xref: /freebsd/contrib/ldns/resolver.c (revision b5fb1f44ed435fa25fe3de87c9b9ee6c0aad5125)
1 /*
2  * resolver.c
3  *
4  * resolver implementation
5  *
6  * a Net::DNS like library for C
7  *
8  * (c) NLnet Labs, 2004-2006
9  *
10  * See the file LICENSE for the license
11  */
12 
13 #include <ldns/config.h>
14 
15 #include <ldns/ldns.h>
16 #include <strings.h>
17 
18 /* Access function for reading
19  * and setting the different Resolver
20  * options */
21 
22 /* read */
23 uint16_t
24 ldns_resolver_port(const ldns_resolver *r)
25 {
26 	return r->_port;
27 }
28 
29 ldns_rdf *
30 ldns_resolver_source(const ldns_resolver *r)
31 {
32 	return r->_source;
33 }
34 
35 uint16_t
36 ldns_resolver_edns_udp_size(const ldns_resolver *r)
37 {
38 	        return r->_edns_udp_size;
39 }
40 
41 uint8_t
42 ldns_resolver_retry(const ldns_resolver *r)
43 {
44 	return r->_retry;
45 }
46 
47 uint8_t
48 ldns_resolver_retrans(const ldns_resolver *r)
49 {
50 	return r->_retrans;
51 }
52 
53 bool
54 ldns_resolver_fallback(const ldns_resolver *r)
55 {
56 	return r->_fallback;
57 }
58 
59 uint8_t
60 ldns_resolver_ip6(const ldns_resolver *r)
61 {
62 	return r->_ip6;
63 }
64 
65 bool
66 ldns_resolver_recursive(const ldns_resolver *r)
67 {
68 	return r->_recursive;
69 }
70 
71 bool
72 ldns_resolver_debug(const ldns_resolver *r)
73 {
74 	return r->_debug;
75 }
76 
77 bool
78 ldns_resolver_dnsrch(const ldns_resolver *r)
79 {
80 	return r->_dnsrch;
81 }
82 
83 bool
84 ldns_resolver_fail(const ldns_resolver *r)
85 {
86 	return r->_fail;
87 }
88 
89 bool
90 ldns_resolver_defnames(const ldns_resolver *r)
91 {
92 	return r->_defnames;
93 }
94 
95 ldns_rdf *
96 ldns_resolver_domain(const ldns_resolver *r)
97 {
98 	return r->_domain;
99 }
100 
101 ldns_rdf **
102 ldns_resolver_searchlist(const ldns_resolver *r)
103 {
104 	return r->_searchlist;
105 }
106 
107 ldns_rdf **
108 ldns_resolver_nameservers(const ldns_resolver *r)
109 {
110 	return r->_nameservers;
111 }
112 
113 size_t
114 ldns_resolver_nameserver_count(const ldns_resolver *r)
115 {
116 	return r->_nameserver_count;
117 }
118 
119 bool
120 ldns_resolver_dnssec(const ldns_resolver *r)
121 {
122 	return r->_dnssec;
123 }
124 
125 bool
126 ldns_resolver_dnssec_cd(const ldns_resolver *r)
127 {
128 	return r->_dnssec_cd;
129 }
130 
131 ldns_rr_list *
132 ldns_resolver_dnssec_anchors(const ldns_resolver *r)
133 {
134     return r->_dnssec_anchors;
135 }
136 
137 bool
138 ldns_resolver_trusted_key(const ldns_resolver *r, ldns_rr_list * keys, ldns_rr_list * trusted_keys)
139 {
140   size_t i;
141   bool result = false;
142 
143   ldns_rr_list * trust_anchors;
144   ldns_rr * cur_rr;
145 
146   if (!r || !keys) { return false; }
147 
148   trust_anchors = ldns_resolver_dnssec_anchors(r);
149 
150   if (!trust_anchors) { return false; }
151 
152   for (i = 0; i < ldns_rr_list_rr_count(keys); i++) {
153 
154     cur_rr = ldns_rr_list_rr(keys, i);
155     if (ldns_rr_list_contains_rr(trust_anchors, cur_rr)) {
156       if (trusted_keys) { ldns_rr_list_push_rr(trusted_keys, cur_rr); }
157       result = true;
158     }
159   }
160 
161   return result;
162 }
163 
164 bool
165 ldns_resolver_igntc(const ldns_resolver *r)
166 {
167 	return r->_igntc;
168 }
169 
170 bool
171 ldns_resolver_usevc(const ldns_resolver *r)
172 {
173 	return r->_usevc;
174 }
175 
176 size_t *
177 ldns_resolver_rtt(const ldns_resolver *r)
178 {
179 	return r->_rtt;
180 }
181 
182 size_t
183 ldns_resolver_nameserver_rtt(const ldns_resolver *r, size_t pos)
184 {
185 	size_t *rtt;
186 
187 	assert(r != NULL);
188 
189 	rtt = ldns_resolver_rtt(r);
190 
191 	if (pos >= ldns_resolver_nameserver_count(r)) {
192 		/* error ?*/
193 		return 0;
194 	} else {
195 		return rtt[pos];
196 	}
197 
198 }
199 
200 struct timeval
201 ldns_resolver_timeout(const ldns_resolver *r)
202 {
203 	return r->_timeout;
204 }
205 
206 const char *
207 ldns_resolver_tsig_keyname(const ldns_resolver *r)
208 {
209 	return r->_tsig_keyname;
210 }
211 
212 const char *
213 ldns_resolver_tsig_algorithm(const ldns_resolver *r)
214 {
215 	return r->_tsig_algorithm;
216 }
217 
218 const char *
219 ldns_resolver_tsig_keydata(const ldns_resolver *r)
220 {
221 	return r->_tsig_keydata;
222 }
223 
224 bool
225 ldns_resolver_random(const ldns_resolver *r)
226 {
227 	return r->_random;
228 }
229 
230 size_t
231 ldns_resolver_searchlist_count(const ldns_resolver *r)
232 {
233 	return r->_searchlist_count;
234 }
235 
236 /* write */
237 void
238 ldns_resolver_set_port(ldns_resolver *r, uint16_t p)
239 {
240 	r->_port = p;
241 }
242 
243 void
244 ldns_resolver_set_source(ldns_resolver *r, ldns_rdf *s)
245 {
246 	r->_source = s;
247 }
248 
249 ldns_rdf *
250 ldns_resolver_pop_nameserver(ldns_resolver *r)
251 {
252 	ldns_rdf **nameservers;
253 	ldns_rdf *pop;
254 	size_t ns_count;
255 	size_t *rtt;
256 
257 	assert(r != NULL);
258 
259 	ns_count = ldns_resolver_nameserver_count(r);
260 	nameservers = ldns_resolver_nameservers(r);
261 	rtt = ldns_resolver_rtt(r);
262 	if (ns_count == 0 || !nameservers) {
263 		return NULL;
264 	}
265 
266 	pop = nameservers[ns_count - 1];
267 
268 	if (ns_count == 1) {
269 		LDNS_FREE(nameservers);
270 		LDNS_FREE(rtt);
271 
272 		ldns_resolver_set_nameservers(r, NULL);
273 		ldns_resolver_set_rtt(r, NULL);
274 	} else {
275 		nameservers = LDNS_XREALLOC(nameservers, ldns_rdf *,
276 				(ns_count - 1));
277 		rtt = LDNS_XREALLOC(rtt, size_t, (ns_count - 1));
278 
279 	        ldns_resolver_set_nameservers(r, nameservers);
280 	        ldns_resolver_set_rtt(r, rtt);
281 	}
282 	/* decr the count */
283 	ldns_resolver_dec_nameserver_count(r);
284 	return pop;
285 }
286 
287 ldns_status
288 ldns_resolver_push_nameserver(ldns_resolver *r, const ldns_rdf *n)
289 {
290 	ldns_rdf **nameservers;
291 	size_t ns_count;
292 	size_t *rtt;
293 
294 	if (ldns_rdf_get_type(n) != LDNS_RDF_TYPE_A &&
295 			ldns_rdf_get_type(n) != LDNS_RDF_TYPE_AAAA) {
296 		return LDNS_STATUS_ERR;
297 	}
298 
299 	ns_count = ldns_resolver_nameserver_count(r);
300 	nameservers = ldns_resolver_nameservers(r);
301 	rtt = ldns_resolver_rtt(r);
302 
303 	/* make room for the next one */
304 	if (ns_count == 0) {
305 		nameservers = LDNS_XMALLOC(ldns_rdf *, 1);
306 	} else {
307 		nameservers = LDNS_XREALLOC(nameservers, ldns_rdf *, (ns_count + 1));
308 	}
309         if(!nameservers)
310                 return LDNS_STATUS_MEM_ERR;
311 
312 	/* set the new value in the resolver */
313 	ldns_resolver_set_nameservers(r, nameservers);
314 
315 	/* don't forget the rtt */
316 	if (ns_count == 0) {
317 		rtt = LDNS_XMALLOC(size_t, 1);
318 	} else {
319 		rtt = LDNS_XREALLOC(rtt, size_t, (ns_count + 1));
320 	}
321         if(!rtt)
322                 return LDNS_STATUS_MEM_ERR;
323 
324 	/* slide n in its slot. */
325 	/* we clone it here, because then we can free the original
326 	 * rr's where it stood */
327 	nameservers[ns_count] = ldns_rdf_clone(n);
328 	rtt[ns_count] = LDNS_RESOLV_RTT_MIN;
329 	ldns_resolver_incr_nameserver_count(r);
330 	ldns_resolver_set_rtt(r, rtt);
331 	return LDNS_STATUS_OK;
332 }
333 
334 ldns_status
335 ldns_resolver_push_nameserver_rr(ldns_resolver *r, const ldns_rr *rr)
336 {
337 	ldns_rdf *address;
338 	if ((!rr) || (ldns_rr_get_type(rr) != LDNS_RR_TYPE_A &&
339 			ldns_rr_get_type(rr) != LDNS_RR_TYPE_AAAA)) {
340 		return LDNS_STATUS_ERR;
341 	}
342 	address = ldns_rr_rdf(rr, 0); /* extract the ip number */
343 	if (address) {
344 		return ldns_resolver_push_nameserver(r, address);
345 	} else {
346 		return LDNS_STATUS_ERR;
347 	}
348 }
349 
350 ldns_status
351 ldns_resolver_push_nameserver_rr_list(ldns_resolver *r, const ldns_rr_list *rrlist)
352 {
353 	ldns_rr *rr;
354 	ldns_status stat;
355 	size_t i;
356 
357 	stat = LDNS_STATUS_OK;
358 	if (rrlist) {
359 		for(i = 0; i < ldns_rr_list_rr_count(rrlist); i++) {
360 			rr = ldns_rr_list_rr(rrlist, i);
361 			if (ldns_resolver_push_nameserver_rr(r, rr) != LDNS_STATUS_OK) {
362 				stat = LDNS_STATUS_ERR;
363 				break;
364 			}
365 		}
366 		return stat;
367 	} else {
368 		return LDNS_STATUS_ERR;
369 	}
370 }
371 
372 void
373 ldns_resolver_set_edns_udp_size(ldns_resolver *r, uint16_t s)
374 {
375 	        r->_edns_udp_size = s;
376 }
377 
378 void
379 ldns_resolver_set_recursive(ldns_resolver *r, bool re)
380 {
381 	r->_recursive = re;
382 }
383 
384 void
385 ldns_resolver_set_dnssec(ldns_resolver *r, bool d)
386 {
387 	r->_dnssec = d;
388 }
389 
390 void
391 ldns_resolver_set_dnssec_cd(ldns_resolver *r, bool d)
392 {
393 	r->_dnssec_cd = d;
394 }
395 
396 void
397 ldns_resolver_set_dnssec_anchors(ldns_resolver *r, ldns_rr_list * l)
398 {
399   r->_dnssec_anchors = l;
400 }
401 
402 ldns_status
403 ldns_resolver_push_dnssec_anchor(ldns_resolver *r, ldns_rr *rr)
404 {
405   ldns_rr_list * trust_anchors;
406 
407   if ((!rr) || (ldns_rr_get_type(rr) != LDNS_RR_TYPE_DNSKEY &&
408                 ldns_rr_get_type(rr) != LDNS_RR_TYPE_DS)) {
409 
410     return LDNS_STATUS_ERR;
411   }
412 
413   if (!(trust_anchors = ldns_resolver_dnssec_anchors(r))) { /* Initialize */
414     trust_anchors = ldns_rr_list_new();
415     ldns_resolver_set_dnssec_anchors(r, trust_anchors);
416   }
417 
418   return (ldns_rr_list_push_rr(trust_anchors, ldns_rr_clone(rr))) ? LDNS_STATUS_OK : LDNS_STATUS_ERR;
419 }
420 
421 void
422 ldns_resolver_set_igntc(ldns_resolver *r, bool i)
423 {
424 	r->_igntc = i;
425 }
426 
427 void
428 ldns_resolver_set_usevc(ldns_resolver *r, bool vc)
429 {
430 	r->_usevc = vc;
431 }
432 
433 void
434 ldns_resolver_set_debug(ldns_resolver *r, bool d)
435 {
436 	r->_debug = d;
437 }
438 
439 void
440 ldns_resolver_set_ip6(ldns_resolver *r, uint8_t ip6)
441 {
442 	r->_ip6 = ip6;
443 }
444 
445 void
446 ldns_resolver_set_fail(ldns_resolver *r, bool f)
447 {
448 	r->_fail =f;
449 }
450 
451 static void
452 ldns_resolver_set_searchlist_count(ldns_resolver *r, size_t c)
453 {
454 	r->_searchlist_count = c;
455 }
456 
457 void
458 ldns_resolver_set_nameserver_count(ldns_resolver *r, size_t c)
459 {
460 	r->_nameserver_count = c;
461 }
462 
463 void
464 ldns_resolver_set_dnsrch(ldns_resolver *r, bool d)
465 {
466 	r->_dnsrch = d;
467 }
468 
469 void
470 ldns_resolver_set_retry(ldns_resolver *r, uint8_t retry)
471 {
472 	r->_retry = retry;
473 }
474 
475 void
476 ldns_resolver_set_retrans(ldns_resolver *r, uint8_t retrans)
477 {
478 	r->_retrans = retrans;
479 }
480 
481 void
482 ldns_resolver_set_fallback(ldns_resolver *r, bool fallback)
483 {
484 	r->_fallback = fallback;
485 }
486 
487 void
488 ldns_resolver_set_nameservers(ldns_resolver *r, ldns_rdf **n)
489 {
490 	r->_nameservers = n;
491 }
492 
493 void
494 ldns_resolver_set_defnames(ldns_resolver *r, bool d)
495 {
496 	r->_defnames = d;
497 }
498 
499 void
500 ldns_resolver_set_rtt(ldns_resolver *r, size_t *rtt)
501 {
502 	r->_rtt = rtt;
503 }
504 
505 void
506 ldns_resolver_set_nameserver_rtt(ldns_resolver *r, size_t pos, size_t value)
507 {
508 	size_t *rtt;
509 
510 	assert(r != NULL);
511 
512 	rtt = ldns_resolver_rtt(r);
513 
514 	if (pos >= ldns_resolver_nameserver_count(r)) {
515 		/* error ?*/
516 	} else {
517 		rtt[pos] = value;
518 	}
519 
520 }
521 
522 void
523 ldns_resolver_incr_nameserver_count(ldns_resolver *r)
524 {
525 	size_t c;
526 
527 	c = ldns_resolver_nameserver_count(r);
528 	ldns_resolver_set_nameserver_count(r, ++c);
529 }
530 
531 void
532 ldns_resolver_dec_nameserver_count(ldns_resolver *r)
533 {
534 	size_t c;
535 
536 	c = ldns_resolver_nameserver_count(r);
537 	if (c == 0) {
538 		return;
539 	} else {
540 		ldns_resolver_set_nameserver_count(r, --c);
541 	}
542 }
543 
544 void
545 ldns_resolver_set_domain(ldns_resolver *r, ldns_rdf *d)
546 {
547 	r->_domain = d;
548 }
549 
550 void
551 ldns_resolver_set_timeout(ldns_resolver *r, struct timeval timeout)
552 {
553 	r->_timeout.tv_sec = timeout.tv_sec;
554 	r->_timeout.tv_usec = timeout.tv_usec;
555 }
556 
557 void
558 ldns_resolver_push_searchlist(ldns_resolver *r, ldns_rdf *d)
559 {
560 	ldns_rdf **searchlist;
561 	size_t list_count;
562 
563 	if (ldns_rdf_get_type(d) != LDNS_RDF_TYPE_DNAME) {
564 		return;
565 	}
566 
567 	list_count = ldns_resolver_searchlist_count(r);
568 	searchlist = ldns_resolver_searchlist(r);
569 
570 	searchlist = LDNS_XREALLOC(searchlist, ldns_rdf *, (list_count + 1));
571 	if (searchlist) {
572 		r->_searchlist = searchlist;
573 
574 		searchlist[list_count] = ldns_rdf_clone(d);
575 		ldns_resolver_set_searchlist_count(r, list_count + 1);
576 	} /* no way to report mem err */
577 }
578 
579 void
580 ldns_resolver_set_tsig_keyname(ldns_resolver *r, const char *tsig_keyname)
581 {
582 	LDNS_FREE(r->_tsig_keyname);
583 	r->_tsig_keyname = strdup(tsig_keyname);
584 }
585 
586 void
587 ldns_resolver_set_tsig_algorithm(ldns_resolver *r, const char *tsig_algorithm)
588 {
589 	LDNS_FREE(r->_tsig_algorithm);
590 	r->_tsig_algorithm = strdup(tsig_algorithm);
591 }
592 
593 void
594 ldns_resolver_set_tsig_keydata(ldns_resolver *r, const char *tsig_keydata)
595 {
596 	LDNS_FREE(r->_tsig_keydata);
597 	r->_tsig_keydata = strdup(tsig_keydata);
598 }
599 
600 void
601 ldns_resolver_set_random(ldns_resolver *r, bool b)
602 {
603 	r->_random = b;
604 }
605 
606 /* more sophisticated functions */
607 ldns_resolver *
608 ldns_resolver_new(void)
609 {
610 	ldns_resolver *r;
611 
612 	r = LDNS_MALLOC(ldns_resolver);
613 	if (!r) {
614 		return NULL;
615 	}
616 
617 	r->_searchlist = NULL;
618 	r->_nameservers = NULL;
619 	r->_rtt = NULL;
620 
621 	/* defaults are filled out */
622 	ldns_resolver_set_searchlist_count(r, 0);
623 	ldns_resolver_set_nameserver_count(r, 0);
624 	ldns_resolver_set_usevc(r, 0);
625 	ldns_resolver_set_port(r, LDNS_PORT);
626 	ldns_resolver_set_domain(r, NULL);
627 	ldns_resolver_set_defnames(r, false);
628 	ldns_resolver_set_retry(r, 3);
629 	ldns_resolver_set_retrans(r, 2);
630 	ldns_resolver_set_fallback(r, true);
631 	ldns_resolver_set_fail(r, false);
632 	ldns_resolver_set_edns_udp_size(r, 0);
633 	ldns_resolver_set_dnssec(r, false);
634 	ldns_resolver_set_dnssec_cd(r, false);
635 	ldns_resolver_set_dnssec_anchors(r, NULL);
636 	ldns_resolver_set_ip6(r, LDNS_RESOLV_INETANY);
637 	ldns_resolver_set_igntc(r, false);
638 	ldns_resolver_set_recursive(r, false);
639 	ldns_resolver_set_dnsrch(r, true);
640 	ldns_resolver_set_source(r, NULL);
641 	ldns_resolver_set_ixfr_serial(r, 0);
642 
643 	/* randomize the nameserver to be queried
644 	 * when there are multiple
645 	 */
646 	ldns_resolver_set_random(r, true);
647 
648 	ldns_resolver_set_debug(r, 0);
649 
650 	r->_timeout.tv_sec = LDNS_DEFAULT_TIMEOUT_SEC;
651 	r->_timeout.tv_usec = LDNS_DEFAULT_TIMEOUT_USEC;
652 
653 	r->_socket = -1;
654 	r->_axfr_soa_count = 0;
655 	r->_axfr_i = 0;
656 	r->_cur_axfr_pkt = NULL;
657 
658 	r->_tsig_keyname = NULL;
659 	r->_tsig_keydata = NULL;
660 	r->_tsig_algorithm = NULL;
661 	return r;
662 }
663 
664 ldns_resolver *
665 ldns_resolver_clone(ldns_resolver *src)
666 {
667 	ldns_resolver *dst;
668 	size_t i;
669 
670 	assert(src != NULL);
671 
672 	if (!(dst = LDNS_MALLOC(ldns_resolver))) return NULL;
673 	(void) memcpy(dst, src, sizeof(ldns_resolver));
674 
675 	if (dst->_searchlist_count == 0)
676 		dst->_searchlist = NULL;
677 	else {
678 		if (!(dst->_searchlist =
679 		    LDNS_XMALLOC(ldns_rdf *, dst->_searchlist_count)))
680 			goto error;
681 		for (i = 0; i < dst->_searchlist_count; i++)
682 			if (!(dst->_searchlist[i] =
683 			    ldns_rdf_clone(src->_searchlist[i]))) {
684 				dst->_searchlist_count = i;
685 				goto error_searchlist;
686 			}
687 	}
688 	if (dst->_nameserver_count == 0) {
689 		dst->_nameservers = NULL;
690 		dst->_rtt = NULL;
691 	} else {
692 		if (!(dst->_nameservers =
693 		    LDNS_XMALLOC(ldns_rdf *, dst->_nameserver_count)))
694 			goto error_searchlist;
695 		for (i = 0; i < dst->_nameserver_count; i++)
696 			if (!(dst->_nameservers[i] =
697 			    ldns_rdf_clone(src->_nameservers[i]))) {
698 				dst->_nameserver_count = i;
699 				goto error_nameservers;
700 			}
701 		if (!(dst->_rtt =
702 		    LDNS_XMALLOC(size_t, dst->_nameserver_count)))
703 			goto error_nameservers;
704 		(void) memcpy(dst->_rtt, src->_rtt,
705 		    sizeof(size_t) * dst->_nameserver_count);
706 	}
707 	if (dst->_domain && (!(dst->_domain = ldns_rdf_clone(src->_domain))))
708 		goto error_rtt;
709 
710 	if (dst->_tsig_keyname &&
711 	    (!(dst->_tsig_keyname = strdup(src->_tsig_keyname))))
712 		goto error_domain;
713 
714 	if (dst->_tsig_keydata &&
715 	    (!(dst->_tsig_keydata = strdup(src->_tsig_keydata))))
716 		goto error_tsig_keyname;
717 
718 	if (dst->_tsig_algorithm &&
719 	    (!(dst->_tsig_algorithm = strdup(src->_tsig_algorithm))))
720 		goto error_tsig_keydata;
721 
722 	if (dst->_cur_axfr_pkt &&
723 	    (!(dst->_cur_axfr_pkt = ldns_pkt_clone(src->_cur_axfr_pkt))))
724 		goto error_tsig_algorithm;
725 
726 	if (dst->_dnssec_anchors &&
727 	    (!(dst->_dnssec_anchors=ldns_rr_list_clone(src->_dnssec_anchors))))
728 		goto error_cur_axfr_pkt;
729 
730 	return dst;
731 
732 error_cur_axfr_pkt:
733 	ldns_pkt_free(dst->_cur_axfr_pkt);
734 error_tsig_algorithm:
735 	LDNS_FREE(dst->_tsig_algorithm);
736 error_tsig_keydata:
737 	LDNS_FREE(dst->_tsig_keydata);
738 error_tsig_keyname:
739 	LDNS_FREE(dst->_tsig_keyname);
740 error_domain:
741 	ldns_rdf_deep_free(dst->_domain);
742 error_rtt:
743 	LDNS_FREE(dst->_rtt);
744 error_nameservers:
745 	for (i = 0; i < dst->_nameserver_count; i++)
746 		ldns_rdf_deep_free(dst->_nameservers[i]);
747 	LDNS_FREE(dst->_nameservers);
748 error_searchlist:
749 	for (i = 0; i < dst->_searchlist_count; i++)
750 		ldns_rdf_deep_free(dst->_searchlist[i]);
751 	LDNS_FREE(dst->_searchlist);
752 error:
753 	LDNS_FREE(dst);
754 	return NULL;
755 }
756 
757 
758 ldns_status
759 ldns_resolver_new_frm_fp(ldns_resolver **res, FILE *fp)
760 {
761 	return ldns_resolver_new_frm_fp_l(res, fp, NULL);
762 }
763 
764 ssize_t ldns_fget_token_l_resolv_conf(FILE *f, char *token, const char *delim,
765 		size_t limit, int *line_nr);
766 ldns_status
767 ldns_resolver_new_frm_fp_l(ldns_resolver **res, FILE *fp, int *line_nr)
768 {
769 	ldns_resolver *r = NULL;
770 	const char *keyword[LDNS_RESOLV_KEYWORDS];
771 	char word[LDNS_MAX_LINELEN + 1];
772 	int8_t expect;
773 	uint8_t i;
774 	ldns_rdf *tmp;
775 #ifdef HAVE_SSL
776 	ldns_rr *tmp_rr;
777 #endif
778 	ssize_t gtr, bgtr;
779 	ldns_buffer *b;
780         int lnr = 0;
781 	FILE* myfp = fp;
782         if(!line_nr) line_nr = &lnr;
783 
784 	if(!fp) {
785 		myfp = fopen(LDNS_RESOLV_CONF, "r");
786 		if(!myfp)
787 			return LDNS_STATUS_FILE_ERR;
788 	}
789 
790 	/* do this better
791 	 * expect =
792 	 * 0: keyword
793 	 * 1: default domain dname
794 	 * 2: NS aaaa or a record
795 	 */
796 
797 	/* recognized keywords */
798 	keyword[LDNS_RESOLV_NAMESERVER] = "nameserver";
799 	keyword[LDNS_RESOLV_DEFDOMAIN] = "domain";
800 	keyword[LDNS_RESOLV_SEARCH] = "search";
801 	/* these two are read but not used atm TODO */
802 	keyword[LDNS_RESOLV_SORTLIST] = "sortlist";
803 	keyword[LDNS_RESOLV_OPTIONS] = "options";
804 	keyword[LDNS_RESOLV_ANCHOR] = "anchor";
805 
806 	r = ldns_resolver_new();
807 	if (!r) {
808 		if(!fp) fclose(myfp);
809 		return LDNS_STATUS_MEM_ERR;
810 	}
811 
812 	gtr = 1;
813 	word[0] = 0;
814         expect = LDNS_RESOLV_KEYWORD;
815 	while (gtr > 0) {
816 		switch(expect) {
817 			case LDNS_RESOLV_KEYWORD:
818 				/* keyword */
819 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_NORMAL, 0, line_nr);
820 				if (gtr != 0) {
821 					for(i = 0; i < LDNS_RESOLV_KEYWORDS; i++) {
822 						if (strcasecmp(keyword[i], word) == 0) {
823 							/* chosen the keyword and
824 							 * expect values carefully
825 							 */
826 							expect = i;
827 							break;
828 						}
829 					}
830 					/* no keyword recognized */
831 					if (expect == LDNS_RESOLV_KEYWORD) {
832 						/* skip line */
833 						/*
834 						ldns_resolver_deep_free(r);
835 						if(!fp) fclose(myfp);
836 						return LDNS_STATUS_SYNTAX_KEYWORD_ERR;
837 						*/
838 					}
839 				}
840 				break;
841 			case LDNS_RESOLV_DEFDOMAIN:
842 				/* default domain dname */
843 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_NORMAL, 0, line_nr);
844 				if (gtr == 0) {
845 					if(!fp) fclose(myfp);
846 					ldns_resolver_deep_free(r);
847 					return LDNS_STATUS_SYNTAX_MISSING_VALUE_ERR;
848 				}
849 				tmp = ldns_rdf_new_frm_str(LDNS_RDF_TYPE_DNAME, word);
850 				if (!tmp) {
851 					if(!fp) fclose(myfp);
852 					ldns_resolver_deep_free(r);
853 					return LDNS_STATUS_SYNTAX_DNAME_ERR;
854 				}
855 
856 				/* DOn't free, because we copy the pointer */
857 				ldns_resolver_set_domain(r, tmp);
858 				expect = LDNS_RESOLV_KEYWORD;
859 				break;
860 			case LDNS_RESOLV_NAMESERVER:
861 				/* NS aaaa or a record */
862 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_NORMAL, 0, line_nr);
863 				if (gtr == 0) {
864 					if(!fp) fclose(myfp);
865 					ldns_resolver_deep_free(r);
866 					return LDNS_STATUS_SYNTAX_MISSING_VALUE_ERR;
867 				}
868                                 if(strchr(word, '%')) {
869                                         /* snip off interface labels,
870                                          * fe80::222:19ff:fe31:4222%eth0 */
871                                         strchr(word, '%')[0]=0;
872                                 }
873 				tmp = ldns_rdf_new_frm_str(LDNS_RDF_TYPE_AAAA, word);
874 				if (!tmp) {
875 					/* try ip4 */
876 					tmp = ldns_rdf_new_frm_str(LDNS_RDF_TYPE_A, word);
877 				}
878 				/* could not parse it, exit */
879 				if (!tmp) {
880 					ldns_resolver_deep_free(r);
881 					if(!fp) fclose(myfp);
882 					return LDNS_STATUS_SYNTAX_ERR;
883 				}
884 				(void)ldns_resolver_push_nameserver(r, tmp);
885 				ldns_rdf_deep_free(tmp);
886 				expect = LDNS_RESOLV_KEYWORD;
887 				break;
888 			case LDNS_RESOLV_SEARCH:
889 				/* search list domain dname */
890 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_SKIP_SPACE, 0, line_nr);
891 				b = LDNS_MALLOC(ldns_buffer);
892 				if(!b) {
893 					ldns_resolver_deep_free(r);
894 					if(!fp) fclose(myfp);
895 					return LDNS_STATUS_MEM_ERR;
896 				}
897 
898 				ldns_buffer_new_frm_data(b, word, (size_t) gtr);
899 				if(ldns_buffer_status(b) != LDNS_STATUS_OK) {
900 					LDNS_FREE(b);
901 					ldns_resolver_deep_free(r);
902 					if(!fp) fclose(myfp);
903 					return LDNS_STATUS_MEM_ERR;
904 				}
905 				bgtr = ldns_bget_token(b, word, LDNS_PARSE_NORMAL, (size_t) gtr + 1);
906 				while (bgtr > 0) {
907 					gtr -= bgtr;
908 					tmp = ldns_rdf_new_frm_str(LDNS_RDF_TYPE_DNAME, word);
909 					if (!tmp) {
910 						ldns_resolver_deep_free(r);
911 						ldns_buffer_free(b);
912 						if(!fp) fclose(myfp);
913 						return LDNS_STATUS_SYNTAX_DNAME_ERR;
914 					}
915 
916 					ldns_resolver_push_searchlist(r, tmp);
917 
918 					ldns_rdf_deep_free(tmp);
919 					bgtr = ldns_bget_token(b, word, LDNS_PARSE_NORMAL,
920 					    (size_t) gtr + 1);
921 				}
922 				ldns_buffer_free(b);
923 				if (expect != LDNS_RESOLV_KEYWORD) {
924 					gtr = 1;
925 					expect = LDNS_RESOLV_KEYWORD;
926 				}
927 				break;
928 			case LDNS_RESOLV_SORTLIST:
929 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_SKIP_SPACE, 0, line_nr);
930 				/* sortlist not implemented atm */
931 				expect = LDNS_RESOLV_KEYWORD;
932 				break;
933 			case LDNS_RESOLV_OPTIONS:
934 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_SKIP_SPACE, 0, line_nr);
935 				/* options not implemented atm */
936 				expect = LDNS_RESOLV_KEYWORD;
937 				break;
938 			case LDNS_RESOLV_ANCHOR:
939 				/* a file containing a DNSSEC trust anchor */
940 				gtr = ldns_fget_token_l_resolv_conf(myfp, word, LDNS_PARSE_NORMAL, 0, line_nr);
941 				if (gtr == 0) {
942 					ldns_resolver_deep_free(r);
943 					if(!fp) fclose(myfp);
944 					return LDNS_STATUS_SYNTAX_MISSING_VALUE_ERR;
945 				}
946 #ifdef HAVE_SSL
947 				tmp_rr = ldns_read_anchor_file(word);
948 				(void) ldns_resolver_push_dnssec_anchor(r, tmp_rr);
949 				ldns_rr_free(tmp_rr);
950 #endif
951 				expect = LDNS_RESOLV_KEYWORD;
952 				break;
953 		}
954 	}
955 
956 	if(!fp)
957 		fclose(myfp);
958 
959 	if (res) {
960 		*res = r;
961 		return LDNS_STATUS_OK;
962 	} else {
963 		ldns_resolver_deep_free(r);
964 		return LDNS_STATUS_NULL;
965 	}
966 }
967 
968 ldns_status
969 ldns_resolver_new_frm_file(ldns_resolver **res, const char *filename)
970 {
971 	ldns_resolver *r;
972 	FILE *fp;
973 	ldns_status s;
974 
975 	if (!filename) {
976 		fp = fopen(LDNS_RESOLV_CONF, "r");
977 
978 	} else {
979 		fp = fopen(filename, "r");
980 	}
981 	if (!fp) {
982 		return LDNS_STATUS_FILE_ERR;
983 	}
984 
985 	s = ldns_resolver_new_frm_fp(&r, fp);
986 	fclose(fp);
987 	if (s == LDNS_STATUS_OK) {
988 		if (res) {
989 			*res = r;
990 			return LDNS_STATUS_OK;
991 		} else  {
992 			ldns_resolver_free(r);
993 			return LDNS_STATUS_NULL;
994 		}
995 	}
996 	return s;
997 }
998 
999 void
1000 ldns_resolver_free(ldns_resolver *res)
1001 {
1002 	LDNS_FREE(res);
1003 }
1004 
1005 void
1006 ldns_resolver_deep_free(ldns_resolver *res)
1007 {
1008 	size_t i;
1009 
1010 	if (res) {
1011 		close_socket(res->_socket);
1012 
1013 		if (res->_searchlist) {
1014 			for (i = 0; i < ldns_resolver_searchlist_count(res); i++) {
1015 				ldns_rdf_deep_free(res->_searchlist[i]);
1016 			}
1017 			LDNS_FREE(res->_searchlist);
1018 		}
1019 		if (res->_nameservers) {
1020 			for (i = 0; i < res->_nameserver_count; i++) {
1021 				ldns_rdf_deep_free(res->_nameservers[i]);
1022 			}
1023 			LDNS_FREE(res->_nameservers);
1024 		}
1025 		if (ldns_resolver_domain(res)) {
1026 			ldns_rdf_deep_free(ldns_resolver_domain(res));
1027 		}
1028 		if (res->_tsig_keyname) {
1029 			LDNS_FREE(res->_tsig_keyname);
1030 		}
1031 		if (res->_tsig_keydata) {
1032 			LDNS_FREE(res->_tsig_keydata);
1033 		}
1034 		if (res->_tsig_algorithm) {
1035 			LDNS_FREE(res->_tsig_algorithm);
1036 		}
1037 
1038 		if (res->_cur_axfr_pkt) {
1039 			ldns_pkt_free(res->_cur_axfr_pkt);
1040 		}
1041 
1042 		if (res->_rtt) {
1043 			LDNS_FREE(res->_rtt);
1044 		}
1045 		if (res->_dnssec_anchors) {
1046 			ldns_rr_list_deep_free(res->_dnssec_anchors);
1047 		}
1048 		LDNS_FREE(res);
1049 	}
1050 }
1051 
1052 ldns_status
1053 ldns_resolver_search_status(ldns_pkt** pkt,
1054 		ldns_resolver *r, const  ldns_rdf *name,
1055 		ldns_rr_type t, ldns_rr_class c, uint16_t flags)
1056 {
1057 	ldns_rdf *new_name;
1058 	ldns_rdf **search_list;
1059 	size_t i;
1060 	ldns_status s = LDNS_STATUS_OK;
1061 	ldns_rdf root_dname = { 1, LDNS_RDF_TYPE_DNAME, (void *)"" };
1062 
1063 	if (ldns_dname_absolute(name)) {
1064 		/* query as-is */
1065 		return ldns_resolver_query_status(pkt, r, name, t, c, flags);
1066 	} else if (ldns_resolver_dnsrch(r)) {
1067 		search_list = ldns_resolver_searchlist(r);
1068 		for (i = 0; i <= ldns_resolver_searchlist_count(r); i++) {
1069 			if (i == ldns_resolver_searchlist_count(r)) {
1070 				new_name = ldns_dname_cat_clone(name,
1071 						&root_dname);
1072 			} else {
1073 				new_name = ldns_dname_cat_clone(name,
1074 						search_list[i]);
1075 			}
1076 
1077 			s = ldns_resolver_query_status(pkt, r,
1078 					new_name, t, c, flags);
1079 			ldns_rdf_deep_free(new_name);
1080 
1081 			if (pkt && *pkt) {
1082 				if (s == LDNS_STATUS_OK &&
1083 						ldns_pkt_get_rcode(*pkt) ==
1084 						LDNS_RCODE_NOERROR) {
1085 
1086 					return LDNS_STATUS_OK;
1087 				}
1088 				ldns_pkt_free(*pkt);
1089 				*pkt = NULL;
1090 			}
1091 		}
1092 	}
1093 	return s;
1094 }
1095 
1096 ldns_pkt *
1097 ldns_resolver_search(const ldns_resolver *r,const  ldns_rdf *name,
1098 	ldns_rr_type t, ldns_rr_class c, uint16_t flags)
1099 {
1100 	ldns_pkt* pkt = NULL;
1101 	if (ldns_resolver_search_status(&pkt, (ldns_resolver *)r,
1102 				name, t, c, flags) != LDNS_STATUS_OK) {
1103 		ldns_pkt_free(pkt);
1104 		return NULL;
1105 	}
1106 	return pkt;
1107 }
1108 
1109 ldns_status
1110 ldns_resolver_query_status(ldns_pkt** pkt,
1111 		ldns_resolver *r, const ldns_rdf *name,
1112 		ldns_rr_type t, ldns_rr_class c, uint16_t flags)
1113 {
1114 	ldns_rdf *newname;
1115 	ldns_status status;
1116 
1117 	if (!ldns_resolver_defnames(r) || !ldns_resolver_domain(r)) {
1118 		return ldns_resolver_send(pkt, r, name, t, c, flags);
1119 	}
1120 
1121 	newname = ldns_dname_cat_clone(name, ldns_resolver_domain(r));
1122 	if (!newname) {
1123 		return LDNS_STATUS_MEM_ERR;
1124 	}
1125 	status = ldns_resolver_send(pkt, r, newname, t, c, flags);
1126 	ldns_rdf_free(newname);
1127 	return status;
1128 }
1129 
1130 ldns_pkt *
1131 ldns_resolver_query(const ldns_resolver *r, const ldns_rdf *name,
1132 	ldns_rr_type t, ldns_rr_class c, uint16_t flags)
1133 {
1134 	ldns_pkt* pkt = NULL;
1135 	if (ldns_resolver_query_status(&pkt, (ldns_resolver *)r,
1136 				name, t, c, flags) != LDNS_STATUS_OK) {
1137 		ldns_pkt_free(pkt);
1138 		return NULL;
1139 	}
1140 	return pkt;
1141 }
1142 
1143 static size_t *
1144 ldns_resolver_backup_rtt(ldns_resolver *r)
1145 {
1146 	size_t *new_rtt;
1147 	size_t *old_rtt = ldns_resolver_rtt(r);
1148 
1149 	if (old_rtt && ldns_resolver_nameserver_count(r)) {
1150 		new_rtt = LDNS_XMALLOC(size_t
1151 				, ldns_resolver_nameserver_count(r));
1152 		if (!new_rtt) return NULL;
1153 		memcpy(new_rtt, old_rtt, sizeof(size_t)
1154 				* ldns_resolver_nameserver_count(r));
1155 		ldns_resolver_set_rtt(r, new_rtt);
1156 		return old_rtt;
1157 	}
1158 	return NULL;
1159 }
1160 
1161 static void
1162 ldns_resolver_restore_rtt(ldns_resolver *r, size_t *old_rtt)
1163 {
1164 	size_t *cur_rtt = ldns_resolver_rtt(r);
1165 
1166 	if (cur_rtt) {
1167 		LDNS_FREE(cur_rtt);
1168 	}
1169 	ldns_resolver_set_rtt(r, old_rtt);
1170 }
1171 
1172 ldns_status
1173 ldns_resolver_send_pkt(ldns_pkt **answer, ldns_resolver *r,
1174 				   ldns_pkt *query_pkt)
1175 {
1176 	ldns_pkt *answer_pkt = NULL;
1177 	ldns_status stat = LDNS_STATUS_OK;
1178 	size_t *rtt;
1179 
1180 	stat = ldns_send(&answer_pkt, (ldns_resolver *)r, query_pkt);
1181 	if (stat != LDNS_STATUS_OK) {
1182 		if(answer_pkt) {
1183 			ldns_pkt_free(answer_pkt);
1184 			answer_pkt = NULL;
1185 		}
1186 	} else {
1187 		/* if tc=1 fall back to EDNS and/or TCP */
1188 		/* check for tcp first (otherwise we don't care about tc=1) */
1189 		if (!ldns_resolver_usevc(r) && ldns_resolver_fallback(r)) {
1190 			if (ldns_pkt_tc(answer_pkt)) {
1191 				/* was EDNS0 set? */
1192 				if (ldns_pkt_edns_udp_size(query_pkt) == 0) {
1193 					ldns_pkt_set_edns_udp_size(query_pkt
1194 							, 4096);
1195 					ldns_pkt_free(answer_pkt);
1196 					answer_pkt = NULL;
1197 					/* Nameservers should not become
1198 					 * unreachable because fragments are
1199 					 * dropped (network error). We might
1200 					 * still have success with TCP.
1201 					 * Therefore maintain reachability
1202 					 * statuses of the nameservers by
1203 					 * backup and restore the rtt list.
1204 					 */
1205 					rtt = ldns_resolver_backup_rtt(r);
1206 					stat = ldns_send(&answer_pkt, r
1207 							, query_pkt);
1208 					ldns_resolver_restore_rtt(r, rtt);
1209 				}
1210 				/* either way, if it is still truncated, use TCP */
1211 				if (stat != LDNS_STATUS_OK ||
1212 				    ldns_pkt_tc(answer_pkt)) {
1213 					ldns_resolver_set_usevc(r, true);
1214 					ldns_pkt_free(answer_pkt);
1215 					answer_pkt = NULL;
1216 					stat = ldns_send(&answer_pkt, r, query_pkt);
1217 					ldns_resolver_set_usevc(r, false);
1218 				}
1219 			}
1220 		}
1221 	}
1222 
1223 	if (answer && answer_pkt) {
1224 		*answer = answer_pkt;
1225 	}
1226 
1227 	return stat;
1228 }
1229 
1230 ldns_status
1231 ldns_resolver_prepare_query_pkt(ldns_pkt **query_pkt, ldns_resolver *r,
1232                                 const ldns_rdf *name, ldns_rr_type t,
1233                                 ldns_rr_class c, uint16_t flags)
1234 {
1235 	struct timeval now;
1236 	ldns_rr* soa = NULL;
1237 
1238 	/* prepare a question pkt from the parameters
1239 	 * and then send this */
1240 	if (t == LDNS_RR_TYPE_IXFR) {
1241 		ldns_rdf *owner_rdf;
1242 		ldns_rdf *mname_rdf;
1243 		ldns_rdf *rname_rdf;
1244 		ldns_rdf *serial_rdf;
1245 		ldns_rdf *refresh_rdf;
1246 		ldns_rdf *retry_rdf;
1247 		ldns_rdf *expire_rdf;
1248 		ldns_rdf *minimum_rdf;
1249 		soa = ldns_rr_new();
1250 
1251 		if (!soa) {
1252 			return LDNS_STATUS_ERR;
1253 		}
1254 		owner_rdf = ldns_rdf_clone(name);
1255 		if (!owner_rdf) {
1256 			ldns_rr_free(soa);
1257 			return LDNS_STATUS_ERR;
1258 		}
1259 		ldns_rr_set_owner(soa, owner_rdf);
1260 		ldns_rr_set_type(soa, LDNS_RR_TYPE_SOA);
1261 		ldns_rr_set_class(soa, c);
1262 		ldns_rr_set_question(soa, false);
1263 		if (ldns_str2rdf_dname(&mname_rdf, ".") != LDNS_STATUS_OK) {
1264 			ldns_rr_free(soa);
1265 			return LDNS_STATUS_ERR;
1266 		} else	ldns_rr_push_rdf(soa, mname_rdf);
1267 		if (ldns_str2rdf_dname(&rname_rdf, ".") != LDNS_STATUS_OK) {
1268 			ldns_rr_free(soa);
1269 			return LDNS_STATUS_ERR;
1270 		} else	ldns_rr_push_rdf(soa, rname_rdf);
1271 		serial_rdf = ldns_native2rdf_int32(LDNS_RDF_TYPE_INT32, ldns_resolver_get_ixfr_serial(r));
1272 		if (!serial_rdf) {
1273 			ldns_rr_free(soa);
1274 			return LDNS_STATUS_ERR;
1275 		} else	ldns_rr_push_rdf(soa, serial_rdf);
1276 		refresh_rdf = ldns_native2rdf_int32(LDNS_RDF_TYPE_INT32, 0);
1277 		if (!refresh_rdf) {
1278 			ldns_rr_free(soa);
1279 			return LDNS_STATUS_ERR;
1280 		} else	ldns_rr_push_rdf(soa, refresh_rdf);
1281 		retry_rdf = ldns_native2rdf_int32(LDNS_RDF_TYPE_INT32, 0);
1282 		if (!retry_rdf) {
1283 			ldns_rr_free(soa);
1284 			return LDNS_STATUS_ERR;
1285 		} else	ldns_rr_push_rdf(soa, retry_rdf);
1286 		expire_rdf = ldns_native2rdf_int32(LDNS_RDF_TYPE_INT32, 0);
1287 		if (!expire_rdf) {
1288 			ldns_rr_free(soa);
1289 			return LDNS_STATUS_ERR;
1290 		} else	ldns_rr_push_rdf(soa, expire_rdf);
1291 		minimum_rdf = ldns_native2rdf_int32(LDNS_RDF_TYPE_INT32, 0);
1292 		if (!minimum_rdf) {
1293 			ldns_rr_free(soa);
1294 			return LDNS_STATUS_ERR;
1295 		} else	ldns_rr_push_rdf(soa, minimum_rdf);
1296 
1297 		*query_pkt = ldns_pkt_ixfr_request_new(ldns_rdf_clone(name),
1298 			c, flags, soa);
1299 	} else {
1300 		*query_pkt = ldns_pkt_query_new(ldns_rdf_clone(name), t, c, flags);
1301 	}
1302 	if (!*query_pkt) {
1303 		ldns_rr_free(soa);
1304 		return LDNS_STATUS_ERR;
1305 	}
1306 
1307 	/* set DO bit if necessary */
1308 	if (ldns_resolver_dnssec(r)) {
1309 		if (ldns_resolver_edns_udp_size(r) == 0) {
1310 			ldns_resolver_set_edns_udp_size(r, 4096);
1311 		}
1312 		ldns_pkt_set_edns_do(*query_pkt, true);
1313 		if (ldns_resolver_dnssec_cd(r) || (flags & LDNS_CD)) {
1314 			ldns_pkt_set_cd(*query_pkt, true);
1315 		}
1316 	}
1317 
1318 	/* transfer the udp_edns_size from the resolver to the packet */
1319 	if (ldns_resolver_edns_udp_size(r) != 0) {
1320 		ldns_pkt_set_edns_udp_size(*query_pkt, ldns_resolver_edns_udp_size(r));
1321 	}
1322 
1323 	/* set the timestamp */
1324 	now.tv_sec = time(NULL);
1325 	now.tv_usec = 0;
1326 	ldns_pkt_set_timestamp(*query_pkt, now);
1327 
1328 
1329 	if (ldns_resolver_debug(r)) {
1330 		ldns_pkt_print(stdout, *query_pkt);
1331 	}
1332 
1333 	/* only set the id if it is not set yet */
1334 	if (ldns_pkt_id(*query_pkt) == 0) {
1335 		ldns_pkt_set_random_id(*query_pkt);
1336 	}
1337 
1338 	return LDNS_STATUS_OK;
1339 }
1340 
1341 ldns_status
1342 ldns_resolver_send(ldns_pkt **answer, ldns_resolver *r, const ldns_rdf *name,
1343 		ldns_rr_type t, ldns_rr_class c, uint16_t flags)
1344 {
1345 	ldns_pkt *query_pkt;
1346 	ldns_pkt *answer_pkt;
1347 	ldns_status status;
1348 
1349 	assert(r != NULL);
1350 	assert(name != NULL);
1351 
1352 	answer_pkt = NULL;
1353 
1354 	/* do all the preprocessing here, then fire of an query to
1355 	 * the network */
1356 
1357 	if (0 == t) {
1358 		t= LDNS_RR_TYPE_A;
1359 	}
1360 	if (0 == c) {
1361 		c= LDNS_RR_CLASS_IN;
1362 	}
1363 	if (0 == ldns_resolver_nameserver_count(r)) {
1364 		return LDNS_STATUS_RES_NO_NS;
1365 	}
1366 	if (ldns_rdf_get_type(name) != LDNS_RDF_TYPE_DNAME) {
1367 		return LDNS_STATUS_RES_QUERY;
1368 	}
1369 
1370 	status = ldns_resolver_prepare_query_pkt(&query_pkt, r, name,
1371 	                                         t, c, flags);
1372 	if (status != LDNS_STATUS_OK) {
1373 		return status;
1374 	}
1375 
1376 	/* if tsig values are set, tsign it */
1377 	/* TODO: make last 3 arguments optional too? maybe make complete
1378 	         rr instead of separate values in resolver (and packet)
1379 	  Jelte
1380 	  should this go in pkt_prepare?
1381 	*/
1382 	if (ldns_resolver_tsig_keyname(r) && ldns_resolver_tsig_keydata(r)) {
1383 #ifdef HAVE_SSL
1384 		status = ldns_pkt_tsig_sign(query_pkt,
1385 		                            ldns_resolver_tsig_keyname(r),
1386 		                            ldns_resolver_tsig_keydata(r),
1387 		                            300, ldns_resolver_tsig_algorithm(r), NULL);
1388 		if (status != LDNS_STATUS_OK) {
1389 			ldns_pkt_free(query_pkt);
1390 			return LDNS_STATUS_CRYPTO_TSIG_ERR;
1391 		}
1392 #else
1393 		ldns_pkt_free(query_pkt);
1394 	        return LDNS_STATUS_CRYPTO_TSIG_ERR;
1395 #endif /* HAVE_SSL */
1396 	}
1397 
1398 	status = ldns_resolver_send_pkt(&answer_pkt, r, query_pkt);
1399 	ldns_pkt_free(query_pkt);
1400 
1401 	/* allows answer to be NULL when not interested in return value */
1402 	if (answer) {
1403 		*answer = answer_pkt;
1404 	}
1405 	return status;
1406 }
1407 
1408 ldns_rr *
1409 ldns_axfr_next(ldns_resolver *resolver)
1410 {
1411 	ldns_rr *cur_rr;
1412 	uint8_t *packet_wire;
1413 	size_t packet_wire_size;
1414 	ldns_status status;
1415 
1416 	/* check if start() has been called */
1417 	if (!resolver || resolver->_socket == -1) {
1418 		return NULL;
1419 	}
1420 
1421 	if (resolver->_cur_axfr_pkt) {
1422 		if (resolver->_axfr_i == ldns_pkt_ancount(resolver->_cur_axfr_pkt)) {
1423 			ldns_pkt_free(resolver->_cur_axfr_pkt);
1424 			resolver->_cur_axfr_pkt = NULL;
1425 			return ldns_axfr_next(resolver);
1426 		}
1427 		cur_rr = ldns_rr_clone(ldns_rr_list_rr(
1428 					ldns_pkt_answer(resolver->_cur_axfr_pkt),
1429 					resolver->_axfr_i));
1430 		resolver->_axfr_i++;
1431 		if (ldns_rr_get_type(cur_rr) == LDNS_RR_TYPE_SOA) {
1432 			resolver->_axfr_soa_count++;
1433 			if (resolver->_axfr_soa_count >= 2) {
1434 
1435 				close_socket(resolver->_socket);
1436 
1437 				ldns_pkt_free(resolver->_cur_axfr_pkt);
1438 				resolver->_cur_axfr_pkt = NULL;
1439 			}
1440 		}
1441 		return cur_rr;
1442 	} else {
1443                packet_wire = ldns_tcp_read_wire_timeout(resolver->_socket, &packet_wire_size, resolver->_timeout);
1444 		if(!packet_wire)
1445 			return NULL;
1446 
1447 		status = ldns_wire2pkt(&resolver->_cur_axfr_pkt, packet_wire,
1448 				     packet_wire_size);
1449 		LDNS_FREE(packet_wire);
1450 
1451 		resolver->_axfr_i = 0;
1452 		if (status != LDNS_STATUS_OK) {
1453 			/* TODO: make status return type of this function (...api change) */
1454 #ifdef STDERR_MSGS
1455 			fprintf(stderr, "Error parsing rr during AXFR: %s\n", ldns_get_errorstr_by_id(status));
1456 #endif
1457 
1458 			/* we must now also close the socket, otherwise subsequent uses of the
1459 			   same resolver structure will fail because the link is still open or
1460 			   in an undefined state */
1461 
1462 			close_socket(resolver->_socket);
1463 
1464 			return NULL;
1465 		} else if (ldns_pkt_get_rcode(resolver->_cur_axfr_pkt) != 0) {
1466 #ifdef STDERR_MSGS
1467 			ldns_lookup_table *rcode = ldns_lookup_by_id(
1468 				ldns_rcodes,(int) ldns_pkt_get_rcode(
1469 				resolver->_cur_axfr_pkt));
1470 			if (rcode) {
1471 				fprintf(stderr, "Error in AXFR: %s\n",
1472 						rcode->name);
1473 			} else {
1474 				fprintf(stderr, "Error in AXFR: %d\n",
1475 						(int) ldns_pkt_get_rcode(
1476 						resolver->_cur_axfr_pkt));
1477 			}
1478 #endif
1479 
1480 			/* we must now also close the socket, otherwise subsequent uses of the
1481 			   same resolver structure will fail because the link is still open or
1482 			   in an undefined state */
1483 
1484 			close_socket(resolver->_socket);
1485 
1486 			return NULL;
1487 		} else {
1488 			return ldns_axfr_next(resolver);
1489 		}
1490 
1491 	}
1492 
1493 }
1494 
1495 /* this function is needed to abort a transfer that is in progress;
1496  * without it an aborted transfer will lead to the AXFR code in the
1497  * library staying in an indetermined state because the socket for the
1498  * AXFR is never closed
1499  */
1500 void
1501 ldns_axfr_abort(ldns_resolver *resolver)
1502 {
1503 	/* Only abort if an actual AXFR is in progress */
1504 	if (resolver->_socket != -1)
1505 	{
1506 #ifndef USE_WINSOCK
1507 		close(resolver->_socket);
1508 #else
1509 		closesocket(resolver->_socket);
1510 #endif
1511 		resolver->_socket = -1;
1512 	}
1513 }
1514 
1515 bool
1516 ldns_axfr_complete(const ldns_resolver *res)
1517 {
1518 	/* complete when soa count is 2? */
1519 	return res->_axfr_soa_count == 2;
1520 }
1521 
1522 ldns_pkt *
1523 ldns_axfr_last_pkt(const ldns_resolver *res)
1524 {
1525 	return res->_cur_axfr_pkt;
1526 }
1527 
1528 void
1529 ldns_resolver_set_ixfr_serial(ldns_resolver *r, uint32_t serial)
1530 {
1531 	r->_serial = serial;
1532 }
1533 
1534 uint32_t
1535 ldns_resolver_get_ixfr_serial(const ldns_resolver *res)
1536 {
1537 	return res->_serial;
1538 }
1539 
1540 
1541 /* random isn't really that good */
1542 void
1543 ldns_resolver_nameservers_randomize(ldns_resolver *r)
1544 {
1545 	uint16_t i, j;
1546 	ldns_rdf **ns, *tmpns;
1547 	size_t *rtt, tmprtt;
1548 
1549 	/* should I check for ldns_resolver_random?? */
1550 	assert(r != NULL);
1551 
1552 	ns = ldns_resolver_nameservers(r);
1553 	rtt = ldns_resolver_rtt(r);
1554 	for (i = 0; i < ldns_resolver_nameserver_count(r); i++) {
1555 		j = ldns_get_random() % ldns_resolver_nameserver_count(r);
1556 		tmpns = ns[i];
1557 		ns[i] = ns[j];
1558 		ns[j] = tmpns;
1559 		tmprtt = rtt[i];
1560 		rtt[i] = rtt[j];
1561 		rtt[j] = tmprtt;
1562 	}
1563 	ldns_resolver_set_nameservers(r, ns);
1564 }
1565 
1566