]> git.lizzy.rs Git - plan9front.git/blob - sys/src/cmd/ndb/dn.c
ndb/dns: detect query loops
[plan9front.git] / sys / src / cmd / ndb / dn.c
1 #include <u.h>
2 #include <libc.h>
3 #include <ip.h>
4 #include <pool.h>
5 #include <ctype.h>
6 #include "dns.h"
7
8 /*
9  *  this comment used to say `our target is 4000 names cached, this should
10  *  be larger on large servers'.  dns at Bell Labs starts off with
11  *  about 1780 names.
12  *
13  * aging seems to corrupt the cache, so raise the trigger from 4000 until we
14  * figure it out.
15  */
16 enum {
17         /* these settings will trigger frequent aging */
18         Deftarget       = 4000,
19         Minage          =  5*Min,
20         Defagefreq      = 15*Min,       /* age names this often (seconds) */
21 };
22
23 /*
24  *  Hash table for domain names.  The hash is based only on the
25  *  first element of the domain name.
26  */
27 DN *ht[HTLEN];
28
29 static struct {
30         Lock;
31         ulong   names;          /* names allocated */
32         ulong   oldest;         /* longest we'll leave a name around */
33         int     active;
34         int     mutex;
35         ushort  id;             /* same size as in packet */
36 } dnvars;
37
38 /* names of RR types */
39 char *rrtname[] =
40 {
41 [Ta]            "ip",
42 [Tns]           "ns",
43 [Tmd]           "md",
44 [Tmf]           "mf",
45 [Tcname]        "cname",
46 [Tsoa]          "soa",
47 [Tmb]           "mb",
48 [Tmg]           "mg",
49 [Tmr]           "mr",
50 [Tnull]         "null",
51 [Twks]          "wks",
52 [Tptr]          "ptr",
53 [Thinfo]        "hinfo",
54 [Tminfo]        "minfo",
55 [Tmx]           "mx",
56 [Ttxt]          "txt",
57 [Trp]           "rp",
58 [Tafsdb]        "afsdb",
59 [Tx25]          "x.25",
60 [Tisdn]         "isdn",
61 [Trt]           "rt",
62 [Tnsap]         "nsap",
63 [Tnsapptr]      "nsap-ptr",
64 [Tsig]          "sig",
65 [Tkey]          "key",
66 [Tpx]           "px",
67 [Tgpos]         "gpos",
68 [Taaaa]         "ipv6",
69 [Tloc]          "loc",
70 [Tnxt]          "nxt",
71 [Teid]          "eid",
72 [Tnimloc]       "nimrod",
73 [Tsrv]          "srv",
74 [Tatma]         "atma",
75 [Tnaptr]        "naptr",
76 [Tkx]           "kx",
77 [Tcert]         "cert",
78 [Ta6]           "a6",
79 [Tdname]        "dname",
80 [Tsink]         "sink",
81 [Topt]          "opt",
82 [Tapl]          "apl",
83 [Tds]           "ds",
84 [Tsshfp]        "sshfp",
85 [Tipseckey]     "ipseckey",
86 [Trrsig]        "rrsig",
87 [Tnsec]         "nsec",
88 [Tdnskey]       "dnskey",
89 [Tspf]          "spf",
90 [Tuinfo]        "uinfo",
91 [Tuid]          "uid",
92 [Tgid]          "gid",
93 [Tunspec]       "unspec",
94 [Ttkey]         "tkey",
95 [Ttsig]         "tsig",
96 [Tixfr]         "ixfr",
97 [Taxfr]         "axfr",
98 [Tmailb]        "mailb",
99 [Tmaila]        "maila",
100 [Tall]          "all",
101                 0,
102 };
103
104 /* names of response codes */
105 char *rname[Rmask+1] =
106 {
107 [Rok]                   "ok",
108 [Rformat]               "format error",
109 [Rserver]               "server failure",
110 [Rname]                 "bad name",
111 [Runimplimented]        "unimplemented",
112 [Rrefused]              "we don't like you",
113 [Ryxdomain]             "name should not exist",
114 [Ryxrrset]              "rr set should not exist",
115 [Rnxrrset]              "rr set should exist",
116 [Rnotauth]              "not authorative",
117 [Rnotzone]              "not in zone",
118 [Rbadvers]              "bad opt version",
119 /* [Rbadsig]            "bad signature", */
120 [Rbadkey]               "bad key",
121 [Rbadtime]              "bad signature time",
122 [Rbadmode]              "bad mode",
123 [Rbadname]              "duplicate key name",
124 [Rbadalg]               "bad algorithm",
125 };
126 unsigned nrname = nelem(rname);
127
128 /* names of op codes */
129 char *opname[] =
130 {
131 [Oquery]        "query",
132 [Oinverse]      "inverse query (retired)",
133 [Ostatus]       "status",
134 [Oupdate]       "update",
135 };
136
137 ulong target = Deftarget;
138 Lock    dnlock;
139
140 static ulong agefreq = Defagefreq;
141
142 static int rrequiv(RR *r1, RR *r2);
143 static int sencodefmt(Fmt*);
144
145 static void
146 ding(void*, char *msg)
147 {
148         if(strstr(msg, "alarm") != nil) {
149                 stats.alarms++;
150                 noted(NCONT);           /* resume with system call error */
151         } else
152                 noted(NDFLT);           /* die */
153 }
154
155 void
156 dninit(void)
157 {
158         fmtinstall('E', eipfmt);
159         fmtinstall('I', eipfmt);
160         fmtinstall('V', eipfmt);
161         fmtinstall('R', rrfmt);
162         fmtinstall('Q', rravfmt);
163         fmtinstall('H', sencodefmt);
164
165         dnvars.oldest = maxage;
166         dnvars.names = 0;
167         dnvars.id = truerand(); /* don't start with same id every time */
168
169         notify(ding);
170 }
171
172 /*
173  *  hash for a domain name
174  */
175 static ulong
176 dnhash(char *name)
177 {
178         ulong hash;
179         uchar *val = (uchar*)name;
180
181         for(hash = 0; *val; val++)
182                 hash = hash*13 + tolower(*val)-'a';
183         return hash % HTLEN;
184 }
185
186 /*
187  *  lookup a symbol.  if enter is not zero and the name is
188  *  not found, create it.
