123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989 |
- #include "curl_setup.h"
- #ifndef CURL_DISABLE_DOH
- #include "urldata.h"
- #include "curl_addrinfo.h"
- #include "doh.h"
- #include "sendf.h"
- #include "multiif.h"
- #include "url.h"
- #include "share.h"
- #include "curl_base64.h"
- #include "connect.h"
- #include "strdup.h"
- #include "dynbuf.h"
- #include "curl_printf.h"
- #include "curl_memory.h"
- #include "memdebug.h"
- #define DNS_CLASS_IN 0x01
- #ifndef CURL_DISABLE_VERBOSE_STRINGS
- static const char * const errors[]={
- "",
- "Bad label",
- "Out of range",
- "Label loop",
- "Too small",
- "Out of memory",
- "RDATA length",
- "Malformat",
- "Bad RCODE",
- "Unexpected TYPE",
- "Unexpected CLASS",
- "No content",
- "Bad ID",
- "Name too long"
- };
- static const char *doh_strerror(DOHcode code)
- {
- if((code >= DOH_OK) && (code <= DOH_DNS_NAME_TOO_LONG))
- return errors[code];
- return "bad error code";
- }
- #endif
- UNITTEST DOHcode doh_encode(const char *host,
- DNStype dnstype,
- unsigned char *dnsp,
- size_t len,
- size_t *olen)
- {
- const size_t hostlen = strlen(host);
- unsigned char *orig = dnsp;
- const char *hostp = host;
-
- size_t expected_len;
- DEBUGASSERT(hostlen);
- expected_len = 12 + 1 + hostlen + 4;
- if(host[hostlen-1]!='.')
- expected_len++;
- if(expected_len > (256 + 16))
- return DOH_DNS_NAME_TOO_LONG;
- if(len < expected_len)
- return DOH_TOO_SMALL_BUFFER;
- *dnsp++ = 0;
- *dnsp++ = 0;
- *dnsp++ = 0x01;
- *dnsp++ = '\0';
- *dnsp++ = '\0';
- *dnsp++ = 1;
- *dnsp++ = '\0';
- *dnsp++ = '\0';
- *dnsp++ = '\0';
- *dnsp++ = '\0';
- *dnsp++ = '\0';
- *dnsp++ = '\0';
-
- while(*hostp) {
- size_t labellen;
- char *dot = strchr(hostp, '.');
- if(dot)
- labellen = dot - hostp;
- else
- labellen = strlen(hostp);
- if((labellen > 63) || (!labellen)) {
-
- *olen = 0;
- return DOH_DNS_BAD_LABEL;
- }
-
- *dnsp++ = (unsigned char)labellen;
- memcpy(dnsp, hostp, labellen);
- dnsp += labellen;
- hostp += labellen;
-
- if(dot)
- hostp++;
- }
- *dnsp++ = 0;
-
- *dnsp++ = (unsigned char)(255 & (dnstype>>8));
- *dnsp++ = (unsigned char)(255 & dnstype);
- *dnsp++ = '\0';
- *dnsp++ = DNS_CLASS_IN;
- *olen = dnsp - orig;
-
- DEBUGASSERT(*olen == expected_len);
- return DOH_OK;
- }
- static size_t
- doh_write_cb(const void *contents, size_t size, size_t nmemb, void *userp)
- {
- size_t realsize = size * nmemb;
- struct dynbuf *mem = (struct dynbuf *)userp;
- if(Curl_dyn_addn(mem, contents, realsize))
- return 0;
- return realsize;
- }
- static int doh_done(struct Curl_easy *doh, CURLcode result)
- {
- struct Curl_easy *data = doh->set.dohfor;
- struct dohdata *dohp = data->req.doh;
