unbound/validator/val_nsec3.c

400  * @param qinfo:
407 	size_t num, struct query_info* qinfo)
416 	filter->fclass = qinfo->qclass;
420 			ntohs(list[i]->rk.rrset_class) != qinfo->qclass)
433 		if(dname_subdomain_c(qinfo->qname, nm) && (!filter->zone ||
436 			if(qinfo->qtype == LDNS_RR_TYPE_DS &&
437 				query_dname_compare(qinfo->qname, nm) == 0 &&
438 				!dname_is_root(qinfo->qname))
870  * @param qinfo: query that is verified for.
876 	rbtree_type* ct, struct query_info* qinfo, struct ce_response* ce)
878 	uint8_t* nm = qinfo->qname;
879 	size_t nmlen = qinfo->qname_len;
930  * @param qinfo: query that is verified for.
943 	rbtree_type* ct, struct query_info* qinfo, int prove_does_not_exist,
951 	if(!nsec3_find_closest_encloser(env, flt, ct, qinfo, ce)) {
958 	if(query_dname_compare(ce->ce, qinfo->qname) == 0) {
990 	next_closer(qinfo->qname, qinfo->qname_len, ce->ce, &nc, &nc_len);
1023 	rbtree_type* ct, struct query_info* qinfo)
1035 	sec = nsec3_prove_closest_encloser(env, flt, ct, qinfo, 1, &ce);
1067 	struct query_info* qinfo, struct key_entry_key* kkey)
1075 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
1082 	return nsec3_do_prove_nameerror(env, &flt, &ct, qinfo);
1093 	rbtree_type* ct, struct query_info* qinfo)
1102 	if(find_matching_nsec3(env, flt, ct, qinfo->qname, qinfo->qname_len,
1105 		if(nsec3_has_type(rrset, rr, qinfo->qtype)) {
1127 		if(qinfo->qtype == LDNS_RR_TYPE_DS && qinfo->qname_len != 1
1129 			!dname_is_root(qinfo->qname)) {
1133 		} else if(qinfo->qtype != LDNS_RR_TYPE_DS &&
1151 	sec = nsec3_prove_closest_encloser(env, flt, ct, qinfo, 1, &ce);
1156 	} else if(sec==sec_status_insecure && qinfo->qtype!=LDNS_RR_TYPE_DS){
1169 		if(nsec3_has_type(rrset, rr, qinfo->qtype)) {
1178 		if(qinfo->qtype == LDNS_RR_TYPE_DS && qinfo->qname_len != 1
1183 		} else if(qinfo->qtype != LDNS_RR_TYPE_DS &&
1211 		if(qinfo->qtype == LDNS_RR_TYPE_DS)
1226 	struct query_info* qinfo, struct key_entry_key* kkey)
1234 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
1239 	return nsec3_do_prove_nodata(env, &flt, &ct, qinfo);
1245 	struct query_info* qinfo, struct key_entry_key* kkey, uint8_t* wc)
1258 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
1274 	next_closer(qinfo->qname, qinfo->qname_len, ce.ce, &nc, &nc_len);
1319 	struct query_info* qinfo, struct key_entry_key* kkey, char** reason,
1327 	log_assert(qinfo->qtype == LDNS_RR_TYPE_DS);
1336 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
1346 	if(find_matching_nsec3(env, &flt, &ct, qinfo->qname, qinfo->qname_len,
1352 			qinfo->qname_len != 1) {
1372 	if(nsec3_prove_closest_encloser(env, &flt, &ct, qinfo, 1, &ce)
1408 	struct query_info* qinfo, struct key_entry_key* kkey, int* nodata)
1418 	filter_init(&flt, list, num, qinfo); /* init RR iterator */
1427 	secnx = nsec3_do_prove_nameerror(env, &flt, &ct, qinfo);
1430 	sec = nsec3_do_prove_nodata(env, &flt, &ct, qinfo);