/src/opensips/resolve.c

Source
/*
 * Copyright (C) 2001-2003 FhG Fokus
 * Copyright (C) 2005-2009 Voice Sistem S.R.L.
 *
 * This file is part of opensips, a free SIP server.
 *
 * opensips is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version
 *
 * opensips is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301  USA
 *
 * History:
 * -------
 *  2003-02-13  added proto to sip_resolvehost, for SRV lookups (andrei)
 *  2003-07-03  default port value set according to proto (andrei)
 *  2007-01-25  support for DNS failover added (bogdan)
 *  2008-07-25  support for SRV load-balancing added (bogdan)
 */


/*!
 * \file
 * \brief DNS resolver for OpenSIPS
 */

#include <sys/types.h>
#include <netinet/in.h>
#include <arpa/nameser.h>
#include <resolv.h>
#include <string.h>
#include <stdlib.h>
#include <limits.h>

#include "mem/mem.h"
#include "mem/shm_mem.h"
#include "net/trans.h"
#include "resolve.h"
#include "dprint.h"
#include "ut.h"
#include "ip_addr.h"
#include "globals.h"
#include "blacklists.h"

fetch_dns_cache_f *dnscache_fetch_func=NULL;
put_dns_cache_f *dnscache_put_func=NULL;

/* stuff related to DNS failover */
#define DNS_NODE_SRV   1
#define DNS_NODE_A     2

struct dns_val {
  unsigned int ival;
  char *sval;
};

/* mallocs for local stuff */
#define local_malloc pkg_malloc
#define local_free   pkg_free

int dns_try_ipv6=0; /*!< default off */
int dns_try_naptr=1; /*!< default on */
/* declared in globals.h */
int dns_retr_time=-1;
int dns_retr_no=-1;
int dns_servers_no=-1;
int dns_search_list=-1;
int disable_dns_blacklist=1;

static struct bl_head *failover_bl=0;
#define DNS_REVOLVER_BL_ID    17
#define DNS_REVOLVER_BL_NAME  "dns"
#define DNS_BL_EXPIRE         4*60

#define MAX_BUFF_SIZE 8192
#define MAXALIASES  36
#define MAXADDRS  36
#define DNS_MAX_NAME  256
struct hostent global_he;
static char hostbuf[MAX_BUFF_SIZE];
static char *h_addr_ptrs[MAXADDRS];
static char *host_aliases[MAXALIASES];

stat_var *dns_total_queries;
stat_var *dns_slow_queries;

typedef union {
  int32_t al;
  char ac;
} align;

#define BOUNDED_INCR(x) \
  do { \
    cp += x; \
    if (cp > eom) { \
      LM_ERR("Bounded incr failed\n"); \
      return -1; \
      } \
    } while (0)

#define BOUNDS_CHECK(ptr, count) \
  do { \
    if ((ptr) + (count) > eom) { \
      LM_ERR("Bounded check failed\n"); \
      return -1; \
    } \
  } while (0)

# define DNS_GET16(s, cp) \
  do { \
    uint16_t t_cp; memcpy(&t_cp, cp, sizeof(uint16_t)); \
    (s) = ntohs (t_cp); \
  } while (0)

# define DNS_GET32(s, cp) \
  do { \
    uint32_t t_cp; memcpy(&t_cp, cp, sizeof(uint32_t)); \
    (s) = ntohl (t_cp); \
  } while (0)

static inline unsigned int dns_get16(const u_char *src) {
  unsigned int dst;

  DNS_GET16(dst, src);
  return dst;
}

static inline unsigned int dns_get32(const u_char *src) {
  unsigned int dst;

  DNS_GET32(dst, src);
  return dst;
}

int get_dns_answer(union dns_query *answer,int anslen,char *qname,int qtype,int *min_ttl)
{
  register const HEADER *hp;
  register int n;
  register const unsigned char *cp;
  const char* tname;
  const unsigned char *eom,*erdata;
  int type, class,ttl, buflen, ancount;
  int haveanswer, had_error;
  char *bp,**ap,**hap;
  char tbuf[DNS_MAX_NAME];
  int toobig=0;

  tname = qname;
  global_he.h_name = NULL;
  eom = answer->buff + anslen;

  hp = &answer->hdr;
  ancount = ntohs(hp->ancount);
  bp = hostbuf;
  buflen = sizeof hostbuf;

  cp = answer->buff;
  BOUNDED_INCR(DNS_HDR_SIZE);

  n = dn_expand(answer->buff, eom, cp, bp, buflen);
  if (n < 0) {
    LM_ERR("Error expanding name\n");
    return -1;
  }
  BOUNDED_INCR(n+4);

  if (qtype == T_A || qtype == T_AAAA) {
    n = strlen(bp) + 1;
    if (n >= DNS_MAX_NAME) {
      LM_ERR("Name too large\n");
      return -1;
    }
    global_he.h_name = bp;
    bp += n;
    buflen -= n;
    /* The qname can be abbreviated, but h_name is now absolute. */
    qname = global_he.h_name;
  }

  ap = host_aliases;
  *ap = NULL;
  global_he.h_aliases = host_aliases;
  hap = h_addr_ptrs;
  *hap = NULL;
  global_he.h_addr_list = h_addr_ptrs;
  haveanswer = 0;
  had_error = 0;
  while (ancount-- > 0 && cp < eom && !had_error) {
    n = dn_expand(answer->buff, eom, cp, bp, buflen);
    if (n < 0) {
      had_error++;
      continue;
    }
    cp += n;  /* name */
    BOUNDS_CHECK(cp,3*2+4);
    type = dns_get16(cp);
    cp += 2;  /* type */
    class = dns_get16(cp);
    cp += 2;  /* class*/
    ttl = dns_get32(cp);
    if (ttl<*min_ttl)
      *min_ttl=ttl;
    cp +=4;
    n = dns_get16(cp);
    cp += 2;  /* len */
    BOUNDS_CHECK(cp, n);
    erdata = cp + n;

    if (class != C_IN) {
      LM_ERR("Got response class != C_IN");
      had_error++;
      continue;
    }

    if ((qtype == T_A || qtype == T_AAAA) && type == T_CNAME) {
      if (ap >= &host_aliases[MAXALIASES-1])
        continue;
      n = dn_expand(answer->buff, eom, cp, tbuf, sizeof tbuf);
      if (n < 0) {
        LM_ERR("failed to expand alias\n");
        had_error++;
        continue;
      }
      cp += n;
      if (cp != erdata)
        return -1;
      /* Store alias. */
      *ap++ = bp;
      n = strlen(bp) + 1;
      if (n >= DNS_MAX_NAME) {
        LM_ERR("alias too long\n");
        had_error++;
        continue;
      }
      bp += n;
      buflen -= n;
      /* Get canonical name. */
      n = strlen(tbuf) + 1;
      if (n > buflen || n >= DNS_MAX_NAME) {
        had_error++;
        continue;
      }

      strcpy(bp, tbuf);
      global_he.h_name = bp;
      bp += n;
      buflen -= n;
      continue;
    }

    if (qtype == T_PTR && type == T_CNAME) {
      n = dn_expand(answer->buff, eom, cp, tbuf, sizeof tbuf);
      if (n < 0) {
        LM_ERR("failed to expand for t_ptr\n");
        had_error++;
        continue;
      }

      cp += n;
      if (cp != erdata) {
        LM_ERR("failure\n");
        return -1;
      }
      /* Get canonical name. */
      n = strlen(tbuf) + 1;
      if (n > buflen || n >= DNS_MAX_NAME) {
        LM_ERR("ptr name too long\n");
        had_error++;
        continue;
      }
      strcpy(bp, tbuf);
      tname = bp;
      bp += n;
      buflen -= n;
      continue;
    }

    if (type != qtype) {
      LM_ERR("asked for %d, got %d\n",qtype,type);
      cp+=n;
      continue;
    }

    switch (type) {
      case T_PTR:
        if (strcasecmp(tname, bp) != 0) {
          LM_ERR("asked for %s, got %s\n",tname,bp);
          cp += n;
          continue; /* XXX - had_error++ ? */
        }
        n = dn_expand(answer->buff, eom, cp, bp, buflen);
        if (n < 0) {
          had_error++;
          break;
        }
        cp += n;
        if (cp != erdata) {
          LM_ERR("errdata err\n");
          return -1;
        }
        if (!haveanswer)
          global_he.h_name = bp;
        else if (ap < &host_aliases[MAXALIASES-1])
          *ap++ = bp;
        else
          n = -1;
        if (n != -1) {
          n = strlen(bp) + 1; /* for the \0 */
          if (n >= MAXHOSTNAMELEN) {
            had_error++;
            break;
          }
          bp += n;
          buflen -= n;
        }
        break;
      case T_A:
      case T_AAAA:
        if (strcasecmp(global_he.h_name, bp) != 0) {
          LM_ERR("asked for %s, got %s\n",global_he.h_name,bp);
          cp += n;
          continue; /* XXX - had_error++ ? */
        }
        if (n != global_he.h_length) {
          cp += n;
          continue;
        }
        if (!haveanswer) {
          register int nn;

          global_he.h_name = bp;
          nn = strlen(bp) + 1;
          bp += nn;
          buflen -= nn;
        }

        buflen -= sizeof(align) - ((u_long)bp % sizeof(align));
        bp += sizeof(align) - ((u_long)bp % sizeof(align));

        if (bp + n >= &hostbuf[sizeof hostbuf]) {
          LM_ERR("size (%d) too big\n", n);
          had_error++;
          continue;
        }
        if (hap >= &h_addr_ptrs[MAXADDRS-1]) {
          if (!toobig++)
            LM_ERR("Too many addresses (%d)\n",MAXADDRS);
          cp += n;
          continue;
        }

        memmove(*hap++ = bp, cp, n);
        bp += n;
        buflen -= n;
        cp += n;
        if (cp != erdata) {
          LM_ERR("failure\n");
          return -1;
        }
        break;
      default:
        LM_ERR("should never get here\n");
        return -1;
    }
    if (!had_error)
      haveanswer++;
  }

  if (haveanswer) {
    *ap = NULL;
    *hap = NULL;
    if (!global_he.h_name) {
      n = strlen(qname) + 1;
      if (n > buflen || n >= DNS_MAX_NAME) {
        LM_ERR("name too long\n");
        return -1;
      }
        strcpy(bp, qname);
        global_he.h_name = bp;
        bp += n;
        buflen -= n;
    }
  }

  return 0;
}

struct hostent* own_gethostbyname2(char *name,int af)
{
  int size,type;
  struct hostent *cached_he;
  static union dns_query buff;
  int min_ttl = INT_MAX;
  int cname_chain_depth = 0;
  char *query_name;
  static char cname_chain_name[DNS_MAX_NAME];

  switch (af) {
    case AF_INET:
      size=4;
      type=T_A;
      break;
    case AF_INET6:
      size=16;
      type=T_AAAA;
      break;
    default:
      LM_ERR("Only A and AAAA queries\n");
      return NULL;
  }

  cached_he = (struct hostent *)dnscache_fetch_func(name,af==AF_INET?T_A:T_AAAA,0);
  if (cached_he == NULL) {
    LM_DBG("not found in cache or other internal error\n");
    goto query;
  } else if (cached_he == (void *)-1) {
    LM_DBG("previously failed query\n");
    return NULL;
  } else {
    LM_DBG("cache hit for %s - %d\n",name,af);
    return cached_he;
  }

query:
  global_he.h_addrtype=af;
  global_he.h_length=size;

  query_name = name;

  /* Follow CNAME chain - RFC 1034 recommends max depth of ~8-16 */
  #define MAX_CNAME_CHAIN_DEPTH 10

  while (cname_chain_depth < MAX_CNAME_CHAIN_DEPTH) {
    size=res_search(query_name, C_IN, type, buff.buff, sizeof(buff));
    if (size < 0) {
      LM_DBG("Domain name not found: %s\n", query_name);
      if (dnscache_put_func(name,af==AF_INET?T_A:T_AAAA,NULL,0,1,0) < 0)
        LM_ERR("Failed to store %s - %d in cache\n",name,af);
      return NULL;
    }

    if (get_dns_answer(&buff,size,query_name,type,&min_ttl) < 0) {
      LM_ERR("Failed to get dns answer for %s\n", query_name);
      return NULL;
    }

    /* Check if we got actual addresses or just a CNAME */
    if (global_he.h_addr_list && global_he.h_addr_list[0] != NULL) {
      /* We have addresses, done */
      LM_DBG("Resolved %s to addresses (CNAME chain depth: %d)\n",
        name, cname_chain_depth);
      break;
    }

    /* No addresses - check if we have a CNAME to follow */
    if (global_he.h_name && strcmp(global_he.h_name, query_name) != 0) {
      /* We have a CNAME, follow it */
      LM_DBG("Following CNAME: %s -> %s\n", query_name, global_he.h_name);

      /* Copy canonical name for next iteration */
      if (strlen(global_he.h_name) >= DNS_MAX_NAME) {
        LM_ERR("CNAME target too long: %s\n", global_he.h_name);
        return NULL;
      }
      strcpy(cname_chain_name, global_he.h_name);
      query_name = cname_chain_name;
      cname_chain_depth++;
    } else {
      /* No addresses and no CNAME to follow - this is an error */
      LM_WARN("No addresses and no CNAME for %s\n", query_name);
      if (dnscache_put_func(name,af==AF_INET?T_A:T_AAAA,NULL,0,1,0) < 0)
        LM_ERR("Failed to store %s - %d in cache\n",name,af);
      return NULL;
    }
  }

  if (cname_chain_depth >= MAX_CNAME_CHAIN_DEPTH) {
    LM_ERR("CNAME chain too deep for %s (depth: %d)\n", name, cname_chain_depth);
    return NULL;
  }

  if (dnscache_put_func(name,af==AF_INET?T_A:T_AAAA,&global_he,-1,0,min_ttl) < 0)
    LM_ERR("Failed to store %s - %d in cache\n",name,af);
  return &global_he;
}

inline struct hostent* resolvehost_af(char* name, int no_ip_test, int af)
{
  static struct hostent *he = NULL;
#ifdef HAVE_GETIPNODEBYNAME
  int err;
  static struct hostent *he2 = NULL;
#endif
  struct timeval start;
  struct ip_addr *ip;
  str s;

  if (!no_ip_test) {
    s.s = (char *)name;
    s.len = strlen(name);

    /* check if it's an ip address */
    if (af != AF_INET6 && (ip = str2ip(&s)))
      return ip_addr2he(&s, ip);
    if (af != AF_INET && (ip = str2ip6(&s)))
      return ip_addr2he(&s, ip);
  }

  start_expire_timer(start, execdnsthreshold);

  if (af == AF_INET6 || (af == 0 && dns_try_ipv6)) {
    /* try ipv6 */
  #ifdef HAVE_GETHOSTBYNAME2
    if (dnscache_fetch_func)
          he = own_gethostbyname2(name,AF_INET6);
    else
      he = gethostbyname2(name, AF_INET6);

  #elif defined HAVE_GETIPNODEBYNAME
    /* on solaris 8 getipnodebyname has a memory leak,
     * after some time calls to it will fail with err=3
     * solution: patch your solaris 8 installation */
    if (he2) freehostent(he2);
    he = he2 = getipnodebyname(name, AF_INET6, 0, &err);
  #else
    #error "neither gethostbyname2 or getipnodebyname present"
  #endif
    if (he != 0)
      /* return the inet6 result if exists */
      goto out;
  }

  if (af != AF_INET6) {
    if (dnscache_fetch_func)
      he = own_gethostbyname2(name,AF_INET);
    else
      he = gethostbyname(name);
  }

out:
  _stop_expire_timer(start, execdnsthreshold, "dns",
              name, strlen(name), 0, dns_slow_queries, dns_total_queries);
  return he;
}

inline struct hostent* resolvehost(char* name, int no_ip_test)
{
  return resolvehost_af(name, no_ip_test, 0);
}

struct hostent * own_gethostbyaddr(void *addr, socklen_t len, int af)
{
  const unsigned char *uaddr = (const u_char *)addr;
  static const u_char mapped[] = { 0,0, 0,0, 0,0, 0,0, 0,0, 0xff,0xff };
  static const u_char tunnelled[] = { 0,0, 0,0, 0,0, 0,0, 0,0, 0,0 };
  int n;
  int ret;
  static union dns_query ptr_buff;
  socklen_t size;
  char qbuf[DNS_MAX_NAME+1];
  char *qp=NULL;
  int min_ttl=INT_MAX;
  struct hostent *cached_he;