-
- dohp->pending--;
- infof(data, "a DoH request is completed, %u to go", dohp->pending);
- if(result)
- infof(data, "DoH request %s", curl_easy_strerror(result));
- if(!dohp->pending) {
-
- curl_slist_free_all(dohp->headers);
- dohp->headers = NULL;
- Curl_expire(data, 0, EXPIRE_RUN_NOW);
- }
- return 0;
- }
- #define ERROR_CHECK_SETOPT(x,y) \
- do { \
- result = curl_easy_setopt(doh, x, y); \
- if(result && \
- result != CURLE_NOT_BUILT_IN && \
- result != CURLE_UNKNOWN_OPTION) \
- goto error; \
- } while(0)
- static CURLcode dohprobe(struct Curl_easy *data,
- struct dnsprobe *p, DNStype dnstype,
- const char *host,
- const char *url, CURLM *multi,
- struct curl_slist *headers)
- {
- struct Curl_easy *doh = NULL;
- char *nurl = NULL;
- CURLcode result = CURLE_OK;
- timediff_t timeout_ms;
- DOHcode d = doh_encode(host, dnstype, p->dohbuffer, sizeof(p->dohbuffer),
- &p->dohlen);
- if(d) {
- failf(data, "Failed to encode DoH packet [%d]", d);
- return CURLE_OUT_OF_MEMORY;
- }
- p->dnstype = dnstype;
- Curl_dyn_init(&p->serverdoh, DYN_DOH_RESPONSE);
- timeout_ms = Curl_timeleft(data, NULL, TRUE);
- if(timeout_ms <= 0) {
- result = CURLE_OPERATION_TIMEDOUT;
- goto error;
- }
-
- result = Curl_open(&doh);
- if(!result) {
-
- struct dynbuf *resp = &p->serverdoh;
- doh->internal = true;
- ERROR_CHECK_SETOPT(CURLOPT_URL, url);
- ERROR_CHECK_SETOPT(CURLOPT_DEFAULT_PROTOCOL, "https");
- ERROR_CHECK_SETOPT(CURLOPT_WRITEFUNCTION, doh_write_cb);
- ERROR_CHECK_SETOPT(CURLOPT_WRITEDATA, resp);
- ERROR_CHECK_SETOPT(CURLOPT_POSTFIELDS, p->dohbuffer);
- ERROR_CHECK_SETOPT(CURLOPT_POSTFIELDSIZE, (long)p->dohlen);
- ERROR_CHECK_SETOPT(CURLOPT_HTTPHEADER, headers);
- #ifdef USE_HTTP2
- ERROR_CHECK_SETOPT(CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_2TLS);
- #endif
- #ifndef CURLDEBUG
-
- ERROR_CHECK_SETOPT(CURLOPT_PROTOCOLS, CURLPROTO_HTTPS);
- #else
-
- ERROR_CHECK_SETOPT(CURLOPT_PROTOCOLS, CURLPROTO_HTTP|CURLPROTO_HTTPS);
- #endif
- ERROR_CHECK_SETOPT(CURLOPT_TIMEOUT_MS, (long)timeout_ms);
- ERROR_CHECK_SETOPT(CURLOPT_SHARE, data->share);
- if(data->set.err && data->set.err != stderr)
- ERROR_CHECK_SETOPT(CURLOPT_STDERR, data->set.err);
- if(data->set.verbose)
- ERROR_CHECK_SETOPT(CURLOPT_VERBOSE, 1L);
- if(data->set.no_signal)
- ERROR_CHECK_SETOPT(CURLOPT_NOSIGNAL, 1L);
- ERROR_CHECK_SETOPT(CURLOPT_SSL_VERIFYHOST,
- data->set.doh_verifyhost ? 2L : 0L);
- ERROR_CHECK_SETOPT(CURLOPT_SSL_VERIFYPEER,
- data->set.doh_verifypeer ? 1L : 0L);
- ERROR_CHECK_SETOPT(CURLOPT_SSL_VERIFYSTATUS,
- data->set.doh_verifystatus ? 1L : 0L);
-
- if(data->set.ssl.falsestart)
- ERROR_CHECK_SETOPT(CURLOPT_SSL_FALSESTART, 1L);
