interesting
/
getdns
mirror of https://github.com/getdnsapi/getdns.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Evaluate DNSSEC only with stub resolution

This commit is contained in:
Willem Toorop 2015-06-29 23:48:46 +02:00
parent 8d5ac3afde
commit 3cd9caa704
1 changed files with 19 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
src/dnssec.c
View File

@ -1360,7 +1360,7 @@ static void check_chain_complete(chain_head *chain)
getdns_list *val_chain_list; getdns_list *val_chain_list;
getdns_dict *response_dict; getdns_dict *response_dict;
#ifdef STUB_NATIVE_DNSSEC #ifdef STUB_NATIVE_DNSSEC
uint8_t tas_spc[4096], *tas; uint8_t tas_spc[4096], *tas = tas_spc;
size_t tas_sz; size_t tas_sz;
gldns_buffer tas_buf; gldns_buffer tas_buf;
rrset_iter tas_iter; rrset_iter tas_iter;
@ -1375,19 +1375,25 @@ static void check_chain_complete(chain_head *chain)
context = dnsreq->context; context = dnsreq->context;
#ifdef STUB_NATIVE_DNSSEC #ifdef STUB_NATIVE_DNSSEC
gldns_buffer_init_frm_data(&tas_buf, (tas = tas_spc), sizeof(tas_spc)); if (chain->netreq->unbound_id == -1) {
_getdns_list2wire(&tas_buf, context->dnssec_trust_anchors); gldns_buffer_init_frm_data(&tas_buf, tas, sizeof(tas_spc));
if ((tas_sz = gldns_buffer_position(&tas_buf)) > sizeof(tas_spc)) { _getdns_list2wire(&tas_buf, context->dnssec_trust_anchors);
if ((tas = GETDNS_XMALLOC(dnsreq->my_mf, uint8_t, tas_sz))) { if ((tas_sz = gldns_buffer_position(&tas_buf))
gldns_buffer_init_frm_data(&tas_buf, tas, tas_sz); > sizeof(tas_spc)) {
_getdns_list2wire(&tas_buf, context->dnssec_trust_anchors); if ((tas = GETDNS_XMALLOC(
} dnsreq->my_mf, uint8_t, tas_sz))) {
} else if (! GLDNS_ANCOUNT(tas)) gldns_buffer_init_frm_data(
tas = NULL; &tas_buf, tas, tas_sz);
_getdns_list2wire(
&tas_buf, context->dnssec_trust_anchors);
}
} else if (! GLDNS_ANCOUNT(tas))
tas = NULL;
if (tas) if (tas)
chain_validate_dnssec(chain, chain_validate_dnssec(chain,
rrset_iter_init(&tas_iter, tas, tas_sz)); rrset_iter_init(&tas_iter, tas, tas_sz));
}
#endif #endif
val_chain_list = dnsreq->dnssec_return_validation_chain val_chain_list = dnsreq->dnssec_return_validation_chain