  if (af == AF_INET6 && len == 16 &&
  (!memcmp(uaddr, mapped, sizeof mapped) ||
  !memcmp(uaddr, tunnelled, sizeof tunnelled))) {
    /* Unmap. */
    addr += sizeof mapped;
    uaddr += sizeof mapped;
    af = AF_INET;
    len = 4;
  }

  switch (af) {
    case AF_INET:
      size = 4;
      break;
    case AF_INET6:
      size = 16;
      break;
    default:
      LM_ERR("unexpected af = %d\n",af);
      return NULL;
  }

  if (size != len) {
    LM_ERR("size = %d, len = %d\n",size,len);
    return NULL;
  }

  cached_he = (struct hostent *)dnscache_fetch_func(addr,T_PTR,af==AF_INET?4:16);
  if (cached_he == NULL) {
    LM_DBG("not found in cache or other internal error\n");
    goto query;
  } else if (cached_he == (void *)-1) {
    LM_DBG("previously failed query\n");
    return NULL;
  } else {
    LM_DBG("cache hit for PTR - %d\n",af);
    return cached_he;
  }

query:
  switch (af) {
    case AF_INET:
      sprintf(qbuf, "%u.%u.%u.%u.in-addr.arpa",
        (uaddr[3] & 0xff),
        (uaddr[2] & 0xff),
        (uaddr[1] & 0xff),
        (uaddr[0] & 0xff));
      break;
    case AF_INET6:
      qp = qbuf;
      for (n = 15; n >= 0; n--) {
        qp += sprintf(qp, "%x.%x.",
        uaddr[n] & 0xf,
        (uaddr[n] >> 4) & 0xf);
      }
      strcpy(qp, "ip6.arpa");
      break;
  }

  global_he.h_addrtype=af;
  global_he.h_length=len;

  ret=res_search(qbuf,C_IN,T_PTR,ptr_buff.buff,sizeof(ptr_buff.buff));
  if (ret < 0) {
    LM_DBG("ptr not found\n");
    if (dnscache_put_func(addr,T_PTR,NULL,len,1,0) < 0)
      LM_ERR("Failed to store PTR in cache\n");
    return NULL;
  }

  if (get_dns_answer(&ptr_buff,ret,qbuf,T_PTR,&min_ttl) < 0) {
    LM_ERR("Failed to get dns answer\n");
    return NULL;
  }

  if (dnscache_put_func(addr,T_PTR,&global_he,len,0,min_ttl) < 0)
    LM_ERR("Failed to store PTR in cache\n");
  return &global_he;
}


struct hostent* rev_resolvehost(struct ip_addr *ip)
{
  if (dnscache_fetch_func != NULL) {
    return own_gethostbyaddr((char*)(ip)->u.addr, (ip)->len, (ip)->af);
  } else
    return gethostbyaddr((char*)(ip)->u.addr, (ip)->len, (ip)->af);
}

/*! \brief checks if ip is in host(name) and ?host(ip)=name?
 * ip must be in network byte order!
 *  resolver = DO_DNS | DO_REV_DNS; if 0 no dns check is made
 * \return 0 if equal */
int check_ip_address(struct ip_addr* ip, str *name,
        unsigned short port, unsigned short proto, int resolver)
{
  struct ip_addr *ip2;
  struct hostent* he;
  int i;

  /* maybe we are lucky and host (name) is an IP */
  if ( (ip2=str2ip(name))!=NULL || (ip2=str2ip6(name))!=NULL ) {
    /* It's an IP :D */
    if (ip_addr_cmp(ip, ip2))
      return 0;
    return -1;
  }

  /* host is not an IP, do the DNS lookups on it :(*/
  if (port==0) port=SIP_PORT;
  if (resolver&DO_DNS){
    LM_DBG("doing dns lookup\n");
    /* try all names ips */
    he=sip_resolvehost(name, &port, &proto, 0, 0);
    if (he && (int)ip->af==he->h_addrtype){
      for(i=0;he && he->h_addr_list[i];i++){
        if ( memcmp(&he->h_addr_list[i], ip->u.addr, ip->len)==0)
          return 0;
      }
    }
  }
  if (resolver&DO_REV_DNS){
    LM_DBG("doing rev. dns lookup\n");
    /* try reverse dns */
    he=rev_resolvehost(ip);
    if (he && (strncmp(he->h_name, name->s, name->len)==0))
      return 0;
    for (i=0; he && he->h_aliases[i];i++){
      if (strncmp(he->h_aliases[i],name->s, name->len)==0)
        return 0;
    }
  }
  return -1;
}



/*! \brief Initialize the DNS resolver
 * retr_time  - time before retransmitting (must be >0)
 * retr_no    - retransmissions number
 * servers_no - how many dns servers will be used
 *                      (from the one listed in /etc/resolv.conf)
 * search     - if 0 the search list in /etc/resolv.conf will
 *                      be ignored (HINT: even if you don't have a
 *                      search list in resolv.conf, it's still better
 *                      to set search to 0, because an empty searchlist
 *                      means in fact search "" => it takes more time)
 * If any of the parameters <0, the default (system specific) value
 * will be used. See also resolv.conf(5).
 * \return 0 on success, -1 on error
 */
int resolv_init(void)
{
  res_init();
#ifdef HAVE_RESOLV_RES
  if (dns_retr_time>0)
    _res.retrans=dns_retr_time;
  if (dns_retr_no>0)
    _res.retry=dns_retr_no;
  if (dns_servers_no>=0)
    _res.nscount=dns_servers_no;
  if (dns_search_list==0)
    _res.options&=~(RES_DEFNAMES|RES_DNSRCH);
#else
#warning "no resolv timeout support"
  LM_WARN("no resolv options support - resolv options will be ignored\n");
#endif

  if (register_stat("dns", "dns_total_queries", &dns_total_queries, 0) ||
      register_stat("dns", "dns_slow_queries", &dns_slow_queries, 0)) {
    LM_ERR("failed to register DNS stats\n");
    return -1;
  }

  return 0;
}



/*! \brief Initialize blacklist */
int resolv_blacklist_init(void)
{
  str name = str_init(DNS_REVOLVER_BL_NAME);

  if (!disable_dns_blacklist) {
    failover_bl = create_bl_head(_str("dns"),
      BL_DO_EXPIRE|BL_BY_DEFAULT, 0, 0, &name);
    if (failover_bl==NULL) {
      LM_ERR("failed to create blacklist\n");
      return -1;
    }
  }
  return 0;
}


/*! \brief Skips over a domain name in a dns message
 *  (it can be  a sequence of labels ending in \\0, a pointer or
 *   a sequence of labels ending in a pointer -- see rfc1035
 *   returns pointer after the domain name or null on error
 */
unsigned char* dns_skipname(unsigned char* p, unsigned char* end)
{
  while(p<end) {
    /* check if \0 (root label length) */
    if (*p==0){
      p+=1;
      break;
    }
    /* check if we found a pointer */
    if (((*p)&0xc0)==0xc0){
      /* if pointer skip over it (2 bytes) & we found the end */
      p+=2;
      break;
    }
    /* normal label */
    p+=*p+1;
  }
  return (p>=end)?0:p;
}



/*! \brief parses the srv record into a srv_rdata structure
 *   \param msg   - pointer to the dns message
 *   \param end   - pointer to the end of the message
 *   \param rdata - pointer  to the rdata part of the srv answer
 *   \return 0 on error, or a dyn. alloc'ed srv_rdata structure
 *
 * SRV rdata format:
 *            111111
 *  0123456789012345
 * +----------------+
 * |     priority   |
 * |----------------|
 * |     weight     |
 * |----------------|
 * |   port number  |
 * |----------------|
 * |                |
 * ~      name      ~
 * |                |
 * +----------------+
 */
struct srv_rdata* dns_srv_parser( unsigned char* msg, unsigned char* end,
                  unsigned char* rdata)
{
  struct srv_rdata* srv;
  int len;

  srv=0;
  if ((rdata+6)>=end) goto error;
  srv=(struct srv_rdata*)local_malloc(sizeof(struct srv_rdata));
  if (srv==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }

  memcpy((void*)&srv->priority, rdata, 2);
  memcpy((void*)&srv->weight,   rdata+2, 2);
  memcpy((void*)&srv->port,     rdata+4, 2);
  rdata+=6;
  srv->priority=ntohs(srv->priority);
  srv->weight=ntohs(srv->weight);
  srv->port=ntohs(srv->port);
  if ((len=dn_expand(msg, end, rdata, srv->name, MAX_DNS_NAME-1))==-1)
    goto error;
  /* add terminating 0 ? (warning: len=compressed name len) */
  srv->name_len=strlen(srv->name);
  return srv;
error:
  if (srv) local_free(srv);
  return 0;
}


/*! \brief parses the naptr record into a naptr_rdata structure
 *   \param msg   - pointer to the dns message
 *   \param end   - pointer to the end of the message
 *   \param rdata - pointer  to the rdata part of the naptr answer
 *   \return  0 on error, or a dyn. alloc'ed naptr_rdata structure
 *
 * NAPTR rdata format:
 *            111111
 *  0123456789012345
 * +----------------+
 * |      order     |
 * |----------------|
 * |   preference   |
 * |----------------|
 * ~     flags      ~
 * |   (string)     |
 * |----------------|
 * ~    services    ~
 * |   (string)     |
 * |----------------|
 * ~    regexp      ~
 * |   (string)     |
 * |----------------|
 * ~  replacement   ~
   |    (name)      |
 * +----------------+
 */
struct naptr_rdata* dns_naptr_parser( unsigned char* msg, unsigned char* end,
                  unsigned char* rdata)
{
  struct naptr_rdata* naptr;

  naptr = 0;
  if ((rdata + 7) >= end)
    goto error;
  naptr=(struct naptr_rdata*)local_malloc(sizeof(struct naptr_rdata));
  if (naptr == 0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }

  memcpy((void*)&naptr->order, rdata, 2);
  naptr->order=ntohs(naptr->order);
  memcpy((void*)&naptr->pref, rdata + 2, 2);
  naptr->pref=ntohs(naptr->pref);
  naptr->flags_len = (int)rdata[4];
  if ((rdata + 7 +  naptr->flags_len) >= end)
    goto error;
  memcpy((void*)&naptr->flags, rdata + 5, naptr->flags_len);
  naptr->services_len = (int)rdata[5 + naptr->flags_len];
  if ((rdata + 7 + naptr->flags_len + naptr->services_len) >= end) goto error;
  memcpy((void*)&naptr->services, rdata + 6 + naptr->flags_len, naptr->services_len);
  naptr->regexp_len = (int)rdata[6 + naptr->flags_len + naptr->services_len];
  if ((rdata + 7 + naptr->flags_len + naptr->services_len + naptr->regexp_len) >= end)
    goto error;
  memcpy((void*)&naptr->regexp, rdata + 7 + naptr->flags_len +
        naptr->services_len, naptr->regexp_len);
  rdata = rdata + 7 + naptr->flags_len + naptr->services_len + naptr->regexp_len;
  naptr->repl_len=dn_expand(msg, end, rdata, naptr->repl, MAX_DNS_NAME-1);
  if ( naptr->repl_len==(unsigned int)-1 )
    goto error;
  /* add terminating 0 ? (warning: len=compressed name len) */
  return naptr;
error:
  if (naptr)
    local_free(naptr);
  return 0;
}



/*! \brief Parses a CNAME record into a cname_rdata structure */
struct cname_rdata* dns_cname_parser( unsigned char* msg, unsigned char* end,
                    unsigned char* rdata)
{
  struct cname_rdata* cname;
  int len;

  cname=0;
  cname=(struct cname_rdata*)local_malloc(sizeof(struct cname_rdata));
  if(cname==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }
  if ((len=dn_expand(msg, end, rdata, cname->name, MAX_DNS_NAME-1))==-1)
    goto error;
  return cname;
error:
  if (cname) local_free(cname);
  return 0;
}



/*! \brief Parses an A record rdata into an a_rdata structure
 * \return 0 on error or a dyn. alloc'ed a_rdata struct
 */
struct a_rdata* dns_a_parser(unsigned char* rdata, unsigned char* end)
{
  struct a_rdata* a;

  if (rdata+4>=end) goto error;
  a=(struct a_rdata*)local_malloc(sizeof(struct a_rdata));
  if (a==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }
  memcpy(a->ip, rdata, 4);
  return a;
error:
  return 0;
}



/*! \brief Parses an AAAA (ipv6) record rdata into an aaaa_rdata structure
 * \return 0 on error or a dyn. alloc'ed aaaa_rdata struct
 */
struct aaaa_rdata* dns_aaaa_parser(unsigned char* rdata, unsigned char* end)
{
  struct aaaa_rdata* aaaa;

  if (rdata+16>=end) goto error;
  aaaa=(struct aaaa_rdata*)local_malloc(sizeof(struct aaaa_rdata));
  if (aaaa==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }
  memcpy(aaaa->ip6, rdata, 16);
  return aaaa;
error:
  return 0;
}

/*! \brief Parses a TXT record into a txt_rdata structure
 * \note RFC1035:
 * - <character-string> is a single length octet followed by that number of characters.
 * - TXT-DATA        One or more <character-string>s.
 *
 * We only take the first string here.
 */
struct txt_rdata* dns_txt_parser( unsigned char* msg, unsigned char* end,
                    unsigned char* rdata)
{
  struct txt_rdata* txt;
  unsigned int len;

  txt=0;
  txt=(struct txt_rdata*)local_malloc(sizeof(struct txt_rdata));
  if(txt==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }

  len = *rdata;
  if (rdata + 1 + len >= end)
    goto error; /*  something fishy in the record */

#if 0
  /* Comparison is always false because len <= 255. */
  if (len >= sizeof(txt->txt))
    goto error; /* not enough space? */
#endif
  memcpy(txt->txt, rdata+1, len);
  txt->txt[len] = 0;    /* 0-terminate string */
  return txt;

error:
  if (txt)
    local_free(txt);
  return 0;
}


/*! \brief parses a EBL record into a ebl_rdata structure
 *
 * EBL Record
 *
 *    0  1  2  3  4  5  6  7
 *    +--+--+--+--+--+--+--+--+
 *    |       POSITION        |
 *    +--+--+--+--+--+--+--+--+
 *    /       SEPARATOR       /
 *    +--+--+--+--+--+--+--+--+
 *    /         APEX          /
 *    +--+--+--+--+--+--+--+--+
 */
struct ebl_rdata* dns_ebl_parser( unsigned char* msg, unsigned char* end,
                    unsigned char* rdata)
{
  struct ebl_rdata* ebl;
  int len;

  ebl=0;
  ebl=(struct ebl_rdata*)local_malloc(sizeof(struct ebl_rdata));
  if(ebl==0){
    LM_ERR("out of pkg memory\n");
    goto error;
  }

  len = *rdata;
  if (rdata + 1 + len >= end)
    goto error; /*  something fishy in the record */

  ebl->position = *rdata;
  if ( ebl->position > 15 )
    goto error; /* doesn't make sense: E.164 numbers can't be longer */

  rdata++;

  ebl->separator_len = (int) *rdata;
  rdata++;
  if ((rdata + 1 +  ebl->separator_len) >= end)
    goto error;
  memcpy((void*)&ebl->separator, rdata, ebl->separator_len);
  rdata += ebl->separator_len;

  ebl->apex_len=dn_expand(msg, end, rdata, ebl->apex, MAX_DNS_NAME-1);
  if ( ebl->apex_len==(unsigned int)-1 )
    goto error;
  ebl->apex[ebl->apex_len] = 0; /* 0-terminate string */
  return ebl;

error:
  if (ebl)
    local_free(ebl);
  return 0;
}




/*! \brief frees completely a struct rdata list */
void free_rdata_list(struct rdata* head)
{
  struct rdata* l;
  struct rdata* next_l;

  for( l=head; l ; l=next_l) {
    next_l = l->next;
    /* free the parsed rdata*/
    if (l->rdata)
      local_free(l->rdata);
    local_free(l);
  }
}



/*! \brief gets the DNS records for name:type
 * \return A dyn. alloc'ed struct rdata linked list with the parsed responses
 * or 0 on error
 * \note see rfc1035 for the query/response format */
struct rdata* get_record(char* name, int type)
{
  int size;
  int qno, answers_no;
  int r;
  static union dns_query buff;
  unsigned char* p;
/*  unsigned char* t;
  int ans_len;
  static unsigned char answer[ANS_SIZE]; */
  static int rdata_struct_len=sizeof(struct rdata)-sizeof(void *) -
    sizeof(struct rdata *);
  unsigned char* end;
  unsigned short rtype, class, rdlength;
  unsigned int ttl;
  unsigned int min_ttl = UINT_MAX;
  struct rdata* head;
  struct rdata** crt;
  struct rdata** last;
  struct rdata* rd;
  struct srv_rdata* srv_rd;
  struct srv_rdata* crt_srv;
  struct naptr_rdata* naptr_rd;
  struct txt_rdata* txt_rd;
  struct ebl_rdata* ebl_rd;
  struct timeval start;
  int rdata_buf_len=0;

  if (dnscache_fetch_func != NULL) {
    head = (struct rdata *)dnscache_fetch_func(name,type,0);
    if (head == NULL) {
      LM_DBG("not found in cache or other internal error\n");
      goto query;
    } else if (head == (void *)-1) {
      LM_DBG("previously failed query\n");
      goto not_found;
    } else {
      LM_DBG("cache hit for %s - %d\n",name,type);
      return head;
    }
  }

query:
  start_expire_timer(start,execdnsthreshold);
  size=res_search(name, C_IN, type, buff.buff, sizeof(buff));
  _stop_expire_timer(start, execdnsthreshold, "dns",
              name, strlen(name), 0, dns_slow_queries, dns_total_queries);

  if (size<0) {
    LM_DBG("lookup(%s, %d) failed\n", name, type);
    if (dnscache_put_func != NULL) {
      if (dnscache_put_func(name,type,NULL,0,1,0) < 0)
        LM_ERR("Failed to store %s - %d in cache\n",name,type);
    }
    goto not_found;
  }
  else if ((unsigned int)size > sizeof(buff)) size=sizeof(buff);
  head=rd=0;
  last=crt=&head;

  p=buff.buff+DNS_HDR_SIZE;
  end=buff.buff+size;
  if (p>=end) goto error_boundary;
  qno=ntohs((unsigned short)buff.hdr.qdcount);

  for (r=0; r<qno; r++){
    /* skip the name of the question */
    if ((p=dns_skipname(p, end))==0) {
      LM_ERR("skipname==0\n");
      goto error;
    }
    p+=2+2; /* skip QCODE & QCLASS */
  #if 0
    for (;(p<end && (*p)); p++);
    p+=1+2+2; /* skip the ending  '\0, QCODE and QCLASS */
  #endif
    if (p>=end) {
      LM_ERR("p>=end\n");
      goto error;
    }
  };
  answers_no=ntohs((unsigned short)buff.hdr.ancount);
  /*ans_len=ANS_SIZE;
  t=answer;*/
  for (r=0; (r<answers_no) && (p<end); r++){
    /*  ignore it the default domain name */
    if ((p=dns_skipname(p, end))==0) {
      LM_ERR("skip_name=0 (#2)\n");
      goto error;
    }
    /*
    skip=dn_expand(buff.buff, end, p, t, ans_len);
    p+=skip;
    */
    /* check if enough space is left for type, class, ttl & size */
    if ((p+2+2+4+2)>=end) goto error_boundary;
    /* get type */
    memcpy((void*) &rtype, (void*)p, 2);
    rtype=ntohs(rtype);
    p+=2;
    /* get  class */
    memcpy((void*) &class, (void*)p, 2);
    class=ntohs(class);
    p+=2;
    /* get ttl*/
    memcpy((void*) &ttl, (void*)p, 4);
    ttl=ntohl(ttl);
    if (ttl < min_ttl)
      min_ttl = ttl;
    p+=4;
    /* get size */
    memcpy((void*)&rdlength, (void*)p, 2);
    rdlength=ntohs(rdlength);
    p+=2;
    /* check for type */
    /*
    if (rtype!=type){
      LM_WAR("wrong type in answer (%d!=%d)\n", rtype, type);
      p+=rdlength;
      continue;
    }
    */
    /* expand the "type" record  (rdata)*/

    rd=(struct rdata*) local_malloc(sizeof(struct rdata));
    if (rd==0){
      LM_ERR("out of pkg memory\n");
      goto error;
    }
    if (dnscache_put_func)
      rdata_buf_len+=rdata_struct_len;
    rd->type=rtype;
    rd->class=class;
    rd->ttl=ttl;
    rd->next=0;
    switch(rtype){
      case T_SRV:
        srv_rd= dns_srv_parser(buff.buff, end, p);
        if (srv_rd==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=4*sizeof(unsigned short) +
          sizeof(unsigned int ) + srv_rd->name_len+1;
        rd->rdata=(void*)srv_rd;

        /* insert sorted into the list */
        for (crt=&head; *crt; crt= &((*crt)->next)){
          crt_srv=(struct srv_rdata*)(*crt)->rdata;
          if ((srv_rd->priority <  crt_srv->priority) ||
             ( (srv_rd->priority == crt_srv->priority) &&
               ((srv_rd->weight==0) || (crt_srv->weight!=0)) ) ){
            /* insert here */
            goto skip;
          }
        }
        last=&(rd->next); /*end of for => this will be the last elem*/
      skip:
        /* insert here */
        rd->next=*crt;
        *crt=rd;

        break;
      case T_A:
        rd->rdata=(void*) dns_a_parser(p,end);
        if (rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=sizeof(struct a_rdata);
        *last=rd; /* last points to the last "next" or the list head*/
        last=&(rd->next);
        break;
      case T_AAAA:
        rd->rdata=(void*) dns_aaaa_parser(p,end);
        if (rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=sizeof(struct aaaa_rdata);
        *last=rd;
        last=&(rd->next);
        break;
      case T_CNAME:
        rd->rdata=(void*) dns_cname_parser(buff.buff, end, p);
        if(rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=
          strlen(((struct cname_rdata *)rd->rdata)->name) +
          1 + sizeof(int);
        *last=rd;
        last=&(rd->next);
        break;
      case T_NAPTR:
        naptr_rd = dns_naptr_parser(buff.buff,end,p);
        rd->rdata=(void*) naptr_rd;
        if(rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=2*sizeof(unsigned short) +
          4*sizeof(unsigned int) + naptr_rd->flags_len+1 +
          + naptr_rd->services_len+1+naptr_rd->regexp_len +
          + 1 + naptr_rd->repl_len + 1;
        *last=rd;
        last=&(rd->next);
        break;
      case T_TXT:
        txt_rd = dns_txt_parser(buff.buff, end, p);
        rd->rdata=(void*) txt_rd;
        if(rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=sizeof(int)+strlen(txt_rd->txt)+1;
        *last=rd;
        last=&(rd->next);
        break;
      case T_EBL:
        ebl_rd = dns_ebl_parser(buff.buff, end, p);
        rd->rdata=(void*) ebl_rd;
        if(rd->rdata==0) goto error_parse;
        if (dnscache_put_func)
          rdata_buf_len+=sizeof(unsigned char)+
          2*sizeof(unsigned int)+ebl_rd->apex_len + 1 +
          ebl_rd->separator_len + 1;
        *last=rd;
        last=&(rd->next);
        break;
      default:
        LM_ERR("unknown type %d\n", rtype);
        rd->rdata=0;
        *last=rd;
        last=&(rd->next);
    }

    p+=rdlength;

  }

  if (dnscache_put_func != NULL) {
    if (dnscache_put_func(name,type,head,rdata_buf_len,0,min_ttl) < 0)
      LM_ERR("Failed to store %s - %d in cache\n",name,type);
  }
  return head;
error_boundary:
    LM_ERR("end of query buff reached\n");
    if(head)
      free_rdata_list(head);
    return 0;
error_parse:
    LM_ERR("rdata parse error \n");
    if (rd) local_free(rd); /* rd->rdata=0 & rd is not linked yet into
                   the list */
error:
    LM_ERR("get_record \n");
    if (head) free_rdata_list(head);
not_found:
  return 0;
}



static inline int get_naptr_proto(struct naptr_rdata *n)
{
  if (n->services[3]=='s' || n->services[3]=='S' )
    return PROTO_TLS;
  switch (n->services[n->services_len-1]) {
    case 'U':
    case 'u':
      return PROTO_UDP;
      break;
    case 'T':
    case 't':
      return PROTO_TCP;
      break;
    case 'S':
    case 's':
      return PROTO_SCTP;
      break;
  }
  LM_CRIT("failed to detect proto\n");
  return PROTO_NONE;
}



static inline int srv2dns_node(struct rdata *head, struct dns_node **dn)
{
  unsigned int mem;
  unsigned int l;
  struct rdata *r;
  struct dns_node *n;
  char *p;

  /* calculate how much mem is required */
  mem = sizeof(struct dns_node);
  for( r=head,l=0 ; r ; r=r->next,l++ )
    mem +=sizeof(struct dns_val) + get_naptr(r)->repl_len + 1;

  n = (struct dns_node*)shm_malloc(mem);
  if (n==NULL) {
    LM_ERR("no more shm mem (%d)\n", mem);
    return -1;
  }

  n->type = DNS_NODE_SRV;
  n->size = mem;
  n->idx = 0;
  n->no = l;
  n->kids = *dn;
  *dn = n;

  n->vals = (struct dns_val*)(n+1);
  p = (char*)(n->vals+l);
  for( r=head,l=0 ; r ; r=r->next,l++ ) {
    n->vals[l].ival = get_naptr_proto( get_naptr(r) );
    n->vals[l].sval = p;
    memcpy( p, get_naptr(r)->repl, get_naptr(r)->repl_len );
    p += get_naptr(r)->repl_len;
    *(p++) = 0;
  }
  return 0;
}


static inline int a2dns_node(struct rdata *head, struct dns_node **dn)
{
  unsigned int mem;
  unsigned int l;
  struct rdata *r;
  struct dns_node *n;
  char *p;

  /* calculate how much mem is required */
  mem = sizeof(struct dns_node);
  for( r=head,l=0 ; r ; r=r->next,l++ ) {
    get_srv(r)->name_len = strlen(get_srv(r)->name);
    mem +=sizeof(struct dns_val) + get_srv(r)->name_len + 1;
    }

  n = (struct dns_node*)shm_malloc(mem);
  if (n==NULL) {
    LM_ERR("no more shm mem (%d)\n", mem);
    return -1;
  }

  n->type = DNS_NODE_A;
  n->size = mem;
  n->idx = 0;
  n->no = l;
  n->kids = 0;
  *dn = n;

  n->vals = (struct dns_val*)(n+1);
  p = (char*)(n->vals+l);
  for( r=head,l=0 ; r ; r=r->next,l++ ) {
    n->vals[l].ival = get_srv(r)->port;
    n->vals[l].sval = p;
    memcpy( p, get_srv(r)->name, get_srv(r)->name_len );
    LM_DBG("storing %.*s:%d\n", get_srv(r)->name_len,p,n->vals[l].ival);
    p += get_srv(r)->name_len;
    *(p++) = 0;
  }

  return 0;
}


static inline void sort_srvs(struct rdata **head)
{
#define rd2srv(_rd) ((struct srv_rdata*)_rd->rdata)
  struct rdata *rd = *head;
  struct rdata *tail = NULL;
  struct rdata *rd_next;
  struct rdata *crt;
  struct rdata *crt2;
  unsigned int weight_sum;
  unsigned int rand_no;


  *head = NULL;

  while( rd ) {
    rd_next = rd->next;
    if (rd->type!=T_SRV) {
      rd->next = NULL;
      free_rdata_list(rd);
    } else {
      /* only on element with same priority ? */
      if (rd_next==NULL ||
      rd2srv(rd)->priority!=rd2srv(rd_next)->priority) {
        if (tail) {tail->next=rd;tail=rd;}
        else {*head=tail=rd;}
        rd->next = NULL;
      } else {
        /* multiple nodes with same priority */
        /* -> calculate running sums (and detect the end) */
        weight_sum = rd2srv(rd)->running_sum = rd2srv(rd)->weight;
        crt = rd;
        while( crt && crt->next &&
        (rd2srv(rd)->priority==rd2srv(crt->next)->priority) ) {
          crt = crt->next;
          weight_sum += rd2srv(crt)->weight;
          rd2srv(crt)->running_sum = weight_sum;
        }
        /* crt will point to last RR with same priority */
        rd_next = crt->next;
        crt->next = NULL;

        /* order the elements between rd and crt */
        while (rd->next) {
          rand_no = (unsigned int)
            (weight_sum*((float)rand()/(float)RAND_MAX));
          for( crt=rd,crt2=NULL ; crt ; crt2=crt,crt=crt->next) {
            if (rd2srv(crt)->running_sum>=rand_no) break;
          }
          if (crt == NULL) {
            LM_CRIT("bug in sorting SRVs - rand>sum\n");
            crt = rd;
            crt2 = NULL;
          }
          /* remove the element from the list ... */
          if (crt2==NULL) { rd = rd->next;}
          else {crt2->next = crt->next;}
          /* .... and update the running sums */
          for ( crt2=crt->next ; crt2 ; crt2=crt2->next)
            rd2srv(crt2)->running_sum -= rd2srv(crt)->weight;
          weight_sum -= rd2srv(crt)->weight;
          /* link the crt in the new list */
          crt->next = 0;
          if (tail) {tail->next=crt;tail=crt;}
          else {*head=tail=crt;}
        }
        /* just insert the last remaining element */
        tail->next = rd; tail = rd ;
      }
    }

    rd = rd_next;
  }
}


static inline struct hostent* do_srv_lookup(char *name, unsigned short* port, struct dns_node **dn)
{
  struct hostent *he;
  struct srv_rdata *srv;
  struct rdata *head;
  struct rdata *rd;

  /* perform SRV lookup */
  head = get_record( name, T_SRV);
  sort_srvs(&head);
  for( rd=head; rd ; rd=rd->next ) {
    if (rd->type!=T_SRV)
      continue; /*should never happen*/
    srv = (struct srv_rdata*) rd->rdata;
    if (srv==0) {
      LM_CRIT("null rdata\n");
      free_rdata_list(head);
      return 0;
    }
    LM_DBG("resolving [%s]\n",srv->name);
    he = resolvehost(srv->name, 1);
    if ( he!=0 ) {
      LM_DBG("SRV(%s) = %s:%d\n",     name, srv->name, srv->port);
      if (port) *port=srv->port;
      if (dn && rd->next && a2dns_node( rd->next, dn)==-1)
          *dn = 0;
      free_rdata_list(head);
      return he;
    }
  }
  if (head)
    free_rdata_list(head);
  return 0;
}


#define naptr_prio(_naptr) \
  ((unsigned int)((((_naptr)->order) << 16) + ((_naptr)->pref)))

static inline void filter_and_sort_naptr( struct rdata** head_p, struct rdata** filtered_p, int is_sips)
{
  struct naptr_rdata *naptr;
  struct rdata *head;
  struct rdata *last;
  struct rdata *out;
  struct rdata *l, *ln, *it, *itp;
  unsigned int prio;
  char p;

  head = 0;
  last = 0;
  out = 0;

  for( l=*head_p ; l ; l=ln ) {
    ln = l->next;

    if (l->type != T_NAPTR)
      goto skip0; /*should never happen*/

    naptr = (struct naptr_rdata*)l->rdata;
    if (naptr == 0) {
      LM_CRIT("null rdata\n");
      goto skip0;
    }

    /* first filter out by flag and service */
    if (naptr->flags_len!=1||(naptr->flags[0]!='s'&&naptr->flags[0]!='S'))
      goto skip;
    if (naptr->repl_len==0 || naptr->regexp_len!=0 )
      goto skip;
    if ( (is_sips || naptr->services_len!=7 ||
      strncasecmp(naptr->services,"sip+d2",6) ) &&
    (
    naptr->services_len!=8 || strncasecmp(naptr->services,"sips+d2",7)))
      goto skip;
    p = naptr->services[naptr->services_len-1];
    /* by default we do not support SCTP */
    if ( p!='U' && p!='u'
    && ((p!='T' && p!='t'))
    && ((p!='S' && p!='s'))
    )
      goto skip;
    /* is it valid? (SIPS+D2U is not!) */
    if ( naptr->services_len==8 && (p=='U' || p=='u'))
      goto skip;

    LM_DBG("found valid %.*s -> %s\n",
      (int)naptr->services_len,naptr->services, naptr->repl);