- if(data->set.str[STRING_SSL_CAFILE]) {
- ERROR_CHECK_SETOPT(CURLOPT_CAINFO,
- data->set.str[STRING_SSL_CAFILE]);
- }
- if(data->set.blobs[BLOB_CAINFO]) {
- ERROR_CHECK_SETOPT(CURLOPT_CAINFO_BLOB,
- data->set.blobs[BLOB_CAINFO]);
- }
- if(data->set.str[STRING_SSL_CAPATH]) {
- ERROR_CHECK_SETOPT(CURLOPT_CAPATH,
- data->set.str[STRING_SSL_CAPATH]);
- }
- if(data->set.str[STRING_SSL_CRLFILE]) {
- ERROR_CHECK_SETOPT(CURLOPT_CRLFILE,
- data->set.str[STRING_SSL_CRLFILE]);
- }
- if(data->set.ssl.certinfo)
- ERROR_CHECK_SETOPT(CURLOPT_CERTINFO, 1L);
- if(data->set.ssl.fsslctx)
- ERROR_CHECK_SETOPT(CURLOPT_SSL_CTX_FUNCTION, data->set.ssl.fsslctx);
- if(data->set.ssl.fsslctxp)
- ERROR_CHECK_SETOPT(CURLOPT_SSL_CTX_DATA, data->set.ssl.fsslctxp);
- if(data->set.fdebug)
- ERROR_CHECK_SETOPT(CURLOPT_DEBUGFUNCTION, data->set.fdebug);
- if(data->set.debugdata)
- ERROR_CHECK_SETOPT(CURLOPT_DEBUGDATA, data->set.debugdata);
- if(data->set.str[STRING_SSL_EC_CURVES]) {
- ERROR_CHECK_SETOPT(CURLOPT_SSL_EC_CURVES,
- data->set.str[STRING_SSL_EC_CURVES]);
- }
- {
- long mask =
- (data->set.ssl.enable_beast ?
- CURLSSLOPT_ALLOW_BEAST : 0) |
- (data->set.ssl.no_revoke ?
- CURLSSLOPT_NO_REVOKE : 0) |
- (data->set.ssl.no_partialchain ?
- CURLSSLOPT_NO_PARTIALCHAIN : 0) |
- (data->set.ssl.revoke_best_effort ?
- CURLSSLOPT_REVOKE_BEST_EFFORT : 0) |
- (data->set.ssl.native_ca_store ?
- CURLSSLOPT_NATIVE_CA : 0) |
- (data->set.ssl.auto_client_cert ?
- CURLSSLOPT_AUTO_CLIENT_CERT : 0);
- (void)curl_easy_setopt(doh, CURLOPT_SSL_OPTIONS, mask);
- }
- doh->set.fmultidone = doh_done;
- doh->set.dohfor = data;
- p->easy = doh;
-
- DEBUGASSERT(!doh->set.private_data);
- if(curl_multi_add_handle(multi, doh))
- goto error;
- }
- else
- goto error;
- free(nurl);
- return CURLE_OK;
- error:
- free(nurl);
- Curl_close(&doh);
- return result;
- }
- struct Curl_addrinfo *Curl_doh(struct Curl_easy *data,
- const char *hostname,
- int port,
- int *waitp)
- {
- CURLcode result = CURLE_OK;
- int slot;
- struct dohdata *dohp;
- struct connectdata *conn = data->conn;
- *waitp = TRUE;
- (void)hostname;
- (void)port;
- DEBUGASSERT(!data->req.doh);
- DEBUGASSERT(conn);
-
- dohp = data->req.doh = calloc(sizeof(struct dohdata), 1);
- if(!dohp)
- return NULL;
- conn->bits.doh = TRUE;
- dohp->host = hostname;
- dohp->port = port;
- dohp->headers =
- curl_slist_append(NULL,
- "Content-Type: application/dns-message");
- if(!dohp->headers)
- goto error;
-
- result = dohprobe(data, &dohp->probe[DOH_PROBE_SLOT_IPADDR_V4],
- DNS_TYPE_A, hostname, data->set.str[STRING_DOH],
- data->multi, dohp->headers);
- if(result)
- goto error;
