d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington

d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington#include <config.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <isc/base32.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <isc/buffer.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <isc/hex.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <isc/iterated_hash.h>

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#include <isc/string.h>

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#include <isc/util.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#include <dst/dst.h>

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#include <dns/db.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/zone.h>

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#include <dns/compress.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/dbiterator.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/diff.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/fixedname.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/nsec3.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/rdata.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/rdatalist.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/rdataset.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/rdatasetiter.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/rdatastruct.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#include <dns/result.h>

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#define CHECK(x) do { \

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = (x); \

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS) \

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure; \

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence } while (0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#define OPTOUT(x) (((x) & DNS_NSEC3FLAG_OPTOUT) != 0)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#define CREATE(x) (((x) & DNS_NSEC3FLAG_CREATE) != 0)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#define INITIAL(x) (((x) & DNS_NSEC3FLAG_INITIAL) != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#define REMOVE(x) (((x) & DNS_NSEC3FLAG_REMOVE) != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic void

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonset_bit(unsigned char *array, unsigned int index, unsigned int bit) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int shift, mask;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington shift = 7 - (index % 8);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington mask = 1 << shift;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (bit != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington array[index / 8] |= mask;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington array[index / 8] &= (~mask & 0xFF);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic unsigned int

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonbit_isset(unsigned char *array, unsigned int index) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int byte, shift, mask;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington byte = array[index / 8];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington shift = 7 - (index % 8);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington mask = 1 << shift;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return ((byte & mask) != 0);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_buildrdata(dns_db_t *db, dns_dbversion_t *version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbnode_t *node, unsigned int hashalg,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int flags, unsigned int iterations,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const unsigned char *salt, size_t salt_length,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const unsigned char *nexthash, size_t hash_length,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char *buffer, dns_rdata_t *rdata)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_region_t r;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson unsigned int i, window;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington int octet;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t found;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t found_ns;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t need_rrsig;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char *nsec_bits, *bm;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int max_type;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatasetiter_t *rdsiter;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char *p;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington REQUIRE(salt_length < 256U);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington REQUIRE(hash_length < 256U);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(flags <= 0xffU);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(hashalg <= 0xffU);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(iterations <= 0xffffU);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence switch (hashalg) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence case dns_hash_sha1:

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(hash_length == ISC_SHA1_DIGESTLENGTH);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence memset(buffer, 0, DNS_NSEC3_BUFFERSIZE);

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson p = buffer;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson *p++ = hashalg;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *p++ = flags;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington *p++ = iterations >> 8;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *p++ = iterations;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *p++ = salt_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memcpy(p, salt, salt_length);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington p += salt_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *p++ = hash_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memcpy(p, nexthash, hash_length);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington p += hash_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington r.length = p - buffer;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington r.base = buffer;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington bm = r.base + r.length + 512;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec_bits = r.base + r.length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington max_type = 0;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (node == NULL)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto collapse_bitmap;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdsiter = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_allrdatasets(db, node, version, 0, &rdsiter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington found = found_ns = need_rrsig = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdatasetiter_first(rdsiter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdatasetiter_next(rdsiter))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatasetiter_current(rdsiter, &rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdataset.type != dns_rdatatype_nsec &&

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdataset.type != dns_rdatatype_nsec3 &&

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdataset.type != dns_rdatatype_rrsig) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdataset.type > max_type)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington max_type = rdataset.type;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington set_bit(bm, rdataset.type, 1);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdataset.type == dns_rdatatype_soa ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdataset.type == dns_rdatatype_ds)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington need_rrsig = ISC_TRUE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington else if (rdataset.type == dns_rdatatype_ns)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington found_ns = ISC_TRUE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington found = ISC_TRUE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if ((found && !found_ns) || need_rrsig) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (dns_rdatatype_rrsig > max_type)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington max_type = dns_rdatatype_rrsig;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington set_bit(bm, dns_rdatatype_rrsig, 1);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (bit_isset(bm, dns_rdatatype_ns) &&

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington ! bit_isset(bm, dns_rdatatype_soa)) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence for (i = 0; i <= max_type; i++) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (bit_isset(bm, i) &&

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington ! dns_rdatatype_iszonecutauth((dns_rdatatype_t)i))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington set_bit(bm, i, 0);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatasetiter_destroy(&rdsiter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington collapse_bitmap:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (window = 0; window < 256; window++) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (window * 256 > max_type)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington break;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (octet = 31; octet >= 0; octet--)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (bm[window * 32 + octet] != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington break;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (octet < 0)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence continue;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsec_bits[0] = window;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsec_bits[1] = octet + 1;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memmove(&nsec_bits[2], &bm[window * 32], octet + 1);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec_bits += 3 + octet;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington r.length = nsec_bits - r.base;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(r.length <= DNS_NSEC3_BUFFERSIZE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_fromregion(rdata, dns_db_class(db), dns_rdatatype_nsec3, &r);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_R_SUCCESS);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_typepresent(dns_rdata_t *rdata, dns_rdatatype_t type) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_nsec3_t nsec3;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t present;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int i, len, window;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington REQUIRE(rdata != NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington REQUIRE(rdata->type == dns_rdatatype_nsec3);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /* This should never fail */

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdata_tostruct(rdata, &nsec3, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(result == ISC_R_SUCCESS);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington present = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (i = 0; i < nsec3.len; i += len) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(i + 2 <= nsec3.len);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington window = nsec3.typebits[i];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington len = nsec3.typebits[i + 1];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(len > 0 && len <= 32);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington i += 2;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(i + len <= nsec3.len);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (window * 256 > type)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington break;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if ((window + 1) * 256 <= type)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (type < (window * 256) + len * 8)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington present = ISC_TF(bit_isset(&nsec3.typebits[i],

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington type % 256));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington break;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_freestruct(&nsec3);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (present);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_hashname(dns_fixedname_t *result,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char rethash[NSEC3_MAX_HASH_LENGTH],

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington size_t *hash_length, dns_name_t *name, dns_name_t *origin,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_hash_t hashalg, unsigned int iterations,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const unsigned char *salt, size_t saltlength)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char hash[NSEC3_MAX_HASH_LENGTH];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char nametext[DNS_NAME_FORMATSIZE];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_fixedname_t fixed;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *downcased;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_buffer_t namebuffer;

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington isc_region_t region;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington size_t len;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rethash == NULL)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rethash = hash;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memset(rethash, 0, NSEC3_MAX_HASH_LENGTH);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_fixedname_init(&fixed);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington downcased = dns_fixedname_name(&fixed);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_downcase(name, downcased, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /* hash the node name */

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington len = isc_iterated_hash(rethash, hashalg, iterations, salt, saltlength,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington downcased->ndata, downcased->length);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (len == 0U)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (DNS_R_BADALG);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (hash_length != NULL)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *hash_length = len;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /* convert the hash to base32hex */

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington region.base = rethash;

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington region.length = len;

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington isc_buffer_init(&namebuffer, nametext, sizeof nametext);

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington isc_base32hex_totext(&region, 1, "", &namebuffer);

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington /* convert the hex to a domain name */

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington dns_fixedname_init(result);

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington return (dns_name_fromtext(dns_fixedname_name(result), &namebuffer,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington origin, 0, NULL));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonunsigned int

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_hashlength(dns_hash_t hash) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington switch (hash) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington case dns_hash_sha1: return(ISC_SHA1_DIGESTLENGTH);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (0);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_supportedhash(dns_hash_t hash) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington switch (hash) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington case dns_hash_sha1: return (ISC_TRUE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_FALSE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellingtonstatic isc_result_t

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellingtondo_one_tuple(dns_difftuple_t **tuple, dns_db_t *db, dns_dbversion_t *ver,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_diff_t *diff)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_diff_t temp_diff;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_diff_init(diff->mctx, &temp_diff);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington temp_diff.resign = diff->resign;

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington ISC_LIST_APPEND(temp_diff.tuples, *tuple, link);

091329e690b20755aa80b86cc7389d25c5d32c9bBrian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_diff_apply(&temp_diff, db, ver);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington ISC_LIST_UNLINK(temp_diff.tuples, *tuple, link);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington if (result != ISC_R_SUCCESS) {

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington dns_difftuple_free(tuple);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington return (result);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington }

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington /*

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington dns_diff_appendminimal(diff, tuple);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington /*

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington return (ISC_R_SUCCESS);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington}

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellingtonstatic isc_result_t

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellingtonname_exists(dns_db_t *db, dns_dbversion_t *version, dns_name_t *name,

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington isc_boolean_t *exists)

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington{

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington isc_result_t result;

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington dns_dbnode_t *node = NULL;

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington dns_rdatasetiter_t *iter = NULL;

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington result = dns_db_findnode(db, name, ISC_FALSE, &node);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington if (result == ISC_R_NOTFOUND) {

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington *exists = ISC_FALSE;

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington return (ISC_R_SUCCESS);

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington }

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington if (result != ISC_R_SUCCESS)

c2da4f9d8a153ffeb2b659541130abef2d586789Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_allrdatasets(db, node, version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington (isc_stdtime_t) 0, &iter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto cleanup_node;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdatasetiter_first(iter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_SUCCESS) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *exists = ISC_TRUE;

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington } else if (result == ISC_R_NOMORE) {

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington *exists = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington } else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *exists = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatasetiter_destroy(&iter);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington cleanup_node:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_db_detachnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic isc_boolean_t

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonmatch_nsec3param(const dns_rdata_nsec3_t *nsec3,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const dns_rdata_nsec3param_t *nsec3param)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (nsec3->hash == nsec3param->hash &&

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec3->iterations == nsec3param->iterations &&

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington nsec3->salt_length == nsec3param->salt_length &&

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington !memcmp(nsec3->salt, nsec3param->salt, nsec3->salt_length))

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington return (ISC_TRUE);

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington return (ISC_FALSE);

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington}

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellington

e4cd5a1e5d0358abeee7618b02b4592c055d957fBrian Wellingtonstatic isc_result_t

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondelete(dns_db_t *db, dns_dbversion_t *version, dns_name_t *name,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const dns_rdata_nsec3param_t *nsec3param, dns_diff_t *diff)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbnode_t *node = NULL ;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_difftuple_t *tuple = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_nsec3_t nsec3;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findnsec3node(db, name, ISC_FALSE, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOTFOUND)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_R_SUCCESS);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&rdataset);

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley result = dns_db_findrdataset(db, node, version, dns_rdatatype_nsec3, 0,

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley (isc_stdtime_t) 0, &rdataset, NULL);

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOTFOUND) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

02d8e643ea6679beff181a2b2b3946b8fe014fecAndreas Gustafsson goto cleanup_node;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto cleanup_node;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley for (result = dns_rdataset_first(&rdataset);

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley result == ISC_R_SUCCESS;

3e9b51fc7b2d12c88298f5b777f9075feb52f071Bob Halley result = dns_rdataset_next(&rdataset))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_rdata_tostruct(&rdata, &nsec3, NULL));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!match_nsec3param(&nsec3, nsec3param))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

02d8e643ea6679beff181a2b2b3946b8fe014fecAndreas Gustafsson

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_difftuple_create(diff->mctx, DNS_DIFFOP_DEL, name,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdataset.ttl, &rdata, &tuple);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = do_one_tuple(&tuple, db, version, diff);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington failure:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington cleanup_node:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_db_detachnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic isc_boolean_t

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonbetter_param(dns_rdataset_t *nsec3paramset, dns_rdata_t *param) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (REMOVE(param->data[1]))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_TRUE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_clone(nsec3paramset, &rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdataset_next(&rdataset)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char buf[DNS_NSEC3PARAM_BUFFERSIZE];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdataset.type != dns_rdatatype_nsec3param) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t tmprdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &tmprdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!dns_nsec3param_fromprivate(&tmprdata, &rdata,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington buf, sizeof(buf)))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington } else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdata.length != param->length)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdata.data[0] != param->data[0] ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington REMOVE(rdata.data[1]) ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdata.data[2] != param->data[2] ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdata.data[3] != param->data[3] ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdata.data[4] != param->data[4] ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memcmp(&rdata.data[5], &param->data[5], param->data[4]))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (CREATE(rdata.data[1]) && !CREATE(param->data[1])) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_TRUE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (ISC_FALSE);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic isc_result_t

