start of EDNS work; TC truncation of message encoding.

git-svn-id: file:///svn/unbound/trunk@276 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2007-05-02 15:31:32 +00:00
parent 9d3e09b838
commit d86f444442
4 changed files with 143 additions and 72 deletions

View file

@ -1,6 +1,8 @@
2 May 2007: Wouter 2 May 2007: Wouter
- dname unit tests in own file and spread out neatly in functions. - dname unit tests in own file and spread out neatly in functions.
- more dname unit tests. - more dname unit tests.
- message encoding creates truncated TC flagged messages if they do
not fit, and will leave out (whole)rrsets from additional if needed.
1 May 2007: Wouter 1 May 2007: Wouter
- decompress query section, extremely lenient acceptance. - decompress query section, extremely lenient acceptance.

View file

@ -180,6 +180,8 @@ struct rr_parse {
/** Calculate destination offset of a compression pointer. pass first and /** Calculate destination offset of a compression pointer. pass first and
* second octets of the compression pointer. */ * second octets of the compression pointer. */
#define PTR_OFFSET(x, y) ( ((x)&0x3f)<<8 | (y) ) #define PTR_OFFSET(x, y) ( ((x)&0x3f)<<8 | (y) )
/** create a compression pointer to the given offset. */
#define PTR_CREATE(offset) ((uint16_t)(0xc000 | (offset)))
/** error codes, extended with EDNS, so > 15. */ /** error codes, extended with EDNS, so > 15. */
#define EDNS_RCODE_BADVERS 16 /** bad EDNS version */ #define EDNS_RCODE_BADVERS 16 /** bad EDNS version */

View file

@ -50,6 +50,14 @@
#include "util/region-allocator.h" #include "util/region-allocator.h"
#include "util/data/msgparse.h" #include "util/data/msgparse.h"
/** return code that means the function ran out of memory. negative so it does
* not conflict with DNS rcodes. */
#define RETVAL_OUTMEM -2
/** return code that means the data did not fit (completely) in the packet */
#define RETVAL_TRUNC -4
/** return code that means all is peachy keen. Equal to DNS rcode NOERROR */
#define RETVAL_OK 0
/** allocate qinfo, return 0 on error. */ /** allocate qinfo, return 0 on error. */
static int static int
parse_create_qinfo(ldns_buffer* pkt, struct msg_parse* msg, parse_create_qinfo(ldns_buffer* pkt, struct msg_parse* msg,
@ -668,7 +676,7 @@ compress_tree_store(struct compress_tree_node** tree, uint8_t* dname,
} }
/** compress a domain name */ /** compress a domain name */
static void static int
write_compressed_dname(ldns_buffer* pkt, uint8_t* dname, int labs, write_compressed_dname(ldns_buffer* pkt, uint8_t* dname, int labs,
struct compress_tree_node* p) struct compress_tree_node* p)
{ {
@ -680,16 +688,21 @@ write_compressed_dname(ldns_buffer* pkt, uint8_t* dname, int labs,
/* copy the first couple of labels */ /* copy the first couple of labels */
while(labcopy--) { while(labcopy--) {
lablen = *dname++; lablen = *dname++;
if(ldns_buffer_remaining(pkt) < (size_t)lablen+1)
return 0;
ldns_buffer_write_u8(pkt, lablen); ldns_buffer_write_u8(pkt, lablen);
ldns_buffer_write(pkt, dname, lablen); ldns_buffer_write(pkt, dname, lablen);
dname += lablen; dname += lablen;
} }
/* insert compression ptr */ /* insert compression ptr */
ptr = (uint16_t)(0xc000 | p->offset); if(ldns_buffer_remaining(pkt) < 2)
return 0;
