1 | # Copyright (C) 2001-2007, 2009, 2010 Nominum, Inc.
|
---|
2 | #
|
---|
3 | # Permission to use, copy, modify, and distribute this software and its
|
---|
4 | # documentation for any purpose with or without fee is hereby granted,
|
---|
5 | # provided that the above copyright notice and this permission notice
|
---|
6 | # appear in all copies.
|
---|
7 | #
|
---|
8 | # THE SOFTWARE IS PROVIDED "AS IS" AND NOMINUM DISCLAIMS ALL WARRANTIES
|
---|
9 | # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
---|
10 | # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL NOMINUM BE LIABLE FOR
|
---|
11 | # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
---|
12 | # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
---|
13 | # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
|
---|
14 | # OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
---|
15 |
|
---|
16 | """Help for building DNS wire format messages"""
|
---|
17 |
|
---|
18 | import cStringIO
|
---|
19 | import struct
|
---|
20 | import random
|
---|
21 | import time
|
---|
22 |
|
---|
23 | import dns.exception
|
---|
24 | import dns.tsig
|
---|
25 |
|
---|
26 | QUESTION = 0
|
---|
27 | ANSWER = 1
|
---|
28 | AUTHORITY = 2
|
---|
29 | ADDITIONAL = 3
|
---|
30 |
|
---|
31 | class Renderer(object):
|
---|
32 | """Helper class for building DNS wire-format messages.
|
---|
33 |
|
---|
34 | Most applications can use the higher-level L{dns.message.Message}
|
---|
35 | class and its to_wire() method to generate wire-format messages.
|
---|
36 | This class is for those applications which need finer control
|
---|
37 | over the generation of messages.
|
---|
38 |
|
---|
39 | Typical use::
|
---|
40 |
|
---|
41 | r = dns.renderer.Renderer(id=1, flags=0x80, max_size=512)
|
---|
42 | r.add_question(qname, qtype, qclass)
|
---|
43 | r.add_rrset(dns.renderer.ANSWER, rrset_1)
|
---|
44 | r.add_rrset(dns.renderer.ANSWER, rrset_2)
|
---|
45 | r.add_rrset(dns.renderer.AUTHORITY, ns_rrset)
|
---|
46 | r.add_edns(0, 0, 4096)
|
---|
47 | r.add_rrset(dns.renderer.ADDTIONAL, ad_rrset_1)
|
---|
48 | r.add_rrset(dns.renderer.ADDTIONAL, ad_rrset_2)
|
---|
49 | r.write_header()
|
---|
50 | r.add_tsig(keyname, secret, 300, 1, 0, '', request_mac)
|
---|
51 | wire = r.get_wire()
|
---|
52 |
|
---|
53 | @ivar output: where rendering is written
|
---|
54 | @type output: cStringIO.StringIO object
|
---|
55 | @ivar id: the message id
|
---|
56 | @type id: int
|
---|
57 | @ivar flags: the message flags
|
---|
58 | @type flags: int
|
---|
59 | @ivar max_size: the maximum size of the message
|
---|
60 | @type max_size: int
|
---|
61 | @ivar origin: the origin to use when rendering relative names
|
---|
62 | @type origin: dns.name.Name object
|
---|
63 | @ivar compress: the compression table
|
---|
64 | @type compress: dict
|
---|
65 | @ivar section: the section currently being rendered
|
---|
66 | @type section: int (dns.renderer.QUESTION, dns.renderer.ANSWER,
|
---|
67 | dns.renderer.AUTHORITY, or dns.renderer.ADDITIONAL)
|
---|
68 | @ivar counts: list of the number of RRs in each section
|
---|
69 | @type counts: int list of length 4
|
---|
70 | @ivar mac: the MAC of the rendered message (if TSIG was used)
|
---|
71 | @type mac: string
|
---|
72 | """
|
---|
73 |
|
---|
74 | def __init__(self, id=None, flags=0, max_size=65535, origin=None):
|
---|
75 | """Initialize a new renderer.
|
---|
76 |
|
---|
77 | @param id: the message id
|
---|
78 | @type id: int
|
---|
79 | @param flags: the DNS message flags
|
---|
80 | @type flags: int
|
---|
81 | @param max_size: the maximum message size; the default is 65535.
|
---|
82 | If rendering results in a message greater than I{max_size},
|
---|
83 | then L{dns.exception.TooBig} will be raised.
|
---|
84 | @type max_size: int
|
---|
85 | @param origin: the origin to use when rendering relative names
|
---|
86 | @type origin: dns.name.Namem or None.
|
---|
87 | """
|
---|
88 |
|
---|
89 | self.output = cStringIO.StringIO()
|
---|
90 | if id is None:
|
---|
91 | self.id = random.randint(0, 65535)
|
---|
92 | else:
|
---|
93 | self.id = id
|
---|
94 | self.flags = flags
|
---|
95 | self.max_size = max_size
|
---|
96 | self.origin = origin
|
---|
97 | self.compress = {}
|
---|
98 | self.section = QUESTION
|
---|
99 | self.counts = [0, 0, 0, 0]
|
---|
100 | self.output.write('\x00' * 12)
|
---|
101 | self.mac = ''
|
---|
102 |
|
---|
103 | def _rollback(self, where):
|
---|
104 | """Truncate the output buffer at offset I{where}, and remove any
|
---|
105 | compression table entries that pointed beyond the truncation
|
---|
106 | point.
|
---|
107 |
|
---|
108 | @param where: the offset
|
---|
109 | @type where: int
|
---|
110 | """
|
---|
111 |
|
---|
112 | self.output.seek(where)
|
---|
113 | self.output.truncate()
|
---|
114 | keys_to_delete = []
|
---|
115 | for k, v in self.compress.iteritems():
|
---|
116 | if v >= where:
|
---|
117 | keys_to_delete.append(k)
|
---|
118 | for k in keys_to_delete:
|
---|
119 | del self.compress[k]
|
---|
120 |
|
---|
121 | def _set_section(self, section):
|
---|
122 | """Set the renderer's current section.
|
---|
123 |
|
---|
124 | Sections must be rendered order: QUESTION, ANSWER, AUTHORITY,
|
---|
125 | ADDITIONAL. Sections may be empty.
|
---|
126 |
|
---|
127 | @param section: the section
|
---|
128 | @type section: int
|
---|
129 | @raises dns.exception.FormError: an attempt was made to set
|
---|
130 | a section value less than the current section.
|
---|
131 | """
|
---|
132 |
|
---|
133 | if self.section != section:
|
---|
134 | if self.section > section:
|
---|
135 | raise dns.exception.FormError
|
---|
136 | self.section = section
|
---|
137 |
|
---|
138 | def add_question(self, qname, rdtype, rdclass=dns.rdataclass.IN):
|
---|
139 | """Add a question to the message.
|
---|
140 |
|
---|
141 | @param qname: the question name
|
---|
142 | @type qname: dns.name.Name
|
---|
143 | @param rdtype: the question rdata type
|
---|
144 | @type rdtype: int
|
---|
145 | @param rdclass: the question rdata class
|
---|
146 | @type rdclass: int
|
---|
147 | """
|
---|
148 |
|
---|
149 | self._set_section(QUESTION)
|
---|
150 | before = self.output.tell()
|
---|
151 | qname.to_wire(self.output, self.compress, self.origin)
|
---|
152 | self.output.write(struct.pack("!HH", rdtype, rdclass))
|
---|
153 | after = self.output.tell()
|
---|
154 | if after >= self.max_size:
|
---|
155 | self._rollback(before)
|
---|
156 | raise dns.exception.TooBig
|
---|
157 | self.counts[QUESTION] += 1
|
---|
158 |
|
---|
159 | def add_rrset(self, section, rrset, **kw):
|
---|
160 | """Add the rrset to the specified section.
|
---|
161 |
|
---|
162 | Any keyword arguments are passed on to the rdataset's to_wire()
|
---|
163 | routine.
|
---|
164 |
|
---|
165 | @param section: the section
|
---|
166 | @type section: int
|
---|
167 | @param rrset: the rrset
|
---|
168 | @type rrset: dns.rrset.RRset object
|
---|
169 | """
|
---|
170 |
|
---|
171 | self._set_section(section)
|
---|
172 | before = self.output.tell()
|
---|
173 | n = rrset.to_wire(self.output, self.compress, self.origin, **kw)
|
---|
174 | after = self.output.tell()
|
---|
175 | if after >= self.max_size:
|
---|
176 | self._rollback(before)
|
---|
177 | raise dns.exception.TooBig
|
---|
178 | self.counts[section] += n
|
---|
179 |
|
---|
180 | def add_rdataset(self, section, name, rdataset, **kw):
|
---|
181 | """Add the rdataset to the specified section, using the specified
|
---|
182 | name as the owner name.
|
---|
183 |
|
---|
184 | Any keyword arguments are passed on to the rdataset's to_wire()
|
---|
185 | routine.
|
---|
186 |
|
---|
187 | @param section: the section
|
---|
188 | @type section: int
|
---|
189 | @param name: the owner name
|
---|
190 | @type name: dns.name.Name object
|
---|
191 | @param rdataset: the rdataset
|
---|
192 | @type rdataset: dns.rdataset.Rdataset object
|
---|
193 | """
|
---|
194 |
|
---|
195 | self._set_section(section)
|
---|
196 | before = self.output.tell()
|
---|
197 | n = rdataset.to_wire(name, self.output, self.compress, self.origin,
|
---|
198 | **kw)
|
---|
199 | after = self.output.tell()
|
---|
200 | if after >= self.max_size:
|
---|
201 | self._rollback(before)
|
---|
202 | raise dns.exception.TooBig
|
---|
203 | self.counts[section] += n
|
---|
204 |
|
---|
205 | def add_edns(self, edns, ednsflags, payload, options=None):
|
---|
206 | """Add an EDNS OPT record to the message.
|
---|
207 |
|
---|
208 | @param edns: The EDNS level to use.
|
---|
209 | @type edns: int
|
---|
210 | @param ednsflags: EDNS flag values.
|
---|
211 | @type ednsflags: int
|
---|
212 | @param payload: The EDNS sender's payload field, which is the maximum
|
---|
213 | size of UDP datagram the sender can handle.
|
---|
214 | @type payload: int
|
---|
215 | @param options: The EDNS options list
|
---|
216 | @type options: list of dns.edns.Option instances
|
---|
217 | @see: RFC 2671
|
---|
218 | """
|
---|
219 |
|
---|
220 | # make sure the EDNS version in ednsflags agrees with edns
|
---|
221 | ednsflags &= 0xFF00FFFFL
|
---|
222 | ednsflags |= (edns << 16)
|
---|
223 | self._set_section(ADDITIONAL)
|
---|
224 | before = self.output.tell()
|
---|
225 | self.output.write(struct.pack('!BHHIH', 0, dns.rdatatype.OPT, payload,
|
---|
226 | ednsflags, 0))
|
---|
227 | if not options is None:
|
---|
228 | lstart = self.output.tell()
|
---|
229 | for opt in options:
|
---|
230 | stuff = struct.pack("!HH", opt.otype, 0)
|
---|
231 | self.output.write(stuff)
|
---|
232 | start = self.output.tell()
|
---|
233 | opt.to_wire(self.output)
|
---|
234 | end = self.output.tell()
|
---|
235 | assert end - start < 65536
|
---|
236 | self.output.seek(start - 2)
|
---|
237 | stuff = struct.pack("!H", end - start)
|
---|
238 | self.output.write(stuff)
|
---|
239 | self.output.seek(0, 2)
|
---|
240 | lend = self.output.tell()
|
---|
241 | assert lend - lstart < 65536
|
---|
242 | self.output.seek(lstart - 2)
|
---|
243 | stuff = struct.pack("!H", lend - lstart)
|
---|
244 | self.output.write(stuff)
|
---|
245 | self.output.seek(0, 2)
|
---|
246 | after = self.output.tell()
|
---|
247 | if after >= self.max_size:
|
---|
248 | self._rollback(before)
|
---|
249 | raise dns.exception.TooBig
|
---|
250 | self.counts[ADDITIONAL] += 1
|
---|
251 |
|
---|
252 | def add_tsig(self, keyname, secret, fudge, id, tsig_error, other_data,
|
---|
253 | request_mac, algorithm=dns.tsig.default_algorithm):
|
---|
254 | """Add a TSIG signature to the message.
|
---|
255 |
|
---|
256 | @param keyname: the TSIG key name
|
---|
257 | @type keyname: dns.name.Name object
|
---|
258 | @param secret: the secret to use
|
---|
259 | @type secret: string
|
---|
260 | @param fudge: TSIG time fudge
|
---|
261 | @type fudge: int
|
---|
262 | @param id: the message id to encode in the tsig signature
|
---|
263 | @type id: int
|
---|
264 | @param tsig_error: TSIG error code; default is 0.
|
---|
265 | @type tsig_error: int
|
---|
266 | @param other_data: TSIG other data.
|
---|
267 | @type other_data: string
|
---|
268 | @param request_mac: This message is a response to the request which
|
---|
269 | had the specified MAC.
|
---|
270 | @param algorithm: the TSIG algorithm to use
|
---|
271 | @type request_mac: string
|
---|
272 | """
|
---|
273 |
|
---|
274 | self._set_section(ADDITIONAL)
|
---|
275 | before = self.output.tell()
|
---|
276 | s = self.output.getvalue()
|
---|
277 | (tsig_rdata, self.mac, ctx) = dns.tsig.sign(s,
|
---|
278 | keyname,
|
---|
279 | secret,
|
---|
280 | int(time.time()),
|
---|
281 | fudge,
|
---|
282 | id,
|
---|
283 | tsig_error,
|
---|
284 | other_data,
|
---|
285 | request_mac,
|
---|
286 | algorithm=algorithm)
|
---|
287 | keyname.to_wire(self.output, self.compress, self.origin)
|
---|
288 | self.output.write(struct.pack('!HHIH', dns.rdatatype.TSIG,
|
---|
289 | dns.rdataclass.ANY, 0, 0))
|
---|
290 | rdata_start = self.output.tell()
|
---|
291 | self.output.write(tsig_rdata)
|
---|
292 | after = self.output.tell()
|
---|
293 | assert after - rdata_start < 65536
|
---|
294 | if after >= self.max_size:
|
---|
295 | self._rollback(before)
|
---|
296 | raise dns.exception.TooBig
|
---|
297 | self.output.seek(rdata_start - 2)
|
---|
298 | self.output.write(struct.pack('!H', after - rdata_start))
|
---|
299 | self.counts[ADDITIONAL] += 1
|
---|
300 | self.output.seek(10)
|
---|
301 | self.output.write(struct.pack('!H', self.counts[ADDITIONAL]))
|
---|
302 | self.output.seek(0, 2)
|
---|
303 |
|
---|
304 | def write_header(self):
|
---|
305 | """Write the DNS message header.
|
---|
306 |
|
---|
307 | Writing the DNS message header is done asfter all sections
|
---|
308 | have been rendered, but before the optional TSIG signature
|
---|
309 | is added.
|
---|
310 | """
|
---|
311 |
|
---|
312 | self.output.seek(0)
|
---|
313 | self.output.write(struct.pack('!HHHHHH', self.id, self.flags,
|
---|
314 | self.counts[0], self.counts[1],
|
---|
315 | self.counts[2], self.counts[3]))
|
---|
316 | self.output.seek(0, 2)
|
---|
317 |
|
---|
318 | def get_wire(self):
|
---|
319 | """Return the wire format message.
|
---|
320 |
|
---|
321 | @rtype: string
|
---|
322 | """
|
---|
323 |
|
---|
324 | return self.output.getvalue()
|
---|