- dohp->pending++;
- #ifdef ENABLE_IPV6
- if((conn->ip_version != CURL_IPRESOLVE_V4) && Curl_ipv6works(data)) {
-
- result = dohprobe(data, &dohp->probe[DOH_PROBE_SLOT_IPADDR_V6],
- DNS_TYPE_AAAA, hostname, data->set.str[STRING_DOH],
- data->multi, dohp->headers);
- if(result)
- goto error;
- dohp->pending++;
- }
- #endif
- return NULL;
- error:
- curl_slist_free_all(dohp->headers);
- data->req.doh->headers = NULL;
- for(slot = 0; slot < DOH_PROBE_SLOTS; slot++) {
- Curl_close(&dohp->probe[slot].easy);
- }
- Curl_safefree(data->req.doh);
- return NULL;
- }
- static DOHcode skipqname(const unsigned char *doh, size_t dohlen,
- unsigned int *indexp)
- {
- unsigned char length;
- do {
- if(dohlen < (*indexp + 1))
- return DOH_DNS_OUT_OF_RANGE;
- length = doh[*indexp];
- if((length & 0xc0) == 0xc0) {
-
- if(dohlen < (*indexp + 2))
- return DOH_DNS_OUT_OF_RANGE;
- *indexp += 2;
- break;
- }
- if(length & 0xc0)
- return DOH_DNS_BAD_LABEL;
- if(dohlen < (*indexp + 1 + length))
- return DOH_DNS_OUT_OF_RANGE;
- *indexp += 1 + length;
- } while(length);
- return DOH_OK;
- }
- static unsigned short get16bit(const unsigned char *doh, int index)
- {
- return (unsigned short)((doh[index] << 8) | doh[index + 1]);
- }
- static unsigned int get32bit(const unsigned char *doh, int index)
- {
-
- doh += index;
-
- return ( (unsigned)doh[0] << 24) | (doh[1] << 16) |(doh[2] << 8) | doh[3];
- }
- static DOHcode store_a(const unsigned char *doh, int index, struct dohentry *d)
- {
-
- if(d->numaddr < DOH_MAX_ADDR) {
- struct dohaddr *a = &d->addr[d->numaddr];
- a->type = DNS_TYPE_A;
- memcpy(&a->ip.v4, &doh[index], 4);
- d->numaddr++;
- }
- return DOH_OK;
- }
- static DOHcode store_aaaa(const unsigned char *doh,
- int index,
- struct dohentry *d)
- {
-
- if(d->numaddr < DOH_MAX_ADDR) {
- struct dohaddr *a = &d->addr[d->numaddr];
- a->type = DNS_TYPE_AAAA;
- memcpy(&a->ip.v6, &doh[index], 16);
- d->numaddr++;
- }
- return DOH_OK;
- }
- static DOHcode store_cname(const unsigned char *doh,
- size_t dohlen,
- unsigned int index,
- struct dohentry *d)
- {
- struct dynbuf *c;
- unsigned int loop = 128;
- unsigned char length;
- if(d->numcname == DOH_MAX_CNAME)
- return DOH_OK;
- c = &d->cname[d->numcname++];
- do {
- if(index >= dohlen)
- return DOH_DNS_OUT_OF_RANGE;
- length = doh[index];
- if((length & 0xc0) == 0xc0) {
- int newpos;
-
- if((index + 1) >= dohlen)
- return DOH_DNS_OUT_OF_RANGE;
-
- newpos = (length & 0x3f) << 8 | doh[index + 1];
- index = newpos;
- continue;
- }
- else if(length & 0xc0)
- return DOH_DNS_BAD_LABEL;
- else
- index++;
- if(length) {
- if(Curl_dyn_len(c)) {
- if(Curl_dyn_addn(c, STRCONST(".")))
- return DOH_OUT_OF_MEM;
- }
- if((index + length) > dohlen)
- return DOH_DNS_BAD_LABEL;
- if(Curl_dyn_addn(c, &doh[index], length))
- return DOH_OUT_OF_MEM;
- index += length;
- }
- } while(length && --loop);
- if(!loop)
- return DOH_DNS_LABEL_LOOP;
- return DOH_OK;
- }
- static DOHcode rdata(const unsigned char *doh,
- size_t dohlen,
- unsigned short rdlength,
- unsigned short type,
- int index,
- struct dohentry *d)
- {
-
- DOHcode rc;
- switch(type) {
- case DNS_TYPE_A:
- if(rdlength != 4)
- return DOH_DNS_RDATA_LEN;
- rc = store_a(doh, index, d);
- if(rc)
- return rc;
- break;
- case DNS_TYPE_AAAA:
- if(rdlength != 16)
- return DOH_DNS_RDATA_LEN;
- rc = store_aaaa(doh, index, d);
- if(rc)
- return rc;
- break;
- case DNS_TYPE_CNAME:
- rc = store_cname(doh, dohlen, index, d);
- if(rc)
- return rc;
- break;
- case DNS_TYPE_DNAME:
-
- break;
- default:
-
- break;
- }
- return DOH_OK;
- }
- UNITTEST void de_init(struct dohentry *de)
- {
- int i;
- memset(de, 0, sizeof(*de));
- de->ttl = INT_MAX;
- for(i = 0; i < DOH_MAX_CNAME; i++)
- Curl_dyn_init(&de->cname[i], DYN_DOH_CNAME);
- }
- UNITTEST DOHcode doh_decode(const unsigned char *doh,
- size_t dohlen,
- DNStype dnstype,
- struct dohentry *d)
- {
- unsigned char rcode;
- unsigned short qdcount;
- unsigned short ancount;
- unsigned short type = 0;
- unsigned short rdlength;
- unsigned short nscount;
- unsigned short arcount;
- unsigned int index = 12;
- DOHcode rc;
- if(dohlen < 12)
- return DOH_TOO_SMALL_BUFFER;
- if(!doh || doh[0] || doh[1])
- return DOH_DNS_BAD_ID;
- rcode = doh[3] & 0x0f;
- if(rcode)
- return DOH_DNS_BAD_RCODE;
- qdcount = get16bit(doh, 4);
- while(qdcount) {
- rc = skipqname(doh, dohlen, &index);
- if(rc)
- return rc;
- if(dohlen < (index + 4))
- return DOH_DNS_OUT_OF_RANGE;
- index += 4;
- qdcount--;
- }
- ancount = get16bit(doh, 6);
- while(ancount) {
- unsigned short class;
- unsigned int ttl;
- rc = skipqname(doh, dohlen, &index);
- if(rc)
- return rc;
- if(dohlen < (index + 2))
- return DOH_DNS_OUT_OF_RANGE;
- type = get16bit(doh, index);
- if((type != DNS_TYPE_CNAME)
- && (type != DNS_TYPE_DNAME)
- && (type != dnstype))
-
- return DOH_DNS_UNEXPECTED_TYPE;
- index += 2;
- if(dohlen < (index + 2))
- return DOH_DNS_OUT_OF_RANGE;
- class = get16bit(doh, index);
- if(DNS_CLASS_IN != class)
- return DOH_DNS_UNEXPECTED_CLASS;
- index += 2;
- if(dohlen < (index + 4))
- return DOH_DNS_OUT_OF_RANGE;
- ttl = get32bit(doh, index);
- if(ttl < d->ttl)
- d->ttl = ttl;
- index += 4;
- if(dohlen < (index + 2))
- return DOH_DNS_OUT_OF_RANGE;
- rdlength = get16bit(doh, index);
- index += 2;
- if(dohlen < (index + rdlength))
- return DOH_DNS_OUT_OF_RANGE;
- rc = rdata(doh, dohlen, rdlength, type, index, d);
- if(rc)
- return rc;
- index += rdlength;
- ancount--;
- }
- nscount = get16bit(doh, 8);
- while(nscount) {
- rc = skipqname(doh, dohlen, &index);
- if(rc)
- return rc;
- if(dohlen < (index + 8))
- return DOH_DNS_OUT_OF_RANGE;