    /* this is a supported service -> add it according to order to the
     * new head list */
    prio = naptr_prio(get_naptr(l));
    if (head==0) {
      head = last = l;
      l->next = 0;
    } else if ( naptr_prio(get_naptr(head)) >= prio ) {
      l->next = head;
      head = l;
    } else if ( prio >= naptr_prio(get_naptr(last)) ) {
      l->next = 0;
      last->next = l;
      last = l;
    } else {
      for( itp=head,it=head->next ; it && it->next ; itp=it,it=it->next ){
        if ( prio <= naptr_prio(get_naptr(it)))
          break;
      }
      l->next = itp->next;
      itp->next = l;
    }

    continue;
skip:
    LM_DBG("skipping %.*s -> %s\n",
      (int)naptr->services_len, naptr->services, naptr->repl);
skip0:
    l->next = out;
    out = l;
  }

  *head_p = head;
  *filtered_p = out;
}

#if 0
struct hostent* sip_resolvehost(str* name, unsigned short* port, int *proto,
                                int is_sips)
{
  static char tmp[MAX_DNS_NAME];
  struct ip_addr *ip;
  struct rdata *head;
  struct rdata *rd;
  struct hostent* he;

  if ( (is_sips)
  && (tls_disable)
  ) {
    LM_ERR("cannot resolve SIPS as no TLS support is configured\n");
    return 0;
  }

  /* check if it's an ip address */
  if ( ((ip=str2ip(name))!=0)
  || ((ip=str2ip6(name))!=0)
  ){
    /* we are lucky, this is an ip address */
    if (proto && *proto==PROTO_NONE)
      *proto = (is_sips)?PROTO_TLS:PROTO_UDP;
    if (port && *port==0)
      *port = (is_sips||((*proto)==PROTO_TLS))?SIPS_PORT:SIP_PORT;
    return ip_addr2he(name,ip);
  }

  /* do we have a port? */
  if ( !port || (*port)!=0 ) {
    /* have port -> no NAPTR, no SRV lookup, just A record lookup */
    LM_DBG("has port -> do A record lookup!\n");
    /* set default PROTO if not set */
    if (proto && *proto==PROTO_NONE)
      *proto = (is_sips)?PROTO_TLS:PROTO_UDP;
    goto do_a;
  }

  /* no port... what about proto? */
  if ( !proto || (*proto)!=PROTO_NONE ) {
    /* have proto, but no port -> do SRV lookup */
    LM_DBG("no port, has proto -> do SRV lookup!\n");
    if (is_sips && (*proto)!=PROTO_TLS) {
      LM_ERR("forced proto %d not matching sips uri\n", *proto);
      return 0;
    }
    goto do_srv;
  }

  LM_DBG("no port, no proto -> do NAPTR lookup!\n");
  /* no proto, no port -> do NAPTR lookup */
  if (name->len >= MAX_DNS_NAME) {
    LM_ERR("domain name too long\n");
    return 0;
  }
  memcpy(tmp, name->s, name->len);
  tmp[name->len] = '\0';
  /* do NAPTR lookup */
  head = get_record( tmp, T_NAPTR);
  if (head) {
    /* filter and sort the records */
    filter_and_sort_naptr( &head, &rd, is_sips);
    /* free what is useless */
    free_rdata_list( rd );
    /* process the NAPTR records */
    for( rd=head ; rd ; rd=rd->next ) {
      he = do_srv_lookup( get_naptr(rd)->repl, port );
      if ( he ) {
        *proto = get_naptr_proto( get_naptr(rd) );
        LM_DBG("found!\n");
        free_rdata_list(head);
        return he;
      }
    }
    if (head)
      free_rdata_list(head);
  }
  LM_DBG("no valid NAPTR record found for %.*s,"
    " trying direct SRV lookup...\n", name->len, name->s);
  *proto = (is_sips)?PROTO_TLS:PROTO_UDP;

do_srv:
  if ((name->len+SRV_MAX_PREFIX_LEN+1)>MAX_DNS_NAME) {
    LM_WARN("domain name too long (%d),"
      " unable to perform SRV lookup\n", name->len);
    /* set defaults */
    *port = (is_sips)?SIPS_PORT:SIP_PORT;
    goto do_a;
  }

  switch (*proto) {
    case PROTO_UDP:
      memcpy(tmp, SRV_UDP_PREFIX, SRV_UDP_PREFIX_LEN);
      memcpy(tmp+SRV_UDP_PREFIX_LEN, name->s, name->len);
      tmp[SRV_UDP_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_TCP:
      memcpy(tmp, SRV_TCP_PREFIX, SRV_TCP_PREFIX_LEN);
      memcpy(tmp+SRV_TCP_PREFIX_LEN, name->s, name->len);
      tmp[SRV_TCP_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_TLS:
      memcpy(tmp, SRV_TLS_PREFIX, SRV_TLS_PREFIX_LEN);
      memcpy(tmp+SRV_TLS_PREFIX_LEN, name->s, name->len);
      tmp[SRV_TLS_PREFIX_LEN + name->len] = '\0';
      break;
    default:
      goto err_proto;
  }

  he = do_srv_lookup( tmp, port );
  if (he)
    return he;

  LM_DBG("no valid SRV record found for %s,"
    " trying A record lookup...\n", tmp);
  /* set default port */
  *port = (is_sips||((*proto)==PROTO_TLS))?SIPS_PORT:SIP_PORT;

do_a:
  /* do A record lookup */
  if (name->len >= MAX_DNS_NAME) {
    LM_ERR("domain name too long\n");
    return 0;
  }
  memcpy(tmp, name->s, name->len);
  tmp[name->len] = '\0';
  he = resolvehost(tmp,1);
  return he;
err_proto:
  LM_ERR("unsupported proto %d\n", *proto);
  return 0;
}
#endif



struct hostent* sip_resolvehost( str* name, unsigned short* port,
    unsigned short *proto, int is_sips, struct dns_node **dn)
{
  static char tmp[MAX_DNS_NAME];
  struct ip_addr *ip;
  struct rdata *head;
  struct rdata *rd;
  struct hostent* he;
  unsigned short local_proto=PROTO_NONE;

  if (dn)
    *dn = 0;

  if (proto==NULL)
    proto = &local_proto;

  /* check if it's an ip address */
  if ( ((ip=str2ip(name))!=0) || ((ip=str2ip6(name))!=0) ){
    /* we are lucky, this is an ip address */
    if (*proto==PROTO_NONE)
      *proto = (is_sips)?PROTO_TLS:PROTO_UDP;
    if (port && *port==0)
      *port = protos[*proto].default_port;
    return ip_addr2he(name,ip);
  }

  /* do we have a port? */
  if ( port && (*port)!=0 ) {
    /* have port -> no NAPTR, no SRV lookup, just A record lookup */
    LM_DBG("has port -> do A record lookup!\n");
    /* set default PROTO if not set */
    if (*proto==PROTO_NONE)
      *proto = (is_sips)?PROTO_TLS:PROTO_UDP;
    goto do_a;
  }

  /* no port... what about proto? */
  if ( (*proto)!=PROTO_NONE ) {
    /* have proto, but no port -> do SRV lookup */
    LM_DBG("no port, has proto -> do SRV lookup!\n");
    if (is_sips && (*proto)!=PROTO_TLS) {
      LM_ERR("forced proto %d not matching sips uri\n", *proto);
      return 0;
    }
    goto do_srv;
  }

  if ( dns_try_naptr==0 ) {
    *proto = (is_sips)?PROTO_TLS:PROTO_UDP;
    goto do_srv;
  }
  LM_DBG("no port, no proto -> do NAPTR lookup!\n");
  /* no proto, no port -> do NAPTR lookup */
  if (name->len >= MAX_DNS_NAME) {
    LM_ERR("domain name too long\n");
    return 0;
  }
  memcpy(tmp, name->s, name->len);
  tmp[name->len] = '\0';
  /* do NAPTR lookup */
  head = get_record( tmp, T_NAPTR);
  if (head) {
    /* filter and sort the records */
    filter_and_sort_naptr( &head, &rd, is_sips);
    /* free what is useless */
    free_rdata_list( rd );
    /* process the NAPTR records */
    for( rd=head ; rd ; rd=rd->next ) {
      *proto = get_naptr_proto( get_naptr(rd) );
      he = do_srv_lookup( get_naptr(rd)->repl, port, dn);
      if ( he ) {
        LM_DBG("valid SRV found!\n");
        if (dn) {
          /* save the state of the resolver for failure cases */
          if (*dn==NULL)
            rd = rd->next;
          if (rd && srv2dns_node( rd, dn)!=0) {
            shm_free(*dn);
            *dn = 0;
          }
        }
        free_rdata_list(head);
        return he;
      }
    }
    if (head)
      free_rdata_list(head);
  }
  LM_DBG("no valid NAPTR record found for %.*s,"
    " trying direct SRV lookup...\n", name->len, name->s);
  *proto = (is_sips)?PROTO_TLS:PROTO_UDP;

