xref: /netbsd-src/lib/libc/net/getaddrinfo.c (revision 6cf6fe02a981b55727c49c3d37b0d8191a98c0ee)
1 /*	$NetBSD: getaddrinfo.c,v 1.106 2013/12/22 02:40:48 christos Exp $	*/
2 /*	$KAME: getaddrinfo.c,v 1.29 2000/08/31 17:26:57 itojun Exp $	*/
3 
4 /*
5  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 3. Neither the name of the project nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  */
32 
33 /*
34  * Issues to be discussed:
35  * - Return values.  There are nonstandard return values defined and used
36  *   in the source code.  This is because RFC2553 is silent about which error
37  *   code must be returned for which situation.
38  * - IPv4 classful (shortened) form.  RFC2553 is silent about it.  XNET 5.2
39  *   says to use inet_aton() to convert IPv4 numeric to binary (alows
40  *   classful form as a result).
41  *   current code - disallow classful form for IPv4 (due to use of inet_pton).
42  * - freeaddrinfo(NULL).  RFC2553 is silent about it.  XNET 5.2 says it is
43  *   invalid.
44  *   current code - SEGV on freeaddrinfo(NULL)
45  * Note:
46  * - The code filters out AFs that are not supported by the kernel,
47  *   when globbing NULL hostname (to loopback, or wildcard).  Is it the right
48  *   thing to do?  What is the relationship with post-RFC2553 AI_ADDRCONFIG
49  *   in ai_flags?
50  * - (post-2553) semantics of AI_ADDRCONFIG itself is too vague.
51  *   (1) what should we do against numeric hostname (2) what should we do
52  *   against NULL hostname (3) what is AI_ADDRCONFIG itself.  AF not ready?
53  *   non-loopback address configured?  global address configured?
54  */
55 
56 #include <sys/cdefs.h>
57 #if defined(LIBC_SCCS) && !defined(lint)
58 __RCSID("$NetBSD: getaddrinfo.c,v 1.106 2013/12/22 02:40:48 christos Exp $");
59 #endif /* LIBC_SCCS and not lint */
60 
61 #include "namespace.h"
62 #include <sys/types.h>
63 #include <sys/param.h>
64 #include <sys/socket.h>
65 #include <net/if.h>
66 #include <netinet/in.h>
67 #include <arpa/inet.h>
68 #include <arpa/nameser.h>
69 #include <assert.h>
70 #include <ctype.h>
71 #include <errno.h>
72 #include <netdb.h>
73 #include <resolv.h>
74 #include <stddef.h>
75 #include <stdio.h>
76 #include <stdlib.h>
77 #include <string.h>
78 #include <unistd.h>
79 #include <ifaddrs.h>
80 
81 #include <syslog.h>
82 #include <stdarg.h>
83 #include <nsswitch.h>
84 
85 #ifdef YP
86 #include <rpc/rpc.h>
87 #include <rpcsvc/yp_prot.h>
88 #include <rpcsvc/ypclnt.h>
89 #endif
90 
91 #include "servent.h"
92 
93 #ifdef __weak_alias
94 __weak_alias(getaddrinfo,_getaddrinfo)
95 __weak_alias(freeaddrinfo,_freeaddrinfo)
96 __weak_alias(gai_strerror,_gai_strerror)
97 #endif
98 
99 #define SUCCESS 0
100 #define ANY 0
101 #define YES 1
102 #define NO  0
103 
104 static const char in_addrany[] = { 0, 0, 0, 0 };
105 static const char in_loopback[] = { 127, 0, 0, 1 };
106 #ifdef INET6
107 static const char in6_addrany[] = {
108 	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
109 };
110 static const char in6_loopback[] = {
111 	0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1
112 };
113 #endif
114 
115 static const struct afd {
116 	int a_af;
117 	int a_addrlen;
118 	int a_socklen;
119 	int a_off;
120 	const char *a_addrany;
121 	const char *a_loopback;
122 	int a_scoped;
123 } afdl [] = {
124 #ifdef INET6
125 	{PF_INET6, sizeof(struct in6_addr),
126 	 sizeof(struct sockaddr_in6),
127 	 offsetof(struct sockaddr_in6, sin6_addr),
128 	 in6_addrany, in6_loopback, 1},
129 #endif
130 	{PF_INET, sizeof(struct in_addr),
131 	 sizeof(struct sockaddr_in),
132 	 offsetof(struct sockaddr_in, sin_addr),
133 	 in_addrany, in_loopback, 0},
134 	{0, 0, 0, 0, NULL, NULL, 0},
135 };
136 
137 struct explore {
138 	int e_af;
139 	int e_socktype;
140 	int e_protocol;
141 	const char *e_protostr;
142 	int e_wild;
143 #define WILD_AF(ex)		((ex)->e_wild & 0x01)
144 #define WILD_SOCKTYPE(ex)	((ex)->e_wild & 0x02)
145 #define WILD_PROTOCOL(ex)	((ex)->e_wild & 0x04)
146 };
147 
148 static const struct explore explore[] = {
149 #if 0
150 	{ PF_LOCAL, 0, ANY, ANY, NULL, 0x01 },
151 #endif
152 #ifdef INET6
153 	{ PF_INET6, SOCK_DGRAM, IPPROTO_UDP, "udp", 0x07 },
154 	{ PF_INET6, SOCK_STREAM, IPPROTO_TCP, "tcp", 0x07 },
155 	{ PF_INET6, SOCK_RAW, ANY, NULL, 0x05 },
156 #endif
157 	{ PF_INET, SOCK_DGRAM, IPPROTO_UDP, "udp", 0x07 },
158 	{ PF_INET, SOCK_STREAM, IPPROTO_TCP, "tcp", 0x07 },
159 	{ PF_INET, SOCK_RAW, ANY, NULL, 0x05 },
160 	{ PF_UNSPEC, SOCK_DGRAM, IPPROTO_UDP, "udp", 0x07 },
161 	{ PF_UNSPEC, SOCK_STREAM, IPPROTO_TCP, "tcp", 0x07 },
162 	{ PF_UNSPEC, SOCK_RAW, ANY, NULL, 0x05 },
163 	{ -1, 0, 0, NULL, 0 },
164 };
165 
166 #ifdef INET6
167 #define PTON_MAX	16
168 #else
169 #define PTON_MAX	4
170 #endif
171 
172 static const ns_src default_dns_files[] = {
173 	{ NSSRC_FILES,	NS_SUCCESS },
174 	{ NSSRC_DNS,	NS_SUCCESS },
175 	{ 0, 0 }
176 };
177 
178 #define MAXPACKET	(64*1024)
179 
180 typedef union {
181 	HEADER hdr;
182 	u_char buf[MAXPACKET];
183 } querybuf;
184 
185 struct res_target {
186 	struct res_target *next;
187 	const char *name;	/* domain name */
188 	int qclass, qtype;	/* class and type of query */
189 	u_char *answer;		/* buffer to put answer */
190 	int anslen;		/* size of answer buffer */
191 	int n;			/* result length */
192 };
193 
194 struct srvinfo {
195        struct srvinfo *next;
196        char name[MAXDNAME];
197        int port, pri, weight;
198 };
199 
200 static int gai_srvok(const char *);
201 static int str2number(const char *);
202 static int explore_fqdn(const struct addrinfo *, const char *,
203     const char *, struct addrinfo **, struct servent_data *);
204 static int explore_null(const struct addrinfo *,
205     const char *, struct addrinfo **, struct servent_data *);
206 static int explore_numeric(const struct addrinfo *, const char *,
207     const char *, struct addrinfo **, const char *, struct servent_data *);
208 static int explore_numeric_scope(const struct addrinfo *, const char *,
209     const char *, struct addrinfo **, struct servent_data *);
210 static int get_canonname(const struct addrinfo *,
211     struct addrinfo *, const char *);
212 static struct addrinfo *get_ai(const struct addrinfo *,
213     const struct afd *, const char *);
214 static int get_portmatch(const struct addrinfo *, const char *,
215     struct servent_data *);
216 static int get_port(const struct addrinfo *, const char *, int,
217     struct servent_data *);
218 static const struct afd *find_afd(int);
219 static int addrconfig(uint64_t *);
220 #ifdef INET6
221 static int ip6_str2scopeid(char *, struct sockaddr_in6 *, u_int32_t *);
222 #endif
223 
224 static struct addrinfo *getanswer(const querybuf *, int, const char *, int,
225     const struct addrinfo *);
226 static void aisort(struct addrinfo *s, res_state res);
227 static struct addrinfo * _dns_query(struct res_target *,
228     const struct addrinfo *, res_state, int);
229 static struct addrinfo * _dns_srv_lookup(const char *, const char *,
230     const struct addrinfo *);
231 static struct addrinfo * _dns_host_lookup(const char *,
232     const struct addrinfo *);
233 static int _dns_getaddrinfo(void *, void *, va_list);
234 static void _sethtent(FILE **);
235 static void _endhtent(FILE **);
236 static struct addrinfo *_gethtent(FILE **, const char *,
237     const struct addrinfo *);
238 static int _files_getaddrinfo(void *, void *, va_list);
239 #ifdef YP
240 static struct addrinfo *_yphostent(char *, const struct addrinfo *);
241 static int _yp_getaddrinfo(void *, void *, va_list);
242 #endif
243 
244 static int res_queryN(const char *, struct res_target *, res_state);
245 static int res_searchN(const char *, struct res_target *, res_state);
246 static int res_querydomainN(const char *, const char *,
247     struct res_target *, res_state);
248 
249 static const char * const ai_errlist[] = {
250 	"Success",
251 	"Address family for hostname not supported",	/* EAI_ADDRFAMILY */
252 	"Temporary failure in name resolution",		/* EAI_AGAIN	  */
253 	"Invalid value for ai_flags",			/* EAI_BADFLAGS	  */
254 	"Non-recoverable failure in name resolution",	/* EAI_FAIL	  */
255 	"ai_family not supported",			/* EAI_FAMILY	  */
256 	"Memory allocation failure",			/* EAI_MEMORY	  */
257 	"No address associated with hostname",		/* EAI_NODATA	  */
258 	"hostname nor servname provided, or not known", /* EAI_NONAME	  */
259 	"servname not supported for ai_socktype",	/* EAI_SERVICE	  */
260 	"ai_socktype not supported",			/* EAI_SOCKTYPE	  */
261 	"System error returned in errno",		/* EAI_SYSTEM	  */
262 	"Invalid value for hints",			/* EAI_BADHINTS	  */
263 	"Resolved protocol is unknown",			/* EAI_PROTOCOL	  */
264 	"Argument buffer overflow",			/* EAI_OVERFLOW	  */
265 	"Unknown error",				/* EAI_MAX	  */
266 };
267 
268 /* XXX macros that make external reference is BAD. */
269 
270 #define GET_AI(ai, afd, addr)					\
271 do {								\
272 	/* external reference: pai, error, and label free */	\
273 	(ai) = get_ai(pai, (afd), (addr));			\
274 	if ((ai) == NULL) {					\
275 		error = EAI_MEMORY;				\
276 		goto free;					\
277 	}							\
278 } while (/*CONSTCOND*/0)
279 
280 #define GET_PORT(ai, serv, svd)					\
281 do {								\
282 	/* external reference: error and label free */		\
283 	error = get_port((ai), (serv), 0, (svd));		\
284 	if (error != 0)						\
285 		goto free;					\
286 } while (/*CONSTCOND*/0)
287 
288 #define GET_CANONNAME(ai, str)					\
289 do {								\
290 	/* external reference: pai, error and label free */	\
291 	error = get_canonname(pai, (ai), (str));		\
292 	if (error != 0)						\
293 		goto free;					\
294 } while (/*CONSTCOND*/0)
295 
296 #define ERR(err)						\
297 do {								\
298 	/* external reference: error, and label bad */		\
299 	error = (err);						\
300 	goto bad;						\
301 	/*NOTREACHED*/						\
302 } while (/*CONSTCOND*/0)
303 
304 #define MATCH_FAMILY(x, y, w)						\
305 	((x) == (y) || (/*CONSTCOND*/(w) && ((x) == PF_UNSPEC ||	\
306 	    (y) == PF_UNSPEC)))
307 #define MATCH(x, y, w)							\
308 	((x) == (y) || (/*CONSTCOND*/(w) && ((x) == ANY || (y) == ANY)))
309 
310 const char *
311 gai_strerror(int ecode)
312 {
313 	if (ecode < 0 || ecode > EAI_MAX)
314 		ecode = EAI_MAX;
315 	return ai_errlist[ecode];
316 }
317 
318 void
319 freeaddrinfo(struct addrinfo *ai)
320 {
321 	struct addrinfo *next;
322 
323 	_DIAGASSERT(ai != NULL);
324 
325 	do {
326 		next = ai->ai_next;
327 		if (ai->ai_canonname)
328 			free(ai->ai_canonname);
329 		/* no need to free(ai->ai_addr) */
330 		free(ai);
331 		ai = next;
332 	} while (ai);
333 }
334 
335 /*
336  * We don't want localization to affect us
337  */
338 #define PERIOD '.'
