8246836297

Committed 12 Mar 2024 09:56AM UTC coverage: 53.746% (-5.4%) from 59.178%

Build # 8246836297

Build Type

push

github

Committed by

web-flow

Commit Message

Merge pull request #13879 from Habbie/auth-lua-filterforward-empty

auth LUA: support returning empty set in filterForward

Run Details

23464 of 68850 branches covered (34.08%)

Branch coverage included in aggregate %.

0 of 8 new or added lines in 1 file covered. (0.0%)

12574 existing lines in 133 files now uncovered.

89131 of 140646 relevant lines covered (63.37%)

3409522.02 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

78.53

/pdns/serialtweaker.cc

/*
    PowerDNS Versatile Database Driven Nameserver
    Copyright (C) 2002-2011  PowerDNS.COM BV

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License version 2 as
    published by the Free Software Foundation

    Additionally, the license of this program contains a special
    exception which allows to distribute the program in binary form when
    it is linked against OpenSSL.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
*/

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#include "dnsseckeeper.hh"
#include "dnspacket.hh"
#include "namespaces.hh"

uint32_t localtime_format_YYYYMMDDSS(time_t t, uint32_t seq)
{
  struct tm tm;
  localtime_r(&t, &tm);
  return
      (uint32_t)(tm.tm_year+1900) * 1000000u
    + (uint32_t)(tm.tm_mon + 1) * 10000u
    + (uint32_t)tm.tm_mday * 100u
    + seq;
}

uint32_t calculateEditSOA(uint32_t old_serial, const string& kind, const DNSName& zonename)
{
  if(pdns_iequals(kind,"INCEPTION-INCREMENT")) {
    time_t inception = getStartOfWeek();
    uint32_t inception_serial = localtime_format_YYYYMMDDSS(inception, 1);
    uint32_t dont_increment_after = localtime_format_YYYYMMDDSS(inception + 2*86400, 99);

    if(old_serial < inception_serial - 1) { /* less than <inceptionday>00 */
      return inception_serial; /* return <inceptionday>01   (skipping <inceptionday>00 as possible value) */
    } else if (old_serial < inception_serial+1) {
      /* "<inceptionday>00" and "<inceptionday>01" are reserved for inception increasing, so jump to "<inceptionday>02" */
      return inception_serial+1;
    } else if(old_serial <= dont_increment_after) { /* >= <inceptionday>00 but <= <inceptionday+2>99 */
      return old_serial + 1;
    }
  }
  else if(pdns_iequals(kind,"INCREMENT-WEEKS")) {
    time_t inception = getStartOfWeek();
    return (old_serial + (inception / (7*86400)));
  }
  else if(pdns_iequals(kind,"EPOCH")) {
    // coverity[store_truncates_time_t]
    return time(nullptr);
  }
  else if(pdns_iequals(kind,"INCEPTION-EPOCH")) {
    uint32_t inception = getStartOfWeek();
    if (old_serial < inception)
      return inception;
  }
  else if(pdns_iequals(kind,"NONE")) {
    // do nothing to serial. needed because a metadata of "" will use the default-soa-edit setting instead.
  }
  else if(!kind.empty()) {
    g_log<<Logger::Warning<<"SOA-EDIT type '"<<kind<<"' for zone "<<zonename<<" is unknown."<<endl;
  }
  // Seen strictly, this is a broken config: we can only come here if
  // both SOA-EDIT and default-soa-edit are set to "", but the latter
  // should be set to "NONE" instead.
  return old_serial;
}

uint32_t calculateEditSOA(uint32_t old_serial, DNSSECKeeper& dk, const DNSName& zonename) {
  string kind;
  dk.getSoaEdit(zonename, kind);
  return calculateEditSOA(old_serial, kind, zonename);
}

