdataset = *rdatasetp;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews CTRACE("query_putrdataset");

1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews if (rdataset != NULL) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews if (dns_rdataset_isassociated(rdataset))

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_rdataset_disassociate(rdataset);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dns_message_puttemprdataset(client->message, rdatasetp);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews CTRACE("query_putrdataset: done");

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews}

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrewsstatic inline void

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrewsquery_reset(ns_client_t *client, isc_boolean_t everything) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews isc_buffer_t *dbuf, *dbuf_next;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews ns_dbversion_t *dbversion, *dbversion_next;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt /*%

e672951ed28b2e9cc7a19c3d7fa4a258382f981cAutomatic Updater

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews /*

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ns_query_cancel(client);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson /*

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews for (dbversion = ISC_LIST_HEAD(client->query.activeversions);

c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews dbversion != NULL;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson dbversion = dbversion_next) {

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff dbversion_next = ISC_LIST_NEXT(dbversion, link);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff dns_db_closeversion(dbversion->db, &dbversion->version,

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington ISC_FALSE);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dns_db_detach(&dbversion->db);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington ISC_LIST_INITANDAPPEND(client->query.freeversions,

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbversion, link);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington ISC_LIST_INIT(client->query.activeversions);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (client->query.authdb != NULL)

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dns_db_detach(&client->query.authdb);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (client->query.authzone != NULL)

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dns_zone_detach(&client->query.authzone);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (client->query.dns64_aaaa != NULL)

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington query_putrdataset(client, &client->query.dns64_aaaa);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (client->query.dns64_sigaaaa != NULL)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews query_putrdataset(client, &client->query.dns64_sigaaaa);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (client->query.dns64_aaaaok != NULL) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews isc_mem_put(client->mctx, client->query.dns64_aaaaok,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.dns64_aaaaoklen *

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews sizeof(isc_boolean_t));

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.dns64_aaaaok = NULL;

80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews client->query.dns64_aaaaoklen = 0;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington query_freefreeversions(client, everything);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews for (dbuf = ISC_LIST_HEAD(client->query.namebufs);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbuf != NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbuf = dbuf_next) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbuf_next = ISC_LIST_NEXT(dbuf, link);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (dbuf_next != NULL || everything) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington ISC_LIST_UNLINK(client->query.namebufs, dbuf, link);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_buffer_free(&dbuf);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (client->query.restarts > 0) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington /*

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dns_message_puttempname(client->message,

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington &client->query.qname);

80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.qname = NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.attributes = (NS_QUERYATTR_RECURSIONOK |

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews NS_QUERYATTR_CACHEOK |

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_SECURE);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.restarts = 0;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.timerset = ISC_FALSE;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (client->query.rpz_st != NULL) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington rpz_st_clear(client);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (everything) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_mem_put(client->mctx, client->query.rpz_st,

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington sizeof(*client->query.rpz_st));

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.rpz_st = NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.origqname = NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.dboptions = 0;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews client->query.fetchoptions = 0;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews client->query.gluedb = NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.authdbset = ISC_FALSE;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.isreferral = ISC_FALSE;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington client->query.dns64_options = 0;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews client->query.dns64_ttl = ISC_UINT32_MAX;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews}

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsstatic void

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsquery_next_callback(ns_client_t *client) {

e672951ed28b2e9cc7a19c3d7fa4a258382f981cAutomatic Updater query_reset(client, ISC_FALSE);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews}

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrewsns_query_free(ns_client_t *client) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews query_reset(client, ISC_TRUE);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews}

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonstatic inline isc_result_t

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonquery_newnamebuf(ns_client_t *client) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews isc_buffer_t *dbuf;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_result_t result;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_newnamebuf");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington /*%

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbuf = NULL;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington result = isc_buffer_allocate(client->mctx, &dbuf, 1024);

80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews if (result != ISC_R_SUCCESS) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_newnamebuf: isc_buffer_allocate failed: done");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington return (result);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington ISC_LIST_APPEND(client->query.namebufs, dbuf, link);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_newnamebuf: done");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington return (ISC_R_SUCCESS);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington}

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonstatic inline isc_buffer_t *

