[apple/libresolv.git] / dns.c

/*
 * Copyright (c) 1999-2007 Apple Inc. All rights reserved.
 *
 * @APPLE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this
 * file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_LICENSE_HEADER_END@
 */

#include "dns.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <time.h>
#include <netdb.h>
#include <stdarg.h>
#include <sys/stat.h>
#include <sys/dir.h>
#include <errno.h>
#include <ifaddrs.h>
#include <net/if.h>
#include <pthread.h>
#include <netinet/in.h>
#include <arpa/nameser.h>
#include <resolv.h>
#include <fcntl.h>
#include <notify.h>
#include <dnsinfo.h>
#include "dns_private.h"
#include "res_private.h"

#define INET_NTOP_AF_INET_OFFSET 4
#define INET_NTOP_AF_INET6_OFFSET 8

#define SEARCH_COUNT_INIT -1

#define DNS_RESOLVER_DIR "/etc/resolver"

#define NOTIFY_DIR_NAME "com.apple.system.dns.resolver.dir"
#define DNS_DELAY_NAME "com.apple.system.dns.delay"

#define DNS_DELAY_INTERVAL 4

#define DNS_PRIVATE_HANDLE_TYPE_SUPER 0
#define DNS_PRIVATE_HANDLE_TYPE_PLAIN 1

#define MDNS_MIN_TTL 2

extern uint32_t notify_monitor_file(int token, const char *name, int flags);

extern void res_client_close(res_state res);
extern res_state res_state_new();
extern int res_nquery_soa_min(res_state statp, const char *name, int class, int type, u_char *answer, int anslen, struct sockaddr *from, int *fromlen, int *min);
extern int res_nsearch_2(res_state statp, const char *name, int class, int type, u_char *answer, int anslen, struct sockaddr *from, uint32_t *fromlen);
extern int __res_nsearch_list_2(res_state statp, const char *name,      int class, int type,  u_char *answer, int anslen, struct sockaddr *from, uint32_t *fromlen, int nsearch, char **search);

extern char *res_next_word(char **p);
extern res_state res_build_start(res_state res);
extern int res_build(res_state res, uint16_t port, uint32_t *nsrch, char *key, char *val);
extern int res_build_sortlist(res_state res, struct in_addr addr, struct in_addr mask);

static void
_pdns_set_name(pdns_handle_t *pdns, const char *name)
{
        int n;

        if (pdns == NULL) return;
        if (name == NULL) return;

        /* only set the name once */
        if (pdns->name != NULL) return;

        /* strip trailing dots */
        n = strlen(name) - 1;
        while ((n >= 0) && (name[n] == '.')) n--;

        if (n < 0) return;

        n++;
        pdns->name = calloc(n + 1, sizeof(char));
        if (pdns->name == NULL) return;
        memcpy(pdns->name, name, n);
}

static pdns_handle_t *
_pdns_build_start(char *name)
{
        pdns_handle_t *pdns;

        pdns = (pdns_handle_t *)calloc(1, sizeof(pdns_handle_t));
        if (pdns == NULL) return NULL;

        pdns->res = res_build_start(NULL);
        if (pdns->res == NULL)
        {
                free(pdns);
                return NULL;
        }

        _pdns_set_name(pdns, name);
        pdns->port = NS_DEFAULTPORT;

        return pdns;
}

static int
_pdns_build_finish(pdns_handle_t *pdns)
{
        uint32_t n;

        if (pdns == NULL) return -1;

        n = pdns->res->nscount;
        if (n == 0) n = 1;

        if (pdns->total_timeout == 0)
        {
                if (pdns->send_timeout == 0) pdns->total_timeout = RES_MAXRETRANS;
                else pdns->total_timeout = pdns->send_timeout * pdns->res->retry * n;
        }

        if (pdns->total_timeout == 0) pdns->res->retrans = RES_MAXRETRANS;
        else pdns->res->retrans = pdns->total_timeout;

        pdns->res->options |= RES_INIT;

        return 0;
}

static int
_pdns_build_sortlist(pdns_handle_t *pdns, struct in_addr addr, struct in_addr mask)
{
        if (pdns == NULL) return -1;
        return res_build_sortlist(pdns->res, addr, mask);
}

static void
_pdns_free(pdns_handle_t *pdns)
{
        int i;

        if (pdns == NULL) return;

        if ((pdns->search_count != SEARCH_COUNT_INIT) && (pdns->search_count > 0) && (pdns->search_list != NULL))
        {
                for (i = 0; i < pdns->search_count; i++) free(pdns->search_list[i]);
                free(pdns->search_list);
        }

        if (pdns->name != NULL) free(pdns->name);
        if (pdns->res != NULL) res_client_close(pdns->res);

        free(pdns);
}

static int
_pdns_build(pdns_handle_t *pdns, char *key, char *val)
{
        struct in6_addr addr6;
        int32_t status;
        char *dupval;

        if (pdns == NULL) return -1;

        /*
         * Detect IPv6 server addresses.
         */
        if (((pdns->flags & DNS_FLAG_HAVE_IPV6_SERVER) == 0) && (!strcmp(key, "nameserver")))
        {
                memset(&addr6, 0, sizeof(struct in6_addr));
                status = inet_pton(AF_INET6, val, &addr6);
                if (status == 1) pdns->flags |= DNS_FLAG_HAVE_IPV6_SERVER;
        }