339 #define hyphenchar(c) ((c) == '-')
340 #define periodchar(c) ((c) == PERIOD)
341 #define underschar(c) ((c) == '_')
342 #define alphachar(c) (((c) >= 'a' && (c) <= 'z') || ((c) >= 'A' && (c) <= 'Z'))
343 #define digitchar(c) ((c) >= '0' && (c) <= '9')
344 
345 #define firstchar(c)  (alphachar(c) || digitchar(c) || underschar(c))
346 #define lastchar(c)   (alphachar(c) || digitchar(c))
347 #define middlechar(c) (lastchar(c) || hyphenchar(c))
348 
349 static int
350 gai_srvok(const char *dn)
351 {
352 	int nch, pch, ch;
353 
354 	for (pch = PERIOD, nch = ch = *dn++; ch != '\0'; pch = ch, ch = nch) {
355 		if (periodchar(ch))
356 			continue;
357 		if (periodchar(pch)) {
358 			if (!firstchar(ch))
359 				return 0;
360 		} else if (periodchar(nch) || nch == '\0') {
361 			if (!lastchar(ch))
362 				return 0;
363 		} else if (!middlechar(ch))
364 			return 0;
365        }
366        return 1;
367 }
368 
369 static in_port_t *
370 getport(struct addrinfo *ai) {
371 	static in_port_t p;
372 
373 	switch (ai->ai_family) {
374 	case AF_INET:
375 		return &((struct sockaddr_in *)(void *)ai->ai_addr)->sin_port;
376 #ifdef INET6
377 	case AF_INET6:
378 		return &((struct sockaddr_in6 *)(void *)ai->ai_addr)->sin6_port;
379 #endif
380 	default:
381 		p = 0;
382 		/* XXX: abort()? */
383 		return &p;
384 	}
385 }
386 
387 static int
388 str2number(const char *p)
389 {
390 	char *ep;
391 	unsigned long v;
392 
393 	_DIAGASSERT(p != NULL);
394 
395 	if (*p == '\0')
396 		return -1;
397 	ep = NULL;
398 	errno = 0;
399 	v = strtoul(p, &ep, 10);
400 	if (errno == 0 && ep && *ep == '\0' && v <= INT_MAX)
401 		return (int)v;
402 	else
403 		return -1;
404 }
405 
406 int
407 getaddrinfo(const char *hostname, const char *servname,
408     const struct addrinfo *hints, struct addrinfo **res)
409 {
410 	struct addrinfo sentinel;
411 	struct addrinfo *cur;
412 	int error = 0;
413 	struct addrinfo ai;
414 	struct addrinfo ai0;
415 	struct addrinfo *pai;
416 	const struct explore *ex;
417 	struct servent_data svd;
418 	uint64_t mask = (uint64_t)~0ULL;
419 
420 	/* hostname is allowed to be NULL */
421 	/* servname is allowed to be NULL */
422 	/* hints is allowed to be NULL */
423 	_DIAGASSERT(res != NULL);
424 
425 	(void)memset(&svd, 0, sizeof(svd));
426 	memset(&sentinel, 0, sizeof(sentinel));
427 	cur = &sentinel;
428 	memset(&ai, 0, sizeof(ai));
429 	pai = &ai;
430 	pai->ai_flags = 0;
431 	pai->ai_family = PF_UNSPEC;
432 	pai->ai_socktype = ANY;
433 	pai->ai_protocol = ANY;
434 	pai->ai_addrlen = 0;
435 	pai->ai_canonname = NULL;
436 	pai->ai_addr = NULL;
437 	pai->ai_next = NULL;
438 
439 	if (hostname == NULL && servname == NULL)
440 		return EAI_NONAME;
441 	if (hints) {
442 		/* error check for hints */
443 		if (hints->ai_addrlen || hints->ai_canonname ||
444 		    hints->ai_addr || hints->ai_next)
445 			ERR(EAI_BADHINTS); /* xxx */
446 		if (hints->ai_flags & ~AI_MASK)
447 			ERR(EAI_BADFLAGS);
448 		switch (hints->ai_family) {
449 		case PF_UNSPEC:
450 		case PF_INET:
451 #ifdef INET6
452 		case PF_INET6:
453 #endif
454 			break;
455 		default:
456 			ERR(EAI_FAMILY);
457 		}
458 		memcpy(pai, hints, sizeof(*pai));
459 
460 		/*
461 		 * if both socktype/protocol are specified, check if they
462 		 * are meaningful combination.
463 		 */
464 		if (pai->ai_socktype != ANY && pai->ai_protocol != ANY) {
465 			for (ex = explore; ex->e_af >= 0; ex++) {
466 				if (pai->ai_family != ex->e_af)
467 					continue;
468 				if (ex->e_socktype == ANY)
469 					continue;
470 				if (ex->e_protocol == ANY)
471 					continue;
472 				if (pai->ai_socktype == ex->e_socktype
473 				 && pai->ai_protocol != ex->e_protocol) {
474 					ERR(EAI_BADHINTS);
475 				}
476 			}
477 		}
478 	}
479 
480 	if ((pai->ai_flags & AI_ADDRCONFIG) != 0 && addrconfig(&mask) == -1)
481 		ERR(EAI_FAIL);
482 
483 	/*
484 	 * check for special cases.  (1) numeric servname is disallowed if
485 	 * socktype/protocol are left unspecified. (2) servname is disallowed
486 	 * for raw and other inet{,6} sockets.
487 	 */
488 	if (MATCH_FAMILY(pai->ai_family, PF_INET, 1)
489 #ifdef PF_INET6
490 	 || MATCH_FAMILY(pai->ai_family, PF_INET6, 1)
491 #endif
492 	    ) {
493 		ai0 = *pai;	/* backup *pai */
494 
495 		if (pai->ai_family == PF_UNSPEC) {
496 #ifdef PF_INET6
497 			pai->ai_family = PF_INET6;
498 #else
499 			pai->ai_family = PF_INET;
500 #endif
501 		}
502 		error = get_portmatch(pai, servname, &svd);
503 		if (error)
504 			goto bad;
505 
506 		*pai = ai0;
507 	}
508 
509 	ai0 = *pai;
510 
511 	/* NULL hostname, or numeric hostname */
512 	for (ex = explore; ex->e_af >= 0; ex++) {
513 		*pai = ai0;
514 
515 		/* ADDRCONFIG check */
516 		if ((((uint64_t)1 << ex->e_af) & mask) == 0)
517 			continue;
518 
519 		/* PF_UNSPEC entries are prepared for DNS queries only */
520 		if (ex->e_af == PF_UNSPEC)
521 			continue;
522 
523 		if (!MATCH_FAMILY(pai->ai_family, ex->e_af, WILD_AF(ex)))
524 			continue;
525 		if (!MATCH(pai->ai_socktype, ex->e_socktype, WILD_SOCKTYPE(ex)))
526 			continue;
527 		if (!MATCH(pai->ai_protocol, ex->e_protocol, WILD_PROTOCOL(ex)))
528 			continue;
529 		if (pai->ai_family == PF_UNSPEC)
530 			pai->ai_family = ex->e_af;
531 		if (pai->ai_socktype == ANY && ex->e_socktype != ANY)
532 			pai->ai_socktype = ex->e_socktype;
533 		if (pai->ai_protocol == ANY && ex->e_protocol != ANY)
534 			pai->ai_protocol = ex->e_protocol;
535 
536 		if (hostname == NULL)
537 			error = explore_null(pai, servname, &cur->ai_next,
538 			    &svd);
539 		else
540 			error = explore_numeric_scope(pai, hostname, servname,
541 			    &cur->ai_next, &svd);
542 
543 		if (error)
544 			goto free;
545 
546 		while (cur->ai_next)
547 			cur = cur->ai_next;
548 	}
549 
550 	/*
551 	 * XXX
552 	 * If numeric representation of AF1 can be interpreted as FQDN
553 	 * representation of AF2, we need to think again about the code below.