189  */
190 DN*
191 dnlookup(char *name, int class, int enter)
192 {
193         DN **l;
194         DN *dp;
195
196         l = &ht[dnhash(name)];
197         lock(&dnlock);
198         for(dp = *l; dp; dp = dp->next) {
199                 assert(dp->magic == DNmagic);
200                 if(dp->class == class && cistrcmp(dp->name, name) == 0){
201                         dp->referenced = now;
202                         unlock(&dnlock);
203                         return dp;
204                 }
205                 l = &dp->next;
206         }
207
208         if(!enter){
209                 unlock(&dnlock);
210                 return 0;
211         }
212         dnvars.names++;
213         dp = emalloc(sizeof(*dp));
214         dp->magic = DNmagic;
215         dp->name = estrdup(name);
216         dp->class = class;
217         dp->rr = nil;
218         dp->referenced = now;
219         /* add new DN to tail of the hash list.  *l points to last next ptr. */
220         dp->next = nil;
221         *l = dp;
222         unlock(&dnlock);
223
224         return dp;
225 }
226
227 static int
228 rrsame(RR *rr1, RR *rr2)
229 {
230         return rr1 == rr2 || rr2 && rrequiv(rr1, rr2) &&
231                 rr1->db == rr2->db && rr1->auth == rr2->auth;
232 }
233
234 static int
235 rronlist(RR *rp, RR *lp)
236 {
237         for(; lp; lp = lp->next)
238                 if (rrsame(lp, rp))
239                         return 1;
240         return 0;
241 }
242
243 /*
244  * dump the stats
245  */
246 void
247 dnstats(char *file)
248 {
249         int i, fd;
250
251         fd = create(file, OWRITE, 0666);
252         if(fd < 0)
253                 return;
254
255         qlock(&stats);
256         fprint(fd, "# system %s\n", sysname());
257         fprint(fd, "# slave procs high-water mark\t%lud\n", stats.slavehiwat);
258         fprint(fd, "# queries received by 9p\t%lud\n", stats.qrecvd9p);
259         fprint(fd, "# queries received by udp\t%lud\n", stats.qrecvdudp);
260         fprint(fd, "# queries answered from memory\t%lud\n", stats.answinmem);
261         fprint(fd, "# queries sent by udp\t%lud\n", stats.qsent);
262         for (i = 0; i < nelem(stats.under10ths); i++)
263                 if (stats.under10ths[i] || i == nelem(stats.under10ths) - 1)
264                         fprint(fd, "# responses arriving within %.1f s.\t%lud\n",
265                                 (double)(i+1)/10, stats.under10ths[i]);
266         fprint(fd, "\n# queries sent & timed-out\t%lud\n", stats.tmout);
267         fprint(fd, "# cname queries timed-out\t%lud\n", stats.tmoutcname);
268         fprint(fd, "# ipv6  queries timed-out\t%lud\n", stats.tmoutv6);
269         fprint(fd, "\n# negative answers received\t%lud\n", stats.negans);
270         fprint(fd, "# negative answers w Rserver set\t%lud\n", stats.negserver);
271         fprint(fd, "# negative answers w bad delegation\t%lud\n",
272                 stats.negbaddeleg);
273         fprint(fd, "# negative answers w bad delegation & no answers\t%lud\n",
274                 stats.negbdnoans);
275         fprint(fd, "# negative answers w no Rname set\t%lud\n", stats.negnorname);
276         fprint(fd, "# negative answers cached\t%lud\n", stats.negcached);
277         qunlock(&stats);
278
279         lock(&dnlock);
280         fprint(fd, "\n# domain names %lud target %lud\n", dnvars.names, target);
281         unlock(&dnlock);
282         close(fd);
283 }
284
285 /*
286  *  dump the cache
287  */
288 void
289 dndump(char *file)
290 {
291         int i, fd;
292         DN *dp;
293         RR *rp;
294
295         fd = create(file, OWRITE, 0666);
296         if(fd < 0)
297                 return;
298
299         lock(&dnlock);
300         for(i = 0; i < HTLEN; i++)
301                 for(dp = ht[i]; dp; dp = dp->next){
302                         fprint(fd, "%s\n", dp->name);
303                         for(rp = dp->rr; rp; rp = rp->next) {
304                                 fprint(fd, "\t%R %c%c %ld/%lud\n",
305                                         rp, rp->auth? 'A': 'U',
306                                         rp->db? 'D': 'N', (long)(rp->expire - now), rp->ttl);
307                                 if (rronlist(rp, rp->next))
308                                         fprint(fd, "*** duplicate:\n");
309                         }
310                 }
311         unlock(&dnlock);
312         close(fd);
313 }
314
315 /*
316  *  purge all records
317  */
318 void
319 dnpurge(void)
320 {
321         DN *dp;
322         RR *rp, *srp;
323         int i;
324
325         lock(&dnlock);
326
327         for(i = 0; i < HTLEN; i++)
328                 for(dp = ht[i]; dp; dp = dp->next){
329                         srp = rp = dp->rr;
330                         dp->rr = nil;
331                         for(; rp != nil; rp = rp->next)
332                                 rp->cached = 0;
333                         rrfreelist(srp);
334                 }
335
336         unlock(&dnlock);
337 }
338
339 /*
340  *  delete head of *l and free the old head.
341  *  call with dnlock held.
342  */
343 static void
344 rrdelhead(RR **l)
345 {
346         RR *rp;
347
348         if (canlock(&dnlock))
349                 abort();        /* rrdelhead called with dnlock not held */
350         rp = *l;
351         if(rp == nil)
352                 return;
353         *l = rp->next;          /* unlink head */
354         rp->cached = 0;         /* avoid blowing an assertion in rrfree */
355         rrfree(rp);
356 }
357
358 /*
359  *  check the age of resource records, free any that have timed out.
360  *  call with dnlock held.
361  */
362 void
363 dnage(DN *dp)
364 {
365         RR **l, *rp;
366         ulong diff;
367
368         if (canlock(&dnlock))
369                 abort();        /* dnage called with dnlock not held */
370         diff = now - dp->referenced;
371         if(diff < Reserved || dp->mark != 0)
372                 return;
373
374         l = &dp->rr;
375         while ((rp = *l) != nil){
376                 assert(rp->magic == RRmagic && rp->cached);
377                 if(!rp->db && ((long)(rp->expire - now) <= 0 || diff > dnvars.oldest))
378                         rrdelhead(l); /* rp == *l before; *l == rp->next after */
379                 else
380                         l = &rp->next;
381         }
382 }
383
384 #define MARK(dp)        { if (dp) (dp)->mark |= 2; }
385
386 /* mark a domain name and those in its RRs as never to be aged */
387 void
388 dnagenever(DN *dp)
389 {
390         RR *rp;
391
392         lock(&dnlock);
393
394         /* mark all referenced domain names */
395         MARK(dp);
396         for(rp = dp->rr; rp; rp = rp->next){
397                 MARK(rp->owner);
398                 if(rp->negative){
399                         MARK(rp->negsoaowner);
400                         continue;
401                 }
402                 switch(rp->type){
403                 case Thinfo:
404                         MARK(rp->cpu);
405                         MARK(rp->os);
406                         break;
407                 case Ttxt:
408                         break;
409                 case Tcname:
410                 case Tmb:
411                 case Tmd:
412                 case Tmf:
413                 case Tns:
414                 case Tmx:
415                 case Tsrv:
416                         MARK(rp->host);
417                         break;
418                 case Tmg:
419                 case Tmr:
420                         MARK(rp->mb);
421                         break;
422                 case Tminfo:
423                         MARK(rp->rmb);
424                         MARK(rp->mb);
425                         break;
426                 case Trp:
427                         MARK(rp->rmb);
428                         MARK(rp->rp);
429                         break;
430                 case Ta:
431                 case Taaaa:
432                         MARK(rp->ip);
433                         break;
434                 case Tptr:
435                         MARK(rp->ptr);
436                         break;
437                 case Tsoa:
438                         MARK(rp->host);
439                         MARK(rp->rmb);
440                         break;
441                 case Tsig:
442                         MARK(rp->sig->signer);
443                         break;
444                 }
445         }
446
447         unlock(&dnlock);
448 }
449
450 #define REF(dp) { if (dp) (dp)->mark |= 1; }
451
452 /*
453  *  periodicly sweep for old records and remove unreferenced domain names
454  *
455  *  only called when all other threads are locked out
456  */
457 void
458 dnageall(int doit)
459 {
460         DN *dp, **l;
461         int i;
462         RR *rp;
463         static ulong nextage;
464
465         if(dnvars.names < target || ((long)(nextage - now) > 0 && !doit)){
466                 dnvars.oldest = maxage;
467                 return;
468         }
469
470         if(dnvars.names >= target) {
471                 dnslog("more names (%lud) than target (%lud)", dnvars.names,
472                         target);
473                 dnvars.oldest /= 2;
474                 if (dnvars.oldest < Minage)
475                         dnvars.oldest = Minage;         /* don't be silly */
476         }
477         if (agefreq > dnvars.oldest / 2)
478                 nextage = now + dnvars.oldest / 2;
479         else
480                 nextage = now + (ulong)agefreq;
481
482         lock(&dnlock);
483
484         /* time out all old entries (and set refs to 0) */
485         for(i = 0; i < HTLEN; i++)
486                 for(dp = ht[i]; dp; dp = dp->next){
487                         dp->mark &= ~1;
488                         dnage(dp);
489                 }
490
491         /* mark all referenced domain names */
492         for(i = 0; i < HTLEN; i++)
493                 for(dp = ht[i]; dp; dp = dp->next)
494                         for(rp = dp->rr; rp; rp = rp->next){
495                                 REF(rp->owner);
496                                 if(rp->negative){
497                                         REF(rp->negsoaowner);
498                                         continue;
499                                 }
500                                 switch(rp->type){
501                                 case Thinfo:
502                                         REF(rp->cpu);
503                                         REF(rp->os);
504                                         break;
505                                 case Ttxt:
506                                         break;
507                                 case Tcname:
508                                 case Tmb:
509                                 case Tmd:
510                                 case Tmf:
511                                 case Tns:
512                                 case Tmx:
513                                 case Tsrv:
514                                         REF(rp->host);
515                                         break;
516                                 case Tmg:
517                                 case Tmr:
518                                         REF(rp->mb);
519                                         break;
520                                 case Tminfo:
521                                         REF(rp->rmb);
522                                         REF(rp->mb);
523                                         break;
524                                 case Trp:
525                                         REF(rp->rmb);
526                                         REF(rp->rp);
527                                         break;
528                                 case Ta:
529                                 case Taaaa:
530                                         REF(rp->ip);
531                                         break;
532                                 case Tptr:
533                                         REF(rp->ptr);
534                                         break;
535                                 case Tsoa:
536                                         REF(rp->host);
537                                         REF(rp->rmb);
538                                         break;
539                                 case Tsig:
540                                         REF(rp->sig->signer);
541                                         break;
542                                 }
543                         }
544
545         /* sweep and remove unreferenced domain names */
546         for(i = 0; i < HTLEN; i++){
547                 l = &ht[i];
548                 for(dp = *l; dp; dp = *l){
549                         if(dp->rr == nil && dp->mark == 0){
550                                 assert(dp->magic == DNmagic);
551                                 *l = dp->next;
552
553                                 free(dp->name);
554                                 memset(dp, 0, sizeof *dp); /* cause trouble */
555                                 dp->magic = ~DNmagic;
556                                 free(dp);
557
558                                 dnvars.names--;
559                                 continue;
560                         }
561                         l = &dp->next;
562                 }
563         }
564
565         unlock(&dnlock);
566 }
567
568 /*
569  *  timeout all database records (used when rereading db)
570  */
571 void
572 dnagedb(void)
573 {
574         DN *dp;
575         int i;
576         RR *rp;
577
578         lock(&dnlock);
579
580         /* time out all database entries */
581         for(i = 0; i < HTLEN; i++)
582                 for(dp = ht[i]; dp; dp = dp->next) {
583                         dp->mark = 0;
584                         for(rp = dp->rr; rp; rp = rp->next)
585                                 if(rp->db)
586                                         rp->expire = 0;
587                 }
588
589         unlock(&dnlock);
590 }
591
592 /*
593  *  mark all local db records about my area as authoritative,
594  *  delete timed out ones
595  */
596 void
597 dnauthdb(void)
598 {
599         int i;
600         ulong minttl;
601         Area *area;
602         DN *dp;
603         RR *rp, **l;
604
605         lock(&dnlock);
606
607         /* time out all database entries */
608         for(i = 0; i < HTLEN; i++)
609                 for(dp = ht[i]; dp; dp = dp->next){
610                         area = inmyarea(dp->name);
611                         l = &dp->rr;
612                         for(rp = *l; rp; rp = *l){
613                                 if(rp->db){
614                                         if(rp->expire == 0){
615                                                 rrdelhead(l);
616                                                 continue;
617                                         }
618                                         if(area){
619                                                 minttl = area->soarr->soa->minttl;
620                                                 if(rp->ttl < minttl)
621                                                         rp->ttl = minttl;
622                                                 rp->auth = 1;
623                                         }
624                                 }
625                                 l = &rp->next;
626                         }
627                 }
628
629         unlock(&dnlock);
630 }
631
632 /*
633  *  keep track of other processes to know if we can
634  *  garbage collect.  block while garbage collecting.
635  */
636 int
637 getactivity(Request *req, int recursive)
638 {
639         int rv;
640
641         if(traceactivity)
642                 dnslog("get: %d active by pid %d from %p",
643                         dnvars.active, getpid(), getcallerpc(&req));
644         lock(&dnvars);
645         /*
646          * can't block here if we're already holding one
647          * of the dnvars.active (recursive).  will deadlock.
648          */
649         while(!recursive && dnvars.mutex){
650                 unlock(&dnvars);
651                 sleep(100);                     /* tune; was 200 */
652                 lock(&dnvars);
653         }
654         rv = ++dnvars.active;
655         now = time(nil);
656         nowns = nsec();
657         req->id = ++dnvars.id;
658         req->aux = nil;
659         unlock(&dnvars);
660
661         return rv;
662 }
663 void
664 putactivity(int recursive)
665 {
666         static ulong lastclean;
667
668         if(traceactivity)
669                 dnslog("put: %d active by pid %d",
670                         dnvars.active, getpid());
671         lock(&dnvars);
672         dnvars.active--;
673         assert(dnvars.active >= 0); /* "dnvars.active %d", dnvars.active */
674
675         /*
676          *  clean out old entries and check for new db periodicly
677          *  can't block here if being called to let go a "recursive" lock
678          *  or we'll deadlock waiting for ourselves to give up the dnvars.active.
679          */
680         if (recursive || dnvars.mutex ||
681             (needrefresh == 0 && dnvars.active > 0)){
682                 unlock(&dnvars);
683                 return;
684         }
685
686         /* wait till we're alone */
687         dnvars.mutex = 1;
688         while(dnvars.active > 0){
689                 unlock(&dnvars);
690                 sleep(100);             /* tune; was 100 */
691                 lock(&dnvars);
692         }
693         unlock(&dnvars);
694
695         dncheck();
696
697         db2cache(needrefresh);
698         dncheck();
699
700         dnageall(0);
701
702         dncheck();
703
704         /* let others back in */
705         lastclean = now;
706         needrefresh = 0;
707         dnvars.mutex = 0;
708 }
709
710 int
711 rrlistlen(RR *rp)
712 {
713         int n;
714
715         n = 0;
716         for(; rp; rp = rp->next)
717                 ++n;
718         return n;
719 }
720
721 /*
722  *  Attach a single resource record to a domain name (new->owner).
723  *      - Avoid duplicates with already present RR's
724  *      - Chain all RR's of the same type adjacent to one another
725  *      - chain authoritative RR's ahead of non-authoritative ones
726  *      - remove any expired RR's
727  *  If new is a stale duplicate, rrfree it.
728  *  Must be called with dnlock held.
729  */
730 static void
731 rrattach1(RR *new, int auth)
732 {
733         RR **l;
734         RR *rp;
735         DN *dp;
736         ulong ttl;
737
738         assert(new->magic == RRmagic && !new->cached);
739
740         dp = new->owner;
741         assert(dp != nil && dp->magic == DNmagic);
742         new->auth |= auth;
743         new->next = 0;
744
745         /*
746          * try not to let responses expire before we
747          * can use them to complete this query, by extending
748          * past (or nearly past) expiration time.
749          */
750         if(new->db)
751                 ttl = Year;
752         else
753                 ttl = new->ttl;
754         if(ttl <= Min)
755                 ttl = 10*Min;
756         new->expire = now + ttl;
757
758         /*
759          *  find first rr of the right type
760          */
761         l = &dp->rr;
762         for(rp = *l; rp; rp = *l){
763                 assert(rp->magic == RRmagic && rp->cached);
764                 if(rp->type == new->type)
765                         break;
766                 l = &rp->next;
767         }
768
769         /*
770          *  negative entries replace positive entries
771          *  positive entries replace negative entries
772          *  newer entries replace older entries with the same fields
773          *
774          *  look farther ahead than just the next entry when looking
775          *  for duplicates; RRs of a given type can have different rdata
776          *  fields (e.g. multiple NS servers).
777          */
778         while ((rp = *l) != nil){
779                 assert(rp->magic == RRmagic && rp->cached);
780                 if(rp->type != new->type)
781                         break;
782
783                 if(rp->db == new->db && rp->auth == new->auth){
784                         /* negative drives out positive and vice versa */
785                         if(rp->negative != new->negative) {
786                                 /* rp == *l before; *l == rp->next after */
787                                 rrdelhead(l);
788                                 continue;       
789                         }
790                         /* all things equal, pick the newer one */
791                         else if(rp->arg0 == new->arg0 && rp->arg1 == new->arg1){
792                                 /* old drives out new */
793                                 if((long)(rp->expire - new->expire) > 0) {
794                                         rrfree(new);
795                                         return;
796                                 }
797                                 /* rp == *l before; *l == rp->next after */
798                                 rrdelhead(l);
799                                 continue;
800                         }
801                         /*
802                          *  Hack for pointer records.  This makes sure
803                          *  the ordering in the list reflects the ordering
804                          *  received or read from the database
805                          */
806                         else if(rp->type == Tptr &&
807                             !rp->negative && !new->negative &&
808                             rp->ptr->ordinal > new->ptr->ordinal)
809                                 break;
810                 }
811                 l = &rp->next;
812         }
813
814         if (rronlist(new, rp)) {
815                 /* should not happen; duplicates were processed above */
816                 dnslog("adding duplicate %R to list of %R; aborting", new, rp);
817                 abort();
818         }
819         /*
820          *  add to chain
821          */
822         new->cached = 1;
823         new->next = rp;
824         *l = new;
825 }
826
827 /*
828  *  Attach a list of resource records to a domain name.
829  *  May rrfree any stale duplicate RRs; dismembers the list.
830  *  Upon return, every RR in the list will have been rrfree-d
831  *  or attached to its domain name.
832  *  See rrattach1 for properties preserved.
833  */
834 void
835 rrattach(RR *rp, int auth)
836 {
837         RR *next;
838         DN *dp;
839
840         lock(&dnlock);
841         for(; rp; rp = next){
842                 next = rp->next;
843                 rp->next = nil;
844                 dp = rp->owner;
845                 /* avoid any outside spoofing */
846                 if(cfg.cachedb && !rp->db && inmyarea(dp->name))
847                         rrfree(rp);
848                 else
849                         rrattach1(rp, auth);
850         }
851         unlock(&dnlock);
852 }
853
854 RR**
855 rrcopy(RR *rp, RR **last)
856 {
857         RR *nrp;
858         SOA *soa;
859         Srv *srv;
860         Key *key;
861         Cert *cert;
862         Sig *sig;
863         Null *null;
864         Txt *t, *nt, **l;
865
866         assert(rp->magic == RRmagic);
867         nrp = rralloc(rp->type);
868         switch(rp->type){
869         case Tsoa:
870                 soa = nrp->soa;
871                 *nrp = *rp;
872                 nrp->soa = soa;
873                 *soa = *rp->soa;
874                 soa->slaves = copyserverlist(rp->soa->slaves);
875                 break;
876         case Tsrv:
877                 srv = nrp->srv;
878                 *nrp = *rp;
879                 nrp->srv = srv;
880                 *srv = *rp->srv;
881                 break;
882         case Tkey:
883                 key = nrp->key;
884                 *nrp = *rp;
885                 nrp->key = key;
886                 *key = *rp->key;
887                 key->data = emalloc(key->dlen);
888                 memmove(key->data, rp->key->data, rp->key->dlen);
889                 break;
890         case Tcert:
891                 cert = nrp->cert;
892                 *nrp = *rp;
893                 nrp->cert = cert;
894                 *cert = *rp->cert;
895                 cert->data = emalloc(cert->dlen);
896                 memmove(cert->data, rp->cert->data, rp->cert->dlen);
897                 break;
898         case Tsig:
899                 sig = nrp->sig;
900                 *nrp = *rp;
901                 nrp->sig = sig;
902                 *sig = *rp->sig;
903                 sig->data = emalloc(sig->dlen);
904                 memmove(sig->data, rp->sig->data, rp->sig->dlen);
905                 break;
906         case Tnull:
907                 null = nrp->null;
908                 *nrp = *rp;
909                 nrp->null = null;
910                 *null = *rp->null;
911                 null->data = emalloc(null->dlen);
912                 memmove(null->data, rp->null->data, rp->null->dlen);
913                 break;
914         case Ttxt:
915                 *nrp = *rp;
916                 l = &nrp->txt;
917                 *l = nil;
918                 for(t = rp->txt; t != nil; t = t->next){
919                         nt = emalloc(sizeof(*nt));
920                         nt->p = estrdup(t->p);
921                         nt->next = nil;
922                         *l = nt;
923                         l = &nt->next;
924                 }
925                 break;
926         default:
927                 *nrp = *rp;
928                 break;
929         }
930         nrp->pc = getcallerpc(&rp);
931         setmalloctag(nrp, nrp->pc);
932         nrp->cached = 0;
933         nrp->next = nil;
934         *last = nrp;
935         return &nrp->next;
936 }
937
938 /*
939  *  lookup a resource record of a particular type and
940  *  class attached to a domain name.  Return copies.
941  *
942  *  Priority ordering is:
943  *      db authoritative
944  *      not timed out network authoritative
945  *      not timed out network unauthoritative
946  *      unauthoritative db
947  *
948  *  if flag NOneg is set, don't return negative cached entries.
949  *  return nothing instead.
950  */
951 RR*
952 rrlookup(DN *dp, int type, int flag)
953 {
954         RR *rp, *first, **last;
955
956         assert(dp->magic == DNmagic);
957
958         first = nil;
959         last = &first;
960         lock(&dnlock);
961
962         /* try for an authoritative db entry */
963         for(rp = dp->rr; rp; rp = rp->next){
964                 assert(rp->magic == RRmagic && rp->cached);
965                 if(rp->db)
966                 if(rp->auth)
967                 if(tsame(type, rp->type))
968                         last = rrcopy(rp, last);
969         }
970         if(first)
971                 goto out;
972
973         /* try for a living authoritative network entry */
974         for(rp = dp->rr; rp; rp = rp->next){
975                 if(!rp->db)
976                 if(rp->auth)
977                 if((long)(rp->expire - now) > 0)
978                 if(tsame(type, rp->type)){
979                         if(flag == NOneg && rp->negative)
980                                 goto out;
981                         last = rrcopy(rp, last);
982                 }
983         }
984         if(first)
985                 goto out;
986
987         /* try for a living unauthoritative network entry */
988         for(rp = dp->rr; rp; rp = rp->next){
989                 if(!rp->db)
990                 if((long)(rp->expire - now) > 0)
991                 if(tsame(type, rp->type)){
992                         if(flag == NOneg && rp->negative)
993                                 goto out;
994                         last = rrcopy(rp, last);
995                 }
996         }
997         if(first)
998                 goto out;
999
1000         /* try for an unauthoritative db entry */
1001         for(rp = dp->rr; rp; rp = rp->next){
1002                 if(rp->db)
1003                 if(tsame(type, rp->type))
1004                         last = rrcopy(rp, last);
1005         }
1006         if(first)
1007                 goto out;
1008
1009         /* otherwise, settle for anything we got (except for negative caches) */
1010         for(rp = dp->rr; rp; rp = rp->next)
1011                 if(tsame(type, rp->type)){
1012                         if(rp->negative)
1013                                 goto out;
1014                         last = rrcopy(rp, last);
1015                 }
1016
1017 out:
1018         unlock(&dnlock);
1019         unique(first);
1020         return first;
1021 }
1022
1023 /*
1024  *  convert an ascii RR type name to its integer representation
1025  */
1026 int
1027 rrtype(char *atype)
1028 {
1029         int i;
1030
1031         for(i = 0; i <= Tall; i++)
1032                 if(rrtname[i] && strcmp(rrtname[i], atype) == 0)
1033                         return i;
1034
1035         /* make any a synonym for all */
1036         if(strcmp(atype, "any") == 0)
1037                 return Tall;
1038         else if(isascii(atype[0]) && isdigit(atype[0]))
1039                 return atoi(atype);
1040         else
1041                 return -1;
1042 }
1043
1044 /*
1045  *  return 0 if not a supported rr type
1046  */
1047 int
1048 rrsupported(int type)
1049 {
1050         if(type < 0 || type >Tall)
1051                 return 0;
1052         return rrtname[type] != nil;
1053 }
1054
1055 /*
1056  *  compare 2 types
1057  */
1058 int
1059 tsame(int t1, int t2)
1060 {
1061         return t1 == t2 || t1 == Tall;
1062 }
1063
1064 /*
1065  *  Add resource records to a list.
1066  */
1067 RR*
1068 rrcat(RR **start, RR *rp)
1069 {
1070         RR *olp, *nlp;
1071         RR **last;
1072
1073         /* check for duplicates */
1074         for (olp = *start; 0 && olp; olp = olp->next)
1075                 for (nlp = rp; nlp; nlp = nlp->next)
1076                         if (rrsame(nlp, olp))
1077                                 dnslog("rrcat: duplicate RR: %R", nlp);
1078         USED(olp);
1079
1080         last = start;
1081         while(*last != nil)
1082                 last = &(*last)->next;
1083
1084         *last = rp;
1085         return *start;
1086 }
1087
1088 /*
1089  *  remove negative cache rr's from an rr list
1090  */
1091 RR*
1092 rrremneg(RR **l)
1093 {
1094         RR **nl, *rp;
1095         RR *first;
1096
1097         first = nil;
1098         nl = &first;
1099         while(*l != nil){
1100                 rp = *l;
1101                 if(rp->negative){
1102                         *l = rp->next;
1103                         *nl = rp;
1104                         nl = &rp->next;
1105                         *nl = nil;
1106                 } else
1107                         l = &rp->next;
1108         }
1109
1110         return first;
1111 }
1112
1113 /*
1114  *  remove rr's of a particular type from an rr list
1115  */
1116 RR*
1117 rrremtype(RR **l, int type)
1118 {
1119         RR *first, *rp;
1120         RR **nl;
1121
1122         first = nil;
1123         nl = &first;
1124         while(*l != nil){
1125                 rp = *l;
1126                 if(rp->type == type){
1127                         *l = rp->next;
1128                         *nl = rp;
1129                         nl = &rp->next;
1130                         *nl = nil;
1131                 } else
1132                         l = &(*l)->next;
1133         }
1134
1135         return first;
1136 }
1137
1138 static char *
1139 dnname(DN *dn)
1140 {
1141         return dn? dn->name: "<null>";
1142 }
1143
1144 /*
1145  *  print conversion for rr records
1146  */
1147 int
1148 rrfmt(Fmt *f)
1149 {
1150         int rv;
1151         char *strp;
1152         char buf[Domlen];
1153         Fmt fstr;
1154         RR *rp;
1155         Server *s;
1156         SOA *soa;
1157         Srv *srv;
1158         Txt *t;
1159
1160         fmtstrinit(&fstr);
1161
1162         rp = va_arg(f->args, RR*);
1163         if(rp == nil){
1164                 fmtprint(&fstr, "<null>");
1165                 goto out;
1166         }
1167
1168         fmtprint(&fstr, "%s %s", dnname(rp->owner),
1169                 rrname(rp->type, buf, sizeof buf));
1170
1171         if(rp->negative){
1172                 fmtprint(&fstr, "\tnegative - rcode %d", rp->negrcode);
1173                 goto out;
1174         }
1175
1176         switch(rp->type){
1177         case Thinfo:
1178                 fmtprint(&fstr, "\t%s %s", dnname(rp->cpu), dnname(rp->os));
1179                 break;
1180         case Tcname:
1181         case Tmb:
1182         case Tmd:
1183         case Tmf:
1184         case Tns:
1185                 fmtprint(&fstr, "\t%s", dnname(rp->host));
1186                 break;
1187         case Tmg:
1188         case Tmr:
1189                 fmtprint(&fstr, "\t%s", dnname(rp->mb));
1190                 break;
1191         case Tminfo:
1192                 fmtprint(&fstr, "\t%s %s", dnname(rp->mb), dnname(rp->rmb));
1193                 break;
1194         case Tmx:
1195                 fmtprint(&fstr, "\t%lud %s", rp->pref, dnname(rp->host));
1196                 break;
1197         case Ta:
1198         case Taaaa:
1199                 fmtprint(&fstr, "\t%s", dnname(rp->ip));
1200                 break;
1201         case Tptr:
1202                 fmtprint(&fstr, "\t%s", dnname(rp->ptr));
1203                 break;
1204         case Tsoa:
1205                 soa = rp->soa;
1206                 fmtprint(&fstr, "\t%s %s %lud %lud %lud %lud %lud",
1207                         dnname(rp->host), dnname(rp->rmb),
1208                         (soa? soa->serial: 0),
1209                         (soa? soa->refresh: 0), (soa? soa->retry: 0),
1210                         (soa? soa->expire: 0), (soa? soa->minttl: 0));
1211                 if (soa)
1212                         for(s = soa->slaves; s != nil; s = s->next)
1213                                 fmtprint(&fstr, " %s", s->name);
1214                 break;
1215         case Tsrv:
1216                 srv = rp->srv;
1217                 fmtprint(&fstr, "\t%ud %ud %ud %s",
1218                         (srv? srv->pri: 0), (srv? srv->weight: 0),
1219                         rp->port, dnname(rp->host));
1220                 break;
1221         case Tnull:
1222                 if (rp->null == nil)
1223                         fmtprint(&fstr, "\t<null>");
1224                 else
1225                         fmtprint(&fstr, "\t%.*H", rp->null->dlen,
1226                                 rp->null->data);
1227                 break;
1228         case Ttxt:
1229                 fmtprint(&fstr, "\t");
1230                 for(t = rp->txt; t != nil; t = t->next)
1231                         fmtprint(&fstr, "%s", t->p);
1232                 break;
1233         case Trp:
1234                 fmtprint(&fstr, "\t%s %s", dnname(rp->rmb), dnname(rp->rp));
1235                 break;
1236         case Tkey:
1237                 if (rp->key == nil)
1238                         fmtprint(&fstr, "\t<null> <null> <null>");
1239                 else
1240                         fmtprint(&fstr, "\t%d %d %d", rp->key->flags,
1241                                 rp->key->proto, rp->key->alg);
1242                 break;
1243         case Tsig:
1244                 if (rp->sig == nil)
1245                         fmtprint(&fstr,
1246                    "\t<null> <null> <null> <null> <null> <null> <null> <null>");
1247                 else
1248                         fmtprint(&fstr, "\t%d %d %d %lud %lud %lud %d %s",
1249                                 rp->sig->type, rp->sig->alg, rp->sig->labels,
1250                                 rp->sig->ttl, rp->sig->exp, rp->sig->incep,
1251                                 rp->sig->tag, dnname(rp->sig->signer));
1252                 break;
1253         case Tcert:
1254                 if (rp->cert == nil)
1255                         fmtprint(&fstr, "\t<null> <null> <null>");
1256                 else
1257                         fmtprint(&fstr, "\t%d %d %d",
1258                                 rp->cert->type, rp->cert->tag, rp->cert->alg);
1259                 break;
1260         }
1261 out:
1262         strp = fmtstrflush(&fstr);
1263         rv = fmtstrcpy(f, strp);
1264         free(strp);
1265         return rv;
1266 }
1267
1268 /*
1269  *  print conversion for rr records in attribute value form
1270  */
1271 int
1272 rravfmt(Fmt *f)
1273 {
1274         int rv, quote;
1275         char *strp;
1276         Fmt fstr;
1277         RR *rp;
1278         Server *s;
1279         SOA *soa;
1280         Srv *srv;
1281         Txt *t;
1282
1283         fmtstrinit(&fstr);
1284
1285         rp = va_arg(f->args, RR*);
1286         if(rp == nil){
1287                 fmtprint(&fstr, "<null>");
1288                 goto out;
1289         }
1290
1291         if(rp->type == Tptr)
1292                 fmtprint(&fstr, "ptr=%s", dnname(rp->owner));
1293         else
1294                 fmtprint(&fstr, "dom=%s", dnname(rp->owner));
1295
1296         switch(rp->type){
1297         case Thinfo:
1298                 fmtprint(&fstr, " cpu=%s os=%s",
1299                         dnname(rp->cpu), dnname(rp->os));
1300                 break;
1301         case Tcname:
1302                 fmtprint(&fstr, " cname=%s", dnname(rp->host));
1303                 break;
1304         case Tmb:
1305         case Tmd:
1306         case Tmf:
1307                 fmtprint(&fstr, " mbox=%s", dnname(rp->host));
1308                 break;
1309         case Tns:
1310                 fmtprint(&fstr,  " ns=%s", dnname(rp->host));
1311                 break;
1312         case Tmg:
1313         case Tmr:
1314                 fmtprint(&fstr, " mbox=%s", dnname(rp->mb));
1315                 break;
1316         case Tminfo:
1317                 fmtprint(&fstr, " mbox=%s mbox=%s",
1318                         dnname(rp->mb), dnname(rp->rmb));
1319                 break;
1320         case Tmx:
1321                 fmtprint(&fstr, " pref=%lud mx=%s", rp->pref, dnname(rp->host));
1322                 break;
1323         case Ta:
1324         case Taaaa:
1325                 fmtprint(&fstr, " ip=%s", dnname(rp->ip));
1326                 break;
1327         case Tptr:
1328                 fmtprint(&fstr, " dom=%s", dnname(rp->ptr));
1329                 break;
1330         case Tsoa:
1331                 soa = rp->soa;
1332                 fmtprint(&fstr,
1333 " ns=%s mbox=%s serial=%lud refresh=%lud retry=%lud expire=%lud ttl=%lud",
1334                         dnname(rp->host), dnname(rp->rmb),
1335                         (soa? soa->serial: 0),
1336                         (soa? soa->refresh: 0), (soa? soa->retry: 0),
1337                         (soa? soa->expire: 0), (soa? soa->minttl: 0));
1338                 for(s = soa->slaves; s != nil; s = s->next)
1339                         fmtprint(&fstr, " dnsslave=%s", s->name);
1340                 break;
1341         case Tsrv:
1342                 srv = rp->srv;
1343                 fmtprint(&fstr, " pri=%ud weight=%ud port=%ud target=%s",
1344                         (srv? srv->pri: 0), (srv? srv->weight: 0),
1345                         rp->port, dnname(rp->host));
1346                 break;
1347         case Tnull:
1348                 if (rp->null == nil)
1349                         fmtprint(&fstr, " null=<null>");
1350                 else
1351                         fmtprint(&fstr, " null=%.*H", rp->null->dlen,
1352                                 rp->null->data);
1353                 break;
1354         case Ttxt:
1355                 fmtprint(&fstr, " txt=");
1356                 quote = 0;
1357                 for(t = rp->txt; t != nil; t = t->next)
1358                         if(strchr(t->p, ' '))
1359                                 quote = 1;
1360                 if(quote)
1361                         fmtprint(&fstr, "\"");
1362                 for(t = rp->txt; t != nil; t = t->next)
1363                         fmtprint(&fstr, "%s", t->p);
1364                 if(quote)
1365                         fmtprint(&fstr, "\"");
1366                 break;
1367         case Trp:
1368                 fmtprint(&fstr, " rp=%s txt=%s",
1369                         dnname(rp->rmb), dnname(rp->rp));
1370                 break;
1371         case Tkey:
1372                 if (rp->key == nil)
1373                         fmtprint(&fstr, " flags=<null> proto=<null> alg=<null>");
1374                 else
1375                         fmtprint(&fstr, " flags=%d proto=%d alg=%d",
1376                                 rp->key->flags, rp->key->proto, rp->key->alg);
1377                 break;
1378         case Tsig:
1379                 if (rp->sig == nil)
1380                         fmtprint(&fstr,
1381 " type=<null> alg=<null> labels=<null> ttl=<null> exp=<null> incep=<null> tag=<null> signer=<null>");
1382                 else
1383                         fmtprint(&fstr,
1384 " type=%d alg=%d labels=%d ttl=%lud exp=%lud incep=%lud tag=%d signer=%s",
1385                                 rp->sig->type, rp->sig->alg, rp->sig->labels,
1386                                 rp->sig->ttl, rp->sig->exp, rp->sig->incep,
1387                                 rp->sig->tag, dnname(rp->sig->signer));
1388                 break;
1389         case Tcert:
1390                 if (rp->cert == nil)
1391                         fmtprint(&fstr, " type=<null> tag=<null> alg=<null>");
1392                 else
1393                         fmtprint(&fstr, " type=%d tag=%d alg=%d",
1394                                 rp->cert->type, rp->cert->tag, rp->cert->alg);
1395                 break;
1396         }
1397 out:
1398         strp = fmtstrflush(&fstr);
1399         rv = fmtstrcpy(f, strp);
1400         free(strp);
1401         return rv;
1402 }
1403
1404 void
1405 warning(char *fmt, ...)
1406 {
1407         char dnserr[256];
1408         va_list arg;
1409
1410         va_start(arg, fmt);
1411         vseprint(dnserr, dnserr+sizeof(dnserr), fmt, arg);
1412         va_end(arg);
1413         syslog(1, logfile, dnserr);             /* on console too */
1414 }
1415
1416 void
1417 dnslog(char *fmt, ...)
1418 {
1419         char dnserr[256];
1420         va_list arg;
1421
1422         va_start(arg, fmt);
1423         vseprint(dnserr, dnserr+sizeof(dnserr), fmt, arg);
1424         va_end(arg);
1425         syslog(0, logfile, dnserr);
1426 }
1427
1428 /*
1429  * based on libthread's threadsetname, but drags in less library code.
1430  * actually just sets the arguments displayed.
1431  */
1432 void
1433 procsetname(char *fmt, ...)
1434 {
1435         int fd;
1436         char *cmdname;
1437         char buf[128];
1438         va_list arg;
1439
1440         va_start(arg, fmt);
1441         cmdname = vsmprint(fmt, arg);
1442         va_end(arg);
1443         if (cmdname == nil)
1444                 return;
1445         snprint(buf, sizeof buf, "#p/%d/args", getpid());
1446         if((fd = open(buf, OWRITE)) >= 0){
1447                 write(fd, cmdname, strlen(cmdname)+1);
1448                 close(fd);
1449         }
1450         free(cmdname);
1451 }
1452
1453 /*
1454  *  create a slave process to handle a request to avoid one request blocking
1455  *  another
1456  */
1457 void
1458 slave(Request *req)
1459 {
1460         int ppid, procs;
1461
1462         if(req->isslave)
1463                 return;         /* we're already a slave process */
1464
1465         /*
1466          * These calls to putactivity cannot block.
1467          * After getactivity(), the current process is counted
1468          * twice in dnvars.active (one will pass to the child).
1469          * If putactivity tries to wait for dnvars.active == 0,
1470          * it will never happen.
1471          */
1472
1473         /* limit parallelism */
1474         procs = getactivity(req, 1);
1475         if(procs > stats.slavehiwat)
1476                 stats.slavehiwat = procs;
1477         if(procs > Maxactive){
1478                 if(traceactivity)
1479                         dnslog("[%d] too much activity", getpid());
1480                 putactivity(1);
1481                 return;
1482         }
1483
1484         /*
1485          * parent returns to main loop, child does the work.
1486          * don't change note group.
1487          */
1488         ppid = getpid();
1489         switch(rfork(RFPROC|RFMEM|RFNOWAIT)){
1490         case -1:
1491                 putactivity(1);
1492                 break;
1493         case 0:
1494                 procsetname("request slave of pid %d", ppid);
1495                 if(traceactivity)
1496                         dnslog("[%d] take activity from %d", getpid(), ppid);
1497                 req->isslave = 1;       /* why not `= getpid()'? */
1498                 break;
1499         default:
1500                 /*
1501                  * this relies on rfork producing separate, initially-identical
1502                  * stacks, thus giving us two copies of `req', one in each
1503                  * process.
1504                  */
1505                 alarm(0);
1506                 longjmp(req->mret, 1);
1507         }
1508 }
1509
1510 /*
1511  *  chasing down double free's
1512  */
1513 void
1514 dncheck(void)
1515 {
1516         int i;
1517         DN *dp;
1518         RR *rp;
1519
1520         if(!testing)
1521                 return;
1522
1523         lock(&dnlock);
1524         poolcheck(mainmem);
1525         for(i = 0; i < HTLEN; i++)
1526                 for(dp = ht[i]; dp; dp = dp->next){
1527                         assert(dp->magic == DNmagic);
1528                         for(rp = dp->rr; rp; rp = rp->next){
1529                                 assert(rp->magic == RRmagic);
1530                                 assert(rp->cached);
1531                                 assert(rp->owner == dp);
1532                                 /* also check for duplicate rrs */
1533                                 if (rronlist(rp, rp->next)) {
1534                                         dnslog("%R duplicates its next chain "
1535                                                 "(%R); aborting", rp, rp->next);
1536                                         abort();
1537                                 }
1538                         }
1539                 }
1540         unlock(&dnlock);
1541 }
1542
1543 static int
1544 rrequiv(RR *r1, RR *r2)
1545 {
1546         return r1->owner == r2->owner
1547                 && r1->type == r2->type
1548                 && r1->arg0 == r2->arg0
1549                 && r1->arg1 == r2->arg1;
1550 }
1551
1552 void
1553 unique(RR *rp)
1554 {
1555         RR **l, *nrp;
1556
1557         for(; rp; rp = rp->next){
1558                 l = &rp->next;
1559                 for(nrp = *l; nrp; nrp = *l)
1560                         if(rrequiv(rp, nrp)){
1561                                 *l = nrp->next;
1562                                 rrfree(nrp);
1563                         } else
1564                                 l = &nrp->next;
1565         }
1566 }
1567
1568 /*
1569  *  true if second domain is subsumed by the first
1570  */
1571 int
1572 subsume(char *higher, char *lower)
1573 {
1574         int hn, ln;
1575
1576         ln = strlen(lower);
1577         hn = strlen(higher);
1578         if (ln < hn || cistrcmp(lower + ln - hn, higher) != 0 ||
1579             ln > hn && hn != 0 && lower[ln - hn - 1] != '.')
1580                 return 0;
1581         return 1;
1582 }
1583
1584 /*
1585  *  randomize the order we return items to provide some
1586  *  load balancing for servers.
1587  *
1588  *  only randomize the first class of entries
1589  */
1590 RR*
1591 randomize(RR *rp)
1592 {
1593         RR *first, *last, *x, *base;
1594         ulong n;
1595
1596         if(rp == nil || rp->next == nil)
1597                 return rp;
1598
1599         /* just randomize addresses, mx's and ns's */
1600         for(x = rp; x; x = x->next)
1601                 if(x->type != Ta && x->type != Taaaa &&
1602                     x->type != Tmx && x->type != Tns)
1603                         return rp;
1604
1605         base = rp;
1606
1607         n = rand();
1608         last = first = nil;
1609         while(rp != nil){
1610                 /* stop randomizing if we've moved past our class */
1611                 if(base->auth != rp->auth || base->db != rp->db){
1612                         last->next = rp;
1613                         break;
1614                 }
1615
1616                 /* unchain */
1617                 x = rp;
1618                 rp = x->next;
1619                 x->next = nil;
1620
1621                 if(n&1){
1622                         /* add to tail */
1623                         if(last == nil)
1624                                 first = x;
1625                         else
1626                                 last->next = x;
1627                         last = x;
1628                 } else {
1629                         /* add to head */
1630                         if(last == nil)
1631                                 last = x;
1632                         x->next = first;
1633                         first = x;
1634                 }
1635
1636                 /* reroll the dice */
1637                 n >>= 1;
1638         }
1639
1640         return first;
1641 }
1642
1643 static int
1644 sencodefmt(Fmt *f)
1645 {
1646         int i, len, ilen, rv;
1647         char *out, *buf;
1648         uchar *b;
1649         char obuf[64];          /* rsc optimization */
1650
1651         if(!(f->flags&FmtPrec) || f->prec < 1)
1652                 goto error;
1653
1654         b = va_arg(f->args, uchar*);
1655         if(b == nil)
1656                 goto error;
1657
1658         /* if it's a printable, go for it */
1659         len = f->prec;
1660         for(i = 0; i < len; i++)
1661                 if(!isprint(b[i]))
1662                         break;
1663         if(i == len){
1664                 if(len >= sizeof obuf)
1665                         len = sizeof(obuf)-1;
1666                 memmove(obuf, b, len);
1667                 obuf[len] = 0;
1668                 fmtstrcpy(f, obuf);
1669                 return 0;
1670         }
1671
1672         ilen = f->prec;
1673         f->prec = 0;
1674         f->flags &= ~FmtPrec;
1675         switch(f->r){
1676         case '<':
1677                 len = (8*ilen+4)/5 + 3;
1678                 break;
1679         case '[':
1680                 len = (8*ilen+5)/6 + 4;
1681                 break;
1682         case 'H':
1683                 len = 2*ilen + 1;
1684                 break;
1685         default:
1686                 goto error;
1687         }
1688
1689         if(len > sizeof(obuf)){
1690                 buf = malloc(len);
1691                 if(buf == nil)
1692                         goto error;
1693         } else
1694                 buf = obuf;
1695
1696         /* convert */
1697         out = buf;
1698         switch(f->r){
1699         case '<':
1700                 rv = enc32(out, len, b, ilen);
1701                 break;
1702         case '[':
1703                 rv = enc64(out, len, b, ilen);
1704                 break;
1705         case 'H':
1706                 rv = enc16(out, len, b, ilen);
1707                 break;
1708         default:
1709                 rv = -1;
1710                 break;
1711         }
1712         if(rv < 0)
1713                 goto error;
1714
1715         fmtstrcpy(f, buf);
1716         if(buf != obuf)
1717                 free(buf);
1718         return 0;
1719
1720 error:
1721         return fmtstrcpy(f, "<encodefmt>");
1722 }
1723
1724 void*
1725 emalloc(int size)
1726 {
1727         char *x;
1728
1729         x = mallocz(size, 1);
1730         if(x == nil)
1731                 abort();
1732         setmalloctag(x, getcallerpc(&size));
1733         return x;
1734 }
1735
1736 char*
1737 estrdup(char *s)
1738 {
1739         int size;
1740         char *p;
1741
1742         size = strlen(s);
1743         p = mallocz(size+1, 0);
1744         if(p == nil)
1745                 abort();
1746         memmove(p, s, size);
1747         p[size] = 0;
1748         setmalloctag(p, getcallerpc(&s));
1749         return p;
1750 }
1751
1752 /*
1753  *  create a pointer record
1754  */
1755 static RR*
1756 mkptr(DN *dp, char *ptr, ulong ttl)
1757 {
1758         DN *ipdp;
1759         RR *rp;
1760
1761         ipdp = dnlookup(ptr, Cin, 1);
1762
1763         rp = rralloc(Tptr);
1764         rp->ptr = dp;
1765         rp->owner = ipdp;
1766         rp->db = 1;
1767         if(ttl)
1768                 rp->ttl = ttl;
1769         return rp;
1770 }
1771
1772 void    bytes2nibbles(uchar *nibbles, uchar *bytes, int nbytes);
1773
1774 /*
1775  *  look for all ip addresses in this network and make
1776  *  pointer records for them.
1777  */
1778 void
1779 dnptr(uchar *net, uchar *mask, char *dom, int forwtype, int subdoms, int ttl)
1780 {
1781         int i, j, len;
1782         char *p, *e;
1783         char ptr[Domlen];
1784         uchar *ipp;
1785         uchar ip[IPaddrlen], nnet[IPaddrlen];
1786         uchar nibip[IPaddrlen*2];
1787         DN *dp;
1788         RR *rp, *nrp, *first, **l;
1789
1790         l = &first;
1791         first = nil;
1792         for(i = 0; i < HTLEN; i++)
1793                 for(dp = ht[i]; dp; dp = dp->next)
1794                         for(rp = dp->rr; rp; rp = rp->next){
1795                                 if(rp->type != forwtype || rp->negative)
1796                                         continue;
1797                                 parseip(ip, rp->ip->name);
1798                                 maskip(ip, mask, nnet);
1799                                 if(ipcmp(net, nnet) != 0)
1800                                         continue;
1801
1802                                 ipp = ip;
1803                                 len = IPaddrlen;
1804                                 if (forwtype == Taaaa) {
1805                                         bytes2nibbles(nibip, ip, IPaddrlen);
1806                                         ipp = nibip;
1807                                         len = 2*IPaddrlen;
1808                                 }
1809
1810                                 p = ptr;
1811                                 e = ptr+sizeof(ptr);
1812                                 for(j = len - 1; j >= len - subdoms; j--)
1813                                         p = seprint(p, e, (forwtype == Ta?
1814                                                 "%d.": "%x."), ipp[j]);
1815                                 seprint(p, e, "%s", dom);
1816
1817                                 nrp = mkptr(dp, ptr, ttl);
1818                                 *l = nrp;
1819                                 l = &nrp->next;
1820                         }
1821
1822         for(rp = first; rp != nil; rp = nrp){
1823                 nrp = rp->next;
1824                 rp->next = nil;
1825                 dp = rp->owner;
1826                 rrattach(rp, Authoritative);
1827                 dnagenever(dp);
1828         }
1829 }
1830
1831 void
1832 addserver(Server **l, char *name)
1833 {
1834         Server *s;
1835         int n;
1836
1837         while(*l)
1838                 l = &(*l)->next;
1839         n = strlen(name);
1840         s = malloc(sizeof(Server)+n+1);
1841         if(s == nil)
1842                 return;
1843         s->name = (char*)(s+1);
1844         memmove(s->name, name, n);
1845         s->name[n] = 0;
1846         s->next = nil;
1847         *l = s;
1848 }
1849
1850 Server*
1851 copyserverlist(Server *s)
1852 {
1853         Server *ns;
1854
1855         for(ns = nil; s != nil; s = s->next)
1856                 addserver(&ns, s->name);
1857         return ns;
1858 }
1859
1860
1861 /* from here down is copied to ip/snoopy/dns.c periodically to update it */
1862
1863 /*
1864  *  convert an integer RR type to it's ascii name
1865  */
1866 char*
1867 rrname(int type, char *buf, int len)
1868 {
1869         char *t;
1870
1871         t = nil;
1872         if(type >= 0 && type <= Tall)
1873                 t = rrtname[type];
1874         if(t==nil){
1875                 snprint(buf, len, "%d", type);
1876                 t = buf;
1877         }
1878         return t;
1879 }
1880
1881 /*
1882  *  free a list of resource records and any related structs
1883  */
1884 void
1885 rrfreelist(RR *rp)
1886 {
1887         RR *next;
1888
1889         for(; rp; rp = next){
1890                 next = rp->next;
1891                 rrfree(rp);
1892         }
1893 }
1894
1895 void
1896 freeserverlist(Server *s)
1897 {
1898         Server *next;
1899
1900         for(; s != nil; s = next){
1901                 next = s->next;
1902                 memset(s, 0, sizeof *s);        /* cause trouble */
1903                 free(s);
1904         }
1905 }
1906
1907 /*
1908  *  allocate a resource record of a given type
1909  */
1910 RR*
1911 rralloc(int type)
1912 {
1913         RR *rp;
1914
1915         rp = emalloc(sizeof(*rp));
1916         rp->magic = RRmagic;
1917         rp->pc = getcallerpc(&type);
1918         rp->type = type;
1919         if (rp->type != type)
1920                 dnslog("rralloc: bogus type %d", type);
1921         setmalloctag(rp, rp->pc);
1922         switch(type){
1923         case Tsoa:
1924                 rp->soa = emalloc(sizeof(*rp->soa));
1925                 rp->soa->slaves = nil;
1926                 setmalloctag(rp->soa, rp->pc);
1927                 break;
1928         case Tsrv:
1929                 rp->srv = emalloc(sizeof(*rp->srv));
1930                 setmalloctag(rp->srv, rp->pc);
1931                 break;
1932         case Tkey:
1933                 rp->key = emalloc(sizeof(*rp->key));
1934                 setmalloctag(rp->key, rp->pc);
1935                 break;
1936         case Tcert:
1937                 rp->cert = emalloc(sizeof(*rp->cert));
1938                 setmalloctag(rp->cert, rp->pc);
1939                 break;
1940         case Tsig:
1941                 rp->sig = emalloc(sizeof(*rp->sig));
1942                 setmalloctag(rp->sig, rp->pc);
1943                 break;
1944         case Tnull:
1945                 rp->null = emalloc(sizeof(*rp->null));
1946                 setmalloctag(rp->null, rp->pc);
1947                 break;
1948         }
1949         rp->ttl = 0;
1950         rp->expire = 0;
1951         rp->next = 0;
1952         return rp;
1953 }
1954
1955 /*
1956  *  free a resource record and any related structs
1957  */
1958 void
1959 rrfree(RR *rp)
1960 {
1961         Txt *t;
1962
1963         assert(rp->magic == RRmagic && !rp->cached);
1964
1965         switch(rp->type){
1966         case Tsoa:
1967                 freeserverlist(rp->soa->slaves);
1968                 memset(rp->soa, 0, sizeof *rp->soa);    /* cause trouble */
1969                 free(rp->soa);
1970                 break;
1971         case Tsrv:
1972                 memset(rp->srv, 0, sizeof *rp->srv);    /* cause trouble */
1973                 free(rp->srv);
1974                 break;
1975         case Tkey:
1976                 free(rp->key->data);
1977                 memset(rp->key, 0, sizeof *rp->key);    /* cause trouble */
1978                 free(rp->key);
1979                 break;
1980         case Tcert:
1981                 free(rp->cert->data);
1982                 memset(rp->cert, 0, sizeof *rp->cert);  /* cause trouble */
1983                 free(rp->cert);
1984                 break;
1985         case Tsig:
1986                 free(rp->sig->data);
1987                 memset(rp->sig, 0, sizeof *rp->sig);    /* cause trouble */
1988                 free(rp->sig);
1989                 break;
1990         case Tnull:
1991                 free(rp->null->data);
1992                 memset(rp->null, 0, sizeof *rp->null);  /* cause trouble */
1993                 free(rp->null);
1994                 break;
1995         case Ttxt:
1996                 while(t = rp->txt){
1997                         rp->txt = t->next;
1998                         free(t->p);
1999                         memset(t, 0, sizeof *t);        /* cause trouble */
2000                         free(t);
2001                 }
2002                 break;
2003         }
2004
2005         memset(rp, 0, sizeof *rp);              /* cause trouble */
2006         rp->magic = ~RRmagic;
2007         free(rp);
2008 }