PowerDNS / pdns

56%

master: 64%

LAST BUILD ON BRANCH dnsdist-1.9.4

branch: dnsdist-1.9.4

CHANGE BRANCH

x

Reset

• dnsdist-1.9.4
• 10431
• add_but_reluctantly
• alias_but_not_as_dns_records
• allow-docker-build-no-creds
• amnesia_got_me_in_trouble
• augias_stables_take_1
• auth-4.9.0
• auth-4.9.0-alpha1
• auth-4.9.0-beta1
• auth-4.9.0-beta2
• auth-4.9.1
• auth-4.9.2
• auth-4.9.3
• auth-4.9.3-secpoll-docs
• auth-4.9.4
• auth-5.0.0-alpha0
• auth-catalog-fix
• auth-meson-ldap-deb11
• auth49-backport-15093
• autoconf-ate-my-brackets
• avoid-local-port
• backend-docs
• backport-14525-to-rec-5.0.x
• backport-14525-to-rec-5.1.x
• backport-14823-to-auth-4.9.x
• backport-14957-to-rec-5.2.x
• backport-14991-to-rec-5.2.x
• backport-15010-to-rec-5.2.x
• backport-15019-to-rec-5.2.x
• backport-15023-to-rec-5.2.x
• backport-15063-to-rec-5.2.x
• backport-15072-to-rec-5.2.x
• backport-15205-to-rec-5.2.x
• backport-15222-to-auth-4.9.x
• bb
• bugfix/12653
• cache_me_tender
• chore/docs-site-brush-up
• cname_withheld_to_protect_the_innocent
• consistent_logs
• creationism
• credentials-include
• dare-to-fail
• ddist-add-test-for-rewriting-response-code-via-lua
• ddist-better-error-msg-source
• ddist-build-xsk-noble-oracular
• ddist-coverity-20250121
• ddist-coverity-20250221
• ddist-disable-lua-configuration-options-with-yaml
• ddist-doc-dq-elapsedus
• ddist-document-stat-node-ffi-children
• ddist-doh3-bindings
• ddist-doh3-set-http-response
• ddist-ebpf-all
• ddist-enable-yaml-packages
• ddist-fix-coverity
• ddist-fix-coverity-yaml-2
• ddist-fix-doc-action-typos
• ddist-fix-ecs-zero-scope-incoming-doh
• ddist-fix-el-builds
• ddist-fix-xsk-boost-lockfree-1.87
• ddist-handle-dnstap-msg-order
• ddist-ignore-re2-broken-cflags
• ddist-improve-secpoll-msgs
• ddist-meson-follow-up
• ddist-meson-install
• ddist-meson-min-version
• ddist-no-doh3-meson
• ddist-packages-with-meson
• ddist-quic-sni
• ddist-quiche-version-fallback
• ddist-regression-test-python3.13
• ddist-remove-tlscontext
• ddist-support-quiche-0.23-plus
• ddist-support-several-xdp-itf
• ddist-xdp-map-queues-parameters
• ddist-yaml-configuration-harder
• ddist19-backport-14888
• ddist19-backport-14967
• ddist19-backport-15118
• ddist19-backport-15137
• ddist19-backport-15164
• ddist198-changelog
• deb-conffile
• dependabot/cargo/pdns/recursordist/settings/rust/unsafe-libyaml-0.2.10
• dependabot/github_actions/actions/cache-4
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/download-artifact-4
• dependabot/github_actions/actions/setup-node-4
• dependabot/github_actions/actions/upload-artifact-4
• dependabot/github_actions/check-spelling/check-spelling-0.0.23
• dependabot/github_actions/check-spelling/check-spelling-0.0.24
• dependabot/github_actions/docker/build-push-action-6
• dependabot/github_actions/github/codeql-action-3
• dependabot/github_actions/slsa-framework/slsa-github-generator-1.10.0
• dependabot/github_actions/slsa-framework/slsa-github-generator-2.0.0
• dependabot/pip/docs/certifi-2024.7.4
• dependabot/pip/docs/idna-3.7
• dependabot/pip/docs/jinja2-3.1.3
• dependabot/pip/docs/jinja2-3.1.4
• dependabot/pip/docs/jinja2-3.1.5
• dependabot/pip/docs/urllib3-2.0.7
• dependabot/pip/docs/urllib3-2.2.2
• dependabot/pip/pdns/dnsdistdist/docs/certifi-2024.7.4
• dependabot/pip/pdns/dnsdistdist/docs/idna-3.7
• dependabot/pip/pdns/dnsdistdist/docs/jinja2-3.1.4
• dependabot/pip/pdns/dnsdistdist/docs/requests-2.32.2
• dependabot/pip/pdns/dnsdistdist/docs/urllib3-2.2.2
• dependabot/pip/pdns/keyroller/certifi-2023.7.22
• dependabot/pip/pdns/keyroller/certifi-2024.7.4
• dependabot/pip/pdns/keyroller/idna-3.7
• dependabot/pip/pdns/keyroller/requests-2.31.0
• dependabot/pip/pdns/keyroller/requests-2.32.0
• dependabot/pip/pdns/keyroller/urllib3-1.26.18
• dependabot/pip/pdns/keyroller/urllib3-1.26.19
• dependabot/pip/pdns/recursordist/docs/certifi-2024.7.4
• dependabot/pip/pdns/recursordist/docs/idna-3.7
• dependabot/pip/pdns/recursordist/docs/jinja2-3.1.3
• dependabot/pip/pdns/recursordist/docs/jinja2-3.1.4
• dependabot/pip/pdns/recursordist/docs/requests-2.32.2
• dependabot/pip/pdns/recursordist/docs/urllib3-2.2.2
• dependabot/pip/regression-tests.api/requests-2.31.0
• dependabot/pip/regression-tests.auth-py/dnspython-2.6.1
• dependabot/pip/regression-tests.ixfrdist/dnspython-2.6.1
• dilnpstu
• direct-dnskey-signature
• dist-re2
• distdistdistdistdist
• dnsdist-1.10.0-alpha0
• dnsdist-1.9.0
• dnsdist-1.9.0-alpha2
• dnsdist-1.9.0-alpha3
• dnsdist-1.9.0-alpha4
• dnsdist-1.9.0-rc1
• dnsdist-1.9.1
• dnsdist-1.9.2
• dnsdist-1.9.3
• dnsdist-1.9.5
• dnsdist-1.9.6
• dnsdist-1.9.7
• dnsdist-1.9.8
• dnsdist-2.0.0-alpha0
• dnsdist-back-to-serde-yaml
• dnsdist-dnstap-http
• dnsdist-fix-build-no-doh3
• dnsdist-meson-dist
• dnsdist-testrunner-libssl
• dnssec-migration
• doc-pdnsutil
• docs-allow-from
• docs-pr-artifact
• docs-top-searchbox
• docs_autoprimary_setup_add_warning
• drop-circleci
• drop-el7-debianbuster
• enable-meson-auth-deb11
• fail-fast-false
• feat/metric-labels
• feature/add-arm64-tests-to-repo-script
• feature/dnstap-multi-stream
• feature/rclone
• ff
• fire_of_unknown_origin
• fix-arm64-image-builds
• fix-version-pbr
• fix7522
• fix7524
• guillotine
• import_with_care
• include-fixes
• jj
• keylogfile_master
• ll
• lmdb-prefix-lookup
• lmdb_abort_with_style
• loc-lat-long
• logging-tidy
• lua-if-first-run
• lua-link-to-ifurlup-options
• lua-records-mark-up
• lua_finer_intervals
• luallaby
• master
• meson
• meson-dist
• minus_one_is_the_new_black
• misc-dailies-pull-request
• mm
• my_docs_look_better_than_yours
• napster
• netlify_docs_publish
• no-bool-explicit-cmp
• npd