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonquery_getnamebuf(ns_client_t *client) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_buffer_t *dbuf;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_result_t result;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_region_t r;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_getnamebuf");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington /*%

35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews

d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 if (ISC_LIST_EMPTY(client->query.namebufs)) {

d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 result = query_newnamebuf(client);

d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 if (result != ISC_R_SUCCESS) {

6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews CTRACE("query_getnamebuf: query_newnamebuf failed: done");

6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews return (NULL);

0cae66577c69c89086cd065bb297690072b471b4Mark Andrews }

0cae66577c69c89086cd065bb297690072b471b4Mark Andrews }

35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington dbuf = ISC_LIST_TAIL(client->query.namebufs);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington INSIST(dbuf != NULL);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_buffer_availableregion(dbuf, &r);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (r.length < 255) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington result = query_newnamebuf(client);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington if (result != ISC_R_SUCCESS) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_getnamebuf: query_newnamebuf failed: done");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington return (NULL);

f9f2e770a992cb0ed2234b2f985162273059c6d3Brian Wellington

f9f2e770a992cb0ed2234b2f985162273059c6d3Brian Wellington }

f9f2e770a992cb0ed2234b2f985162273059c6d3Brian Wellington dbuf = ISC_LIST_TAIL(client->query.namebufs);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_buffer_availableregion(dbuf, &r);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington INSIST(r.length >= 255);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington }

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_getnamebuf: done");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington return (dbuf);

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington}

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonstatic inline void

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellingtonquery_keepname(ns_client_t *client, dns_name_t *name, isc_buffer_t *dbuf) {

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington isc_region_t r;

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington CTRACE("query_keepname");

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington /*%

8cf24d101a291aa3274e8fd07d1a13cb5fe9976bBrian Wellington

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley REQUIRE((client->query.attributes & NS_QUERYATTR_NAMEBUFUSED) != 0);

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley dns_name_toregion(name, &r);

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley isc_buffer_add(dbuf, r.length);

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley dns_name_setbuffer(name, NULL);

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley client->query.attributes &= ~NS_QUERYATTR_NAMEBUFUSED;

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley}

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halleystatic inline void

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halleyquery_releasename(ns_client_t *client, dns_name_t **namep) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dns_name_t *name = *namep;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews /*%

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews CTRACE("query_releasename");

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (dns_name_hasbuffer(name)) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews INSIST((client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews != 0);

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley client->query.attributes &= ~NS_QUERYATTR_NAMEBUFUSED;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence }

e800570a5a7572a94604815cd7d7e788c0479ed2Bob Halley dns_message_puttempname(client->message, namep);

cd82aa8fa32698240ecd6634f11e3052ca7a2448Michael Graff CTRACE("query_releasename: done");

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley}

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafssonstatic inline dns_name_t *

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafssonquery_newname(ns_client_t *client, isc_buffer_t *dbuf,

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson isc_buffer_t *nbuf)

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson{

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson dns_name_t *name;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson isc_region_t r;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson isc_result_t result;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson REQUIRE((client->query.attributes & NS_QUERYATTR_NAMEBUFUSED) == 0);

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson CTRACE("query_newname");

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson name = NULL;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews result = dns_message_gettempname(client->message, &name);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews if (result != ISC_R_SUCCESS) {

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson CTRACE("query_newname: dns_message_gettempname failed: done");

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews return (NULL);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews }

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews isc_buffer_availableregion(dbuf, &r);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews isc_buffer_init(nbuf, r.base, r.length);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_name_init(name, NULL);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_name_setbuffer(name, nbuf);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews client->query.attributes |= NS_QUERYATTR_NAMEBUFUSED;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews CTRACE("query_newname: done");

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews return (name);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews}

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsstatic inline dns_rdataset_t *

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafssonquery_newrdataset(ns_client_t *client) {

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson dns_rdataset_t *rdataset;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson isc_result_t result;

3f42cf2f3e4dc7e740b4609ba7d7430292348f2bMark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews CTRACE("query_newrdataset");

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson rdataset = NULL;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson result = dns_message_gettemprdataset(client->message, &rdataset);

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson if (result != ISC_R_SUCCESS) {

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson CTRACE("query_newrdataset: "

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson "dns_message_gettemprdataset failed: done");

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson return (NULL);

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson }

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson dns_rdataset_init(rdataset);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington CTRACE("query_newrdataset: done");

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington return (rdataset);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonstatic inline isc_result_t

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonquery_newdbversion(ns_client_t *client, unsigned int n) {

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews unsigned int i;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews ns_dbversion_t *dbversion;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington for (i = 0; i < n; i++) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbversion = isc_mem_get(client->mctx, sizeof(*dbversion));

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (dbversion != NULL) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbversion->db = NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion->version = NULL;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews ISC_LIST_INITANDAPPEND(client->query.freeversions,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion, link);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews } else {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /*

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (i == 0)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington return (ISC_R_NOMEMORY);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews else

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (ISC_R_SUCCESS);

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington return (ISC_R_SUCCESS);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halleystatic inline ns_dbversion_t *

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halleyquery_getdbversion(ns_client_t *client) {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley isc_result_t result;

9d2c9f789654ace01489c29af64c68cf42c6cb30Mark Andrews ns_dbversion_t *dbversion;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews if (ISC_LIST_EMPTY(client->query.freeversions)) {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley result = query_newdbversion(client, 1);

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews if (result != ISC_R_SUCCESS)

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews return (NULL);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbversion = ISC_LIST_HEAD(client->query.freeversions);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington INSIST(dbversion != NULL);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington ISC_LIST_UNLINK(client->query.freeversions, dbversion, link);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (dbversion);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews}

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsns_query_init(ns_client_t *client) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews isc_result_t result;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ISC_LIST_INIT(client->query.namebufs);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ISC_LIST_INIT(client->query.activeversions);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ISC_LIST_INIT(client->query.freeversions);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.restarts = 0;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence client->query.timerset = ISC_FALSE;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.rpz_st = NULL;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.qname = NULL;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley result = isc_mutex_init(&client->query.fetchlock);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (result != ISC_R_SUCCESS)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley return (result);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.fetch = NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.authdb = NULL;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews client->query.authzone = NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.authdbset = ISC_FALSE;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.isreferral = ISC_FALSE;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.dns64_aaaa = NULL;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.dns64_sigaaaa = NULL;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley client->query.dns64_aaaaok = NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->query.dns64_aaaaoklen = 0;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews query_reset(client, ISC_FALSE);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews result = query_newdbversion(client, 3);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (result != ISC_R_SUCCESS) {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley DESTROYLOCK(&client->query.fetchlock);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews return (result);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews result = query_newnamebuf(client);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (result != ISC_R_SUCCESS)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley query_freefreeversions(client, ISC_TRUE);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley return (result);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley}

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halleystatic inline ns_dbversion_t *

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halleyquery_findversion(ns_client_t *client, dns_db_t *db)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley{

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ns_dbversion_t *dbversion;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley /*%

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews for (dbversion = ISC_LIST_HEAD(client->query.activeversions);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion != NULL;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion = ISC_LIST_NEXT(dbversion, link)) {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (dbversion->db == db)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley break;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley }

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (dbversion == NULL) {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley /*

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dbversion = query_getdbversion(client);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (dbversion == NULL)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley return (NULL);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dns_db_attach(db, &dbversion->db);

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews dns_db_currentversion(db, &dbversion->version);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dbversion->acl_checked = ISC_FALSE;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbversion->queryok = ISC_FALSE;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington ISC_LIST_APPEND(client->query.activeversions,

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dbversion, link);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley }

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews return (dbversion);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews}

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrewsstatic inline isc_result_t

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsquery_validatezonedb(ns_client_t *client, dns_name_t *name,

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_rdatatype_t qtype, unsigned int options,

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dns_zone_t *zone, dns_db_t *db,

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dns_dbversion_t **versionp)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington{

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley isc_result_t result;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dns_acl_t *queryacl, *queryonacl;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ns_dbversion_t *dbversion;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington REQUIRE(zone != NULL);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley REQUIRE(db != NULL);

f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews

f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews /*

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley if (!client->view->additionalfromauth &&

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley client->query.authdbset &&

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley db != client->query.authdb)

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley return (DNS_R_REFUSED);

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley /*

bab57cc87ffc890ba1ba3dbc6c022ae1a36726bcBob Halley if (dns_zone_gettype(zone) == dns_zone_staticstub &&

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews !RECURSIONOK(client)) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (DNS_R_REFUSED);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley /*

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dbversion = query_findversion(client, db);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (dbversion == NULL)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley return (DNS_R_SERVFAIL);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if ((options & DNS_GETDB_IGNOREACL) != 0)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley goto approved;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (dbversion->acl_checked) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (!dbversion->queryok)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (DNS_R_REFUSED);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews goto approved;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews queryacl = dns_zone_getqueryacl(zone);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (queryacl == NULL) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews queryacl = client->view->queryacl;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if ((client->query.attributes &

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews NS_QUERYATTR_QUERYOKVALID) != 0) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley dbversion->acl_checked = ISC_TRUE;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if ((client->query.attributes &

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson NS_QUERYATTR_QUERYOK) == 0) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion->queryok = ISC_FALSE;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (DNS_R_REFUSED);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dbversion->queryok = ISC_TRUE;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson goto approved;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews result = ns_client_checkaclsilent(client, NULL, queryacl, ISC_TRUE);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if ((options & DNS_GETDB_NOLOG) == 0) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews char msg[NS_CLIENT_ACLMSGSIZE("query")];

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (result == ISC_R_SUCCESS) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (isc_log_wouldlog(ns_g_lctx, ISC_LOG_DEBUG(3))) {

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews ns_client_aclmsg("query", name, qtype,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->view->rdclass,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews msg, sizeof(msg));

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ns_client_log(client,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews DNS_LOGCATEGORY_SECURITY,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews NS_LOGMODULE_QUERY,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ISC_LOG_DEBUG(3),

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington "%s approved", msg);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington } else {

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley ns_client_aclmsg("query", name, qtype,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington client->view->rdclass,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington msg, sizeof(msg));

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington ns_client_log(client, DNS_LOGCATEGORY_SECURITY,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington NS_LOGMODULE_QUERY, ISC_LOG_INFO,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington "%s denied", msg);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (queryacl == client->view->queryacl) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if (result == ISC_R_SUCCESS) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews client->query.attributes |= NS_QUERYATTR_QUERYOK;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews }

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews /*

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews client->query.attributes |= NS_QUERYATTR_QUERYOKVALID;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews }

e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* If and only if we've gotten this far, check allow-query-on too */

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (result == ISC_R_SUCCESS) {

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington queryonacl = dns_zone_getqueryonacl(zone);

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews if (queryonacl == NULL)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews queryonacl = client->view->queryonacl;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews result = ns_client_checkaclsilent(client, NULL,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews queryonacl, ISC_TRUE);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews if ((options & DNS_GETDB_NOLOG) == 0 &&

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington result != ISC_R_SUCCESS)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington ns_client_log(client, DNS_LOGCATEGORY_SECURITY,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington NS_LOGMODULE_QUERY, ISC_LOG_INFO,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews "query-on denied");

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbversion->acl_checked = ISC_TRUE;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews if (result != ISC_R_SUCCESS) {

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dbversion->queryok = ISC_FALSE;

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews return (DNS_R_REFUSED);

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews }

a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews dbversion->queryok = ISC_TRUE;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington approved:

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews /* Transfer ownership, if necessary. */

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (versionp != NULL)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews *versionp = dbversion->version;

e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt return (ISC_R_SUCCESS);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonstatic inline isc_result_t

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellingtonquery_getzonedb(ns_client_t *client, dns_name_t *name, dns_rdatatype_t qtype,

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews unsigned int options, dns_zone_t **zonep, dns_db_t **dbp,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dns_dbversion_t **versionp)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews{

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews isc_result_t result;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews unsigned int ztoptions;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dns_zone_t *zone = NULL;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dns_db_t *db = NULL;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington isc_boolean_t partial = ISC_FALSE;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington REQUIRE(zonep != NULL && *zonep == NULL);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington REQUIRE(dbp != NULL && *dbp == NULL);

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /*%

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews ztoptions = ((options & DNS_GETDB_NOEXACT) != 0) ?

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews DNS_ZTFIND_NOEXACT : 0;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews result = dns_zt_find(client->view->zonetable, name, ztoptions, NULL,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews &zone);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson if (result == DNS_R_PARTIALMATCH)

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson partial = ISC_TRUE;

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (result == ISC_R_SUCCESS || result == DNS_R_PARTIALMATCH)

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley result = dns_zone_getdb(zone, &db);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

5bfea18ff8bfa907b86ba7d17fb38b9cf493ae97Bob Halley if (result != ISC_R_SUCCESS)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley goto fail;

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley result = query_validatezonedb(client, name, qtype, options, zone, db,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley versionp);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews if (result != ISC_R_SUCCESS)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley goto fail;

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /* Transfer ownership. */

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews *zonep = zone;

c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews *dbp = db;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (partial && (options & DNS_GETDB_PARTIAL) != 0)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (DNS_R_PARTIALMATCH);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews return (ISC_R_SUCCESS);

2284b84d74cdfd62ecb962feb850de981bbc2196Evan Hunt

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley fail:

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (zone != NULL)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_zone_detach(&zone);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (db != NULL)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_db_detach(&db);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley return (result);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley}

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halleystatic void

0dae46cbc7f31e9ca9700016ae486f709b940bafAndreas Gustafssonrpz_log_rewrite(ns_client_t *client, const char *disabled,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_rpz_policy_t policy, dns_rpz_type_t type,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_t *rpz_qname) {

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley char qname_buf[DNS_NAME_FORMATSIZE];

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley char rpz_qname_buf[DNS_NAME_FORMATSIZE];

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (!isc_log_wouldlog(ns_g_lctx, DNS_RPZ_INFO_LEVEL))

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley return;

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_format(client->query.qname, qname_buf, sizeof(qname_buf));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_format(rpz_qname, rpz_qname_buf, sizeof(rpz_qname_buf));

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley ns_client_log(client, DNS_LOGCATEGORY_RPZ, NS_LOGMODULE_QUERY,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews DNS_RPZ_INFO_LEVEL, "%srpz %s %s rewrite %s via %s",

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews disabled,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_rpz_type2str(type), dns_rpz_policy2str(policy),

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews qname_buf, rpz_qname_buf);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews}

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halleystatic void

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halleyrpz_log_fail(ns_client_t *client, int level,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_rpz_type_t rpz_type, dns_name_t *name,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley const char *str, isc_result_t result)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews{

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson char namebuf1[DNS_NAME_FORMATSIZE];

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson char namebuf2[DNS_NAME_FORMATSIZE];

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (!isc_log_wouldlog(ns_g_lctx, level))

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews return;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_format(client->query.qname, namebuf1, sizeof(namebuf1));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_format(name, namebuf2, sizeof(namebuf2));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley ns_client_log(client, NS_LOGCATEGORY_QUERY_EERRORS,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley NS_LOGMODULE_QUERY, level,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley "rpz %s rewrite %s via %s %sfailed: %s",

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_rpz_type2str(rpz_type),

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley namebuf1, namebuf2, str, isc_result_totext(result));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley}

c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrewsstatic isc_result_t

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsrpz_getdb(ns_client_t *client, dns_rpz_type_t rpz_type, dns_name_t *rpz_qname,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_zone_t **zonep, dns_db_t **dbp, dns_dbversion_t **versionp)

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews{

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews char namebuf1[DNS_NAME_FORMATSIZE];

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews char namebuf2[DNS_NAME_FORMATSIZE];

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_dbversion_t *rpz_version = NULL;

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews isc_result_t result;

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews result = query_getzonedb(client, rpz_qname, dns_rdatatype_any,

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews DNS_GETDB_IGNOREACL, zonep, dbp, &rpz_version);

f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews if (result == ISC_R_SUCCESS) {

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews if (isc_log_wouldlog(ns_g_lctx, DNS_RPZ_DEBUG_LEVEL2)) {

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews dns_name_format(client->query.qname, namebuf1,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley sizeof(namebuf1));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_name_format(rpz_qname, namebuf2, sizeof(namebuf2));

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley ns_client_log(client, DNS_LOGCATEGORY_RPZ,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley NS_LOGMODULE_QUERY, DNS_RPZ_DEBUG_LEVEL2,

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff "try rpz %s rewrite %s via %s",

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_rpz_type2str(rpz_type),

9b6fd12d8e53afbfc31022c881c16d2ccbe5fc51Bob Halley namebuf1, namebuf2);

9b6fd12d8e53afbfc31022c881c16d2ccbe5fc51Bob Halley }

9b6fd12d8e53afbfc31022c881c16d2ccbe5fc51Bob Halley *versionp = rpz_version;

b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews return (ISC_R_SUCCESS);

9b6fd12d8e53afbfc31022c881c16d2ccbe5fc51Bob Halley }

9b6fd12d8e53afbfc31022c881c16d2ccbe5fc51Bob Halley rpz_log_fail(client, DNS_RPZ_ERROR_LEVEL, rpz_type, rpz_qname,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley "query_getzonedb() ", result);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley return (result);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley}

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halleystatic inline isc_result_t

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graffquery_getcachedb(ns_client_t *client, dns_name_t *name, dns_rdatatype_t qtype,

e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt dns_db_t **dbp, unsigned int options)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley{

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews isc_result_t result;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews isc_boolean_t check_acl;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_db_t *db = NULL;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews REQUIRE(dbp != NULL && *dbp == NULL);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*%

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (!USECACHE(client))

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley return (DNS_R_REFUSED);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley dns_db_attach(client->view->cachedb, &db);

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if ((client->query.attributes & NS_QUERYATTR_CACHEACLOKVALID) != 0) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews /*

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley check_acl = ISC_FALSE;

0dae46cbc7f31e9ca9700016ae486f709b940bafAndreas Gustafsson if ((client->query.attributes & NS_QUERYATTR_CACHEACLOK) == 0)

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley goto refuse;

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley } else {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews /*

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews check_acl = ISC_TRUE;

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson }

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (check_acl) {

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews isc_boolean_t log = ISC_TF((options & DNS_GETDB_NOLOG) == 0);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews char msg[NS_CLIENT_ACLMSGSIZE("query (cache)")];

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley result = ns_client_checkaclsilent(client, NULL,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley client->view->cacheacl,

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews ISC_TRUE);

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson if (result == ISC_R_SUCCESS) {

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley /*

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley client->query.attributes |=

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley NS_QUERYATTR_CACHEACLOK;

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley if (log && isc_log_wouldlog(ns_g_lctx,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley ISC_LOG_DEBUG(3)))

c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews {

c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews ns_client_aclmsg("query (cache)", name, qtype,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client->view->rdclass,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews msg, sizeof(msg));

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ns_client_log(client,

e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt DNS_LOGCATEGORY_SECURITY,

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson NS_LOGMODULE_QUERY,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley ISC_LOG_DEBUG(3),

368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews "%s approved", msg);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews }

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews } else if (log) {

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews ns_client_aclmsg("query (cache)", name, qtype,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews client->view->rdclass, msg,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews sizeof(msg));

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews ns_client_log(client, DNS_LOGCATEGORY_SECURITY,

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews NS_LOGMODULE_QUERY, ISC_LOG_INFO,

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley "%s denied", msg);

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson }

da41917c3f882b6e12c7101b653926830a396b81Andreas Gustafsson /*

926cde044f4334f7afd9d1123ab0f01ec93e7e72Bob Halley client->query.attributes |= NS_QUERYATTR_CACHEACLOKVALID;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (result != ISC_R_SUCCESS)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington goto refuse;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington }

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* Approved. */

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* Transfer ownership. */

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington *dbp = db;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington return (ISC_R_SUCCESS);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington refuse:

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington result = DNS_R_REFUSED;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington if (db != NULL)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dns_db_detach(&db);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington return (result);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington}

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrewsstatic inline isc_result_t

65085946d4f92481699678e276e3ced04bcfdafbMark Andrewsquery_getdb(ns_client_t *client, dns_name_t *name, dns_rdatatype_t qtype,

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews unsigned int options, dns_zone_t **zonep, dns_db_t **dbp,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dns_dbversion_t **versionp, isc_boolean_t *is_zonep)

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington{

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington isc_result_t result;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington isc_result_t tresult;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington unsigned int namelabels;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington unsigned int zonelabels;

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews dns_zone_t *zone = NULL;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_db_t *tdbp;

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews REQUIRE(zonep != NULL && *zonep == NULL);

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington tdbp = NULL;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* Calculate how many labels are in name. */

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington namelabels = dns_name_countlabels(name);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington zonelabels = 0;

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* Try to find name in bind's standard database. */

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington result = query_getzonedb(client, name, qtype, options, &zone,

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington dbp, versionp);

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington

88b9c12a3cbafc3bebedf50a731bec9ce2f99a13Brian Wellington /* See how many labels are in the zone's name. */

6434457b0b380aa43d7159299776959a00269d65Michael Graff if (result == ISC_R_SUCCESS && zone != NULL)

6434457b0b380aa43d7159299776959a00269d65Michael Graff zonelabels = dns_name_countlabels(dns_zone_getorigin(zone));

6434457b0b380aa43d7159299776959a00269d65Michael Graff

6434457b0b380aa43d7159299776959a00269d65Michael Graff /*

6434457b0b380aa43d7159299776959a00269d65Michael Graff if (zonelabels < namelabels &&

6434457b0b380aa43d7159299776959a00269d65Michael Graff !ISC_LIST_EMPTY(client->view->dlz_searched))

6434457b0b380aa43d7159299776959a00269d65Michael Graff {

6434457b0b380aa43d7159299776959a00269d65Michael Graff dns_clientinfomethods_t cm;

6434457b0b380aa43d7159299776959a00269d65Michael Graff dns_clientinfo_t ci;

6434457b0b380aa43d7159299776959a00269d65Michael Graff

6434457b0b380aa43d7159299776959a00269d65Michael Graff dns_clientinfomethods_init(&cm, ns_client_sourceip);

6434457b0b380aa43d7159299776959a00269d65Michael Graff dns_clientinfo_init(&ci, client);

6434457b0b380aa43d7159299776959a00269d65Michael Graff

6434457b0b380aa43d7159299776959a00269d65Michael Graff tresult = dns_view_searchdlz(client->view, name,

6434457b0b380aa43d7159299776959a00269d65Michael Graff zonelabels, &cm, &ci, &tdbp);

6434457b0b380aa43d7159299776959a00269d65Michael Graff /* If we successful, we found a better match. */

6434457b0b380aa43d7159299776959a00269d65Michael Graff if (tresult == ISC_R_SUCCESS) {

6434457b0b380aa43d7159299776959a00269d65Michael Graff /*

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews if (zone != NULL)

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews dns_zone_detach(&zone);

65085946d4f92481699678e276e3ced04bcfdafbMark Andrews

d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews /*

6434457b0b380aa43d7159299776959a00269d65Michael Graff if (*dbp != NULL)

6434457b0b380aa43d7159299776959a00269d65Michael Graff dns_db_detach(dbp);

6434457b0b380aa43d7159299776959a00269d65Michael Graff

6434457b0b380aa43d7159299776959a00269d65Michael Graff /*

6434457b0b380aa43d7159299776959a00269d65Michael Graff *versionp = NULL;

/*

dns_db_currentversion(tdbp, versionp);

/*

*dbp = tdbp;

/*

zone = NULL;

result = tresult;

}

}

/* If successful, Transfer ownership of zone. */

if (result == ISC_R_SUCCESS) {

*zonep = zone;

/*

*is_zonep = ISC_TRUE;

} else if (result == ISC_R_NOTFOUND) {

result = query_getcachedb(client, name, qtype, dbp, options);

*is_zonep = ISC_FALSE;

}

return (result);

}

static inline isc_boolean_t

query_isduplicate(ns_client_t *client, dns_name_t *name,

dns_rdatatype_t type, dns_name_t **mnamep)

{

dns_section_t section;

dns_name_t *mname = NULL;

isc_result_t result;

CTRACE("query_isduplicate");

for (section = DNS_SECTION_ANSWER;

section <= DNS_SECTION_ADDITIONAL;

section++) {

result = dns_message_findname(client->message, section,

name, type, 0, &mname, NULL);

if (result == ISC_R_SUCCESS) {

/*

CTRACE("query_isduplicate: true: done");

return (ISC_TRUE);

} else if (result == DNS_R_NXRRSET) {

/*

if (section == DNS_SECTION_ADDITIONAL)

break;

} else

RUNTIME_CHECK(result == DNS_R_NXDOMAIN);

mname = NULL;

}

if (mnamep != NULL)

*mnamep = mname;

CTRACE("query_isduplicate: false: done");

return (ISC_FALSE);

}

static void

update_cachestats(dns_cache_t *cache, isc_result_t result) {

isc_stats_t *cachestats = NULL;

if (cache == NULL)

return;

isc_stats_attach(dns_cache_getstats(cache), &cachestats);

switch (result) {

case ISC_R_SUCCESS:

case DNS_R_NCACHENXDOMAIN:

case DNS_R_NCACHENXRRSET:

case DNS_R_CNAME:

case DNS_R_DNAME:

case DNS_R_GLUE:

case DNS_R_ZONECUT:

isc_stats_increment(cachestats,

dns_cachestatscounter_queryhits);

break;

default:

isc_stats_increment(cachestats,

dns_cachestatscounter_querymisses);

}

isc_stats_detach(&cachestats);

}

static isc_result_t

query_addadditional(void *arg, dns_name_t *name, dns_rdatatype_t qtype) {

ns_client_t *client = arg;

isc_result_t result, eresult;

dns_dbnode_t *node;

dns_db_t *db;

dns_name_t *fname, *mname;

dns_rdataset_t *rdataset, *sigrdataset, *trdataset;

isc_buffer_t *dbuf;

isc_buffer_t b;

dns_dbversion_t *version;

isc_boolean_t added_something, need_addname;

dns_zone_t *zone;

dns_rdatatype_t type;

dns_clientinfomethods_t cm;

dns_clientinfo_t ci;

REQUIRE(NS_CLIENT_VALID(client));

REQUIRE(qtype != dns_rdatatype_any);

if (!WANTDNSSEC(client) && dns_rdatatype_isdnssec(qtype))

return (ISC_R_SUCCESS);

CTRACE("query_addadditional");

/*

eresult = ISC_R_SUCCESS;

fname = NULL;

rdataset = NULL;

sigrdataset = NULL;

trdataset = NULL;

db = NULL;

version = NULL;

node = NULL;

added_something = ISC_FALSE;

need_addname = ISC_FALSE;

zone = NULL;

dns_clientinfomethods_init(&cm, ns_client_sourceip);

dns_clientinfo_init(&ci, client);

/*

if (qtype == dns_rdatatype_a)

type = dns_rdatatype_any;

else

type = qtype;

/*

dbuf = query_getnamebuf(client);

if (dbuf == NULL)

goto cleanup;

fname = query_newname(client, dbuf, &b);

rdataset = query_newrdataset(client);

if (fname == NULL || rdataset == NULL)

goto cleanup;

if (WANTDNSSEC(client)) {

sigrdataset = query_newrdataset(client);

if (sigrdataset == NULL)

goto cleanup;

}

/*

result = query_getzonedb(client, name, qtype, DNS_GETDB_NOLOG,

&zone, &db, &version);

if (result != ISC_R_SUCCESS)

goto try_cache;

CTRACE("query_addadditional: db_find");

/*

node = NULL;

result = dns_db_findext(db, name, version, type,

client->query.dboptions,

client->now, &node, fname, &cm, &ci,

rdataset, sigrdataset);

if (result == ISC_R_SUCCESS) {

if (sigrdataset != NULL && !dns_db_issecure(db) &&

dns_rdataset_isassociated(sigrdataset))

dns_rdataset_disassociate(sigrdataset);

goto found;

}

if (dns_rdataset_isassociated(rdataset))

dns_rdataset_disassociate(rdataset);

if (sigrdataset != NULL && dns_rdataset_isassociated(sigrdataset))

dns_rdataset_disassociate(sigrdataset);

if (node != NULL)

dns_db_detachnode(db, &node);

version = NULL;

dns_db_detach(&db);

/*

try_cache:

result = query_getcachedb(client, name, qtype, &db, DNS_GETDB_NOLOG);