code wiki / (root) / nx_dns_adversarial_test.nx

nx_dns_adversarial_test.nx

buildroot/runtime/nx_dns_adversarial_test.nx

4071 B118 linesdepth 4pulls 5 transitivereach 0 importersview sourcekind gate/prooftopic dns
docsdependenciesstructsconstsfunctions

about

nx_dns_adversarial_test.nx -- Phase A4 of S-class hardening. Adversarial fuzzing of nx_dns_decode_name_ascii, the QNAME decoder the authoritative DNS server runs on every incoming query. Untrusted bytes from any public client must not crash the server or read past the buffer. Per [[feedback-simulation-discipline-for-every-substrate]] + the S-class honest audit: DNS server is on the public-internet attack surface for ANY operator who deploys the authoritative server (replacing third-party DNS for nishifamily.com). expect_exit: 0 license_tier: ORIGINAL

dependencies 2 imports · 0 importers

nx_syscalls.nx nx_dns_authoritative.nx nx_dns_adversarial_test.nx

imports: nx_syscalls.nxnx_dns_authoritative.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main decode_call sys_mmap nx_dns_decode_name_ascii sys_mmap ↻

structs

none

consts

none

functions

19func decode_call(buf: *u8, n: i64, start: i64) -> i64
25func main() -> i64