2 * Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
3 * Copyright (C) 1999-2003 Internet Software Consortium.
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
9 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
10 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
11 * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
12 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15 * PERFORMANCE OF THIS SOFTWARE.
18 /* $Id: xfrin.c,v 1.135.18.11 2006/07/19 00:58:01 marka Exp $ */
25 #include <isc/print.h>
26 #include <isc/random.h>
27 #include <isc/string.h> /* Required for HP/UX (and others?) */
29 #include <isc/timer.h>
34 #include <dns/events.h>
35 #include <dns/journal.h>
37 #include <dns/message.h>
38 #include <dns/rdataclass.h>
39 #include <dns/rdatalist.h>
40 #include <dns/rdataset.h>
41 #include <dns/result.h>
43 #include <dns/tcpmsg.h>
44 #include <dns/timer.h>
47 #include <dns/xfrin.h>
53 * Incoming AXFR and IXFR.
57 * It would be non-sensical (or at least obtuse) to use FAIL() with an
58 * ISC_R_SUCCESS code, but the test is there to keep the Solaris compiler
59 * from complaining about "end-of-loop code not reached".
62 do { result = (code); \
63 if (result != ISC_R_SUCCESS) goto failure; \
68 if (result != ISC_R_SUCCESS) goto failure; \
72 * The states of the *XFR state machine. We handle both IXFR and AXFR
73 * with a single integrated state machine because they cannot be distinguished
74 * immediately - an AXFR response to an IXFR request can only be detected
75 * when the first two (2) response RRs have already been received.
91 * Incoming zone transfer context.
94 struct dns_xfrin_ctx {
103 isc_socketmgr_t *socketmgr;
105 int connects; /*%< Connect in progress */
106 int sends; /*%< Send in progress */
107 int recvs; /*%< Receive in progress */
108 isc_boolean_t shuttingdown;
110 dns_name_t name; /*%< Name of zone to transfer */
111 dns_rdataclass_t rdclass;
113 isc_boolean_t checkid;
117 * Requested transfer type (dns_rdatatype_axfr or
118 * dns_rdatatype_ixfr). The actual transfer type
119 * may differ due to IXFR->AXFR fallback.
121 dns_rdatatype_t reqtype;
123 isc_sockaddr_t masteraddr;
124 isc_sockaddr_t sourceaddr;
125 isc_socket_t *socket;
127 /*% Buffer for IXFR/AXFR request message */
128 isc_buffer_t qbuffer;
129 unsigned char qbuffer_data[512];
131 /*% Incoming reply TCP message */
133 isc_boolean_t tcpmsg_valid;
136 dns_dbversion_t *ver;
137 dns_diff_t diff; /*%< Pending database changes */
138 int difflen; /*%< Number of pending tuples */
141 isc_uint32_t end_serial;
142 isc_boolean_t is_ixfr;
144 unsigned int nmsg; /*%< Number of messages recvd */
146 dns_tsigkey_t *tsigkey; /*%< Key used to create TSIG */
147 isc_buffer_t *lasttsig; /*%< The last TSIG */
148 dst_context_t *tsigctx; /*%< TSIG verification context */
149 unsigned int sincetsig; /*%< recvd since the last TSIG */
150 dns_xfrindone_t done;
153 * AXFR- and IXFR-specific data. Only one is used at a time
154 * according to the is_ixfr flag, so this could be a union,
155 * but keeping them separate makes it a bit simpler to clean
156 * things up when destroying the context.
159 dns_addrdatasetfunc_t add_func;
160 dns_dbload_t *add_private;
164 isc_uint32_t request_serial;
165 isc_uint32_t current_serial;
166 dns_journal_t *journal;
171 #define XFRIN_MAGIC ISC_MAGIC('X', 'f', 'r', 'I')
172 #define VALID_XFRIN(x) ISC_MAGIC_VALID(x, XFRIN_MAGIC)
174 /**************************************************************************/
176 * Forward declarations.
180 xfrin_create(isc_mem_t *mctx,
184 isc_timermgr_t *timermgr,
185 isc_socketmgr_t *socketmgr,
186 dns_name_t *zonename,
187 dns_rdataclass_t rdclass,
188 dns_rdatatype_t reqtype,
189 isc_sockaddr_t *masteraddr,
190 isc_sockaddr_t *sourceaddr,
191 dns_tsigkey_t *tsigkey,
192 dns_xfrin_ctx_t **xfrp);
194 static isc_result_t axfr_init(dns_xfrin_ctx_t *xfr);
195 static isc_result_t axfr_makedb(dns_xfrin_ctx_t *xfr, dns_db_t **dbp);
196 static isc_result_t axfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
197 dns_name_t *name, dns_ttl_t ttl,
199 static isc_result_t axfr_apply(dns_xfrin_ctx_t *xfr);
200 static isc_result_t axfr_commit(dns_xfrin_ctx_t *xfr);
202 static isc_result_t ixfr_init(dns_xfrin_ctx_t *xfr);
203 static isc_result_t ixfr_apply(dns_xfrin_ctx_t *xfr);
204 static isc_result_t ixfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
205 dns_name_t *name, dns_ttl_t ttl,
207 static isc_result_t ixfr_commit(dns_xfrin_ctx_t *xfr);
209 static isc_result_t xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name,
210 isc_uint32_t ttl, dns_rdata_t *rdata);
212 static isc_result_t xfrin_start(dns_xfrin_ctx_t *xfr);
214 static void xfrin_connect_done(isc_task_t *task, isc_event_t *event);
215 static isc_result_t xfrin_send_request(dns_xfrin_ctx_t *xfr);
216 static void xfrin_send_done(isc_task_t *task, isc_event_t *event);
217 static void xfrin_sendlen_done(isc_task_t *task, isc_event_t *event);
218 static void xfrin_recv_done(isc_task_t *task, isc_event_t *event);
219 static void xfrin_timeout(isc_task_t *task, isc_event_t *event);
221 static void maybe_free(dns_xfrin_ctx_t *xfr);
224 xfrin_fail(dns_xfrin_ctx_t *xfr, isc_result_t result, const char *msg);
226 render(dns_message_t *msg, isc_mem_t *mctx, isc_buffer_t *buf);
229 xfrin_logv(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
230 const char *fmt, va_list ap)
231 ISC_FORMAT_PRINTF(4, 0);
234 xfrin_log1(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
235 const char *fmt, ...)