        /*
         * We handle some keys here.
         * Other keys get passed on to res_build.
         */
        if (!strcmp(key, "default"))
        {
                pdns->flags |= DNS_FLAG_DEFAULT_RESOLVER;
                return 0;
        }

        if (!strcmp(key, "port"))
        {
                pdns->port = atoi(val);
                return 0;
        }

        if (!strcmp(key, "search"))
        {
                dupval = strdup(val);
                if (dupval == NULL) return -1;

                if (pdns->search_count == SEARCH_COUNT_INIT) pdns->search_count = 0;
                if (pdns->search_count == 0)
                {
                        pdns->search_list = (char **)calloc(1, sizeof(char *));
                }
                else
                {
                        pdns->search_list = (char **)reallocf(pdns->search_list, (pdns->search_count + 1) * sizeof(char *));
                }

                if (pdns->search_list == NULL)
                {
                        free(dupval);
                        _pdns_free(pdns);
                        return -1;
                }

                pdns->search_list[pdns->search_count] = dupval;
                pdns->search_count++;
                return 0;
        }

        if (!strcmp(key, "total_timeout"))
        {
                pdns->total_timeout = atoi(val);
                return 0;
        }

        if (!strcmp(key, "timeout"))
        {
                pdns->send_timeout = atoi(val);
                return 0;
        }

        if (!strcmp(key, "search_order"))
        {
                pdns->search_order = atoi(val);
                return 0;
        }

        if (!strcmp(key, "pdns"))
        {
                pdns->flags |= DNS_FLAG_FORWARD_TO_MDNSRESPONDER;
                return 0;
        }

        if (!strcmp(key, "mdns"))
        {
                pdns->flags |= DNS_FLAG_FORWARD_TO_MDNSRESPONDER;
                return 0;
        }

        /* pass on to res_build */
        return res_build(pdns->res, pdns->port, &(pdns->search_count), key, val);
}

static pdns_handle_t *
_pdns_convert_sc(dns_resolver_t *r)
{
        pdns_handle_t *pdns;
        char *val, *p, *x;
        int i;

        pdns = _pdns_build_start(r->domain);
        if (r->domain == NULL) _pdns_build(pdns, "default", NULL);

        p = getenv("RES_RETRY_TIMEOUT");
        if (p != NULL) pdns->send_timeout = atoi(p);

        p = getenv("RES_RETRY");
        if (p != NULL) pdns->res->retry= atoi(p);

        if (r->port != 0)
        {
                val = NULL;
                asprintf(&val, "%hu", r->port);
                if (val == NULL)
                {
                        _pdns_free(pdns);
                        return NULL;
                }

                _pdns_build(pdns, "port", val);
                free(val);
        }

        if (r->n_nameserver > MAXNS) r->n_nameserver = MAXNS;
        for (i = 0; i < r->n_nameserver; i++)
        {
                if (r->nameserver[i]->sa_family == AF_INET)
                {
                        val = calloc(1, 256);
                        if (val == NULL)
                        {
                                _pdns_free(pdns);
                                return NULL;
                        }

                        inet_ntop(AF_INET, (char *)(r->nameserver[i]) + INET_NTOP_AF_INET_OFFSET, val, 256);
                        _pdns_build(pdns, "nameserver", val);
                        free(val);
                }
                else if (r->nameserver[i]->sa_family == AF_INET6)
                {
                        pdns->flags |= DNS_FLAG_HAVE_IPV6_SERVER;
                        val = calloc(1, 256);
                        if (val == NULL)
                        {
                                _pdns_free(pdns);
                                return NULL;
                        }

                        inet_ntop(AF_INET6, (char *)(r->nameserver[i]) + INET_NTOP_AF_INET6_OFFSET, val, 256);
                        _pdns_build(pdns, "nameserver", val);
                        free(val);
                }
        }

        if (r->n_search > MAXDNSRCH) r->n_search = MAXDNSRCH;
        for (i = 0; i < r->n_search; i++)
        {
                val = NULL;
                asprintf(&val, "%s", r->search[i]);
                if (val == NULL)
                {
                        _pdns_free(pdns);
                        return NULL;
                }

                _pdns_build(pdns, "search", val);
                free(val);
        }

        if (r->timeout > 0)
        {
                val = NULL;
                asprintf(&val, "%d", r->timeout);
                if (val == NULL)
                {
                        _pdns_free(pdns);
                        return NULL;
                }

                _pdns_build(pdns, "total_timeout", val);
                free(val);
        }

        val = NULL;
        asprintf(&val, "%d", r->search_order);
        if (val == NULL)
        {
                _pdns_free(pdns);
                return NULL;
        }

        _pdns_build(pdns, "search_order", val);
        free(val);

        if (r->n_sortaddr > MAXRESOLVSORT) r->n_sortaddr = MAXRESOLVSORT;
        for (i = 0; i < r->n_sortaddr; i++)
        {
                _pdns_build_sortlist(pdns, r->sortaddr[i]->address, r->sortaddr[i]->mask);
        }

        p = r->options;
        while (NULL != (x = res_next_word(&p)))
        {
                /* search for and process individual options */
                if (!strncmp(x, "ndots:", 6))
                {
                        _pdns_build(pdns, "ndots", x+6);
                }

                else if (!strncmp(x, "nibble:", 7))
                {
                        _pdns_build(pdns, "nibble", x+7);
                }

                else if (!strncmp(x, "nibble2:", 8))
                {
                        _pdns_build(pdns, "nibble2", x+8);
                }

                else if (!strncmp(x, "timeout:", 8))
                {
                        _pdns_build(pdns, "timeout", x+8);
                }

                else if (!strncmp(x, "attempts:", 9))
                {
                        _pdns_build(pdns, "attempts", x+9);
                }

                else if (!strncmp(x, "bitstring:", 10))
                {
                        _pdns_build(pdns, "bitstring", x+10);
                }

                else if (!strncmp(x, "v6revmode:", 10))
                {
                        _pdns_build(pdns, "v6revmode", x+10);
                }

                else if (!strcmp(x, "debug"))
                {
                        _pdns_build(pdns, "debug", NULL);
                }

                else if (!strcmp(x, "no_tld_query"))
                {
                        _pdns_build(pdns, "no_tld_query", NULL);
                }

                else if (!strcmp(x, "inet6"))
                {
                        _pdns_build(pdns, "inet6", NULL);
                }

                else if (!strcmp(x, "rotate"))
                {
                        _pdns_build(pdns, "rotate", NULL);
                }

                else if (!strcmp(x, "no-check-names"))
                {
                        _pdns_build(pdns, "no-check-names", NULL);
                }