ptr = PTR_CREATE(p->offset);
ldns_buffer_write_u16(pkt, ptr); ldns_buffer_write_u16(pkt, ptr);
return 1;
} }
/** compress owner name of RR */ /** compress owner name of RR, return RETVAL_OUTMEM RETVAL_TRUNC */
static int static int
compress_owner(struct ub_packed_rrset_key* key, ldns_buffer* pkt, compress_owner(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
region_type* region, struct compress_tree_node** tree, region_type* region, struct compress_tree_node** tree,
@ -703,39 +716,38 @@ compress_owner(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
if(p->labs == owner_labs) if(p->labs == owner_labs)
/* avoid ptr chains, since some software is /* avoid ptr chains, since some software is
* not capable of decoding ptr after a ptr. */ * not capable of decoding ptr after a ptr. */
*owner_ptr = htons((uint16_t)(0xc000 | *owner_ptr = htons(PTR_CREATE(p->offset));
p->offset)); if(!write_compressed_dname(pkt, key->rk.dname,
/* check if ptr + tc+4 ttl + rdatalen is available */ owner_labs, p))
if(ldns_buffer_remaining(pkt) < 2+4+4+2) return RETVAL_TRUNC;
return 0; /* check if typeclass+4 ttl + rdatalen is available */
write_compressed_dname(pkt, key->rk.dname, if(ldns_buffer_remaining(pkt) < 4+4+2)
owner_labs, p); return RETVAL_TRUNC;
ldns_buffer_write(pkt, &key->rk.dname[ ldns_buffer_write(pkt, &key->rk.dname[
key->rk.dname_len], 4); key->rk.dname_len], 4);
} else { } else {
/* no compress */ /* no compress */
if(ldns_buffer_remaining(pkt) < key->rk.dname_len+4+4+2) if(ldns_buffer_remaining(pkt) < key->rk.dname_len+4+4+2)
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, key->rk.dname, ldns_buffer_write(pkt, key->rk.dname,
key->rk.dname_len+4); key->rk.dname_len+4);
if(owner_pos <= PTR_MAX_OFFSET) if(owner_pos <= PTR_MAX_OFFSET)
*owner_ptr = htons((uint16_t)(0xc000 | *owner_ptr = htons(PTR_CREATE(owner_pos));
owner_pos));
} }
if(!compress_tree_store(tree, key->rk.dname, if(!compress_tree_store(tree, key->rk.dname,
owner_labs, owner_pos, region, p)) owner_labs, owner_pos, region, p))
return 0; return RETVAL_OUTMEM;
} else { } else {
/* always compress 2nd-further RRs in RRset */ /* always compress 2nd-further RRs in RRset */
if(ldns_buffer_remaining(pkt) < 2+4+4+2) if(ldns_buffer_remaining(pkt) < 2+4+4+2)
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, owner_ptr, 2); ldns_buffer_write(pkt, owner_ptr, 2);
ldns_buffer_write(pkt, &key->rk.dname[key->rk.dname_len], 4); ldns_buffer_write(pkt, &key->rk.dname[key->rk.dname_len], 4);
} }
return 1; return RETVAL_OK;
} }
/** compress any domain name to the packet */ /** compress any domain name to the packet, return RETVAL_* */
static int static int
compress_any_dname(uint8_t* dname, ldns_buffer* pkt, int labs, compress_any_dname(uint8_t* dname, ldns_buffer* pkt, int labs,
region_type* region, struct compress_tree_node** tree) region_type* region, struct compress_tree_node** tree)
@ -743,13 +755,15 @@ compress_any_dname(uint8_t* dname, ldns_buffer* pkt, int labs,
struct compress_tree_node* p; struct compress_tree_node* p;
size_t pos = ldns_buffer_position(pkt); size_t pos = ldns_buffer_position(pkt);
if((p = compress_tree_lookup(*tree, dname, labs))) { if((p = compress_tree_lookup(*tree, dname, labs))) {
if(ldns_buffer_remaining(pkt) < 2) if(!write_compressed_dname(pkt, dname, labs, p))
return 0; return RETVAL_TRUNC;
write_compressed_dname(pkt, dname, labs, p);
} else { } else {
dname_buffer_write(pkt, dname); if(!dname_buffer_write(pkt, dname))
return RETVAL_TRUNC;
} }
return compress_tree_store(tree, dname, labs, pos, region, p); if(!compress_tree_store(tree, dname, labs, pos, region, p))
return RETVAL_OUTMEM;
return RETVAL_OK;
} }
/** return true if type needs domain name compression in rdata */ /** return true if type needs domain name compression in rdata */
@ -765,13 +779,13 @@ type_rdata_compressable(struct ub_packed_rrset_key* key)
return 0; return 0;
} }
/** compress domain names in rdata */ /** compress domain names in rdata, return RETVAL_* */
static int static int
compress_rdata(ldns_buffer* pkt, uint8_t* rdata, size_t todolen, compress_rdata(ldns_buffer* pkt, uint8_t* rdata, size_t todolen,
region_type* region, struct compress_tree_node** tree, region_type* region, struct compress_tree_node** tree,
const ldns_rr_descriptor* desc) const ldns_rr_descriptor* desc)
{ {
int labs, rdf = 0; int labs, r, rdf = 0;
size_t dname_len, len, pos = ldns_buffer_position(pkt); size_t dname_len, len, pos = ldns_buffer_position(pkt);
uint8_t count = desc->_dname_count; uint8_t count = desc->_dname_count;
@ -783,8 +797,9 @@ compress_rdata(ldns_buffer* pkt, uint8_t* rdata, size_t todolen,
switch(desc->_wireformat[rdf]) { switch(desc->_wireformat[rdf]) {
case LDNS_RDF_TYPE_DNAME: case LDNS_RDF_TYPE_DNAME:
labs = dname_count_size_labels(rdata, &dname_len); labs = dname_count_size_labels(rdata, &dname_len);
if(!compress_any_dname(rdata, pkt, labs, region, tree)) if((r=compress_any_dname(rdata, pkt, labs, region,
return 0; tree)) != RETVAL_OK)
return r;
rdata += dname_len; rdata += dname_len;
todolen -= dname_len; todolen -= dname_len;
count--; count--;
@ -799,7 +814,7 @@ compress_rdata(ldns_buffer* pkt, uint8_t* rdata, size_t todolen,
if(len) { if(len) {
/* copy over */ /* copy over */
if(ldns_buffer_remaining(pkt) < len) if(ldns_buffer_remaining(pkt) < len)
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, rdata, len); ldns_buffer_write(pkt, rdata, len);
todolen -= len; todolen -= len;
rdata += len; rdata += len;
@ -809,23 +824,23 @@ compress_rdata(ldns_buffer* pkt, uint8_t* rdata, size_t todolen,
/* copy remainder */ /* copy remainder */
if(todolen > 0) { if(todolen > 0) {
if(ldns_buffer_remaining(pkt) < todolen) if(ldns_buffer_remaining(pkt) < todolen)
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, rdata, todolen); ldns_buffer_write(pkt, rdata, todolen);
} }
/* set rdata len */ /* set rdata len */
ldns_buffer_write_u16_at(pkt, pos, ldns_buffer_position(pkt)-pos-2); ldns_buffer_write_u16_at(pkt, pos, ldns_buffer_position(pkt)-pos-2);
return 1; return RETVAL_OK;
} }
/** store rrset in iov vector */ /** store rrset in buffer in wireformat, return RETVAL_* */
static int static int
packed_rrset_iov(struct ub_packed_rrset_key* key, ldns_buffer* pkt, packed_rrset_encode(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
uint16_t* num_rrs, uint32_t timenow, region_type* region, uint16_t* num_rrs, uint32_t timenow, region_type* region,
int do_data, int do_sig, struct compress_tree_node** tree) int do_data, int do_sig, struct compress_tree_node** tree)
{ {
size_t i, owner_pos; size_t i, owner_pos;
int owner_labs; int r, owner_labs;
uint16_t owner_ptr = 0; uint16_t owner_ptr = 0;
struct packed_rrset_data* data = (struct packed_rrset_data*) struct packed_rrset_data* data = (struct packed_rrset_data*)
key->entry.data; key->entry.data;
@ -835,27 +850,29 @@ packed_rrset_iov(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
if(do_data) { if(do_data) {
const ldns_rr_descriptor* c = type_rdata_compressable(key); const ldns_rr_descriptor* c = type_rdata_compressable(key);
*num_rrs += data->count;
for(i=0; i<data->count; i++) { for(i=0; i<data->count; i++) {
if(1) { /* compression */ if(1) { /* compression */
if(!compress_owner(key, pkt, region, tree, if((r=compress_owner(key, pkt, region, tree,
owner_pos, &owner_ptr, owner_labs)) owner_pos, &owner_ptr, owner_labs))
return 0; != RETVAL_OK)
return r;
} else { } else {
/* no compression */ /* no compression */
if(ldns_buffer_remaining(pkt) < if(ldns_buffer_remaining(pkt) <
key->rk.dname_len + 4+4+2) return 0; key->rk.dname_len + 4+4+2)
return RETVAL_TRUNC;
ldns_buffer_write(pkt, key->rk.dname, ldns_buffer_write(pkt, key->rk.dname,
key->rk.dname_len + 4); key->rk.dname_len + 4);
} }
ldns_buffer_write_u32(pkt, data->rr_ttl[i]-timenow); ldns_buffer_write_u32(pkt, data->rr_ttl[i]-timenow);
if(c) { if(c) {
if(!compress_rdata(pkt, data->rr_data[i], if((r=compress_rdata(pkt, data->rr_data[i],
data->rr_len[i], region, tree, c)) data->rr_len[i], region, tree, c))
return 0; != RETVAL_OK)
return r;
} else { } else {
if(ldns_buffer_remaining(pkt) < data->rr_len[i]) if(ldns_buffer_remaining(pkt) < data->rr_len[i])
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, data->rr_data[i], ldns_buffer_write(pkt, data->rr_data[i],
data->rr_len[i]); data->rr_len[i]);
} }
@ -864,24 +881,27 @@ packed_rrset_iov(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
/* insert rrsigs */ /* insert rrsigs */
if(do_sig) { if(do_sig) {
size_t total = data->count+data->rrsig_count; size_t total = data->count+data->rrsig_count;
*num_rrs += data->rrsig_count;
for(i=data->count; i<total; i++) { for(i=data->count; i<total; i++) {
if(1) { /* compression */ if(1) { /* compression */
if(owner_ptr) { if(owner_ptr) {
if(ldns_buffer_remaining(pkt) < if(ldns_buffer_remaining(pkt) <
2+4+4+data->rr_len[i]) 2+4+4+data->rr_len[i])
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, &owner_ptr, 2); ldns_buffer_write(pkt, &owner_ptr, 2);
} else { } else {
if(!compress_any_dname(key->rk.dname, if((r=compress_any_dname(key->rk.dname,
pkt, owner_labs, region, tree)) pkt, owner_labs, region, tree))
return 0; != RETVAL_OK)
return r;
if(ldns_buffer_remaining(pkt) <
4+4+data->rr_len[i])
return RETVAL_TRUNC;
} }
} else { } else {
/* no compression */ /* no compression */
if(ldns_buffer_remaining(pkt) < if(ldns_buffer_remaining(pkt) <
key->rk.dname_len+4+4+data->rr_len[i]) key->rk.dname_len+4+4+data->rr_len[i])
return 0; return RETVAL_TRUNC;
ldns_buffer_write(pkt, key->rk.dname, ldns_buffer_write(pkt, key->rk.dname,
key->rk.dname_len); key->rk.dname_len);
} }
@ -895,36 +915,57 @@ packed_rrset_iov(struct ub_packed_rrset_key* key, ldns_buffer* pkt,
data->rr_len[i]); data->rr_len[i]);
} }
} }
/* change rrnum only after we are sure it fits */
if(do_data)
