2 * copyright (c) 2001-2014 Emil Mikulic.
4 * dns.c: synchronous DNS in a child process.
6 * You may use, modify and redistribute this file under the terms of the
7 * GNU General Public License version 2. (see COPYING.GPL)
19 #include "bsd.h" /* for setproctitle, strlcpy */
21 #include <sys/param.h>
22 #include <sys/socket.h>
33 # define gethostbyaddr(addr, len, type) \
34 gethostbyaddr((const char *)(addr), len, type)
37 static void dns_main(void) _noreturn_
; /* the child process runs this */
39 #define CHILD 0 /* child process uses this socket */
41 static int dns_sock
[2];
42 static pid_t pid
= -1;
46 int error
; /* for gai_strerror(), or 0 if no error */
47 char name
[256]; /* http://tools.ietf.org/html/rfc1034#section-3.1 */
51 dns_init(const char *privdrop_user
)
53 if (socketpair(AF_UNIX
, SOCK_STREAM
, 0, dns_sock
) == -1)
61 /* We are the child. */
62 privdrop(NULL
/* don't chroot */, privdrop_user
);
63 close(dns_sock
[PARENT
]);
64 dns_sock
[PARENT
] = -1;
65 daemonize_finish(); /* drop our copy of the lifeline! */
66 if (signal(SIGUSR1
, SIG_IGN
) == SIG_ERR
)
67 errx(1, "signal(SIGUSR1, ignore) failed");
71 /* We are the parent. */
72 close(dns_sock
[CHILD
]);
74 fd_set_nonblock(dns_sock
[PARENT
]);
75 verbosef("DNS child has PID %d", pid
);
83 return; /* no child was started */
84 close(dns_sock
[PARENT
]);
85 if (kill(pid
, SIGINT
) == -1)
87 verbosef("dns_stop() waiting for child");
88 if (waitpid(pid
, NULL
, 0) == -1)
90 verbosef("dns_stop() done waiting for child");
94 RB_ENTRY(tree_rec
) ptree
;
99 tree_cmp(struct tree_rec
*a
, struct tree_rec
*b
)
101 if (a
->ip
.family
!= b
->ip
.family
)
102 /* Sort IPv4 to the left of IPv6. */
103 return ((a
->ip
.family
== IPv4
) ? -1 : +1);
105 if (a
->ip
.family
== IPv4
)
106 return (memcmp(&a
->ip
.ip
.v4
, &b
->ip
.ip
.v4
, sizeof(a
->ip
.ip
.v4
)));
108 assert(a
->ip
.family
== IPv6
);
109 return (memcmp(&a
->ip
.ip
.v6
, &b
->ip
.ip
.v6
, sizeof(a
->ip
.ip
.v6
)));
113 static RB_HEAD(tree_t
, tree_rec
) ip_tree
= RB_INITIALIZER(&tree_rec
);
114 RB_GENERATE_STATIC(tree_t
, tree_rec
, ptree
, tree_cmp
)
117 dns_queue(const struct addr
*const ipaddr
)
119 struct tree_rec
*rec
;
123 return; /* no child was started - we're not doing any DNS */
125 if ((ipaddr
->family
!= IPv4
) && (ipaddr
->family
!= IPv6
)) {
126 verbosef("dns_queue() for unknown family %d", ipaddr
->family
);
130 rec
= xmalloc(sizeof(*rec
));
131 memcpy(&rec
->ip
, ipaddr
, sizeof(rec
->ip
));
133 if (RB_INSERT(tree_t
, &ip_tree
, rec
) != NULL
) {
134 /* Already queued - this happens seldom enough that we don't care about
135 * the performance hit of needlessly malloc()ing. */
136 verbosef("already queued %s", addr_to_str(ipaddr
));
141 num_w
= write(dns_sock
[PARENT
], ipaddr
, sizeof(*ipaddr
)); /* won't block */
143 warnx("dns_queue: write: ignoring end of file");
144 else if (num_w
== -1)
145 warn("dns_queue: ignoring write error");
146 else if (num_w
!= sizeof(*ipaddr
))
147 err(1, "dns_queue: wrote %zu instead of %zu", num_w
, sizeof(*ipaddr
));
151 dns_unqueue(const struct addr
*const ipaddr
)
153 struct tree_rec tmp
, *rec
;
155 memcpy(&tmp
.ip
, ipaddr
, sizeof(tmp
.ip
));
156 if ((rec
= RB_FIND(tree_t
, &ip_tree
, &tmp
)) != NULL
) {
157 RB_REMOVE(tree_t
, &ip_tree
, rec
);
161 verbosef("couldn't unqueue %s - not in queue!", addr_to_str(ipaddr
));
165 * Returns non-zero if result waiting, stores IP and name into given pointers
166 * (name buffer is allocated by dns_poll)
169 dns_get_result(struct addr
*ipaddr
, char **name
)
171 struct dns_reply reply
;
174 numread
= read(dns_sock
[PARENT
], &reply
, sizeof(reply
));
177 return (0); /* no input waiting */
182 goto error
; /* EOF */
183 if (numread
!= sizeof(reply
))
184 errx(1, "dns_get_result read got %zu, expected %zu",
185 numread
, sizeof(reply
));
187 /* Return successful reply. */
188 memcpy(ipaddr
, &reply
.addr
, sizeof(*ipaddr
));
189 if (reply
.error
!= 0) {
190 /* Identify common special cases. */
191 const char *type
= "none";
193 if (reply
.addr
.family
== IPv6
) {
194 if (IN6_IS_ADDR_LINKLOCAL(&reply
.addr
.ip
.v6
))
196 else if (IN6_IS_ADDR_SITELOCAL(&reply
.addr
.ip
.v6
))
198 else if (IN6_IS_ADDR_MULTICAST(&reply
.addr
.ip
.v6
))
201 assert(reply
.addr
.family
== IPv4
);
202 if (IN_MULTICAST(htonl(reply
.addr
.ip
.v4
)))
205 xasprintf(name
, "(%s)", type
);
207 else /* Correctly resolved name. */
208 *name
= xstrdup(reply
.name
);
210 dns_unqueue(&reply
.addr
);
214 warn("dns_get_result: ignoring read error");
215 /* FIXME: re-align to stream? restart dns child? */
226 return; /* no child was started - we're not doing any DNS */
228 while (dns_get_result(&ip
, &name
)) {
229 /* push into hosts_db */
230 struct bucket
*b
= host_find(&ip
);
233 verbosef("resolved %s to %s but it's not in the DB!",
234 addr_to_str(&ip
), name
);
237 if (b
->u
.host
.dns
!= NULL
) {
238 verbosef("resolved %s to %s but it's already in the DB!",
239 addr_to_str(&ip
), name
);
242 b
->u
.host
.dns
= name
;
246 /* ------------------------------------------------------------------------ */
249 STAILQ_ENTRY(qitem
) entries
;
253 static STAILQ_HEAD(qhead
, qitem
) queue
= STAILQ_HEAD_INITIALIZER(queue
);
256 enqueue(const struct addr
*const ip
)
260 i
= xmalloc(sizeof(*i
));
261 memcpy(&i
->ip
, ip
, sizeof(i
->ip
));
262 STAILQ_INSERT_TAIL(&queue
, i
, entries
);
263 verbosef("DNS: enqueued %s", addr_to_str(ip
));
266 /* Return non-zero and populate <ip> pointer if queue isn't empty. */
268 dequeue(struct addr
*ip
)
272 i
= STAILQ_FIRST(&queue
);
275 STAILQ_REMOVE_HEAD(&queue
, entries
);
276 memcpy(ip
, &i
->ip
, sizeof(*ip
));
278 verbosef("DNS: dequeued %s", addr_to_str(ip
));
283 xwrite(const int d
, const void *buf
, const size_t nbytes
)
285 ssize_t ret
= write(d
, buf
, nbytes
);
289 if (ret
!= (ssize_t
)nbytes
)
290 err(1, "wrote %d bytes instead of all %d bytes", (int)ret
, (int)nbytes
);
298 setproctitle("DNS child");
299 fd_set_nonblock(dns_sock
[CHILD
]);
300 verbosef("DNS child entering main DNS loop");
304 if (STAILQ_EMPTY(&queue
)) {
306 fd_set_block(dns_sock
[CHILD
]);
307 verbosef("entering blocking read loop");
310 fd_set_nonblock(dns_sock
[CHILD
]);
311 verbosef("non-blocking poll");
314 /* While we have input to process... */
315 ssize_t numread
= read(dns_sock
[CHILD
], &ip
, sizeof(ip
));
317 exit(0); /* end of file, nothing more to do here. */
319 if (!blocking
&& (errno
== EAGAIN
))
320 break; /* ran out of input */
322 err(1, "DNS: read failed");
324 if (numread
!= sizeof(ip
))
325 err(1, "DNS: read got %zu bytes, expecting %zu",
326 numread
, sizeof(ip
));
329 /* After one blocking read, become non-blocking so that when we
330 * run out of input we fall through to queue processing.
333 fd_set_nonblock(dns_sock
[CHILD
]);
339 struct dns_reply reply
;
340 struct sockaddr_in sin
;
341 struct sockaddr_in6 sin6
;
343 char host
[NI_MAXHOST
];
353 sin
.sin_family
= AF_INET
;
354 sin
.sin_addr
.s_addr
= ip
.ip
.v4
;
355 ret
= getnameinfo((struct sockaddr
*) &sin
, sizeof(sin
),
356 host
, sizeof(host
), NULL
, 0, flags
);
357 if (ret
== EAI_FAMILY
) {
358 verbosef("getnameinfo error %s, trying gethostbyname",
360 he
= gethostbyaddr(&sin
.sin_addr
.s_addr
,
361 sizeof(sin
.sin_addr
.s_addr
), sin
.sin_family
);
364 verbosef("gethostbyname error %s", hstrerror(h_errno
));
367 strlcpy(host
, he
->h_name
, sizeof(host
));
372 sin6
.sin6_family
= AF_INET6
;
373 memcpy(&sin6
.sin6_addr
, &ip
.ip
.v6
, sizeof(sin6
.sin6_addr
));
374 ret
= getnameinfo((struct sockaddr
*) &sin6
, sizeof(sin6
),
375 host
, sizeof(host
), NULL
, 0, flags
);
382 reply
.name
[0] = '\0';
385 assert(sizeof(reply
.name
) > sizeof(char *)); /* not just a ptr */
386 strlcpy(reply
.name
, host
, sizeof(reply
.name
));
389 fd_set_block(dns_sock
[CHILD
]);
390 xwrite(dns_sock
[CHILD
], &reply
, sizeof(reply
));
391 verbosef("DNS: %s is \"%s\".", addr_to_str(&reply
.addr
),
392 (ret
== 0) ? reply
.name
: gai_strerror(ret
));
397 /* vim:set ts=3 sw=3 tw=78 expandtab: */