236 ISC_FORMAT_PRINTF(4, 5);
239 xfrin_log(dns_xfrin_ctx_t *xfr, int level, const char *fmt, ...)
240 ISC_FORMAT_PRINTF(3, 4);
242 /**************************************************************************/
248 axfr_init(dns_xfrin_ctx_t *xfr) {
251 xfr->is_ixfr = ISC_FALSE;
254 dns_db_detach(&xfr->db);
256 CHECK(axfr_makedb(xfr, &xfr->db));
257 CHECK(dns_db_beginload(xfr->db, &xfr->axfr.add_func,
258 &xfr->axfr.add_private));
259 result = ISC_R_SUCCESS;
265 axfr_makedb(dns_xfrin_ctx_t *xfr, dns_db_t **dbp) {
266 return (dns_db_create(xfr->mctx, /* XXX */
267 "rbt", /* XXX guess */
271 0, NULL, /* XXX guess */
276 axfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
277 dns_name_t *name, dns_ttl_t ttl, dns_rdata_t *rdata)
281 dns_difftuple_t *tuple = NULL;
283 CHECK(dns_zone_checknames(xfr->zone, name, rdata));
284 CHECK(dns_difftuple_create(xfr->diff.mctx, op,
285 name, ttl, rdata, &tuple));
286 dns_diff_append(&xfr->diff, &tuple);
287 if (++xfr->difflen > 100)
288 CHECK(axfr_apply(xfr));
289 result = ISC_R_SUCCESS;
295 * Store a set of AXFR RRs in the database.
298 axfr_apply(dns_xfrin_ctx_t *xfr) {
301 CHECK(dns_diff_load(&xfr->diff,
302 xfr->axfr.add_func, xfr->axfr.add_private));
304 dns_diff_clear(&xfr->diff);
305 result = ISC_R_SUCCESS;
311 axfr_commit(dns_xfrin_ctx_t *xfr) {
314 CHECK(axfr_apply(xfr));
315 CHECK(dns_db_endload(xfr->db, &xfr->axfr.add_private));
316 CHECK(dns_zone_replacedb(xfr->zone, xfr->db, ISC_TRUE));
318 result = ISC_R_SUCCESS;
323 /**************************************************************************/
329 ixfr_init(dns_xfrin_ctx_t *xfr) {
333 if (xfr->reqtype != dns_rdatatype_ixfr) {
334 xfrin_log(xfr, ISC_LOG_ERROR,
335 "got incremental response to AXFR request");
336 return (DNS_R_FORMERR);
339 xfr->is_ixfr = ISC_TRUE;
340 INSIST(xfr->db != NULL);
343 journalfile = dns_zone_getjournal(xfr->zone);
344 if (journalfile != NULL)
345 CHECK(dns_journal_open(xfr->mctx, journalfile,
346 ISC_TRUE, &xfr->ixfr.journal));
348 result = ISC_R_SUCCESS;
354 ixfr_putdata(dns_xfrin_ctx_t *xfr, dns_diffop_t op,
355 dns_name_t *name, dns_ttl_t ttl, dns_rdata_t *rdata)
359 dns_difftuple_t *tuple = NULL;
360 if (op == DNS_DIFFOP_ADD)
361 CHECK(dns_zone_checknames(xfr->zone, name, rdata));
362 CHECK(dns_difftuple_create(xfr->diff.mctx, op,
363 name, ttl, rdata, &tuple));
364 dns_diff_append(&xfr->diff, &tuple);
365 if (++xfr->difflen > 100)
366 CHECK(ixfr_apply(xfr));
367 result = ISC_R_SUCCESS;
373 * Apply a set of IXFR changes to the database.
376 ixfr_apply(dns_xfrin_ctx_t *xfr) {
379 if (xfr->ver == NULL) {
380 CHECK(dns_db_newversion(xfr->db, &xfr->ver));
381 if (xfr->ixfr.journal != NULL)
382 CHECK(dns_journal_begin_transaction(xfr->ixfr.journal));
384 CHECK(dns_diff_apply(&xfr->diff, xfr->db, xfr->ver));
385 if (xfr->ixfr.journal != NULL) {
386 result = dns_journal_writediff(xfr->ixfr.journal, &xfr->diff);
387 if (result != ISC_R_SUCCESS)
390 dns_diff_clear(&xfr->diff);
392 result = ISC_R_SUCCESS;
398 ixfr_commit(dns_xfrin_ctx_t *xfr) {
401 CHECK(ixfr_apply(xfr));
402 if (xfr->ver != NULL) {
403 /* XXX enter ready-to-commit state here */
404 if (xfr->ixfr.journal != NULL)
405 CHECK(dns_journal_commit(xfr->ixfr.journal));
406 dns_db_closeversion(xfr->db, &xfr->ver, ISC_TRUE);
407 dns_zone_markdirty(xfr->zone);
409 result = ISC_R_SUCCESS;
414 /**************************************************************************/
416 * Common AXFR/IXFR protocol code
420 * Handle a single incoming resource record according to the current
424 xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name, isc_uint32_t ttl,
430 switch (xfr->state) {
432 if (rdata->type != dns_rdatatype_soa) {
433 xfrin_log(xfr, ISC_LOG_ERROR,
434 "non-SOA response to SOA query");
437 xfr->end_serial = dns_soa_getserial(rdata);
438 if (!DNS_SERIAL_GT(xfr->end_serial, xfr->ixfr.request_serial) &&
439 !dns_zone_isforced(xfr->zone)) {
440 xfrin_log(xfr, ISC_LOG_DEBUG(3),
441 "requested serial %u, "
442 "master has %u, not updating",
443 xfr->ixfr.request_serial, xfr->end_serial);
444 FAIL(DNS_R_UPTODATE);
446 xfr->state = XFRST_GOTSOA;
451 * Skip other records in the answer section.
455 case XFRST_INITIALSOA:
456 if (rdata->type != dns_rdatatype_soa) {
457 xfrin_log(xfr, ISC_LOG_ERROR,
458 "first RR in zone transfer must be SOA");
462 * Remember the serial number in the initial SOA.
463 * We need it to recognize the end of an IXFR.
465 xfr->end_serial = dns_soa_getserial(rdata);
466 if (xfr->reqtype == dns_rdatatype_ixfr &&
467 ! DNS_SERIAL_GT(xfr->end_serial, xfr->ixfr.request_serial)
468 && !dns_zone_isforced(xfr->zone))
471 * This must be the single SOA record that is
472 * sent when the current version on the master
473 * is not newer than the version in the request.
475 xfrin_log(xfr, ISC_LOG_DEBUG(3),
476 "requested serial %u, "
477 "master has %u, not updating",
478 xfr->ixfr.request_serial, xfr->end_serial);
479 FAIL(DNS_R_UPTODATE);
481 if (xfr->reqtype == dns_rdatatype_axfr)
482 xfr->checkid = ISC_FALSE;
483 xfr->state = XFRST_FIRSTDATA;
486 case XFRST_FIRSTDATA:
488 * If the transfer begins with one SOA record, it is an AXFR,
489 * if it begins with two SOAs, it is an IXFR.
491 if (xfr->reqtype == dns_rdatatype_ixfr &&
492 rdata->type == dns_rdatatype_soa &&
493 xfr->ixfr.request_serial == dns_soa_getserial(rdata)) {
494 xfrin_log(xfr, ISC_LOG_DEBUG(3),
495 "got incremental response");
496 CHECK(ixfr_init(xfr));
497 xfr->state = XFRST_IXFR_DELSOA;
499 xfrin_log(xfr, ISC_LOG_DEBUG(3),
500 "got nonincremental response");
501 CHECK(axfr_init(xfr));
502 xfr->state = XFRST_AXFR;
506 case XFRST_IXFR_DELSOA:
507 INSIST(rdata->type == dns_rdatatype_soa);
508 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_DEL, name, ttl, rdata));
509 xfr->state = XFRST_IXFR_DEL;
513 if (rdata->type == dns_rdatatype_soa) {
514 isc_uint32_t soa_serial = dns_soa_getserial(rdata);
515 xfr->state = XFRST_IXFR_ADDSOA;
516 xfr->ixfr.current_serial = soa_serial;
519 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_DEL, name, ttl, rdata));
522 case XFRST_IXFR_ADDSOA:
523 INSIST(rdata->type == dns_rdatatype_soa);
524 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
525 xfr->state = XFRST_IXFR_ADD;
529 if (rdata->type == dns_rdatatype_soa) {
530 isc_uint32_t soa_serial = dns_soa_getserial(rdata);
531 if (soa_serial == xfr->end_serial) {
532 CHECK(ixfr_commit(xfr));
533 xfr->state = XFRST_END;
535 } else if (soa_serial != xfr->ixfr.current_serial) {
536 xfrin_log(xfr, ISC_LOG_ERROR,
538 "expected serial %u, got %u",
539 xfr->ixfr.current_serial, soa_serial);
542 CHECK(ixfr_commit(xfr));
543 xfr->state = XFRST_IXFR_DELSOA;
547 if (rdata->type == dns_rdatatype_ns &&
548 dns_name_iswildcard(name))
549 FAIL(DNS_R_INVALIDNS);
550 CHECK(ixfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
555 * Old BINDs sent cross class A records for non IN classes.
557 if (rdata->type == dns_rdatatype_a &&
558 rdata->rdclass != xfr->rdclass &&
559 xfr->rdclass != dns_rdataclass_in)
561 CHECK(axfr_putdata(xfr, DNS_DIFFOP_ADD, name, ttl, rdata));
562 if (rdata->type == dns_rdatatype_soa) {
563 CHECK(axfr_commit(xfr));
564 xfr->state = XFRST_END;
569 FAIL(DNS_R_EXTRADATA);
574 result = ISC_R_SUCCESS;
580 dns_xfrin_create(dns_zone_t *zone, dns_rdatatype_t xfrtype,
581 isc_sockaddr_t *masteraddr, dns_tsigkey_t *tsigkey,
582 isc_mem_t *mctx, isc_timermgr_t *timermgr,
583 isc_socketmgr_t *socketmgr, isc_task_t *task,
584 dns_xfrindone_t done, dns_xfrin_ctx_t **xfrp)
586 isc_sockaddr_t sourceaddr;
588 switch (isc_sockaddr_pf(masteraddr)) {
590 sourceaddr = *dns_zone_getxfrsource4(zone);
593 sourceaddr = *dns_zone_getxfrsource6(zone);
599 return(dns_xfrin_create2(zone, xfrtype, masteraddr, &sourceaddr,
600 tsigkey, mctx, timermgr, socketmgr,
605 dns_xfrin_create2(dns_zone_t *zone, dns_rdatatype_t xfrtype,
606 isc_sockaddr_t *masteraddr, isc_sockaddr_t *sourceaddr,
607 dns_tsigkey_t *tsigkey, isc_mem_t *mctx,
608 isc_timermgr_t *timermgr, isc_socketmgr_t *socketmgr,
609 isc_task_t *task, dns_xfrindone_t done, dns_xfrin_ctx_t **xfrp)
611 dns_name_t *zonename = dns_zone_getorigin(zone);
612 dns_xfrin_ctx_t *xfr = NULL;
616 REQUIRE(xfrp != NULL && *xfrp == NULL);
618 (void)dns_zone_getdb(zone, &db);
620 if (xfrtype == dns_rdatatype_soa || xfrtype == dns_rdatatype_ixfr)
623 CHECK(xfrin_create(mctx, zone, db, task, timermgr, socketmgr, zonename,
624 dns_zone_getclass(zone), xfrtype, masteraddr,
625 sourceaddr, tsigkey, &xfr));
627 CHECK(xfrin_start(xfr));
636 if (result != ISC_R_SUCCESS) {
637 char zonetext[DNS_NAME_MAXTEXT+32];
638 dns_zone_name(zone, zonetext, sizeof(zonetext));
639 xfrin_log1(ISC_LOG_ERROR, zonetext, masteraddr,
640 "zone transfer setup failed");
646 dns_xfrin_shutdown(dns_xfrin_ctx_t *xfr) {
647 if (! xfr->shuttingdown)
648 xfrin_fail(xfr, ISC_R_CANCELED, "shut down");
652 dns_xfrin_attach(dns_xfrin_ctx_t *source, dns_xfrin_ctx_t **target) {
653 REQUIRE(target != NULL && *target == NULL);
659 dns_xfrin_detach(dns_xfrin_ctx_t **xfrp) {
660 dns_xfrin_ctx_t *xfr = *xfrp;
661 INSIST(xfr->refcount > 0);
668 xfrin_cancelio(dns_xfrin_ctx_t *xfr) {
669 if (xfr->connects > 0) {
670 isc_socket_cancel(xfr->socket, xfr->task,
671 ISC_SOCKCANCEL_CONNECT);
672 } else if (xfr->recvs > 0) {
673 dns_tcpmsg_cancelread(&xfr->tcpmsg);
674 } else if (xfr->sends > 0) {
675 isc_socket_cancel(xfr->socket, xfr->task,
676 ISC_SOCKCANCEL_SEND);
681 xfrin_reset(dns_xfrin_ctx_t *xfr) {
682 REQUIRE(VALID_XFRIN(xfr));
684 xfrin_log(xfr, ISC_LOG_INFO, "resetting");
688 if (xfr->socket != NULL)
689 isc_socket_detach(&xfr->socket);
691 if (xfr->lasttsig != NULL)
692 isc_buffer_free(&xfr->lasttsig);
694 dns_diff_clear(&xfr->diff);
697 if (xfr->ixfr.journal != NULL)
698 dns_journal_destroy(&xfr->ixfr.journal);
700 if (xfr->axfr.add_private != NULL) {
701 (void)dns_db_endload(xfr->db, &xfr->axfr.add_private);
702 xfr->axfr.add_func = NULL;
705 if (xfr->tcpmsg_valid) {
706 dns_tcpmsg_invalidate(&xfr->tcpmsg);
707 xfr->tcpmsg_valid = ISC_FALSE;
710 if (xfr->ver != NULL)
711 dns_db_closeversion(xfr->db, &xfr->ver, ISC_FALSE);
716 xfrin_fail(dns_xfrin_ctx_t *xfr, isc_result_t result, const char *msg) {
717 if (result != DNS_R_UPTODATE) {
718 xfrin_log(xfr, ISC_LOG_ERROR, "%s: %s",
719 msg, isc_result_totext(result));
721 /* Pass special result code to force AXFR retry */
722 result = DNS_R_BADIXFR;
725 if (xfr->done != NULL) {
726 (xfr->done)(xfr->zone, result);
729 xfr->shuttingdown = ISC_TRUE;
734 xfrin_create(isc_mem_t *mctx,
738 isc_timermgr_t *timermgr,
739 isc_socketmgr_t *socketmgr,
740 dns_name_t *zonename,
741 dns_rdataclass_t rdclass,
742 dns_rdatatype_t reqtype,
743 isc_sockaddr_t *masteraddr,
744 isc_sockaddr_t *sourceaddr,
745 dns_tsigkey_t *tsigkey,
746 dns_xfrin_ctx_t **xfrp)
748 dns_xfrin_ctx_t *xfr = NULL;
752 xfr = isc_mem_get(mctx, sizeof(*xfr));
754 return (ISC_R_NOMEMORY);
758 dns_zone_iattach(zone, &xfr->zone);
760 isc_task_attach(task, &xfr->task);
762 xfr->socketmgr = socketmgr;
768 xfr->shuttingdown = ISC_FALSE;
770 dns_name_init(&xfr->name, NULL);
771 xfr->rdclass = rdclass;
772 isc_random_get(&tmp);
773 xfr->checkid = ISC_TRUE;
774 xfr->id = (isc_uint16_t)(tmp & 0xffff);
775 xfr->reqtype = reqtype;
782 xfr->tcpmsg_valid = ISC_FALSE;
786 dns_db_attach(db, &xfr->db);
788 dns_diff_init(xfr->mctx, &xfr->diff);
791 if (reqtype == dns_rdatatype_soa)
792 xfr->state = XFRST_SOAQUERY;
794 xfr->state = XFRST_INITIALSOA;
801 dns_tsigkey_attach(tsigkey, &xfr->tsigkey);
802 xfr->lasttsig = NULL;
805 xfr->is_ixfr = ISC_FALSE;
807 /* ixfr.request_serial */
808 /* ixfr.current_serial */
809 xfr->ixfr.journal = NULL;
811 xfr->axfr.add_func = NULL;
812 xfr->axfr.add_private = NULL;
814 CHECK(dns_name_dup(zonename, mctx, &xfr->name));
816 CHECK(isc_timer_create(timermgr, isc_timertype_inactive, NULL, NULL,
817 task, xfrin_timeout, xfr, &xfr->timer));
818 CHECK(dns_timer_setidle(xfr->timer,
819 dns_zone_getmaxxfrin(xfr->zone),
820 dns_zone_getidlein(xfr->zone),
823 xfr->masteraddr = *masteraddr;
825 INSIST(isc_sockaddr_pf(masteraddr) == isc_sockaddr_pf(sourceaddr));
826 xfr->sourceaddr = *sourceaddr;
827 isc_sockaddr_setport(&xfr->sourceaddr, 0);
829 isc_buffer_init(&xfr->qbuffer, xfr->qbuffer_data,
830 sizeof(xfr->qbuffer_data));
832 xfr->magic = XFRIN_MAGIC;
834 return (ISC_R_SUCCESS);
837 if (xfr->timer != NULL)
838 isc_timer_detach(&xfr->timer);
839 if (dns_name_dynamic(&xfr->name))
840 dns_name_free(&xfr->name, xfr->mctx);
841 if (xfr->tsigkey != NULL)
842 dns_tsigkey_detach(&xfr->tsigkey);
844 dns_db_detach(&xfr->db);
845 isc_task_detach(&xfr->task);
846 dns_zone_idetach(&xfr->zone);
847 isc_mem_put(mctx, xfr, sizeof(*xfr));
853 xfrin_start(dns_xfrin_ctx_t *xfr) {
855 CHECK(isc_socket_create(xfr->socketmgr,
856 isc_sockaddr_pf(&xfr->sourceaddr),
859 #ifndef BROKEN_TCP_BIND_BEFORE_CONNECT
860 CHECK(isc_socket_bind(xfr->socket, &xfr->sourceaddr));
862 CHECK(isc_socket_connect(xfr->socket, &xfr->masteraddr, xfr->task,
863 xfrin_connect_done, xfr));
865 return (ISC_R_SUCCESS);
867 xfrin_fail(xfr, result, "failed setting up socket");
871 /* XXX the resolver could use this, too */
874 render(dns_message_t *msg, isc_mem_t *mctx, isc_buffer_t *buf) {
876 isc_boolean_t cleanup_cctx = ISC_FALSE;
879 CHECK(dns_compress_init(&cctx, -1, mctx));
880 cleanup_cctx = ISC_TRUE;
881 CHECK(dns_message_renderbegin(msg, &cctx, buf));
882 CHECK(dns_message_rendersection(msg, DNS_SECTION_QUESTION, 0));
883 CHECK(dns_message_rendersection(msg, DNS_SECTION_ANSWER, 0));
884 CHECK(dns_message_rendersection(msg, DNS_SECTION_AUTHORITY, 0));
885 CHECK(dns_message_rendersection(msg, DNS_SECTION_ADDITIONAL, 0));
886 CHECK(dns_message_renderend(msg));
887 result = ISC_R_SUCCESS;
890 dns_compress_invalidate(&cctx);
895 * A connection has been established.
898 xfrin_connect_done(isc_task_t *task, isc_event_t *event) {
899 isc_socket_connev_t *cev = (isc_socket_connev_t *) event;
900 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
901 isc_result_t evresult = cev->result;
903 char sourcetext[ISC_SOCKADDR_FORMATSIZE];
904 isc_sockaddr_t sockaddr;
906 REQUIRE(VALID_XFRIN(xfr));
910 INSIST(event->ev_type == ISC_SOCKEVENT_CONNECT);
911 isc_event_free(&event);
914 if (xfr->shuttingdown) {
920 result = isc_socket_getsockname(xfr->socket, &sockaddr);
921 if (result == ISC_R_SUCCESS) {
922 isc_sockaddr_format(&sockaddr, sourcetext, sizeof(sourcetext));
924 strcpy(sourcetext, "<UNKNOWN>");
925 xfrin_log(xfr, ISC_LOG_INFO, "connected using %s", sourcetext);
927 dns_tcpmsg_init(xfr->mctx, xfr->socket, &xfr->tcpmsg);
928 xfr->tcpmsg_valid = ISC_TRUE;
930 CHECK(xfrin_send_request(xfr));
932 if (result != ISC_R_SUCCESS)
933 xfrin_fail(xfr, result, "failed to connect");
937 * Convert a tuple into a dns_name_t suitable for inserting
938 * into the given dns_message_t.
941 tuple2msgname(dns_difftuple_t *tuple, dns_message_t *msg, dns_name_t **target)
944 dns_rdata_t *rdata = NULL;
945 dns_rdatalist_t *rdl = NULL;
946 dns_rdataset_t *rds = NULL;
947 dns_name_t *name = NULL;
949 REQUIRE(target != NULL && *target == NULL);
951 CHECK(dns_message_gettemprdata(msg, &rdata));
952 dns_rdata_init(rdata);
953 dns_rdata_clone(&tuple->rdata, rdata);
955 CHECK(dns_message_gettemprdatalist(msg, &rdl));
956 dns_rdatalist_init(rdl);
957 rdl->type = tuple->rdata.type;
958 rdl->rdclass = tuple->rdata.rdclass;
959 rdl->ttl = tuple->ttl;
960 ISC_LIST_APPEND(rdl->rdata, rdata, link);
962 CHECK(dns_message_gettemprdataset(msg, &rds));
963 dns_rdataset_init(rds);
964 CHECK(dns_rdatalist_tordataset(rdl, rds));
966 CHECK(dns_message_gettempname(msg, &name));
967 dns_name_init(name, NULL);
968 dns_name_clone(&tuple->name, name);
969 ISC_LIST_APPEND(name->list, rds, link);
972 return (ISC_R_SUCCESS);
977 dns_rdataset_disassociate(rds);
978 dns_message_puttemprdataset(msg, &rds);
981 ISC_LIST_UNLINK(rdl->rdata, rdata, link);
982 dns_message_puttemprdatalist(msg, &rdl);
985 dns_message_puttemprdata(msg, &rdata);
992 * Build an *XFR request and send its length prefix.
995 xfrin_send_request(dns_xfrin_ctx_t *xfr) {
998 isc_region_t lregion;
999 dns_rdataset_t *qrdataset = NULL;
1000 dns_message_t *msg = NULL;
1001 unsigned char length[2];
1002 dns_difftuple_t *soatuple = NULL;
1003 dns_name_t *qname = NULL;
1004 dns_dbversion_t *ver = NULL;
1005 dns_name_t *msgsoaname = NULL;
1007 /* Create the request message */
1008 CHECK(dns_message_create(xfr->mctx, DNS_MESSAGE_INTENTRENDER, &msg));
1009 CHECK(dns_message_settsigkey(msg, xfr->tsigkey));
1011 /* Create a name for the question section. */
1012 CHECK(dns_message_gettempname(msg, &qname));
1013 dns_name_init(qname, NULL);
1014 dns_name_clone(&xfr->name, qname);
1016 /* Formulate the question and attach it to the question name. */
1017 CHECK(dns_message_gettemprdataset(msg, &qrdataset));
1018 dns_rdataset_init(qrdataset);
1019 dns_rdataset_makequestion(qrdataset, xfr->rdclass, xfr->reqtype);
1020 ISC_LIST_APPEND(qname->list, qrdataset, link);
1023 dns_message_addname(msg, qname, DNS_SECTION_QUESTION);
1026 if (xfr->reqtype == dns_rdatatype_ixfr) {
1027 /* Get the SOA and add it to the authority section. */
1028 /* XXX is using the current version the right thing? */
1029 dns_db_currentversion(xfr->db, &ver);
1030 CHECK(dns_db_createsoatuple(xfr->db, ver, xfr->mctx,
1031 DNS_DIFFOP_EXISTS, &soatuple));
1032 xfr->ixfr.request_serial = dns_soa_getserial(&soatuple->rdata);
1033 xfr->ixfr.current_serial = xfr->ixfr.request_serial;
1034 xfrin_log(xfr, ISC_LOG_DEBUG(3),
1035 "requesting IXFR for serial %u",
1036 xfr->ixfr.request_serial);
1038 CHECK(tuple2msgname(soatuple, msg, &msgsoaname));
1039 dns_message_addname(msg, msgsoaname, DNS_SECTION_AUTHORITY);
1040 } else if (xfr->reqtype == dns_rdatatype_soa)
1041 CHECK(dns_db_getsoaserial(xfr->db, NULL,
1042 &xfr->ixfr.request_serial));
1044 xfr->checkid = ISC_TRUE;
1048 CHECK(render(msg, xfr->mctx, &xfr->qbuffer));
1051 * Free the last tsig, if there is one.
1053 if (xfr->lasttsig != NULL)
1054 isc_buffer_free(&xfr->lasttsig);
1057 * Save the query TSIG and don't let message_destroy free it.
1059 CHECK(dns_message_getquerytsig(msg, xfr->mctx, &xfr->lasttsig));
1061 isc_buffer_usedregion(&xfr->qbuffer, ®ion);
1062 INSIST(region.length <= 65535);
1064 length[0] = region.length >> 8;
1065 length[1] = region.length & 0xFF;
1066 lregion.base = length;
1068 CHECK(isc_socket_send(xfr->socket, &lregion, xfr->task,
1069 xfrin_sendlen_done, xfr));
1074 dns_message_puttempname(msg, &qname);
1075 if (qrdataset != NULL)
1076 dns_message_puttemprdataset(msg, &qrdataset);
1078 dns_message_destroy(&msg);
1079 if (soatuple != NULL)
1080 dns_difftuple_free(&soatuple);
1082 dns_db_closeversion(xfr->db, &ver, ISC_FALSE);
1086 /* XXX there should be library support for sending DNS TCP messages */
1089 xfrin_sendlen_done(isc_task_t *task, isc_event_t *event) {
1090 isc_socketevent_t *sev = (isc_socketevent_t *) event;
1091 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1092 isc_result_t evresult = sev->result;
1093 isc_result_t result;
1094 isc_region_t region;
1096 REQUIRE(VALID_XFRIN(xfr));
1100 INSIST(event->ev_type == ISC_SOCKEVENT_SENDDONE);
1101 isc_event_free(&event);
1104 if (xfr->shuttingdown) {
1109 xfrin_log(xfr, ISC_LOG_DEBUG(3), "sent request length prefix");
1112 isc_buffer_usedregion(&xfr->qbuffer, ®ion);
1113 CHECK(isc_socket_send(xfr->socket, ®ion, xfr->task,
1114 xfrin_send_done, xfr));
1117 if (result != ISC_R_SUCCESS)
1118 xfrin_fail(xfr, result, "failed sending request length prefix");
1123 xfrin_send_done(isc_task_t *task, isc_event_t *event) {
1124 isc_socketevent_t *sev = (isc_socketevent_t *) event;
1125 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1126 isc_result_t result;
1128 REQUIRE(VALID_XFRIN(xfr));
1132 INSIST(event->ev_type == ISC_SOCKEVENT_SENDDONE);
1135 xfrin_log(xfr, ISC_LOG_DEBUG(3), "sent request data");
1138 CHECK(dns_tcpmsg_readmessage(&xfr->tcpmsg, xfr->task,
1139 xfrin_recv_done, xfr));
1142 isc_event_free(&event);
1143 if (result != ISC_R_SUCCESS)
1144 xfrin_fail(xfr, result, "failed sending request data");
1149 xfrin_recv_done(isc_task_t *task, isc_event_t *ev) {
1150 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) ev->ev_arg;
1151 isc_result_t result;
1152 dns_message_t *msg = NULL;
1154 dns_tcpmsg_t *tcpmsg;
1155 dns_name_t *tsigowner = NULL;
1157 REQUIRE(VALID_XFRIN(xfr));
1161 INSIST(ev->ev_type == DNS_EVENT_TCPMSG);
1162 tcpmsg = ev->ev_sender;
1163 isc_event_free(&ev);
1166 if (xfr->shuttingdown) {
1171 CHECK(tcpmsg->result);
1173 xfrin_log(xfr, ISC_LOG_DEBUG(7), "received %u bytes",
1174 tcpmsg->buffer.used);
1176 CHECK(isc_timer_touch(xfr->timer));
1178 CHECK(dns_message_create(xfr->mctx, DNS_MESSAGE_INTENTPARSE, &msg));
1180 CHECK(dns_message_settsigkey(msg, xfr->tsigkey));
1181 CHECK(dns_message_setquerytsig(msg, xfr->lasttsig));
1182 msg->tsigctx = xfr->tsigctx;
1184 msg->tcp_continuation = 1;
1186 result = dns_message_parse(msg, &tcpmsg->buffer,
1187 DNS_MESSAGEPARSE_PRESERVEORDER);
1189 if (result != ISC_R_SUCCESS || msg->rcode != dns_rcode_noerror ||
1190 (xfr->checkid && msg->id != xfr->id)) {
1191 if (result == ISC_R_SUCCESS)
1192 result = ISC_RESULTCLASS_DNSRCODE + msg->rcode; /*XXX*/
1193 if (result == ISC_R_SUCCESS || result == DNS_R_NOERROR)
1194 result = DNS_R_UNEXPECTEDID;
1195 if (xfr->reqtype == dns_rdatatype_axfr ||
1196 xfr->reqtype == dns_rdatatype_soa)
1198 xfrin_log(xfr, ISC_LOG_DEBUG(3), "got %s, retrying with AXFR",
1199 isc_result_totext(result));
1201 dns_message_destroy(&msg);
1203 xfr->reqtype = dns_rdatatype_soa;
1204 xfr->state = XFRST_SOAQUERY;
1205 (void)xfrin_start(xfr);
1210 * Does the server know about IXFR? If it doesn't we will get
1211 * a message with a empty answer section or a potentially a CNAME /
1212 * DNAME, the later is handled by xfr_rr() which will return FORMERR
1213 * if the first RR in the answer section is not a SOA record.
1215 if (xfr->reqtype == dns_rdatatype_ixfr &&
1216 xfr->state == XFRST_INITIALSOA &&
1217 msg->counts[DNS_SECTION_ANSWER] == 0) {
1218 xfrin_log(xfr, ISC_LOG_DEBUG(3),
1219 "empty answer section, retrying with AXFR");
1223 if (xfr->reqtype == dns_rdatatype_soa &&
1224 (msg->flags & DNS_MESSAGEFLAG_AA) == 0) {
1225 FAIL(DNS_R_NOTAUTHORITATIVE);
1229 result = dns_message_checksig(msg, dns_zone_getview(xfr->zone));
1230 if (result != ISC_R_SUCCESS) {
1231 xfrin_log(xfr, ISC_LOG_DEBUG(3), "TSIG check failed: %s",
1232 isc_result_totext(result));
1236 for (result = dns_message_firstname(msg, DNS_SECTION_ANSWER);
1237 result == ISC_R_SUCCESS;
1238 result = dns_message_nextname(msg, DNS_SECTION_ANSWER))
1240 dns_rdataset_t *rds;
1243 dns_message_currentname(msg, DNS_SECTION_ANSWER, &name);
1244 for (rds = ISC_LIST_HEAD(name->list);
1246 rds = ISC_LIST_NEXT(rds, link))
1248 for (result = dns_rdataset_first(rds);
1249 result == ISC_R_SUCCESS;
1250 result = dns_rdataset_next(rds))
1252 dns_rdata_t rdata = DNS_RDATA_INIT;
1253 dns_rdataset_current(rds, &rdata);
1254 CHECK(xfr_rr(xfr, name, rds->ttl, &rdata));
1258 if (result != ISC_R_NOMORE)
1261 if (dns_message_gettsig(msg, &tsigowner) != NULL) {
1263 * Reset the counter.
1268 * Free the last tsig, if there is one.
1270 if (xfr->lasttsig != NULL)
1271 isc_buffer_free(&xfr->lasttsig);
1274 * Update the last tsig pointer.
1276 CHECK(dns_message_getquerytsig(msg, xfr->mctx,
1279 } else if (dns_message_gettsigkey(msg) != NULL) {
1281 if (xfr->sincetsig > 100 ||
1282 xfr->nmsg == 0 || xfr->state == XFRST_END)
1284 result = DNS_R_EXPECTEDTSIG;
1290 * Update the number of messages received.
1295 * Copy the context back.
1297 xfr->tsigctx = msg->tsigctx;
1299 dns_message_destroy(&msg);
1301 if (xfr->state == XFRST_GOTSOA) {
1302 xfr->reqtype = dns_rdatatype_axfr;
1303 xfr->state = XFRST_INITIALSOA;
1304 CHECK(xfrin_send_request(xfr));
1305 } else if (xfr->state == XFRST_END) {
1307 * Inform the caller we succeeded.
1309 if (xfr->done != NULL) {
1310 (xfr->done)(xfr->zone, ISC_R_SUCCESS);
1314 * We should have no outstanding events at this
1315 * point, thus maybe_free() should succeed.
1317 xfr->shuttingdown = ISC_TRUE;
1321 * Read the next message.
1323 CHECK(dns_tcpmsg_readmessage(&xfr->tcpmsg, xfr->task,
1324 xfrin_recv_done, xfr));
1331 dns_message_destroy(&msg);
1332 if (result != ISC_R_SUCCESS)
1333 xfrin_fail(xfr, result, "failed while receiving responses");
1337 xfrin_timeout(isc_task_t *task, isc_event_t *event) {
1338 dns_xfrin_ctx_t *xfr = (dns_xfrin_ctx_t *) event->ev_arg;
1340 REQUIRE(VALID_XFRIN(xfr));
1344 isc_event_free(&event);
1346 * This will log "giving up: timeout".
1348 xfrin_fail(xfr, ISC_R_TIMEDOUT, "giving up");
1352 maybe_free(dns_xfrin_ctx_t *xfr) {
1353 REQUIRE(VALID_XFRIN(xfr));
1355 if (! xfr->shuttingdown || xfr->refcount != 0 ||
1356 xfr->connects != 0 || xfr->sends != 0 ||
1360 xfrin_log(xfr, ISC_LOG_INFO, "end of transfer");
1362 if (xfr->socket != NULL)
1363 isc_socket_detach(&xfr->socket);
1365 if (xfr->timer != NULL)
1366 isc_timer_detach(&xfr->timer);
1368 if (xfr->task != NULL)
1369 isc_task_detach(&xfr->task);
1371 if (xfr->tsigkey != NULL)
1372 dns_tsigkey_detach(&xfr->tsigkey);
1374 if (xfr->lasttsig != NULL)
1375 isc_buffer_free(&xfr->lasttsig);
1377 dns_diff_clear(&xfr->diff);
1379 if (xfr->ixfr.journal != NULL)
1380 dns_journal_destroy(&xfr->ixfr.journal);
1382 if (xfr->axfr.add_private != NULL)
1383 (void)dns_db_endload(xfr->db, &xfr->axfr.add_private);
1385 if (xfr->tcpmsg_valid)
1386 dns_tcpmsg_invalidate(&xfr->tcpmsg);
1388 if ((xfr->name.attributes & DNS_NAMEATTR_DYNAMIC) != 0)
1389 dns_name_free(&xfr->name, xfr->mctx);
1391 if (xfr->ver != NULL)
1392 dns_db_closeversion(xfr->db, &xfr->ver, ISC_FALSE);
1394 if (xfr->db != NULL)
1395 dns_db_detach(&xfr->db);
1397 if (xfr->zone != NULL)
1398 dns_zone_idetach(&xfr->zone);
1400 isc_mem_put(xfr->mctx, xfr, sizeof(*xfr));
1404 * Log incoming zone transfer messages in a format like
1405 * transfer of <zone> from <address>: <message>
1408 xfrin_logv(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
1409 const char *fmt, va_list ap)
1411 char mastertext[ISC_SOCKADDR_FORMATSIZE];
1414 isc_sockaddr_format(masteraddr, mastertext, sizeof(mastertext));
1415 vsnprintf(msgtext, sizeof(msgtext), fmt, ap);
1417 isc_log_write(dns_lctx, DNS_LOGCATEGORY_XFER_IN,
1418 DNS_LOGMODULE_XFER_IN, level,
1419 "transfer of '%s' from %s: %s",
1420 zonetext, mastertext, msgtext);
1424 * Logging function for use when a xfrin_ctx_t has not yet been created.
1428 xfrin_log1(int level, const char *zonetext, isc_sockaddr_t *masteraddr,
1429 const char *fmt, ...)
1433 if (isc_log_wouldlog(dns_lctx, level) == ISC_FALSE)
1437 xfrin_logv(level, zonetext, masteraddr, fmt, ap);
1442 * Logging function for use when there is a xfrin_ctx_t.
1446 xfrin_log(dns_xfrin_ctx_t *xfr, int level, const char *fmt, ...)
1449 char zonetext[DNS_NAME_MAXTEXT+32];
1451 if (isc_log_wouldlog(dns_lctx, level) == ISC_FALSE)
1454 dns_zone_name(xfr->zone, zonetext, sizeof(zonetext));
1457 xfrin_logv(level, zonetext, &xfr->masteraddr, fmt, ap);