2 * Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
3 * Copyright (C) 1999-2003 Internet Software Consortium.
5 * Permission to use, copy, modify, and/or distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
9 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
10 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
11 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
12 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15 * PERFORMANCE OF THIS SOFTWARE.
18 /* $Id: xfrin.c,v 1.135.18.16.10.3 2008/07/23 23:16:43 marka Exp $ */
25 #include <isc/print.h>
26 #include <isc/random.h>
27 #include <isc/string.h> /* Required for HP/UX (and others?) */
29 #include <isc/timer.h>
34 #include <dns/events.h>
35 #include <dns/journal.h>
37 #include <dns/message.h>
38 #include <dns/rdataclass.h>
39 #include <dns/rdatalist.h>
40 #include <dns/rdataset.h>
41 #include <dns/result.h>
43 #include <dns/tcpmsg.h>
44 #include <dns/timer.h>
47 #include <dns/xfrin.h>
53 * Incoming AXFR and IXFR.
57 * It would be non-sensical (or at least obtuse) to use FAIL() with an
58 * ISC_R_SUCCESS code, but the test is there to keep the Solaris compiler
59 * from complaining about "end-of-loop code not reached".
62 do { result = (code); \
63 if (result != ISC_R_SUCCESS) goto failure; \
68 if (result != ISC_R_SUCCESS) goto failure; \
72 * The states of the *XFR state machine. We handle both IXFR and AXFR
73 * with a single integrated state machine because they cannot be distinguished
74 * immediately - an AXFR response to an IXFR request can only be detected
75 * when the first two (2) response RRs have already been received.
91 * Incoming zone transfer context.
94 struct dns_xfrin_ctx {
103 isc_socketmgr_t *socketmgr;
105 int connects; /*%< Connect in progress */
106 int sends; /*%< Send in progress */
107 int recvs; /*%< Receive in progress */
108 isc_boolean_t shuttingdown;
110 dns_name_t name; /*%< Name of zone to transfer */
111 dns_rdataclass_t rdclass;
113 isc_boolean_t checkid;
117 * Requested transfer type (dns_rdatatype_axfr or
118 * dns_rdatatype_ixfr). The actual transfer type
119 * may differ due to IXFR->AXFR fallback.
121 dns_rdatatype_t reqtype;
123 isc_sockaddr_t masteraddr;
124 isc_sockaddr_t sourceaddr;
125 isc_socket_t *socket;
127 /*% Buffer for IXFR/AXFR request message */
128 isc_buffer_t qbuffer;
129 unsigned char qbuffer_data[512];
131 /*% Incoming reply TCP message */
133 isc_boolean_t tcpmsg_valid;
136 dns_dbversion_t *ver;
137 dns_diff_t diff; /*%< Pending database changes */
138 int difflen; /*%< Number of pending tuples */
141 isc_uint32_t end_serial;
142 isc_boolean_t is_ixfr;
144 unsigned int nmsg; /*%< Number of messages recvd */
146 dns_tsigkey_t *tsigkey; /*%< Key used to create TSIG */
147 isc_buffer_t *lasttsig; /*%< The last TSIG */
148 dst_context_t *tsigctx; /*%< TSIG verification context */
149 unsigned int sincetsig; /*%< recvd since the last TSIG */
150 dns_xfrindone_t done;
153 * AXFR- and IXFR-specific data. Only one is used at a time
154 * according to the is_ixfr flag, so this could be a union,
155 * but keeping them separate makes it a bit simpler to clean
156 * things up when destroying the context.
159 dns_addrdatasetfunc_t add_func;
160 dns_dbload_t *add_private;
164 isc_uint32_t request_serial;
165 isc_uint32_t current_serial;
166 dns_journal_t *journal;
171 #define XFRIN_MAGIC ISC_MAGIC('X', 'f', 'r', 'I')
172 #define VALID_XFRIN(x) ISC_MAGIC_VALID(x, XFRIN_MAGIC)
174 /**************************************************************************/
176 * Forward declarations.
180 xfrin_create(isc_mem_t *mctx,
184 isc_timermgr_t *timermgr,
185 isc_socketmgr_t *socketmgr,
186 dns_name_t *zonename,
187 dns_rdataclass_t rdclass,
188 dns_rdatatype_t reqtype,
189 isc_sockaddr_t *masteraddr,
190 isc_sockaddr_t *sourceaddr,
191 dns_tsigkey_t *tsigkey,
192 dns_xfrin_ctx_t **xfrp);
194 static isc_result_t axfr_init(dns_xfrin_ctx_t *xfr);
195 static isc_result_t axfr_makedb(dns_xfrin_ctx_t *xfr, dns_db_t **dbp);
196 static isc_result_t axfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
197 dns_name_t *name, dns_ttl_t ttl,
199 static isc_result_t axfr_apply(dns_xfrin_ctx_t *xfr);
200 static isc_result_t axfr_commit(dns_xfrin_ctx_t *xfr);
202 static isc_result_t ixfr_init(dns_xfrin_ctx_t *xfr);
203 static isc_result_t ixfr_apply(dns_xfrin_ctx_t *xfr);
204 static isc_result_t ixfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
205 dns_name_t *name, dns_ttl_t ttl,
207 static isc_result_t ixfr_commit(dns_xfrin_ctx_t *xfr);
209 static isc_result_t xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name,
210 isc_uint32_t ttl, dns_rdata_t *rdata);
212 static isc_result_t xfrin_start(dns_xfrin_ctx_t *xfr);
214 static void xfrin_connect_done(isc_task_t *task, isc_event_t *event);
215 static isc_result_t xfrin_send_request(dns_xfrin_ctx_t *xfr);
216 static void xfrin_send_done(isc_task_t *task, isc_event_t *event);
217 static void xfrin_sendlen_done(isc_task_t *task, isc_event_t *event);
218 static void xfrin_recv_done(isc_task_t *task, isc_event_t *event);
219 static void xfrin_timeout(isc_task_t *task, isc_event_t *event);
221 static void maybe_free(dns_xfrin_ctx_t *xfr);
224 xfrin_fail(dns_xfrin_ctx_t *xfr, isc_result_t result, const char *msg);
226 render(dns_message_t *msg, isc_mem_t *mctx, isc_buffer_t *buf);
229 xfrin_logv(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
230 const char *fmt, va_list ap)
231 ISC_FORMAT_PRINTF(4, 0);
234 xfrin_log1(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
235 const char *fmt, ...)
236 ISC_FORMAT_PRINTF(4, 5);
239 xfrin_log(dns_xfrin_ctx_t *xfr, int level, const char *fmt, ...)
240 ISC_FORMAT_PRINTF(3, 4);
242 /**************************************************************************/
248 axfr_init(dns_xfrin_ctx_t *xfr) {
251 xfr->is_ixfr = ISC_FALSE;
254 dns_db_detach(&xfr->db);
256 CHECK(axfr_makedb(xfr, &xfr->db));
257 CHECK(dns_db_beginload(xfr->db, &xfr->axfr.add_func,
258 &xfr->axfr.add_private));
259 result = ISC_R_SUCCESS;
265 axfr_makedb(dns_xfrin_ctx_t *xfr, dns_db_t **dbp) {
266 return (dns_db_create(xfr->mctx, /* XXX */
267 "rbt", /* XXX guess */
271 0, NULL, /* XXX guess */
276 axfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
277 dns_name_t *name, dns_ttl_t ttl, dns_rdata_t *rdata)
281 dns_difftuple_t *tuple = NULL;
283 CHECK(dns_zone_checknames(xfr->zone, name, rdata));
284 CHECK(dns_difftuple_create(xfr->diff.mctx, op,
285 name, ttl, rdata, &tuple));
286 dns_diff_append(&xfr->diff, &tuple);
287 if (++xfr->difflen > 100)
288 CHECK(axfr_apply(xfr));
289 result = ISC_R_SUCCESS;
295 * Store a set of AXFR RRs in the database.
298 axfr_apply(dns_xfrin_ctx_t *xfr) {
301 CHECK(dns_diff_load(&xfr->diff,
302 xfr->axfr.add_func, xfr->axfr.add_private));
304 dns_diff_clear(&xfr->diff);
305 result = ISC_R_SUCCESS;
311 axfr_commit(dns_xfrin_ctx_t *xfr) {
314 CHECK(axfr_apply(xfr));
315 CHECK(dns_db_endload(xfr->db, &xfr->axfr.add_private));
316 CHECK(dns_zone_replacedb(xfr->zone, xfr->db, ISC_TRUE));
318 result = ISC_R_SUCCESS;
323 /**************************************************************************/
329 ixfr_init(dns_xfrin_ctx_t *xfr) {
333 if (xfr->reqtype != dns_rdatatype_ixfr) {
334 xfrin_log(xfr, ISC_LOG_ERROR,
335 "got incremental response to AXFR request");
336 return (DNS_R_FORMERR);
339 xfr->is_ixfr = ISC_TRUE;
340 INSIST(xfr->db != NULL);
343 journalfile = dns_zone_getjournal(xfr->zone);
344 if (journalfile != NULL)
345 CHECK(dns_journal_open(xfr->mctx, journalfile,
346 ISC_TRUE, &xfr->ixfr.journal));
348 result = ISC_R_SUCCESS;
354 ixfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
355 dns_name_t *name, dns_ttl_t ttl, dns_rdata_t *rdata)
359 dns_difftuple_t *tuple = NULL;
360 if (op == DNS_DIFFOP_ADD)
361 CHECK(dns_zone_checknames(xfr->zone, name, rdata));
362 CHECK(dns_difftuple_create(xfr->diff.mctx, op,
363 name, ttl, rdata, &tuple));
364 dns_diff_append(&xfr->diff, &tuple);
365 if (++xfr->difflen > 100)
366 CHECK(ixfr_apply(xfr));
367 result = ISC_R_SUCCESS;
373 * Apply a set of IXFR changes to the database.
376 ixfr_apply(dns_xfrin_ctx_t *xfr) {
379 if (xfr->ver == NULL) {
380 CHECK(dns_db_newversion(xfr->db, &xfr->ver));
381 if (xfr->ixfr.journal != NULL)
382 CHECK(dns_journal_begin_transaction(xfr->ixfr.journal));
384 CHECK(dns_diff_apply(&xfr->diff, xfr->db, xfr->ver));
385 if (xfr->ixfr.journal != NULL) {
386 result = dns_journal_writediff(xfr->ixfr.journal, &xfr->diff);
387 if (result != ISC_R_SUCCESS)
390 dns_diff_clear(&xfr->diff);
392 result = ISC_R_SUCCESS;
398 ixfr_commit(dns_xfrin_ctx_t *xfr) {
401 CHECK(ixfr_apply(xfr));
402 if (xfr->ver != NULL) {
403 /* XXX enter ready-to-commit state here */
404 if (xfr->ixfr.journal != NULL)
405 CHECK(dns_journal_commit(xfr->ixfr.journal));
406 dns_db_closeversion(xfr->db, &xfr->ver, ISC_TRUE);
407 dns_zone_markdirty(xfr->zone);
409 result = ISC_R_SUCCESS;
414 /**************************************************************************/
416 * Common AXFR/IXFR protocol code
420 * Handle a single incoming resource record according to the current
424 xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name, isc_uint32_t ttl,
430 switch (xfr->state) {
432 if (rdata->type != dns_rdatatype_soa) {
433 xfrin_log(xfr, ISC_LOG_ERROR,
434 "non-SOA response to SOA query");
437 xfr->end_serial = dns_soa_getserial(rdata);
438 if (!DNS_SERIAL_GT(xfr->end_serial, xfr->ixfr.request_serial) &&
439 !dns_zone_isforced(xfr->zone)) {
440 xfrin_log(xfr, ISC_LOG_DEBUG(3),
441 "requested serial %u, "
442 "master has %u, not updating",
443 xfr->ixfr.request_serial, xfr->end_serial);
444 FAIL(DNS_R_UPTODATE);
446 xfr->state = XFRST_GOTSOA;
451 * Skip other records in the answer section.