#ifdef RES_USE_EDNS0
                else if (!strcmp(x, "edns0"))
                {
                        _pdns_build(pdns, "edns0", NULL);
                }
#endif
                else if (!strcmp(x, "a6"))
                {
                        _pdns_build(pdns, "a6", NULL);
                }

                else if (!strcmp(x, "dname"))
                {
                        _pdns_build(pdns, "dname", NULL);
                }

                else if (!strcmp(x, "default"))
                {
                        _pdns_build(pdns, "default", NULL);
                }

                else if (!strcmp(x, "pdns"))
                {
                        _pdns_build(pdns, "pdns", NULL);
                }

                else if (!strcmp(x, "mdns"))
                {
                        _pdns_build(pdns, "mdns", NULL);
                }
        }

        _pdns_build_finish(pdns);
        return pdns;
}

/*
 * Open a named resolver client from the system config data.
 */
static pdns_handle_t *
_pdns_sc_open(const char *name)
{
        pdns_handle_t *pdns;
        int i;
        dns_config_t *sc_dns;
        dns_resolver_t *sc_res;

        sc_dns = dns_configuration_copy();
        if (sc_dns == NULL) return NULL;

        sc_res = NULL;

        if (name == NULL)
        {
                if (sc_dns->n_resolver != 0) sc_res = sc_dns->resolver[0];
        }
        else
        {
                for (i = 0; (sc_res == NULL) && (i < sc_dns->n_resolver); i++)
                {
                        if (sc_dns->resolver[i] == NULL) continue;
                        if (sc_dns->resolver[i]->domain == NULL) continue;
                        if (!strcasecmp(name, sc_dns->resolver[i]->domain)) sc_res = sc_dns->resolver[i];
                }
        }

        if (sc_res == NULL)
        {
                dns_configuration_free(sc_dns);
                return NULL;
        }

        pdns = (pdns_handle_t *)calloc(1, sizeof(pdns_handle_t));
        if (pdns == NULL)
        {
                dns_configuration_free(sc_dns);
                return NULL;
        }

        pdns = _pdns_convert_sc(sc_res);

        dns_configuration_free(sc_dns);

        if (pdns == NULL) return NULL;

        if (pdns->res == NULL)
        {
                free(pdns);
                return NULL;
        }

        pdns->name = NULL;
        if (pdns->res->defdname[0] != '\0') _pdns_set_name(pdns, pdns->res->defdname);
        else if (name != NULL) _pdns_set_name(pdns, name);

        if (name != NULL) pdns->search_count = SEARCH_COUNT_INIT;

        return pdns;
}

/*
 * Open a named resolver client from file.
 */
static pdns_handle_t *
_pdns_file_open(const char *name)
{
        pdns_handle_t *pdns;
        char *path, buf[1024];
        char *p, *x, *y;
        FILE *fp;

        path = NULL;
        if (name == NULL)
        {
                asprintf(&path, "%s", _PATH_RESCONF);
        }
        else if ((name[0] == '.') || (name[0] == '/'))
        {
                asprintf(&path, "%s", name);
        }
        else
        {
                asprintf(&path, "%s/%s", DNS_RESOLVER_DIR, name);
        }

        if (path == NULL) return NULL;

        fp = fopen(path, "r");
        free(path);
        if (fp == NULL) return NULL;

        pdns = _pdns_build_start(NULL);
        if (pdns == NULL) 
        {
                fclose(fp);
                return NULL;
        }

        p = getenv("RES_RETRY_TIMEOUT");
        if (p != NULL) pdns->send_timeout = atoi(p);

        p = getenv("RES_RETRY");
        if (p != NULL) pdns->res->retry= atoi(p);

        while (fgets(buf, sizeof(buf), fp) != NULL)
        {
                /* skip comments */
                if ((buf[0] == ';') || (buf[0] == '#')) continue;
                p = buf;
                x = res_next_word(&p);
                if (x == NULL) continue;
                if (!strcmp(x, "sortlist"))
                {
                        while (NULL != (x = res_next_word(&p)))
                        {
                                _pdns_build(pdns, "sortlist", x);
                        }
                }
                else if (!strcmp(x, "timeout"))
                {
                        x = res_next_word(&p);
                        if (x != NULL) _pdns_build(pdns, "total_timeout", x);
                }
                else if (!strcmp(x, "options"))
                {
                        while (NULL != (x = res_next_word(&p)))
                        {
                                y = strchr(x, ':');
                                if (y != NULL)
                                {
                                        *y = '\0';
                                        y++;
                                }
                                _pdns_build(pdns, x, y);
                        }
                }
                else 
                {
                        y = res_next_word(&p);
                        _pdns_build(pdns, x, y);

                        if ((!strcmp(x, "domain")) && (pdns->name == NULL)) _pdns_set_name(pdns, y);
                }
        }

        fclose(fp);

        if (pdns->name == NULL) _pdns_set_name(pdns, name);

        _pdns_build_finish(pdns);

        return pdns;
}

/*
 * If there was no search list, use domain name and parent domain components.
 *
 * N.B. This code deals with multiple trailing dots, but does not deal with
 * multiple internal dots, e.g. "foo.....com".  
 */
static void
_pdns_check_search_list(pdns_handle_t *pdns)
{
        int n;
        char *p;

        if (pdns == NULL) return;
        if (pdns->name == NULL) return;
        if (pdns->search_count > 0) return;

        /* Count dots */
        n = 0;
        for (p = pdns->name; *p != '\0'; p++) 
        {
                if (*p == '.') n++;
        }

        /* Back up over any trailing dots and cut them out of the name */
        for (p--; (p >= pdns->name) && (*p == '.'); p--)
        {
                *p = '\0';
                n--;
        }

        /* This will be true if name was all dots */
        if (p < pdns->name) return;

        /* dots are separators, so number of components is one larger */
        n++;

        _pdns_build(pdns, "search", pdns->name);

        /* Include parent domains with at least LOCALDOMAINPARTS components */
        p = pdns->name;
        while (n > LOCALDOMAINPARTS)
        {
                /* Find next component */
                while ((*p != '.') && (*p != '\0')) p++;
                if (*p == '\0') break;
                p++;

                n--;
                _pdns_build(pdns, "search", p);
        }
}

__private_extern__ void
_check_cache(sdns_handle_t *sdns)
{
        int i, n, status, refresh, sc_dns_count;
        DIR *dp;
        struct direct *d;
        pdns_handle_t *c;
        dns_config_t *sc_dns;

        if (sdns == NULL) return;

        refresh = 0;

        if (sdns->stattime == 0) refresh = 1;

        if (refresh == 0)
        {
                if (sdns->notify_sys_config_token == -1) refresh = 1;
                else
                {
                        n = 1;
                        status = notify_check(sdns->notify_sys_config_token, &n);
                        if ((status != NOTIFY_STATUS_OK) || (n == 1)) refresh = 1;
                }
        }

        if (refresh == 0)
        {
                if (sdns->notify_dir_token == -1) refresh = 1;
                else
                {
                        n = 1;
                        status = notify_check(sdns->notify_dir_token, &n);
                        if ((status != NOTIFY_STATUS_OK) || (n == 1)) refresh = 1;
                }
        }

        if (refresh == 0) return;

        /* Free old clients */
        sdns->pdns_primary = NULL;

        for (i = 0; i < sdns->client_count; i++)
        {
                _pdns_free(sdns->client[i]);
        }

        sdns->client_count = 0;
        if (sdns->client != NULL) free(sdns->client);
        sdns->client = NULL;

        /* Fetch clients from System Configuration */
        sc_dns = dns_configuration_copy();

        /* Set up Primary resolver.  It's the one we consult for a search list */
        sc_dns_count = 0;
        if ((sc_dns != NULL) && (sc_dns->n_resolver > 0))
        {
                sc_dns_count = sc_dns->n_resolver;
                sdns->pdns_primary = _pdns_convert_sc(sc_dns->resolver[0]);
                _pdns_check_search_list(sdns->pdns_primary);
        }
        else
        {
                sdns->pdns_primary = _pdns_file_open(_PATH_RESCONF);
        }

        if (sdns->pdns_primary != NULL)
        {
                if ((sdns->flags & DNS_FLAG_DEBUG) && (sdns->pdns_primary->res != NULL)) sdns->pdns_primary->res->options |= RES_DEBUG;
                if (sdns->flags & DNS_FLAG_OK_TO_SKIP_AAAA) sdns->pdns_primary->flags |= DNS_FLAG_OK_TO_SKIP_AAAA;
                sdns->pdns_primary->flags |= DNS_FLAG_DEFAULT_RESOLVER;

                sdns->client = (pdns_handle_t **)calloc(1, sizeof(pdns_handle_t *));
                if (sdns->client == NULL)
                {
                        if (sc_dns != NULL) dns_configuration_free(sc_dns);
                        return;
                }

                sdns->client[sdns->client_count] = sdns->pdns_primary;
                sdns->client_count++;
        }

        /* Convert System Configuration resolvers */
        for (i = 1; i < sc_dns_count; i++)
        {
                c = _pdns_convert_sc(sc_dns->resolver[i]);
                if (c == NULL) continue;

                if (sdns->flags & DNS_FLAG_DEBUG) c->res->options |= RES_DEBUG;
                if (sdns->flags & DNS_FLAG_OK_TO_SKIP_AAAA) c->flags |= DNS_FLAG_OK_TO_SKIP_AAAA;

                if (sdns->client_count == 0)
                {
                        sdns->client = (pdns_handle_t **)calloc(1, sizeof(pdns_handle_t *));
                }
                else
                {
                        sdns->client = (pdns_handle_t **)reallocf(sdns->client, (sdns->client_count + 1) * sizeof(pdns_handle_t *));
                }

                if (sdns->client == NULL)
                {
                        sdns->client_count = 0;
                        dns_configuration_free(sc_dns);
                        return;
                }

                sdns->client[sdns->client_count] = c;
                sdns->client_count++;
        }

        if (sc_dns != NULL) dns_configuration_free(sc_dns);

        if (sdns->flags & DNS_FLAG_CHECK_RESOLVER_DIR)
        {
                /* Read /etc/resolvers clients */
                dp = opendir(DNS_RESOLVER_DIR);
                if (dp == NULL)
                {
                        sdns->flags &= ~DNS_FLAG_CHECK_RESOLVER_DIR;
                }
                else
                {
                        while (NULL != (d = readdir(dp)))
                        {
                                if (d->d_name[0] == '.') continue;

                                c = _pdns_file_open(d->d_name);
                                if (c == NULL) continue;
                                if (sdns->flags & DNS_FLAG_DEBUG) c->res->options |= RES_DEBUG;
                                if (sdns->flags & DNS_FLAG_OK_TO_SKIP_AAAA) c->flags |= DNS_FLAG_OK_TO_SKIP_AAAA;

                                if (sdns->client_count == 0)
                                {
                                        sdns->client = (pdns_handle_t **)calloc(1, sizeof(pdns_handle_t *));
                                }
                                else
                                {
                                        sdns->client = (pdns_handle_t **)reallocf(sdns->client, (sdns->client_count + 1) * sizeof(pdns_handle_t *));
                                }

                                if (sdns->client == NULL)
                                {
                                        sdns->client_count = 0;
                                        return;
                                }

                                sdns->client[sdns->client_count] = c;
                                sdns->client_count++;
                        }
                        closedir(dp);
                }
        }

        sdns->stattime = 1;
}

static uint32_t
_pdns_get_default_handles(sdns_handle_t *sdns, pdns_handle_t ***pdns)
{
        int i, j, k, count;

        if (sdns == NULL) return 0;
        if (pdns == NULL) return 0;

        count = 0;

        for (i = 0; i < sdns->client_count; i++)
        {
                if (sdns->client[i]->flags & DNS_FLAG_DEFAULT_RESOLVER)
                {
                        if (count == 0)
                        {
                                *pdns = (pdns_handle_t **)calloc(1, sizeof(pdns_handle_t *));
                        }
                        else
                        {
                                *pdns = (pdns_handle_t **)reallocf((*pdns), (count + 1) * sizeof(pdns_handle_t *));
                        }

                        if (*pdns == NULL) return 0;

                        /* Insert sorted by search_order */
                        for (j = 0; j < count; j++)
                        {
                                if (sdns->client[i]->search_order < (*pdns)[j]->search_order) break;
                        }

                        for (k = count; k > j; k--) (*pdns)[k] = (*pdns)[k-1];
                        (*pdns)[j] = sdns->client[i];
                        count++;
                }
        }

        return count;
}

static uint32_t
_pdns_get_handles_for_name(sdns_handle_t *sdns, const char *name, uint32_t nlabels, pdns_handle_t ***pdns)
{
        char *p, *vname;
        int i, j, k, count;

        if (sdns == NULL) return 0;
        if (pdns == NULL) return 0;

        if (name == NULL) return _pdns_get_default_handles(sdns, pdns);
        else if (name[0] == '\0') return _pdns_get_default_handles(sdns, pdns);

        count = 0;

        vname = strdup(name);
        i = strlen(vname) - 1;
        if ((i >= 0) && (vname[i] == '.')) vname[i] = '\0';

        p = vname;
        while (p != NULL)
        {
                for (i = 0; i < sdns->client_count; i++)
                {
                        if (sdns->client[i]->name == NULL) continue;

                        /* Special case:  Don't send to ".local[.]" queries to mDNSResponder if nlabels > 2 */
                        if ((nlabels > 2) && (sdns->client[i]->flags & DNS_FLAG_FORWARD_TO_MDNSRESPONDER) && (!strcasecmp(sdns->client[i]->name, "local"))) continue;

                        if (!strcasecmp(sdns->client[i]->name, p))
                        {
                                if (count == 0)
                                {
                                        *pdns = (pdns_handle_t **)calloc(1, sizeof(pdns_handle_t *));
                                }
                                else
                                {
                                        *pdns = (pdns_handle_t **)reallocf((*pdns), (count + 1) * sizeof(pdns_handle_t *));
                                }

                                if (*pdns == NULL) return 0;

                                /* Insert sorted by search_order */
                                for (j = 0; j < count; j++)
                                {
                                        if (sdns->client[i]->search_order < (*pdns)[j]->search_order) break;
                                }

                                for (k = count; k > j; k--) (*pdns)[k] = (*pdns)[k-1];
                                (*pdns)[j] = sdns->client[i];
                                count++;
                        }
                }

                p = strchr(p, '.');
                if (p != NULL) p++;
        }

        free(vname);

        if (count != 0) return count;

        return _pdns_get_default_handles(sdns, pdns);;
}

static void
_pdns_process_res_search_list(pdns_handle_t *pdns)
{
        if (pdns->search_count != SEARCH_COUNT_INIT) return;
        for (pdns->search_count = 0; (pdns->res->dnsrch[pdns->search_count] != NULL) && (pdns->res->dnsrch[pdns->search_count][0] != '\0'); pdns->search_count++);
}

static char *
_pdns_search_list_domain(pdns_handle_t *pdns, uint32_t i)
{
        char *s;

        if (pdns == NULL) return NULL;
        if (pdns->search_count == SEARCH_COUNT_INIT) _pdns_process_res_search_list(pdns);
        if (i >= pdns->search_count) return NULL;

        s = pdns->search_list[i];
        if (s == NULL) return NULL;
        return strdup(s);
}

static void
_dns_open_notify(sdns_handle_t *sdns)
{
        int status, n;

        if (sdns == NULL) return;

        if (sdns->notify_delay_token == -1)
        {
                status = notify_register_check(DNS_DELAY_NAME, &(sdns->notify_delay_token));
                if (status != NOTIFY_STATUS_OK) sdns->notify_delay_token = -1;
                else status = notify_check(sdns->notify_delay_token, &n);
        }

        if (sdns->notify_sys_config_token == -1)
        {
                status = notify_register_check(dns_configuration_notify_key(), &(sdns->notify_sys_config_token));
                if (status != NOTIFY_STATUS_OK) sdns->notify_sys_config_token = -1;
        }

        if (sdns->notify_dir_token == -1)
        {
                status = notify_register_check(NOTIFY_DIR_NAME, &(sdns->notify_dir_token));
                if (status == NOTIFY_STATUS_OK)
                {
                        status = notify_monitor_file(sdns->notify_dir_token, "/private/etc/resolver", 0);
                        if (status != NOTIFY_STATUS_OK)
                        {
                                notify_cancel(sdns->notify_dir_token);
                                sdns->notify_dir_token = -1;
                        }
                }
                else 
                {
                        sdns->notify_dir_token = -1;
                }
        }
}

static void
_dns_close_notify(sdns_handle_t *sdns)
{
        if (sdns == NULL) return;

        if (sdns->notify_delay_token != -1) notify_cancel(sdns->notify_delay_token);
        sdns->notify_delay_token = -1;

        if (sdns->notify_sys_config_token != -1) notify_cancel(sdns->notify_sys_config_token);
        sdns->notify_sys_config_token = -1;

