lib/dns/acl.c

34  * for 'n' ACL elements.  The elements are uninitialized and the
69 	acl->elements = NULL;
80 	acl->elements = isc_mem_get(mctx, n * sizeof(dns_aclelement_t));
81 	if (acl->elements == NULL) {
86 	memset(acl->elements, 0, n * sizeof(dns_aclelement_t));
237 	/* Now search non-radix elements for a match with a lower node_num. */
239 		dns_aclelement_t *e = &acl->elements[i];
293 		/* Copy in the original elements */
294 		memmove(newmem, dest->elements,
297 		/* Release the memory for the old elements array */
298 		isc_mem_put(dest->mctx, dest->elements,
300 		dest->elements = newmem;
305 	 * Now copy in the new elements, increasing their node_num
307 	 * negating, then negate positive elements, but keep negative
308 	 * elements the same for security reasons.
313 		if (source->elements[i].node_num > max_node)
314 			max_node = source->elements[i].node_num;
317 		dest->elements[nelem + i].type = source->elements[i].type;
320 		dest->elements[nelem + i].node_num =
321 			source->elements[i].node_num + dest->node_count;
324 		if (source->elements[i].type == dns_aclelementtype_nestedacl &&
325 		   source->elements[i].nestedacl != NULL)
326 			dns_acl_attach(source->elements[i].nestedacl,
327 				       &dest->elements[nelem + i].nestedacl);
330 		if (source->elements[i].type == dns_aclelementtype_keyname) {
331 			dns_name_init(&dest->elements[nelem+i].keyname, NULL);
332 			result = dns_name_dup(&source->elements[i].keyname,
334 					      &dest->elements[nelem+i].keyname);
340 		if (!pos && source->elements[i].negative == ISC_FALSE) {
341 			dest->elements[nelem + i].negative = ISC_TRUE;
343 			dest->elements[nelem + i].negative =
344 				source->elements[i].negative;
457 		dns_aclelement_t *de = &dacl->elements[i];
464 	if (dacl->elements != NULL)
465 		isc_mem_put(dacl->mctx, dacl->elements,
565 	/* Now check non-radix elements */
567 		dns_aclelement_t *e = &a->elements[i];
592 	/* No insecure elements were found. */