455 case XFRST_INITIALSOA:
456 if (rdata->type != dns_rdatatype_soa) {
457 xfrin_log(xfr, ISC_LOG_ERROR,
458 "first RR in zone transfer must be SOA");
462 * Remember the serial number in the initial SOA.
463 * We need it to recognize the end of an IXFR.
465 xfr->end_serial = dns_soa_getserial(rdata);
466 if (xfr->reqtype == dns_rdatatype_ixfr &&
467 ! DNS_SERIAL_GT(xfr->end_serial, xfr->ixfr.request_serial)
468 && !dns_zone_isforced(xfr->zone))
471 * This must be the single SOA record that is
472 * sent when the current version on the master
473 * is not newer than the version in the request.
475 xfrin_log(xfr, ISC_LOG_DEBUG(3),
476 "requested serial %u, "
477 "master has %u, not updating",
478 xfr->ixfr.request_serial, xfr->end_serial);
479 FAIL(DNS_R_UPTODATE);
481 if (xfr->reqtype == dns_rdatatype_axfr)
482 xfr->checkid = ISC_FALSE;
483 xfr->state = XFRST_FIRSTDATA;
486 case XFRST_FIRSTDATA:
488 * If the transfer begins with one SOA record, it is an AXFR,
489 * if it begins with two SOAs, it is an IXFR.
491 if (xfr->reqtype == dns_rdatatype_ixfr &&
492 rdata->type == dns_rdatatype_soa &&
493 xfr->ixfr.request_serial == dns_soa_getserial(rdata)) {
494 xfrin_log(xfr, ISC_LOG_DEBUG(3),
495 "got incremental response");
496 CHECK(ixfr_init(xfr));
497 xfr->state = XFRST_IXFR_DELSOA;
499 xfrin_log(xfr, ISC_LOG_DEBUG(3),
500 "got nonincremental response");
501 CHECK(axfr_init(xfr));
502 xfr->state = XFRST_AXFR;
506 case XFRST_IXFR_DELSOA:
507 INSIST(rdata->type == dns_rdatatype_soa);
508 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_DEL, name, ttl, rdata));
509 xfr->state = XFRST_IXFR_DEL;
513 if (rdata->type == dns_rdatatype_soa) {
514 isc_uint32_t soa_serial = dns_soa_getserial(rdata);
515 xfr->state = XFRST_IXFR_ADDSOA;
516 xfr->ixfr.current_serial = soa_serial;
519 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_DEL, name, ttl, rdata));
522 case XFRST_IXFR_ADDSOA:
523 INSIST(rdata->type == dns_rdatatype_soa);
524 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
525 xfr->state = XFRST_IXFR_ADD;
529 if (rdata->type == dns_rdatatype_soa) {
530 isc_uint32_t soa_serial = dns_soa_getserial(rdata);
531 if (soa_serial == xfr->end_serial) {
532 CHECK(ixfr_commit(xfr));
533 xfr->state = XFRST_END;
535 } else if (soa_serial != xfr->ixfr.current_serial) {
536 xfrin_log(xfr, ISC_LOG_ERROR,
538 "expected serial %u, got %u",
539 xfr->ixfr.current_serial, soa_serial);
542 CHECK(ixfr_commit(xfr));
543 xfr->state = XFRST_IXFR_DELSOA;
547 if (rdata->type == dns_rdatatype_ns &&
548 dns_name_iswildcard(name))
549 FAIL(DNS_R_INVALIDNS);
550 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
555 * Old BINDs sent cross class A records for non IN classes.
557 if (rdata->type == dns_rdatatype_a &&
558 rdata->rdclass != xfr->rdclass &&
559 xfr->rdclass != dns_rdataclass_in)
561 CHECK(axfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
562 if (rdata->type == dns_rdatatype_soa) {
563 CHECK(axfr_commit(xfr));
564 xfr->state = XFRST_END;
569 FAIL(DNS_R_EXTRADATA);
574 result = ISC_R_SUCCESS;
580 dns_xfrin_create(dns_zone_t *zone, dns_rdatatype_t xfrtype,
581 isc_sockaddr_t *masteraddr, dns_tsigkey_t *tsigkey,
582 isc_mem_t *mctx, isc_timermgr_t *timermgr,
583 isc_socketmgr_t *socketmgr, isc_task_t *task,
584 dns_xfrindone_t done, dns_xfrin_ctx_t **xfrp)
586 isc_sockaddr_t sourceaddr;
588 switch (isc_sockaddr_pf(masteraddr)) {
590 sourceaddr = *dns_zone_getxfrsource4(zone);
593 sourceaddr = *dns_zone_getxfrsource6(zone);
599 return(dns_xfrin_create2(zone, xfrtype, masteraddr, &sourceaddr,
600 tsigkey, mctx, timermgr, socketmgr,
605 dns_xfrin_create2(dns_zone_t *zone, dns_rdatatype_t xfrtype,
606 isc_sockaddr_t *masteraddr, isc_sockaddr_t *sourceaddr,
607 dns_tsigkey_t *tsigkey, isc_mem_t *mctx,
608 isc_timermgr_t *timermgr, isc_socketmgr_t *socketmgr,
609 isc_task_t *task, dns_xfrindone_t done, dns_xfrin_ctx_t **xfrp)
611 dns_name_t *zonename = dns_zone_getorigin(zone);
612 dns_xfrin_ctx_t *xfr = NULL;
616 REQUIRE(xfrp != NULL && *xfrp == NULL);
618 (void)dns_zone_getdb(zone, &db);
620 if (xfrtype == dns_rdatatype_soa || xfrtype == dns_rdatatype_ixfr)
623 CHECK(xfrin_create(mctx, zone, db, task, timermgr, socketmgr, zonename,
624 dns_zone_getclass(zone), xfrtype, masteraddr,
625 sourceaddr, tsigkey, &xfr));
627 CHECK(xfrin_start(xfr));
636 if (result != ISC_R_SUCCESS) {
637 char zonetext[DNS_NAME_MAXTEXT+32];
638 dns_zone_name(zone, zonetext, sizeof(zonetext));
639 xfrin_log1(ISC_LOG_ERROR, zonetext, masteraddr,
640 "zone transfer setup failed");
646 dns_xfrin_shutdown(dns_xfrin_ctx_t *xfr) {
647 if (! xfr->shuttingdown)
648 xfrin_fail(xfr, ISC_R_CANCELED, "shut down");
652 dns_xfrin_attach(dns_xfrin_ctx_t *source, dns_xfrin_ctx_t **target) {
653 REQUIRE(target != NULL && *target == NULL);
659 dns_xfrin_detach(dns_xfrin_ctx_t **xfrp) {
660 dns_xfrin_ctx_t *xfr = *xfrp;
661 INSIST(xfr->refcount > 0);
668 xfrin_cancelio(dns_xfrin_ctx_t *xfr) {
669 if (xfr->connects > 0) {
670 isc_socket_cancel(xfr->socket, xfr->task,
671 ISC_SOCKCANCEL_CONNECT);
672 } else if (xfr->recvs > 0) {
673 dns_tcpmsg_cancelread(&xfr->tcpmsg);
674 } else if (xfr->sends > 0) {
675 isc_socket_cancel(xfr->socket, xfr->task,
676 ISC_SOCKCANCEL_SEND);
681 xfrin_reset(dns_xfrin_ctx_t *xfr) {
682 REQUIRE(VALID_XFRIN(xfr));
684 xfrin_log(xfr, ISC_LOG_INFO, "resetting");
688 if (xfr->socket != NULL)
689 isc_socket_detach(&xfr->socket);
691 if (xfr->lasttsig != NULL)
692 isc_buffer_free(&xfr->lasttsig);
694 dns_diff_clear(&xfr->diff);
697 if (xfr->ixfr.journal != NULL)
698 dns_journal_destroy(&xfr->ixfr.journal);
700 if (xfr->axfr.add_private != NULL) {
701 (void)dns_db_endload(xfr->db, &xfr->axfr.add_private);
702 xfr->axfr.add_func = NULL;
705 if (xfr->tcpmsg_valid) {
706 dns_tcpmsg_invalidate(&xfr->tcpmsg);
707 xfr->tcpmsg_valid = ISC_FALSE;
710 if (xfr->ver != NULL)
711 dns_db_closeversion(xfr->db, &xfr->ver, ISC_FALSE);
716 xfrin_fail(dns_xfrin_ctx_t *xfr, isc_result_t result, const char *msg) {
717 if (result != DNS_R_UPTODATE) {
718 xfrin_log(xfr, ISC_LOG_ERROR, "%s: %s",
719 msg, isc_result_totext(result));
721 /* Pass special result code to force AXFR retry */
722 result = DNS_R_BADIXFR;
728 if (xfr->ixfr.journal != NULL)
729 dns_journal_destroy(&xfr->ixfr.journal);
730 if (xfr->done != NULL) {
731 (xfr->done)(xfr->zone, result);
734 xfr->shuttingdown = ISC_TRUE;
739 xfrin_create(isc_mem_t *mctx,
743 isc_timermgr_t *timermgr,
744 isc_socketmgr_t *socketmgr,
745 dns_name_t *zonename,
746 dns_rdataclass_t rdclass,
747 dns_rdatatype_t reqtype,
748 isc_sockaddr_t *masteraddr,
749 isc_sockaddr_t *sourceaddr,
750 dns_tsigkey_t *tsigkey,
751 dns_xfrin_ctx_t **xfrp)
753 dns_xfrin_ctx_t *xfr = NULL;
