Instead copy it from the request's options.

Reasoning: Minimization might have been turned off as a workaround for
broken authoritative servers which doesn't support it. There is no
reason to drop minimization when switching zones when following a CNAME.

When cancelling a query due to NSNXAttack mitigation when validator was
also in BOGUS state, records wouldn't be stripped from the answer.

These will become useful once we actually use it…

Previously there where resolve_badmsg and resolve_error functions used
to apply workarounds. This is now moved to selection.c and iterate.c
just provides feedback using the server selection API. Errors are now
handled centrally in selection.c:error.

ci lint:scan-build: work around changes in meson

See merge request !1127

In 1f7678ea meson was updated and that broke our scan-build.
Now we work around that.  Quick analysis of why:
https://github.com/mesonbuild/meson/pull/5918#issuecomment-762064902

dnstap tests: integrate into meson, CI, etc.

See merge request !1123

+ it's more efficient to schedule longer tests before shorter tests
- we get a warning (if meson is new enough to use priorities)

Priority numbers: I took the config tests as baseline.
I didn't touch tests with "is_parallel: false".

They need one go package which I can't find even in Debian,
so it probably can't work without network access.
The new dnstap in extra_tests runs if dnstap is built and go is found.
It also tries to keep the source tree clean.

Now both query and reply messages are tested.

In CI (after caching go deps in image) this tests only takes slightly
more time than the longest config.* tests, so that seems OK.
Even so, it's not added into the valgrind variant, as compilation
of the test still isn't split away from the run itself.

From distro packages, just libprotobuf-c-dev and golang-any are new,
but I also broke the overlong line and reorganized its contents a bit.

add dnstap subpackage

Closes #655

See merge request !1118

Jakub Ružička authored 4 years ago and Tomas Krizek committed 4 years ago

introduce new dependencies:

* libfstrm
* libprotobuf-c

SUSE is missing protoc-c compiler so don't build dnstap there.

Jakub Ružička authored 4 years ago and Tomas Krizek committed 4 years ago

introduce new dependencies:

* libfstrm
* libprotobuf-c

Jakub Ružička authored 4 years ago and Tomas Krizek committed 4 years ago

This is a relic of ancient times.

selection: return early from forward_choose_transport with asserts off

See merge request !1125

This lead to unintitialized values being possibly used down the line.

randomize record order by default, i.e. reorder_RR(true)

See merge request !1124

It's quite cheap for us, and it might help with dumb clients
overusing the lowest IP from each set.

"ctx" is the usual name elsewhere for a kr_context pointer

refactor memory allocation patterns a little

See merge request !1115

More idiomatic code seems better:
- for variable initialization we have = { 0 }
- (mm_)calloc for heap allocations
  sizeof: use variable instead of type (where suitable; not sure why)

Experience proved that it can be confused with mm_alloc()
and it may not be trivial to find the mistake.

It seems just easier than having the copies in the current way.
I don't think the `static inline` were helping us anyway,
except for avoiding KR_EXPORT in some cases.

Still, differences when copying:
 - we use plain memset() in the implementation
   (no motivation here to use the complex memzero() approach)
 - we expose mm_malloc(), as we've been referring to it
 - we KR_EXPORT some of the functions (for lua and modules)

These do not make the CI job fail, but better avoid them anyway.
I suspect they got added when we updated the CI docker image.

(instead of marking them as TCP)
This includes latest dnstap.proto, except for keeping our local changes
of the licensing comment.
https://github.com/dnstap/dnstap.pb/blob/master/dnstap.proto

Pavel Doležal authored 4 years ago and Vladimír Čunát committed 4 years ago

- log queries and responses as separate dnstap messages
- use "query" instead of "request" to mirror dnstap specification
- don't export "query_zone" field in "CLIENT_*" messages

distro: introduce upstream cznic release prefix

See merge request !1122

using cznic.1 release string for upstream packages ensures they are
prefered over downstream ones and that their versions don't collide
which was causing issues for users with both downstream and upstream
packaging repos enabled.

Following statements are true according to `dpkg --compare-versions`:

    1.2.3-1   < 1.2.3-cznic.1
    1.2.3-999 < 1.2.3-cznic.1

So upstream packages should always take precedence over downstream
packages of the same version.

lib/selection: allow forwarding to link local address

See merge request !1116