*num_rrs += data->count;
if(do_sig)
*num_rrs += data->rrsig_count;
return 1; return RETVAL_OK;
} }
/** store msg section in iov vector */ /** store msg section in wireformat buffer, return RETVAL_* */
static int static int
insert_section(struct reply_info* rep, size_t num_rrsets, uint16_t* num_rrs, insert_section(struct reply_info* rep, size_t num_rrsets, uint16_t* num_rrs,
ldns_buffer* pkt, size_t rrsets_before, uint32_t timenow, ldns_buffer* pkt, size_t rrsets_before, uint32_t timenow,
region_type* region, int addit, struct compress_tree_node** tree) region_type* region, int addit, struct compress_tree_node** tree)
{ {
size_t i; int r;
size_t i, setstart;
*num_rrs = 0; *num_rrs = 0;
if(!addit) { if(!addit) {
for(i=0; i<num_rrsets; i++) for(i=0; i<num_rrsets; i++) {
if(!packed_rrset_iov(rep->rrsets[rrsets_before+i], pkt, setstart = ldns_buffer_position(pkt);
num_rrs, timenow, region, 1, 1, tree)) if((r=packed_rrset_encode(rep->rrsets[rrsets_before+i],
/* Bad, but if due to size must set TC bit */ pkt, num_rrs, timenow, region, 1, 1, tree))
return 0; != RETVAL_OK) {
/* Bad, but if due to size must set TC bit */
/* trim off the rrset neatly. */
ldns_buffer_set_position(pkt, setstart);
return r;
}
}
} else { } else {
/* might be OKAY to discard rrsets at end */ for(i=0; i<num_rrsets; i++) {
for(i=0; i<num_rrsets; i++) setstart = ldns_buffer_position(pkt);
if(!packed_rrset_iov(rep->rrsets[rrsets_before+i], pkt, if((r=packed_rrset_encode(rep->rrsets[rrsets_before+i],
num_rrs, timenow, region, 1, 0, tree)) pkt, num_rrs, timenow, region, 1, 0, tree))
return 0; != RETVAL_OK) {
for(i=0; i<num_rrsets; i++) ldns_buffer_set_position(pkt, setstart);
if(!packed_rrset_iov(rep->rrsets[rrsets_before+i], pkt, return r;
num_rrs, timenow, region, 0, 1, tree)) }
return 0; }
for(i=0; i<num_rrsets; i++) {
setstart = ldns_buffer_position(pkt);
if((r=packed_rrset_encode(rep->rrsets[rrsets_before+i],
pkt, num_rrs, timenow, region, 0, 1, tree))
!= RETVAL_OK) {
ldns_buffer_set_position(pkt, setstart);
return r;
}
}
} }
return 1; return RETVAL_OK;
} }
int reply_info_encode(struct query_info* qinfo, struct reply_info* rep, int reply_info_encode(struct query_info* qinfo, struct reply_info* rep,
@ -933,6 +974,7 @@ int reply_info_encode(struct query_info* qinfo, struct reply_info* rep,
{ {
uint16_t ancount=0, nscount=0, arcount=0; uint16_t ancount=0, nscount=0, arcount=0;
struct compress_tree_node* tree = 0; struct compress_tree_node* tree = 0;
int r;
ldns_buffer_clear(buffer); ldns_buffer_clear(buffer);
if(ldns_buffer_remaining(buffer) < LDNS_HEADER_SIZE) if(ldns_buffer_remaining(buffer) < LDNS_HEADER_SIZE)
@ -941,8 +983,8 @@ int reply_info_encode(struct query_info* qinfo, struct reply_info* rep,
ldns_buffer_write(buffer, &id, sizeof(uint16_t)); ldns_buffer_write(buffer, &id, sizeof(uint16_t));
ldns_buffer_write_u16(buffer, flags); ldns_buffer_write_u16(buffer, flags);
ldns_buffer_write_u16(buffer, rep->qdcount); ldns_buffer_write_u16(buffer, rep->qdcount);
/* skip an, ns, ar counts */ /* set an, ns, ar counts to zero in case of small packets */
ldns_buffer_set_position(buffer, LDNS_HEADER_SIZE); ldns_buffer_write(buffer, "\000\000\000\000\000\000", 6);
/* insert query section */ /* insert query section */
if(rep->qdcount) { if(rep->qdcount) {