/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API. */
static uint32_t calculateIncreaseSOA(uint32_t old_serial, const string& increaseKind, const string& editKind, const DNSName& zonename) {
  if (pdns_iequals(increaseKind, "SOA-EDIT-INCREASE")) {
    uint32_t new_serial = old_serial;
    if (!editKind.empty()) {
      if (pdns_iequals(editKind, "INCEPTION-EPOCH")) {
        new_serial = calculateEditSOA(old_serial, "EPOCH", zonename);
      } else {
        new_serial = calculateEditSOA(old_serial, editKind, zonename);
      }
    }
    if (new_serial <= old_serial) {
      new_serial = old_serial + 1;
    }
    return new_serial;
  }
  else if (pdns_iequals(increaseKind, "SOA-EDIT")) {
    return calculateEditSOA(old_serial, editKind, zonename);
  }
  else if (pdns_iequals(increaseKind, "INCREASE")) {
    return old_serial + 1;
  }
  else if (pdns_iequals(increaseKind, "EPOCH")) {
    // coverity[store_truncates_time_t]
    return time(nullptr);
  }
  else if (pdns_iequals(increaseKind, "DEFAULT")) {
    time_t now = time(nullptr);
    uint32_t new_serial = localtime_format_YYYYMMDDSS(now, 1);
    if (new_serial <= old_serial) {
        new_serial = old_serial + 1;
    }
    return new_serial;
  } else if(!increaseKind.empty()) {
    g_log<<Logger::Warning<<"SOA-EDIT-API/DNSUPDATE type '"<<increaseKind<<"' for zone "<<zonename<<" is unknown."<<endl;
  }
  return old_serial;
}

/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API.
 * Good if you already *have* a DNSResourceRecord.
 * Content in rr is suitable for writing into a backend.
 *
 * @return true if changes may have been made
 */
bool increaseSOARecord(DNSResourceRecord& rr, const string& increaseKind, const string& editKind) {
  if (increaseKind.empty())
    return false;

  SOAData sd;
  fillSOAData(rr.content, sd);

  sd.serial = calculateIncreaseSOA(sd.serial, increaseKind, editKind, rr.qname);
  rr.content = makeSOAContent(sd)->getZoneRepresentation(true);
  return true;
}

/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API.
 * Makes a mostly reset DNSResourceRecord for you in @param rrout.
 * Content in rrout is suitable for writing into a backend.
 *
 * @return true if rrout is now valid
 */
bool makeIncreasedSOARecord(SOAData& sd, const string& increaseKind, const string& editKind, DNSResourceRecord& rrout) {
  if (increaseKind.empty())
    return false;

  sd.serial = calculateIncreaseSOA(sd.serial, increaseKind, editKind, sd.qname);
  rrout.qname = sd.qname;
  rrout.content = makeSOAContent(sd)->getZoneRepresentation(true);
  rrout.qtype = QType::SOA;
  rrout.domain_id = sd.domain_id;
  rrout.auth = true;
  rrout.ttl = sd.ttl;

  return true;
}

DNSZoneRecord makeEditedDNSZRFromSOAData(DNSSECKeeper& dk, const SOAData& sd, DNSResourceRecord::Place place) {
  SOAData edited = sd;
  edited.serial = calculateEditSOA(sd.serial, dk, sd.qname);

  DNSRecord soa;
  soa.d_name = sd.qname;
  soa.d_type = QType::SOA;
  soa.d_ttl = sd.ttl;
  soa.d_place = place;
  soa.setContent(makeSOAContent(edited));

  DNSZoneRecord dzr;
  dzr.domain_id = sd.domain_id;
  dzr.signttl = sd.ttl;
  dzr.auth = true;
  dzr.dr = std::move(soa);

