Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
D
Dnsmasq
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Locked Files
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Security & Compliance
Security & Compliance
Dependency List
License Compliance
Packages
Packages
List
Container Registry
Analytics
Analytics
CI / CD
Code Review
Insights
Issues
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
nanahira
Dnsmasq
Commits
32b826e2
Commit
32b826e2
authored
May 02, 2012
by
Giovanni Bajo
Committed by
Simon Kelley
Aug 20, 2013
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Genericize verifyalg_add_data_domain() (rename to convert_domain_to_wire()).
parent
0937692d
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
18 additions
and
11 deletions
+18
-11
src/dnssec.c
src/dnssec.c
+18
-11
No files found.
src/dnssec.c
View file @
32b826e2
...
@@ -411,28 +411,28 @@ static char *strchrnul(char *str, char ch)
...
@@ -411,28 +411,28 @@ static char *strchrnul(char *str, char ch)
return
str
;
return
str
;
}
}
/* Pass a domain name through a verification hash function.
/* Convert a domain name to wire format */
static
int
convert_domain_to_wire
(
char
*
name
,
unsigned
char
*
out
)
We must pass domain names in DNS wire format, but uncompressed.
This means that we cannot directly use raw data from the original
message since it might be compressed. */
static
void
verifyalg_add_data_domain
(
VerifyAlgCtx
*
alg
,
char
*
name
)
{
{
unsigned
char
len
;
char
*
p
;
unsigned
char
len
;
unsigned
char
*
start
=
out
;
char
*
p
;
do
do
{
{
p
=
strchrnul
(
name
,
'.'
);
p
=
strchrnul
(
name
,
'.'
);
if
((
len
=
p
-
name
))
if
((
len
=
p
-
name
))
{
{
alg
->
vtbl
->
add_data
(
alg
,
&
len
,
1
);
*
out
++
=
len
;
alg
->
vtbl
->
add_data
(
alg
,
name
,
len
);
memcpy
(
out
,
name
,
len
);
out
+=
len
;
}
}
name
=
p
+
1
;
name
=
p
+
1
;
}
}
while
(
*
p
);
while
(
*
p
);
alg
->
vtbl
->
add_data
(
alg
,
"
\0
"
,
1
);
*
out
++
=
'\0'
;
return
out
-
start
;
}
}
...
@@ -561,13 +561,20 @@ static int begin_rrsig_validation(struct dns_header *header, size_t pktlen,
...
@@ -561,13 +561,20 @@ static int begin_rrsig_validation(struct dns_header *header, size_t pktlen,
sigclass
=
htons
(
sigclass
);
sigclass
=
htons
(
sigclass
);
sigttl
=
htonl
(
sigttl
);
sigttl
=
htonl
(
sigttl
);
/* TODO: we shouldn't need to convert this to wire here. Best solution would be:
- Use process_name() instead of extract_name() everywhere in dnssec code
- Convert from wire format to representation format only for querying/storing cache
*/
unsigned
char
owner_wire
[
MAXCDNAME
];
int
owner_wire_len
=
convert_domain_to_wire
(
owner
,
owner_wire
);
alg
->
vtbl
->
begin_data
(
alg
);
alg
->
vtbl
->
begin_data
(
alg
);
alg
->
vtbl
->
add_data
(
alg
,
sigrdata
,
18
+
signer_name_rdlen
);
alg
->
vtbl
->
add_data
(
alg
,
sigrdata
,
18
+
signer_name_rdlen
);
for
(
i
=
0
;
i
<
rrsetidx
;
++
i
)
for
(
i
=
0
;
i
<
rrsetidx
;
++
i
)
{
{
p
=
(
unsigned
char
*
)(
rrset
[
i
]);
p
=
(
unsigned
char
*
)(
rrset
[
i
]);
verifyalg_add_data_domain
(
alg
,
owner
);
alg
->
vtbl
->
add_data
(
alg
,
owner_wire
,
owner_wire_len
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigtype
,
2
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigtype
,
2
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigclass
,
2
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigclass
,
2
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigttl
,
4
);
alg
->
vtbl
->
add_data
(
alg
,
&
sigttl
,
4
);
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment