• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

PowerDNS / pdns / 18409242756

10 Oct 2025 02:16PM UTC coverage: 19.38% (-44.8%) from 64.13%
18409242756

push

github

web-flow
Merge pull request #16245 from miodvallat/matriochka_exception

auth: yet another logic botch

3972 of 30808 branches covered (12.89%)

Branch coverage included in aggregate %.

11562 of 49346 relevant lines covered (23.43%)

3168.61 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0
/pdns/lua-base4.cc
1
#include "config.h"
2
#include <cassert>
3
#include <fstream>
4
#include <unordered_set>
5
#include <unordered_map>
6
#include <typeinfo>
7
#include <sys/stat.h>
8
#include "logger.hh"
9
#include "logging.hh"
10
#include "iputils.hh"
11
#include "dnsname.hh"
12
#include "dnsparser.hh"
13
#include "dnspacket.hh"
14
#include "namespaces.hh"
15
#include "ednssubnet.hh"
16
#include "lua-base4.hh"
17
#include "ext/luawrapper/include/LuaContext.hpp"
18
#include "dns_random.hh"
19

20
void BaseLua4::loadFile(const std::string& fname, bool doPostLoad)
21
{
×
22
  std::ifstream ifs(fname);
×
23
  if (!ifs) {
×
24
    auto ret = errno;
×
25
    auto msg = stringerror(ret);
×
26
    g_log << Logger::Error << "Unable to read configuration file from '" << fname << "': " << msg << endl;
×
27
    throw std::runtime_error(msg);
×
28
  }
×
29
  loadStream(ifs, doPostLoad);
×
30
};
×
31

32
void BaseLua4::loadString(const std::string &script) {
×
33
  std::istringstream iss(script);
×
34
  loadStream(iss, true);
×
35
};
×
36

37
void BaseLua4::includePath(const std::string& directory) {
×
38
  std::vector<std::string> vec;
×
39
  const std::string& suffix = "lua";
×
40
  auto directoryError = pdns::visit_directory(directory, [this, &directory, &suffix, &vec]([[maybe_unused]] ino_t inodeNumber, const std::string_view& name) {
×
41
    (void)this;
×
42
    if (boost::starts_with(name, ".")) {
×
43
      return true; // skip any dots
×
44
    }
×
45
    if (boost::ends_with(name, suffix)) {
×
46
      // build name
47
      string fullName = directory + "/" + std::string(name);
×
48
      // ensure it's readable file
49
      struct stat statInfo
×
50
      {
×
51
      };
×
52
      if (stat(fullName.c_str(), &statInfo) != 0 || !S_ISREG(statInfo.st_mode)) {
×
53
        string msg = fullName + " is not a regular file";
×
54
        g_log << Logger::Error << msg << std::endl;
×
55
        throw PDNSException(std::move(msg));
×
56
      }
×
57
      vec.emplace_back(fullName);
×
58
    }
×
59
    return true;
×
60
  });
×
61

62
  if (directoryError) {
×
63
    int err = errno;
×
64
    string msg = directory + " is not accessible: " + stringerror(err);
×
65
    g_log << Logger::Error << msg << std::endl;
×
66
    throw PDNSException(std::move(msg));
×
67
  }
×
68

69
  std::sort(vec.begin(), vec.end(), CIStringComparePOSIX());
×
70

71
  for(const auto& file: vec) {
×
72
    loadFile(file, false);
×
73
  }
×
74
};
×
75

76
//  By default no features
77
void BaseLua4::getFeatures(Features &) { }
×
78

79
void BaseLua4::prepareContext() {
×
80
  d_lw = std::make_unique<LuaContext>();
×
81

82
  // lua features available
83
  Features features;
×
84
  getFeatures(features);
×
85
  d_lw->writeVariable("pdns_features", features);
×
86

87
  // dnsheader
88
  d_lw->registerFunction<int(dnsheader::*)()>("getID", [](dnsheader& dh) { return ntohs(dh.id); });
×
89
  d_lw->registerFunction<bool(dnsheader::*)()>("getCD", [](dnsheader& dh) { return dh.cd; });
×
90
  d_lw->registerFunction<bool(dnsheader::*)()>("getTC", [](dnsheader& dh) { return dh.tc; });
×
91
  d_lw->registerFunction<bool(dnsheader::*)()>("getRA", [](dnsheader& dh) { return dh.ra; });
×
92
  d_lw->registerFunction<bool(dnsheader::*)()>("getAD", [](dnsheader& dh) { return dh.ad; });
×
93
  d_lw->registerFunction<bool(dnsheader::*)()>("getAA", [](dnsheader& dh) { return dh.aa; });
×
94
  d_lw->registerFunction<bool(dnsheader::*)()>("getRD", [](dnsheader& dh) { return dh.rd; });
×
95
  d_lw->registerFunction<int(dnsheader::*)()>("getRCODE", [](dnsheader& dh) { return dh.rcode; });
×
96
  d_lw->registerFunction<int(dnsheader::*)()>("getOPCODE", [](dnsheader& dh) { return dh.opcode; });
×
97
  d_lw->registerFunction<int(dnsheader::*)()>("getQDCOUNT", [](dnsheader& dh) { return ntohs(dh.qdcount); });
×
98
  d_lw->registerFunction<int(dnsheader::*)()>("getANCOUNT", [](dnsheader& dh) { return ntohs(dh.ancount); });
×
99
  d_lw->registerFunction<int(dnsheader::*)()>("getNSCOUNT", [](dnsheader& dh) { return ntohs(dh.nscount); });
×
100
  d_lw->registerFunction<int(dnsheader::*)()>("getARCOUNT", [](dnsheader& dh) { return ntohs(dh.arcount); });
×
101

102
  // DNSName
103
  d_lw->writeFunction("newDN", [](const std::string& dom){ return DNSName(dom); });
×
104
  d_lw->registerFunction("__lt", &DNSName::operator<);
×
105
  d_lw->registerFunction<bool(DNSName::*)(const DNSName&)>("canonCompare", [](const DNSName& name, const DNSName& rhs) { return name.canonCompare(rhs); });
×
106
  d_lw->registerFunction<DNSName(DNSName::*)(const DNSName&)>("makeRelative", [](const DNSName& name, const DNSName& zone) { return name.makeRelative(zone); });
×
107
  d_lw->registerFunction<bool(DNSName::*)(const DNSName&)>("isPartOf", [](const DNSName& name, const DNSName& rhs) { return name.isPartOf(rhs); });
×
108
  d_lw->registerFunction("getRawLabels", &DNSName::getRawLabels);
×
109
  d_lw->registerFunction<unsigned int(DNSName::*)()>("countLabels", [](const DNSName& name) { return name.countLabels(); });
×
110
  d_lw->registerFunction<size_t(DNSName::*)()>("wireLength", [](const DNSName& name) { return name.wirelength(); });
×
111
  d_lw->registerFunction<size_t(DNSName::*)()>("wirelength", [](const DNSName& name) { return name.wirelength(); });
×
112
  d_lw->registerFunction<bool(DNSName::*)(const std::string&)>("equal", [](const DNSName& lhs, const std::string& rhs) { return lhs==DNSName(rhs); });
×
113
  d_lw->registerEqFunction(&DNSName::operator==);
×
114
  d_lw->registerToStringFunction<string(DNSName::*)()>([](const DNSName&dn ) { return dn.toString(); });
×
115
  d_lw->registerFunction<string(DNSName::*)()>("toString", [](const DNSName&dn ) { return dn.toString(); });
×
116
  d_lw->registerFunction<string(DNSName::*)()>("toStringNoDot", [](const DNSName&dn ) { return dn.toStringNoDot(); });
×
117
  d_lw->registerFunction<bool(DNSName::*)()>("chopOff", [](DNSName&dn ) { return dn.chopOff(); });
×
118

119
  // DNSResourceRecord
120
  d_lw->writeFunction("newDRR", [](const DNSName& qname, const string& qtype, const unsigned int ttl, const string& content, boost::optional<int> domain_id, boost::optional<int> auth){
×
121
    auto drr = DNSResourceRecord();
×
122
    drr.qname = qname;
×
123
    drr.qtype = qtype;
×
124
    drr.ttl = ttl;
×
125
    drr.setContent(content);
×
126
    if (domain_id)
×
127
      drr.domain_id = *domain_id;
×
128
    if (auth)
×
129
      drr.auth = *auth;
×
130
     return drr;
×
131
  });
×
132
  d_lw->registerEqFunction(&DNSResourceRecord::operator==);
×
133
  d_lw->registerFunction("__lt", &DNSResourceRecord::operator<);
×
134
  d_lw->registerToStringFunction<string(DNSResourceRecord::*)()>([](const DNSResourceRecord& rec) { return rec.getZoneRepresentation(); });
×
135
  d_lw->registerFunction<string(DNSResourceRecord::*)()>("toString", [](const DNSResourceRecord& rec) { return rec.getZoneRepresentation();} );
×
136
  d_lw->registerFunction<DNSName(DNSResourceRecord::*)()>("qname", [](DNSResourceRecord& rec) { return rec.qname; });
×
137
  d_lw->registerFunction<DNSName(DNSResourceRecord::*)()>("wildcardName", [](DNSResourceRecord& rec) { return rec.wildcardname; });
×
138
  d_lw->registerFunction<string(DNSResourceRecord::*)()>("content", [](DNSResourceRecord& rec) { return rec.content; });
×
139
  d_lw->registerFunction<time_t(DNSResourceRecord::*)()>("lastModified", [](DNSResourceRecord& rec) { return rec.last_modified; });
×
140
  d_lw->registerFunction<uint32_t(DNSResourceRecord::*)()>("ttl", [](DNSResourceRecord& rec) { return rec.ttl; });
×
141
  d_lw->registerFunction<uint32_t(DNSResourceRecord::*)()>("signttl", [](DNSResourceRecord& rec) { return rec.signttl; });
×
142
  d_lw->registerFunction<int(DNSResourceRecord::*)()>("domainId", [](DNSResourceRecord& rec) { return rec.domain_id; });
×
143
  d_lw->registerFunction<uint16_t(DNSResourceRecord::*)()>("qtype", [](DNSResourceRecord& rec) { return rec.qtype.getCode(); });
×
144
  d_lw->registerFunction<uint16_t(DNSResourceRecord::*)()>("qclass", [](DNSResourceRecord& rec) { return rec.qclass; });
×
145
  d_lw->registerFunction<uint8_t(DNSResourceRecord::*)()>("scopeMask", [](DNSResourceRecord& rec) { return rec.scopeMask; });
×
146
  d_lw->registerFunction<bool(DNSResourceRecord::*)()>("auth", [](DNSResourceRecord& rec) { return rec.auth; });
×
147
  d_lw->registerFunction<bool(DNSResourceRecord::*)()>("disabled", [](DNSResourceRecord& rec) { return rec.disabled; });
×
148

149
  // ComboAddress
150
  d_lw->registerFunction<bool(ComboAddress::*)()>("isIPv4", [](const ComboAddress& addr) { return addr.sin4.sin_family == AF_INET; });
×
151
  d_lw->registerFunction<bool(ComboAddress::*)()>("isIPv6", [](const ComboAddress& addr) { return addr.sin4.sin_family == AF_INET6; });
×
152
  d_lw->registerFunction<uint16_t(ComboAddress::*)()>("getPort", [](const ComboAddress& addr) { return ntohs(addr.sin4.sin_port); } );
×
153
  d_lw->registerFunction<bool(ComboAddress::*)()>("isMappedIPv4", [](const ComboAddress& addr) { return addr.isMappedIPv4(); });
×
154
  d_lw->registerFunction<ComboAddress(ComboAddress::*)()>("mapToIPv4", [](const ComboAddress& addr) { return addr.mapToIPv4(); });
×
155
  d_lw->registerFunction<void(ComboAddress::*)(unsigned int)>("truncate", [](ComboAddress& addr, unsigned int bits) { addr.truncate(bits); });
×
156
  d_lw->registerFunction<string(ComboAddress::*)()>("toString", [](const ComboAddress& addr) { return addr.toString(); });
×
157
  d_lw->registerToStringFunction<string(ComboAddress::*)()>([](const ComboAddress& addr) { return addr.toString(); });
×
158
  d_lw->registerFunction<string(ComboAddress::*)()>("toStringWithPort", [](const ComboAddress& addr) { return addr.toStringWithPort(); });
×
159
  d_lw->registerFunction<string(ComboAddress::*)()>("getRaw", [](const ComboAddress& addr) { return addr.toByteString(); });
×
160