  return dzr;
}

1	/*
2	PowerDNS Versatile Database Driven Nameserver
3	Copyright (C) 2002-2011 PowerDNS.COM BV
4
5	This program is free software; you can redistribute it and/or modify
6	it under the terms of the GNU General Public License version 2 as
7	published by the Free Software Foundation
8
9	Additionally, the license of this program contains a special
10	exception which allows to distribute the program in binary form when
11	it is linked against OpenSSL.
12
13	This program is distributed in the hope that it will be useful,
14	but WITHOUT ANY WARRANTY; without even the implied warranty of
15	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16	GNU General Public License for more details.
17
18	You should have received a copy of the GNU General Public License
19	along with this program; if not, write to the Free Software
20	Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
21	*/
22
23	#ifdef HAVE_CONFIG_H
24	#include "config.h"
25	#endif
26	#include "dnsseckeeper.hh"
27	#include "dnspacket.hh"
28	#include "namespaces.hh"
29
30	uint32_t localtime_format_YYYYMMDDSS(time_t t, uint32_t seq)
31	{	1,139✔
32	struct tm tm;	1,139✔
33	localtime_r(&t, &tm);	1,139✔
34	return	1,139✔
35	(uint32_t)(tm.tm_year+1900) * 1000000u	1,139✔
36	+ (uint32_t)(tm.tm_mon + 1) * 10000u	1,139✔
37	+ (uint32_t)tm.tm_mday * 100u	1,139✔
38	+ seq;	1,139✔
39	}	1,139✔
40
41	uint32_t calculateEditSOA(uint32_t old_serial, const string& kind, const DNSName& zonename)
42	{	26,333✔
43	if(pdns_iequals(kind,"INCEPTION-INCREMENT")) {	26,333✔
44	time_t inception = getStartOfWeek();	510✔
45	uint32_t inception_serial = localtime_format_YYYYMMDDSS(inception, 1);	510✔
46	uint32_t dont_increment_after = localtime_format_YYYYMMDDSS(inception + 2*86400, 99);	510✔
47
48	if(old_serial < inception_serial - 1) { /* less than <inceptionday>00 */	510✔
49	return inception_serial; /* return <inceptionday>01 (skipping <inceptionday>00 as possible value) */	141✔
50	} else if (old_serial < inception_serial+1) {	369✔
51	/* "<inceptionday>00" and "<inceptionday>01" are reserved for inception increasing, so jump to "<inceptionday>02" */
52	return inception_serial+1;	5✔
53	} else if(old_serial <= dont_increment_after) { /* >= <inceptionday>00 but <= <inceptionday+2>99 */	364✔
54	return old_serial + 1;	6✔
55	}	6✔
56	}	510✔
57	else if(pdns_iequals(kind,"INCREMENT-WEEKS")) {	25,823✔
58	time_t inception = getStartOfWeek();	8✔
59	return (old_serial + (inception / (7*86400)));	8✔
60	}	8✔
61	else if(pdns_iequals(kind,"EPOCH")) {	25,815!
62	// coverity[store_truncates_time_t]
UNCOV 63	return time(nullptr);	×
UNCOV 64	}	×
65	else if(pdns_iequals(kind,"INCEPTION-EPOCH")) {	25,815!
66	uint32_t inception = getStartOfWeek();	×
67	if (old_serial < inception)	×
68	return inception;	×
69	}	×
70	else if(pdns_iequals(kind,"NONE")) {	25,815!
71	// do nothing to serial. needed because a metadata of "" will use the default-soa-edit setting instead.
72	}	×
73	else if(!kind.empty()) {	25,815!
74	g_log<<Logger::Warning<<"SOA-EDIT type '"<<kind<<"' for zone "<<zonename<<" is unknown."<<endl;	×
75	}	×
76	// Seen strictly, this is a broken config: we can only come here if
77	// both SOA-EDIT and default-soa-edit are set to "", but the latter
78	// should be set to "NONE" instead.
79	return old_serial;	26,173✔
80	}	26,333✔
81
82	uint32_t calculateEditSOA(uint32_t old_serial, DNSSECKeeper& dk, const DNSName& zonename) {	25,707✔
83	string kind;	25,707✔
84	dk.getSoaEdit(zonename, kind);	25,707✔
85	return calculateEditSOA(old_serial, kind, zonename);	25,707✔
86	}	25,707✔
87
88	/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API. */
89	static uint32_t calculateIncreaseSOA(uint32_t old_serial, const string& increaseKind, const string& editKind, const DNSName& zonename) {	127✔
90	if (pdns_iequals(increaseKind, "SOA-EDIT-INCREASE")) {	127✔
91	uint32_t new_serial = old_serial;	4✔
92	if (!editKind.empty()) {	4!
93	if (pdns_iequals(editKind, "INCEPTION-EPOCH")) {	4!
UNCOV 94	new_serial = calculateEditSOA(old_serial, "EPOCH", zonename);	×
95	} else {	4✔
96	new_serial = calculateEditSOA(old_serial, editKind, zonename);	4✔
97	}	4✔
98	}	4✔
99	if (new_serial <= old_serial) {	4!
UNCOV 100	new_serial = old_serial + 1;	×
UNCOV 101	}	×
102	return new_serial;	4✔
103	}	4✔
104	else if (pdns_iequals(increaseKind, "SOA-EDIT")) {	123!
105	return calculateEditSOA(old_serial, editKind, zonename);	×
106	}	×
107	else if (pdns_iequals(increaseKind, "INCREASE")) {	123!
108	return old_serial + 1;	×
109	}	×
110	else if (pdns_iequals(increaseKind, "EPOCH")) {	123✔
111	// coverity[store_truncates_time_t]
112	return time(nullptr);	4✔
113	}	4✔
114	else if (pdns_iequals(increaseKind, "DEFAULT")) {	119!
115	time_t now = time(nullptr);	119✔
116	uint32_t new_serial = localtime_format_YYYYMMDDSS(now, 1);	119✔
117	if (new_serial <= old_serial) {	119✔
118	new_serial = old_serial + 1;	21✔
119	}	21✔
120	return new_serial;	119✔
121	} else if(!increaseKind.empty()) {	119!
122	g_log<<Logger::Warning<<"SOA-EDIT-API/DNSUPDATE type '"<<increaseKind<<"' for zone "<<zonename<<" is unknown."<<endl;	×
123	}	×
124	return old_serial;	×
125	}	127✔
126
127	/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API.
128	* Good if you already have a DNSResourceRecord.
129	* Content in rr is suitable for writing into a backend.
130	*
131	* @return true if changes may have been made
132	*/
133	bool increaseSOARecord(DNSResourceRecord& rr, const string& increaseKind, const string& editKind) {	6✔
134	if (increaseKind.empty())	6✔
135	return false;	1✔
136
137	SOAData sd;	5✔
138	fillSOAData(rr.content, sd);	5✔
139
140	sd.serial = calculateIncreaseSOA(sd.serial, increaseKind, editKind, rr.qname);	5✔
141	rr.content = makeSOAContent(sd)->getZoneRepresentation(true);	5✔
142	return true;	5✔
143	}	6✔
144
145	/** Used for SOA-EDIT-DNSUPDATE and SOA-EDIT-API.
146	* Makes a mostly reset DNSResourceRecord for you in @param rrout.
147	* Content in rrout is suitable for writing into a backend.
148	*
149	* @return true if rrout is now valid
150	*/
151	bool makeIncreasedSOARecord(SOAData& sd, const string& increaseKind, const string& editKind, DNSResourceRecord& rrout) {	122✔
152	if (increaseKind.empty())	122!
153	return false;	×
154
155	sd.serial = calculateIncreaseSOA(sd.serial, increaseKind, editKind, sd.qname);	122✔
156	rrout.qname = sd.qname;	122✔
157	rrout.content = makeSOAContent(sd)->getZoneRepresentation(true);	122✔
158	rrout.qtype = QType::SOA;	122✔
159	rrout.domain_id = sd.domain_id;	122✔
160	rrout.auth = true;	122✔
161	rrout.ttl = sd.ttl;	122✔
162
163	return true;	122✔
164	}	122✔
165
166	DNSZoneRecord makeEditedDNSZRFromSOAData(DNSSECKeeper& dk, const SOAData& sd, DNSResourceRecord::Place place) {	25,689✔
167	SOAData edited = sd;	25,689✔
168	edited.serial = calculateEditSOA(sd.serial, dk, sd.qname);	25,689✔
169
170	DNSRecord soa;	25,689✔
171	soa.d_name = sd.qname;	25,689✔
172	soa.d_type = QType::SOA;	25,689✔
173	soa.d_ttl = sd.ttl;	25,689✔
174	soa.d_place = place;	25,689✔
175	soa.setContent(makeSOAContent(edited));	25,689✔
176
177	DNSZoneRecord dzr;	25,689✔
178	dzr.domain_id = sd.domain_id;	25,689✔
179	dzr.signttl = sd.ttl;	25,689✔
180	dzr.auth = true;	25,689✔
181	dzr.dr = std::move(soa);	25,689✔
182
183	return dzr;	25,689✔
184	}	25,689✔

PowerDNS / pdns / 8246836297

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous