Affected by GO-2022-0368 and 10 other vulnerabilities

GO-2022-0368: Improper random number generation in github.com/coredns/coredns

GO-2024-3130: CoreDNS vulnerable to TuDoor Attacks in github.com/coredns/coredns

GO-2025-3743: CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification in github.com/coredns/coredns

GO-2026-4289: CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

GO-2026-4630: CoreDNS ACL Bypass in github.com/coredns/coredns

GO-2026-4635: CoreDNS Loop Detection Denial of Service Vulnerability in github.com/coredns/coredns

GO-2026-4969: CoreDNS' DoQ worker pool does not bound stream backlog in github.com/coredns/coredns

GO-2026-5164: CoreDNS DoH GET oversized dns= query parameter causes pre-validation CPU and memory amplification in github.com/coredns/coredns

GO-2026-5417: CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass) in github.com/coredns/coredns

GO-2026-5583: CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC in github.com/coredns/coredns

GO-2026-5667: CoreDNS has TSIG authentication bypass on gRPC and QUIC transports in github.com/coredns/coredns

taprw

package

v1.0.2 Latest Latest Go to latest Published: Dec 31, 2017 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coredns/coredns

Links

Documentation ¶

Overview ¶

Package taprw takes a query and intercepts the response. It will log both after the response is written.

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type ResponseWriter ¶

type ResponseWriter struct {
	Query *dns.Msg
	dns.ResponseWriter
	Tapper

	Send *SendOption
	// contains filtered or unexported fields
}

ResponseWriter captures the client response and logs the query to dnstap. Single request use. SendOption configures Dnstap to selectively send Dnstap messages. Default is send all.

func (ResponseWriter) DnstapError ¶

func (w ResponseWriter) DnstapError() error

DnstapError check if a dnstap error occurred during Write and returns it.

func (*ResponseWriter) SetQueryEpoch ¶ added in v0.9.10

func (w *ResponseWriter) SetQueryEpoch()

SetQueryEpoch sets the query epoch as reported by dnstap.

func (*ResponseWriter) WriteMsg ¶

func (w *ResponseWriter) WriteMsg(resp *dns.Msg) (writeErr error)

WriteMsg writes back the response to the client and THEN works on logging the request and response to dnstap. Dnstap errors are to be checked by DnstapError.

type SendOption ¶

type SendOption struct {
	Cq bool
	Cr bool
}

SendOption stores the flag to indicate whether a certain DNSTap message to be sent out or not.

type Tapper ¶

type Tapper interface {
	TapMessage(m *tap.Message) error
	TapBuilder() msg.Builder
}

Tapper is what ResponseWriter needs to log to dnstap.

Source Files ¶

View all Source files

writer.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL