Skip to content

dns: handle large resolveAny address replies - #64820

Open
RafaelGSS wants to merge 1 commit into
nodejs:mainfrom
RafaelGSS:dnsresolve-to-main
Open

dns: handle large resolveAny address replies#64820
RafaelGSS wants to merge 1 commit into
nodejs:mainfrom
RafaelGSS:dnsresolve-to-main

Conversation

@RafaelGSS

@RafaelGSS RafaelGSS commented Jul 29, 2026

Copy link
Copy Markdown
Member

Refs: https://hackerone.com/reports/3795657

PR-URL: https://github.com/nodejs-private/node-private/pull/929
Reviewed-By: Matteo Collina matteo.collina@gmail.com
CVE-ID: CVE-2026-58042

It landed on v26.x (and all release lines), but conflicted with main.

PTAL @mcollina

@RafaelGSS
dns: handle large resolveAny address replies
b6f32f5 
Refs: https://hackerone.com/reports/3795657
Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: nodejs-private/node-private#929
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
CVE-ID: CVE-2026-58042
@nodejs-github-bot

nodejs-github-bot commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/net

@RafaelGSS RafaelGSS added dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. dont-land-on-v26.x PRs that should not land on the v26.x-staging branch and should not be released in v26.x. labels Jul 29, 2026
@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. cares Issues and PRs related to the c-ares dependency or the cares_wrap binding. needs-ci PRs that need a full CI run. labels Jul 29, 2026
mcollina
mcollina approved these changes Jul 29, 2026
View reviewed changes

@mcollina mcollina left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@mcollina mcollina added fast-track PRs that do not need to wait for 72 hours to land. request-ci Add this label to start a Jenkins CI on a PR. labels Jul 29, 2026
@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Fast-track has been requested by @mcollina. Please 👍 to approve.

@github-actions github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Jul 29, 2026
@nodejs-github-bot

nodejs-github-bot commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/75292/

@avivkeller avivkeller added the author ready PRs that have at least one approval, no pending requests for changes, and a CI started. label Jul 29, 2026
@codecov

codecov Bot commented Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 70.83333% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.14%. Comparing base (41525ab) to head (b6f32f5).
⚠️ Report is 17 commits behind head on main.

Files with missing lines Patch % Lines
src/cares_wrap.cc 70.83% 1 Missing and 6 partials ⚠️
Additional details and impacted files 
@@            Coverage Diff             @@
##             main   #64820      +/-   ##
==========================================
- Coverage   90.16%   90.14%   -0.02%     
==========================================
  Files         746      746              
  Lines      242660   242832     +172     
  Branches    45720    45763      +43     
==========================================
+ Hits       218793   218909     +116     
- Misses      15360    15410      +50     
- Partials     8507     8513       +6
Files with missing lines Coverage Δ
src/cares_wrap.cc 63.07% <70.83%> (+0.14%) ⬆️

... and 46 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mcollina mcollina mcollina approved these changes
@lpinca lpinca lpinca approved these changes
@avivkeller avivkeller avivkeller approved these changes

Assignees

No one assigned

Labels

author ready PRs that have at least one approval, no pending requests for changes, and a CI started. c++ Issues and PRs that require attention from people who are familiar with C++. cares Issues and PRs related to the c-ares dependency or the cares_wrap binding. dont-land-on-v22.x PRs that should not land on the v22.x-staging branch and should not be released in v22.x. dont-land-on-v24.x PRs that should not land on the v24.x-staging branch and should not be released in v24.x. dont-land-on-v26.x PRs that should not land on the v26.x-staging branch and should not be released in v26.x. fast-track PRs that do not need to wait for 72 hours to land. needs-ci PRs that need a full CI run.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@RafaelGSS @nodejs-github-bot @mcollina @lpinca @avivkeller