===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/dns.c,v
retrieving revision 1.12.2.2
retrieving revision 1.13
diff -u -r1.12.2.2 -r1.13
--- src/usr.bin/ssh/dns.c	2006/10/06 03:19:32	1.12.2.2
+++ src/usr.bin/ssh/dns.c	2005/10/13 19:13:41	1.13
@@ -1,4 +1,4 @@
-/* $OpenBSD: dns.c,v 1.12.2.2 2006/10/06 03:19:32 brad Exp $ */
+/*	$OpenBSD: dns.c,v 1.13 2005/10/13 19:13:41 stevesk Exp $	*/
 
 /*
  * Copyright (c) 2003 Wesley Griffin. All rights reserved.
@@ -25,18 +25,25 @@
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
-#include <sys/types.h>
-#include <sys/socket.h>
 
+#include "includes.h"
+
+#include <openssl/bn.h>
+#ifdef LWRES
+#include <lwres/netdb.h>
+#include <dns/result.h>
+#else /* LWRES */
 #include <netdb.h>
-#include <stdio.h>
-#include <string.h>
+#endif /* LWRES */
 
 #include "xmalloc.h"
 #include "key.h"
 #include "dns.h"
 #include "log.h"
 
+RCSID("$OpenBSD: dns.c,v 1.13 2005/10/13 19:13:41 stevesk Exp $");
+
+#ifndef LWRES
 static const char *errset_text[] = {
 	"success",		/* 0 ERRSET_SUCCESS */
 	"out of memory",	/* 1 ERRSET_NOMEMORY */
@@ -66,7 +73,9 @@
 		return "unknown error";
 	}
 }
+#endif /* LWRES */
 
+
 /*
  * Read SSHFP parameters from key buffer.
  */
@@ -84,14 +93,12 @@
 		*algorithm = SSHFP_KEY_DSA;
 		break;
 	default:
-		*algorithm = SSHFP_KEY_RESERVED; /* 0 */
+		*algorithm = SSHFP_KEY_RESERVED;
 	}
 
 	if (*algorithm) {
 		*digest_type = SSHFP_HASH_SHA1;
 		*digest = key_fingerprint_raw(key, SSH_FP_SHA1, digest_len);
-		if (*digest == NULL)
-			fatal("dns_read_key: null from key_fingerprint_raw()");
 		success = 1;
 	} else {
 		*digest_type = SSHFP_HASH_RESERVED;
@@ -124,7 +131,7 @@
 			*digest = (u_char *) xmalloc(*digest_len);
 			memcpy(*digest, rdata + 2, *digest_len);
 		} else {
-			*digest = (u_char *)xstrdup("");
+			*digest = NULL;
 		}
 
 		success = 1;
@@ -178,7 +185,7 @@
 
 	*flags = 0;
 
-	debug3("verify_host_key_dns");
+	debug3("verify_hostkey_dns");
 	if (hostkey == NULL)
 		fatal("No key to look up!");
 
@@ -238,10 +245,8 @@
 				*flags |= DNS_VERIFY_MATCH;
 			}
 		}
-		xfree(dnskey_digest);
 	}
 
-	xfree(hostkey_digest); /* from key_fingerprint_raw() */
 	freerrset(fingerprints);
 
 	if (*flags & DNS_VERIFY_FOUND)
@@ -255,6 +260,7 @@
 	return 0;
 }
 
+
 /*
  * Export the fingerprint of a key as a DNS resource record
  */
@@ -270,7 +276,7 @@
 	int success = 0;
 
 	if (dns_read_key(&rdata_pubkey_algorithm, &rdata_digest_type,
-	    &rdata_digest, &rdata_digest_len, key)) {
+			 &rdata_digest, &rdata_digest_len, key)) {
 
 		if (generic)
 			fprintf(f, "%s IN TYPE%d \\# %d %02x %02x ", hostname,
@@ -283,10 +289,9 @@
 		for (i = 0; i < rdata_digest_len; i++)
 			fprintf(f, "%02x", rdata_digest[i]);
 		fprintf(f, "\n");
-		xfree(rdata_digest); /* from key_fingerprint_raw() */
 		success = 1;
 	} else {
-		error("export_dns_rr: unsupported algorithm");
+		error("dns_export_rr: unsupported algorithm");
 	}
 
 	return success;