summaryrefslogtreecommitdiff
path: root/contrib/bind/bin/named/ns_main.c
diff options
context:
space:
mode:
Diffstat (limited to 'contrib/bind/bin/named/ns_main.c')
-rw-r--r--contrib/bind/bin/named/ns_main.c3003
1 files changed, 0 insertions, 3003 deletions
diff --git a/contrib/bind/bin/named/ns_main.c b/contrib/bind/bin/named/ns_main.c
deleted file mode 100644
index f12f2852f089..000000000000
--- a/contrib/bind/bin/named/ns_main.c
+++ /dev/null
@@ -1,3003 +0,0 @@
-#if !defined(lint) && !defined(SABER)
-static const char sccsid[] = "@(#)ns_main.c 4.55 (Berkeley) 7/1/91";
-static const char rcsid[] = "$Id: ns_main.c,v 8.160 2002/06/24 07:06:55 marka Exp $";
-#endif /* not lint */
-
-/*
- * Copyright (c) 1986, 1989, 1990
- * The Regents of the University of California. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- * must display the following acknowledgement:
- * This product includes software developed by the University of
- * California, Berkeley and its contributors.
- * 4. Neither the name of the University nor the names of its contributors
- * may be used to endorse or promote products derived from this software
- * without specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- */
-
-/*
- * Portions Copyright (c) 1993 by Digital Equipment Corporation.
- *
- * Permission to use, copy, modify, and distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies, and that
- * the name of Digital Equipment Corporation not be used in advertising or
- * publicity pertaining to distribution of the document or software without
- * specific, written prior permission.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
- * WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
- * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DIGITAL EQUIPMENT
- * CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
- * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
- * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
- * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
- * SOFTWARE.
- */
-
-/*
- * Portions Copyright (c) 1996-2000 by Internet Software Consortium.
- *
- * Permission to use, copy, modify, and distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
- * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
- * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
- * CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
- * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
- * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
- * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
- * SOFTWARE.
- */
-
-#if !defined(lint) && !defined(SABER)
-char copyright[] =
-"@(#) Copyright (c) 1986, 1989, 1990 The Regents of the University of California.\n"
-"portions Copyright (c) 1993 Digital Equipment Corporation\n"
-"portions Copyright (c) 1995-1999 Internet Software Consortium\n"
-"portions Copyright (c) 1999 Check Point Software Technologies\n"
-"All rights reserved.\n";
-#endif /* not lint */
-
-/*
- * Internet Name server (see RCF1035 & others).
- */
-
-#include "port_before.h"
-
-#include <sys/types.h>
-#include <sys/param.h>
-#include <sys/file.h>
-#include <sys/stat.h>
-#include <sys/wait.h>
-#include <sys/ioctl.h>
-#include <sys/socket.h>
-#include <sys/un.h>
-#ifdef SVR4 /* XXX */
-# include <sys/sockio.h>
-#else
-#ifndef __hpux
-# include <sys/mbuf.h>
-#endif
-#endif
-
-#include <netinet/in.h>
-#include <net/route.h>
-#include <net/if.h>
-#include <arpa/nameser.h>
-#include <arpa/inet.h>
-
-#include <ctype.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <grp.h>
-#include <irs.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <signal.h>
-#include <netdb.h>
-#include <pwd.h>
-#include <resolv.h>
-#include <string.h>
-#include <syslog.h>
-#include <time.h>
-#include <unistd.h>
-
-#include <isc/eventlib.h>
-#include <isc/logging.h>
-#include <isc/memcluster.h>
-#include <isc/list.h>
-
-#include "port_after.h"
-
-#ifdef HAVE_GETRUSAGE /* XXX */
-#include <sys/resource.h>
-#endif
-
-#define MAIN_PROGRAM
-#include "named.h"
-#undef MAIN_PROGRAM
-
-typedef void (*handler)(void);
-
-typedef struct _savedg {
- struct sockaddr_in from;
- int dfd;
- interface * ifp;
- time_t gen;
- u_char * buf;
- u_int16_t buflen;
-} savedg;
-
- /* list of interfaces */
-static LIST(struct _interface) iflist;
-static int iflist_initialized = 0;
-static int iflist_dont_rescan = 0;
-
-static const int drbufsize = 32 * 1024, /* UDP rcv buf size */
- dsbufsize = 48 * 1024, /* UDP snd buf size */
- sbufsize = 16 * 1024, /* TCP snd buf size */
-#ifdef BROKEN_RECVFROM
- nudptrans = 1,
-#else
- nudptrans = 20, /* #/udps per select */
-#endif
- listenmax = 50;
-
-static u_int16_t nsid_state;
-static u_int16_t *nsid_pool; /* optional query id pool */
-static u_int16_t *nsid_vtable; /* optional shuffle table */
-static u_int32_t nsid_hash_state;
-static u_int16_t nsid_a1, nsid_a2, nsid_a3;
-static u_int16_t nsid_c1, nsid_c2, nsid_c3;
-static u_int16_t nsid_state2;
-static int nsid_algorithm;
-
-static int needs = 0, needs_exit = 0, needs_restart = 0;
-static handler handlers[main_need_num];
-static void savedg_waitfunc(evContext, void*, const void*);
-static void need_waitfunc(evContext, void *, const void *);
-static int drain_rcvbuf(evContext, interface *, int,
- int *, int *);
-static int drain_all_rcvbuf(evContext);
-
-static struct qstream *sq_add(void);
-static int opensocket_d(interface *),
- opensocket_s(interface *);
-static void sq_query(struct qstream *),
- dq_remove(interface *);
-static int sq_dowrite(struct qstream *);
-static void use_desired_debug(void);
-static void stream_write(evContext, void *, int, int);
-
-static interface * if_find(struct in_addr, u_int16_t port);
-
-static void deallocate_everything(void),
- stream_accept(evContext, void *, int,
- const void *, int,
- const void *, int),
- stream_getlen(evContext, void *, int, int),
- stream_getmsg(evContext, void *, int, int),
- datagram_read(evContext, void *, int, int),
- dispatch_message(u_char *, int, int,
- struct qstream *,
- struct sockaddr_in, int,
- interface *);
-static void stream_send(evContext, void *, int,
- const void *, int,
- const void *, int);
-static int only_digits(const char *);
-
-static void init_needs(void),
- handle_needs(void),
- exit_handler(void);
-
-#ifndef HAVE_CUSTOM
-static void custom_init(void),
- custom_shutdown(void);
-#endif
-
-static void
-usage() {
- fprintf(stderr,
-"Usage: named [-d #] [-q] [-r] [-v] [-f] [-p port] [[-b|-c] configfile]\n");
-#ifdef CAN_CHANGE_ID
- fprintf(stderr,
-" [-u (username|uid)] [-g (groupname|gid)]\n");
-#endif
-#ifdef HAVE_CHROOT
- fprintf(stderr,
-" [-t directory]\n");
-#endif
- exit(1);
-}
-
-static const char bad_p_option[] =
-"-p remote/local obsolete; use 'listen-on' in config file to specify local";
-
-static const char bad_directory[] = "chdir failed for directory '%s': %s";
-
-/*ARGSUSED*/
-int
-main(int argc, char *argv[]) {
- int n;
- char *p;
- int ch;
- struct passwd *pw;
- struct group *gr;
-
-#ifdef _AUX_SOURCE
- set42sig();
-#endif
- debugfile = savestr(_PATH_DEBUG, 1);
-
- user_id = getuid();
- group_id = getgid();
-
- ns_port = htons(NAMESERVER_PORT);
- desired_debug = debug;
-
- /* BSD has a better random number generator but it's not clear
- * that we need it here.
- */
- gettime(&tt);
- srand(((unsigned)getpid()) + (unsigned)tt.tv_usec);
-
- (void) umask(022);
-
- /* Save argv[] before getopt() destroys it -- needed for execvp(). */
- saved_argv = malloc(sizeof(char *) * (argc + 1));
- INSIST(saved_argv != NULL);
- for (n = 0; n < argc; n++) {
- saved_argv[n] = strdup(argv[n]);
- INSIST(saved_argv[n] != NULL);
- }
- saved_argv[argc] = NULL;
- /* XXX we need to free() this for clean shutdowns. */
-
- while ((ch = getopt(argc, argv, "b:c:d:g:p:t:u:vw:qrf")) != -1) {
- switch (ch) {
- case 'b':
- case 'c':
- if (conffile != NULL)
- (void)freestr(conffile);
- conffile = savestr(optarg, 1);
- break;
-
- case 'd':
- desired_debug = atoi(optarg);
- if (desired_debug <= 0)
- desired_debug = 1;
- break;
-
- case 'p':
- /* use nonstandard port number.
- * usage: -p remote/local
- * remote is the port number to which
- * we send queries. local is the port
- * on which we listen for queries.
- * local defaults to same as remote.
- */
- ns_port = htons((u_int16_t) atoi(optarg));
- p = strchr(optarg, '/');
- if (p) {
- syslog(LOG_WARNING, bad_p_option);
- fprintf(stderr, bad_p_option);
- fputc('\n', stderr);
- }
- break;
-
- case 'w':
- working_dir = savestr(optarg, 1);
- break;
-#ifdef QRYLOG
- case 'q':
- qrylog = 1;
- break;
-#endif
-
- case 'r':
- ns_setoption(OPTION_NORECURSE);
- break;
-
- case 'f':
- foreground = 1;
- break;
-
- case 't':
- chroot_dir = savestr(optarg, 1);
- break;
-
- case 'v':
- fprintf(stdout, "%s\n", Version);
- exit(0);
-
-#ifdef CAN_CHANGE_ID
- case 'u':
- user_name = savestr(optarg, 1);
- if (only_digits(user_name))
- user_id = atoi(user_name);
- else {
- pw = getpwnam(user_name);
- if (pw == NULL) {
- fprintf(stderr,
- "user \"%s\" unknown\n",
- user_name);
- exit(1);
- }
- user_id = pw->pw_uid;
- if (group_name == NULL) {
- char name[256];
-
- sprintf(name, "%lu",
- (u_long)pw->pw_gid);
- group_name = savestr(name, 1);
- group_id = pw->pw_gid;
- }
- }
- break;
-
- case 'g':
- if (group_name != NULL)
- (void)freestr(group_name);
- group_name = savestr(optarg, 1);
- if (only_digits(group_name))
- group_id = atoi(group_name);
- else {
- gr = getgrnam(group_name);
- if (gr == NULL) {
- fprintf(stderr,
- "group \"%s\" unknown\n",
- group_name);
- exit(1);
- }
- group_id = gr->gr_gid;
- }
- break;
-#endif /* CAN_CHANGE_ID */
-
- case '?':
- default:
- usage();
- }
- }
- argc -= optind;
- argv += optind;
-
- if (argc) {
- if (conffile != NULL)
- (void)freestr(conffile);
- conffile = savestr(*argv, 1);
- argc--, argv++;
- }
- if (argc)
- usage();
-
- if (conffile == NULL)
- conffile = savestr(_PATH_CONF, 1);
-
- /*
- * Make sure we don't inherit any open descriptors
- * other than those that daemon() can deal with.
- */
- for (n = sysconf(_SC_OPEN_MAX) - 1; n >= 0; n--)
- if (n != STDIN_FILENO &&
- n != STDOUT_FILENO &&
- n != STDERR_FILENO)
- (void) close(n);
-
- /*
- * Chroot if desired.
- */
- if (chroot_dir != NULL) {
-#ifdef HAVE_CHROOT
- if (chroot(chroot_dir) < 0) {
- fprintf(stderr, "chroot %s failed: %s\n", chroot_dir,
- strerror(errno));
- exit(1);
- }
- if (chdir("/") < 0) {
- fprintf(stderr, "chdir(\"/\") failed: %s\n",
- strerror(errno));
- exit(1);
- }
-#else
- fprintf(stderr, "warning: chroot() not available\n");
- chroot_dir = freestr(chroot_dir);
-#endif
- }
- /*
- * Set working directory.
- */
- if (working_dir != NULL) {
- if (chdir(working_dir) < 0) {
- syslog(LOG_CRIT, bad_directory, working_dir,
- strerror(errno));
- fprintf(stderr, bad_directory, working_dir,
- strerror(errno));
- fputc('\n', stderr);
- exit(1);
- }
- }
-
- /* Establish global event context. */
- evCreate(&ev);
-
- /* Establish global resolver context. */
- res_ninit(&res);
- res.options &= ~(RES_DEFNAMES | RES_DNSRCH | RES_RECURSE);
-
- /*
- * Set up logging.
- */
- n = LOG_PID;
-#ifdef LOG_NOWAIT
- n |= LOG_NOWAIT;
-#endif
-#ifdef LOG_NDELAY
- n |= LOG_NDELAY;
-#endif
-#if defined(LOG_CONS) && defined(USE_LOG_CONS)
- n |= LOG_CONS;
-#endif
-#ifdef SYSLOG_42BSD
- openlog("named", n);
-#else
- openlog("named", n, ISC_FACILITY);
-#endif
-
- init_logging();
- set_assertion_failure_callback(ns_assertion_failed);
-
-#ifdef DEBUG
- use_desired_debug();
-#endif
-
- /* Perform system-dependent initialization */
- custom_init();
-
- init_needs();
- init_signals();
-
- ns_notice(ns_log_default, "starting (%s). %s", conffile, Version);
-
- /*
- * Initialize and load database.
- */
- gettime(&tt);
- buildservicelist();
- buildprotolist();
- confmtime = ns_init(conffile);
- time(&boottime);
- resettime = boottime;
-
- nsid_init();
-
- /*
- * Fork and go into background now that
- * we've done any slow initialization
- * and are ready to answer queries.
- */
-
- if (foreground == 0) {
- if (daemon(1, 0))
- ns_panic(ns_log_default, 1, "daemon: %s",
- strerror(errno));
- update_pid_file();
- }
-
- /* Check that udp checksums are on. */
- ns_udp();
-
- /*
- * We waited until now to log this because we wanted logging to
- * be set up the way the user prefers.
- */
- if (chroot_dir != NULL)
- ns_info(ns_log_security, "chrooted to %s", chroot_dir);
-
-#ifdef CAN_CHANGE_ID
- /*
- * Set user and group if desired.
- */
- if (group_name != NULL) {
- if (setgid(group_id) < 0)
- ns_panic(ns_log_security, 1, "setgid(%s): %s",
- group_name, strerror(errno));
- ns_info(ns_log_security, "group = %s", group_name);
- }
- if (user_name != NULL) {
- if (getuid() == 0 && initgroups(user_name, group_id) < 0)
- ns_panic(ns_log_security, 1, "initgroups(%s, %d): %s",
- user_name, (int)group_id, strerror(errno));
- endgrent();
- endpwent();
- if (setuid(user_id) < 0)
- ns_panic(ns_log_security, 1, "setuid(%s): %s",
- user_name, strerror(errno));
- ns_info(ns_log_security, "user = %s", user_name);
- if (user_id != 0)
- iflist_dont_rescan++;
- }
-#endif /* CAN_CHANGE_ID */
-
- ns_notice(ns_log_default, "Ready to answer queries.");
- gettime(&tt);
- prime_cache();
- while (!needs_exit) {
- evEvent event;
-
- ns_debug(ns_log_default, 15, "main loop");
- if (needs != 0)
- handle_needs();
- else if (evGetNext(ev, &event, EV_WAIT) != -1)
- INSIST_ERR(evDispatch(ev, event) != -1);
- else
- INSIST_ERR(errno == EINTR);
- }
- if (needs_restart)
- ns_info(ns_log_default, "named restarting");
- else
- ns_info(ns_log_default, "named shutting down");
-#ifdef BIND_UPDATE
- dynamic_about_to_exit();
-#endif
- if (server_options && server_options->pid_filename)
- (void)unlink(server_options->pid_filename);
- ns_logstats(ev, NULL, evNowTime(), evConsTime(0, 0));
-
- if (NS_OPTION_P(OPTION_DEALLOC_ON_EXIT))
- deallocate_everything();
- else
- shutdown_configuration();
-
- if (needs_restart)
- execvp(saved_argv[0], saved_argv);
- else
- /* Cleanup for system-dependent stuff */
- custom_shutdown();
-
- return (0);
-}
-
-static int
-sq_closeone(void) {
- struct qstream *sp, *nextsp;
- struct qstream *candidate = NULL;
- time_t lasttime, maxctime = 0;
- int result = 0;
-
- gettime(&tt);
-
- for (sp = streamq; sp; sp = nextsp) {
- nextsp = sp->s_next;
- if (sp->s_refcnt)
- continue;
- lasttime = tt.tv_sec - sp->s_time;
- if (lasttime >= VQEXPIRY) {
- sq_remove(sp);
- result = 1;
- } else if (lasttime > maxctime) {
- candidate = sp;
- maxctime = lasttime;
- }
- }
- if (candidate) {
- sq_remove(candidate);
- result = 1;
- }
- return (result);
-}
-
-static int
-ns_socket(int domain, int type, int protocol) {
- int fd, tmp;
-
- again:
- fd = socket(domain, type, protocol);
-#ifdef F_DUPFD /* XXX */
- /*
- * Leave a space for stdio to work in.
- */
- if (fd >= 0 && fd <= 20) {
- int new;
- if ((new = fcntl(fd, F_DUPFD, 20)) == -1)
- ns_notice(ns_log_default, "fcntl(fd, F_DUPFD, 20): %s",
- strerror(errno));
- tmp = errno;
- close(fd);
- errno = tmp;
- fd = new;
- }
-#endif
- tmp = errno;
- if (errno == EMFILE)
- if (sq_closeone())
- goto again;
- errno = tmp;
- return (fd);
-}
-
-#ifndef IP_OPT_BUF_SIZE
-/* arbitrary size */
-#define IP_OPT_BUF_SIZE 50
-#endif
-
-static void
-stream_accept(evContext lev, void *uap, int rfd,
- const void *lav, int lalen,
- const void *rav, int ralen)
-{
- interface *ifp = uap;
- struct qstream *sp;
- struct iovec iov;
- ISC_SOCKLEN_T len;
- int n;
- const int on = 1;
-#ifdef IP_OPTIONS /* XXX */
- u_char ip_opts[IP_OPT_BUF_SIZE];
-#endif
- const struct sockaddr_in *la, *ra;
-
- UNUSED(lalen);
- UNUSED(ralen);
-
- la = (const struct sockaddr_in *)lav;
- ra = (const struct sockaddr_in *)rav;
-
- INSIST(ifp != NULL);
-
-#ifdef F_DUPFD
- /*
- * Leave a space for stdio to work in.
- */
- if (rfd >= 0 && rfd <= 20) {
- int new, tmp;
- new = fcntl(rfd, F_DUPFD, 20);
- tmp = errno;
- if (new == -1)
- ns_notice(ns_log_default,
- "fcntl(rfd, F_DUPFD, 20): %s",
- strerror(errno));
- close(rfd);
- errno = tmp;
- rfd = new;
- }
-#endif
-
- if (rfd < 0) {
- switch (errno) {
- case EINTR:
- case EAGAIN:
-#if (EWOULDBLOCK != EAGAIN)
- case EWOULDBLOCK:
-#endif
- case ECONNABORTED:
-#ifdef EPROTO
- case EPROTO:
-#endif
- case EHOSTUNREACH:
- case EHOSTDOWN:
- case ENETUNREACH:
- case ENETDOWN:
- case ECONNREFUSED:
-#ifdef ENONET
- case ENONET:
-#endif
- /*
- * These errors are expected and harmless, so
- * we ignore them.
- */
- return;
- case EBADF:
- case ENOTSOCK:
- case EFAULT:
- /*
- * If one these happens, we're broken.
- */
- ns_panic(ns_log_default, 1, "accept: %s",
- strerror(errno));
- case EMFILE:
- /*
- * If we're out of file descriptors, find the least
- * busy fd and close it. Then we'll return to the
- * eventlib which will call us right back.
- */
- if (streamq) {
- (void)sq_closeone();
- return;
- }
- /* fall through */
- default:
- /*
- * Either we got an error we didn't expect, or we
- * got EMFILE and didn't have anything left to close.
- * Log it and press on.
- */
- ns_info(ns_log_default, "accept: %s", strerror(errno));
- return;
- }
- }
-
- /* Condition the socket. */
-
-#ifndef CANNOT_SET_SNDBUF
- if (setsockopt(rfd, SOL_SOCKET, SO_SNDBUF,
- (const char*)&sbufsize, sizeof sbufsize) < 0) {
- ns_info(ns_log_default, "setsockopt(rfd, SO_SNDBUF, %d): %s",
- sbufsize, strerror(errno));
- (void) close(rfd);
- return;
- }
-#endif
- if (setsockopt(rfd, SOL_SOCKET, SO_KEEPALIVE,
- (const char *)&on, sizeof on) < 0) {
- ns_info(ns_log_default, "setsockopt(rfd, KEEPALIVE): %s",
- strerror(errno));
- (void) close(rfd);
- return;
- }
-
-#ifdef USE_FIONBIO_IOCTL
- if (ioctl(ifp->dfd, FIONBIO, (char *) &on) == -1) {
- ns_info(ns_log_default, "ioctl(rfd, FIONBIO): %s",
- strerror(errno));
- (void) close(rfd);
- return;
- }
-#else
- if ((n = fcntl(rfd, F_GETFL, 0)) == -1) {
- ns_info(ns_log_default, "fcntl(rfd, F_GETFL): %s",
- strerror(errno));
- (void) close(rfd);
- return;
- }
- if (fcntl(rfd, F_SETFL, n|PORT_NONBLOCK) == -1) {
- ns_info(ns_log_default, "fcntl(rfd, NONBLOCK): %s",
- strerror(errno));
- (void) close(rfd);
- return;
- }
-#endif
-
- /*
- * We don't like IP options. Turn them off if the connection came in
- * with any. log this event since it usually indicates a security
- * problem.
- */
-#if defined(IP_OPTIONS) /* XXX */
- len = sizeof ip_opts;
- if (getsockopt(rfd, IPPROTO_IP, IP_OPTIONS,
- (char *)ip_opts, &len) < 0) {
- ns_info(ns_log_default, "getsockopt(rfd, IP_OPTIONS): %s",
- strerror(errno));
- (void) close(rfd);
- return;
- }
- if (len != 0) {
- nameserIncr(ra->sin_addr, nssRcvdOpts);
- if (!haveComplained(ina_ulong(ra->sin_addr),
- (u_long)"rcvd ip options")) {
- ns_info(ns_log_default,
- "rcvd IP_OPTIONS from %s (ignored)",
- sin_ntoa(*ra));
- }
- if (setsockopt(rfd, IPPROTO_IP, IP_OPTIONS, NULL, 0) < 0) {
- ns_info(ns_log_default, "setsockopt(!IP_OPTIONS): %s",
- strerror(errno));
- (void) close(rfd);
- }
- }
-#endif
-
- /* Create and populate a qsp for this socket. */
- if ((sp = sq_add()) == NULL) {
- (void) close(rfd);
- return;
- }
- sp->s_rfd = rfd; /* stream file descriptor */
- gettime(&tt);
- sp->s_time = tt.tv_sec; /* last transaction time */
- sp->s_from = *ra; /* address to respond to */
- sp->s_ifp = ifp;
- INSIST(sizeof sp->s_temp >= INT16SZ);
- iov = evConsIovec(sp->s_temp, INT16SZ);
- INSIST_ERR(evRead(lev, rfd, &iov, 1, stream_getlen, sp, &sp->evID_r)
- != -1);
- sp->flags |= STREAM_READ_EV;
- ns_debug(ns_log_default, 1, "IP/TCP connection from %s (fd %d)",
- sin_ntoa(sp->s_from), rfd);
-}
-
-int
-tcp_send(struct qinfo *qp) {
- struct qstream *sp;
- struct sockaddr_in src;
- int on = 1, n;
- int fd;
-
- ns_debug(ns_log_default, 1, "tcp_send");
- if ((fd = ns_socket(AF_INET, SOCK_STREAM, PF_UNSPEC)) == -1)
- return (SERVFAIL);
- if (fd > evHighestFD(ev)) {
- close(fd);
- return (SERVFAIL);
- }
- if ((sp = sq_add()) == NULL) {
- close(fd);
- return (SERVFAIL);
- }
- sp->s_rfd = fd;
- if (setsockopt(sp->s_rfd, SOL_SOCKET, SO_REUSEADDR,
- (char*)&on, sizeof(on)) < 0)
- ns_info(ns_log_default,
- "tcp_send: setsockopt(SO_REUSEADDR): %s",
- strerror(errno));
-#ifdef SO_REUSEPORT
- if (setsockopt(sp->s_rfd, SOL_SOCKET, SO_REUSEPORT,
- (char*)&on, sizeof(on)) < 0)
- ns_info(ns_log_default,
- "tcp_send: setsockopt(SO_REUSEPORT): %s",
- strerror(errno));
-#endif
- src = server_options->query_source;
- src.sin_port = htons(0);
- if (bind(sp->s_rfd, (struct sockaddr *)&src, sizeof(src)) < 0)
- ns_info(ns_log_default, "tcp_send: bind(query_source): %s",
- strerror(errno));
- if (fcntl(sp->s_rfd, F_SETFD, 1) < 0) {
- sq_remove(sp);
- return (SERVFAIL);
- }
-#ifdef USE_FIONBIO_IOCTL
- if (ioctl(sp->s_rfd, FIONBIO, (char *) &on) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
-#else
- if ((n = fcntl(sp->s_rfd, F_GETFL, 0)) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
- if (fcntl(sp->s_rfd, F_SETFL, n|PORT_NONBLOCK) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
-#endif
- if (sq_openw(sp, qp->q_msglen + INT16SZ) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
- if (sq_write(sp, qp->q_msg, qp->q_msglen) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
-
- if (setsockopt(sp->s_rfd, SOL_SOCKET, SO_KEEPALIVE,
- (char*)&on, sizeof(on)) < 0)
- ns_info(ns_log_default,
- "tcp_send: setsockopt(SO_KEEPALIVE): %s",
- strerror(errno));
- gettime(&tt);
- sp->s_size = -1;
- sp->s_time = tt.tv_sec; /* last transaction time */
- sp->s_refcnt = 1;
- sp->flags |= STREAM_DONE_CLOSE;
- sp->s_from = qp->q_addr[qp->q_curaddr].ns_addr;
- if (evConnect(ev, sp->s_rfd, &sp->s_from, sizeof(sp->s_from),
- stream_send, sp, &sp->evID_c) == -1) {
- sq_remove(sp);
- return (SERVFAIL);
- }
- sp->flags |= STREAM_CONNECT_EV;
- return (NOERROR);
-}
-
-static void
-stream_send(evContext lev, void *uap, int fd, const void *la, int lalen,
- const void *ra, int ralen) {
- struct qstream *sp = uap;
-
- UNUSED(lev);
- UNUSED(la);
- UNUSED(lalen);
- UNUSED(ra);
- UNUSED(ralen);
-
- ns_debug(ns_log_default, 1, "stream_send");
-
- sp->flags &= ~STREAM_CONNECT_EV;
-
- if (fd == -1) {
- /* connect failed */
- sq_remove(sp);
- return;
- }
- if (evSelectFD(ev, sp->s_rfd, EV_WRITE,
- stream_write, sp, &sp->evID_w) < 0) {
- sq_remove(sp);
- return;
- }
- sp->flags |= STREAM_WRITE_EV;
-}
-
-static void
-stream_write(evContext ctx, void *uap, int fd, int evmask) {
- struct qstream *sp = uap;
- struct iovec iov;
-
- ns_debug(ns_log_default, 1, "stream_write");
- INSIST(evmask & EV_WRITE);
- INSIST(fd == sp->s_rfd);
- if (sq_dowrite(sp) < 0) {
- sq_remove(sp);
- return;
- }
- if (sp->s_wbuf_free != sp->s_wbuf_send)
- return;
-
- if (sp->s_wbuf) {
- memput(sp->s_wbuf, sp->s_wbuf_end - sp->s_wbuf);
- sp->s_wbuf_send = sp->s_wbuf_free = NULL;
- sp->s_wbuf_end = sp->s_wbuf = NULL;
- }
- (void) evDeselectFD(ev, sp->evID_w);
- sp->flags &= ~STREAM_WRITE_EV;
- sp->s_refcnt = 0;
- iov = evConsIovec(sp->s_temp, INT16SZ);
- INSIST_ERR(evRead(ctx, fd, &iov, 1, stream_getlen, sp, &sp->evID_r) !=
- -1);
- sp->flags |= STREAM_READ_EV;
-}
-
-static void
-stream_getlen(evContext lev, void *uap, int fd, int bytes) {
- struct qstream *sp = uap;
- struct iovec iov;
-
- UNUSED(fd);
-
- sp->flags &= ~STREAM_READ_EV;
- if (bytes != INT16SZ) {
- /*
- * bytes == 0 is normal EOF; see if something unusual
- * happened.
- */
- if (bytes < 0) {
- /*
- * ECONNRESET happens frequently and is not worth
- * logging.
- */
- if (errno != ECONNRESET)
- ns_info(ns_log_default,
- "stream_getlen(%s): %s",
- sin_ntoa(sp->s_from), strerror(errno));
- } else if (bytes != 0)
- ns_error(ns_log_default,
- "stream_getlen(%s): unexpected byte count %d",
- sin_ntoa(sp->s_from), bytes);
- sq_remove(sp);
- return;
- }
-
- /*
- * Unpack the size, allocate memory for the query. This is
- * tricky since in a low memory situation with possibly very
- * large (64KB) queries, we want to make sure we can read at
- * least the header since we need it to send back a SERVFAIL
- * (owing to the out-of-memory condition).
- */
- sp->s_size = ns_get16(sp->s_temp);
- ns_debug(ns_log_default, 5, "stream message: %d bytes", sp->s_size);
- if (sp->s_size < HFIXEDSZ) {
- ns_error(ns_log_default,
- "stream_getlen(%s): request too small",
- sin_ntoa(sp->s_from));
- sq_remove(sp);
- return;
- }
-
- if (!(sp->flags & STREAM_MALLOC)) {
- sp->s_bufsize = 64*1024-1; /* maximum tcp message size */
- sp->s_buf = (u_char *)memget(sp->s_bufsize);
- if (sp->s_buf != NULL)
- sp->flags |= STREAM_MALLOC;
- else {
- sp->s_buf = sp->s_temp;
- sp->s_bufsize = HFIXEDSZ;
- }
- }
-
- iov = evConsIovec(sp->s_buf, (sp->s_size <= sp->s_bufsize) ?
- sp->s_size : sp->s_bufsize);
- if (evRead(lev, sp->s_rfd, &iov, 1, stream_getmsg, sp, &sp->evID_r)
- == -1)
- ns_panic(ns_log_default, 1, "evRead(fd %d): %s",
- sp->s_rfd, strerror(errno));
- sp->flags |= STREAM_READ_EV;
-}
-
-static void
-stream_getmsg(evContext lev, void *uap, int fd, int bytes) {
- struct qstream *sp = uap;
-
- UNUSED(lev);
- UNUSED(fd);
-
- sp->flags &= ~STREAM_READ_EV;
- if (bytes == -1) {
- ns_info(ns_log_default, "stream_getmsg(%s): %s",
- sin_ntoa(sp->s_from), strerror(errno));
- sq_remove(sp);
- return;
- }
-
- gettime(&tt);
- sp->s_time = tt.tv_sec;
-
- if (ns_wouldlog(ns_log_default,5)) {
- ns_debug(ns_log_default, 5,
- "sp %p rfd %d size %d time %ld next %p",
- sp, sp->s_rfd, sp->s_size, (long)sp->s_time,
- sp->s_next);
- ns_debug(ns_log_default, 5, "\tbufsize %d bytes %d", sp->s_bufsize,
- bytes);
- }
-
- /*
- * Do we have enough memory for the query? If not, and if we have a
- * query id, then we will send a SERVFAIL error back to the client.
- */
- if (bytes != sp->s_size) {
- HEADER *hp = (HEADER *)sp->s_buf;
-
- hp->qr = 1;
- hp->ra = (NS_OPTION_P(OPTION_NORECURSE) == 0);
- hp->ancount = htons(0);
- hp->qdcount = htons(0);
- hp->nscount = htons(0);
- hp->arcount = htons(0);
- hp->rcode = SERVFAIL;
- writestream(sp, sp->s_buf, HFIXEDSZ);
- sp->flags |= STREAM_DONE_CLOSE;
- return;
- }
-
- nameserIncr(sp->s_from.sin_addr, nssRcvdTCP);
- sq_query(sp);
- dispatch_message(sp->s_buf, bytes, sp->s_bufsize, sp, sp->s_from, -1,
- sp->s_ifp);
-}
-
-static void
-datagram_read(evContext lev, void *uap, int fd, int evmask) {
- interface *ifp = uap;
- struct sockaddr_in from;
- ISC_SOCKLEN_T from_len = sizeof from;
- int n, nudp;
- union {
- HEADER h; /* Force alignment of 'buf'. */
- u_char buf[EDNS_MESSAGE_SZ+1];
- } u;
-
- UNUSED(lev);
- UNUSED(evmask);
-
- tt = evTimeVal(evNowTime());
- nudp = 0;
-
- more:
- n = recvfrom(fd, (char *)u.buf, sizeof u.buf, 0,
- (struct sockaddr *)&from, &from_len);
-
- if (n < 0) {
- switch (errno) {
- case EINTR:
- case EAGAIN:
-#if (EWOULDBLOCK != EAGAIN)
- case EWOULDBLOCK:
-#endif
- case EHOSTUNREACH:
- case EHOSTDOWN:
- case ENETUNREACH:
- case ENETDOWN:
- case ECONNREFUSED:
-#ifdef ENONET
- case ENONET:
-#endif
- /*
- * These errors are expected and harmless, so we
- * ignore them.
- */
- return;
- default:
- /*
- * An error we don't expect. Log it and press
- * on.
- */
- ns_info(ns_log_default, "recvfrom: %s",
- strerror(errno));
- return;
- }
- }
-
- /* Handle bogosity on systems that need it. */
- if (n == 0)
- return;
-
- if (ns_wouldlog(ns_log_default, 1)) {
- ns_debug(ns_log_default, 1, "datagram from %s, fd %d, len %d",
- sin_ntoa(from), fd, n);
- }
-
- if (n > EDNS_MESSAGE_SZ) {
- /*
- * The message is too big. It's probably a response to
- * one of our questions, so we truncate it and press on.
- */
- n = trunc_adjust(u.buf, EDNS_MESSAGE_SZ, EDNS_MESSAGE_SZ);
- ns_debug(ns_log_default, 1, "truncated oversize UDP packet");
- }
-
- dispatch_message(u.buf, n, EDNS_MESSAGE_SZ, NULL, from, fd, ifp);
- if (++nudp < nudptrans)
- goto more;
-}
-
-static void
-savedg_waitfunc(evContext ctx, void *uap, const void *tag) {
- savedg *dg = (savedg *)uap;
-
- UNUSED(ctx);
- UNUSED(tag);
-
- if (!EMPTY(iflist) && HEAD(iflist)->gen == dg->gen) {
- u_char buf[EDNS_MESSAGE_SZ];
-
- memcpy(buf, dg->buf, dg->buflen);
- dispatch_message(buf, dg->buflen, sizeof buf, NULL,
- dg->from, dg->dfd, dg->ifp);
- }
- memput(dg->buf, dg->buflen);
- memput(dg, sizeof *dg);
-}
-
-static void
-dispatch_message(u_char *msg, int msglen, int buflen, struct qstream *qsp,
- struct sockaddr_in from, int dfd, interface *ifp)
-{
- HEADER *hp = (HEADER *)msg;
-
- if (msglen < HFIXEDSZ) {
- ns_debug(ns_log_default, 1, "dropping undersize message");
- if (qsp) {
- qsp->flags |= STREAM_DONE_CLOSE;
- sq_done(qsp);
- }
- return;
- }
-
- if (server_options->blackhole_acl != NULL &&
- ip_match_address(server_options->blackhole_acl,
- from.sin_addr) == 1) {
- ns_debug(ns_log_default, 1,
- "dropping blackholed %s from %s",
- hp->qr ? "response" : "query",
- sin_ntoa(from));
- if (qsp) {
- qsp->flags |= STREAM_DONE_CLOSE;
- sq_done(qsp);
- }
- return;
- }
-
- /* Drop UDP packets from port zero. They are invariable forged. */
- if (qsp == NULL && ntohs(from.sin_port) == 0) {
- ns_notice(ns_log_security,
- "dropping source port zero packet from %s",
- sin_ntoa(from));
- return;
- }
-
- if (hp->qr) {
- ns_resp(msg, msglen, from, qsp);
- if (qsp)
- sq_done(qsp);
- /* Now is a safe time for housekeeping. */
- if (needs_prime_cache)
- prime_cache();
- } else if (ifp != NULL)
- ns_req(msg, msglen, buflen, qsp, from, dfd);
- else {
- ns_notice(ns_log_security,
- "refused query on non-query socket from %s",
- sin_ntoa(from));
- if (qsp) {
- qsp->flags |= STREAM_DONE_CLOSE;
- sq_done(qsp);
- }
- /* XXX Send refusal here. */
- }
-}
-
-void
-getnetconf(int periodic_scan) {
- struct ifconf ifc;
- struct ifreq ifreq;
- struct in_addr ina;
- interface *ifp;
- char *buf, *cp, *cplim;
- static int bufsiz = 4095;
- time_t my_generation = time(NULL);
- int s, cpsize, n;
- int found;
- listen_info li;
- ip_match_element ime;
- u_char *mask_ptr;
- struct in_addr mask;
-
- if (iflist_initialized) {
- if (iflist_dont_rescan)
- return;
- } else {
- INIT_LIST(iflist);
- iflist_initialized = 1;
- }
-
- ns_debug(ns_log_default, 1, "getnetconf(generation %lu)",
- (u_long)my_generation);
-
- /* Get interface list from system. */
- if ((s = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
- if (!periodic_scan)
- ns_panic(ns_log_default, 1, "socket(SOCK_RAW): %s",
- strerror(errno));
- ns_error(ns_log_default, "socket(SOCK_RAW): %s",
- strerror(errno));
- return;
- }
-
- if (local_addresses != NULL)
- free_ip_match_list(local_addresses);
- local_addresses = new_ip_match_list();
- if (local_networks != NULL)
- free_ip_match_list(local_networks);
- local_networks = new_ip_match_list();
-
- for (;;) {
- buf = memget(bufsiz);
- if (!buf)
- ns_panic(ns_log_default, 1, "memget(interface)");
- ifc.ifc_len = bufsiz;
- ifc.ifc_buf = buf;
-#ifdef IRIX_EMUL_IOCTL_SIOCGIFCONF
- /*
- * This is a fix for IRIX OS in which the call to ioctl with
- * the flag SIOCGIFCONF may not return an entry for all the
- * interfaces like most flavors of Unix.