554 	 */
555 	if (sentinel.ai_next)
556 		goto good;
557 
558 	if (hostname == NULL)
559 		ERR(EAI_NODATA);
560 	if (pai->ai_flags & AI_NUMERICHOST)
561 		ERR(EAI_NONAME);
562 
563 	/*
564 	 * hostname as alphabetical name.
565 	 * we would like to prefer AF_INET6 than AF_INET, so we'll make a
566 	 * outer loop by AFs.
567 	 */
568 	for (ex = explore; ex->e_af >= 0; ex++) {
569 		*pai = ai0;
570 
571 
572 		/* ADDRCONFIG check */
573 		/* PF_UNSPEC entries are prepared for DNS queries only */
574 		if (ex->e_af != PF_UNSPEC &&
575 		    (((uint64_t)1 << ex->e_af) & mask) == 0)
576 			continue;
577 
578 		/* require exact match for family field */
579 		if (pai->ai_family != ex->e_af)
580 			continue;
581 
582 		if (!MATCH(pai->ai_socktype, ex->e_socktype,
583 				WILD_SOCKTYPE(ex))) {
584 			continue;
585 		}
586 		if (!MATCH(pai->ai_protocol, ex->e_protocol,
587 				WILD_PROTOCOL(ex))) {
588 			continue;
589 		}
590 
591 		if (pai->ai_socktype == ANY && ex->e_socktype != ANY)
592 			pai->ai_socktype = ex->e_socktype;
593 		if (pai->ai_protocol == ANY && ex->e_protocol != ANY)
594 			pai->ai_protocol = ex->e_protocol;
595 
596 		error = explore_fqdn(pai, hostname, servname, &cur->ai_next,
597 		    &svd);
598 
599 		while (cur && cur->ai_next)
600 			cur = cur->ai_next;
601 	}
602 
603 	/* XXX */
604 	if (sentinel.ai_next)
605 		error = 0;
606 
607 	if (error)
608 		goto free;
609 
610 	if (sentinel.ai_next) {
611  good:
612 		endservent_r(&svd);
613 		*res = sentinel.ai_next;
614 		return SUCCESS;
615 	} else
616 		error = EAI_FAIL;
617  free:
618  bad:
619 	endservent_r(&svd);
620 	if (sentinel.ai_next)
621 		freeaddrinfo(sentinel.ai_next);
622 	*res = NULL;
623 	return error;
624 }
625 
626 /*
627  * FQDN hostname, DNS lookup
628  */
629 static int
630 explore_fqdn(const struct addrinfo *pai, const char *hostname,
631     const char *servname, struct addrinfo **res, struct servent_data *svd)
632 {
633 	struct addrinfo *result;
634 	struct addrinfo *cur;
635 	int error = 0;
636 	static const ns_dtab dtab[] = {
637 		NS_FILES_CB(_files_getaddrinfo, NULL)
638 		{ NSSRC_DNS, _dns_getaddrinfo, NULL },	/* force -DHESIOD */
639 		NS_NIS_CB(_yp_getaddrinfo, NULL)
640 		NS_NULL_CB
641 	};
642 
643 	_DIAGASSERT(pai != NULL);
644 	/* hostname may be NULL */
645 	/* servname may be NULL */
646 	_DIAGASSERT(res != NULL);
647 
648 	result = NULL;
649 
650 	/*
651 	 * if the servname does not match socktype/protocol, ignore it.
652 	 */
653 	if (get_portmatch(pai, servname, svd) != 0)
654 		return 0;
655 
656 	switch (nsdispatch(&result, dtab, NSDB_HOSTS, "getaddrinfo",
657 	    default_dns_files, hostname, pai, servname)) {
658 	case NS_TRYAGAIN:
659 		error = EAI_AGAIN;
660 		goto free;
661 	case NS_UNAVAIL:
662 		error = EAI_FAIL;
663 		goto free;
664 	case NS_NOTFOUND:
665 		error = EAI_NODATA;
666 		goto free;
667 	case NS_SUCCESS:
668 		error = 0;
669 		for (cur = result; cur; cur = cur->ai_next) {
670 			/* Check for already filled port. */
671 			if (*getport(cur))
672 				continue;
673 			GET_PORT(cur, servname, svd);
674 			/* canonname should be filled already */
675 		}
676 		break;
677 	}
678 
679 	*res = result;
680 
681 	return 0;
682 
683 free:
684 	if (result)
685 		freeaddrinfo(result);
686 	return error;
687 }
688 
689 /*
690  * hostname == NULL.
691  * passive socket -> anyaddr (0.0.0.0 or ::)
692  * non-passive socket -> localhost (127.0.0.1 or ::1)
693  */
694 static int
695 explore_null(const struct addrinfo *pai, const char *servname,
696     struct addrinfo **res, struct servent_data *svd)
697 {
698 	int s;
699 	const struct afd *afd;
700 	struct addrinfo *cur;
701 	struct addrinfo sentinel;
702 	int error;
703 
704 	_DIAGASSERT(pai != NULL);
705 	/* servname may be NULL */
706 	_DIAGASSERT(res != NULL);
707 
708 	*res = NULL;
709 	sentinel.ai_next = NULL;
710 	cur = &sentinel;
711 
712 	/*
713 	 * filter out AFs that are not supported by the kernel
714 	 * XXX errno?
715 	 */
716 	s = socket(pai->ai_family, SOCK_DGRAM, 0);
717 	if (s < 0) {
718 		if (errno != EMFILE)
719 			return 0;
720 	} else
721 		close(s);
722 
723 	/*
724 	 * if the servname does not match socktype/protocol, ignore it.
725 	 */
726 	if (get_portmatch(pai, servname, svd) != 0)
727 		return 0;
728 
729 	afd = find_afd(pai->ai_family);
730 	if (afd == NULL)
731 		return 0;
732 
733 	if (pai->ai_flags & AI_PASSIVE) {
734 		GET_AI(cur->ai_next, afd, afd->a_addrany);
735 		/* xxx meaningless?
736 		 * GET_CANONNAME(cur->ai_next, "anyaddr");
737 		 */
738 		GET_PORT(cur->ai_next, servname, svd);
739 	} else {
740 		GET_AI(cur->ai_next, afd, afd->a_loopback);
741 		/* xxx meaningless?
742 		 * GET_CANONNAME(cur->ai_next, "localhost");
743 		 */
744 		GET_PORT(cur->ai_next, servname, svd);
745 	}
746 	cur = cur->ai_next;
747 
748 	*res = sentinel.ai_next;
749 	return 0;
750 
751 free:
752 	if (sentinel.ai_next)
753 		freeaddrinfo(sentinel.ai_next);
754 	return error;
755 }
756 
757 /*
758  * numeric hostname
759  */
760 static int
761 explore_numeric(const struct addrinfo *pai, const char *hostname,
762     const char *servname, struct addrinfo **res, const char *canonname,
763     struct servent_data *svd)
764 {
765 	const struct afd *afd;
766 	struct addrinfo *cur;
767 	struct addrinfo sentinel;
768 	int error;
769 	char pton[PTON_MAX];
770 
771 	_DIAGASSERT(pai != NULL);
772 	/* hostname may be NULL */
773 	/* servname may be NULL */
774 	_DIAGASSERT(res != NULL);
775 
776 	*res = NULL;
777 	sentinel.ai_next = NULL;
778 	cur = &sentinel;
779 
780 	/*
781 	 * if the servname does not match socktype/protocol, ignore it.
782 	 */
783 	if (get_portmatch(pai, servname, svd) != 0)
784 		return 0;
785 
786 	afd = find_afd(pai->ai_family);
787 	if (afd == NULL)
788 		return 0;
789 
790 	switch (afd->a_af) {
791 #if 0 /*X/Open spec*/
792 	case AF_INET:
793 		if (inet_aton(hostname, (struct in_addr *)pton) == 1) {
794 			if (pai->ai_family == afd->a_af ||
795 			    pai->ai_family == PF_UNSPEC /*?*/) {
796 				GET_AI(cur->ai_next, afd, pton);
797 				GET_PORT(cur->ai_next, servname, svd);
798 				if ((pai->ai_flags & AI_CANONNAME)) {
799 					/*
800 					 * Set the numeric address itself as
801 					 * the canonical name, based on a
802 					 * clarification in rfc2553bis-03.
803 					 */
804 					GET_CANONNAME(cur->ai_next, canonname);
805 				}
806 				while (cur && cur->ai_next)
807 					cur = cur->ai_next;
808 			} else
809 				ERR(EAI_FAMILY);	/*xxx*/
810 		}
811 		break;
812 #endif
813 	default:
814 		if (inet_pton(afd->a_af, hostname, pton) == 1) {
815 			if (pai->ai_family == afd->a_af ||
816 			    pai->ai_family == PF_UNSPEC /*?*/) {
817 				GET_AI(cur->ai_next, afd, pton);
818 				GET_PORT(cur->ai_next, servname, svd);
819 				if ((pai->ai_flags & AI_CANONNAME)) {
820 					/*
821 					 * Set the numeric address itself as
822 					 * the canonical name, based on a
823 					 * clarification in rfc2553bis-03.
824 					 */
825 					GET_CANONNAME(cur->ai_next, canonname);
826 				}
827 				while (cur->ai_next)
828 					cur = cur->ai_next;
829 			} else
830 				ERR(EAI_FAMILY);	/*xxx*/
831 		}
832 		break;
833 	}
834 
835 	*res = sentinel.ai_next;
836 	return 0;
837 
838 free:
839 bad:
840 	if (sentinel.ai_next)
841 		freeaddrinfo(sentinel.ai_next);
842 	return error;
843 }
844 
845 /*
846  * numeric hostname with scope
847  */
848 static int
849 explore_numeric_scope(const struct addrinfo *pai, const char *hostname,
850     const char *servname, struct addrinfo **res, struct servent_data *svd)
851 {
852 #if !defined(SCOPE_DELIMITER) || !defined(INET6)
853 	return explore_numeric(pai, hostname, servname, res, hostname, svd);
854 #else
855 	const struct afd *afd;
856 	struct addrinfo *cur;
857 	int error;
858 	char *cp, *hostname2 = NULL, *scope, *addr;
859 	struct sockaddr_in6 *sin6;
860 
861 	_DIAGASSERT(pai != NULL);
862 	/* hostname may be NULL */
863 	/* servname may be NULL */
864 	_DIAGASSERT(res != NULL);
865 
866 	/*
867 	 * if the servname does not match socktype/protocol, ignore it.
868 	 */
869 	if (get_portmatch(pai, servname, svd) != 0)
870 		return 0;
871 
872 	afd = find_afd(pai->ai_family);
873 	if (afd == NULL)
874 		return 0;
875 
876 	if (!afd->a_scoped)
877 		return explore_numeric(pai, hostname, servname, res, hostname,
878 		    svd);
879 
880 	cp = strchr(hostname, SCOPE_DELIMITER);
881 	if (cp == NULL)
882 		return explore_numeric(pai, hostname, servname, res, hostname,
883 		    svd);
884 
885 	/*
886 	 * Handle special case of <scoped_address><delimiter><scope id>
887 	 */
888 	hostname2 = strdup(hostname);
889 	if (hostname2 == NULL)
890 		return EAI_MEMORY;
891 	/* terminate at the delimiter */
892 	hostname2[cp - hostname] = '\0';
893 	addr = hostname2;
894 	scope = cp + 1;
895 
896 	error = explore_numeric(pai, addr, servname, res, hostname, svd);
897 	if (error == 0) {
898 		u_int32_t scopeid;
899 
900 		for (cur = *res; cur; cur = cur->ai_next) {
901 			if (cur->ai_family != AF_INET6)
902 				continue;
903 			sin6 = (struct sockaddr_in6 *)(void *)cur->ai_addr;
904 			if (ip6_str2scopeid(scope, sin6, &scopeid) == -1) {
905 				free(hostname2);
906 				return(EAI_NODATA); /* XXX: is return OK? */
907 			}
908 			sin6->sin6_scope_id = scopeid;
909 		}
910 	}
911 
912 	free(hostname2);
913 
914 	return error;
915 #endif
916 }
917 
918 static int
919 get_canonname(const struct addrinfo *pai, struct addrinfo *ai, const char *str)
920 {
921 
922 	_DIAGASSERT(pai != NULL);
923 	_DIAGASSERT(ai != NULL);
924 	_DIAGASSERT(str != NULL);
925 
926 	if ((pai->ai_flags & AI_CANONNAME) != 0) {
927 		ai->ai_canonname = strdup(str);
928 		if (ai->ai_canonname == NULL)
929 			return EAI_MEMORY;
930 	}
931 	return 0;
932 }
933 
934 struct addrinfo *
935 allocaddrinfo(socklen_t addrlen)
936 {
937 	struct addrinfo *ai;
938 
939 	ai = calloc(sizeof(struct addrinfo) + addrlen, 1);
940 	if (ai) {
941 		ai->ai_addr = (void *)(ai+1);
942 		ai->ai_addrlen = ai->ai_addr->sa_len = addrlen;
943 	}
944 
945 	return ai;
946 }
947 
948 static struct addrinfo *
949 get_ai(const struct addrinfo *pai, const struct afd *afd, const char *addr)
950 {
951 	char *p;
952 	struct addrinfo *ai;
953 	struct sockaddr *save;
954 
955 	_DIAGASSERT(pai != NULL);
956 	_DIAGASSERT(afd != NULL);
957 	_DIAGASSERT(addr != NULL);
958 
959 	ai = allocaddrinfo((socklen_t)afd->a_socklen);
960 	if (ai == NULL)
961 		return NULL;
962 
963 	save = ai->ai_addr;
964 	memcpy(ai, pai, sizeof(struct addrinfo));
965 
966 	/* since we just overwrote all of ai, we have
967 	   to restore ai_addr and ai_addrlen */
968 	ai->ai_addr = save;
969 	ai->ai_addrlen = (socklen_t)afd->a_socklen;
970 
971 	ai->ai_addr->sa_family = ai->ai_family = afd->a_af;
972 	p = (char *)(void *)(ai->ai_addr);
973 	memcpy(p + afd->a_off, addr, (size_t)afd->a_addrlen);
974 	return ai;
975 }
976 
977 static int
978 get_portmatch(const struct addrinfo *ai, const char *servname,
979     struct servent_data *svd)
980 {
981 
982 	_DIAGASSERT(ai != NULL);
983 	/* servname may be NULL */
984 
985 	return get_port(ai, servname, 1, svd);
986 }
987 
988 static int
989 get_port(const struct addrinfo *ai, const char *servname, int matchonly,
990     struct servent_data *svd)
991 {
992 	const char *proto;
993 	struct servent *sp;
994 	int port;
995 	int allownumeric;
996 
997 	_DIAGASSERT(ai != NULL);
998 	/* servname may be NULL */
999 
1000 	if (servname == NULL)
1001 		return 0;
1002 	switch (ai->ai_family) {
1003 	case AF_INET:
1004 #ifdef AF_INET6
1005 	case AF_INET6:
1006 #endif
1007 		break;
1008 	default:
1009 		return 0;
1010 	}
1011 
1012 	switch (ai->ai_socktype) {
1013 	case SOCK_RAW:
1014 		return EAI_SERVICE;
1015 	case SOCK_DGRAM:
1016 	case SOCK_STREAM:
1017 		allownumeric = 1;
1018 		break;
1019 	case ANY:
1020 		/*
1021 		 * This was 0.	It is now 1 so that queries specifying
1022 		 * a NULL hint, or hint without socktype (but, hopefully,
1023 		 * with protocol) and numeric address actually work.
1024 		 */
1025 		allownumeric = 1;
1026 		break;
1027 	default:
1028 		return EAI_SOCKTYPE;
1029 	}
1030 
1031 	port = str2number(servname);
1032 	if (port >= 0) {
1033 		if (!allownumeric)
1034 			return EAI_SERVICE;
1035 		if (port < 0 || port > 65535)
1036 			return EAI_SERVICE;
1037 		port = htons(port);
1038 	} else {
1039 		struct servent sv;
1040 		if (ai->ai_flags & AI_NUMERICSERV)
1041 			return EAI_NONAME;
1042 
1043 		switch (ai->ai_socktype) {
1044 		case SOCK_DGRAM:
1045 			proto = "udp";
1046 			break;
1047 		case SOCK_STREAM:
1048 			proto = "tcp";
1049 			break;
1050 		default:
1051 			proto = NULL;
1052 			break;
1053 		}
1054 
1055 		sp = getservbyname_r(servname, proto, &sv, svd);
1056 		if (sp == NULL)
1057 			return EAI_SERVICE;
1058 		port = sp->s_port;
1059 	}
1060 
1061 	if (!matchonly)
1062 		*getport(__UNCONST(ai)) = port;
1063 	return 0;
1064 }
1065 
1066 static const struct afd *
1067 find_afd(int af)
1068 {
1069 	const struct afd *afd;
1070 
1071 	if (af == PF_UNSPEC)
1072 		return NULL;
1073 	for (afd = afdl; afd->a_af; afd++) {
1074 		if (afd->a_af == af)
1075 			return afd;
1076 	}
1077 	return NULL;
1078 }
1079 
1080 /*
1081  * AI_ADDRCONFIG check: Build a mask containing a bit set for each address
1082  * family configured in the system.
1083  *
1084  */
1085 static int
1086 addrconfig(uint64_t *mask)
1087 {
1088 	struct ifaddrs *ifaddrs, *ifa;
1089 
1090 	if (getifaddrs(&ifaddrs) == -1)
1091 		return -1;
1092 
1093 	*mask = 0;
1094 	for (ifa = ifaddrs; ifa != NULL; ifa = ifa->ifa_next)
1095 		if (ifa->ifa_addr && (ifa->ifa_flags & IFF_UP)) {
1096 			_DIAGASSERT(ifa->ifa_addr->sa_family < 64);
1097 			*mask |= (uint64_t)1 << ifa->ifa_addr->sa_family;
1098 		}
1099 
1100 	freeifaddrs(ifaddrs);
1101 	return 0;
1102 }
1103 
1104 #ifdef INET6
1105 /* convert a string to a scope identifier. XXX: IPv6 specific */
1106 static int
1107 ip6_str2scopeid(char *scope, struct sockaddr_in6 *sin6, u_int32_t *scopeid)
1108 {
1109 	u_long lscopeid;
1110 	struct in6_addr *a6;
1111 	char *ep;
1112 
1113 	_DIAGASSERT(scope != NULL);
1114 	_DIAGASSERT(sin6 != NULL);
1115 	_DIAGASSERT(scopeid != NULL);
1116 
1117 	a6 = &sin6->sin6_addr;
1118 
1119 	/* empty scopeid portion is invalid */
1120 	if (*scope == '\0')
1121 		return -1;
1122 
1123 	if (IN6_IS_ADDR_LINKLOCAL(a6) || IN6_IS_ADDR_MC_LINKLOCAL(a6)) {
1124 		/*
1125 		 * We currently assume a one-to-one mapping between links
1126 		 * and interfaces, so we simply use interface indices for
1127 		 * like-local scopes.
1128 		 */
1129 		*scopeid = if_nametoindex(scope);
1130 		if (*scopeid == 0)
1131 			goto trynumeric;
1132 		return 0;
1133 	}
1134 
1135 	/* still unclear about literal, allow numeric only - placeholder */
1136 	if (IN6_IS_ADDR_SITELOCAL(a6) || IN6_IS_ADDR_MC_SITELOCAL(a6))
1137 		goto trynumeric;
1138 	if (IN6_IS_ADDR_MC_ORGLOCAL(a6))
1139 		goto trynumeric;
1140 	else
1141 		goto trynumeric;	/* global */
1142 
1143 	/* try to convert to a numeric id as a last resort */
1144   trynumeric:
1145 	errno = 0;
1146 	lscopeid = strtoul(scope, &ep, 10);
1147 	*scopeid = (u_int32_t)(lscopeid & 0xffffffffUL);
1148 	if (errno == 0 && ep && *ep == '\0' && *scopeid == lscopeid)
1149 		return 0;
1150 	else
1151 		return -1;
1152 }
1153 #endif
1154 
1155 /* code duplicate with gethnamaddr.c */
1156 
1157 static const char AskedForGot[] =
1158 	"gethostby*.getanswer: asked for \"%s\", got \"%s\"";
1159 
1160 static struct addrinfo *
1161 getanswer(const querybuf *answer, int anslen, const char *qname, int qtype,
1162     const struct addrinfo *pai)
1163 {
1164 	struct addrinfo sentinel, *cur;
1165 	struct addrinfo ai, *aip;
1166 	const struct afd *afd;
1167 	char *canonname;
1168 	const HEADER *hp;
1169 	const u_char *cp;
1170 	int n;
1171 	const u_char *eom;
1172 	char *bp, *ep;
1173 	int type, class, ancount, qdcount;
1174 	int haveanswer, had_error;
1175 	char tbuf[MAXDNAME];
1176 	int (*name_ok) (const char *);
1177 	char hostbuf[8*1024];
1178 	int port, pri, weight;
1179 	struct srvinfo *srvlist, *srv, *csrv;
1180 
1181 	_DIAGASSERT(answer != NULL);
1182 	_DIAGASSERT(qname != NULL);
1183 	_DIAGASSERT(pai != NULL);
1184 
1185 	memset(&sentinel, 0, sizeof(sentinel));
1186 	cur = &sentinel;
1187 
1188 	canonname = NULL;
1189 	eom = answer->buf + anslen;
1190 	switch (qtype) {
1191 	case T_A:
1192 	case T_AAAA:
1193 	case T_ANY:	/*use T_ANY only for T_A/T_AAAA lookup*/
1194 		name_ok = res_hnok;
1195 		break;
1196 	case T_SRV:
1197 		name_ok = gai_srvok;
1198 		break;
1199 	default:
1200 		return NULL;	/* XXX should be abort(); */
1201 	}
1202 	/*
1203 	 * find first satisfactory answer
1204 	 */
1205 	hp = &answer->hdr;
1206 	ancount = ntohs(hp->ancount);
1207 	qdcount = ntohs(hp->qdcount);
1208 	bp = hostbuf;
1209 	ep = hostbuf + sizeof hostbuf;
1210 	cp = answer->buf + HFIXEDSZ;
1211 	if (qdcount != 1) {
1212 		h_errno = NO_RECOVERY;
1213 		return (NULL);
1214 	}
1215 	n = dn_expand(answer->buf, eom, cp, bp, (int)(ep - bp));
1216 	if ((n < 0) || !(*name_ok)(bp)) {
1217 		h_errno = NO_RECOVERY;
1218 		return (NULL);
1219 	}
1220 	cp += n + QFIXEDSZ;
1221 	if (qtype == T_A || qtype == T_AAAA || qtype == T_ANY) {
1222 		/* res_send() has already verified that the query name is the
1223 		 * same as the one we sent; this just gets the expanded name
1224 		 * (i.e., with the succeeding search-domain tacked on).
1225 		 */
1226 		n = (int)strlen(bp) + 1;		/* for the \0 */
1227 		if (n >= MAXHOSTNAMELEN) {
1228 			h_errno = NO_RECOVERY;
1229 			return (NULL);
1230 		}
1231 		canonname = bp;
1232 		bp += n;
1233 		/* The qname can be abbreviated, but h_name is now absolute. */
1234 		qname = canonname;
1235 	}
1236 	haveanswer = 0;
1237 	had_error = 0;
1238 	srvlist = NULL;
1239 	while (ancount-- > 0 && cp < eom && !had_error) {
1240 		n = dn_expand(answer->buf, eom, cp, bp, (int)(ep - bp));
1241 		if ((n < 0) || !(*name_ok)(bp)) {
1242 			had_error++;
1243 			continue;
1244 		}
1245 		cp += n;			/* name */
1246 		type = _getshort(cp);
1247 		cp += INT16SZ;			/* type */
1248 		class = _getshort(cp);
1249 		cp += INT16SZ + INT32SZ;	/* class, TTL */
1250 		n = _getshort(cp);
1251 		cp += INT16SZ;			/* len */
1252 		if (class != C_IN) {
1253 			/* XXX - debug? syslog? */
1254 			cp += n;
1255 			continue;		/* XXX - had_error++ ? */
1256 		}
1257 		if ((qtype == T_A || qtype == T_AAAA || qtype == T_ANY) &&
1258 		    type == T_CNAME) {
1259 			n = dn_expand(answer->buf, eom, cp, tbuf, (int)sizeof tbuf);
1260 			if ((n < 0) || !(*name_ok)(tbuf)) {
1261 				had_error++;
1262 				continue;
1263 			}
1264 			cp += n;
1265 			/* Get canonical name. */
1266 			n = (int)strlen(tbuf) + 1;	/* for the \0 */
1267 			if (n > ep - bp || n >= MAXHOSTNAMELEN) {
1268 				had_error++;
1269 				continue;
1270 			}
1271 			strlcpy(bp, tbuf, (size_t)(ep - bp));
1272 			canonname = bp;
1273 			bp += n;
1274 			continue;
1275 		}
1276 		if (qtype == T_ANY) {
1277 			if (!(type == T_A || type == T_AAAA)) {
1278 				cp += n;
1279 				continue;
1280 			}
1281 		} else if (type != qtype) {
1282 			if (type != T_KEY && type != T_SIG) {
1283 				struct syslog_data sd = SYSLOG_DATA_INIT;
1284 				syslog_r(LOG_NOTICE|LOG_AUTH, &sd,
1285 	       "gethostby*.getanswer: asked for \"%s %s %s\", got type \"%s\"",
1286 				       qname, p_class(C_IN), p_type(qtype),
1287 				       p_type(type));
1288 			}
1289 			cp += n;
1290 			continue;		/* XXX - had_error++ ? */
1291 		}
1292 		switch (type) {
1293 		case T_A:
1294 		case T_AAAA:
1295 			if (strcasecmp(canonname, bp) != 0) {
1296 				struct syslog_data sd = SYSLOG_DATA_INIT;
1297 				syslog_r(LOG_NOTICE|LOG_AUTH, &sd,
1298 				       AskedForGot, canonname, bp);
1299 				cp += n;
1300 				continue;	/* XXX - had_error++ ? */
1301 			}
1302 			if (type == T_A && n != INADDRSZ) {
1303 				cp += n;
1304 				continue;
1305 			}
1306 			if (type == T_AAAA && n != IN6ADDRSZ) {
1307 				cp += n;
1308 				continue;
1309 			}
1310 			if (type == T_AAAA) {
1311 				struct in6_addr in6;
1312 				memcpy(&in6, cp, IN6ADDRSZ);
1313 				if (IN6_IS_ADDR_V4MAPPED(&in6)) {
1314 					cp += n;
1315 					continue;
1316 				}
1317 			}
1318 			if (!haveanswer) {
1319 				int nn;
1320 
1321 				canonname = bp;
1322 				nn = (int)strlen(bp) + 1;	/* for the \0 */
1323 				bp += nn;
1324 			}
1325 
1326 			/* don't overwrite pai */
1327 			ai = *pai;
1328 			ai.ai_family = (type == T_A) ? AF_INET : AF_INET6;
1329 			afd = find_afd(ai.ai_family);
1330 			if (afd == NULL) {
1331 				cp += n;
1332 				continue;
1333 			}
1334 			cur->ai_next = get_ai(&ai, afd, (const char *)cp);
1335 			if (cur->ai_next == NULL)
1336 				had_error++;
1337 			while (cur && cur->ai_next)
1338 				cur = cur->ai_next;
1339 			cp += n;
1340 			break;
1341 		case T_SRV:
1342 			/* Add to SRV list. Insertion sort on priority. */
1343 			pri = _getshort(cp);
1344 			cp += INT16SZ;
1345 			weight = _getshort(cp);
1346 			cp += INT16SZ;
1347 			port = _getshort(cp);
1348 			cp += INT16SZ;
1349 			n = dn_expand(answer->buf, eom, cp, tbuf,
1350 			    (int)sizeof(tbuf));
1351 			if ((n < 0) || !res_hnok(tbuf)) {
1352 				had_error++;
1353 				continue;
1354 			}
1355 			cp += n;
1356 			if (strlen(tbuf) + 1 >= MAXDNAME) {
1357 				had_error++;
1358 				continue;
1359 			}
1360 			srv = malloc(sizeof(*srv));
1361 			if (!srv) {
1362 				had_error++;
1363 				continue;
1364 			}
1365 			strlcpy(srv->name, tbuf, sizeof(srv->name));
1366 			srv->pri = pri;
1367 			srv->weight = weight;
1368 			srv->port = port;
1369 			/* Weight 0 is sorted before other weights. */
1370 			if (!srvlist
1371 			    || srv->pri < srvlist->pri
1372 			    || (srv->pri == srvlist->pri &&
1373 			    (!srv->weight || srvlist->weight))) {
1374 				srv->next = srvlist;
1375 				srvlist = srv;
1376 			} else {
1377 				for (csrv = srvlist;
1378 				    csrv->next && csrv->next->pri <= srv->pri;
1379 				    csrv = csrv->next) {
1380 					if (csrv->next->pri == srv->pri
1381 					    && (!srv->weight ||
1382 					    csrv->next->weight))
1383 						break;
1384 				}
1385 				srv->next = csrv->next;
1386 				csrv->next = srv;
1387 			}
1388 			continue; /* Don't add to haveanswer yet. */
1389 		default:
1390 			abort();
1391 		}
1392 		if (!had_error)
1393 			haveanswer++;
1394 	}
1395 
1396 	if (srvlist) {
1397 		res_state res;
1398 		/*
1399 		 * Check for explicit rejection.
1400 		 */
1401 		if (!srvlist->next && !srvlist->name[0]) {
1402 			free(srvlist);
1403 			h_errno = HOST_NOT_FOUND;
1404 			return NULL;
1405 		}
1406 		res = __res_get_state();
1407 		if (res == NULL) {
1408 			while (srvlist != NULL) {
1409 				srv = srvlist;
1410 				srvlist = srvlist->next;
1411 				free(srv);
1412 			}
1413 			h_errno = NETDB_INTERNAL;
1414 			return NULL;
1415 		}
1416 
1417 		while (srvlist) {
1418 			struct res_target q, q2;
1419 
1420 			srv = srvlist;
1421 			srvlist = srvlist->next;
1422 
1423 			/*
1424 			 * Since res_* doesn't give the additional
1425 			 * section, we always look up.