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonfind_nsec3(dns_rdata_nsec3_t *nsec3, dns_rdataset_t *rdataset,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington const dns_rdata_nsec3param_t *nsec3param)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdataset_next(rdataset)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_rdata_tostruct(&rdata, nsec3, NULL));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_reset(&rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (match_nsec3param(nsec3, nsec3param))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington break;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington failure:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_addnsec3(dns_db_t *db, dns_dbversion_t *version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *name, const dns_rdata_nsec3param_t *nsec3param,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_ttl_t nsecttl, isc_boolean_t unsecure, dns_diff_t *diff)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbiterator_t *dbit = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbnode_t *node = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbnode_t *newnode = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_difftuple_t *tuple = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_fixedname_t fixed;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_fixedname_t fprev;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_hash_t hash;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *hashname;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *origin;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *prev;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t empty;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_nsec3_t nsec3;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington int pass;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t exists = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t maybe_remove_unsecure = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_uint8_t flags;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_buffer_t buffer;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char *old_next;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char *salt;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char nexthash[NSEC3_MAX_HASH_LENGTH];

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson unsigned char nsec3buf[DNS_NSEC3_BUFFERSIZE];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int iterations;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int labels;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington size_t next_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int old_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned int salt_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_fixedname_init(&fixed);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington hashname = dns_fixedname_name(&fixed);

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson dns_fixedname_init(&fprev);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington prev = dns_fixedname_name(&fprev);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington origin = dns_db_origin(db);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington hash = nsec3param->hash;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington iterations = nsec3param->iterations;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington salt_length = nsec3param->salt_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington salt = nsec3param->salt;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington flags = nsec3param->flags & DNS_NSEC3FLAG_OPTOUT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington next_length = sizeof(nexthash);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_nsec3_hashname(&fixed, nexthash, &next_length,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington name, origin, hash, iterations,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington salt, salt_length));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_db_findnsec3node(db, hashname, ISC_TRUE, &newnode));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_db_createiterator(db, DNS_DB_NSEC3ONLY, &dbit));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_dbiterator_seek(dbit, hashname));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_dbiterator_pause(dbit));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findrdataset(db, newnode, version, dns_rdatatype_nsec3,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington 0, (isc_stdtime_t) 0, &rdataset, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_SUCCESS) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = find_nsec3(&nsec3, &rdataset, nsec3param);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_SUCCESS) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!CREATE(nsec3param->flags))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington flags = nsec3.flags;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington next_length = nsec3.next_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(next_length <= sizeof(nexthash));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memcpy(nexthash, nsec3.next, next_length);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!unsecure)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto addnsec3;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington else if (CREATE(nsec3param->flags) && OPTOUT(flags)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_nsec3_delnsec3(db, version, name,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec3param, diff);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington } else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington maybe_remove_unsecure = ISC_TRUE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington } else {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington pass = 0;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington do {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_dbiterator_prev(dbit);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOMORE) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington pass++;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_dbiterator_last(dbit));

6e0e723b2554ba1c4af8b79733f54bf2692cdecfAndreas Gustafsson }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_dbiterator_current(dbit, &node, prev));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_dbiterator_pause(dbit));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findrdataset(db, node, version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatatype_nsec3, 0,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington (isc_stdtime_t) 0, &rdataset,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_db_detachnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = find_nsec3(&nsec3, &rdataset, nsec3param);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOMORE) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (maybe_remove_unsecure) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (OPTOUT(nsec3.flags)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_nsec3_delnsec3(db, version, name,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec3param, diff);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto addnsec3;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington } else {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (OPTOUT(nsec3.flags) && unsecure) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington old_next = nsec3.next;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington old_length = nsec3.next_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(delete(db, version, prev, nsec3param, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec3.next = nexthash;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsec3.next_length = next_length;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_buffer_init(&buffer, nsec3buf, sizeof(nsec3buf));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_rdata_fromstruct(&rdata, rdataset.rdclass,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatatype_nsec3, &nsec3,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington &buffer));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD, prev,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence rdataset.ttl, &rdata, &tuple));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(do_one_tuple(&tuple, db, version, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(old_length <= sizeof(nexthash));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence memcpy(nexthash, old_next, old_length);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (!CREATE(nsec3param->flags))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence flags = nsec3.flags;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence } while (pass < 2);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence addnsec3:

11c4f6b687564cdda8a0a38745e30a12e874084aDavid Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_db_findnode(db, name, ISC_FALSE, &node));

11c4f6b687564cdda8a0a38745e30a12e874084aDavid Lawrence CHECK(dns_nsec3_buildrdata(db, version, node, hash, flags, iterations,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence salt, salt_length, nexthash, next_length,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsec3buf, &rdata));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(delete(db, version, hashname, nsec3param, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD,

0eace215bd758e347767c63c13504520e855b94aAndreas Gustafsson hashname, nsecttl, &rdata, &tuple));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(do_one_tuple(&tuple, db, version, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(tuple == NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &newnode);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_init(&empty, NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_clone(name, &empty);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence do {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence labels = dns_name_countlabels(&empty) - 1;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (labels <= dns_name_countlabels(origin))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_getlabelsequence(&empty, 1, labels, &empty);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(name_exists(db, version, &empty, &exists));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (exists)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_nsec3_hashname(&fixed, nexthash, &next_length,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &empty, origin, hash, iterations,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence salt, salt_length));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_db_findnsec3node(db, hashname, ISC_TRUE, &newnode));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_findrdataset(db, newnode, version,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_nsec3, 0,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence (isc_stdtime_t) 0, &rdataset,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_SUCCESS) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = find_nsec3(&nsec3, &rdataset, nsec3param);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_SUCCESS) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &newnode);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_NOMORE)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence goto failure;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_dbiterator_seek(dbit, hashname));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence pass = 0;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence do {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_dbiterator_prev(dbit);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOMORE) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence pass++;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_dbiterator_last(dbit));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_dbiterator_current(dbit, &node, prev));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_dbiterator_pause(dbit));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_findrdataset(db, node, version,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_nsec3, 0,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence (isc_stdtime_t) 0,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &rdataset, NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence continue;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = find_nsec3(&nsec3, &rdataset, nsec3param);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOMORE) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence continue;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence goto failure;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence old_next = nsec3.next;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence old_length = nsec3.next_length;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(delete(db, version, prev, nsec3param, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsec3.next = nexthash;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsec3.next_length = next_length;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_init(&buffer, nsec3buf,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence sizeof(nsec3buf));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_rdata_fromstruct(&rdata, rdataset.rdclass,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_nsec3, &nsec3,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &buffer));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence prev, rdataset.ttl, &rdata,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &tuple));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(do_one_tuple(&tuple, db, version, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(old_length <= sizeof(nexthash));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence memcpy(nexthash, old_next, old_length);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (!CREATE(nsec3param->flags))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence flags = nsec3.flags;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence } while (pass < 2);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(pass < 2);

4a0b9bb051224b1b98667cbe586afa6d61918564Andreas Gustafsson

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_nsec3_buildrdata(db, version, NULL, hash, flags,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence iterations, salt, salt_length,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nexthash, next_length, nsec3buf,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &rdata));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(delete(db, version, hashname, nsec3param, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence hashname, nsecttl, &rdata, &tuple));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(do_one_tuple(&tuple, db, version, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(tuple == NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &newnode);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence } while (1);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOMORE)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence failure:

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (dbit != NULL)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_dbiterator_destroy(&dbit);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (dns_rdataset_isassociated(&rdataset))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (node != NULL)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (newnode != NULL)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &newnode);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence}

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrencedns_nsec3_addnsec3s(dns_db_t *db, dns_dbversion_t *version,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_t *name, dns_ttl_t nsecttl,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_boolean_t unsecure, dns_diff_t *diff)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence{

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_dbnode_t *node = NULL;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_nsec3param_t nsec3param;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_t rdataset;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_result_t result;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_init(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_getoriginnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_findrdataset(db, node, version,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_nsec3param, 0, 0,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &rdataset, NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOTFOUND)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (ISC_R_SUCCESS);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence for (result = dns_rdataset_first(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result == ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_rdataset_next(&rdataset)) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_t rdata = DNS_RDATA_INIT;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_current(&rdataset, &rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_rdata_tostruct(&rdata, &nsec3param, NULL));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (nsec3param.flags != 0)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence continue;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_nsec3_addnsec3(db, version, name, &nsec3param,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence nsecttl, unsecure, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOMORE)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence failure:

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (dns_rdataset_isassociated(&rdataset))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (node != NULL)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence}

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrencedns_nsec3param_fromprivate(dns_rdata_t *src, dns_rdata_t *target,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence unsigned char *buf, size_t buflen)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence{

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_decompress_t dctx;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_result_t result;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_t buf1;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_t buf2;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (src->length < 1 || src->data[0] != 0)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (ISC_FALSE);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_init(&buf1, src->data + 1, src->length - 1);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_add(&buf1, src->length - 1);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_setactive(&buf1, src->length - 1);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_buffer_init(&buf2, buf, buflen);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_decompress_init(&dctx, -1, DNS_DECOMPRESS_NONE);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_rdata_fromwire(target, src->rdclass,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_nsec3param,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence &buf1, &dctx, 0, &buf2);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_decompress_invalidate(&dctx);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (ISC_TF(result == ISC_R_SUCCESS));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence}

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrencedns_nsec3param_toprivate(dns_rdata_t *src, dns_rdata_t *target,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_t privatetype,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence unsigned char *buf, size_t buflen)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence{

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(buflen >= src->length + 1);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence REQUIRE(DNS_RDATA_INITIALIZED(target));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence memcpy(buf + 1, src->data, src->length);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence buf[0] = 0;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence target->data = buf;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence target->length = src->length + 1;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington target->type = privatetype;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson target->rdclass = src->rdclass;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson target->flags = 0;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington ISC_LINK_INIT(target, link);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#ifdef BIND9

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic isc_result_t

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrencerr_exists(dns_db_t *db, dns_dbversion_t *ver, dns_name_t *name,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence const dns_rdata_t *rdata, isc_boolean_t *flag)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_dbnode_t *node = NULL;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson dns_rdataset_init(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (rdata->type == dns_rdatatype_nsec3)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_db_findnsec3node(db, name, ISC_FALSE, &node));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington else

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_db_findnode(db, name, ISC_FALSE, &node));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findrdataset(db, node, ver, rdata->type, 0,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington (isc_stdtime_t) 0, &rdataset, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOTFOUND) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington *flag = ISC_FALSE;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_rdataset_next(&rdataset)) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_t myrdata = DNS_RDATA_INIT;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_current(&rdataset, &myrdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (!dns_rdata_casecompare(&myrdata, rdata))

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence break;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_disassociate(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_SUCCESS) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence *flag = ISC_TRUE;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence } else if (result == ISC_R_NOMORE) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence *flag = ISC_FALSE;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence failure:

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (node != NULL)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_db_detachnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence}

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#endif

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence#ifdef BIND9

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrencedns_nsec3param_deletechains(dns_db_t *db, dns_dbversion_t *ver,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_zone_t *zone, dns_diff_t *diff)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence{

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_dbnode_t *node = NULL;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_difftuple_t *tuple = NULL;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_t next;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_t rdata = DNS_RDATA_INIT;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_t rdataset;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_boolean_t flag;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence isc_result_t result = ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence unsigned char buf[DNS_NSEC3PARAM_BUFFERSIZE + 1];

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_t *origin = dns_zone_getorigin(zone);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdatatype_t privatetype = dns_zone_getprivatetype(zone);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_name_init(&next, NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdataset_init(&rdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_getoriginnode(db, &node);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence return (result);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_findrdataset(db, node, ver, dns_rdatatype_nsec3param,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence 0, (isc_stdtime_t) 0, &rdataset, NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result == ISC_R_NOTFOUND)

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence goto try_private;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdataset_next(&rdataset)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t private = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_DEL, origin,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington rdataset.ttl, &rdata, &tuple));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(do_one_tuple(&tuple, db, ver, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(tuple == NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_nsec3param_toprivate(&rdata, &private, privatetype,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington buf, sizeof(buf));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington buf[2] = DNS_NSEC3FLAG_REMOVE | DNS_NSEC3FLAG_NONSEC;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(rr_exists(db, ver, origin, &private, &flag));

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!flag) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington origin, 0, &private,

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson &tuple));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(do_one_tuple(&tuple, db, ver, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(tuple == NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington try_private:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (privatetype == 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto success;

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson result = dns_db_findrdataset(db, node, ver, privatetype, 0,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington (isc_stdtime_t) 0, &rdataset, NULL);

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson if (result == ISC_R_NOTFOUND)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto success;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdataset_next(&rdataset)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(rdata.length <= sizeof(buf));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington memcpy(buf, rdata.data, rdata.length);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (buf[0] != 0 ||

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington buf[2] == (DNS_NSEC3FLAG_REMOVE | DNS_NSEC3FLAG_NONSEC)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_reset(&rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_DEL, origin,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington 0, &rdata, &tuple));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(do_one_tuple(&tuple, db, ver, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington INSIST(tuple == NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence rdata.data = buf;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence buf[2] = DNS_NSEC3FLAG_REMOVE | DNS_NSEC3FLAG_NONSEC;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(rr_exists(db, ver, origin, &rdata, &flag));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (!flag) {

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(dns_difftuple_create(diff->mctx, DNS_DIFFOP_ADD,

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence origin, 0, &rdata, &tuple));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence CHECK(do_one_tuple(&tuple, db, ver, diff));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence INSIST(tuple == NULL);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence dns_rdata_reset(&rdata);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence }

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence success:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington failure:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (dns_rdataset_isassociated(&rdataset))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_db_detachnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington#endif

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtondns_nsec3_addnsec3sx(dns_db_t *db, dns_dbversion_t *version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_name_t *name, dns_ttl_t nsecttl,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_boolean_t unsecure, dns_rdatatype_t type,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_diff_t *diff)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington{

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_dbnode_t *node = NULL;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_nsec3param_t nsec3param;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t rdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_t prdataset;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington isc_result_t result;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_init(&prdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_db_getoriginnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findrdataset(db, node, version, type, 0, 0,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington &prdataset, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS && result != ISC_R_NOTFOUND)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_db_findrdataset(db, node, version,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdatatype_nsec3param, 0, 0,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington &rdataset, NULL);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOTFOUND)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto try_private;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_SUCCESS)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result == ISC_R_SUCCESS;

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result = dns_rdataset_next(&rdataset)) {

532989b206894bdaf6de6cb883d2e31169c4bfacAndreas Gustafsson dns_rdata_t rdata = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&rdataset, &rdata);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_rdata_tostruct(&rdata, &nsec3param, NULL));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (nsec3param.flags != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

6e0e723b2554ba1c4af8b79733f54bf2692cdecfAndreas Gustafsson CHECK(dns_nsec3_addnsec3(db, version, name, &nsec3param,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsecttl, unsecure, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result != ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto failure;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

6e0e723b2554ba1c4af8b79733f54bf2692cdecfAndreas Gustafsson try_private:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!dns_rdataset_isassociated(&prdataset))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington goto success;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington for (result = dns_rdataset_first(&prdataset);

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence result == ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = dns_rdataset_next(&prdataset)) {

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata1 = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdata_t rdata2 = DNS_RDATA_INIT;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington unsigned char buf[DNS_NSEC3PARAM_BUFFERSIZE];

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_current(&prdataset, &rdata1);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (!dns_nsec3param_fromprivate(&rdata1, &rdata2,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington buf, sizeof(buf)))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_rdata_tostruct(&rdata2, &nsec3param, NULL));

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if ((nsec3param.flags & DNS_NSEC3FLAG_REMOVE) != 0)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (better_param(&prdataset, &rdata2))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington continue;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington /*

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington CHECK(dns_nsec3_addnsec3(db, version, name, &nsec3param,

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington nsecttl, unsecure, diff));

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington }

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (result == ISC_R_NOMORE)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington success:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington result = ISC_R_SUCCESS;

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington failure:

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (dns_rdataset_isassociated(&rdataset))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&rdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (dns_rdataset_isassociated(&prdataset))

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_rdataset_disassociate(&prdataset);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington if (node != NULL)

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington dns_db_detachnode(db, &node);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington return (result);

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellington}

7332e47e11ceb87928f801b925269aa6a91838b1David Lawrence

1b4e6163bed546ca7f8ad186f3eabfebacc36bc1Brian Wellingtonstatic isc_result_t