/*
 * Copyright (c) 1985, 1989, 1993
 *    The Regents of the University of California.  All rights reserved.
 *
 * Portions copyright (c) 1999, 2000
 * Intel Corporation.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *
 *    This product includes software developed by the University of
 *    California, Berkeley, Intel Corporation, and its contributors.
 *
 * 4. Neither the name of University, Intel Corporation, or their respective
 *    contributors may be used to endorse or promote products derived from
 *    this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE REGENTS, INTEL CORPORATION AND
 * CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
 * BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS,
 * INTEL CORPORATION OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 */

/*
 * Portions Copyright (c) 1993 by Digital Equipment Corporation.
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies, and that
 * the name of Digital Equipment Corporation not be used in advertising or
 * publicity pertaining to distribution of the document or software without
 * specific, written prior permission.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
 * WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS.   IN NO EVENT SHALL DIGITAL EQUIPMENT
 * CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
 * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
 * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
 * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
 * SOFTWARE.
 */

/*
 * Portions Copyright (c) 1996 by Internet Software Consortium.
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
 * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
 * CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
 * DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
 * PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
 * ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
 * SOFTWARE.
 */

#if defined(LIBC_SCCS) && !defined(lint)
static char sccsid[] = "@(#)res_send.c  8.1 (Berkeley) 6/4/93";
static char orig_rcsid[] = "From: Id: res_send.c,v 8.20 1998/04/06 23:27:51 halley Exp $";
static char rcsid[] = "$Id: res_send.c,v 1.1.1.1 2003/11/19 01:51:39 kyu3 Exp $";
#endif /* LIBC_SCCS and not lint */

/*
 * Send query to name server and wait for reply.
 */

#include <sys/types.h>
#include <sys/param.h>
#include <sys/select.h>
#include <sys/socket.h>
#include <sys/time.h>
#include <sys/uio.h>

#include <netinet/in.h>
#include <arpa/nameser.h>
#include <arpa/inet.h>

#include <errno.h>
#include <netdb.h>
#include <resolv.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>

#include "res_config.h"

#ifndef _ORG_FREEBSD_
#define NOPOLL
#endif

#ifdef NOPOLL           /* libc_r doesn't wrap poll yet() */
#else
#include <poll.h>
static int use_poll = 1;    /* adapt to poll() syscall availability */
                /* 0 = not present, 1 = try it, 2 = exists */
#endif

static int s = -1;      /* socket used for communications */
static int connected = 0;   /* is the socket connected */
static int vc = 0;      /* is the socket a virtual circuit? */
static res_send_qhook Qhook = NULL;
static res_send_rhook Rhook = NULL;


#define CAN_RECONNECT 1

#ifndef DEBUG
#   define Dprint(cond, args) /*empty*/
#   define DprintQ(cond, args, query, size) /*empty*/
#   define Aerror(file, string, error, address) /*empty*/
#   define Perror(file, string, error) /*empty*/
#else
#   define Dprint(cond, args) if (cond) {fprintf args;} else {}
#   define DprintQ(cond, args, query, size) if (cond) {\
            fprintf args;\
            __fp_nquery(query, size, stdout);\
        } else {}

static void
Aerror(
    FILE *file,
    char *string,
    int error,
    struct sockaddr_in address
    )
{
    int save = errno;

    if (_res.options & RES_DEBUG) {
        fprintf(file, "res_send: %s ([%s].%u): %s\n",
            string,
            inet_ntoa(address.sin_addr),
            ntohs(address.sin_port),
            strerror(error));
    }
    errno = save;
}


static void
Perror(
    FILE *file,
    char *string,
    int error
    )
{
    int save = errno;

    if (_res.options & RES_DEBUG) {
        fprintf(file, "res_send: %s: %s\n",
            string, strerror(error));
    }
    errno = save;
}
#endif

void
res_send_setqhook(
    res_send_qhook hook
    )
{

    Qhook = hook;
}

void
res_send_setrhook(
    res_send_rhook hook
    )
{

    Rhook = hook;
}

/* int
 * res_isourserver(ina)
 *  looks up "ina" in _res.ns_addr_list[]
 * returns:
 *  0  : not found
 *  >0 : found
 * author:
 *  paul vixie, 29may94
 */
int
res_isourserver(
    const struct sockaddr_in *inp
    )
{
    struct sockaddr_in ina;
    int ns, ret;

    ina = *inp;
    ret = 0;
    for (ns = 0;  ns < _res.nscount;  ns++) {
        const struct sockaddr_in *srv = &_res.nsaddr_list[ns];

        if (srv->sin_family == ina.sin_family &&
            srv->sin_port == ina.sin_port &&
            (srv->sin_addr.s_addr == INADDR_ANY ||
             srv->sin_addr.s_addr == ina.sin_addr.s_addr)) {
            ret++;
            break;
        }
    }
    return (ret);
}

/* int
 * res_nameinquery(name, type, class, buf, eom)
 *  look for (name,type,class) in the query section of packet (buf,eom)
 * requires:
 *  buf + HFIXEDSZ <= eom
 * returns:
 *  -1 : format error
 *  0  : not found
 *  >0 : found
 * author:
 *  paul vixie, 29may94
 */
int
res_nameinquery(
    const char *name,
    int type,
    int class,
    const u_char *buf,
    const u_char *eom
    )
{
    const u_char *cp = buf + HFIXEDSZ;
    int qdcount = ntohs(((HEADER*)buf)->qdcount);

    while (qdcount-- > 0) {
        char tname[MAXDNAME+1];
        int n, ttype, tclass;

        n = dn_expand(buf, eom, cp, tname, sizeof tname);
        if (n < 0)
            return (-1);
        cp += n;
        if (cp + 2 * INT16SZ > eom)
            return (-1);
        ttype = ns_get16(cp); cp += INT16SZ;
        tclass = ns_get16(cp); cp += INT16SZ;
        if (ttype == type &&
            tclass == class &&
            strcasecmp(tname, name) == 0)
            return (1);
    }
    return (0);
}

/* int
 * res_queriesmatch(buf1, eom1, buf2, eom2)
 *  is there a 1:1 mapping of (name,type,class)
 *  in (buf1,eom1) and (buf2,eom2)?
 * returns:
 *  -1 : format error
 *  0  : not a 1:1 mapping
 *  >0 : is a 1:1 mapping
 * author:
 *  paul vixie, 29may94
 */
int
res_queriesmatch(
    const u_char *buf1,
    const u_char *eom1,
    const u_char *buf2,
    const u_char *eom2
    )
{
    const u_char *cp = buf1 + HFIXEDSZ;
    int qdcount = ntohs(((HEADER*)buf1)->qdcount);

    if (buf1 + HFIXEDSZ > eom1 || buf2 + HFIXEDSZ > eom2)
        return (-1);

    /*
     * Only header section present in replies to
     * dynamic update packets.
     */
    if ( (((HEADER *)buf1)->opcode == ns_o_update) &&
         (((HEADER *)buf2)->opcode == ns_o_update) )
        return (1);

    if (qdcount != ntohs(((HEADER*)buf2)->qdcount))
        return (0);
    while (qdcount-- > 0) {
        char tname[MAXDNAME+1];
        int n, ttype, tclass;

        n = dn_expand(buf1, eom1, cp, tname, sizeof tname);
        if (n < 0)
            return (-1);
        cp += n;
        if (cp + 2 * INT16SZ > eom1)
            return (-1);
        ttype = ns_get16(cp);   cp += INT16SZ;
        tclass = ns_get16(cp); cp += INT16SZ;
        if (!res_nameinquery(tname, ttype, tclass, buf2, eom2))
            return (0);
    }
    return (1);
}

int
res_send(
    const u_char *buf,
    int buflen,
    u_char *ans,
    int anssiz
    )
{
    HEADER *hp = (HEADER *) buf;
    HEADER *anhp = (HEADER *) ans;
    int gotsomewhere, connreset, terrno, try, v_circuit, resplen, ns;
    ssize_t n;
    u_int32_t badns;    /* XXX NSMAX can't exceed #/bits in this variable */

    if ((_res.options & RES_INIT) == 0 && res_init() == -1) {
        /* errno should have been set by res_init() in this case. */
        return (-1);
    }
    if (anssiz < HFIXEDSZ) {
        errno = EINVAL;
        return (-1);
    }
    DprintQ((_res.options & RES_DEBUG) || (_res.pfcode & RES_PRF_QUERY),
        (stdout, ";; res_send()\n"), buf, buflen);
    v_circuit = (_res.options & RES_USEVC) || buflen > PACKETSZ;
    gotsomewhere = 0;
    connreset = 0;
    terrno = ETIMEDOUT;
    badns = 0;

    /*
     * Send request, RETRY times, or until successful
     */
    for (try = 0; try < _res.retry; try++) {
        for (ns = 0; ns < _res.nscount; ns++) {
        struct sockaddr_in *nsap = &_res.nsaddr_list[ns];
    same_ns:
        if (badns & (1 << ns)) {
            res_close();
            goto next_ns;
        }

        if (Qhook) {
            int done = 0, loops = 0;

            do {
                res_sendhookact act;

                act = (*Qhook)(&nsap, &buf, &buflen,
                           ans, anssiz, &resplen);
                switch (act) {
                case res_goahead:
                    done = 1;
                    break;
                case res_nextns:
                    res_close();
                    goto next_ns;
                case res_done:
                    return (resplen);
                case res_modified:
                    /* give the hook another try */
                    if (++loops < 42) /*doug adams*/
                        break;
                    /*FALLTHROUGH*/
                case res_error:
                    /*FALLTHROUGH*/
                default:
                    return (-1);
                }
            } while (!done);
        }

        Dprint(_res.options & RES_DEBUG,
               (stdout, ";; Querying server (# %d) address = %s\n",
            ns + 1, inet_ntoa(nsap->sin_addr)));

        if (v_circuit) {
            int truncated;
            struct iovec iov[2];
            u_short len;
            u_char *cp;

            /*
             * Use virtual circuit;
             * at most one attempt per server.
             */
            try = _res.retry;
            truncated = 0;
            if (s < 0 || !vc || hp->opcode == ns_o_update) {
                if (s >= 0)
                    res_close();

                s = socket(PF_INET, SOCK_STREAM, 0);
                if (s < 0) {
                    terrno = errno;
                    Perror(stderr, "socket(vc)", errno);
                    return (-1);
                }
                errno = 0;
                nsap->sin_len = sizeof ( *nsap );
                if (connect(s, (struct sockaddr *)nsap,
                        sizeof *nsap) < 0) {
                    terrno = errno;
                    Aerror(stderr, "connect/vc",
                           errno, *nsap);
                    badns |= (1 << ns);
                    res_close();
                    goto next_ns;
                }
                vc = 1;
            }
            /*
             * Send length & message
             */
            putshort((u_short)buflen, (u_char*)&len);
            iov[0].iov_base = (caddr_t)&len;
            iov[0].iov_len = INT16SZ;
            iov[1].iov_base = (caddr_t)buf;
            iov[1].iov_len = buflen;
            if (writev(s, iov, 2) != (INT16SZ + buflen)) {
                terrno = errno;
                Perror(stderr, "write failed", errno);
                badns |= (1 << ns);
                res_close();
                goto next_ns;
            }
            /*
             * Receive length & response
             */
read_len:
            cp = ans;
            len = INT16SZ;
            while ((n = read(s, (char *)cp, (int)len)) > 0) {
                cp += n;
                len = (u_short)( len - n );
                if (len <= 0)
                    break;
            }
            if (n <= 0) {
                terrno = errno;
                Perror(stderr, "read failed", errno);
                res_close();
                /*
                 * A long running process might get its TCP
                 * connection reset if the remote server was
                 * restarted.  Requery the server instead of
                 * trying a new one.  When there is only one
                 * server, this means that a query might work
                 * instead of failing.  We only allow one reset
                 * per query to prevent looping.
                 */
                if (terrno == ECONNRESET && !connreset) {
                    connreset = 1;
                    res_close();
                    goto same_ns;
                }
                res_close();
                goto next_ns;
            }
            resplen = ns_get16(ans);
            if (resplen > anssiz) {
                Dprint(_res.options & RES_DEBUG,
                       (stdout, ";; response truncated\n")
                       );
                truncated = 1;
                len = (ushort)anssiz;
            } else
                len = (ushort)resplen;
            if (len < HFIXEDSZ) {
                /*
                 * Undersized message.
                 */
                Dprint(_res.options & RES_DEBUG,
                       (stdout, ";; undersized: %d\n", len));
                terrno = EMSGSIZE;
                badns |= (1 << ns);
                res_close();
                goto next_ns;
            }
            cp = ans;
            while (len != 0 &&
                   (n = read(s, (char *)cp, (int)len)) > 0) {
                cp += n;
                len = (u_short)( len - n );
            }
            if (n <= 0) {
                terrno = errno;
                Perror(stderr, "read(vc)", errno);
                res_close();
                goto next_ns;
            }
            if (truncated) {
                /*
                 * Flush rest of answer
                 * so connection stays in synch.
                 */
                anhp->tc = 1;
                len = (ushort)( resplen - anssiz );
                while (len != 0) {
                    char junk[PACKETSZ];

                    n = (len > sizeof(junk)
                         ? sizeof(junk)
                         : len);
                    if ((n = read(s, junk, n)) > 0)
                        len = (u_short)( len - n );
                    else
                        break;
                }
            }
            /*
             * The calling applicating has bailed out of
             * a previous call and failed to arrange to have
             * the circuit closed or the server has got
             * itself confused. Anyway drop the packet and
             * wait for the correct one.
             */
            if (hp->id != anhp->id) {
                DprintQ((_res.options & RES_DEBUG) ||
                    (_res.pfcode & RES_PRF_REPLY),
                    (stdout, ";; old answer (unexpected):\n"),
                    ans, (resplen>anssiz)?anssiz:resplen);
                goto read_len;
            }
        } else {
            /*
             * Use datagrams.
             */
#ifndef NOPOLL
            struct pollfd pfd;
            int msec;
#endif
            struct timeval timeout;
            fd_set dsmask, *dsmaskp;
            int dsmasklen;
            struct sockaddr_in from;
            int fromlen;

            if ((s < 0) || vc) {
                if (vc)
                    res_close();
                s = socket(PF_INET, SOCK_DGRAM, 0);
                if (s < 0) {
#ifndef CAN_RECONNECT
 bad_dg_sock:
#endif
                    terrno = errno;
                    Perror(stderr, "socket(dg)", errno);
                    return (-1);
                }
                connected = 0;
            }
#ifndef CANNOT_CONNECT_DGRAM
            /*
             * On a 4.3BSD+ machine (client and server,
             * actually), sending to a nameserver datagram
             * port with no nameserver will cause an
             * ICMP port unreachable message to be returned.
             * If our datagram socket is "connected" to the
             * server, we get an ECONNREFUSED error on the next
             * socket operation, and select returns if the
             * error message is received.  We can thus detect
             * the absence of a nameserver without timing out.
             * If we have sent queries to at least two servers,
             * however, we don't want to remain connected,
             * as we wish to receive answers from the first
             * server to respond.
             */
            if (_res.nscount == 1 || (try == 0 && ns == 0)) {
                /*
                 * Connect only if we are sure we won't
                 * receive a response from another server.
                 */
                if (!connected) {
                    nsap->sin_len = sizeof ( *nsap );
                    if (connect(s, (struct sockaddr *)nsap,
                            sizeof *nsap
                            ) < 0) {
                        Aerror(stderr,
                               "connect(dg)",
                               errno, *nsap);
                        badns |= (1 << ns);
                        res_close();
                        goto next_ns;
                    }
                    connected = 1;
                }
                if (send(s, (char*)buf, buflen, 0) != buflen) {
                    Perror(stderr, "send", errno);
                    badns |= (1 << ns);
                    res_close();
                    goto next_ns;
                }
            } else {
                /*
                 * Disconnect if we want to listen
                 * for responses from more than one server.
                 */
                if (connected) {
#ifdef CAN_RECONNECT
                    struct sockaddr_in no_addr;

                    no_addr.sin_family = AF_INET;
                    no_addr.sin_addr.s_addr = INADDR_ANY;
                    no_addr.sin_port = 0;
                    (void) connect(s,
                               (struct sockaddr *)
                                &no_addr,
                               sizeof no_addr);
#else
                    int s1 = socket(PF_INET, SOCK_DGRAM,0);
                    if (s1 < 0)
                        goto bad_dg_sock;
                    (void) dup2(s1, s);
                    (void) close(s1);
                    Dprint(_res.options & RES_DEBUG,
                        (stdout, ";; new DG socket\n"))
#endif /* CAN_RECONNECT */
                    connected = 0;
                    errno = 0;
                }
#endif /* !CANNOT_CONNECT_DGRAM */
                if (sendto(s, (char*)buf, buflen, 0,
                       (struct sockaddr *)nsap,
                       sizeof *nsap)
                    != buflen) {
                    Aerror(stderr, "sendto", errno, *nsap);
                    badns |= (1 << ns);
                    res_close();
                    goto next_ns;
                }
#ifndef CANNOT_CONNECT_DGRAM
            }
#endif /* !CANNOT_CONNECT_DGRAM */

            /*
             * Wait for reply
             */
#ifndef NOPOLL
    othersyscall:
            if (use_poll) {
                msec = (_res.retrans << try) * 1000;
                if (try > 0)
                    msec /= _res.nscount;
                if (msec <= 0)
                    msec = 1000;
            } else {
#endif
                timeout.tv_sec = (_res.retrans << try);
                if (try > 0)
                    timeout.tv_sec /= _res.nscount;
                if ((long) timeout.tv_sec <= 0)
                    timeout.tv_sec = 1;
                timeout.tv_usec = 0;
#ifndef NOPOLL
            }
#endif
    wait:
            if (s < 0) {
                Perror(stderr, "s out-of-bounds", EMFILE);
                res_close();
                goto next_ns;
            }
#ifndef NOPOLL
            if (use_poll) {
                struct sigaction sa, osa;
                int sigsys_installed = 0;

                pfd.fd = s;
                pfd.events = POLLIN;
                if (use_poll == 1) {
                    bzero(&sa, sizeof(sa));
                    sa.sa_handler = SIG_IGN;
                    if (sigaction(SIGSYS, &sa, &osa) >= 0)
                        sigsys_installed = 1;
                }
                n = poll(&pfd, 1, msec);
                if (sigsys_installed == 1) {
                    int oerrno = errno;
                    sigaction(SIGSYS, &osa, NULL);
                    errno = oerrno;
                }
                /* XXX why does nosys() return EINVAL? */
                if (n < 0 && (errno == ENOSYS ||
                    errno == EINVAL)) {
                    use_poll = 0;
                    goto othersyscall;
                } else if (use_poll == 1)
                    use_poll = 2;
                if (n < 0) {
                    if (errno == EINTR)
                        goto wait;
                    Perror(stderr, "poll", errno);
                    res_close();
                    goto next_ns;
                }
            } else {
#endif
                dsmasklen = howmany(s + 1, NFDBITS) *
                        sizeof(fd_mask);
                if (dsmasklen > sizeof(fd_set)) {
                    dsmaskp = (fd_set *)malloc(dsmasklen);
                    if (dsmaskp == NULL) {
                        res_close();
                        goto next_ns;
                    }
                } else
                    dsmaskp = &dsmask;
                /* only zero what we need */
                memset((char *)dsmaskp, 0, dsmasklen);
                FD_SET(s, dsmaskp);
                n = select(s + 1, dsmaskp, (fd_set *)NULL,
                       (fd_set *)NULL, &timeout);
                if (dsmaskp != &dsmask)
                    free(dsmaskp);
                if (n < 0) {
                    if (errno == EINTR)
                        goto wait;
                    Perror(stderr, "select", errno);
                    res_close();
                    goto next_ns;
                }
#ifndef NOPOLL
            }
#endif