        if (sdns->notify_dir_token != -1) notify_cancel(sdns->notify_dir_token);
        sdns->notify_dir_token = -1;
}

dns_handle_t
dns_open(const char *name)
{
        dns_private_handle_t *dns;

        dns = (dns_private_handle_t *)calloc(1, sizeof(dns_private_handle_t));
        if (dns == NULL) return NULL;

        if (name == NULL)
        {
                dns->handle_type = DNS_PRIVATE_HANDLE_TYPE_SUPER;
                dns->sdns = (sdns_handle_t *)calloc(1, sizeof(sdns_handle_t));
                if (dns->sdns == NULL)
                {
                        free(dns);
                        return NULL;
                }

                dns->sdns->flags |= DNS_FLAG_CHECK_RESOLVER_DIR;
                dns->sdns->notify_sys_config_token = -1;
                dns->sdns->notify_dir_token = -1;
                dns->sdns->notify_delay_token = -1;
                _dns_open_notify(dns->sdns);

                return (dns_handle_t)dns;
        }

        dns->handle_type = DNS_PRIVATE_HANDLE_TYPE_PLAIN;

        /*  Look for name in System Configuration first */
        dns->pdns = _pdns_sc_open(name);
        if (dns->pdns == NULL) dns->pdns = _pdns_file_open(name);

        if (dns->pdns == NULL)
        {
                free(dns);
                return NULL;
        }

        return (dns_handle_t)dns;
}

/*
 * Release a DNS client handle
 */
void
dns_free(dns_handle_t d)
{
        dns_private_handle_t *dns;
        int i;

        if (d == NULL) return;

        dns = (dns_private_handle_t *)d;

        if (dns->recvbuf != NULL) free(dns->recvbuf);

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                if (dns->sdns == NULL) return;

                _dns_close_notify(dns->sdns);

                for (i = 0; i < dns->sdns->client_count; i++)
                {
                        _pdns_free(dns->sdns->client[i]);
                }

                dns->sdns->client_count = 0;
                if (dns->sdns->client != NULL) free(dns->sdns->client);

                free(dns->sdns);
        }
        else
        {
                _pdns_free(dns->pdns);
        }

        free(dns);
}

static void
_pdns_debug(pdns_handle_t *pdns, uint32_t flag)
{
        if (pdns == NULL) return;

        if (flag == 0)
        {
                pdns->res->options &= ~RES_DEBUG;
        }
        else
        {
                pdns->res->options |= RES_DEBUG;
        }
}

static void
_sdns_debug(sdns_handle_t *sdns, uint32_t flag)
{
        int i;

        if (sdns == NULL) return;

        if (flag == 0)
        {
                sdns->flags &= ~ DNS_FLAG_DEBUG;

                for (i = 0; i < sdns->client_count; i++)
                {
                        sdns->client[i]->res->options &= ~RES_DEBUG;
                }
        }
        else
        {
                sdns->flags |= DNS_FLAG_DEBUG;

                for (i = 0; i < sdns->client_count; i++)
                {
                        sdns->client[i]->res->options |= RES_DEBUG;
                }
        }
}

/*
 * Enable / Disable debugging
 */
void
dns_set_debug(dns_handle_t d, uint32_t flag)
{
        dns_private_handle_t *dns;

        if (d == NULL) return;

        dns = (dns_private_handle_t *)d;

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                _sdns_debug(dns->sdns, flag);
        }
        else
        {
                _pdns_debug(dns->pdns, flag);
        }
}

/*
 * Returns the number of names in the search list
 */
uint32_t
dns_search_list_count(dns_handle_t d)
{
        dns_private_handle_t *dns;
        pdns_handle_t *pdns;

        if (d == NULL) return 0;

        dns = (dns_private_handle_t *)d;

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                _check_cache(dns->sdns);
                pdns = dns->sdns->pdns_primary;
        }
        else
        {
                pdns = dns->pdns;
        }

        if (pdns->search_count == SEARCH_COUNT_INIT) _pdns_process_res_search_list(pdns);
        return pdns->search_count;
}

/* 
 * Returns the domain name at index i in the search list.
 * Returns NULL if there are no names in the search list.
 * Caller must free the returned name.
 */
char *
dns_search_list_domain(dns_handle_t d, uint32_t i)
{
        dns_private_handle_t *dns;
        pdns_handle_t *pdns;

        if (d == NULL) return NULL;

        dns = (dns_private_handle_t *)d;

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                _check_cache(dns->sdns);
                pdns = dns->sdns->pdns_primary;
        }
        else
        {
                pdns = dns->pdns;
        }

        return _pdns_search_list_domain(pdns, i);
}

static int
_pdns_delay(sdns_handle_t *sdns)
{
        int status, n, snooze;
        time_t tick;

        if (sdns == NULL) return 0;

        snooze = 0;
        n = 0;

        /* No delay if we are not receiving notifications */
        if (sdns->notify_delay_token == -1) return 0;

        if (sdns->dns_delay == 0)
        {
                status = notify_check(sdns->notify_delay_token, &n);
                if ((status == NOTIFY_STATUS_OK) && (n == 1))
                {
                        /*
                         * First thread to hit this condition sleeps for DNS_DELAY_INTERVAL seconds
                         */
                        sdns->dns_delay = time(NULL) + DNS_DELAY_INTERVAL;
                        snooze = DNS_DELAY_INTERVAL;
                }
        }
        else
        {
                tick = time(NULL);
                /*
                 * Subsequent threads sleep for the remaining duration.
                 * We add one to round up the interval since our granularity is coarse.
                 */
                snooze = 1 + (sdns->dns_delay - tick);
                if (snooze < 0) snooze = 0;
        }

        if (snooze == 0) return 0;

        sleep(snooze);

        /* When exiting, first thread in resets the delay condition */
        if (n == 1) sdns->dns_delay = 0;

        return 0;
}

static int
_pdns_query(sdns_handle_t *sdns, pdns_handle_t *pdns, const char *name, uint32_t class, uint32_t type, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen, int *min)
{
        int n;

        if (name == NULL) return -1;
        if (pdns == NULL) return -1;

        if (pdns->flags & DNS_FLAG_FORWARD_TO_MDNSRESPONDER)
        {
                n = res_query_mDNSResponder(pdns->res, name, class, type, (u_char *)buf, len, from, fromlen);
                if ((n < 0) && (min != NULL)) *min = MDNS_MIN_TTL;
                return n;
        }

        if (pdns->res == NULL) return -1;
        if (pdns->res->nscount == 0) return -1;

        if ((type == ns_t_aaaa) && ((pdns->flags & DNS_FLAG_HAVE_IPV6_SERVER) == 0) && (pdns->flags & DNS_FLAG_OK_TO_SKIP_AAAA)) return -1;

        _pdns_delay(sdns);

        /* BIND_9 API */
        return res_nquery_soa_min(pdns->res, name, class, type, (u_char *)buf, len, from, (int32_t *)fromlen, min);
}

__private_extern__ int
_pdns_search(sdns_handle_t *sdns, pdns_handle_t *pdns, const char *name, uint32_t class, uint32_t type, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen)
{
        char *dot, *qname;
        int append, status;

        if (name == NULL) return -1;
        if (pdns == NULL) return -1;
        if (pdns->res == NULL) return -1;
        if (pdns->res->nscount == 0) return -1;

        if ((type == ns_t_aaaa) && ((pdns->flags & DNS_FLAG_HAVE_IPV6_SERVER) == 0) && (pdns->flags & DNS_FLAG_OK_TO_SKIP_AAAA)) return -1;

        qname = NULL;
        append = 1;

        /*
         * don't append my name if:
         * - my name is NULL
         * - input name is qualified (i.e. not single component)
         * - there is a search list
         * - there is a domain name
         */

        if (pdns->name == NULL) append = 0;

        if (append == 1)
        {
                dot = strrchr(name, '.');
                if (dot != NULL) append = 0;
        }

        if (append == 1)
        {
                if (pdns->search_count == SEARCH_COUNT_INIT) _pdns_process_res_search_list(pdns);
                if (pdns->search_count > 0) append = 0;
        }

        if ((append == 1) && (pdns->res->defdname != NULL) && (pdns->res->defdname[0] != '\0')) append = 0;

        status = -1;
        if (append == 0)
        {
                /* BIND_9 API */
                _pdns_delay(sdns);

                status = __res_nsearch_list_2(pdns->res, name, class, type, (u_char *)buf, len, from, fromlen, pdns->search_count, pdns->search_list);
        }
        else
        {
                _pdns_delay(sdns);

                qname = NULL;
                asprintf(&qname, "%s.%s.", name, pdns->name);
                if (qname == NULL) return -1;

                /* BIND_9 API */
                status = res_nsearch_2(pdns->res, qname, class, type, (u_char *)buf, len, from, fromlen);
                free(qname);
        }

        return status;
}

static int
_sdns_send(sdns_handle_t *sdns, const char *name, uint32_t class, uint32_t type, uint32_t fqdn, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen, uint32_t nlabels, int *min)
{
        char *qname;
        pdns_handle_t **pdns;
        uint32_t pdns_count;
        int i, n;
        int m, tmin, minstate;

        pdns = NULL;
        pdns_count = 0;
        n = -1;
        minstate = 0;
        *min = -1;
        m = -1;

        pdns_count = _pdns_get_handles_for_name(sdns, name, nlabels, &pdns);

        if (pdns_count == 0) return -1;

        qname = NULL;
        asprintf(&qname, "%s%s", name, (fqdn == 0) ? "." : "");
        if (qname == NULL) return -1;

        for (i = 0; i < pdns_count; i++)
        {
                tmin = -1;
                n = _pdns_query(sdns, pdns[i], qname, class, type, buf, len, from, fromlen, &tmin);
                if (n <= 0)
                {
                        if (tmin < 0)
                        {
                                minstate = -1;
                        }
                        else if (minstate == 0)
                        {
                                if (m == -1) m = tmin;
                                else if (tmin < m) m = tmin;
                        }
                }

                if (n > 0) break;
        }

        if (minstate == 0) *min = m;

        free(pdns);
        free(qname);
        return n;
}

__private_extern__ int
_sdns_search(sdns_handle_t *sdns, const char *name, uint32_t class, uint32_t type, uint32_t fqdn, uint32_t recurse, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen, int *min)
{
        pdns_handle_t *primary, **pdns;
        int i, n, ndots, nlabels, status;
        int m, tmin, minstate;
        char *dot, *qname;
        uint32_t pdns_count;

        if (sdns == NULL) return -1;
        if (name == NULL) return -1;

        /*
         * A minimum TTL derived from the minimim of all SOA records
         * that are received with NXDOMAIN or no data is returned to
         * the caller if every call returns an NXDOMAIN or no data
         * and a SOA min ttl.  If any call times out or returns some
         * other error, we return "-1" in the "min" out parameter.
         * The minstate variable is set to -1 if we must return -1.
         */
        minstate = 0;
        *min = -1;

        /* m is the lowest of all minima.  -1 is unset */
        m = -1;

        /* ndots is the threshold for trying a qualified name "as is" */
        ndots = 1;
        primary = sdns->pdns_primary;
        if ((primary != NULL) && (primary->res != NULL)) ndots = primary->res->ndots;

        /* count dots in input name, and keep track of the location of the last dot */
        n = 0;
        dot = NULL;

        for (i = 0; name[i] != '\0'; i++)
        {
                if (name[i] == '.')
                {
                        n++;
                        dot = (char *)(name + i);
                }
        }

        /* the last dot is the last character, name is fully qualified */
        if ((fqdn == 0) && (dot != NULL) && (*(dot + 1) == '\0')) fqdn = 1;

        /* number of labels */
        nlabels = n + 1 - fqdn;

        /*
         * If n >= ndots, or it's a FQDN, or if it's a PTR query,
         * we try a query with the name "as is".
         */
        if ((n >= ndots) || (fqdn == 1) || (type == ns_t_ptr))
        {
                tmin = -1;
                status = _sdns_send(sdns, name, class, type, fqdn, buf, len, from, fromlen, nlabels, &tmin);
                if (status > 0) return status;

                if (tmin < 0) minstate = -1;
                else m = tmin;
        }

        /* end of the line for FQDNs or PTR queries */
        if ((fqdn == 1) || (type == ns_t_ptr) || (recurse == 0) || (primary == NULL))
        {
                if (minstate == 0) *min = m;
                return -1;
        }

        /* Try appending names from the search list */
        if (primary->search_count == SEARCH_COUNT_INIT) _pdns_process_res_search_list(primary);
        n = primary->search_count;
        if (n > 0)
        {
                /* Try qualifying with each name in the search list */
                for (i = 0; i < n ; i++)
                {
                        qname = NULL;
                        asprintf(&qname, "%s.%s", name, primary->search_list[i]);
                        if (qname == NULL) return -1;

                        tmin = -1;
                        status = _sdns_search(sdns, qname, class, type, fqdn, 0, buf, len, from, fromlen, &tmin);
                        if (status <= 0)
                        {
                                if (tmin < 0)
                                {
                                        minstate = -1;
                                }
                                else if (minstate == 0)
                                {
                                        if (m == -1) m = tmin;
                                        else if (tmin < m) m = tmin;
                                }
                        }

                        free(qname);
                        if (status > 0) return status;
                }

                if (minstate == 0) *min = m;
                return -1;
        }

        /*
         * We get here if the name is not fully qualified (no trailing dot), and there is no search list.
         * Try each default client, qualifying with that client's name.
         */
        pdns = NULL;
        pdns_count = _pdns_get_default_handles(sdns, &pdns);
        status = -1;

        if (pdns_count == 0)
        {
                if (minstate == 0) *min = m;
                return -1;
        }

        for (i = 0; i < pdns_count; i++)
        {
                qname = NULL;
                if (pdns[i]->name == NULL) asprintf(&qname, "%s", name);
                else asprintf(&qname, "%s.%s", name, pdns[i]->name);

                /* leave *min at -1 in case of a malloc failure */
                if (qname == NULL) return -1;

                tmin = -1;
                status = _pdns_query(sdns, pdns[i], qname, class, type, buf, len, from, fromlen, &tmin);
                if (status <= 0)
                {
                        if (tmin < 0)
                        {
                                minstate = -1;
                        }
                        else if (minstate == 0)
                        {
                                if (m == -1) m = tmin;
                                else if (tmin < m) m = tmin;
                        }
                }

                free(qname);
                if (status > 0) break;
        }

        free(pdns);

        if (minstate == 0) *min = m;
        return status;
}

int
dns_query(dns_handle_t d, const char *name, uint32_t class, uint32_t type, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen)
{
        dns_private_handle_t *dns;
        int status, unused;

        if (d == NULL) return -1;
        if (name == NULL) return -1;
        dns = (dns_private_handle_t *)d;

        status = -1;
        unused = 0;

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                _check_cache(dns->sdns);
                status = _sdns_search(dns->sdns, name, class, type, 1, 1, buf, len, from, fromlen, &unused);
        }
        else
        {
                status = _pdns_query(dns->sdns, dns->pdns, name, class, type, buf, len, from, fromlen, &unused);
        }

        return status;
}


int
dns_search(dns_handle_t d, const char *name, uint32_t class, uint32_t type, char *buf, uint32_t len, struct sockaddr *from, uint32_t *fromlen)
{
        dns_private_handle_t *dns;
        int status, unused;

        if (d == NULL) return -1;
        if (name == NULL) return -1;
        dns = (dns_private_handle_t *)d;

        status = -1;
        unused = 0;

        if (dns->handle_type == DNS_PRIVATE_HANDLE_TYPE_SUPER)
        {
                _check_cache(dns->sdns);
                status = _sdns_search(dns->sdns, name, class, type, 0, 1, buf, len, from, fromlen, &unused);
        }
        else
        {
                status = _pdns_search(dns->sdns, dns->pdns, name, class, type, buf, len, from, fromlen);
        }

        return status;
}

/*
 * PRIVATE
 */

uint32_t
dns_server_list_count(dns_handle_t d)
{
        dns_private_handle_t *dns;
        res_state r;

        if (d == NULL) return 0;
        dns = (dns_private_handle_t *)d;

        if (dns->handle_type != DNS_PRIVATE_HANDLE_TYPE_PLAIN) return 0;

        if (dns->pdns == NULL) return 0;

        r = dns->pdns->res;
        if (r == NULL) return 0;

        return r->nscount;
}

struct sockaddr *
dns_server_list_address(dns_handle_t d, uint32_t i)
{
        dns_private_handle_t *dns;
        res_state r;
        struct sockaddr_storage *s;
        struct sockaddr *sa;

        if (d == NULL) return NULL;
        dns = (dns_private_handle_t *)d;

        if (dns->handle_type != DNS_PRIVATE_HANDLE_TYPE_PLAIN) return NULL;

        if (dns->pdns == NULL) return NULL;

        r = dns->pdns->res;
        if (r == NULL) return NULL;

        if (i >= r->nscount) return NULL;
        sa = get_nsaddr(r, i);
        if (sa == NULL) return NULL;

        s = (struct sockaddr_storage *)calloc(1, sizeof(struct sockaddr_storage));
        if (s == NULL) return NULL;

        memcpy(s, sa, sizeof(struct sockaddr_storage));
        return (struct sockaddr *)s;
}