Snap for 6022569 from 92adc6dc2ec095a2e76a26524b99617fb7543666 to rvc-release (86644398) · Commits · e / os / android_packages_modules_DnsResolver

Android.bp

+0 −1

Original line number	Diff line number	Diff line
		@@ -28,7 +28,6 @@ aidl_interface {
		gen_log: true,
		},
		},
		api_dir: "aidl/dnsresolver",
		versions: [
		"1",
		"2",

DnsTlsServer.h

+3 −1

Original line number	Diff line number	Diff line
		@@ -62,7 +62,9 @@ struct DnsTlsServer {
		// The time to wait for the attempt on connecting to the server.
		// Set the default value 127 seconds to be consistent with TCP connect timeout.
		// (presume net.ipv4.tcp_syn_retries = 6)
		std::chrono::milliseconds connectTimeout = std::chrono::milliseconds(127 * 1000);
		static constexpr std::chrono::milliseconds kDotConnectTimeoutMs =
		std::chrono::milliseconds(127 * 1000);
		std::chrono::milliseconds connectTimeout = kDotConnectTimeoutMs;

		// Exact comparison of DnsTlsServer objects
		bool operator<(const DnsTlsServer& other) const;

PrivateDnsConfiguration.cpp

+17 −13

Original line number	Diff line number	Diff line
		@@ -29,12 +29,22 @@
		#include "netd_resolv/resolv.h"
		#include "netdutils/BackoffSequence.h"
		#include "resolv_cache.h"
		#include "util.h"

		using std::chrono::milliseconds;

		namespace android {
		namespace net {

		namespace {

		milliseconds getExperimentTimeout(const std::string& flagName, const milliseconds defaultValue) {
		int val = getExperimentFlagInt(flagName, defaultValue.count());
		return milliseconds((val < 1000) ? 1000 : val);
		}

		} // namespace

		std::string addrToString(const sockaddr_storage* addr) {
		char out[INET6_ADDRSTRLEN] = {0};
		getnameinfo((const sockaddr*) addr, sizeof(sockaddr_storage), out, INET6_ADDRSTRLEN, nullptr, 0,
		@@ -62,30 +72,24 @@ bool parseServer(const char* server, sockaddr_storage* parsed) {

		int PrivateDnsConfiguration::set(int32_t netId, uint32_t mark,
		const std::vector<std::string>& servers, const std::string& name,
		const std::string& caCert, int32_t connectTimeoutMs) {
		const std::string& caCert) {
		LOG(DEBUG) << "PrivateDnsConfiguration::set(" << netId << ", 0x" << std::hex << mark << std::dec
		<< ", " << servers.size() << ", " << name << ", " << connectTimeoutMs << "ms)";
		<< ", " << servers.size() << ", " << name << ")";

		// Parse the list of servers that has been passed in
		std::set<DnsTlsServer> tlsServers;
		for (size_t i = 0; i < servers.size(); ++i) {
		for (const auto& s : servers) {
		sockaddr_storage parsed;
		if (!parseServer(servers[i].c_str(), &parsed)) {
		if (!parseServer(s.c_str(), &parsed)) {
		return -EINVAL;
		}
		DnsTlsServer server(parsed);
		server.name = name;
		server.certificate = caCert;

		// connectTimeoutMs = 0: use the default timeout value.
		// connectTimeoutMs < 0: invalid timeout value.
		if (connectTimeoutMs > 0) {
		// Set a specific timeout value but limit it to be at least 1 second.
		server.connectTimeout =
		(connectTimeoutMs < 1000) ? milliseconds(1000) : milliseconds(connectTimeoutMs);
		}

		getExperimentTimeout("dot_connect_timeout_ms", DnsTlsServer::kDotConnectTimeoutMs);
		tlsServers.insert(server);
		LOG(DEBUG) << "Set DoT connect timeout " << server.connectTimeout.count() << "ms for " << s;
		}

		std::lock_guard guard(mPrivateDnsLock);

PrivateDnsConfiguration.h

+1 −2

Original line number	Diff line number	Diff line
		@@ -53,8 +53,7 @@ struct PrivateDnsStatus {
		class PrivateDnsConfiguration {
		public:
		int set(int32_t netId, uint32_t mark, const std::vector<std::string>& servers,
		const std::string& name, const std::string& caCert, int32_t connectTimeoutMs)
		EXCLUDES(mPrivateDnsLock);
		const std::string& name, const std::string& caCert) EXCLUDES(mPrivateDnsLock);

		PrivateDnsStatus getStatus(unsigned netId) EXCLUDES(mPrivateDnsLock);

ResolverController.cpp

+3 −3

Original line number	Diff line number	Diff line
		@@ -210,9 +210,9 @@ int ResolverController::setResolverConfiguration(const ResolverParamsParcel& res
		if (tlsServers.size() > MAXNS) {
		tlsServers.resize(MAXNS);
		}
		const int err = gPrivateDnsConfiguration.set(
		resolverParams.netId, fwmark.intValue, tlsServers, resolverParams.tlsName,
		resolverParams.caCertificate, resolverParams.tlsConnectTimeoutMs);
		const int err =
		gPrivateDnsConfiguration.set(resolverParams.netId, fwmark.intValue, tlsServers,
		resolverParams.tlsName, resolverParams.caCertificate);

		if (err != 0) {
		return err;