do_srv:
  if ((name->len+SRV_MAX_PREFIX_LEN+1)>MAX_DNS_NAME) {
    LM_WARN("domain name too long (%d),"
      " unable to perform SRV lookup\n", name->len);
    /* set defaults */
    if (port) *port = (is_sips)?SIPS_PORT:SIP_PORT;
    goto do_a;
  }

  switch (*proto) {
    case PROTO_UDP:
      memcpy(tmp, SRV_UDP_PREFIX, SRV_UDP_PREFIX_LEN);
      memcpy(tmp+SRV_UDP_PREFIX_LEN, name->s, name->len);
      tmp[SRV_UDP_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_TCP:
      memcpy(tmp, SRV_TCP_PREFIX, SRV_TCP_PREFIX_LEN);
      memcpy(tmp+SRV_TCP_PREFIX_LEN, name->s, name->len);
      tmp[SRV_TCP_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_TLS:
      memcpy(tmp, SRV_TLS_PREFIX, SRV_TLS_PREFIX_LEN);
      memcpy(tmp+SRV_TLS_PREFIX_LEN, name->s, name->len);
      tmp[SRV_TLS_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_SCTP:
      memcpy(tmp, SRV_SCTP_PREFIX, SRV_SCTP_PREFIX_LEN);
      memcpy(tmp+SRV_SCTP_PREFIX_LEN, name->s, name->len);
      tmp[SRV_SCTP_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_WS:
      memcpy(tmp, SRV_WS_PREFIX, SRV_WS_PREFIX_LEN);
      memcpy(tmp+SRV_WS_PREFIX_LEN, name->s, name->len);
      tmp[SRV_WS_PREFIX_LEN + name->len] = '\0';
      break;
    case PROTO_WSS:
      memcpy(tmp, SRV_WSS_PREFIX, SRV_WSS_PREFIX_LEN);
      memcpy(tmp+SRV_WSS_PREFIX_LEN, name->s, name->len);
      tmp[SRV_WSS_PREFIX_LEN + name->len] = '\0';
      break;
    default:
      goto err_proto;
  }

  he = do_srv_lookup( tmp, port, dn);
  if (he)
    return he;

  LM_DBG("no valid SRV record found for %s, trying A record lookup...\n",
    tmp);
  /* set default port */
  if (port) *port = protos[*proto].default_port;

do_a:
  /* do A record lookup */
  if (name->len >= MAX_DNS_NAME) {
    LM_ERR("domain name too long\n");
    return 0;
  }
  memcpy(tmp, name->s, name->len);
  tmp[name->len] = '\0';
  he = resolvehost(tmp,1);
  return he;
err_proto:
  LM_ERR("unsupported proto %d\n", *proto);
  return 0;
}



static inline struct hostent* get_next_he(struct dns_node **node,
              unsigned short *proto, unsigned short *port)
{
  struct hostent  *he;
  struct dns_node *n;
  struct dns_node *last_srv;
  struct dns_node *dn;

  if (node==NULL || *node==NULL)
    return 0;

  n = *node;
  last_srv = NULL;
  he = 0;

  do {
    switch (n->type) {
      case DNS_NODE_SRV:
        last_srv = n;
        if (n->kids==NULL) {
          /* need to resolve this SRV and get all the AAA records */
          do {
            dn = 0;
            he = do_srv_lookup( n->vals[n->idx].sval, port, &dn);
            if (he) {
              *proto = n->vals[n->idx].ival;
              n->idx++;
              break;
            }
            n->idx++;
          } while(n->idx<n->no);
          if (he==NULL || (he && n->idx==n->no) ) {
            /* colapse the SRV node */
            shm_free(n);
            *node = dn;
            return he;
          }
          n->kids = dn;
          return he;
        }
        /* go for the AAA records */
        n = n->kids;
        break;
      case DNS_NODE_A:
        /* do resolve until success */
        do {
          he = resolvehost(n->vals[n->idx].sval,1);
          if (he) {
            *port = n->vals[n->idx].ival;
            n->idx++;
            break;
          }
          n->idx++;
        }while(n->idx<n->no);
        /* found something? */
        if (he==NULL || (he && n->idx==n->no)) {
          shm_free(n);
          /* any SRV level? */
          if (last_srv==NULL) {
            /* nothing left */
            *node = 0;
            return he;
          }
          last_srv->kids = 0;
          /* increase the index on the SRV level */
          if (++last_srv->idx<last_srv->no)
            return he;
          /* colapse the SRV node also */
          shm_free(last_srv);
          *node = 0;
        }
        return he;
        break;
      default:
        LM_CRIT("unknown %d node type\n", n->type);
        return 0;
    }
  } while(1);
}



void free_dns_res( struct proxy_l *p )
{
  if (p==NULL || p->dn==NULL)
    return;

  if (p->dn->kids)
    shm_free(p->dn->kids);
  shm_free(p->dn);
  p->dn = 0;
}



int get_next_su(struct proxy_l *p, union sockaddr_union* su, int add_to_bl)
{
  struct hostent *he;
  struct bl_rule *list;
  struct net  ip_net;
  int n;

  if (failover_bl && add_to_bl) {
    memset( &ip_net, 0xff , sizeof(struct net));
    hostent2ip_addr( &ip_net.ip, &p->host, p->addr_idx);
    ip_net.mask.af = ip_net.ip.af;
    ip_net.mask.len = ip_net.ip.len;
    list = 0;
    n = add_rule_to_list( &list, &list, &ip_net, 0, p->port, p->proto, 0);
    if (n!=0) {
      LM_ERR("failed to build bl rule\n");
    } else {
      add_list_to_head( failover_bl, list, list, 0, DNS_BL_EXPIRE);
    }
  }

  /* any more available IPs in he ? */
  if ( p->host.h_addr_list[++p->addr_idx] ) {
    /* yes -> return the IP*/
    hostent2su( su, &p->host, p->addr_idx, (p->port)?p->port:SIP_PORT);
    return 0;
  }

  /* get a new he from DNS */
  he = get_next_he( &p->dn, &p->proto, &p->port);
  if (he==NULL)
    return -1;

  /* replace the current he */
  if (p->flags&PROXY_SHM_FLAG) {
    free_shm_hostent( &p->host );
    n = hostent_shm_cpy(&(p->host), he);
  } else {
    free_hostent( &p->host );
    n = hostent_cpy(&(p->host), he);
  }
  if (n!=0) {
    free_dns_res( p );
    return -1;
  }

  hostent2su( su, &p->host, 0, (p->port)?p->port:SIP_PORT);
  p->addr_idx = 0;
  return 0;
}



static inline struct dns_node *dns_node_copy(struct dns_node *s)
{
  struct dns_node *d;
  unsigned int i;

  d = (struct dns_node*)shm_malloc(s->size);
  if (d==NULL) {
    LM_ERR("no more shm mem\n");
    return 0;
  }
  memcpy( d, s, s->size);
  d->vals = (struct dns_val*)(void *)((char*)d + ((char*)s->vals-(char*)s));
  for( i=0 ; i<s->no ; i++ )
    d->vals[i].sval = (char*)d + ((char*)s->vals[i].sval-(char*)s);
  return d;
}


struct dns_node *dns_res_copy(struct dns_node *s)
{
  struct dns_node *d;

  d = dns_node_copy(s);
  if (d==NULL)
    return 0;
  if (s->kids) {
    d->kids = dns_node_copy(s->kids);
    if (d->kids==NULL) {
      shm_free(d);
      return 0;
    }
  }
  return d;
}

Coverage Report

Created: 2026-08-13 06:11