1426 			 */
1427 			memset(&q, 0, sizeof(q));
1428 			memset(&q2, 0, sizeof(q2));
1429 
1430 			q.name = srv->name;
1431 			q.qclass = C_IN;
1432 			q.qtype = T_AAAA;
1433 			q.next = &q2;
1434 			q2.name = srv->name;
1435 			q2.qclass = C_IN;
1436 			q2.qtype = T_A;
1437 
1438 			aip = _dns_query(&q, pai, res, 0);
1439 
1440 			if (aip != NULL) {
1441 				cur->ai_next = aip;
1442 				while (cur && cur->ai_next) {
1443 					cur = cur->ai_next;
1444 					*getport(cur) = htons(srv->port);
1445 					haveanswer++;
1446 				}
1447 			}
1448 			free(srv);
1449 		}
1450 		__res_put_state(res);
1451 	}
1452 	if (haveanswer) {
1453 		if (!sentinel.ai_next->ai_canonname)
1454 		       (void)get_canonname(pai, sentinel.ai_next,
1455 			   canonname ? canonname : qname);
1456 		h_errno = NETDB_SUCCESS;
1457 		return sentinel.ai_next;
1458 	}
1459 
1460 	h_errno = NO_RECOVERY;
1461 	return NULL;
1462 }
1463 
1464 #define SORTEDADDR(p)	(((struct sockaddr_in *)(void *)(p->ai_next->ai_addr))->sin_addr.s_addr)
1465 #define SORTMATCH(p, s) ((SORTEDADDR(p) & (s).mask) == (s).addr.s_addr)
1466 
1467 static void
1468 aisort(struct addrinfo *s, res_state res)
1469 {
1470 	struct addrinfo head, *t, *p;
1471 	int i;
1472 
1473 	head.ai_next = NULL;
1474 	t = &head;
1475 
1476 	for (i = 0; i < res->nsort; i++) {
1477 		p = s;
1478 		while (p->ai_next) {
1479 			if ((p->ai_next->ai_family != AF_INET)
1480 			|| SORTMATCH(p, res->sort_list[i])) {
1481 				t->ai_next = p->ai_next;
1482 				t = t->ai_next;
1483 				p->ai_next = p->ai_next->ai_next;
1484 			} else {
1485 				p = p->ai_next;
1486 			}
1487 		}
1488 	}
1489 
1490 	/* add rest of list and reset s to the new list*/
1491 	t->ai_next = s->ai_next;
1492 	s->ai_next = head.ai_next;
1493 }
1494 
1495 static struct addrinfo *
1496 _dns_query(struct res_target *q, const struct addrinfo *pai,
1497     res_state res, int dosearch)
1498 {
1499 	struct res_target *q2 = q->next;
1500  	querybuf *buf, *buf2;
1501 	struct addrinfo sentinel, *cur, *ai;
1502 
1503 #ifdef DNS_DEBUG
1504 	struct res_target *iter;
1505 	for (iter = q; iter; iter = iter->next)
1506 		printf("Query type %d for %s\n", iter->qtype, iter->name);
1507 #endif
1508 
1509  	buf = malloc(sizeof(*buf));
1510  	if (buf == NULL) {
1511  		h_errno = NETDB_INTERNAL;
1512 		return NULL;
1513  	}
1514  	buf2 = malloc(sizeof(*buf2));
1515  	if (buf2 == NULL) {
1516  		free(buf);
1517  		h_errno = NETDB_INTERNAL;
1518 		return NULL;
1519 	}
1520 
1521 	memset(&sentinel, 0, sizeof(sentinel));
1522 	cur = &sentinel;
1523 
1524 	q->answer = buf->buf;
1525 	q->anslen = sizeof(buf->buf);
1526 	if (q2) {
1527 		q2->answer = buf2->buf;
1528 		q2->anslen = sizeof(buf2->buf);
1529 	}
1530 
1531 	if (dosearch) {
1532 		if (res_searchN(q->name, q, res) < 0)
1533 			goto out;
1534 	} else {
1535 		if (res_queryN(q->name, q, res) < 0)
1536 			goto out;
1537 	}
1538 
1539 	ai = getanswer(buf, q->n, q->name, q->qtype, pai);
1540 	if (ai) {
1541 		cur->ai_next = ai;
1542 		while (cur && cur->ai_next)
1543 			cur = cur->ai_next;
1544 	}
1545 	if (q2) {
1546 		ai = getanswer(buf2, q2->n, q2->name, q2->qtype, pai);
1547 		if (ai)
1548 			cur->ai_next = ai;
1549  	}
1550 	free(buf);
1551 	free(buf2);
1552 	return sentinel.ai_next;
1553 out:
1554 	free(buf);
1555 	free(buf2);
1556 	return NULL;
1557 }
1558 
1559 /*ARGSUSED*/
1560 static struct addrinfo *
1561 _dns_srv_lookup(const char *name, const char *servname,
1562     const struct addrinfo *pai)
1563 {
1564 	static const char * const srvprotos[] = { "tcp", "udp" };
1565 	static const int srvnottype[] = { SOCK_DGRAM, SOCK_STREAM };
1566 	static const int nsrvprotos = 2;
1567 	struct addrinfo sentinel, *cur, *ai;
1568 	struct servent *serv, sv;
1569 	struct servent_data svd;
1570 	struct res_target q;
1571 	res_state res;
1572 	char *tname;
1573 	int i;
1574 
1575 	res = __res_get_state();
1576 	if (res == NULL)
1577 		return NULL;
1578 
1579 	memset(&svd, 0, sizeof(svd));
1580 	memset(&sentinel, 0, sizeof(sentinel));
1581 	cur = &sentinel;
1582 
1583 	/*
1584 	 * Iterate over supported SRV protocols.
1585 	 * (currently UDP and TCP only)
1586 	 */
1587 	for (i = 0; i < nsrvprotos; i++) {
1588 		/*
1589 		 * Check that the caller didn't specify a hint
1590 		 * which precludes this protocol.
1591 		 */
1592 		if (pai->ai_socktype == srvnottype[i])
1593 			continue;
1594 		/*
1595 		 * If the caller specified a port,
1596 		 * then lookup the database for the
1597 		 * official service name.
1598 		 */
1599 		serv = getservbyname_r(servname, srvprotos[i], &sv, &svd);
1600 		if (serv == NULL)
1601 			continue;
1602 
1603 		/*
1604 		 * Construct service DNS name.
1605 		 */
1606 		if (asprintf(&tname, "_%s._%s.%s", serv->s_name, serv->s_proto,
1607 		    name) < 0)
1608 			continue;
1609 
1610 		memset(&q, 0, sizeof(q));
1611 		q.name = tname;
1612 		q.qclass = C_IN;
1613 		q.qtype = T_SRV;
1614 
1615 		/*
1616 		 * Do SRV query.
1617 		 */
1618 		ai = _dns_query(&q, pai, res, 1);
1619 		if (ai) {
1620 			cur->ai_next = ai;
1621 			while (cur && cur->ai_next)
1622 				cur = cur->ai_next;
1623 		}
1624 		free(tname);
1625 	}
1626 
1627 	if (res->nsort)
1628 		aisort(&sentinel, res);
1629 
1630 	__res_put_state(res);
1631 
1632 	return sentinel.ai_next;
1633 }
1634 
1635 /*ARGSUSED*/
1636 static struct addrinfo *
1637 _dns_host_lookup(const char *name, const struct addrinfo *pai)
1638 {
1639 	struct res_target q, q2;
1640 	struct addrinfo sentinel, *ai;
1641 	res_state res;
1642 
1643 	res = __res_get_state();
1644 	if (res == NULL)
1645 		return NULL;
1646 
1647 	memset(&q, 0, sizeof(q2));
1648 	memset(&q2, 0, sizeof(q2));
1649 
1650 	switch (pai->ai_family) {
1651 	case AF_UNSPEC:
1652 		/* prefer IPv6 */
1653 		q.name = name;
1654 		q.qclass = C_IN;
1655 		q.qtype = T_AAAA;
1656 		q.next = &q2;
1657 		q2.name = name;
1658 		q2.qclass = C_IN;
1659 		q2.qtype = T_A;
1660 		break;
1661 	case AF_INET:
1662 		q.name = name;
1663 		q.qclass = C_IN;
1664 		q.qtype = T_A;
1665 		break;
1666 	case AF_INET6:
1667 		q.name = name;
1668 		q.qclass = C_IN;
1669 		q.qtype = T_AAAA;
1670 		break;
1671 	default:
1672 		__res_put_state(res);
1673 		h_errno = NETDB_INTERNAL;
1674 		return NULL;
1675 	}
1676 
1677 	ai = _dns_query(&q, pai, res, 1);
1678 
1679 	memset(&sentinel, 0, sizeof(sentinel));
1680 	sentinel.ai_next = ai;
1681 
1682 	if (ai != NULL && res->nsort)
1683 		aisort(&sentinel, res);
1684 
1685 	__res_put_state(res);
1686 
1687 	return sentinel.ai_next;
1688 }
1689 
1690 /*ARGSUSED*/
1691 static int
1692 _dns_getaddrinfo(void *rv, void *cb_data, va_list ap)
1693 {
1694 	struct addrinfo *ai = NULL;
1695 	const char *name, *servname;
1696 	const struct addrinfo *pai;
1697 
1698 	name = va_arg(ap, char *);
1699 	pai = va_arg(ap, const struct addrinfo *);
1700 	servname = va_arg(ap, char *);
1701 
1702 	/*
1703 	 * Try doing SRV lookup on service first.
1704 	 */
1705 	if (servname
1706 #ifdef AI_SRV
1707 	    && (pai->ai_flags & AI_SRV)
1708 #endif
1709 	    && !(pai->ai_flags & AI_NUMERICSERV)
1710 	    && str2number(servname) == -1) {
1711 
1712 #ifdef DNS_DEBUG
1713 		printf("%s: try SRV lookup\n", __func__);
1714 #endif
1715 		ai = _dns_srv_lookup(name, servname, pai);
1716 	}
1717 
1718 	/*
1719 	 * Do lookup on name.