• numbers_are_secondary
• old_lmdb_schema_leftovers
• pad_me_harder
• parse_with_more_care
• patch-1
• pdnsutil-absolute-names
• pdnsutil_eulenspiegel
• primary-secondary
• rec-5.0.0-alpha2
• rec-5.0.0-beta1
• rec-5.0.0-rc1
• rec-5.0.0-rc2
• rec-5.0.1
• rec-5.0.2
• rec-5.0.3
• rec-5.0.4
• rec-5.0.5
• rec-5.0.6
• rec-5.0.7
• rec-5.0.8
• rec-5.0.9
• rec-5.1.0
• rec-5.1.0-alpha0
• rec-5.1.0-alpha1
• rec-5.1.0-beta1
• rec-5.1.0-rc1
• rec-5.1.1
• rec-5.1.2
• rec-5.1.3
• rec-5.2.0
• rec-5.2.0-alpha0
• rec-5.2.0-alpha1
• rec-5.2.0-beta1
• rec-5.2.0-rc1
• rec-5.3.0-alpha0
• rec-beck-to-serde-yaml
• rec-bulktest-ubicloud
• rec-cache-shared-authrecs
• rec-catz-test-race
• rec-coverity-20240117
• rec-coverity-20250120
• rec-coverity-20250212
• rec-coverity-20250217
• rec-daily-bulk
• rec-debian
• rec-dedup-recs
• rec-docs-assorted
• rec-docs-lua-vs-catz
• rec-ds-zonecut-invalid
• rec-ecs
• rec-fix-docs-gen
• rec-fix-secpoll-tsan
• rec-forwarding_catalog_zones-default
• rec-full-cname-chain-cached
• rec-fw-recurse
• rec-fwz-docs
• rec-janitor-at-work
• rec-log-sockets
• rec-meson-ci
• rec-meson-deb11
• rec-meson-dist
• rec-meson-gen-docs
• rec-meson-gen-metrics-fixup
• rec-meson-install
• rec-meson-unitfiles
• rec-old-settings-warn
• rec-prep-5.2.0
• rec-prep-5.2.0-rc1
• rec-proxy-reload
• rec-quit-nicely-sync
• rec-record-sizes
• rec-recthread-cleanup
• rec-rpz-tmp-file-deleter
• rec-rust-cxx-include-dir
• rec-rust-web
• rec-shared-ptr-followup
• rec-sockets-less-chatty
• rec-specialize-5.2.x-branch
• rec-top-million
• rec-zf-file-syntax
• recdocssample
• rel/auth-4.9.x
• rel/dnsdist-1.9.x
• rel/rec-5.0.x
• rel/rec-5.1.x
• rel/rec-5.2.x
• revert-14703-refactor-meson-fuzz
• revert-rclone
• rotd
• seventh_zone_of_a_seventh_zone
• smarter_soa
• strict_aliasing
• sulton/self-weighted
• taggedOnly
• test-tmp-remove
• tidy-credentials
• tsig-mark-up
• update-quiche
• update-rust
• wouter/prometheus-content-type
• zeha-bd
• zeha-mesonstuff
• zero

Build # 9059151048

Build Type

push

github

Committed by rgacogne

Commit Message

dnsdist: Fix handling of XFR requests over DoH

We did not properly handle incoming XFR requests received over DoH
When a TCP-only or DoT backend was configured, and the nghttp2 provider
used.
This commit fixes the assertion failure and makes sure that XFR
requests are denied with `NOTIMP` when received over DNS over HTTPS,
including DNS over HTTP/3. It also denies them when received over
DNS over QUIC as this is not properly handled at the moment, although
it does not cause a crash.

Run Details

13707 of 45152 branches covered (30.36%)

Branch coverage included in aggregate %.

13 of 19 new or added lines in 3 files covered. (68.42%)

13 existing lines in 3 files now uncovered.

47592 of 65090 relevant lines covered (73.12%)

3408813.28 hits per line