- index += 2 + 2 + 4;
- if(dohlen < (index + 2))
- return DOH_DNS_OUT_OF_RANGE;
- rdlength = get16bit(doh, index);
- index += 2;
- if(dohlen < (index + rdlength))
- return DOH_DNS_OUT_OF_RANGE;
- index += rdlength;
- nscount--;
- }
- arcount = get16bit(doh, 10);
- while(arcount) {
- rc = skipqname(doh, dohlen, &index);
- if(rc)
- return rc;
- if(dohlen < (index + 8))
- return DOH_DNS_OUT_OF_RANGE;
- index += 2 + 2 + 4;
- if(dohlen < (index + 2))
- return DOH_DNS_OUT_OF_RANGE;
- rdlength = get16bit(doh, index);
- index += 2;
- if(dohlen < (index + rdlength))
- return DOH_DNS_OUT_OF_RANGE;
- index += rdlength;
- arcount--;
- }
- if(index != dohlen)
- return DOH_DNS_MALFORMAT;
- if((type != DNS_TYPE_NS) && !d->numcname && !d->numaddr)
-
- return DOH_NO_CONTENT;
- return DOH_OK;
- }
- #ifndef CURL_DISABLE_VERBOSE_STRINGS
- static void showdoh(struct Curl_easy *data,
- const struct dohentry *d)
- {
- int i;
- infof(data, "TTL: %u seconds", d->ttl);
- for(i = 0; i < d->numaddr; i++) {
- const struct dohaddr *a = &d->addr[i];
- if(a->type == DNS_TYPE_A) {
- infof(data, "DoH A: %u.%u.%u.%u",
- a->ip.v4[0], a->ip.v4[1],
- a->ip.v4[2], a->ip.v4[3]);
- }
- else if(a->type == DNS_TYPE_AAAA) {
- int j;
- char buffer[128];
- char *ptr;
- size_t len;
- msnprintf(buffer, 128, "DoH AAAA: ");
- ptr = &buffer[10];
- len = 118;
- for(j = 0; j < 16; j += 2) {
- size_t l;
- msnprintf(ptr, len, "%s%02x%02x", j?":":"", d->addr[i].ip.v6[j],
- d->addr[i].ip.v6[j + 1]);
- l = strlen(ptr);
- len -= l;
- ptr += l;
- }
- infof(data, "%s", buffer);
- }
- }
- for(i = 0; i < d->numcname; i++) {
- infof(data, "CNAME: %s", Curl_dyn_ptr(&d->cname[i]));
- }
- }
- #else
- #define showdoh(x,y)
- #endif
- static struct Curl_addrinfo *
- doh2ai(const struct dohentry *de, const char *hostname, int port)
- {
- struct Curl_addrinfo *ai;
- struct Curl_addrinfo *prevai = NULL;
- struct Curl_addrinfo *firstai = NULL;
- struct sockaddr_in *addr;
- #ifdef ENABLE_IPV6
- struct sockaddr_in6 *addr6;
- #endif
- CURLcode result = CURLE_OK;
- int i;
- size_t hostlen = strlen(hostname) + 1;
- if(!de)
-
- return NULL;
- for(i = 0; i < de->numaddr; i++) {
- size_t ss_size;
- CURL_SA_FAMILY_T addrtype;
- if(de->addr[i].type == DNS_TYPE_AAAA) {
- #ifndef ENABLE_IPV6
-
- continue;
- #else
- ss_size = sizeof(struct sockaddr_in6);
- addrtype = AF_INET6;
- #endif
- }
- else {
- ss_size = sizeof(struct sockaddr_in);
- addrtype = AF_INET;
- }
- ai = calloc(1, sizeof(struct Curl_addrinfo) + ss_size + hostlen);
- if(!ai) {
- result = CURLE_OUT_OF_MEMORY;
- break;
- }
- ai->ai_addr = (void *)((char *)ai + sizeof(struct Curl_addrinfo));
- ai->ai_canonname = (void *)((char *)ai->ai_addr + ss_size);
- memcpy(ai->ai_canonname, hostname, hostlen);
- if(!firstai)
-
- firstai = ai;
- if(prevai)
-
- prevai->ai_next = ai;
- ai->ai_family = addrtype;
-
- ai->ai_socktype = SOCK_STREAM;
- ai->ai_addrlen = (curl_socklen_t)ss_size;
-
- switch(ai->ai_family) {
- case AF_INET:
- addr = (void *)ai->ai_addr;
- DEBUGASSERT(sizeof(struct in_addr) == sizeof(de->addr[i].ip.v4));
- memcpy(&addr->sin_addr, &de->addr[i].ip.v4, sizeof(struct in_addr));
- addr->sin_family = addrtype;
- addr->sin_port = htons((unsigned short)port);
- break;
- #ifdef ENABLE_IPV6
- case AF_INET6:
- addr6 = (void *)ai->ai_addr;
- DEBUGASSERT(sizeof(struct in6_addr) == sizeof(de->addr[i].ip.v6));
- memcpy(&addr6->sin6_addr, &de->addr[i].ip.v6, sizeof(struct in6_addr));
- addr6->sin6_family = addrtype;
- addr6->sin6_port = htons((unsigned short)port);
- break;
- #endif
- }
- prevai = ai;
- }
- if(result) {
- Curl_freeaddrinfo(firstai);
- firstai = NULL;
- }
- return firstai;
- }
- #ifndef CURL_DISABLE_VERBOSE_STRINGS
- static const char *type2name(DNStype dnstype)
- {
- return (dnstype == DNS_TYPE_A)?"A":"AAAA";
- }
- #endif
- UNITTEST void de_cleanup(struct dohentry *d)
- {
- int i = 0;
- for(i = 0; i < d->numcname; i++) {
- Curl_dyn_free(&d->cname[i]);
- }
- }
- CURLcode Curl_doh_is_resolved(struct Curl_easy *data,
- struct Curl_dns_entry **dnsp)
- {
- CURLcode result;
- struct dohdata *dohp = data->req.doh;
- *dnsp = NULL;
- if(!dohp)
- return CURLE_OUT_OF_MEMORY;
- if(!dohp->probe[DOH_PROBE_SLOT_IPADDR_V4].easy &&
- !dohp->probe[DOH_PROBE_SLOT_IPADDR_V6].easy) {
- failf(data, "Could not DoH-resolve: %s", data->state.async.hostname);
- return CONN_IS_PROXIED(data->conn)?CURLE_COULDNT_RESOLVE_PROXY:
- CURLE_COULDNT_RESOLVE_HOST;
- }
- else if(!dohp->pending) {
- DOHcode rc[DOH_PROBE_SLOTS] = {
- DOH_OK, DOH_OK
- };
- struct dohentry de;
- int slot;
-
- for(slot = 0; slot < DOH_PROBE_SLOTS; slot++) {
- curl_multi_remove_handle(data->multi, dohp->probe[slot].easy);
- Curl_close(&dohp->probe[slot].easy);
- }
-
- de_init(&de);
- for(slot = 0; slot < DOH_PROBE_SLOTS; slot++) {
- struct dnsprobe *p = &dohp->probe[slot];
- if(!p->dnstype)
- continue;
- rc[slot] = doh_decode(Curl_dyn_uptr(&p->serverdoh),
- Curl_dyn_len(&p->serverdoh),
- p->dnstype,
- &de);
- Curl_dyn_free(&p->serverdoh);
- if(rc[slot]) {
- infof(data, "DoH: %s type %s for %s", doh_strerror(rc[slot]),
- type2name(p->dnstype), dohp->host);
- }
- }
- result = CURLE_COULDNT_RESOLVE_HOST;
- if(!rc[DOH_PROBE_SLOT_IPADDR_V4] || !rc[DOH_PROBE_SLOT_IPADDR_V6]) {
-
- struct Curl_dns_entry *dns;
- struct Curl_addrinfo *ai;
- infof(data, "DoH Host name: %s", dohp->host);
- showdoh(data, &de);
- ai = doh2ai(&de, dohp->host, dohp->port);
- if(!ai) {
- de_cleanup(&de);
- return CURLE_OUT_OF_MEMORY;
- }
- if(data->share)
- Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
- dns = Curl_cache_addr(data, ai, dohp->host, 0, dohp->port);
- if(data->share)
- Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
- if(!dns) {
-
- Curl_freeaddrinfo(ai);
- }
- else {
- data->state.async.dns = dns;
- *dnsp = dns;
- result = CURLE_OK;
- }
- }
-
-
- de_cleanup(&de);
- Curl_safefree(data->req.doh);
- return result;
- }
-
- return CURLE_OK;
- }
- #endif
|