fix EDE 22 time out detection

Extended DNS error 22 (No reachable authority) was previously detected
when `fctx_expired` fired. It turns out this function is used as a
"safety net" and the timeout detection should be caught earlier.

It was working though, because of another issue fixed by !9927. Since
this change, the recursive request timed out detection occurs before
`fctx_expired` so EDE 22 is not added to the response message anymore.

The fix of the problem is to add the EDE 22 code in two situations:

- When the dispatch code timed out (rctx_timedout) the resolver code
  checks various properties to figure out if it needs to make another
  fetch attempt. One of the paramters if the fetch expiration time. If
  it expires, the whole recursion is canceled, so it now adds the EDE 22
  code.

- If the fetch expiration time doesn't expires in the case above (and
  other parameters allows it) a new fetch attempt is made (fctx_query).
  But before the new request is actually made, the fetch expiration time
  is re-checked. It might then has elapsed, and the whole recursion is
  canceled. So it now also adds the EDE 22 code here as well.

(cherry picked from commit 78274ec2b17bb16ee5414aaaf7f91d30ff43daba)

diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
index 12368d0e5b1eca803fe77ea557d690d155ad8ca8..0089b69aa32a749b6348bb515e283b10642f2079 100644 (file)
--- a/lib/dns/resolver.c
+++ b/lib/dns/resolver.c
@@ -1942,6 +1942,7 @@ fctx_query(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo,
        fctx_setretryinterval(fctx, srtt);
        if (isc_interval_iszero(&fctx->interval)) {
                FCTXTRACE("fetch expired");
+               dns_ede_add(&fctx->edectx, DNS_EDE_NOREACHABLEAUTH, NULL);
                return ISC_R_TIMEDOUT;
        }
 
@@ -7955,6 +7956,8 @@ rctx_timedout(respctx_t *rctx) {
                if (isc_time_microdiff(&fctx->expires, &now) < US_PER_MS) {
                        FCTXTRACE("query timed out; stopped trying to make "
                                  "fetch happen");
+                       dns_ede_add(&fctx->edectx, DNS_EDE_NOREACHABLEAUTH,
+                                   NULL);
                } else {
                        FCTXTRACE("query timed out; trying next server");
                        /* try next server */