Notes preview DNS-pinning probe ends unavailable without private upstream hits (#1122) #1359

Open
opened 2026-10-07 14:03:23 +00:00 by kayg · 1 comment
Owner

Found during the bounded live merge-round #1122 campaign on head 95b1ea5724.

The unchanged image-proxy DNS-pinning probe in tests/adversarial/attack2.py reported:

SLOW Notes preview pins DNS: worker pending after 45.7s
!! Notes preview pins DNS: expected ready, got unavailable
!! Notes preview DNS pinning: answers=['public', 'private'], private hits={}
server alive at end: True

The final unavailable result is non-SLOW, so it is filed rather than dismissed as host load. No private upstream was contacted (private hits is empty); this evidence does not show an SSRF leak. The selected campaign invokes image-proxy checks in more than one section, so inspect resolver fixture state between probes as well as preview availability. Keep existing assertions unchanged until that distinction is resolved. Full campaign logs will be attached to #1122.

Found during the bounded live merge-round #1122 campaign on head 95b1ea5724fa9e35f92de0fec624aa20df51da61. The unchanged image-proxy DNS-pinning probe in tests/adversarial/attack2.py reported: ```text SLOW Notes preview pins DNS: worker pending after 45.7s !! Notes preview pins DNS: expected ready, got unavailable !! Notes preview DNS pinning: answers=['public', 'private'], private hits={} server alive at end: True ``` The final unavailable result is non-SLOW, so it is filed rather than dismissed as host load. No private upstream was contacted (private hits is empty); this evidence does not show an SSRF leak. The selected campaign invokes image-proxy checks in more than one section, so inspect resolver fixture state between probes as well as preview availability. Keep existing assertions unchanged until that distinction is resolved. Full campaign logs will be attached to #1122.
Author
Owner

Evidence for #1359: the isolated image-proxy phase passes on production 0419170fe with fresh DNS state. Host load at phase start: 53.36, 46.34, 37.22. Verbatim outcome:

server alive at end: True

==== ROUND 2 FINDINGS 0

==== ROUND 2 SLOW 0

The earlier pending-only diagnostic is load. The later unavailable result was a test-fixture collision: attack2.py contained two complete image-proxy phases, but the LD_PRELOAD shim has one process-wide public-then-private DNS counter. Commit 213c79934 removes the duplicate, keeps the phase before User deletion, and adds a regression that fails with two phases. No private upstream hit occurred. The focused runner seam in 87a0a93bb avoids unrelated storms before an isolated replay. Combined release verification remains pending.

Evidence for #1359: the isolated image-proxy phase passes on production 0419170fe with fresh DNS state. Host load at phase start: 53.36, 46.34, 37.22. Verbatim outcome: ```text server alive at end: True ==== ROUND 2 FINDINGS 0 ==== ROUND 2 SLOW 0 ``` The earlier pending-only diagnostic is load. The later unavailable result was a test-fixture collision: attack2.py contained two complete image-proxy phases, but the LD_PRELOAD shim has one process-wide public-then-private DNS counter. Commit 213c79934 removes the duplicate, keeps the phase before User deletion, and adds a regression that fails with two phases. No private upstream hit occurred. The focused runner seam in 87a0a93bb avoids unrelated storms before an isolated replay. Combined release verification remains pending.
Commenting is not possible because the repository is archived.
No labels
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/calternal-v0#1359
No description provided.