            if (n == 0) {
                /*
                 * timeout
                 */
                Dprint(_res.options & RES_DEBUG,
                       (stdout, ";; timeout\n"));
                gotsomewhere = 1;
                res_close();
                goto next_ns;
            }
            errno = 0;
            fromlen = sizeof(struct sockaddr_in);
            resplen = (int)recvfrom(s, (char*)ans, anssiz, 0,
                       (struct sockaddr *)&from, (socklen_t *)&fromlen);
            if (resplen <= 0) {
                Perror(stderr, "recvfrom", errno);
                res_close();
                goto next_ns;
            }
            gotsomewhere = 1;
            if (resplen < HFIXEDSZ) {
                /*
                 * Undersized message.
                 */
                Dprint(_res.options & RES_DEBUG,
                       (stdout, ";; undersized: %d\n",
                    resplen));
                terrno = EMSGSIZE;
                badns |= (1 << ns);
                res_close();
                goto next_ns;
            }
            if (hp->id != anhp->id) {
                /*
                 * response from old query, ignore it.
                 * XXX - potential security hazard could
                 *   be detected here.
                 */
                DprintQ((_res.options & RES_DEBUG) ||
                    (_res.pfcode & RES_PRF_REPLY),
                    (stdout, ";; old answer:\n"),
                    ans, (resplen>anssiz)?anssiz:resplen);
                goto wait;
            }
#ifdef CHECK_SRVR_ADDR
            if (!(_res.options & RES_INSECURE1) &&
                !res_isourserver(&from)) {
                /*
                 * response from wrong server? ignore it.
                 * XXX - potential security hazard could
                 *   be detected here.
                 */
                DprintQ((_res.options & RES_DEBUG) ||
                    (_res.pfcode & RES_PRF_REPLY),
                    (stdout, ";; not our server:\n"),
                    ans, (resplen>anssiz)?anssiz:resplen);
                goto wait;
            }
#endif
            if (!(_res.options & RES_INSECURE2) &&
                !res_queriesmatch(buf, buf + buflen,
                          ans, ans + anssiz)) {
                /*
                 * response contains wrong query? ignore it.
                 * XXX - potential security hazard could
                 *   be detected here.
                 */
                DprintQ((_res.options & RES_DEBUG) ||
                    (_res.pfcode & RES_PRF_REPLY),
                    (stdout, ";; wrong query name:\n"),
                    ans, (resplen>anssiz)?anssiz:resplen);
                goto wait;
            }
            if (anhp->rcode == SERVFAIL ||
                anhp->rcode == NOTIMP ||
                anhp->rcode == REFUSED) {
                DprintQ(_res.options & RES_DEBUG,
                    (stdout, "server rejected query:\n"),
                    ans, (resplen>anssiz)?anssiz:resplen);
                badns |= (1 << ns);
                res_close();
                /* don't retry if called from dig */
                if (!_res.pfcode)
                    goto next_ns;
            }
            if (!(_res.options & RES_IGNTC) && anhp->tc) {
                /*
                 * get rest of answer;
                 * use TCP with same server.
                 */
                Dprint(_res.options & RES_DEBUG,
                       (stdout, ";; truncated answer\n"));
                v_circuit = 1;
                res_close();
                goto same_ns;
            }
        } /*if vc/dg*/
        Dprint((_res.options & RES_DEBUG) ||
               ((_res.pfcode & RES_PRF_REPLY) &&
            (_res.pfcode & RES_PRF_HEAD1)),
               (stdout, ";; got answer:\n"));
        if((_res.options & RES_DEBUG) ||
            (_res.pfcode & RES_PRF_REPLY)) {
            __fp_nquery(ans, (resplen>anssiz)?anssiz:resplen, stdout);
        }
        /*
         * If using virtual circuits, we assume that the first server
         * is preferred over the rest (i.e. it is on the local
         * machine) and only keep that one open.
         * If we have temporarily opened a virtual circuit,
         * or if we haven't been asked to keep a socket open,
         * close the socket.
         */
        if ((v_circuit && (!(_res.options & RES_USEVC) || ns != 0)) ||
            !(_res.options & RES_STAYOPEN)) {
            res_close();
        }
        if (Rhook) {
            int done = 0, loops = 0;

            do {
                res_sendhookact act;

                act = (*Rhook)(nsap, buf, buflen,
                           ans, anssiz, &resplen);
                switch (act) {
                case res_goahead:
                case res_done:
                    done = 1;
                    break;
                case res_nextns:
                    res_close();
                    goto next_ns;
                case res_modified:
                    /* give the hook another try */
                    if (++loops < 42) /*doug adams*/
                        break;
                    /*FALLTHROUGH*/
                case res_error:
                    /*FALLTHROUGH*/
                default:
                    return (-1);
                }
            } while (!done);

        }
        return (resplen);
    next_ns: ;
       } /*foreach ns*/
    } /*foreach retry*/
    res_close();
    if (!v_circuit) {
        if (!gotsomewhere)
            errno = ECONNREFUSED;   /* no nameservers found */
        else
            errno = ETIMEDOUT;  /* no answer obtained */
    } else
        errno = terrno;
    return (-1);
}

/*
 * This routine is for closing the socket if a virtual circuit is used and
 * the program wants to close it.  This provides support for endhostent()
 * which expects to close the socket.
 *
 * This routine is not expected to be user visible.
 */
void
res_close()
{
    if (s >= 0) {
        (void) close(s);
        s = -1;
        connected = 0;
        vc = 0;
    }
}