161
  d_lw->writeFunction("newCA", [](const std::string& a) { return ComboAddress(a); });
×
162
  d_lw->writeFunction("newCAFromRaw", [](const std::string& raw, boost::optional<uint16_t> port) {
×
163
                                        if (raw.size() == 4) {
×
164
                                          struct sockaddr_in sin4;
×
165
                                          memset(&sin4, 0, sizeof(sin4));
×
166
                                          sin4.sin_family = AF_INET;
×
167
                                          memcpy(&sin4.sin_addr.s_addr, raw.c_str(), raw.size());
×
168
                                          if (port) {
×
169
                                            sin4.sin_port = htons(*port);
×
170
                                          }
×
171
                                          return ComboAddress(&sin4);
×
172
                                        }
×
173
                                        else if (raw.size() == 16) {
×
174
                                          struct sockaddr_in6 sin6;
×
175
                                          memset(&sin6, 0, sizeof(sin6));
×
176
                                          sin6.sin6_family = AF_INET6;
×
177
                                          memcpy(&sin6.sin6_addr.s6_addr, raw.c_str(), raw.size());
×
178
                                          if (port) {
×
179
                                            sin6.sin6_port = htons(*port);
×
180
                                          }
×
181
                                          return ComboAddress(&sin6);
×
182
                                        }
×
183
                                        return ComboAddress();
×
184
                                      });
×
185
  typedef std::unordered_set<ComboAddress,ComboAddress::addressOnlyHash,ComboAddress::addressOnlyEqual> cas_t;
×
186
  d_lw->registerFunction<bool(ComboAddress::*)(const ComboAddress&)>("equal", [](const ComboAddress& lhs, const ComboAddress& rhs) { return ComboAddress::addressOnlyEqual()(lhs, rhs); });
×
187

188
  // cas_t
189
  d_lw->writeFunction("newCAS", []{ return cas_t(); });
×
190
  d_lw->registerFunction<void(cas_t::*)(boost::variant<string,ComboAddress, vector<pair<unsigned int,string> > >)>("add",
×
191
    [](cas_t& cas, const boost::variant<string,ComboAddress,vector<pair<unsigned int,string> > >& in)
×
192
    {
×
193
      try {
×
194
      if(auto s = boost::get<string>(&in)) {
×
195
        cas.insert(ComboAddress(*s));
×
196
      }
×
197
      else if(auto v = boost::get<vector<pair<unsigned int, string> > >(&in)) {
×
198
        for(const auto& str : *v)
×
199
          cas.insert(ComboAddress(str.second));
×
200
      }
×
201
      else
×
202
        cas.insert(boost::get<ComboAddress>(in));
×
203
      }
×
204
      catch(std::exception& e) {
×
205
        SLOG(g_log <<Logger::Error<<e.what()<<endl,
×
206
             g_slog->withName("lua")->error(Logr::Error, e.what(), "Exception in newCAS", "exception", Logging::Loggable("std::exception")));
×
207
      }
×
208
    });
×
209
  d_lw->registerFunction<bool(cas_t::*)(const ComboAddress&)>("check",[](const cas_t& cas, const ComboAddress&ca) { return cas.count(ca)>0; });
×
210

211
  // QType
212
  d_lw->writeFunction("newQType", [](const string& s) { QType q; q = s; return q; });
×
213
  d_lw->registerFunction("getCode", &QType::getCode);
×
214
  d_lw->registerFunction("getName", &QType::toString);
×
215
  d_lw->registerEqFunction<bool(QType::*)(const QType&)>([](const QType& a, const QType& b){ return a == b;}); // operator overloading confuses LuaContext
×
216
  d_lw->registerToStringFunction(&QType::toString);
×
217