@ -959,25 +1001,47 @@ int reply_info_encode(struct query_info* qinfo, struct reply_info* rep,
} }
/* insert answer section */ /* insert answer section */
if(!insert_section(rep, rep->an_numrrsets, &ancount, buffer, if((r=insert_section(rep, rep->an_numrrsets, &ancount, buffer,
0, timenow, region, 0, &tree)) 0, timenow, region, 0, &tree)) != RETVAL_OK) {
if(r == RETVAL_TRUNC) {
/* create truncated message */
ldns_buffer_write_u16_at(buffer, 6, ancount);
LDNS_TC_SET(ldns_buffer_begin(buffer));
ldns_buffer_flip(buffer);
return 1;
}
return 0; return 0;
}
ldns_buffer_write_u16_at(buffer, 6, ancount); ldns_buffer_write_u16_at(buffer, 6, ancount);
/* insert auth section */ /* insert auth section */
if(!insert_section(rep, rep->ns_numrrsets, &nscount, buffer, if((r=insert_section(rep, rep->ns_numrrsets, &nscount, buffer,
rep->an_numrrsets, timenow, region, 0, &tree)) rep->an_numrrsets, timenow, region, 0, &tree)) != RETVAL_OK) {
if(r == RETVAL_TRUNC) {
/* create truncated message */
ldns_buffer_write_u16_at(buffer, 8, nscount);
LDNS_TC_SET(ldns_buffer_begin(buffer));
ldns_buffer_flip(buffer);
return 1;
}
return 0; return 0;
}
ldns_buffer_write_u16_at(buffer, 8, nscount); ldns_buffer_write_u16_at(buffer, 8, nscount);
/* insert add section */ /* insert add section */
if(!insert_section(rep, rep->ar_numrrsets, &arcount, buffer, if((r=insert_section(rep, rep->ar_numrrsets, &arcount, buffer,
rep->an_numrrsets + rep->ns_numrrsets, timenow, region, rep->an_numrrsets + rep->ns_numrrsets, timenow, region,
1, &tree)) 1, &tree)) != RETVAL_OK) {
if(r == RETVAL_TRUNC) {
/* no need to set TC bit, this is the additional */
ldns_buffer_write_u16_at(buffer, 10, arcount);
ldns_buffer_flip(buffer);
return 1;
}
return 0; return 0;
}
ldns_buffer_write_u16_at(buffer, 10, arcount); ldns_buffer_write_u16_at(buffer, 10, arcount);
ldns_buffer_flip(buffer); ldns_buffer_flip(buffer);
return 1; return 1;
} }

View file

@ -252,6 +252,9 @@ void reply_info_answer(struct reply_info* rep, uint16_t qflags,
/** /**
* Regenerate the wireformat from the stored msg reply. * Regenerate the wireformat from the stored msg reply.
* If the buffer is too small then the message is truncated at a whole
* rrset and the TC bit set, or whole rrsets are left out of the additional
* and the TC bit is not set.
* @param qinfo: query info to store. * @param qinfo: query info to store.
* @param rep: reply to store. * @param rep: reply to store.
* @param id: id value to store, network order. * @param id: id value to store, network order.
@ -260,7 +263,7 @@ void reply_info_answer(struct reply_info* rep, uint16_t qflags,
* @param timenow: time now, to adjust ttl values. * @param timenow: time now, to adjust ttl values.
* @param region: to store temporary data in. * @param region: to store temporary data in.
* @return: nonzero is success, or * @return: nonzero is success, or
* 0 on error: malloc failure or buffer too small. * 0 on error: malloc failure (no log_err has been done).
*/ */
int reply_info_encode(struct query_info* qinfo, struct reply_info* rep, int reply_info_encode(struct query_info* qinfo, struct reply_info* rep,
uint16_t id, uint16_t flags, ldns_buffer* buffer, uint32_t timenow, uint16_t id, uint16_t flags, ldns_buffer* buffer, uint32_t timenow,