757 xfr = isc_mem_get(mctx, sizeof(*xfr));
759 return (ISC_R_NOMEMORY);
763 dns_zone_iattach(zone, &xfr->zone);
765 isc_task_attach(task, &xfr->task);
767 xfr->socketmgr = socketmgr;
773 xfr->shuttingdown = ISC_FALSE;
775 dns_name_init(&xfr->name, NULL);
776 xfr->rdclass = rdclass;
777 isc_random_get(&tmp);
778 xfr->checkid = ISC_TRUE;
779 xfr->id = (isc_uint16_t)(tmp & 0xffff);
780 xfr->reqtype = reqtype;
787 xfr->tcpmsg_valid = ISC_FALSE;
791 dns_db_attach(db, &xfr->db);
793 dns_diff_init(xfr->mctx, &xfr->diff);
796 if (reqtype == dns_rdatatype_soa)
797 xfr->state = XFRST_SOAQUERY;
799 xfr->state = XFRST_INITIALSOA;
806 dns_tsigkey_attach(tsigkey, &xfr->tsigkey);
807 xfr->lasttsig = NULL;
810 xfr->is_ixfr = ISC_FALSE;
812 /* ixfr.request_serial */
813 /* ixfr.current_serial */
814 xfr->ixfr.journal = NULL;
816 xfr->axfr.add_func = NULL;
817 xfr->axfr.add_private = NULL;
819 CHECK(dns_name_dup(zonename, mctx, &xfr->name));
821 CHECK(isc_timer_create(timermgr, isc_timertype_inactive, NULL, NULL,
822 task, xfrin_timeout, xfr, &xfr->timer));
823 CHECK(dns_timer_setidle(xfr->timer,
824 dns_zone_getmaxxfrin(xfr->zone),
825 dns_zone_getidlein(xfr->zone),
828 xfr->masteraddr = *masteraddr;
830 INSIST(isc_sockaddr_pf(masteraddr) == isc_sockaddr_pf(sourceaddr));
831 xfr->sourceaddr = *sourceaddr;
832 isc_sockaddr_setport(&xfr->sourceaddr, 0);
834 isc_buffer_init(&xfr->qbuffer, xfr->qbuffer_data,
835 sizeof(xfr->qbuffer_data));
837 xfr->magic = XFRIN_MAGIC;
839 return (ISC_R_SUCCESS);
842 if (xfr->timer != NULL)
843 isc_timer_detach(&xfr->timer);
844 if (dns_name_dynamic(&xfr->name))
845 dns_name_free(&xfr->name, xfr->mctx);
846 if (xfr->tsigkey != NULL)
847 dns_tsigkey_detach(&xfr->tsigkey);
849 dns_db_detach(&xfr->db);
850 isc_task_detach(&xfr->task);
851 dns_zone_idetach(&xfr->zone);
852 isc_mem_put(mctx, xfr, sizeof(*xfr));
858 xfrin_start(dns_xfrin_ctx_t *xfr) {
860 CHECK(isc_socket_create(xfr->socketmgr,
861 isc_sockaddr_pf(&xfr->sourceaddr),
864 #ifndef BROKEN_TCP_BIND_BEFORE_CONNECT
865 CHECK(isc_socket_bind(xfr->socket, &xfr->sourceaddr,
866 ISC_SOCKET_REUSEADDRESS));
868 CHECK(isc_socket_connect(xfr->socket, &xfr->masteraddr, xfr->task,
869 xfrin_connect_done, xfr));
871 return (ISC_R_SUCCESS);
873 xfrin_fail(xfr, result, "failed setting up socket");
877 /* XXX the resolver could use this, too */
880 render(dns_message_t *msg, isc_mem_t *mctx, isc_buffer_t *buf) {
882 isc_boolean_t cleanup_cctx = ISC_FALSE;
885 CHECK(dns_compress_init(&cctx, -1, mctx));
886 cleanup_cctx = ISC_TRUE;
887 CHECK(dns_message_renderbegin(msg, &cctx, buf));
888 CHECK(dns_message_rendersection(msg, DNS_SECTION_QUESTION, 0));
889 CHECK(dns_message_rendersection(msg, DNS_SECTION_ANSWER, 0));
890 CHECK(dns_message_rendersection(msg, DNS_SECTION_AUTHORITY, 0));
891 CHECK(dns_message_rendersection(msg, DNS_SECTION_ADDITIONAL, 0));
892 CHECK(dns_message_renderend(msg));
893 result = ISC_R_SUCCESS;
896 dns_compress_invalidate(&cctx);
901 * A connection has been established.
904 xfrin_connect_done(isc_task_t *task, isc_event_t *event) {
905 isc_socket_connev_t *cev = (isc_socket_connev_t *) event;
906 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
907 isc_result_t evresult = cev->result;
909 char sourcetext[ISC_SOCKADDR_FORMATSIZE];
910 isc_sockaddr_t sockaddr;
912 REQUIRE(VALID_XFRIN(xfr));
916 INSIST(event->ev_type == ISC_SOCKEVENT_CONNECT);
917 isc_event_free(&event);
920 if (xfr->shuttingdown) {
926 result = isc_socket_getsockname(xfr->socket, &sockaddr);
927 if (result == ISC_R_SUCCESS) {
928 isc_sockaddr_format(&sockaddr, sourcetext, sizeof(sourcetext));
930 strcpy(sourcetext, "<UNKNOWN>");
931 xfrin_log(xfr, ISC_LOG_INFO, "connected using %s", sourcetext);
933 dns_tcpmsg_init(xfr->mctx, xfr->socket, &xfr->tcpmsg);
934 xfr->tcpmsg_valid = ISC_TRUE;
936 CHECK(xfrin_send_request(xfr));
938 if (result != ISC_R_SUCCESS)
939 xfrin_fail(xfr, result, "failed to connect");
943 * Convert a tuple into a dns_name_t suitable for inserting
944 * into the given dns_message_t.
947 tuple2msgname(dns_difftuple_t *tuple, dns_message_t *msg, dns_name_t **target)
950 dns_rdata_t *rdata = NULL;
951 dns_rdatalist_t *rdl = NULL;
952 dns_rdataset_t *rds = NULL;
953 dns_name_t *name = NULL;
955 REQUIRE(target != NULL && *target == NULL);
957 CHECK(dns_message_gettemprdata(msg, &rdata));
958 dns_rdata_init(rdata);
959 dns_rdata_clone(&tuple->rdata, rdata);
961 CHECK(dns_message_gettemprdatalist(msg, &rdl));
962 dns_rdatalist_init(rdl);
963 rdl->type = tuple->rdata.type;
964 rdl->rdclass = tuple->rdata.rdclass;
965 rdl->ttl = tuple->ttl;
966 ISC_LIST_APPEND(rdl->rdata, rdata, link);
968 CHECK(dns_message_gettemprdataset(msg, &rds));
969 dns_rdataset_init(rds);
970 CHECK(dns_rdatalist_tordataset(rdl, rds));
972 CHECK(dns_message_gettempname(msg, &name));
973 dns_name_init(name, NULL);
974 dns_name_clone(&tuple->name, name);
975 ISC_LIST_APPEND(name->list, rds, link);
978 return (ISC_R_SUCCESS);
983 dns_rdataset_disassociate(rds);
984 dns_message_puttemprdataset(msg, &rds);
987 ISC_LIST_UNLINK(rdl->rdata, rdata, link);
988 dns_message_puttemprdatalist(msg, &rdl);
991 dns_message_puttemprdata(msg, &rdata);
998 * Build an *XFR request and send its length prefix.
1001 xfrin_send_request(dns_xfrin_ctx_t *xfr) {
1002 isc_result_t result;
1003 isc_region_t region;
1004 isc_region_t lregion;
1005 dns_rdataset_t *qrdataset = NULL;
1006 dns_message_t *msg = NULL;
1007 unsigned char length[2];
1008 dns_difftuple_t *soatuple = NULL;
1009 dns_name_t *qname = NULL;
1010 dns_dbversion_t *ver = NULL;
1011 dns_name_t *msgsoaname = NULL;
1013 /* Create the request message */
1014 CHECK(dns_message_create(xfr->mctx, DNS_MESSAGE_INTENTRENDER, &msg));
1015 CHECK(dns_message_settsigkey(msg, xfr->tsigkey));
1017 /* Create a name for the question section. */
1018 CHECK(dns_message_gettempname(msg, &qname));
1019 dns_name_init(qname, NULL);
1020 dns_name_clone(&xfr->name, qname);
1022 /* Formulate the question and attach it to the question name. */
1023 CHECK(dns_message_gettemprdataset(msg, &qrdataset));
1024 dns_rdataset_init(qrdataset);
1025 dns_rdataset_makequestion(qrdataset, xfr->rdclass, xfr->reqtype);
1026 ISC_LIST_APPEND(qname->list, qrdataset, link);
1029 dns_message_addname(msg, qname, DNS_SECTION_QUESTION);
1032 if (xfr->reqtype == dns_rdatatype_ixfr) {
1033 /* Get the SOA and add it to the authority section. */
1034 /* XXX is using the current version the right thing? */
1035 dns_db_currentversion(xfr->db, &ver);
1036 CHECK(dns_db_createsoatuple(xfr->db, ver, xfr->mctx,
1037 DNS_DIFFOP_EXISTS, &soatuple));
1038 xfr->ixfr.request_serial = dns_soa_getserial(&soatuple->rdata);
1039 xfr->ixfr.current_serial = xfr->ixfr.request_serial;
1040 xfrin_log(xfr, ISC_LOG_DEBUG(3),
1041 "requesting IXFR for serial %u",
1042 xfr->ixfr.request_serial);
1044 CHECK(tuple2msgname(soatuple, msg, &msgsoaname));
1045 dns_message_addname(msg, msgsoaname, DNS_SECTION_AUTHORITY);
1046 } else if (xfr->reqtype == dns_rdatatype_soa)
1047 CHECK(dns_db_getsoaserial(xfr->db, NULL,
1048 &xfr->ixfr.request_serial));
1050 xfr->checkid = ISC_TRUE;
1055 CHECK(render(msg, xfr->mctx, &xfr->qbuffer));
1058 * Free the last tsig, if there is one.
1060 if (xfr->lasttsig != NULL)
1061 isc_buffer_free(&xfr->lasttsig);
1064 * Save the query TSIG and don't let message_destroy free it.
1066 CHECK(dns_message_getquerytsig(msg, xfr->mctx, &xfr->lasttsig));
1068 isc_buffer_usedregion(&xfr->qbuffer, ®ion);
1069 INSIST(region.length <= 65535);
1071 length[0] = region.length >> 8;
1072 length[1] = region.length & 0xFF;
1073 lregion.base = length;
1075 CHECK(isc_socket_send(xfr->socket, &lregion, xfr->task,
1076 xfrin_sendlen_done, xfr));
1081 dns_message_puttempname(msg, &qname);
1082 if (qrdataset != NULL)
1083 dns_message_puttemprdataset(msg, &qrdataset);
1085 dns_message_destroy(&msg);
1086 if (soatuple != NULL)
1087 dns_difftuple_free(&soatuple);
1089 dns_db_closeversion(xfr->db, &ver, ISC_FALSE);
1093 /* XXX there should be library support for sending DNS TCP messages */
1096 xfrin_sendlen_done(isc_task_t *task, isc_event_t *event) {
1097 isc_socketevent_t *sev = (isc_socketevent_t *) event;
1098 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1099 isc_result_t evresult = sev->result;
1100 isc_result_t result;
1101 isc_region_t region;
1103 REQUIRE(VALID_XFRIN(xfr));
1107 INSIST(event->ev_type == ISC_SOCKEVENT_SENDDONE);
1108 isc_event_free(&event);
1111 if (xfr->shuttingdown) {
1116 xfrin_log(xfr, ISC_LOG_DEBUG(3), "sent request length prefix");
1119 isc_buffer_usedregion(&xfr->qbuffer, ®ion);
1120 CHECK(isc_socket_send(xfr->socket, ®ion, xfr->task,
1121 xfrin_send_done, xfr));
1124 if (result != ISC_R_SUCCESS)
1125 xfrin_fail(xfr, result, "failed sending request length prefix");
1130 xfrin_send_done(isc_task_t *task, isc_event_t *event) {
1131 isc_socketevent_t *sev = (isc_socketevent_t *) event;
1132 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1133 isc_result_t result;
1135 REQUIRE(VALID_XFRIN(xfr));
1139 INSIST(event->ev_type == ISC_SOCKEVENT_SENDDONE);
1142 xfrin_log(xfr, ISC_LOG_DEBUG(3), "sent request data");
1145 CHECK(dns_tcpmsg_readmessage(&xfr->tcpmsg, xfr->task,
1146 xfrin_recv_done, xfr));
1149 isc_event_free(&event);
1150 if (result != ISC_R_SUCCESS)
1151 xfrin_fail(xfr, result, "failed sending request data");
1156 xfrin_recv_done(isc_task_t *task, isc_event_t *ev) {
1157 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) ev->ev_arg;
1158 isc_result_t result;
1159 dns_message_t *msg = NULL;
1161 dns_tcpmsg_t *tcpmsg;
1162 dns_name_t *tsigowner = NULL;
1164 REQUIRE(VALID_XFRIN(xfr));
1168 INSIST(ev->ev_type == DNS_EVENT_TCPMSG);
1169 tcpmsg = ev->ev_sender;
1170 isc_event_free(&ev);
1173 if (xfr->shuttingdown) {
1178 CHECK(tcpmsg->result);
1180 xfrin_log(xfr, ISC_LOG_DEBUG(7), "received %u bytes",
1181 tcpmsg->buffer.used);
1183 CHECK(isc_timer_touch(xfr->timer));
1185 CHECK(dns_message_create(xfr->mctx, DNS_MESSAGE_INTENTPARSE, &msg));
1187 CHECK(dns_message_settsigkey(msg, xfr->tsigkey));
1188 CHECK(dns_message_setquerytsig(msg, xfr->lasttsig));
1189 msg->tsigctx = xfr->tsigctx;
1191 msg->tcp_continuation = 1;
1193 result = dns_message_parse(msg, &tcpmsg->buffer,
1194 DNS_MESSAGEPARSE_PRESERVEORDER);
1196 if (result != ISC_R_SUCCESS || msg->rcode != dns_rcode_noerror ||
1197 (xfr->checkid && msg->id != xfr->id)) {
1198 if (result == ISC_R_SUCCESS)
1199 result = ISC_RESULTCLASS_DNSRCODE + msg->rcode; /*XXX*/
1200 if (result == ISC_R_SUCCESS || result == DNS_R_NOERROR)
1201 result = DNS_R_UNEXPECTEDID;
1202 if (xfr->reqtype == dns_rdatatype_axfr ||
1203 xfr->reqtype == dns_rdatatype_soa)
1205 xfrin_log(xfr, ISC_LOG_DEBUG(3), "got %s, retrying with AXFR",
1206 isc_result_totext(result));
1208 dns_message_destroy(&msg);
1210 xfr->reqtype = dns_rdatatype_soa;
1211 xfr->state = XFRST_SOAQUERY;
1212 (void)xfrin_start(xfr);
1217 * Does the server know about IXFR? If it doesn't we will get
1218 * a message with a empty answer section or a potentially a CNAME /
1219 * DNAME, the later is handled by xfr_rr() which will return FORMERR
1220 * if the first RR in the answer section is not a SOA record.
1222 if (xfr->reqtype == dns_rdatatype_ixfr &&
1223 xfr->state == XFRST_INITIALSOA &&
1224 msg->counts[DNS_SECTION_ANSWER] == 0) {
1225 xfrin_log(xfr, ISC_LOG_DEBUG(3),
1226 "empty answer section, retrying with AXFR");
1230 if (xfr->reqtype == dns_rdatatype_soa &&
1231 (msg->flags & DNS_MESSAGEFLAG_AA) == 0) {
1232 FAIL(DNS_R_NOTAUTHORITATIVE);
1236 result = dns_message_checksig(msg, dns_zone_getview(xfr->zone));
1237 if (result != ISC_R_SUCCESS) {
1238 xfrin_log(xfr, ISC_LOG_DEBUG(3), "TSIG check failed: %s",
1239 isc_result_totext(result));
1243 for (result = dns_message_firstname(msg, DNS_SECTION_ANSWER);
1244 result == ISC_R_SUCCESS;
1245 result = dns_message_nextname(msg, DNS_SECTION_ANSWER))
1247 dns_rdataset_t *rds;
1250 dns_message_currentname(msg, DNS_SECTION_ANSWER, &name);
1251 for (rds = ISC_LIST_HEAD(name->list);
1253 rds = ISC_LIST_NEXT(rds, link))
1255 for (result = dns_rdataset_first(rds);
1256 result == ISC_R_SUCCESS;
1257 result = dns_rdataset_next(rds))
1259 dns_rdata_t rdata = DNS_RDATA_INIT;
1260 dns_rdataset_current(rds, &rdata);
1261 CHECK(xfr_rr(xfr, name, rds->ttl, &rdata));
1265 if (result != ISC_R_NOMORE)
1268 if (dns_message_gettsig(msg, &tsigowner) != NULL) {
1270 * Reset the counter.
1275 * Free the last tsig, if there is one.
1277 if (xfr->lasttsig != NULL)
1278 isc_buffer_free(&xfr->lasttsig);
1281 * Update the last tsig pointer.
1283 CHECK(dns_message_getquerytsig(msg, xfr->mctx,
1286 } else if (dns_message_gettsigkey(msg) != NULL) {
1288 if (xfr->sincetsig > 100 ||
1289 xfr->nmsg == 0 || xfr->state == XFRST_END)
1291 result = DNS_R_EXPECTEDTSIG;
1297 * Update the number of messages received.
1302 * Copy the context back.
1304 xfr->tsigctx = msg->tsigctx;
1306 dns_message_destroy(&msg);
1308 if (xfr->state == XFRST_GOTSOA) {
1309 xfr->reqtype = dns_rdatatype_axfr;
1310 xfr->state = XFRST_INITIALSOA;
1311 CHECK(xfrin_send_request(xfr));
1312 } else if (xfr->state == XFRST_END) {
1314 * Close the journal.
1316 if (xfr->ixfr.journal != NULL)
1317 dns_journal_destroy(&xfr->ixfr.journal);
1319 * Inform the caller we succeeded.
1321 if (xfr->done != NULL) {
1322 (xfr->done)(xfr->zone, ISC_R_SUCCESS);
1326 * We should have no outstanding events at this
1327 * point, thus maybe_free() should succeed.
1329 xfr->shuttingdown = ISC_TRUE;
1333 * Read the next message.
1335 CHECK(dns_tcpmsg_readmessage(&xfr->tcpmsg, xfr->task,
1336 xfrin_recv_done, xfr));
1343 dns_message_destroy(&msg);
1344 if (result != ISC_R_SUCCESS)
1345 xfrin_fail(xfr, result, "failed while receiving responses");
1349 xfrin_timeout(isc_task_t *task, isc_event_t *event) {
1350 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1352 REQUIRE(VALID_XFRIN(xfr));
1356 isc_event_free(&event);
1358 * This will log "giving up: timeout".
1360 xfrin_fail(xfr, ISC_R_TIMEDOUT, "giving up");
1364 maybe_free(dns_xfrin_ctx_t *xfr) {
1365 REQUIRE(VALID_XFRIN(xfr));
1367 if (! xfr->shuttingdown || xfr->refcount != 0 ||
1368 xfr->connects != 0 || xfr->sends != 0 ||
1372 xfrin_log(xfr, ISC_LOG_INFO, "end of transfer");
1374 if (xfr->socket != NULL)
1375 isc_socket_detach(&xfr->socket);
1377 if (xfr->timer != NULL)
1378 isc_timer_detach(&xfr->timer);
1380 if (xfr->task != NULL)
1381 isc_task_detach(&xfr->task);
1383 if (xfr->tsigkey != NULL)
1384 dns_tsigkey_detach(&xfr->tsigkey);
1386 if (xfr->lasttsig != NULL)
1387 isc_buffer_free(&xfr->lasttsig);
1389 dns_diff_clear(&xfr->diff);
1391 if (xfr->ixfr.journal != NULL)
1392 dns_journal_destroy(&xfr->ixfr.journal);
1394 if (xfr->axfr.add_private != NULL)
1395 (void)dns_db_endload(xfr->db, &xfr->axfr.add_private);
1397 if (xfr->tcpmsg_valid)
1398 dns_tcpmsg_invalidate(&xfr->tcpmsg);
1400 if ((xfr->name.attributes & DNS_NAMEATTR_DYNAMIC) != 0)
1401 dns_name_free(&xfr->name, xfr->mctx);
1403 if (xfr->ver != NULL)
1404 dns_db_closeversion(xfr->db, &xfr->ver, ISC_FALSE);
1406 if (xfr->db != NULL)
1407 dns_db_detach(&xfr->db);
1409 if (xfr->zone != NULL)
1410 dns_zone_idetach(&xfr->zone);
1412 isc_mem_put(xfr->mctx, xfr, sizeof(*xfr));
1416 * Log incoming zone transfer messages in a format like
1417 * transfer of <zone> from <address>: <message>
1420 xfrin_logv(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
1421 const char *fmt, va_list ap)
1423 char mastertext[ISC_SOCKADDR_FORMATSIZE];
1426 isc_sockaddr_format(masteraddr, mastertext, sizeof(mastertext));
1427 vsnprintf(msgtext, sizeof(msgtext), fmt, ap);
1429 isc_log_write(dns_lctx, DNS_LOGCATEGORY_XFER_IN,
1430 DNS_LOGMODULE_XFER_IN, level,
1431 "transfer of '%s' from %s: %s",
1432 zonetext, mastertext, msgtext);
1436 * Logging function for use when a xfrin_ctx_t has not yet been created.
1440 xfrin_log1(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
1441 const char *fmt, ...)
1445 if (isc_log_wouldlog(dns_lctx, level) == ISC_FALSE)
1449 xfrin_logv(level, zonetext, masteraddr, fmt, ap);
1454 * Logging function for use when there is a xfrin_ctx_t.
1458 xfrin_log(dns_xfrin_ctx_t *xfr, int level, const char *fmt, ...)
1461 char zonetext[DNS_NAME_MAXTEXT+32];
1463 if (isc_log_wouldlog(dns_lctx, level) == ISC_FALSE)
1466 dns_zone_name(xfr->zone, zonetext, sizeof(zonetext));
1469 xfrin_logv(level, zonetext, &xfr->masteraddr, fmt, ap);