218
  // Netmask
219
  d_lw->writeFunction("newNetmask", [](const string& s) { return Netmask(s); });
×
220
  d_lw->registerFunction<ComboAddress(Netmask::*)()>("getNetwork", [](const Netmask& nm) { return nm.getNetwork(); } ); // const reference makes this necessary
×
221
  d_lw->registerFunction<ComboAddress(Netmask::*)()>("getMaskedNetwork", [](const Netmask& nm) { return nm.getMaskedNetwork(); } );
×
222
  d_lw->registerFunction("isIpv4", &Netmask::isIPv4);
×
223
  d_lw->registerFunction("isIPv4", &Netmask::isIPv4);
×
224
  d_lw->registerFunction("isIpv6", &Netmask::isIPv6);
×
225
  d_lw->registerFunction("isIPv6", &Netmask::isIPv6);
×
226
  d_lw->registerFunction("getBits", &Netmask::getBits);
×
227
  d_lw->registerFunction("toString", &Netmask::toString);
×
228
  d_lw->registerFunction("empty", &Netmask::empty);
×
229
  d_lw->registerFunction("match", (bool (Netmask::*)(const string&) const)&Netmask::match);
×
230
  d_lw->registerEqFunction(&Netmask::operator==);
×
231
  d_lw->registerToStringFunction(&Netmask::toString);
×
232

233
  // NetmaskGroup
234
  d_lw->writeFunction("newNMG", [](boost::optional<vector<pair<unsigned int, std::string>>> masks) {
×
235
    auto nmg = NetmaskGroup();
×
236

237
    if (masks) {
×
238
      for(const auto& mask: *masks) {
×
239
        nmg.addMask(mask.second);
×
240
      }
×
241
    }
×
242

243
    return nmg;
×
244
  });
×
245
  // d_lw->writeFunction("newNMG", []() { return NetmaskGroup(); });
246
  d_lw->registerFunction<void(NetmaskGroup::*)(const std::string&mask)>("addMask", [](NetmaskGroup&nmg, const std::string& mask) { nmg.addMask(mask); });
×
247
  d_lw->registerFunction<void(NetmaskGroup::*)(const vector<pair<unsigned int, std::string>>&)>("addMasks", [](NetmaskGroup&nmg, const vector<pair<unsigned int, std::string>>& masks) { for(const auto& mask: masks) { nmg.addMask(mask.second); } });
×
248
  d_lw->registerFunction("match", (bool (NetmaskGroup::*)(const ComboAddress&) const)&NetmaskGroup::match);
×
249

250
  // DNSRecord
251
  d_lw->writeFunction("newDR", [](const DNSName& name, const std::string& type, unsigned int ttl, const std::string& content, int place) { QType qtype; qtype = type; auto dr = DNSRecord(); dr.d_name = name; dr.d_type = qtype.getCode(); dr.d_ttl = ttl; dr.setContent(shared_ptr<DNSRecordContent>(DNSRecordContent::make(dr.d_type, QClass::IN, content))); dr.d_place = static_cast<DNSResourceRecord::Place>(place); return dr; });
×
252
  d_lw->registerMember("name", &DNSRecord::d_name);
×
253
  d_lw->registerMember("type", &DNSRecord::d_type);
×
254
  d_lw->registerMember("ttl", &DNSRecord::d_ttl);
×
255
  d_lw->registerMember("place", &DNSRecord::d_place);
×
256
  d_lw->registerFunction<string(DNSRecord::*)()>("getContent", [](const DNSRecord& dr) { return dr.getContent()->getZoneRepresentation(); });
×
257
  d_lw->registerFunction<boost::optional<ComboAddress>(DNSRecord::*)()>("getCA", [](const DNSRecord& dr) {
×
258
      boost::optional<ComboAddress> ret;
×
259

260
      if(auto arec = getRR<ARecordContent>(dr))
×
261
        ret=arec->getCA(53);
×
262
      else if(auto aaaarec = getRR<AAAARecordContent>(dr))
×
263
        ret=aaaarec->getCA(53);
×
264
      return ret;
×
265
    });
×
266
  d_lw->registerFunction<void (DNSRecord::*)(const std::string&)>("changeContent", [](DNSRecord& dr, const std::string& newContent) { dr.setContent(shared_ptr<DNSRecordContent>(DNSRecordContent::make(dr.d_type, 1, newContent))); });
×
267

268
  // pdnslog
269
#ifdef RECURSOR
×
270
  d_lw->writeFunction("pdnslog", [](const std::string& msg, boost::optional<int> loglevel, boost::optional<std::map<std::string, std::string>> values) {
×
271
    auto log = g_slog->withName("lua");
×
272
    if (values) {
×
273
      for (const auto& [key, value] : *values) {
×
274
        log = log->withValues(key, Logging::Loggable(value));
×
275
      }
×
276
    }
×
277
    log->info(static_cast<Logr::Priority>(loglevel.get_value_or(Logr::Warning)), msg);
×
278
#else
279
    d_lw->writeFunction("pdnslog", [](const std::string& msg, boost::optional<int> loglevel) {
280
      g_log << (Logger::Urgency)loglevel.get_value_or(Logger::Warning) << msg<<endl;
281
#endif
282
  });
×
283

284
  d_lw->writeFunction("pdnsrandom", [](boost::optional<uint32_t> maximum) {
×
285
    return maximum ? dns_random(*maximum) : dns_random_uint32();
×
286
  });
×
287

288
  // certain constants
289

290
  vector<pair<string, int> > rcodes = {{"NOERROR",  RCode::NoError  },
×
291
                                       {"FORMERR",  RCode::FormErr  },
×
292
                                       {"SERVFAIL", RCode::ServFail },
×
293
                                       {"NXDOMAIN", RCode::NXDomain },
×
294
                                       {"NOTIMP",   RCode::NotImp   },
×
295
                                       {"REFUSED",  RCode::Refused  },
×
296
                                       {"YXDOMAIN", RCode::YXDomain },
×
297
                                       {"YXRRSET",  RCode::YXRRSet  },
×
298
                                       {"NXRRSET",  RCode::NXRRSet  },
×
299
                                       {"NOTAUTH",  RCode::NotAuth  },
×
300
                                       {"NOTZONE",  RCode::NotZone  },
×
301
                                       {"DROP",    -2               }}; // To give backport-incompatibility warning
×
302
  for(const auto& rcode : rcodes)
×
303
    d_pd.push_back({rcode.first, rcode.second});
×
304

305
  d_pd.push_back({"place", in_t{
×
306
    {"QUESTION", 0},
×
307
    {"ANSWER", 1},
×
308
    {"AUTHORITY", 2},
×
309
    {"ADDITIONAL", 3}
×
310
  }});
×
311

312
  d_pd.push_back({"loglevels", in_t{
×
313
        {"Alert", LOG_ALERT},
×
314
        {"Critical", LOG_CRIT},
×
315
        {"Debug", LOG_DEBUG},
×
316
        {"Emergency", LOG_EMERG},
×
317
        {"Info", LOG_INFO},
×
318
        {"Notice", LOG_NOTICE},
×
319
        {"Warning", LOG_WARNING},
×
320
        {"Error", LOG_ERR}
×
321
          }});
×
322

323
  for(const auto& n : QType::names)
×
324
    d_pd.push_back({n.first, n.second});
×
325

326
  d_lw->registerMember("tv_sec", &timeval::tv_sec);
×
327
  d_lw->registerMember("tv_usec", &timeval::tv_usec);
×
328

329
  postPrepareContext();
×
330

331
  // so we can let postprepare do changes to this
332
  d_lw->writeVariable("pdns", d_pd);
×
333
}
×
334

335
void BaseLua4::loadStream(std::istream &stream, bool doPostLoad) {
×
336
  d_lw->executeCode(stream);
×
337

338
  if (doPostLoad) {
×
339
    postLoad();
×
340
  }
×
341
}
×
342

343
BaseLua4::~BaseLua4() = default;
×
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc