src/basic/errno-util.h

@@ -50,10 +50,7 @@ static inline int errno_or_else(int fallback) {
 /* Hint #1: ENETUNREACH happens if we try to connect to "non-existing" special IP addresses, such as ::5.
  *
  * Hint #2: The kernel sends e.g., EHOSTUNREACH or ENONET to userspace in some ICMP error cases.  See the
- *          icmp_err_convert[] in net/ipv4/icmp.c in the kernel sources.
- *
- * Hint #3: When asynchronous connect() on TCP fails because the host never acknowledges a single packet,
- *          kernel tells us that with ETIMEDOUT, see tcp(7). */
+ *          icmp_err_convert[] in net/ipv4/icmp.c in the kernel sources */
 static inline bool ERRNO_IS_DISCONNECT(int r) {
         return IN_SET(abs(r),
                       ECONNABORTED,
@@ -69,8 +66,7 @@ static inline bool ERRNO_IS_DISCONNECT(int r) {
                       ENOTCONN,
                       EPIPE,
                       EPROTO,
-                      ESHUTDOWN,
-                      ETIMEDOUT);
+                      ESHUTDOWN);
 }
 
 /* Transient errors we might get on accept() that we should ignore. As per error handling comment in

src/resolve/resolved-def.h

@@ -5,30 +5,20 @@
 
 #include "time-util.h"
 
-/* Input + Output: The various protocols we can use */
-#define SD_RESOLVED_DNS             (UINT64_C(1) << 0)
-#define SD_RESOLVED_LLMNR_IPV4      (UINT64_C(1) << 1)
-#define SD_RESOLVED_LLMNR_IPV6      (UINT64_C(1) << 2)
-#define SD_RESOLVED_MDNS_IPV4       (UINT64_C(1) << 3)
-#define SD_RESOLVED_MDNS_IPV6       (UINT64_C(1) << 4)
+#define SD_RESOLVED_DNS           (UINT64_C(1) << 0)
+#define SD_RESOLVED_LLMNR_IPV4    (UINT64_C(1) << 1)
+#define SD_RESOLVED_LLMNR_IPV6    (UINT64_C(1) << 2)
+#define SD_RESOLVED_MDNS_IPV4     (UINT64_C(1) << 3)
+#define SD_RESOLVED_MDNS_IPV6     (UINT64_C(1) << 4)
+#define SD_RESOLVED_NO_CNAME      (UINT64_C(1) << 5)
+#define SD_RESOLVED_NO_TXT        (UINT64_C(1) << 6)
+#define SD_RESOLVED_NO_ADDRESS    (UINT64_C(1) << 7)
+#define SD_RESOLVED_NO_SEARCH     (UINT64_C(1) << 8)
+#define SD_RESOLVED_AUTHENTICATED (UINT64_C(1) << 9)
 
-/* Input: Don't follow CNAMEs/DNAMEs */
-#define SD_RESOLVED_NO_CNAME        (UINT64_C(1) << 5)
+#define SD_RESOLVED_LLMNR         (SD_RESOLVED_LLMNR_IPV4|SD_RESOLVED_LLMNR_IPV6)
+#define SD_RESOLVED_MDNS          (SD_RESOLVED_MDNS_IPV4|SD_RESOLVED_MDNS_IPV6)
 
-/* Input: When doing service (SRV) resolving, don't resolve associated mDNS-style TXT records */
-#define SD_RESOLVED_NO_TXT          (UINT64_C(1) << 6)
-
-/* Input: When doing service (SRV) resolving, don't resolve A/AAA RR for included hostname */
-#define SD_RESOLVED_NO_ADDRESS      (UINT64_C(1) << 7)
-
-/* Input: Don't apply search domain logic to request */
-#define SD_RESOLVED_NO_SEARCH       (UINT64_C(1) << 8)
-
-/* Output: Result is authenticated */
-#define SD_RESOLVED_AUTHENTICATED   (UINT64_C(1) << 9)
-
-#define SD_RESOLVED_LLMNR           (SD_RESOLVED_LLMNR_IPV4|SD_RESOLVED_LLMNR_IPV6)
-#define SD_RESOLVED_MDNS            (SD_RESOLVED_MDNS_IPV4|SD_RESOLVED_MDNS_IPV6)
-#define SD_RESOLVED_PROTOCOLS_ALL   (SD_RESOLVED_MDNS|SD_RESOLVED_LLMNR|SD_RESOLVED_DNS)
+#define SD_RESOLVED_PROTOCOLS_ALL (SD_RESOLVED_MDNS|SD_RESOLVED_LLMNR|SD_RESOLVED_DNS)
 
 #define SD_RESOLVED_QUERY_TIMEOUT_USEC (120 * USEC_PER_SEC)

src/resolve/resolved-dns-answer.c

@@ -321,11 +321,6 @@ int dns_answer_merge(DnsAnswer *a, DnsAnswer *b, DnsAnswer **ret) {
 
         assert(ret);
 
-        if (a == b) {
-                *ret = dns_answer_ref(a);
-                return 0;
-        }
-
         if (dns_answer_size(a) <= 0) {
                 *ret = dns_answer_ref(b);
                 return 0;
@@ -714,7 +709,7 @@ void dns_answer_dump(DnsAnswer *answer, FILE *f) {
 
                 fputs(t, f);
 
-                if (ifindex != 0 || flags != 0)
+                if (ifindex != 0 || flags & (DNS_ANSWER_AUTHENTICATED|DNS_ANSWER_CACHEABLE|DNS_ANSWER_SHARED_OWNER))
                         fputs("\t;", f);
 
                 if (ifindex != 0)
@@ -725,10 +720,6 @@ void dns_answer_dump(DnsAnswer *answer, FILE *f) {
                         fputs(" cacheable", f);
                 if (flags & DNS_ANSWER_SHARED_OWNER)
                         fputs(" shared-owner", f);
-                if (flags & DNS_ANSWER_CACHE_FLUSH)
-                        fputs(" cache-flush", f);
-                if (flags & DNS_ANSWER_GOODBYE)
-                        fputs(" goodbye", f);
 
                 fputc('\n', f);
         }

src/resolve/resolved-dns-cache.c

@@ -531,6 +531,9 @@ static int dns_cache_put_negative(
                 .type =
                         rcode == DNS_RCODE_SUCCESS ? DNS_CACHE_NODATA :
                         rcode == DNS_RCODE_NXDOMAIN ? DNS_CACHE_NXDOMAIN : DNS_CACHE_RCODE,
+                .until =
+                        i->type == DNS_CACHE_RCODE ? timestamp + CACHE_TTL_STRANGE_RCODE_USEC :
+                        calculate_until(soa, nsec_ttl, timestamp, true),
                 .authenticated = authenticated,
                 .owner_family = owner_family,
                 .owner_address = *owner_address,
@@ -538,10 +541,6 @@ static int dns_cache_put_negative(
                 .rcode = rcode,
         };
 
-        i->until =
-                i->type == DNS_CACHE_RCODE ? timestamp + CACHE_TTL_STRANGE_RCODE_USEC :
-                calculate_until(soa, nsec_ttl, timestamp, true);
-
         if (i->type == DNS_CACHE_NXDOMAIN) {
                 /* NXDOMAIN entries should apply equally to all types, so we use ANY as
                  * a pseudo type for this purpose here. */

src/resolve/resolved-dns-scope.c

@@ -589,7 +589,6 @@ DnsScopeMatch dns_scope_good_domain(
 
                 if ((dns_name_is_single_label(domain) && /* only resolve single label names via LLMNR */
                      !is_gateway_hostname(domain) && /* don't resolve "gateway" with LLMNR, let nss-myhostname handle this */
-                     dns_name_equal(domain, "local") == 0 && /* don't resolve "local" with LLMNR, it's the top-level domain of mDNS after all, see above */
                      manager_is_own_hostname(s->manager, domain) <= 0))  /* never resolve the local hostname via LLMNR */
                         return DNS_SCOPE_YES_BASE + 1; /* Return +1, as we consider ourselves authoritative
                                                         * for single-label names, i.e. one label. This is

src/resolve/resolved-manager.c

@@ -919,11 +919,7 @@ static int write_loop(int fd, void *message, size_t length) {
 int manager_write(Manager *m, int fd, DnsPacket *p) {
         int r;
 
-        log_debug("Sending %s%s packet with id %" PRIu16 " of size %zu.",
-                  DNS_PACKET_TC(p) ? "truncated (!) " : "",
-                  DNS_PACKET_QR(p) ? "response" : "query",
-                  DNS_PACKET_ID(p),
-                  p->size);
+        log_debug("Sending %s packet with id %" PRIu16 ".", DNS_PACKET_QR(p) ? "response" : "query", DNS_PACKET_ID(p));
 
         r = write_loop(fd, DNS_PACKET_DATA(p), p->size);
         if (r < 0)
@@ -1059,12 +1055,7 @@ int manager_send(
         assert(port > 0);
         assert(p);
 
-        log_debug("Sending %s%s packet with id %" PRIu16 " on interface %i/%s of size %zu.",
-                  DNS_PACKET_TC(p) ? "truncated (!) " : "",
-                  DNS_PACKET_QR(p) ? "response" : "query",
-                  DNS_PACKET_ID(p),
-                  ifindex, af_to_name(family),
-                  p->size);
+        log_debug("Sending %s packet with id %" PRIu16 " on interface %i/%s.", DNS_PACKET_QR(p) ? "response" : "query", DNS_PACKET_ID(p), ifindex, af_to_name(family));
 
         if (family == AF_INET)
                 return manager_ipv4_send(m, fd, ifindex, &destination->in, port, source ? &source->in : NULL, p);

src/resolve/resolved-resolv-conf.c

@@ -156,8 +156,6 @@ int manager_read_resolv_conf(Manager *m) {
                         r = manager_parse_search_domains_and_warn(m, a);
                         if (r < 0)
                                 log_warning_errno(r, "Failed to parse search domain string '%s', ignoring.", a);
-
-                        continue;
                 }
 
                 log_syntax(NULL, LOG_DEBUG, "/etc/resolv.conf", n, 0, "Ignoring resolv.conf line: %s", l);