1720 	 */
1721 	if (ai == NULL) {
1722 
1723 #ifdef DNS_DEBUG
1724 		printf("%s: try HOST lookup\n", __func__);
1725 #endif
1726 		ai = _dns_host_lookup(name, pai);
1727 
1728 		if (ai == NULL) {
1729 			switch (h_errno) {
1730 			case HOST_NOT_FOUND:
1731 				return NS_NOTFOUND;
1732 			case TRY_AGAIN:
1733 				return NS_TRYAGAIN;
1734 			default:
1735 				return NS_UNAVAIL;
1736 			}
1737 		}
1738 	}
1739 
1740 	*((struct addrinfo **)rv) = ai;
1741 	return NS_SUCCESS;
1742 }
1743 
1744 static void
1745 _sethtent(FILE **hostf)
1746 {
1747 
1748 	if (!*hostf)
1749 		*hostf = fopen(_PATH_HOSTS, "re");
1750 	else
1751 		rewind(*hostf);
1752 }
1753 
1754 static void
1755 _endhtent(FILE **hostf)
1756 {
1757 
1758 	if (*hostf) {
1759 		(void) fclose(*hostf);
1760 		*hostf = NULL;
1761 	}
1762 }
1763 
1764 static struct addrinfo *
1765 _gethtent(FILE **hostf, const char *name, const struct addrinfo *pai)
1766 {
1767 	char *p;
1768 	char *cp, *tname, *cname;
1769 	struct addrinfo hints, *res0, *res;
1770 	int error;
1771 	const char *addr;
1772 	char hostbuf[8*1024];
1773 
1774 	_DIAGASSERT(name != NULL);
1775 	_DIAGASSERT(pai != NULL);
1776 
1777 	if (!*hostf && !(*hostf = fopen(_PATH_HOSTS, "re")))
1778 		return (NULL);
1779  again:
1780 	if (!(p = fgets(hostbuf, (int)sizeof hostbuf, *hostf)))
1781 		return (NULL);
1782 	if (*p == '#')
1783 		goto again;
1784 	if (!(cp = strpbrk(p, "#\n")))
1785 		goto again;
1786 	*cp = '\0';
1787 	if (!(cp = strpbrk(p, " \t")))
1788 		goto again;
1789 	*cp++ = '\0';
1790 	addr = p;
1791 	/* if this is not something we're looking for, skip it. */
1792 	cname = NULL;
1793 	while (cp && *cp) {
1794 		if (*cp == ' ' || *cp == '\t') {
1795 			cp++;
1796 			continue;
1797 		}
1798 		if (!cname)
1799 			cname = cp;
1800 		tname = cp;
1801 		if ((cp = strpbrk(cp, " \t")) != NULL)
1802 			*cp++ = '\0';
1803 		if (strcasecmp(name, tname) == 0)
1804 			goto found;
1805 	}
1806 	goto again;
1807 
1808 found:
1809 	hints = *pai;
1810 	hints.ai_flags = AI_NUMERICHOST;
1811 	error = getaddrinfo(addr, NULL, &hints, &res0);
1812 	if (error)
1813 		goto again;
1814 	for (res = res0; res; res = res->ai_next) {
1815 		/* cover it up */
1816 		res->ai_flags = pai->ai_flags;
1817 
1818 		if (pai->ai_flags & AI_CANONNAME) {
1819 			if (get_canonname(pai, res, cname) != 0) {
1820 				freeaddrinfo(res0);
1821 				goto again;
1822 			}
1823 		}
1824 	}
1825 	return res0;
1826 }
1827 
1828 /*ARGSUSED*/
1829 static int
1830 _files_getaddrinfo(void *rv, void *cb_data, va_list ap)
1831 {
1832 	const char *name;
1833 	const struct addrinfo *pai;
1834 	struct addrinfo sentinel, *cur;
1835 	struct addrinfo *p;
1836 #ifndef _REENTRANT
1837 	static
1838 #endif
1839 	FILE *hostf = NULL;
1840 
1841 	name = va_arg(ap, char *);
1842 	pai = va_arg(ap, const struct addrinfo *);
1843 
1844 	memset(&sentinel, 0, sizeof(sentinel));
1845 	cur = &sentinel;
1846 
1847 	_sethtent(&hostf);
1848 	while ((p = _gethtent(&hostf, name, pai)) != NULL) {
1849 		cur->ai_next = p;
1850 		while (cur && cur->ai_next)
1851 			cur = cur->ai_next;
1852 	}
1853 	_endhtent(&hostf);
1854 
1855 	*((struct addrinfo **)rv) = sentinel.ai_next;
1856 	if (sentinel.ai_next == NULL)
1857 		return NS_NOTFOUND;
1858 	return NS_SUCCESS;
1859 }
1860 
1861 #ifdef YP
1862 /*ARGSUSED*/
1863 static struct addrinfo *
1864 _yphostent(char *line, const struct addrinfo *pai)
1865 {
1866 	struct addrinfo sentinel, *cur;
1867 	struct addrinfo hints, *res, *res0;
1868 	int error;
1869 	char *p;
1870 	const char *addr, *canonname;
1871 	char *nextline;
1872 	char *cp;
1873 
1874 	_DIAGASSERT(line != NULL);
1875 	_DIAGASSERT(pai != NULL);
1876 
1877 	p = line;
1878 	addr = canonname = NULL;
1879 
1880 	memset(&sentinel, 0, sizeof(sentinel));
1881 	cur = &sentinel;
1882 
1883 nextline:
1884 	/* terminate line */
1885 	cp = strchr(p, '\n');
1886 	if (cp) {
1887 		*cp++ = '\0';
1888 		nextline = cp;
1889 	} else
1890 		nextline = NULL;
1891 
1892 	cp = strpbrk(p, " \t");
1893 	if (cp == NULL) {
1894 		if (canonname == NULL)
1895 			return (NULL);
1896 		else
1897 			goto done;
1898 	}
1899 	*cp++ = '\0';
1900 
1901 	addr = p;
1902 
1903 	while (cp && *cp) {
1904 		if (*cp == ' ' || *cp == '\t') {
1905 			cp++;
1906 			continue;
1907 		}
1908 		if (!canonname)
1909 			canonname = cp;
1910 		if ((cp = strpbrk(cp, " \t")) != NULL)
1911 			*cp++ = '\0';
1912 	}
1913 
1914 	hints = *pai;
1915 	hints.ai_flags = AI_NUMERICHOST;
1916 	error = getaddrinfo(addr, NULL, &hints, &res0);
1917 	if (error == 0) {
1918 		for (res = res0; res; res = res->ai_next) {
1919 			/* cover it up */
1920 			res->ai_flags = pai->ai_flags;
1921 
1922 			if (pai->ai_flags & AI_CANONNAME)
1923 				(void)get_canonname(pai, res, canonname);
1924 		}
1925 	} else
1926 		res0 = NULL;
1927 	if (res0) {
1928 		cur->ai_next = res0;
1929 		while (cur->ai_next)
1930 			cur = cur->ai_next;
1931 	}
1932 
1933 	if (nextline) {
1934 		p = nextline;
1935 		goto nextline;
1936 	}
1937 
1938 done:
1939 	return sentinel.ai_next;
1940 }
1941 
1942 /*ARGSUSED*/
1943 static int
1944 _yp_getaddrinfo(void *rv, void *cb_data, va_list ap)
1945 {
1946 	struct addrinfo sentinel, *cur;
1947 	struct addrinfo *ai = NULL;
1948 	char *ypbuf;
1949 	int ypbuflen, r;
1950 	const char *name;
1951 	const struct addrinfo *pai;
1952 	char *ypdomain;
1953 
1954 	if (_yp_check(&ypdomain) == 0)
1955 		return NS_UNAVAIL;
1956 
1957 	name = va_arg(ap, char *);
1958 	pai = va_arg(ap, const struct addrinfo *);
1959 
1960 	memset(&sentinel, 0, sizeof(sentinel));
1961 	cur = &sentinel;
1962 
1963 	/* hosts.byname is only for IPv4 (Solaris8) */
1964 	if (pai->ai_family == PF_UNSPEC || pai->ai_family == PF_INET) {
1965 		r = yp_match(ypdomain, "hosts.byname", name,
1966 			(int)strlen(name), &ypbuf, &ypbuflen);
1967 		if (r == 0) {
1968 			struct addrinfo ai4;
1969 
1970 			ai4 = *pai;
1971 			ai4.ai_family = AF_INET;
1972 			ai = _yphostent(ypbuf, &ai4);
1973 			if (ai) {
1974 				cur->ai_next = ai;
1975 				while (cur && cur->ai_next)
1976 					cur = cur->ai_next;
1977 			}
1978 		}
1979 		free(ypbuf);
1980 	}
1981 
1982 	/* ipnodes.byname can hold both IPv4/v6 */
1983 	r = yp_match(ypdomain, "ipnodes.byname", name,
1984 		(int)strlen(name), &ypbuf, &ypbuflen);
1985 	if (r == 0) {
1986 		ai = _yphostent(ypbuf, pai);
1987 		if (ai)
1988 			cur->ai_next = ai;
1989 		free(ypbuf);
1990 	}
1991 
1992 	if (sentinel.ai_next == NULL) {
1993 		h_errno = HOST_NOT_FOUND;
1994 		return NS_NOTFOUND;
1995 	}
1996 	*((struct addrinfo **)rv) = sentinel.ai_next;
1997 	return NS_SUCCESS;
1998 }
1999 #endif
2000 
2001 /* resolver logic */
2002 
2003 /*
2004  * Formulate a normal query, send, and await answer.
2005  * Returned answer is placed in supplied buffer "answer".
2006  * Perform preliminary check of answer, returning success only
2007  * if no error is indicated and the answer count is nonzero.
2008  * Return the size of the response on success, -1 on error.
2009  * Error number is left in h_errno.
2010  *
2011  * Caller must parse answer and determine whether it answers the question.
2012  */
2013 static int
2014 res_queryN(const char *name, /* domain name */ struct res_target *target,
2015     res_state res)
2016 {
2017 	u_char buf[MAXPACKET];
2018 	HEADER *hp;
2019 	int n;
2020 	struct res_target *t;
2021 	int rcode;
2022 	int ancount;
2023 
2024 	_DIAGASSERT(name != NULL);
2025 	/* XXX: target may be NULL??? */
2026 
2027 	rcode = NOERROR;
2028 	ancount = 0;
2029 
2030 	for (t = target; t; t = t->next) {
2031 		int class, type;
2032 		u_char *answer;
2033 		int anslen;
2034 
2035 		hp = (HEADER *)(void *)t->answer;
2036 		hp->rcode = NOERROR;	/* default */
2037 
2038 		/* make it easier... */
2039 		class = t->qclass;
2040 		type = t->qtype;
2041 		answer = t->answer;
2042 		anslen = t->anslen;
2043 #ifdef DEBUG
2044 		if (res->options & RES_DEBUG)
2045 			printf(";; res_nquery(%s, %d, %d)\n", name, class, type);
2046 #endif
2047 
2048 		n = res_nmkquery(res, QUERY, name, class, type, NULL, 0, NULL,
2049 		    buf, (int)sizeof(buf));
2050 #ifdef RES_USE_EDNS0
2051 		if (n > 0 && (res->options & RES_USE_EDNS0) != 0)
2052 			n = res_nopt(res, n, buf, (int)sizeof(buf), anslen);
2053 #endif
2054 		if (n <= 0) {
2055 #ifdef DEBUG
2056 			if (res->options & RES_DEBUG)
2057 				printf(";; res_nquery: mkquery failed\n");
2058 #endif
2059 			h_errno = NO_RECOVERY;
2060 			return n;
2061 		}
2062 		n = res_nsend(res, buf, n, answer, anslen);
2063 #if 0
2064 		if (n < 0) {
2065 #ifdef DEBUG
2066 			if (res->options & RES_DEBUG)
2067 				printf(";; res_query: send error\n");
2068 #endif
2069 			h_errno = TRY_AGAIN;
2070 			return n;
2071 		}
2072 #endif
2073 
2074 		if (n < 0 || hp->rcode != NOERROR || ntohs(hp->ancount) == 0) {
2075 			rcode = hp->rcode;	/* record most recent error */
2076 #ifdef DEBUG
2077 			if (res->options & RES_DEBUG)
2078 				printf(";; rcode = %u, ancount=%u\n", hp->rcode,
2079 				    ntohs(hp->ancount));
2080 #endif
2081 			continue;
2082 		}
2083 
2084 		ancount += ntohs(hp->ancount);
2085 
2086 		t->n = n;
2087 	}
2088 
2089 	if (ancount == 0) {
2090 		switch (rcode) {
2091 		case NXDOMAIN:
2092 			h_errno = HOST_NOT_FOUND;
2093 			break;
2094 		case SERVFAIL:
2095 			h_errno = TRY_AGAIN;
2096 			break;
2097 		case NOERROR:
2098 			h_errno = NO_DATA;
2099 			break;
2100 		case FORMERR:
2101 		case NOTIMP:
2102 		case REFUSED:
2103 		default:
2104 			h_errno = NO_RECOVERY;
2105 			break;
2106 		}
2107 		return -1;
2108 	}
2109 	return ancount;
2110 }
2111 
2112 /*
2113  * Formulate a normal query, send, and retrieve answer in supplied buffer.
2114  * Return the size of the response on success, -1 on error.
2115  * If enabled, implement search rules until answer or unrecoverable failure
2116  * is detected.	 Error code, if any, is left in h_errno.
2117  */
2118 static int
2119 res_searchN(const char *name, struct res_target *target, res_state res)
2120 {
2121 	const char *cp, * const *domain;
2122 	HEADER *hp;
2123 	u_int dots;
2124 	char buf[MAXHOSTNAMELEN];
2125 	int trailing_dot, ret, saved_herrno;
2126 	int got_nodata = 0, got_servfail = 0, tried_as_is = 0;
2127 
2128 	_DIAGASSERT(name != NULL);
2129 	_DIAGASSERT(target != NULL);
2130 
2131 	hp = (HEADER *)(void *)target->answer;	/*XXX*/
2132 
2133 	errno = 0;
2134 	h_errno = HOST_NOT_FOUND;	/* default, if we never query */
2135 	dots = 0;
2136 	for (cp = name; *cp; cp++)
2137 		dots += (*cp == '.');
2138 	trailing_dot = 0;
2139 	if (cp > name && *--cp == '.')
2140 		trailing_dot++;
2141 
2142 	/*
2143 	 * if there aren't any dots, it could be a user-level alias
2144 	 */
2145 	if (!dots && (cp = res_hostalias(res, name, buf, sizeof(buf))) != NULL) {
2146 		ret = res_queryN(cp, target, res);
2147 		return ret;
2148 	}
2149 
2150 	/*
2151 	 * If there are dots in the name already, let's just give it a try
2152 	 * 'as is'.  The threshold can be set with the "ndots" option.
2153 	 */
2154 	saved_herrno = -1;
2155 	if (dots >= res->ndots) {
2156 		ret = res_querydomainN(name, NULL, target, res);
2157 		if (ret > 0)
2158 			return (ret);
2159 		saved_herrno = h_errno;
2160 		tried_as_is++;
2161 	}
2162 
2163 	/*
2164 	 * We do at least one level of search if
2165 	 *	- there is no dot and RES_DEFNAME is set, or
2166 	 *	- there is at least one dot, there is no trailing dot,
2167 	 *	  and RES_DNSRCH is set.
2168 	 */
2169 	if ((!dots && (res->options & RES_DEFNAMES)) ||
2170 	    (dots && !trailing_dot && (res->options & RES_DNSRCH))) {
2171 		int done = 0;
2172 
2173 		for (domain = (const char * const *)res->dnsrch;
2174 		   *domain && !done;
2175 		   domain++) {
2176 
2177 			ret = res_querydomainN(name, *domain, target, res);
2178 			if (ret > 0)
2179 				return ret;
2180 
2181 			/*
2182 			 * If no server present, give up.
2183 			 * If name isn't found in this domain,
2184 			 * keep trying higher domains in the search list
2185 			 * (if that's enabled).
2186 			 * On a NO_DATA error, keep trying, otherwise
2187 			 * a wildcard entry of another type could keep us
2188 			 * from finding this entry higher in the domain.
2189 			 * If we get some other error (negative answer or
2190 			 * server failure), then stop searching up,
2191 			 * but try the input name below in case it's
2192 			 * fully-qualified.
2193 			 */
2194 			if (errno == ECONNREFUSED) {
2195 				h_errno = TRY_AGAIN;
2196 				return -1;
2197 			}
2198 
2199 			switch (h_errno) {
2200 			case NO_DATA:
2201 				got_nodata++;
2202 				/* FALLTHROUGH */
2203 			case HOST_NOT_FOUND:
2204 				/* keep trying */
2205 				break;
2206 			case TRY_AGAIN:
2207 				if (hp->rcode == SERVFAIL) {
2208 					/* try next search element, if any */
2209 					got_servfail++;
2210 					break;
2211 				}
2212 				/* FALLTHROUGH */
2213 			default:
2214 				/* anything else implies that we're done */
2215 				done++;
2216 			}
2217 			/*
2218 			 * if we got here for some reason other than DNSRCH,
2219 			 * we only wanted one iteration of the loop, so stop.
2220 			 */
2221 			if (!(res->options & RES_DNSRCH))
2222 				done++;
2223 		}
2224 	}
2225 
2226 	/*
2227 	 * if we have not already tried the name "as is", do that now.
2228 	 * note that we do this regardless of how many dots were in the
2229 	 * name or whether it ends with a dot.
2230 	 */
2231 	if (!tried_as_is) {
2232 		ret = res_querydomainN(name, NULL, target, res);
2233 		if (ret > 0)
2234 			return ret;
2235 	}
2236 
2237 	/*
2238 	 * if we got here, we didn't satisfy the search.
2239 	 * if we did an initial full query, return that query's h_errno
2240 	 * (note that we wouldn't be here if that query had succeeded).
2241 	 * else if we ever got a nodata, send that back as the reason.
2242 	 * else send back meaningless h_errno, that being the one from
2243 	 * the last DNSRCH we did.
2244 	 */
2245 	if (saved_herrno != -1)
2246 		h_errno = saved_herrno;
2247 	else if (got_nodata)
2248 		h_errno = NO_DATA;
2249 	else if (got_servfail)
2250 		h_errno = TRY_AGAIN;
2251 	return -1;
2252 }
2253 
2254 /*
2255  * Perform a call on res_query on the concatenation of name and domain,
2256  * removing a trailing dot from name if domain is NULL.
2257  */
2258 static int
2259 res_querydomainN(const char *name, const char *domain,
2260     struct res_target *target, res_state res)
2261 {
2262 	char nbuf[MAXDNAME];
2263 	const char *longname = nbuf;
2264 	size_t n, d;
2265 
2266 	_DIAGASSERT(name != NULL);
2267 	/* XXX: target may be NULL??? */
2268 
2269 #ifdef DEBUG
2270 	if (res->options & RES_DEBUG)
2271 		printf(";; res_querydomain(%s, %s)\n",
2272 			name, domain?domain:"<Nil>");
2273 #endif
2274 	if (domain == NULL) {
2275 		/*
2276 		 * Check for trailing '.';
2277 		 * copy without '.' if present.
2278 		 */
2279 		n = strlen(name);
2280 		if (n + 1 > sizeof(nbuf)) {
2281 			h_errno = NO_RECOVERY;
2282 			return -1;
2283 		}
2284 		if (n > 0 && name[--n] == '.') {
2285 			strncpy(nbuf, name, n);
2286 			nbuf[n] = '\0';
2287 		} else
2288 			longname = name;
2289 	} else {
2290 		n = strlen(name);
2291 		d = strlen(domain);
2292 		if (n + 1 + d + 1 > sizeof(nbuf)) {
2293 			h_errno = NO_RECOVERY;
2294 			return -1;
2295 		}
2296 		snprintf(nbuf, sizeof(nbuf), "%s.%s", name, domain);
2297 	}
2298 	return res_queryN(longname, target, res);
2299 }
2300 
2301 #ifdef TEST
2302 int
2303 main(int argc, char *argv[]) {
2304 	struct addrinfo *ai, *sai;
2305 	int i, e;
2306 	char buf[1024];
2307 
2308 	for (i = 1; i < argc; i++) {
2309 		if ((e = getaddrinfo(argv[i], NULL, NULL, &sai)) != 0)
2310 			warnx("%s: %s", argv[i], gai_strerror(e));
2311 		for (ai = sai; ai; ai = ai->ai_next) {
2312 			sockaddr_snprintf(buf, sizeof(buf), "%a", ai->ai_addr);
2313              		printf("flags=0x%x family=%d socktype=%d protocol=%d "
2314 			    "addrlen=%zu addr=%s canonname=%s next=%p\n",
2315 			    ai->ai_flags,
2316              		    ai->ai_family,
2317              		    ai->ai_socktype,
2318              		    ai->ai_protocol,
2319              		    (size_t)ai->ai_addrlen,
2320 			    buf,
2321 			    ai->ai_canonname,
2322 			    ai->ai_next);
2323 		}
2324 		if (sai)
2325 			freeaddrinfo(sai);
2326 	}
2327 	return 0;
2328 }
2329 #endif
2330