- */
- if (emul_ioctl(&ifc) >= 0)
- break;
-#else
- if ((n = ioctl(s, SIOCGIFCONF, (char *)&ifc)) != -1) {
- /*
- * Some OS's just return what will fit rather
- * than set EINVAL if the buffer is too small
- * to fit all the interfaces in. If
- * ifc.ifc_len is too near to the end of the
- * buffer we will grow it just in case and
- * retry.
- */
- if ((int)(ifc.ifc_len + 2 * sizeof(ifreq)) < bufsiz)
- break;
- }
-#endif
- if ((n == -1) && errno != EINVAL)
- ns_panic(ns_log_default, 1,
- "get interface configuration: %s",
- strerror(errno));
-
- if (bufsiz > 1000000)
- ns_panic(ns_log_default, 1,
- "get interface configuration: maximum buffer size exceeded");
- memput(buf, bufsiz);
- bufsiz += 4096;
- }
-
- ns_debug(ns_log_default, 2, "getnetconf: SIOCGIFCONF: ifc_len = %d",
- ifc.ifc_len);
-
- /* Parse system's interface list and open some sockets. */
- cplim = buf + ifc.ifc_len; /* skip over if's with big ifr_addr's */
- for (cp = buf; cp < cplim; cp += cpsize) {
- memcpy(&ifreq, cp, sizeof ifreq);
-#ifdef HAVE_SA_LEN
-#ifdef FIX_ZERO_SA_LEN
- if (ifreq.ifr_addr.sa_len == 0)
- ifreq.ifr_addr.sa_len = 16;
-#endif
-#ifdef HAVE_MINIMUM_IFREQ
- ns_debug(ns_log_default, 2, "%s sa_len = %d",
- ifreq.ifr_name, (int)ifreq.ifr_addr.sa_len);
- cpsize = sizeof ifreq;
- if (ifreq.ifr_addr.sa_len > sizeof (struct sockaddr))
- cpsize += (int)ifreq.ifr_addr.sa_len -
- (int)(sizeof (struct sockaddr));
-#else
- cpsize = sizeof ifreq.ifr_name + ifreq.ifr_addr.sa_len;
-#endif /* HAVE_MINIMUM_IFREQ */
-#elif defined SIOCGIFCONF_ADDR
- cpsize = sizeof ifreq;
-#else
- cpsize = sizeof ifreq.ifr_name;
- if (ioctl(s, SIOCGIFADDR, (char *)&ifreq) < 0) {
- ns_notice(ns_log_default,
- "get interface addr (%s): %s",
- ifreq.ifr_name, strerror(errno));
- continue;
- }
-#endif
- if (ifreq.ifr_addr.sa_family != AF_INET) {
- ns_debug(ns_log_default, 2,
- "getnetconf: %s AF %d != INET",
- ifreq.ifr_name, ifreq.ifr_addr.sa_family);
- continue;
- }
- ina = ina_get((u_char *)&((struct sockaddr_in *)
- &ifreq.ifr_addr)->sin_addr);
- ns_debug(ns_log_default, 1,
- "getnetconf: considering %s [%s]",
- ifreq.ifr_name, inet_ntoa(ina));
- /*
- * Don't test IFF_UP, packets may still be received at this
- * address if any other interface is up.
- */
- if (ina_hlong(ina) == INADDR_ANY) {
- ns_debug(ns_log_default, 2,
- "getnetconf: INADDR_ANY, ignoring.");
- continue;
- }
-
- INSIST(server_options != NULL);
- INSIST(server_options->listen_list != NULL);
-
- found=0;
- for (li = server_options->listen_list->first;
- li != NULL;
- li = li->next) {
- if (ip_match_address(li->list, ina) > 0) {
- found++;
- /*
- * Look for an already existing source
- * interface address/port pair.
- * This happens mostly when reinitializing.
- * Also, if the machine has multiple point to
- * point interfaces, then the local address
- * may appear more than once.
- */
- ifp = if_find(ina, li->port);
- if (ifp != NULL) {
- ns_debug(ns_log_default, 1,
- "dup interface addr [%s].%u (%s)",
- inet_ntoa(ina),
- ntohs(li->port),
- ifreq.ifr_name);
- ifp->gen = my_generation;
- continue;
- }
-
- ifp = (interface *)memget(sizeof *ifp);
- if (!ifp)
- ns_panic(ns_log_default, 1,
- "memget(interface)");
- memset(ifp, 0, sizeof *ifp);
- INIT_LINK(ifp, link);
- APPEND(iflist, ifp, link);
- ifp->addr = ina;
- ifp->port = li->port;
- ifp->gen = my_generation;
- ifp->flags = 0;
- ifp->dfd = -1;
- ifp->sfd = -1;
- if (opensocket_d(ifp) < 0 ||
- opensocket_s(ifp) < 0) {
- dq_remove(ifp);
- found = 0;
- break;
- }
- ns_info(ns_log_default,
- "listening on [%s].%u (%s)",
- inet_ntoa(ina), ntohs(li->port),
- ifreq.ifr_name);
- }
- }
- if (!found)
- ns_debug(ns_log_default, 1,
- "not listening on addr [%s] (%s)",
- inet_ntoa(ina), ifreq.ifr_name);
-
- /*
- * Add this interface's address to the list of local
- * addresses if we haven't added it already.
- */
- if (ip_match_address(local_addresses, ina) < 0) {
- ime = new_ip_match_pattern(ina, 32);
- add_to_ip_match_list(local_addresses, ime);
- }
-
- /*
- * Get interface flags.
- */
- if (ioctl(s, SIOCGIFFLAGS, (char *)&ifreq) < 0) {
- ns_notice(ns_log_default, "get interface flags: %s",
- strerror(errno));
- continue;
- }
-
- if ((ifreq.ifr_flags & IFF_POINTOPOINT)) {
- /*
- * The local network for a PPP link is just the
- * two ends of the link, so for each endpoint we
- * add a pattern that will only match the endpoint.
- */
- if (ioctl(s, SIOCGIFDSTADDR, (char *)&ifreq) < 0) {
- ns_notice(ns_log_default, "get dst addr: %s",
- strerror(errno));
- continue;
- }
-
- mask.s_addr = htonl(INADDR_BROADCAST);
-
- /*
- * Our end.
- *
- * Only add it if we haven't seen it before.
- */
- if (ip_match_network(local_networks, ina, mask) < 0) {
- ime = new_ip_match_pattern(ina, 32);
- add_to_ip_match_list(local_networks, ime);
- }
-
- /*
- * The other end.
- */
- ina = ((struct sockaddr_in *)
- &ifreq.ifr_addr)->sin_addr;
- /*
- * Only add it if we haven't seen it before.
- */
- if (ip_match_network(local_networks, ina, mask) < 0) {
- ime = new_ip_match_pattern(ina, 32);
- add_to_ip_match_list(local_networks, ime);
- }
- } else {
- /*
- * Add this interface's network and netmask to the
- * list of local networks.
- */
-
-#ifdef SIOCGIFNETMASK /* XXX */
- if (ioctl(s, SIOCGIFNETMASK, (char *)&ifreq) < 0) {
- ns_notice(ns_log_default, "get netmask: %s",
- strerror(errno));
- continue;
- }
- /*
- * Use ina_get because the ifreq structure might not
- * be aligned.
- */
- mask_ptr = (u_char *)
- &((struct sockaddr_in *)&ifreq.ifr_addr)->sin_addr;
- mask = ina_get(mask_ptr);
-#else
- mask = net_mask(ina);
-#endif
-
- ina.s_addr &= mask.s_addr; /* make network address */
-
- /*
- * Only add it if we haven't seen it before.
- */
- if (ip_match_network(local_networks, ina, mask) < 0) {
- ime = new_ip_match_mask(ina, mask);
- add_to_ip_match_list(local_networks, ime);
- }
- }
- }
- close(s);
- memput(buf, bufsiz);
-
- ns_debug(ns_log_default, 7, "local addresses:");
- dprint_ip_match_list(ns_log_default, local_addresses, 2, "", "");
- ns_debug(ns_log_default, 7, "local networks:");
- dprint_ip_match_list(ns_log_default, local_networks, 2, "", "");
-
- /*
- * now go through the iflist and delete anything that
- * does not have the current generation number. this is
- * how we catch interfaces that go away or change their
- * addresses. note that 0.0.0.0 is the wildcard element
- * and should never be deleted by this code.
- */
- dq_remove_gen(my_generation);
-
- if (EMPTY(iflist))
- ns_warning(ns_log_default, "not listening on any interfaces");
-}
-
-/* opensocket_d(ifp)
- * Open datagram socket bound to interface address.
- * Returns:
- * 0 on success.
- * -1 on failure.
- */
-static int
-opensocket_d(interface *ifp) {
- struct sockaddr_in nsa;
- const int on = 1;
- ISC_SOCKLEN_T m;
- int n;
-
- memset(&nsa, 0, sizeof nsa);
- nsa.sin_family = AF_INET;
- nsa.sin_addr = ifp->addr;
- nsa.sin_port = ifp->port;
-
- if ((ifp->dfd = ns_socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
- ns_error(ns_log_default, "socket(SOCK_DGRAM): %s",
- strerror(errno));
- return (-1);
- }
- if (ifp->dfd > evHighestFD(ev)) {
- ns_error(ns_log_default, "socket too high: %d", ifp->dfd);
- close(ifp->dfd);
- return (-1);
- }
-#ifdef USE_FIONBIO_IOCTL
- if (ioctl(ifp->dfd, FIONBIO, (char *) &on) == -1) {
- ns_info(ns_log_default, "ioctl(ifp->dfd, FIONBIO): %s",
- strerror(errno));
- (void) close(ifp->dfd);
- return (-1);
- }
-#else
- if ((n = fcntl(ifp->dfd, F_GETFL, 0)) == -1) {
- ns_info(ns_log_default, "fcntl(ifp->dfd, F_GETFL): %s",
- strerror(errno));
- (void) close(ifp->dfd);
- return (-1);
- }
- if (fcntl(ifp->dfd, F_SETFL, n|PORT_NONBLOCK) == -1) {
- ns_info(ns_log_default, "fcntl(ifp->dfd, NONBLOCK): %s",
- strerror(errno));
- (void) close(ifp->dfd);
- return (-1);
- }
-#endif
- if (fcntl(ifp->dfd, F_SETFD, 1) < 0) {
- ns_error(ns_log_default, "F_SETFD: %s", strerror(errno));
- close(ifp->dfd);
- return (-1);
- }
- ns_debug(ns_log_default, 1, "ifp->addr %s d_dfd %d",
- sin_ntoa(nsa), ifp->dfd);
- if (setsockopt(ifp->dfd, SOL_SOCKET, SO_REUSEADDR,
- (const char *)&on, sizeof(on)) != 0) {
- ns_notice(ns_log_default, "setsockopt(REUSEADDR): %s",
- strerror(errno));
- /* XXX press on regardless, this is not too serious. */
- }
-#ifdef SO_RCVBUF /* XXX */
- m = sizeof n;
- if ((getsockopt(ifp->dfd, SOL_SOCKET, SO_RCVBUF, (char*)&n, &m) >= 0)
- && (m == sizeof n)
- && (n < drbufsize)) {
- (void) setsockopt(ifp->dfd, SOL_SOCKET, SO_RCVBUF,
- (const char *)&drbufsize, sizeof drbufsize);
- }
-#endif /* SO_RCVBUF */
-#ifndef CANNOT_SET_SNDBUF
- if (setsockopt(ifp->dfd, SOL_SOCKET, SO_SNDBUF,
- (const char*)&dsbufsize, sizeof dsbufsize) < 0) {
- ns_info(ns_log_default,
- "setsockopt(dfd=%d, SO_SNDBUF, %d): %s",
- ifp->dfd, dsbufsize, strerror(errno));
- /* XXX press on regardless, this is not too serious. */
- }
-#endif
-#ifdef SO_BSDCOMPAT
- if (setsockopt(ifp->dfd, SOL_SOCKET, SO_BSDCOMPAT,
- (char*)&on, sizeof on) < 0) {
- ns_info(ns_log_default,
- "setsockopt(dfd=%d, SO_BSDCOMPAT): %s",
- ifp->dfd, strerror(errno));
- }
-#endif
- if (bind(ifp->dfd, (struct sockaddr *)&nsa, sizeof nsa)) {
- ns_error(ns_log_default, "bind(dfd=%d, %s): %s",
- ifp->dfd, sin_ntoa(nsa), strerror(errno));
- return (-1);
- }
- if (evSelectFD(ev, ifp->dfd, EV_READ, datagram_read, ifp,
- &ifp->evID_d) == -1) {
- ns_error(ns_log_default, "evSelectFD(dfd=%d): %s",
- ifp->dfd, strerror(errno));
- return (-1);
- }
- ifp->flags |= INTERFACE_FILE_VALID;
- return (0);
-}
-
-static int
-drain_rcvbuf(evContext ctx, interface *ifp, int fd, int *mread, int *mstore) {
- int drop = 0;
-
- drop = 0;
- for (; *mread > 0; (*mread)--) {
- union {
- HEADER h;
- u_char buf[EDNS_MESSAGE_SZ+1];
- } u;
- struct sockaddr_in from;
- ISC_SOCKLEN_T from_len = sizeof from;
- savedg *dg;
- int n;
-
- n = recvfrom(fd, (char *)u.buf, sizeof u.buf, 0,
- (struct sockaddr *)&from, &from_len);
- if (n <= 0)
- break; /* Socket buffer assumed empty. */
- drop++; /* Pessimistic assumption. */
- if (n > EDNS_MESSAGE_SZ)
- continue; /* Oversize message - EDNS0 needed. */
- if (from.sin_family != AF_INET)
- continue; /* Not IPv4 - IPv6 needed. */
- if (u.h.opcode == ns_o_query && u.h.qr == 0)
- continue; /* Query - what we're here to axe. */
- if (*mstore <= 0)
- continue; /* Reached storage quota, ignore. */
- if ((dg = memget(sizeof *dg)) == NULL)
- continue; /* No memory - probably fatal. */
- if ((dg->buf = memget(n)) == NULL) {
- memput(dg, sizeof *dg);
- continue; /* No memory - probably fatal. */
- }
- dg->from = from;
- dg->dfd = fd;
- dg->ifp = ifp;
- dg->gen = ifp->gen;
- dg->buflen = n;
- memcpy(dg->buf, u.buf, n);
- if (evWaitFor(ctx, (void *)drain_all_rcvbuf, savedg_waitfunc,
- dg, NULL) < 0)
- {
- memput(dg->buf, dg->buflen);
- memput(dg, sizeof *dg);
- continue; /* No memory - probably fatal. */
- }
- drop--; /* Pessimism was inappropriate. */
- (*mstore)--;
- }
- return (drop);
-}
-
-static int
-drain_all_rcvbuf(evContext ctx) {
- interface *ifp;
- int mread = MAX_SYNCDRAIN;
- int mstore = MAX_SYNCSTORE;
- int drop = 0;
-
- for (ifp = HEAD(iflist); ifp != NULL; ifp = NEXT(ifp, link))
- if (ifp->dfd != -1)
- drop += drain_rcvbuf(ctx, ifp, ifp->dfd,
- &mread, &mstore);
- if (mstore < MAX_SYNCSTORE)
- INSIST_ERR(evDo(ctx, (void *)drain_all_rcvbuf) != -1);
- return (drop);
-}
-
-/* opensocket_s(ifp)
- * Open stream (listener) socket bound to interface address.
- * Returns:
- * 0 on success.
- * -1 on failure.
- */
-static int
-opensocket_s(interface *ifp) {
- struct sockaddr_in nsa;
- const int on = 1;
- int n;
-
- memset(&nsa, 0, sizeof nsa);
- nsa.sin_family = AF_INET;
- nsa.sin_addr = ifp->addr;
- nsa.sin_port = ifp->port;
-
- /*
- * Open stream (listener) port.
- */
- n = 0;
- again:
- if ((ifp->sfd = ns_socket(AF_INET, SOCK_STREAM, 0)) < 0) {
- ns_error(ns_log_default, "socket(SOCK_STREAM): %s",
- strerror(errno));
- return (-1);
- }
- if (ifp->sfd > evHighestFD(ev)) {
- ns_error(ns_log_default, "socket too high: %d", ifp->sfd);
- close(ifp->sfd);
- return (-1);
- }
- if (fcntl(ifp->sfd, F_SETFD, 1) < 0) {
- ns_error(ns_log_default, "F_SETFD: %s", strerror(errno));
- close(ifp->sfd);
- return (-1);
- }
- if (setsockopt(ifp->sfd, SOL_SOCKET, SO_REUSEADDR,
- (const char *)&on, sizeof on) != 0) {
- ns_notice(ns_log_default, "setsockopt(REUSEADDR): %s",
- strerror(errno));
- /* Consider that your first warning of trouble to come. */
- }
- if (bind(ifp->sfd, (struct sockaddr *)&nsa, sizeof nsa) < 0) {
- if (errno != EADDRINUSE || ++n > 4) {
- if (errno == EADDRINUSE)
- ns_error(ns_log_default,
- "There may be a name server already running on %s",
- sin_ntoa(nsa));
- else
- ns_error(ns_log_default,
- "bind(sfd=%d, %s): %s", ifp->sfd,
- sin_ntoa(nsa), strerror(errno));
- return (-1);
- }
-
- /* Retry opening the socket a few times */
- close(ifp->sfd);
- ifp->sfd = -1;
- sleep(30);
- goto again;
- }
- if (evListen(ev, ifp->sfd, listenmax, stream_accept, ifp, &ifp->evID_s)
- == -1) {
- ns_error(ns_log_default, "evListen(sfd=%d): %s",
- ifp->sfd, strerror(errno));
- return (-1);
- }
- ifp->flags |= INTERFACE_CONN_VALID;
- return (0);
-}
-
-/* opensocket_f()
- * Open datagram socket bound to no particular interface; use for ns_forw
- * and sysquery.
- */
-void
-opensocket_f() {
- static struct sockaddr_in prev_qsrc;
- static int been_here;
- static interface *prev_ifp;
- struct sockaddr_in nsa;
- const int on = 1;
- ISC_SOCKLEN_T n;
- int need_close;
- interface *ifp;
-
- need_close = 0;
- if (been_here) {
- if (prev_ifp != NULL)
- prev_ifp->flags &= ~INTERFACE_FORWARDING;
- else if (server_options->query_source.sin_port == htons(0) ||
- prev_qsrc.sin_addr.s_addr !=
- server_options->query_source.sin_addr.s_addr ||
- prev_qsrc.sin_port !=
- server_options->query_source.sin_port)
- need_close = 1;
- } else
- ds = -1;
-
- been_here = 1;
- INSIST(server_options != NULL);
-
- if (need_close) {
- evDeselectFD(ev, ds_evID);
- close(ds);
- ds = -1;
- }
-
- /*
- * If we're already listening on the query_source address and port,
- * we don't need to open another socket. We mark the interface, so
- * we'll notice we're in trouble if it goes away.
- */
- ifp = if_find(server_options->query_source.sin_addr,
- server_options->query_source.sin_port);
- if (ifp != NULL) {
- ifp->flags |= INTERFACE_FORWARDING;
- prev_ifp = ifp;
- ds = ifp->dfd;
- ns_info(ns_log_default, "forwarding source address is %s",
- sin_ntoa(server_options->query_source));
- return;
- }
-
- /*
- * If we're already using the correct query source, we're done.
- */
- if (ds >= 0)
- return;
-
- prev_qsrc = server_options->query_source;
- prev_ifp = NULL;
-
- if ((ds = socket(AF_INET, SOCK_DGRAM, 0)) < 0)
- ns_panic(ns_log_default, 1, "socket(SOCK_DGRAM): %s",
- strerror(errno));
- if (ds > evHighestFD(ev))
- ns_panic(ns_log_default, 1, "socket too high: %d", ds);
- if (fcntl(ds, F_SETFD, 1) < 0)
- ns_panic(ns_log_default, 1, "F_SETFD: %s", strerror(errno));
- if (setsockopt(ds, SOL_SOCKET, SO_REUSEADDR,
- (const char *)&on, sizeof on) != 0) {
- ns_notice(ns_log_default, "setsockopt(REUSEADDR): %s",
- strerror(errno));
- /* XXX press on regardless, this is not too serious. */
- }
-#ifdef SO_BSDCOMPAT
- if (setsockopt(ds, SOL_SOCKET, SO_BSDCOMPAT,
- (char *)&on, sizeof on) != 0) {
- ns_notice(ns_log_default, "setsockopt(BSDCOMPAT): %s",
- strerror(errno));
- /* XXX press on regardless, this is not too serious. */
- }
-#endif
- if (bind(ds, (struct sockaddr *)&server_options->query_source,
- sizeof server_options->query_source) < 0)
- ns_panic(ns_log_default, 0, "opensocket_f: bind(%s): %s",
- sin_ntoa(server_options->query_source),
- strerror(errno));
-
- n = sizeof nsa;
- if (getsockname(ds, (struct sockaddr *)&nsa, &n) < 0)
- ns_panic(ns_log_default, 1, "opensocket_f: getsockaddr: %s",
- strerror(errno));
-
- ns_debug(ns_log_default, 1, "fwd ds %d addr %s", ds, sin_ntoa(nsa));
- ns_info(ns_log_default, "Forwarding source address is %s",
- sin_ntoa(nsa));
-
- if (evSelectFD(ev, ds, EV_READ, datagram_read, NULL, &ds_evID) == -1)
- ns_panic(ns_log_default, 1, "evSelectFD(fd %d): %s",
- ds, strerror(errno));
- /* XXX: should probably use a different FileFunc that only accepts
- * responses, since requests on this socket make no sense.
- */
-}
-
-static void
-setdebug(int new_debug) {
-#ifdef DEBUG
- int old_debug;
-
- if (!new_debug)
- ns_debug(ns_log_default, 1, "Debug off");
- old_debug = debug;
- debug = new_debug;
- log_option(log_ctx, LOG_OPTION_DEBUG, debug);
- log_option(log_ctx, LOG_OPTION_LEVEL, debug);
- if (old_debug && !debug)
- log_close_debug_channels(log_ctx);
- evSetDebug(ev, debug, log_get_stream(eventlib_channel));
- if (debug) {
- if (!old_debug)
- open_special_channels();
- ns_debug(ns_log_default, 1, "Debug level %d", debug);
- if (!old_debug) {
- ns_debug(ns_log_default, 1, "Version = %s", Version);
- ns_debug(ns_log_default, 1, "conffile = %s", conffile);
- }
- }
-#endif
-}
-
-/*
-** Routines for managing stream queue
-*/
-
-static struct qstream *
-sq_add() {
- struct qstream *sqp;
-
- if (!(sqp = (struct qstream *)memget(sizeof *sqp))) {
- ns_error(ns_log_default, "sq_add: memget: %s",
- strerror(errno));
- return (NULL);
- }
- memset(sqp, 0, sizeof *sqp);
- ns_debug(ns_log_default, 3, "sq_add(%#lx)", (u_long)sqp);
-
- sqp->flags = 0;
- /* XXX should init other fields too? */
- sqp->s_next = streamq;
- streamq = sqp;
- return (sqp);
-}
-
-/* sq_remove(qp)
- * remove stream queue structure `qp'.
- * no current queries may refer to this stream when it is removed.
- * side effects:
- * memory is deallocated. sockets are closed. lists are relinked.
- */
-void
-sq_remove(struct qstream *qp) {
- struct qstream *qsp;
-
- ns_debug(ns_log_default, 2, "sq_remove(%#lx, %d) rfcnt=%d",
- (u_long)qp, qp->s_rfd, qp->s_refcnt);
-
- if (qp->s_wbuf != NULL) {
- memput(qp->s_wbuf, qp->s_wbuf_end - qp->s_wbuf);
- qp->s_wbuf_send = qp->s_wbuf_free = NULL;
- qp->s_wbuf_end = qp->s_wbuf = NULL;
- }
- if (qp->flags & STREAM_MALLOC)
- memput(qp->s_buf, qp->s_bufsize);
- if (qp->flags & STREAM_READ_EV)
- INSIST_ERR(evCancelRW(ev, qp->evID_r) != -1);
- if (qp->flags & STREAM_WRITE_EV)
- INSIST_ERR(evDeselectFD(ev, qp->evID_w) != -1);
- if (qp->flags & STREAM_CONNECT_EV)
- INSIST_ERR(evCancelConn(ev, qp->evID_c) != -1);
- if (qp->flags & STREAM_AXFR || qp->flags & STREAM_AXFRIXFR)
- ns_freexfr(qp);
- (void) close(qp->s_rfd);
- if (qp == streamq)
- streamq = qp->s_next;
- else {
- for (qsp = streamq;
- qsp && (qsp->s_next != qp);
- qsp = qsp->s_next)
- (void)NULL;
- if (qsp)
- qsp->s_next = qp->s_next;
- }
- memput(qp, sizeof *qp);
-}
-
-/* void
- * sq_flush(allbut)
- * call sq_remove() on all open streams except `allbut'
- * side effects:
- * global list `streamq' modified
- * idiocy:
- * is N^2 due to the scan inside of sq_remove()
- */
-void
-sq_flush(struct qstream *allbut) {
- struct qstream *sp, *spnext;
-
- for (sp = streamq; sp != NULL; sp = spnext) {
- spnext = sp->s_next;
- if (sp != allbut)
- sq_remove(sp);
- }
-}
-
-/* int
- * sq_openw(qs, buflen)
- * add a write buffer to a stream
- * return:
- * 0 = success
- * -1 = failure (check errno)
- */
-int
-sq_openw(struct qstream *qs, int buflen) {
-#ifdef DO_SO_LINGER /* XXX */
- static const struct linger ll = { 1, 120 };
-#endif
-
- INSIST(qs->s_wbuf == NULL);
- qs->s_wbuf = (u_char *)memget(buflen);
- if (qs->s_wbuf == NULL)
- return (-1);
- qs->s_wbuf_send = qs->s_wbuf;
- qs->s_wbuf_free = qs->s_wbuf;
- qs->s_wbuf_end = qs->s_wbuf + buflen;
-#ifdef DO_SO_LINGER /* XXX */
- /* kernels that map pages for IO end up failing if the pipe is full
- * at exit and we take away the final buffer. this is really a kernel
- * bug but it's harmless on systems that are not broken, so...
- */
- setsockopt(qs->s_rfd, SOL_SOCKET, SO_LINGER, (char *)&ll, sizeof ll);
-#endif
- return (0);
-}
-
-/* static void
- * sq_dowrite(qs)
- * try to submit data to the system, remove it from our queue.
- */
-static int
-sq_dowrite(struct qstream *qs) {
- if (qs->s_wbuf_free > qs->s_wbuf_send) {
- int n = write(qs->s_rfd, qs->s_wbuf_send,
- qs->s_wbuf_free - qs->s_wbuf_send);
- INSIST(qs->s_wbuf != NULL);
- if (n < 0) {
- if (errno != EINTR && errno != EAGAIN
-#if (EWOULDBLOCK != EAGAIN)
- && errno != EWOULDBLOCK
-#endif
- )
- return (-1);
- return (0);
- }
- qs->s_wbuf_send += n;
- if (qs->s_wbuf_free > qs->s_wbuf_send) {
- /* XXX: need some kind of delay here during which the
- * socket will be deselected so we don't spin.
- */
- n = qs->s_wbuf_free - qs->s_wbuf_send;
- memmove(qs->s_wbuf, qs->s_wbuf_send, n);
- qs->s_wbuf_send = qs->s_wbuf;
- qs->s_wbuf_free = qs->s_wbuf + n;
- }
- }
- if (qs->s_wbuf_free == qs->s_wbuf_send)
- qs->s_wbuf_free = qs->s_wbuf_send = qs->s_wbuf;
- return (0);
-}
-
-/* void
- * sq_flushw(qs)
- * called when the socket becomes writable and we want to flush our
- * buffers and the system's socket buffers. use as a closure with
- * sq_writeh().
- */
-void
-sq_flushw(struct qstream *qs) {
- if (qs->s_wbuf_free == qs->s_wbuf_send) {
- sq_writeh(qs, NULL);
- sq_done(qs);
- }
-}
-
-/* static void
- * sq_writable(ctx, uap, fd, evmask)
- * glue between eventlib closures and qstream closures
- */
-static void
-sq_writable(evContext ctx, void *uap, int fd, int evmask) {
- struct qstream *qs = uap;
-
- UNUSED(ctx);
-
- INSIST(evmask & EV_WRITE);
- INSIST(fd == qs->s_rfd);
- if (sq_dowrite(qs) < 0) {
- sq_remove(qs);
- return;
- }
- if (qs->s_wbuf_closure
- && qs->s_wbuf_end - qs->s_wbuf_free >= HFIXEDSZ+2) /* XXX guess */
- (*qs->s_wbuf_closure)(qs);
- if (sq_dowrite(qs) < 0) {
- sq_remove(qs);
- return;
- }
-}
-
-/* int
- * sq_writeh(qs, closure)
- * register a closure to be called when a stream becomes writable
- * return:
- * 0 = success
- * -1 = failure (check errno)
- */
-int
-sq_writeh(struct qstream *qs, sq_closure c) {
- if (c) {
- if (!qs->s_wbuf_closure) {
- if (evSelectFD(ev, qs->s_rfd, EV_WRITE,
- sq_writable, qs, &qs->evID_w) < 0) {
- return (-1);
- }
- qs->flags |= STREAM_WRITE_EV;
- }
- } else {
- (void) evDeselectFD(ev, qs->evID_w);
- qs->flags &= ~STREAM_WRITE_EV;
- }
- qs->s_wbuf_closure = c;
- return (0);
-}
-
-/* int
- * sq_write(qs, buf, len)
- * queue a message onto the stream, prepended by a two byte length field
- * return:
- * 0 = success
- * -1 = failure (check errno; E2BIG means we can't handle this right now)
- */
-int
-sq_write(struct qstream *qs, const u_char *buf, int len) {
- INSIST(qs->s_wbuf != NULL);
- if (NS_INT16SZ + len > qs->s_wbuf_end - qs->s_wbuf_free) {
- if (sq_dowrite(qs) < 0)
- return (-1);
- if (NS_INT16SZ + len > qs->s_wbuf_end - qs->s_wbuf_free) {
- errno = E2BIG;
- return (-1);
- }
- }
- __putshort(len, qs->s_wbuf_free);
- qs->s_wbuf_free += NS_INT16SZ;
- memcpy(qs->s_wbuf_free, buf, len);
- qs->s_wbuf_free += len;
- return (0);
-}
-
-/*
- * Initiate query on stream;
- * mark as referenced and stop selecting for input.
- */
-static void
-sq_query(struct qstream *sp) {
- sp->s_refcnt++;
-}
-
-/*
- * Note that the current request on a stream has completed,
- * and that we should continue looking for requests on the stream.
- */
-void
-sq_done(struct qstream *sp) {
- struct iovec iov;
-
- if (sp->s_wbuf != NULL) {
- INSIST(sp->s_wbuf_send == sp->s_wbuf_free);
- memput(sp->s_wbuf, sp->s_wbuf_end - sp->s_wbuf);
- sp->s_wbuf_send = sp->s_wbuf_free = NULL;
- sp->s_wbuf_end = sp->s_wbuf = NULL;
- }
- if (sp->flags & STREAM_AXFR || sp->flags & STREAM_AXFRIXFR)
- ns_freexfr(sp);
- sp->s_refcnt = 0;
- sp->s_time = tt.tv_sec;
- if (sp->flags & STREAM_DONE_CLOSE) {
- /* XXX */
- sq_remove(sp);
- return;
- }
- iov = evConsIovec(sp->s_temp, INT16SZ);
- if (evRead(ev, sp->s_rfd, &iov, 1, stream_getlen, sp, &sp->evID_r) ==
- -1)
- ns_panic(ns_log_default, 1, "evRead(fd %d): %s",
- sp->s_rfd, strerror(errno));
- sp->flags |= STREAM_READ_EV;
-}
-
-/* void
- * dq_remove_gen(gen)
- * close/deallocate all the udp sockets (except 0.0.0.0) which are
- * not from the current generation.
- * side effects:
- * global list `iflist' is modified.
- */
-void
-dq_remove_gen(time_t gen) {
- interface *this, *next;
-
- for (this = HEAD(iflist); this != NULL; this = next) {
- next = NEXT(this, link);
- if (this->gen != gen && ina_hlong(this->addr) != INADDR_ANY)
- dq_remove(this);
- }
-}
-
-/* void
- * dq_remove_all()
- * close/deallocate all interfaces.
- * side effects:
- * global list `iflist' is modified.
- */
-void
-dq_remove_all() {
- interface *this, *next;
-
- for (this = HEAD(iflist); this != NULL; this = next) {
- next = NEXT(this, link);
- /*
- * Clear the forwarding flag so we don't panic the server.
- */
- this->flags &= ~INTERFACE_FORWARDING;
- dq_remove(this);
- }
-}
-
-/* void
- * dq_remove(interface *this)
- * close/deallocate an interface's sockets. called on errors
- * or if the interface disappears.
- * side effects:
- * global list `iflist' is modified.
- */
-static void
-dq_remove(interface *this) {
- ns_notice(ns_log_default, "deleting interface [%s].%u",
- inet_ntoa(this->addr), ntohs(this->port));
-
- if ((this->flags & INTERFACE_FORWARDING) != 0)
- ns_panic(ns_log_default, 0,
- "forwarding interface [%s].%u gone",
- inet_ntoa(this->addr),
- ntohs(this->port));
-
- /* Deallocate fields. */
- if ((this->flags & INTERFACE_FILE_VALID) != 0)
- (void) evDeselectFD(ev, this->evID_d);
- if (this->dfd >= 0)
- (void) close(this->dfd);
- if ((this->flags & INTERFACE_CONN_VALID) != 0)
- (void) evCancelConn(ev, this->evID_s);
- if (this->sfd >= 0)
- (void) close(this->sfd);
-
- UNLINK(iflist, this, link);
- memput(this, sizeof *this);
-}
-
-/* struct in_addr
- * net_mask(ina)
- * makes a classful assumption in a classless world, and returns it.
- */
-struct in_addr
-net_mask(struct in_addr ina) {
- u_long hl = ina_hlong(ina);
- struct in_addr ret;
-
- if (IN_CLASSA(hl))
- hl = IN_CLASSA_NET;
- else if (IN_CLASSB(hl))
- hl = IN_CLASSB_NET;
- else if (IN_CLASSC(hl))
- hl = IN_CLASSC_NET;
- else
- hl = INADDR_BROADCAST;
- ina_ulong(ret) = htonl(hl);
- return (ret);
-}
-
-/* aIsUs(addr)
- * scan our list of interface addresses for "addr".
- * returns:
- * 0: address isn't one of our interfaces
- * >0: address is one of our interfaces, or INADDR_ANY
- */
-int
-aIsUs(struct in_addr addr) {
-
- if (ina_hlong(addr) == INADDR_ANY || if_find(addr, 0) != NULL)
- return (1);
- return (0);
-}
-
-/* interface *
- * if_find(addr, port)
- * scan our list of interface addresses for "addr" and port.
- * port == 0 means match any port
- * returns:
- * pointer to interface with this address/port, or NULL if there isn't
- * one.
- */
-static interface *
-if_find(struct in_addr addr, u_int16_t port) {
- interface *ifp;
-
- for (ifp = HEAD(iflist); ifp != NULL; ifp = NEXT(ifp, link))
- if (ina_equal(addr, ifp->addr))
- if (port == 0 || ifp->port == port)
- break;
- return (ifp);
-}
-
-/*
- * These are here in case we ever want to get more clever, like perhaps
- * using a bitmap to keep track of outstanding queries and a random
- * allocation scheme to make it a little harder to predict them. Note
- * that the resolver will need the same protection so the cleverness
- * should be put there rather than here; this is just an interface layer.
- *
- * This is true but ... most clients only send out a few queries, they
- * use varying port numbers, and the queries aren't sent to the outside
- * world which we know is full of spoofers. Doing a good job of randomizing
- * ids may also be to expensive for each client. Queries forwarded by the
- * server always come from the same port (unless you let 8.x pick a port
- * and restart it periodically - maybe it should open several and use
- * them randomly). The server sends out lots more queries, and if it's
- * cache is corrupted, it has the potential to affect more clients.
- * NOTE: - randomizing the ID or source port doesn't help a bit if the
- * queries can be sniffed.
- * -- DL
- */
-
-/*
- * Allow the user to pick one of two ID randomization algorithms.
- *
- * The first algorithm is an adaptation of the sequence shuffling
- * algorithm discovered by Carter Bays and S. D. Durham [ACM Trans. Math.
- * Software 2 (1976), 59-64], as documented as Algorithm B in Chapter
- * 3.2.2 in Volume 2 of Knuth's "The Art of Computer Programming". We use
- * a randomly selected linear congruential random number generator with a
- * modulus of 2^16, whose increment is a randomly picked odd number, and
- * whose multiplier is picked from a set which meets the following
- * criteria:
- * Is of the form 8*n+5, which ensures "high potency" according to
- * principle iii in the summary chapter 3.6. This form also has a
- * gcd(a-1,m) of 4 which is good according to principle iv.
- *
- * Is between 0.01 and 0.99 times the modulus as specified by
- * principle iv.
- *
- * Passes the spectral test "with flying colors" (ut >= 1) in
- * dimensions 2 through 6 as calculated by Algorithm S in Chapter
- * 3.3.4 and the ratings calculated by formula 35 in section E.
- *
- * Of the multipliers that pass this test, pick the set that is
- * best according to the theoretical bounds of the serial
- * correlation test. This was calculated using a simplified
- * version of Knuth's Theorem K in Chapter 3.3.3.
- *
- * These criteria may not be important for this use, but we might as well
- * pick from the best generators since there are so many possible ones and
- * we don't have that many random bits to do the picking.
- *
- * We use a modulus of 2^16 instead of something bigger so that we will
- * tend to cycle through all the possible IDs before repeating any,
- * however the shuffling will perturb this somewhat. Theoretically there
- * is no minimimum interval between two uses of the same ID, but in
- * practice it seems to be >64000.
- *
- * Our adaptatation of Algorithm B mixes the hash state which has
- * captured various random events into the shuffler to perturb the
- * sequence.
- *
- * One disadvantage of this algorithm is that if the generator parameters
- * were to be guessed, it would be possible to mount a limited brute force
- * attack on the ID space since the IDs are only shuffled within a limited
- * range.
- *
- * The second algorithm uses the same random number generator to populate
- * a pool of 65536 IDs. The hash state is used to pick an ID from a window
- * of 4096 IDs in this pool, then the chosen ID is swapped with the ID
- * at the beginning of the window and the window position is advanced.
- * This means that the interval between uses of the ID will be no less
- * than 65536-4096. The ID sequence in the pool will become more random
- * over time.
- *
- * For both algorithms, two more linear congruential random number generators
- * are selected. The ID from the first part of algorithm is used to seed
- * the first of these generators, and its output is used to seed the second.
- * The strategy is use these generators as 1 to 1 hashes to obfuscate the
- * properties of the generator used in the first part of either algorithm.
- *
- * The first algorithm may be suitable for use in a client resolver since
- * its memory requirements are fairly low and it's pretty random out of
- * the box. It is somewhat succeptible to a limited brute force attack,
- * so the second algorithm is probably preferable for a longer running
- * program that issues a large number of queries and has time to randomize
- * the pool.
- */
-
-#define NSID_SHUFFLE_TABLE_SIZE 100 /* Suggested by Knuth */
-/*
- * Pick one of the next 4096 IDs in the pool.
- * There is a tradeoff here between randomness and how often and ID is reused.
- */
-#define NSID_LOOKAHEAD 4096 /* Must be a power of 2 */
-#define NSID_SHUFFLE_ONLY 1 /* algorithm 1 */
-#define NSID_USE_POOL 2 /* algorithm 2 */
-
-/*
- * Keep a running hash of various bits of data that we'll use to
- * stir the ID pool or perturb the ID generator
- */
-void
-nsid_hash(u_char *data, size_t len) {
- /*
- * Hash function similar to the one we use for hashing names.
- * We don't fold case or toss the upper bit here, though.
- * This hash doesn't do much interesting when fed binary zeros,
- * so there may be a better hash function.
- * This function doesn't need to be very strong since we're
- * only using it to stir the pool, but it should be reasonably
- * fast.
- */
- while (len-- > 0) {
- nsid_hash_state = HASHROTATE(nsid_hash_state);
- nsid_hash_state += *data++;
- }
-}
-
-/*
- * Table of good linear congruential multipliers for modulus 2^16
- * in order of increasing serial correlation bounds (so trim from
- * the end).
- */
-static const u_int16_t nsid_multiplier_table[] = {
- 17565, 25013, 11733, 19877, 23989, 23997, 24997, 25421,
- 26781, 27413, 35901, 35917, 35973, 36229, 38317, 38437,
- 39941, 40493, 41853, 46317, 50581, 51429, 53453, 53805,
- 11317, 11789, 12045, 12413, 14277, 14821, 14917, 18989,
- 19821, 23005, 23533, 23573, 23693, 27549, 27709, 28461,
- 29365, 35605, 37693, 37757, 38309, 41285, 45261, 47061,
- 47269, 48133, 48597, 50277, 50717, 50757, 50805, 51341,
- 51413, 51581, 51597, 53445, 11493, 14229, 20365, 20653,
- 23485, 25541, 27429, 29421, 30173, 35445, 35653, 36789,
- 36797, 37109, 37157, 37669, 38661, 39773, 40397, 41837,
- 41877, 45293, 47277, 47845, 49853, 51085, 51349, 54085,
- 56933, 8877, 8973, 9885, 11365, 11813, 13581, 13589,
- 13613, 14109, 14317, 15765, 15789, 16925, 17069, 17205,
- 17621, 17941, 19077, 19381, 20245, 22845, 23733, 24869,
- 25453, 27213, 28381, 28965, 29245, 29997, 30733, 30901,
- 34877, 35485, 35613, 36133, 36661, 36917, 38597, 40285,
- 40693, 41413, 41541, 41637, 42053, 42349, 45245, 45469,
- 46493, 48205, 48613, 50861, 51861, 52877, 53933, 54397,
- 55669, 56453, 56965, 58021, 7757, 7781, 8333, 9661,
- 12229, 14373, 14453, 17549, 18141, 19085, 20773, 23701,
- 24205, 24333, 25261, 25317, 27181, 30117, 30477, 34757,
- 34885, 35565, 35885, 36541, 37957, 39733, 39813, 41157,
- 41893, 42317, 46621, 48117, 48181, 49525, 55261, 55389,
- 56845, 7045, 7749, 7965, 8469, 9133, 9549, 9789,
- 10173, 11181, 11285, 12253, 13453, 13533, 13757, 14477,
- 15053, 16901, 17213, 17269, 17525, 17629, 18605, 19013,
- 19829, 19933, 20069, 20093, 23261, 23333, 24949, 25309,
- 27613, 28453, 28709, 29301, 29541, 34165, 34413, 37301,
- 37773, 38045, 38405, 41077, 41781, 41925, 42717, 44437,
- 44525, 44613, 45933, 45941, 47077, 50077, 50893, 52117,
- 5293, 55069, 55989, 58125, 59205, 6869, 14685, 15453,
- 16821, 17045, 17613, 18437, 21029, 22773, 22909, 25445,
- 25757, 26541, 30709, 30909, 31093, 31149, 37069, 37725,
- 37925, 38949, 39637, 39701, 40765, 40861, 42965, 44813,
- 45077, 45733, 47045, 50093, 52861, 52957, 54181, 56325,
- 56365, 56381, 56877, 57013, 5741, 58101, 58669, 8613,
- 10045, 10261, 10653, 10733, 11461, 12261, 14069, 15877,
- 17757, 21165, 23885, 24701, 26429, 26645, 27925, 28765,
- 29197, 30189, 31293, 39781, 39909, 40365, 41229, 41453,
- 41653, 42165, 42365, 47421, 48029, 48085, 52773, 5573,
- 57037, 57637, 58341, 58357, 58901, 6357, 7789, 9093,
- 10125, 10709, 10765, 11957, 12469, 13437, 13509, 14773,
- 15437, 15773, 17813, 18829, 19565, 20237, 23461, 23685,
- 23725, 23941, 24877, 25461, 26405, 29509, 30285, 35181,
- 37229, 37893, 38565, 40293, 44189, 44581, 45701, 47381,
- 47589, 48557, 4941, 51069, 5165, 52797, 53149, 5341,
- 56301, 56765, 58581, 59493, 59677, 6085, 6349, 8293,
- 8501, 8517, 11597, 11709, 12589, 12693, 13517, 14909,
- 17397, 18085, 21101, 21269, 22717, 25237, 25661, 29189,
- 30101, 31397, 33933, 34213, 34661, 35533, 36493, 37309,
- 40037, 4189, 42909, 44309, 44357, 44389, 4541, 45461,
- 46445, 48237, 54149, 55301, 55853, 56621, 56717, 56901,
- 5813, 58437, 12493, 15365, 15989, 17829, 18229, 19341,
- 21013, 21357, 22925, 24885, 26053, 27581, 28221, 28485,
- 30605, 30613, 30789, 35437, 36285, 37189, 3941, 41797,
- 4269, 42901, 43293, 44645, 45221, 46893, 4893, 50301,
- 50325, 5189, 52109, 53517, 54053, 54485, 5525, 55949,
- 56973, 59069, 59421, 60733, 61253, 6421, 6701, 6709,
- 7101, 8669, 15797, 19221, 19837, 20133, 20957, 21293,
- 21461, 22461, 29085, 29861, 30869, 34973, 36469, 37565,
- 38125, 38829, 39469, 40061, 40117, 44093, 47429, 48341,
- 50597, 51757, 5541, 57629, 58405, 59621, 59693, 59701,
- 61837, 7061, 10421, 11949, 15405, 20861, 25397, 25509,
- 25893, 26037, 28629, 28869, 29605, 30213, 34205, 35637,
- 36365, 37285, 3773, 39117, 4021, 41061, 42653, 44509,
- 4461, 44829, 4725, 5125, 52269, 56469, 59085, 5917,
- 60973, 8349, 17725, 18637, 19773, 20293, 21453, 22533,
- 24285, 26333, 26997, 31501, 34541, 34805, 37509, 38477,
- 41333, 44125, 46285, 46997, 47637, 48173, 4925, 50253,
- 50381, 50917, 51205, 51325, 52165, 52229, 5253, 5269,
- 53509, 56253, 56341, 5821, 58373, 60301, 61653, 61973,
- 62373, 8397, 11981, 14341, 14509, 15077, 22261, 22429,
- 24261, 28165, 28685, 30661, 34021, 34445, 39149, 3917,
- 43013, 43317, 44053, 44101, 4533, 49541, 49981, 5277,
- 54477, 56357, 57261, 57765, 58573, 59061, 60197, 61197,
- 62189, 7725, 8477, 9565, 10229, 11437, 14613, 14709,
- 16813, 20029, 20677, 31445, 3165, 31957, 3229, 33541,
- 36645, 3805, 38973, 3965, 4029, 44293, 44557, 46245,
- 48917, 4909, 51749, 53709, 55733, 56445, 5925, 6093,
- 61053, 62637, 8661, 9109, 10821, 11389, 13813, 14325,
- 15501, 16149, 18845, 22669, 26437, 29869, 31837, 33709,
- 33973, 34173, 3677, 3877, 3981, 39885, 42117, 4421,
- 44221, 44245, 44693, 46157, 47309, 5005, 51461, 52037,
- 55333, 55693, 56277, 58949, 6205, 62141, 62469, 6293,
- 10101, 12509, 14029, 17997, 20469, 21149, 25221, 27109,
- 2773, 2877, 29405, 31493, 31645, 4077, 42005, 42077,
- 42469, 42501, 44013, 48653, 49349, 4997, 50101, 55405,
- 56957, 58037, 59429, 60749, 61797, 62381, 62837, 6605,
- 10541, 23981, 24533, 2701, 27333, 27341, 31197, 33805,
- 3621, 37381, 3749, 3829, 38533, 42613, 44381, 45901,
- 48517, 51269, 57725, 59461, 60045, 62029, 13805, 14013,
- 15461, 16069, 16157, 18573, 2309, 23501, 28645, 3077,
- 31541, 36357, 36877, 3789, 39429, 39805, 47685, 47949,
- 49413, 5485, 56757, 57549, 57805, 58317, 59549, 62213,
- 62613, 62853, 62933, 8909, 12941, 16677, 20333, 21541,
- 24429, 26077, 26421, 2885, 31269, 33381, 3661, 40925,
- 42925, 45173, 4525, 4709, 53133, 55941, 57413, 57797,
- 62125, 62237, 62733, 6773, 12317, 13197, 16533, 16933,
- 18245, 2213, 2477, 29757, 33293, 35517, 40133, 40749,
- 4661, 49941, 62757, 7853, 8149, 8573, 11029, 13421,
- 21549, 22709, 22725, 24629, 2469, 26125, 2669, 34253,
- 36709, 41013, 45597, 46637, 52285, 52333, 54685, 59013,
- 60997, 61189, 61981, 62605, 62821, 7077, 7525, 8781,
- 10861, 15277, 2205, 22077, 28517, 28949, 32109, 33493,
- 3685, 39197, 39869, 42621, 44997, 48565, 5221, 57381,
- 61749, 62317, 63245, 63381, 23149, 2549, 28661, 31653,
- 33885, 36341, 37053, 39517, 42805, 45853, 48997, 59349,
- 60053, 62509, 63069, 6525, 1893, 20181, 2365, 24893,
- 27397, 31357, 32277, 33357, 34437, 36677, 37661, 43469,
- 43917, 50997, 53869, 5653, 13221, 16741, 17893, 2157,
- 28653, 31789, 35301, 35821, 61613, 62245, 12405, 14517,
- 17453, 18421, 3149, 3205, 40341, 4109, 43941, 46869,
- 48837, 50621, 57405, 60509, 62877, 8157, 12933, 12957,
- 16501, 19533, 3461, 36829, 52357, 58189, 58293, 63053,
- 17109, 1933, 32157, 37701, 59005, 61621, 13029, 15085,
- 16493, 32317, 35093, 5061, 51557, 62221, 20765, 24613,
- 2629, 30861, 33197, 33749, 35365, 37933, 40317, 48045,
- 56229, 61157, 63797, 7917, 17965, 1917, 1973, 20301,
- 2253, 33157, 58629, 59861, 61085, 63909, 8141, 9221,
- 14757, 1581, 21637, 26557, 33869, 34285, 35733, 40933,
- 42517, 43501, 53653, 61885, 63805, 7141, 21653, 54973,
- 31189, 60061, 60341, 63357, 16045, 2053, 26069, 33997,
- 43901, 54565, 63837, 8949, 17909, 18693, 32349, 33125,
- 37293, 48821, 49053, 51309, 64037, 7117, 1445, 20405,
- 23085, 26269, 26293, 27349, 32381, 33141, 34525, 36461,
- 37581, 43525, 4357, 43877, 5069, 55197, 63965, 9845,
- 12093, 2197, 2229, 32165, 33469, 40981, 42397, 8749,
- 10853, 1453, 18069, 21693, 30573, 36261, 37421, 42533
-};
-#define NSID_MULT_TABLE_SIZE \
- ((sizeof nsid_multiplier_table)/(sizeof nsid_multiplier_table[0]))
-
-void
-nsid_init(void) {
- struct timeval now;
- pid_t mypid;
- u_int16_t a1ndx, a2ndx, a3ndx, c1ndx, c2ndx, c3ndx;
- int i;
-
- if (nsid_algorithm != 0)
- return;
-
- gettimeofday(&now, NULL);
- mypid = getpid();
-
- /* Initialize the state */
- nsid_hash_state = 0;
- nsid_hash((u_char *)&now, sizeof now);
- nsid_hash((u_char *)&mypid, sizeof mypid);
-
- /*
- * Select our random number generators and initial seed.
- * We could really use more random bits at this point,
- * but we'll try to make a silk purse out of a sows ear ...
- */
- /* generator 1 */
- a1ndx = ((u_long) NSID_MULT_TABLE_SIZE *
- (nsid_hash_state & 0xFFFF)) >> 16;
- nsid_a1 = nsid_multiplier_table[a1ndx];
- c1ndx = (nsid_hash_state >> 9) & 0x7FFF;
- nsid_c1 = 2*c1ndx + 1;
- /* generator 2, distinct from 1 */
- a2ndx = ((u_long) (NSID_MULT_TABLE_SIZE - 1) *
- ((nsid_hash_state >> 10) & 0xFFFF)) >> 16;
- if (a2ndx >= a1ndx)
- a2ndx++;
- nsid_a2 = nsid_multiplier_table[a2ndx];
- c2ndx = nsid_hash_state % 32767;
- if (c2ndx >= c1ndx)
- c2ndx++;
- nsid_c2 = 2*c2ndx + 1;
- /* generator 3, distinct from 1 and 2 */
- a3ndx = ((u_long) (NSID_MULT_TABLE_SIZE - 2) *
- ((nsid_hash_state >> 20) & 0xFFFF)) >> 16;
- if (a3ndx >= a1ndx || a3ndx >= a2ndx)
- a3ndx++;
- if (a3ndx >= a1ndx && a3ndx >= a2ndx)
- a3ndx++;
- nsid_a3 = nsid_multiplier_table[a3ndx];
- c3ndx = nsid_hash_state % 32766;
- if (c3ndx >= c1ndx || c3ndx >= c2ndx)
- c3ndx++;
- if (c3ndx >= c1ndx && c3ndx >= c2ndx)
- c3ndx++;
- nsid_c3 = 2*c3ndx + 1;
-
- nsid_state = ((nsid_hash_state >> 16) ^ (nsid_hash_state)) & 0xFFFF;
-
- /* Do the algorithm specific initialization */
- INSIST(server_options != NULL);
- if (NS_OPTION_P(OPTION_USE_ID_POOL) == 0) {
- /* Algorithm 1 */
- nsid_algorithm = NSID_SHUFFLE_ONLY;
- nsid_vtable = memget(NSID_SHUFFLE_TABLE_SIZE *
- (sizeof(u_int16_t)) );
- if (!nsid_vtable)
- ns_panic(ns_log_default, 1, "memget(nsid_vtable)");
- for (i = 0; i < NSID_SHUFFLE_TABLE_SIZE; i++) {
- nsid_vtable[i] = nsid_state;
- nsid_state = (((u_long) nsid_a1 * nsid_state) + nsid_c1)
- & 0xFFFF;
- }
- nsid_state2 = nsid_state;
- } else {
- /* Algorithm 2 */
- nsid_algorithm = NSID_USE_POOL;
- nsid_pool = memget(0x10000 * (sizeof(u_int16_t)));
- if (!nsid_pool)
- ns_panic(ns_log_default, 1, "memget(nsid_pool)");
- for (i = 0; ; i++) {
- nsid_pool[i] = nsid_state;
- nsid_state = (((u_long) nsid_a1 * nsid_state) + nsid_c1) & 0xFFFF;
- if (i == 0xFFFF)
- break;
- }
- }
-}
-
-#define NSID_RANGE_MASK (NSID_LOOKAHEAD - 1)
-
-#define NSID_POOL_MASK 0xFFFF /* used to wrap the pool index */
-
-u_int16_t
-nsid_next() {
- u_int16_t id, compressed_hash;
-
- compressed_hash = ((nsid_hash_state >> 16) ^ (nsid_hash_state)) &
- 0xFFFF;
- if (nsid_algorithm == NSID_SHUFFLE_ONLY) {
- u_int16_t j;
-
- /*
- * This is the original Algorithm B
- * j = ((u_long) NSID_SHUFFLE_TABLE_SIZE * nsid_state2)
- * >> 16;
- *
- * We'll perturb it with some random stuff ...
- */
- j = ((u_long) NSID_SHUFFLE_TABLE_SIZE *
- (nsid_state2 ^ compressed_hash)) >> 16;
- nsid_state2 = id = nsid_vtable[j];
- nsid_state = (((u_long) nsid_a1 * nsid_state) + nsid_c1) &
- 0xFFFF;
- nsid_vtable[j] = nsid_state;
- } else if (nsid_algorithm == NSID_USE_POOL) {
- u_int16_t pick;
-
- pick = compressed_hash & NSID_RANGE_MASK;
- id = nsid_pool[(nsid_state + pick) & NSID_POOL_MASK];
- if (pick != 0) {
- /* Swap two IDs to stir the pool */
- nsid_pool[(nsid_state + pick) & NSID_POOL_MASK] =
- nsid_pool[nsid_state];
- nsid_pool[nsid_state] = id;
- }
-
- /* increment the base pointer into the pool */
- if (nsid_state == 65535)
- nsid_state = 0;
- else
- nsid_state++;
- } else {
- id = 0; /* silence compiler */
- ns_panic(ns_log_default, 1, "Unknown ID algorithm");
- }
-
- /* Now lets obfuscate ... */
- id = (((u_long) nsid_a2 * id) + nsid_c2) & 0xFFFF;
- id = (((u_long) nsid_a3 * id) + nsid_c3) & 0xFFFF;
-
- return (id);
-}
-
-/* Note: this function CAN'T deallocate the saved_argv[]. */
-static void
-deallocate_everything(void) {
- FILE *f;
-
- f = write_open(server_options->memstats_filename);
-
- ns_freestats();
- qflush();
- sq_flush(NULL);
- free_addinfo();
- ns_shutdown();
- dq_remove_all();
- db_lame_destroy();
- if (local_addresses != NULL)
- free_ip_match_list(local_addresses);
- if (local_networks != NULL)
- free_ip_match_list(local_networks);
- destroyservicelist();
- destroyprotolist();
- shutdown_logging();
- evDestroy(ev);
- if (conffile != NULL)
- freestr(conffile);
- conffile = NULL;
- if (debugfile != NULL)
- freestr(debugfile);
- debugfile = NULL;
- if (user_name != NULL)
- freestr(user_name);
- user_name = NULL;
- if (group_name != NULL)
- freestr(group_name);
- group_name = NULL;
- if (chroot_dir != NULL)
- freestr(chroot_dir);
- chroot_dir = NULL;
- if (working_dir != NULL)
- freestr(working_dir);
- working_dir = NULL;
- if (nsid_pool != NULL)
- memput(nsid_pool, 0x10000 * (sizeof(u_int16_t)));
- nsid_pool = NULL;
- if (nsid_vtable != NULL)
- memput(nsid_vtable, NSID_SHUFFLE_TABLE_SIZE *
- (sizeof(u_int16_t)));
- nsid_vtable = NULL;
- irs_destroy();
- if (f != NULL) {
- memstats(f);
- (void)fclose(f);
- }
- if (memactive())
- abort();
-}
-
-static void
-ns_restart(void) {
- needs_restart = 1;
- needs_exit = 1;
-}
-
-static void
-use_desired_debug(void) {
-#ifdef DEBUG
- sigset_t set;
-
- /* Protect against race conditions by blocking debugging signals. */
-
- if (sigemptyset(&set) < 0) {
- ns_error(ns_log_os,
- "sigemptyset failed in use_desired_debug: %s",
- strerror(errno));
- return;
- }
- if (sigaddset(&set, SIGUSR1) < 0) {
- ns_error(ns_log_os,
- "sigaddset SIGUSR1 failed in use_desired_debug: %s",
- strerror(errno));
- return;
- }
- if (sigaddset(&set, SIGUSR2) < 0) {
- ns_error(ns_log_os,
- "sigaddset SIGUSR2 failed in use_desired_debug: %s",
- strerror(errno));
- return;
- }
- if (sigprocmask(SIG_BLOCK, &set, NULL) < 0) {
- ns_error(ns_log_os,
- "sigprocmask to block USR1 and USR2 failed: %s",
- strerror(errno));
- return;
- }
- setdebug(desired_debug);
- if (sigprocmask(SIG_UNBLOCK, &set, NULL) < 0)
- ns_error(ns_log_os,
- "sigprocmask to unblock USR1 and USR2 failed: %s",
- strerror(errno));
-#endif
-}
-
-void
-toggle_qrylog(void) {
- qrylog = !qrylog;
- ns_notice(ns_log_default, "query log %s\n", qrylog ?"on" :"off");
-}
-
-static void
-wild(void) {
- ns_panic(ns_log_default, 1, "wild need");
-}
-
-/*
- * This is a functional interface to the global needs and options.
- */
-
-static void
-init_needs(void) {
- int need;
-
- for (need = 0; need < main_need_num; need++)
- handlers[need] = wild;
- handlers[main_need_zreload] = ns_zreload;
- handlers[main_need_reload] = ns_reload;
- handlers[main_need_reconfig] = ns_reconfig;
- handlers[main_need_endxfer] = endxfer;
- handlers[main_need_zoneload] = loadxfer;
- handlers[main_need_dump] = doadump;
- handlers[main_need_statsdump] = ns_stats;
- handlers[main_need_statsdumpandclear] = ns_stats_dumpandclear;
- handlers[main_need_exit] = exit_handler;
- handlers[main_need_qrylog] = toggle_qrylog;
- handlers[main_need_debug] = use_desired_debug;
- handlers[main_need_restart] = ns_restart;
- handlers[main_need_reap] = reapchild;
- handlers[main_need_noexpired] = ns_noexpired;
- handlers[main_need_tryxfer] = tryxfer;
-}
-
-static void
-handle_needs(void) {
- int need, queued = 0;
-
- ns_debug(ns_log_default, 15, "handle_needs()");
- block_signals();
- for (need = 0; need < main_need_num; need++)
- if ((needs & (1 << need)) != 0) {
- INSIST_ERR(evWaitFor(ev, (void *)handle_needs,
- need_waitfunc,
- (void *)handlers[need],
- NULL) != -1);
- queued++;
- }
- needs = 0;
- unblock_signals();
- ns_debug(ns_log_default, 15, "handle_needs(): queued %d", queued);
- if (queued != 0) {
- INSIST_ERR(evDo(ev, (void *)handle_needs) != -1);
- return;
- }
- ns_panic(ns_log_default, 1, "ns_handle_needs: queued == 0");
-}
-
-static void
-need_waitfunc(evContext ctx, void *uap, const void *tag) {
- handler hand = (handler) uap;
- time_t begin;
- long syncdelay;
-
- UNUSED(tag);
-
- begin = time(NULL);
- (*hand)();
- syncdelay = time(NULL) - begin;
-
- if (syncdelay > MAX_SYNCDELAY)
- ns_notice(ns_log_default, "drained %d queries (delay %ld sec)",
- drain_all_rcvbuf(ctx), syncdelay);
-}
-
-void
-ns_need(enum need need) {
- block_signals();
- ns_need_unsafe(need);
- unblock_signals();
-}
-
-/* Note: this function should only be called with signals blocked. */
-void
-ns_need_unsafe(enum need need) {
- needs |= (1 << need);
-}
-
-static void
-exit_handler(void) {
- needs_exit = 1;
-}
-
-void
-ns_setoption(int option) {
- ns_warning(ns_log_default, "used obsolete ns_setoption(%d)", option);
-}
-
-void
-writestream(struct qstream *sp, const u_char *msg, int msglen) {
- if (sq_openw(sp, msglen + INT16SZ) == -1) {
- sq_remove(sp);
- return;
- }
- if (sq_write(sp, msg, msglen) == -1) {
- sq_remove(sp);
- return;
- }
- sq_writeh(sp, sq_flushw);
-}
-
-static int
-only_digits(const char *s) {
- if (*s == '\0')
- return (0);
- while (*s != '\0') {
- if (!isdigit(*s))
- return (0);
- s++;
- }
- return (1);
-}
-#if defined(__GNUC__) && defined(__BOUNDS_CHECKING_ON)
- /* Use bounds checking malloc, etc. */
-void *
-memget(size_t len) {
- return (malloc(len));
-}
-
-void
-memput(void *addr, size_t len) {
- free(addr);
-}
-
-int
-meminit(size_t init_max_size, size_t target_size) {
- return (0);
-}
-
-void *
-memget_debug(size_t size, const char *file, int line) {
- void *ptr;
- ptr = __memget(size);
- fprintf(stderr, "%s:%d: memget(%lu) -> %p\n", file, line,
- (u_long)size, ptr);
- return (ptr);
-}
-
-void
-memput_debug(void *ptr, size_t size, const char *file, int line) {
- fprintf(stderr, "%s:%d: memput(%p, %lu)\n", file, line, ptr,
- (u_long)size);
- __memput(ptr, size);
-}
-
-void
-memstats(FILE *out) {
- fputs("No memstats\n", out);
-}
-#endif
-
-#ifndef HAVE_CUSTOM
-/* Standard implementation has nothing here */
-static void
-custom_init(void) {
- /* Noop. */
-}
-
-static void
-custom_shutdown(void) {
- /* Noop. */
-}
-#endif
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-27 13:00:01 +0000